Commits - source-git/systemd - CentOS Git server

fix typo in ProtectSystem= option

David Tardon • 4 years ago

25e3fe

logind: don't print warning when user@.service template is masked

Michal Sekletar • 4 years ago

7e418e

cgroup: freezer action must be NOP when cgroup v2 freezer is not available

Michal Sekletár • 4 years ago

55a352

core: make sure to restore the control command id, too

Lennart Poettering • 4 years ago

a62609

man: document new "boot-complete.target" unit

Lennart Poettering • 4 years ago

28c244

units: add generic boot-complete.target

Lennart Poettering • 4 years ago

7baa03

device: don't emit PropetiesChanged needlessly

Michal Sekletár • 4 years ago

9fcf9d

device: make sure we emit PropertiesChanged signal once we set sysfs

Michal Sekletár • 4 years ago

4eb808

tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw

Michal Sekletár • 4 years ago

f30854

fix mis-merge

David Tardon • 4 years ago

b0ccf0

test: add test for cgroup v2 freezer support

Michal Sekletár • 4 years ago

52dad3

core: fix the return value in order to make sure we don't dipatch method return too early

Michal Sekletár • 4 years ago

ff08b3

core/cgroup: fix return value of unit_cgorup_freezer_action()

Michal Sekletar • 4 years ago

1090ac

core: introduce support for cgroup freezer

Michal Sekletár • 4 years ago

5c9e28

shared: add NULL callback check in one more place

Zbigniew Jędrzejewski-Szmek • 4 years ago

e72aa5

shared: Don't try calling NULL callback in bus_wait_for_units_clear

Balint Reczey • 4 years ago

08ec9e

shared: fix assert call

Zbigniew Jędrzejewski-Szmek • 4 years ago

16831b

shared: add generic logic for waiting for a unit to enter some state

Lennart Poettering • 4 years ago

7ff2aa

basic/cgroup-util: introduce cg_get_keyed_attribute_full()

Michal Sekletár • 4 years ago

63e6a9

selinux: do preprocessor check only in selinux-access.c

Michal Sekletár • 4 years ago

e8356b

core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts

Anita Zhang • 4 years ago

7c9bdf

meson: allow setting the version string during configuration

Jan Synacek • 4 years ago

dd891d

cgroup: Mark memory protections as explicitly set in transient units

Chris Down • 4 years ago

74dbe1

cgroup: Respect DefaultMemoryMin when setting memory.min

Chris Down • 4 years ago

70bb58

cgroup: Check ancestor memory min for unified memory config

Chris Down • 4 years ago

f6f1a1

cgroup: Test that it's possible to set memory protection to 0 again

Chris Down • 4 years ago

34af46

cgroup: Support 0-value for memory protection directives

Chris Down • 4 years ago

2bee7e

cgroup: Readd some plumbing for DefaultMemoryMin

Chris Down • 4 years ago

d92b22

cgroup: Polish hierarchically aware protection docs a bit

Chris Down • 4 years ago

fc9425

unit: Add DefaultMemoryMin

Chris Down • 4 years ago

7f3212

cgroup: Create UNIT_DEFINE_ANCESTOR_MEMORY_LOOKUP

Chris Down • 4 years ago

0db177

cgroup: Implement default propagation of MemoryLow with DefaultMemoryLow

Chris Down • 4 years ago

d9e216

test: remove support for suffix in get_testdata_dir()

Filipe Brandenburger • 4 years ago

2c320d

core: introduce cgroup_add_device_allow()

Yu Watanabe • 4 years ago

2da753

core: add MemoryMin

Tejun Heo • 4 years ago

7ff5ce

sd-bus: skip sending formatted UIDs via SASL

David Rheinsberg • 4 years ago

a82e8a

sd-bus: fix SASL reply to empty AUTH

David Rheinsberg • 4 years ago

fbf259

sd-bus: avoid magic number in SASL length calculation

David Rheinsberg • 4 years ago

b7d22c

core: downgrade CPUQuotaPeriodSec= clamping logs to debug

Filipe Brandenburger • 4 years ago

24f6bb

core: add CPUQuotaPeriodSec=

Filipe Brandenburger • 4 years ago

195ced

cgroup: use structured initialization

Lennart Poettering • 4 years ago

27b0f2

time-util: Introduce parse_sec_def_infinity

Filipe Brandenburger • 4 years ago

97f5b6

core: add IODeviceLatencyTargetSec

Tejun Heo • 4 years ago

b83394

core: coldplug possible nop_job

ypf791 • 4 years ago

a7c6ea

mount: don't add Requires for tmp.mount

David Tardon • 4 years ago

194ad7

resolvconf: fixes for the compatibility interface

Filipe Brandenburger • 4 years ago

d41b85

sulogin-shell: Use force if SYSTEMD_SULOGIN_FORCE set

Andreas Henriksson • 4 years ago

15fc0c

tmpfiles: fix crash with NULL in arg_root and other fixes and tests

Zbigniew Jędrzejewski-Szmek • 4 years ago

6e5b2f

seccomp: fix __NR__sysctl usage

Jan Synacek • 4 years ago

6758af

fuzz-compress: add fuzzer for compression and decompression

Zbigniew Jędrzejewski-Szmek • 4 years ago

ae67c0

journal: adapt for new improved LZ4_decompress_safe_partial()

Zbigniew Jędrzejewski-Szmek • 4 years ago

477a9a

test-compress: add test for short decompress_startswith calls

Zbigniew Jędrzejewski-Szmek • 4 years ago

e7eccc

Drop support for lz4 < 1.3.0

Zbigniew Jędrzejewski-Szmek • 4 years ago

97d970

core: ExecCondition= for services

Anita Zhang • 4 years ago

bfdab2

test-execute: provide custom failure message

Zbigniew Jędrzejewski-Szmek • 4 years ago

78675d

test-execute: allow filtering test cases by pattern

Zbigniew Jędrzejewski-Szmek • 4 years ago

0a863c

tests: always use the right vtable wrapper calls

Lennart Poettering • 4 years ago

458eef

core: log a recognizable message when a unit succeeds, too

Lennart Poettering • 4 years ago

6f8376

core: make log messages about units entering a 'failed' state recognizable

Lennart Poettering • 4 years ago

ff8928

core: split out all logic that updates a Job on a unit's unit_notify() invocation

Lennart Poettering • 4 years ago

8c1f84

job: when a job was skipped due to a failed condition, log about it

Lennart Poettering • 4 years ago

44d504

core: move unit_status_emit_starting_stopping_reloading() and related calls to job.c

Lennart Poettering • 4 years ago

69b221

nspawn: chown() the legacy hierarchy when it's used in a container

Evgeny Vereshchagin • 4 years ago

3d5397

nspawn: move payload to sub-cgroup first, then sync cgroup trees

Lennart Poettering • 4 years ago

bdb7d9

Add support for opening files for appending

Zsolt Dollenstein • 4 years ago

23a366

man: be clearer that .timer time expressions need to be reset to override them

Lennart Poettering • 4 years ago

dd6a14

udev-rules: make tape-changers also apprear in /dev/tape/by-path/

Joerg Steffens • 4 years ago

c09664

pid1: add new kernel cmdline arg systemd.cpu_affinity=

Lennart Poettering • 4 years ago

38d4a3

test: store coredumps in journal

Frantisek Sumsal • 4 years ago

eba070

test: try to determine QEMU_SMP dynamically

Frantisek Sumsal • 4 years ago

a5a852

test: parallelize tasks in TEST-24-UNIT-TESTS

Frantisek Sumsal • 4 years ago

dc14cd

test: make test-catalog relocatable

Yu Watanabe • 4 years ago

f8baec

test: introduce test_is_running_from_builddir()

Yu Watanabe • 4 years ago

2d63bb

test-execute: skip several tests when running in container

Yu Watanabe • 4 years ago

1ee986

test-execute: also check python3 is installed or not

Yu Watanabe • 4 years ago

0aa7fd

test-process-util: skip several verifications when running in unprivileged container

Yu Watanabe • 4 years ago

6bc0d0

test-fs-util: skip some tests when running in unprivileged container

Yu Watanabe • 4 years ago

6a8e44

test: make install_keymaps() optionally install more keymaps

Yu Watanabe • 4 years ago

679ea6

test: add paths of keymaps in install_keymaps()

Yu Watanabe • 4 years ago

ac59aa

test: replace duplicated Makefile by symbolic link

Yu Watanabe • 4 years ago

f5ab8f

test: introduce install_zoneinfo()

Yu Watanabe • 4 years ago

f25e0f

test: install libraries required by tests

Yu Watanabe • 4 years ago

30bec1

test: do not use global variable to pass error

Yu Watanabe • 4 years ago

86b85e

logind: check PolicyKit before allowing VT switch

Lennart Poettering • 4 years ago

e331bf

udev: downgrade message when we fail to set inotify watch up

Zbigniew Jędrzejewski-Szmek • 4 years ago

646d43

sd-journal: remove the dead code and actually fix #14695

Michal Sekletár • 4 years ago

243689

sd-journal: close journal files that were deleted by journald before we've setup inotify watch

Michal Sekletár • 4 years ago

c06375

core: transition to FINAL_SIGTERM state after ExecStopPost=

Anita Zhang • 4 years ago

246f76

basic: use comma as separator in cpuset cgroup cpu ranges

Michal Sekletár • 4 years ago

587eca

core: fix re-realization of cgroup siblings

Lennart Poettering • 4 years ago

54db9f

pid1: fix the names of AllowedCPUs= and AllowedMemoryNodes=

Zbigniew Jędrzejewski-Szmek • 4 years ago

91b91b

core: rework StopWhenUnneeded= logic

Lennart Poettering • 4 years ago

40aa5d

bus_open leak sd_event_source when udevadm trigger。

ven • 4 years ago

8279ef

resolved: Recover missing PrivateTmp=yes and ProtectSystem=strict

HATAYAMA Daisuke • 4 years ago

44a73f

swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails

HATAYAMA Daisuke • 4 years ago

fe08ca

cryptsetup: Treat key file errors as a failed password attempt

Ryan Gonzalez • 4 years ago

ccec6c

test: replace cursor file with a plain cursor

Frantisek Sumsal • 4 years ago

df845d

test: drop the missed || exit 1 expression

Frantisek Sumsal • 4 years ago

62d5d9

test: add a simple sanity check for systems without NUMA support

Frantisek Sumsal • 4 years ago

f3bd75

test: give strace some time to initialize

Frantisek Sumsal • 4 years ago

70b94f

test: skip the test on systems without NUMA support

Frantisek Sumsal • 4 years ago

69a4ac

test: make sure the strace process is indeed dead

Frantisek Sumsal • 4 years ago

4dfddd

test: support MPOL_LOCAL matching in unpatched strace versions

Frantisek Sumsal • 4 years ago

0e5687

test: replace `tail -f` with journal cursor which should be...

Frantisek Sumsal • 4 years ago

5fcab6

test: introduce TEST-36-NUMAPOLICY

Frantisek Sumsal • 4 years ago

695a6d

cgroup: make sure that cpuset is supported on cgroup v2 and disabled with v1

Michal Sekletár • 4 years ago

23fbfa

pid1: fix DefaultTasksMax initialization

Franck Bui • 4 years ago

3c5dfd

cgroup: introduce support for cgroup v2 CPUSET controller

Pavel Hrdina • 4 years ago

276f89

core: imply NNP and SUID/SGID restriction for DynamicUser=yes service

Lennart Poettering • 4 years ago

267c61

units: turn on RestrictSUIDSGID= in most of our long-running daemons

Lennart Poettering • 4 years ago

22ef65

man: document the new RestrictSUIDSGID= setting

Lennart Poettering • 4 years ago

ff54a9

analyze: check for RestrictSUIDSGID= in "systemd-analyze security"

Lennart Poettering • 4 years ago

9a78bf

core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID=

Lennart Poettering • 4 years ago

053b44

test: add test case for restrict_suid_sgid()

Jan Synacek • 4 years ago

b02f3f

seccomp: introduce seccomp_restrict_suid_sgid() for blocking chmod() for suid/sgid files

Lennart Poettering • 4 years ago

ac6a9f

main: introduce a define HIGH_RLIMIT_MEMLOCK similar to HIGH_RLIMIT_NOFILE

Lennart Poettering • 4 years ago

9926e4

pid1: make sure to restore correct default values for some rlimits

Jan Synacek • 4 years ago

fd996b

sd-bus: use "queue" message references for managing r/w message queues in connection objects

Lennart Poettering • 4 years ago

8c156d

journal: use cleanup attribute at one more place

Yu Watanabe • 4 years ago

593c8b

journal: do not trigger assertion when journal_file_close() get NULL

Yu Watanabe • 4 years ago

f4f1fa

sysctl: let's by default increase the numeric PID range from 2^16 to 2^22

Michal Sekletár • 4 years ago

fa3140

polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it

Jan Synacek • 4 years ago

1252cd

sd-event: add sd_event_source_disable_unref() helper

Zbigniew Jędrzejewski-Szmek • 4 years ago

7353c8

sd-bus: introduce API for re-enqueuing incoming messages

Jan Synacek • 4 years ago

0eeeb6

bus-message: introduce two kinds of references to bus messages

Lennart Poettering • 4 years ago

57a95b

sd-bus: always go through sd_bus_unref() to free messages

Lennart Poettering • 4 years ago

b38817

sd-bus: initialize mutex after we allocated the wqueue

Lennart Poettering • 4 years ago

41a131

sd-bus: drop two inappropriate empty lines

Lennart Poettering • 4 years ago

e2ba01

sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success

Lennart Poettering • 4 years ago

5bf181

sd-bus: reorder bus ref and bus message ref handling

Lennart Poettering • 4 years ago

31a4df

sd-bus: make rqueue/wqueue sizes of type size_t

Lennart Poettering • 4 years ago

4591a7

rules: reintroduce 60-alias-kmsg.rules

Jan Synacek • 4 years ago

681a84

cryptsetup: rework how we log about activation failures

Lennart Poettering • 4 years ago

132d1f

cryptsetup: downgrade a log message we ignore

Lennart Poettering • 4 years ago

c3973d

cryptsetup: add some commenting about EAGAIN generation

Lennart Poettering • 4 years ago

2143d6

crypt-util: Translate libcryptsetup log level instead of using log_debug()

Jan Janssen • 4 years ago

c8a9c1

cryptsetup-generator: guess whether the keyfile argument is two items or one

Zbigniew Jędrzejewski-Szmek • 4 years ago

bd1647

cryptsetup: don't assert on variable which is optional

Zbigniew Jędrzejewski-Szmek • 4 years ago

38d024

cryptsetup: use unabbrieviated variable names

Zbigniew Jędrzejewski-Szmek • 4 years ago

39a260

cryptsetup: add documentation for keyfile-timeout

shinygold • 4 years ago

09eee6

cryptsetup: add keyfile-timeout to allow a keydev timeout and allow to fallback to a password if it fails.

shinygold • 4 years ago

939db8

catalog: fix name of variable

Zbigniew Jędrzejewski-Szmek • 4 years ago

010c3a

test-cpu-set-util: fix allocation size check on i386

Zbigniew Jędrzejewski-Szmek • 4 years ago

898239

test-cpu-set-util: fix comparison for allocation size

Zbigniew Jędrzejewski-Szmek • 4 years ago

f18622

debug-generator: enable custom systemd.debug_shell tty

Jan Synacek • 4 years ago

1a74c8

core, job: fix breakage of ordering dependencies by systemctl reload command

HATAYAMA Daisuke • 4 years ago

8682fc

cryptsetup: reduce the chance that we will be OOM killed

Michal Sekletár • 4 years ago

03fc3a

set kptr_restrict=1

David Tardon • 4 years ago

4a049c

core: disable CPUAccounting by default

Michal Sekletár • 4 years ago

5b880a

core: introduce NUMAPolicy and NUMAMask options

Michal Sekletár • 4 years ago

2406c9

cpu-set-util: use %d-%d format in cpu_set_to_range_string() only for actual ranges

Michal Sekletar • 4 years ago

e969a1

execute: dump CPUAffinity as a range string instead of a list of CPUs

Michal Sekletar • 4 years ago

9b852c

shared/cpu-set-util: only force range printing one time

Zbigniew Jędrzejewski-Szmek • 4 years ago

c066ea

systemctl: present CPUAffinity mask as a list of CPU index ranges

Michal Sekletar • 4 years ago

5b953a

shared/cpu-set-util: introduce cpu_set_to_range()

Michal Sekletar • 4 years ago

dfc956

test-cpu-set-util: add test for dbus conversions

Zbigniew Jędrzejewski-Szmek • 4 years ago

757d78

shared/cpu-set-util: make transfer of cpu_set_t over bus endian safe

Michal Sekletar • 4 years ago

02c5f0

shared/cpu-set-util: drop now-unused cleanup function

Zbigniew Jędrzejewski-Szmek • 4 years ago

d9baa9

test-execute: use CPUSet too

Zbigniew Jędrzejewski-Szmek • 4 years ago

b6e52c

pid1: when reloading configuration, forget old settings

Zbigniew Jędrzejewski-Szmek • 4 years ago

0121f9

pid1: don't reset setting from /proc/cmdline upon restart

Zbigniew Jędrzejewski-Szmek • 4 years ago

fa9b62

pid1: parse CPUAffinity= in incremental fashion

Zbigniew Jędrzejewski-Szmek • 4 years ago

07b5d6

test-cpu-set-util: add a smoke test for test_parse_cpu_set_extend()

Zbigniew Jędrzejewski-Szmek • 4 years ago

16f8be

test-cpu-set-util: add simple test for cpus_in_affinity_mask()

Zbigniew Jędrzejewski-Szmek • 4 years ago

4746c5

Move cpus_in_affinity_mask() to cpu-set-util.[ch]

Zbigniew Jędrzejewski-Szmek • 4 years ago

298f67

Rework cpu affinity parsing

Zbigniew Jędrzejewski-Szmek • 4 years ago

3a2eff

shared/cpu-set-util: remove now-unused CPU_SIZE_TO_NUM()

Zbigniew Jędrzejewski-Szmek • 4 years ago

944adf

shared/cpu-set-util: move the part to print cpu-set into a separate function

Zbigniew Jędrzejewski-Szmek • 4 years ago

f4d2c6

core/dbus-execute: remove unnecessary initialization

Zbigniew Jędrzejewski-Szmek • 4 years ago

a57e3e

core: change ownership/mode of the execution directories also for static users

Lennart Poettering • 4 years ago

5b7f2c

execute: remove one redundant comparison check

Lennart Poettering • 4 years ago

db5f44

Add a warning about the difference in permissions between existing directories and unit settings.

