dongshengyuan 50eaa51ce1 firstboot: validate root shell credentials ...

Validate passwd.shell.root after reading the credential so it uses
the same target-root shell checks as --root-shell= and prompted input.

Reproducer: CREDENTIALS_DIRECTORY=... systemd-firstboot --root=...
with passwd.shell.root=/bin/nonexistentshell

Before: /etc/passwd was written with the nonexistent root shell and
the command exited successfully.

Follow-up: 416f7b3a11

2026-07-18 15:48:34 +08:00

..

ac-power

…

analyze

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

ask-password

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

backlight

tree-wide: use device_get_sysattr_unsigned() and friends

2026-05-18 02:55:56 +09:00

basic

udev-util: bound leading whitespace skip in udev_replace_whitespace (#42757)

2026-07-17 01:16:07 +09:00

battery-check

…

binfmt

…

bless-boot

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

boot

boot: fix MEMMAP_DEVICE_PATH EndingAddress field calculation

2026-07-17 01:17:14 +09:00

bootctl

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

bpf

Various dlopen/linking cleanups from #42100 (#42166)

2026-05-19 08:54:27 +02:00

busctl

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

cgls

…

cgtop

cgtop: use cg helper to parse pids.current

2026-05-28 20:55:01 +01:00

clonesetup

clonesetup: check target table size for overflow

2026-07-15 17:51:48 +01:00

core

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

coredump

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

coverage

…

creds

creds-util: implement TPM2 SRK pinning

2026-07-11 15:37:46 +01:00

cryptenroll

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

cryptsetup

tpm2-util: initialize NvPCRs on first extension

2026-07-15 13:25:37 +02:00

debug-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

delta

…

detect-virt

…

dissect

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

environment-d-generator

…

escape

…

factory-reset

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

firstboot

firstboot: validate root shell credentials

2026-07-18 15:48:34 +08:00

fsck

fsck: don't apply invalid mode or repair values

2026-07-08 12:13:43 +01:00

fstab-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

fundamental

sd-dlopen: introduce _dlopen_loader_ macro to prevent inlining and cloning

2026-07-10 16:35:19 +09:00

fuzz

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

getty-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

gpt-auto-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

growfs

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

hibernate-resume

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

home

homed: fix verification of local identity file

2026-07-16 14:24:18 +02:00

hostname

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

hwdb

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

id128

id128: reject app-specific IDs for new

2026-07-17 11:09:34 +08:00

imds

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

import

oci-util: Don't fall back to default registry for explicit registries

2026-07-16 01:34:11 +09:00

include

include: add hwcaps missing from glibc and musl

2026-07-10 12:02:01 +02:00

integritysetup

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

journal

journalctl: reject field listing with filters

2026-07-16 01:52:39 +09:00

journal-remote

journal-remote: zero-initialize MHD daemon wrapper

2026-07-15 21:13:24 +01:00

kernel-install

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

keyutil

dlopen-note: move all dlopen notes to dlopen-note.h

2026-07-10 16:34:26 +09:00

libc

libc: dlsym the time64 alias for epoll_pwait2() on 32-bit _TIME_BITS=64

2026-05-24 15:00:37 +02:00

libsystemd

string-util: replace version_is_valid()/version_is_valid_version_spec() by a common call

2026-07-14 22:32:27 +02:00

libsystemd-network

sd-dhcp-relay: fix off-by-one when discarding BOOTREQUEST messages by hops count

2026-07-15 08:44:31 +09:00

libudev

Assorted udev hardening fixes flagged by kres (#42903)

