summaryrefslogtreecommitdiffstats
path: root/src (unfollow)
Commit message (Collapse)AuthorFilesLines
2019-03-13util: split out some stuff into a new file limits-util.[ch]Lennart Poettering12-154/+175
2019-03-13util: split out namespace related stuff into a new namespace-util.[ch] pairLennart Poettering17-166/+193
Just some minor reorganiztion.
2019-03-13test: don't overwrite TESTDIR if already setFrantisek Sumsal1-2/+7
2019-03-13cryptsetup: add same-cpu-crypt and submit-from-crypt-cpus optionsYu Watanabe3-0/+40
Closes #11946.
2019-03-13wait-online: use log_link_debug() or friendsYu Watanabe3-32/+24
2019-03-13network: move log_link_debug() or friends to log-link.hYu Watanabe3-24/+39
2019-03-13man: update wait-online and RequiredForOnline= settingYu Watanabe2-12/+50
2019-03-13wait-online: support $REQUIRED_OPER_STATE_FOR_ONLINE= in state fileYu Watanabe5-70/+216
This also make wait-online optionally take operstate in -i option, and adds '--operstate' option to wait-online which also takes operstate. Also, this contains huge refactoring for wait-online.
2019-03-13sd-network: add sd_network_link_get_required_operstate_for_online()Yu Watanabe2-0/+22
It reads $REQUIRED_OPER_STATE_FOR_ONLINE in serialized link data.
2019-03-13network: make RequiredForOnline= also take operational stateYu Watanabe4-1/+50
This will be used by systemd-networkd-wait-online.
2019-03-13hashmap: add hashmap_free_free_keyp and friendYu Watanabe1-0/+2
2019-03-13network: introduce 'degraded-carrier' operstate to order all statesYu Watanabe6-18/+24
Previously, 'degraded' state is ambiguous for bonding or bridge master: 1. one or more slave interfaces does not have carrier, 2. no link local address is assigned to the master, 3. combination of the above two. This makes the above case 1 and 3 are in the new 'degraded-carrier' state, and makes 'degraded' state as all slaves are active but no link local address on master.
2019-03-13network: move LinkOperationalState and relevant functions to network-util.[ch]Yu Watanabe4-27/+31
2019-03-13test-network: wait more and fix wrong operational stateYu Watanabe1-2/+2
Closes #11977.
2019-03-13test-network: add test for WireGuard.PrivateKeyFile=Yu Watanabe4-2/+17
2019-03-13wireguard: add PrivateKeyFile= optionYu Watanabe5-2/+100
Closes #11878.
2019-03-13wireguard: check whether PrivateKey= and PublicKey= are setYu Watanabe1-1/+21
2019-03-13wireguard: drop unused arguments and rename parse_wireguard_key()Yu Watanabe1-19/+19
2019-03-13wireguard: do not log wireguard keyYu Watanabe1-3/+4
It may be PrivateKey=.
2019-03-13wireguard: reuse sd_event_source objectYu Watanabe2-17/+9
2019-03-13wireguard: use NetworkConfigSection to manage [WireGuardPeer] sectionsYu Watanabe2-164/+225
This also contains huge refactoring of wireguard support.
2019-03-13test-network: add tests for invalid Address sectionsYu Watanabe2-0/+20
2019-03-13test: make network_verify() public and use it in test-networkd-confYu Watanabe3-4/+9
2019-03-13network: drop sections contain invalid settings in network_verify()Yu Watanabe18-73/+149
If e.g., an [Address] section has an invalid setting, then previously assigned settings in the section is freed, and only later settings are stored. That may cause partially broken section stored in Network object. This makes if an invalid setting is found, then set 'invalid' flag instead of freeing it. And invalid sections are dropped later by network_verify().
2019-03-13network: make all xxx_new_static() staticYu Watanabe10-11/+6
These functions are called from only config parsers, and the parsers are in the same files. So, let's make them static.
