Home
last modified time | relevance | path

Searched refs:filters (Results 1 – 7 of 7) sorted by relevance

/systemd-251/src/core/
Ddbus-cgroup.c603 char ***filters; in bus_cgroup_set_transient_property() local
606 … filters = streq(name, "IPIngressFilterPath") ? &c->ip_filters_ingress : &c->ip_filters_egress; in bus_cgroup_set_transient_property()
623 if (!UNIT_WRITE_FLAGS_NOOP(flags) && !strv_contains(*filters, path)) { in bus_cgroup_set_transient_property()
624 r = strv_extend(filters, path); in bus_cgroup_set_transient_property()
640 *filters = strv_free(*filters); in bus_cgroup_set_transient_property()
650 STRV_FOREACH(entry, *filters) in bus_cgroup_set_transient_property()
659 if (*filters) { in bus_cgroup_set_transient_property()
/systemd-251/shell-completion/zsh/
D_systemd-analyze59 'syscall-filter:List syscalls in seccomp filters'
/systemd-251/src/basic/
Dcompress.c76 static const lzma_filter filters[] = { in compress_blob_xz() local
95 ret = lzma_stream_buffer_encode((lzma_filter*) filters, LZMA_CHECK_NONE, NULL, in compress_blob_xz()
/systemd-251/
DTODO714 * seccomp: maybe use seccomp_merge() to merge our filters per-arch if we can.
716 filters than with more smaller seccomp filters.
728 * seccomp: don't install filters for ABIs that are masked anyway for the
1055 * ProtectClock= (drops CAP_SYS_TIMES, adds seecomp filters for settimeofday, adjtimex), sets Device…
DNEWS70 * arch_prctl(2) has been moved to the @default set in the syscall filters
2156 * The tables of system calls in seccomp filters are now automatically
4363 * Previously, filters defined with SystemCallFilter= would have the
4373 services that have no system call filters defined, or that use
7968 similar pre-defined groups are defined. Writing system call filters
11272 is built on seccomp system call filters.
12898 similarly to "--unit=" but filters for user units rather than
/systemd-251/docs/
DENVIRONMENT.md105 * `$SYSTEMD_SECCOMP=0` — if set, seccomp filters will not be enforced, even if
DBOOT_LOADER_SPECIFICATION.md403 similar to a boot loader, but might apply additional filters, for example by