Lennart Poettering [Tue, 13 Jan 2015 18:48:19 +0000 (19:48 +0100)]
networkd: introduce an AddressFamilyBoolean enum type
This introduces am AddressFamilyBoolean type that works more or less
like a booleaan, but can optionally turn on/off things for ipv4 and ipv6
independently. THis also ports the DHCP field over to it.
Lennart Poettering [Tue, 13 Jan 2015 18:43:16 +0000 (19:43 +0100)]
journald: allow zero length datagrams again
This undoes a small part of
13790add4bf648fed816361794d8277a75253410
which was erroneously added, given that zero length datagrams are OK,
and hence zero length reads on a SOCK_DGRAM be no means mean EOF.
Lennart Poettering [Tue, 13 Jan 2015 18:42:02 +0000 (19:42 +0100)]
nspawn: add "-n" shortcut for "--network-veth"
Now that networkd's IP masquerading support means that running
containers with "--network-veth" will provide network access out of the
box for the container, let's add a shortcut "-n" for it, to make it
easily accessible.
Jan Engelhardt [Mon, 12 Jan 2015 19:43:14 +0000 (20:43 +0100)]
doc: add cross-references between systemd.{link, netdev, network}
Tom Gundersen [Tue, 13 Jan 2015 17:23:53 +0000 (18:23 +0100)]
doc: network - add comment about default prefix size
Should hopefully make it clear that this is not some magic value, just the default we picked.
Suggested by Jan Engelhardt.
Daniel Mack [Tue, 13 Jan 2015 14:50:15 +0000 (15:50 +0100)]
fw-util: fix errno typo for !HAVE_LIBIPTC
Patrik Flykt [Tue, 13 Jan 2015 12:27:48 +0000 (14:27 +0200)]
TODO: DHCPv6 Information Request has been implemented
Lennart Poettering [Tue, 13 Jan 2015 12:54:19 +0000 (13:54 +0100)]
update TODO
Lennart Poettering [Tue, 13 Jan 2015 12:53:32 +0000 (13:53 +0100)]
machined: refuse certain operation on non-container machines, since they cannot work elsewhere
Lennart Poettering [Tue, 13 Jan 2015 12:52:49 +0000 (13:52 +0100)]
import: make sure we don't mangle file ownerships with the local passwd database when untarring
Lennart Poettering [Tue, 13 Jan 2015 12:51:51 +0000 (13:51 +0100)]
nspawn: add new option "--port=" for exposing container ports on the local host
This exposes an IP port on the container as local port using DNAT.
Lennart Poettering [Tue, 13 Jan 2015 12:47:08 +0000 (13:47 +0100)]
networkd: add minimal IP forwarding and masquerading support to .network files
This adds two new settings to networkd's .network files:
IPForwarding=yes and IPMasquerade=yes. The former controls the
"forwarding" sysctl setting of the interface, thus controlling whether
IP forwarding shall be enabled on the specific interface. The latter
controls whether a firewall rule shall be installed that exposes traffic
coming from the interface as coming from the local host to all other
interfaces.
This also enables both options by default for container network
interfaces, thus making "systemd-nspawn --network-veth" have network
connectivity out of the box.
Lennart Poettering [Tue, 13 Jan 2015 12:44:30 +0000 (13:44 +0100)]
shared: add minimal firewall manipulation helpers for establishing NAT rules, using libiptc
Martin Pitt [Tue, 13 Jan 2015 06:06:31 +0000 (07:06 +0100)]
core: Fix EACCES check for OOM adjustments
Commit 3bd5c3 added a check for EACCES, but missed the minus sign.