2019-03-13network: add IPv4LL route right after .network file is parsedYu Watanabe3-22/+34
Previously, the route is added when the .network config is assigned to a Link. So, if multiple links match the .network file, the route entry becomes duplicated in the corresponding Network object.
2019-03-13network: move NetworkConfigSection and related functions to networkd-util.[ch]Yu Watanabe4-46/+47
2019-03-13network: use ltype to determine netdev kind in config_parse_stacked_netdev()Yu Watanabe2-27/+10
2019-03-13test: add a testcase for ProtectHome=tmpfs vs ProtectSystem=strictYu Watanabe3-0/+15
2019-03-13core/namespace: logs mount mode when the entry is droppedYu Watanabe1-2/+23
2019-03-13core/namespace: introduce new mount mode READWRITE_IMPLICITYu Watanabe1-30/+32
ProtectSystem=strict or ProtectKernelTunable=yes create implicit read-write mounts, but they are not overridable by TemporaryFileSystem=. This makes such implicit read-write mounts use the new mount mode. So, they can be override by TemproraryFileSystem= now. A typical usecase is that ProtectSystem=strict and ProtectHome=tmpfs. Fixes #11276.
2019-03-12update TODOLennart Poettering1-0/+3
2019-03-12login: drop redundant newlineLennart Poettering1-1/+0
2019-03-12user-util: extra paranoia, make sure $SHELL can't be fucked with in suid ↵Lennart Poettering1-2/+2
programs It's better to be safe than sorry, let's not allow overriding of the user shell in suid binaries. Similar for $USER.
2019-03-12execute: no need to synthesize $HOME for uid==0 again, get_home_dir() ↵Lennart Poettering1-6/+0
already does that
2019-03-12execute: simplify paths we set as HOME/SHELL for invoked programsLennart Poettering1-0/+4
2019-03-12user-util: simplify paths retrieved from $HOME and $SHELLLennart Poettering1-4/+4
Let's add some extra paranoia, after #11910
2019-03-12user-util: be more strict when reading $HOME and $SHELLLennart Poettering1-4/+6
2019-03-12user-util: paranoia — add overflow check on ERANGE loopLennart Poettering1-0/+6
2019-03-12user-util: use SYNTHETIC_ERRNO() where we canLennart Poettering1-28/+18
2019-03-12path-util: minimize variable scopeLennart Poettering1-1/+3
2019-03-12path-util: check validity before normalization in path_simplify_and_warn()Lennart Poettering1-6/+6
As the normalization check includes a validation check the order matters.
2019-03-12user-util: filter out invalid user record data a bit more thorouglyLennart Poettering1-3/+10
2019-03-12logind: normalize home path when creating user objectLennart Poettering1-0/+2
Triggered by: #11910
2019-03-12meson: scope more git invocations with current_source_dir()Davide Cavalca3-19/+23
2019-03-12po: update French translationSylvain Plantefève1-7/+30
2019-03-12shared/bootspec: avoid going through -1 when calculating array indexZbigniew Jędrzejewski-Szmek1-6/+8
Coverity was complaining in CID#1399407 that config->entries might be used while NULL. Let's add an assert to make sure it's not. Also, let's quit early if we have no entries to loop through. The code was not incorrect, but it's cleaner to avoid any negative indices.
2019-03-12boot: avoid 32-bit calculation for a 64-bit lvalueZbigniew Jędrzejewski-Szmek2-1/+8
Coverity CID#1399116: > Potentially overflowing expression > gpt_header_buffer.gpt_header.SizeOfPartitionEntry * gpt_header_buffer.gpt_header.NumberOfPartitionEntries > with type unsigned int (32 bits, unsigned) is evaluated using 32-bit > arithmetic, and then used in a context that expects an expression of type > UINTN (64 bits, unsigned). Let's import the ALIGN_TO macro to sd-boot and use it to avoid the issue.
2019-03-12fuzz: add a fuzzer for time utilsFrantisek Sumsal2-0/+32
2019-03-12fuzz: add a fuzzer for calendarspecFrantisek Sumsal2-0/+28