25d0c348c8- resolved: disable fallback DNS servers and fail when no DNS server info could be obtained from the links. It's better to let the sysadmin know that something is likely misconfigured rather than silently handing over the DNS queries to Google or Cloudflare.Franck Bui2022-01-26 17:34:15 +00:00
a72dbf7727Document bsc#1192637 in the changelogsFranck Bui2022-01-26 17:03:49 +00:00
b3dd6b8c1b- Move the whole content of /usr/share/doc/packages/systemd in doc subpackageFranck Bui2022-01-20 08:31:23 +00:00
43b0416ae2- Move the systemd-network-generator stuff in udev package This generator can generate .link files and is mainly used in initrd where udev is mandatory.Franck Bui2022-01-19 14:30:23 +00:00
29dde5a0b8- Restore /sbin/udevadm and /bin/systemctl (obsolete) paths when split_usr is true (bsc#1194519)Franck Bui2022-01-18 20:40:06 +00:00
7768772014- Import commit 3743acbce3bd44208af453fc6dc384a1236dc83c (merge of v249.9) For a complete list of changes, visit: e2ca79dd77...3743acbce3Franck Bui2022-01-17 09:18:38 +00:00
e973515628reindent and fix a typo in the comments of the hearder of systemd-sysv-installFranck Bui2022-01-17 09:06:22 +00:00
8102a2f147Revert the drop of 0009-pid1-handle-console-specificities-weirdness-for-s390.patch: s390 is supported on Factory/TWFranck Bui2022-01-17 08:45:49 +00:00
bb8a2818e2fix name of 0009-sysv-add-back-support-for-all-virtual-facility-and-f.patch in specfileFranck Bui2022-01-17 08:16:34 +00:00
7ef96d500e- Drop 0009-pid1-handle-console-specificities-weirdness-for-s390.patch, it's SLE material. - Extract bits from 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch which are not specific to the handling of 'Required-Start:' and move them into a new patch 1010-sysv-add-back-support-for-all-virtual-facility-and-f.patchFranck Bui2022-01-14 15:14:43 +00:00
9e7b4909fa- Import commit e2ca79dd775d1f7d39861d57f23c43f6cd85a872 (merge of v249.8) For a complete list of changes, visit: 458220239c...e2ca79dd77 - Drop the following patches as they have been merged into SUSE/v249 branch: 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patchFranck Bui2022-01-13 22:00:43 +00:00
80164b5f87- Import commit 458220239c69b8e5fe7be480929348daeccb70d1 e95df40b09 shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178) 078e04305d shared/rm_rf: refactor rm_rf() to shorten code a bit 6d560d0aca shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit 6666ff056c localectl: don't omit keymaps files that are symlinks (bsc#1191826)Franck Bui2022-01-13 20:57:06 +00:00
be0e104a88- Added patches to fix CVE-2021-3997 (bsc#1194178) 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch These patches will be dropped and cherry-picked from upstream once upstream will commit them in their main branch.Franck Bui2022-01-11 08:08:34 +00:00
af9bdb78ab- Import commit a54f80116ccf105dff11aef5d18dd110ebd3e8ee 30cbebc56f tmpfiles: 'st' may have been used uninitialized 5443654ec0 macro: add new helper RET_NERRNO() 8d90ecc435 rm-rf: optionally fsync() after removing directory tree 591344010d rm-rf: refactor rm_rf_children(), split out body of directory iteration loop 8c7762c4f1 Bump the max number of inodes for /dev to a million (bsc#1192858) dc9476c881 journal: don't remove the flushed flag when journald is stopped 29efc29efd TEST-10: don't attempt to write a byte to the socket 773fb785b6 Bump the max number of inodes for /dev to 128k (bsc#1192858)Franck Bui2022-01-06 14:35:57 +00:00
c0f8840425- Update systemd-user PAM service again Change the default implementation of pam_setcred() again, previously customized to run the full "auth" PAM stack and only call pam_deny.so which is basically the SUSE default behavior without pam_warn.so. This is considered safer, especially on SLE where a regression was spotted by QA.Franck Bui2022-01-04 08:30:42 +00:00
