summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* do not filter out deprecated USER audit messagesJérémy Rosen2018-06-181-2/+2
|
* shared: do not include ~ when appending syscall filters propertyRonny Chevalier2018-06-181-1/+1
| | | | | | | The method already uses a boolean argument to determine whether it is in whitelist mode or not. The code that will parse the string of filters does not expect the ~, since it already has the boolean argument. Thus, it will fail to parse the list of filters.
* Fix orientation sensor position for Lenovo Miix 510petur2018-06-181-0/+4
| | | | | | Looks like the Miix 510 has the same sensor and placement as the Miix 320 (put it separate for clarity) Verified on own hardware
* hwdb: fix backlash/pipe on Librem 13v3Mladen Pejaković2018-06-181-0/+3
|
* Merge pull request #9307 from yuwata/man-sd-bootZbigniew Jędrzejewski-Szmek2018-06-154-60/+71
|\ | | | | man: use systemd-boot instead of sd-boot
| * man: re-format man page for bootctlYu Watanabe2018-06-151-42/+52
| |
| * man: use systemd-boot instead of sd-bootYu Watanabe2018-06-154-19/+20
| |
* | Merge pull request #8766 from poettering/syscall-filter-serviceZbigniew Jędrzejewski-Szmek2018-06-1521-13/+196
|\ \ | | | | | | add a new `@system-service` syscall group that is good as a starting point for whitelisting syscalls
| * | update NEWSLennart Poettering2018-06-141-0/+9
| | |
| * | portable: add SystemCallFilter=@system-service to the three main portable ↵Lennart Poettering2018-06-143-0/+6
| | | | | | | | | | | | | | | | | | | | | service profiles … but leave the "trusted" profile unmodified, it shall have full access to all system calls, as before.
| * | units: switch from system call blacklist to whitelistLennart Poettering2018-06-1412-11/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is generally the safer approach, and is what container managers (including nspawn) do, hence let's move to this too for our own services. This is particularly useful as this this means the new @system-service system call filter group will get serious real-life testing quickly. This also switches from firing SIGSYS on unexpected syscalls to returning EPERM. This would have probably been a better default anyway, but it's hard to change that these days. When whitelisting system calls SIGSYS is highly problematic as system calls that are newly introduced to Linux become minefields for services otherwise. Note that this enables a system call filter for udev for the first time, and will block @clock, @mount and @swap from it. Some downstream distributions might want to revert this locally if they want to permit unsafe operations on udev rules, but in general this shiuld be mostly safe, as we already set MountFlags=shared for udevd, hence at least @mount won't change anything.
| * | seccomp: explain why we use setuid rather than @setuid in @privilegedLennart Poettering2018-06-141-1/+1
| | |
| * | seccomp: add new system call filter, suitable as default whitelist for ↵Lennart Poettering2018-06-144-1/+84
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | system services Currently we employ mostly system call blacklisting for our system services. Let's add a new system call filter group @system-service that helps turning this around into a whitelist by default. The new group is very similar to nspawn's default filter list, but in some ways more restricted (as sethostname() and suchlike shouldn't be available to most system services just like that) and in others more relaxed (for example @keyring is blocked in nspawn since it's not properly virtualized yet in the kernel, but is fine for regular system services).
| * | mkosi: add mkosi snippet for ubuntu, tooLennart Poettering2018-06-141-0/+72
| | |
* | | namespace: drop protect_{home,system}_or_bool_from_string()Yu Watanabe2018-06-154-32/+6
| |/ |/| | | | | | | | | | | The functions protect_{home,system}_from_string() are not used except for defining protect_{home,system}_or_bool_from_string(). This makes protect_{home,system}_from_string() support boolean strings, and drops protect_{home,system}_or_bool_from_string().
* | Merge pull request #9303 from poettering/busctl-fixletsYu Watanabe2018-06-151-102/+54
|\ \ | | | | | | tiny busctl fixlets
| * | busctl: make use of log_error_errno() where we canLennart Poettering2018-06-141-97/+49
| | |
| * | busctl: add 'const' where we canLennart Poettering2018-06-141-1/+1
| | |
| * | busctl: use fflush_and_check() where appropriateLennart Poettering2018-06-141-4/+4
| | |
* | | NEWS: rework the description of device naming changesZbigniew Jędrzejewski-Szmek2018-06-151-5/+18
| | | | | | | | | | | | | | | | | | | | | We really should try to be as precise as possible here. Saying "your interfaces might be renamed" scares the shit of out people, for obvious reasons. This change only touches some niche cases fortunately, let's make this clear.