Taro Yamada • 4 years ago

5039ae

journald: take leading spaces into account in syslog_parse_identifier

Evgeny Vereshchagin • 4 years ago

92a9d3

fuzz-journal-stream: avoid assertion failure on samples which don't fit in pipe

Zbigniew Jędrzejewski-Szmek • 4 years ago

bc3afc

tests: add a fuzzer for server_process_native_file

Evgeny Vereshchagin • 4 years ago

635a25

tests: add a fuzzer for journald streams

Evgeny Vereshchagin • 4 years ago

155295

tests: introduce dummy_server_init and use it in all journald fuzzers

Evgeny Vereshchagin • 4 years ago

84904f

journald: check whether sscanf has changed the value corresponding to %n

Evgeny Vereshchagin • 4 years ago

5d86a0

tests: add a fuzzer for process_audit_string

Evgeny Vereshchagin • 4 years ago

90af15

test: initialize syslog_fd in fuzz-journald-kmsg too

Evgeny Vereshchagin • 4 years ago

b9c843

tests: add a reproducer for a heap-buffer-overflow fixed in 937b1171378bc1000a

Evgeny Vereshchagin • 4 years ago

101a17

tests: add a reproducer for a memory leak fixed in 30eddcd51b8a472e05d3b8d1 in August

Evgeny Vereshchagin • 4 years ago

7de27b

journal: fix an off-by-one error in dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

629529

basic: remove an assertion from cunescape_one

Evgeny Vereshchagin • 4 years ago

266ae8

tests: add a fuzzer for dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

25f80c

tests: put fuzz_journald_processing_function in a .c file

Evgeny Vereshchagin • 4 years ago

589e92

sd-bus: bump message queue size again

Jan Synacek • 4 years ago

fe6164

basic/user-util: allow dots in user names

Jan Synacek • 4 years ago

1207a9

journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup

Evgeny Vereshchagin • 4 years ago

03ee62

resolved: query polkit only after parsing the data

Zbigniew Jędrzejewski-Szmek • 4 years ago

0ec638

resolved: allow access to Set*Link and Revert methods through polkit

Zbigniew Jędrzejewski-Szmek • 4 years ago

61e5aa

resolved: do not run loop twice

Zbigniew Jędrzejewski-Szmek • 4 years ago

826465

sd-bus: adjust indentation of comments

Zbigniew Jędrzejewski-Szmek • 4 years ago

8305eb

shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description()

Zbigniew Jędrzejewski-Szmek • 4 years ago

9a6883

udev: Add id program and rule for FIDO security tokens

Fabian Henneke • 4 years ago

0b4738

sd-device: introduce log_device_*() macros

Yu Watanabe • 4 years ago

5fb74a

selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit

Michal Sekletar • 4 years ago

74430d

shared/sleep-config: exclude zram devices from hibernation candidates

Andrew Jorgensen • 4 years ago

4f2411

test: bump the second partition's size to 50M

Frantisek Sumsal • 4 years ago

3ad8ee

test: mask several unnecessary services

Yu Watanabe • 4 years ago

bc0bec

test: use PBKDF2 instead of Argon2 in cryptsetup...

Frantisek Sumsal • 4 years ago

13d134

journald: fixed assertion failure when system journal rotation fails (#9893)

Renaud Métrich • 4 years ago

db4081

path: stop watching path specs once we triggered the target unit

Michal Sekletar • 4 years ago

2714de

core: implement per unit journal rate limiting

Anita Zhang • 4 years ago

c7b0e0

core: only watch processes when it's really necessary

Franck Bui • 4 years ago

479b0f

core: reduce the number of stalled PIDs from the watched processes list when possible

Franck Bui • 4 years ago

6a175f

process-util: introduce pid_is_my_child() helper

Franck Bui • 4 years ago

a5792d

Consider smb3 as remote filesystem

Jan Synacek • 4 years ago

31d53f

Call getgroups() to know size of supplementary groups array to allocate

Renaud Métrich • 4 years ago

1d029a

udev: introduce CONST key name

Jan Synacek • 4 years ago

134802

buildsys: don't garbage collect sections while linking

Michal Sekletar • 4 years ago

ec5c2a

core: try to reopen /dev/kmsg again right after mounting /dev

Lennart Poettering • 4 years ago

40f20a

ask-password: prevent buffer overrow when reading from keyring

Thadeu Lima de Souza Cascardo • 4 years ago

894c1c

kernel-install: do not require non-empty kernel cmdline

Zbigniew Jędrzejewski-Szmek • 4 years ago

e1702e

travis: don't run slow tests under ASan/UBSan

Frantisek Sumsal • 4 years ago

07dd62

sd-bus: make strict asan shut up

Lennart Poettering • 4 years ago

4e8ded

syslog: fix segfault in syslog_parse_priority()

Yu Watanabe • 4 years ago

ea22ae

travis: drop SCL remains

Frantisek Sumsal • 4 years ago

05c699

travis: move to CentOS 8 docker images

Frantisek Sumsal • 4 years ago

d62754

man: reorder and add examples to systemd-analyze(1)

Zbigniew Jędrzejewski-Szmek • 4 years ago

28c4de

man: document systemd-analyze security

Jan Synacek • 4 years ago

b7f66e

core: never propagate reload failure to service result

Lennart Poettering • 4 years ago

8a8119

analyze-security: fix potential division by zero

Jan Synacek • 4 years ago

670da8

swap: scan /proc/swaps before processing waitid() results

Lennart Poettering • 4 years ago

cb10a2

mount: rescan /proc/self/mountinfo before processing waitid() results

Lennart Poettering • 4 years ago

44091e

mount: simplify /proc/self/mountinfo handler

Lennart Poettering • 4 years ago

0d070f

rules: skip memory hotplug on ppc64

Jan Synacek • 4 years ago

32d225

man: note that journal does not validate syslog fields

Jan Synacek • 4 years ago

2f0e91

bash-completion: analyze: support 'security'

Yu Watanabe • 4 years ago

0f8361

Change job mode of manager triggered restarts to JOB_REPLACE

Jonathon Kowalski • 4 years ago

23d6ea

udev/scsi_id: fix incorrect page length when get device identification VPD page

Zhang Xianwei • 4 years ago

480c70

cryptsetup: Add LUKS2 token support.

Milan Broz • 4 years ago

a6fc69

cryptsetup: call crypt_load() for LUKS only once

Milan Broz • 4 years ago

6b7dfb

cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails.

Milan Broz • 4 years ago

fe06d7

journal: do not remove multiple spaces after identifier in syslog message

Yu Watanabe • 4 years ago

a9b56e

journal-remote: do not request Content-Length if Transfer-Encoding is chunked

Yu Watanabe • 4 years ago

5e6cd6

sd-bus: deal with cookie overruns

Lennart Poettering • 4 years ago

69a9ea

journal-gateway: use localStorage["cursor"] only when it has valid value

Yu Watanabe • 4 years ago

4ee87e

tools: drop unused variable

Yu Watanabe • 4 years ago

07df3e

journal-gateway: explicitly declare local variables

Yu Watanabe • 4 years ago

615c5d

test: add test for Type=exec

Lennart Poettering • 4 years ago

90d521

sd-login: let's also make sd-login understand ".host"

Lennart Poettering • 4 years ago

37f0b6

sd-bus: allow connecting to the pseudo-container ".host"

Lennart Poettering • 4 years ago

d91121

man: document the new Type=exec type

Lennart Poettering • 4 years ago

ab87ec

core: introduce new Type=exec service type

Lennart Poettering • 4 years ago

b6b928

execute: use our usual syntax for defining bit masks

Lennart Poettering • 4 years ago

128a3e

core: swap order of "n_storage_fds" and "n_socket_fds" parameters

Lennart Poettering • 4 years ago

fa4c55

socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov()

Filipe Brandenburger • 4 years ago

62ff37

test-socket-util: Add tests for receive_fd_iov() and friends.

Filipe Brandenburger • 4 years ago

0eaeb1

travis: switch from trusty to xenial

Frantisek Sumsal • 4 years ago

9de21d

mount-point: honour AT_SYMLINK_FOLLOW correctly

Lennart Poettering • 4 years ago

a431de

sd-bus: call cap_last_cap() only once in has_cap()

Lennart Poettering • 4 years ago

1f42da

sd-bus: use size_t when dealing with memory offsets

Lennart Poettering • 4 years ago

386e5e

capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK()

Lennart Poettering • 4 years ago

f777ef

sd-journal: escape binary data in match_make_string()

Evgeny Vereshchagin • 4 years ago

aee605

test-socket-util: avoid "memleak" reported by valgrind

Zbigniew Jędrzejewski-Szmek • 4 years ago

3df672

util: introduce memcmp_safe()

Yu Watanabe • 4 years ago

8b660b

tree-wide: various ubsan zero size memory fixes

Lennart Poettering • 4 years ago

d7a01c

tests: keep SYS_PTRACE when running under ASan

Frantisek Sumsal • 4 years ago

18c4f6

travis: enable ASan and UBSan on RHEL8

Frantisek Sumsal • 4 years ago

cc8e61

util: do not use stack frame for parsing arbitrary inputs

Yu Watanabe • 4 years ago

85fbf6

bus-message: avoid wrap-around when using length read from message

Zbigniew Jędrzejewski-Szmek • 4 years ago

6b8afa

bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

732f02

fuzz-bus-message: add two test cases that pass now

Zbigniew Jędrzejewski-Szmek • 4 years ago

4e15b8

bus-message: also properly copy struct signature when skipping

Zbigniew Jędrzejewski-Szmek • 4 years ago

6ca4e1

bus-message: fix skipping of array fields in !gvariant messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

0eede7

bus-message: output debug information about offset troubles

Zbigniew Jędrzejewski-Szmek • 4 years ago

9131bb

bus-message: drop asserts in functions which are wrappers for varargs version

Zbigniew Jędrzejewski-Szmek • 4 years ago

a3964e

bus-message: fix calculation of offsets table for arrays

Zbigniew Jędrzejewski-Szmek • 4 years ago

a4b35b

bus-message: remove duplicate assignment

Zbigniew Jędrzejewski-Szmek • 4 years ago

8da649

bus-message: fix calculation of offsets table

Zbigniew Jędrzejewski-Szmek • 4 years ago

bbde41

bus: do not print (null) if the message has unknown type

Zbigniew Jędrzejewski-Szmek • 4 years ago

868cc9

bus-message: use define

Zbigniew Jędrzejewski-Szmek • 4 years ago

244772

bus-message: rename function for clarity

Zbigniew Jędrzejewski-Szmek • 4 years ago

8efa82

bus-message: let's always use -EBADMSG when the message is bad

Zbigniew Jędrzejewski-Szmek • 4 years ago

f8dff0

bus-message: avoid an infinite loop on empty structures

Zbigniew Jędrzejewski-Szmek • 4 years ago

996d9a

bus-message: use structured initialization to avoid use of unitialized memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

d3d12a

fuzz-bus-message: add fuzzer for message parsing

Zbigniew Jędrzejewski-Szmek • 4 years ago

88102d

meson: treat all fuzz cases as unit tests

Zbigniew Jędrzejewski-Szmek • 4 years ago

c6fb58

meson: use .source_root() in more places

Zbigniew Jędrzejewski-Szmek • 4 years ago

274249

meson: drop duplicated condition

Zbigniew Jędrzejewski-Szmek • 4 years ago

4f69e2

meson: allow building resolved and machined without nss modules

Yu Watanabe • 4 years ago

7dbc6a

meson: add -Dlog-trace to set LOG_TRACE

Zbigniew Jędrzejewski-Szmek • 4 years ago

783858

test-bus-marshal: use cescaping instead of hexmem

Zbigniew Jędrzejewski-Szmek • 4 years ago

4b1f74

fuzz: unify the "fuzz-regressions" directory with the main corpus

Zbigniew Jędrzejewski-Szmek • 4 years ago

c17e22

test: add testcase for issue 10007 by oss-fuzz

Yu Watanabe • 4 years ago

233873

fuzz: rename "fuzz-corpus" directory to just "fuzz"

Zbigniew Jędrzejewski-Szmek • 4 years ago

32e118

tests: add a reproducer for another infinite loop in ndisc_handle_datagram

Evgeny Vereshchagin • 4 years ago

77281a

tests: add a reproducer for an infinite loop in ndisc_handle_datagram

Evgeny Vereshchagin • 4 years ago

cdd194

tests: add reproducers for several issues uncovered with fuzz-journald-syslog

Evgeny Vereshchagin • 4 years ago

eda20d

ndisc: fix two infinite loops

Yu Watanabe • 4 years ago

0070b1

tests: add a fuzzer for sd-ndisc

Evgeny Vereshchagin • 4 years ago

20f265

tests: add a fuzzer for server_process_native_message

Evgeny Vereshchagin • 4 years ago

486e50

journald: make server_process_native_message compatible with fuzz_journald_processing_function

Evgeny Vereshchagin • 4 years ago

2fa1d3

tests: rework the code fuzzing journald

Evgeny Vereshchagin • 4 years ago

17f006

journald: free the allocated memory before returning from dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

886e5f

journald: make it clear that dev_kmsg_record modifies the string passed to it

Evgeny Vereshchagin • 4 years ago

5f5ed1

tests: add a rudimentary fuzzer for server_process_syslog_message (#9979)

Evgeny Vereshchagin • 4 years ago

ec6586

analyze: add new security verb

Lennart Poettering • 4 years ago

9383d7

locale-util: add logic to output smiley emojis at various happiness levels

Lennart Poettering • 4 years ago

6d9da3

format-table: never try to reuse cells that have color/url/uppercase set

Lennart Poettering • 4 years ago

920d5f

format-table: add option to uppercase cells on display

Lennart Poettering • 4 years ago

45ad80

format-table: use right field for display

Lennart Poettering • 4 years ago

6240ac

format-table: make sure we never call memcmp() with NULL parameters

Lennart Poettering • 4 years ago

961aa5

format-table: add calls to query the data in a specific cell

Lennart Poettering • 4 years ago

d05ca4

format-table: always underline header line

Lennart Poettering • 4 years ago

7de9aa

format-table: add an API for getting the cell at a specific row/column

Lennart Poettering • 4 years ago

9af921

format-table: add table_update() to update existing entries

Lennart Poettering • 4 years ago

9e8dc4

format-table: optionally allow reversing the sort order for a column

Lennart Poettering • 4 years ago

a567d3

format-table: add option to store/format percent and uint64_t values in cells

Lennart Poettering • 4 years ago

1995d9

format-table: before outputting a color, check if colors are available

Lennart Poettering • 4 years ago

fa074c

format-table: optionally make specific cells clickable links

Lennart Poettering • 4 years ago

898c0d

format-table: when duplicating a cell, also copy the color

Lennart Poettering • 4 years ago

0b3157

seccomp: reduce logging about failure to add syscall to seccomp

Zbigniew Jędrzejewski-Szmek • 4 years ago

d6d2c6

nss: unportect errno before writing to NSS' *errnop

Lennart Poettering • 4 years ago

8aea36

util.h: add new UNPROTECT_ERRNO macro

Lennart Poettering • 4 years ago

084d45

nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS

Yu Watanabe • 4 years ago

0996d1

units: add [Install] section to tmp.mount

Jan Synacek • 4 years ago

06b27a

logs-show: use grey color for de-emphasizing journal log output

Lennart Poettering • 4 years ago

bb31e3

journal: don't enable systemd-journald-audit.socket by default

Jan Synacek • 4 years ago

6c75f6

Revert "journal: remove journal audit socket"

Jan Synacek • 4 years ago

831af9

unit: enqueue cgroup empty check event if the last ref on a unit is dropped

Lennart Poettering • 4 years ago

030428

nspawn: rework how we allocate/kill scopes

Lennart Poettering • 4 years ago

5cc3fb

nspawn: merge two variable declaration lines

Lennart Poettering • 4 years ago

f5d091

nspawn: simplify machine terminate bus call

Lennart Poettering • 4 years ago

ef059a

tree-wide: shorten error logging a bit

Yu Watanabe • 4 years ago

79eec1

Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it"

Lukas Nykryn • 4 years ago

19971c

meson: drop misplaced -Wl,--undefined argument

Jussi Pakkanen • 4 years ago

810620

sd-bus: if we receive an invalid dbus message, ignore and proceeed

Lennart Poettering • 4 years ago

bf34aa

Allocate temporary strings to hold dbus paths on the heap

Riccardo Schirone • 4 years ago

a0b690

Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit.

