shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-12-22 17:35:35 +03:00
Code
77,972 Commits 4 Branches 398 Tags 558 MiB
f8bfe16b06
Commit Graph

2846 Commits

Author SHA1 Message Date
Yu Watanabe
620788da17 TODO: fix typo 2023-11-11 17:58:14 +09:00
Lennart Poettering
f3066d635a update TODO 2023-11-10 18:55:22 +01:00
Lennart Poettering
869996dd89 update TODO 2023-11-09 12:28:37 +01:00
Lennart Poettering
9f97ca70dd update TODO 2023-11-08 18:18:07 +01:00
Lennart Poettering
cff559ec3a update TODO 2023-11-08 14:28:10 +01:00
Lennart Poettering
a6906aa579 update TODO 2023-11-07 16:08:06 +01:00
Diego Viola
b3e199cec8 TODO: fix more typos 2023-11-07 10:49:58 +01:00
Diego Viola
3a9e659a0e TODO: fix typos 2023-11-07 17:26:31 +09:00
Lennart Poettering
4685947138 update TODO 2023-11-06 17:42:28 +01:00
Luca Boccassi
8d04721507
Merge pull request #28891 from poettering/pcrlock 
new pcrlock tool for generating signed PCR policies for PCR 0, 1, 4, …
 2023-11-03 16:07:43 +00:00
Yu Watanabe
b75b8e1d02
Merge pull request #29836 from poettering/libiptc-dlopen 
make libiptc dep a dlopen() one
 2023-11-03 21:15:29 +09:00
Lennart Poettering
2259a452d7 update TODO 2023-11-03 12:14:38 +01:00
Lennart Poettering
e43f87a7a6 update TODO 2023-11-03 11:25:20 +01:00
Lennart Poettering
11d5043993 update TODO 2023-11-03 09:34:02 +01:00
Lennart Poettering
d2c5b50ae3 update TODO 2023-11-02 14:19:32 +01:00
Lennart Poettering
1fdc5008ab update TODO 2023-10-31 11:03:53 +01:00
Lennart Poettering
779a1837e5 update TODO 2023-10-30 18:57:41 +01:00
Lennart Poettering
8955e48fcb Update TODO 2023-10-30 12:29:16 +01:00
Lennart Poettering
02484f20a2 update TODO 2023-10-30 10:51:35 +01:00
Lennart Poettering
8f21b3b21b update TODO 2023-10-24 23:18:51 +02:00
Luca Boccassi
8c08523736 Update TODO 2023-10-19 16:31:05 +01:00
Lennart Poettering
1158b06b47 update TODO 2023-10-18 14:49:40 +02:00
Lennart Poettering
e0eb051f95
Merge pull request #29546 from poettering/run-invoc-id 
run: output invocation ID when starting service and scope units
 2023-10-16 19:00:18 +02:00
Lennart Poettering
4d4c4ae9cb update TODO 2023-10-16 14:30:11 +02:00
Lennart Poettering
dbf9e04591 update TODO 2023-10-16 12:08:40 +02:00
Lennart Poettering
0e9f229769 update TODO 2023-10-14 00:01:59 +02:00
Lennart Poettering
97046f2fc0 update TODO 2023-10-12 12:34:10 +02:00
Lennart Poettering
9f3ed6fd19 update TODO 2023-10-11 18:20:16 +02:00
Luca Boccassi
375991c0b5 Update TODO 2023-10-09 22:22:09 +01:00
Lennart Poettering
3d1831b94b update TODO 2023-10-06 11:49:38 +02:00
Lennart Poettering
ed287b87d2 update TODO 2023-10-05 17:11:03 +02:00
Lennart Poettering
c6711da087
Merge pull request #29454 from poettering/cg-pidref-get-path 
cgroup-util: add cg_pidref_get_path() helper and use it
 2023-10-05 15:44:25 +02:00
Lennart Poettering
1523d91939 update TODO 2023-10-05 13:28:01 +02:00
Lennart Poettering
68d0adea4f update TODO 2023-10-05 12:57:49 +02:00
Yu Watanabe
fcdd21ec6a tree-wide: fix typo 2023-10-04 08:58:10 +09:00
Lennart Poettering
1a9454a942 update TODO 2023-09-29 19:36:06 +02:00
Lennart Poettering
d94dc50c46 update TODO 2023-09-28 23:22:58 +02:00
Lennart Poettering
69feab97f9 update TODO 2023-09-28 13:22:45 +02:00
Lennart Poettering
b28bd48238 update TODO 2023-09-27 19:08:56 +02:00
Lennart Poettering
174e8e9897
Merge pull request #29345 from poettering/measured-uki-condition 
pid1: introduce ConditionSecurity=measured-uki
 2023-09-27 16:39:46 +02:00
Luca Boccassi
578840bdf9
Merge pull request #29296 from keszybz/make-cryptsetup-offical-and-add-docs 
Make cryptsetup offical and add docs
 2023-09-27 13:31:11 +01:00
Lennart Poettering
d81bd3a22a update TODO 2023-09-27 12:17:18 +02:00
Zbigniew Jędrzejewski-Szmek
12c346d8e8 man/crypttab: do not recommend using /dev/sdX symlinks in /etc/crypttab 
This is just wrong. Quering the symlink names with udevadm is not the
easiest, but I think that's the safest way for a documented example.
 2023-09-26 15:35:06 +02:00
Lennart Poettering
32295fa08f pcrphase: rename binary to pcrextend 
The tool initially just measured the boot phase, but was subsequently
extended to measure file system and machine IDs, too. At AllSystemsGo
there were request to add more, and make the tool generically
accessible.

