Yu Watanabe
9972e6d6ed
dissect-image: make verity_partition() actually fail when all attempts of activation failed
2022-09-17 05:18:25 +09:00
Yu Watanabe
ad361a50fb
dissect-image: split out verity_timeout()
...
To make verity_partition() shorten. No functional changes, just
refactoring.
2022-09-17 05:18:25 +09:00
Yu Watanabe
cb19517490
man: explicitly document that "reboot -f" is different from "systemctl reboot -f"
...
Closes #24696 .
2022-09-17 05:15:36 +09:00
Lennart Poettering
c941b65075
nspawn: fix two error strings
2022-09-17 05:15:02 +09:00
Dan Streetman
137d162c42
add CAP_LINUX_IMMUTABLE to systemd-machined, so it can handle machinectl read-only requests
...
Without this, the 'machinectl read-only ...' command always fails.
2022-09-16 19:50:52 +01:00
Yu Watanabe
dd35a61caf
sd-netlink: unexport sd-netlink
...
This effectively reverts 84e1001541 .
The sd-netlink library has several issues, and we should not export it
without solving them. See issues #24258 and #24124 .
2022-09-17 01:31:57 +09:00
Yu Watanabe
54ee1cd69d
Merge pull request #24692 from yuwata/dissect-image-fix-memleak
...
dissect-image: fix memleak
2022-09-17 01:31:32 +09:00
Lennart Poettering
d52e1c81b9
update TODO
...
Seeding RNG via SMBIOS is bad idea, since often measurement of SMBIOS
tables is used for TPM policies, under the assumption SMBIOS remains
static after a certain point.
2022-09-16 16:24:56 +01:00
Lennart Poettering
c5be1ceb08
tmpfiles: let's suffix path to dirs with '/' also in log messages
2022-09-17 00:20:24 +09:00
Lennart Poettering
0af7e6ee73
tmpfiles: drop redundant forward declarations
2022-09-17 00:20:10 +09:00
Yu Watanabe
ab8e6464b5
Merge pull request #24664 from yuwata/watchdog
...
watchdog: open /dev/watchdog0 only if it exists
2022-09-17 00:18:53 +09:00
Yu Watanabe
e99b370ccb
Merge pull request #24688 from yuwata/watchdog-dbus-properties-follow-ups
...
pid1: follow-ups for watchdog DBus properties
2022-09-17 00:18:05 +09:00
Daniel Braunwarth
43deb1a8dc
journalctl: respect --quiet flag during file concistency verification
...
Fixes #24563 .
2022-09-17 00:17:47 +09:00
Yu Watanabe
e9fe11090e
Merge pull request #24685 from yuwata/uid-range
...
uid-range: several cleanups
2022-09-17 00:16:07 +09:00
Yu Watanabe
5bf5013fc9
dissect-image: handle all non-negative return values as success
...
No functional changes, just coding syle update.
2022-09-16 23:11:09 +09:00
Yu Watanabe
041e2edac8
dissect-image: fix memleak on failure
2022-09-16 23:11:09 +09:00
Yu Watanabe
a6b7ebaafa
watchdog: use /dev/watchdog0 only if it exists
...
Fixes #24661 .
2022-09-16 22:34:37 +09:00
Lennart Poettering
72a773775d
update TODO
2022-09-16 13:57:05 +01:00
Yu Watanabe
3e911a0d0e
pid1: drop redundant DBus properties
...
Follow-up for 10f3f4ed01 .
We already have RuntimeWatchdogUSec or friends. Let's not introduce
redundant properties.
Also, drop the const qualifier for WatchdogLastPingTimestamp, as they
are actually not constant.
2022-09-16 21:53:28 +09:00
Yu Watanabe
9341f41801
watchdog: explicitly initialize global variable
...
No functional change, as they were implicitly initialized with zero.
2022-09-16 21:48:39 +09:00
Yu Watanabe
269073fda6
test: add tests for uid_range_coalesce()
2022-09-16 21:11:19 +09:00
Yu Watanabe
8dcc66cefc
uid-range: tie up number and array of uid range entries
...
This renames UidRange -> UidRangeEntry, and reintroduces UidRange which
contains the array of UidRangeEntry and its size.
No fucntional changes, just refactoring.
2022-09-16 20:56:58 +09:00
Yu Watanabe
6cc6cd9289
uid-range: make uid_range_intersect() take two UidRange objects
...
No functional changes, just refactoring.
2022-09-16 20:52:47 +09:00
Yu Watanabe
f6c13f9f95
uid-range: optimize to load uid_map file
...
If uid_map contains many lines, then the previous logic takes O(n^2 log n),
This makes O(n log n).
2022-09-16 20:52:36 +09:00
Yu Watanabe
b5739767da
uid-range: escape from loop earlier
...
The array of uid range entries are already sorted. Hence, if x and y are
does not have intersection, then the remaining entries neither have
intersection with x.
2022-09-16 20:50:00 +09:00
Yu Watanabe
34eeba475d
uid-range: sort uid range entries in uid_range_coalesce()
...