Riccardo Schirone • 4 years ago

95d624

bus-socket: Fix line_begins() to accept word matching full string

Filipe Brandenburger • 4 years ago

e7625f

test: don't overwrite TESTDIR if already set

Frantisek Sumsal • 4 years ago

0c4cb2

tests: also run TEST-01-BASIC in an unprivileged container (#9957)

Evgeny Vereshchagin • 4 years ago

9ec21b

tests: allow passing additional arguments to nspawn via NSPAWN_ARGUMENTS

Evgeny Vereshchagin • 4 years ago

b93723

tests: use the asan wrapper to boot a VM/container if systemd is built with ASAN

Evgeny Vereshchagin • 4 years ago

2ab741

tests: redirect ASAN reports on journald to a file

Evgeny Vereshchagin • 4 years ago

dec109

tests: add a wrapper for when systemd is built with ASAN

Evgeny Vereshchagin • 4 years ago

194684

tests: create the asan wrapper automatically if systemd has been built with ASAN

Evgeny Vereshchagin • 4 years ago

3c37e0

test: add TEST-24-UNIT-TESTS running all basic tests under containers

Yu Watanabe • 4 years ago

63b37a

rules: add the rule that adds elevator= kernel command line parameter

Lukas Nykryn • 4 years ago

51e585

lgtm: drop redundant newlines

Evgeny Vereshchagin • 4 years ago

4fb95b

lgtm: add a custom query for catching the use of fgets

Evgeny Vereshchagin • 4 years ago

1216a9

tools: use print function in Python 3 code

Lucas Werkmeister • 4 years ago

4e2e6c

lgtm: use python3

Yu Watanabe • 4 years ago

dffade

LGTM: make LGTM.com use meson from pip

Yu Watanabe • 4 years ago

642e98

rules: implement new memory hotplug policy

Jan Synacek • 4 years ago

dc9d1d

rule-syntax-check: allow PROGRAM as an assignment

Jan Synacek • 4 years ago

b07882

rules: add elevator= kernel command line parameter

Lukas Nykryn • 4 years ago

e48ef5

test-network: ignore tunnel devices automatically added by kernel

Yu Watanabe • 4 years ago

fc23a8

test: replace echo with socat

Frantisek Sumsal • 4 years ago

8bda21

journald: correctly attribute log messages also with cgroupsv1

Michal Sekletar • 4 years ago

4f5660

journal-remote: set a limit on the number of fields in a message

Zbigniew Jędrzejewski-Szmek • 4 years ago

e434cb

journal-remote: verify entry length from header

Zbigniew Jędrzejewski-Szmek • 4 years ago

d69c32

µhttpd: use a cleanup function to call MHD_destroy_response

Zbigniew Jędrzejewski-Szmek • 4 years ago

2f6224

journald: lower the maximum entry size limit to ½ for non-sealed fds

Zbigniew Jędrzejewski-Szmek • 4 years ago

338865

journald: when processing a native message, bail more quickly on overbig messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

030386

journald: set a limit on the number of fields (1k)

Zbigniew Jędrzejewski-Szmek • 4 years ago

102648

journal: fix syslog_parse_identifier()

Yu Watanabe • 4 years ago

180319

Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2"

Lukas Nykryn • 4 years ago

0058fc

process-util: don't use overly large buffer to store process command line

Michal Sekletar • 4 years ago

74fab9

journald: periodically drop cache for all dead PIDs

Zbigniew Jędrzejewski-Szmek • 4 years ago

cb8f5f

journal: limit the number of entries in the cache based on available memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

6760e1

basic/prioq: add prioq_peek_item()

Zbigniew Jędrzejewski-Szmek • 4 years ago

773446

procfs-util: expose functionality to query total memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

908eb7

coredump: fix message when we fail to save a journald coredump

Zbigniew Jędrzejewski-Szmek • 4 years ago

68b156

basic/process-util: limit command line lengths to _SC_ARG_MAX

Zbigniew Jędrzejewski-Szmek • 4 years ago

9d3b95

journald: do not store the iovec entry for process commandline on stack

Zbigniew Jędrzejewski-Szmek • 4 years ago

6570f0

journald: remove unnecessary {}

Zbigniew Jędrzejewski-Szmek • 4 years ago

d66f7d

coredump: remove duplicate MESSAGE= prefix from message

Zbigniew Jędrzejewski-Szmek • 4 years ago

0153e1

travis: reboot the container before running tests

Frantisek Sumsal • 4 years ago

2f19d8

travis: fix syntax error in .travis.yml

Frantisek Sumsal • 4 years ago

c8ce9e

travis: drop the SELinux Fedora workaround

Frantisek Sumsal • 4 years ago

c865d1

travis: RHEL8 support

Frantisek Sumsal • 4 years ago

4e1e4d

travis: enable Travis CI on CentOS 7

Frantisek Sumsal • 4 years ago

ad93f7

core: enforce a limit on STATUS= texts recvd from services

Lennart Poettering • 4 years ago

459336

core: when deserializing state always use read_line(…, LONG_LINE_MAX, …)

Lennart Poettering • 4 years ago

b7d8bf

tests: drop the precondition check for inherited flag

Frantisek Sumsal • 4 years ago

d619f7

unit: don't add Requires for tmp.mount

Lukas Nykryn • 4 years ago

a399f1

meson: check whether gnutls supports TCP fast open

Yu Watanabe • 4 years ago

a8f46f

meson: rename -Ddebug to -Ddebug-extra

Zbigniew Jędrzejewski-Szmek • 4 years ago

d9a871

test: Drop SKIP_INITRD for QEMU-based tests

Michael Biebl • 4 years ago

ae3508

nspawn: beef up netns checking a bit, for compat with old kernels

Lennart Poettering • 4 years ago

c841ae

tests: explicitly enable user namespaces for TEST-13-NSPAWN-SMOKE

Frantisek Sumsal • 4 years ago

df2751

sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2

Lubomir Rintel • 4 years ago

435055

rules: watch metadata changes on DASD devices

Vojtech Trefny • 4 years ago

003fa2

cryptsetup-generator: allow whitespace characters in keydev specification

Michal Sekletar • 4 years ago

94f56d

cryptsetup-generator: don't return error if target directory already exists

Michal Sekletar • 4 years ago

5d04fa

cryptsetup: don't use %m if there's no error to show

Lennart Poettering • 4 years ago

d14eaa

cryptsetup-generator: introduce basic keydev support

Michal Sekletar • 4 years ago

ad359d

sd-bus: properly initialize containers

Jan Synacek • 4 years ago

f1fe83

sd-bus: unify three code-paths which free struct bus_container

Zbigniew Jędrzejewski-Szmek • 4 years ago

a99bf0

detect-virt: do not try to read all of /proc/cpuinfo

Zbigniew Jędrzejewski-Szmek • 4 years ago

c8c15c

Revert "sysctl.d: request ECN on both in and outgoing connections"

Thomas Hindoe Paaboel Andersen • 4 years ago

c7d8ea

test: add test case for recursive chown()ing

Lennart Poettering • 4 years ago

1fbb91

chown-recursive: TAKE_FD() is your friend

Lennart Poettering • 4 years ago

2807bf

chown-recursive: also drop ACLs when recursively chown()ing

Lennart Poettering • 4 years ago

134afd

chown-recursive: let's rework the recursive logic to use O_PATH

Lennart Poettering • 4 years ago

88ab7b

debug-generator: introduce rd.* version of all options

Lukas Nykryn • 4 years ago

37aee0

proc-cmdline: introduce PROC_CMDLINE_RD_STRICT

Lukas Nykryn • 4 years ago

49d5ed

core: make sure we don't throttle change signal generator when a reload is pending

Lennart Poettering • 4 years ago

396ed2

core: when we can't send the pending reload message, say we ignore it in the warning we log

Lennart Poettering • 4 years ago

095d1b

core: rename queued_message → pending_reload_message

Lennart Poettering • 4 years ago

9ca7b8

dhcp6: make sure we have enough space for the DHCP6 option header

Lennart Poettering • 4 years ago

b8d960

journal-file: avoid calling ftruncate with invalid fd

David Tardon • 4 years ago

dad4bb

firewall-util: add an assert that we're not overwriting a buffer

David Tardon • 4 years ago

b09407

login: avoid leak of name returned by uid_to_name()

David Tardon • 4 years ago

6b48c6

dissect-image: use right comparison function

David Tardon • 4 years ago

7d37ca

resolved: create /etc/resolv.conf symlink at runtime

Zbigniew Jędrzejewski-Szmek • 4 years ago

a782b8

journal: change support URL shown in the catalog entries

Michal Sekletar • 4 years ago

a3cde3

tests: backport test_setup_logging()

Michal Sekletar • 4 years ago

1302aa

Introduce free_and_strndup and use it in bus-message.c

Zbigniew Jędrzejewski-Szmek • 4 years ago

095c13

bus-message: do not crash on message with a string of zero length

Zbigniew Jędrzejewski-Szmek • 4 years ago

6c5dec

units: don't enable per-service IP firewall by default

Michal Sekletar • 4 years ago

e1f285

cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)

Yu Watanabe • 4 years ago

228426

cryptsetup: add support for sector-size= option (#9936)

Dimitri John Ledkov • 4 years ago

32371a

random-seed: raise POOL_SIZE_MIN constant to 1024

Michal Sekletar • 4 years ago

4ce71c

bus: move BUS_DONT_DESTROY calls after asserts

Zbigniew Jędrzejewski-Szmek • 4 years ago

e7e078

journal: remove journal audit socket

Michal Sekletar • 4 years ago

6e0aae

units: drop DynamicUser=yes from systemd-resolved.service

Michal Sekletar • 4 years ago

e6f3bc

net_setup_link: allow renaming interfaces that were renamed previously

Michal Sekletar • 4 years ago

054275

Revert "udev: remove WAIT_FOR key"

Michal Sekletar • 4 years ago

f57949

rules: introduce old-style by-path symlinks for FCP based SCSI devices

Michal Sekletar • 4 years ago

014862

rules: disable auto-online of hot-plugged memory on IBM z Systems

Michal Sekletar • 4 years ago

708879

rules: don't hoplug memory on s390x

Lukas Nykryn • 4 years ago

254a65

rules: load sg driver also when scsi_target appears (#45)

Lukáš Nykrýn • 4 years ago

e94690

rules: prandom character device node permissions

Lukas Nykryn • 4 years ago

e9cb88

rules: load sg module

Lukas Nykryn • 4 years ago

1ed50a

rules: reload sysctl settings when the bridge module is loaded

Lukas Nykryn • 4 years ago

328c3e

rules: enable memory hotplug

Lukas Nykryn • 4 years ago

f89072

rules: add rule for naming Dell iDRAC USB Virtual NIC as 'idrac'

Michal Sekletar • 4 years ago

7631a7

rules: automatically online hot-plugged CPUs

Michal Sekletar • 4 years ago

c7eeed

pid1: bump maximum number of process in user slice to 80% of pid_max

rpm-build • 4 years ago

e24406

Avoid /tmp being mounted as tmpfs without the user's will

Jan Synacek • 4 years ago

ac5240

pid1: bump DefaultTasksMax to 80% of the kernel pid.max value

rpm-build • 4 years ago

9ea2fd

logind: set RemoveIPC to false by default

rpm-build • 4 years ago

75c244

build-sys: Detect whether struct statx is defined in sys/stat.h

Filipe Brandenburger • 4 years ago

9b2eb2

Add sources defined in the spec file

Packit Service • 4 years ago

41fbda

Add spec-file for the distribution

Packit Service • 4 years ago

204679

.packit.yaml

Packit Service • 4 years ago

fd930d

systemd-239 base

Packit Service • 4 years ago

f30bc6

Prepare for a new update

Packit Service • 4 years ago

0b00da

logind: don't print warning when user@.service template is masked

Michal Sekletar • 4 years ago

de0876

cgroup: freezer action must be NOP when cgroup v2 freezer is not available

Michal Sekletár • 4 years ago

635240

core: make sure to restore the control command id, too

Lennart Poettering • 4 years ago

4e5a8b

man: document new "boot-complete.target" unit

Lennart Poettering • 4 years ago

962d7b

units: add generic boot-complete.target

Lennart Poettering • 4 years ago

3a24ff

device: don't emit PropetiesChanged needlessly

Michal Sekletár • 4 years ago

6b40dc

device: make sure we emit PropertiesChanged signal once we set sysfs

Michal Sekletár • 4 years ago

d9eaaf

tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw

Michal Sekletár • 4 years ago

c78899

fix mis-merge

David Tardon • 4 years ago

6eaf2a

test: add test for cgroup v2 freezer support

Michal Sekletár • 4 years ago

88dbea

core: fix the return value in order to make sure we don't dipatch method return too early

Michal Sekletár • 4 years ago

ad2dce

core/cgroup: fix return value of unit_cgorup_freezer_action()

Michal Sekletar • 4 years ago

fa6ab3

core: introduce support for cgroup freezer

Michal Sekletár • 4 years ago

b879ee

shared: add NULL callback check in one more place

Zbigniew Jędrzejewski-Szmek • 4 years ago

9e8f0e

shared: Don't try calling NULL callback in bus_wait_for_units_clear

Balint Reczey • 4 years ago

1eaf7b

shared: fix assert call

Zbigniew Jędrzejewski-Szmek • 4 years ago

7ed684

shared: add generic logic for waiting for a unit to enter some state

Lennart Poettering • 4 years ago

600050

basic/cgroup-util: introduce cg_get_keyed_attribute_full()

Michal Sekletár • 4 years ago

c4311f

selinux: do preprocessor check only in selinux-access.c

Michal Sekletár • 4 years ago

72032b

core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts

Anita Zhang • 4 years ago

8a9a6b

meson: allow setting the version string during configuration

Jan Synacek • 4 years ago

1825e1

cgroup: Mark memory protections as explicitly set in transient units

Chris Down • 4 years ago

2d0dc5

cgroup: Respect DefaultMemoryMin when setting memory.min

Chris Down • 4 years ago

efd264

cgroup: Check ancestor memory min for unified memory config

Chris Down • 4 years ago

2d0890

cgroup: Test that it's possible to set memory protection to 0 again

Chris Down • 4 years ago

4a47ff

cgroup: Support 0-value for memory protection directives

Chris Down • 4 years ago

2bcaf8

cgroup: Readd some plumbing for DefaultMemoryMin

Chris Down • 4 years ago

9b858f

cgroup: Polish hierarchically aware protection docs a bit

Chris Down • 4 years ago

2031ca

unit: Add DefaultMemoryMin

Chris Down • 4 years ago

bebd66

cgroup: Create UNIT_DEFINE_ANCESTOR_MEMORY_LOOKUP

Chris Down • 4 years ago

41e093

cgroup: Implement default propagation of MemoryLow with DefaultMemoryLow

Chris Down • 4 years ago

cc0ee5

test: remove support for suffix in get_testdata_dir()

Filipe Brandenburger • 4 years ago

e6d2db

core: introduce cgroup_add_device_allow()

Yu Watanabe • 4 years ago

35ffc4

core: add MemoryMin

Tejun Heo • 4 years ago

b0c347

sd-bus: skip sending formatted UIDs via SASL

David Rheinsberg • 4 years ago

ccd9cb

sd-bus: fix SASL reply to empty AUTH

David Rheinsberg • 4 years ago

d8db2c

sd-bus: avoid magic number in SASL length calculation

David Rheinsberg • 4 years ago

7818cc

core: downgrade CPUQuotaPeriodSec= clamping logs to debug

Filipe Brandenburger • 4 years ago

41106d

core: add CPUQuotaPeriodSec=

Filipe Brandenburger • 4 years ago

59b975

cgroup: use structured initialization

Lennart Poettering • 4 years ago

cb09ae

time-util: Introduce parse_sec_def_infinity

Filipe Brandenburger • 4 years ago

0ce727

core: add IODeviceLatencyTargetSec

Tejun Heo • 4 years ago

ed468a

core: coldplug possible nop_job

ypf791 • 4 years ago

88cdf7

mount: don't add Requires for tmp.mount

David Tardon • 4 years ago

8dbf7d

resolvconf: fixes for the compatibility interface

Filipe Brandenburger • 4 years ago

ff562e

sulogin-shell: Use force if SYSTEMD_SULOGIN_FORCE set

Andreas Henriksson • 4 years ago

27d2cc

tmpfiles: fix crash with NULL in arg_root and other fixes and tests

Zbigniew Jędrzejewski-Szmek • 4 years ago

38d698

seccomp: fix __NR__sysctl usage

Jan Synacek • 4 years ago

bed21b

fuzz-compress: add fuzzer for compression and decompression

Zbigniew Jędrzejewski-Szmek • 4 years ago

d9bda8

journal: adapt for new improved LZ4_decompress_safe_partial()

Zbigniew Jędrzejewski-Szmek • 4 years ago

eea747

test-compress: add test for short decompress_startswith calls

Zbigniew Jędrzejewski-Szmek • 4 years ago

6b012a

Drop support for lz4 < 1.3.0

Zbigniew Jędrzejewski-Szmek • 4 years ago

4e7a00

core: ExecCondition= for services

Anita Zhang • 4 years ago

b99301

test-execute: provide custom failure message

Zbigniew Jędrzejewski-Szmek • 4 years ago

55f337

test-execute: allow filtering test cases by pattern

Zbigniew Jędrzejewski-Szmek • 4 years ago

4b0708

tests: always use the right vtable wrapper calls

Lennart Poettering • 4 years ago

da8418

core: log a recognizable message when a unit succeeds, too

Lennart Poettering • 4 years ago

c86622

core: make log messages about units entering a 'failed' state recognizable

Lennart Poettering • 4 years ago

740bfb

core: split out all logic that updates a Job on a unit's unit_notify() invocation