Zbigniew Jędrzejewski-Szmek [Tue, 13 Jan 2015 00:15:02 +0000 (19:15 -0500)]
Remove some fixed items from TODO
Ronny Chevalier [Mon, 12 Jan 2015 21:19:34 +0000 (22:19 +0100)]
zsh-completion: add missing completions for systemd-tmpfiles
Ronny Chevalier [Mon, 12 Jan 2015 21:09:29 +0000 (22:09 +0100)]
zsh-completion: add missing completions for systemd-run
Ronny Chevalier [Mon, 12 Jan 2015 20:43:45 +0000 (21:43 +0100)]
zsh-completion: add missing completions for systemd-analyze
Ronny Chevalier [Mon, 12 Jan 2015 20:31:45 +0000 (21:31 +0100)]
zsh-completion: add missing -M completion for timedatectl
Ronny Chevalier [Mon, 12 Jan 2015 20:26:27 +0000 (21:26 +0100)]
zsh-completion: add missing completions for coredumpctl
David Herrmann [Mon, 12 Jan 2015 17:25:11 +0000 (18:25 +0100)]
TODO: update
Tom Gundersen [Sat, 10 Jan 2015 00:11:54 +0000 (01:11 +0100)]
udev: link_config - modernize a bit and fix leakes
Not all of the link_config struct was getting freed.
Tom Gundersen [Fri, 9 Jan 2015 23:33:46 +0000 (00:33 +0100)]
network-intenal: user _cleanup_ macro in parse_ifname
Zbigniew Jędrzejewski-Szmek [Mon, 12 Jan 2015 17:14:59 +0000 (12:14 -0500)]
core/mount: remove "fail" again
deb6120920 'man: there's actually no "fail" fstab option, but only
"nofail" removed it from our documentation, which I missed.
fstab(5) only mentions "auto", "noauto", and "nofail". Stick to
those three.
Daniel Mack [Mon, 12 Jan 2015 17:15:18 +0000 (18:15 +0100)]
sd-bus: sync kdbus.h (API break)
Just a simple variable rename, and a dropped flag that sd-bus didn't make
use of.
Daniel Mack [Mon, 12 Jan 2015 12:46:39 +0000 (13:46 +0100)]
core/mount: use isempty() to check for empty strings
strempty() will return an empty string in case the input parameter is
a NULL pointer. The correct test to check for an empty string is
isempty(), so use that instead.
This fixes a regression from commit 17a1c59 ("core/mount: filter out
noauto,auto,nofail,fail options").
Carlos Garnacho [Sun, 11 Jan 2015 19:47:19 +0000 (20:47 +0100)]
udev: Add builtin/rule to export evdev information as udev properties
This rule is only run on tablet/touchscreen devices, and extracts their size
in millimeters, as it can be found out through their struct input_absinfo.
The first usecase is exporting device size from tablets/touchscreens. This
may be useful to separate policy and application at the time of mapping
these devices to the available outputs in windowing environments that don't
offer that information as readily (eg. Wayland). This way the compositor can
stay deterministic, and the mix-and-match heuristics are performed outside.
Conceivably, size/resolution information can be changed through EVIOCSABS
anywhere else, but we're only interested in values prior to any calibration,
this rule is thus only run on "add", and no tracking of changes is performed.
This should only remain a problem if calibration were automatically applied
by an earlier udev rule (read: don't).
v2: Folded rationale into commit log, made a builtin, set properties
on device nodes themselves
v3: Use inline function instead of macro for mm. size calculation,
use DECIMAL_STR_MAX, other code style issues
v4: Made rule more selective
v5: Minor style issues, renamed to a more generic builtin, refined
rule further.
Rafael Ferreira [Sun, 11 Jan 2015 23:11:42 +0000 (18:11 -0500)]
catalog: add pt_BR translation
https://bugs.freedesktop.org/show_bug.cgi?id=88271
Rafael Ferreira [Sat, 10 Jan 2015 15:33:13 +0000 (13:33 -0200)]
po: add Brazilian Portuguese translation
https://bugs.freedesktop.org/show_bug.cgi?id=88271
Zbigniew Jędrzejewski-Szmek [Mon, 12 Jan 2015 04:40:46 +0000 (23:40 -0500)]
fstab-util: fix priority parsing and add test
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 22:21:17 +0000 (17:21 -0500)]
shared/util: respect buffer boundary on incomplete escape sequences
cunescape_length_with_prefix() is called with the length as an
argument, so it cannot rely on the buffer being NUL terminated.