Hence, let's rename the binary (but not the pcrphase services), to make
clear the tool is not just measureing the boot phase, but a lot of other
things too.

The tool is located in /usr/lib/ and still relatively new, hence let's
just rename the binary and be done with it, while keeping the unit names
stable.

While we are at it, also move the tool out of src/boot/ and into its own
src/pcrextend/ dir, since it's not really doing boot related stuff
anymore.
 2023-09-25 17:17:20 +02:00
Lennart Poettering
02c9d62b30 update TODO 2023-09-25 12:23:29 +02:00
Joerg Behrmann
7227dd816f treewide: fix typos 
- mostly: usecase -> use case
- continously -> continuously
- single typos in docs/FILE_DESCRIPTOR_STORE.md
 2023-09-19 10:05:38 +02:00
Lennart Poettering
90eabfe6d1 update TODO 2023-09-19 09:47:40 +02:00
Lennart Poettering
4775b55db0 core: port unit_fork_helper_process() and unit_fork_and_watch_rm_rf() to PidRef 2023-09-18 19:08:09 +02:00
Lennart Poettering
37eb258e91 core: port unit_main_pid() + unit_control_pid() to PidRef and drop unit_kill_common() 
This ports over unit_main_pid() + unit_control_pid() to return PidRef*
pointers (which also means the underlying UnitVTable function pointers
are changed accordingly).

This then uses te functions to simplify the unit_kill() call, by
avoiding the kill() vtable indirection and instead just suing
unit_main_pid() and unit_control_pid() directly.
 2023-09-18 19:08:09 +02:00
Lennart Poettering
7901288ab1 core: port over unit_kill_context() to PidRef 2023-09-18 19:08:09 +02:00
Lennart Poettering
b1f6901d30 core: port service_set_main_pid() to PidRef 2023-09-18 19:08:09 +02:00
Lennart Poettering
8b9c3af043 update TODO 2023-09-18 16:21:13 +02:00
Lennart Poettering
8f533730f4 update TODO 2023-09-18 09:59:12 +02:00
Lennart Poettering
a1f7cdc636 update TODO 2023-09-09 14:11:10 +02:00
Mike Yuan
7af442cf63
TODO: switch the default wall implementation to sd-login 2023-09-09 03:24:52 +08:00
Lennart Poettering
354e5b8873 update TODO 2023-09-06 12:05:21 +02:00
Luca Boccassi
626a9eba09
Merge pull request #28988 from keszybz/sd128-arbitrary-values 
Add sd-id128 and systemd-id128 functionality to do "app specific" with any "base"
 2023-09-03 14:05:32 +01:00
Zbigniew Jędrzejewski-Szmek
ed856ea15c TODO: add entry about service and socket units 2023-09-02 14:17:29 +03:00
Mike Yuan
4da159bc53
core,systemctl: refuse switching root if we're not in initrd 2023-09-02 15:56:24 +08:00
Lennart Poettering
321261c7d9 update TODO 2023-08-22 11:29:36 +02:00
Lennart Poettering
5227b72db3 update TODO 2023-08-18 19:24:01 +02:00
Lennart Poettering
aea0f9abc5 update TODO 2023-08-16 11:42:13 +02:00
Lennart Poettering
79ae9015ac update TODO 2023-08-16 11:37:56 +02:00
Lennart Poettering
c7c46845ff update TODO 2023-08-16 11:31:31 +02:00
Lennart Poettering
33bc21c3cb update TODO 2023-08-10 15:29:27 +02:00
Lennart Poettering
f24e1b54e1 update TODO 2023-08-10 10:07:00 +02:00
Lennart Poettering
c578345334 update TODO 2023-08-07 16:51:49 +02:00
Yu Watanabe
cbcf76b193 tree-wide: fix typo 2023-07-30 00:23:28 +09:00
Luca Boccassi
b0d3095fd6 Drop split-usr and unmerged-usr support 
As previously announced, execute order 66:

