- Move fix for permission set on /var/lib/systemd/linger/* (no functional changes)
Move that part after the fix on timer timestamp files otherwise the
comment doesn't make sense.
- Import commit 028fd9b60580976dffb09b3576a2b652ee35137c
cc2ca55ff build-sys: do not install ctrl-alt-del.target symlink twice
ececae77a device: Avoid calling unit_free(NULL) in device setup logic (#4748)
- Ship systemd-resolved but it's disabled by default (bsc#1018387)
The NSS plugin will also be disabled, users need to enable it
manually.
OBS-URL: https://build.opensuse.org/request/show/454455
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=968
- Don't ship ldconfig.service anymore
This service was introduced to support stateless systems that
support offline /usr updates properly.
AFAIK we don't support any such system for now, so disable it. If
it's wrong it's easy enough to restore it back.
Related to bsc#1019470.
- Be more consistent with indentation (*no* functional changes)
Indentation should use 8 spaces now (no tabs).
- Import commit 2559bc0c076b58f0a649056e79ca90fe5f1d556c
9c4a759ab systemctl: 'show' don't exit with a failure status if the requested property does not exist [SUSE] (bsc#1021062)
f9194193b systemctl: remove duplicate entries showed by list-dependencies (#5049) (bsc#1012266)
2a6653335 rule: don't automatically online standby memory on s390x (bsc#997682)
- Fix permission set on /var/lib/systemd/linger/*
Those files are created by logind which run with umask(0022), so
they are not world writable and shouldn't be affected by
bsc#1020601. But it's cleaner to not let files forever with their
setuid bit set for no good reason.
- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
This change makes sure to fix the permissions of the timestamp files
which could have been created by an affected version of systemd.
Local unprivileged users could have run arbitrary code as root if
systemd previously created world writable suid root files such as
permanent timer stamp files.
OBS-URL: https://build.opensuse.org/request/show/452442
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=967
- Import commit 3edb876e3b80437a95502aa5d31d454606ea94bd
27b544224 core: make sure to not call device_is_bound_by_mounts() when dev is null (#5033) (bsc#1018399)
- Use the %{resolved} build conditional for the nss-resolve subpackage
- /usr/bin/systemd-resolve was missing from the filelist
- Silent warnings emitted when udev socket units are restarted during package upgrade (bsc#1018214)
OBS-URL: https://build.opensuse.org/request/show/449530
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=966
- Really include legacy kbd maps in kbd-model-map (bsc#1015515)
Instead of fix-machines-subvol-for-rollbacks.sh...
- Enable lz4 (which becomes the default)
It's much faster than xz and thus should be more appropriate to
compress journals and coredumps.
The LZ4 logic is now officially supported and no longer considered
experimental.
The new frame api was released in v125.
OBS-URL: https://build.opensuse.org/request/show/445798
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=964
- Good bye compatlibs support
There's no longer need for enabling/disabling the support for the
compatlibs as it's been dropped from the source code.
- Drop /usr/lib/systemd/libsystemd-shared-%{version}.so from the 32bit package
This shared library is not for public use, and is neither API nor
ABI stable, but is likely to change with every new released
update. Only systemd binaries are supposed to link against it.
This also prevents from the 32bit package to conflit with the 64bit
one if this lib was installed by both packages.
- Upgrade to v232, commit c5c3445825981e2a5c3ed71214127d5b1b9de802:
- Dropped backported commits which has been merged
- Forward-port Suse specific patches
- Added --disable-lto option to ./configure
- Added systemd-mount
- Removed in %file /usr/lib/systemd/user/*.socket: since
798c486fbcdce3346cd86 units/systemd-bus-proxyd.socket has been
removed.
- Removed in %file %{_sysconfdir}/systemd/bootchart.conf
since commit 232c84b2d22f2d96982b3c bootchart is not part of systemd
anymore.
- Backward compat libs have been disabled since it's been dropped from
the source code.
- Added /usr/bin/systemd-socket-activate in %file
- Added --without-kill-user-processes ./configure option
- Bump libseccomp build require (>= 2.3.1) as described in README
- Specifiy version of libmount as required in the README
OBS-URL: https://build.opensuse.org/request/show/444813
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=963
- specfile: conflict systemd-bash-completion and systemd-mini-bash-completion
Otherwise the build system detects that systemd-bash-completion and
its mini variant are conflicting at files level even though those
packages can't be installed on the same system.
- specfile: clean up nss-* plugins descriptions and drop
nss-myhostname-config script for now.
Currently /etc/nsswitch.conf is supposed to be edited by the
sysadmin to enable the modules. However for some reasons only
nss-myhostname is removed from the conf file when the corresponding
package is uninstalled. This is inconsistent so let's remove it.
