Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2020-02-04 | sysctl: set ipv4 settings in a race-free way | Zbigniew Jędrzejewski-Szmek | 1 | -0/+6 | |
Fixes #6282. This solution is a bit busy, but we close the race without setting *.all.*, so it is still possible to set a different setting for particular interfaces. Setting just "default" is not very useful because any interfaces present before systemd-sysctl is invoked are not affected. Setting "all" is too harsh, because the kernel takes the stronger of the device-specific setting and the "all" value, so effectively having a weaker setting for specific interfaces is not possible. | |||||
2020-02-04 | sysctl: add glob syntax to sysctl.d files | Zbigniew Jędrzejewski-Szmek | 2 | -70/+156 | |
This is intended for net.*.conf.*.foo files. Setting just "default" is not very useful because any interfaces present before systemd-sysctl is invoked are not affected. Setting "all" is too harsh, because the kernel takes the stronger of the device-specific setting and the "all" value, so effectively having a weaker setting for specific interfaces is not possible. Let's add a way in which can set "default" first and then all the others without "all". | |||||
2020-02-03 | l10n: update Czech Translation | AsciiWolf | 1 | -13/+97 | |
2020-02-03 | core: call dynamic_user_acquire() only when 'group' is non-null | Yu Watanabe | 1 | -1/+1 | |
When unit is reloaded, and the reloaded unit has bad-setting, then unit_patch_contexts() is not called and exec_context::user and group may not be configured. A minimum reproducer for the case is: - step 1. $ sudo systemctl edit --full hoge.service [Service] oneshot ExecStart=sleep 1h - step 2. $ sudo systemctl start hoge.service - step 3. $ sudo systemctl edit --full hoge.service [Service] Type=oneshot ExecStart=@bindir@/sleep 1h DynamicUser=yes Then pid1 crashed. Fixes #14733. | |||||
2020-02-03 | journal: drop unreachable path | Yu Watanabe | 1 | -2/+2 | |
2020-02-03 | po: update French translation | splantefeve | 1 | -6/+63 | |
2020-02-03 | udev: add {Receive,Transmit}ChecksumOffload= settings | Yu Watanabe | 5 | -25/+50 | |
Closes #14661. | |||||
2020-02-03 | network: add SuppressPrefixLength option to RoutingPolicyRule (#14736) | Naïm Favier | 9 | -230/+337 | |
Closes #14724. | |||||
2020-02-02 | po: update Japanese translation | Yu Watanabe | 1 | -9/+90 | |
2020-02-02 | po: update Polish translation | Piotr Drąg | 1 | -2/+59 | |
2020-02-02 | update NEWS | Lennart Poettering | 1 | -0/+50 | |
2020-02-02 | util: uid_t, gid_t, and pid_t must be 32bit | Yu Watanabe | 5 | -34/+9 | |
We already have assert_cc(sizeof(uid_t) == sizeof(uint32_t)) or friends at various places. | |||||
2020-02-02 | meson: fix feature list | Yu Watanabe | 1 | -1/+1 | |
2020-02-02 | sysusers: support creating users with a specific primary group | David Michael | 12 | -23/+88 | |
This extends the "uid:gid" syntax for "u" lines so that a group name can be given instead of a GID. This requires that the group is either queued for creation by sysusers, or it is already defined on the system. Closes #14340 | |||||
2020-02-02 | test-network: add test for UID based routing policy | Yu Watanabe | 2 | -0/+40 | |
2020-02-02 | network: support UID based routing policy | Yu Watanabe | 6 | -2/+100 | |
Closes #14666. | |||||
2020-02-02 | util: add parse_uid_range() helper function | Yu Watanabe | 2 | -0/+24 | |
2020-02-01 | meson, man: do not install pam_systemd_home(8) when pam or homed is disabled | Yu Watanabe | 3 | -2/+5 | |
Fixes #14725. | |||||
2020-02-01 | test: don't install /etc/securetty | Frantisek Sumsal | 1 | -1/+0 | |
Having /etc/securetty in test containers prevents root from logging into them: ``` Jan 31 10:15:11 systemd-testsuite login[69]: pam_securetty(login:auth): access denied: tty 'pts/0' is not secure ! Jan 31 10:15:11 systemd-testsuite login[69]: FAILED LOGIN 1 FROM pts/0 FOR root, Authentication failure ``` | |||||