* | | NEWS: update contributor list to current gitLennart Poettering2018-06-152-15/+16
| | |
* | | resolved: fix error handling in resolved-dns-streamIwan Timmer2018-06-141-5/+12
| |/ |/| | | | | | | | | During the transition from system functions using errno to our own read and write functions with negative return codes some errors where introduced. This patch correctly convert errno to negative return codes for read and write and fix checks still using errno instead of the return code. Closes #9283
* | Merge pull request #9301 from keszybz/man-drop-authorgroupLennart Poettering2018-06-14261-2379/+0
|\ \ | |/ |/| man: drop unused <authorgroup> tags from man sources
| * Also drop <authorgroup> from autogenerated pagesZbigniew Jędrzejewski-Szmek2018-06-142-18/+0
| |
| * man: drop unused <authorgroup> tags from man sourcesZbigniew Jędrzejewski-Szmek2018-06-14259-2361/+0
| | | | | | | | | | | | | | | | | | | | | | | | Docbook styles required those to be present, even though the templates that we use did not show those names anywhere. But something changed semi-recently (I would suspect docbook templates, but there was only a minor version bump in recent years, and the changelog does not suggest anything related), and builds now work without those entries. Let's drop this dead weight. Tested with F26-F29, debian unstable. $ perl -i -0pe 's/\s*<authorgroup>.*<.authorgroup>//gms' man/*xml
* | Merge pull request #9302 from keszybz/drop-my-copyright-and-some-license-tagsLennart Poettering2018-06-14245-1004/+4
|\ \ | |/ |/| Drop my copyright and some license tags
| * Drop more license boilerplateZbigniew Jędrzejewski-Szmek2018-06-1447-517/+0
| | | | | | | | | | | | | | | | $ git grep -e 'This program is free software' -l |grep -v LICENSE | \ xargs perl -i -0pe 's/ \* This program.*?for more details.\s*\*\n( \* You should have.*licenses.>.\n)?//gms' For some reason they were missed previously. All those files seem to have proper SDPX tags.
| * Fix SPDX license tagsZbigniew Jędrzejewski-Szmek2018-06-144-6/+4
| |
| * Drop my copyright headersZbigniew Jędrzejewski-Szmek2018-06-14199-485/+4
|/ | | | | | | perl -i -0pe 's/\s*Copyright © .... Zbigniew Jędrzejewski.*?\n/\n/gms' man/*xml git grep -e 'Copyright.*Jędrzejewski' -l | xargs perl -i -0pe 's/(#\n)?# +Copyright © [0-9, -]+ Zbigniew Jędrzejewski.*?\n//gms' git grep -e 'Copyright.*Jędrzejewski' -l | xargs perl -i -0pe 's/\s*\/\*\*\*\s+Copyright © [0-9, -]+ Zbigniew Jędrzejewski[^\n]*?\s*\*\*\*\/\s*/\n\n/gms' git grep -e 'Copyright.*Jędrzejewski' -l | xargs perl -i -0pe 's/\s+Copyright © [0-9, -]+ Zbigniew Jędrzejewski[^\n]*//gms'
* Merge pull request #9274 from poettering/comment-header-cleanupZbigniew Jędrzejewski-Szmek2018-06-141610-6355/+782
|\ | | | | drop "this file is part of systemd" and lennart's copyright from header
| * tree-wide: beautify remaining copyright statementsLennart Poettering2018-06-14552-590/+590
| | | | | | | | | | | | Let's unify an beautify our remaining copyright statements, with a unicode ©. This means our copyright statements are now always formatted the same way. Yay.
| * tree-wide: remove Lennart's copyright linesLennart Poettering2018-06-14983-2681/+11
| | | | | | | | | | | | | | | | | | | | | | These lines are generally out-of-date, incomplete and unnecessary. With SPDX and git repository much more accurate and fine grained information about licensing and authorship is available, hence let's drop the per-file copyright notice. Of course, removing copyright lines of others is problematic, hence this commit only removes my own lines and leaves all others untouched. It might be nicer if sooner or later those could go away too, making git the only and accurate source of authorship information.
| * grypt-util: drop two emacs modelinesLennart Poettering2018-06-142-2/+0
| | | | | | | | No idea why they didn't get removed earlier...