Actually I'm wondering if we shouldn't make those NSS plugins part
of the main package and get rid of all those sub-packages...
- specfile: remove old comments and unneeded sed command
- specfile: no need to create systemd-update-utmp-runlevel.service symlinks anymore
The symlinks in /usr/lib/systemd/system/<target>.target.wants/systemd-update-utmp-runlevel.service
are created in Makefile.am since commit d5d8429a12c4b1.
'reboot' and 'poweroff' targets initially had the symlinks but
there's not point since the latter conflicts shutdown.target whereas
the 2 targets pull it in.
See: https://github.com/systemd/systemd/pull/4429
- specfile: remove the following warnings:
[ 256s] warning: File listed twice: /usr/lib/systemd/system/dbus.target.wants
[ 256s] warning: File listed twice: /usr/lib/systemd/system/default.target.wants (forwarded request 440233 from fbui)
OBS-URL: https://build.opensuse.org/request/show/440243
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=242
- specfile: conflict systemd-bash-completion and systemd-mini-bash-completion
Otherwise the build system detects that systemd-bash-completion and
its mini variant are conflicting at files level even though those
packages can't be installed on the same system.
- specfile: clean up nss-* plugins descriptions and drop
nss-myhostname-config script for now.
Currently /etc/nsswitch.conf is supposed to be edited by the
sysadmin to enable the modules. However for some reasons only
nss-myhostname is removed from the conf file when the corresponding
package is uninstalled. This is inconsistent so let's remove it.
Actually I'm wondering if we shouldn't make those NSS plugins part
of the main package and get rid of all those sub-packages...
- specfile: remove old comments and unneeded sed command
- specfile: no need to create systemd-update-utmp-runlevel.service symlinks anymore
The symlinks in /usr/lib/systemd/system/<target>.target.wants/systemd-update-utmp-runlevel.service
are created in Makefile.am since commit d5d8429a12c4b1.
'reboot' and 'poweroff' targets initially had the symlinks but
there's not point since the latter conflicts shutdown.target whereas
the 2 targets pull it in.
See: https://github.com/systemd/systemd/pull/4429
- specfile: remove the following warnings:
[ 256s] warning: File listed twice: /usr/lib/systemd/system/dbus.target.wants
[ 256s] warning: File listed twice: /usr/lib/systemd/system/default.target.wants (forwarded request 440233 from fbui)
OBS-URL: https://build.opensuse.org/request/show/440243
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=242
- specfile: conflict systemd-bash-completion and systemd-mini-bash-completion
Otherwise the build system detects that systemd-bash-completion and
its mini variant are conflicting at files level even though those
packages can't be installed on the same system.
- specfile: clean up nss-* plugins descriptions and drop
nss-myhostname-config script for now.
Currently /etc/nsswitch.conf is supposed to be edited by the
sysadmin to enable the modules. However for some reasons only
nss-myhostname is removed from the conf file when the corresponding
package is uninstalled. This is inconsistent so let's remove it.
Actually I'm wondering if we shouldn't make those NSS plugins part
of the main package and get rid of all those sub-packages...
- specfile: remove old comments and unneeded sed command
- specfile: no need to create systemd-update-utmp-runlevel.service symlinks anymore
The symlinks in /usr/lib/systemd/system/<target>.target.wants/systemd-update-utmp-runlevel.service
are created in Makefile.am since commit d5d8429a12c4b1.
'reboot' and 'poweroff' targets initially had the symlinks but
there's not point since the latter conflicts shutdown.target whereas
the 2 targets pull it in.
See: https://github.com/systemd/systemd/pull/4429
- specfile: remove the following warnings:
[ 256s] warning: File listed twice: /usr/lib/systemd/system/dbus.target.wants
[ 256s] warning: File listed twice: /usr/lib/systemd/system/default.target.wants
OBS-URL: https://build.opensuse.org/request/show/440233
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=961
- Own a couple of directories even if they don't belong to systemd
otherwise the build system will complain.
Some directories (owned by others packages) are simply used by
systemd to ship some scripts or config files to customize others
*optional* components. Since thos components are not build required
by systemd those directories are not owned by any packages and the
BS complains...
- Import commit
15ea716 journal-remote: change owner of /var/log/journal/remote and create /var/lib/systemd/journal-upload (bsc#1006372)
- %sysusers_create and %tmpfiles_create must be called in %post
Calling %pre is broken since the respective conf files are not yet
installed.
- %{_libexecdir}/{tmpfiles.d,sysusers.d}/systemd-remote.conf are
part of systemd-journal-remote package (only).
- systemd-journal-{gatewayd,remote,upload} units are only part of
"systemd-journal-remote" package.
So exclude them from the main package.
