Commit Graph

1638 Commits

Author SHA256 Message Date
Stephan Kulow
742890720c Accepting request 127019 from Base:System
- Add fix-dir-noatime-tmpfiles.patch: do not modify directory
  atime, which was preventing removing empty directories
  (bnc#751253, rh#810257).
- Add improve-restart-behaviour.patch: prevent deadlock during
  try-restart (bnc#743218).
- Add journal-bugfixes.patch: don't crash when rotating journal
  (bnc#768953) and prevent memleak at rotation time too.
- Add ulimit-support.patch: add support for system wide ulimit
  (bnc#744818).
- Add change-terminal.patch: use vt102 instead of vt100 as terminal
  for non-vc tty.
- Package various .wants directories, which were no longer packaged
  due to plymouth units being removed from systemd package.
- Fix buildrequires for manpages build. (forwarded request 127017 from fcrozat)

OBS-URL: https://build.opensuse.org/request/show/127019
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=103
2012-07-03 19:42:50 +00:00
Andreas Jaeger
bd156cfcf6 Accepting request 127017 from home:fcrozat:branches:Base:System
- Add fix-dir-noatime-tmpfiles.patch: do not modify directory
  atime, which was preventing removing empty directories
  (bnc#751253, rh#810257).
- Add improve-restart-behaviour.patch: prevent deadlock during
  try-restart (bnc#743218).
- Add journal-bugfixes.patch: don't crash when rotating journal
  (bnc#768953) and prevent memleak at rotation time too.
- Add ulimit-support.patch: add support for system wide ulimit
  (bnc#744818).
- Add change-terminal.patch: use vt102 instead of vt100 as terminal
  for non-vc tty.
- Package various .wants directories, which were no longer packaged
  due to plymouth units being removed from systemd package.
- Fix buildrequires for manpages build.

OBS-URL: https://build.opensuse.org/request/show/127017
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=284
2012-07-03 16:31:03 +00:00
Stephan Kulow
4cc36f3270 Accepting request 126920 from Base:System
- Do not ship plymouth units, they are shipped by plymouth package
  now (bnc#769397).
- Fix module loading (bnc#769462)

OBS-URL: https://build.opensuse.org/request/show/126920
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=102
2012-07-03 12:13:12 +00:00
Stephan Kulow
df735c7bb5 Accepting request 126920 from Base:System
- Do not ship plymouth units, they are shipped by plymouth package
  now (bnc#769397).
- Fix module loading (bnc#769462)

OBS-URL: https://build.opensuse.org/request/show/126920
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=102
2012-07-03 12:13:12 +00:00
a8b28b94ac - Fix module loading (bnc#769462)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=282
2012-07-02 15:48:09 +00:00
175b77f650 remove patch no longer used
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=281
2012-07-02 12:14:01 +00:00
f6296a9bbc - Do not ship plymouth units, they are shipped by plymouth package
now (bnc#769397).

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=280
2012-07-02 12:13:41 +00:00
Stephan Kulow
6593796c1f Accepting request 124228 from Base:System
- Add fix-swap-priority: fix default swap priority (bnc#731601).

OBS-URL: https://build.opensuse.org/request/show/124228
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=100
2012-06-10 21:18:43 +00:00
Stephan Kulow
3d49faeb93 Accepting request 124228 from Base:System
- Add fix-swap-priority: fix default swap priority (bnc#731601).

OBS-URL: https://build.opensuse.org/request/show/124228
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=100
2012-06-10 21:18:43 +00:00
87d51f505a - Add fix-swap-priority: fix default swap priority (bnc#731601).
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=277
2012-06-07 13:29:24 +00:00
Stephan Kulow
b3969e3d4a Accepting request 122369 from Base:System
- Re-enable logind-logout.patch, fix in xdm-np PAM file is the real
  fix.

- Update new-lsb-headers.patch to handle entries written after
  description tag (bnc#727771, bnc#747931).

OBS-URL: https://build.opensuse.org/request/show/122369
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=99
2012-05-26 11:00:31 +00:00
Stephan Kulow
17b4f0e867 Accepting request 122369 from Base:System
- Re-enable logind-logout.patch, fix in xdm-np PAM file is the real
  fix.

- Update new-lsb-headers.patch to handle entries written after
  description tag (bnc#727771, bnc#747931).

OBS-URL: https://build.opensuse.org/request/show/122369
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=99
2012-05-26 11:00:31 +00:00
f70d1a2bd7 - Re-enable logind-logout.patch, fix in xdm-np PAM file is the real
fix.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=275
2012-05-25 12:03:50 +00:00
c0431dd9e8 - Update new-lsb-headers.patch to handle entries written after
description tag (bnc#727771, bnc#747931).

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=274
2012-05-24 12:06:55 +00:00
Stephan Kulow
90304d4c67 Accepting request 116331 from Base:System
- Disable logind-logout.patch: it crashes sudo session (if called
  after su -l) (bnc#746704).

