Lennart Poettering
d20dff2814
Previously, we'd take the image policy only into consideration when dissecting the mage, but for the unlock/verity step we'd go via best effort. Change that. This means we can now enforce policies such as activating by root hash only even if a signature exists and similar. Also, introduce a separate error code if we try to unlock a Verity volume but have no root hash. Previously we'd return ENOKEY for that, exactly like we do for encrypted volumes where we have no passparse. The interctive unlock loop dissected_image_decrypt_interactively() is otherwise very confused and will ask for a root hash, which makes no sense. Hence use two distinct errors for this.
System and Service Manager
Details
Most documentation is available on systemd's web site.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Code Map for information about this repository's layout and content.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list, join our IRC channel #systemd on libera.chat or Matrix channel
Stable branches with backported patches are available in the stable repo.
We have a security bug bounty program sponsored by the Sovereign Tech Fund hosted on YesWeHack
Repositories with distribution packages built from git main are available on OBS