| /systemd-251/src/shared/ |
| D | seccomp-util.c | 204 int seccomp_init_for_arch(scmp_filter_ctx *ret, uint32_t arch, uint32_t default_action) { in seccomp_init_for_arch() argument
215 if (arch != SCMP_ARCH_NATIVE && in seccomp_init_for_arch()
216 arch != seccomp_arch_native()) { in seccomp_init_for_arch()
222 r = seccomp_arch_add(seccomp, arch); in seccomp_init_for_arch()
226 assert(seccomp_arch_exist(seccomp, arch) >= 0); in seccomp_init_for_arch()
1040 uint32_t arch; in seccomp_load_syscall_filter_set() local
1048 SECCOMP_FOREACH_LOCAL_ARCH(arch) { in seccomp_load_syscall_filter_set()
1051 log_debug("Operating on architecture: %s", seccomp_arch_to_string(arch)); in seccomp_load_syscall_filter_set()
1053 r = seccomp_init_for_arch(&seccomp, arch, default_action); in seccomp_load_syscall_filter_set()
1065 …r, "Failed to install filter set for architecture %s, skipping: %m", seccomp_arch_to_string(arch)); in seccomp_load_syscall_filter_set()
[all …]
|
| D | gpt.c | 17 #define _GPT_ARCH_SEXTET(arch, name) \ argument
18 …{ GPT_ROOT_##arch, "root-" name, ARCHITECTURE_##arch, .is_root = true …
19 …{ GPT_ROOT_##arch##_VERITY, "root-" name "-verity", ARCHITECTURE_##arch, .is_root_verity =…
20 …{ GPT_ROOT_##arch##_VERITY_SIG, "root-" name "-verity-sig", ARCHITECTURE_##arch, .is_root_verity_s…
21 …{ GPT_USR_##arch, "usr-" name, ARCHITECTURE_##arch, .is_usr = true …
22 …{ GPT_USR_##arch##_VERITY, "usr-" name "-verity", ARCHITECTURE_##arch, .is_usr_verity = …
23 …{ GPT_USR_##arch##_VERITY_SIG, "usr-" name "-verity-sig", ARCHITECTURE_##arch, .is_usr_verity_si…
122 return pt->arch; in gpt_partition_type_uuid_to_arch()
142 return (GptPartitionType) { .uuid = id, .arch = _ARCHITECTURE_INVALID }; in gpt_partition_type_from_uuid()
|
| D | seccomp-util.h | 18 int seccomp_init_for_arch(scmp_filter_ctx *ret, uint32_t arch, uint32_t default_action);
114 #define SECCOMP_FOREACH_LOCAL_ARCH(arch) \ argument
115 for (unsigned _i = ({ (arch) = seccomp_local_archs[0]; 0; }); \
116 (arch) != SECCOMP_LOCAL_ARCH_END; \
117 (arch) = seccomp_local_archs[++_i]) \
118 if ((arch) != SECCOMP_LOCAL_ARCH_BLOCKED)
|
| D | dissect-image.h | 145 static inline PartitionDesignator PARTITION_ROOT_OF_ARCH(Architecture arch) { in PARTITION_ROOT_OF_ARCH() argument
146 switch (arch) { in PARTITION_ROOT_OF_ARCH()
161 static inline PartitionDesignator PARTITION_USR_OF_ARCH(Architecture arch) { in PARTITION_USR_OF_ARCH() argument
162 switch (arch) { in PARTITION_USR_OF_ARCH()
|
| D | gpt.h | 306 Architecture arch; member
|
| /systemd-251/src/nspawn/ |
| D | nspawn-seccomp.c | 26 uint32_t arch, in add_syscall_filters() argument
163 *p, seccomp_arch_to_string(arch)); in add_syscall_filters()
171 seccomp_arch_to_string(arch)); in add_syscall_filters()
184 uint32_t arch; in setup_seccomp() local
192 SECCOMP_FOREACH_LOCAL_ARCH(arch) { in setup_seccomp()
195 log_debug("Applying allow list on architecture: %s", seccomp_arch_to_string(arch)); in setup_seccomp()
199 r = seccomp_init_for_arch(&seccomp, arch, SCMP_ACT_ERRNO(ENOSYS)); in setup_seccomp()
203 … r = add_syscall_filters(seccomp, arch, cap_list_retain, syscall_allow_list, syscall_deny_list); in setup_seccomp()
