systemd/src
Nathaniel Chen ffbd2c4d45 core: mount and initialize Smack
SMACK is the Simple Mandatory Access Control Kernel, a minimal
approach to Access Control implemented as a kernel LSM.

The kernel exposes the smackfs filesystem API through which access
rules can be loaded. At boot time, we want to load the access rules
as early as possible to ensure all early boot steps are checked by Smack.

This patch mounts smackfs at the new location at /sys/fs/smackfs for
kernels 3.8 and above. The /smack mountpoint is not supported.
After mounting smackfs, rules are loaded from the usual location.

For more information about Smack see:
  http://www.kernel.org/doc/Documentation/security/Smack.txt
2013-03-07 20:53:14 +01:00
..
ac-power unit: add ConditionACPower= 2012-12-31 21:24:26 +01:00
activate systemd-activate: add a socket-activation test tool 2013-02-27 22:10:14 -05:00
analyze systemd-analyze: free unit_times only if it is not NULL 2013-03-01 16:43:57 -05:00
ask-password build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
binfmt honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
boot bootctl: show "n/a" for empty boot option labels 2013-02-17 22:28:21 +01:00
bootchart bootchart: document -C, --cmdline parameter 2013-03-07 16:19:38 +01:00
cgls systemctl,loginctl,cgls: do not ellipsize cgroup members when --full is specified 2013-01-16 12:11:47 -05:00
cgroups-agent build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
cgtop honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
core core: mount and initialize Smack 2013-03-07 20:53:14 +01:00
cryptsetup cryptsetup-generator: fix the kernel command line strategy for luks.uuid 2013-03-01 15:05:28 +01:00
delta use strneq instead of strncmp 2013-02-13 00:56:13 +01:00
detect-virt build-sys: drop all distribution specfic checks 2013-01-04 23:26:21 +01:00
efi-boot-generator efi: various cleanups 2013-02-13 00:12:58 +01:00
fsck honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
fstab-generator Revert "fstab-generator: place initrd /sysroot mounts in initrd-fs.target" 2013-03-05 06:45:06 +01:00
getty-generator honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
gudev licence: remove references to old FSF address 2012-12-17 11:41:31 +01:00
hostname hostnamed: allow more special characters in pretty hostname 2013-03-05 20:54:05 +01:00
initctl build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
journal libsystemd-journal: return 0 on success in get_data() 2013-03-07 00:45:56 -05:00
kernel-install kernel-install: rename the loader entry filename 2013-02-26 15:21:23 +01:00
libsystemd-daemon sd-daemon: fix cppcheck warnings 2012-12-17 11:41:31 +01:00
libsystemd-id128 update .gitignore 2012-04-13 21:58:01 +02:00
libudev use streq instead of strcmp 2013-02-13 18:14:20 +01:00
locale honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
login logind: don't hit an assert if an close() on an input device fd fails with ENODEV because the device is gone 2013-03-07 16:48:14 +01:00
machine-id-setup build-sys: drop all distribution specfic checks 2013-01-04 23:26:21 +01:00
modules-load honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
notify env: considerably beef up environment cleaning logic 2013-02-11 03:54:50 +01:00
nspawn nspawn: create a separate devpts namespace for nspawn containers 2013-03-07 13:34:07 +01:00
nss-myhostname nss-myhostname: copy first result to preallocated buffer 2013-02-07 01:02:33 -05:00
python-systemd systemd-python: update documentation for new systemd-journal group 2013-03-07 11:29:08 -05:00
quotacheck honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
random-seed random-seed: fix error message typo 2012-10-19 17:31:33 +02:00
rc-local-generator build-sys: make rc-local support part of SYSV compat 2013-01-04 23:26:20 +01:00
readahead honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
remount-fs service: add options RestartPreventExitStatus and SuccessExitStatus 2012-08-14 14:46:03 +02:00
reply-password build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
shared util: Fix grammar in comment 2013-03-07 16:06:43 +01:00
shutdownd honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
sleep honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
stdio-bridge use strneq instead of strncmp 2013-02-13 00:56:13 +01:00
sysctl honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
system-update-generator log.h: new log_oom() -> int -ENOMEM, use it 2012-07-26 11:48:26 +02:00
systemctl systemctl: mangle unit name in is-enabled 2013-03-07 16:25:00 +01:00
systemd logind: add MESSAGE_IDs to interesting events 2013-01-27 23:47:18 -05:00
test util: properly escape corner cases in bus_path_escape(), too 2013-03-05 20:05:46 +01:00
timedate timedated: add CanNTP property 2013-03-06 15:39:37 +01:00
timestamp build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
tmpfiles tmpfiles: use cleanup func. to save a few lines 2013-03-03 20:16:57 -05:00
tty-ask-password-agent Revert "log_error() if inotify_add_watch() fails" 2013-02-13 16:25:33 +01:00
udev udev: fix segfault with android rndis 2013-03-03 19:02:36 +01:00
update-utmp utmp: read the right timestamp 2012-09-17 17:48:19 +02:00
vconsole honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
.gitignore move libsystemd-id128, libsystemd-daemon to subdir 2012-04-12 15:26:39 +02:00
Makefile relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00