chiark / gitweb /
elogind.git
10 years agogudev: gtk-doc - hide licence stuff which consumes three-fourths of the index page
Kay Sievers [Sat, 14 Apr 2012 19:23:36 +0000 (21:23 +0200)]
gudev: gtk-doc - hide licence stuff which consumes three-fourths of the index page

10 years agoudev: trivial gtk-doc update
Kay Sievers [Sat, 14 Apr 2012 19:16:31 +0000 (21:16 +0200)]
udev: trivial gtk-doc update

10 years agoudev: move all unconditionally installed rules to rules/
Kay Sievers [Sat, 14 Apr 2012 18:10:03 +0000 (20:10 +0200)]
udev: move all unconditionally installed rules to rules/

10 years agoudev: keymap - move src/udev/force-release-maps/ to keymaps-force-release/
Kay Sievers [Sat, 14 Apr 2012 17:53:31 +0000 (19:53 +0200)]
udev: keymap - move src/udev/force-release-maps/ to keymaps-force-release/

10 years agoudev: test - move test/ and src/test/
Kay Sievers [Sat, 14 Apr 2012 17:31:18 +0000 (19:31 +0200)]
udev: test - move test/ and src/test/

10 years agoREADME: update udev requirements
Kay Sievers [Sat, 14 Apr 2012 17:25:28 +0000 (19:25 +0200)]
README: update udev requirements

10 years agobuild-sys: silence the xsltproc output
Kay Sievers [Sat, 14 Apr 2012 16:05:06 +0000 (18:05 +0200)]
build-sys: silence the xsltproc output

10 years agobuild-sys: add 'make doc-sync' target
Kay Sievers [Fri, 13 Apr 2012 21:50:52 +0000 (23:50 +0200)]
build-sys: add 'make doc-sync' target

10 years agoservice: place control command in subcgroup control/
Lennart Poettering [Fri, 13 Apr 2012 21:24:47 +0000 (23:24 +0200)]
service: place control command in subcgroup control/

Previously, we were brutally and onconditionally killing all processes
in a service's cgroup before starting the service anew, in order to
ensure that StartPre lines cannot be misused to spawn long-running
processes.

On logind-less systems this has the effect that restarting sshd
necessarily calls all active ssh sessions, which is usually not
desirable.

With this patch control processes for a service are placed in a
sub-cgroup called "control/". When starting a service anew we simply
kill this cgroup, but not the main cgroup, in order to avoid killing any
long-running non-control processes from previous runs.

https://bugzilla.redhat.com/show_bug.cgi?id=805942

10 years agoupdate .gitignore
Kay Sievers [Fri, 13 Apr 2012 19:57:39 +0000 (21:57 +0200)]
update .gitignore

10 years agopolkit: spawn agent in --fallback mode
Lennart Poettering [Fri, 13 Apr 2012 19:52:25 +0000 (21:52 +0200)]
polkit: spawn agent in --fallback mode

10 years agoupdate .gitignore
Kay Sievers [Fri, 13 Apr 2012 19:46:35 +0000 (21:46 +0200)]
update .gitignore

10 years agobuild-sys: add stub makefiles to all subdirs to ease development with emacs
Lennart Poettering [Fri, 13 Apr 2012 19:36:37 +0000 (21:36 +0200)]
build-sys: add stub makefiles to all subdirs to ease development with emacs

10 years agonspawn: add missing include lines
Lennart Poettering [Fri, 13 Apr 2012 19:33:45 +0000 (21:33 +0200)]
nspawn: add missing include lines

10 years agowatchdog: make watchdog dbus properties writable
Lennart Poettering [Fri, 13 Apr 2012 19:33:28 +0000 (21:33 +0200)]
watchdog: make watchdog dbus properties writable

10 years agodbus: automatically send out changed events for properties written to
Lennart Poettering [Fri, 13 Apr 2012 19:32:17 +0000 (21:32 +0200)]
dbus: automatically send out changed events for properties written to

10 years agoudev: gudev - silence introspection scanner warning
Kay Sievers [Fri, 13 Apr 2012 19:35:45 +0000 (21:35 +0200)]
udev: gudev - silence introspection scanner warning

<kay> walters: you happen to know how to silence this? gudev.h:24: Warning:
  GUdev: symbol='_GUDEV_INSIDE_GUDEV_H': Unknown namespace for symbol 'GUDEV_INSIDE_GUDEV_H'
<walters> kay, probably:
<walters> -#define _GUDEV_INSIDE_GUDEV_H 1
<walters> +#define _GUDEV_INSIDE_GUDEV_H
<walters> kay, if the scanner sees a define with a value it assumes it's a constant for public consumption

<walters> kay, patch in https://bugzilla.gnome.org/show_bug.cgi?id=674072 fwiw
<kay> walters: cool, thanks!
<kay> walters: your workaround removing the "1" works. nice!