b214ed6e6f- move files related to static nodes to udevFranck Bui2021-12-07 19:29:40 +00:00
80ffb6a145- Replace S:$n references with SOURCE$n. Makes vim * search work.Franck Bui2021-11-25 10:00:18 +00:00
80321427bbReference jsc#SLE-17798 in the changelogFranck Bui2021-11-23 15:38:41 +00:00
c829649b08- Import commit 523f32df573d459551760b072cb62906f4a2cf23 (merge of 249.7) For a complete list of changes, visit: c34c987126...523f32df57 - Import commit c34c98712600bc206919ec6ed136195f75ac1967 f99aa40c6e TEST-12: make sure 'adm' group exist 6c7194ff99 TEST-08: don't force ext4 for / dd1814b8f9 test: use kbd-mode-map we ship in one more test case 94c5febf2a test: fix TEST-10-ISSUE-2467Franck Bui2021-11-22 09:12:53 +00:00
2cdefc7217- Update the dependencies of the systemd-testsuite sub-package.Franck Bui2021-11-22 08:47:06 +00:00
fa14172809- Import commit 61c79e68381801428c0bc00a56b9e2e9cfa68373 (merge of 249.6) bcdeee7b4c virt: Support detection for ARM64 Hyper-V guests (bsc#1186071) [...] For a complete list of changes, visit: 8521f8d22f...61c79e6838 - Drop 0001-Revert-core-Check-unit-start-rate-limiting-earlier.patch It's part of v249.6.Franck Bui2021-11-15 10:34:05 +00:00
122c2fe1b0- Add 0001-Revert-core-Check-unit-start-rate-limiting-earlier.patch Temporarly revert commit ed8fbbf1745c6a2dc0b8cd560ac8a3353f72e979 until the regression it introduced [1] is addressed by upstream and a fix is released via the stable tree. [1] https://github.com/systemd/systemd/issues/21025Franck Bui2021-11-02 10:36:41 +00:00
62069a925aReference bsc#1190984 in the changelogFranck Bui2021-10-28 09:32:40 +00:00
f8a4672e6e- Disable nss-systemd and translations features for the mini flavourFranck Bui2021-10-19 14:42:56 +00:00
eb99adf39f- Really enable libiptc for masquerading support (bsc#1191651) Currently used by systemd-nspawn and systemd-networkd.Franck Bui2021-10-18 19:42:41 +00:00
87080364b5- Convert systemd package to multibuildFranck Bui2021-10-18 10:30:34 +00:00
25286a45acfix build for the mini flavor: rename of 'gnu-efi' broke itFranck Bui2021-10-15 16:28:37 +00:00
72ccf7b818- Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5) For a complete list of changes, visit: 355e113ce1...8521f8d22fFranck Bui2021-10-15 12:22:28 +00:00
e58bfccbb2- Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46 3b4a005095 meson: add missing include directory when using xkbcommon 4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514) 78466e4464 meson: drop the list of valid net naming schemes b9a2098f9d netif-naming: inline one iterator variable d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-schemeFranck Bui2021-10-15 12:07:31 +00:00
827b5f1ae3- Rename %{gnu-efi} into %{sd_boot} Build conditionals (%bcond_with and %bcond_without) are used to define a specific feature of systemd. "gnu-efi" is rather an implemenation detail. Also not really sure what "efi" option alone is useful for since systemd-boot & co depends on "gnu-efi". - Enable sd_boot support for aarch64Franck Bui2021-10-15 11:50:45 +00:00
cf495a11ef- Ghost own directories /var/log/journal and /var/log/journal/remote again rpmlint no more complain about the setgid bit, see sr#923496.Franck Bui2021-10-15 09:32:30 +00:00
b8bd31ecd6- Overwriting rootprefix= is only required when split-usr is enabledFranck Bui2021-10-08 11:21:33 +00:00
14769bea51- Rename %usrmerged into %split_usrFranck Bui2021-10-08 10:11:10 +00:00
2d5389d5caupdate systemd-user to get the potential extended creds via common-authFranck Bui2021-10-08 08:31:22 +00:00
400331e0c8- Suppress PAM warning when the credentials for user@.service service are established (bsc#1190515) systemd-user PAM service needs to define a default implementation of pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used, which consists of pam_warn.so + pam_deny.so, and will throw a warning each time a user logs in.Franck Bui2021-10-06 08:03:55 +00:00
