summaryrefslogtreecommitdiffstats
path: root/src/socket-proxy (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-07-08table add table_log_sort_error()fangxiuning6-5/+8
2020-07-08table add table_log_show_error()fangxiuning10-14/+17
2020-07-06userdbctl homectl use table_log_add_error()fangxiuning3-9/+9
Signed-off-by: fangxiuning <fangxiuning123@126.com>
2020-07-06travis: install missing deps for the Coverity runFrantisek Sumsal1-2/+6
Let's install libzstd & libfido2 to cover two recently added features. In case of libfido2 this should also get rid of the 'dead code' issues found by Coverity, like CID#1430168, CID#1430167, CID#1430166, or CID#1430165.
2020-07-05catalog: update Polish translationPiotr Drąg1-3/+57
2020-07-05test: use KILL instead of SIGKILL in TEST-52-HONORFIRSTSHUTDOWNFrantisek Sumsal1-2/+2
SIG-prefixed signals for `kill` are not POSIX compliant, so on Ubuntu CI (which defaults to dash instead of bash) the TEST-52 contains following error: [ 9693.549638] sh[51]: + systemctl poweroff --no-block [ 9693.553130] systemd-logind[26]: System is powering down. [ 9693.608911] sh[54]: /bin/sh: 1: kill: Illegal option -S This can be reproduced manually as well, either by running dash, or bash in POSIX mode: $ dash -c 'kill -SIGKILL 123' dash: 1: kill: Illegal option -S $ bash --posix -c 'kill -SIGKILL 123' bash: line 0: kill: SIGKILL: invalid signal specification
2020-07-05sd-device: be more defensive in FOREACH_DEVICE_SYSATTRZbigniew Jędrzejewski-Szmek1-0/+4
Follow-up for fadcc1222949ed57ca2ce143f2eb9b93ea0dab1b.
2020-07-04core: set private section name for automount unitsDan Callaghan1-0/+1
Because this was left unset, the unit_write_setting() function was refusing to write out the automount-specific TimeoutIdleSec= and DirectoryMode= settings when creating transient automount units. Set it to the proper value in line with other unit types.
2020-07-04hwdb: Pavilion 13 x360: Tablet mode and SYSRQ keyMaxVerevkin1-2/+7
2020-07-03udevadm: sort entries in `udevadm info -a` by attribute nameYu Watanabe1-25/+52
2020-07-03sd-device: make FOREACH_DEVICE_SYSATTR() list attributes in subdirectoriesYu Watanabe1-13/+58
Then, `udevadm info -a` can show subdir attributes. Closes #12191.
2020-07-03initialize arg_clock_usecgzjsgdsb1-0/+1
2020-07-03NEWS: mention .network [SR-IOV] sectionYu Watanabe1-0/+3
2020-07-03NEWS: WithoutRA= is not a boolean option anymoreYu Watanabe1-6/+6
2020-07-02NEWS: tweak WithoutRA= description a bit moreZbigniew Jędrzejewski-Szmek1-6/+6
Follow-up for cbdf02952e831aa12c34f15d2466995c4ca4fc5b.
2020-07-02network: tc: rename several settings which take size in bytesYu Watanabe15-71/+142
2020-07-02NEWS: update document about WithoutRA=Yu Watanabe1-6/+6
Follow-up for 838d39af93e16e749ef90acf915a634b380abbf6.
2020-07-02hwdb: Add accel orientation quirk for UMAX VisionBook 10Wi ProJiri Slaby1-0/+3
2020-07-02tree-wide: "unparseable" → "unparsable"Zbigniew Jędrzejewski-Szmek3-15/+15
"unparsable" is the more common spelling. We already pick "movable" over "moveable". Let's do the same with this pair.
2020-07-02resolve: use appropriate typeYu Watanabe1-1/+1
2020-07-02util: use setsockopt_int() at one more placeYu Watanabe1-4/+4
2020-07-02libsystemd-network: rename index -> ifindexYu Watanabe9-23/+22
2020-07-02dhcp6, radv: only accept valid ifindexYu Watanabe4-5/+5
2020-07-02tree-wide: spell "lifecycle" without hyphen everywhereZbigniew Jędrzejewski-Szmek2-2/+2
We had 2 more instances of unhyphentated spelling.