10 years agodbus: expose whether we have a hardware watchdog on the bus
Lennart Poettering [Fri, 13 Apr 2012 17:45:53 +0000 (19:45 +0200)]
dbus: expose whether we have a hardware watchdog on the bus

10 years agounits: drop audit reference from description of utmp units since that is build-time...
Lennart Poettering [Fri, 13 Apr 2012 17:38:57 +0000 (19:38 +0200)]
units: drop audit reference from description of utmp units since that is build-time optional

10 years agounits: add CAP_MKNOD condition to the other two udev services too
Lennart Poettering [Fri, 13 Apr 2012 17:35:06 +0000 (19:35 +0200)]
units: add CAP_MKNOD condition to the other two udev services too

10 years agounit: signal explicitly if a condition failed in unit_start()
Lennart Poettering [Fri, 13 Apr 2012 17:04:38 +0000 (19:04 +0200)]
unit: signal explicitly if a condition failed in unit_start()

We shouldn't print a status message on the console if we skipped a unit
due to a condition. Hence make unit_start() return -ENOEXEC in such a
case which is mapped to JOB_SKIPPED which results in no console message.

10 years agoudev: move libudev, gudev to src/; move gudev/docs/, udev/docs/ to to docs/
Kay Sievers [Fri, 13 Apr 2012 16:24:39 +0000 (18:24 +0200)]
udev: move libudev, gudev to src/; move gudev/docs/, udev/docs/ to to docs/

10 years agologind: explicitly check for /dev/tty0
Lennart Poettering [Fri, 13 Apr 2012 15:54:33 +0000 (17:54 +0200)]
logind: explicitly check for /dev/tty0

10 years agounits: do binfmt magic only when /proc/sys is writable
Lennart Poettering [Fri, 13 Apr 2012 15:39:37 +0000 (17:39 +0200)]
units: do binfmt magic only when /proc/sys is writable

10 years agomain: unset some more env vars
Lennart Poettering [Fri, 13 Apr 2012 15:36:41 +0000 (17:36 +0200)]
main: unset some more env vars

10 years agoaudit: ignore if we get EPERM
Lennart Poettering [Fri, 13 Apr 2012 15:17:56 +0000 (17:17 +0200)]
audit: ignore if we get EPERM

if auditing access is not available, then don't complain about it, in
order to play nice with systems lacking CAP_SYS_AUDIT

10 years agoloopback: handle EPERM more gracefully
Lennart Poettering [Fri, 13 Apr 2012 15:10:21 +0000 (17:10 +0200)]
loopback: handle EPERM more gracefully

10 years agomanager: support systems lacking /dev/tty0
Lennart Poettering [Fri, 13 Apr 2012 14:53:49 +0000 (16:53 +0200)]
manager: support systems lacking /dev/tty0

10 years agonspawn: fake /dev/kmsg and /proc/kmsg as fifo
Lennart Poettering [Fri, 13 Apr 2012 14:51:33 +0000 (16:51 +0200)]
nspawn: fake /dev/kmsg and /proc/kmsg as fifo

10 years agokeymap: Add HP Compaq Presario CQ*
Martin Pitt [Wed, 28 Mar 2012 09:54:00 +0000 (11:54 +0200)]
keymap: Add HP Compaq Presario CQ*

https://launchpad.net/bugs/935804

10 years agokeymap: Add Dell XPS force-release quirk
Martin Pitt [Wed, 28 Mar 2012 09:44:19 +0000 (11:44 +0200)]
keymap: Add Dell XPS force-release quirk

https://launchpad.net/bugs/910911

10 years agoudev: unpack sysfs test tree only on 'make check'; fix test-udev binary location
Kay Sievers [Fri, 13 Apr 2012 13:57:13 +0000 (15:57 +0200)]
udev: unpack sysfs test tree only on 'make check'; fix test-udev binary location