- Add fix-getty-isolate.patch: don't quit getty when changing
  runlevel (bnc#746594)

OBS-URL: https://build.opensuse.org/request/show/116331
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=98
2012-05-08 04:48:51 +00:00
Stephan Kulow
3dfa2c97cf Accepting request 116331 from Base:System
- Disable logind-logout.patch: it crashes sudo session (if called
  after su -l) (bnc#746704).

- Add fix-getty-isolate.patch: don't quit getty when changing
  runlevel (bnc#746594)

OBS-URL: https://build.opensuse.org/request/show/116331
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=98
2012-05-08 04:48:51 +00:00
e030c06a86 - Disable logind-logout.patch: it crashes sudo session (if called
after su -l) (bnc#746704).

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=272
2012-05-03 11:41:40 +00:00
d3ca744b86 - Add fix-getty-isolate.patch: don't quit getty when changing
runlevel (bnc#746594)

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=271
2012-04-25 08:34:49 +00:00
Stephan Kulow
698eb69c72 Accepting request 114876 from Base:System
- Implemented SUSE specific sysconfig numlock logic (bnc#746595). (forwarded request 114873 from sbrabec)

OBS-URL: https://build.opensuse.org/request/show/114876
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=97
2012-04-23 14:13:33 +00:00
Stephan Kulow
15b91769ec Accepting request 114876 from Base:System
- Implemented SUSE specific sysconfig numlock logic (bnc#746595). (forwarded request 114873 from sbrabec)

OBS-URL: https://build.opensuse.org/request/show/114876
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=97
2012-04-23 14:13:33 +00:00
527e0dcb0b Accepting request 114873 from home:sbrabec:branches:Base:System
- Implemented SUSE specific sysconfig numlock logic (bnc#746595).

OBS-URL: https://build.opensuse.org/request/show/114873
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=269
2012-04-20 15:46:37 +00:00
Stephan Kulow
c5e1adf1bb Accepting request 114575 from Base:System
- Add dbus-1 as BuildRequires to fix build.

OBS-URL: https://build.opensuse.org/request/show/114575
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=96
2012-04-20 13:20:18 +00:00
Stephan Kulow
79c9f0f604 Accepting request 114575 from Base:System
- Add dbus-1 as BuildRequires to fix build.

OBS-URL: https://build.opensuse.org/request/show/114575
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=96
2012-04-20 13:20:18 +00:00
ec4f068987 - Add dbus-1 as BuildRequires to fix build.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=267
2012-04-19 10:08:16 +00:00
Stephan Kulow
f0277f6a5f Accepting request 112342 from Base:System
- apply ppc patch to systemd-gtk too (fixes build) 

- apply ppc patch to systemd-gtk too (fixes build) (forwarded request 112340 from k0da)

OBS-URL: https://build.opensuse.org/request/show/112342
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=95
2012-04-03 15:38:59 +00:00
Stephan Kulow
ca5811d78d Accepting request 112342 from Base:System
- apply ppc patch to systemd-gtk too (fixes build) 

- apply ppc patch to systemd-gtk too (fixes build) (forwarded request 112340 from k0da)

OBS-URL: https://build.opensuse.org/request/show/112342
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=95
2012-04-03 15:38:59 +00:00
cdc04c5dbb Accepting request 112340 from home:k0da:ppc
- apply ppc patch to systemd-gtk too (fixes build) 

- apply ppc patch to systemd-gtk too (fixes build)

OBS-URL: https://build.opensuse.org/request/show/112340
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=265
2012-04-03 09:58:03 +00:00
Stephan Kulow
6a9e4f574b Accepting request 110375 from Base:System
- Add 0001-add-sparse-support-to-detect-endianness-bug.patch: fix
  endianness error, preventing journal to work properly on ppc.
- Add fixppc.patch: fix build and warnings on ppc.

OBS-URL: https://build.opensuse.org/request/show/110375
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=94
2012-03-23 11:11:16 +00:00
Stephan Kulow
7063139ce7 Accepting request 110375 from Base:System
- Add 0001-add-sparse-support-to-detect-endianness-bug.patch: fix
  endianness error, preventing journal to work properly on ppc.
- Add fixppc.patch: fix build and warnings on ppc.

OBS-URL: https://build.opensuse.org/request/show/110375
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=94
2012-03-23 11:11:16 +00:00
b3750d1f49 - Update fixppc.patch with upstream patches
- Add comments from upstream in
  0001-util-never-follow-symlinks-in-rm_rf_children.patch.
- Add logind-logout.patch: it should fix sudo / su with pam_systemd
  (bnc#746704).

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=263
2012-03-22 08:55:35 +00:00
729f3c2839 - Add 0001-add-sparse-support-to-detect-endianness-bug.patch: fix
endianness error, preventing journal to work properly on ppc.
- Add fixppc.patch: fix build and warnings on ppc.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=262
2012-03-21 12:59:57 +00:00
Stephan Kulow
42c3aa3ee4 Accepting request 109922 from Base:System
- Add 0001-util-never-follow-symlinks-in-rm_rf_children.patch: fix
  CVE-2012-1174 (bnc#752281).