Lennart Poettering • 4 years ago

76914b

job: when a job was skipped due to a failed condition, log about it

Lennart Poettering • 4 years ago

f246c3

core: move unit_status_emit_starting_stopping_reloading() and related calls to job.c

Lennart Poettering • 4 years ago

cada59

nspawn: chown() the legacy hierarchy when it's used in a container

Evgeny Vereshchagin • 4 years ago

94a38f

nspawn: move payload to sub-cgroup first, then sync cgroup trees

Lennart Poettering • 4 years ago

93a877

Add support for opening files for appending

Zsolt Dollenstein • 4 years ago

da2495

man: be clearer that .timer time expressions need to be reset to override them

Lennart Poettering • 4 years ago

f66a3f

udev-rules: make tape-changers also apprear in /dev/tape/by-path/

Joerg Steffens • 4 years ago

b66507

pid1: add new kernel cmdline arg systemd.cpu_affinity=

Lennart Poettering • 4 years ago

c5c0b7

test: store coredumps in journal

Frantisek Sumsal • 4 years ago

ec6534

test: try to determine QEMU_SMP dynamically

Frantisek Sumsal • 4 years ago

271045

test: parallelize tasks in TEST-24-UNIT-TESTS

Frantisek Sumsal • 4 years ago

51a186

test: make test-catalog relocatable

Yu Watanabe • 4 years ago

8d62d7

test: introduce test_is_running_from_builddir()

Yu Watanabe • 4 years ago

851eee

test-execute: skip several tests when running in container

Yu Watanabe • 4 years ago

dbfe69

test-execute: also check python3 is installed or not

Yu Watanabe • 4 years ago

0580ec

test-process-util: skip several verifications when running in unprivileged container

Yu Watanabe • 4 years ago

223215

test-fs-util: skip some tests when running in unprivileged container

Yu Watanabe • 4 years ago

2dfa80

test: make install_keymaps() optionally install more keymaps

Yu Watanabe • 4 years ago

7339d7

test: add paths of keymaps in install_keymaps()

Yu Watanabe • 4 years ago

0c554c

test: replace duplicated Makefile by symbolic link

Yu Watanabe • 4 years ago

a9e37b

test: introduce install_zoneinfo()

Yu Watanabe • 4 years ago

9d51f3

test: install libraries required by tests

Yu Watanabe • 4 years ago

30c274

test: do not use global variable to pass error

Yu Watanabe • 4 years ago

84af22

logind: check PolicyKit before allowing VT switch

Lennart Poettering • 4 years ago

52c1ec

udev: downgrade message when we fail to set inotify watch up

Zbigniew Jędrzejewski-Szmek • 4 years ago

1a5650

sd-journal: remove the dead code and actually fix #14695

Michal Sekletár • 4 years ago

74ae0a

sd-journal: close journal files that were deleted by journald before we've setup inotify watch

Michal Sekletár • 4 years ago

6fa4df

core: transition to FINAL_SIGTERM state after ExecStopPost=

Anita Zhang • 4 years ago

0a7455

basic: use comma as separator in cpuset cgroup cpu ranges

Michal Sekletár • 4 years ago

80d26e

core: fix re-realization of cgroup siblings

Lennart Poettering • 4 years ago

ec9d98

pid1: fix the names of AllowedCPUs= and AllowedMemoryNodes=

Zbigniew Jędrzejewski-Szmek • 4 years ago

89625b

core: rework StopWhenUnneeded= logic

Lennart Poettering • 4 years ago

d5eced

bus_open leak sd_event_source when udevadm trigger。

ven • 4 years ago

d59554

resolved: Recover missing PrivateTmp=yes and ProtectSystem=strict

HATAYAMA Daisuke • 4 years ago

5a1761

swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails

HATAYAMA Daisuke • 4 years ago

c785f1

cryptsetup: Treat key file errors as a failed password attempt

Ryan Gonzalez • 4 years ago

6887b5

test: replace cursor file with a plain cursor

Frantisek Sumsal • 4 years ago

28995a

test: drop the missed || exit 1 expression

Frantisek Sumsal • 4 years ago

65c5e3

test: add a simple sanity check for systems without NUMA support

Frantisek Sumsal • 4 years ago

a7f1a0

test: give strace some time to initialize

Frantisek Sumsal • 4 years ago

2c1f8d

test: skip the test on systems without NUMA support

Frantisek Sumsal • 4 years ago

bf6cf3

test: make sure the strace process is indeed dead

Frantisek Sumsal • 4 years ago

5c4b57

test: support MPOL_LOCAL matching in unpatched strace versions

Frantisek Sumsal • 4 years ago

5e0af8

test: replace `tail -f` with journal cursor which should be...

Frantisek Sumsal • 4 years ago

6c16e1

test: introduce TEST-36-NUMAPOLICY

Frantisek Sumsal • 4 years ago

327482

cgroup: make sure that cpuset is supported on cgroup v2 and disabled with v1

Michal Sekletár • 4 years ago

d24b9f

pid1: fix DefaultTasksMax initialization

Franck Bui • 4 years ago

d36915

cgroup: introduce support for cgroup v2 CPUSET controller

Pavel Hrdina • 4 years ago

5eff05

core: imply NNP and SUID/SGID restriction for DynamicUser=yes service

Lennart Poettering • 4 years ago

1e1cf1

units: turn on RestrictSUIDSGID= in most of our long-running daemons

Lennart Poettering • 4 years ago

9a6cb4

man: document the new RestrictSUIDSGID= setting

Lennart Poettering • 4 years ago

abc7e4

analyze: check for RestrictSUIDSGID= in "systemd-analyze security"

Lennart Poettering • 4 years ago

8c9d9e

core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID=

Lennart Poettering • 4 years ago

4ff293

test: add test case for restrict_suid_sgid()

Jan Synacek • 4 years ago

19e3d9

seccomp: introduce seccomp_restrict_suid_sgid() for blocking chmod() for suid/sgid files

Lennart Poettering • 4 years ago

ec3fe5

main: introduce a define HIGH_RLIMIT_MEMLOCK similar to HIGH_RLIMIT_NOFILE

Lennart Poettering • 4 years ago

d3da67

pid1: make sure to restore correct default values for some rlimits

Jan Synacek • 4 years ago

098e83

sd-bus: use "queue" message references for managing r/w message queues in connection objects

Lennart Poettering • 4 years ago

c4319a

journal: use cleanup attribute at one more place

Yu Watanabe • 4 years ago

a54c94

journal: do not trigger assertion when journal_file_close() get NULL

Yu Watanabe • 4 years ago

6d0a76

sysctl: let's by default increase the numeric PID range from 2^16 to 2^22

Michal Sekletár • 4 years ago

b52c0a

polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it

Jan Synacek • 4 years ago

4db4da

sd-event: add sd_event_source_disable_unref() helper

Zbigniew Jędrzejewski-Szmek • 4 years ago

cbacfc

sd-bus: introduce API for re-enqueuing incoming messages

Jan Synacek • 4 years ago

09ae92

bus-message: introduce two kinds of references to bus messages

Lennart Poettering • 4 years ago

cfa15c

sd-bus: always go through sd_bus_unref() to free messages

Lennart Poettering • 4 years ago

1f50b4

sd-bus: initialize mutex after we allocated the wqueue

Lennart Poettering • 4 years ago

0a004a

sd-bus: drop two inappropriate empty lines

Lennart Poettering • 4 years ago

9b163e

sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success

Lennart Poettering • 4 years ago

c20726

sd-bus: reorder bus ref and bus message ref handling

Lennart Poettering • 4 years ago

002ba9

sd-bus: make rqueue/wqueue sizes of type size_t

Lennart Poettering • 4 years ago

ca6e83

rules: reintroduce 60-alias-kmsg.rules

Jan Synacek • 4 years ago

ca969f

cryptsetup: rework how we log about activation failures

Lennart Poettering • 4 years ago

cc19e4

cryptsetup: downgrade a log message we ignore

Lennart Poettering • 4 years ago

954857

cryptsetup: add some commenting about EAGAIN generation

Lennart Poettering • 4 years ago

db04f2

crypt-util: Translate libcryptsetup log level instead of using log_debug()

Jan Janssen • 4 years ago

ccdf02

cryptsetup-generator: guess whether the keyfile argument is two items or one

Zbigniew Jędrzejewski-Szmek • 4 years ago

104eb9

cryptsetup: don't assert on variable which is optional

Zbigniew Jędrzejewski-Szmek • 4 years ago

0c8242

cryptsetup: use unabbrieviated variable names

Zbigniew Jędrzejewski-Szmek • 4 years ago

c7d52d

cryptsetup: add documentation for keyfile-timeout

shinygold • 4 years ago

c24157

cryptsetup: add keyfile-timeout to allow a keydev timeout and allow to fallback to a password if it fails.

shinygold • 4 years ago

d062a8

catalog: fix name of variable

Zbigniew Jędrzejewski-Szmek • 4 years ago

e003ca

test-cpu-set-util: fix allocation size check on i386

Zbigniew Jędrzejewski-Szmek • 4 years ago

525595

test-cpu-set-util: fix comparison for allocation size

Zbigniew Jędrzejewski-Szmek • 4 years ago

2e7204

debug-generator: enable custom systemd.debug_shell tty

Jan Synacek • 4 years ago

592112

core, job: fix breakage of ordering dependencies by systemctl reload command

HATAYAMA Daisuke • 4 years ago

463b5a

cryptsetup: reduce the chance that we will be OOM killed

Michal Sekletár • 4 years ago

75c73e

set kptr_restrict=1

David Tardon • 4 years ago

a3e037

core: disable CPUAccounting by default

Michal Sekletár • 4 years ago

5ebb7e

core: introduce NUMAPolicy and NUMAMask options

Michal Sekletár • 4 years ago

a6ac9b

cpu-set-util: use %d-%d format in cpu_set_to_range_string() only for actual ranges

Michal Sekletar • 4 years ago

0ec046

execute: dump CPUAffinity as a range string instead of a list of CPUs

Michal Sekletar • 4 years ago

e67376

shared/cpu-set-util: only force range printing one time

Zbigniew Jędrzejewski-Szmek • 4 years ago

7b5457

systemctl: present CPUAffinity mask as a list of CPU index ranges

Michal Sekletar • 4 years ago

320e55

shared/cpu-set-util: introduce cpu_set_to_range()

Michal Sekletar • 4 years ago

f3b654

test-cpu-set-util: add test for dbus conversions

Zbigniew Jędrzejewski-Szmek • 4 years ago

8462e7

shared/cpu-set-util: make transfer of cpu_set_t over bus endian safe

Michal Sekletar • 4 years ago

496759

shared/cpu-set-util: drop now-unused cleanup function

Zbigniew Jędrzejewski-Szmek • 4 years ago

3e89fd

test-execute: use CPUSet too

Zbigniew Jędrzejewski-Szmek • 4 years ago

a5da87

pid1: when reloading configuration, forget old settings

Zbigniew Jędrzejewski-Szmek • 4 years ago

2554b1

pid1: don't reset setting from /proc/cmdline upon restart

Zbigniew Jędrzejewski-Szmek • 4 years ago

f8d1f9

pid1: parse CPUAffinity= in incremental fashion

Zbigniew Jędrzejewski-Szmek • 4 years ago

080ac2

test-cpu-set-util: add a smoke test for test_parse_cpu_set_extend()

Zbigniew Jędrzejewski-Szmek • 4 years ago

81b40a

test-cpu-set-util: add simple test for cpus_in_affinity_mask()

Zbigniew Jędrzejewski-Szmek • 4 years ago

743b84

Move cpus_in_affinity_mask() to cpu-set-util.[ch]

Zbigniew Jędrzejewski-Szmek • 4 years ago

7b9807

Rework cpu affinity parsing

Zbigniew Jędrzejewski-Szmek • 4 years ago

f7aca8

shared/cpu-set-util: remove now-unused CPU_SIZE_TO_NUM()

Zbigniew Jędrzejewski-Szmek • 4 years ago

a4febe

shared/cpu-set-util: move the part to print cpu-set into a separate function

Zbigniew Jędrzejewski-Szmek • 4 years ago

47dd0c

core/dbus-execute: remove unnecessary initialization

Zbigniew Jędrzejewski-Szmek • 4 years ago

3c53e8

core: change ownership/mode of the execution directories also for static users

Lennart Poettering • 4 years ago

69d3ab

execute: remove one redundant comparison check

Lennart Poettering • 4 years ago

b7d984

Add a warning about the difference in permissions between existing directories and unit settings.

Taro Yamada • 4 years ago

0c279e

journald: take leading spaces into account in syslog_parse_identifier

Evgeny Vereshchagin • 4 years ago

6726d6

fuzz-journal-stream: avoid assertion failure on samples which don't fit in pipe

Zbigniew Jędrzejewski-Szmek • 4 years ago

d76079

tests: add a fuzzer for server_process_native_file

Evgeny Vereshchagin • 4 years ago

92e852

tests: add a fuzzer for journald streams

Evgeny Vereshchagin • 4 years ago

b93837

tests: introduce dummy_server_init and use it in all journald fuzzers

Evgeny Vereshchagin • 4 years ago

a71194

journald: check whether sscanf has changed the value corresponding to %n

Evgeny Vereshchagin • 4 years ago

8bee20

tests: add a fuzzer for process_audit_string

Evgeny Vereshchagin • 4 years ago

ffcb43

test: initialize syslog_fd in fuzz-journald-kmsg too

Evgeny Vereshchagin • 4 years ago

14471d

tests: add a reproducer for a heap-buffer-overflow fixed in 937b1171378bc1000a

Evgeny Vereshchagin • 4 years ago

0e4a6c

tests: add a reproducer for a memory leak fixed in 30eddcd51b8a472e05d3b8d1 in August

Evgeny Vereshchagin • 4 years ago

2819e8

journal: fix an off-by-one error in dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

640511

basic: remove an assertion from cunescape_one

Evgeny Vereshchagin • 4 years ago

395fa1

tests: add a fuzzer for dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

30b6f4

tests: put fuzz_journald_processing_function in a .c file

Evgeny Vereshchagin • 4 years ago

ff5431

sd-bus: bump message queue size again

Jan Synacek • 4 years ago

a7e69c

basic/user-util: allow dots in user names

Jan Synacek • 4 years ago

692334

journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup

Evgeny Vereshchagin • 4 years ago

54d825

resolved: query polkit only after parsing the data

Zbigniew Jędrzejewski-Szmek • 4 years ago

431db9

resolved: allow access to Set*Link and Revert methods through polkit

Zbigniew Jędrzejewski-Szmek • 4 years ago

a06475

resolved: do not run loop twice

Zbigniew Jędrzejewski-Szmek • 4 years ago

0b97e3

sd-bus: adjust indentation of comments

Zbigniew Jędrzejewski-Szmek • 4 years ago

ff2d5c

shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description()

Zbigniew Jędrzejewski-Szmek • 4 years ago

9a6d5c

udev: Add id program and rule for FIDO security tokens

Fabian Henneke • 4 years ago

3a98fd

sd-device: introduce log_device_*() macros

Yu Watanabe • 4 years ago

38277e

selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit

Michal Sekletar • 4 years ago

d8e848

shared/sleep-config: exclude zram devices from hibernation candidates

Andrew Jorgensen • 4 years ago

2e40da

test: bump the second partition's size to 50M

Frantisek Sumsal • 4 years ago

791b32

test: mask several unnecessary services

Yu Watanabe • 4 years ago

9a98fb

test: use PBKDF2 instead of Argon2 in cryptsetup...

Frantisek Sumsal • 4 years ago

653255

journald: fixed assertion failure when system journal rotation fails (#9893)

Renaud Métrich • 4 years ago

51a591

path: stop watching path specs once we triggered the target unit

Michal Sekletar • 4 years ago

767498

core: implement per unit journal rate limiting

Anita Zhang • 4 years ago

4d25e9

core: only watch processes when it's really necessary

Franck Bui • 4 years ago

51dd4f

core: reduce the number of stalled PIDs from the watched processes list when possible

Franck Bui • 4 years ago

4ea4f2

process-util: introduce pid_is_my_child() helper

Franck Bui • 4 years ago

eadaad

Consider smb3 as remote filesystem

Jan Synacek • 4 years ago

863c93

Call getgroups() to know size of supplementary groups array to allocate

Renaud Métrich • 4 years ago

a53baa

udev: introduce CONST key name

Jan Synacek • 4 years ago

29f416

buildsys: don't garbage collect sections while linking

Michal Sekletar • 4 years ago

9079f2

core: try to reopen /dev/kmsg again right after mounting /dev

Lennart Poettering • 4 years ago

50af68

ask-password: prevent buffer overrow when reading from keyring

Thadeu Lima de Souza Cascardo • 4 years ago

38228e

kernel-install: do not require non-empty kernel cmdline

Zbigniew Jędrzejewski-Szmek • 4 years ago

ce0983

travis: don't run slow tests under ASan/UBSan

Frantisek Sumsal • 4 years ago

47f03d

sd-bus: make strict asan shut up

Lennart Poettering • 4 years ago

18263c

syslog: fix segfault in syslog_parse_priority()

Yu Watanabe • 4 years ago

2c9164

travis: drop SCL remains

Frantisek Sumsal • 4 years ago

8c7ce9

travis: move to CentOS 8 docker images

Frantisek Sumsal • 4 years ago

ee0666

man: reorder and add examples to systemd-analyze(1)

Zbigniew Jędrzejewski-Szmek • 4 years ago

0dcb26

man: document systemd-analyze security

Jan Synacek • 4 years ago

05d9d8

core: never propagate reload failure to service result

Lennart Poettering • 4 years ago

a490f0

analyze-security: fix potential division by zero

Jan Synacek • 4 years ago

295608

swap: scan /proc/swaps before processing waitid() results

Lennart Poettering • 4 years ago

a9b95a

mount: rescan /proc/self/mountinfo before processing waitid() results

Lennart Poettering • 4 years ago

90b661

mount: simplify /proc/self/mountinfo handler

Lennart Poettering • 4 years ago

a5b453

rules: skip memory hotplug on ppc64

Jan Synacek • 4 years ago

aa35b3

man: note that journal does not validate syslog fields

Jan Synacek • 4 years ago

49ee74

bash-completion: analyze: support 'security'

Yu Watanabe • 4 years ago

f55c40

Change job mode of manager triggered restarts to JOB_REPLACE

Jonathon Kowalski • 4 years ago

c65132

udev/scsi_id: fix incorrect page length when get device identification VPD page

Zhang Xianwei • 4 years ago

ef953a

cryptsetup: Add LUKS2 token support.