| * po: drop copyright lines referencing COPYRIGHT HOLDERLennart Poettering2018-06-1419-19/+0
| | | | | | | | | | These lines are template lines that never got filled in. Let's drop them, as they carry zero information and are just useless.
| * tree-wide: use proper unicode © instead of (C) where we canLennart Poettering2018-06-14153-207/+207
| | | | | | | | | | | | Let's use a proper unicode copyright symbol where we can, it's prettier. This important patch is very important.
| * tree-wide: drop 'This file is part of systemd' blurbLennart Poettering2018-06-141441-2884/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This part of the copyright blurb stems from the GPL use recommendations: https://www.gnu.org/licenses/gpl-howto.en.html The concept appears to originate in times where version control was per file, instead of per tree, and was a way to glue the files together. Ultimately, we nowadays don't live in that world anymore, and this information is entirely useless anyway, as people are very welcome to copy these files into any projects they like, and they shouldn't have to change bits that are part of our copyright header for that. hence, let's just get rid of this old cruft, and shorten our codebase a bit.
* | Merge pull request #9199 from poettering/copy-file-atomicZbigniew Jędrzejewski-Szmek2018-06-144-21/+74
|\ \ | | | | | | make copy_file_atomic() use O_TMPFILE to create the destination file
| * | copy: rework copy_file_atomic() to copy the specified file via O_TMPFILE if ↵Lennart Poettering2018-06-073-14/+59
| | | | | | | | | | | | possible
| * | util: allow mkdtemp_malloc() to be called with NULL patternLennart Poettering2018-06-071-7/+15
| | | | | | | | | | | | In that case simply place the directory in /tmp.
* | | namespace: always use a root directory when setting up namespaceJan Synacek2018-06-141-9/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1) mv /var/tmp /var/tmp.old 2) mkdir /tmp/varrr 3) ln -s /tmp/varrr /var/tmp Now, when a service has PrivateTmp=yes, during namespace setup, /tmp is first mounted over with a new mount. Then, when /var/tmp is being resolved, it points to /tmp/varrr, which by then doesn't exist, because it had already been obscured.
* | | Merge pull request #9297 from yuwata/rfe-9296Lennart Poettering2018-06-144-25/+42
|\ \ \ | |_|/ |/| | timesync: ignore any errors related to timestamp file
| * | timesync: ignore any errors related to timestamp fileYu Watanabe2018-06-141-13/+21
| | |
| * | sysusers: use fchmod_and_chown()Yu Watanabe2018-06-141-12/+4
| | |
| * | fs-util: introduce fchmod_and_chown()Yu Watanabe2018-06-142-0/+17
| | | | | | | | | | | | | | | The new function fchmod_and_chown() is almost same as chmod_and_chown() except it takes file descriptor instead of file path.
* | | locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* filesFranck Bui2018-06-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On overlayfs, FTW_MOUNT causes nftw to not list *any* files because the condition used by glibc to verify that it's on the same mountpoint doesn't work on overlayfs, see https://bugzilla.suse.com/show_bug.cgi?id=1096807 for the details. However using FTW_MOUNT doesn't seem to be really needed when walking through the keymap directorie tree. So until the glibc or the kernel is fixed (which might take some time), let's make localectl works with overlayfs. There's a small side effect here, by which regular (non-directory) files with bind mounts will be parsed while they were skipped by the previous logic.
* | | timedatectl: add 'show' command to display machine-readable outputYu Watanabe2018-06-143-11/+44
| | | | | | | | | | | | Closes #9249.
* | | Merge pull request #9193 from keszybz/coverityLennart Poettering2018-06-142-1/+9
|\ \ \ | | | | | | | | Coverity support for glibc-2.27
| * | | travis: add defines for _Float64/_Float64x/_Float32/_Float32xZbigniew Jędrzejewski-Szmek2018-06-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | $ build/test-sizeof ... _Float128 → 128 bits, signed _Float64 → 64 bits, signed _Float64x → 128 bits, signed _Float32 → 32 bits, signed _Float32x → 64 bits, signed ... This seems to be enough to make coverity work with glibc-2.27 found in Fedora 28+.
| * | | test-sizeof: also print float types from ISO/IEC TS 18661-3Zbigniew Jędrzejewski-Szmek2018-06-051-0/+8
| | | |
* | | | resolve: rename PrivateDNS to DNSOverTLSIwan Timmer2018-06-1431-137/+137
| | | | | | | | | | | | PrivateDNS is not considered a good name for this option, so rename it to DNSOverTLS
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-13 22:16:46 +0100