Philip Withnall 97db6fbfc7 shared: Add a image_policy_copy() helper method ...

This will be used in an upcoming commit to move global command line
argument variables in sysupdate into its `Context` struct.

2026-06-26 10:58:10 +01:00

..

ac-power

…

analyze

analyze: don't treat user-scope services as running as root in security

2026-06-26 02:42:24 +09:00

ask-password

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

backlight

tree-wide: use device_get_sysattr_unsigned() and friends

2026-05-18 02:55:56 +09:00

basic

unit-name: introduce "strict" mode for unit name mangling (#42638)

2026-06-25 17:18:55 +02:00

battery-check

…

binfmt

…

bless-boot

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

boot

boot: read the TDX CPUID leaf unconditionally

2026-06-23 12:37:54 +02:00

bootctl

bootctl: add link-auto/LinkAuto and auto-link on completed system update

2026-06-24 13:05:34 +02:00

bpf

Various dlopen/linking cleanups from #42100 (#42166)

2026-05-19 08:54:27 +02:00

busctl

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

cgls

…

cgtop

cgtop: use cg helper to parse pids.current

2026-05-28 20:55:01 +01:00

core

vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)

2026-06-25 22:08:08 +02:00

coredump

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

coverage

…

creds

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

cryptenroll

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

cryptsetup

cryptsetup: Invalidate ineffective try_discover_key before trying

2026-06-19 15:23:21 +09:00

debug-generator

recurse-dir: optionally, only enumerate dentries of a specific type

2026-06-22 14:40:16 +02:00

delta

…

detect-virt

…

dissect

loop-util: shortcut block device fd when it carries no partition table

2026-06-16 00:16:05 +01:00

environment-d-generator

…

escape

…

factory-reset

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

firstboot

creds,firstboot: add support for ? and $ via credentials

2026-06-20 14:26:41 +02:00

fsck

…

fstab-generator

misc: fix minor error handling issues

2026-06-16 11:44:08 +01:00

fundamental

confidential-virt: fix comment regarding vmm.c location

2026-06-23 12:43:00 +02:00

fuzz

pe-binary: bound section data against file size, cap UKI zero-padding hash, validate optional header size

2026-05-29 04:30:48 +09:00

getty-generator

…

gpt-auto-generator

gpt-auto-generator: fix error propagation in add_root_mount()

2026-06-16 10:26:23 +02:00

growfs

growfs: downgrade dependency on libcryptsetup to optional

2026-06-23 17:28:44 +01:00

hibernate-resume

…

home

homed: fix home_unlocking_finish reporting success as failure

2026-06-25 17:14:23 +02:00

hostname

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

hwdb

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

id128

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

imds

imds: use help-util.h helpers for --help output

2026-06-22 22:03:12 +02:00

import

oci-util: fix and harden oci_registry_is_valid()

2026-06-22 21:59:15 +02:00

include

musl: fix build on 32-bit architecture

2026-06-15 14:15:46 +02:00

integritysetup

generator: order cryptsetup/verity/integrity after systemd-udevd

2026-06-20 23:38:26 +02:00

journal

journald: bound field length in extra-fields reader

2026-06-25 10:32:20 +01:00

journal-remote

journal-remote: fix hostname double-free on request_meta() error paths

2026-06-25 15:50:28 +01:00

kernel-install

recurse-dir: optionally, only enumerate dentries of a specific type

2026-06-22 14:40:16 +02:00

keyutil

tree-wide: Beef up openssl logging

2026-06-22 11:40:57 +02:00

libc

libc: dlsym the time64 alias for epoll_pwait2() on 32-bit _TIME_BITS=64

2026-05-24 15:00:37 +02:00

libsystemd

journal: Prevent total log loss on unclean shutdown at high write rates (#42639)

2026-06-26 02:49:59 +09:00

libsystemd-network

networkd/resolved hardening fixes flagged by kres (#42736)

2026-06-25 17:13:58 +02:00

libudev

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

locale

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

login

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

machine

machined: allow privileged users to register other users machines

2026-06-25 10:39:11 +01:00

machine-id-setup

…

measure

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

modules-load

cpu-set-util: introduce cpus_online().