Milan Broz • 4 years ago

a4d0c4

cryptsetup: call crypt_load() for LUKS only once

Milan Broz • 4 years ago

4ecfb5

cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails.

Milan Broz • 4 years ago

d7cfe1

journal: do not remove multiple spaces after identifier in syslog message

Yu Watanabe • 4 years ago

2ecd21

journal-remote: do not request Content-Length if Transfer-Encoding is chunked

Yu Watanabe • 4 years ago

7f0339

sd-bus: deal with cookie overruns

Lennart Poettering • 4 years ago

5aeca6

journal-gateway: use localStorage["cursor"] only when it has valid value

Yu Watanabe • 4 years ago

9519e3

tools: drop unused variable

Yu Watanabe • 4 years ago

5e0385

journal-gateway: explicitly declare local variables

Yu Watanabe • 4 years ago

b6f6cf

test: add test for Type=exec

Lennart Poettering • 4 years ago

fa1ff7

sd-login: let's also make sd-login understand ".host"

Lennart Poettering • 4 years ago

3caba3

sd-bus: allow connecting to the pseudo-container ".host"

Lennart Poettering • 4 years ago

ba37a1

man: document the new Type=exec type

Lennart Poettering • 4 years ago

d5d018

core: introduce new Type=exec service type

Lennart Poettering • 4 years ago

51da28

execute: use our usual syntax for defining bit masks

Lennart Poettering • 4 years ago

5b1ede

core: swap order of "n_storage_fds" and "n_socket_fds" parameters

Lennart Poettering • 4 years ago

d7b499

socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov()

Filipe Brandenburger • 4 years ago

206f05

test-socket-util: Add tests for receive_fd_iov() and friends.

Filipe Brandenburger • 4 years ago

22c3e9

travis: switch from trusty to xenial

Frantisek Sumsal • 4 years ago

0b540a

mount-point: honour AT_SYMLINK_FOLLOW correctly

Lennart Poettering • 4 years ago

1aaa19

sd-bus: call cap_last_cap() only once in has_cap()

Lennart Poettering • 4 years ago

160042

sd-bus: use size_t when dealing with memory offsets

Lennart Poettering • 4 years ago

b82478

capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK()

Lennart Poettering • 4 years ago

83734e

sd-journal: escape binary data in match_make_string()

Evgeny Vereshchagin • 4 years ago

627d07

test-socket-util: avoid "memleak" reported by valgrind

Zbigniew Jędrzejewski-Szmek • 4 years ago

25fde6

util: introduce memcmp_safe()

Yu Watanabe • 4 years ago

d9c9f5

tree-wide: various ubsan zero size memory fixes

Lennart Poettering • 4 years ago

053f58

tests: keep SYS_PTRACE when running under ASan

Frantisek Sumsal • 4 years ago

14b11d

travis: enable ASan and UBSan on RHEL8

Frantisek Sumsal • 4 years ago

3e6db5

util: do not use stack frame for parsing arbitrary inputs

Yu Watanabe • 4 years ago

442035

bus-message: avoid wrap-around when using length read from message

Zbigniew Jędrzejewski-Szmek • 4 years ago

3677f2

bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

cd4f96

fuzz-bus-message: add two test cases that pass now

Zbigniew Jędrzejewski-Szmek • 4 years ago

6b59f0

bus-message: also properly copy struct signature when skipping

Zbigniew Jędrzejewski-Szmek • 4 years ago

cdf04c

bus-message: fix skipping of array fields in !gvariant messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

0868f4

bus-message: output debug information about offset troubles

Zbigniew Jędrzejewski-Szmek • 4 years ago

fcd06b

bus-message: drop asserts in functions which are wrappers for varargs version

Zbigniew Jędrzejewski-Szmek • 4 years ago

c16f56

bus-message: fix calculation of offsets table for arrays

Zbigniew Jędrzejewski-Szmek • 4 years ago

43b0c4

bus-message: remove duplicate assignment

Zbigniew Jędrzejewski-Szmek • 4 years ago

804144

bus-message: fix calculation of offsets table

Zbigniew Jędrzejewski-Szmek • 4 years ago

1e51c6

bus: do not print (null) if the message has unknown type

Zbigniew Jędrzejewski-Szmek • 4 years ago

53da8b

bus-message: use define

Zbigniew Jędrzejewski-Szmek • 4 years ago

3490f4

bus-message: rename function for clarity

Zbigniew Jędrzejewski-Szmek • 4 years ago

a1bab2

bus-message: let's always use -EBADMSG when the message is bad

Zbigniew Jędrzejewski-Szmek • 4 years ago

c02e5a

bus-message: avoid an infinite loop on empty structures

Zbigniew Jędrzejewski-Szmek • 4 years ago

1753a7

bus-message: use structured initialization to avoid use of unitialized memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

2b8ecb

fuzz-bus-message: add fuzzer for message parsing

Zbigniew Jędrzejewski-Szmek • 4 years ago

68dd31

meson: treat all fuzz cases as unit tests

Zbigniew Jędrzejewski-Szmek • 4 years ago

bcb7ba

meson: use .source_root() in more places

Zbigniew Jędrzejewski-Szmek • 4 years ago

4175cc

meson: drop duplicated condition

Zbigniew Jędrzejewski-Szmek • 4 years ago

e51c13

meson: allow building resolved and machined without nss modules

Yu Watanabe • 4 years ago

7252e9

meson: add -Dlog-trace to set LOG_TRACE

Zbigniew Jędrzejewski-Szmek • 4 years ago

7a0451

test-bus-marshal: use cescaping instead of hexmem

Zbigniew Jędrzejewski-Szmek • 4 years ago

4d8d90

fuzz: unify the "fuzz-regressions" directory with the main corpus

Zbigniew Jędrzejewski-Szmek • 4 years ago

c20ffa

test: add testcase for issue 10007 by oss-fuzz

Yu Watanabe • 4 years ago

baf450

fuzz: rename "fuzz-corpus" directory to just "fuzz"

Zbigniew Jędrzejewski-Szmek • 4 years ago

d274f5

tests: add a reproducer for another infinite loop in ndisc_handle_datagram

Evgeny Vereshchagin • 4 years ago

fd58aa

tests: add a reproducer for an infinite loop in ndisc_handle_datagram

Evgeny Vereshchagin • 4 years ago

fef6f6

tests: add reproducers for several issues uncovered with fuzz-journald-syslog

Evgeny Vereshchagin • 4 years ago

0fc654

ndisc: fix two infinite loops

Yu Watanabe • 4 years ago

bfbc03

tests: add a fuzzer for sd-ndisc

Evgeny Vereshchagin • 4 years ago

8501d0

tests: add a fuzzer for server_process_native_message

Evgeny Vereshchagin • 4 years ago

6ffb19

journald: make server_process_native_message compatible with fuzz_journald_processing_function

Evgeny Vereshchagin • 4 years ago

9833ec

tests: rework the code fuzzing journald

Evgeny Vereshchagin • 4 years ago

0c740e

journald: free the allocated memory before returning from dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

c24a60

journald: make it clear that dev_kmsg_record modifies the string passed to it

Evgeny Vereshchagin • 4 years ago

2b5aa8

tests: add a rudimentary fuzzer for server_process_syslog_message (#9979)

Evgeny Vereshchagin • 4 years ago

023d68

analyze: add new security verb

Lennart Poettering • 4 years ago

30c617

locale-util: add logic to output smiley emojis at various happiness levels

Lennart Poettering • 4 years ago

d86fb7

format-table: never try to reuse cells that have color/url/uppercase set

Lennart Poettering • 4 years ago

6f4073

format-table: add option to uppercase cells on display

Lennart Poettering • 4 years ago

9be6b6

format-table: use right field for display

Lennart Poettering • 4 years ago

637ed1

format-table: make sure we never call memcmp() with NULL parameters

Lennart Poettering • 4 years ago

c75247

format-table: add calls to query the data in a specific cell

Lennart Poettering • 4 years ago

edb8f8

format-table: always underline header line

Lennart Poettering • 4 years ago

b0a6aa

format-table: add an API for getting the cell at a specific row/column

Lennart Poettering • 4 years ago

fa4f9e

format-table: add table_update() to update existing entries

Lennart Poettering • 4 years ago

4607bf

format-table: optionally allow reversing the sort order for a column

Lennart Poettering • 4 years ago

90b92c

format-table: add option to store/format percent and uint64_t values in cells

Lennart Poettering • 4 years ago

b2b214

format-table: before outputting a color, check if colors are available

Lennart Poettering • 4 years ago

62e3cf

format-table: optionally make specific cells clickable links

Lennart Poettering • 4 years ago

b24e1a

format-table: when duplicating a cell, also copy the color

Lennart Poettering • 4 years ago

348881

seccomp: reduce logging about failure to add syscall to seccomp

Zbigniew Jędrzejewski-Szmek • 4 years ago

c3b013

nss: unportect errno before writing to NSS' *errnop

Lennart Poettering • 4 years ago

03e119

util.h: add new UNPROTECT_ERRNO macro

Lennart Poettering • 4 years ago

af8c4b

nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS

Yu Watanabe • 4 years ago

dcb3eb

units: add [Install] section to tmp.mount

Jan Synacek • 4 years ago

940024

logs-show: use grey color for de-emphasizing journal log output

Lennart Poettering • 4 years ago

0902a3

journal: don't enable systemd-journald-audit.socket by default

Jan Synacek • 4 years ago

e98483

Revert "journal: remove journal audit socket"

Jan Synacek • 4 years ago

178a8c

unit: enqueue cgroup empty check event if the last ref on a unit is dropped

Lennart Poettering • 4 years ago

460635

nspawn: rework how we allocate/kill scopes

Lennart Poettering • 4 years ago

94fd7e

nspawn: merge two variable declaration lines

Lennart Poettering • 4 years ago

9b8449

nspawn: simplify machine terminate bus call

Lennart Poettering • 4 years ago

ba343a

tree-wide: shorten error logging a bit

Yu Watanabe • 4 years ago

0de172

Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it"

Lukas Nykryn • 4 years ago

d460a3

meson: drop misplaced -Wl,--undefined argument

Jussi Pakkanen • 4 years ago

d6b48e

sd-bus: if we receive an invalid dbus message, ignore and proceeed

Lennart Poettering • 4 years ago

512508

Allocate temporary strings to hold dbus paths on the heap

Riccardo Schirone • 4 years ago

63c71b

Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit.

Riccardo Schirone • 4 years ago

5b1503

bus-socket: Fix line_begins() to accept word matching full string

Filipe Brandenburger • 4 years ago

fe8095

test: don't overwrite TESTDIR if already set

Frantisek Sumsal • 4 years ago

1130a0

tests: also run TEST-01-BASIC in an unprivileged container (#9957)

Evgeny Vereshchagin • 4 years ago

34613a

tests: allow passing additional arguments to nspawn via NSPAWN_ARGUMENTS

Evgeny Vereshchagin • 4 years ago

95b402

tests: use the asan wrapper to boot a VM/container if systemd is built with ASAN

Evgeny Vereshchagin • 4 years ago

5bb09e

tests: redirect ASAN reports on journald to a file

Evgeny Vereshchagin • 4 years ago

065f2b

tests: add a wrapper for when systemd is built with ASAN

Evgeny Vereshchagin • 4 years ago

280f82

tests: create the asan wrapper automatically if systemd has been built with ASAN

Evgeny Vereshchagin • 4 years ago

a9504d

test: add TEST-24-UNIT-TESTS running all basic tests under containers

Yu Watanabe • 4 years ago

8c7685

rules: add the rule that adds elevator= kernel command line parameter

Lukas Nykryn • 4 years ago

30eda0

lgtm: drop redundant newlines

Evgeny Vereshchagin • 4 years ago

87dbe8

lgtm: add a custom query for catching the use of fgets

Evgeny Vereshchagin • 4 years ago

70f663

tools: use print function in Python 3 code

Lucas Werkmeister • 4 years ago

5ffea4

lgtm: use python3

Yu Watanabe • 4 years ago

7e69b2

LGTM: make LGTM.com use meson from pip

Yu Watanabe • 4 years ago

4b716a

rules: implement new memory hotplug policy

Jan Synacek • 4 years ago

ff9f91

rule-syntax-check: allow PROGRAM as an assignment

Jan Synacek • 4 years ago

709c60

rules: add elevator= kernel command line parameter

Lukas Nykryn • 4 years ago

2c5036

test-network: ignore tunnel devices automatically added by kernel

Yu Watanabe • 4 years ago

b856e6

test: replace echo with socat

Frantisek Sumsal • 4 years ago

6380d1

journald: correctly attribute log messages also with cgroupsv1

Michal Sekletar • 4 years ago

20ce57

journal-remote: set a limit on the number of fields in a message

Zbigniew Jędrzejewski-Szmek • 4 years ago

e06187

journal-remote: verify entry length from header

Zbigniew Jędrzejewski-Szmek • 4 years ago

ce85fd

µhttpd: use a cleanup function to call MHD_destroy_response

Zbigniew Jędrzejewski-Szmek • 4 years ago

ccece9

journald: lower the maximum entry size limit to ½ for non-sealed fds

Zbigniew Jędrzejewski-Szmek • 4 years ago

fd3748

journald: when processing a native message, bail more quickly on overbig messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

c62846

journald: set a limit on the number of fields (1k)

Zbigniew Jędrzejewski-Szmek • 4 years ago

8f2ca2

journal: fix syslog_parse_identifier()

Yu Watanabe • 4 years ago

a8d66e

Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2"

Lukas Nykryn • 4 years ago

8d97cf

process-util: don't use overly large buffer to store process command line

Michal Sekletar • 4 years ago

8ca27b

journald: periodically drop cache for all dead PIDs

Zbigniew Jędrzejewski-Szmek • 4 years ago

933aae

journal: limit the number of entries in the cache based on available memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

02c2f1

basic/prioq: add prioq_peek_item()

Zbigniew Jędrzejewski-Szmek • 4 years ago

0feda5

procfs-util: expose functionality to query total memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

838882

coredump: fix message when we fail to save a journald coredump

Zbigniew Jędrzejewski-Szmek • 4 years ago

95600e

basic/process-util: limit command line lengths to _SC_ARG_MAX

Zbigniew Jędrzejewski-Szmek • 4 years ago

c8c878

journald: do not store the iovec entry for process commandline on stack

Zbigniew Jędrzejewski-Szmek • 4 years ago

285c85

journald: remove unnecessary {}

Zbigniew Jędrzejewski-Szmek • 4 years ago

070b68

coredump: remove duplicate MESSAGE= prefix from message

Zbigniew Jędrzejewski-Szmek • 4 years ago

c3bc9f

travis: reboot the container before running tests

Frantisek Sumsal • 4 years ago

864483

travis: fix syntax error in .travis.yml

Frantisek Sumsal • 4 years ago

6cebe4

travis: drop the SELinux Fedora workaround

Frantisek Sumsal • 4 years ago

43bd41

travis: RHEL8 support

Frantisek Sumsal • 4 years ago

cdded4

travis: enable Travis CI on CentOS 7

Frantisek Sumsal • 4 years ago

f7c01b

core: enforce a limit on STATUS= texts recvd from services

Lennart Poettering • 4 years ago

1455cf

core: when deserializing state always use read_line(…, LONG_LINE_MAX, …)

Lennart Poettering • 4 years ago

8aacfd

tests: drop the precondition check for inherited flag

Frantisek Sumsal • 4 years ago

c8aba8

unit: don't add Requires for tmp.mount

Lukas Nykryn • 4 years ago

086f60

meson: check whether gnutls supports TCP fast open

Yu Watanabe • 4 years ago

d7b8e3

meson: rename -Ddebug to -Ddebug-extra

Zbigniew Jędrzejewski-Szmek • 4 years ago

ea360c

test: Drop SKIP_INITRD for QEMU-based tests

Michael Biebl • 4 years ago

d71ab8

nspawn: beef up netns checking a bit, for compat with old kernels

Lennart Poettering • 4 years ago

cbe575

tests: explicitly enable user namespaces for TEST-13-NSPAWN-SMOKE

Frantisek Sumsal • 4 years ago

27f059

sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2

Lubomir Rintel • 4 years ago

4fdd79

rules: watch metadata changes on DASD devices

Vojtech Trefny • 4 years ago

7d84e8

cryptsetup-generator: allow whitespace characters in keydev specification

Michal Sekletar • 4 years ago

bcc28a

cryptsetup-generator: don't return error if target directory already exists

Michal Sekletar • 4 years ago

7568f2

cryptsetup: don't use %m if there's no error to show

Lennart Poettering • 4 years ago

c9f3d0

cryptsetup-generator: introduce basic keydev support

Michal Sekletar • 4 years ago

e54fa4

sd-bus: properly initialize containers

Jan Synacek • 4 years ago

ed09c8

sd-bus: unify three code-paths which free struct bus_container

Zbigniew Jędrzejewski-Szmek • 4 years ago

733aaf

detect-virt: do not try to read all of /proc/cpuinfo

Zbigniew Jędrzejewski-Szmek • 4 years ago

28bb80

Revert "sysctl.d: request ECN on both in and outgoing connections"

