Commit Graph

694 Commits

Author SHA256 Message Date
Franck Bui
6359a9d099 - move html documentation to sparate package to save space
- move networkd and resolved binaries into correct subpackage

- move html documentation to sparate package to save space
- move networkd and resolved binaries into correct subpackage

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1087
2020-02-21 17:09:02 +00:00
Franck Bui
7993d75332 Fix build failure of mini package
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1086
2020-02-10 08:34:05 +00:00
Franck Bui
85d67324fb - Import commit f8adabc2b1f3e3ad150e7a3bfa88341eda5a8a57 (merge v244.2)
77c04ce5c2 hwdb: update to v245-rc1
  b4eb884824 Fix typo in function name
  e2d4cb9843 polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it
  83bfc0d8dd sd-bus: introduce API for re-enqueuing incoming messages
  5926f9f172 polkit: use structured initialization
  0697d0d972 polkit: on async pk requests, re-validate action/details
  2589995acd polkit: reuse some common bus message appending code
  5b2442d5c3 bus-polkit: rename return error parameter to ret_error
  0a19ff7004 shared: split out polkit stuff from bus-util.c → bus-polkit.c
  1325dfb577 test: adapt to the new capsh format
  3538fafb47 meson: update efi path detection to gnu-efi-3.0.11
  3034855a5b presets: "disable" all passive targets by default
  c2e3046819 shared/sysctl-util: normalize repeated slashes or dots to a single value
  6f4364046f dhcp6: do not use T1 and T2 longer than one provided by the lease
  0ed6cda28d network: fix implicit type conversion warning by GCC-10
  f6a5c02d26 bootspec: parse random-seed-mode line in loader.conf
  ddc5dca8a7 sd-boot: fix typo
  2bbbe9ae41 test: Synchronize journal before reading from it
  072485d661 sd-bus: fix introspection bug in signal parameter names
  80af3cf5e3 efi: fix build.
  [...]

- Use suse.pool.ntp.org server pool on SLE (jsc#SLE-7683)

- Drop scripts-udev-convert-lib-udev-path.sh
  Nobody should need it these days.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1085
2020-02-06 16:58:34 +00:00
Franck Bui
6796ed039a - Temporarily restore /sbin/{udevd,udevadm) obsolete symlinks
They're restored until YaST stop using them (see boo#1160890)

- Import commit 8254b8d9646f3e0f5f8057d1ffb5d6c20f079aaa (merge v244.1)
  639dc9f4bf network: set ipv6 mtu after link-up or device mtu change
  cbced49daa man: fix typo in net-naming-scheme man page
  7dd04c99b0 network: tc: drop unused element
  bf4b7d07ba man: fix typos (#14304)
  1ba2e7a730 ipv4ll: do not reset conflict counter on restart
  49806bb310 macro: avoid subtraction overflow in ALIGN_POWER2()
  c4c1600689 test-network: add a test case for SendOption=
  6f15b45949 network: fix segfault in parsing SendOption=
  2e531b830d seccomp: real syscall numbers are >= 0
  f7616ed52b network: fix copy and paste mistake
  e8b53300c4 network: do not drop foreign config if interface is in initialized state
  00f05813bf seccomp: mmap test results depend on kernel/libseccomp/glibc
  4de1909e61 seccomp: use per arch shmat_syscall
  d83010521d seccomp: ensure rules are loaded in seccomp_memory_deny_write_execute
  2c6568221a seccomp: fix multiplexed system calls
  bcf0aa02bf Fix typo (duplicate "or")
  96d7083c54 network: if /sys is rw, then udev should be around
  e874419902 nspawn: do not fail if udev is not running
  29c9144655 Create parent directories when creating systemd-private subdirs
  9cbb8b5254 network: do not return error but return UINT64_MAX if speed meter is disabled
  c08429ae33 core: swap priority can be negative
  f25c0be335 networkctl: fix to show BSSID
  65fd2fce59 systemctl: enhance message about kexec missing kernel
  bdd0af5f81 Fixup typo in NEWS

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1084
2020-01-14 14:40:36 +00:00
Franck Bui
c4f2c21c57 - Manually set system-uid-max and system-gid-max to 499
It used to be detected automatically by meson but it's been broken
  by the migration of login.defs from /etc to /usr/etc.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1083
2019-12-12 08:32:39 +00:00
Franck Bui
77c85046e6 - Import commit d8f6a204858bff68b8e0e7be86b418c36087ab2e
6c5e492a65 cryptsetup: umount encrypted devices before detaching it during shutdown