- Update to version 43:
  + Support optional initialization of the machine ID from the KVM
    or container configured UUID.
  + Support immediate reboots with "systemctl reboot -ff"
  + Show /etc/os-release data in systemd-analyze output
  + Many bugfixes for the journal, including endianess fixes and
    ensuring that disk space enforcement works
  + non-UTF8 strings are refused if used in configuration and unit
    files.
  + Register Mimo USB Screens as suitable for automatic seat
    configuration
  + Reorder configuration file lookup order. /etc now always
    overrides /run.
  + manpages for journal utilities.
- Drop fix-c++-compat.patch, no-tmpfs-fsck.patch,
  systemd-journald-fix-endianess-bug.patch.
- Requires util-linux >= 2.21 (needed to fix fsck on tmpfs).


old: openSUSE:Factory/systemd
new: Base:System/systemd rev NoneIndex: systemd-gtk.changes
===================================================================
--- systemd-gtk.changes (revision 92)
+++ systemd-gtk.changes (revision 260)
@@ -1,4 +1,31 @@
 -------------------------------------------------------------------
+Mon Mar 19 10:11:23 UTC 2012 - fcrozat@suse.com
+
+- Add 0001-util-never-follow-symlinks-in-rm_rf_children.patch: fix
+  CVE-2012-1174 (bnc#752281).
+
+-------------------------------------------------------------------
+Fri Mar 16 09:21:54 UTC 2012 - fcrozat@suse.com
+
+- Update to version 43:
+  + Support optional initialization of the machine ID from the KVM
+    or container configured UUID.
+  + Support immediate reboots with "systemctl reboot -ff"
+  + Show /etc/os-release data in systemd-analyze output
+  + Many bugfixes for the journal, including endianess fixes and
+    ensuring that disk space enforcement works
+  + non-UTF8 strings are refused if used in configuration and unit
+    files.
+  + Register Mimo USB Screens as suitable for automatic seat
+    configuration
+  + Reorder configuration file lookup order. /etc now always
+    overrides /run.
+  + manpages for journal utilities.
+- Drop fix-c++-compat.patch, no-tmpfs-fsck.patch,
+  systemd-journald-fix-endianess-bug.patch.
+- Requires util-linux >= 2.21 (needed to fix fsck on tmpfs).
+
+-------------------------------------------------------------------
 Mon Mar 12 08:50:36 UTC 2012 - fcrozat@suse.com
 
 - Add fix-c++-compat.patch: fix C++ compatibility error in header.
Index: systemd-gtk.spec
===================================================================
--- systemd-gtk.spec (revision 92)
+++ systemd-gtk.spec (revision 260)
@@ -18,7 +18,7 @@
 
 Name:           systemd-gtk
 Url:            http://www.freedesktop.org/wiki/Software/systemd
-Version:        43
+Version:        44
 Release:        0
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  audit-devel
Index: systemd.changes
===================================================================
--- systemd.changes (revision 92)
+++ systemd.changes (revision 260)
@@ -1,4 +1,31 @@
 -------------------------------------------------------------------
+Mon Mar 19 10:11:23 UTC 2012 - fcrozat@suse.com
+
+- Add 0001-util-never-follow-symlinks-in-rm_rf_children.patch: fix
+  CVE-2012-1174 (bnc#752281).
+
+-------------------------------------------------------------------
+Fri Mar 16 09:21:54 UTC 2012 - fcrozat@suse.com
+
+- Update to version 43:
+  + Support optional initialization of the machine ID from the KVM
+    or container configured UUID.
+  + Support immediate reboots with "systemctl reboot -ff"
+  + Show /etc/os-release data in systemd-analyze output
+  + Many bugfixes for the journal, including endianess fixes and
+    ensuring that disk space enforcement works
+  + non-UTF8 strings are refused if used in configuration and unit
+    files.
+  + Register Mimo USB Screens as suitable for automatic seat
+    configuration
+  + Reorder configuration file lookup order. /etc now always
+    overrides /run.
+  + manpages for journal utilities.
+- Drop fix-c++-compat.patch, no-tmpfs-fsck.patch,
+  systemd-journald-fix-endianess-bug.patch.
+- Requires util-linux >= 2.21 (needed to fix fsck on tmpfs).
+
+-------------------------------------------------------------------
 Mon Mar 12 08:50:36 UTC 2012 - fcrozat@suse.com
 
 - Add fix-c++-compat.patch: fix C++ compatibility error in header.
Index: systemd.spec
===================================================================
--- systemd.spec (revision 92)
+++ systemd.spec (revision 260)
@@ -20,7 +20,7 @@
 
