- Import commit a6d31d1a02c2718a064bbbc40d003668acf72769
bb6e2f7906 pid1: update manager settings on reload too (bsc#1163109)
e9e8907b06 watchdog: reduce watchdog pings in timeout interval
385a8f9846 udev: rename the persistent link for ATA devices (bsc#1164538)
66018a12ae tmpfiles: remove unnecessary assert (bsc#1171145)
- Disable bump of /proc/sys/fs/nr-open
Hopefully a _temporary_ workaround until bsc#1165351 is fixed
otherwise user instances crashes the system is using NIS (and the
nscd cache is empty).
OBS-URL: https://build.opensuse.org/request/show/809896
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1100
- Drop legacy /sbin/{udevd,udevadm) symlinks hopefully for good
Since boo#1160890 has been fixed since a couple of months now.
- Drop content of /usr/share/factory/ (bsc#1170146)
systemd ships several files in /usr/share/factory/etc that are
copied to /etc in case those files are missing there. Unfortunately
the content does not match the openSUSE defaults.
- Drop most of the tmpfiles that deal with generic paths (bsc#1078466)
They are problematic because some of them conflict with SUSE
defaults. Therefore it seems better to let the revelant packages
owning these paths to provide their own definitions instead.
OBS-URL: https://build.opensuse.org/request/show/798553
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1097
- Import commit 08cd65ac385c884ed6e4bd71128a0796f56ecd17 (include merge of v245.5)
1ceedf8535 meson: fix build of udev 'path_id_compat' builtin with meson 0.54
e61569d4a9 pid1: by default make user units inherit their umask from the user manager (bsc#1162698)
64fdacd5f1 user-util: rework how we validate user names (bsc#1170272)
[...]
- Drop 0001-meson-fix-build-of-udev-path_id_compat-builtin-with-.patch
It's been merged in 'openSUSE-Factory' branch otherwise this branch
won't build anymore since meson has been upgraded to version 0.54 in
Factory.
OBS-URL: https://build.opensuse.org/request/show/796731
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1094
- Import commit 31f82b39c811b4f731c80c2c2e7c56a0ca924a5b (merge v245.2)
d1d3f2aa15 docs: Add syntax for templated units to systemd.preset man page
3c69813c69 man: add a tiny bit of markup
bf595e788c home: fix segfault when parsing arguments in PAM module
e110f4dacb test: wait a bit after starting the test service
e8df08cfdb fix journalctl regression (#15099)
eb3a38cc23 NEWS: add late note about job trimming issue
405f0fcfdd systemctl: hide the 'glyph' column when --no-legend is requested
1c7de81f89 format-table: allow hiding a specific column
b7f2308bda core: transition to FINAL_SIGTERM state after ExecStopPost=
2867dfbf70 journalctl: show duplicate entries if they are from the same file (#14898)
[...]
Added 0001-Revert-job-Don-t-mark-as-redundant-if-deps-are-relev.patch:
upstream commit 097537f07a2fab3cb73aef7bc59f2a66aa93f533 has been
reverted for now on as it introduced a behavior change which has
impacted plymouth at least.
OBS-URL: https://build.opensuse.org/request/show/787500
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1091
- Import commit f8adabc2b1f3e3ad150e7a3bfa88341eda5a8a57 (merge v244.2)
77c04ce5c2 hwdb: update to v245-rc1
b4eb884824 Fix typo in function name
e2d4cb9843 polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it
83bfc0d8dd sd-bus: introduce API for re-enqueuing incoming messages
5926f9f172 polkit: use structured initialization
0697d0d972 polkit: on async pk requests, re-validate action/details
2589995acd polkit: reuse some common bus message appending code
5b2442d5c3 bus-polkit: rename return error parameter to ret_error
0a19ff7004 shared: split out polkit stuff from bus-util.c → bus-polkit.c
1325dfb577 test: adapt to the new capsh format
3538fafb47 meson: update efi path detection to gnu-efi-3.0.11
3034855a5b presets: "disable" all passive targets by default
c2e3046819 shared/sysctl-util: normalize repeated slashes or dots to a single value
6f4364046f dhcp6: do not use T1 and T2 longer than one provided by the lease
0ed6cda28d network: fix implicit type conversion warning by GCC-10
f6a5c02d26 bootspec: parse random-seed-mode line in loader.conf
ddc5dca8a7 sd-boot: fix typo
2bbbe9ae41 test: Synchronize journal before reading from it
072485d661 sd-bus: fix introspection bug in signal parameter names
80af3cf5e3 efi: fix build.
