SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
39,572 Commits 2 Branches 1 Tag
02849d8b4fa4199678182de0c9768ddbb94ae9e5
Commit Graph
39572 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Yu Watanabe 02849d8b4f test-network: add tests for MACsec 2019-04-12 10:12:42 +09:00
Yu Watanabe e57319dd54 network: re-indent gperf files 2019-04-12 10:12:42 +09:00
Yu Watanabe 70c5754761 network: warn when private key is stored in world readable files 2019-04-12 10:12:42 +09:00
Yu Watanabe b0e13c3122 network: add MACsecTransmitAssociation.UseForEncoding= setting 2019-04-12 10:12:42 +09:00
Yu Watanabe a7b9c52f1f network: add MACsec*Association.Activate= setting 2019-04-12 10:12:42 +09:00
Yu Watanabe eb4705fb36 network: add MACsec*Association.KeyFile= setting 2019-04-12 10:12:42 +09:00
Yu Watanabe e482018672 network: explicitly clear security key for macsec 2019-04-12 10:12:42 +09:00
Yu Watanabe e0fde24c97 network: support multiple security associations for macsec channels 2019-04-12 10:12:42 +09:00
Susant Sahani 81962db798 network: Introduce MACsec 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes #5754
 2019-04-12 10:12:41 +09:00
Yu Watanabe 45cae4abfb linux: import if_macsec.h from kernel-5.0 
MACsec is introduced since kernel-4.6. Let's support order kernels.
 2019-04-12 10:12:30 +09:00
Yu Watanabe 89aaf65586 fileio: add READ_FULL_FILE_UNHEX flag 
Similar to READ_FULL_FILE_UNBASE64, read data is decoded with
unhexmem().
 2019-04-12 10:10:24 +09:00
Yu Watanabe 7088befb17 util: extend unhexmem() to accept secure flag 
When the flag is set, buffer is cleared on failure.
This is a continuation of 2432d09c7a.
 2019-04-12 10:10:24 +09:00
Lennart Poettering 03abeb0baf Merge pull request #12267 from keszybz/udev-settle-warning 
Udev settle warning
 2019-04-11 19:01:03 +02:00
Yu Watanabe 01234e1fe7 tree-wide: drop several missing_*.h and import relevant headers from kernel-5.0 2019-04-11 19:00:37 +02:00
Lennart Poettering aa46c28418 Merge pull request #12153 from benjarobin/killall-show-not-killed 
shutdown/killall: Show in the console the processes not yet killed
 2019-04-11 18:58:43 +02:00
Lennart Poettering 3f0e934a37 Merge pull request #12226 from poettering/22bit-pids 
sysctl: let's by default increase the numeric PID range from 2^16 to …
 2019-04-11 18:58:08 +02:00
Lennart Poettering 54f802ff8a Merge pull request #12037 from poettering/oom-state 
add cgroupv2 oom killer event handling to service management
 2019-04-11 18:57:47 +02:00
Lennart Poettering 3b21fd06ed Merge pull request #12219 from keszybz/bootctl-check-entries 
bootctl: check entries when showing them
 2019-04-11 18:57:18 +02:00
Zbigniew Jędrzejewski-Szmek 1e5d2d6564 NEWS: update contributors and date 2019-04-11 18:28:36 +02:00
Sebastian Krzyszkowiak 155bc908bc hwdb: mark Apple Magic Trackpads as external 
Applies only to USB - when connected via Bluetooth it already gets marked correctly.
 2019-04-11 18:27:01 +02:00
Jonathan Lebon 30fdb8962a fstab-generator: use DefaultDependencies=no for /sysroot mounts 
Otherwise we can end up with an ordering cycle. Since d54bab90, all
local mounts now gain a default `Before=local-fs.target` dependency.
This doesn't make sense for `/sysroot` mounts in the initrd though,
since those happen later in the boot process.

Closes: #12231
 2019-04-11 17:04:24 +02:00
Lennart Poettering 574ef404d8 Merge pull request #12279 from keszybz/sd-bus-long-signatures 
sd-bus: properly handle messages with overlong signatures
 2019-04-11 17:03:57 +02:00
Lennart Poettering a3a1f24f81 Merge pull request #12274 from poettering/nss-fixlets 
some nss module fixlets
 2019-04-11 15:21:45 +02:00
Zbigniew Jędrzejewski-Szmek fb270a26b2 sd-bus: add define for the maximum name length 
Less magic numbers in the code…
 2019-04-11 14:07:22 +02:00
Zbigniew Jędrzejewski-Szmek cfcc0059bf sd-bus: add define for the maximum signature length 
Less magic numbers in the code…
 2019-04-11 14:02:59 +02:00
Zbigniew Jędrzejewski-Szmek f0ae945ecc bus-message: validate signature in gvariant messages 
We would accept a message with 40k signature and spend a lot of time iterating
over the nested arrays. Let's just reject it early, as we do for !gvariant
messages.
 2019-04-11 14:01:38 +02:00
Lennart Poettering 8baaf650ef nss-resolve: list more errors as cause for fallback 
If dbus-daemon kicks us from the bus or hangs, we should fallback too.