10 years agoudev: keymap - move data files to root directory
Kay Sievers [Fri, 13 Apr 2012 13:38:15 +0000 (15:38 +0200)]
udev: keymap - move data files to root directory

10 years agoudev: fix a few issues detected by the llvm static analyzer
Kay Sievers [Fri, 13 Apr 2012 13:08:55 +0000 (15:08 +0200)]
udev: fix a few issues detected by the llvm static analyzer

10 years agofix a couple of things found with the llvm static analyzer
Lennart Poettering [Fri, 13 Apr 2012 11:58:50 +0000 (13:58 +0200)]
fix a couple of things found with the llvm static analyzer

10 years agobuild-sys: drop systemd- prefix from analyze dir
Lennart Poettering [Fri, 13 Apr 2012 11:34:09 +0000 (13:34 +0200)]
build-sys: drop systemd- prefix from analyze dir

10 years agobuild-sys: execute test programs with 'make check'
Kay Sievers [Fri, 13 Apr 2012 11:21:20 +0000 (13:21 +0200)]
build-sys: execute test programs with 'make check'

10 years agoudev: use native instead of custom --disable-introspection logic
Kay Sievers [Fri, 13 Apr 2012 10:49:51 +0000 (12:49 +0200)]
udev: use native instead of custom --disable-introspection logic

10 years agoudev: link some systemd parts statically to limit shared libararies dependencies...
Kay Sievers [Fri, 13 Apr 2012 10:34:35 +0000 (12:34 +0200)]
udev: link some systemd parts statically to limit shared libararies dependencies for standalone use

10 years agoupdate mailmap
Kay Sievers [Fri, 13 Apr 2012 01:47:52 +0000 (03:47 +0200)]
update mailmap

10 years agobuild-sys: move systemd-analyze into its own subdir
Lennart Poettering [Thu, 12 Apr 2012 18:25:16 +0000 (20:25 +0200)]
build-sys: move systemd-analyze into its own subdir

10 years agoudev: properly hook up all tests to 'make check'
Kay Sievers [Thu, 12 Apr 2012 17:25:41 +0000 (19:25 +0200)]
udev: properly hook up all tests to 'make check'

10 years agobuild-sys: use check_PROGRAMS for test-*.c
Kay Sievers [Thu, 12 Apr 2012 17:00:28 +0000 (19:00 +0200)]
build-sys: use check_PROGRAMS for test-*.c

10 years agobuild-sys: remove $(DBUS_LIBS), libsystemd-dbus.la pulls it in
Kay Sievers [Thu, 12 Apr 2012 16:29:20 +0000 (18:29 +0200)]
build-sys: remove $(DBUS_LIBS), libsystemd-dbus.la pulls it in

10 years agopam_systemd: add dbus.la
Kay Sievers [Thu, 12 Apr 2012 16:05:12 +0000 (18:05 +0200)]
pam_systemd: add dbus.la

10 years agobuild-sys: move src/linux/ to src/shared/linux
Lennart Poettering [Thu, 12 Apr 2012 16:27:35 +0000 (18:27 +0200)]
build-sys: move src/linux/ to src/shared/linux

10 years agobuild-sys: create top-level directory for bash completion
Lennart Poettering [Thu, 12 Apr 2012 16:26:30 +0000 (18:26 +0200)]
build-sys: create top-level directory for bash completion

10 years agobuild-sys: move *-setup out of shared to avoid selinux being pulled in
Lennart Poettering [Thu, 12 Apr 2012 16:16:14 +0000 (18:16 +0200)]
build-sys: move *-setup out of shared to avoid selinux being pulled in

10 years agomove all tools to subdirs
Kay Sievers [Thu, 12 Apr 2012 15:15:18 +0000 (17:15 +0200)]
move all tools to subdirs

10 years agomachine-id-setup: avoid cyclic dependency, built twice instead
Lennart Poettering [Thu, 12 Apr 2012 15:53:19 +0000 (17:53 +0200)]
machine-id-setup: avoid cyclic dependency, built twice instead

10 years agojournal: fix missing variable initialization
Lennart Poettering [Thu, 12 Apr 2012 15:43:33 +0000 (17:43 +0200)]
journal: fix missing variable initialization

10 years agobuild-sys: split off logs-show into its own convenience library
Lennart Poettering [Thu, 12 Apr 2012 15:42:09 +0000 (17:42 +0200)]
build-sys: split off logs-show into its own convenience library