[...]
- Use suse.pool.ntp.org server pool on SLE (jsc#SLE-7683)
- Drop scripts-udev-convert-lib-udev-path.sh
Nobody should need it these days.
OBS-URL: https://build.opensuse.org/request/show/770659
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1085
- Temporarily restore /sbin/{udevd,udevadm) obsolete symlinks
They're restored until YaST stop using them (see boo#1160890)
- Import commit 8254b8d9646f3e0f5f8057d1ffb5d6c20f079aaa (merge v244.1)
639dc9f4bf network: set ipv6 mtu after link-up or device mtu change
cbced49daa man: fix typo in net-naming-scheme man page
7dd04c99b0 network: tc: drop unused element
bf4b7d07ba man: fix typos (#14304)
1ba2e7a730 ipv4ll: do not reset conflict counter on restart
49806bb310 macro: avoid subtraction overflow in ALIGN_POWER2()
c4c1600689 test-network: add a test case for SendOption=
6f15b45949 network: fix segfault in parsing SendOption=
2e531b830d seccomp: real syscall numbers are >= 0
f7616ed52b network: fix copy and paste mistake
e8b53300c4 network: do not drop foreign config if interface is in initialized state
00f05813bf seccomp: mmap test results depend on kernel/libseccomp/glibc
4de1909e61 seccomp: use per arch shmat_syscall
d83010521d seccomp: ensure rules are loaded in seccomp_memory_deny_write_execute
2c6568221a seccomp: fix multiplexed system calls
bcf0aa02bf Fix typo (duplicate "or")
96d7083c54 network: if /sys is rw, then udev should be around
e874419902 nspawn: do not fail if udev is not running
29c9144655 Create parent directories when creating systemd-private subdirs
9cbb8b5254 network: do not return error but return UINT64_MAX if speed meter is disabled
c08429ae33 core: swap priority can be negative
f25c0be335 networkctl: fix to show BSSID
65fd2fce59 systemctl: enhance message about kexec missing kernel
bdd0af5f81 Fixup typo in NEWS
OBS-URL: https://build.opensuse.org/request/show/764320
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1084
- Import commit d8f6a204858bff68b8e0e7be86b418c36087ab2e
6c5e492a65 cryptsetup: umount encrypted devices before detaching it during shutdown
- Upgrade to v244 (commit 090da85161ceb1ba0b4c208963c7156a8fdf10c6)
See https://github.com/openSUSE/systemd/blob/SUSE/v243/NEWS for
details.
Legacy and obsolete symlinks have been finally dropped.
Dropped 0001-logind-keep-backward-compatibility-with-UserTasksMax.patch.
Users were notified about the deprecation of UserTasksMax option and
how to move to the new mechanism. The dropin replacement for
UserTasksMax is therefore no more generated but its use still
produces a warning.
Added 0001-SUSE-policy-do-not-clean-tmp-by-default.patch and
0001-Fix-run-lock-group-to-follow-openSUSE-policy.patch.
These patches were extracted from the git repo because it's not
clear where the SUSE tmpfiles specificities should be located.
OBS-URL: https://build.opensuse.org/request/show/755902
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1082
- Import commit dbb1d4734daffa62e0eddecfa4f784c84a9d8e76
1439d72a72 udevd: don't use monitor after manager_exit()
99288dd778 Revert "udevd: fix crash when workers time out after exit is signal caught"
152577d6d0 udevd: fix crash when workers time out after exit is signal caught
f854991504 udevd: wait for workers to finish when exiting (bsc#1106383)
Changes from the v243-stable (84 commits):
e51d9bf9e5 man: add entry about SpeedMeter=
aa1fc791c7 udev: silence warning about PROGRAM+= or IMPORT+= rules
b9a619bb67 udevadm: ignore EROFS and return earlier
1ec5b9f80c basic: add vmware hypervisor detection from device-tree
7fa7080248 umount: be happy if /proc/swaps doesn't exist
[...]
