systemd

ac-power

…

analyze

analyze: don't treat user-scope services as running as root in security

2026-06-26 02:42:24 +09:00

ask-password

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

backlight

tree-wide: use device_get_sysattr_unsigned() and friends

2026-05-18 02:55:56 +09:00

basic

locale-util: drop libintl dependency

2026-06-29 23:22:41 +09:00

battery-check

…

binfmt

…

bless-boot

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

boot

boot/random-seed: create \loader\ dir if missing when seeding

2026-06-30 13:26:59 +01:00

bootctl

bootctl: add link-auto/LinkAuto and auto-link on completed system update

2026-06-24 13:05:34 +02:00

bpf

Various dlopen/linking cleanups from #42100 (#42166 )

2026-05-19 08:54:27 +02:00

busctl

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

cgls

…

cgtop

cgtop: use cg helper to parse pids.current

2026-05-28 20:55:01 +01:00

core

exec-invoke: fix wrong errno in log_error_errno for setenv failure

2026-06-30 17:11:32 +08:00

coredump

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

coverage

…

creds

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

cryptenroll

cryptenroll: refuse reading a key longer than 4 MiB

2026-06-27 17:28:39 +02:00

cryptsetup

cryptsetup: Invalidate ineffective try_discover_key before trying

2026-06-19 15:23:21 +09:00

debug-generator

recurse-dir: optionally, only enumerate dentries of a specific type

2026-06-22 14:40:16 +02:00

delta

…

detect-virt

…

dissect

loop-util: shortcut block device fd when it carries no partition table

2026-06-16 00:16:05 +01:00

environment-d-generator

…

escape

…

factory-reset

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

firstboot

creds,firstboot: add support for ? and $ via credentials

2026-06-20 14:26:41 +02:00

fsck

…

fstab-generator

misc: fix minor error handling issues

2026-06-16 11:44:08 +01:00

fundamental

confidential-virt: fix comment regarding vmm.c location

2026-06-23 12:43:00 +02:00

fuzz

pe-binary: bound section data against file size, cap UKI zero-padding hash, validate optional header size

2026-05-29 04:30:48 +09:00

getty-generator

…

gpt-auto-generator

gpt-auto-generator: fix error propagation in add_root_mount()

2026-06-16 10:26:23 +02:00

growfs

growfs: downgrade dependency on libcryptsetup to optional

2026-06-23 17:28:44 +01:00

hibernate-resume

…

home

locale-util: drop libintl dependency

2026-06-29 23:22:41 +09:00

hostname

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

hwdb

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

id128

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

imds

imds: use help-util.h helpers for --help output

2026-06-22 22:03:12 +02:00

import

oci-util: fix and harden oci_registry_is_valid()

2026-06-22 21:59:15 +02:00

include

Import linux/liveupdate.h UAPI header from 7.2-rc1

2026-06-30 09:15:58 +01:00

integritysetup

generator: order cryptsetup/verity/integrity after systemd-udevd

2026-06-20 23:38:26 +02:00

journal

journal: replace gcrypt with openssl

2026-06-28 00:26:56 +09:00

journal-remote

sd-journal: drop libgcrypt dependency from libsystemd

2026-06-28 00:00:11 +09:00

kernel-install

recurse-dir: optionally, only enumerate dentries of a specific type

2026-06-22 14:40:16 +02:00

keyutil

tree-wide: Beef up openssl logging

2026-06-22 11:40:57 +02:00

libc

libc: dlsym the time64 alias for epoll_pwait2() on 32-bit _TIME_BITS=64

2026-05-24 15:00:37 +02:00

libsystemd

sd-journal: rate-limit tail timestamp refresh during iteration

2026-06-30 13:46:05 +01:00

libsystemd-network

networkd/resolved hardening fixes flagged by kres (#42736 )

2026-06-25 17:13:58 +02:00

libudev

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

locale

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

login

logind: fix typo in reboot-to-boot-loader-entry path

2026-06-29 17:46:03 +09:00

machine

machined: allow privileged users to register other users machines

2026-06-25 10:39:11 +01:00

machine-id-setup

…

measure

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

modules-load

cpu-set-util: introduce cpus_online().