https://lists.freedesktop.org/archives/systemd-devel/2022-September/048352.html

The meson options split-usr, rootlibdir and rootprefix become no-ops
that print a warning if they are set to anything other than the
default values. We can remove them in a future release.
 2023-07-28 19:34:03 +01:00
Luca Boccassi
af59f6ae50
Merge pull request #28360 from keszybz/pointingstick-accel-drop 
hwdb: drop POINTINGSTICK_CONST_ACCEL
 2023-07-28 09:57:04 +01:00
Zbigniew Jędrzejewski-Szmek
0134afe30d TODO: put journal-related stuff together 2023-07-17 20:57:42 +02:00
Lennart Poettering
dbc62e590a update TODO 2023-07-12 23:23:42 +02:00
Yu Watanabe
627cdcc785 tree-wide: fix typos reported by Fossies Codespell report 2023-07-12 10:14:50 +09:00
Zbigniew Jędrzejewski-Szmek
28dd29dd95 hwdb: drop POINTINGSTICK_CONST_ACCEL 
The TODO says we were supposed to do that in 2019–2020 (if I interpreted the
enigmatic notation correctly). The comment in hwdb said:
> DO NOT USE THIS PROPERTY. This property is kept for backwards
> compatibility. The only known consumer, libinput, stopped reading this
> property in version 1.9.0. No new entries for this property should be
> added.
… and we're currently on libinput-1.23.0.

Most likely there are no users, and even if they are, they'll just get a
slightly misbehaving pointingstick, which shouldn't be too bad.
 2023-07-12 01:49:59 +02:00
Joerg Behrmann
5bc9ea070f treewide: fix "an" before consonant U sounds 
The article "a" goes before consonant sounds and "an" goes before vowel
sounds. This commit changes an to a for UKI, UDP, UTF-8, URL, UUID, U-Label, UI
and USB, since they start with the sound /ˌjuː/.
 2023-07-06 11:59:41 +01:00
Lennart Poettering
aafd429ca7 update TODO 2023-07-04 23:20:33 +02:00
Lennart Poettering
89ee9e59f7 update TODO 2023-07-03 11:59:45 +02:00
Lennart Poettering
1fa5f1c52b update TODO 2023-06-29 13:14:13 +02:00
Lennart Poettering
d1797c42cc update TODO 2023-06-28 19:22:57 +02:00
Lennart Poettering
5e4c66450c
Merge pull request #27830 from 1awesomeJ/initrd 
PID1: Detect battery level in initrd and if low refuse continuing to …
 2023-06-28 19:18:03 +02:00
Lennart Poettering
76982d8944 update NEWS 2023-06-28 16:56:53 +02:00
OMOJOLA JOSHUA
67ced44302 Remove battery level check at early boot from TODO 2023-06-28 13:32:38 +01:00
Lennart Poettering
54b8a816a3 update TODO 2023-06-23 15:23:21 +02:00
Lennart Poettering
459d84076f update TODO 2023-06-20 14:41:28 +02:00
Mike Yuan
68f8a86a46 gpt-auto: expand the loader partition UUID check to include XBOOTLDR 
Before this commit, we only accept the case when LoaderDevicePartUUID
points to the ESP, while XBOOTLDR is mounted unconditionally.