- Upgrade to v244 (commit 090da85161ceb1ba0b4c208963c7156a8fdf10c6)
  See https://github.com/openSUSE/systemd/blob/SUSE/v243/NEWS for
  details. 
  Legacy and obsolete symlinks have been finally dropped.
  Dropped 0001-logind-keep-backward-compatibility-with-UserTasksMax.patch.
  Users were notified about the deprecation of UserTasksMax option and
  how to move to the new mechanism. The dropin replacement for
  UserTasksMax is therefore no more generated but its use still
  produces a warning.
  Added 0001-SUSE-policy-do-not-clean-tmp-by-default.patch and
  0001-Fix-run-lock-group-to-follow-openSUSE-policy.patch.
  These patches were extracted from the git repo because it's not
  clear where the SUSE tmpfiles specificities should be located.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1082
2019-12-11 17:25:24 +00:00
Franck Bui
e549dac359 - Import commit dbb1d4734daffa62e0eddecfa4f784c84a9d8e76
1439d72a72 udevd: don't use monitor after manager_exit()
  99288dd778 Revert "udevd: fix crash when workers time out after exit is signal caught"
  152577d6d0 udevd: fix crash when workers time out after exit is signal caught
  f854991504 udevd: wait for workers to finish when exiting (bsc#1106383)
  Changes from the v243-stable (84 commits):
  e51d9bf9e5 man: add entry about SpeedMeter=
  aa1fc791c7 udev: silence warning about PROGRAM+= or IMPORT+= rules
  b9a619bb67 udevadm: ignore EROFS and return earlier
  1ec5b9f80c basic: add vmware hypervisor detection from device-tree
  7fa7080248 umount: be happy if /proc/swaps doesn't exist
  [...]
  47d0e23d26 udev: fix memleak caused by wrong cleanup function
  a6fb0542c5 parse_hwdb: fix compatibility with pyparsing 2.4.*
  cb1d892f17 parse_hwdb: process files in order

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1081
2019-12-04 06:58:59 +00:00
Franck Bui
f7843370e3 - Import commit 0b715187a87907e18edf98eab9d0a50fced4a424
9dbdbc2f10 logind: fix (again) the race that might happen when logind restores VT (bsc#1101591 bsc#1140081)
  c848bec110 libblkid: open device in nonblock mode. (bsc#1084671)
  b70ad6c927 resolved: check for IP in certificate when using DoT with GnuTLS (bsc#1155539 CVE-2018-21029)
  bbedf3d557 resolved: require at least version 3.6.0 of GnuTLS for DNS-over-TLS
  eb732c2e29 resolved: fix connection failures with TLS 1.3 and GnuTLS
  4e45084ac5 shared/install: failing with -ELOOP can be due to the use of an alias in install_error()
  2e297f0d87 shared/install: fix error codes returned by install_context_apply()
  dd29d70d32 man: alias names can't be used with enable command

- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1080
2019-11-13 07:53:05 +00:00
Franck Bui
96ddb56974 - Fix %{_libexecdir} misuses of /usr/lib
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1078
2019-11-05 11:23:54 +00:00
Franck Bui
8ed8b47c4a - Drop 0001-compat-rules-escape-when-used-for-shell-expansion.patch
It's part of the previous import.

- Import commit b7467b7b553d6d0d6f92758d966b69f1a88b6b42
  441f44f371 fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495)
  8a1bb5c66b swap: do not make swap units wanted by its device unit anymore

- Import commit 5df9000899ef7d45ddbcacd0fdf73afa07a40f6b
  f0ed7237e4 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)
  b37054aa5a compat-rules: escape '$' when used for shell expansion
  Changes from the v243-stable:
  ef677436aa test: Pass personality test even when i686 userland runs on x86_64 kernel
  3f6398c450 docs: fix inadvertent change in uid range
  25bb377a73 cgroup: fix typo in BPF firewall support warning message
  6d97aca0d5 fix build with compilers with default stack-protector enabled
  fbad077cec nspawn: surrender controlling terminal to PID2 when using the PID1 stub
  0553c3c668 pid1: fix DefaultTasksMax initialization
  f406a691a7 src/core/automount: use DirectoryMode when calling mkdir -p
  20438f96c3 udevadm trigger: do not propagate EACCES and ENODEV
  6480630bc3 hwdb: Correct WWWW Pattern In Documentation Comment
  9d8e889810 nspawn: consistenly fail if parsing the environment fails
  40e169b304 nspawn: default to unified hierarchy if --as-pid2 is used
  b5df1037a0 cgroup: Mark memory protections as explicitly set in transient units
  f14e3e02cc cgroup: Respect DefaultMemoryMin when setting memory.min
  ea248e53bf cgroup: Check ancestor memory min for unified memory config
  de1d25a506 cgroup: docs: memory.high doc fixups
  2ab45f38d8 cgroup: docs: Mention unbounded protection for memory.{low,min}
  19a43dc38a Consider smb3 as remote filesystem
  5c0224c7bf Handle d_type == DT_UNKNOWN correctly
  8282bc61df util-lib: Don't propagate EACCES from find_binary PATH lookup to caller

