Jörg Thalheim [Mon, 18 Dec 2017 14:17:06 +0000 (15:17 +0100)]
sd-netlink: add generic netlink support
This also adds the ability to incorporate arrays into netlink messages
and to determine when a netlink message is too big, used by some generic
netlink protocols.
Mike Gilbert [Sat, 30 Dec 2017 17:48:20 +0000 (12:48 -0500)]
basic: detect_vm_cpuid: fix hypervisor detection
The __get_cpuid() function only calls __cpuid() if __get_cpuid_max()
returns a value that is less than or equal to the leaf value.
In QEMU/KVM, I found that the special hypervisor leaf value (0x40000000U)
is always larger than the value retured by __get_cpuid_max().
Avoid this problem by calling the __cpuid() macro directly once we have
checked the hypervisor bit from leaf 1.
Fixes:
d31b0033b7743393562a2e9d3c1e74afea981c13
Lennart Poettering [Mon, 1 Jan 2018 04:24:41 +0000 (05:24 +0100)]
analyze: fix prototype mismatch on libseccomp-less builds (#7768)
This fixes a compiler warning that matters, if people build systemd
without libseccomp.
Follow-up for
a6bcef29579409872735a2cfbf77d1c61ea91332
Tomasz Bachorski [Sat, 30 Dec 2017 11:23:24 +0000 (12:23 +0100)]
mkosi: use libidn2 on Arch (#7751)
Since libidn2 is now available in Arch official repositories, let's use
it instead of libidn.
Lennart Poettering [Sat, 30 Dec 2017 11:21:53 +0000 (12:21 +0100)]
Merge pull request #7755 from floppym/fileio-error
fileio: write_string_stream_ts: return errors from fputs and fputc
Mike Gilbert [Sat, 30 Dec 2017 11:16:49 +0000 (06:16 -0500)]
sysctl: use raw file descriptor in sysctl_write (#7753)
The kernel returns specific error codes which may be lost if we use the
libc buffered io functions.
Fixes: https://github.com/systemd/systemd/issues/7744
Mike Gilbert [Fri, 29 Dec 2017 18:30:38 +0000 (13:30 -0500)]
basic: detect_vm_cpuid: use gcc's __get_cpuid() function (#7758)
The __get_cpuid() function includes a safety check to ensure that
executing the cpuid instruction is valid/safe.
This method also works with clang.
https://lists.freedesktop.org/archives/systemd-devel/2017-December/040054.html
Susant Sahani [Fri, 29 Dec 2017 14:19:21 +0000 (19:49 +0530)]
networkd: Tunnel allows tunnel traffic on ip6tnl devices (#7756)
where the remote endpoint is a local host address.
Susant Sahani [Fri, 29 Dec 2017 14:18:05 +0000 (19:48 +0530)]
networkd: allow to configure default/initial send/recv congestion window and store persistentl (#7750)
Currently we can only change initcwnd/initrwnd in the following way, and it does not store persistently:
sudo ip route change default via 192.168.1.1 dev tun0 initcwnd 20
sudo ip route change default via 192.168.1.1 dev tun0 initrwnd 20
For more details about initcwnd/initrwnd, please look at:
http://hjzhao.blogspot.com/2012/05/increase-initcwnd-for-performance.html
http://www.cdnplanet.com/blog/tune-tcp-initcwnd-for-optimum-performance
or google 'initcwnd initrwnd'
This work allows to configure the initcwnd and initrwnd.
Closes #2118
Yu Watanabe [Fri, 29 Dec 2017 14:13:53 +0000 (23:13 +0900)]
Merge pull request #7745 from poettering/sockaddr-size
mostly systemd-analyze fixes
Mike Gilbert [Thu, 28 Dec 2017 15:03:47 +0000 (10:03 -0500)]
fileio: write_string_stream_ts: check for file errors immediately
Mike Gilbert [Thu, 28 Dec 2017 02:46:52 +0000 (21:46 -0500)]
fileio: write_string_stream_ts: return errors from fputs and fputc
Ignoring errors from these functions may mask errors returned by the
kernel.
