summaryrefslogtreecommitdiffstats
path: root/man/org.freedesktop.login1.xml (follow)
Commit message (Collapse)AuthorAgeFilesLines
* man: document "web" session typeAllison Karlitskaya2024-08-261-2/+3
| | | | | | | This has been supported since e9e74f28d783 but never got documented. Add it to the man pages (plus one comment in a header). Closes #34127.
* logind: DesignatedMaintenanceTime is added in v257 and constantMike Yuan2024-08-221-4/+4
| | | | | | Follow-up for 0e10c3d8724b0a5d07871c9de71565ac91dd55b7 Addresses https://github.com/systemd/systemd/pull/25049#discussion_r1647513862
* logind: add PreparingForShutdownWithMetadata propertyLuca Boccassi2024-08-051-3/+14
| | | | | | | The PrepareForShutdownWithMetadata signal was added via e4aab5cf1a00bbb73f325f4f785dd4171ccdae77 but a corresponding property was not. A property has to be a single type, so the bool needs to be one of the key/value pairs as 'ba{sv}' is not a valid property.
* logind: always check for inhibitor locksLuca Boccassi2024-07-251-9/+14
| | | | | | | | | | | | | | | | | | | | | | | Currently inhibitors are bypassed unless an explicit request is made to check for them, or even in that case when the requestor is root or the same uid as the holder of the lock. But in many cases this makes it impractical to rely on inhibitor locks. For example, in Debian there are several convoluted and archaic workarounds that divert systemctl/reboot to some hacky custom scripts to try and enforce blocking accidental reboots, when it's not expected that the requestor will remember to specify the command line option to enable checking for active inhibitor locks. Also in many cases one wants to ensure that locks taken by a user are respected by actions initiated by that same user. Change logind so that inhibitors checks are not skipped in these cases, and systemctl so that locks are checked in order to show a friendly error message rather than "permission denied". Add new block-weak and delay-weak modes that keep the previous behaviour unchanged.
* login: Add a new SecureAttentionKey dbus signal when Ctrl+Alt+Shift+Esc is ↵nerdopolis2024-06-241-0/+16
| | | | pressed
* logind: implement maintenance timeLudwig Nussel2024-06-201-3/+12
| | | | | | | | | | | | | | | | | | | | | Update frameworks that work automatically in the background occasionally need to schedule reboots. Systemd-logind already provides a nice mechanism to schedule shutdowns, send notfications and block logins short before the time. Systemd has a framework for calendar events, so we may conveniently use logind to define a maintenance time for reboots. The existing ScheduleShutdown DBus method in logind expects a usec_t with an absolute time. Passing USEC_INFINITY as magic value now tells logind to take the time from the configured maintenance time if set. "shutdown -r" leverages that and uses the maintenance time automatically if configured. The one minute default is still used if nothing was specified. Similarly the new 'auto' setting for the --when parameter of systemctl uses the maintenance time if configured or a one minute timer like the shutdown command.
* Fix confusion between killer and preyZbigniew Jędrzejewski-Szmek2024-06-191-2/+2
| | | | | "who" is the entity doing the killing, "whom" is the target. Follow-up for 4ccde410a3fc141c9ddf285f24a22dfea99e0287.
