Lennart Poettering
3f92e4b4b6
utmp: turn systemd-update-utmp-shutdown.service into a normal runtime service
...
With this change systemd-update-utmp-shutdown.service is replaced by
systemd-update-utmp.service which is started at boot and stays around
until shutdown. This allows us to properly order the unit against both
/var/log and auditd.
https://bugzilla.redhat.com/show_bug.cgi?id=853104
https://bugs.freedesktop.org/show_bug.cgi?id=64365
2013-05-16 00:19:03 +02:00
Lennart Poettering
154ff088d3
update TODO
2013-05-15 22:40:36 +02:00
Lennart Poettering
c35b956d34
units: rework systemd-random-seed-{load,save}.service to be a single service
...
That way ordering it with MountsRequiredFor= works properly, as this no
longer results in mount units start requests to be added to the shutdown
transaction that conflict with stop requests for the same unit.
2013-05-15 22:38:51 +02:00
Lennart Poettering
453a0c2946
bus: add support for adding memfds into message payload
2013-05-15 19:45:45 +02:00
Zbigniew Jędrzejewski-Szmek
9927180417
journalctl: add -k/--dmesg
2013-05-14 23:08:00 -04:00
Zbigniew Jędrzejewski-Szmek
b37250d661
build-sys: fix gtkdocize check
...
gtkdocize: GTK_DOC_CHECK not called in configure.ac
Fixup for 6581f00f7e
.
2013-05-14 22:26:48 -04:00
Zbigniew Jędrzejewski-Szmek
6581f00f7e
build-sys: properly report missing gtk-doc
...
This brings the check for ENABLE_GTK_DOC in line with
HAVE_INTROSPECTION and other similar checks. Only
the status line that is printed with uninstalled
gtk-doc is changed.
https://bugs.freedesktop.org/show_bug.cgi?id=63108
2013-05-14 22:10:44 -04:00
Thomas Hindoe Paaboel Andersen
39887731d4
sd-journal: check if the pointers passed are the same
2013-05-14 21:53:48 -04:00
Johan Heikkilä
53789059e0
keymap: Add support for Eject button on MSI GE60/GE70
2013-05-14 21:49:13 -04:00
Lennart Poettering
c91cb83c4d
bus: rework message struct to keep header with fields in same malloc() block
...
This allows us to guarantee that the first payload_vec we pass to the
kernel for each message is guaranteed to include the full header and all
its field.
2013-05-15 02:56:45 +02:00
Lennart Poettering
9b29bb6853
bus: add macro for iterating through body parts of a message
2013-05-15 01:43:15 +02:00
Lennart Poettering
13c299d3a8
bus: minor fixes
2013-05-15 01:36:09 +02:00
Lennart Poettering
47e6ce32bb
bus: seal off memfds when sealing messages
2013-05-15 00:46:24 +02:00
Lennart Poettering
9b05bc4866
bus: fix allocation of body parts from memfd
2013-05-14 22:52:58 +02:00
Lennart Poettering
bc7fd8cdbe
bus: properly handle message bodies that are a chain of memory areas rather than a single one
2013-05-14 22:28:45 +02:00
Kay Sievers
a3dc35472f
bus: add and use UINT64_TO_PTR()
2013-05-14 16:13:52 +02:00
Lennart Poettering
7e853a9b9a
update TODO
2013-05-14 14:01:20 +02:00
Auke Kok
8060a8b32d
journald-stream: typo in error message.
2013-05-13 14:41:28 -07:00
Kay Sievers
32821c76d5
TODO: add "debug" kernel cmdline switch
2013-05-13 22:21:54 +02:00
Kay Sievers
9976dcb2f6
bus: test-bus-memfd - use pread()/pwrite()
2013-05-13 15:12:25 +02:00
Kay Sievers
c8150fa751
bus: update test-bus-memfd
2013-05-13 05:56:31 +02:00
Kay Sievers
18cd014f13
bus: remove KDBUS_MAKE_ACCESS_WORLD, remove (n_payload > 2) check
...
KDBUS_MAKE_ACCESS_WORLD is no longer needed, the kernel creates the
kdbus device node with the uid/gid of the caller now.
2013-05-12 20:17:47 +02:00
Auke Kok
9d995d54b5
Add support for ConditionSecurity=ima
...
Just as with SMACK, we don't really know if a policy has been
loaded or not, as the policy interface is write-only. Assume
therefore that if ima is present in securityfs that it is
enabled.
Update the man page to reflect that "ima" is a valid option
now as well.
2013-05-11 13:42:55 -07:00
Auke Kok
a41f47abd3
Re-indent with spaces.