Fixes: https://github.com/systemd/systemd/issues/7744
Lennart Poettering [Wed, 27 Dec 2017 11:43:31 +0000 (12:43 +0100)]
cryptsetup: small if check improvement (#7747)
It's a bit weird to test these strings after the fact instead of before.
Let's make sure that we don't even attempt the string escaping if the
strings are NULL.
Follow-up for #7688
Lennart Poettering [Tue, 26 Dec 2017 19:48:58 +0000 (20:48 +0100)]
Merge pull request #7629 from poettering/condition-kernel-version
core,udev,networkd: add ConditionKernelVersion=
nulsoh [Tue, 26 Dec 2017 19:45:06 +0000 (20:45 +0100)]
man: systemd: fix typo (#7746)
Add missing _r_ for ctl-alt-del.target
Lennart Poettering [Sat, 23 Dec 2017 14:02:58 +0000 (15:02 +0100)]
condition: extend ConditionKernelVersion= with relative version checks
Now that we have str_verscmp() in our source tree anyway, let's make it
generic and reuse it for ConditionKernelVersion=.
Zbigniew Jędrzejewski-Szmek [Fri, 15 Dec 2017 20:44:29 +0000 (21:44 +0100)]
Add note about kernel version unportability
Lennart Poettering [Wed, 13 Dec 2017 19:34:13 +0000 (20:34 +0100)]
core,udev,networkd: add ConditionKernelVersion=
This adds a simple condition/assert/match to the service manager, to
udev's .link handling and to networkd, for matching the kernel version
string.
In this version we only do fnmatch() based globbing, but we might want
to extend that to version comparisons later on, if we like, by slightly
extending the syntax with ">=", "<=", ">", "<" and "==" expressions.
Yu Watanabe [Tue, 26 Dec 2017 16:32:46 +0000 (01:32 +0900)]
Merge pull request #7728 from poettering/fork-rework
some fork() reworking
Yu Watanabe [Tue, 26 Dec 2017 16:31:22 +0000 (01:31 +0900)]
Merge pull request #7735 from poettering/rc-local-fix
rc-local documentation
Lucas Werkmeister [Sat, 23 Dec 2017 21:33:46 +0000 (22:33 +0100)]
man: further file-hierarchy *Directory= improvements
Follow-up to @poettering’s comments in #7723:
- Slightly expand on the difference between using tmpfiles.d and service
directives
- Mention CacheDirectory=
- Mention LogsDirectory=
- Abbreviate and unify some later descriptions
ConfigDirectory= is not mentioned, since it does not support the
functionality mentioned in the manpage which tmpfiles.d provides:
copying or symlinking default configuration from /usr/share/factory. And
the user package variable file locations don’t mention the directives
because in user units the service can always create the directories
itself (whereas in system units lesser-privileged services lack
permission to create them).
Lennart Poettering [Tue, 26 Dec 2017 15:02:10 +0000 (16:02 +0100)]
update TODO
Lennart Poettering [Tue, 26 Dec 2017 15:01:49 +0000 (16:01 +0100)]
analyze: correct help text where we take unit name arguments
Lennart Poettering [Tue, 26 Dec 2017 15:01:43 +0000 (16:01 +0100)]
analyze: fix indentation in one case
Lennart Poettering [Tue, 26 Dec 2017 15:01:14 +0000 (16:01 +0100)]
analyze: add some logging to some error cases
Lennart Poettering [Tue, 26 Dec 2017 15:00:54 +0000 (16:00 +0100)]
analyze: arg_host can be "const char*", hence make it so.
Lennart Poettering [Tue, 26 Dec 2017 14:58:06 +0000 (15:58 +0100)]
analyze: port verb dispatching to verbs.[ch] API
Let's unify the code for parsing command line verbs, and reuse the
common verbs.[ch] API in systemd-analyze too.