After this commit, we check if LoaderDevicePartUUID points to either
ESP or XBOOTLDR. If it does, mount both, else nothing gets mounted.
 2023-06-20 11:15:48 +02:00
Lennart Poettering
be76bf625c update TODO 2023-06-19 10:36:42 +02:00
Frantisek Sumsal
9a27ef092e tree-wide: fix a couple of typos 
As reported by Fossies.org.
 2023-06-15 20:52:45 +02:00
Lennart Poettering
c4ffb53054 update TODO 2023-06-15 13:43:54 +02:00
Lennart Poettering
c4ccb80e39 bootctl: warn if the ESP random seed is stored on a world-readable dir 
This takes heavy inspiration from @zx2c4 (Jason A. Donenfeld)'s
PR #25531 but changes it considerably, but always going by fd instead of
paths, and only warning about the side file itself and the ESP mount
point, nothing else. This shuld be more than enough and should not be
brittle against concurrent path modifications.

Replaces: #25531
 2023-06-14 18:00:24 +02:00
Lennart Poettering
0f85a0d38f update TODO 2023-06-12 23:00:47 +02:00
Lennart Poettering
29de4eba1c update TODO 2023-06-08 09:55:18 +02:00
Lennart Poettering
5596fd8ff7 update TODO 2023-06-02 18:43:11 +02:00
Zbigniew Jędrzejewski-Szmek
9140404a12 man/analyze: reword description of malloc and fix link 2023-05-30 10:11:02 +02:00
Lennart Poettering
9c9b9b8915 update TODO 2023-05-25 14:33:45 +02:00
Luca Boccassi
f19b627560 TODO: remove fixed item 2023-05-24 15:02:36 +01:00
Lennart Poettering
e9dbe2abc3 update TODO 2023-05-23 11:03:49 +02:00
Lennart Poettering
9287925a0d update TODO 2023-05-19 14:04:07 +02:00
Zbigniew Jędrzejewski-Szmek
9dfed0d4cc
Merge pull request #27262 from keszybz/ukify-install 
Add kernel-install plugin that calls ukify
 2023-05-06 13:34:08 +02:00
Zbigniew Jędrzejewski-Szmek
a4b329e6aa TODO: remove two entries 
0ccfd3564b implemented one of the items, and this
pull requests handles the other one.
 2023-05-05 18:42:37 +02:00
Lennart Poettering
1408912282 update TODO 2023-05-03 17:55:55 +02:00
Lennart Poettering
f351e951d3 update TODO 2023-04-26 22:21:19 +02:00
Frantisek Sumsal
94d82b5980 tree-wide: code spelling fixes 
As reported by Fossies.
 2023-04-20 21:54:59 +02:00
Lennart Poettering
99620f457e service: close fdstore asynchronously 
The file descriptors we keep in the fdstore might be basically anything,
let's clean it up with our asynchronous closing feature, to not
deadlock on close().

(Let's also do the same for stdin/stdout/stderr fds, since they might
point to network services these days.)
 2023-04-13 06:44:27 +02:00
Lennart Poettering
3af48a86d9
Merge pull request #25608 from poettering/dissect-moar 
dissect: add dissection policies
 2023-04-12 13:46:08 +02:00
maanyagoenka
b60e0f5777 os-util: add a new confext image type and the ability to parse their release files 
Adds a new image type called IMAGE_CONFEXT which is similar to IMAGE_SYSEXT but works
for the /etc/ directory instead of /usr/ and /opt/. This commit also adds the ability to
parse the release file that is present with the confext image in /etc/confext-release.d/
directory.
 2023-04-05 21:50:04 +00:00
Lennart Poettering
3bcf564530 update TODO 2023-04-05 20:56:16 +02:00
Lennart Poettering
45ed795f41 update TODO 
As it turns out RuntimeDirectoryPreserve= already supports such a mode.
 2023-04-04 21:29:22 +02:00
Lennart Poettering
d657a4d8b1 update TODO 2023-04-04 21:29:22 +02:00
Lennart Poettering
a23d80d322 update TODO 2023-04-04 12:36:54 +02:00
William Roberts
acbb504eaf tpm2: add support for a trusted SRK 
Prevent attackers from spoofing the tpmKey portion of the AuthSession by
adding a trusted key to the LUKS header metadata. Also, use a persistent
object rather than a transient object.