47d0e23d26 udev: fix memleak caused by wrong cleanup function
a6fb0542c5 parse_hwdb: fix compatibility with pyparsing 2.4.*
cb1d892f17 parse_hwdb: process files in order
OBS-URL: https://build.opensuse.org/request/show/753452
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1081
- Import commit 0b715187a87907e18edf98eab9d0a50fced4a424
9dbdbc2f10 logind: fix (again) the race that might happen when logind restores VT (bsc#1101591 bsc#1140081)
c848bec110 libblkid: open device in nonblock mode. (bsc#1084671)
b70ad6c927 resolved: check for IP in certificate when using DoT with GnuTLS (bsc#1155539 CVE-2018-21029)
bbedf3d557 resolved: require at least version 3.6.0 of GnuTLS for DNS-over-TLS
eb732c2e29 resolved: fix connection failures with TLS 1.3 and GnuTLS
4e45084ac5 shared/install: failing with -ELOOP can be due to the use of an alias in install_error()
2e297f0d87 shared/install: fix error codes returned by install_context_apply()
dd29d70d32 man: alias names can't be used with enable command
- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
(bsc#1092920)
OBS-URL: https://build.opensuse.org/request/show/748020
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1080
- Drop 0001-compat-rules-escape-when-used-for-shell-expansion.patch
It's part of the previous import.
- Import commit b7467b7b553d6d0d6f92758d966b69f1a88b6b42
441f44f371 fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495)
8a1bb5c66b swap: do not make swap units wanted by its device unit anymore
- Import commit 5df9000899ef7d45ddbcacd0fdf73afa07a40f6b
f0ed7237e4 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)
b37054aa5a compat-rules: escape '$' when used for shell expansion
Changes from the v243-stable:
ef677436aa test: Pass personality test even when i686 userland runs on x86_64 kernel
3f6398c450 docs: fix inadvertent change in uid range
25bb377a73 cgroup: fix typo in BPF firewall support warning message
6d97aca0d5 fix build with compilers with default stack-protector enabled
fbad077cec nspawn: surrender controlling terminal to PID2 when using the PID1 stub
0553c3c668 pid1: fix DefaultTasksMax initialization
f406a691a7 src/core/automount: use DirectoryMode when calling mkdir -p
20438f96c3 udevadm trigger: do not propagate EACCES and ENODEV
6480630bc3 hwdb: Correct WWWW Pattern In Documentation Comment
9d8e889810 nspawn: consistenly fail if parsing the environment fails
40e169b304 nspawn: default to unified hierarchy if --as-pid2 is used
b5df1037a0 cgroup: Mark memory protections as explicitly set in transient units
f14e3e02cc cgroup: Respect DefaultMemoryMin when setting memory.min
ea248e53bf cgroup: Check ancestor memory min for unified memory config
de1d25a506 cgroup: docs: memory.high doc fixups
2ab45f38d8 cgroup: docs: Mention unbounded protection for memory.{low,min}
19a43dc38a Consider smb3 as remote filesystem
5c0224c7bf Handle d_type == DT_UNKNOWN correctly
8282bc61df util-lib: Don't propagate EACCES from find_binary PATH lookup to caller
OBS-URL: https://build.opensuse.org/request/show/744383
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1077
- Import commit 0f9271c1336c5c9055e75389732a44745d796851 (changes from v242-stable)
07f0549ffe network: do not send ipv6 token to kernel
9d34e79ae8 systemd-mount: don't check for non-normalized WHAT for network FS
5af677680c core: set fs.file-max sysctl to LONG_MAX rather than ULONG_MAX (bsc#1142099)
29dda7597a random-util: eat up bad RDRAND values seen on AMD CPUs
eb6c17c178 util-lib: fix a typo in rdrand
829c20dc8e random-util: rename "err" to "success"
5442366fbf man: rework the description of Aliases and .wants/.requires directories
ae71c6f634 docs: typo in arg name replace-irreversible -> replace-irreversibly
09774a5fcb meson: make nologin path build time configurable
69ffeeb0b1 man: add note about systemctl stop return value
4cf14b5513 shared/conf-parser: say "key name" not "lvalue", add dot
4481ca7f86 shared/conf-parser: emit a nicer warning for something like "======"
46f3db894b shared/conf-parser: be nice and ignore lines without "="
7d928995f7 nspawn: fix memleak in argument parsing
7727e6c0ae resolve: fix memleak
7f32a81976 journal: properly read unaligned le64 integers
fa419099e5 activate: move array allocation to heap
815a9fef2a systemctl: print non-elapsing timers as "n/a" not "(null)"
a4fc3c88f1 factory: include pam_keyinit.so in PAM factory configuration
a453d63315 factory: add comment to PAM file, explaining that the defaults are not useful
d9a5a70a59 factory: tighten PAM configuration
5e2d3bf80b test: make sure colors don't confuse our test
5fe3be1334 wait-online: change log level
c49b6959d5 systemctl: emit warning when we get an invalid process entry from pid1 and continue
3c9f43eb03 systemctl: do not suggest passing --all if the user passed --state=
5964d1474e man: offline-updates: make dependence on system-update.target explicit
a04dd26e03 alloc-util: drop _alloc_ decorator from memdup_suffix0()
7c46a694ca man: add example for setting multiple properties at once
1d72789271 man: CPUShares= is so 2015
OBS-URL: https://build.opensuse.org/request/show/718031
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1065
- Import commit eaa7b8b148927d471609de75e542dffcc1b36df4
7e58b89136 udevd: change the default value of udev.children-max (again) (bsc#1107617)
- Add 0001-rc-local-generator-deprecate-halt.local-support.patch
/etc/init.d/halt.local support will removed from the next systemd
version (v243) so for now on warn (hopefully the few) users who rely
on this script so they have a chance to switch to systemd-shutdown
interface.