2026-07-14 23:21:53 +01:00

locale

vconsole: reject empty layout during keymap conversion with error

2026-07-15 21:13:24 +01:00

login

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

machine

machined: Allow user ids in open_shell for machine-dbus

2026-07-16 11:58:15 +01:00

machine-id-setup

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

measure

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

modules-load

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

mount

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

mountfsd

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

mstack

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

mute-console

…

network

network: cancel netlink calls for detached requests

2026-07-15 19:21:18 +01:00

notify

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

nspawn

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

nsresourced

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

nss-myhostname

nss-myhostname: keep IPv6 probe result stable

2026-07-11 17:09:14 +01:00

nss-mymachines

…

nss-resolve

nss-resolve: use resolve-varlink-util.h helpers

2026-06-26 16:03:18 -04:00

nss-systemd

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

oom

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

path

…

pcrextend

tpm2-util: initialize NvPCRs on first extension

2026-07-15 13:25:37 +02:00

pcrlock

tpm2-util: keep the measurement log's torn-write marker intact

2026-07-16 01:59:38 +09:00

portable

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

pstore

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

ptyfwd

…

quotacheck

quotacheck: don't apply an invalid quotacheck.mode= value

2026-07-01 18:18:00 +01:00

random-seed

basic: update in_first_boot() to return an error

2026-07-09 16:48:26 +02:00

remount-fs

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

repart

repart: say when we are calculating Verity data

2026-07-16 07:05:39 +02:00

reply-password

…

report

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

resolve

resolved: preserve unchanged question on asymmetric redirect

2026-07-15 21:13:24 +01:00

rfkill

tree-wide: use device_get_sysattr_safe_string()

2026-05-18 02:55:56 +09:00

rpm

…

run

run: reject waiting for remain-after-exit services

2026-07-14 12:03:22 +08:00

run-generator

…

sbsign

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

shared

udev-util: bound leading whitespace skip in udev_replace_whitespace (#42757)

2026-07-17 01:16:07 +09:00

shutdown

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

sleep

meson: rename extract+objects to export+import

2026-07-07 13:40:13 +02:00

socket-activate

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

socket-proxy

socket-proxy: implement PROXY protocol v1

2026-05-20 04:29:59 +09:00

ssh-generator

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

stdio-bridge

…

storage

recurse-dir: optionally, only enumerate dentries of a specific type

2026-06-22 14:40:16 +02:00

storagetm

misc: fix minor error handling issues

2026-06-16 11:44:08 +01:00

sulogin-shell

…

sysctl

…

sysext

sysext: validate work directory metadata before removal

2026-07-15 21:13:24 +01:00

sysinstall

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

system-update-generator

…

systemctl

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

systemd

sd-varlink: add sd_varlink_call_and_upgradeb() + sd_varlink_call_and_upgradebo()

2026-07-12 22:44:03 +02:00

sysupdate

sysupdate: add support for 'update --component-all'

2026-07-15 13:27:48 +02:00

sysusers

sysusers: validate shell credentials

2026-07-18 15:48:34 +08:00

test

udev-util: bound leading whitespace skip in udev_replace_whitespace (#42757)

2026-07-17 01:16:07 +09:00

timedate

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

timesync

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00

tmpfiles

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

tpm2-setup

tree-wide: add missing libopenssl_cflags to targets using tpm2-util.h

2026-07-12 23:31:29 +02:00

tty-ask-password-agent

tree-wide: port to prctl_safe()

2026-07-13 15:39:17 +02:00

udev

Assorted udev hardening fixes flagged by kres (#42903)

2026-07-14 23:21:53 +01:00

ukify

Rebased and reapplied the fix, dropped the test case.

2026-07-16 14:32:56 +02:00

update-done

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

update-utmp

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

user-sessions

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

userdb

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

validatefs

dlopen-note: move all dlopen notes to dlopen-note.h

2026-07-10 16:34:26 +09:00

varlinkctl

varlinkctl: add 'list-sockets' verb

2026-06-23 23:10:01 +02:00

vconsole

vconsole-util: move code to read EFI keyboard layout into generic code

2026-05-20 16:34:21 +02:00

veritysetup

tree-wide: add missing libopenssl_cflags to targets using tpm2-util.h

2026-07-12 23:31:29 +02:00

version

…

vmspawn

copy: drop COPY_REFLINK

2026-07-15 12:12:40 +02:00

volatile-root

tree-wide: embed dlopen notes into individual executables

2026-07-10 16:35:19 +09:00

vpick

string-util: replace version_is_valid()/version_is_valid_version_spec() by a common call

2026-07-14 22:32:27 +02:00

xdg-autostart-generator

Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h

2026-07-15 02:18:05 +09:00