summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* man: systemd-escape: add missed short keys (#8944)Mikhail Kasimov2018-05-101-0/+2
| | | Added short keys -u and -m for --unescape and --mangle respectively. These short keys are present in systemd-escape --help output and are absent in man systemd-escape page.
* conf-parser: accept trailing backslash at the end of the file (#8941)Filipe Brandenburger2018-05-102-5/+36
| | | | | | | | | This makes it behave the same whether there is a blank line or not at the end of the file. This is also consistent with the behavior of the shell on a shell script that ends on a trailing backslash at the last line. Added tests to test_config_parse(), which only pass if the corresponding change to config_parse() is included.
* add journal-upload.conf refentrytitle (#8942)Mikhail Kasimov2018-05-101-0/+1
| | | | Add journal-upload.conf refentrytitle to have the same format to systemd-journal-remote.service description, which contains refentrytitle on journal-remote.conf in 'See Also' section.
* Merge pull request #8689 from davide125/staticZbigniew Jędrzejewski-Szmek2018-05-106-17/+94
|\ | | | | meson: add support for building static libsystemd and libudev
| * meson: recompile all sources for install_libudev_static and ↵Zbigniew Jędrzejewski-Szmek2018-05-084-14/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | install_libsystemd_static This means that when those targets are built, all the sources are built again, instead of reusing the work done to create libbasic.a and other convenience static libraries. It would be nice to not do this, but there seems to be no support in our toolchain for joining multiple static libraries into one. When linking a static library, any -l arguments are simply ignored by ar/gcc-ar, and .a libraries given as positional arguments are copied verbatim into the archive so they objects in them cannot be accessed. https://stackoverflow.com/questions/2157629/linking-static-libraries-to-other-static-libraries suggests either unzipping all the archives and putting them back togather, or using a linker script. Unzipping and zipping back together seems ugly. The other option is not very nice. The linker script language does not allow "+" to appear in the filenames, and filenames that meson generates use that, so files would have to be renamed before a linker script was used. And we would have to generate the linker script on the fly. Either way, this doesn't seem attractive. Since those static libraries are a niche use case, it seems reasonable to just go with the easiest and safest solution and recompile all the source files. Thanks to ccache, this is probably almost as cheap as actually reusing the convenience .a libraries. test-libsystemd-sym.c and test-libudev-sym.c compile fine with the generated static libs, so it seems that they indeed provide all the symbols they should.
| * meson: only build test-lib{systemd,udev}-static-sym for picDavide Cavalca2018-05-082-11/+10
| |
| * meson: add test-lib{systemd,udev}-static-symZbigniew Jędrzejewski-Szmek2018-05-081-6/+34
| | | | | | | | | | This is the same as test-lib{systemd,udev}-sym, but linked to the static variants of those libraries.
| * meson: add support for building static libsystemd and libudevDavide Cavalca2018-05-084-3/+47
| |
* | Merge pull request #8939 from yuwata/fix-commentIgor Gnatenko2018-05-0911-83/+36
|\ \ | | | | | | several cleanups
| * | timedate: use free_and_strdup()Yu Watanabe2018-05-091-11/+5
| | |
| * | tree-wide: use strv_free_and_replace() macroYu Watanabe2018-05-099-63/+24
| | |
| * | time-util: fix indentation for commentsYu Watanabe2018-05-091-9/+7
|/ /
* | Merge pull request #8923 from yuwata/resolvectl-drop-funcsZbigniew Jędrzejewski-Szmek2018-05-092-43/+17
|\ \ | | | | | | resolvectl: drop service_family_{from,to}_string()
| * | resolvectl: drop service_family_{from,to}_string()Yu Watanabe2018-05-081-40/+14
| | | | | | | | | | | | | | | These functions are used only for checking the validity of input string. Hence, this drops them and introduces a simple checking function.
| * | man: add missing 'query' command in examples of resolvectlYu Watanabe2018-05-081-3/+3
| | |
* | | Merge pull request #8938 from keszybz/sd-bus-automatic-cleanupYu Watanabe2018-05-091-99/+66
|\ \ \ | | | | | | | | Use automatic cleanup more in sd-bus
| * | | sd-bus: add bus_freep and use _cleanup_Zbigniew Jędrzejewski-Szmek2018-05-091-64/+41
| | | |
| * | | sd-bus: use automatic cleanup moreZbigniew Jędrzejewski-Szmek2018-05-091-24/+20
| | | |
| * | | sd-bus: trivial simplificationZbigniew Jędrzejewski-Szmek2018-05-091-11/+5
| | | |
* | | | use max. message size allowed by DBus spec (#8936)David Tardon2018-05-091-1/+1
| | | | | | | | | | | | C.f. https://dbus.freedesktop.org/doc/dbus-specification.html#message-protocol-messages.
* | | | Merge pull request #8934 from yuwata/fix-8913Zbigniew Jędrzejewski-Szmek2018-05-093-32/+34
|\ \ \ \ | |/ / / |/| | | bus-util: print a friendly message when PID1 is not systemd
| * | | bus-util: print a friendly message when PID1 is not systemdYu Watanabe2018-05-093-12/+20
| | | | | | | | | | | | | | | | | | | | | | | | Follow-up for 861f16d2679eeda79e8185057cef24653913e300. Fixes #8913.
| * | | analyze: merge acquire_full_bus() and acquire_systemd_bus()Yu Watanabe2018-05-091-20/+14
|/ / / | | | | | | | | | Follow-up for 5c69b31c137ffa24bca5a4628f9b4879d0f4e84a.
