Lennart Poettering
607b358ef2
core: drop suid/sgid bit of files/dirs when doing recursive chown
...
This adds some extra paranoia: when we recursively chown a directory for
use with DynamicUser=1 services we'll now drop suid/sgid from all files
we chown().
Of course, such files should not exist in the first place, and noone
should get access to those dirs who isn't root anyway, but let's better
be safe than sorry, and drop everything we come across.
2019-03-26 08:29:37 +01:00
Lennart Poettering
25e68fd397
nspawn: minor improvements to --help text
2019-03-26 08:06:00 +01:00
Jörg Sommer
a505736536
completion/zsh/journalctl: Add --no-hostname
2019-03-26 07:59:30 +01:00
Lennart Poettering
c49357e747
man: rework timer docs to use a table for monotonic timers
2019-03-25 20:32:18 +01:00
Lennart Poettering
60a3e982f4
Merge pull request #12081 from poettering/systemctl-love
...
various small systemctl modernizations and refactoring
2019-03-25 17:06:38 +01:00
Lennart Poettering
1d52a931c6
systemctl: move --failed close to --state= in help text
2019-03-25 15:25:58 +01:00
Lennart Poettering
8e54300425
systemctl: underline sections in help text
...
Taking inspiration from the recent commit that added that to nspawn's
help text.
2019-03-25 15:25:58 +01:00
Lennart Poettering
3bfa8668b0
systemctl: use structured initialization
2019-03-25 15:25:57 +01:00
Lennart Poettering
2f50e59f2b
systemctl: use SYNTHETIC_ERRNO everywhere
2019-03-25 15:23:08 +01:00
Lennart Poettering
63a3b3cb70
systemctl: split out some SysV compat stuff into its own C file
...
systemctl.c is way to large already. Let's split out some stuff out that
is easy to split out.
2019-03-25 15:23:08 +01:00
Zbigniew Jędrzejewski-Szmek
8461f3680b
hwdb: update for v242
...
Appears to be usual slew of mundane corrections and additions.
2019-03-25 14:52:38 +01:00
Zbigniew Jędrzejewski-Szmek
3e7c973f1a
Merge pull request #12089 from mrc0mmand/journalctl-bash-comp-redirection
...
bash-completion: use the default completion for shell redirect operators
2019-03-25 14:22:15 +01:00
Lennart Poettering
b82f71c7ff
tree-wide: constify a few static string tables
2019-03-25 14:04:34 +01:00
Lennart Poettering
ebfb1b5724
dbus-unit: remove redundant check
...
We checked this with an assert() a few lines up aleady, no need to check
this again.
2019-03-25 13:48:53 +01:00
Lennart Poettering
e59ba56d78
core: remove unnecessary heap allocation
2019-03-25 13:48:53 +01:00
Lennart Poettering
5787c50932
NEWS: various tweaks and updates for v242
2019-03-25 13:45:45 +01:00
Zbigniew Jędrzejewski-Szmek
fd7887da00
Merge pull request #12087 from yuwata/fix-condition-free-list
...
util: fix condition_free_list_type()
2019-03-24 13:47:05 +01:00
Frantisek Sumsal
c01dbf6d19
bash-completion: unify indentation
2019-03-23 21:51:04 +01:00
Frantisek Sumsal
1413763ea5
bash-completion: use default completion for redirect operators
2019-03-23 21:50:50 +01:00
Yu Watanabe
4d6cd572a7
fuzz: add testcases for the bug in condition_free_list_type()
2019-03-24 00:35:39 +09:00
Yu Watanabe
1beabe08d6
network,udev: explicitly declare 'conditions' is a list
2019-03-24 00:35:39 +09:00
Yu Watanabe
7bb55ed099
util: fix condition_free_list_type()
...
This fixes a bug introduced by c4f58deab5 .
Closes oss-fuzz#13878, oss-fuzz#13882, oss-fuzz#13884, oss-fuzz#13886, and
oss-fuzz#13888.
2019-03-24 00:34:33 +09:00
Lennart Poettering
16b4623620
Merge pull request #11602 from vesajaaskelainen/dbus-reboot-with-parameters
...
dbus-manager: Add RebootWithParameters d-bus method
2019-03-22 21:07:47 +01:00
Lennart Poettering
83276695c6
Merge pull request #12079 from keszybz/fuzz-nspawn-oci
...
Add fuzzer for nspawn-oci
2019-03-22 21:06:17 +01:00
Vesa Jääskeläinen
428b296a59
logind: Add support for RebootParameter
...
This adds support for user to set & get reboot parameter for reboot.
As callee would be next issuing Reboot call same policy checks are being used.
If unit file issuing the reboot action defines RebootArgument (or similar) that
setting takes precedence.
2019-03-22 20:30:33 +02:00
Lennart Poettering
525ea273de
Merge pull request #12075 from keszybz/two-docs
...
Two small man page enhancements
2019-03-22 18:11:59 +01:00
Lennart Poettering
e4077ff6f3
nspawn: don't free "fds" twice
...
Previously both run() and run_container() would free 'fds'. Let's fix
that, and let run() free it but make run_container() already remove all
fds from it, because that's what we actually want to do.
Fixes : #12073
2019-03-22 18:11:27 +01:00
Zbigniew Jędrzejewski-Szmek
b2645747b7
nspawn-oci: fix double free
...
Also rename function to make it clear that it also frees the array
object itself.