Thomas Hindoe Paaboel Andersen • 4 years ago

c065bc

test: add test case for recursive chown()ing

Lennart Poettering • 4 years ago

d8fa9d

chown-recursive: TAKE_FD() is your friend

Lennart Poettering • 4 years ago

e4a33a

chown-recursive: also drop ACLs when recursively chown()ing

Lennart Poettering • 4 years ago

ac18bf

chown-recursive: let's rework the recursive logic to use O_PATH

Lennart Poettering • 4 years ago

e3a84d

debug-generator: introduce rd.* version of all options

Lukas Nykryn • 4 years ago

898d5d

proc-cmdline: introduce PROC_CMDLINE_RD_STRICT

Lukas Nykryn • 4 years ago

4a33bb

core: make sure we don't throttle change signal generator when a reload is pending

Lennart Poettering • 4 years ago

0d7fcc

core: when we can't send the pending reload message, say we ignore it in the warning we log

Lennart Poettering • 4 years ago

84aca7

core: rename queued_message → pending_reload_message

Lennart Poettering • 4 years ago

5b2cc8

dhcp6: make sure we have enough space for the DHCP6 option header

Lennart Poettering • 4 years ago

129416

journal-file: avoid calling ftruncate with invalid fd

David Tardon • 4 years ago

6a513b

firewall-util: add an assert that we're not overwriting a buffer

David Tardon • 4 years ago

95b491

login: avoid leak of name returned by uid_to_name()

David Tardon • 4 years ago

4b4cc9

dissect-image: use right comparison function

David Tardon • 4 years ago

a30f0e

resolved: create /etc/resolv.conf symlink at runtime

Zbigniew Jędrzejewski-Szmek • 4 years ago

ef0740

journal: change support URL shown in the catalog entries

Michal Sekletar • 4 years ago

8e59f8

tests: backport test_setup_logging()

Michal Sekletar • 4 years ago

4ebb7b

Introduce free_and_strndup and use it in bus-message.c

Zbigniew Jędrzejewski-Szmek • 4 years ago

ae4a70

bus-message: do not crash on message with a string of zero length

Zbigniew Jędrzejewski-Szmek • 4 years ago

d8f51d

units: don't enable per-service IP firewall by default

Michal Sekletar • 4 years ago

b98157

cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)

Yu Watanabe • 4 years ago

10c02c

cryptsetup: add support for sector-size= option (#9936)

Dimitri John Ledkov • 4 years ago

545122

random-seed: raise POOL_SIZE_MIN constant to 1024

Michal Sekletar • 4 years ago

629fcf

bus: move BUS_DONT_DESTROY calls after asserts

Zbigniew Jędrzejewski-Szmek • 4 years ago

21ae97

journal: remove journal audit socket

Michal Sekletar • 4 years ago

69b391

units: drop DynamicUser=yes from systemd-resolved.service

Michal Sekletar • 4 years ago

b2444b

net_setup_link: allow renaming interfaces that were renamed previously

Michal Sekletar • 4 years ago

a7488f

Revert "udev: remove WAIT_FOR key"

Michal Sekletar • 4 years ago

831cac

rules: introduce old-style by-path symlinks for FCP based SCSI devices

Michal Sekletar • 4 years ago

a2bf22

rules: disable auto-online of hot-plugged memory on IBM z Systems

Michal Sekletar • 4 years ago

315950

rules: don't hoplug memory on s390x

Lukas Nykryn • 4 years ago

a1ace7

rules: load sg driver also when scsi_target appears (#45)

Lukáš Nykrýn • 4 years ago

c4aba7

rules: prandom character device node permissions

Lukas Nykryn • 4 years ago

32d753

rules: load sg module

Lukas Nykryn • 4 years ago

f31523

rules: reload sysctl settings when the bridge module is loaded

Lukas Nykryn • 4 years ago

0d2d96

rules: enable memory hotplug

Lukas Nykryn • 4 years ago

fd565e

rules: add rule for naming Dell iDRAC USB Virtual NIC as 'idrac'

Michal Sekletar • 4 years ago

2658fa

rules: automatically online hot-plugged CPUs

Michal Sekletar • 4 years ago

98dc92

pid1: bump maximum number of process in user slice to 80% of pid_max

rpm-build • 4 years ago

fc3c51

Avoid /tmp being mounted as tmpfs without the user's will

Jan Synacek • 4 years ago

1e035a

pid1: bump DefaultTasksMax to 80% of the kernel pid.max value

rpm-build • 4 years ago

41f591

logind: set RemoveIPC to false by default

rpm-build • 4 years ago

48634c

build-sys: Detect whether struct statx is defined in sys/stat.h

Filipe Brandenburger • 4 years ago

c1cb48

Add sources defined in the spec file

Packit Service • 4 years ago

e2bf56

Add spec-file for the distribution

Packit Service • 4 years ago

bb53b8

.packit.yaml

Packit Service • 4 years ago

3d43ce

systemd-239 base

Packit Service • 4 years ago

e8cbca

Prepare for a new update

Packit Service • 4 years ago

4f85d6

cgroup: freezer action must be NOP when cgroup v2 freezer is not available

Michal Sekletár • 4 years ago

e47c68

core: make sure to restore the control command id, too

Lennart Poettering • 4 years ago

d878bc

man: document new "boot-complete.target" unit

Lennart Poettering • 4 years ago

27c97d

units: add generic boot-complete.target

Lennart Poettering • 4 years ago

4a70a6

device: don't emit PropetiesChanged needlessly

Michal Sekletár • 4 years ago

aa5fd8

device: make sure we emit PropertiesChanged signal once we set sysfs

Michal Sekletár • 4 years ago

286688

tests: sleep a bit and give kernel time to perform the action after manual freeze/thaw

Michal Sekletár • 4 years ago

651c81

fix mis-merge

David Tardon • 4 years ago

09b234

test: add test for cgroup v2 freezer support

Michal Sekletár • 4 years ago

554370

core: fix the return value in order to make sure we don't dipatch method return too early

Michal Sekletár • 4 years ago

cf40ac

core/cgroup: fix return value of unit_cgorup_freezer_action()

Michal Sekletar • 4 years ago

649b8f

core: introduce support for cgroup freezer

Michal Sekletár • 4 years ago

ed264d

shared: add NULL callback check in one more place

Zbigniew Jędrzejewski-Szmek • 4 years ago

a4cc9f

shared: Don't try calling NULL callback in bus_wait_for_units_clear

Balint Reczey • 4 years ago

e4f185

shared: fix assert call

Zbigniew Jędrzejewski-Szmek • 4 years ago

9731cc

shared: add generic logic for waiting for a unit to enter some state

Lennart Poettering • 4 years ago

179cbd

basic/cgroup-util: introduce cg_get_keyed_attribute_full()

Michal Sekletár • 4 years ago

8bf425

selinux: do preprocessor check only in selinux-access.c

Michal Sekletár • 4 years ago

4002ad

core: don't consider SERVICE_SKIP_CONDITION for abnormal or failure restarts

Anita Zhang • 4 years ago

4af769

meson: allow setting the version string during configuration

Jan Synacek • 4 years ago

2c528e

cgroup: Mark memory protections as explicitly set in transient units

Chris Down • 4 years ago

a28408

cgroup: Respect DefaultMemoryMin when setting memory.min

Chris Down • 4 years ago

e636b1

cgroup: Check ancestor memory min for unified memory config

Chris Down • 4 years ago

7532d4

cgroup: Test that it's possible to set memory protection to 0 again

Chris Down • 4 years ago

461a1e

cgroup: Support 0-value for memory protection directives

Chris Down • 4 years ago

aa3487

cgroup: Readd some plumbing for DefaultMemoryMin

Chris Down • 4 years ago

2356ee

cgroup: Polish hierarchically aware protection docs a bit

Chris Down • 4 years ago

c3c91b

unit: Add DefaultMemoryMin

Chris Down • 4 years ago

d6250f

cgroup: Create UNIT_DEFINE_ANCESTOR_MEMORY_LOOKUP

Chris Down • 4 years ago

237301

cgroup: Implement default propagation of MemoryLow with DefaultMemoryLow

Chris Down • 4 years ago

234164

test: remove support for suffix in get_testdata_dir()

Filipe Brandenburger • 4 years ago

9e044d

core: introduce cgroup_add_device_allow()

Yu Watanabe • 4 years ago

a39628

core: add MemoryMin

Tejun Heo • 4 years ago

d29f70

sd-bus: skip sending formatted UIDs via SASL

David Rheinsberg • 4 years ago

148793

sd-bus: fix SASL reply to empty AUTH

David Rheinsberg • 4 years ago

d17d86

sd-bus: avoid magic number in SASL length calculation

David Rheinsberg • 4 years ago

05e566

core: downgrade CPUQuotaPeriodSec= clamping logs to debug

Filipe Brandenburger • 4 years ago

07b420

core: add CPUQuotaPeriodSec=

Filipe Brandenburger • 4 years ago

a894a2

cgroup: use structured initialization

Lennart Poettering • 4 years ago

bb5f07

time-util: Introduce parse_sec_def_infinity

Filipe Brandenburger • 4 years ago

daa17f

core: add IODeviceLatencyTargetSec

Tejun Heo • 4 years ago

d297c5

core: coldplug possible nop_job

ypf791 • 4 years ago

55b2ee

mount: don't add Requires for tmp.mount

David Tardon • 4 years ago

d566b2

resolvconf: fixes for the compatibility interface

Filipe Brandenburger • 4 years ago

96ecbe

sulogin-shell: Use force if SYSTEMD_SULOGIN_FORCE set

Andreas Henriksson • 4 years ago

2d68b3

tmpfiles: fix crash with NULL in arg_root and other fixes and tests

Zbigniew Jędrzejewski-Szmek • 4 years ago

0e4e64

seccomp: fix __NR__sysctl usage

Jan Synacek • 4 years ago

c55e90

fuzz-compress: add fuzzer for compression and decompression

Zbigniew Jędrzejewski-Szmek • 4 years ago

d06b19

journal: adapt for new improved LZ4_decompress_safe_partial()

Zbigniew Jędrzejewski-Szmek • 4 years ago

b27190

test-compress: add test for short decompress_startswith calls

Zbigniew Jędrzejewski-Szmek • 4 years ago

259bbf

Drop support for lz4 < 1.3.0

Zbigniew Jędrzejewski-Szmek • 4 years ago

e5ee4c

core: ExecCondition= for services

Anita Zhang • 4 years ago

44020e

test-execute: provide custom failure message

Zbigniew Jędrzejewski-Szmek • 4 years ago

72f97e

test-execute: allow filtering test cases by pattern

Zbigniew Jędrzejewski-Szmek • 4 years ago

f7d957

tests: always use the right vtable wrapper calls

Lennart Poettering • 4 years ago

8da572

core: log a recognizable message when a unit succeeds, too

Lennart Poettering • 4 years ago

52ede3

core: make log messages about units entering a 'failed' state recognizable

Lennart Poettering • 4 years ago

c47bb8

core: split out all logic that updates a Job on a unit's unit_notify() invocation

Lennart Poettering • 4 years ago

8c6e4b

job: when a job was skipped due to a failed condition, log about it

Lennart Poettering • 4 years ago

9123cf

core: move unit_status_emit_starting_stopping_reloading() and related calls to job.c

Lennart Poettering • 4 years ago

5eb8b2

nspawn: chown() the legacy hierarchy when it's used in a container

Evgeny Vereshchagin • 4 years ago

f62618

nspawn: move payload to sub-cgroup first, then sync cgroup trees

Lennart Poettering • 4 years ago

1aa76c

Add support for opening files for appending

Zsolt Dollenstein • 4 years ago

a4ad7b

man: be clearer that .timer time expressions need to be reset to override them

Lennart Poettering • 4 years ago

aef842

udev-rules: make tape-changers also apprear in /dev/tape/by-path/

Joerg Steffens • 4 years ago

98c881

pid1: add new kernel cmdline arg systemd.cpu_affinity=

Lennart Poettering • 4 years ago

7b44a8

test: store coredumps in journal

Frantisek Sumsal • 4 years ago

227b59

test: try to determine QEMU_SMP dynamically

Frantisek Sumsal • 4 years ago

2b2fe1

test: parallelize tasks in TEST-24-UNIT-TESTS

Frantisek Sumsal • 4 years ago

71881c

test: make test-catalog relocatable

Yu Watanabe • 4 years ago

4e2556

test: introduce test_is_running_from_builddir()

Yu Watanabe • 4 years ago

a3614b

test-execute: skip several tests when running in container

Yu Watanabe • 4 years ago

029bc0

test-execute: also check python3 is installed or not

Yu Watanabe • 4 years ago

2ade50

test-process-util: skip several verifications when running in unprivileged container

Yu Watanabe • 4 years ago

d90781

test-fs-util: skip some tests when running in unprivileged container

Yu Watanabe • 4 years ago

2e53fc

test: make install_keymaps() optionally install more keymaps

Yu Watanabe • 4 years ago

20a321

test: add paths of keymaps in install_keymaps()

Yu Watanabe • 4 years ago

c54317

test: replace duplicated Makefile by symbolic link

Yu Watanabe • 4 years ago

baadaf

test: introduce install_zoneinfo()

Yu Watanabe • 4 years ago

c23f47

test: install libraries required by tests

Yu Watanabe • 4 years ago

21d032

test: do not use global variable to pass error

Yu Watanabe • 4 years ago

57480e

logind: check PolicyKit before allowing VT switch

Lennart Poettering • 4 years ago

37c01d

udev: downgrade message when we fail to set inotify watch up

Zbigniew Jędrzejewski-Szmek • 4 years ago

c0b1be

sd-journal: remove the dead code and actually fix #14695

Michal Sekletár • 4 years ago

71a940

sd-journal: close journal files that were deleted by journald before we've setup inotify watch

Michal Sekletár • 4 years ago

98cdf7

core: transition to FINAL_SIGTERM state after ExecStopPost=

Anita Zhang • 4 years ago

9d019b

basic: use comma as separator in cpuset cgroup cpu ranges

Michal Sekletár • 4 years ago

6e339c

core: fix re-realization of cgroup siblings

Lennart Poettering • 4 years ago

5db1a1

pid1: fix the names of AllowedCPUs= and AllowedMemoryNodes=

Zbigniew Jędrzejewski-Szmek • 4 years ago

413624

core: rework StopWhenUnneeded= logic

Lennart Poettering • 4 years ago

b33721

bus_open leak sd_event_source when udevadm trigger。

ven • 4 years ago

babbcb

resolved: Recover missing PrivateTmp=yes and ProtectSystem=strict

HATAYAMA Daisuke • 4 years ago

28879a

swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails

HATAYAMA Daisuke • 4 years ago

797a96

cryptsetup: Treat key file errors as a failed password attempt

Ryan Gonzalez • 4 years ago

0b2539

test: replace cursor file with a plain cursor

Frantisek Sumsal • 4 years ago

b7df97

test: drop the missed || exit 1 expression

Frantisek Sumsal • 4 years ago

62a7a7

test: add a simple sanity check for systems without NUMA support

Frantisek Sumsal • 4 years ago

61f4fe

test: give strace some time to initialize

Frantisek Sumsal • 4 years ago

35e4b8

test: skip the test on systems without NUMA support

Frantisek Sumsal • 4 years ago

9fe3ee

test: make sure the strace process is indeed dead

Frantisek Sumsal • 4 years ago

6b1624

test: support MPOL_LOCAL matching in unpatched strace versions

Frantisek Sumsal • 4 years ago

f98a9b

test: replace `tail -f` with journal cursor which should be...