OBS-URL: https://build.opensuse.org/request/show/705895
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1064
- Add 0001-Revert-insserv.conf-generator.patch (bsc#1052837)
All remaining packages have been fixed so they don't rely on the
insser-generator to generate proper deps. So let's drop it as all
services should carry the proper dependencies itself.
- Drop debug-only-remove-new-policies.patch
The new DBUS methods have been reviewed by the security team.
OBS-URL: https://build.opensuse.org/request/show/705662
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1063
- Import commit 9984a86d0d2259d54c7060f9c09f214202b4efa7
f2459bf373 random-util: eat up bad RDRAND values seen on AMD CPUs
c90a2e9793 util-lib: fix a typo in rdrand
4db1cc9d46 random-util: rename "err" to "success"
981a62a102 random-util: hash AT_RANDOM getauxval() value before using it
64a9c3d918 random-util: use gcc's bit_RDRND definition if it exists
c5d6ecfdca random-util: rename RANDOM_DONT_DRAIN → RANDOM_MAY_FAIL
298d13df7e network: remove redunant link name in message
77cbde31f2 hwdb: Align airplane mode toggle key mapping for all Acer series
460f03794e Revert "hwdb: Apply Acer mappings to all Gateway and Packard Bell models"
fe9271ad84 test: return a non-zero return code when 'nobody' user doesn't exist
29d355e755 fstab-generator: Prevent double free of reused FILE*
f30f1adc11 meson: make source files including nspawn-settings.h depend on libseccomp
84bab914b8 alloc-util: don't use malloc_usable_size() to determine allocated size
5240972d8d units: drop reference to sushell man page
0a26de5e33 codespell: fix spelling errors
582de105c8 nspawn-expose-ports: fix a typo in error message
OBS-URL: https://build.opensuse.org/request/show/702859
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1062
- Add debug-only-remove-new-policies.patch
A temporary patch to suppress the new DBUS methods introduced by
v242 until they are reviewed and whitelisted by the secteam.
- Add a comment explaining why static enablement symlinks in /etc are suppressed
Also remove any /etc/systemd/system/*.requires/ symlinks for the
same reason.
- preset remote-cryptsetup.target during package installation
This target is supposed to be part of the targets that should be
enabled (or not depending on the presets) at package installation.
OBS-URL: https://build.opensuse.org/request/show/701727
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1060
- Import commit 4e6e66ea94cf5125f9044f0869939a86801ed2d8
430877e794 pam-systemd: use secure_getenv() rather than getenv() (bsc#1132348 CVE-2019-3842)
3cff2e6514 man: document that if the main process exits after SIGTERM we go directly to SIGKILL
26c4f7191c bus: fix memleak on invalid message
- systemd-coredump: generate a stack trace of all core dumps (bsc#1128832)
This stack trace is logged to the journal.
OBS-URL: https://build.opensuse.org/request/show/693791
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1058
- Import commit 01b4746d3c6f6cbf969fa2176c77ac3f616a7eda
7af53e005b sd-bus: if we receive an invalid dbus message, ignore and proceeed
92dcbfdd7f bus: move BUS_DONT_DESTROY calls after asserts
a83e7b3b43 automount: don't pass non-blocking pipe to kernel.
