summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* systemctl: support auditd.service betterZbigniew Jędrzejewski-Szmek2015-02-231-23/+23
| | | | | | | | | | We would print the filename header before trying to open the file. But since the header was printed to stdout, and the error to stderr, the error would appear on the terminal before the header. It is cleaner to open the file first, then and only then print the header. Also exit on first error. We shouldn't report success if we were unable to open a file.
* systemctl: check validity of PID we receivedZbigniew Jędrzejewski-Szmek2015-02-231-1/+4
|
* resolved: use == for comparing unsigned against zeroZbigniew Jędrzejewski-Szmek2015-02-231-2/+4
|
* tmpfiles: avoid creating duplicate acl entriesZbigniew Jędrzejewski-Szmek2015-02-232-2/+81
| | | | | | | | https://bugs.freedesktop.org/show_bug.cgi?id=89202 https://bugs.debian.org/778656 Status quo ante can be restored with: getfacl -p /var/log/journal/`cat /etc/machine-id`|grep -v '^#'|sort -u|sudo setfacl --set-file=- /var/log/journal/`cat /etc/machine-id`
* libsystemd: revert one hunk of duplicate ifdef removalZbigniew Jędrzejewski-Szmek2015-02-231-0/+1
| | | | | | | | | | | This change exposed a bug in kernel headers: /usr/include/linux/if_bridge.h:184:20: error: field 'ip6' has incomplete type struct in6_addr ip6; ^ /usr/include/linux/if_tunnel.h:76:19: error: field 'prefix' has incomplete type struct in6_addr prefix; ^
* man: explain time units in tmpfilesZbigniew Jędrzejewski-Szmek2015-02-231-15/+14
| | | | https://bugzilla.redhat.com/show_bug.cgi?id=1195294
* sd-bus, shared: fix includesDaniel Mack2015-02-242-0/+2
| | | | | | | | | | | | | | | | Include <sys/socket.h> from util.h and bus-message.h in order to build errors like the ones below on kdbus enabled systems. ./src/shared/util.h:976:32: warning: its scope is only this definition or declaration, which is probably not what you want In file included from src/libsystemd/sd-bus/bus-kernel.c:37:0: ./src/shared/util.h:1081:28: warning: 'struct msghdr' declared inside parameter list void cmsg_close_all(struct msghdr *mh); ^ CC src/libsystemd/sd-bus/libsystemd_la-bus-creds.lo In file included from src/libsystemd/sd-bus/bus-creds.c:25:0: ./src/shared/util.h:976:32: warning: 'struct ucred' declared inside parameter list int getpeercred(int fd, struct ucred *ucred); ^
* remove unused includesThomas Hindoe Paaboel Andersen2015-02-23479-1286/+11
| | | | | | This patch removes includes that are not used. The removals were found with include-what-you-use which checks if any of the symbols from a header is in use.
* nspawn: fix whitespace and typo in partition table blurbJan Synacek2015-02-231-1/+1
|
* po: update French translationSylvain Plantefève2015-02-221-8/+68
|
* build-sys: bootctl depends on HAVE_BLKIDMarcel Holtmann2015-02-221-0/+2
|
* logind: fix a typo in a polkit descriptionPiotr Drąg2015-02-211-1/+1
|
* README: add pkg-config to required deps for autogenPeter Waller2015-02-201-0/+1
| | | | Otherwise, several macros are undefined.
* man: make bootup graph consistentChris Morin2015-02-201-1/+1
|
* build-sys: update gitignoreKay Sievers2015-02-201-1/+1
|
* shared: handle unnamed sockets in socket_address_equal()Michal Schmidt2015-02-201-0/+4
| | | | | | Make sure we don't inspect sun_path of unnamed sockets. Since we cannot know if two unnamed sockets' adresses refer to the same socket, just return false.
* shared: avoid semi-duplicating socket_address_equal()Michal Schmidt2015-02-201-17/+1
| | | | | Just call socket_address_equal() from socket_address_matches_fd() instead of implementing similar comparing of addresses.
* shared: use SocketAddress in socket_address_matches_fd()Michal Schmidt2015-02-201-18/+18
| | | | Cleanup. No behavior change.
