summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* dissect: wrap verity settings in new VeritySettings structureLennart Poettering2020-09-178-320/+386
| | | | | | | | | | | | Just some refactoring: let's place the various verity related parameters in a common structure, and pass that around instead of the individual parameters. Also, let's load the PKCS#7 signature data when finding metadata right-away, instead of delaying this until we need it. In all cases we call this there's not much time difference between the metdata finding and the loading, hence this simplifies things and makes sure root hash data and its signature is now always acquired together.
* Merge pull request #16929 from ssahani/network-bare-udpYu Watanabe2020-09-1728-55/+730
|\ | | | | network: introduce Bare UDP Tunnelling
| * test-network: add tests for BareUDP netdevYu Watanabe2020-09-173-0/+22
| |
| * network: refuse to configure IPv4LL for bareudp netdevYu Watanabe2020-09-171-1/+1
| |
| * network: Introduce bare UDPSusant Sahani2020-09-178-0/+212
| |
| * sd-netlink: Add support for bare UDPSusant Sahani2020-09-172-0/+10
| |
| * util: update kernel headers (v5.9-rc5)Yu Watanabe2020-09-1713-49/+484
| |
| * util: wireguard is merged into upstream kernelYu Watanabe2020-09-171-5/+1
| |
* | Merge pull request #17073 from ssahani/vxlanYu Watanabe2020-09-179-3/+39
|\ \ | | | | | | network: Allow vxlan to be created without .network file
| * | test-network: add test for Independent= for vxlanYu Watanabe2020-09-173-1/+25
| | |
| * | network: Allow vxlan to be created without .network fileSusant Sahani2020-09-176-2/+14
| |/
* | udev: if a tablet has BTN_0, label it as ID_INPUT_TABLET_PADPeter Hutterer2020-09-171-4/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Graphics tablet devices comprise multiple event nodes, usually a Pen, Finger and Pad node (that's how the kernel postfixes them). Pen and Pad are labeled as ID_INPUT_TABLET but the pad doesn't actually send stylus events - it doesn't usually have BTN_TOOL_PEN, merely BTN_STYLUS. For the last several years, libwacom has set ID_INPUT_TABLET_PAD for all pad devices known to it based on vid/pid and a "* Pad" name match. That does not cover devices not in libwacom. libinput relies on ID_INPUT_TABLET_PAD to initialize the pad backend. We can't drop ID_INPUT_TABLET without breaking userspace, but we can add ID_INPUT_TABLET_PAD ourselves - where a device has BTN_0 in addition to BTN_STYLUS, let's add it as a pad. There are some devices (notably: bamboos) that use BTN_LEFT instead of BTN_0 but they are relatively rare and there's a risk of mislabeling those devices, so let's just stick with BTN_0 only.
* | Fix compilation without libcryptsetup (#17071)masmullin20002020-09-171-1/+14
|/
* Merge pull request #17059 from yuwata/network-mdb-follow-upsYu Watanabe2020-09-1710-120/+257
|\ | | | | network: follow ups for bridge MDB support
| * test-network: add test for [BridgeMDB] sectionYu Watanabe2020-09-163-0/+32
| |
| * network: add debug message for configuring MDB entriesYu Watanabe2020-09-161-0/+9
| |
| * network: configure bridge MDB entries after bridge has carrierYu Watanabe2020-09-164-21/+82
| |
| * network: drop [BridgeMDB] entries if Bridge= is not setYu Watanabe2020-09-162-8/+8
| |
| * network: check MulticastGroupAddress= is neither a local multicast address ↵Yu Watanabe2020-09-161-3/+24
| | | | | | | | nor all nodes address
| * in-addr-util: introduce in4_addr_is_local_multicast()Yu Watanabe2020-09-162-0/+7
| |
| * in-addr-util: introduce in6_addr_is_link_local_all_nodes()Yu Watanabe2020-09-162-0/+11
| |
| * network: drop unnecessary headersYu Watanabe2020-09-161-4/+0
| |
| * network: move functions in networkd-mdb.cYu Watanabe2020-09-161-88/+88
| |
* | Merge pull request #17080 from poettering/repart-umask-fixAnita Zhang2020-09-171-1/+1
|\ \ | | | | | | repart: don't mark image files generated with --empty=create executable
| * | repart: don't mark image files generated with --empty=create executableLennart Poettering2020-09-161-1/+1
| | |
* | | Merge pull request #17067 from keszybz/rc-local-pathZbigniew Jędrzejewski-Szmek2020-09-165-22/+26
|\ \ \ | |/ / |/| | Expose the path to rc.local in the man page
| * | man: substitute path to rc.local in the man pageZbigniew Jędrzejewski-Szmek2020-09-152-15/+19
| | | | | | | | | | | | | | | | | | | | | Different systems use different paths for it and users are confused when the man page has a path different than the one on the local system. https://bugzilla.redhat.com/show_bug.cgi?id=1876905
| * | meson: RC_LOCAL_SCRIPT_PATH_START to RC_LOCAL_PATHZbigniew Jędrzejewski-Szmek2020-09-153-7/+7
| | | | | | | | | | | | | | | | | | | | | RC_LOCAL_SCRIPT_PATH_START and RC_LOCAL_SCRIPT_PATH_STOP were was originally added in the conversion to meson based on the autotools name. In 44508946534eee032927c263b79464832656dd6e RC_LOCAL_SCRIPT_PATH_STOP was dropped. We don't need to use such a long name.
