| Commit message (Collapse) | Author | Files | Lines |
|---|
|
Relying on symbol aliasing seems to be rather unreliable. Instead just
use some light #ifdefery.
Fixes: #24630
|
|
No functional changes, just refactoring.
Note, this also makes synthesize_change() propagate the error from
synthesize_change_one(). However, the caller of synthesize_change()
ignores the failure anyway, hence the change does not take any effect.
|
|
It provides recognizable error if /proc is not mounted.
|
|
This works becuase TPM2_FLAGS_USE_PIN is 1 and bool is a 1 so the bits
line up as expected, however if for some reason flags change values and
for clarity check if the boolean indicates this flag and pass the flag
value.
Signed-off-by: William Roberts <william.c.roberts@intel.com>
|
|
Follow-up for f93ba375301e43900f1fe5a93a2b33b1efcc73e0.
|
|
|
|
This reverts commits e22916e61d1fdb7b46918b605ebf783d9017f9d8 and
1e146d738232acbe7f72903e9c5e4d1166ea67f5.
|
|
This way we can use it directly in measure.c, and thus remove a bit of
redundant code.
OpenSSL prefers uppercasing the MD names, others don't hence let's be
lenient here.
|
|
|
|
|
|
|
|
|
|
As usual, it seems to be mostly additions and corrections. Sadly, it seems a
bit of mojibake has crept in in various places. But it's hard to correct, in
particular because it's hard to detect all cases automatically. I think we can
ignore this for now.
When I run this a few weeks ago, ma-large.txt was gutted and 20-OUI.hwdb was
siginificantly smaller. For whatever reasons, it's back to normal now.
|
|
No functional changes, just refactoring.
|
|
No functional changes, just refactoring.
|
|
|
|
No functional changes, just refactoring.
|
|
No functional changes, just refactoring.
|
|
As the stored values are actually path. Just for safety.
This also drops unnecessary duplication of path.
|
|
Systemd's credential interface is not yet natively supported by all
programs yet. Hence it's often required to run scripts to massage
secrets in the way the programs expect it.
This commit allows the ExecStartPre commands to access credentials.
Fixes https://github.com/systemd/systemd/issues/19604
|
|
|
|
|
|
Addresses https://github.com/systemd/systemd/pull/24646#discussion_r973691797.
|
|
|
|
|
|
|
|
We already checked that the sd_device object 'dev' is for a whole block
device. So, -ENOENT should not be triggeered here, and if it is, there
exists something spurious. Hence we should not ignore the failure.
|
|
This should not change anything effectively.
|
|
If the filename of a device symlink is too long, then the temporary
filename may become invalid, and we fail to create symlink.
The function `tempfn_random()` used in symlink_atomic_full() generates
a safe temporary filename.
Note that, thanks to the PR #23043, now only one worker can handle
the same symlink simultaneously. Hence, the device ID based temporary
filename is not necessary.
|
|
partition_enumerator_new()
To make it consistent what returned by block_device_get_whole_disk().
|
|
|
|
No functional changes, just preparation for later commits.
|
|
Previously, even if sd_device_get_subsystem() returns -ENOENT for block
device, we accepted that. This makes the check slightly stricter.
|
|
unique name
Otherwise we get error from libcryptsetup like the following:
systemd[1234]: Cannot use device /dev/loop5 which is in use (already mapped or mounted).
|
|
Follow-up for 790da548b0c37af60aed2f46867ba3885ea78718.
|
|
Currently, it is not necessary to set partno or architecture in
dissect_image_new(), but just for safety.
Preparation for later commits.
|
|
To make dissect_image() shorter.
No functional changes, just refactoring.
|
|
To make LoopDevice object freed after DissectedImage is freed.
At least currently, this should not change anything. Preparation for
later commits.
|
|
|
|
No functional changes. Preparation for later commits.
|
|
|
|
The DM block device may be still used by other processes.
|
|
Let's say what we actually measure, not what into (which is obvious
anyway).
This is generally more descriptive, but also good for later work that
allows measuring the boot phase too.
|
|
|
|
These paths are read-only mount points. Hence, we cannot remove the
contents.
|
|
And rebreak long lines.
This should take no effective change, just refactoring.
|
|
"Disk Size" could be mistaken for "Size of the Disk".
|
|
In the context of a table, both would be generally understood to have the same
meaning. "n/a" is a strange beast. It was useful when tables were produced on
the typewriter with "---------" used to separate rows. It is visually more
pleasing to use "-", and there is no risk of it being mistaken for a row
separator.
|
|
We have free_and_replace() and friends, they are all named with lower
letters, even they are macros, not functions.
For consistency, let's rename CLOSE_AND_REPLACE() with lower letters.
This also mekes the macro used more places.
|
|
activation failed
|