 Name:           systemd
 Url:            http://www.freedesktop.org/wiki/Software/systemd
-Version:        43
+Version:        44
 Release:        0
 Summary:        A System and Session Manager
 License:        GPL-2.0+
@@ -52,7 +52,7 @@
 Requires:       pam-config >= 0.79-5
 Requires:       systemd-presets-branding
 Requires:       udev >= 172
-Requires:       util-linux >= 2.19
+Requires:       util-linux >= 2.21
 Recommends:     dbus-1-python
 Conflicts:      filesystem < 11.5
 Conflicts:      mkinitrd < 2.7.0
@@ -86,9 +86,7 @@
 # Never add any patches to this package without the upstream commit id
 # in the patch. Any patches added here without a very good reason to make
 # an exception will be silently removed with the next version update.
-Patch21:        no-tmpfs-fsck.patch
-Patch40:        systemd-journald-fix-endianess-bug.patch
-Patch41:        fix-c++-compat.patch
+Patch40:        0001-util-never-follow-symlinks-in-rm_rf_children.patch
 
 %description
 Systemd is a system and service manager, compatible with SysV and LSB
@@ -139,7 +137,6 @@
 %patch15 -p1
 %patch16 -p1
 %patch19 -p1
-%patch21 -p1
 %patch22 -p1
 %patch23 -p1
 %patch24 -p1
@@ -149,7 +146,6 @@
 %patch38 -p1
 %patch39 -p1
 %patch40 -p1
-%patch41 -p1
 
 %build
 autoreconf -fiv
Index: 0001-util-never-follow-symlinks-in-rm_rf_children.patch
===================================================================
--- 0001-util-never-follow-symlinks-in-rm_rf_children.patch (added)
+++ 0001-util-never-follow-symlinks-in-rm_rf_children.patch (revision 260)
@@ -0,0 +1,32 @@
+From 5ebff5337594d690b322078c512eb222d34aaa82 Mon Sep 17 00:00:00 2001
+From: Michal Schmidt <mschmidt@redhat.com>
+Date: Fri, 2 Mar 2012 10:39:10 +0100
+Subject: [PATCH] util: never follow symlinks in rm_rf_children()
+
+The function checks if the entry is a directory before recursing, but
+there is a window between the check and the open, during which the
+directory could be replaced with a symlink.
+
+CVE-2012-1174
+https://bugzilla.redhat.com/show_bug.cgi?id=803358
+---
+ src/util.c |    3 ++-
+ 1 files changed, 2 insertions(+), 1 deletions(-)
+
+diff --git a/src/util.c b/src/util.c
+index 20cbc2b..dfc1dc6 100644
+--- a/src/util.c
++++ b/src/util.c
+@@ -3593,7 +3593,8 @@ static int rm_rf_children(int fd, bool only_dirs, bool honour_sticky) {
+                 if (is_dir) {
+                         int subdir_fd;
+ 
+-                        if ((subdir_fd = openat(fd, de->d_name, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC)) < 0) {
++                        subdir_fd = openat(fd, de->d_name, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC|O_NOFOLLOW);
++                        if (subdir_fd < 0) {
+                                 if (ret == 0 && errno != ENOENT)
+                                         ret = -errno;
+                                 continue;
+-- 
+1.7.7
+
Index: systemd-44.tar.xz
===================================================================
Binary files systemd-44.tar.xz (revision 260) added
Index: fix-c++-compat.patch
===================================================================
--- fix-c++-compat.patch (revision 92)
+++ fix-c++-compat.patch (deleted)
@@ -1,25 +0,0 @@
-From e09a9a35a1fdb4e849e63bdaf47d936c272b5e82 Mon Sep 17 00:00:00 2001
-From: Lennart Poettering <lennart@poettering.net>
-Date: Mon, 5 Mar 2012 15:16:10 +0100
-Subject: [PATCH] sd-login: c++ compatibility
-
----
- src/systemd/sd-login.h |    2 +-
- 1 files changed, 1 insertions(+), 1 deletions(-)
-
-diff --git a/src/systemd/sd-login.h b/src/systemd/sd-login.h
-index 2f3c90c..6e99cfc 100644
---- a/src/systemd/sd-login.h
-+++ b/src/systemd/sd-login.h
-@@ -94,7 +94,7 @@ int sd_session_get_service(const char *session, char **service);
- int sd_session_get_type(const char *session, char **type);
- 
- /* Determine the class of this session, i.e. one of "user", "greeter" or "lock-screen". */
--int sd_session_get_class(const char *session, char **class);
-+int sd_session_get_class(const char *session, char **clazz);
- 
- /* Determine the X11 display of this session. */
- int sd_session_get_display(const char *session, char **display);
--- 
-1.7.7
-
Index: no-tmpfs-fsck.patch
===================================================================
--- no-tmpfs-fsck.patch (revision 92)
+++ no-tmpfs-fsck.patch (deleted)
@@ -1,22 +0,0 @@
-From cca125c2758b48ba8f1afdc4b5751b104f0bd809 Mon Sep 17 00:00:00 2001
-From: Frederic Crozat <fcrozat@suse.com>
-Date: Thu, 27 Oct 2011 15:36:57 +0200
-Subject: [PATCH] mount: do not try to fsck tmpfs mountpoint with non-null
- passno.
-
----
- src/mount.c |    1 +
- 1 files changed, 1 insertions(+), 0 deletions(-)
-
-Index: systemd-39/src/mount.c
-===================================================================
---- systemd-39.orig/src/mount.c
-+++ systemd-39/src/mount.c
-@@ -428,6 +428,7 @@ static int mount_add_device_links(Mount
- 
-         if (p->passno > 0 &&
-             !mount_is_bind(p) &&
-+            !streq(p->fstype,"tmpfs") &&
-             UNIT(m)->manager->running_as == MANAGER_SYSTEM &&
-             !path_equal(m->where, "/")) {
-                 char *name;
Index: systemd-43.tar.xz
===================================================================
Binary files systemd-43.tar.xz (revision 92) deleted
Index: systemd-journald-fix-endianess-bug.patch
===================================================================
--- systemd-journald-fix-endianess-bug.patch (revision 92)
+++ systemd-journald-fix-endianess-bug.patch (deleted)
@@ -1,25 +0,0 @@
-From 8dc6b88fd2dad113d7dab776d623d7b301e4b754 Mon Sep 17 00:00:00 2001
-From: Dirk Eibach <eibach@gdsys.de>
-Date: Wed, 29 Feb 2012 12:45:46 +0100
-Subject: [PATCH] systemd-journald: fix endianess bug
-
----
- src/journal/journal-file.c |    2 +-
- 1 files changed, 1 insertions(+), 1 deletions(-)
-
-diff --git a/src/journal/journal-file.c b/src/journal/journal-file.c
-index 20ca3f6..275caea 100644
---- a/src/journal/journal-file.c
-+++ b/src/journal/journal-file.c
-@@ -238,7 +238,7 @@ static int journal_file_allocate(JournalFile *f, uint64_t offset, uint64_t size)
-         if (fstat(f->fd, &f->last_stat) < 0)
-                 return -errno;
- 
--        f->header->arena_size = new_size - htole64(f->header->arena_offset);
-+        f->header->arena_size = htole64(new_size - le64toh(f->header->arena_offset));
- 
-         return 0;
- }
--- 
-1.7.7
-