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1077
2019-10-31 08:07:45 +00:00
Franck Bui
7abfb687fe - Remove intltool BuildRequires, not needed since v237
- Use python3-base BuildRequires instead of full python3

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1076
2019-10-23 12:35:28 +00:00
Franck Bui
059e20a968 - Add 0001-compat-rules-escape-when-used-for-shell-expansion.patch (bsc#1153648)
Added to the quaratine area to avoid uploading a new tar ball just
  for that single change. It will be dropped during the next import.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1075
2019-10-21 11:34:05 +00:00
Franck Bui
238bcdadab - don't package locales in -mini package
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1074
2019-10-21 10:20:46 +00:00
Franck Bui
7e92a30ca0 - split off networkd and resolved into separate network subpackage
- use separate lang package for translations

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1073
2019-10-08 12:40:27 +00:00
Franck Bui
2084515a7a - Import commit 428b937f917ae177f2315e8469800941885e441a
0026b58744 pid1: fix DefaultTasksMax initialization

- Import commit ed81f69153488279957268e247a5c81b678da491 (changes from v243-stable)
  fab6f010ac dhcp6: use unaligned_read_be32()
  f2d9af4322 dhcp6: add missing option length check
  ccf797511e ndisc: make first solicit delayed randomly
  f2275b6e12 dhcp6: read OPTION_INFORMATION_REFRESH_TIME option
  6dfbe58ee7 l10n: update Czech Translation
  d4cd0e9d32 sd-radv: if lifetime < SD_RADV_DEFAULT_MAX_TIMEOUT_USEC, adjust timeout (#13491)
  dbefe59259 polkit: fix typo
  a321507476 sd-netlink: fix invalid assertion
  45dca7fe86 network: do not enter failed state if device's sysfs entry does not exist yet
  dd83d58796 network: add missing link->network checks
  b294305888 path: stop watching path specs once we triggered the target unit
  2cd636c437 hwdb: add Medion Akoya E2292 (#13498)
  d133bdd1fa po: update Brazilian Portuguese translation
  530e09b594 po: update Polish translation
  0c5c3e34c1 polkit: change "revert settings" to "reset settings"
  73e0f372d8 man: fix description of ARPIntervalSec= units
  5412cc54a1 hwdb: axis override for Dell 9360 touchpad
  9d4e658529 test: drop the missed || exit 1 expression
  7ed7ea82f6 udevadm: use usec_add()
  477bf86c91 udevadm: missing initialization of descriptor
  19ac31c989 networkd: unbreak routing_policy_rule_compare_func()
  a20a2157a8 core: coldplug possible nop_job
  eb55241742 tty-ask-pwd-agent: fix message forwarded to wall(1)
  1a3c53c06c core: Fix setting StatusUnitFormat from config files
  91db81e4dd network DHCP4: Dont mislead the logs.
  6af590838b Update m4 for selective utmp support.	modified:   tmpfiles.d/systemd.conf.m4

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1072
2019-10-07 07:26:22 +00:00
Franck Bui
aae6f600ce - Some files related to the portable stuff were missing some %exclude
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1071
2019-09-23 12:13:38 +00:00
Franck Bui
7fb19a88e9 - Import commit 9e41d7ec3572d8d5ea1e00f683e9fbf8108e85b4
fb1b9d54f9 tty-ask-pwd-agent: fix message forwarded to wall(1)
  dd14da3bb6 core: restore initialization of u->source_mtime
  d62f30f647 resolved: create /etc/resolv.conf symlink at runtime

- Slighly rework (mostly reorganization) the portable stuff

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1070
2019-09-18 13:55:56 +00:00
Franck Bui
ff35144c67 - enable systemd-portabled
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1069
2019-09-18 11:08:45 +00:00
Franck Bui
b6e80c3ed8 - Track 0001-resolved-create-etc-resolv.conf-symlink-at-runtime.patch
in the git repo
  This patch has been in the quarantine area long enough, so let's
  move it in the git repo.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1068
2019-09-06 06:57:45 +00:00
Franck Bui
c0672d298e - Upgrade to v243 (commit e0b24c4356aa0c1c56ff274ff72228f33482a5be)
See https://github.com/openSUSE/systemd/blob/SUSE/v243/NEWS for
  details. 
  Drop 0001-Revert-insserv.conf-generator.patch as it's been dropped
  from branch SUSE/v243 while we were rebasing.
  Drop 0001-rc-local-generator-deprecate-halt.local-support.patch as
  this functionality had been deprecated during the previous release
  and now have been dropped by upstream.