This provides the following benifits:
1. No way to MITM the tpmKey portion of the session, see [1] for
details.

2. Strengthens the encrypted sessions, note that the bindKey could be
   dropped now.

3. Speed, once it's created we just use it.

4. Owner Auth is needed to call create primary, so using the SRK
   creates a scratch space for normal users.

This is a "first to set" model, in where the first person to set the key
in the LUKS header wins. Thus, setup should be done in a known good
state. If an SRK, which is a primary key at a special persistent
address, is found, it will use whatever is there. If not, it creates an
SRK. The SRK follows the convetions used through the tpm2-software
organization code on GitHub [2], however, a split has occured between
Windows and Linux with respect to SRK templates. The Linux SRK is
generated with the unique field size set to 0, in Windows, it properly
sets the size to key size in bytes and the unique data to all 0's of that
size. Note the proper templates for SRKs is covered in spec [3].
However, the most important thing, is that both SRKs are passwordless,
and thus they should be interchangable. If Windows is the first to make
the SRK, systemd will gladly accept it and vice-versa.

1. Without the bindKey being utilized, an attacker was able to intercept
this and fake a key, thus being able to decrypt and encrypt traffic as
needed. Introduction of the bindKey strengthened this, but allows for
the attacker to brute force AES128CFB using pin guesses. Introduction of
the salt increases the difficulty of this attack as well as DA attacks
on the TPM objects itself.

2. https://github.com/tpm2-software

3. https://trustedcomputinggroup.org/wp-content/uploads/TCG-TPM-v2.0-Provisioning-Guidance-Published-v1r1.pdf

Fixes: #20668
Fixes: #22637

Signed-off-by: William Roberts <william.c.roberts@intel.com>
 2023-04-03 13:10:49 +02:00
Daan De Meyer
02c914efe6 Trim TODO a bit 
Let's drop stuff that's already implemented.
 2023-03-31 19:24:19 +01:00
Lennart Poettering
6f1fe575f0 TODO: drop items regarding swap-for-hibernate-only-use 
I doubt we should bother. Swap always makes sense, and having a swap
partition for hibernate only without using it all the time just makes
the system worse overall.
 2023-03-31 12:21:35 +02:00
Lennart Poettering
3739c2fdfc update TODO 2023-03-29 19:09:10 +02:00
Lennart Poettering
2d887a2638 update TODO 2023-03-27 15:55:36 +02:00
Lennart Poettering
f447b74185 update TODO 2023-03-27 13:20:11 +02:00
Daan De Meyer
f461a28da7 chase-symlinks: Rename chase_symlinks() to chase() 
Chasing symlinks is a core function that's used in a lot of places
so it deservers a less verbose names so let's rename it to chase()
and chaseat().

