pool/systemd
SHA256
2
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Accepting request 1115877 from Base:System

Browse Source 
- rpmlintrc: allow systemd-network and systemd-container sub-packages to ship
  shared libs. These are actually NSS plugins and are not really subject to
  shlib policy.

- Drop 5000-core-manager-run-generators-directly-when-we-are-in-.patch
  Since dracut-059+suse.447.g9d1fc722, this workaround is not needed anymore.

  This includes the following bug fixes:
    - upstream commit 3022916b4d2483452c3ddbbac9ee7c4372b1cb46 (bsc#1215241)

OBS-URL: https://build.opensuse.org/request/show/1115877
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=404
This commit is contained in:
Ana Guerrero 2023-10-06 19:12:39 +00:00 committed by Git OBS Bridge
commit 1ed16c0ddc
4 changed files with 23 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
5000-core-manager-run-generators-directly-when-we-are-in-.patch
View File

@ -1,34 +0,0 @@
From 9d0f728f65e6c3ad586e276c1ed3c2cd8cc944be Mon Sep 17 00:00:00 2001
From: Yu Watanabe <watanabe.yu+github@gmail.com>
Date: Mon, 20 Feb 2023 12:00:30 +0900
Subject: [PATCH 5000/5000] core/manager: run generators directly when we are
in initrd
Some initrd system write files at ourside of /run, /etc, or other
allowed places. This is a kind of workaround, but in most cases, such
sandboxing is not necessary as the filesystem is on ramfs when we are in
initrd.
Fixes #26488.
---
src/core/manager.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/core/manager.c b/src/core/manager.c
index 380a4e30d7..6135205761 100644
--- a/src/core/manager.c
+++ b/src/core/manager.c
@@ -3822,8 +3822,8 @@ static int manager_run_generators(Manager *m) {
/* If we are the system manager, we fork and invoke the generators in a sanitized mount namespace. If
* we are the user manager, let's just execute the generators directly. We might not have the
* necessary privileges, and the system manager has already mounted /tmp/ and everything else for us.
- */
- if (MANAGER_IS_USER(m)) {
+ * If we are in initrd, let's also execute the generators directly, as we are in ramfs. */
+ if (MANAGER_IS_USER(m) || in_initrd()) {
r = manager_execute_generators(m, paths, /* remount_ro= */ false);
goto finish;
}
--
2.35.3

5
systemd-rpmlintrc
View File

@ -12,3 +12,8 @@ addFilter(".*tmpfile-not-in-filelist .*")
# shlib policy does not cover multibuilds
addFilter("libsystemd0-mini\..*: E: shlib-policy-name-error SONAME: libsystemd.so.0.*")
addFilter("libudev.*-mini\..*: E: shlib-policy-name-error SONAME: libudev.*")
# These are NSS plugins and are not really subject to shlib policy.
addFilter("systemd-container\..*: E: shlib-policy-name-error .* libnss_mymachines")
addFilter("systemd-network\..*: E: shlib-policy-name-error .* libnss_resolve")

18
systemd.changes
View File

@ -1,3 +1,17 @@
-------------------------------------------------------------------
Thu Oct 5 15:04:50 UTC 2023 - Franck Bui <fbui@suse.com>
- rpmlintrc: allow systemd-network and systemd-container sub-packages to ship
shared libs. These are actually NSS plugins and are not really subject to
shlib policy.
-------------------------------------------------------------------
Wed Oct 4 09:00:32 UTC 2023 - Franck Bui <fbui@suse.com>
- Drop 5000-core-manager-run-generators-directly-when-we-are-in-.patch
Since dracut-059+suse.447.g9d1fc722, this workaround is not needed anymore.
-------------------------------------------------------------------
Wed Sep 27 13:14:12 UTC 2023 - Franck Bui <fbui@suse.com>
@ -589,6 +603,10 @@ Mon Mar 6 10:08:33 UTC 2023 - Franck Bui <fbui@suse.com>
See https://github.com/openSUSE/systemd/blob/SUSE/v253/NEWS for details.
This includes the following bug fixes:
- upstream commit 3022916b4d2483452c3ddbbac9ee7c4372b1cb46 (bsc#1215241)
* Rebased 0001-conf-parser-introduce-early-drop-ins.patch
* Ship systemd-journald-audit.socket again: it can now be disabled via the

1
systemd.spec
View File

@ -206,7 +206,6 @@ Patch5: 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch
# very few cases, some stuff might be broken in upstream and need to be fixed or
# worked around quickly. In these cases, the patches are added temporarily and
# will be removed as soon as a proper fix will be merged by upstream.
Patch5000: 5000-core-manager-run-generators-directly-when-we-are-in-.patch
%description
Systemd is a system and service manager, compatible with SysV and LSB