Ghost files are assumed by rpm to have mode 000 by default which is
not consistent with file permissions set at runtime.
Also /var/lib/systemd/random-seed was tracked wrongly as a
directory.
Also don't track (ghost) /etc/systemd/system/runlevel*.target
aliases since we're not supposed to track units or aliases user
might define/override.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1105
bb6e2f7906 pid1: update manager settings on reload too (bsc#1163109)
e9e8907b06 watchdog: reduce watchdog pings in timeout interval
385a8f9846 udev: rename the persistent link for ATA devices (bsc#1164538)
66018a12ae tmpfiles: remove unnecessary assert (bsc#1171145)
- Disable bump of /proc/sys/fs/nr-open
Hopefully a _temporary_ workaround until bsc#1165351 is fixed
otherwise user instances crashes the system is using NIS (and the
nscd cache is empty).
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1100
Since boo#1160890 has been fixed since a couple of months now.
- Drop content of /usr/share/factory/ (bsc#1170146)
systemd ships several files in /usr/share/factory/etc that are
copied to /etc in case those files are missing there. Unfortunately
the content does not match the openSUSE defaults.
- Drop most of the tmpfiles that deal with generic paths (bsc#1078466)
They are problematic because some of them conflict with SUSE
defaults. Therefore it seems better to let the revelant packages
owning these paths to provide their own definitions instead.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1097
1ceedf8535 meson: fix build of udev 'path_id_compat' builtin with meson 0.54
e61569d4a9 pid1: by default make user units inherit their umask from the user manager (bsc#1162698)
64fdacd5f1 user-util: rework how we validate user names (bsc#1170272)
[...]
- Drop 0001-meson-fix-build-of-udev-path_id_compat-builtin-with-.patch
It's been merged in 'openSUSE-Factory' branch otherwise this branch
won't build anymore since meson has been upgraded to version 0.54 in
Factory.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1094
d1d3f2aa15 docs: Add syntax for templated units to systemd.preset man page
3c69813c69 man: add a tiny bit of markup
bf595e788c home: fix segfault when parsing arguments in PAM module
e110f4dacb test: wait a bit after starting the test service
e8df08cfdb fix journalctl regression (#15099)
eb3a38cc23 NEWS: add late note about job trimming issue
405f0fcfdd systemctl: hide the 'glyph' column when --no-legend is requested
1c7de81f89 format-table: allow hiding a specific column
b7f2308bda core: transition to FINAL_SIGTERM state after ExecStopPost=
2867dfbf70 journalctl: show duplicate entries if they are from the same file (#14898)
[...]
Added 0001-Revert-job-Don-t-mark-as-redundant-if-deps-are-relev.patch:
upstream commit 097537f07a2fab3cb73aef7bc59f2a66aa93f533 has been
reverted for now on as it introduced a behavior change which has
impacted plymouth at least.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1091
77c04ce5c2 hwdb: update to v245-rc1
b4eb884824 Fix typo in function name
e2d4cb9843 polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it
83bfc0d8dd sd-bus: introduce API for re-enqueuing incoming messages
5926f9f172 polkit: use structured initialization
0697d0d972 polkit: on async pk requests, re-validate action/details
2589995acd polkit: reuse some common bus message appending code
5b2442d5c3 bus-polkit: rename return error parameter to ret_error
0a19ff7004 shared: split out polkit stuff from bus-util.c → bus-polkit.c
1325dfb577 test: adapt to the new capsh format
3538fafb47 meson: update efi path detection to gnu-efi-3.0.11
3034855a5b presets: "disable" all passive targets by default
c2e3046819 shared/sysctl-util: normalize repeated slashes or dots to a single value
6f4364046f dhcp6: do not use T1 and T2 longer than one provided by the lease
0ed6cda28d network: fix implicit type conversion warning by GCC-10
f6a5c02d26 bootspec: parse random-seed-mode line in loader.conf
ddc5dca8a7 sd-boot: fix typo
2bbbe9ae41 test: Synchronize journal before reading from it
072485d661 sd-bus: fix introspection bug in signal parameter names
80af3cf5e3 efi: fix build.
[...]
