| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | ci: temporarily set -Wno-deprecated-declarations in Packit | Zbigniew Jędrzejewski-Szmek | 2021-12-01 | 1 | -0/+3 |
| | | | | | | | to suppress OpenSSL 3.0 deprecation warnings (until a proper solution is deployed): RSA_free, EC_KEY_free, RSA_set0_key, RSA_size, EVP_PKEY_assign, EC_KEY_set_group, and others are deprecated. | ||||
| * | resolved: do not use BN_dup() unnecessarilly | Zbigniew Jędrzejewski-Szmek | 2021-12-01 | 1 | -2/+4 |
| | | | | | Suggested in https://github.com/systemd/systemd/pull/21170#discussion_r738696794 | ||||
| * | port string_hashsum from libgcrypt to openssl^gcrypt | Zbigniew Jędrzejewski-Szmek | 2021-12-01 | 13 | -37/+96 |
| | | | | | | | | | This allows resolved and importd to be built without libgcrypt. Note that we now say either 'cryptographic library' or 'cryptolib'. Co-authored-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | ||||
| * | basic/openssl-util: Add sha256 hash wrapper | Kevin Kuehler | 2021-12-01 | 2 | -0/+39 |
| | | |||||
| * | resolve: Port nsec3 code to openssl^gcrypt | Kevin Kuehler | 2021-12-01 | 1 | -14/+59 |
| | | | | | Co-authored-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | ||||
| * | resolve: Port dnskey verification by ds to openssl^gcrypt | Kevin Kuehler | 2021-11-30 | 1 | -24/+73 |
| | | | | | Co-authored-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | ||||
| * | resolve: Port dnssec verify from gcrypt to openssl^gcrypt | Kevin Kuehler | 2021-11-30 | 4 | -71/+260 |
| | | | | | Co-authored-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | ||||
| * | resolved: split out function to hash signature | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 1 | -74/+79 |
| | | | | | dnssec_verify_rrset() is just too long. | ||||
| * | resolved: split out function to generate signature | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 1 | -47/+78 |
| | | | | | dnssec_verify_rrset() is just too long. | ||||
| * | resolve: Add coverage for dnssec ecdsa (rfc6605) | Kevin Kuehler | 2021-11-30 | 1 | -2/+187 |
| | | |||||
| * | import: port importd from libgcrypt to openssl^gcrypt | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 4 | -19/+59 |
| | | | | | | | | | | | | | | | | | | | This is heavily based on Kevin Kuehler's work, but the logic is also significantly changed: instead of a straighforward port to openssl, both versions of the code are kept, and at compile time we pick one or the other. The code is purposefully kept "dumb" — the idea is that the libgcrypt codepaths are only temporary and will be removed after everybody upgrades to openssl 3. Thus, a separate abstraction layer is not introduced. Instead, very simple ifdefs are used to select one or the other. If we added an abstraction layer, we'd have to remove it again afterwards, and it don't think it makes sense to do that for a temporary solution. Co-authored-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> # Conflicts: # meson.build | ||||
| * | meson: add config setting to select between openssl and gcrypt | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 3 | -0/+51 |
| | | | | | This is not pretty, but it is supposed to be only a temporary measure. | ||||
| * | repart: port to our home-grown hmac_sha256 | Kevin Kuehler | 2021-11-30 | 1 | -15/+8 |
| | | | | | | | | | | | | | This reduces dependencies. The speed of the code here is uimportant, because we hash only a tiny amount of input data. Debian and Ubuntu currently build without repart, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976959 > repart requires openssl and so far I tried to avoid linking against > both gnutls and openssl. Co-authored-by: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | ||||
