systemd

SymbX/systemd

Fork 0

3853a40f39 README: mention binutils requirement, bump LLVM requirement for ELF note macros Yu Watanabe 2026-07-05 05:56:20 +09:00
a74b3e1778 dlopen-note: move all dlopen notes to dlopen-note.h Yu Watanabe 2026-07-06 12:16:41 +09:00
aa0db003cf sd-dlopen: introduce SD_ELF_NOTE_DLOPEN_ANCHORED() macro Yu Watanabe 2026-07-05 05:51:27 +09:00
19d562b0be test: drop explicit dlopen notes from test executables Yu Watanabe 2026-07-07 09:10:57 +09:00
0740a5f1c7 bpf-util: merge two dlopen_bpf() declaration Yu Watanabe 2026-07-07 08:02:01 +09:00
6aa24f1c8a meson: add -ffunction-sections and -fdata-sections to compiler flags Yu Watanabe 2026-07-05 01:32:27 +09:00
39d00e1d20 meson: support building .standalone variants for shared modules Yu Watanabe 2026-07-09 04:30:10 +09:00
1f76654f94 meson: automate .standalone variant generation via extended 'install' field Yu Watanabe 2026-07-09 04:16:02 +09:00
4bda7547f4 import: drop redundant oci-util.c from sources Yu Watanabe 2026-07-06 23:40:01 +09:00
e9dd6f6dc4 dns-configuration: make dns_scope_free() static Yu Watanabe 2026-07-06 23:38:01 +09:00
70cd612797 creds: Use ERRNO_IS_NEG_TPM2_UNSEAL_BAD_PCR Kai Lüke 2026-07-06 22:58:39 +09:00
e2b89bc3d5 cryptsetup: Give NV index missing its own error code Kai Lüke 2026-07-06 22:54:38 +09:00
7fb6b9c2a2 cryptsetup: Skip tokens with JSON parsing errors Kai Lüke 2026-07-02 22:49:46 +09:00
14c0b8414f cryptsetup: Reduce log level for TPM mismatches Kai Lüke 2026-06-29 23:26:37 +09:00
d09e025b85 cryptsetup: Remap bad PCR set early to EPERM Kai Lüke 2026-04-20 23:07:13 +09:00
19eac27e62 TEST-70-TPM2.cryptsetup: Make sure we iterate over foreign tokens Kai Lüke 2026-04-20 22:38:13 +09:00
0f1ee40986 tpm2-util: Also report EREMOTE if key is for different parent template Kai Lüke 2026-04-20 22:22:16 +09:00
ac5f02cc76 tpm2-util: For NV index errors report EREMOTE to be able to continue Kai Lüke 2026-04-20 20:27:59 +09:00
93bc6a3415 tpm2-util: Align tpm2_import with tpm2_load to report on foreign keys Kai Lüke 2026-04-20 18:45:22 +09:00
9213de2e06 cryptsetup/cryptenroll: Iterate over TPM tokens when they don't match Kai Lüke 2026-04-20 15:55:57 +09:00
58d38f6360 cryptsetup: Report mismatching TPM token error separately Kai Lüke 2026-04-20 15:47:45 +09:00
924552cfba stub: Set up all detected consoles Kai Lüke 2026-07-09 17:35:42 +09:00
f6a7a9ec3d mount-util/sysext: Clone sub mounts as private to preserve nested ones Kai Lüke 2026-04-29 23:53:40 +09:00
7eabeaed0e mount-util: Compact list of sub mounts after dropping Kai Lüke 2026-04-29 22:04:51 +09:00
b5102ae48e Translations update from Fedora Weblate (#42956) Luca Boccassi 2026-07-09 21:09:47 +01:00
307f29adf5 po: Translated using Weblate (Serbian) Марко Костић (Marko Kostić) 2026-07-09 19:17:57 +00:00
a1e8507740 po: Translated using Weblate (Portuguese (Brazil)) Rafael Fontenelle 2026-07-09 19:17:57 +00:00
e5b09b9472 po: Translated using Weblate (Czech) Pavel Borecki 2026-07-09 19:17:57 +00:00
ae6ae99e23 po: Translated using Weblate (Czech) Honza Hejzl 2026-07-09 19:17:56 +00:00
9d947d0a2a basic: update in_first_boot() to return an error Michael Vogt 2026-07-03 17:28:45 +02:00
eb8227c671 core: make /run/systemd/first-boot available earlier Michael Vogt 2026-07-03 17:37:31 +02:00
cb7f95ff5f credentials: add policy that can allow key=null creds from the ESP Michael Vogt 2026-06-10 13:02:01 +02:00
add910a838 sysupdate: handle slashes after pattern fields dongshengyuan 2026-07-06 13:40:26 +08:00
c944af8459 tree-wide: fix some double word errors like "the the" Michael Vogt 2026-07-09 12:34:01 +02:00
944b160007 core: connect to sockets in credential directories dongshengyuan 2026-07-06 14:05:28 +08:00
