SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
57,095 Commits 2 Branches 1 Tag
58270534bf5da170ad75b5b41244cd7e761cf660
Commit Graph
57095 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Yu Watanabe bae62bee43 Merge pull request #21346 from yuwata/network-token-prefixstable 
network: extend Token=prefixstable setting
 2021-11-15 08:16:48 +09:00
Evgeny Vereshchagin 6f593f7226 Merge pull request #21366 from evverx/ci-follow-ups-3 
ci: LGPLv2+ify dependapot config and codeql action and tighten codeql and labeler even more
 2021-11-15 00:02:21 +03:00
Evgeny Vereshchagin 510afa460a ci: tighten codeql and labeler even more 
by moving the read permissions to the top level and
granting additional permissions to the specific jobs.
It should help to prevent new jobs that could be added
there eventually from having write access to resources they
most likely would never need.
 2021-11-14 10:51:07 +00:00
Evgeny Vereshchagin e44a47d186 ci: pin the codeql action to SHAs 
It's a follow-up to https://github.com/systemd/systemd/pull/21316.

Judging by https://github.com/evverx/systemd/pull/36, Dependabot
supports their release cycle
 2021-11-14 10:42:04 +00:00
Evgeny Vereshchagin e7a966915d ci: mimic the "restricted" mode 
Judging by https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
it should be enough to grant the "read contents" permission to
most of our actions. The "read metadata" permission is set impliciclty
somewhere and can't be set via the "permissions" setting:
```
The workflow is not valid. .github/workflows/linter.yml (Line: 14, Col: 3): Unexpected value 'metadata'
```
 2021-11-14 10:41:06 +00:00
Evgeny Vereshchagin b3a1fb795a ci: LGPLv2+ify dependapot config and codeql action 2021-11-14 09:48:22 +00:00
Yu Watanabe b07d8145e1 network: include route or nexthop flags in the debug logs 2021-11-14 14:41:37 +09:00
Yu Watanabe 18b23bd493 network: introduce route_flags_to_string_alloc() 2021-11-14 14:41:37 +09:00
Yu Watanabe 344b3cff36 network: split networkd-route.[ch] 2021-11-14 14:41:37 +09:00
Yu Watanabe 10b1c3cd24 Merge pull request #21355 from bluca/coverity 
Coverity and CodeQL fixes
 2021-11-14 14:18:08 +09:00
Zbigniew Jędrzejewski-Szmek b1bcda702c meson: drop mode setting on systemd-update-helper 
With a6d1760024, this shouldn't be
necessary anymore.
 2021-11-14 13:54:47 +09:00
Jan Janssen 4cf8a6092e meson: Use fs module 
Turns out that meson provides a fs module since 0.53.0, making it unnecessary
to call out to test.
 2021-11-14 13:54:27 +09:00
Zbigniew Jędrzejewski-Szmek 4728625490 seccomp: move mprotect to @default 
With glibc-2.34.9000-17.fc36.x86_64, dynamically programs newly fail in early
init with a restrictive syscall filter that does not include @system-service.
I think this is caused by 2dd87703d4386f2776c5b5f375a494c91d7f9fe4:

Author: Florian Weimer <fweimer@redhat.com>
Date:   Mon May 10 10:31:41 2021 +0200

    nptl: Move changing of stack permissions into ld.so

    All the stack lists are now in _rtld_global, so it is possible
    to change stack permissions directly from there, instead of
    calling into libpthread to do the change.

It seems that this call will now be very widely used, so let's just move it to
default to avoid too many failures.
 2021-11-14 13:53:50 +09:00
Yu Watanabe 7a2e124b08 test-network: add testcases for Token=prefixstable with UUID 2021-11-14 13:29:44 +09:00
Yu Watanabe f2a3a133ec network: make Token=prefixstable optionally take secret key 
Closes #21345.
 2021-11-14 13:29:40 +09:00
Yu Watanabe b7ac128430 network: do not recall link_handle_bound_by_list() or so when the interface is reconfigured 2021-11-14 11:52:49 +09:00
Yu Watanabe 52c3bc708f event-util: introduce event_reset_time_relative() 2021-11-14 10:32:06 +09:00
Yu Watanabe c463ae74ae man: fix indentation 
Also use variablelist tag for listing Token= options.
 2021-11-14 10:30:33 +09:00
Luca Boccassi b798490f77 test-strxcpyx: check result of snprintf 2021-11-14 01:28:42 +00:00
Evgeny Vereshchagin 311956ccd9 ci: tighten several GHActions a bit more 
with https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions#permissions
 2021-11-13 22:17:21 +03:00
Luca Boccassi 0a040e6419 sd-event: one more assert when turning off an event source 
CID#1465866
 2021-11-13 19:12:11 +00:00
Luca Boccassi 25bb459e39 journal-remote: more handling of sd_event_source_set_enabled failures 
But avoid clobbering the return value if it works