2020-07-02tree: wide "the the" and other trivial grammar fixesZbigniew Jędrzejewski-Szmek16-19/+19
2020-07-02network: Allow DHCPv6 client to start solicit modeSusant Sahani6-6/+34
Now DHCPv6 client start only DHCPv6 INFORMATION-REQUEST mode. Let's enable Solicit mode too.
2020-07-01l10n: update Czech TranslationAsciiWolf1-16/+31
2020-07-01update TODOLennart Poettering1-2/+2
2020-07-01man: update homectl man page with documentation for new featuresLennart Poettering1-9/+53
2020-07-01docs: document new FIDO2 user record fieldsLennart Poettering1-11/+37
2020-07-01homectl: add --pkcs11-uri=auto and --pkcs-11-uri=list supportLennart Poettering5-14/+188
We have the same for FIDO2 devices, for listing suitable devices, or picking the right one automatically, let's add that for PKCS11 too.
2020-07-01homectl: add acquired fido2 PIN to user recordLennart Poettering1-0/+8
If we successfully acquired the PIN for the fido2 key, let's add it to our user record, so that we can pass it to homed, which will need it too.
2020-07-01homectl: split out pkcs#11 related code bits into own .c/.h fileLennart Poettering4-339/+354
There's some highly specific PKCS#11 code in homectl.c. Let's split that out, since it is easily isolatable, to make homectl.c a bit more readable. No funcional changes, just some moving around and renaming two functions to make them more suitably named when exported.
2020-07-01homectl: rework how we log when doing a home directory updateLennart Poettering1-4/+36
When updating a home directory we might update the record first, then resize the image and finally synchronize the passwords to the storage layers. These are three individually authenticated operations. Since each might require touching a FIDO2 or PKCS#11 key we should say what we are doing. Hence do so. Usually we are pretty quiet with what we do, and let's stick to that. Hence show this information only if we actually do more than one thing. If we only update (and do not resize/sync passwords) then let's be quiet as usual, as the command line then sufficiently clarifies what we are doing.
2020-07-01homectl: do generic error handling/retry also when creating a home directoryLennart Poettering1-16/+19
After all, when creating we might need interaction with the security token too, and our initial attempt to create the user will fail, since we do not allow interactive auth on the security token, so that we then can print a log message and retry with interactive auth then enabled.
2020-07-01homectl: show touch emoji when asking for PKCS#11 protected auth pathLennart Poettering1-1/+3
2020-07-01pam-systemd-home: print helpful message when token's PIN is lockedLennart Poettering1-0/+5
2020-07-01homed: add support for authenticating with fido2 hmac-secret tokensLennart Poettering23-153/+568
2020-07-01homectl: add support for enrolling FIDO2 HMAC-SECRET tokensLennart Poettering5-3/+604
2020-07-01user-record: add fields for FIDO2 HMAC authentication optionsLennart Poettering3-138/+317
2020-07-01build-sys: add libfido2 as optional dependencyLennart Poettering2-0/+14
2020-07-01user-record: rename JSON field "pkcs11Pin" to "tokenPin"Lennart Poettering8-34/+37
We'd like to use it for FIDO2 tokens too, and the concept is entirely generic, hence let's just reuse the field, but rename it. Read the old name for compatibility, and treat the old name and the new name as identical for most purposes.
2020-07-01user-record: securely erase pkcs#11 when assigned NULL tooLennart Poettering1-1/+1
2020-07-01homectl: add missing log messages when json_variant_format() failsLennart Poettering1-2/+2
2020-07-01pkcs11-util: reduce scope of a variableLennart Poettering1-20/+21
2020-07-01macro: add new FOREACH_POINTER() macro magicLennart Poettering2-0/+86
This allows us to iterate through a series of specified pointers. It's a bit like FOREACH_STRING(), but for all kinds of pointers.
2020-07-01locale-util: add support for touch emojiLennart Poettering3-3/+9
We can use this to highlight when users are supposed to touch their security tokens.
2020-07-01doc: add recentry introduced transient settingsYu Watanabe1-20/+25
Also sort entries for service settings.
2020-07-01test-network: add tests for SR-IOVYu Watanabe2-2/+93
This also adjusts test_sysctl_disable_ipv6(), as rt_trap flag may be added to routes on some environments.
2020-07-01network: add MACAddress= setting in [SR-IOV] sectionYu Watanabe5-0/+63