* | | Merge pull request #17076 from poettering/dissect-cleanupLennart Poettering2020-09-168-111/+49
|\ \ \ | | | | | | | | minor cleanups to the dissector code
| * | | gpt: move GPT_LINUX_GENERIC definition next to the user GPT partition typesLennart Poettering2020-09-161-24/+21
| | | | | | | | | | | | | | | | No code changes, just some reordering.
| * | | dissect: introduce PartitionDesignator as real typeLennart Poettering2020-09-165-25/+22
| | | |
| * | | dissect: rename mount_options_from_part() → mount_options_from_designator()Lennart Poettering2020-09-152-8/+8
| | | | | | | | | | | | | | | | | | | | After all, it actually takes a designator argument, not a partition index or so.
| * | | test: remove test-dissect-imageLennart Poettering2020-09-152-56/+0
| |/ / | | | | | | | | | | | | It does pretty much exactly what systemd-dissect does and is a manual test, hence let's remove it as redundant code.
* | / test-execute: kill Waldo and QuuxTopi Miettinen2020-09-161-0/+4
| |/ |/| | | | | Retire /var/lib{,/private}/{quux,waldo} after they have served their purpose.
* | Merge pull request #17066 from keszybz/allow-loopback-addressesYu Watanabe2020-09-163-2/+3
|\ \ | | | | | | Allow loopback addresses
| * | socket-proxy: allow localhost addressesZbigniew Jędrzejewski-Szmek2020-09-151-1/+0
| | | | | | | | | | | | | | | With this change, only manager_connect() in timesync.d uses AI_ADDRCONFIG. There we are connecting to a remove server, so the flag is appropriate.
| * | sd-bus: allow localhost addressesZbigniew Jędrzejewski-Szmek2020-09-152-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | By settings AI_ADDRCONFIG in hints we cannot for example resolve "localhost" when the local machine only has a loopback interface. This seems like an unnecessary restriction, drop it. Inspired by https://bugzilla.redhat.com/show_bug.cgi?id=1839007.
* | | Merge pull request #16675 from topimiettinen/exec-syscall-error-actionLennart Poettering2020-09-1618-19/+375
|\ \ \ | | | | | | | | SystemCallFilter, SystemCallErrorAction error actions kill and log
| * | | exec: SystemCallLog= directiveTopi Miettinen2020-09-1511-2/+280
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With new directive SystemCallLog= it's possible to list system calls to be logged. This can be used for auditing or temporarily when constructing system call filters. --- v5: drop intermediary, update HASHMAP_FOREACH_KEY() use v4: skip useless debug messages, actually parse directive v3: don't declare unused variables with old libseccomp v2: fix build without seccomp or old libseccomp
| * | | exec: Add kill action to system call filtersTopi Miettinen2020-09-1513-17/+95
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Define explicit action "kill" for SystemCallErrorNumber=. In addition to errno code, allow specifying "kill" as action for SystemCallFilter=. --- v7: seccomp_parse_errno_or_action() returns -EINVAL if !HAVE_SECCOMP v6: use streq_ptr(), let errno_to_name() handle bad values, kill processes, init syscall_errno v5: actually use seccomp_errno_or_action_to_string(), don't fail bus unit parsing without seccomp v4: fix build without seccomp v3: drop log action v2: action -> number
* | | | man: reorder autogenerated dbus api listsZbigniew Jędrzejewski-Szmek2020-09-162-5/+5
| |_|/ |/| | | | | | | | | | | | | | | | | 3e5f04bf6468fcb79c080f02b0eab08f258bff0c was trying to do the right thing, but the resulting list does not match the autogenerated order (which is the same as the order in vtable definition). I assume the addition was done manually. Fix the order so that dbus-docs-fresh test is not unhappy.
* | | fstab-generator: add 'nofail' when NFS 'bg' option is usedFranck Bui2020-09-151-1/+1
| | | | | | | | | | | | | | | Otherwise a 'Before=remote-fs.target' dependency is added to the mount unit which defeats the purpose of 'bg' option.
* | | tests: try to allocate a delegated scope unit for our cgroup testsLennart Poettering2020-09-151-0/+85
|/ / | | | | | | Prompted-by: #16632
* | busctl: add missing shortopt -lJuergen Hoetzel2020-09-151-1/+1
| |
* | core: use strv_free_and_replace() at one more placeYu Watanabe2020-09-151-4/+1
| |
* | Merge pull request #16998 from zonque/networkd/mdbYu Watanabe2020-09-1513-0/+399
|\ \ | | | | | | network: add support for setting MDB entries
| * | test: add BridgeMDB to fuzz-network-parser/directives.networkDaniel Mack2020-09-101-0/+3
| | |
| * | man: document new Network.BridgeMDB config optionsDaniel Mack2020-09-101-0/+20
| | |
| * | network: add support for setting MDB entriesDaniel Mack2020-09-107-0/+336
| | | | | | | | | | | | | | | | | | | | | | | | | | | Multicast snooping enabled bridges maintain a database for multicast port memberships to decide which mulicast packet is supposed to egress on which port. This patch teaches networkd to add entries to this database manually by adding `[BridgeMDB]` sections to `.network` configuration files.
| * | sd-netlink: add MDB typesDaniel Mack2020-09-104-0/+40
| | | | | | | | | | | | These are used to configure multicast membership entries of bridge ports.