* | | man: fix invalid option name --devpath in 'udevadm info' (#8935)Yu Watanabe2018-05-091-5/+5
| | |
* | | man: --debug option is implied in udev test and test-builtin commands (#8933)Yu Watanabe2018-05-091-1/+2
| | |
* | | Merge pull request #8902 from yuwata/link-multiple-macZbigniew Jędrzejewski-Szmek2018-05-0914-58/+206
|\ \ \ | | | | | | | | network,link: make MACAddress= in [Match] section can take multiple MAC addresses
| * | | network,udev: sort included headersYu Watanabe2018-05-092-3/+3
| | | |
| * | | man: document that MACAddress= in [Match] section can take multiple MAC ↵Yu Watanabe2018-05-092-3/+12
| | | | | | | | | | | | | | | | addresses
| * | | network,udev: make MACAddress= in [Match] section take multiple MAC addressesYu Watanabe2018-05-099-19/+22
| | | |
| * | | test: add tests for config_parse_hwaddrs()Yu Watanabe2018-05-091-2/+49
| | | |
| * | | libsystemd-network: introduce config_parse_hwaddrs()Yu Watanabe2018-05-092-0/+78
| | | |
| * | | ether-addr-util: add hash_ops functions for struct ether_addrYu Watanabe2018-05-092-8/+19
| | | |
| * | | ether-addr-util: make ether_addr_from_string() stricterYu Watanabe2018-05-094-26/+26
|/ / /
* | | tools/oss-fuzz: install private shared library non-executable (#8927)Zbigniew Jędrzejewski-Szmek2018-05-081-2/+2
| | | | | | | | | | | | | | | | | | Apparently oss-fuzz's "bad build check" is confused by the library. Let's make it non-executable, so the checker ignores it. Should fix https://github.com/google/oss-fuzz/issues/1330.
* | | man/systemd.special: fix network v.s. LSB scripts (#8930)Alan Jenkins2018-05-081-5/+4
| | | | | | | | | | | | | | | | | | $network is converted to network-online.target, not network-target. See https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/ and the implementation at `src/sysv-generator/sysv-generator.c`.
* | | Merge pull request #8915 from yuwata/fix-8904Michael Biebl2018-05-081-2/+2
|\ \ \ | | | | | | | | login: do not wall message on cancelling shutdown when Manager.enable_wall_messages is false
| * | | login: do not wall message on cancelling shutdown when ↵Yu Watanabe2018-05-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Manager.enable_wall_messages is false Fixes #8904.
| * | | login: change variable type of enable_wall_messages as it matches ↵Yu Watanabe2018-05-071-1/+1
| | | | | | | | | | | | | | | | Manager.enable_wall_messages
* | | | link: Add support to configure channels of the specified network device (#8882)Susant Sahani2018-05-086-0/+151
| | | | | | | | | | | | closes #8856
* | | | Merge pull request #8898 from poettering/nspawn-mount-blockZbigniew Jędrzejewski-Szmek2018-05-0810-135/+215
|\ \ \ \ | | | | | | | | | | some nspawn cgroup and mount lock-down fixes
| * | | | update TODOLennart Poettering2018-05-031-3/+4
| | | | |
| * | | | namespace: extend list of masked files by ProtectKernelTunables=Lennart Poettering2018-05-031-8/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a number of entries nspawn already applies to regular service namespacing too. Most importantly let's mask /proc/kcore and /proc/kallsyms too.
| * | | | nspawn: move nspawn cgroup hierarchy one level down unconditionallyLennart Poettering2018-05-033-31/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We need to do this in all cases, including on cgroupsv1 in order to ensure the host systemd and any systemd in the payload won't fight for the cgroup attributes of the top-level cgroup of the payload. This is because systemd for Delegate=yes units will only delegate the right to create children as well as their attributes. However, nspawn expects that the cgroup delegated covers both the right to create children and the attributes of the cgroup itself. Hence, to clear this up, let's unconditionally insert a intermediary cgroup, on cgroupsv1 as well as cgroupsv2, unconditionally. This is also nice as it reduces the differences in the various setups and exposes very close behaviour everywhere.
| * | | | nspawn: let's make use of SPECIAL_MACHINE_SLICE macro, after all we already ↵Lennart Poettering2018-05-031-1/+2
| | | | | | | | | | | | | | | | | | | | set it
| * | | | nspawn: don't make /proc/kmsg node too specialLennart Poettering2018-05-031-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | Similar to the previous commit, let's just use our regular calls for managing temporary nodes take care of this.
| * | | | nspawn: mount boot ID from temporary file in /tmpLennart Poettering2018-05-031-9/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Let's not make /run too special and let's make sure the source file is not guessable: let's use our regular temporary file helper calls to create the source node.
| * | | | nspawn: lock down a few things in /proc by defaultLennart Poettering2018-05-032-29/+95
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This tightens security on /proc: a couple of files exposed there are now made inaccessible. These files might potentially leak kernel internals or expose non-virtualized concepts, hence lock them down by default. Moreover, a couple of dirs in /proc that expose stuff also exposed in /sys are now marked read-only, similar to how we handle /sys. The list is taken from what docker/runc based container managers generally apply, but slightly extended.
| * | | | nspawn: use free_and_replace() at more placesLennart Poettering2018-05-031-6/+3
| | | | |
| * | | | nspawn: size_t more stuffLennart Poettering2018-05-034-23/+23
| | | | | | | | | | | | | | | | | | | | A follow-up for #8840
| * | | | doc: document nore carefully that tmpfs within the cgroupfs setup shouldn't ↵Lennart Poettering2018-05-031-7/+8
| | | | | | | | | | | | | | | | | | | | confuse statfs() checks