10 years agogetty: skip VC gettys if the VC subsystem is not available
Lennart Poettering [Thu, 12 Apr 2012 15:31:26 +0000 (17:31 +0200)]
getty: skip VC gettys if the VC subsystem is not available

10 years agogetty: VC devices are always available, we don't need to wait until they show up
Lennart Poettering [Thu, 12 Apr 2012 15:29:42 +0000 (17:29 +0200)]
getty: VC devices are always available, we don't need to wait until they show up

10 years agobuild-sys: introduce seperate convenience library for dbus stuff
Lennart Poettering [Thu, 12 Apr 2012 15:24:58 +0000 (17:24 +0200)]
build-sys: introduce seperate convenience library for dbus stuff

10 years agomove libsystemd-id128, libsystemd-daemon to subdir
Kay Sievers [Thu, 12 Apr 2012 13:26:39 +0000 (15:26 +0200)]
move libsystemd-id128, libsystemd-daemon to subdir

10 years agomove remainig shared stuff to shared/
Kay Sievers [Thu, 12 Apr 2012 12:40:20 +0000 (14:40 +0200)]
move remainig shared stuff to shared/

10 years agodetect-virt: print 'none' if no virtualization is detected
Lennart Poettering [Thu, 12 Apr 2012 13:10:28 +0000 (15:10 +0200)]
detect-virt: print 'none' if no virtualization is detected

10 years agomachine-id-setup: add the usual command line parameters
Lennart Poettering [Thu, 12 Apr 2012 13:07:24 +0000 (15:07 +0200)]
machine-id-setup: add the usual command line parameters

10 years agodetect-virt: make detect-virt an official command
Lennart Poettering [Thu, 12 Apr 2012 12:58:52 +0000 (14:58 +0200)]
detect-virt: make detect-virt an official command

10 years agodetect-virt: beef up tool considerably
Lennart Poettering [Thu, 12 Apr 2012 12:45:50 +0000 (14:45 +0200)]
detect-virt: beef up tool considerably

10 years agorename bridge.c to stdio-bridge.c and move to subdir
Kay Sievers [Thu, 12 Apr 2012 12:30:09 +0000 (14:30 +0200)]
rename bridge.c to stdio-bridge.c and move to subdir

10 years agomain: we want all setup functions to be in files called xxx-setup.[ch]
Lennart Poettering [Thu, 12 Apr 2012 12:28:43 +0000 (14:28 +0200)]
main: we want all setup functions to be in files called xxx-setup.[ch]

10 years agomove more main systemd parts to core/
Kay Sievers [Thu, 12 Apr 2012 11:34:18 +0000 (13:34 +0200)]
move more main systemd parts to core/

10 years agohostname-setup: move to core/
Lennart Poettering [Thu, 12 Apr 2012 12:22:48 +0000 (14:22 +0200)]
hostname-setup: move to core/

10 years agoshutdown: move shutdown to core since it replaces PID 1
Lennart Poettering [Thu, 12 Apr 2012 12:18:36 +0000 (14:18 +0200)]
shutdown: move shutdown to core since it replaces PID 1

10 years agoumount: fix build
Lennart Poettering [Thu, 12 Apr 2012 11:48:20 +0000 (13:48 +0200)]
umount: fix build

10 years agotest: test tools should still be in the src/ directory
Lennart Poettering [Thu, 12 Apr 2012 11:48:01 +0000 (13:48 +0200)]
test: test tools should still be in the src/ directory

10 years agobuild-sys: dbus-loop.h is not used by the core
Lennart Poettering [Thu, 12 Apr 2012 11:42:10 +0000 (13:42 +0200)]
build-sys: dbus-loop.h is not used by the core

10 years agoumount: don't try to umount /dev/console, since we are using it
Lennart Poettering [Thu, 12 Apr 2012 11:34:09 +0000 (13:34 +0200)]
umount: don't try to umount /dev/console, since we are using it

10 years agobuild-sys: move a few things into more appropriate places
Lennart Poettering [Thu, 12 Apr 2012 11:33:02 +0000 (13:33 +0200)]
build-sys: move a few things into more appropriate places

10 years agobuild-sys: add stub makefiles to make emacs easier to use
Lennart Poettering [Thu, 12 Apr 2012 11:07:17 +0000 (13:07 +0200)]
build-sys: add stub makefiles to make emacs easier to use