Move the length check before accessing the memory.
When an incomplete escape sequence was given at the end of the
buffer, c_l_w_p() would read past the end of the buffer. Fix this
and add a test.
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 21:57:02 +0000 (16:57 -0500)]
core/load-fragment: avoid allocating 0 bytes when given an invalid command
With a command line like "@/something" we would allocate an array with
0 elements. Avoid that, and add a test too.
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 21:52:50 +0000 (16:52 -0500)]
test-unit-file: don't access out-of-bounds memory
Fixes an error introduced by me when the test was added.
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 05:27:37 +0000 (00:27 -0500)]
core/mount: filter out noauto,auto,nofail,fail options
We passed the full option string from fstab to /bin/mount. It would in
turn pass the full option string to its helper, if it needed to invoke
one. Some helpers would ignore things like "nofail", but others would
be confused. We could try to get all helpers to ignore those
"meta-options", but it seems better to simply filter them out.
In our model, /bin/mount simply has no business in knowing whether the
mount was configured as fail or nofail, auto or noauto, in the
fstab. If systemd tells invokes a command to mount something, and it
fails, it should always return an error. It seems cleaner to filter
out the option, since then there's no doubt how the command should
behave.
https://bugzilla.redhat.com/show_bug.cgi?id=1177823
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 05:04:00 +0000 (00:04 -0500)]
Support negated fstab options
We would ignore options like "fail" and "auto", and for any option
which takes a value the first assignment would win. Repeated and
options equivalent to the default are rarely used, but they have been
documented forever, and people might use them. Especially on the
kernel command line it is easier to append a repeated or negated
option at the end.
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 04:06:52 +0000 (23:06 -0500)]
cryptsetup-generator: remove duplicated function
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 03:59:44 +0000 (22:59 -0500)]
fstab-util: detect out-of-range pri= assignments
We would silently ignore them. One would have to be crazy
to do assign an out of range value, but simply ignoring it
bothers me.
Zbigniew Jędrzejewski-Szmek [Sun, 11 Jan 2015 22:35:31 +0000 (17:35 -0500)]
.gitignore: add new tests and sort tests alphabetically
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 21:58:29 +0000 (16:58 -0500)]
Add new function to filter fstab options
This fixes parsing of options in shared/generator.c. Existing code
had some issues:
- it would treate whitespace and semicolons as seperators. fstab(5)
is pretty clear that only commas matter. And the syntax does
not allow for spaces to be inserted in the field in fstab.
Whitespace might be escaped, but then it should not seperate
options. Treat whitespace and semicolons as any other character.
- it assumed that x-systemd.device-timeout would always be followed
by "=". But this is not guaranteed, hasmntopt will return this
option even if there's no value. Uninitialized memory could be read.
- some error paths would log, and inconsistently, some would just
return an error code.
Filtering is split out to a separate function and tests are added.
Similar code paths in other places are adjusted to use the new function.
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 18:34:37 +0000 (13:34 -0500)]
network: apply static addresses in specified order
https://bugs.freedesktop.org/show_bug.cgi?id=83270
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 18:34:01 +0000 (13:34 -0500)]
shared/list: add LIST_APPEND
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 04:34:21 +0000 (23:34 -0500)]
path-lookup: allow /run to override /etc in generator search
Generators are different than unit files: they are never automatically
generated, so there's no point in allowing /etc to override /run. On
the other hand, overriding /etc might be useful in some cases.
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 04:29:33 +0000 (23:29 -0500)]
test-path-lookup: add simple test for path lookup functions
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 02:21:12 +0000 (21:21 -0500)]
test-util: make sure that masking and overriding works
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 01:47:25 +0000 (20:47 -0500)]
Implement masking and overriding of generators
Sometimes it is necessary to stop a generator from running. Either
because of a bug, or for testing, or some other reason. The only way
to do that would be to rename or chmod the generator binary, which is
inconvenient and does not survive upgrades. Allow masking and
overriding generators similarly to units and other configuration
files.
