]> git.ipfire.org Git - thirdparty/systemd.git/log
thirdparty/systemd.git
4 years agoudevadm: show more error message during exporting database 14960/head
Yu Watanabe [Thu, 27 Feb 2020 13:27:13 +0000 (22:27 +0900)] 
udevadm: show more error message during exporting database

Closes #14959.

4 years agonetwork: remove redundant %m in error message
Yu Watanabe [Sun, 9 Feb 2020 14:44:11 +0000 (23:44 +0900)] 
network: remove redundant %m in error message

4 years agoudev-builtin-input_id: any i2c mouse is a pointing stick
Peter Hutterer [Fri, 21 Feb 2020 02:50:28 +0000 (12:50 +1000)] 
udev-builtin-input_id: any i2c mouse is a pointing stick

Where we have a device that looks like a mouse and is connected over i2c, tag
it as pointing stick. There is no such thing as a i2c mouse.

Even touchpads that aren't recognized by the kernel will not show up as i2c
mouse - either the touchpad follows the Win8.1 specs in which case the kernel
switches it to multitouch mode and it shows up like a touchpad. The built-in
trackpoint, if any, is then the i2c mouse device.

Where the touchpad doesn't follow the spec, the kernel will not handle it and
the touchpad remains on the PS/2 legacy bus - not i2c. Hence we can assume
that any i2c mouse device is really a pointing stick.

4 years agoMerge pull request #14953 from yuwata/userdb-fix-groupdb
Yu Watanabe [Thu, 27 Feb 2020 10:53:20 +0000 (19:53 +0900)] 
Merge pull request #14953 from yuwata/userdb-fix-groupdb

userdb: make groupdb_all() always set iterator when it returns >= 0

4 years agouserdb: make groupdb_all() always set iterator when it returns >= 0 14953/head
Yu Watanabe [Thu, 27 Feb 2020 09:05:14 +0000 (18:05 +0900)] 
userdb: make groupdb_all() always set iterator when it returns >= 0

4 years agouserdb: drop unnecessary goto
Yu Watanabe [Thu, 27 Feb 2020 09:04:47 +0000 (18:04 +0900)] 
userdb: drop unnecessary goto

4 years agofix ACCEL_MOUNT_MATRIX for Thinkpad Yoga 11e 3rd gen
Lukas K [Sat, 22 Feb 2020 19:11:10 +0000 (20:11 +0100)] 
fix ACCEL_MOUNT_MATRIX for Thinkpad Yoga 11e 3rd gen

the modalias reported by udev is acpi:BOSC0200:BOSC0200: but the rules
only matched acpi:BOSC0200:BOSC0200 (without the trailing colon)

change to acpi:BOSC0200* as in other models

4 years agouserdb: allow dots in username
Mike Gilbert [Sat, 22 Feb 2020 18:30:48 +0000 (13:30 -0500)] 
userdb: allow dots in username

This prevents an error in pam_systemd when logging in.

sshd[2623165]: pam_unix(sshd:session): session opened for user tony.stark(uid=10001) by (uid=0)
sshd[2623165]: pam_systemd(sshd:session): Failed to get user record: Invalid argument

Bug: https://bugs.gentoo.org/708824

4 years agohwdb: Fix rotation for Nuvision Encite Split 11
James Buren [Wed, 12 Feb 2020 21:43:06 +0000 (15:43 -0600)] 
hwdb: Fix rotation for Nuvision Encite Split 11

Model number NES11-C432SSA

4 years agoswap: finish the secondary swap units' jobs if deactivation of the primary swap unit...
HATAYAMA Daisuke [Thu, 25 Jul 2019 03:54:48 +0000 (23:54 -0400)] 
swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails

Currently, if deactivation of the primary swap unit fails:

    # LANG=C systemctl --no-pager stop dev-mapper-fedora\\x2dswap.swap
    Job for dev-mapper-fedora\x2dswap.swap failed.
    See "systemctl status "dev-mapper-fedora\\x2dswap.swap"" and "journalctl -xe" for details.

then there are still the running stop jobs for all the secondary swap units
that follow the primary one:

    # systemctl list-jobs
     JOB UNIT                                                                                                         TYPE STATE
     3233 dev-disk-by\x2duuid-2dc8b9b1\x2da0a5\x2d44d8\x2d89c4\x2d6cdd26cd5ce0.swap                                    stop running
     3232 dev-dm\x2d1.swap                                                                                             stop running
     3231 dev-disk-by\x2did-dm\x2duuid\x2dLVM\x2dyuXWpCCIurGzz2nkGCVnUFSi7GH6E3ZcQjkKLnF0Fil0RJmhoLN8fcOnDybWCMTj.swap stop running
     3230 dev-disk-by\x2did-dm\x2dname\x2dfedora\x2dswap.swap                                                          stop running
     3234 dev-fedora-swap.swap                                                                                         stop running

    5 jobs listed.