We also slightly change the pattern used for the chaseat() helpers
so we get chase_and_openat() and similar.
 2023-03-24 13:43:51 +01:00
Lennart Poettering
c1c4ecd356 update TODO 2023-03-14 23:06:32 +01:00
Lennart Poettering
aa03f49917 update TODO 2023-03-09 22:29:11 +01:00
Jan Engelhardt
3ff1721c21 doc: replace wrong á preposition by à 2023-03-07 13:06:43 +01:00
Lennart Poettering
c8170f9c39 TODO 2023-03-06 18:49:09 +01:00
Lennart Poettering
c48f13d8e1 update TODO 2023-03-02 10:18:24 +01:00
Lennart Poettering
3d092a70b2 update TODO 2023-03-01 09:43:24 +01:00
Lennart Poettering
a69a520bd4 update TODO 2023-02-27 19:07:34 +01:00
Lennart Poettering
8b098d94ae update TODO 2023-02-24 17:09:04 +01:00
Lennart Poettering
512f2da5c7 update TODO 2023-02-21 10:18:33 +01:00
Zbigniew Jędrzejewski-Szmek
beca6b6e6b TODO: add entry for time-based glob cleanup 2023-02-20 15:27:42 +01:00
Lennart Poettering
1334070157 update TODO 2023-02-16 14:07:03 +01:00
Dmitry V. Levin
30fd9a2dab treewide: fix a few typos in NEWS, docs and comments 2023-02-15 10:41:03 +00:00
Lennart Poettering
2fbfdb1edc update TODO 2023-02-07 15:12:07 +01:00
Lennart Poettering
1c904337a2 update TODO 2023-02-06 15:02:59 +01:00
Lennart Poettering
8f8d7dff54 update TODO 2023-01-26 11:51:50 +01:00
Lennart Poettering
43057bf604 update TODO 2023-01-25 11:54:02 +01:00
Lennart Poettering
aa9424cbe8 update TODO 2023-01-24 15:33:38 +01:00
Yu Watanabe
d09df6b94e tree-wide: fix typo 2023-01-20 15:32:16 +09:00
Lennart Poettering
a67a50e8f4 update TODO 2023-01-17 09:42:16 +01:00
Lennart Poettering
32284ffc12 update TODO 2023-01-16 14:29:16 +01:00
Lennart Poettering
6fee784964 update TODO 2023-01-10 18:28:38 +01:00
Jan Janssen
d84bdadb43 boot: Remove option TPM PCR compat option 
It says remove in 2023; happy to oblige.
 2023-01-09 09:52:55 +01:00
Lennart Poettering
46730cd632 update TODO 2023-01-06 16:15:14 +01:00
Lennart Poettering
e793038a5e update TODO 2023-01-06 15:36:58 +01:00
Lennart Poettering
7122aee5ab
Merge pull request #25918 from bluca/smbios_sd_notify 
Support AF_VSOCK in sd_notify and pick up notify_socket from creds
 2023-01-06 15:21:27 +01:00
Luca Boccassi
03ede612be Update TODO 2023-01-05 23:07:16 +01:00
Lennart Poettering
17eab9467d update TODO 2023-01-05 18:53:08 +01:00
Lennart Poettering
f912cdbc8d update TODO 2023-01-05 11:02:13 +01:00
Lennart Poettering
309bba96d6 update TODO 2022-12-23 12:44:57 +01:00
Luca Boccassi
e5f48108cb Update TODO 2022-12-19 14:49:01 +01:00
Lennart Poettering
a1ad873d2f TODO 2022-12-16 15:03:06 +01:00
Lennart Poettering
c0e42509da update TODO 2022-12-15 11:40:21 +01:00
Lennart Poettering
e591cd5c8a update TODO 2022-12-12 15:44:29 +01:00
Lennart Poettering
a0bccdd375 update TODO 2022-12-12 12:59:30 +01:00
Lennart Poettering
f18b0a7630 update TODO 2022-12-07 14:31:57 +01:00
Luca Boccassi
8825e90a70 Update TODO 2022-12-03 11:23:00 +00:00
Yu Watanabe
6c2d70ce9f tree-wide: fix typo 2022-12-02 13:27:08 +09:00
Lennart Poettering
b62a45d89b update TODO 2022-12-01 17:35:33 +01:00
Christian Brauner
3734fec727 TODO: add unprivileged nspawn item 
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
 2022-12-01 10:42:47 +01:00
Christian Brauner
3922f98212 TODO: add socket reduction entry for nspawn 
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
 2022-12-01 10:42:47 +01:00
Christian Brauner
fdeabf571a TODO: add CLONE_PARENT entry for nspawn 
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
 2022-12-01 10:42:47 +01:00
Christian Brauner
71b77f0689 TODO: consolidate nspawn items 
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
 2022-12-01 10:42:47 +01:00
Lennart Poettering
d25c24d493 update TODO 2022-11-30 17:26:11 +01:00
Lennart Poettering
c8d9ce4aa0 update TODO 2022-11-29 16:56:07 +01:00
Lennart Poettering
87a7084b35 update TODO 2022-11-29 10:47:51 +01:00
Lennart Poettering
4cb8a25b04 update TODO 2022-11-25 17:34:32 +01:00
Zbigniew Jędrzejewski-Szmek
ca4249847b TODO: add item about mnt_fstype_is_netfs() 2022-11-23 12:43:28 +01:00
Jason A. Donenfeld
0a1d8ac77a stub: handle random seed like sd-boot does 
sd-stub has an opportunity to handle the seed the same way sd-boot does,
which would have benefits for UKIs when sd-boot is not in use. This
commit wires that up.