* core, shared: in deserializing, match same files reached via different pathsMichal Schmidt2015-02-204-9/+12
| | | | | | | | | | | | | | | | | | | | | | | When dbus.socket is updated like this: -ListenStream=/var/run/dbus/system_bus_socket +ListenStream=/run/dbus/system_bus_socket ... and daemon-reload is performed, bad things happen. During deserialization systemd does not recognize that the two paths refer to the same named socket and replaces the socket file with a new one. As a result, applications hang when they try talking to dbus. Fix this by finding a match not only when the path names are equal, but also when they point to the same inode. In socket_address_equal() it is necessary to move the address size comparison into the abstract sockets branch. For path name sockets the comparison must not be done and for other families it is redundant (their sizes are constant and checked by socket_address_verify()). FIFOs and special files can also have multiple pathnames, so compare the inodes for them as well. Note that previously the pathname checks used streq_ptr(), but the paths cannot be NULL. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1186018
* bus: sync with kdbus.git (ABI break)David Herrmann2015-02-192-3/+6
| | | | | | This syncs up the new KDBUS_CMD_CONN_INFO behavior: - attach-flags are passed in .attach_flags, instead of directly merged with the command flags.
* man: add newlines to the pull-raw example in machinectl(1)Benjamin Franzke2015-02-191-5/+6
| | | | They were removed in commit 798d3a52 ("Reindent man pages to 2ch").
* nspawn: chown basic device nodes to userns rootLennart Poettering2015-02-191-0/+8
|
* nspawn: fix build on non-selinux systemsLennart Poettering2015-02-191-4/+1
|
* nspawn: add basic user namespacing supportLennart Poettering2015-02-191-39/+164
| | | | | (This is incomplete, /proc and /sys are still owned by root from outside the container, not inside)
* sysv-generator: fix wrong "Overwriting existing symlink" warningsMartin Pitt2015-02-192-1/+8
| | | | | | | | Fix result testing of is_symlink() to ignore negative results, which happen if the file name does not exist at all. In this case we do not want a warning and unlink the non-existing link. https://bugs.debian.org/778700
* systemd-sysv-generator test: Adjust to dropped runlevelN.target mappingMartin Pitt2015-02-191-14/+14
| | | | | Commit d5d8429a dropped the explicit runlevelN.target mapping. Adjust the tests accordingly to explicitly state the expected targets instead of runlevels.
* hwdb: fix ThinkPad X* Tablet special keysLubomir Rintel2015-02-191-2/+1
| | | | | | | | | | | | | | | ThinkPad tablet firmware has DMI product name and version reversed: Handle 0x0001, DMI type 1, 27 bytes System Information Manufacturer: LENOVO Product Name: 7762AS1 Version: ThinkPad X61 Tablet Serial Number: LKZCDH2 UUID: 6ADBC681-4FC9-11CB-844F-B47CB9210BE2 Wake-up Type: Power Switch SKU Number: Not Specified Family: ThinkPad X61 Tablet
* po: update Russian translationSergey Ptashnick2015-02-191-4/+4
| | | | Add strings for fsckd.
* update TODOLennart Poettering2015-02-181-16/+0
|
* nspawn: when connected to pipes for stdin/stdout, pass them as-is to PID 1Lennart Poettering2015-02-185-55/+74
| | | | | | | | | | | Previously we always invoked the container PID 1 on /dev/console of the container. With this change we do so only if nspawn was invoked interactively (i.e. its stdin/stdout was connected to a TTY). In all other cases we directly pass through the fds unmodified. This has the benefit that nspawn can be added into shell pipelines. https://bugs.freedesktop.org/show_bug.cgi?id=87732
* systemd-boot: fix alignment of version in tableThomas Hindoe Paaboel Andersen2015-02-181-1/+1
|
* everywhere: remove configurability of sysv runlevel to target mappingLennart Poettering2015-02-187-51/+34
| | | | | | | | | | | | | | | With this change runlevel 2, 3, 4 are mapped to multi-user.target for good, and 5 to graphical.target. This was already the previous mapping but is now no longer reconfigurable, but hard-coded into the core. This should generally simplify things, but also fix one bug: the sysv-generator previously generated symlinks to runlevel[2-5].target units, which possibly weren't picked up if these aliases were otherwise only referenced by the real names "multi-user.target" and "graphical.target". We keep compat aliases "runlevel[2345].target" arround for cases where this target name is explicitly requested.