- systemd-container creates and owns /etc/systemd/nspawn now

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1066
2019-09-03 15:38:17 +00:00
Franck Bui
3da8ea8b5f - Import commit 0f9271c1336c5c9055e75389732a44745d796851 (changes from v242-stable)
07f0549ffe network: do not send ipv6 token to kernel
  9d34e79ae8 systemd-mount: don't check for non-normalized WHAT for network FS
  5af677680c core: set fs.file-max sysctl to LONG_MAX rather than ULONG_MAX (bsc#1142099)
  29dda7597a random-util: eat up bad RDRAND values seen on AMD CPUs
  eb6c17c178 util-lib: fix a typo in rdrand
  829c20dc8e random-util: rename "err" to "success"
  5442366fbf man: rework the description of Aliases and .wants/.requires directories
  ae71c6f634 docs: typo in arg name replace-irreversible -> replace-irreversibly
  09774a5fcb meson: make nologin path build time configurable
  69ffeeb0b1 man: add note about systemctl stop return value
  4cf14b5513 shared/conf-parser: say "key name" not "lvalue", add dot
  4481ca7f86 shared/conf-parser: emit a nicer warning for something like "======"
  46f3db894b shared/conf-parser: be nice and ignore lines without "="
  7d928995f7 nspawn: fix memleak in argument parsing
  7727e6c0ae resolve: fix memleak
  7f32a81976 journal: properly read unaligned le64 integers
  fa419099e5 activate: move array allocation to heap
  815a9fef2a systemctl: print non-elapsing timers as "n/a" not "(null)"
  a4fc3c88f1 factory: include pam_keyinit.so in PAM factory configuration
  a453d63315 factory: add comment to PAM file, explaining that the defaults are not useful
  d9a5a70a59 factory: tighten PAM configuration
  5e2d3bf80b test: make sure colors don't confuse our test
  5fe3be1334 wait-online: change log level
  c49b6959d5 systemctl: emit warning when we get an invalid process entry from pid1 and continue
  3c9f43eb03 systemctl: do not suggest passing --all if the user passed --state=
  5964d1474e man: offline-updates: make dependence on system-update.target explicit
  a04dd26e03 alloc-util: drop _alloc_ decorator from memdup_suffix0()
  7c46a694ca man: add example for setting multiple properties at once
  1d72789271 man: CPUShares= is so 2015

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1065
2019-07-24 05:01:53 +00:00
Franck Bui
eed98b56c8 - Import commit eaa7b8b148927d471609de75e542dffcc1b36df4
7e58b89136 udevd: change the default value of udev.children-max (again) (bsc#1107617)

- Add 0001-rc-local-generator-deprecate-halt.local-support.patch
  /etc/init.d/halt.local support will removed from the next systemd
  version (v243) so for now on warn (hopefully the few) users who rely
  on this script so they have a chance to switch to systemd-shutdown
  interface.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1064
2019-05-28 12:15:03 +00:00
Franck Bui
3ef2a7fdef - Add 0001-Revert-insserv.conf-generator.patch (bsc#1052837)
All remaining packages have been fixed so they don't rely on the
  insser-generator to generate proper deps. So let's drop it as all
  services should carry the proper dependencies itself.

- Drop debug-only-remove-new-policies.patch
  The new DBUS methods have been reviewed by the security team.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1063
2019-05-27 12:28:39 +00:00
Franck Bui
9cdbc54250 - Import commit 9984a86d0d2259d54c7060f9c09f214202b4efa7
f2459bf373 random-util: eat up bad RDRAND values seen on AMD CPUs
  c90a2e9793 util-lib: fix a typo in rdrand
  4db1cc9d46 random-util: rename "err" to "success"
  981a62a102 random-util: hash AT_RANDOM getauxval() value before using it
  64a9c3d918 random-util: use gcc's bit_RDRND definition if it exists
  c5d6ecfdca random-util: rename RANDOM_DONT_DRAIN → RANDOM_MAY_FAIL
  298d13df7e network: remove redunant link name in message
  77cbde31f2 hwdb: Align airplane mode toggle key mapping for all Acer series
  460f03794e Revert "hwdb: Apply Acer mappings to all Gateway and Packard Bell models"
  fe9271ad84 test: return a non-zero return code when 'nobody' user doesn't exist
  29d355e755 fstab-generator: Prevent double free of reused FILE*
  f30f1adc11 meson: make source files including nspawn-settings.h depend on libseccomp
  84bab914b8 alloc-util: don't use malloc_usable_size() to determine allocated size
  5240972d8d units: drop reference to sushell man page
  0a26de5e33 codespell: fix spelling errors
  582de105c8 nspawn-expose-ports: fix a typo in error message

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1062
2019-05-14 15:44:47 +00:00
Franck Bui
7c28ecb852 - Buildrequire polkit so /usr/share/polkit-1/rules.d has an owner
Otherwise the "post build checks" would complain and would force
  systemd to own this directory. The owner should still be "polkit"
  and the perms should be in sync with the perm set by polkit
  itself.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1061
2019-05-13 08:55:25 +00:00
Franck Bui
9404042728 - Add debug-only-remove-new-policies.patch
A temporary patch to suppress the new DBUS methods introduced by
  v242 until they are reviewed and whitelisted by the secteam.