973b429eb4 units: properly wait for swtpm to finish before the initrd transition Lennart Poettering 2026-07-09 11:26:36 +02:00
fb15860051 sysupdate: load a per-component *.component file (#42935) Lennart Poettering 2026-07-09 12:21:28 +02:00
9c21e058d1 Assorted logind hardening fixes flagged by kres (#42879) Lennart Poettering 2026-07-09 11:07:06 +02:00
8cbae52fc9 pcrlock: handle piped PE input dongshengyuan 2026-07-06 12:55:40 +08:00
4839cb914e dissect: do not follow copy-to directory symlinks dongshengyuan 2026-07-07 19:11:06 +08:00
04915e3d37 Assorted coverity fixes (#42933) Lennart Poettering 2026-07-09 11:01:03 +02:00
af8700527a shared: fix DNS RR wire cache and EFI boot option bounds checks (#42926) Lennart Poettering 2026-07-09 11:00:29 +02:00
5f44e242ae Assorted journal/portable hardening fixes flagged by kres (#42915) Lennart Poettering 2026-07-09 10:59:02 +02:00
76c697f1fb journal-remote: do not create /var/log/journal/remote (#42937) Lennart Poettering 2026-07-09 10:55:13 +02:00
2f76050c5c stub: Prefer graphical console over virtio detection heuristic Kai Lüke 2026-07-09 00:25:11 +09:00
ce043cdfdb logind: set session->started before seat_read_active_vt() call countgitmick 2026-04-09 00:53:03 -07:00
2a438fdea2 sysupdate: show component description and enablement in 'systemd-sysupdate components' call Lennart Poettering 2026-06-24 12:18:31 +02:00
291e6118f5 sysupdate: optionally load a per-component *.component file Lennart Poettering 2026-06-18 18:02:37 +02:00
fc99dc4c42 journal-remote: do not create /var/log/journal/remote Christian Hesse 2026-07-08 19:37:38 +02:00
7e9af6ba05 mkosi: update arch commit reference to f884cb080300eeb273fb7549fd0aa19bb6142c21 Christian Hesse 2026-07-09 09:08:45 +02:00
d13b002aec efi-api: validate boot option device path lengths dongshengyuan 2026-07-09 08:39:03 +08:00
ccae5c7a4f dns-rr: invalidate wire format after changing ttl dongshengyuan 2026-07-09 08:35:03 +08:00
001c5dfdf5 tmpfiles: add hardening in glob_item_recursively Andres Beltran 2026-07-08 19:06:16 +00:00
c5b508b0c7 socket-util: fix socket_xattr_supported() in initramfs Michal Sekletar 2026-06-30 15:19:27 +02:00
052ff5fb5d resolved: honour per-link DNSOverTLS=yes for certificate verification Luca Boccassi 2026-04-24 22:03:17 +01:00
feda6f31d8 pcrlock: add vl method for list-components Luca Boccassi 2026-07-06 19:52:13 +01:00
9ae50c78cc sd-event: use CLOCK_BOOTTIME for rate limits Frantisek Sumsal 2026-07-07 17:22:49 +02:00
0168b13fb3 creds-util: log when we remove a secret from a different machine Lương Việt Hoàng 2026-07-07 13:38:13 +07:00
7967b6b6d5 sd-device: check fd validity before using in sendmsg in test Luca Boccassi 2026-07-08 10:57:39 +01:00
34a2223344 dns-rr: fix SOA JSON fields dongshengyuan 2026-07-08 14:03:15 +08:00
da9a330dfd fsck: don't apply invalid mode or repair values dongshengyuan 2026-07-08 16:53:30 +08:00
1b03303998 bootctl: Fix prepend when installing systemd-boot for the first time Elliot Berman 2026-07-07 16:28:10 -07:00
6248f1b774 sd-bus: voidify bus_match_remove call Luca Boccassi 2026-07-08 10:54:00 +01:00
636b173035 measure-smbios: bound type 1 length before zeroing wake-up type Syed Mohammed Nayyar 2026-07-05 13:39:51 +05:30
231fddc337 core: support stdio fd passing in io.systemd.Unit.StartTransient Lars Sjöstrom 2026-07-02 10:08:03 +02:00
d9c0d7974e sysinstall: Disable timeout for connection with repart Julian Sparber 2026-07-07 18:12:44 +02:00
626161a24c gitignore: add .envrc, .direnv Paul Meyer 2026-07-07 18:31:53 +02:00
6b325a3613 Adjust naming of meson variables and allow systemd-report* binaries to be built standalone (#42874) Zbigniew Jędrzejewski-Szmek 2026-07-07 21:35:41 +02:00