- Use suse.pool.ntp.org server pool on SLE (jsc#SLE-7683)
- Drop scripts-udev-convert-lib-udev-path.sh
Nobody should need it these days.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1085
They're restored until YaST stop using them (see boo#1160890)
- Import commit 8254b8d9646f3e0f5f8057d1ffb5d6c20f079aaa (merge v244.1)
639dc9f4bf network: set ipv6 mtu after link-up or device mtu change
cbced49daa man: fix typo in net-naming-scheme man page
7dd04c99b0 network: tc: drop unused element
bf4b7d07ba man: fix typos (#14304)
1ba2e7a730 ipv4ll: do not reset conflict counter on restart
49806bb310 macro: avoid subtraction overflow in ALIGN_POWER2()
c4c1600689 test-network: add a test case for SendOption=
6f15b45949 network: fix segfault in parsing SendOption=
2e531b830d seccomp: real syscall numbers are >= 0
f7616ed52b network: fix copy and paste mistake
e8b53300c4 network: do not drop foreign config if interface is in initialized state
00f05813bf seccomp: mmap test results depend on kernel/libseccomp/glibc
4de1909e61 seccomp: use per arch shmat_syscall
d83010521d seccomp: ensure rules are loaded in seccomp_memory_deny_write_execute
2c6568221a seccomp: fix multiplexed system calls
bcf0aa02bf Fix typo (duplicate "or")
96d7083c54 network: if /sys is rw, then udev should be around
e874419902 nspawn: do not fail if udev is not running
29c9144655 Create parent directories when creating systemd-private subdirs
9cbb8b5254 network: do not return error but return UINT64_MAX if speed meter is disabled
c08429ae33 core: swap priority can be negative
f25c0be335 networkctl: fix to show BSSID
65fd2fce59 systemctl: enhance message about kexec missing kernel
bdd0af5f81 Fixup typo in NEWS
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1084
6c5e492a65 cryptsetup: umount encrypted devices before detaching it during shutdown
- Upgrade to v244 (commit 090da85161ceb1ba0b4c208963c7156a8fdf10c6)
See https://github.com/openSUSE/systemd/blob/SUSE/v243/NEWS for
details.
Legacy and obsolete symlinks have been finally dropped.
Dropped 0001-logind-keep-backward-compatibility-with-UserTasksMax.patch.
Users were notified about the deprecation of UserTasksMax option and
how to move to the new mechanism. The dropin replacement for
UserTasksMax is therefore no more generated but its use still
produces a warning.
Added 0001-SUSE-policy-do-not-clean-tmp-by-default.patch and
0001-Fix-run-lock-group-to-follow-openSUSE-policy.patch.
These patches were extracted from the git repo because it's not
clear where the SUSE tmpfiles specificities should be located.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1082
1439d72a72 udevd: don't use monitor after manager_exit()
99288dd778 Revert "udevd: fix crash when workers time out after exit is signal caught"
152577d6d0 udevd: fix crash when workers time out after exit is signal caught
f854991504 udevd: wait for workers to finish when exiting (bsc#1106383)
Changes from the v243-stable (84 commits):
e51d9bf9e5 man: add entry about SpeedMeter=
aa1fc791c7 udev: silence warning about PROGRAM+= or IMPORT+= rules
b9a619bb67 udevadm: ignore EROFS and return earlier
1ec5b9f80c basic: add vmware hypervisor detection from device-tree
7fa7080248 umount: be happy if /proc/swaps doesn't exist
[...]
47d0e23d26 udev: fix memleak caused by wrong cleanup function
a6fb0542c5 parse_hwdb: fix compatibility with pyparsing 2.4.*
cb1d892f17 parse_hwdb: process files in order
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1081
9dbdbc2f10 logind: fix (again) the race that might happen when logind restores VT (bsc#1101591 bsc#1140081)
c848bec110 libblkid: open device in nonblock mode. (bsc#1084671)
b70ad6c927 resolved: check for IP in certificate when using DoT with GnuTLS (bsc#1155539 CVE-2018-21029)
bbedf3d557 resolved: require at least version 3.6.0 of GnuTLS for DNS-over-TLS
eb732c2e29 resolved: fix connection failures with TLS 1.3 and GnuTLS
4e45084ac5 shared/install: failing with -ELOOP can be due to the use of an alias in install_error()
2e297f0d87 shared/install: fix error codes returned by install_context_apply()
dd29d70d32 man: alias names can't be used with enable command
- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
(bsc#1092920)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1080
It's part of the previous import.