* man: update links to "Inhibitor Locks"Zbigniew Jędrzejewski-Szmek2024-05-281-2/+2
|
* logind: make ReleaseSession "unprivileged" and allow closing of own sessionZbigniew Jędrzejewski-Szmek2024-05-201-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes https://github.com/systemd/systemd/issues/28514. Quoting https://github.com/systemd/systemd/issues/28514#issuecomment-1831781486: > Whenever PAM is enabled for a service, we set up the PAM session and then > fork off a process whose only job is to eventually close the PAM session when > the service dies. That services we run with service privileges, both to > minimize attack surface and because we want to use PR_SET_DEATHSIG to be get > a notification via signal whenever the main process dies. But that only works > if we have the same credentials as that main process. > > Now, if pam_systemd runs inside the PAM stack (which it normally does) it's > session close hook will ask logind to synchronously end the session via a bus > call. Currently that call is not accessible to unprivileged clients. And > that's the part we need to relax: allow users to end their own sessions. The check is implemented in a way that allows the kill if the sender is in the target session. I found 'sudo systemctl --user -M "zbyszek@" is-system-running' to be a convenient reproducer. Before: May 16 16:25:26 x1c systemd[1]: run-u24754.service: Deactivated successfully. May 16 16:25:26 x1c dbus-broker[1489]: A security policy denied :1.24757 to send method call /org/freedesktop/login1:org.freedesktop.login1.Manager.ReleaseSession to org.freedesktop.login1. May 16 16:25:26 x1c (sd-pam)[3036470]: pam_systemd(login:session): Failed to release session: Access denied May 16 16:25:26 x1c systemd[1]: Stopping session-114.scope... May 16 16:25:26 x1c systemd[1]: session-114.scope: Deactivated successfully. May 16 16:25:26 x1c systemd[1]: Stopped session-114.scope. May 16 16:25:26 x1c systemd[1]: session-c151.scope: Deactivated successfully. May 16 16:25:26 x1c systemd-logind[1513]: Session c151 logged out. Waiting for processes to exit. May 16 16:25:26 x1c systemd-logind[1513]: Removed session c151. After: May 16 17:02:15 x1c systemd[1]: run-u24770.service: Deactivated successfully. May 16 17:02:15 x1c systemd[1]: Stopping session-115.scope... May 16 17:02:15 x1c systemd[1]: session-c153.scope: Deactivated successfully. May 16 17:02:15 x1c systemd[1]: session-115.scope: Deactivated successfully. May 16 17:02:15 x1c systemd[1]: Stopped session-115.scope. May 16 17:02:15 x1c systemd-logind[1513]: Session c153 logged out. Waiting for processes to exit. May 16 17:02:15 x1c systemd-logind[1513]: Removed session c153. Edit: this seems to also fix https://github.com/systemd/systemd/issues/8598. It seems that with the call to ReleaseSession, we wait for the pam session close hooks to finish. I inserted a 'sleep(10)' after the call to ReleaseSession in pam_systemd, and things block on that, nothing is killed prematurely.
* man: update D-Bus docs with new callsLennart Poettering2024-02-141-0/+10
|
* logind: add ability to upgrade session class from 'user-incomplete' to 'user'Lennart Poettering2024-02-141-1/+0
|
* man: suffix signals with ()Frantisek Sumsal2024-01-231-37/+37
| | | | | | | | | Since signals can take arguments, let's suffix them with () as we already do with functions. To make sure we remain consistent, make the `update-dbus-docs.py` script check & fix any occurrences where this is not the case. Resolves: #31002
* logind-dbus: introduce ListSessionsEx() callMike Yuan2024-01-171-4/+17
| | | | As per https://github.com/systemd/systemd/pull/30884#discussion_r1448938737
* logind: Mark LidClosed property as "emits change"Carlos Garnacho2024-01-101-1/+0
| | | | | | | It may be useful for DEs to follow changes on this property, esp. now that recent UPower has removed its own lid handling code. Related: https://gitlab.freedesktop.org/upower/upower/-/commit/07565ef6a1aa4a115f8ce51e259e408edbaed4cc
* man: use same version in public and system ident.David Tardon2023-12-251-1/+1
|
* logind: introduce Sleep() call and action that automatically choose a sleep ↵Mike Yuan2023-12-051-21/+37
| | | | operation
* login: mark the TTY property as "emits change"Frantisek Sumsal2023-11-161-1/+0
| | | | | | | Triggered by the SetTTY() method. Follow-up to 092e6cd19ad. Addresses: https://github.com/systemd/systemd/pull/30043#pullrequestreview-1733628935
* login: mark the Display property as "emits change"Frantisek Sumsal2023-11-151-1/+0
| | | | | | | | | | | | | With the introduction of SetDisplay() method in 4885d7490b2 the Display property emits a "properties changed" message every time the display is changed using this method, so mark it appropriately. Caught by systemd/systemd#30029: systemd-logind[1366]: Got message type=method_call sender=:1.165 destination=org.freedesktop.login1 path=/org/freedesktop/login1/session/_310 interface=org.freedesktop.login1.Session member=SetDisplay cookie=8 reply_cookie=0 signature=s error-name=n/a error-message=n/a systemd-logind[1366]: Assertion 'v->vtable->flags & SD_BUS_VTABLE_PROPERTY_EMITS_CHANGE || v->vtable->flags & SD_BUS_VTABLE_PROPERTY_EMITS_INVALIDATION' failed at src/libsystemd/sd-bus/bus-objects.c:2141, function emit_properties_changed_on_interface(). Ignoring. Follow-up to 4885d7490b2.