OBS-URL: https://build.opensuse.org/request/show/109922
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=93
2012-03-20 11:04:45 +00:00
Stephan Kulow
2222e2f7b5 Accepting request 109922 from Base:System
- Add 0001-util-never-follow-symlinks-in-rm_rf_children.patch: fix
  CVE-2012-1174 (bnc#752281).

- Update to version 43:
  + Support optional initialization of the machine ID from the KVM
    or container configured UUID.
  + Support immediate reboots with "systemctl reboot -ff"
  + Show /etc/os-release data in systemd-analyze output
  + Many bugfixes for the journal, including endianess fixes and
    ensuring that disk space enforcement works
  + non-UTF8 strings are refused if used in configuration and unit
    files.
  + Register Mimo USB Screens as suitable for automatic seat
    configuration
  + Reorder configuration file lookup order. /etc now always
    overrides /run.
  + manpages for journal utilities.
- Drop fix-c++-compat.patch, no-tmpfs-fsck.patch,
  systemd-journald-fix-endianess-bug.patch.
- Requires util-linux >= 2.21 (needed to fix fsck on tmpfs).


old: openSUSE:Factory/systemd
new: Base:System/systemd rev NoneIndex: systemd-gtk.changes
===================================================================
--- systemd-gtk.changes (revision 92)
+++ systemd-gtk.changes (revision 260)
@@ -1,4 +1,31 @@
 -------------------------------------------------------------------
+Mon Mar 19 10:11:23 UTC 2012 - fcrozat@suse.com
+
+- Add 0001-util-never-follow-symlinks-in-rm_rf_children.patch: fix
+  CVE-2012-1174 (bnc#752281).
+
+-------------------------------------------------------------------
+Fri Mar 16 09:21:54 UTC 2012 - fcrozat@suse.com
+
+- Update to version 43:
+  + Support optional initialization of the machine ID from the KVM
+    or container configured UUID.
+  + Support immediate reboots with "systemctl reboot -ff"
+  + Show /etc/os-release data in systemd-analyze output
+  + Many bugfixes for the journal, including endianess fixes and
+    ensuring that disk space enforcement works
+  + non-UTF8 strings are refused if used in configuration and unit
+    files.
+  + Register Mimo USB Screens as suitable for automatic seat
+    configuration
+  + Reorder configuration file lookup order. /etc now always
+    overrides /run.
+  + manpages for journal utilities.
+- Drop fix-c++-compat.patch, no-tmpfs-fsck.patch,
+  systemd-journald-fix-endianess-bug.patch.
+- Requires util-linux >= 2.21 (needed to fix fsck on tmpfs).
+
+-------------------------------------------------------------------
 Mon Mar 12 08:50:36 UTC 2012 - fcrozat@suse.com
 