- Import commit b7467b7b553d6d0d6f92758d966b69f1a88b6b42
441f44f371 fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495)
8a1bb5c66b swap: do not make swap units wanted by its device unit anymore
- Import commit 5df9000899ef7d45ddbcacd0fdf73afa07a40f6b
f0ed7237e4 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)
b37054aa5a compat-rules: escape '$' when used for shell expansion
Changes from the v243-stable:
ef677436aa test: Pass personality test even when i686 userland runs on x86_64 kernel
3f6398c450 docs: fix inadvertent change in uid range
25bb377a73 cgroup: fix typo in BPF firewall support warning message
6d97aca0d5 fix build with compilers with default stack-protector enabled
fbad077cec nspawn: surrender controlling terminal to PID2 when using the PID1 stub
0553c3c668 pid1: fix DefaultTasksMax initialization
f406a691a7 src/core/automount: use DirectoryMode when calling mkdir -p
20438f96c3 udevadm trigger: do not propagate EACCES and ENODEV
6480630bc3 hwdb: Correct WWWW Pattern In Documentation Comment
9d8e889810 nspawn: consistenly fail if parsing the environment fails
40e169b304 nspawn: default to unified hierarchy if --as-pid2 is used
b5df1037a0 cgroup: Mark memory protections as explicitly set in transient units
f14e3e02cc cgroup: Respect DefaultMemoryMin when setting memory.min
ea248e53bf cgroup: Check ancestor memory min for unified memory config
de1d25a506 cgroup: docs: memory.high doc fixups
2ab45f38d8 cgroup: docs: Mention unbounded protection for memory.{low,min}
19a43dc38a Consider smb3 as remote filesystem
5c0224c7bf Handle d_type == DT_UNKNOWN correctly
8282bc61df util-lib: Don't propagate EACCES from find_binary PATH lookup to caller
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1077
07f0549ffe network: do not send ipv6 token to kernel
9d34e79ae8 systemd-mount: don't check for non-normalized WHAT for network FS
5af677680c core: set fs.file-max sysctl to LONG_MAX rather than ULONG_MAX (bsc#1142099)
29dda7597a random-util: eat up bad RDRAND values seen on AMD CPUs
eb6c17c178 util-lib: fix a typo in rdrand
829c20dc8e random-util: rename "err" to "success"
5442366fbf man: rework the description of Aliases and .wants/.requires directories
ae71c6f634 docs: typo in arg name replace-irreversible -> replace-irreversibly
09774a5fcb meson: make nologin path build time configurable
69ffeeb0b1 man: add note about systemctl stop return value
4cf14b5513 shared/conf-parser: say "key name" not "lvalue", add dot
4481ca7f86 shared/conf-parser: emit a nicer warning for something like "======"
46f3db894b shared/conf-parser: be nice and ignore lines without "="
7d928995f7 nspawn: fix memleak in argument parsing
7727e6c0ae resolve: fix memleak
7f32a81976 journal: properly read unaligned le64 integers
fa419099e5 activate: move array allocation to heap
815a9fef2a systemctl: print non-elapsing timers as "n/a" not "(null)"
a4fc3c88f1 factory: include pam_keyinit.so in PAM factory configuration
a453d63315 factory: add comment to PAM file, explaining that the defaults are not useful
d9a5a70a59 factory: tighten PAM configuration
5e2d3bf80b test: make sure colors don't confuse our test
5fe3be1334 wait-online: change log level
c49b6959d5 systemctl: emit warning when we get an invalid process entry from pid1 and continue
3c9f43eb03 systemctl: do not suggest passing --all if the user passed --state=
5964d1474e man: offline-updates: make dependence on system-update.target explicit
a04dd26e03 alloc-util: drop _alloc_ decorator from memdup_suffix0()
7c46a694ca man: add example for setting multiple properties at once
1d72789271 man: CPUShares= is so 2015
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1065
7e58b89136 udevd: change the default value of udev.children-max (again) (bsc#1107617)
- Add 0001-rc-local-generator-deprecate-halt.local-support.patch
/etc/init.d/halt.local support will removed from the next systemd
version (v243) so for now on warn (hopefully the few) users who rely
on this script so they have a chance to switch to systemd-shutdown
interface.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1064
All remaining packages have been fixed so they don't rely on the
insser-generator to generate proper deps. So let's drop it as all
services should carry the proper dependencies itself.