fa19545006- No need to install upstream pam configuration file "systemd-user" It's overwritten by the SUSE version anyway.Franck Bui2021-10-05 08:47:13 +00:00
1b17770721- Work around rpmlint complaining about /var/log/journal shipped with setgid bit This setgid bit has been already reviewed in the past and wasn't a concern. However we want the mode/ownership adjusted by tmpfiles and avoid the duplication of these info in rpm. - Don't ghost own any directories created dynamically by tmpfiles Again rpmlint complains but it doesn't seem to make sense to try to track all paths (including theirs perms, ownerships...) created dynamically. And 'rpm -V' is likely to report issues later with these paths anyway. This effectively partially reverts the two previous commits.Franck Bui2021-09-29 14:09:21 +00:00
55eebaeb1b- Make sure the build process won't create /var/log/journal - /var/log/journal/remote is owned by systemd-journal-remoteFranck Bui2021-09-24 12:59:13 +00:00
97751255ed- systemd.spec: fix a bunch of rpmlint errors/warningsFranck Bui2021-09-24 09:29:34 +00:00
3272f46d5b- Drop systemd-logger This sub package was introduced in order to configure persistent journal and also to make sure that another syslog provider (such as rsyslog) couldn't be installed at the same time: each syslog provider conflicts with each others. However this mechanism didn't work since uninstalling systemd-logger wasn't magically turning off persistent logging because /var/log/journal is likely to be populated hence not removed. Moreover using a subpackage to configure the mode of journald was overkill and the usual ways (main conf file or drop-ins) should be preferred.Franck Bui2021-09-24 07:42:46 +00:00
a484fde798- Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97 8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh 1527bcc5dd test: make the installation of the debug tools optional in the image f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)Franck Bui2021-09-22 13:45:37 +00:00
6bf52cd2f2- Update the dependencies of the testsuite package The debug tools are optional thus no more required. OTOH strip(1) is needed when building the test image and nc(1) is needed by some tests.Franck Bui2021-09-22 13:29:40 +00:00
305477c6fcAdd a couple of missing bug references in the changelogFranck Bui2021-09-22 08:45:10 +00:00
2b970d3e98- Don't reexecute user manager instances on package update yet This can't be done until users have their user instance updated to the new version that supports reexecuting with SIGRTMIN+25 because this signal terminates the user managers for the previous versions.Franck Bui2021-09-08 17:13:42 +00:00
ced3695349- Import commit ec72db9ee0f8ce061f83624d7148ff38a5993b11 3b1aa2f79f manager: reexecute on SIGRTMIN+25, user instances only fd46c81922 test: make sure to include all haveged unit files - systemd.spec: reexec user manager instances on package updatesFranck Bui2021-09-08 14:28:02 +00:00
b6ea0987aa- Make sure the versions of both udev and systemd packages are always the same (bsc#1189480)Franck Bui2021-09-03 09:42:29 +00:00
c8069e87e2- Drop dependency on m4 (replaced by Jinja2)Franck Bui2021-09-02 10:06:11 +00:00
494273ba6a- Configure split-usr=true only when %usrmerged is not definedFranck Bui2021-09-01 11:56:02 +00:00
b2778ad873- Import commit 40bda18e346ff45132ccd6f8f8e96de78dcf3470 (merge of v249.4) For a complete list of changes, visit: 7f23815a70...40bda18e34Franck Bui2021-09-01 10:00:13 +00:00