- Add a comment explaining why static enablement symlinks in /etc are suppressed
  Also remove any /etc/systemd/system/*.requires/ symlinks for the
  same reason.

- preset remote-cryptsetup.target during package installation
  This target is supposed to be part of the targets that should be
  enabled (or not depending on the presets) at package installation.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1060
2019-05-09 07:17:05 +00:00
Franck Bui
748ee0eb26 - Upgrade to v242 (commit 071c380dcc434dca2a0c8b6de0519cc9e816c6d6)
See https://github.com/openSUSE/systemd/blob/SUSE/v242/NEWS for
  details.

- Drop "BuildRequires:  -post-build-checks" from the specfile (bsc#1130230)
  The syntax of this directive is obsolete and should be replaced by
  "#!BuildIgnore: post-build-checks".
  However there's no good reasons to disable these SUSE extra checks,
  so let's re-enable them and fix the few errors it detected.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1059
2019-05-02 14:58:57 +00:00
Franck Bui
b39e569ece - Import commit 4e6e66ea94cf5125f9044f0869939a86801ed2d8
430877e794 pam-systemd: use secure_getenv() rather than getenv() (bsc#1132348 CVE-2019-3842)
  3cff2e6514 man: document that if the main process exits after SIGTERM we go directly to SIGKILL
  26c4f7191c bus: fix memleak on invalid message

- systemd-coredump: generate a stack trace of all core dumps (bsc#1128832)
  This stack trace is logged to the journal.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1058
2019-04-12 17:04:46 +00:00
Franck Bui
89fb080203 - Stop installing macros.systemd
There're no points in installing this file if we remove it right
  after.

- Make sure systemd-network.rules take precedence over our polkit-default-privs (bsc#1125438)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1057
2019-03-11 13:12:09 +00:00
Franck Bui
c757b14340 - Include the SUSE version along with the major version of systemd
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1055
2019-03-07 15:11:46 +00:00
Franck Bui
995770346e - systemd-mini: explicitly disable some of the systemd components
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1054
2019-03-06 15:22:13 +00:00
Franck Bui
bc86613815 - Upgrade to v241 (commit 15a1b4d58f1d2bc9c21c7cbab6fe63b58e48bda1)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1053
2019-03-06 13:36:20 +00:00
Franck Bui
947690b843 - Import commit a1d86af7ed49dacef671e8ec8dae9472a8fa47f5
92d860fc12 sysctl: Don't pass null directive argument to '%s' (bsc#1121563)
  1379e30d59 Allocate temporary strings to hold dbus paths on the heap (bsc#1125352 CVE-2019-6454)
  b5569a03ae Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (bsc#1125352 CVE-2019-6454)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1052
2019-02-19 14:03:00 +00:00
Franck Bui
a924a8f1dc - Import commit 01b4746d3c6f6cbf969fa2176c77ac3f616a7eda
7af53e005b sd-bus: if we receive an invalid dbus message, ignore and proceeed
  92dcbfdd7f bus: move BUS_DONT_DESTROY calls after asserts
  a83e7b3b43 automount: don't pass non-blocking pipe to kernel.
  726127ea1d units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)
  a6347a3cb6 core: Fix use after free case in load_from_path() (bsc#1121563)
  22e2550222 strv: rework FOREACH_STRING() macro (bsc#1121563)
  2ddd38f41a test,systemctl,nspawn: use "const char*" instead of "char*" as iterator for FOREACH_STRING()
  c2c8333e0b strv: add new macro STARTSWITH_SET()
  1db243a601 Update systemd-system.conf.xml (bsc#1122000)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1051
2019-02-15 10:51:26 +00:00
Franck Bui
43b91adfaa - Import commit ad34cc45f63720ced69960dc66b47bddb146176d
Import a bunch of fixes from stable/v239-stable:
  c8293f5af4 Revert "network: set DynamicUser= to systemd-networkd.service"
  7f605592e6 Revert "resolve: enable DynamicUser= for systemd-resolved.service"
  5a48e92e06 test: Fix networkd test for an already running service
  36eae1688b Revert "timesyncd: enable DynamicUser="
  3a11f24cf0 Revert "unit: drop After=systemd-sysusers.service from timesyncd"
  23cfd15ce9 machinectl: fix verbosity of import-raw or friends
  ba037daf29 Make bzip2 an optional dependency for systemd-importd
  fb609d2721 pull: initialize libgcrypt before calling any functions provided by libgcrypt
  c50857bc6b hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571)
  9a12fd17f5 man: Mention that paths in unit files must be fully normalized.
  76fc2ab4a6 tree-wide: use  instead of #ifdef for HAVE_*
  fcc699c093 network: update log message
  a4f497b2cd Use #if instead of #ifdef for ENABLE_GSHADOW
  121c662eb8 man: add missing option for system.conf
  564341146e core: add missing option and drop nonexistent option in system.conf
  7082a3599f journal: add missing option in journald.conf
  3c15efa9c1 basic: add missing comma in raw_clone assembly for sparc
  4c210b6dce cryptsetup: Add dependency on loopback setup to generated units
  c777fbbe3e journal-gateway: use localStorage["cursor"] only when it has valid value
  c5b1bef639 journal-gateway: explicitly declare local variables
  2361522ca6 analyze: actually select longest activated-time of services
  3e810d92d9 sd-bus: fix implicit downcast of bitfield reported by LGTM
  aef660a4cf resolvconf: fixes for the compatibility interface
  06b3f54f50 install: fix error handling in is_symlink_with_known_name()
  f70ab9a468 portable: fix error handling
  d2c40d4e80 resolve: fix return value type of dns_answer_has_dname_for_cname()
  6f684e0670 resolve: dns_scope_network_good() does not returns negative errno
  15d83e1138 bus-util: fix error handling

