summaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAge
* virt: add detect_vm_devicetree for powerpc archesChris J Arges2015-02-04
| | | | | Check sysfs devicetree values in order to detect if we are running on a KVM hypervisor on a powerpc architecture.
* networkd: refactor socket activation a bitTom Gundersen2015-02-03
|
* sd-rtnl: allow sd_rtnl_open_fd() to be used on bound socketsTom Gundersen2015-02-03
|
* networkd: handle suspend eventsTom Gundersen2015-02-03
|
* partial revert of fed6df8Thomas Hindoe Paaboel Andersen2015-02-03
| | | | This one was acutally used to free xattr
* core: open up DefaultDependencies= property for transient unitsLennart Poettering2015-02-03
|
* core: busname_supported() should cache what it detectsJohannes Hölzl2015-02-03
| | | | Add the missing "static" to actually make this a cache.
* journald: fix some xsprrintf() buffer size falloutLennart Poettering2015-02-03
|
* core: use some nice macros where appropriateLennart Poettering2015-02-03
|
* loopback-setup: simplify code a bitLennart Poettering2015-02-03
|
* loopback-setup: no need to redefine LOOPBACK_IFINDEX, we already have it in ↵Lennart Poettering2015-02-03
| | | | missing.h
* network-address,test-network: avoid undefined behaviourZbigniew Jędrzejewski-Szmek2015-02-02
|
* shared/async: simplify asynchronous_job a bitZbigniew Jędrzejewski-Szmek2015-02-02
|
* test-dhcp-client: add a kludge to make valgrind happyZbigniew Jędrzejewski-Szmek2015-02-02
|
* test-dhcp-client: open a real udp socket for test executionZbigniew Jędrzejewski-Szmek2015-02-02
| | | | | | | | ./test-dhcp-client would attempt to operate fd 0, i.e. stdin. For example, './test-dhcp-client </dev/null' would fail with EPERM because /dev/null cannot be used with epoll. https://bugzilla.redhat.com/show_bug.cgi?id=1076119
* util: rework strappenda(), and rename it strjoina()Lennart Poettering2015-02-03
| | | | | | After all it is now much more like strjoin() than strappend(). At the same time, add support for NULL sentinels, even if they are normally not necessary.
* networkd: minor simplificationLennart Poettering2015-02-02
| | | | | Let's return the fd we found as return value in systemd_netlink_fd(), instead of using call-by-reference.
* remove unused variablesThomas Hindoe Paaboel Andersen2015-02-02
|
* tmpfiles: let's always use DEFINE_PRIVATE_STRING_TABLE_LOOKUP_TO_STRING() ↵Lennart Poettering2015-02-02
| | | | instead of defining our own string tables
* time-util: let's make xstrftime() useful for everybody, even if we only have ↵Lennart Poettering2015-02-02
| | | | a single user so far.
* macro: document that DECIMAL_STR_MAX contains space for the trailing NUL byteLennart Poettering2015-02-02
|
* bootchart: Ensure that systemd is the init called after using bootchartSebastien Bacher2015-02-02
| | | | | | When booting with systemd-bootchart, default to call the systemd binary rather than the init binary on disk, which might be another init system. Collecting data only works with booting systemd.
* backlight: let udev properties override clampingTopi Miettinen2015-02-02
| | | | | | | | On my computer, the minimum brightness enforced by clamping in backlight is too bright. Let udev property ID_BACKLIGHT_CLAMP control whether the brightness is clamped or not.
* cryptsetup: only warn on real key filesMartin Pitt2015-02-02
| | | | | Simplify the check from commit 05f73ad to only apply the warning to regular files instead of enumerating device nodes.
* cryptsetup: Do not warn If the key is /dev/*randomCristian Rodríguez2015-02-02
| | | | | Using /dev/urandom as a key is valid for swap, do not warn if this devices are world readable.
* networkd: support socket activationTom Gundersen2015-02-02
| | | | | Still keep the non-socket activation code around for starting from the commandline, but will likely drop that too in the future.
* sd-rtnl: introduce sd_rtnl_new_from_netlinkTom Gundersen2015-02-02
|
* networkd-wait-online: add timeoutTom Gundersen2015-02-02
| | | | | Default to timing out after 120 seconds without a network connection. Setting a timeout of 0 disables the timeout.
* sd-event: treat NULL callback for timer events like sig eventsTom Gundersen2015-02-02
| | | | In both cases exit the event loop.
* networkd-wait-online: support globbing for ignored devicesTom Gundersen2015-02-02
|
* shared/capability: go frugal on space for capsZbigniew Jędrzejewski-Szmek2015-02-01
|
* Fix dropping of all capabilitiesZbigniew Jędrzejewski-Szmek2015-02-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From fd.o bug 88898: systemd-resolved fails to start: Failed to drop capabilities: Operation not permitted Broken in f11943c53ec181829a821c6b27acf828bab71caa. Drop all capabilities: 1. prctl(PR_SET_KEEPCAPS, keep_capabilities != 0) // 0 when we drop all capabilities 2. setresuid() // bye bye capabilities 3. Add CAP_SETPCAP // fails because we have no capabilities 4. Reduce capability bounding set 5. Drop capabilities 6. prctl(PR_SET_KEEPCAPS, 0) Capabilites should always be kept after setresuid() so that the capability bounding set can be reduced. Based-on-a-patch-by: mustrumr97@gmail.com https://bugs.freedesktop.org/show_bug.cgi?id=88898 We must be careful not to leave PR_SET_KEEPCAPS on. We could use the setresuid() call to drop capabilities, but the rules when capabilities are dropped are fairly complex, since a transition to non-zero uid must happen. Let's instead keep the capabilities during setresuid(), and drop them later.
