SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e61a0705db40a5d44909796680041ebb36f7f21e
systemd/src
T
History
Luca Boccassi 3754ceba6f tmpfiles: do not fail when trying to apply ACL during mkosi build 
When running in a mkosi namespaced env tmpfiles fails to set ACLs:

Running create action for entry a /buildroot/var/log/journal
Setting access ACL u::rwx,g::r-x,g:adm:r-x,m::r-x,o::r-x on /buildroot/var/log/journal
Setting access ACL "u::rwx,g::r-x,g:adm:r-x,m::r-x,o::r-x" on /buildroot/var/log/journal failed: Invalid argument

If EINVAL is returned and we are in a chroot, skip gracefully via
EOPNOTSUPP. The ACLs will be set on first boot.
2026-06-26 10:24:15 +02:00
..
ac-power
…
analyze
analyze: don't treat user-scope services as running as root in security
2026-06-26 02:42:24 +09:00
ask-password
polkit: check if user authenticated as admin
2026-06-25 10:39:11 +01:00
backlight
tree-wide: use device_get_sysattr_unsigned() and friends
2026-05-18 02:55:56 +09:00
basic
unit-name: introduce "strict" mode for unit name mangling (#42638)
2026-06-25 17:18:55 +02:00
battery-check
…
binfmt
…
bless-boot
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
boot
boot: read the TDX CPUID leaf unconditionally
2026-06-23 12:37:54 +02:00
bootctl
bootctl: add link-auto/LinkAuto and auto-link on completed system update
2026-06-24 13:05:34 +02:00
bpf
Various dlopen/linking cleanups from #42100 (#42166)
2026-05-19 08:54:27 +02:00
busctl
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
cgls
…
cgtop
cgtop: use cg helper to parse pids.current
2026-05-28 20:55:01 +01:00
core
vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)
2026-06-25 22:08:08 +02:00
coredump
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
coverage
…
creds
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
cryptenroll
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
cryptsetup
cryptsetup: Invalidate ineffective try_discover_key before trying
2026-06-19 15:23:21 +09:00
debug-generator
recurse-dir: optionally, only enumerate dentries of a specific type
2026-06-22 14:40:16 +02:00
delta
…
detect-virt
…
dissect
loop-util: shortcut block device fd when it carries no partition table
2026-06-16 00:16:05 +01:00
environment-d-generator
…
escape
…
factory-reset
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
firstboot
creds,firstboot: add support for ? and $ via credentials
2026-06-20 14:26:41 +02:00
fsck
…
fstab-generator
misc: fix minor error handling issues
2026-06-16 11:44:08 +01:00
fundamental
confidential-virt: fix comment regarding vmm.c location
2026-06-23 12:43:00 +02:00
fuzz
pe-binary: bound section data against file size, cap UKI zero-padding hash, validate optional header size
2026-05-29 04:30:48 +09:00
getty-generator
…
gpt-auto-generator
gpt-auto-generator: fix error propagation in add_root_mount()
2026-06-16 10:26:23 +02:00
growfs
growfs: downgrade dependency on libcryptsetup to optional
2026-06-23 17:28:44 +01:00
hibernate-resume
…
home
homed: fix home_unlocking_finish reporting success as failure
2026-06-25 17:14:23 +02:00
hostname
polkit: check if user authenticated as admin
2026-06-25 10:39:11 +01:00
hwdb
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
id128
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
imds
imds: use help-util.h helpers for --help output
2026-06-22 22:03:12 +02:00
import
oci-util: fix and harden oci_registry_is_valid()
2026-06-22 21:59:15 +02:00
include
musl: fix build on 32-bit architecture
2026-06-15 14:15:46 +02:00
integritysetup
generator: order cryptsetup/verity/integrity after systemd-udevd
2026-06-20 23:38:26 +02:00
journal
journald: bound field length in extra-fields reader
2026-06-25 10:32:20 +01:00
journal-remote
journal-remote: fix hostname double-free on request_meta() error paths
2026-06-25 15:50:28 +01:00
kernel-install
recurse-dir: optionally, only enumerate dentries of a specific type
2026-06-22 14:40:16 +02:00
keyutil
tree-wide: Beef up openssl logging
2026-06-22 11:40:57 +02:00
libc
libc: dlsym the time64 alias for epoll_pwait2() on 32-bit _TIME_BITS=64
2026-05-24 15:00:37 +02:00
libsystemd
journal: Prevent total log loss on unclean shutdown at high write rates (#42639)
2026-06-26 02:49:59 +09:00
libsystemd-network
networkd/resolved hardening fixes flagged by kres (#42736)
2026-06-25 17:13:58 +02:00
libudev
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
locale
polkit: check if user authenticated as admin
2026-06-25 10:39:11 +01:00
login
polkit: check if user authenticated as admin
2026-06-25 10:39:11 +01:00
machine
machined: allow privileged users to register other users machines
2026-06-25 10:39:11 +01:00
machine-id-setup
…
measure
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
modules-load
cpu-set-util: introduce cpus_online().