Frantisek Sumsal • 4 years ago

13b72c

test: introduce TEST-36-NUMAPOLICY

Frantisek Sumsal • 4 years ago

d9b955

cgroup: make sure that cpuset is supported on cgroup v2 and disabled with v1

Michal Sekletár • 4 years ago

f21aa6

pid1: fix DefaultTasksMax initialization

Franck Bui • 4 years ago

593cea

cgroup: introduce support for cgroup v2 CPUSET controller

Pavel Hrdina • 4 years ago

112959

core: imply NNP and SUID/SGID restriction for DynamicUser=yes service

Lennart Poettering • 4 years ago

b07d82

units: turn on RestrictSUIDSGID= in most of our long-running daemons

Lennart Poettering • 4 years ago

eac443

man: document the new RestrictSUIDSGID= setting

Lennart Poettering • 4 years ago

726978

analyze: check for RestrictSUIDSGID= in "systemd-analyze security"

Lennart Poettering • 4 years ago

c6bdf9

core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID=

Lennart Poettering • 4 years ago

453aa2

test: add test case for restrict_suid_sgid()

Jan Synacek • 4 years ago

56dc67

seccomp: introduce seccomp_restrict_suid_sgid() for blocking chmod() for suid/sgid files

Lennart Poettering • 4 years ago

3fa64e

main: introduce a define HIGH_RLIMIT_MEMLOCK similar to HIGH_RLIMIT_NOFILE

Lennart Poettering • 4 years ago

dc7f01

pid1: make sure to restore correct default values for some rlimits

Jan Synacek • 4 years ago

663ea0

sd-bus: use "queue" message references for managing r/w message queues in connection objects

Lennart Poettering • 4 years ago

6b5f29

journal: use cleanup attribute at one more place

Yu Watanabe • 4 years ago

9cd695

journal: do not trigger assertion when journal_file_close() get NULL

Yu Watanabe • 4 years ago

a63005

sysctl: let's by default increase the numeric PID range from 2^16 to 2^22

Michal Sekletár • 4 years ago

cecfb6

polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it

Jan Synacek • 4 years ago

244140

sd-event: add sd_event_source_disable_unref() helper

Zbigniew Jędrzejewski-Szmek • 4 years ago

a5ffe2

sd-bus: introduce API for re-enqueuing incoming messages

Jan Synacek • 4 years ago

c2fd77

bus-message: introduce two kinds of references to bus messages

Lennart Poettering • 4 years ago

f0189f

sd-bus: always go through sd_bus_unref() to free messages

Lennart Poettering • 4 years ago

9a314d

sd-bus: initialize mutex after we allocated the wqueue

Lennart Poettering • 4 years ago

c62671

sd-bus: drop two inappropriate empty lines

Lennart Poettering • 4 years ago

528d61

sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success

Lennart Poettering • 4 years ago

e262d5

sd-bus: reorder bus ref and bus message ref handling

Lennart Poettering • 4 years ago

4c562c

sd-bus: make rqueue/wqueue sizes of type size_t

Lennart Poettering • 4 years ago

7faff8

rules: reintroduce 60-alias-kmsg.rules

Jan Synacek • 4 years ago

88a634

cryptsetup: rework how we log about activation failures

Lennart Poettering • 4 years ago

693f55

cryptsetup: downgrade a log message we ignore

Lennart Poettering • 4 years ago

ea1f0d

cryptsetup: add some commenting about EAGAIN generation

Lennart Poettering • 4 years ago

a54d93

crypt-util: Translate libcryptsetup log level instead of using log_debug()

Jan Janssen • 4 years ago

aa52fe

cryptsetup-generator: guess whether the keyfile argument is two items or one

Zbigniew Jędrzejewski-Szmek • 4 years ago

059c99

cryptsetup: don't assert on variable which is optional

Zbigniew Jędrzejewski-Szmek • 4 years ago

ecf298

cryptsetup: use unabbrieviated variable names

Zbigniew Jędrzejewski-Szmek • 4 years ago

b695d8

cryptsetup: add documentation for keyfile-timeout

shinygold • 4 years ago

9d6be4

cryptsetup: add keyfile-timeout to allow a keydev timeout and allow to fallback to a password if it fails.

shinygold • 4 years ago

044765

catalog: fix name of variable

Zbigniew Jędrzejewski-Szmek • 4 years ago

66817e

test-cpu-set-util: fix allocation size check on i386

Zbigniew Jędrzejewski-Szmek • 4 years ago

6a8fd0

test-cpu-set-util: fix comparison for allocation size

Zbigniew Jędrzejewski-Szmek • 4 years ago

167a67

debug-generator: enable custom systemd.debug_shell tty

Jan Synacek • 4 years ago

e37ae8

core, job: fix breakage of ordering dependencies by systemctl reload command

HATAYAMA Daisuke • 4 years ago

6fa03c

cryptsetup: reduce the chance that we will be OOM killed

Michal Sekletár • 4 years ago

4ac98c

set kptr_restrict=1

David Tardon • 4 years ago

6f5c3c

core: disable CPUAccounting by default

Michal Sekletár • 4 years ago

7f1e50

core: introduce NUMAPolicy and NUMAMask options

Michal Sekletár • 4 years ago

dd2fed

cpu-set-util: use %d-%d format in cpu_set_to_range_string() only for actual ranges

Michal Sekletar • 4 years ago

6766ba

execute: dump CPUAffinity as a range string instead of a list of CPUs

Michal Sekletar • 4 years ago

d76cfb

shared/cpu-set-util: only force range printing one time

Zbigniew Jędrzejewski-Szmek • 4 years ago

94124e

systemctl: present CPUAffinity mask as a list of CPU index ranges

Michal Sekletar • 4 years ago

b1e5b1

shared/cpu-set-util: introduce cpu_set_to_range()

Michal Sekletar • 4 years ago

224af1

test-cpu-set-util: add test for dbus conversions

Zbigniew Jędrzejewski-Szmek • 4 years ago

8c06f5

shared/cpu-set-util: make transfer of cpu_set_t over bus endian safe

Michal Sekletar • 4 years ago

d63d93

shared/cpu-set-util: drop now-unused cleanup function

Zbigniew Jędrzejewski-Szmek • 4 years ago

fd1d3b

test-execute: use CPUSet too

Zbigniew Jędrzejewski-Szmek • 4 years ago

04d0db

pid1: when reloading configuration, forget old settings

Zbigniew Jędrzejewski-Szmek • 4 years ago

3e9332

pid1: don't reset setting from /proc/cmdline upon restart

Zbigniew Jędrzejewski-Szmek • 4 years ago

a8f8cd

pid1: parse CPUAffinity= in incremental fashion

Zbigniew Jędrzejewski-Szmek • 4 years ago

812571

test-cpu-set-util: add a smoke test for test_parse_cpu_set_extend()

Zbigniew Jędrzejewski-Szmek • 4 years ago

60e8b5

test-cpu-set-util: add simple test for cpus_in_affinity_mask()

Zbigniew Jędrzejewski-Szmek • 4 years ago

b852a1

Move cpus_in_affinity_mask() to cpu-set-util.[ch]

Zbigniew Jędrzejewski-Szmek • 4 years ago

d3c39b

Rework cpu affinity parsing

Zbigniew Jędrzejewski-Szmek • 4 years ago

926ede

shared/cpu-set-util: remove now-unused CPU_SIZE_TO_NUM()

Zbigniew Jędrzejewski-Szmek • 4 years ago

705fae

shared/cpu-set-util: move the part to print cpu-set into a separate function

Zbigniew Jędrzejewski-Szmek • 4 years ago

d55cce

core/dbus-execute: remove unnecessary initialization

Zbigniew Jędrzejewski-Szmek • 4 years ago

4095f3

core: change ownership/mode of the execution directories also for static users

Lennart Poettering • 4 years ago

073a17

execute: remove one redundant comparison check

Lennart Poettering • 4 years ago

2d059c

Add a warning about the difference in permissions between existing directories and unit settings.

Taro Yamada • 4 years ago

66857e

journald: take leading spaces into account in syslog_parse_identifier

Evgeny Vereshchagin • 4 years ago

eaab2b

fuzz-journal-stream: avoid assertion failure on samples which don't fit in pipe

Zbigniew Jędrzejewski-Szmek • 4 years ago

b75977

tests: add a fuzzer for server_process_native_file

Evgeny Vereshchagin • 4 years ago

0ea261

tests: add a fuzzer for journald streams

Evgeny Vereshchagin • 4 years ago

8812db

tests: introduce dummy_server_init and use it in all journald fuzzers

Evgeny Vereshchagin • 4 years ago

e6190d

journald: check whether sscanf has changed the value corresponding to %n

Evgeny Vereshchagin • 4 years ago

87b7b9

tests: add a fuzzer for process_audit_string

Evgeny Vereshchagin • 4 years ago

9b9bc8

test: initialize syslog_fd in fuzz-journald-kmsg too

Evgeny Vereshchagin • 4 years ago

70f9db

tests: add a reproducer for a heap-buffer-overflow fixed in 937b1171378bc1000a

Evgeny Vereshchagin • 4 years ago

14306e

tests: add a reproducer for a memory leak fixed in 30eddcd51b8a472e05d3b8d1 in August

Evgeny Vereshchagin • 4 years ago

d5c72b

journal: fix an off-by-one error in dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

2f560a

basic: remove an assertion from cunescape_one

Evgeny Vereshchagin • 4 years ago

8a1037

tests: add a fuzzer for dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

5392aa

tests: put fuzz_journald_processing_function in a .c file

Evgeny Vereshchagin • 4 years ago

3a3978

sd-bus: bump message queue size again

Jan Synacek • 4 years ago

5e6b7a

basic/user-util: allow dots in user names

Jan Synacek • 4 years ago

f57e29

journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup

Evgeny Vereshchagin • 4 years ago

b7c302

resolved: query polkit only after parsing the data

Zbigniew Jędrzejewski-Szmek • 4 years ago

e072eb

resolved: allow access to Set*Link and Revert methods through polkit

Zbigniew Jędrzejewski-Szmek • 4 years ago

7bb2e7

resolved: do not run loop twice

Zbigniew Jędrzejewski-Szmek • 4 years ago

a04d32

sd-bus: adjust indentation of comments

Zbigniew Jędrzejewski-Szmek • 4 years ago

84cf89

shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description()

Zbigniew Jędrzejewski-Szmek • 4 years ago

9fc91e

udev: Add id program and rule for FIDO security tokens

Fabian Henneke • 4 years ago

640264

sd-device: introduce log_device_*() macros

Yu Watanabe • 4 years ago

e366a5

selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit

Michal Sekletar • 4 years ago

0fd256

shared/sleep-config: exclude zram devices from hibernation candidates

Andrew Jorgensen • 4 years ago

be7f53

test: bump the second partition's size to 50M

Frantisek Sumsal • 4 years ago

d2badc

test: mask several unnecessary services

Yu Watanabe • 4 years ago

1a5207

test: use PBKDF2 instead of Argon2 in cryptsetup...

Frantisek Sumsal • 4 years ago

e8fa6a

journald: fixed assertion failure when system journal rotation fails (#9893)

Renaud Métrich • 4 years ago

a824f7

path: stop watching path specs once we triggered the target unit

Michal Sekletar • 4 years ago

3f1142

core: implement per unit journal rate limiting

Anita Zhang • 4 years ago

b66cd7

core: only watch processes when it's really necessary

Franck Bui • 4 years ago

1f80c8

core: reduce the number of stalled PIDs from the watched processes list when possible

Franck Bui • 4 years ago

4293ad

process-util: introduce pid_is_my_child() helper

Franck Bui • 4 years ago

2ab334

Consider smb3 as remote filesystem

Jan Synacek • 4 years ago

f5d1b5

Call getgroups() to know size of supplementary groups array to allocate

Renaud Métrich • 4 years ago

5eb63b

udev: introduce CONST key name

Jan Synacek • 4 years ago

f839f9

buildsys: don't garbage collect sections while linking

Michal Sekletar • 4 years ago

22be36

core: try to reopen /dev/kmsg again right after mounting /dev

Lennart Poettering • 4 years ago

b0e8c7

ask-password: prevent buffer overrow when reading from keyring

Thadeu Lima de Souza Cascardo • 4 years ago

f5a3d3

kernel-install: do not require non-empty kernel cmdline

Zbigniew Jędrzejewski-Szmek • 4 years ago

887f66

travis: don't run slow tests under ASan/UBSan

Frantisek Sumsal • 4 years ago

f66f54

sd-bus: make strict asan shut up

Lennart Poettering • 4 years ago

8716d1

syslog: fix segfault in syslog_parse_priority()

Yu Watanabe • 4 years ago

c2f06e

travis: drop SCL remains

Frantisek Sumsal • 4 years ago

98ea00

travis: move to CentOS 8 docker images

Frantisek Sumsal • 4 years ago

3c1ce1

man: reorder and add examples to systemd-analyze(1)

Zbigniew Jędrzejewski-Szmek • 4 years ago

38c0f7

man: document systemd-analyze security

Jan Synacek • 4 years ago

4da93f

core: never propagate reload failure to service result

Lennart Poettering • 4 years ago

1d83f7

analyze-security: fix potential division by zero

Jan Synacek • 4 years ago

c8ed66

swap: scan /proc/swaps before processing waitid() results

Lennart Poettering • 4 years ago

eff787

mount: rescan /proc/self/mountinfo before processing waitid() results

Lennart Poettering • 4 years ago

019bda

mount: simplify /proc/self/mountinfo handler

Lennart Poettering • 4 years ago

cffe11

rules: skip memory hotplug on ppc64

Jan Synacek • 4 years ago

d150bb

man: note that journal does not validate syslog fields

Jan Synacek • 4 years ago

4e63f5

bash-completion: analyze: support 'security'

Yu Watanabe • 4 years ago

40ca48

Change job mode of manager triggered restarts to JOB_REPLACE

Jonathon Kowalski • 4 years ago

ce710d

udev/scsi_id: fix incorrect page length when get device identification VPD page

Zhang Xianwei • 4 years ago

557fe8

cryptsetup: Add LUKS2 token support.

Milan Broz • 4 years ago

e91680

cryptsetup: call crypt_load() for LUKS only once

Milan Broz • 4 years ago

fda44a

cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails.

Milan Broz • 4 years ago

d5158c

journal: do not remove multiple spaces after identifier in syslog message

Yu Watanabe • 4 years ago

e53944

journal-remote: do not request Content-Length if Transfer-Encoding is chunked

Yu Watanabe • 4 years ago

151bcb

sd-bus: deal with cookie overruns

Lennart Poettering • 4 years ago

5c6fc2

journal-gateway: use localStorage["cursor"] only when it has valid value

Yu Watanabe • 4 years ago

308fee

tools: drop unused variable

Yu Watanabe • 4 years ago

f0ccff

journal-gateway: explicitly declare local variables

Yu Watanabe • 4 years ago

0bbf05

test: add test for Type=exec

Lennart Poettering • 4 years ago

e4d45b

sd-login: let's also make sd-login understand ".host"

Lennart Poettering • 4 years ago

aa0285

sd-bus: allow connecting to the pseudo-container ".host"

Lennart Poettering • 4 years ago

c017fc

man: document the new Type=exec type

Lennart Poettering • 4 years ago

a79999

core: introduce new Type=exec service type

Lennart Poettering • 4 years ago

c27b31

execute: use our usual syntax for defining bit masks

Lennart Poettering • 4 years ago

a05178

core: swap order of "n_storage_fds" and "n_socket_fds" parameters

Lennart Poettering • 4 years ago

049a6f

socket-util: Introduce send_one_fd_iov() and receive_one_fd_iov()

Filipe Brandenburger • 4 years ago

b94a53

test-socket-util: Add tests for receive_fd_iov() and friends.

Filipe Brandenburger • 4 years ago

253549

travis: switch from trusty to xenial

Frantisek Sumsal • 4 years ago

711f83

mount-point: honour AT_SYMLINK_FOLLOW correctly

Lennart Poettering • 4 years ago

53eb47

sd-bus: call cap_last_cap() only once in has_cap()

Lennart Poettering • 4 years ago

17a0d2

sd-bus: use size_t when dealing with memory offsets

Lennart Poettering • 4 years ago

29d388

capability: introduce CAP_TO_MASK_CORRECTED() macro replacing CAP_TO_MASK()

Lennart Poettering • 4 years ago

2d4454

sd-journal: escape binary data in match_make_string()

Evgeny Vereshchagin • 4 years ago

67ac35

test-socket-util: avoid "memleak" reported by valgrind

Zbigniew Jędrzejewski-Szmek • 4 years ago

b140be

util: introduce memcmp_safe()

Yu Watanabe • 4 years ago

0283ac

tree-wide: various ubsan zero size memory fixes

Lennart Poettering • 4 years ago

fc6e03

tests: keep SYS_PTRACE when running under ASan

Frantisek Sumsal • 4 years ago

4d4dcf

travis: enable ASan and UBSan on RHEL8

Frantisek Sumsal • 4 years ago

0c205d

util: do not use stack frame for parsing arbitrary inputs

Yu Watanabe • 4 years ago

d9b4b8

bus-message: avoid wrap-around when using length read from message

Zbigniew Jędrzejewski-Szmek • 4 years ago

6b71dc

bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

a21c9d

fuzz-bus-message: add two test cases that pass now

Zbigniew Jędrzejewski-Szmek • 4 years ago

7ce0ea

bus-message: also properly copy struct signature when skipping

Zbigniew Jędrzejewski-Szmek • 4 years ago

3a4db5

bus-message: fix skipping of array fields in !gvariant messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