This remains endlessly because their JobTimeoutUSec is infinity:

    # LANG=C systemctl show -p JobTimeoutUSec dev-fedora-swap.swap
    JobTimeoutUSec=infinity

If this issue happens during system shutdown, the system shutdown appears to
get hang and the system will be forcibly shutdown or rebooted 30 minutes later
by the following configuration:

    # grep -E "^JobTimeout" /usr/lib/systemd/system/reboot.target
    JobTimeoutSec=30min
    JobTimeoutAction=reboot-force

The scenario in the real world seems that there is some service unit with
KillMode=none, processes whose memory is being swapped out are not killed
during stop operation in the service unit and then swapoff command fails.

On the other hand, it works well in successful case of swapoff command because
the secondary jobs monitor /proc/swaps file and can detect deletion of the
corresponding swap file.

This commit fixes the issue by finishing the secondary swap units' jobs if
deactivation of the primary swap unit fails.

Fixes: #11577
4 years agoata_id: Add support for host managed zone block devices (#14933)
Ryan Attard [Thu, 27 Feb 2020 07:29:41 +0000 (01:29 -0600)] 
ata_id: Add support for host managed zone block devices (#14933)

If the peripheral device type is that of a host managed zone block device (0x14),
the device supports the same identification mechanisms as conventional disks (0x00).

4 years agoMerge pull request #14950 from keszybz/kernel-install-script-boot_image
Anita Zhang [Thu, 27 Feb 2020 07:04:57 +0000 (23:04 -0800)] 
Merge pull request #14950 from keszybz/kernel-install-script-boot_image

kernel-install: strip BOOT_IMAGE= from kernel options

4 years agoMerge pull request #14944 from yuwata/userdb-fix-iterator
Anita Zhang [Thu, 27 Feb 2020 06:46:17 +0000 (22:46 -0800)] 
Merge pull request #14944 from yuwata/userdb-fix-iterator

userdb: make userdb_all() always set iterator when it returns >= 0

4 years agounits: add mount for tracefs
Norbert Lange [Fri, 21 Feb 2020 14:08:13 +0000 (15:08 +0100)] 
units: add mount for tracefs

Kernel 4.1 separated the tracing system from the debugfs,
actual documentation already points to a different path
that needs this new mount to exist.

the old sysfs path will still be an automount in the debugfs,
created by the kernel (for now).

Signed-off-by: Norbert Lange <nolange79@gmail.com>
4 years agotypo: stringy -> string
Mark Deneen [Fri, 21 Feb 2020 19:43:26 +0000 (14:43 -0500)] 
typo: stringy -> string

4 years agopo: update Japanese translation of "home area"
Yu Watanabe [Wed, 26 Feb 2020 15:51:10 +0000 (00:51 +0900)] 
po: update Japanese translation of "home area"

4 years agokernel-install: strip BOOT_IMAGE= from kernel options 14950/head
Zbigniew Jędrzejewski-Szmek [Wed, 26 Feb 2020 22:34:41 +0000 (23:34 +0100)] 
kernel-install: strip BOOT_IMAGE= from kernel options

https://bugzilla.redhat.com/show_bug.cgi?id=1716164.

4 years agouserdb: fix memleak
Yu Watanabe [Wed, 26 Feb 2020 16:36:34 +0000 (01:36 +0900)] 
userdb: fix memleak

Fixes #14947.

4 years agoMerge pull request #14942 from keszybz/rename-homes
Yu Watanabe [Wed, 26 Feb 2020 15:48:38 +0000 (00:48 +0900)] 
Merge pull request #14942 from keszybz/rename-homes

Rename "home" to "home area"

4 years agoMerge pull request #14941 from yuwata/network-vrf-static
Yu Watanabe [Wed, 26 Feb 2020 14:58:44 +0000 (23:58 +0900)] 
Merge pull request #14941 from yuwata/network-vrf-static

network: use VRF's route table if VRF= is set

4 years agouserdb: make userdb_all() always set iterator when it returns >= 0 14944/head
Yu Watanabe [Wed, 26 Feb 2020 13:26:23 +0000 (22:26 +0900)] 
userdb: make userdb_all() always set iterator when it returns >= 0

Fixes #14868.