- Drop debug-only-remove-new-policies.patch
The new DBUS methods have been reviewed by the security team.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1063
f2459bf373 random-util: eat up bad RDRAND values seen on AMD CPUs
c90a2e9793 util-lib: fix a typo in rdrand
4db1cc9d46 random-util: rename "err" to "success"
981a62a102 random-util: hash AT_RANDOM getauxval() value before using it
64a9c3d918 random-util: use gcc's bit_RDRND definition if it exists
c5d6ecfdca random-util: rename RANDOM_DONT_DRAIN → RANDOM_MAY_FAIL
298d13df7e network: remove redunant link name in message
77cbde31f2 hwdb: Align airplane mode toggle key mapping for all Acer series
460f03794e Revert "hwdb: Apply Acer mappings to all Gateway and Packard Bell models"
fe9271ad84 test: return a non-zero return code when 'nobody' user doesn't exist
29d355e755 fstab-generator: Prevent double free of reused FILE*
f30f1adc11 meson: make source files including nspawn-settings.h depend on libseccomp
84bab914b8 alloc-util: don't use malloc_usable_size() to determine allocated size
5240972d8d units: drop reference to sushell man page
0a26de5e33 codespell: fix spelling errors
582de105c8 nspawn-expose-ports: fix a typo in error message
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1062
A temporary patch to suppress the new DBUS methods introduced by
v242 until they are reviewed and whitelisted by the secteam.
- Add a comment explaining why static enablement symlinks in /etc are suppressed
Also remove any /etc/systemd/system/*.requires/ symlinks for the
same reason.
- preset remote-cryptsetup.target during package installation
This target is supposed to be part of the targets that should be
enabled (or not depending on the presets) at package installation.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1060
430877e794 pam-systemd: use secure_getenv() rather than getenv() (bsc#1132348 CVE-2019-3842)
3cff2e6514 man: document that if the main process exits after SIGTERM we go directly to SIGKILL
26c4f7191c bus: fix memleak on invalid message
- systemd-coredump: generate a stack trace of all core dumps (bsc#1128832)
This stack trace is logged to the journal.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1058
7af53e005b sd-bus: if we receive an invalid dbus message, ignore and proceeed
92dcbfdd7f bus: move BUS_DONT_DESTROY calls after asserts
a83e7b3b43 automount: don't pass non-blocking pipe to kernel.
726127ea1d units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)
a6347a3cb6 core: Fix use after free case in load_from_path() (bsc#1121563)
22e2550222 strv: rework FOREACH_STRING() macro (bsc#1121563)
2ddd38f41a test,systemctl,nspawn: use "const char*" instead of "char*" as iterator for FOREACH_STRING()
c2c8333e0b strv: add new macro STARTSWITH_SET()
1db243a601 Update systemd-system.conf.xml (bsc#1122000)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1051
Import a bunch of fixes from stable/v239-stable:
c8293f5af4 Revert "network: set DynamicUser= to systemd-networkd.service"
7f605592e6 Revert "resolve: enable DynamicUser= for systemd-resolved.service"
5a48e92e06 test: Fix networkd test for an already running service
36eae1688b Revert "timesyncd: enable DynamicUser="
3a11f24cf0 Revert "unit: drop After=systemd-sysusers.service from timesyncd"
23cfd15ce9 machinectl: fix verbosity of import-raw or friends
ba037daf29 Make bzip2 an optional dependency for systemd-importd
fb609d2721 pull: initialize libgcrypt before calling any functions provided by libgcrypt
c50857bc6b hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571)
9a12fd17f5 man: Mention that paths in unit files must be fully normalized.
76fc2ab4a6 tree-wide: use instead of #ifdef for HAVE_*
fcc699c093 network: update log message
a4f497b2cd Use #if instead of #ifdef for ENABLE_GSHADOW
121c662eb8 man: add missing option for system.conf
564341146e core: add missing option and drop nonexistent option in system.conf
7082a3599f journal: add missing option in journald.conf
3c15efa9c1 basic: add missing comma in raw_clone assembly for sparc
4c210b6dce cryptsetup: Add dependency on loopback setup to generated units
c777fbbe3e journal-gateway: use localStorage["cursor"] only when it has valid value
c5b1bef639 journal-gateway: explicitly declare local variables
2361522ca6 analyze: actually select longest activated-time of services
3e810d92d9 sd-bus: fix implicit downcast of bitfield reported by LGTM
aef660a4cf resolvconf: fixes for the compatibility interface
06b3f54f50 install: fix error handling in is_symlink_with_known_name()
f70ab9a468 portable: fix error handling
d2c40d4e80 resolve: fix return value type of dns_answer_has_dname_for_cname()
6f684e0670 resolve: dns_scope_network_good() does not returns negative errno
15d83e1138 bus-util: fix error handling
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1050