Fixes: #12203
 2019-04-11 11:13:11 +02:00
Lennart Poettering 547fde4759 nss-resolve: simplify condition 
Of course, if the error is NXDOMAIN then it's not one of the errors
listed for fallback, hence don't bother...
 2019-04-11 11:13:11 +02:00
Lennart Poettering 2b0c1bfd8d nss-mymachines: return NO_RECOVERY instead of NO_DATA when we fail to do D-Bus and similar 
This makes more semantical sense and is what we do in nss-resolve in a
similar case, hence let's remove the differences here.
 2019-04-11 11:13:10 +02:00
Lennart Poettering e09e7ac3c4 nss-myhostname: unify code that handles NOT_FOUND case 
Just some minor rework to make this more like nss-resolve.
 2019-04-11 11:13:10 +02:00
Lennart Poettering a62fc245d0 nss-resolve: resue a jump target 
We can reuse "fail" here, since it does the same thing.
 2019-04-11 11:13:10 +02:00
Lennart Poettering c7c468c92a nss-resolve: return error properly 2019-04-11 11:13:10 +02:00
Lennart Poettering 954cba660d nss-resolve: drop unnecessary variable 
We assign the same value to "ret" always, let's just return the value
literally.
 2019-04-11 11:13:10 +02:00
Lennart Poettering fcd0f82e16 Merge pull request #12271 from poettering/errno-accept-again 
accept() errno fixes
 2019-04-11 10:22:46 +02:00
Yu Watanabe 8b0f4bac72 test: make directory for drop-in config 
Follow-up for a2fbac5875.
 2019-04-11 09:58:47 +02:00
Zbigniew Jędrzejewski-Szmek 4ddff52640 Merge pull request #12270 from yuwata/test-set-longer-timeout 
test: set longer timeout
 2019-04-11 08:31:14 +02:00
Lennart Poettering 4ff9bc2ea6 tree-wide: port users over to use new ERRNO_IS_ACCEPT_AGAIN() call 2019-04-10 22:11:18 +02:00
Yu Watanabe a2fbac5875 test: set longer watchdog timeout for timedated 2019-04-11 03:25:08 +09:00
Lennart Poettering fb0302ddbc errno-util: add new ERRNO_IS_ACCEPT_AGAIN() test 
This is modelled after the existing ERRNO_IS_RESOURCES() and in
particular ERRNO_IS_DISCONNECT(). It returns true for all transient
network errors that should be handled like EAGAIN whenever we call
accept() or accept4(). This is per documentation in the accept(2) man
page that explicitly says to do so in the its "RETURN VALUE" section.

The error list we cover is a bit more comprehensive, and based on
existing code of ours. For example EINTR is included too (since we need
that to cover cases where we call accept()/accept4() on a blocking
socket), and of course ERRNO_IS_DISCONNECT() is a bit more comprehensive
than the list in the man page too.
 2019-04-10 20:03:38 +02:00
Lennart Poettering 7f00010601 errno-util: rework ERRNO_IS_RESOURCE() from macro into static inline function 
No technical reason, except that later on we want to add a new
ERRNO_IS() which uses the parameter twice and where we want to avoid
double evaluation, and where we'd like to keep things in the same style.
 2019-04-10 20:03:38 +02:00
Lennart Poettering 916a9ec7c6 errno-util: add three more error codes to ERRNO_IS_DISCONNECT() 
This is based on the recommendations in accept4() and the listed error
codes there.
 2019-04-10 20:03:38 +02:00
Lennart Poettering 7ebd758cf6 tree-wide: voidify some socket calls 2019-04-10 20:03:38 +02:00
Lennart Poettering e2d0fa6feb lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] 2019-04-10 20:03:38 +02:00
Benjamin Robin 763e7b5da6 core/killall: Add documentation about broadcast_signal() 2019-04-10 19:30:38 +02:00
Benjamin Robin 2c32f4f47d core/killall: Log the process names not killed after 10s 2019-04-10 19:27:38 +02:00
Benjamin Robin 827156b330 shutdown: Bump sysctl kernel.printk log level in order to see info msg 2019-04-10 19:27:38 +02:00
Yu Watanabe 70f3336e96 test: set longer timeout for 'udevadm control' 2019-04-11 02:27:15 +09:00
Zbigniew Jędrzejewski-Szmek 1662732768 systemd-udev-settle.service: emit deprecation notice 2019-04-10 15:58:14 +02:00
Yu Watanabe 86a3d44de5 network: fix use-of-uninitialized-value or null dereference 
This fixes a bug introduced by 6ef5c881dd.

Fixes oss-fuzz#14157 and oss-fuzz#14158.
 2019-04-10 18:18:11 +09:00
Zbigniew Jędrzejewski-Szmek 18a3882250 man: add a page for systemd-udev-settle.service 2019-04-10 10:12:43 +02:00