2020-01-31 | test: also check the result of merge_gid_lists() | Yu Watanabe | 1 | -0/+4 | |
Fixes CID#1412354. | |||||
2020-01-31 | user-util: fix use after free() on error path | Yu Watanabe | 1 | -3/+1 | |
Fixes CID#1412356. | |||||
2020-01-31 | userdbd: fix memleak | Yu Watanabe | 1 | -1/+1 | |
Fixes CID#1412416. | |||||
2020-01-31 | update TODO | Lennart Poettering | 1 | -5/+0 | |
2020-01-31 | man: document --namespace= switch of journalctl | Lennart Poettering | 1 | -0/+12 | |
2020-01-31 | man: document the new sd_journal_open_namespace() API | Lennart Poettering | 2 | -1/+25 | |
2020-01-31 | man: document LogNamespace= unit setting | Lennart Poettering | 1 | -0/+34 | |
2020-01-31 | man: document new _NAMESPACE= journal field | Lennart Poettering | 1 | -0/+9 | |
2020-01-31 | man: document journald@NAMESPACE.conf | Lennart Poettering | 2 | -27/+25 | |
2020-01-31 | man: document journald namespaces | Lennart Poettering | 2 | -6/+54 | |
2020-01-31 | journalctl: underline sections in --help | Lennart Poettering | 1 | -6/+7 | |
2020-01-31 | nspawn: voidify umount_verbose() | Yu Watanabe | 1 | -1/+1 | |
Fixes CID#1415122. | |||||
2020-01-31 | user-record-util: add missing error check | Yu Watanabe | 1 | -0/+2 | |
Fixes CID#1415123. | |||||
2020-01-31 | homework: fix errno in log_error_errno() | Yu Watanabe | 1 | -4/+3 | |
Fixes CID#1415124. | |||||
2020-01-31 | home: add missing variable initialization | Yu Watanabe | 1 | -1/+1 | |
Fixes CID#1415126. | |||||
2020-01-31 | units: define RuntimeDirectory= in systemd-journald.service | Lennart Poettering | 1 | -0/+2 | |
It doesn't get us much, but makes the differences between the templated and non-templated versions a bit smaller. | |||||
2020-01-31 | units: sort settings in systemd-journald.service again | Lennart Poettering | 1 | -1/+1 | |
2020-01-31 | tmpfiles: apply ACLs to top-level journal directory in /run, too | Lennart Poettering | 1 | -0/+3 | |
We already apply them to the directory in /var. Let's do the same in /run too. That's because due to the log namespace logic we nowadays can gain additional subdirs there during regular operation. | |||||
2020-01-31 | tmpfiles: merge lines for the same inodes | Lennart Poettering | 1 | -18/+9 | |
2020-01-31 | test: add simple test for log namespaces | Lennart Poettering | 3 | -0/+59 | |
2020-01-31 | journald: add ability to activate by varlink socket | Lennart Poettering | 5 | -12/+47 | |
If we have exit on idle, then operations such as "journalctl --namespace=foo --rotate" should work even if the journal daemon is currently not running. (Note that we don't do activation by varlink for the main instance of journald, I am not sure the deadlocks it might introduce are worth it) | |||||
2020-01-31 | journald: add exit on idle | Lennart Poettering | 4 | -4/+146 | |
2020-01-31 | varlink: add ability to register callback for disconnections | Lennart Poettering | 2 | -2/+23 | |
2020-01-31 | varlink: add API for determining number of current connections | Lennart Poettering | 2 | -0/+8 | |
2020-01-31 | journald: use structured initialization | Lennart Poettering | 1 | -3/+5 | |
2020-01-31 | journald: add logging for one error we lacked logging for | Lennart Poettering | 1 | -1/+3 | |
2020-01-31 | systemctl: show logs for correct namespace of service | Lennart Poettering | 5 | -1/+10 | |
2020-01-31 | journalctl: drop misplaced empty line | Lennart Poettering | 1 | -1/+0 | |
2020-01-31 | journalctl: add new --namespace= switch for showing logs for namespace | Lennart Poettering | 1 | -4/+34 | |
2020-01-31 | journal: make constant argument actually 'const' | Lennart Poettering | 1 | -1/+1 | |
2020-01-31 | journal: allow opening journal files specific to some namespace | Lennart Poettering | 4 | -19/+102 | |