| * | network: address: drop deprecated temporary address | Yu Watanabe | 2021-11-30 | 1 | -0/+14 |
| | | | | | Fixes #19838. | ||||
| * | Merge pull request #21578 from bluca/json_spec | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 1 | -7/+12 |
| |\ | | | | | docs: clarify JSON terms in COREDUMP_PACKAGE_METADATA | ||||
| | * | docs: clarify ELF note usage in COREDUMP_PACKAGE_METADATA | Luca Boccassi | 2021-11-30 | 1 | -4/+4 |
| | | | |||||
| | * | docs: clarify JSON terms in COREDUMP_PACKAGE_METADATA | Luca Boccassi | 2021-11-30 | 1 | -4/+9 |
| | | | |||||
| * | | sysusers: avoid creating spurious "nobody" group | Rasmus Villemoes | 2021-11-30 | 1 | -2/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On distros using Debian's base-passwd, the name of the group with gid 65534 is nogroup. Currently, systemd-sysusers creates a spurious "nobody" group systemd-sysusers[243]: Creating group nobody with gid 996 That's both confusing and redundant, as the nobody user still has primary group 65534 aka nogroup, and the nobody group simply goes completely unused. So explicitly specify the primary group of the nobody user, and add a line ensuring that that group exists. This is not a problem for Debian (or Ubuntu) itself, as they add their own version of basic.conf in their systemd build logic. But it appears on for example Yocto/OpenEmbedded. | ||||
| * | | Merge pull request #21573 from keszybz/one-more-table-sort | Luca Boccassi | 2021-11-30 | 3 | -39/+40 |
| |\ \ | | | | | | | One more table sort and man page updates | ||||
| | * | | basic/architecture: sort and reindent one more table | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 1 | -31/+32 |
| | | | | | | | | | | | | | No idea why I didn't do this one in the previous round. | ||||
| | * | | man: fix typo | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 1 | -5/+5 |
| | | | | | | | | | | | | | Follow-up for c896eb7ad65f4dbe968fdf01fa51e9ef4d2d11ed. | ||||
| | * | | man: add missing plural and reorder sentence | Zbigniew Jędrzejewski-Szmek | 2021-11-30 | 1 | -3/+3 |
| | | | | | | | | | | | | | | | | | | | We shouldn't explain what a value does before listing valid values… Follow-up for 4f1ac4a38d1adf08f849af1a61c7a248932d8e13. | ||||
| * | | | Merge pull request #21559 from jcg190701/main | Yu Watanabe | 2021-11-30 | 1 | -2/+6 |
| |\ \ \ | |/ / |/| | | fix ConditionDirectoryNotEmpty when it comes to a Non-directory file | ||||
| | * | | fix ConditionPathIsReadWrite when path does not exist. | jiangchuangang | 2021-11-30 | 1 | -1/+5 |
| | | | | |||||
| | * | | fix ConditionDirectoryNotEmpty when it comes to a Non-directory file | jiangchuangang | 2021-11-30 | 1 | -1/+1 |
| | | | | |||||
| * | | | tree-wide: fix typo | Yu Watanabe | 2021-11-30 | 16 | -19/+20 |
| | |/ |/| | |||||
| * | | Merge pull request #21568 from yuwata/network-fix-json-format | Luca Boccassi | 2021-11-30 | 3 | -6/+27 |
| |\ \ | | | | | | | network: fix json format | ||||
| | * | | test-network: add more basic tests for network json formats | Yu Watanabe | 2021-11-30 | 1 | -0/+21 |
| | | | | |||||
| | * | | network: json: add missing initialization | Yu Watanabe | 2021-11-30 | 1 | -1/+1 |
| | | | | | | | | | | | | | Fixes CID#1466513. | ||||
| | * | | json: make JSON_BUILD_PAIR_IN_ADDR_NON_NULL or friends handle NULL gracefully | Yu Watanabe | 2021-11-30 | 1 | -5/+5 |