* config_parse_set_status: put signals in the correct setMichael Olbrich2015-02-01
| | | | | This was broken when the code was rearranged in "1e2fd62d70ff core/load-fragment.c: correct argument sign and split up long lines"
* Add a snprinf wrapper which checks that the buffer was big enoughZbigniew Jędrzejewski-Szmek2015-02-01
| | | | | | | | | | If we scale our buffer to be wide enough for the format string, we should expect that the calculation was correct. char_array_0() invocations are removed, since snprintf nul-terminates the output in any case. A similar wrapper is used for strftime calls, but only in timedatectl.c.
* tmpfiles: accurately report creation resultsZbigniew Jędrzejewski-Szmek2015-02-01
|
* tmpfiles: remove dead branchZbigniew Jędrzejewski-Szmek2015-02-01
| | | | | | | In the test, p is a path to a directory, always absolute. dent->d_name is a single path component, so they cannot be equal. The comparison was wrong also for other reasons: D type supports globs, so direct comparisons using streq are not enough.
* core/cgroup: fix embarrassing typoZbigniew Jędrzejewski-Szmek2015-01-31
| | | | https://github.com/docker/docker/issues/10280
* test-dhcp-client: remove linebreakZbigniew Jędrzejewski-Szmek2015-01-31
|
* networkd: dhcp-server - start as soon as addresses have been setTom Gundersen2015-01-31
| | | | | | We would otherwise wait for the interface to be completely configured, which could take considerable time with IPv4LL. As a result nspawn was very slow at obtaining IP addresses.
* networkd-wait-online: allow specific devices to be ignoredTom Gundersen2015-01-31
| | | | | | In addition to the loopback device, also explicitly configured devices to be ignored. Suggested by Charles Devereaux <systemd@guylhem.net>.
* sd-rtnl: don't fail event handler when callback failsTom Gundersen2015-01-31
| | | | | | As in sd-bus, simply log at debug level when a callback fails, but don't fail the event handler. Otherwise any error returned by any callback will disable the rtnl event handler. We should only do that on serious internal errors in sd-rtnl that we know cannot be recovered from.
* core: make setting the shutdown watchdog configuration via dbus workMaxim Mikityanskiy2015-01-30
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=88284
* Revert "sd-bus: change serialization of kdbus messages to qualify in their ↵Kay Sievers2015-01-30
| | | | | | | | entirety as gvariant objects" This breaks booting with kdbus. This reverts commit b381de4197157748ed96e469fcc372c23f842ae1.
* Revert "core: make setting the shutdown watchdog configuration via dbus work"Kay Sievers2015-01-30
| | | | | | | | | | | | | | | | | | | | This reverts commit df6e44c4affced590b0d19c594d9301ffd436591. systemd --version segfaults. Starting program: /usr/lib/systemd/systemd --version Missing separate debuginfos, use: debuginfo-install systemd-216-16.fc21.x86_64 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". systemd 218 +PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN Program received signal SIGSEGV, Segmentation fault. 0x000055555557c9be in main (argc=2, argv=0x7fffffffe4d8) at src/core/main.c:1832 1832 arg_shutdown_watchdog = m->shutdown_watchdog; (gdb) bt (gdb) bt full m = 0x0
* systemctl: refuse --host with catZbigniew Jędrzejewski-Szmek2015-01-28
| | | | | | This might be fixed one day, but for now it's better to fail. https://bugzilla.redhat.com/show_bug.cgi?id=1186952
* coredump: drop caps while we are processing the coredumpLennart Poettering2015-01-29
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=87354
* Revert "journal: do not check for number of files"Lennart Poettering2015-01-29
| | | | | | | | | | This reverts commit b914ea8d379b446c4c9fac4ba181771676ef38cd. We really need to put a limit on all our resources, everywhere, and in particular if we operate on external data. Hence, let's reintroduce the limit, but bump it substantially, so that it is guaranteed to be higher than any realistic RLIMIT_NOFILE setting.
* core: make setting the shutdown watchdog configuration via dbus workMaxim Mikityanskiy2015-01-29
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=88284
* networkd: tunnel - call tunnel modes ipip6, not ip4ipv6 to match ip(8)Tom Gundersen2015-01-28
|
* logind: handle closing sessions over daemon restartsMartin Pitt2015-01-28
| | | | | | | | | | | | | | | | | | | | | | It may happen that you have several sessions with the same VT: - Open a session c1 which leaves some processes around, and log out. The session will stay in State=closing and become Active=no. - Log back in on the same VT, get a new session "c2" which is State=active and Active=yes. When restarting logind after that, the first session that matches the current VT becomes Active=yes, which will be c1; c2 thus is Active=no and does not get the usual polkit/device ACL privileges. Restore the "closing" state in session_load(), to avoid treating all restored sessions as State=active. In seat_active_vt_changed(), prefer active sessions over closing ones if more than one session matches the current VT. Finally, fix the confusing comment in session_load() and explain it a bit better. https://launchpad.net/bugs/1415104