This adds a couple of error messages when people pass too many
arguments. Moreover thus pushes bus allocation into the verb functions,
which corrects a couple of cases where we previously allocated a bus but
really didn't need to.
Other than that behaviour shouldn't really change.
Lennart Poettering [Tue, 26 Dec 2017 12:36:07 +0000 (13:36 +0100)]
sd-daemon: use sockaddr_port() helper
Lennart Poettering [Tue, 26 Dec 2017 12:35:52 +0000 (13:35 +0100)]
socket-util: clarify why sockaddr_port returns unsigned rather than uint16_t
Lennart Poettering [Sun, 24 Dec 2017 15:51:45 +0000 (16:51 +0100)]
units: link up debug-generator documentation from debug-shell.service
Lennart Poettering [Sun, 24 Dec 2017 15:51:28 +0000 (16:51 +0100)]
rc-local-generator: minor modernizations
Lennart Poettering [Sun, 24 Dec 2017 15:50:19 +0000 (16:50 +0100)]
man: add a systemd-rc-local-generator(8) man page
Most importantly, let's highlight the differences to the rc-local
behaviour in SysV.
Fixes: #7703
Yu Watanabe [Tue, 26 Dec 2017 00:35:35 +0000 (09:35 +0900)]
bootspec: drop ".conf" from BootEntry.filename
The boot loader systemd-boot removes ".conf" from file name of entry
configs, and determine which entry is the default entry.
However, bootspec, which is used by systemctl and bootctl did not
remove ".conf", then sometimes bootctl marks wrong entry as default.
This fixes the logic to choose the default entry in bootspec, to
match the logic used in systemd-boot boot loader.
Fixes #7727.
bleep_blop [Sun, 24 Dec 2017 06:53:20 +0000 (06:53 +0000)]
separate flags from shebang
Yu Watanabe [Mon, 25 Dec 2017 04:38:49 +0000 (13:38 +0900)]
sd-boot, udev: trivial condition simplifications
Reported and proposed by @dcb314.
Fixes #7656 and #7657.
Lennart Poettering [Mon, 25 Dec 2017 16:21:59 +0000 (17:21 +0100)]
Merge pull request #7742 from poettering/meson-syscall
Meson syscall
Lennart Poettering [Mon, 25 Dec 2017 11:35:43 +0000 (12:35 +0100)]
meson: hopefully renameat2() will show up where renameat() is defined
Should glibc add this eventually, let's try to be smart where to look
for it.
Lennart Poettering [Mon, 25 Dec 2017 11:35:28 +0000 (12:35 +0100)]
meson: look for gettid() definition where getpid() is defined
Hopefully, should gettid() show up one day in glibc it'll show up where
getpid() is defined too.
Lennart Poettering [Mon, 25 Dec 2017 11:07:40 +0000 (12:07 +0100)]
meson: when pivot_root() is added one day, look for it in <unistd.h>
We of course don't know in which header glibc will export pivot_root()
and if it ever will. But there's a good chance they'll place it where
chroot() is located, given the similarity in the operations, hence let's
try our luck and look for it at the same place.
If we are lucky this means we don't have to patch our code if glibc
decides to expose the call one day.
Lennart Poettering [Mon, 25 Dec 2017 11:01:14 +0000 (12:01 +0100)]
meson: use "args" for setting _GNU_SOURCE when checking for functions
This reworks how we set _GNU_SOURCE when checking for the availability
of functions:
1. We set it for most of the functions we look for. After all we set it
for our entire built anyway, and it's usually how Linux-specific
definitions in glibc are protected these days. Given that we usually
have checks for such modern stuff only anyway, let's just blanket enable
it.
2. Use "args" instead of "prefix" to set the macro. This is what is
suggested in the meson docs, hence let's do it.
Lennart Poettering [Fri, 22 Dec 2017 14:28:17 +0000 (15:28 +0100)]
update TODO
Lennart Poettering [Sun, 24 Dec 2017 17:50:17 +0000 (18:50 +0100)]
process-util: debug log if PR_SET_NAME fails.
