picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
39274 commits 2 branches 0 tags 166 MiB
Commit graph

39274 commits

This branch
This branch
All branches
Author SHA1 Message Date
Lennart Poettering c49357e747 man: rework timer docs to use a table for monotonic timers 2019-03-25 20:32:18 +01:00
Lennart Poettering 9ce4e4b0f6 namespace: when DynamicUser=1 is set, mount StateDirectory= bind mounts "nosuid" 
Add even more suid/sgid protection to DynamicUser= envionments: the
state directories we bind mount from the host will now have the nosuid
flag set, to disable the effect of nosuid on them.
 2019-03-25 19:57:15 +01:00
Lennart Poettering 849b9b85b8 nspawn: mount mqueue with nodev,noexec,nosuid, too 
The host mounts it like that, nspawn hence should do too.

Moreover, mount the file system after doing CLONEW_NEWIPC so that it
actually reflects the right mqueues. Finally, mount it wthout
considering it fatal, since POSIX mqueue support is little used and it
should be fine not to support it in the kernel.
 2019-03-25 19:53:05 +01:00
Lennart Poettering 5cb02182fd units: set nodev,nosuid,noexec flags for various secondary API VFS 
A couple of API VFS we mount via .mount units. Let's set the three flags
for those too, just in case.

This is just paranoia, nothing else, but shouldn't hurt.
 2019-03-25 19:39:00 +01:00
Lennart Poettering 64e82c1976 mount-util: beef up bind_remount_recursive() to be able to toggle more than MS_RDONLY 
The function is otherwise generic enough to toggle other bind mount
flags beyond MS_RDONLY (for example: MS_NOSUID or MS_NODEV), hence let's
beef it up slightly to support that too.
 2019-03-25 19:33:55 +01:00
Lennart Poettering f0a95a2c6d mount-util: use set_put_strdup() where appropriate 2019-03-25 19:33:55 +01:00
Lennart Poettering f8b1904f96 mount-util: don't clobber return value in umount_recursive() 
We shouldn't override 'r' with the result of cunescape(), since we use
it to return the last error of umount().
 2019-03-25 19:33:55 +01:00
Lennart Poettering 867189b545 namespace: get rid of {} around single-line if blocks 2019-03-25 19:33:55 +01:00
Lennart Poettering 39e91a2777 namespace: get rid of local variable 2019-03-25 19:33:55 +01:00
Lennart Poettering 1019a48f40 namespace: (void)ify a number of syscalls 2019-03-25 19:33:55 +01:00
Lennart Poettering 5f7a690aaa namespace: replace one case of stack allocation with heap allocation 
The list of mounts might grow quite large, let's avoid the stack for
this. Better safe than sorry.
 2019-03-25 19:33:55 +01:00
Lennart Poettering 60a3e982f4
Merge pull request #12081 from poettering/systemctl-love 
various small systemctl modernizations and refactoring
 2019-03-25 17:06:38 +01:00
Lennart Poettering 1d52a931c6 systemctl: move --failed close to --state= in help text 2019-03-25 15:25:58 +01:00
Lennart Poettering 8e54300425 systemctl: underline sections in help text 
Taking inspiration from the recent commit that added that to nspawn's
help text.
 2019-03-25 15:25:58 +01:00
Lennart Poettering 3bfa8668b0 systemctl: use structured initialization 2019-03-25 15:25:57 +01:00
Lennart Poettering 2f50e59f2b systemctl: use SYNTHETIC_ERRNO everywhere 2019-03-25 15:23:08 +01:00
Lennart Poettering 63a3b3cb70 systemctl: split out some SysV compat stuff into its own C file 
systemctl.c is way to large already. Let's split out some stuff out that
is easy to split out.
 2019-03-25 15:23:08 +01:00
Zbigniew Jędrzejewski-Szmek 8461f3680b hwdb: update for v242 
Appears to be usual slew of mundane corrections and additions.
 2019-03-25 14:52:38 +01:00
Zbigniew Jędrzejewski-Szmek 3e7c973f1a
Merge pull request #12089 from mrc0mmand/journalctl-bash-comp-redirection 
bash-completion: use the default completion for shell redirect operators
 2019-03-25 14:22:15 +01:00
Lennart Poettering b82f71c7ff tree-wide: constify a few static string tables 2019-03-25 14:04:34 +01:00
Lennart Poettering ebfb1b5724 dbus-unit: remove redundant check 
We checked this with an assert() a few lines up aleady, no need to check
this again.
 2019-03-25 13:48:53 +01:00
Lennart Poettering e59ba56d78 core: remove unnecessary heap allocation 2019-03-25 13:48:53 +01:00
Lennart Poettering 5787c50932 NEWS: various tweaks and updates for v242 2019-03-25 13:45:45 +01:00
Zbigniew Jędrzejewski-Szmek fd7887da00
Merge pull request #12087 from yuwata/fix-condition-free-list 
util: fix condition_free_list_type()
 2019-03-24 13:47:05 +01:00
Frantisek Sumsal c01dbf6d19 bash-completion: unify indentation 2019-03-23 21:51:04 +01:00
Frantisek Sumsal 1413763ea5 bash-completion: use default completion for redirect operators 2019-03-23 21:50:50 +01:00
Yu Watanabe 4d6cd572a7 fuzz: add testcases for the bug in condition_free_list_type() 2019-03-24 00:35:39 +09:00
Yu Watanabe 1beabe08d6 network,udev: explicitly declare 'conditions' is a list 2019-03-24 00:35:39 +09:00
Yu Watanabe 7bb55ed099 util: fix condition_free_list_type() 
This fixes a bug introduced by c4f58deab5.

