1
1
mirror of https://github.com/systemd/systemd-stable.git synced 2024-12-23 17:34:00 +03:00
Commit Graph

34191 Commits

Author SHA1 Message Date
Lennart Poettering
c3c5eeca0f Rename back to "The Boot Loader Specification" 2018-06-19 12:36:21 +02:00
Lennart Poettering
bfd88d9615 Add table of GPT identifiers 2018-06-19 12:36:21 +02:00
Lennart Poettering
5b41167575 Rename to "The Discoverable Partitions Specification" 2018-06-19 12:36:21 +02:00
Kay Sievers
0d69e91384 Drop 'fdt', 'devicetreedir', 'fdtdir' description again 2018-06-19 12:36:21 +02:00
Harald Hoyer
a69d65000a Update 'devicetreedir' description 2018-06-19 12:36:21 +02:00
Harald Hoyer
91515d280f Add fdt, devicetreedir and fdtdir 2018-06-19 12:36:21 +02:00
Kay Sievers
06614a224c Add 'devicetree' 2018-06-19 12:36:21 +02:00
Kay Sievers
4bf77b763b Update formatting 2018-06-19 12:36:21 +02:00
Colin Guthrie
d786567d09 Fix Fedora Grub2 Boot Loader Speficiation patch 2018-06-19 12:36:21 +02:00
Kay Sievers
fb6475c28f Add links 2018-06-19 12:36:21 +02:00
Harald Hoyer
9b58043453 Split paragraphs 2018-06-19 12:36:21 +02:00
Harald Hoyer
86b70d7288 fixed example file 2018-06-19 12:36:21 +02:00
Harald Hoyer
2dd8d4a144 moin2mdwn: convert page Specifications/BootLoaderSpec
[zj: change file path and name and extension]
2018-06-19 12:35:50 +02:00
Jérémy Rosen
14c1abccf0 add _AUDIT_TYPE_NAME field to audit records in the journal 2018-06-19 10:48:38 +02:00
Zbigniew Jędrzejewski-Szmek
1183320594 resolved: move dot to end of sentence
Noticed in #9285.
2018-06-19 16:14:48 +09:00
Zbigniew Jędrzejewski-Szmek
f8fde9abb5 man: avoid "predicate" in coredumpctl match description
"Predicate" might not be clear to everyone, it is a CS term.

Fixes #9324.
2018-06-19 16:14:48 +09:00
Yu Watanabe
22509a8df0 sd-bus: fix typo in comment 2018-06-19 08:44:55 +02:00
Yu Watanabe
31d99bd172 tree-wide: do not assign values if not used 2018-06-19 08:44:55 +02:00
Zbigniew Jędrzejewski-Szmek
496ab389cc
Merge pull request #9330 from yuwata/ja-po-portable
portable: update polkit messages
2018-06-19 08:37:36 +02:00
Yu Watanabe
980982da62 mount: do not output (null) in option
Fixes #9327.
2018-06-19 08:27:47 +02:00
Yu Watanabe
b909a22c73 po: update Japanese translations 2018-06-19 13:27:15 +09:00
Yu Watanabe
9c7f1abbe2 portable: update polkit messages 2018-06-19 13:21:17 +09:00
Chris Lamb
3fe910794b Correct a number of trivial typos. 2018-06-18 22:44:44 +02:00
Sergey Ptashnick
4f03608b51 po: update Russian translation
Portable service stuff.

Translated "inspect portable service" as "прочитать образ переносимой
службы" ("read the portable service image"), because there is no exact
Russian analog for "inspect" ("инспектировать" has a slightly different
meaning). I think reading (some data from) images is the main job for
bus_image_common_get_metadata and bus_image_common_get_os_release, so
this translation will be more or less correct.
2018-06-18 22:31:13 +02:00
Jérémy Rosen
ed563b609c do not filter out deprecated USER audit messages 2018-06-18 14:48:09 +02:00
Ronny Chevalier
98008caa94 shared: do not include ~ when appending syscall filters property
The method already uses a boolean argument to determine whether it is in
whitelist mode or not. The code that will parse the string of filters
does not expect the ~, since it already has the boolean argument. Thus,
it will fail to parse the list of filters.
2018-06-18 13:12:20 +02:00
petur
4b65002175 Fix orientation sensor position for Lenovo Miix 510
Looks like the Miix 510 has the same sensor and placement as the Miix 320
(put it separate for clarity)