Lennart Poettering [Sun, 24 Dec 2017 17:48:49 +0000 (18:48 +0100)]
process-util: allow rename_process() only in the main thread
We make assumptions about the comm name we set via PR_SET_NAME: that it
would reflect the process name, but that's only the case for the main
thread. Moreover, we cache the mmap() region without locking.
Let's hence be safe rather than sorry and support all this only in the
main thread.
Lennart Poettering [Fri, 22 Dec 2017 14:22:59 +0000 (15:22 +0100)]
basic: split out blockdev-util.[ch] from util.h
With three functions it makes sense to split this out now.
Lennart Poettering [Fri, 22 Dec 2017 14:10:56 +0000 (15:10 +0100)]
agents: use kill_and_sigcont() where appropriate
Lennart Poettering [Fri, 22 Dec 2017 14:07:22 +0000 (15:07 +0100)]
process-util: move fork_agent() to process-util.[ch]
It's a relatively small wrapper around safe_fork() now, hence let's move
it over, and make its signature even more alike. Also, set a different
process name for the polkit and askpw agents.
Lennart Poettering [Fri, 22 Dec 2017 12:31:55 +0000 (13:31 +0100)]
tree-wide: properly name all threads we fork off
Lennart Poettering [Fri, 22 Dec 2017 12:25:14 +0000 (13:25 +0100)]
udev: some very trivial coding style updates
Lennart Poettering [Fri, 22 Dec 2017 12:24:40 +0000 (13:24 +0100)]
tree-wide: use EXIT_SUCCESS/EXIT_FAILURE in exit() where we can
Lennart Poettering [Fri, 22 Dec 2017 12:19:56 +0000 (13:19 +0100)]
shutdown: unify shutdown.c's and async.c's sync() helper process
The helper processes are pretty much the same now, let's unify them
hence.
Lennart Poettering [Fri, 22 Dec 2017 12:08:14 +0000 (13:08 +0100)]
tree-wide: introduce new safe_fork() helper and port everything over
This adds a new safe_fork() wrapper around fork() and makes use of it
everywhere. The new wrapper does a couple of things we previously did
manually and separately in a safer, more correct and automatic way:
1. Optionally resets signal handlers/mask in the child
2. Sets a name on all processes we fork off right after forking off (and
the patch assigns useful names for all processes we fork off now,
following a systematic naming scheme: always enclosed in () – in order
to indicate that these are not proper, exec()ed processes, but only
forked off children, and if the process is long-running with only our
own code, without execve()'ing something else, it gets am "sd-" prefix.)
3. Optionally closes all file descriptors in the child
4. Optionally sets a PR_SET_DEATHSIG to SIGTERM in the child, in a safe
way so that the parent dying before this happens being handled
safely.
5. Optionally reopens the logs
6. Optionally connects stdin/stdout/stderr to /dev/null
7. Debug logs about the forked off processes.
Lennart Poettering [Sat, 23 Dec 2017 23:54:40 +0000 (00:54 +0100)]
terminal-util: open /dev/null with O_CLOEXEC in make_stdio_null()
Ultimately, O_CLOEXEC should be off in fd 0, 1, 2, but when we open
/dev/null here it's unlikely to be < 0, and after dupping the fd to 0,
1, 2 we turn off O_CLOEXEC explicitly anyway.
Unless we know that what we are about to open will return 0, 1 or 2 we
should always set O_CLOEXEC in order to be safe to other threads forking
of subprocesses at the wrong moment.
Lennart Poettering [Fri, 22 Dec 2017 12:05:33 +0000 (13:05 +0100)]
terminal-util: return first error, not last in make_stdio()
Just a minor tweak, making sure we execute as much as we can of the
funciton, but return the first error instead of the last we encounter.
This is usuelly how we do things when we have functions that continue on
the first error, so let's do it like that here too.
