1
0
mirror of https://github.com/systemd/systemd.git synced 2025-01-09 01:18:19 +03:00
systemd/src
Ronan Pigott 414a9b8e5e resolved: validate authentic insecure delegation to CNAME
If the parent zone uses a non-opt-out method that provides authenticated
negative DS replies, we still can't expect signatures from the child
zone. sd-resolved was using the authenticated status of the DS reply to
require signatures for CNAMEs, even though it had already proved that no
signature exists.

Fixes: 47690634f1 ("resolved: don't request the SOA for every dns label")
2024-05-01 20:34:08 +02:00
..
ac-power tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
analyze tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
ask-password tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
backlight backlight: fix detection of multiple graphic cards 2024-04-04 21:29:57 +01:00
basic build-path: fix SIGSEGV on RISC-V and MIPS 2024-04-30 18:11:10 +02:00
battery-check
binfmt
boot tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
busctl systemctl,busctl: sort includes 2024-03-26 21:08:49 +08:00
cgls
cgroups-agent
cgtop
core reboot-util: Add some basic validation on reboot arguments 2024-05-02 00:52:06 +09:00
coredump tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
creds tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
cryptenroll tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
cryptsetup tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
debug-generator debug-generator: Add unit and drop-in credentials 2024-04-04 16:17:38 +02:00
delta
detect-virt
dissect dissect-tool: allow systemd-dissect to talk to mountfsd 2024-04-06 16:08:24 +02:00
environment-d-generator tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
escape
firstboot stat-util: generalize is_* and verify_* handling 2024-03-04 19:53:51 +00:00
fsck
fstab-generator Replace strdup_or_null() by strdup_to() 2024-03-20 15:18:21 +01:00
fundamental stub: Add support for .ucode UKI section 2024-04-19 05:58:46 -07:00
fuzz tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
getty-generator use FOREACH_ELEMENT 2024-04-18 17:39:34 +02:00
gpt-auto-generator tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
hibernate-resume hibernate-resume-config: apply ENABLE_EFI ifdef correctly 2024-04-09 09:40:21 +02:00
home tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
hostname hostnamed: use strdup_to_full() 2024-03-20 15:13:44 +01:00
hwdb tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
id128
import import: skip the whole subdir when building with -Dimportd=false 2024-04-26 17:14:07 +02:00
initctl
integritysetup
journal journal: Add journal.storage credential 2024-04-30 14:19:55 +02:00
journal-remote tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
kernel-install kernel-install/60-ukify: also search in {/run,/usr/local/lib}/kernel/ 2024-04-22 22:38:11 +02:00
libsystemd tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
libsystemd-network network: DHCP version logging typos 2024-04-28 11:47:55 +09:00
libudev tree-wide: make sure net/if.h is included before any linux/ header 2024-04-09 21:19:15 +02:00
locale various: use strdup_to() in various obvious cases 2024-03-20 15:13:44 +01:00
login reboot-util: Add some basic validation on reboot arguments 2024-05-02 00:52:06 +09:00
machine machine: Add PIDFDs= fallback 2024-04-29 22:56:49 +02:00
machine-id-setup tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
modules-load libkmod: turn into dlopen() dependency 2024-04-04 18:16:45 +02:00
mount tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
mountfsd mountfsd: drop explicit dependencies for systemd-mountwork 2024-04-26 17:14:07 +02:00
network network/tc: Avoid concurrent set modification in tclass_drop()/qdisc_drop() 2024-05-01 16:15:20 +02:00
notify
nspawn tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
nsresourced tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
nss-myhostname
nss-mymachines
nss-resolve
nss-systemd
oom tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
partition tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
path tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
pcrextend tpm2-util: add generic wrapper tpm2_context_new_or_warn() that wrpas tpm2_context_new and logs about errors 2024-04-22 12:40:09 +02:00
pcrlock tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
portable portable: Don't fail if /etc/resolv.conf doesn't exist 2024-04-25 17:06:42 +02:00
pstore Merge pull request #30480 from keszybz/kernel-install-more-paths 2024-03-08 08:25:07 +01:00
quotacheck quotacheck: store argv[*] in static var 2024-03-10 23:11:47 +08:00
random-seed
rc-local-generator
remount-fs
reply-password
resolve resolved: validate authentic insecure delegation to CNAME 2024-05-01 20:34:08 +02:00
rfkill
rpm
run tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
run-generator
shared reboot-util: Add some basic validation on reboot arguments 2024-05-02 00:52:06 +09:00
shutdown sd-daemon: Set SO_LINGER on AF_VSOCK notify socket fds 2024-04-25 21:29:34 +02:00
sleep tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
socket-activate tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
socket-proxy tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
ssh-generator Simplify a couple of conditions 2024-04-02 18:08:22 +02:00
stdio-bridge tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
storagetm tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
sulogin-shell
sysctl
sysext sysext: do not return 0 if unmerge() fails in the refresh() function. 2024-04-23 16:15:55 +02:00
system-update-generator
systemctl systemctl: fix log message when glob patterns passed to disable command and friends 2024-05-01 17:13:10 +09:00
systemd sd-radv: allow to configure reachable time in RA header 2024-04-22 18:40:10 +09:00
sysupdate tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
sysusers gcrypt: dlopenify for libsystemd 2024-04-03 11:50:25 +01:00
sysv-generator path-lookup: rename lookup_paths_free -> _done 2024-03-07 02:01:57 +08:00
test tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
timedate timedate: handle gracefully if RTC lost time because of power loss 2024-04-20 09:15:07 +09:00
timesync gcrypt: dlopenify for libsystemd 2024-04-03 11:50:25 +01:00
tmpfiles gcrypt: dlopenify for libsystemd 2024-04-03 11:50:25 +01:00
tpm2-setup tpm2-util: add generic wrapper tpm2_context_new_or_warn() that wrpas tpm2_context_new and logs about errors 2024-04-22 12:40:09 +02:00
tty-ask-password-agent
udev tree-wise: several cleanups for logging 2024-05-01 04:41:06 +09:00
ukify treewide: fix a few typos in NEWS, docs, comments, and log messages 2024-04-27 12:11:13 +02:00
update-done
update-utmp use FOREACH_ELEMENT 2024-04-18 17:39:34 +02:00
user-sessions
userdb use FOREACH_ELEMENT 2024-04-18 17:39:34 +02:00
varlinkctl
vconsole
veritysetup
version
vmspawn vmspawn: enable vmgenid for all VMs 2024-04-20 12:10:42 +02:00
volatile-root
vpick tree-wide: Use log_setup() everywhere 2024-04-25 17:06:43 +02:00
xdg-autostart-generator strv: add helper to extend strv from both sides 2024-03-07 18:49:44 +01:00