| | | | | | | | | | | | | | Fixes #21567. | ||||
| * | | | man: fix copy-and-paste mistake | Yu Watanabe | 2021-11-30 | 1 | -3/+0 |
| |/ / | |||||
| * | | systemctl: display how long a systemd service will run (#21494) | Amir Omidi | 2021-11-30 | 1 | -2/+13 |
| | | | |||||
| * | | Merge pull request #21532 from yuwata/network-json-more | Zbigniew Jędrzejewski-Szmek | 2021-11-29 | 6 | -17/+754 |
| |\ \ | | | | | | | network: add more json entries | ||||
| | * | | network: json: append DNS misc settings | Yu Watanabe | 2021-11-26 | 1 | -0/+107 |
| | | | | |||||
| | * | | network: json: append DNSSEC negative trust anchors | Yu Watanabe | 2021-11-26 | 1 | -0/+62 |
| | | | | |||||
| | * | | network: json: append domains | Yu Watanabe | 2021-11-26 | 1 | -0/+160 |
| | | | | |||||
| | * | | network: make both search_domains and route_domains allocated on DBus call | Yu Watanabe | 2021-11-26 | 1 | -7/+9 |
| | | | | |||||
| | * | | network: json: append SIP server information | Yu Watanabe | 2021-11-26 | 1 | -0/+59 |
| | | | | |||||
| | * | | network: json: append NTP server information | Yu Watanabe | 2021-11-26 | 1 | -0/+164 |
| | | | | |||||
| | * | | network: json: append DNS server information | Yu Watanabe | 2021-11-26 | 1 | -0/+170 |
| | | | | |||||
| | * | | network: introduce NETWORK_CONFIG_SOURCE_RUNTIME | Yu Watanabe | 2021-11-26 | 2 | -0/+2 |
| | | | | |||||
| | * | | dhcp6: make sd_dhcp6_lease_get_dns() and friends accepts NULL | Yu Watanabe | 2021-11-26 | 1 | -7/+9 |
| | | | | |||||
| | * | | dhcp: make sd_dhcp_lease_get_servers() accepts NULL | Yu Watanabe | 2021-11-26 | 1 | -2/+3 |
| | | | | |||||
| | * | | network: json: add several entries for wait-online | Yu Watanabe | 2021-11-26 | 1 | -1/+9 |
| | | | | |||||
| * | | | Merge pull request #21541 from bluca/analyze_security_profile | Zbigniew Jędrzejewski-Szmek | 2021-11-29 | 10 | -34/+126 |
| |\ \ \ | | | | | | | | | analyze: add --profile switch to security verb | ||||
| | * | | | analyze: add --profile switch to security verb | Luca Boccassi | 2021-11-26 | 7 | -2/+89 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allows to pass a portable profile when doing offline analysis of units. Especially useful for analyzing portable images, since a lot of the security-relevant settings in those cases come from the profiles, but they are not shipped in the portable images. | ||||
| | * | | | shell-completion: add offline/root/image to systemd-analyze | Luca Boccassi | 2021-11-26 | 1 | -2/+5 |
| | | | | | |||||
| | * | | | portable: move profile search helper to path-lookup | Luca Boccassi | 2021-11-26 | 3 | -31/+33 |
| | | | | | | | | | | | | | | | | | Will be used in systemd-analyze later | ||||
| * | | | | sd-boot: Fix assert failure in random-seed.c | Jan Janssen | 2021-11-30 | 1 | -6/+3 |
| | | | | | | | | | | | | | | | | | Fixes: #21556 | ||||
| * | | | | unit: add jobs that were skipped because of ratelimit back to run_queue | Michal Sekletar | 2021-11-30 | 1 | -0/+9 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Assumption in edc027b was that job we first skipped because of active ratelimit is still in run_queue. Hence we trigger the queue and dispatch it in the next iteration. Actually we remove jobs from run_queue in job_run_and_invalidate() before we call unit_start(). Hence if we want to attempt to run the job again in the future we need to add it back to run_queue. Fixes #21458 | ||||
 |
index : delta/systemd.git | |
| github.com: systemd/systemd.git |
| summaryrefslogtreecommitdiff |