726127ea1d units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)
a6347a3cb6 core: Fix use after free case in load_from_path() (bsc#1121563)
22e2550222 strv: rework FOREACH_STRING() macro (bsc#1121563)
2ddd38f41a test,systemctl,nspawn: use "const char*" instead of "char*" as iterator for FOREACH_STRING()
c2c8333e0b strv: add new macro STARTSWITH_SET()
1db243a601 Update systemd-system.conf.xml (bsc#1122000)
OBS-URL: https://build.opensuse.org/request/show/676380
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1051
- Import commit ad34cc45f63720ced69960dc66b47bddb146176d
Import a bunch of fixes from stable/v239-stable:
c8293f5af4 Revert "network: set DynamicUser= to systemd-networkd.service"
7f605592e6 Revert "resolve: enable DynamicUser= for systemd-resolved.service"
5a48e92e06 test: Fix networkd test for an already running service
36eae1688b Revert "timesyncd: enable DynamicUser="
3a11f24cf0 Revert "unit: drop After=systemd-sysusers.service from timesyncd"
23cfd15ce9 machinectl: fix verbosity of import-raw or friends
ba037daf29 Make bzip2 an optional dependency for systemd-importd
fb609d2721 pull: initialize libgcrypt before calling any functions provided by libgcrypt
c50857bc6b hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571)
9a12fd17f5 man: Mention that paths in unit files must be fully normalized.
76fc2ab4a6 tree-wide: use instead of #ifdef for HAVE_*
fcc699c093 network: update log message
a4f497b2cd Use #if instead of #ifdef for ENABLE_GSHADOW
121c662eb8 man: add missing option for system.conf
564341146e core: add missing option and drop nonexistent option in system.conf
7082a3599f journal: add missing option in journald.conf
3c15efa9c1 basic: add missing comma in raw_clone assembly for sparc
4c210b6dce cryptsetup: Add dependency on loopback setup to generated units
c777fbbe3e journal-gateway: use localStorage["cursor"] only when it has valid value
c5b1bef639 journal-gateway: explicitly declare local variables
2361522ca6 analyze: actually select longest activated-time of services
3e810d92d9 sd-bus: fix implicit downcast of bitfield reported by LGTM
aef660a4cf resolvconf: fixes for the compatibility interface
06b3f54f50 install: fix error handling in is_symlink_with_known_name()
f70ab9a468 portable: fix error handling
d2c40d4e80 resolve: fix return value type of dns_answer_has_dname_for_cname()
6f684e0670 resolve: dns_scope_network_good() does not returns negative errno
15d83e1138 bus-util: fix error handling
OBS-URL: https://build.opensuse.org/request/show/666162
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1050
- Import commit 3bece8a25ae11e8ec132cdecc7e72a00ee790994
89a9721a47 Revert "logind: become the controlling terminal process before restoring VT" (bsc#1120836)
c3a8dc821b pam_systemd: reword message about not creating a session
0ba0f5b3ef pam_systemd: suppress LOG_DEBUG log messages if debugging is off
- Import commit a3b059a8c60622e4ec30aabda93c6b41d0953dc4
9dbe9f12ec journal-remote: set a limit on the number of fields in a message (CVE-2018-16865 bsc#1120323)
61d569ab1b journal-remote: verify entry length from header
a08760b26c µhttpd: use a cleanup function to call MHD_destroy_response
43f46a1a3d journal-gateway: use _cleanup_ attribute to stop microhttpd daemon
437b0b2d01 journald: lower the maximum entry size limit to ½ for non-sealed fds
ac9e209710 journald: when processing a native message, bail more quickly on overbig messages
ce103705b9 journald: set a limit on the number of fields (1k) (CVE-2018-16865 bsc#1120323)
35538171c2 coredump: fix message when we fail to save a journald coredump
cfe247b555 basic/process-util: limit command line lengths to _SC_ARG_MAX
9d59e6f6ee journald: do not store the iovec entry for process commandline on stack (CVE-2018-16864 bsc#1120323)
8d650a68d4 journald: remove unnecessary {}
b608f532a4 coredump: remove duplicate MESSAGE= prefix from message
0dbb2dc066 vconsole-setup: fonts copy will fail if the current terminal is in graphical mode (bsc#1114933)
e501d65540 Revert "systemctl: when removing enablement or mask symlinks, cover both /run and /etc"
d3ea69961f fs-util: rename safe_transition() into unsafe_transition()
338470fdc9 tmpfiles: use CHASE_WARN in addition to CHASE_SAFE
d9ae1b30da fs-util: make chase_symlink() returns -ENOLINK when unsafe transitions are met
8b76594d1f fs-util: add new CHASE_WARN flag to chase_symlinks()
OBS-URL: https://build.opensuse.org/request/show/664420
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1049