10 years agomove a couple of test-*.c to test/
Kay Sievers [Thu, 12 Apr 2012 11:17:41 +0000 (13:17 +0200)]
move a couple of test-*.c to test/

10 years agoudev: gudev - rework introspection generation
Marc-Antoine Perennou [Wed, 11 Apr 2012 21:22:51 +0000 (23:22 +0200)]
udev: gudev - rework introspection generation

10 years agorename machine-id-main.c tomacht the binary and move main.c to core/
Kay Sievers [Thu, 12 Apr 2012 10:58:55 +0000 (12:58 +0200)]
rename machine-id-main.c tomacht the binary and move main.c to core/

10 years agonspawn: bind mount /dev/nul to /proc/kmsg, so that the container can't muck with...
Lennart Poettering [Thu, 12 Apr 2012 10:58:08 +0000 (12:58 +0200)]
nspawn: bind mount /dev/nul to /proc/kmsg, so that the container can't muck with the host kmsg

10 years agojournald: add missing flag to open()
Lennart Poettering [Thu, 12 Apr 2012 10:57:41 +0000 (12:57 +0200)]
journald: add missing flag to open()

10 years agoexecute: when we can't get the requested rlimit, get the next closest
Lennart Poettering [Thu, 12 Apr 2012 01:38:52 +0000 (03:38 +0200)]
execute: when we can't get the requested rlimit, get the next closest

10 years agomain: pass original environment block to shutdown binary so that it can detect contai...
Lennart Poettering [Thu, 12 Apr 2012 01:19:28 +0000 (03:19 +0200)]
main: pass original environment block to shutdown binary so that it can detect container environments

10 years agounits: start vconsole-setup only if there's actually a virtual console device
Lennart Poettering [Thu, 12 Apr 2012 00:51:16 +0000 (02:51 +0200)]
units: start vconsole-setup only if there's actually a virtual console device

10 years agounits: run sysctl stuff only when /proc/sys is actually writable, to quieten containe...
Lennart Poettering [Thu, 12 Apr 2012 00:41:02 +0000 (02:41 +0200)]
units: run sysctl stuff only when /proc/sys is actually writable, to quieten container boots a little

10 years agounit: introduce ConditionPathIsReadWrite
Lennart Poettering [Thu, 12 Apr 2012 00:39:02 +0000 (02:39 +0200)]
unit: introduce ConditionPathIsReadWrite

10 years agomove more common files to shared/ and add them to shared.la
Kay Sievers [Wed, 11 Apr 2012 23:51:49 +0000 (01:51 +0200)]
move more common files to shared/ and add them to shared.la

10 years agoudev: keymap - remove weird 'c2 a0' character sequences which break the check
Kay Sievers [Wed, 11 Apr 2012 22:42:43 +0000 (00:42 +0200)]
udev: keymap - remove weird 'c2 a0' character sequences which break the check

$ hexdump -C  src/udev/keymap/keymaps/samsung-90x3a
00000000  30 78 39 36 20 6b 62 64  69 6c 6c 75 6d 75 70 c2  |0x96 kbdillumup.|
00000010  a0 c2 a0 c2 a0 c2 a0 c2  a0 c2 a0 c2 a0 c2 a0 20  |............... |
00000020  23 20 46 6e 2b 46 38 20  6b 65 79 62 6f 61 72 64  |# Fn+F8 keyboard|

10 years agoOne can specify in which cgroup hierarchies a systemd-nspawn container will appear
Léo Gillot-Lamure [Wed, 11 Apr 2012 11:27:19 +0000 (12:27 +0100)]
One can specify in which cgroup hierarchies a systemd-nspawn container will appear

10 years agorelicense to LGPLv2.1 (with exceptions)
Lennart Poettering [Wed, 11 Apr 2012 22:20:58 +0000 (00:20 +0200)]
relicense to LGPLv2.1 (with exceptions)

We finally got the OK from all contributors with non-trivial commits to
relicense systemd from GPL2+ to LGPL2.1+.

Some udev bits continue to be GPL2+ for now, but we are looking into
relicensing them too, to allow free copy/paste of all code within
systemd.

The bits that used to be MIT continue to be MIT.

The big benefit of the relicensing is that closed source code may now
link against libsystemd-login.so and friends.