Closes oss-fuzz#13878, oss-fuzz#13882, oss-fuzz#13884, oss-fuzz#13886, and
oss-fuzz#13888.
 2019-03-24 00:34:33 +09:00
Lennart Poettering 16b4623620
Merge pull request #11602 from vesajaaskelainen/dbus-reboot-with-parameters 
dbus-manager: Add RebootWithParameters d-bus method
 2019-03-22 21:07:47 +01:00
Lennart Poettering 83276695c6
Merge pull request #12079 from keszybz/fuzz-nspawn-oci 
Add fuzzer for nspawn-oci
 2019-03-22 21:06:17 +01:00
Vesa Jääskeläinen 428b296a59 logind: Add support for RebootParameter 
This adds support for user to set & get reboot parameter for reboot.

As callee would be next issuing Reboot call same policy checks are being used.

If unit file issuing the reboot action defines RebootArgument (or similar) that
setting takes precedence.
 2019-03-22 20:30:33 +02:00
Lennart Poettering 525ea273de
Merge pull request #12075 from keszybz/two-docs 
Two small man page enhancements
 2019-03-22 18:11:59 +01:00
Lennart Poettering e4077ff6f3 nspawn: don't free "fds" twice 
Previously both run() and run_container() would free 'fds'. Let's fix
that, and let run() free it but make run_container() already remove all
fds from it, because that's what we actually want to do.

Fixes: #12073
 2019-03-22 18:11:27 +01:00
Zbigniew Jędrzejewski-Szmek b2645747b7 nspawn-oci: fix double free 
Also rename function to make it clear that it also frees the array
object itself.
 2019-03-22 17:39:12 +01:00
Zbigniew Jędrzejewski-Szmek 54ed9f88dc udev/link-config: rename MACPolicy to MACAddressPolicy 
Things are clearer if the same name is used everywhere, and we don't gain
much by saving a few bytes.
 2019-03-22 17:16:17 +01:00
Zbigniew Jędrzejewski-Szmek 094eecd29d
Merge pull request #12055 from poettering/save-argc-argv 
main-func.h and systemctl argc/argv improvements
 2019-03-22 16:58:18 +01:00
Zbigniew Jędrzejewski-Szmek 4210e60eb6
Merge pull request #12072 from poettering/string-table-fixes 
three small string table fixes
 2019-03-22 16:49:56 +01:00
Vesa Jääskeläinen ce7f10707d logind: relocate function return_test_polkit() 
Relocate function return_test_polkit() upper in file for easier access from other functions.
 2019-03-22 17:38:54 +02:00
Vesa Jääskeläinen 77defcf538 systemctl: restore "systemctl reboot ARG" functionality 
Commit d85515edcf changed logic how reboot is
executed. That commit changed behavior to use emergency action reboot code path
to perform the reboot.

This inadvertently broke rebooting with argument:
$ systemctl reboot custom-reason

Restore original behavior so that if reboot service unit similar to
systemd-reboot.service is executed it is possible to override reboot reason
with "systemctl reboot ARG".

When "systemctl reboot ARG" is executed ARG is placed in file
/run/systemd/reboot-param and reboot is issued using logind's Reboot
dbus-service.

If RebootArgument is specified in systemd-reboot.service it takes precedence
over what systemctl sets.

Fixes: #11828
 2019-03-22 17:38:54 +02:00
Zbigniew Jędrzejewski-Szmek fd9baae8c4 NEWS: add missing word 2019-03-22 16:28:43 +01:00
Zbigniew Jędrzejewski-Szmek 3aaae27a75 man: clarify that ExecStop= is always called 
Fixes #11744.
 2019-03-22 16:28:43 +01:00
Zbigniew Jędrzejewski-Szmek 543e6bd4c2 man: update description of initrd in bootup(7) 
Mention that initramfs is used, not initrd, even though we still call
it that. Also add links and clarify who loads the initramfs.
 2019-03-22 16:28:43 +01:00
Zbigniew Jędrzejewski-Szmek 9b89e602ea NEWS: prepare for v242 2019-03-22 15:38:53 +01:00
Evgeny Vereshchagin 53294d9496 network: add missing nulstr terminator 
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13821
 2019-03-22 13:25:42 +01:00
Lennart Poettering c425c7c245 dbus-execute: don't needlessly override error code 2019-03-22 12:25:16 +01:00
Lennart Poettering b1ea85dc08 dbus-execute: lets use exec_directory_type_from_string() to simplify things 2019-03-22 12:25:03 +01:00
Lennart Poettering 0f4b93c4b5 udev: use string_table_lookup() where we can 2019-03-22 12:21:12 +01:00
Lennart Poettering 63c691c648 string-table: use string_table_lookup() in our own macros everywhere 2019-03-22 12:21:12 +01:00
Zbigniew Jędrzejewski-Szmek b1f13b0e75 nspawn-oci: mount source is optional 2019-03-22 12:04:32 +01:00