c70f09853e portable: fix marker_matches_images() and propagate errors correctly Luca Boccassi 2026-07-07 11:16:42 +01:00
a77bd724d3 journald: replace existing syslog event source before reopening Luca Boccassi 2026-07-07 14:11:25 +01:00
0b4a90765c journald: pin the sending client's context across native message dispatch Luca Boccassi 2026-07-07 11:58:14 +01:00
a977bf4d06 portable: detect drop-in-only attachments dongshengyuan 2026-07-04 17:05:33 +08:00
93aadbf968 sbsign: write unaligned signature size into WIN_CERTIFICATE header Vsevolod Kozlov 2026-07-06 13:40:53 +03:00
d8c1f1d105 pull: honor sync for OCI artifacts dongshengyuan 2026-07-03 15:17:53 +08:00
366fa466d2 copy: keep replaced target after publish errors dongshengyuan 2026-07-03 14:44:40 +08:00
e785d81c1b mkosi: update fedora commit reference to 57cbcf979ce2dd872a871c59e87d2c65dfa996e6 Zbigniew Jędrzejewski-Szmek 2026-07-07 18:37:12 +02:00
f731334d84 meson: use modern syntax for dict checks Zbigniew Jędrzejewski-Szmek 2026-07-03 15:32:02 +02:00
9155c0a5b9 meson: build .standalone versions of the report binaries Zbigniew Jędrzejewski-Szmek 2026-07-03 13:28:36 +02:00
aad1e61010 meson: adjust naming of '*extract*' variables Zbigniew Jędrzejewski-Szmek 2026-07-03 13:41:53 +02:00
f00ccf93b7 meson: rename extract+objects to export+import Zbigniew Jędrzejewski-Szmek 2026-07-03 12:30:09 +02:00
88b51ff974 meson: move 'conditions' to the end Zbigniew Jędrzejewski-Szmek 2026-07-03 12:07:02 +02:00
47af1efe40 mkosi: update fedora commit reference to 45c16dd369c961b70664e473552def34d5469664 Zbigniew Jędrzejewski-Szmek 2026-07-07 12:18:28 +02:00
e20ab6642c Assorted libsystemd/network hardening fixes flagged by kres (#42865) Zbigniew Jędrzejewski-Szmek 2026-07-07 13:27:57 +02:00
5f6ad50d20 hwdb: add MSI Claw 8 EX AI+ CG3EM to keyboard hwdb list Matthew Schwartz 2026-06-23 16:54:51 -07:00
6bfd3424e8 journalctl: add follow mode to the varlink method Michael Vogt 2026-07-02 15:27:06 +02:00
7ab48accb2 vmspawn: discover firmware descriptors, opt-in secure boot support for coco (#42876) Lennart Poettering 2026-07-07 08:55:10 +02:00
da111b3341 test: add case for repart with EncryptedVolume blank name Dara Adib 2026-07-06 23:37:10 -04:00
46c15e88e0 resolve: anchor the service browser from mDNS maintenance queries Luca Boccassi 2026-07-02 22:20:31 +01:00
134df27257 network: implement refcounting for SR-IOV objects Luca Boccassi 2026-07-02 22:06:25 +01:00
7eb7d46f97 udev: clear event back-pointer when freeing a worker Luca Boccassi 2026-07-02 20:55:53 +01:00
b7b1303209 sd-bus: drop half-registered vtable members on failure Luca Boccassi 2026-07-02 20:08:14 +01:00
058b0de7bf sd-bus: re-check match_callbacks_modified in the argNhas value loop Luca Boccassi 2026-07-02 19:26:23 +01:00
25c016f472 sd-netlink: disconnect the slot on async/match error paths Luca Boccassi 2026-07-02 18:58:11 +01:00
9cae6d9c56 network: initialize dot_servers before CLEANUP_ARRAY Luca Boccassi 2026-07-02 18:47:27 +01:00
a8d8009b7a udev: track remaining buffer size across $links devlinks Luca Boccassi 2026-07-02 18:37:24 +01:00
7003a9bf09 sd-device: avoid 32-bit overflow in the monitor properties bounds check Luca Boccassi 2026-07-02 18:26:57 +01:00
87e57c52c1 hashmap: honor the value destructor in set_ensure_consume() Luca Boccassi 2026-07-02 18:02:10 +01:00
2f72db10d9 sd-device: bound the tag filter BPF program size Luca Boccassi 2026-07-02 17:55:37 +01:00
6f2f5b96f1 vmspawn: allow opt-in Secure Boot firmware for coco Paul Meyer 2026-07-03 15:52:10 +02:00
2f95c17a2f vmspawn: verify selected fw matches requirements Paul Meyer 2026-07-02 18:04:36 +02:00