2026-05-14 08:12:28 +02:00

mount

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

mountfsd

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

mstack

…

mute-console

…

network

network: roll back ipv6ll_address on link_ipv6ll_gained() failure

2026-06-25 16:19:14 +08:00

notify

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

nspawn

Add DLOPEN macros that stamp the caller's ELF and use it to ensure executables list their dlopen dependencies (#42398)

2026-06-02 18:05:34 +02:00

nsresourced

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

nss-resolve: fix blank array checks and improve NSS status codes

2026-06-26 02:55:37 +09:00

nss-systemd

nss-systemd: avoid ELF TLS for recursion guard

2026-06-20 15:14:14 +02:00

oom

oom: use cgroup.kill if available (#42373)

2026-06-10 21:56:01 +02:00

path

…

pcrextend

pcrextend: refuse empty measurement over Varlink

2026-06-23 07:38:32 +02:00

pcrlock

pcrlock: reject device path node shorter than its header

2026-06-25 22:11:12 +02:00

portable

vpick: take separate root_fd and dir_fd arguments

2026-06-24 12:59:55 +02:00

pstore

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

ptyfwd

…

quotacheck

…

random-seed

random-seed: fix wrong error variable in log_error_errno()

2026-06-15 14:16:28 +02:00

remount-fs

…

repart

repart: Sort the partition list by partition offset (#42488)

2026-06-22 22:05:37 +02:00

reply-password

…

report

report: add systemd-report-sign-tsm backend

2026-06-22 20:42:35 +02:00

resolve

networkd/resolved hardening fixes flagged by kres (#42736)

2026-06-25 17:13:58 +02:00

rfkill

tree-wide: use device_get_sysattr_safe_string()

2026-05-18 02:55:56 +09:00

rpm

…

run

unit-name: introduce "strict" mode for unit name mangling

2026-06-25 12:58:06 +02:00

run-generator

…

sbsign

tree-wide: Beef up openssl logging

2026-06-22 11:40:57 +02:00

shared

shared: Add a image_policy_copy() helper method

2026-06-26 10:58:10 +01:00

shutdown

shutdown: do not delay VM shutdown (#42396)

2026-06-03 16:10:20 +02:00

sleep

tree-wide: use device_get_sysattr_unsigned() and friends

2026-05-18 02:55:56 +09:00

socket-activate

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

socket-proxy

socket-proxy: implement PROXY protocol v1

2026-05-20 04:29:59 +09:00

ssh-generator

vsock-util: allow VMADDR_CID_ANY as local CID if enabled in hwdb

2026-06-13 15:54:50 +02:00

stdio-bridge

…

storage

recurse-dir: optionally, only enumerate dentries of a specific type

2026-06-22 14:40:16 +02:00

storagetm

misc: fix minor error handling issues

2026-06-16 11:44:08 +01:00

sulogin-shell

…

sysctl

…

sysext

sysext: refresh sysexts and confexts on completed system update

2026-06-24 13:05:34 +02:00

sysinstall

firstboot: make clear where the full screen console wizards end

2026-05-21 09:09:38 +09:00

system-update-generator

…

systemctl

systemctl: fix continue placement in clean-or-freeze error handling

2026-06-25 16:40:28 +08:00

systemd

journal: add catalog message for missing dlopen dep

2026-06-22 10:54:49 +01:00

sysupdate

sysupdate: Change Context to be stack allocated

2026-06-26 10:58:03 +01:00

sysusers

sysext,sysusers: fix wrong error variable in two error paths

2026-06-17 08:32:51 +02:00

test

vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)

2026-06-25 22:08:08 +02:00

timedate

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

timesync

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

tmpfiles

tmpfiles: do not fail when trying to apply ACL during mkosi build

2026-06-26 10:24:15 +02:00

tpm2-setup

tpm2: add SWTPM fallback test, fixes and hardening (#42722)

2026-06-25 17:13:03 +02:00

tty-ask-password-agent

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

udev

tree-wide: relax access mode of private Varlink sockets a bit

2026-06-23 23:10:02 +02:00

ukify

ukify: honor UKI/SBAT from config files

2026-06-04 17:13:03 +02:00

update-done

…

update-utmp

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

user-sessions

…

userdb

user-record-nss: preserve valid nss lookup aliases in records

2026-06-15 16:54:35 +03:00

validatefs

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

varlinkctl

varlinkctl: add 'list-sockets' verb

2026-06-23 23:10:01 +02:00

vconsole

vconsole-util: move code to read EFI keyboard layout into generic code

2026-05-20 16:34:21 +02:00

veritysetup

veritysetup: don't measure root hash signature after unsigned fallback

2026-06-22 17:29:50 +02:00

version

…

vmspawn

vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)

2026-06-25 22:08:08 +02:00

volatile-root

…

vpick

vpick: take separate root_fd and dir_fd arguments

2026-06-24 12:59:55 +02:00

xdg-autostart-generator

…