059789

bus-message: output debug information about offset troubles

Zbigniew Jędrzejewski-Szmek • 4 years ago

49f998

bus-message: drop asserts in functions which are wrappers for varargs version

Zbigniew Jędrzejewski-Szmek • 4 years ago

4fe185

bus-message: fix calculation of offsets table for arrays

Zbigniew Jędrzejewski-Szmek • 4 years ago

0308e4

bus-message: remove duplicate assignment

Zbigniew Jędrzejewski-Szmek • 4 years ago

0648d1

bus-message: fix calculation of offsets table

Zbigniew Jędrzejewski-Szmek • 4 years ago

62df66

bus: do not print (null) if the message has unknown type

Zbigniew Jędrzejewski-Szmek • 4 years ago

9b17e9

bus-message: use define

Zbigniew Jędrzejewski-Szmek • 4 years ago

799014

bus-message: rename function for clarity

Zbigniew Jędrzejewski-Szmek • 4 years ago

bbff41

bus-message: let's always use -EBADMSG when the message is bad

Zbigniew Jędrzejewski-Szmek • 4 years ago

d3c2ea

bus-message: avoid an infinite loop on empty structures

Zbigniew Jędrzejewski-Szmek • 4 years ago

0deeca

bus-message: use structured initialization to avoid use of unitialized memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

fc03f3

fuzz-bus-message: add fuzzer for message parsing

Zbigniew Jędrzejewski-Szmek • 4 years ago

7375fb

meson: treat all fuzz cases as unit tests

Zbigniew Jędrzejewski-Szmek • 4 years ago

e10d37

meson: use .source_root() in more places

Zbigniew Jędrzejewski-Szmek • 4 years ago

4889da

meson: drop duplicated condition

Zbigniew Jędrzejewski-Szmek • 4 years ago

e62699

meson: allow building resolved and machined without nss modules

Yu Watanabe • 4 years ago

3c5e4f

meson: add -Dlog-trace to set LOG_TRACE

Zbigniew Jędrzejewski-Szmek • 4 years ago

29ef09

test-bus-marshal: use cescaping instead of hexmem

Zbigniew Jędrzejewski-Szmek • 4 years ago

edaf18

fuzz: unify the "fuzz-regressions" directory with the main corpus

Zbigniew Jędrzejewski-Szmek • 4 years ago

de174a

test: add testcase for issue 10007 by oss-fuzz

Yu Watanabe • 4 years ago

eeccd7

fuzz: rename "fuzz-corpus" directory to just "fuzz"

Zbigniew Jędrzejewski-Szmek • 4 years ago

cfc01e

tests: add a reproducer for another infinite loop in ndisc_handle_datagram

Evgeny Vereshchagin • 4 years ago

a0921b

tests: add a reproducer for an infinite loop in ndisc_handle_datagram

Evgeny Vereshchagin • 4 years ago

f17cf5

tests: add reproducers for several issues uncovered with fuzz-journald-syslog

Evgeny Vereshchagin • 4 years ago

1a96c2

ndisc: fix two infinite loops

Yu Watanabe • 4 years ago

013efc

tests: add a fuzzer for sd-ndisc

Evgeny Vereshchagin • 4 years ago

fda28f

tests: add a fuzzer for server_process_native_message

Evgeny Vereshchagin • 4 years ago

ae8b76

journald: make server_process_native_message compatible with fuzz_journald_processing_function

Evgeny Vereshchagin • 4 years ago

72be4b

tests: rework the code fuzzing journald

Evgeny Vereshchagin • 4 years ago

255cee

journald: free the allocated memory before returning from dev_kmsg_record

Evgeny Vereshchagin • 4 years ago

bf91aa

journald: make it clear that dev_kmsg_record modifies the string passed to it

Evgeny Vereshchagin • 4 years ago

195a35

tests: add a rudimentary fuzzer for server_process_syslog_message (#9979)

Evgeny Vereshchagin • 4 years ago

956885

analyze: add new security verb

Lennart Poettering • 4 years ago

7d5080

locale-util: add logic to output smiley emojis at various happiness levels

Lennart Poettering • 4 years ago

bb433f

format-table: never try to reuse cells that have color/url/uppercase set

Lennart Poettering • 4 years ago

297294

format-table: add option to uppercase cells on display

Lennart Poettering • 4 years ago

899dc1

format-table: use right field for display

Lennart Poettering • 4 years ago

6cd59a

format-table: make sure we never call memcmp() with NULL parameters

Lennart Poettering • 4 years ago

ec1cac

format-table: add calls to query the data in a specific cell

Lennart Poettering • 4 years ago

e6d980

format-table: always underline header line

Lennart Poettering • 4 years ago

7d4601

format-table: add an API for getting the cell at a specific row/column

Lennart Poettering • 4 years ago

1d02bd

format-table: add table_update() to update existing entries

Lennart Poettering • 4 years ago

3536a2

format-table: optionally allow reversing the sort order for a column

Lennart Poettering • 4 years ago

5efd88

format-table: add option to store/format percent and uint64_t values in cells

Lennart Poettering • 4 years ago

3b3e01

format-table: before outputting a color, check if colors are available

Lennart Poettering • 4 years ago

f412a8

format-table: optionally make specific cells clickable links

Lennart Poettering • 4 years ago

bfd193

format-table: when duplicating a cell, also copy the color

Lennart Poettering • 4 years ago

c3f73b

seccomp: reduce logging about failure to add syscall to seccomp

Zbigniew Jędrzejewski-Szmek • 4 years ago

cd1cea

nss: unportect errno before writing to NSS' *errnop

Lennart Poettering • 4 years ago

31db7c

util.h: add new UNPROTECT_ERRNO macro

Lennart Poettering • 4 years ago

9979f2

nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS

Yu Watanabe • 4 years ago

6809ee

units: add [Install] section to tmp.mount

Jan Synacek • 4 years ago

ee6a9d

logs-show: use grey color for de-emphasizing journal log output

Lennart Poettering • 4 years ago

e3f360

journal: don't enable systemd-journald-audit.socket by default

Jan Synacek • 4 years ago

d8bc7b

Revert "journal: remove journal audit socket"

Jan Synacek • 4 years ago

4168f0

unit: enqueue cgroup empty check event if the last ref on a unit is dropped

Lennart Poettering • 4 years ago

27c2cd

nspawn: rework how we allocate/kill scopes

Lennart Poettering • 4 years ago

b81a05

nspawn: merge two variable declaration lines

Lennart Poettering • 4 years ago

22e64c

nspawn: simplify machine terminate bus call

Lennart Poettering • 4 years ago

e37b7b

tree-wide: shorten error logging a bit

Yu Watanabe • 4 years ago

dbf1c2

Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it"

Lukas Nykryn • 4 years ago

51c3fb

meson: drop misplaced -Wl,--undefined argument

Jussi Pakkanen • 4 years ago

412513

sd-bus: if we receive an invalid dbus message, ignore and proceeed

Lennart Poettering • 4 years ago

f77dbb

Allocate temporary strings to hold dbus paths on the heap

Riccardo Schirone • 4 years ago

24c9df

Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit.

Riccardo Schirone • 4 years ago

571322

bus-socket: Fix line_begins() to accept word matching full string

Filipe Brandenburger • 4 years ago

d017fd

test: don't overwrite TESTDIR if already set

Frantisek Sumsal • 4 years ago

b36545

tests: also run TEST-01-BASIC in an unprivileged container (#9957)

Evgeny Vereshchagin • 4 years ago

ae7229

tests: allow passing additional arguments to nspawn via NSPAWN_ARGUMENTS

Evgeny Vereshchagin • 4 years ago

b81808

tests: use the asan wrapper to boot a VM/container if systemd is built with ASAN

Evgeny Vereshchagin • 4 years ago

55d6da

tests: redirect ASAN reports on journald to a file

Evgeny Vereshchagin • 4 years ago

e475f3

tests: add a wrapper for when systemd is built with ASAN

Evgeny Vereshchagin • 4 years ago

8edd80

tests: create the asan wrapper automatically if systemd has been built with ASAN

Evgeny Vereshchagin • 4 years ago

0cfc21

test: add TEST-24-UNIT-TESTS running all basic tests under containers

Yu Watanabe • 4 years ago

a894aa

rules: add the rule that adds elevator= kernel command line parameter

Lukas Nykryn • 4 years ago

bff823

lgtm: drop redundant newlines

Evgeny Vereshchagin • 4 years ago

4605a2

lgtm: add a custom query for catching the use of fgets

Evgeny Vereshchagin • 4 years ago

3cd59f

tools: use print function in Python 3 code

Lucas Werkmeister • 4 years ago

5df245

lgtm: use python3

Yu Watanabe • 4 years ago

9904c7

LGTM: make LGTM.com use meson from pip

Yu Watanabe • 4 years ago

45504a

rules: implement new memory hotplug policy

Jan Synacek • 4 years ago

59545e

rule-syntax-check: allow PROGRAM as an assignment

Jan Synacek • 4 years ago

cf4e69

rules: add elevator= kernel command line parameter

Lukas Nykryn • 4 years ago

d98d75

test-network: ignore tunnel devices automatically added by kernel

Yu Watanabe • 4 years ago

4dd827

test: replace echo with socat

Frantisek Sumsal • 4 years ago

ea9d5a

journald: correctly attribute log messages also with cgroupsv1

Michal Sekletar • 4 years ago

735fef

journal-remote: set a limit on the number of fields in a message

Zbigniew Jędrzejewski-Szmek • 4 years ago

316773

journal-remote: verify entry length from header

Zbigniew Jędrzejewski-Szmek • 4 years ago

314693

µhttpd: use a cleanup function to call MHD_destroy_response

Zbigniew Jędrzejewski-Szmek • 4 years ago

f0ebb1

journald: lower the maximum entry size limit to ½ for non-sealed fds

Zbigniew Jędrzejewski-Szmek • 4 years ago

de7e60

journald: when processing a native message, bail more quickly on overbig messages

Zbigniew Jędrzejewski-Szmek • 4 years ago

ad7847

journald: set a limit on the number of fields (1k)

Zbigniew Jędrzejewski-Szmek • 4 years ago

4f41f5

journal: fix syslog_parse_identifier()

Yu Watanabe • 4 years ago

12829b

Revert "sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2"

Lukas Nykryn • 4 years ago

810f1b

process-util: don't use overly large buffer to store process command line

Michal Sekletar • 4 years ago

06946a

journald: periodically drop cache for all dead PIDs

Zbigniew Jędrzejewski-Szmek • 4 years ago

e42dc0

journal: limit the number of entries in the cache based on available memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

3bb979

basic/prioq: add prioq_peek_item()

Zbigniew Jędrzejewski-Szmek • 4 years ago

90100d

procfs-util: expose functionality to query total memory

Zbigniew Jędrzejewski-Szmek • 4 years ago

7bfeb0

coredump: fix message when we fail to save a journald coredump

Zbigniew Jędrzejewski-Szmek • 4 years ago

2b17e4

basic/process-util: limit command line lengths to _SC_ARG_MAX

Zbigniew Jędrzejewski-Szmek • 4 years ago

e003a1

journald: do not store the iovec entry for process commandline on stack

Zbigniew Jędrzejewski-Szmek • 4 years ago

509a8d

journald: remove unnecessary {}

Zbigniew Jędrzejewski-Szmek • 4 years ago

ca95f0

coredump: remove duplicate MESSAGE= prefix from message

Zbigniew Jędrzejewski-Szmek • 4 years ago

c2278b

travis: reboot the container before running tests

Frantisek Sumsal • 4 years ago

c7070a

travis: fix syntax error in .travis.yml

Frantisek Sumsal • 4 years ago

13937b

travis: drop the SELinux Fedora workaround

Frantisek Sumsal • 4 years ago

39e96b

travis: RHEL8 support

Frantisek Sumsal • 4 years ago

8b4478

travis: enable Travis CI on CentOS 7

Frantisek Sumsal • 4 years ago

a06140

core: enforce a limit on STATUS= texts recvd from services

Lennart Poettering • 4 years ago

512009

core: when deserializing state always use read_line(…, LONG_LINE_MAX, …)

Lennart Poettering • 4 years ago

f429b8

tests: drop the precondition check for inherited flag

Frantisek Sumsal • 4 years ago

1fd76b

unit: don't add Requires for tmp.mount

Lukas Nykryn • 4 years ago

971e83

meson: check whether gnutls supports TCP fast open

Yu Watanabe • 4 years ago

5705fd

meson: rename -Ddebug to -Ddebug-extra

Zbigniew Jędrzejewski-Szmek • 4 years ago

ae4f03

test: Drop SKIP_INITRD for QEMU-based tests

Michael Biebl • 4 years ago

fd8f5d

nspawn: beef up netns checking a bit, for compat with old kernels

Lennart Poettering • 4 years ago

88d0e6

tests: explicitly enable user namespaces for TEST-13-NSPAWN-SMOKE

Frantisek Sumsal • 4 years ago

c32aea

sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2

Lubomir Rintel • 4 years ago

36bc55

rules: watch metadata changes on DASD devices

Vojtech Trefny • 4 years ago

0cdedb

cryptsetup-generator: allow whitespace characters in keydev specification

Michal Sekletar • 4 years ago

b083d8

cryptsetup-generator: don't return error if target directory already exists

Michal Sekletar • 4 years ago

06fc66

cryptsetup: don't use %m if there's no error to show

Lennart Poettering • 4 years ago

77b5ff

cryptsetup-generator: introduce basic keydev support

Michal Sekletar • 4 years ago

cd07c4

sd-bus: properly initialize containers

Jan Synacek • 4 years ago

01031c

sd-bus: unify three code-paths which free struct bus_container

Zbigniew Jędrzejewski-Szmek • 4 years ago

f95255

detect-virt: do not try to read all of /proc/cpuinfo

Zbigniew Jędrzejewski-Szmek • 4 years ago

7a3548

Revert "sysctl.d: request ECN on both in and outgoing connections"

Thomas Hindoe Paaboel Andersen • 4 years ago

797aa5

test: add test case for recursive chown()ing

Lennart Poettering • 4 years ago

f3c0ce

chown-recursive: TAKE_FD() is your friend

Lennart Poettering • 4 years ago

85454f

chown-recursive: also drop ACLs when recursively chown()ing

Lennart Poettering • 4 years ago

e99976

chown-recursive: let's rework the recursive logic to use O_PATH

Lennart Poettering • 4 years ago

75750e

debug-generator: introduce rd.* version of all options

Lukas Nykryn • 4 years ago

b2e539

proc-cmdline: introduce PROC_CMDLINE_RD_STRICT

Lukas Nykryn • 4 years ago

9830d6

core: make sure we don't throttle change signal generator when a reload is pending

Lennart Poettering • 4 years ago

af111b

core: when we can't send the pending reload message, say we ignore it in the warning we log

Lennart Poettering • 4 years ago

251a2c

core: rename queued_message → pending_reload_message

Lennart Poettering • 4 years ago

d2ff2d

dhcp6: make sure we have enough space for the DHCP6 option header

Lennart Poettering • 4 years ago

f9fa7f

journal-file: avoid calling ftruncate with invalid fd

David Tardon • 4 years ago

db28f4

firewall-util: add an assert that we're not overwriting a buffer

David Tardon • 4 years ago

60d7c6

login: avoid leak of name returned by uid_to_name()

David Tardon • 4 years ago

e06727

dissect-image: use right comparison function

David Tardon • 4 years ago

8b6fc8

resolved: create /etc/resolv.conf symlink at runtime

Zbigniew Jędrzejewski-Szmek • 4 years ago

7c5f9c

journal: change support URL shown in the catalog entries

Michal Sekletar • 4 years ago

fadd04

tests: backport test_setup_logging()

Michal Sekletar • 4 years ago

bb4b6e

Introduce free_and_strndup and use it in bus-message.c

Zbigniew Jędrzejewski-Szmek • 4 years ago

99b756

bus-message: do not crash on message with a string of zero length

Zbigniew Jędrzejewski-Szmek • 4 years ago

f97114

units: don't enable per-service IP firewall by default

Michal Sekletar • 4 years ago

91241e

cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990)

Yu Watanabe • 4 years ago

a5e271

cryptsetup: add support for sector-size= option (#9936)

Dimitri John Ledkov • 4 years ago

e1320f

random-seed: raise POOL_SIZE_MIN constant to 1024

Michal Sekletar • 4 years ago

b425da

bus: move BUS_DONT_DESTROY calls after asserts

Zbigniew Jędrzejewski-Szmek • 4 years ago

29a4db

journal: remove journal audit socket

Michal Sekletar • 4 years ago

c8ab5a

units: drop DynamicUser=yes from systemd-resolved.service

Michal Sekletar • 4 years ago

aecf5b

net_setup_link: allow renaming interfaces that were renamed previously

Michal Sekletar • 4 years ago

c02a4b

Revert "udev: remove WAIT_FOR key"

Michal Sekletar • 4 years ago

9a8a32

rules: introduce old-style by-path symlinks for FCP based SCSI devices

Michal Sekletar • 4 years ago

0ace3b

rules: disable auto-online of hot-plugged memory on IBM z Systems

Michal Sekletar • 4 years ago

ef4bfa

rules: don't hoplug memory on s390x

Lukas Nykryn • 4 years ago

e12825

rules: load sg driver also when scsi_target appears (#45)

Lukáš Nykrýn • 4 years ago

892e41

rules: prandom character device node permissions

Lukas Nykryn • 4 years ago

55febf

rules: load sg module

Lukas Nykryn • 4 years ago

154a73

rules: reload sysctl settings when the bridge module is loaded

Lukas Nykryn • 4 years ago

74d331

rules: enable memory hotplug

Lukas Nykryn • 4 years ago

d3c272

rules: add rule for naming Dell iDRAC USB Virtual NIC as 'idrac'

Michal Sekletar • 4 years ago

1077c5

rules: automatically online hot-plugged CPUs

Michal Sekletar • 4 years ago

4c6378

pid1: bump maximum number of process in user slice to 80% of pid_max

rpm-build • 4 years ago

958f3f

Avoid /tmp being mounted as tmpfs without the user's will

Jan Synacek • 4 years ago

2a9ca8

pid1: bump DefaultTasksMax to 80% of the kernel pid.max value

rpm-build • 4 years ago

42725d

logind: set RemoveIPC to false by default

rpm-build • 4 years ago

65abcf

build-sys: Detect whether struct statx is defined in sys/stat.h

Filipe Brandenburger • 4 years ago

96fced

Add sources defined in the spec file

Packit Service • 4 years ago

0ecfd5

Add spec-file for the distribution

Packit Service • 4 years ago

ea8c04

.packit.yaml

Packit Service • 4 years ago

d264ad

source-git / systemd

Commits 1322

source-git / systemd

Source Code

Commits 1322