10 years agoudev: check-keymaps.sh - fix source directory
Kay Sievers [Wed, 11 Apr 2012 22:08:26 +0000 (00:08 +0200)]
udev: check-keymaps.sh - fix source directory

10 years agoupdate TODO
Lennart Poettering [Wed, 11 Apr 2012 21:56:58 +0000 (23:56 +0200)]
update TODO

10 years agopolkit: when spawning off agent, wait until the agent is fully initialized
Lennart Poettering [Wed, 11 Apr 2012 20:37:13 +0000 (22:37 +0200)]
polkit: when spawning off agent, wait until the agent is fully initialized

10 years agounits: exclude gettys from isolate requests
Lennart Poettering [Wed, 11 Apr 2012 19:58:33 +0000 (21:58 +0200)]
units: exclude gettys from isolate requests

gettys are nowadays mostly autospawned and hence usually subject to
being shut down on isolate requests, since they are no dependency of any
other unit. This is a bad idea if the user isolates between
multi-user.graphical and graphical.target, hence exclude them from the
isolation.

This has the effect that gettys no longer cleaned up when
emergency.target is isolated, which might actualy be considered a
feature, even though it is a change from previous behaviour...

Note that the one getty that really matters (the one on tty1) is still
removed when isolating to emergency.target since it conflicts with
emergency.service.

10 years agoudev: fix RUN+= logic regarding builtin vs. program
Kay Sievers [Wed, 11 Apr 2012 20:34:25 +0000 (22:34 +0200)]
udev: fix RUN+= logic regarding builtin vs. program

10 years agoudev: fix keymap mkdir
Marc-Antoine Perennou [Wed, 11 Apr 2012 20:24:53 +0000 (22:24 +0200)]
udev: fix keymap mkdir

10 years agoenable proper access timestamps on all tmpfs mounts
Kay Sievers [Wed, 11 Apr 2012 20:18:55 +0000 (22:18 +0200)]
enable proper access timestamps on all tmpfs mounts

10 years agotmpfiles: open directories with O_NOATIME to preserve timestamp
Kay Sievers [Wed, 11 Apr 2012 19:33:12 +0000 (21:33 +0200)]
tmpfiles: open directories with O_NOATIME to preserve timestamp

Before:
  # stat /tmp/pulse-Du5ectm60QYM | grep 'Access: 20'
  Access: 2012-04-11 21:32:48.444920237 +0200
  # systemd-tmpfiles --clean
  # stat /tmp/pulse-Du5ectm60QYM | grep 'Access: 20'
  Access: 2012-04-11 21:36:27.628925459 +0200

After:
  # stat /tmp/pulse-Du5ectm60QYM | grep 'Access: 20'
  Access: 2012-04-11 21:32:48.444920237 +0200
  # ./systemd-tmpfiles --clean
  # stat /tmp/pulse-Du5ectm60QYM | grep 'Access: 20'
  Access: 2012-04-11 21:32:48.444920237 +0200

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=810257

10 years agopolkit: temporarily spawn of a polkit agent in terminals for possibly authenticated...
Lennart Poettering [Wed, 11 Apr 2012 16:50:16 +0000 (18:50 +0200)]
polkit: temporarily spawn of a polkit agent in terminals for possibly authenticated operations

10 years agomain: disarm watchdog when preparing for reexecution
Lennart Poettering [Wed, 11 Apr 2012 16:40:22 +0000 (18:40 +0200)]
main: disarm watchdog when preparing for reexecution

10 years agoput acl.la in 'if HAVE_ACL' and rename acl.[ch] to acl-util.[ch]
Kay Sievers [Wed, 11 Apr 2012 14:39:31 +0000 (16:39 +0200)]
put acl.la in 'if HAVE_ACL' and rename acl.[ch] to acl-util.[ch]

10 years agomove libsystemd_core.la sources into core/
Kay Sievers [Wed, 11 Apr 2012 10:59:52 +0000 (12:59 +0200)]
move libsystemd_core.la sources into core/

10 years agomain: unset some bash specific environment variables that might get leaked to us
Lennart Poettering [Wed, 11 Apr 2012 11:19:26 +0000 (13:19 +0200)]
main: unset some bash specific environment variables that might get leaked to us

https://bugzilla.redhat.com/show_bug.cgi?id=811537

10 years agomain: drop container/initrd env vars from inherited set
Lennart Poettering [Wed, 11 Apr 2012 10:56:51 +0000 (12:56 +0200)]
main: drop container/initrd env vars from inherited set

Leave the env vars used in the container/initrd logic set for PID1, but
don't inherit them to any children.