SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
85,828 Commits 2 Branches 1 Tag
a01cd5bed33ce48e4e46eea07bc60955d9eea3d3
Commit Graph
85828 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Yuan 079be1e71b core/varlink-execute: skip empty mount options 
This keeps things in line with bus_append_mount_options().
 2026-01-19 17:35:38 +01:00
Mike Yuan 831eb5453a core/dbus-execute: constify MountOptions 2026-01-19 17:35:37 +01:00
Mike Yuan bdfa039404 dissect-image: use consistent log level 2026-01-19 17:35:37 +01:00
Yu Watanabe 3d2284c7db journal/audit: do not use strjoina() for arbitrary length of received string 
Otherwise, when a long message is received, the assertion in strjoina()
may be triggered.

Fixes oss-fuzz#476768320 (https://issues.oss-fuzz.com/issues/476768320).
Fixes #40388.
 2026-01-20 01:29:32 +09:00
Luca Boccassi 2ba15493af portable: pin attached image via image-policy (#40152) 
When attaching images generate a policy in the portable drop-in that
matches the partition types and content found while dissecting, so that
it can no longer be changed later without a reattach
 2026-01-19 16:24:44 +00:00
Yu Watanabe 1580907953 audit-type: include alloc-util.h for newa() (#40389) 
The macro audit_type_name_alloca() needs newa() which is defined in
alloc-util.h.
 2026-01-19 16:31:39 +01:00
Yu Watanabe b7dd507cae tree-wide: use consistent format of short comment for constant argument 
Follow-ups for recent changes after 93378148d4.
 2026-01-20 00:22:15 +09:00
Luca Boccassi d059615492 portable: pin attached image via image-policy 
When attaching images generate a policy in the portable drop-in
that matches the partition types and content found while dissecting,
so that it can no longer be changed later without a reattach.
 2026-01-19 15:54:12 +01:00
Luca Boccassi 2258c93270 image-policy: add helper to create policy from dissected image 
Pin policies to exactly what was found while dissecting
 2026-01-19 15:47:15 +01:00
Luca Boccassi f639fb4b77 image-policy: add image_policy_union helper 
Similar to image_policy_intersect but is the union of all used policies
instead
 2026-01-19 15:47:15 +01:00
Yu Watanabe 67040ea2bc More legacy kernel support removal; follow-ups for XAT_FDROOT (#40384) 2026-01-19 23:10:17 +09:00
zefr0x 985a6fa44b busctl: handle --limit-messages option under the wait verb 
Main focus was to not introduce breaking change or duplicated argument.
The `--limit-messages=` option that is used under the `monitor` verb is
reused here. However, both `wait` and `monitor` have contradicting
default behaviors, so it's not the cleanest thing to do.

There was some post-commit discussion about the API in #33961, but the
final name adopted in #34928 wasn't that flexible either to fit nicely
here in the `wait` verbe.

Additionally, there wasn't consideration in #34555 for having uniform
behavrious, so we ended with `wait` verb and `--limit-messages=` option,
rather than `receive` verb with default of continuously receving signals
withtout exit so `--limit-messages=` make more sence and be expectable.
 2026-01-19 22:41:33 +09:00
Vitaly Kuznetsov f99f843f24 tpm2-util: make tpm2_pcr_extend_bytes() declaration match its implementation 
tpm2_pcr_extend_bytes() has differences in parameter names between the
declaration and the implementation, in particular, 'event' in the header is
named 'event_type' in the implementation.
 2026-01-19 13:52:33 +01:00
Mike Yuan 1a0df07843 core/cgroup: obsolete DefaultMemoryMin/Low= 
Now that our kernel baseline is v5.7 and memory_recursiveprot
is universally enabled, remove userspace workarounds.
 2026-01-19 13:33:28 +01:00
Mike Yuan d57fdbb5e2 core/cgroup: do not consider cgroup_context_has_io_config() if only IOAccounting=yes 
This makes things in line with unit_has_memory_config(),
and suppresses pointless application of IO configs.
 2026-01-19 13:33:28 +01:00
Mike Yuan 8292b859f3 core/cgroup: drop trusted.survive_final_kill_signal fallback for kernel < 5.7 2026-01-19 13:33:28 +01:00
Mike Yuan 6fd7c5ecdf core/namespace: remove availability checks for procfs hidepid=/subset= opts 2026-01-19 13:33:27 +01:00
Mike Yuan 5f90e4e4bc stat-util: O_NOCTTY is nop with O_PATH 2026-01-19 13:33:27 +01:00
Mike Yuan b0906b1216 stat-util: do not use RET_NERRNO for our own function 
Follow-up for 95abe4beff
 2026-01-19 13:33:27 +01:00
Mike Yuan 02bf2b7cdf fs-util: optimize xopenat(XAT_FDROOT, ...) a bit 
Follow-up for ef582ab201