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1050
2019-01-15 10:11:50 +00:00
Franck Bui
41631ff165 - Import commit 3bece8a25ae11e8ec132cdecc7e72a00ee790994
89a9721a47 Revert "logind: become the controlling terminal process before restoring VT" (bsc#1120836)
  c3a8dc821b pam_systemd: reword message about not creating a session
  0ba0f5b3ef pam_systemd: suppress LOG_DEBUG log messages if debugging is off

- Import commit a3b059a8c60622e4ec30aabda93c6b41d0953dc4
  9dbe9f12ec journal-remote: set a limit on the number of fields in a message (CVE-2018-16865 bsc#1120323)
  61d569ab1b journal-remote: verify entry length from header
  a08760b26c µhttpd: use a cleanup function to call MHD_destroy_response
  43f46a1a3d journal-gateway: use _cleanup_ attribute to stop microhttpd daemon
  437b0b2d01 journald: lower the maximum entry size limit to ½ for non-sealed fds
  ac9e209710 journald: when processing a native message, bail more quickly on overbig messages
  ce103705b9 journald: set a limit on the number of fields (1k) (CVE-2018-16865 bsc#1120323)
  35538171c2 coredump: fix message when we fail to save a journald coredump
  cfe247b555 basic/process-util: limit command line lengths to _SC_ARG_MAX
  9d59e6f6ee journald: do not store the iovec entry for process commandline on stack (CVE-2018-16864 bsc#1120323)
  8d650a68d4 journald: remove unnecessary {}
  b608f532a4 coredump: remove duplicate MESSAGE= prefix from message
  0dbb2dc066 vconsole-setup: fonts copy will fail if the current terminal is in graphical mode (bsc#1114933)
  e501d65540 Revert "systemctl: when removing enablement or mask symlinks, cover both /run and /etc"
  d3ea69961f fs-util: rename safe_transition() into unsafe_transition()
  338470fdc9 tmpfiles: use CHASE_WARN in addition to CHASE_SAFE
  d9ae1b30da fs-util: make chase_symlink() returns -ENOLINK when unsafe transitions are met
  8b76594d1f fs-util: add new CHASE_WARN flag to chase_symlinks()

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1049
2019-01-10 16:21:21 +00:00
Franck Bui
7df1dd7504 - Import commit 8ae56af7802ef8f91fac64fa244d62a4468fbbd5
4474878178 udev-builtin-kmod: adjust logging
  805534aff5 core: use the generic module_load() function
  ac7e902530 shared/module-util: fix preexisting mixup with errno sign
  415aa40793 udev-builtin-kmod: use the generic module_load() function
  8a36b4bac6 Move module-util.h to src/shared/ and load_module() to libshared
  999b910752 core/kmod-setup: restore comments
  1f2b822a21 logind: stop managing VT switches if no sessions are registered on that VT
  5ad8d374c5 terminal-util: introduce vt_release() helper
  145d492490 logind: become the controlling terminal process before restoring VT (bsc#1101591)
  d4b5dbc033 terminal-util: introduce vt_restore() helper
  2e8af185f0 logind: make session_restore_vt() static
  ff3048364f udev: downgrade message when we fail to set inotify watch up (bsc#1005023)

- Fix the test for figuring out if /etc/machine-id is writable in %post (bsc#1117063)
  "test -w" always returns true for root user even if the writable
  mode bits are not set. Fix this by testing the file mode bit value
  instead.