It refactors the XBOOTLDR partition discovery to also find the ESP
partition, so that it access the random seed there.
 2022-11-23 00:56:45 +01:00
Lennart Poettering
28795f2c13 update TODO 2022-11-21 15:14:22 +01:00
Lennart Poettering
d995ccd7b5 update TODO 2022-11-18 14:58:30 +01:00
Jason A. Donenfeld
1d679b208d Update NEWS and TODO with sd-boot random seed developments 2022-11-17 18:15:04 +01:00
Jeremy Linton
bc09c2d865 acpi-fpdt: Use kernel fpdt parsing 
On some kernels/distros (RHEL/aarch64) /dev/mem is
turned off. This means that the ACPI FPDT data is
missing from systemd-analyze output when /dev/mem
fails to provide the boot times.

Instead recent kernels can export that data from
/sys/firmware/acpi/fpdt/boot/ entries. Use that
information if available first.

Signed-off-by: Jeremy Linton <jeremy.linton@arm.com>
 2022-11-14 20:07:57 -06:00
Lennart Poettering
0b556555c2 update TODO 2022-11-10 22:19:42 +01:00
Lennart Poettering
9df82722f6 update TODO 2022-11-10 15:59:58 +01:00
Yu Watanabe
bf18862267
Merge pull request #25291 from keszybz/util-cleanup 
Split/rename util.c+h and def.h
 2022-11-09 09:23:17 +09:00
Lennart Poettering
084ecae56f update TODO 2022-11-08 16:39:27 +01:00
Zbigniew Jędrzejewski-Szmek
b61b95ae9e tests: move tests for eqzero() to a new file 
It's a bit silly to have a separate file that one short test, but this is the
last part of the test code that is misplaced, and here consistency beats
brevity.
 2022-11-08 13:41:13 +01:00
Lennart Poettering
6d040d84f5 update TODO 2022-10-31 12:38:48 +01:00
Lennart Poettering
e8cb96ac86 update TODO 2022-10-26 11:09:18 +02:00
Yu Watanabe
bcf04e9b27 tree-wide: fix typo 2022-10-26 03:24:45 +09:00
Lennart Poettering
0cdb1a2fa3 update TODO 2022-10-25 17:46:18 +02:00
Lennart Poettering
efe7ab9652 update TODO 2022-10-20 18:28:55 +02:00
Lennart Poettering
5bc58da2bc update TODO 2022-10-19 18:55:34 +02:00
Luca Boccassi
50675bb98f
Merge pull request #25050 from keszybz/transient-drop-ins-2 
TEST-15: add one more variant of the test for drop-ins on transient services
 2022-10-18 19:32:36 +02:00
Zbigniew Jędrzejewski-Szmek
70f0e75ef8 TODO: drop entry 
This was resolved by 028a981c00. We don't do
the reload in the normal path.
 2022-10-18 12:29:09 +02:00
Lennart Poettering
9ef6330e17 update TODO 2022-10-18 12:10:02 +02:00
Daan De Meyer
f87338fa26 Update TODO 2022-10-17 16:10:42 +02:00
Lennart Poettering
c868e95ebb update TODO 2022-10-17 11:21:00 +02:00
Lennart Poettering
924a329a00 update TODO 2022-10-14 21:07:29 +02:00
Lennart Poettering
4554c178bf update TODO 2022-10-14 11:33:17 +02:00
Yu Watanabe
7ff7eadf42 TODO: fix typo 2022-10-13 17:15:50 +09:00
Lennart Poettering
fd5dead7d6 update TODO 2022-10-13 09:48:01 +02:00
Lennart Poettering
4d727f8686 update TODO with discussions from Image-based Linux summit 2022-10-12 10:04:07 +02:00
Lennart Poettering
a5a0da085a update TODO 2022-10-11 15:07:32 +02:00
Yu Watanabe
ae24e4e80e TODO: fix typo 2022-10-08 15:09:53 +09:00
Lennart Poettering
feffee70d9 update TODO 2022-10-04 11:55:33 +02:00
Luca Boccassi
a9b0d0a2d0 TODO: tmpfiles.d m/M 2022-10-03 15:28:11 +01:00
Luca Boccassi
697f082697
Merge pull request #24853 from poettering/resolved-monitor-fixes 
resolved: various monitor fixes
 2022-09-30 15:46:13 +01:00
Luca Boccassi
e69e3830c3
Merge pull request #24739 from keszybz/coredump-formatting 
Improve formatting of package metadata in coredumps
 2022-09-30 15:42:15 +01:00
Lennart Poettering
de76643b3f update TODO 2022-09-30 14:25:13 +02:00
Zbigniew Jędrzejewski-Szmek
1a0281a3eb coredump: shorten output about package metadata to one line 
We would print the whole thing in extenso. Users generally don't care,
and would likely prefer to just get the compact identifier of the package
that they can use in a bug report or package manager commands.