2019-03-22 17:39:12 +01:00
Zbigniew Jędrzejewski-Szmek
54ed9f88dc
udev/link-config: rename MACPolicy to MACAddressPolicy
...
Things are clearer if the same name is used everywhere, and we don't gain
much by saving a few bytes.
2019-03-22 17:16:17 +01:00
Zbigniew Jędrzejewski-Szmek
094eecd29d
Merge pull request #12055 from poettering/save-argc-argv
...
main-func.h and systemctl argc/argv improvements
2019-03-22 16:58:18 +01:00
Zbigniew Jędrzejewski-Szmek
4210e60eb6
Merge pull request #12072 from poettering/string-table-fixes
...
three small string table fixes
2019-03-22 16:49:56 +01:00
Vesa Jääskeläinen
ce7f10707d
logind: relocate function return_test_polkit()
...
Relocate function return_test_polkit() upper in file for easier access from other functions.
2019-03-22 17:38:54 +02:00
Vesa Jääskeläinen
77defcf538
systemctl: restore "systemctl reboot ARG" functionality
...
Commit d85515edcf changed logic how reboot is
executed. That commit changed behavior to use emergency action reboot code path
to perform the reboot.
This inadvertently broke rebooting with argument:
$ systemctl reboot custom-reason
Restore original behavior so that if reboot service unit similar to
systemd-reboot.service is executed it is possible to override reboot reason
with "systemctl reboot ARG".
When "systemctl reboot ARG" is executed ARG is placed in file
/run/systemd/reboot-param and reboot is issued using logind's Reboot
dbus-service.
If RebootArgument is specified in systemd-reboot.service it takes precedence
over what systemctl sets.
Fixes : #11828
2019-03-22 17:38:54 +02:00
Zbigniew Jędrzejewski-Szmek
fd9baae8c4
NEWS: add missing word
2019-03-22 16:28:43 +01:00
Zbigniew Jędrzejewski-Szmek
3aaae27a75
man: clarify that ExecStop= is always called
...
Fixes #11744 .
2019-03-22 16:28:43 +01:00
Zbigniew Jędrzejewski-Szmek
543e6bd4c2
man: update description of initrd in bootup(7)
...
Mention that initramfs is used, not initrd, even though we still call
it that. Also add links and clarify who loads the initramfs.
2019-03-22 16:28:43 +01:00
Zbigniew Jędrzejewski-Szmek
9b89e602ea
NEWS: prepare for v242
2019-03-22 15:38:53 +01:00
Evgeny Vereshchagin
53294d9496
network: add missing nulstr terminator
...
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13821
2019-03-22 13:25:42 +01:00
Lennart Poettering
c425c7c245
dbus-execute: don't needlessly override error code
2019-03-22 12:25:16 +01:00
Lennart Poettering
b1ea85dc08
dbus-execute: lets use exec_directory_type_from_string() to simplify things
2019-03-22 12:25:03 +01:00
Lennart Poettering
0f4b93c4b5
udev: use string_table_lookup() where we can
2019-03-22 12:21:12 +01:00
Lennart Poettering
63c691c648
string-table: use string_table_lookup() in our own macros everywhere
2019-03-22 12:21:12 +01:00
Zbigniew Jędrzejewski-Szmek
b1f13b0e75
nspawn-oci: mount source is optional
2019-03-22 12:04:32 +01:00
Zbigniew Jędrzejewski-Szmek
b2e07b1a02
nspawn-oci: use _cleanup_ in one more place
2019-03-22 11:51:21 +01:00
Zbigniew Jędrzejewski-Szmek
9ddd62cda1
fuzz-nspawn-oci: add fuzzer for the oci bundle loader
2019-03-22 11:09:52 +01:00
Franck Bui
8238423095
meson: add libseccomp as a nspawn dep ( #12067 )
...
Due to this specific change: d0b6a10#diff-0203416587516c224c8fcfe8129e7caeR8,
systemd-nspawn uses libseccomp now if it is available. We we need to pass -I/usr/include
/libseccomp (or wherever seccomp.h is located) when compiling systemd-nspawn because
nspawn-settings.h does #include <seccomp.h>.
Fixes : #12060
2019-03-22 11:09:08 +01:00
Lennart Poettering
ae408d77a9
nspawn: conditionalize libseccomp use
...
We support compilation without libseccomp, hence don't rely on its
symbols.
2019-03-22 11:07:03 +01:00
Yu Watanabe
3f4c9bc04c
Merge pull request #12066 from yuwata/fix-network-tunnel-12041
...
network: fix netdev_tunnel_verify()
2019-03-22 05:57:38 +09:00
Zbigniew Jędrzejewski-Szmek
2615de9d79
hwdb: make ids_parser.py compatible with pyparsing-2.3.0+
...
https://github.com/pyparsing/pyparsing/blob/master/CHANGES#L175
says something about fixing erroneously created levels in the hierarchy.
I don't have the faintest idea what this means, but with the change in
this patch we generate output that is unchanged from pre-2.3.0 versions.
Tested with python3-pyparsing-2.3.1-1.fc30.noarch and
python3-pyparsing-2.2.0-3.fc29.noarch.
Fixes #12021 .
2019-03-21 20:10:57 +01:00
Yu Watanabe
8643885f58
man: mention that Tunnel.Local= and Tunnel.Remote= can take 'any'
2019-03-22 03:31:55 +09:00