- Move systemd-sysv-convert from /usr/sbin to /usr/lib/systemd
  This tool is not supposed to be run by users.

- Import commit 8ae56af7802ef8f91fac64fa244d62a4468fbbd5
  4474878178 udev-builtin-kmod: adjust logging
  805534aff5 core: use the generic module_load() function
  ac7e902530 shared/module-util: fix preexisting mixup with errno sign
  415aa40793 udev-builtin-kmod: use the generic module_load() function
  8a36b4bac6 Move module-util.h to src/shared/ and load_module() to libshared
  999b910752 core/kmod-setup: restore comments
  1f2b822a21 logind: stop managing VT switches if no sessions are registered on that VT

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1048
2018-12-04 13:51:59 +00:00
Franck Bui
b99fd434d2 - Import commit 69f9f79e1b03e3d23df25b61cbcc9304af3e358f (bsc#1080919 CVE-2018-6954)
f3615ce49 tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753)
  7165e92f4 tmpfiles: use fd_get_path() even less excessively
  c2c531c1d test: make TEST-22 easier to debug, by outputting to /dev/console
  621b78317 test: don't use "nobody:nogroup" for tests
  1f9c7acad tmpfiles: return correct error variable after fd_reopen()
  2236280c1 tmpfiles: reindent one comment less weirdly
  f6bdfb889 tmpfiles: use correct error variable
  bc75127cd tmpfiles: clarify that we ignore file attribute setting errors
  621c8b1fe tmpfiles: add log message where we previously failed silently
  bc9229630 tmpfiles: use fd_get_path() less excessively
  5a1106039 tmpfiles: add more tests
  c974086cc tmpfiles: don't follow unsafe transitions in path_set_*()
  e64a510eb fs-util: add new CHASE_NOFOLLOW flag to chase_symlinks()
  7480154d0 tmpfiles: make create_fifo() safe
  eb890962c fs-util: introduce mkfifoat_atomic() helper
  653bb81af fileio: make tempfn_random_child() accept empty string as path
  2b1e12bfe tmpfiles: introduce create_fifo()
  6dd80f289 tmpfiles: introduce empty_directory()
  f2c137edf tmpfiles: introduce create_directory() and create_subvolume() and make them safe
  6a76f6dfb basic/stat-util: introduce is_dir_fd()
  38a7f2e81 btrfs-util: unfuck tmpfiles' subvol creation
  26e19b6fe btrfs-util: introduce btrfs_subvol_make_fd()
  5fb5bdf5d basic/label: introduce mkdirat_label()/mkdirat_errno_wrapper() helpers
  390b767da selinux: introduce mac_selinux_create_file_prepare_at()
  0f72fadba smack: introduce mac_smack_fix_at()
  f2838154b tmpfiles: introduce create_directory_or_subvolume()
  2de697fb8 tmpfiles: make create_device() safe
  558c5fec7 tmpfiles: introduce create_device()
  dee986b1d tmpfiles: make copy_files() safe

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1047
2018-11-16 12:20:42 +00:00
Franck Bui
a2790f2708 - Make systemd-mini-sysvinit provides systemd-sysvinit
Some packages (such as shepherd-bins) want to conflicts with
  systemd-sysvinit: they should also conflict with
  systemd-mini-sysvinit.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1046
2018-11-09 14:32:33 +00:00
Franck Bui
7d6df57d2f - Add 0001-logind-keep-backward-compatibility-with-UserTasksMax.patch
We have to keep support for UserTasksMax= for a while before
  dropping it. This patch is supposed to do that and also to make
  users aware of this change. It also hints how to configure that
  differently.

- Import commit f39674d6d114d999c50672c7bea8cad21e1eaed9
  7d1e04e85 units: use =yes rather than =true everywhere
  185ce0d34 units: assign user-runtime-dir@.service to user-%i.slice
  a051f5e41 units: make sure user-runtime-dir@.service is Type=oneshot
  30c6842c3 units: set StopWhenUnneeded= for the user slice units too
  e74de046e login: fix typo in log message

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1045
2018-11-07 12:57:03 +00:00
Franck Bui
4e604e4f74 - Own %{_libexecdir}/modules-load.d (again)
This was incorrectly dropped during the split of the SUSE specific
  configurations.

- Drop a Conflicts: in systemd-coredump
  It not needed anymore since the mini variant of systemd-coredump is
  not built anymore.