Lennart Poettering [Fri, 22 Dec 2017 12:04:24 +0000 (13:04 +0100)]
fd-util: use close_nointr() return value instead of errno
Our own calls return errors in their return values, hence use that
rather than errno when checking errors.
Lennart Poettering [Fri, 22 Dec 2017 12:03:35 +0000 (13:03 +0100)]
fd-util: add some (void) casts
Lennart Poettering [Thu, 21 Dec 2017 17:24:28 +0000 (18:24 +0100)]
sync: fork off sync() in a process instead of a thread
Let's fork off sync() ina process instead of a thread, as a safety
measure. This is beneficial to ensure that the original process can exit
without having to wait for the sync() to finish (note that the kernel
will delay process termination until all threads finished their
syscalls). In case of hanging NFS this increases the chance that PID 1
can safely transition to the "systemd-shutdown" process as the sync() is
initiated early on but definitely not waited for.
Yu Watanabe [Mon, 25 Dec 2017 10:42:42 +0000 (19:42 +0900)]
meson: define _GNU_SOURCE to detect copy_file_range() (#7734)
Follow-up for
bad7a0c81f501fbbcc79af9eaa4b8254441c4a1f of git
repository for glibc.
Recently glibc added `copy_file_range()`, but to use it,
`_GNU_SOURCE` needs to be defined. This adds the flag in
meson.build to detect the function by meson correctly.
Lennart Poettering [Sun, 24 Dec 2017 10:59:58 +0000 (11:59 +0100)]
Merge pull request #7663 from keszybz/mkdir-return-value
util-lib: fix return value in mkdir_parents()
Lennart Poettering [Sat, 23 Dec 2017 23:47:24 +0000 (00:47 +0100)]
systemctl: don't show vendor preset state for generated/transient units (#7711)
Showing the preset state for those suggests they could actually be
enabled/disabled, but that concept doesn't exist for generated/transient
units, hence hide this information.
This came up here:
https://lists.freedesktop.org/archives/systemd-devel/2017-December/040022.html
Lennart Poettering [Sat, 23 Dec 2017 18:20:29 +0000 (19:20 +0100)]
Merge pull request #7695 from yuwata/transient-socket
DBus-API: implement transient socket unit
Susant Sahani [Sat, 23 Dec 2017 17:55:03 +0000 (23:25 +0530)]
networkd: Add support for ipvlan L3s and flags (#7726)
This works supports to configure L3S mode and flags
such as bridge, private and vepa
Lennart Poettering [Sat, 23 Dec 2017 11:40:48 +0000 (12:40 +0100)]
Merge pull request #7620 from keszybz/two-docs
Two docs
Lucas Werkmeister [Thu, 21 Dec 2017 22:25:00 +0000 (23:25 +0100)]
man: mention StateDirectory in file-hierarchy(7)
Yu Watanabe [Sat, 23 Dec 2017 10:16:49 +0000 (19:16 +0900)]
load-fragment: simplify list insertion logic
LIST_FIND_TAIL and LIST_INSERT_AFTER can work for empty list.
Yu Watanabe [Sat, 23 Dec 2017 10:10:24 +0000 (19:10 +0900)]
cgroup: IODeviceWeight= or friends can take device node files in /run/systemd/inaccessible/
systemd creates several device nodes in /run/systemd/inaccessible/.
This makes CGroup's settings related to IO can take device node
files in the directory.
Yu Watanabe [Tue, 19 Dec 2017 11:12:01 +0000 (20:12 +0900)]
core/socket: shorten socket_fdname()
Yu Watanabe [Sat, 23 Dec 2017 09:53:36 +0000 (18:53 +0900)]
core/socket: dump more settings
Yu Watanabe [Tue, 19 Dec 2017 09:14:39 +0000 (18:14 +0900)]
dbus-cgroup: merge several blocks which operate almost same tasks
Yu Watanabe [Tue, 19 Dec 2017 07:49:37 +0000 (16:49 +0900)]
dbus-execute: use empty_to_null() where it can be applicable
Yu Watanabe [Tue, 19 Dec 2017 06:36:36 +0000 (15:36 +0900)]
doc: add {Condition,Assert}ControlGroupController= to TRANSIENT-SETTINGS.md
Follow-up for
e16647c39d195804711a006667d5bce49c0ef73d.