 - Add fix-c++-compat.patch: fix C++ compatibility error in header.
Index: systemd-gtk.spec
===================================================================
--- systemd-gtk.spec (revision 92)
+++ systemd-gtk.spec (revision 260)
@@ -18,7 +18,7 @@
 
 Name:           systemd-gtk
 Url:            http://www.freedesktop.org/wiki/Software/systemd
-Version:        43
+Version:        44
 Release:        0
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  audit-devel
Index: systemd.changes
===================================================================
--- systemd.changes (revision 92)
+++ systemd.changes (revision 260)
@@ -1,4 +1,31 @@
 -------------------------------------------------------------------
+Mon Mar 19 10:11:23 UTC 2012 - fcrozat@suse.com
+
+- Add 0001-util-never-follow-symlinks-in-rm_rf_children.patch: fix
+  CVE-2012-1174 (bnc#752281).
+
+-------------------------------------------------------------------
+Fri Mar 16 09:21:54 UTC 2012 - fcrozat@suse.com
+
+- Update to version 43:
+  + Support optional initialization of the machine ID from the KVM
+    or container configured UUID.
+  + Support immediate reboots with "systemctl reboot -ff"
+  + Show /etc/os-release data in systemd-analyze output
+  + Many bugfixes for the journal, including endianess fixes and
+    ensuring that disk space enforcement works
+  + non-UTF8 strings are refused if used in configuration and unit
+    files.
+  + Register Mimo USB Screens as suitable for automatic seat
+    configuration
+  + Reorder configuration file lookup order. /etc now always
+    overrides /run.
+  + manpages for journal utilities.
+- Drop fix-c++-compat.patch, no-tmpfs-fsck.patch,
+  systemd-journald-fix-endianess-bug.patch.
+- Requires util-linux >= 2.21 (needed to fix fsck on tmpfs).
+
+-------------------------------------------------------------------
 Mon Mar 12 08:50:36 UTC 2012 - fcrozat@suse.com
 
 - Add fix-c++-compat.patch: fix C++ compatibility error in header.
Index: systemd.spec
===================================================================
--- systemd.spec (revision 92)
+++ systemd.spec (revision 260)
@@ -20,7 +20,7 @@
 
 Name:           systemd
 Url:            http://www.freedesktop.org/wiki/Software/systemd
-Version:        43
+Version:        44
 Release:        0
 Summary:        A System and Session Manager
 License:        GPL-2.0+
@@ -52,7 +52,7 @@
 Requires:       pam-config >= 0.79-5
 Requires:       systemd-presets-branding
 Requires:       udev >= 172
-Requires:       util-linux >= 2.19
+Requires:       util-linux >= 2.21
 Recommends:     dbus-1-python
 Conflicts:      filesystem < 11.5
 Conflicts:      mkinitrd < 2.7.0
@@ -86,9 +86,7 @@
 # Never add any patches to this package without the upstream commit id
 # in the patch. Any patches added here without a very good reason to make
 # an exception will be silently removed with the next version update.
-Patch21:        no-tmpfs-fsck.patch
-Patch40:        systemd-journald-fix-endianess-bug.patch
-Patch41:        fix-c++-compat.patch
+Patch40:        0001-util-never-follow-symlinks-in-rm_rf_children.patch
 
 %description
 Systemd is a system and service manager, compatible with SysV and LSB
@@ -139,7 +137,6 @@
 %patch15 -p1
 %patch16 -p1
 %patch19 -p1
-%patch21 -p1
 %patch22 -p1
 %patch23 -p1
 %patch24 -p1
@@ -149,7 +146,6 @@
 %patch38 -p1
 %patch39 -p1
 %patch40 -p1
-%patch41 -p1
 