* update TODOLennart Poettering2015-02-181-6/+0
|
* run: if we fail to set a property assignment then really failLennart Poettering2015-02-181-7/+2
|
* nspawn: add support for --property= to set scope propertiesLennart Poettering2015-02-182-7/+47
| | | | This is similar to systemd-run's --property= setting.
* shared: introduce cmsg_close_all() callLennart Poettering2015-02-186-11/+28
| | | | | | | | | The call iterates through cmsg list and closes all fds passed via SCM_RIGHTS. This patch also ensures the call is used wherever appropriate, where we might get spurious fds sent and we should better close them, then leave them lying around.
* systemctl: allow interactive authorization for all bus callsLennart Poettering2015-02-181-173/+74
| | | | | | | | | Make use of the new sd_bus_set_allow_interactive_authorization() call to globally enable interactive authorization. Also, turn on PK agent for more calls. This allows us to make use of the sd_bus_call_method() convencience helper at more places.
* systemctl: let's make use of FOREACH_STRING() where we canLennart Poettering2015-02-182-19/+19
|
* core: rework policykit hookupLennart Poettering2015-02-188-150/+220
| | | | | | | | | - Always issue selinux access check as early as possible, and PK check as late as possible. - Introduce a new policykit action for altering environment - Open most remaining bus calls to unprivileged clients via PK
* po: Update German translationMartin Pitt2015-02-181-5/+5
|
* Add mock fsck processDidier Roche2015-02-181-0/+27
|
* Add man page and references to it.Didier Roche2015-02-185-14/+189
| | | | | | Add man page explaining the plymouth theme protocol, usage of the daemon as well as the socket activation part. Adapt existing fsck man page.
* Add fsckd service and socket, retarget systemd-fsckDidier Roche2015-02-186-3/+38
| | | | | systemd-fsckd can be socket-activated by systemd-fsck process. Reflect that in the different unit files.
* Refresh po filesDidier Roche2015-02-1810-0/+111
| | | | | Also, add new plymouth fsckd translated strings in french. Refreshed with "make update-po".
* Translate fsckd messages for plymouthDidier Roche2015-02-182-3/+8
| | | | | | For plymouth themes not supporting i18n (like .script), send translated messages to display to user, which is equivalent to the sent machine readable data.
* Add gettext supportDidier Roche2015-02-183-0/+11
|
* Connect to plymouth and support cancellation of in progress fsckDidier Roche2015-02-183-10/+173
| | | | | | | | | | | | | | | | | | | | | | | | Try to connect and send to plymouth (if running) some checked report progress, using direct plymouth protocole. Update message is the following: fsckd:<num_devices>:<progress>:<string> * num_devices corresponds to the current number of devices being checked (int) * progress corresponds to the current minimum percentage of all devices being checked (float, from 0 to 100) * string is a translated message ready to be displayed by the plymouth theme displaying the information above. It can be overriden by plymouth themes supporting i18n. Grab in fsckd plymouth watch key Control+C, and propagate this cancel request to systemd-fsck which will terminate fsck. Send a message to signal to user what key we are grabbing for fsck cancel. Message is: fsckd-cancel-msg:<string> Where string is a translated string ready to be displayed by the plymouth theme indicating that Control+C can be used to cancel current checks. It can be overriden (matching only fsckd-cancel-msg prefix) for themes supporting i18n.
* systemd-fsck: always connect to systemd-fsckdDidier Roche2015-02-182-11/+9
| | | | | | Remove the plymouth running or show-status checks from systemd-fsck. Instead, always connect to systemd-fsckd socket, and let this one decide if we display progress or not.
* fsckd daemon for inter-fsckd communicationDidier Roche2015-02-186-57/+484
| | | | | | | | | | | | | Add systemd-fsckd multiplexer which accepts multiple systemd-fsck instances to connect to it and sends progress report. systemd-fsckd then computes and writes to /dev/console the number of devices currently being checked and the minimum fsck progress. This will be used for interactive progress report and cancelling in plymouth. systemd-fsckd stops on idle when no systemd-fsck is connected. Make the necessary changes to systemd-fsck to connect to the systemd-fsckd socket.
* test: utf8 - fix utf16 tests on BE machinesTom Gundersen2015-02-181-1/+1
|