d138991d4c- Rework the test (sub)package: - it's been renamed into 'systemd-testsuite' - it includes the extended tests too - the relevant commits have been backported to SUSE/v249 so no SUSE specific patch is needed to run the extended tests (see below) - the deps needed by the extended tests have been added - Import commit 7f23815a706cf2b2df3eac2eb2f8220736b8f427 ad216581b6 test: if haveged is part of initrd it needs to be installed in the image too 088fbb71d0 test: adapt install_pam() for openSUSE 4d631c1f0c Revert "test: adapt TEST-13-NSPAWN-SMOKE for SUSE" ef956eb8a2 test: on openSUSE the static linked version of busybox is named "busybox-static" 6f7ce633b0 TEST-13-*: in busybox container sleep(1) takes a delay in seconds only 278baaa3ec test: don't try to find BUILD_DIR when NO_BUILD is set 3bba2f876a test: add support for NO_BUILD=1 on openSUSE d77cbc1b64 test: make busybox TEST-13-only dependencyFranck Bui2021-08-31 20:44:53 +00:00
8256b5b9a2- Avoid the error message when udev is updated due to udev being already active when the sockets are started again (bsc#1188291)Franck Bui2021-07-29 13:15:37 +00:00
1a6703593d- Import commit 73e9e6fb847513c6d62f2fb445778ef5bc0fe516 (merge of v248.6) For a complete list of changes, visit: cb29bcc5ef...73e9e6fb84Franck Bui2021-07-26 12:44:37 +00:00
a2f0c76c4f- Drop 0001-Revert-core-prevent-excessive-proc-self-mountinfo-pa.patch Commit 81107b8419c39f726fd2805517a5b9faab204e59 fixes https://github.com/systemd/systemd/issues/19464 which makes the aforementioned patch not needed anymore.Franck Bui2021-07-20 16:29:26 +00:00
ffc7c11643- Drop 1003-basic-unit-name-adjust-comments.patch It's been merged in SUSE/v248 branchFranck Bui2021-07-20 16:24:01 +00:00
8a848bdbe1- Import commit cb29bcc5ef2c0ee659686c5d229646a6ba98ec50 (merge of v248.5) 4a1c5f34bd basic/unit-name: do not use strdupa() on a path (bsc#1188063 CVE-2021-33910) [...] For a complete list of changes, visit: 94efce2ee5...cb29bcc5ef - Drop 1002-basic-unit-name-do-not-use-strdupa-on-a-path.patch as it was merged in v248.5.Franck Bui2021-07-20 16:05:37 +00:00
23bd5e8331- Import commit 94efce2ee59fca15a48ff9c232c8dd7cf930c0a0 (merge of v248.4) For a complete list of changes, visit: c0aecee593...94efce2ee5 - Drop 1001-unit-name-generate-a-clear-error-code-when-convertin.patch as it was merged in v248.4.Franck Bui2021-07-20 15:44:54 +00:00
e7a09694fe- Import commit c0aecee593511e49638579cb2b9ac8aaf1f8e6c8 42ec1d537a login: use a hwdb entry for tagging Parallels' fb devices with 'master-of-seat' tag ecc7c7b462 login: use a hwdb entry for tagging HyperV's fb devices with 'master-of-seat' tag a4cfd70476 login: XGI Z7/Z9 (XG20 core) graphic chip requires master-of-seat to be set (bsc#1187154) ef553e0199 sd-dhcp-client: tentatively ignore FORCERENEW command (bsc#1185972 CVE-2020-13529) aae6c575fc sd-dhcp-client: logs when dhcp client unexpectedly gains a new lease 258a3d2043 sd-dhcp-client: shorten code a bit 0a80303114 sd-dhcp-client: check error earlier and reduce indentationFranck Bui2021-07-20 15:23:18 +00:00
9ce6eaf243- Added patches to fix CVE-2021-33910 (bsc#1188063) Added 1001-unit-name-generate-a-clear-error-code-when-convertin.patch Added 1002-basic-unit-name-do-not-use-strdupa-on-a-path.patch Added 1003-basic-unit-name-adjust-comments.patch These patches will be moved to the git repo once the bug will become public.Franck Bui2021-07-20 12:22:21 +00:00
21c6d92782- systemd-hwdb-update.service should be shipped by the udev packageFranck Bui2021-07-05 09:18:19 +00:00
a7032a2eba- Finally don't create /run/lock/subsys anymore This effectively reverts the fix for bsc#1187292 made earlier. This directory is specific to RH sysvinit and since we're going to fade the support of SysV init script away the directory has no future.Franck Bui2021-07-01 07:51:39 +00:00
77de31c621- Import commit e9a23d9e064c2e7ac21a1b984d116bcf15327e63 8dd19c6ee3 sd-device: allow to read sysattr which contains embedded NUL d52409e5fe pid1: only add a Wants= type dependency on /tmp when PrivateTmp=yes (bsc#1181970Franck Bui2021-06-28 16:57:58 +00:00
Franck Bui
Dominique Leuenberger