 %build
 autoreconf -fiv
Index: 0001-util-never-follow-symlinks-in-rm_rf_children.patch
===================================================================
--- 0001-util-never-follow-symlinks-in-rm_rf_children.patch (added)
+++ 0001-util-never-follow-symlinks-in-rm_rf_children.patch (revision 260)
@@ -0,0 +1,32 @@
+From 5ebff5337594d690b322078c512eb222d34aaa82 Mon Sep 17 00:00:00 2001
+From: Michal Schmidt <mschmidt@redhat.com>
+Date: Fri, 2 Mar 2012 10:39:10 +0100
+Subject: [PATCH] util: never follow symlinks in rm_rf_children()
+
+The function checks if the entry is a directory before recursing, but
+there is a window between the check and the open, during which the
+directory could be replaced with a symlink.
+
+CVE-2012-1174
+https://bugzilla.redhat.com/show_bug.cgi?id=803358
+---
+ src/util.c |    3 ++-
+ 1 files changed, 2 insertions(+), 1 deletions(-)
+
+diff --git a/src/util.c b/src/util.c
+index 20cbc2b..dfc1dc6 100644
+--- a/src/util.c
++++ b/src/util.c
+@@ -3593,7 +3593,8 @@ static int rm_rf_children(int fd, bool only_dirs, bool honour_sticky) {
+                 if (is_dir) {
+                         int subdir_fd;
+ 
+-                        if ((subdir_fd = openat(fd, de->d_name, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC)) < 0) {
++                        subdir_fd = openat(fd, de->d_name, O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC|O_NOFOLLOW);
++                        if (subdir_fd < 0) {
+                                 if (ret == 0 && errno != ENOENT)
+                                         ret = -errno;
+                                 continue;
+-- 
+1.7.7
+
Index: systemd-44.tar.xz
===================================================================
Binary files systemd-44.tar.xz (revision 260) added
Index: fix-c++-compat.patch
===================================================================
--- fix-c++-compat.patch (revision 92)
+++ fix-c++-compat.patch (deleted)
@@ -1,25 +0,0 @@
-From e09a9a35a1fdb4e849e63bdaf47d936c272b5e82 Mon Sep 17 00:00:00 2001
-From: Lennart Poettering <lennart@poettering.net>
-Date: Mon, 5 Mar 2012 15:16:10 +0100
-Subject: [PATCH] sd-login: c++ compatibility
-
----
- src/systemd/sd-login.h |    2 +-
- 1 files changed, 1 insertions(+), 1 deletions(-)
-
-diff --git a/src/systemd/sd-login.h b/src/systemd/sd-login.h
-index 2f3c90c..6e99cfc 100644
---- a/src/systemd/sd-login.h
-+++ b/src/systemd/sd-login.h
-@@ -94,7 +94,7 @@ int sd_session_get_service(const char *session, char **service);
- int sd_session_get_type(const char *session, char **type);
- 
- /* Determine the class of this session, i.e. one of "user", "greeter" or "lock-screen". */
--int sd_session_get_class(const char *session, char **class);
-+int sd_session_get_class(const char *session, char **clazz);
- 
- /* Determine the X11 display of this session. */
- int sd_session_get_display(const char *session, char **display);
--- 
-1.7.7
-
Index: no-tmpfs-fsck.patch
===================================================================
--- no-tmpfs-fsck.patch (revision 92)
+++ no-tmpfs-fsck.patch (deleted)
@@ -1,22 +0,0 @@
-From cca125c2758b48ba8f1afdc4b5751b104f0bd809 Mon Sep 17 00:00:00 2001
-From: Frederic Crozat <fcrozat@suse.com>
-Date: Thu, 27 Oct 2011 15:36:57 +0200
-Subject: [PATCH] mount: do not try to fsck tmpfs mountpoint with non-null
- passno.
-
----
- src/mount.c |    1 +
- 1 files changed, 1 insertions(+), 0 deletions(-)
-
-Index: systemd-39/src/mount.c
-===================================================================
---- systemd-39.orig/src/mount.c
-+++ systemd-39/src/mount.c
-@@ -428,6 +428,7 @@ static int mount_add_device_links(Mount
- 
-         if (p->passno > 0 &&
-             !mount_is_bind(p) &&
-+            !streq(p->fstype,"tmpfs") &&
-             UNIT(m)->manager->running_as == MANAGER_SYSTEM &&
-             !path_equal(m->where, "/")) {
-                 char *name;
Index: systemd-43.tar.xz
===================================================================
Binary files systemd-43.tar.xz (revision 92) deleted
Index: systemd-journald-fix-endianess-bug.patch
===================================================================
--- systemd-journald-fix-endianess-bug.patch (revision 92)
+++ systemd-journald-fix-endianess-bug.patch (deleted)
@@ -1,25 +0,0 @@
-From 8dc6b88fd2dad113d7dab776d623d7b301e4b754 Mon Sep 17 00:00:00 2001
-From: Dirk Eibach <eibach@gdsys.de>
-Date: Wed, 29 Feb 2012 12:45:46 +0100
-Subject: [PATCH] systemd-journald: fix endianess bug
-
----
- src/journal/journal-file.c |    2 +-
- 1 files changed, 1 insertions(+), 1 deletions(-)
-
-diff --git a/src/journal/journal-file.c b/src/journal/journal-file.c
-index 20ca3f6..275caea 100644
---- a/src/journal/journal-file.c
-+++ b/src/journal/journal-file.c
-@@ -238,7 +238,7 @@ static int journal_file_allocate(JournalFile *f, uint64_t offset, uint64_t size)
-         if (fstat(f->fd, &f->last_stat) < 0)
-                 return -errno;
- 
--        f->header->arena_size = new_size - htole64(f->header->arena_offset);
-+        f->header->arena_size = htole64(new_size - le64toh(f->header->arena_offset));
- 
-         return 0;
- }
--- 
-1.7.7
-

OBS-URL: https://build.opensuse.org/request/show/109922
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=93
2012-03-20 11:04:45 +00:00
c83a92ecbe - Add 0001-util-never-follow-symlinks-in-rm_rf_children.patch: fix
CVE-2012-1174 (bnc#752281).

