Marcus Meissner
28dd57258d
- Update to release 204:
+ systemd-nspawn creates etc/resolv.conf in container if needed.
+ systemd-nspawn will store metadata about container in container
cgroup including its root directory.
+ cgroup hierarchy has been reworked, all objects are now suffxed
(with .session for user sessions, .user for users, .nspawn for
containers). All cgroup names are now escaped to preven
collision of object names.
+ systemctl list-dependencies gained --plain, --reverse, --after
and --before switches.
+ systemd-inhibit shows processes name taking inhibitor lock.
+ nss-myhostname will now resolve "localhost" implicitly.
+ .include is not allowed recursively anymore and only in unit
files. Drop-in files should be favored in most cases.
+ systemd-analyze gained "critical-chain" command, to get slowest
chain of units run during boot-up.
+ systemd-nspawn@.service has been added to easily run nspawn
container for system services. Just start
"systemd-nspawn@foobar.service" and container from
/var/lib/container/foobar" will be booted.
+ systemd-cgls has new --machine parameter to list processes from
one container.
+ ConditionSecurity= can now check for apparmor and SMACK.
+ /etc/systemd/sleep.conf has been introduced to configure which
kernel operation will be execute when "suspend", "hibernate" or
"hybrid-sleep" is requrested. It allow new kernel "freeze"
state to be used too. (This setting won't have any effect if
pm-utils is installed).
+ ENV{SYSTEMD_WANTS} in udev rules will now implicitly escape
passed argument if applicable.
OBS-URL: https://build.opensuse.org/request/show/176957
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=388
45 lines
1.4 KiB
Diff
45 lines
1.4 KiB
Diff
From: Ludwig Nussel <ludwig.nussel@suse.de>
|
|
Date: Mon, 8 Apr 2013 14:51:47 +0200
|
|
Subject: apply ACL for nvidia device nodes
|
|
|
|
set ACL on nvidia devices (bnc#808319).
|
|
---
|
|
src/login/logind-acl.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/src/login/logind-acl.c b/src/login/logind-acl.c
|
|
index cb045a9..51093f2 100644
|
|
--- a/src/login/logind-acl.c
|
|
+++ b/src/login/logind-acl.c
|
|
@@ -24,6 +24,7 @@
|
|
#include <acl/libacl.h>
|
|
#include <errno.h>
|
|
#include <string.h>
|
|
+#include <strv.h>
|
|
|
|
#include "logind-acl.h"
|
|
#include "util.h"
|
|
@@ -240,6 +241,22 @@ int devnode_acl_all(struct udev *udev,
|
|
goto finish;
|
|
}
|
|
|
|
+ /* only search for nvidia* if /dev/nvidiactl exists */
|
|
+ if (!devnode_acl("/dev/nvidiactl", flush, del, old_uid, add, new_uid)) {
|
|
+ char** directory;
|
|
+ char **f, *resolved;
|
|
+
|
|
+ if (get_files_in_directory ("/dev", &directory)) {
|
|
+ STRV_FOREACH(f,directory)
|
|
+ if (startswith(*f,"nvidia")) {
|
|
+ resolved = strjoin("/dev/", *f, NULL);
|
|
+ devnode_acl(resolved, flush, del, old_uid, add, new_uid);
|
|
+ free(resolved);
|
|
+ }
|
|
+ }
|
|
+ strv_free(directory);
|
|
+ }
|
|
+
|
|
finish:
|
|
if (e)
|
|
udev_enumerate_unref(e);
|