As the logic in uid_range_coalesce() assumes the array of entries are
already sorted.
No functional changes, just refactoring.
2022-09-16 20:49:55 +09:00
Yu Watanabe
7cf337c50f
uid-range: use parse_uid_range()
2022-09-16 20:48:53 +09:00
Yu Watanabe
fb76e6a710
userdbctl: fix arrow direction
2022-09-16 20:48:53 +09:00
Yu Watanabe
3498609f08
userdbctl: do not show meaningless boundaries when no uid range available
2022-09-16 20:48:53 +09:00
Yu Watanabe
f91c23f785
sd-device-monitor: do not trigger assertion when uid_map is not empty
...
Follow-up for c0aa23cf1e .
2022-09-16 13:05:51 +02:00
drosdeck
05d5db01b7
Fix Positivo DUO k116 key toggle touchpad
2022-09-16 08:23:52 +09:00
Yu Watanabe
8cfde28b61
update TODO
2022-09-16 04:18:58 +09:00
David Edmundson
8c0a6a96fe
xdg-autostart-service: expand tilde in Exec lines
...
In typical desktop file parsing it is expected that "~" expands to a
home directory.
Users may write an autostart file with "Exec=myCoolService
~/.someSpecialConfig" which worked before the systemd migration.
2022-09-16 03:43:17 +09:00
Yu Watanabe
f562abe296
unit: drop ProtectClock=yes from systemd-udevd.service
...
This partially reverts cabc1c6d7a .
The setting ProtectClock= implies DeviceAllow=, which is not suitable
for udevd. Although we are slowly removing cgropsv1 support, but
DeviceAllow= with cgroupsv1 is necessarily racy, and reloading PID1
during the early boot process may cause issues like #24668 .
Let's disable ProtectClock= for udevd. And, if necessary, let's
explicitly drop CAP_SYS_TIME and CAP_WAKE_ALARM (and possibly others)
by using CapabilityBoundingSet= later.
Fixes #24668 .
2022-09-16 03:41:29 +09:00
j00512545
365c2885f0
fix typo in log
2022-09-15 17:46:04 +02:00
Yu Watanabe
88ffd21014
test-date: do not fail even on ~50 years later
...
Fixes #16181 .
2022-09-15 13:48:55 +01:00
Yu Watanabe
a900274915
test-seccomp: support systems that sched_setscheduler() is already limited
...
Fixes #17078 .
2022-09-15 13:47:17 +01:00
Heinrich Schuchardt
132c73b57a
meson: add libatomic dependency
...
Building with GCC 12.2 and binutils 2.39 fails on riscv64 Ubuntu Kinetic
with:
FAILED: systemd-oomd
/usr/bin/ld: systemd-oomd.p/src_oom_oomd-util.c.o:
in function `oomd_cgroup_context_acquire':
build/../src/oom/oomd-util.c:415:
undefined reference to `__atomic_exchange_1'
We have to link with -latomic.
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com >
2022-09-15 13:44:11 +01:00
Antonio Alvarez Feijoo
82ff978d0b
bash-completion: add missing options to systemd-cryptenroll
2022-09-15 13:40:23 +01:00
Yu Watanabe
f539452505
Merge pull request #24671 from mrc0mmand/even-more-codeql
...
ci: enable a couple more possibly useful CodeQL queries
2022-09-15 06:22:36 +09:00
Frantisek Sumsal
797b1987ae
oom: include a header file instead of a source file
2022-09-15 06:22:03 +09:00
Yu Watanabe
af3d387365
tree-wide: fix typo
2022-09-15 06:03:57 +09:00
Frantisek Sumsal
9fe61660ba
ci: fix a couple of typos
2022-09-14 22:09:19 +02:00
Frantisek Sumsal
5e781e07db
ci: enable a couple more possibly useful CodeQL queries
2022-09-14 22:09:19 +02:00
Frantisek Sumsal
d97733908b
ci: rename codeql-analysis.yml to codeql.yml
...
Just to be consistent with other repos under the systemd umbrella.
2022-09-14 19:13:49 +02:00
Yu Watanabe
10f3f4ed01
pid1: introduce dbus properties WatchdogDevice and friends
...
Closes #24665 .
2022-09-14 13:13:59 +01:00
Yu Watanabe
908eb7be58
Merge pull request #24669 from dtardon/nested-asserts
...
Use nested ASSERT_PTR
2022-09-14 20:27:07 +09:00
David Tardon
fbd747a46f
tree-wide: use nested ASSERT_PTR
2022-09-14 08:21:42 +02:00
David Tardon
23cd002562
macro-fundamental: allow to nest ASSERT_PTR
...
E.g.,
int job_frobnicate(Job *j) {
Unit *u = ASSERT_PTR(ASSERT_PTR(j)->unit);
...
}
2022-09-14 08:21:40 +02:00
Yu Watanabe
c9bc7a449c
Merge pull request #24663 from mrc0mmand/codeql-follow-up
...
A couple of CodeQL tweaks and follow ups
2022-09-14 05:31:10 +09:00