For the systemd instance, masking would be more common, rather than
overriding generators. For the user instances, it may also be useful
for users to have generators in $XDG_CONFIG_HOME to augment or
override system-wide generators.
Directories are searched according to the usual scheme (/usr/lib,
/usr/local/lib, /run, /etc), and files with the same name in higher
priority directories override files with the same name in lower
priority directories. Empty files and links to /dev/null mask a given
name.
https://bugs.freedesktop.org/show_bug.cgi?id=87230
Zbigniew Jędrzejewski-Szmek [Thu, 8 Jan 2015 22:30:07 +0000 (17:30 -0500)]
Simplify execute_directory()
Remove the optional sepearate opening of the directory,
it would be just too complicated with the change to
multiple directories.
Move the middle of execute_directory() to a seperate
function to make it easier to grok.
David Herrmann [Sun, 11 Jan 2015 16:23:24 +0000 (17:23 +0100)]
bus-proxy: implement 'at_console'
The 'at_console' policy-category allows to apply policy-items to clients
depending on whether they're run from within a valid user-session or not.
We use sd_uid_get_seats() to check whether a user has a valid seat (which
excludes remote-sessions like ssh).
David Herrmann [Sun, 11 Jan 2015 14:27:18 +0000 (15:27 +0100)]
bus-proxy: print message direction in policy logs
Make sure to print "dbus-1 to kernel" or "kernel to dbus-1" in policy logs
to better diagnose the situation.
David Herrmann [Sun, 11 Jan 2015 14:14:14 +0000 (15:14 +0100)]
bus-proxy: fix receiver policy on dbus-1 to kdbus signals
If a dbus-1 client sends a broadcasted signal via the bus-proxy to kdbus,
the bus-proxy has no idea who the receiver is. Classic dbus-daemon has
bus-access and can perform policy checks for each receiver, but we cant.
Instead, we know the kernel will perform receiver policy checks for
broadcasts, so we can skip the policy check and just push it into the
kernel.
This fixes wpa_supplicant which has DENY rules on receive_type=signal for
non-root. As we never know the target, we always DENY all broadcasts from
wpa_supplicant.
Note that will still perform receiver-policy checks for signals that we
get from the kernel back to us. In those cases, we know the receiver
(which is us).
David Herrmann [Sun, 11 Jan 2015 13:54:33 +0000 (14:54 +0100)]
bus-proxy: fix swapped path/interface debug messages
The policy debug messages swapped "path=" and "interface=", fix this.
David Herrmann [Sun, 11 Jan 2015 13:13:19 +0000 (14:13 +0100)]
bus-proxy: fix policy for expected/non-expected reply tags
dbus-1 distinguishes expected and non-expected replies. An expected reply
is a reply that is sent as answer to a previously forwarded method-call
before the timeout fires. Those replies are, by default, forwarded and
DENY policy tags are ignored on them (unless explicitly stated otherwise).
We don't track reply-windows in the bus-proxy as the kernel already does
this. Furthermore, the kernel prohibits any non-expected replies (which
breaks dbus-1, but it was an odd feature, anyway).
Therefore, skip policy checks on replies and always let the kernel deal
with it!
To be correct, we should still process DENY tags marked as
send_expected_reply=true (which is *NOT* the default!). However, so far we
don't parse those attributes, and no-one really uses it, so lets not
implement it for now. It's marked as TODO if anyone feels like fixing it.
David Herrmann [Sun, 11 Jan 2015 02:13:46 +0000 (03:13 +0100)]
log: fix log_full_errno() with custom facilities
Make sure to extract the log-priority when comparing against
max-log-level, otherwise, we will always drop those messages.