Before:
systemd-coredump[40645]: [🡕] Process 1975 (gnome-shell) of user 1000 dumped core.

                         Module /usr/bin/gnome-shell (deleted) with build-id aafdb7d69a7efca937e490080ad9348541fc57d8
                         Metadata for module /usr/bin/gnome-shell (deleted) owned by FDO found: {
                                 "type" : "rpm",
                                 "name" : "gnome-shell",
                                 "version" : "43~rc-3.fc37",
                                 "architecture" : "x86_64",
                                 "osCpe" : "cpe:/o:fedoraproject:fedora:37"
                         }

                         Module /usr/lib64/gnome-shell/libgvc.so (deleted) with build-id 56cbb9862e1ee84ca1549b94f2b4cda03537613e
                         Metadata for module /usr/lib64/gnome-shell/libgvc.so (deleted) owned by FDO found: {
                                 "type" : "rpm",
                                 "name" : "gnome-shell",
                                 "version" : "43~rc-2.fc37",
                                 "architecture" : "x86_64",
                                 "osCpe" : "cpe:/o:fedoraproject:fedora:37"
                         }

                         Module /usr/lib64/libLLVM-14.so (deleted) with build-id ffa7e43f48eb4c189304c0241b1862710de4c3a4
                         Metadata for module /usr/lib64/libLLVM-14.so (deleted) owned by FDO found: {
                                 "type" : "rpm",
                                 "name" : "gnome-shell",
                                 "version" : "43~rc-2.fc37",
                                 "architecture" : "x86_64",
                                 "osCpe" : "cpe:/o:fedoraproject:fedora:37"
                         }

After:
systemd-coredump[235218]: [🡕] Process 235216 (bash) of user 1000 dumped core.

                          Module libtinfo.so.6 from rpm ncurses-6.3-3.20220501.fc37.x86_64, build-id=71a04d23fd572525eb6efc47026c379725e06d96
                          Module bash from rpm bash-5.1.16-3.fc37.x86_64, build-id=6c936aff95a2ccda04a3fb685a81a84a0a8d10da
                          Stack trace of thread 235216:
                          #0  0x00007fa409ec8d8b kill (libc.so.6 + 0x38d8b)
                          #1  0x0000560d35e366b1 kill_builtin (bash + 0xad6b1)
                          #2  0x0000560d35dd7227 execute_builtin.lto_priv.0 (bash + 0x4e227)
                          #3  0x0000560d35dd0459 execute_simple_command (bash + 0x47459)
                          #4  0x0000560d35dd1de0 execute_command_internal (bash + 0x48de0)
                          #5  0x0000560d35e307aa parse_and_execute (bash + 0xa77aa)
                          #6  0x0000560d35e91b08 run_one_command.isra.0 (bash + 0x108b08)
                          #7  0x0000560d35dba07c main (bash + 0x3107c)
                          #8  0x00007fa409eb3510 __libc_start_call_main (libc.so.6 + 0x23510)
                          #9  0x00007fa409eb35c9 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x235c9)
                          #10 0x0000560d35dbad85 _start (bash + 0x31d85)
 2022-09-28 10:47:42 +02:00
Topi Miettinen
75723d31a6 units: udev: partially emulate ProtectClock= 
Drop CAP_SYS_TIME and CAP_WAKE_ALARM capabilities and block clock-related
system calls. Update TODO.
 2022-09-26 11:40:28 +02:00
Lennart Poettering
eb8817db6e update TODO 2022-09-26 10:06:11 +02:00
Lennart Poettering
842beda4c5 TODO 2022-09-23 16:13:11 +02:00