- Import commit b54f5d7a8b41898ce98f43cd1a6cc92c0071806d
  5def29d24 coredump: only install coredump.conf when ENABLED_COREDUMP=true
  9133e2d6e dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688)
  ebc3fa418 dhcp6: split assert_return() to be more debuggable when hit
  51eefb6ac chown-recursive: let's rework the recursive logic to use O_PATH (bsc#1113666 CVE-2018-15687)
  e1e1aa237 core: skip unit deserialization and move to the next one when unit_deserialize() fails
  1c726c87d core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (bsc#1113665 CVE-2018-15686)
  4cd7d11ac core: don't create Requires for workdir if "missing ok" (bsc#1113083)

- Make systemd-coredump sub-package optional
  and don't build the mini variant.

- Drop duplicated %{?mini} suffix for systemd-{container,coredump} subpackages
  "-mini" is already part of the name of the main package so there's
  no need to append it again for those sub packages. It's only needed
  when the name of a subpackage is completely redefined, IOW when '-n'
  option is used with the %package directive.

- Dont ship /usr/sbin/resolvconf symlink for now
  It conflicts with the bin shipped by openresolv and provides
  limited compat only.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1044
2018-11-05 14:11:51 +00:00
Franck Bui
034f46ce34 split off SUSE specific configuration from systemd package (fate#325478)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1043
2018-10-30 14:45:41 +00:00
Franck Bui
a4982acaf5 - Upgrade to v239 (commit 6d8584e7e8e5d13d2bab49b9e6f6d2ec39759978)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1042
2018-10-24 11:17:43 +00:00
Franck Bui
04b096318a - Ship systemd-sysv-install helper via the main package
This script was part of systemd-sysvinit sub-package but it was
  wrong since systemd-sysv-install is a script used to redirect
  enable/disable operations to chkconfig when the unit targets are
  sysv init scripts. Therefore it's never been a SySV init tool.
  While at it, don't ship this script (as well as
  systemd-sysv-convert) when sysvcompat is not defined.

- Import commit 19b3868d32af20f1ecc86fe3c997144ff456fd65
  06c2284d64 core: introduce systemd.early_core_pattern= kernel cmdline option
  479b002083 core: add missing 'continue' statement
  c7fbccc62e journald: don't ship systemd-journald-audit.socket (bsc#1109252)
  f17a6c790c detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)
  5a1aa84544 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1041
2018-10-15 18:07:19 +00:00
Franck Bui
5440d006ce - Import commit a67b516d49115a5be0f2ac27a2874cee6c59a7ae
f8457adf9d emergency: make sure console password agents don't interfere with the emergency shell
  b8bbb50634 man: document that 'nofail' also has an effect on ordering
  a5410b2229 journald: take leading spaces into account in syslog_parse_identifier
  b793c312c7 journal: do not remove multiple spaces after identifier in syslog message
  f9595f0481 syslog: fix segfault in syslog_parse_priority()
  d464f06934 journal: fix syslog_parse_identifier()
  e70422883a socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1040
2018-09-28 08:14:34 +00:00
Franck Bui
a562ef806f - Enable or disable machines.target according to the presets (bsc#1107941)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1039
2018-09-14 13:06:52 +00:00
Franck Bui
65a1966eb5 - Import commit cc55f1ea9e1c1ccab5b9fb97e10e08830d02b282
962b38aaf user@.service: don't kill user manager at runlevel switch (bsc#1091677)
  3986c4d82 units: make sure user@.service runs with dbus still up
  5e68aa0f2 Revert "udevd: increase maximum number of children" (bsc#1107617)
  099138fd9 fix race between daemon-reload and other commands (v237) (bsc#1105031)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1038
2018-09-14 07:33:06 +00:00
Franck Bui
7f233d25a6 - Import commit 6ac2232d88f4b64428511a4692a51bd00d610b32
6247696db nspawn: always use mode 555 for /sys (bsc#1107640)
  72f558b57 cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)
  cfcd97cf2 cryptsetup: add support for sector-size= option (#9936) (fate#325634)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1037
2018-09-11 09:22:58 +00:00
Franck Bui
5f58b66603 - Import commit bb5a925bcefd4743873cae3f748ae1a426e92d44
8983bd246 core: don't include libmount.h in a header file (#8580)
  3e4156a8f tmpfiles: don't adjust qgroups on existing subvolumes
  42edc93ac core/service: rework the hold-off time over message

- Enable regexp matching support
  Currently only used by "journalctl --grep=xxx".

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1035
2018-08-09 06:47:09 +00:00
Franck Bui
9f29858359 - Import commit 0350f62a8cf7f151951b6b78337fe3c198b8bf6a
fbf43a697 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)
  4134ba8b6 man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040)
  78bb2a0c4 socket-util: fix getpeergroups() assert(fd) (#8080) (bsc#1096516)
  1753d0420 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  50ebf79d7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  570f7655b locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1034
2018-07-27 10:52:36 +00:00