2026-05-14 08:12:28 +02:00

mount

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

mountfsd

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

mstack

…

mute-console

…

network

json-util: generalize json_dispatch_address_family

2026-06-26 09:12:10 -04:00

notify

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

nspawn

Add DLOPEN macros that stamp the caller's ELF and use it to ensure executables list their dlopen dependencies (#42398 )

2026-06-02 18:05:34 +02:00

nsresourced

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

nss-resolve: use resolve-varlink-util.h helpers

2026-06-26 16:03:18 -04:00

nss-systemd

nss-systemd: avoid ELF TLS for recursion guard

2026-06-20 15:14:14 +02:00

oom

oom: use cgroup.kill if available (#42373 )

2026-06-10 21:56:01 +02:00

path

…

pcrextend

pcrextend: refuse empty measurement over Varlink

2026-06-23 07:38:32 +02:00

pcrlock

pcrlock: reject device path node shorter than its header

2026-06-25 22:11:12 +02:00

portable

portable: leave room for trailing NUL in metadata receive buffer

2026-06-30 09:18:18 +02:00

pstore

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

ptyfwd

…

quotacheck

…

random-seed

random-seed: fix wrong error variable in log_error_errno()

2026-06-15 14:16:28 +02:00

remount-fs

…

repart

repart: Sort the partition list by partition offset (#42488 )

2026-06-22 22:05:37 +02:00

reply-password

…

report

report: add systemd-report-sign-tsm backend

2026-06-22 20:42:35 +02:00

resolve

resolvectl: fix JSON reply cleanup in varlink_dump_dns_configuration

2026-06-30 17:26:41 +08:00

rfkill

tree-wide: use device_get_sysattr_safe_string()

2026-05-18 02:55:56 +09:00

rpm

…

run

run: do not munge user.slice with --slice-inherit

2026-06-30 09:51:05 +01:00

run-generator

…

sbsign

tree-wide: Beef up openssl logging

2026-06-22 11:40:57 +02:00

shared

luo-util: use new LIVEUPDATE_SESSION_GET_NAME ioctl to get session name if available

2026-06-30 09:15:58 +01:00

shutdown

shutdown: do not delay VM shutdown (#42396 )

2026-06-03 16:10:20 +02:00

sleep

tree-wide: use device_get_sysattr_unsigned() and friends

2026-05-18 02:55:56 +09:00

socket-activate

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

socket-proxy

socket-proxy: implement PROXY protocol v1

2026-05-20 04:29:59 +09:00

ssh-generator

vsock-util: allow VMADDR_CID_ANY as local CID if enabled in hwdb

2026-06-13 15:54:50 +02:00

stdio-bridge

…

storage

recurse-dir: optionally, only enumerate dentries of a specific type

2026-06-22 14:40:16 +02:00

storagetm

misc: fix minor error handling issues

2026-06-16 11:44:08 +01:00

sulogin-shell

…

sysctl

…

sysext

sysext: refresh sysexts and confexts on completed system update

2026-06-24 13:05:34 +02:00

sysinstall

shared: add a generic prompt_loop_yes_no() helper

2026-06-27 17:28:39 +02:00

system-update-generator

…

systemctl

systemctl: fix continue placement in clean-or-freeze error handling

2026-06-25 16:40:28 +08:00

systemd

journal: add catalog message for missing dlopen dep

2026-06-22 10:54:49 +01:00

sysupdate

sysupdate: Address review feedback on CheckNew varlink scaffolding

2026-06-26 22:38:57 +02:00

sysusers

sysext,sysusers: fix wrong error variable in two error paths

2026-06-17 08:32:51 +02:00

test

locale-util: drop libintl dependency

2026-06-29 23:22:41 +09:00

timedate

polkit: check if user authenticated as admin

2026-06-25 10:39:11 +01:00

timesync

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

tmpfiles

tmpfiles: do not fail when trying to apply ACL during mkosi build

2026-06-26 10:24:15 +02:00

tpm2-setup

tpm2: add SWTPM fallback test, fixes and hardening (#42722 )

2026-06-25 17:13:03 +02:00

tty-ask-password-agent

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

udev

tree-wide: relax access mode of private Varlink sockets a bit

2026-06-23 23:10:02 +02:00

ukify

ukify: honor UKI/SBAT from config files

2026-06-04 17:13:03 +02:00

update-done

…

update-utmp

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

user-sessions

…

userdb

user-record-nss: preserve valid nss lookup aliases in records

2026-06-15 16:54:35 +03:00

validatefs

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

varlinkctl

varlinkctl: add 'list-sockets' verb

2026-06-23 23:10:01 +02:00

vconsole

vconsole-util: move code to read EFI keyboard layout into generic code

2026-05-20 16:34:21 +02:00

veritysetup

veritysetup: don't measure root hash signature after unsigned fallback

2026-06-22 17:29:50 +02:00

version

…

vmspawn

vmspawn: complain loudly if we can't prepare a unix socket for virtiofsd

2026-06-28 12:52:02 +09:00

volatile-root

…

vpick

vpick: take separate root_fd and dir_fd arguments

2026-06-24 12:59:55 +02:00

xdg-autostart-generator

…