Yu Watanabe [Tue, 19 Dec 2017 06:34:04 +0000 (15:34 +0900)]
cgroup: move path checking logic to dbus-cgroup.c
Yu Watanabe [Tue, 19 Dec 2017 06:33:20 +0000 (15:33 +0900)]
bus-unit-util: simplify bus_append_cgroup_property()
Yu Watanabe [Tue, 19 Dec 2017 06:32:11 +0000 (15:32 +0900)]
bus-unit-util: make dependency settings can take multiple units
This allows people to specify multiple units in dependency settings
e.g. `Requires=foo.service baz.service`.
Yu Watanabe [Tue, 19 Dec 2017 06:30:59 +0000 (15:30 +0900)]
dbus-socket: move truncation check to bus_socket_set_transient_property()
Yu Watanabe [Sat, 23 Dec 2017 10:32:04 +0000 (19:32 +0900)]
basic: introduce socket_protocol_{from,to}_name()
And use them where they can be applicable.
Yu Watanabe [Tue, 19 Dec 2017 01:53:38 +0000 (10:53 +0900)]
doc: update TRANSIENT-SETTINGS.md
Yu Watanabe [Mon, 18 Dec 2017 15:07:11 +0000 (00:07 +0900)]
man: add explanation about transient path or socket units in systemd-run
Yu Watanabe [Mon, 18 Dec 2017 14:46:45 +0000 (23:46 +0900)]
run: add support to create transient path and socket unit
Yu Watanabe [Sat, 23 Dec 2017 07:59:56 +0000 (16:59 +0900)]
bus-unit-util: add socket unit related options
Also, split bus_append_unit_property_assignment().
Yu Watanabe [Sat, 23 Dec 2017 09:47:33 +0000 (18:47 +0900)]
core: implement transient socket unit
Yu Watanabe [Sat, 23 Dec 2017 07:55:36 +0000 (16:55 +0900)]
socket-util: add socket_address_type_{from,to}_string()
Yu Watanabe [Sat, 23 Dec 2017 07:29:40 +0000 (16:29 +0900)]
core/socket: add socket_port_type_from_string()
Yu Watanabe [Tue, 19 Dec 2017 13:14:07 +0000 (22:14 +0900)]
core:socket: fix string in socket_exec_command_table
Yu Watanabe [Tue, 19 Dec 2017 02:05:43 +0000 (11:05 +0900)]
core,seccomp: fix logic to parse RestrictAddressFamilies= in dbus-execute.c
If multiple RestrictAddressFamilies= settings, some of them are
whitelist and the others are blacklist, are sent to bus, then parsing
result was corrupted.
This fixes the parse logic, now it is the same as one used in
load-fragment.c
Yu Watanabe [Sat, 23 Dec 2017 09:45:32 +0000 (18:45 +0900)]
core,seccomp: fix logic to parse syscall filter in dbus-execute.c
If multiple SystemCallFilter= settings, some of them are whitelist
and the others are blacklist, are sent to bus, then the parse
result was corrupted.
This fixes the parse logic, now it is the same as one used in
load-fragment.c
Lennart Poettering [Sat, 23 Dec 2017 07:47:55 +0000 (08:47 +0100)]
coccinelle: beef up isempty() checks (#7729)
With these additions, coccinelle finds everything fixed by the first
commit in PR #7695. In order not to needlessly conflict with that PR
this PR won't include those fixes, but only the coccinelle changes to
detect them automatically in the future.
Dmitry Rozhkov [Thu, 21 Dec 2017 12:55:29 +0000 (14:55 +0200)]
man: fix example config to conform the content of the man page
The config example contains wrong specificator for hostname.
It should be %H instead of %h as documented in the man page.
Use correct specificator for hostname.