Verified on own hardware
2018-06-18 09:48:41 +02:00
Mladen Pejaković
953d7ef2ab hwdb: fix backlash/pipe on Librem 13v3 2018-06-18 09:26:43 +02:00
Zbigniew Jędrzejewski-Szmek
db13f206db
Merge pull request #9307 from yuwata/man-sd-boot
man: use systemd-boot instead of sd-boot
2018-06-15 16:17:28 +02:00
Zbigniew Jędrzejewski-Szmek
88f375b8c2
Merge pull request #8766 from poettering/syscall-filter-service
add a new `@system-service` syscall group that is good as a starting point for whitelisting syscalls
2018-06-15 11:34:44 +02:00
Yu Watanabe
1e8c7bd55c namespace: drop protect_{home,system}_or_bool_from_string()
The functions protect_{home,system}_from_string() are not used
except for defining protect_{home,system}_or_bool_from_string().
This makes protect_{home,system}_from_string() support boolean
strings, and drops protect_{home,system}_or_bool_from_string().
2018-06-15 11:32:27 +02:00
Yu Watanabe
c779b82a50 man: re-format man page for bootctl 2018-06-15 15:40:12 +09:00
Yu Watanabe
70c8db7555 man: use systemd-boot instead of sd-boot 2018-06-15 14:27:37 +09:00
Yu Watanabe
3177e14c4d
Merge pull request #9303 from poettering/busctl-fixlets
tiny busctl fixlets
2018-06-15 12:11:44 +09:00
Zbigniew Jędrzejewski-Szmek
d69f528216 NEWS: rework the description of device naming changes
We really should try to be as precise as possible here. Saying
"your interfaces might be renamed" scares the shit of out people,
for obvious reasons. This change only touches some niche cases
fortunately, let's make this clear.
2018-06-15 12:08:25 +09:00
Lennart Poettering
61d0025d5a NEWS: update contributor list to current git 2018-06-15 12:07:57 +09:00
Iwan Timmer
f6c9c5f8ed resolved: fix error handling in resolved-dns-stream
During the transition from system functions using errno to our own read and write functions with negative return codes some errors where introduced. This patch correctly convert errno to negative return codes for read and write and fix checks still using errno instead of the return code.

Closes #9283
2018-06-14 20:01:03 +02:00
Lennart Poettering
e01d9e2193 update NEWS 2018-06-14 17:44:20 +02:00
Lennart Poettering
6f659e5075 portable: add SystemCallFilter=@system-service to the three main portable service profiles
… but leave the "trusted" profile unmodified, it shall have full access
to all system calls, as before.
2018-06-14 17:44:20 +02:00
Lennart Poettering
ee8f26180d units: switch from system call blacklist to whitelist
This is generally the safer approach, and is what container managers
(including nspawn) do, hence let's move to this too for our own
services. This is particularly useful as this this means the new
@system-service system call filter group will get serious real-life
testing quickly.

This also switches from firing SIGSYS on unexpected syscalls to
returning EPERM. This would have probably been a better default anyway,
but it's hard to change that these days. When whitelisting system calls
SIGSYS is highly problematic as system calls that are newly introduced
to Linux become minefields for services otherwise.

Note that this enables a system call filter for udev for the first time,
and will block @clock, @mount and @swap from it. Some downstream
distributions might want to revert this locally if they want to permit
unsafe operations on udev rules, but in general this shiuld be mostly
safe, as we already set MountFlags=shared for udevd, hence at least
@mount won't change anything.
2018-06-14 17:44:20 +02:00
Lennart Poettering
e05ee49b14 seccomp: explain why we use setuid rather than @setuid in @privileged 2018-06-14 17:44:20 +02:00
Lennart Poettering
705268414f seccomp: add new system call filter, suitable as default whitelist for system services
Currently we employ mostly system call blacklisting for our system
services. Let's add a new system call filter group @system-service that
helps turning this around into a whitelist by default.

The new group is very similar to nspawn's default filter list, but in
some ways more restricted (as sethostname() and suchlike shouldn't be
available to most system services just like that) and in others more
relaxed (for example @keyring is blocked in nspawn since it's not
properly virtualized yet in the kernel, but is fine for regular system
services).
2018-06-14 17:44:20 +02:00
Lennart Poettering
f3ab1d39b1 mkosi: add mkosi snippet for ubuntu, too 2018-06-14 17:44:20 +02:00
Lennart Poettering
30ce657e5d
Merge pull request #9301 from keszybz/man-drop-authorgroup
man: drop unused <authorgroup> tags from man sources
2018-06-14 15:29:24 +02:00
Lennart Poettering
48956c396e busctl: make use of log_error_errno() where we can 2018-06-14 14:54:32 +02:00
Lennart Poettering
02bf91ee29 busctl: add 'const' where we can 2018-06-14 14:53:59 +02:00
Lennart Poettering
6b0f548498 busctl: use fflush_and_check() where appropriate 2018-06-14 14:53:46 +02:00
Lennart Poettering
8f1ae1d998
Merge pull request #9302 from keszybz/drop-my-copyright-and-some-license-tags
Drop my copyright and some license tags
2018-06-14 14:51:57 +02:00
Zbigniew Jędrzejewski-Szmek
50d1760d26 Drop more license boilerplate
$ git grep -e 'This program is free software' -l |grep -v LICENSE | \
  xargs perl -i -0pe 's/ \* This program.*?for more details.\s*\*\n( \* You should have.*licenses.>.\n)?//gms'

For some reason they were missed previously. All those files seem to
have proper SDPX tags.
2018-06-14 13:05:41 +02:00
Zbigniew Jędrzejewski-Szmek
58f21e63b4 Fix SPDX license tags 2018-06-14 13:05:41 +02:00