211 …r, "Failed to install filter set for architecture %s, skipping: %m", seccomp_arch_to_string(arch)); in setup_seccomp()
214 SECCOMP_FOREACH_LOCAL_ARCH(arch) { in setup_seccomp()
[all …]
|
| D | nspawn-oci.c | 1693 uint32_t arch; in oci_seccomp_arch_from_string() member
1727 *ret = table[i].arch; in oci_seccomp_arch_from_string()
|
| /systemd-251/tools/ |
| D | debug-sd-boot.sh | 45 ia32) arch="i386";;
46 x64) arch="i386:x86-64";;
47 aa64) arch="aarch64";;
48 arm|riscv64) arch="${BASH_REMATCH[1]}";;
79 set architecture ${arch}" > "${gdb_script}"
|
| D | list-discoverable-partitions.py | 150 type, arch, suffix, u = m2.groups()
152 assert arch in ARCHITECTURES
156 yield type, arch, u
173 for type, arch, uuid in defines:
175 adesc = '' if arch is None else f' ({ARCHITECTURES[arch]})'
|
| D | update-syscall-tables.sh | 9 for arch in "$@"; do
10 …curl --fail -L -o "syscalls-$arch.txt" "https://raw.githubusercontent.com/hrw/syscalls-table/maste…
|
| /systemd-251/test/test-sysusers/ |
| D | test-7.input | 6 # default arch groups
22 # default arch users
|
| /systemd-251/src/basic/ |
| D | architecture.c | 25 Architecture arch; in uname_architecture() member
135 return cached = arch_map[i].arch; in uname_architecture()
|
| D | missing_syscalls.py | 133 for arch, t in tables.items()}
|
| D | meson.build | 370 foreach arch: arch_list
371 syscall_lists += files('syscalls-@0@.txt'.format(arch))
|
| /systemd-251/src/test/ |
| D | test-seccomp.c | 644 uint32_t arch; in TEST() local
646 SECCOMP_FOREACH_LOCAL_ARCH(arch) { in TEST()
647 … log_debug("arch %s: SCMP_SYS(mmap) = %d", seccomp_arch_to_string(arch), SCMP_SYS(mmap)); in TEST()
648 … log_debug("arch %s: SCMP_SYS(mmap2) = %d", seccomp_arch_to_string(arch), SCMP_SYS(mmap2)); in TEST()
649 … log_debug("arch %s: SCMP_SYS(shmget) = %d", seccomp_arch_to_string(arch), SCMP_SYS(shmget)); in TEST()
650 … log_debug("arch %s: SCMP_SYS(shmat) = %d", seccomp_arch_to_string(arch), SCMP_SYS(shmat)); in TEST()
651 … log_debug("arch %s: SCMP_SYS(shmdt) = %d", seccomp_arch_to_string(arch), SCMP_SYS(shmdt)); in TEST()
|
| /systemd-251/mkosi.default.d/arch/ |
| D | 10-mkosi.arch | 9 Distribution=arch
|
| /systemd-251/test/ |
| D | README.testsuite | 130 with the arch name at the end, e.g.
134 Note the arch naming is not from 'uname -m', it is Debian arch names:
|
| /systemd-251/.github/workflows/ |
| D | mkosi.yml | 35 - distro: arch
|
| /systemd-251/docs/ |
| D | PORTING_TO_NEW_ARCHITECTURES.md | 36 be built as the appropriately named `BOOT<arch>.EFI` binary.) Also, if your
|
| /systemd-251/src/boot/efi/ |
| D | pe.c | 25 #error Unknown EFI arch
|
| D | meson.build | 40 error('gnu-efi support requested, but headers not found or efi arch is unknown')
42 warning('gnu-efi headers not found or efi arch is unknown, disabling gnu-efi support')
|
| /systemd-251/ |
| D | meson_options.txt | 187 description : 'directory for arch-independent pkg-config files')
|
| D | TODO | 440 for this, that is arch independent). The also implement this in the image
714 * seccomp: maybe use seccomp_merge() to merge our filters per-arch if we can.
|
| D | NEWS | 4202 Currently "arch" and "virt" keys are supported.
|