Sylvain Plantefève [Thu, 21 Dec 2017 22:11:25 +0000 (23:11 +0100)]
catalog: update french translation
Mathieu Malaterre [Fri, 22 Dec 2017 09:06:29 +0000 (10:06 +0100)]
shared/seccomp: add mmap handling for powerpc
Also remove the warning:
./src/shared/seccomp-util.c:1414:2: warning: #warning "Consider adding the right mmap() syscall definitions here!" [-Wcpp]
#warning "Consider adding the right mmap() syscall definitions here!"
Yu Watanabe [Thu, 21 Dec 2017 18:07:23 +0000 (03:07 +0900)]
networkd: show warning on error or cast to void when error is ignored (#7716)
Michał [Thu, 21 Dec 2017 13:17:33 +0000 (14:17 +0100)]
hwdb: Add accelerometer orientation entry for Lenovo MIIX3-1030 tablet (#7713)
Full dmi/id/modalias:
dmi:bvnLENOVO:bvrB4CN29WW:bd12/04/2015:svnLENOVO:pn80HV:pvrLenovoMIIX3-1030:rvnLENOVO:rnMartini:rvrSDK0G98662WIN:cvnLENOVO:ct11:cvrLenovoMIIX3-1030:
Tested on Lenovo MIIX3 with Debian 9
Susant Sahani [Thu, 21 Dec 2017 12:27:45 +0000 (17:57 +0530)]
Fix #7704 and #7708. (#7712)
Init rule variable iif oif and to, from
While foreign rules are added the network part is not attached.
attach manager to rules and use it in routing_policy_rule_free.
Zbigniew Jędrzejewski-Szmek [Wed, 20 Dec 2017 09:17:37 +0000 (10:17 +0100)]
network: fix memory leak when an netdev was skipped
In general we'd leak anything that was allocated in the first parsing of
netdev, e.g. netdev name, host name, etc. Use normal netdev_unref to make sure
everything is freed.
--- command ---
/home/zbyszek/src/systemd/build2/test-network
--- stderr ---
/etc/systemd/network/wg0.netdev:3: Failed to parse netdev kind, ignoring: wireguard
/etc/systemd/network/wg0.netdev:5: Unknown section 'WireGuard'. Ignoring.
/etc/systemd/network/wg0.netdev:9: Unknown section 'WireGuardPeer'. Ignoring.
NetDev has no Kind configured in /etc/systemd/network/wg0.netdev. Ignoring
/etc/systemd/network/br0.network:13: Unknown lvalue 'NetDev' in section 'Network'
br0: netdev ready
=================================================================
==11666==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 4 byte(s) in 1 object(s) allocated from:
#0 0x7f3a314cf238 in __interceptor_strdup (/lib64/libasan.so.4+0x77238)
#1 0x7f3a30e71ad1 in free_and_strdup ../src/basic/string-util.c:870
#2 0x7f3a30d34fba in config_parse_ifname ../src/shared/conf-parser.c:981
#3 0x7f3a30d2f5b0 in next_assignment ../src/shared/conf-parser.c:155
#4 0x7f3a30d30303 in parse_line ../src/shared/conf-parser.c:273
#5 0x7f3a30d30dee in config_parse ../src/shared/conf-parser.c:390
#6 0x7f3a30d310a5 in config_parse_many_files ../src/shared/conf-parser.c:428
#7 0x7f3a30d3181c in config_parse_many ../src/shared/conf-parser.c:487
#8 0x55b4200f9b00 in netdev_load_one ../src/network/netdev/netdev.c:634
#9 0x55b4200fb562 in netdev_load ../src/network/netdev/netdev.c:778
#10 0x55b4200c607a in manager_load_config ../src/network/networkd-manager.c:1299
#11 0x55b4200818e0 in test_load_config ../src/network/test-network.c:128
#12 0x55b42008343b in main ../src/network/test-network.c:254
#13 0x7f3a305f8889 in __libc_start_main (/lib64/libc.so.6+0x20889)
SUMMARY: AddressSanitizer: 4 byte(s) leaked in 1 allocation(s).