- Import commit a1c145e6ad6588555dca64402f9103fb1e02b1a0
7f34037 man: explain that *KeyIgnoreInhibited only apply to a subset of locks
df5798b Revert "logind: really handle *KeyIgnoreInhibited options in logind.conf" (bsc#1001790 bsc#1005404)
f79fee7 Revert "kbd-model-map: add more mappings offered by Yast"
3760c10 manager: tighten incoming notification message checks
d6efd71 core: only warn on short reads on signal fd
6eebd91 manager: be stricter with incomining notifications, warn properly about too large ones
OBS-URL: https://build.opensuse.org/request/show/437403
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=959
- Import a better fix from upstream for bsc#1001765
- Added:
0001-pid1-more-informative-error-message-for-ignored-noti.patch
0001-pid1-process-zero-length-notification-messages-again.patch
- Updated (no code changes, only patch metadata)
0001-If-the-notification-message-length-is-0-ignore-the-m.patch
0001-pid1-don-t-return-any-error-in-manager_dispatch_noti.patch
- Re add back "udev: don't require nsserv and fillup"
Did this in the wrong project... it was a complicated day today ;)
- Added 2 patches to fix bsc#1001765
0001-If-the-notification-message-length-is-0-ignore-the-m.patch
0001-pid1-don-t-return-any-error-in-manager_dispatch_noti.patch
- Revert "udev: don't require nsserv and fillup"
It's been judged too late for being part of SLE12 final release.
Nevertheless it's part of Factory and will be reintroduced after the
final release is out (ie through an update).
- systemd-sysv-convert: make sure that
/var/lib/systemd/sysv-convert/database is always initialized (bsc#982211)
If "--save" command was used and the sysv init script wasn't enabled
at all the database file wasn't created at all. This makes the
subsequent call to "--apply" fail even though this should not
considered as an error.
- Added patches to fix journal with FSS protection enabled (bsc#1000435)
0001-journal-fix-HMAC-calculation-when-appending-a-data-o.patch
0001-journal-set-STATE_ARCHIVED-as-part-of-offlining-2740.patch
OBS-URL: https://build.opensuse.org/request/show/431464
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=241
- Import a better fix from upstream for bsc#1001765
- Added:
0001-pid1-more-informative-error-message-for-ignored-noti.patch
0001-pid1-process-zero-length-notification-messages-again.patch
- Updated (no code changes, only patch metadata)
0001-If-the-notification-message-length-is-0-ignore-the-m.patch
0001-pid1-don-t-return-any-error-in-manager_dispatch_noti.patch
- Re add back "udev: don't require nsserv and fillup"
Did this in the wrong project... it was a complicated day today ;)
- Added 2 patches to fix bsc#1001765
0001-If-the-notification-message-length-is-0-ignore-the-m.patch
0001-pid1-don-t-return-any-error-in-manager_dispatch_noti.patch
- Revert "udev: don't require nsserv and fillup"
It's been judged too late for being part of SLE12 final release.
Nevertheless it's part of Factory and will be reintroduced after the
final release is out (ie through an update).
- systemd-sysv-convert: make sure that
/var/lib/systemd/sysv-convert/database is always initialized (bsc#982211)
If "--save" command was used and the sysv init script wasn't enabled
at all the database file wasn't created at all. This makes the
subsequent call to "--apply" fail even though this should not
considered as an error.
- Added patches to fix journal with FSS protection enabled (bsc#1000435)
0001-journal-fix-HMAC-calculation-when-appending-a-data-o.patch
0001-journal-set-STATE_ARCHIVED-as-part-of-offlining-2740.patch
OBS-URL: https://build.opensuse.org/request/show/431464
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=241
is always initialized (bsc#982211)
If "--save" command was used and the sysv init script wasn't enabled
at all, the database file wasn't created at all. This makes the
subsequent call to "--apply" fail even though it's a valid scenario.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=954
Split systemctl and tmpfiles into a separate package
The backstory is that %{?systemd_requires} in all kinds of .spec files
pulls in systemd, which is not always desirable. Upstream has come up
with some solution where they make use of a rpm tag (available in
4.10+) that is only about ordering - cf
2424b6bd71
. The commit explicitly states though, that "installing systemd
afterwards [...], does not result in the same outcome."
With this proposed change to our systemd.spec, we could have the cake
and eat it too:
* symlinks in /etc/systemd can be created at install time, permitting
the administrator to install/use systemd as init system in a container
at a later date (enabling "same outcome")
* mandatory tmp directories will be created at install time already,
so the administrator does not have to run `tmpfiles --root=/mycontainer`
before launching the (systemd-less) container.
* the only protruding dependency of systemctl.rpm is libgcrypt20,
i.e. comparatively light.
* the OrderWithRequires feature can be done independently
Sounds like a plan? @mpluskal too #boo980389
OBS-URL: https://build.opensuse.org/request/show/415263
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=942