2013-05-11 13:35:38 -07:00
Kay Sievers
8573e652d9
bus: update test-bus-memfd
2013-05-11 14:48:24 +02:00
Kay Sievers
13019ef5ea
bus: fix test-bus-memfd
2013-05-10 19:58:05 +02:00
Lennart Poettering
0d1b9a9647
bus: fix error check in memfd code
2013-05-10 19:15:55 +02:00
Lennart Poettering
a7c54c8c1f
bus: extend memfd test
2013-05-10 17:34:14 +02:00
Dave Reisner
c2384970ff
nspawn: only warn about audit when booting the container
...
The audit subsystem isn't relevant when nspawn is only being used as a
chroot.
2013-05-10 08:59:00 -04:00
Lennart Poettering
ddeb424198
bus: add new API for kdbus memfd functionality
2013-05-10 14:37:05 +02:00
Kay Sievers
72455f9bf0
kdbus: update kdbus.h from upstream
2013-05-10 04:55:43 +02:00
Lennart Poettering
fd8d62d940
bus: catch up with latest kdbus
2013-05-10 03:38:11 +02:00
Lennart Poettering
f8e013f8bf
bus: add sd_bus_message_append_string_space() for zero-copy string appending
2013-05-10 03:38:11 +02:00
Colin Walters
2e996f4d4b
nspawn: Include netlink headers rather than using #ifdef
...
This is a better fix than e13e1fad8b
for
failing to compile without audit that
77b6e19458
introduced.
2013-05-09 19:31:20 -04:00
Colin Walters
e13e1fad8b
Fix previous commit for !HAVE_AUDIT
2013-05-09 18:37:26 -04:00
Zbigniew Jędrzejewski-Szmek
c15602af5e
systemd-python: allow threads around flush
...
flush() is potentially costly.
2013-05-09 18:28:24 -04:00
Zbigniew Jędrzejewski-Szmek
04b33f69b6
systemd-python: use consistent indentation
2013-05-09 18:28:23 -04:00
Lennart Poettering
77b6e19458
audit: since audit is apparently never going to be fixed for containers tell the user what's going on
...
Let's try to be helpful to the user and give him a hint what he can do
to make nspawn work with normal OS containers.
https://bugzilla.redhat.com/show_bug.cgi?id=893751
2013-05-10 00:17:36 +02:00
Eelco Dolstra
f49fd1d57a
Start ctrl-alt-del.target irreversibly
...
This makes ctrl-alt-del reboots more robust, just like "systemctl
reboot".
2013-05-09 18:13:33 -04:00
Zbigniew Jędrzejewski-Szmek
a7739f8f97
build-sys: add convinience 'make python-shell'
...
This will launch $(PYTHON) with $LD_LIBRARY_PATH and $PYTHONPATH
as ./configure-d and DESTDIR-ed. Use as:
make install DESTDIR=/var/tmp/inst python-shell
2013-05-09 18:13:33 -04:00
Zbigniew Jędrzejewski-Szmek
7ecec4705c
systemd-python: wrap sd_login_monitor
2013-05-09 18:13:33 -04:00
Lennart Poettering
b3af9646f8
bus: add API for appending/reading fixed arrays
2013-05-09 20:01:21 +02:00
Auke Kok
9541fe6adf
systemctl does not expand %u, so revert back to %I
...
The description field is only displayed by systemctl, and
it can't expand %u properly (it will always display "root").
2013-05-09 09:39:15 -07:00
Lennart Poettering
606c24e3bd
build-sys: prepare 204
2013-05-09 15:45:50 +02:00
Lennart Poettering
2aba426ffb
man: document that the kernel's audit subsystem is currently incompatible with nspawn containers
2013-05-09 15:33:02 +02:00
Karol Lewandowski
b62ee5249d
condition, man: Add support for ConditionSecurity=smack
...
According to Documentation/security/Smack.txt:
In keeping with the intent of Smack, configuration data is minimal
and not strictly required. The most important configuration step is
mounting the smackfs pseudo filesystem.
This means that checking the mount point should be enough.
2013-05-08 22:24:37 -04:00
Zbigniew Jędrzejewski-Szmek
539e0a4d58
systemd-python: add wrappers for easy functions in sd-login
...
sd_get_uids, sd_get_seats, sd_get_sessions, and sd_get_machine_names.
2013-05-08 21:35:03 -04:00
Zbigniew Jędrzejewski-Szmek
5afbe712db
systemd-python: add __version__ strings
2013-05-08 21:34:44 -04:00
Zbigniew Jędrzejewski-Szmek
6866780115
Rearrange a few fields to reduce holes
2013-05-08 21:34:20 -04:00
Zbigniew Jędrzejewski-Szmek
fa13e4a784
man: add permalinks to subsection titles too
2013-05-08 21:33:48 -04:00