tree-wide: remove Emacs lines from all files This should be handled fine now by .dir-locals.el, so need to carry that stuff in every file.

shared: include what we use The next step of a general cleanup of our includes. This one mostly adds missing includes but there are a few removals as well.

util-lib: split out allocation calls into alloc-util.[ch]

user-util: move UID/GID related macros from macro.h to user-util.h

nspawn: finish user namespace support

remove unused includes This patch removes includes that are not used. The removals were found with include-what-you-use which checks if any of the symbols from a header is in use.

label: unify code to make directories, symlinks

selinux: clean up selinux label function naming

mac: rename apis with mac_{selinux/smack}_ prefix

core: Beef up PrivateDevices= Also mount /dev/kdbus, /dev/mqueue and /dev/hugepages into the /dev for namespaced services.

exec: introduce PrivateDevices= switch to provide services with a private /dev Similar to PrivateNetwork=, PrivateTmp= introduce PrivateDevices= that sets up a private /dev with only the API pseudo-devices like /dev/null, /dev/zero, /dev/random, but not any physical devices in them.

dev-setup: do not create a dangling /proc/kcore symlink https://bugs.freedesktop.org/show_bug.cgi?id=65382 https://bugs.gentoo.org/472060?id=472060

dev-setup: make NULL as parameter for dev_setup() equivalent to ""

dev-setup: allow a path prefix for use in chroots With this adjustment, we can reuse this code elsewhere, such as in nspawn.

udev: unify /dev static symlink setup