* Open / with O_PATH
* Shortcut to fd_reopen() directly if path is empty
 2026-01-19 13:33:27 +01:00
Mike Yuan 9b906ae48e fs-util: group access_fd() with access_nofollow() 2026-01-19 13:33:27 +01:00
Mike Yuan 52bf232e82 fs-util: drop fallback for kernels without AT_EMPTY_PATH support (< 5.8) 2026-01-19 13:33:26 +01:00
Mike Yuan 6753bd8a2f mountpoint-util: assume MS_NOSYMFOLLOW is available 
Since our kernel baseline is v5.10 now.
 2026-01-19 13:33:26 +01:00
Mike Yuan 58fb46ecd5 firewall-util: drop fallback for kernel < 5.8 2026-01-19 12:51:56 +01:00
Mike Yuan 42b09813f4 netlink-util: remove support for kernel < 5.5 2026-01-19 12:51:56 +01:00
Mike Yuan 742308caba nspawn: drop compat glue for kernel < 3.14 2026-01-19 12:51:55 +01:00
Mike Yuan 254445e927 README: kcmp() is unnecessary if we have F_DUPFD_QUERY (v6.10) 2026-01-19 12:51:55 +01:00
Mike Yuan 77b4a411ac README: CONFIG_DEVPTS_MULTIPLE_INSTANCES has been dropped in v4.7 2026-01-19 12:51:55 +01:00
Vitaly Kuznetsov 15b1c334df repart: Generate fstab and crypttab late 
The immediate need for the change is to allow to capture the expected
LUKS volume key hash and record it to the generated crypttab but it
also seems to make sense to not generate crypttab/fstab before we know
that partition creation succeeded as fstab/crypttab entries are bogus
otherwise.
 2026-01-19 11:29:00 +01:00
Mike Yuan a3507f6628 mkosi/opensuse: remove resolved TODO 
Follow-up for ff9c4ace70
 2026-01-19 03:06:30 +01:00
Mike Yuan 537045ec2f recurse-dir: remove stale comment 
Follow-up for 6393b847f4
 2026-01-19 03:06:30 +01:00
Mike Yuan 30f3a7ad51 TODO: remove completed entries 2026-01-19 03:04:54 +01:00
cyclopentane 465f6a6284 cryptenroll,cryptsetup,shutdown: only call mlockall if we have CAP_IPC_LOCK 
Calling mlockall in an unprivileged process most notably had the effect
of making systemd-cryptenroll OOM while trying to open a normal-sized
argon2 keyslot due to it hitting RLIMIT_MEMLOCK.
 2026-01-18 19:15:30 +01:00
Mike Yuan 6b3c289406 core: a few cleanups, follow-ups for MemoryTHP= (#40382) 2026-01-18 18:25:22 +01:00
Mike Yuan a91bb7459b core/exec-invoke: dedup error handling 
Also, do not log about errno if it's suffciently encoded
in the log text already.
 2026-01-18 16:42:22 +01:00
Mike Yuan 64d0c3cf2c shared/varlink-io.systemd.Unit: MemoryTHP is not nullable 2026-01-18 16:42:21 +01:00
Mike Yuan 64a2712db5 core: rearrange MemoryTHP= 
* Place related logic closer to MemoryKSM=, do not interleave
  it with various BPF delegation knobs
* MemoryTHP= is a execute directive, not namespace
 2026-01-18 16:42:21 +01:00
Mike Yuan bbce82dfab core/unit: drop unneeded unit_modify_nft_set() call during coldplug 
We re-realize all unit cgroups upon daemon-reload, and
cgroup_context_apply() would take care of NFT set refreshing.
No need to duplicate that in unit_coldplug().
 2026-01-18 16:34:12 +01:00
Mike Yuan 417a8223af core/exec-credential: group write_credential() with maybe_decrypt_and_write_credential() 
As requested in
https://github.com/systemd/systemd/pull/40093#discussion_r2661389365
 2026-01-18 16:34:11 +01:00
Yu Watanabe c02f81cb2d include: update linux kernel headers from v6.19-rc5 2026-01-18 15:32:08 +01:00
novenary 399c8152ae hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops 
Confirmed with owners of T495 and T14 Gen2i.
P14s should be identical.
 2026-01-18 21:26:04 +09:00
Yu Watanabe 112cbc3790 journal-file: do not trigger assertion on removed or corrupted journal file 
When a journal file is removed or corrupted, then the value `p`, which is
read from Object.data.entry_offset, may be zero.

Note, journal_file_move_to_object() checks the passed offset and return
-EBADMSG if it is invalid.

Fixes the issue reported at
https://github.com/systemd/systemd/pull/40372#issuecomment-3762907261.
 2026-01-18 21:25:20 +09:00
Daan De Meyer 103f7d2303 fd-util: introduce XAT_FDROOT fd shortcut for the root dir (#39244) 2026-01-18 11:57:11 +01:00
Yu Watanabe fe7692227d mountfsd: fix potential memleak on malicious json message 
This also makes json_log_oom() used on OOM.

Follow-up for 78b40aea61.
 2026-01-18 18:03:21 +09:00
Yu Watanabe f02e4b4f38 Several follow-ups for removal of SysV compat (#40371) 2026-01-18 18:02:53 +09:00
Mike Yuan 73b82070e1 docs,man: more SysV compat removal notes 2026-01-18 15:50:54 +09:00
Yu Watanabe ff9c4ace70 mkosi/opensuse: do not build/install systemd-sysvcompat package 
The package is now empty. It is not necessary to build it.

This also drops unnecessary modifications for files.*.
 2026-01-18 15:49:37 +09:00
Yu Watanabe badff4ce2a meson: update description of deprecated options 2026-01-18 15:48:02 +09:00
Yu Watanabe a3f0d88fee systemctl: drop unnecessary shortcut for removed SysV compat support 
Follow-up for 986fee6217.
 2026-01-18 15:48:02 +09:00
Yu Watanabe 01885138be Assorted cleanups (#40373) 2026-01-18 14:41:44 +09:00