This fixes bus-proxyd to properly send warnings on policy blocks.
Kay Sievers [Sat, 10 Jan 2015 23:25:31 +0000 (00:25 +0100)]
build-sys: fix link-order and avoid "label" functions in libsystemd-shared
Kay Sievers [Sat, 10 Jan 2015 03:16:18 +0000 (04:16 +0100)]
kdbus.h: update
Kay Sievers [Fri, 9 Jan 2015 20:23:48 +0000 (21:23 +0100)]
push xorg information to the systemd --user instance
Lennart Poettering [Fri, 9 Jan 2015 20:32:29 +0000 (21:32 +0100)]
update TODO
Lennart Poettering [Fri, 9 Jan 2015 20:30:39 +0000 (21:30 +0100)]
loginctl: make session/user arguments optional for a number commands, and imply calling session/user instead
This turns "lock-session", "activate", "unlock-session",
"enable-linger", "disable-linger" into commands that take no argument,
optionally in which case the callers session/user is implied.
Lennart Poettering [Fri, 9 Jan 2015 20:25:23 +0000 (21:25 +0100)]
sd-bus: even if we need a cookie when sending a message there's no need to needlessly send it if we don't actually need it
Lennart Poettering [Fri, 9 Jan 2015 20:24:37 +0000 (21:24 +0100)]
bus-proxy: make sure we have creds when two legacy clients talk to each other
Lennart Poettering [Fri, 9 Jan 2015 19:28:32 +0000 (20:28 +0100)]
hwdb: add Kay's Laser Mouse to the dpi database
Lennart Poettering [Fri, 9 Jan 2015 18:30:01 +0000 (19:30 +0100)]
bus-proxy-test: show parsed system/session policy
Lennart Poettering [Fri, 9 Jan 2015 18:28:18 +0000 (19:28 +0100)]
bus-proxy: eat up "*" matches, they are pointless
Lennart Poettering [Fri, 9 Jan 2015 18:25:23 +0000 (19:25 +0100)]
bus-proxy: dbus-daemon implies that connections from UIDs that are identical to the bus owner should be allowed
Hence, copy this behaviour for bus-proxy too.
Kay Sievers [Fri, 9 Jan 2015 17:46:08 +0000 (18:46 +0100)]
bus-proxyd: xml - consider empty tags as recv
Lennart Poettering [Fri, 9 Jan 2015 17:34:46 +0000 (18:34 +0100)]
bus-proxy: make sure sure eavesdrop= XML attributes are properly handled
Lennart Poettering [Fri, 9 Jan 2015 15:25:47 +0000 (16:25 +0100)]
logind: unify how we cast between uid_t and pointers for hashmap keys
Lennart Poettering [Fri, 9 Jan 2015 15:14:19 +0000 (16:14 +0100)]
logind: when a bus call is done on a session, user or seat, optionally determine them from the caller credentials
More specifically, if an operation is requested on a session with an
empty name, the caller's session is used. If an operation is requested
on a seat with an empty name, the seat of the caller's session is used.
Finally, if an operation on the user with UID -1 is requested, the user
of the client's session is used (and not the UID of the client!).
Lennart Poettering [Fri, 9 Jan 2015 00:47:03 +0000 (01:47 +0100)]
man: document that 'loginctl activate' only takes a single argument
Lennart Poettering [Fri, 9 Jan 2015 00:44:40 +0000 (01:44 +0100)]
logind: include "self" object links in dbus introspection
Makes "busctl introspect" a lot more fun.
Lennart Poettering [Fri, 9 Jan 2015 00:43:53 +0000 (01:43 +0100)]
loginctl: make "loginctl session-status" without session ID show the caller's session status
Similar for user-status and seat-status.
Lennart Poettering [Thu, 8 Jan 2015 23:13:33 +0000 (00:13 +0100)]
core: modernize execution code a bit
Among other things, avoid log_struct() unless we really need it.
Also, use "r" as variable to store function errors in, instead of "err".