-------
Zbigniew Jędrzejewski-Szmek [Wed, 20 Dec 2017 12:57:12 +0000 (13:57 +0100)]
Merge pull request #7710 from jwrdegoede/hwdb-accel-chuwi-vi8-teclast-x80-pro
hwdb/60-sensor.hwdb: Add entries for the Chuwi vi8 and Teclast x80 pro tablets
Lennart Poettering [Wed, 20 Dec 2017 11:08:40 +0000 (12:08 +0100)]
Merge pull request #7702 from keszybz/reduce-linkage
Some small cleanups and another attempt to reduce linkage of nss modules
Hans de Goede [Wed, 20 Dec 2017 10:06:13 +0000 (11:06 +0100)]
hwdb: Add accelerometer orientation entry for Teclast X80 Pro tablet
Add an accelerometer orientation entry for the Teclast X80 Pro tablet.
Hans de Goede [Wed, 20 Dec 2017 09:57:38 +0000 (10:57 +0100)]
hwdb: Add accelerometer orientation entry for Chuwi Vi8 (CWI506) tablet
Add an accelerometer orientation entry for the Chuwi Vi8 (CWI506) tablet.
Alan Jenkins [Tue, 19 Dec 2017 20:22:05 +0000 (20:22 +0000)]
man: User=, Group= *never* work for mount units (#7602)
Old text:
> Note that the User= and
> Group= options are not particularly useful for mount units specifying a
> "Type=" option or using configuration not specified in /etc/fstab;
> mount(8) will refuse options that are not listed in /etc/fstab if it is
> not run as UID 0.
However I recently learnt the following:
> The mount program does not read the /etc/fstab file if both device
> and dir are specified.
Therefore, if both device and dir are specified, the `user` or `users`
options in `fstab` will not have any effect. Run as a normal user,
you will always see
mount: only root can do that
Fix the explanation in the man page.
Also make sure to markup User= and Group= with <varname>.
Zbigniew Jędrzejewski-Szmek [Tue, 19 Dec 2017 18:31:55 +0000 (19:31 +0100)]
Merge pull request #7697 from yuwata/fix-man-exec-no-new-priv
man: LockPersonality= implies NoNewPrivileges=
Zbigniew Jędrzejewski-Szmek [Tue, 19 Dec 2017 14:12:50 +0000 (15:12 +0100)]
sd-bus: drop check for selinux before calling getsockopt(SO_PEERSEC)
Quoting Lennart Poettering in
https://github.com/systemd/systemd/pull/6464#issuecomment-
319029293:
> If the kernel allows us to query that data we should also be Ok with passing
> it on to our own caller, regardless if selinux is technically on or off...
The advantage is that this allows gcc to be smarter and reduce linkage:
(before)$ ldd build/libnss_systemd.so.2
linux-vdso.so.1 (0x00007ffeb46ff000)
librt.so.1 => /lib64/librt.so.1 (0x00007f2f60da6000)
libcap.so.2 => /lib64/libcap.so.2 (0x00007f2f60ba1000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f2f60978000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f2f60759000)
libc.so.6 => /lib64/libc.so.6 (0x00007f2f60374000)
/lib64/ld-linux-x86-64.so.2 (0x00007f2f61294000)
libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x00007f2f600f0000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f2f5feec000)
(after )$ ldd build/libnss_systemd.so.2
linux-vdso.so.1 (0x00007ffe5f543000)
librt.so.1 => /lib64/librt.so.1 (0x00007f427dcaa000)
libcap.so.2 => /lib64/libcap.so.2 (0x00007f427daa5000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f427d886000)
libc.so.6 => /lib64/libc.so.6 (0x00007f427d4a1000)
/lib64/ld-linux-x86-64.so.2 (0x00007f427e196000)
Note that this only works in conjuction with the previous commit: either
of the two commits alone does not have the desired effect on linkage.
Replaces #6464.