projects / systemd / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8f2c2f2) | patch
seccomp: add new @setuid seccomp group
authorLennart Poettering <lennart@poettering.net>
Wed, 9 Aug 2017 13:04:05 +0000 (15:04 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 10 Aug 2017 13:02:50 +0000 (15:02 +0200)
commit6eaaeee93a07eaa3108f99cd71d06af1adb68786
tree473a13303ac09fa4d1afb783278de46dc23b66b2tree | snapshot
parent8f2c2f20b6383d7528ad86a26780b36f2a02e2d3commit | diff
seccomp: add new @setuid seccomp group

This new group lists all UID/GID credential changing syscalls (which are
quite a number these days). This will become particularly useful in a
later commit, which uses this group to optionally permit user credential
changing to daemons in case ambient capabilities are not available.
man/systemd.exec.xml diff | blob | history
src/shared/seccomp-util.c diff | blob | history
src/shared/seccomp-util.h diff | blob | history
https://github.com/systemd/systemd.git