"r" is pretty much what we use everywhere else, hence using the same
here make sense.
FInally, in the child, when we want to log, make sure to open the
logging framework first, since it is explicitly closed in preparation
for the exec().
Zbigniew Jędrzejewski-Szmek [Fri, 9 Jan 2015 14:09:59 +0000 (09:09 -0500)]
journal: do not check for number of files
Now that we bump rlimit, we do not really know how many files
we can open. Remove the check.
https://bugzilla.redhat.com/show_bug.cgi?id=1179980
Ronny Chevalier [Fri, 9 Jan 2015 12:54:19 +0000 (13:54 +0100)]
systemctl: add missing output modes to help message
Ronny Chevalier [Fri, 9 Jan 2015 12:53:23 +0000 (13:53 +0100)]
shell-completion: add missing output modes
https://bugs.freedesktop.org/show_bug.cgi?id=88216
David Herrmann [Thu, 8 Jan 2015 23:53:00 +0000 (00:53 +0100)]
bus: append bloom-filter to all signals
Make sure to append bloom-filters to all signal-messages, not only
broadcasts.
Peter Hutterer [Thu, 8 Jan 2015 23:33:27 +0000 (09:33 +1000)]
hwdb: add missing line between the G400 entries
Error, DATA expected but got 'mouse:usb:v046dpc24c:name:Logitech G400s Optical
Gaming Mouse:' in '/etc/udev/hwdb.d/70-mouse.hwdb':
Error, MATCH expected but got ' MOUSE_DPI=400@1000 *800@1000 2000@1000
4000@1000' in '/etc/udev/hwdb.d/70-mouse.hwdb':
Introduced in
6366e349
Lennart Poettering [Thu, 8 Jan 2015 22:21:01 +0000 (23:21 +0100)]
core: check both EPERM and EACCES for OOM adjustments
Lennart Poettering [Thu, 8 Jan 2015 22:13:28 +0000 (23:13 +0100)]
update TODO
Lennart Poettering [Thu, 8 Jan 2015 22:12:16 +0000 (23:12 +0100)]
core: make EPERM errors when applying OOM adjustment for forked processes non-fatal
This should be useful for user namespaces.
Lennart Poettering [Thu, 8 Jan 2015 22:11:35 +0000 (23:11 +0100)]
loginctl: port to generic verbs.h API
Lennart Poettering [Thu, 8 Jan 2015 18:16:44 +0000 (19:16 +0100)]
man: remove references to systemadm from systemctl man page
The tool is badly maintained and we shouldn't refence such old cruft.
Lennart Poettering [Thu, 8 Jan 2015 18:15:49 +0000 (19:15 +0100)]
machined: when cloning a raw disk image, also set the NOCOW flag
Lennart Poettering [Thu, 8 Jan 2015 18:14:08 +0000 (19:14 +0100)]
man: bring machinectl man page up-to-date
Lennart Poettering [Thu, 8 Jan 2015 17:08:40 +0000 (18:08 +0100)]
man: bring systemctl man page and --help text into the same order
Lennart Poettering [Thu, 8 Jan 2015 17:07:25 +0000 (18:07 +0100)]
man: add the same command sections to the man page as the --help text shows
Lennart Poettering [Thu, 8 Jan 2015 14:33:46 +0000 (15:33 +0100)]
systemctl,loginctl: start polkit agent for all polkit enabled operations
Lennart Poettering [Thu, 8 Jan 2015 14:23:54 +0000 (15:23 +0100)]
machinectl: given that machinectl invokes a number of polkit enabled methods, start the polkit agent on terminals
Lennart Poettering [Thu, 8 Jan 2015 14:09:12 +0000 (15:09 +0100)]
machinectl: show most recent log output in "machinectl status", too
Lennart Poettering [Thu, 8 Jan 2015 13:38:52 +0000 (14:38 +0100)]
loginctl: show the 10 most recent log user/session log lines in "loginctl user-status" and "loginctl session-status"
Peter Hutterer [Thu, 8 Jan 2015 21:53:55 +0000 (07:53 +1000)]
hwdb: note that we care about the maximum frequency in MOUSE_DPI
Devices with dynamic frequency scaling adjust the frequency as needed. For
those we only care about the maximum frequency, not the various in betweens.