* logind: introduce CreateSessionWithPIDFD()Michal Sekletar2023-10-261-5/+32
| | | | | This new D-Bus API uses pidfd to refer to the session leader. Also, pam_systemd will try to make use of it when pidfd support is available.
* systemctl: automatically softreboot/kexec if set up on rebootLuca Boccassi2023-10-201-7/+11
| | | | | | | | | Automatically softreboot if the nextroot has been set up with an OS tree, or automatically kexec if a kernel has been loaded with kexec --load. Add SYSTEMCTL_SKIP_AUTO_KEXEC and SYSTEMCTL_SKIP_AUTO_SOFT_REBOOT to skip the automated switchover.
* man: add version information for dbus interfacesAbderrahim Kitouni2023-09-191-0/+19
| | | | | These only go back to version 250 which is the first version to provide the export-dbus-interfaces build target.
* logind: add PrepareForShutdownWithMetadata signalLuca Boccassi2023-09-111-4/+13
| | | | | | | | | | | | The existing signal doesn't say which type of shutdown is going to happen. With the introduction of soft-reboot, it is useful to have this information broadcasted, so that clients can choose to do different things based on the reboot type. Add a{sv} as the payload so that more metadata can be added later if needed, without needing to add yet another signal. Send both old and new signal for backward compatibility, and send the new one first so that clients can just wait for the first one on both old and new systems.
* man: document the soft reboot operationLennart Poettering2023-06-021-15/+16
|
* sd-login: add SetTTY session object #26611Thorsten Kukuk2023-04-251-0/+8
|
* Merge pull request #24242 from msekletar/terminate-idle-sessionsLennart Poettering2022-08-251-0/+6
|\ | | | | Add option to stop idle sessions after specified timeout
| * logind: add option to stop idle sessions after specified timeoutMichal Sekletar2022-08-241-0/+6
| | | | | | | | | | Thanks to Jan Pazdziora <jpazdziora@redhat.com> for providing a patch which implemeted a PoC of this feature.
* | man: similar → similarlyZbigniew Jędrzejewski-Szmek2022-08-231-7/+8
|/ | | | | | | | | Something *is* similar Something *works* similarly Something does something, similarly to how something else does something See https://sites.ulethbridge.ca/roussel/2017/11/29/similar-and-similarly-are-they-similar/ for a clear explanation.
* logind-session-dbus: allow to set display name via dbusDavid Tardon2022-06-221-0/+8
| | | | | | | | Currently, the only way to set display name of a graphical session is to pass it to CreateSession(). But modern display managers like gdm start the display server as part of the user session, which means that the display name isn't known yet when the session is being created. Hence, let's make it possible to set it later.
* man: fix typoYu Watanabe2022-05-071-1/+1
|
* man: deduplicate dbus versioning refZbigniew Jędrzejewski-Szmek2022-05-051-6/+1
|
* man: beef up o.fd.login1 page a bit and recommend busctl tooZbigniew Jędrzejewski-Szmek2022-05-051-3/+27
| | | | gdbus is an external program, so it makes sense to recommend busctl.