2026-05-14 08:12:28 +02:00
mount
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
mountfsd
polkit: check if user authenticated as admin
2026-06-25 10:39:11 +01:00
mstack
…
mute-console
…
network
network: roll back ipv6ll_address on link_ipv6ll_gained() failure
2026-06-25 16:19:14 +08:00
notify
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
nspawn
Add DLOPEN macros that stamp the caller's ELF and use it to ensure executables list their dlopen dependencies (#42398)
2026-06-02 18:05:34 +02:00
nsresourced
polkit: check if user authenticated as admin
2026-06-25 10:39:11 +01:00
nss-myhostname
…
nss-mymachines
…
nss-resolve
nss-resolve: fix blank array checks and improve NSS status codes
2026-06-26 02:55:37 +09:00
nss-systemd
nss-systemd: avoid ELF TLS for recursion guard
2026-06-20 15:14:14 +02:00
oom
oom: use cgroup.kill if available (#42373)
2026-06-10 21:56:01 +02:00
path
…
pcrextend
pcrextend: refuse empty measurement over Varlink
2026-06-23 07:38:32 +02:00
pcrlock
pcrlock: reject device path node shorter than its header
2026-06-25 22:11:12 +02:00
portable
vpick: take separate root_fd and dir_fd arguments
2026-06-24 12:59:55 +02:00
pstore
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
ptyfwd
…
quotacheck
…
random-seed
random-seed: fix wrong error variable in log_error_errno()
2026-06-15 14:16:28 +02:00
remount-fs
…
repart
repart: Sort the partition list by partition offset (#42488)
2026-06-22 22:05:37 +02:00
reply-password
…
report
report: add systemd-report-sign-tsm backend
2026-06-22 20:42:35 +02:00
resolve
networkd/resolved hardening fixes flagged by kres (#42736)
2026-06-25 17:13:58 +02:00
rfkill
tree-wide: use device_get_sysattr_safe_string()
2026-05-18 02:55:56 +09:00
rpm
…
run
unit-name: introduce "strict" mode for unit name mangling
2026-06-25 12:58:06 +02:00
run-generator
…
sbsign
tree-wide: Beef up openssl logging
2026-06-22 11:40:57 +02:00
shared
vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)
2026-06-25 22:08:08 +02:00
shutdown
shutdown: do not delay VM shutdown (#42396)
2026-06-03 16:10:20 +02:00
sleep
tree-wide: use device_get_sysattr_unsigned() and friends
2026-05-18 02:55:56 +09:00
socket-activate
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
socket-proxy
socket-proxy: implement PROXY protocol v1
2026-05-20 04:29:59 +09:00
ssh-generator
vsock-util: allow VMADDR_CID_ANY as local CID if enabled in hwdb
2026-06-13 15:54:50 +02:00
stdio-bridge
…
storage
recurse-dir: optionally, only enumerate dentries of a specific type
2026-06-22 14:40:16 +02:00
storagetm
misc: fix minor error handling issues
2026-06-16 11:44:08 +01:00
sulogin-shell
…
sysctl
…
sysext
sysext: refresh sysexts and confexts on completed system update
2026-06-24 13:05:34 +02:00
sysinstall
firstboot: make clear where the full screen console wizards end
2026-05-21 09:09:38 +09:00
system-update-generator
…
systemctl
systemctl: fix continue placement in clean-or-freeze error handling
2026-06-25 16:40:28 +08:00
systemd
journal: add catalog message for missing dlopen dep
2026-06-22 10:54:49 +01:00
sysupdate
sysupdate: propagate transfer_instance_vacuum() errors
2026-06-25 16:16:40 +08:00
sysusers
sysext,sysusers: fix wrong error variable in two error paths
2026-06-17 08:32:51 +02:00
test
vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)
2026-06-25 22:08:08 +02:00
timedate
polkit: check if user authenticated as admin
2026-06-25 10:39:11 +01:00
timesync
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
tmpfiles
tmpfiles: do not fail when trying to apply ACL during mkosi build
2026-06-26 10:24:15 +02:00
tpm2-setup
tpm2: add SWTPM fallback test, fixes and hardening (#42722)
2026-06-25 17:13:03 +02:00
tty-ask-password-agent
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
udev
tree-wide: relax access mode of private Varlink sockets a bit
2026-06-23 23:10:02 +02:00
ukify
ukify: honor UKI/SBAT from config files
2026-06-04 17:13:03 +02:00
update-done
…
update-utmp
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
user-sessions
…
userdb
user-record-nss: preserve valid nss lookup aliases in records
2026-06-15 16:54:35 +03:00
validatefs
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
varlinkctl
varlinkctl: add 'list-sockets' verb
2026-06-23 23:10:01 +02:00
vconsole
vconsole-util: move code to read EFI keyboard layout into generic code
2026-05-20 16:34:21 +02:00
veritysetup
veritysetup: don't measure root hash signature after unsigned fallback
2026-06-22 17:29:50 +02:00
version
…
vmspawn
vmspawn: deliver credentials via initrd cpio under SEV-SNP (#42272)
2026-06-25 22:08:08 +02:00
volatile-root
…
vpick
vpick: take separate root_fd and dir_fd arguments
2026-06-24 12:59:55 +02:00
xdg-autostart-generator
…