| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
| |
Just some refactoring: let's place the various verity related parameters
in a common structure, and pass that around instead of the individual
parameters.
Also, let's load the PKCS#7 signature data when finding metadata
right-away, instead of delaying this until we need it. In all cases we
call this there's not much time difference between the metdata finding
and the loading, hence this simplifies things and makes sure root hash
data and its signature is now always acquired together.
|
|\
| |
| | |
network: introduce Bare UDP Tunnelling
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|\ \
| | |
| | | |
network: Allow vxlan to be created without .network file
|
| | | |
|
| |/ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Graphics tablet devices comprise multiple event nodes, usually a Pen, Finger
and Pad node (that's how the kernel postfixes them). Pen and Pad are labeled
as ID_INPUT_TABLET but the pad doesn't actually send stylus events - it
doesn't usually have BTN_TOOL_PEN, merely BTN_STYLUS.
For the last several years, libwacom has set ID_INPUT_TABLET_PAD for all pad
devices known to it based on vid/pid and a "* Pad" name match. That does not
cover devices not in libwacom. libinput relies on ID_INPUT_TABLET_PAD to
initialize the pad backend.
We can't drop ID_INPUT_TABLET without breaking userspace, but we can add
ID_INPUT_TABLET_PAD ourselves - where a device has BTN_0 in addition to
BTN_STYLUS, let's add it as a pad.
There are some devices (notably: bamboos) that use BTN_LEFT instead of BTN_0
but they are relatively rare and there's a risk of mislabeling those devices,
so let's just stick with BTN_0 only.
|
|/ |
|
|\
| |
| | |
network: follow ups for bridge MDB support
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
nor all nodes address
|
| | |
|
| | |
|
| | |
|
| | |
|
|\ \
| | |
| | | |
repart: don't mark image files generated with --empty=create executable
|
| | | |
|
|\ \ \
| |/ /
|/| | |
Expose the path to rc.local in the man page
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Different systems use different paths for it and users are confused when the
man page has a path different than the one on the local system.
https://bugzilla.redhat.com/show_bug.cgi?id=1876905
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
RC_LOCAL_SCRIPT_PATH_START and RC_LOCAL_SCRIPT_PATH_STOP were was originally
added in the conversion to meson based on the autotools name. In
44508946534eee032927c263b79464832656dd6e RC_LOCAL_SCRIPT_PATH_STOP was dropped.
We don't need to use such a long name.
|
|\ \ \
| | | |
| | | | |
minor cleanups to the dissector code
|
| | | |
| | | |
| | | |
| | | | |
No code changes, just some reordering.
|
| | | | |
|
| | | |
| | | |
| | | |
| | | |
| | | | |
After all, it actually takes a designator argument, not a partition
index or so.
|
| |/ /
| | |
| | |
| | |
| | | |
It does pretty much exactly what systemd-dissect does and is a manual
test, hence let's remove it as redundant code.
|
| |/
|/|
| |
| | |
Retire /var/lib{,/private}/{quux,waldo} after they have served their purpose.
|
|\ \
| | |
| | | |
Allow loopback addresses
|
| | |
| | |
| | |
| | |
| | | |
With this change, only manager_connect() in timesync.d uses AI_ADDRCONFIG. There
we are connecting to a remove server, so the flag is appropriate.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
By settings AI_ADDRCONFIG in hints we cannot for example resolve "localhost"
when the local machine only has a loopback interface. This seems like an
unnecessary restriction, drop it.
Inspired by https://bugzilla.redhat.com/show_bug.cgi?id=1839007.
|
|\ \ \
| | | |
| | | | |
SystemCallFilter, SystemCallErrorAction error actions kill and log
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
With new directive SystemCallLog= it's possible to list system calls to be
logged. This can be used for auditing or temporarily when constructing system
call filters.
---
v5: drop intermediary, update HASHMAP_FOREACH_KEY() use
v4: skip useless debug messages, actually parse directive
v3: don't declare unused variables with old libseccomp
v2: fix build without seccomp or old libseccomp
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Define explicit action "kill" for SystemCallErrorNumber=.
In addition to errno code, allow specifying "kill" as action for
SystemCallFilter=.
---
v7: seccomp_parse_errno_or_action() returns -EINVAL if !HAVE_SECCOMP
v6: use streq_ptr(), let errno_to_name() handle bad values, kill processes,
init syscall_errno
v5: actually use seccomp_errno_or_action_to_string(), don't fail bus unit
parsing without seccomp
v4: fix build without seccomp
v3: drop log action
v2: action -> number
|
| |_|/
|/| |
| | |
| | |
| | |
| | |
| | | |
3e5f04bf6468fcb79c080f02b0eab08f258bff0c was trying to do the right thing, but
the resulting list does not match the autogenerated order (which is the same as
the order in vtable definition). I assume the addition was done manually. Fix
the order so that dbus-docs-fresh test is not unhappy.
|
| | |
| | |
| | |
| | |
| | | |
Otherwise a 'Before=remote-fs.target' dependency is added to the mount unit
which defeats the purpose of 'bg' option.
|
|/ /
| |
| |
| | |
Prompted-by: #16632
|
| | |
|
| | |
|
|\ \
| | |
| | | |
network: add support for setting MDB entries
|
| | | |
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Multicast snooping enabled bridges maintain a database for multicast
port memberships to decide which mulicast packet is supposed to
egress on which port.
This patch teaches networkd to add entries to this database manually
by adding `[BridgeMDB]` sections to `.network` configuration files.
|
| | |
| | |
| | |
| | | |
These are used to configure multicast membership entries of bridge ports.
|