https://bugs.freedesktop.org/show_bug.cgi?id=87435#c8
Zbigniew Jędrzejewski-Szmek [Thu, 8 Jan 2015 21:45:34 +0000 (16:45 -0500)]
hwdb: adjust max frequency of Logitech RX 250
https://bugs.freedesktop.org/show_bug.cgi?id=87435
Carlos Morata Castillo [Thu, 8 Jan 2015 20:51:49 +0000 (21:51 +0100)]
bash-completion: systemd-nspawn update
*Autocompletion for dirs, doesn't leave until you press space.
*Added tmpfs, volatile and network-macvlan options.
I tried with the SELinux options with seinfo(setools-console), but too
messy to get it right. Even Daniel Walsh haven't done it yet. :)
Andrey Chaser [Thu, 8 Jan 2015 21:21:06 +0000 (16:21 -0500)]
cryptsetup: support header= option
https://bugs.freedesktop.org/show_bug.cgi?id=66396
Dave Reisner [Sat, 20 Dec 2014 03:59:51 +0000 (22:59 -0500)]
test-verbs: add unit tests for verbs minilib
Dave Reisner [Thu, 8 Jan 2015 02:54:45 +0000 (21:54 -0500)]
doc: fix stale references to systemd-verify
This was subsumed into systemd-analyze back in
142c4ecaa98.
Peter Mattern [Sat, 20 Dec 2014 14:09:19 +0000 (15:09 +0100)]
man: add hostnamed chassis type "embedded" to machine-info(5)
man machine-info lacks hostnamed chassis type "embedded" as introduced in 218. The following lines should fix this.
Zbigniew Jędrzejewski-Szmek [Thu, 8 Jan 2015 19:45:57 +0000 (14:45 -0500)]
man: mention where timesyncd keeps the timestamp
David Herrmann [Thu, 8 Jan 2015 20:06:14 +0000 (21:06 +0100)]
bus-proxyd: fix EPERM on replies
Imagine a kdbus peer sending a method-call without EXPECT_REPLY set
through the proxy to a dbus1 peer. The proxy turns the missing
EXPECT_REPLY flag into a dbus1 NO_REPLY_EXPECTED flag. However, if the
receipient ignores that flag (valid dbus1 behavior) and sends a reply, the
proxy will try to forward it to the original peer. This will fail with
EPERM as the kernel didn't track the reply.
We have two options now: Either we ignore EPERM for reply messages, or we
track reply-windows in the proxy so we can properly ignore replies if
EXPECT_REPLY wasn't set.
This commit chose the first option: ignore EPERM for replies. The only
down-side is that replies without matching method call will no longer be
forwarded by the proxy. This works on dbus1, though.
Nobody sane does this, so lets ignore it.
David Herrmann [Thu, 8 Jan 2015 19:58:59 +0000 (20:58 +0100)]
bus-proxyd: optimize replies if they're not requested
If a caller does not request a reply, dont send it. This skips message
creation and speeds up NO_REPLY_EXPECTED cases. Note that sd-bus still
handles this case internally, but if we handle it in bus-proxyd, we can
skip the whole message creation step.
David Herrmann [Thu, 8 Jan 2015 16:43:48 +0000 (17:43 +0100)]
bus-proxy: augment credentials from /proc for cmdline update
dbus1 does not provide cmdline, so we have to augment our credentials from
/proc to beautify the bus-proxyd cmdline. We dont use this for anything
but beautification, so there shouldn't be any problems due to /proc
pid-recycling races.
This fixes bus-proxyd to no longer display 'xxxxxxxxxxxxxxxxxxxxxxxxxxx'
in its cmdline.