* logind: expose long press actions on D-BusLennart Poettering2022-04-051-0/+30
| | | | | | | | The settings and internal varables were added, but this was never exposed on the bus. Add that. Follow-up-for: a520bb665417af7aa98dcb983f3583659bbab807 Follow-up-for: #19917
* docs: use https:// for fd.o linksZbigniew Jędrzejewski-Szmek2022-01-121-2/+2
|
* man: also add anotations for methodsYu Watanabe2021-12-241-0/+2
| | | | Fixes #21882.
* logind: Add new flag for kexec rebootDeepak Rawat2021-03-311-1/+4
| | | | Add new flag to allow kexec reboot if kernel is already loaded.
* logind: Introduce RebootWithFlags and othersDeepak Rawat2021-02-021-2/+34
| | | | | Add new systemd-logind WithFlags version for Reboot and others. These methods add a unit64 parameter, with which can send additional control flags.
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
|
* tree-wide: update web link to logind descriptionZbigniew Jędrzejewski-Szmek2020-10-191-2/+1
| | | | | https://www.freedesktop.org/wiki/Software/systemd/multiseat/ says that it is obsoleted by sd-login(3), so it doesn't make much sense to link to the former.
* man: use trailing slash on directories in more placesZbigniew Jędrzejewski-Szmek2020-10-051-1/+1
|
* man: import lxml formatting changesZbigniew Jędrzejewski-Szmek2020-08-221-1/+1
| | | | lxml insists on this, see 4fb222c4b29ec2a1a451a1e0e99c5d3c520395ab.
* Fix function description in logind man pageNicolas Fella2020-08-181-1/+1
| | | Fix a presumed copy&paste error. SetLockedHint corresponds to the "locked hint", not the "idle hint".
* man: fix links to various external man pagesZbigniew Jędrzejewski-Szmek2020-06-251-1/+1
| | | | | In cases where we used both die-net and man-pages for the same reference, I switched to use man-pages everywhere.
* login: limit nr_inodes for /run/user/$UIDTopi Miettinen2020-05-241-1/+6
| | | | | Limit number of inodes for tmpfs mounts on /run/user/$UID. Default is RuntimeDirectorySize= divided by 4096.
* man: update login1(5) for SetType()Zbigniew Jędrzejewski-Szmek2020-05-061-5/+14
| | | | Added in db72aea4a952cdfdef51eda03408d7c4a11e7359.
* man: drop CanMultiSession from documentionZbigniew Jędrzejewski-Szmek2020-05-051-8/+3
| | | | Removed in 8f8cc84ba4612e74cd1e26898c6816e6e60fc4e9.
* man: use --bus-introspect to autogenerate dbus api docsZbigniew Jędrzejewski-Szmek2020-05-051-18/+133
| | | | | | This has the advantage that the executables are always in place and we don't need any units to exist on the bus, so we can eventually hook this up into a normal build system. (Probably as a build time check.)
* man: remove gendered pronoun and reindent a paragraphZbigniew Jędrzejewski-Szmek2020-04-211-5/+6
|
* docs: use "polkit" to refer to PolicyKitZbigniew Jędrzejewski-Szmek2020-04-211-7/+8
| | | | | | See d35f51ea848ca76bd3747db69e8c5dd864e82bc3 for justification. First use in each file is turned into a link to the documentation page.
* man: fix two typosZbigniew Jędrzejewski-Szmek2020-04-211-2/+2
| | | | Pointed out by @boucman and @DaanDeMeyer during review.
* man: add markers to put all dbus entities in the directives indexZbigniew Jędrzejewski-Szmek2020-04-211-0/+282
| | | | | | | | Follow-up for f92c8d1c67bcdeba097e3203d8aafe3a31230ada. directives.index: - This index contains 3398 entries in 19 sections, referring to 333 individual + This index contains 4316 entries in 19 sections, referring to 333 individual
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-04 15:10:58 +0100