CID#1465793
CID#1465794
 2021-11-13 19:11:55 +00:00
Luca Boccassi 76a7c636a9 Merge pull request #21341 from yuwata/network-route-flags 
network: manage route and nexthop flags
 2021-11-13 18:43:50 +00:00
dependabot[bot] 5ae4964028 build(deps): bump actions/checkout from 2 to 2.4.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...ec3a7ce113134d7a93b817d10a8272cb61118579)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-13 16:45:32 +03:00
Frantisek Sumsal 66a41360b4 Merge pull request #21342 from evverx/dependabot-error 
ci: try to fix a Dependabot error
 2021-11-13 09:35:51 +00:00
Lennart Poettering a4e27f051a Merge pull request #21337 from poettering/uid-alloc-range-split 
split out UID allocation range stuff from user-record.c/h (i.e. login.defs parsing)
 2021-11-13 08:13:44 +01:00
Lennart Poettering b4d4596ffb test: rename test-user-record → test-uid-alloc-range 
It doesn't actually test any of the JSON stuff, hence name it
test-uid-alloc-range, since it tests the stuff from uid-alloc-range.
 2021-11-13 08:10:13 +01:00
Lennart Poettering 0fa90f7e04 uid-alloc-range: maintain only a single default alloc range structure 
Either way we need these four values, let's simplify the code by keeping
only one const struct of this around.
 2021-11-13 08:10:13 +01:00
Lennart Poettering b085d22406 shared: split out UID allocation range stuff from user-record.h 
user-record.[ch] are about the UserRecord JSON stuff, and the UID
allocation range stuff (i.e. login.defs handling) is a very different
thing, and complex enough on its own, let's give it its own c/h files.

No code changes, just some splitting out of code.
 2021-11-13 08:10:11 +01:00
Lennart Poettering bb562024a5 homework: sync dir after moving file in, not before 2021-11-13 08:05:02 +01:00
Lennart Poettering 1ca5a6c76e Merge pull request #21333 from poettering/homed-report-fs-and-access-mode 
homed: report actual home dir access mode and fs type in effect
 2021-11-13 08:04:33 +01:00
Lennart Poettering b1beb00406 Merge pull request #21331 from poettering/luks-extra-mount-options 
homed: allow per-user additional LUKS mount options
 2021-11-13 08:03:55 +01:00
Jan Janssen 9cc6154608 test: Create convenience macros to declare tests 2021-11-13 09:20:24 +09:00
Frantisek Sumsal c76a838589 ci: run the unit_tests and mkosi jobs on stable branches as well 
To provide more coverage for the systemd-stable repo.

See: https://github.com/systemd/systemd-stable/issues/24
 2021-11-13 09:09:54 +09:00
Yu Watanabe 1de88f3048 udev/net: read hardware address from netlink message 2021-11-13 08:53:33 +09:00
Yu Watanabe 49c351a8ac networkctl: read permanent hardware address from netlink message 2021-11-13 08:53:33 +09:00
Yu Watanabe 8a77e245df network: also logs iftype, kind, and permanent hardware address 2021-11-13 08:53:33 +09:00
Yu Watanabe 4fea97a61d network: read permanent hardware address from netlink message 
The attribute was introduced by f74877a5457d34d604dba6dbbb13c4c05bac8b93 (v5.6),
so, fallback to ethtool if failed.
 2021-11-13 08:53:33 +09:00
Yu Watanabe ed9fa69f1c ethtool-util: introduce ethtool_get_permanent_hw_addr() 
And replaces all ethtool_get_permanent_macaddr() with it.
 2021-11-13 08:53:33 +09:00
Yu Watanabe 57ae8cd812 networkctl: introduce dump_hw_address() 2021-11-13 08:53:33 +09:00
Lennart Poettering 6b945d7031 homework: split out password cache logic into its own .c/.h file 
Preparation for extending it further down the line.
 2021-11-13 00:22:16 +01:00
Yu Watanabe 17f8d8f9b4 network: manage route and nexthop flags 2021-11-13 08:16:06 +09:00
Yu Watanabe f505de80d2 network: mention that errors will be ignored 2021-11-13 08:16:06 +09:00
Yu Watanabe 5bfee718d2 sd-netlink: introduce sd_rtnl_message_nexthop_get_flags() 2021-11-13 08:16:06 +09:00
Yu Watanabe 45b1299a1e sd-netlink: clear previous flags or state by _set_flags() or _set_state() 
Otherwise, there is no way to reset the previous value.
 2021-11-13 08:16:06 +09:00
Lennart Poettering 0881991c32 Merge pull request #21329 from poettering/homed-compress-default 
homed: default to btrfs compression
 2021-11-12 22:55:14 +01:00
Lennart Poettering e0c311b1aa update TODO 2021-11-12 22:45:03 +01:00
Lennart Poettering 67a6d39953 doc: document the two new accessMode/fileSystemType fields 2021-11-12 22:44:54 +01:00
Lennart Poettering b0a7fb152a homed: include actual fs type + access mode as part of "status" section of user record 
So far we have two properties for the intended fstype + access mode of
home dirs, but they might differ from what is actually used (because the
user record changed from the home dir, after it was created, or vice
versa). Let's hence add these props also to the "status" section of user
record, which report the status quo. That way we can always show the
correct, current settings.
 2021-11-12 22:44:54 +01:00
Lennart Poettering f639f60ed5 homed: allow querying disk free status separetely from generating JSON from it 
We later want to query per-home free status for implementing automatic
grow/shrink of home directories, hence let's separate the JSON
generation from the disk free status determination.
 2021-11-12 22:44:54 +01:00