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=260
2012-03-19 10:27:58 +00:00
1afd3235d3 - Update to version 43:
+ Support optional initialization of the machine ID from the KVM
    or container configured UUID.
  + Support immediate reboots with "systemctl reboot -ff"
  + Show /etc/os-release data in systemd-analyze output
  + Many bugfixes for the journal, including endianess fixes and
    ensuring that disk space enforcement works
  + non-UTF8 strings are refused if used in configuration and unit
    files.
  + Register Mimo USB Screens as suitable for automatic seat
    configuration
  + Reorder configuration file lookup order. /etc now always
    overrides /run.
  + manpages for journal utilities.
- Drop fix-c++-compat.patch, no-tmpfs-fsck.patch,
  systemd-journald-fix-endianess-bug.patch.
- Requires util-linux >= 2.21 (needed to fix fsck on tmpfs).

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=259
2012-03-16 15:20:47 +00:00
Stephan Kulow
0d5cfb1fdd Accepting request 108835 from Base:System
- Add fix-c++-compat.patch: fix C++ compatibility error in header.

OBS-URL: https://build.opensuse.org/request/show/108835
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=92
2012-03-12 19:17:08 +00:00
Stephan Kulow
1a31b163ba Accepting request 108835 from Base:System
- Add fix-c++-compat.patch: fix C++ compatibility error in header.

OBS-URL: https://build.opensuse.org/request/show/108835
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=92
2012-03-12 19:17:08 +00:00
1aa5ade161 - Add fix-c++-compat.patch: fix C++ compatibility error in header.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=257
2012-03-12 09:20:01 +00:00
Stephan Kulow
a5f0fac533 Accepting request 108532 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/108532
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=91
2012-03-09 20:28:31 +00:00
Stephan Kulow
6861897da1 Accepting request 108532 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/108532
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=91
2012-03-09 20:28:31 +00:00
Stephan Kulow
a227ac398f Accepting request 106439 from Base:System
Added a patch to correct the path to the plymouth binaries (changed to /usr/...) and also to make the two plymouth-quit*.services conflicting with the graphical.target. This would quit plymouth when running in runlevel 3 (non-graphical), but leaves the killing of plymouth up to the displaymanager when running in the graphical target. (forwarded request 106382 from tittiatcoke)

OBS-URL: https://build.opensuse.org/request/show/106439
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=90
2012-03-07 19:10:29 +00:00
Stephan Kulow
3fcc55196d Accepting request 106439 from Base:System
Added a patch to correct the path to the plymouth binaries (changed to /usr/...) and also to make the two plymouth-quit*.services conflicting with the graphical.target. This would quit plymouth when running in runlevel 3 (non-graphical), but leaves the killing of plymouth up to the displaymanager when running in the graphical target. (forwarded request 106382 from tittiatcoke)

OBS-URL: https://build.opensuse.org/request/show/106439
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=90
2012-03-07 19:10:29 +00:00
5d1f930c45 - Add systemd-journald-fix-endianess-bug.patch: fix journald not
starting on ppc architecture.
- add .changes for plymouth fixes

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=254
2012-02-29 13:27:30 +00:00
c9ee05798f Accepting request 106382 from home:tittiatcoke
Added a patch to correct the path to the plymouth binaries (changed to /usr/...) and also to make the two plymouth-quit*.services conflicting with the graphical.target. This would quit plymouth when running in runlevel 3 (non-graphical), but leaves the killing of plymouth up to the displaymanager when running in the graphical target.

OBS-URL: https://build.opensuse.org/request/show/106382
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=253
2012-02-22 11:37:23 +00:00
e6f30ccfa0 - Remove rsyslog listen.conf, handled directly by rsyslog now
(bnc#747871).

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=252
2012-02-21 09:10:49 +00:00
Stephan Kulow
8154ca0ae4 Accepting request 106010 from Base:System
- Use pkgconfig symbols for BuildRequires and specify version
- Add missing kmod BuildRequires for systemd-gtk (forwarded request 105839 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/106010
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=89
2012-02-21 06:32:50 +00:00
Stephan Kulow
996a97b28d Accepting request 106010 from Base:System
- Use pkgconfig symbols for BuildRequires and specify version
- Add missing kmod BuildRequires for systemd-gtk (forwarded request 105839 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/106010
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=89
2012-02-21 06:32:50 +00:00
590745bcff - Update to version 43:
+ requires /etc/os-release, support for /etc/SuSE-release is no
    longer present.
  + Track class of PAM logins to distinguish greeters from normal
    user logins.
  + Various bug fixes.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=250
2012-02-20 13:58:44 +00:00
a5345e44b9 Accepting request 105839 from home:jengelh:branches:Base:System
- Use pkgconfig symbols for BuildRequires and specify version
- Add missing kmod BuildRequires for systemd-gtk

OBS-URL: https://build.opensuse.org/request/show/105839
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=249
2012-02-20 10:55:29 +00:00
06fb3180db Accepting request 105639 from home:tittiatcoke
Enable plymouth integration

OBS-URL: https://build.opensuse.org/request/show/105639
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=248
2012-02-17 09:33:25 +00:00