4 years agopo: fix confusion about what "it" is in Polish translation 14942/head
Zbigniew Jędrzejewski-Szmek [Wed, 26 Feb 2020 10:39:41 +0000 (11:39 +0100)] 
po: fix confusion about what "it" is in Polish translation

4 years agotree-wide: replace "asked to inhibit it" with "is inhibiting this"
Zbigniew Jędrzejewski-Szmek [Wed, 26 Feb 2020 10:32:32 +0000 (11:32 +0100)] 
tree-wide: replace "asked to inhibit it" with "is inhibiting this"

The problem with the original form is that the subject of the sentence with
passive void is "the system", and we're not inhibiting the system. In English
the sense can be made out, but the form is gramatically incorrect.
In fact, the Polish translation got this wrong:
> msgid "Power off the system while an application is inhibiting this"
> msgstr "Wyłączenie systemu, kiedy program zażądał jego wstrzymania"
"jego" can only refer to "the system", because of gender mismatch with "power
off". If our translators cannot grok the message, then we should probably reword
it.

Also, drop the "asked to" part. Everything we do is over IPC, so we only ever
"ask" for things, and this adds no value.

4 years agotree-wide: replace present participle forms
Zbigniew Jędrzejewski-Szmek [Wed, 26 Feb 2020 10:24:54 +0000 (11:24 +0100)] 
tree-wide: replace present participle forms

Infinitive is shorter and sounds better too.

4 years agotest-network: add one more test case for VRF= 14941/head
Yu Watanabe [Wed, 26 Feb 2020 06:55:08 +0000 (15:55 +0900)] 
test-network: add one more test case for VRF=

4 years agopo: update Polish translation of "home area"
Zbigniew Jędrzejewski-Szmek [Wed, 26 Feb 2020 10:15:42 +0000 (11:15 +0100)] 
po: update Polish translation of "home area"

"Przestrzeń domowa" is awkward too, but "katalog domowy" is misleading.

4 years agotree-wide: s/home/home area/g
Zbigniew Jędrzejewski-Szmek [Wed, 26 Feb 2020 10:11:57 +0000 (11:11 +0100)] 
tree-wide: s/home/home area/g

"home" is okay-ish in English, but rather awkward in many other languages.
For example, even before this change, in fr.po we had "un espace personnel"
as the translation everywhere. Let's use a less overloaded term.

Fixes #14789.

4 years agonetwork: use VRF's route table if VRF= is set
Yu Watanabe [Wed, 26 Feb 2020 06:42:32 +0000 (15:42 +0900)] 
network: use VRF's route table if VRF= is set

Fixes #14940.

4 years agoman/systemd.unit: Add missing article to `Wants=` description
Paul Menzel [Fri, 21 Feb 2020 09:27:38 +0000 (10:27 +0100)] 
man/systemd.unit: Add missing article to `Wants=` description

4 years agoMerge pull request #14910 from whot/wip/install-input-id-hwdb
Anita Zhang [Thu, 20 Feb 2020 16:16:30 +0000 (11:16 -0500)] 
Merge pull request #14910 from whot/wip/install-input-id-hwdb

hwdb.d: actually install the 60-input-id.hwdb

4 years agohwdb.d: actually install the 60-input-id.hwdb 14910/head
Peter Hutterer [Wed, 19 Feb 2020 23:12:03 +0000 (09:12 +1000)] 
hwdb.d: actually install the 60-input-id.hwdb

This was added in ffac30349e9da91dbef7d4e0bf7cef58705c534e in 2017 but didn't
get added to the meson.build thus never actually installing it.

Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
4 years agoman: tmpfiles.d: z/Z ignore the argument
Topi Miettinen [Fri, 14 Feb 2020 21:41:44 +0000 (23:41 +0200)] 
man: tmpfiles.d: z/Z ignore the argument

The argument is not used for any MAC context by z and Z, so drop the confusing
text from the table.

4 years agoci: pass max_total_time to libFuzzer
Evgeny Vereshchagin [Mon, 17 Feb 2020 22:54:42 +0000 (22:54 +0000)] 
ci: pass max_total_time to libFuzzer

Since clang was updated to 9.0.1 libFuzzer has been exiting with 72
when it's run with timeout. Let's pass -max_total_time to it instead.

4 years agoChange all fuzzing links to point to OSS-Fuzz site
Lynn Kirby [Mon, 17 Feb 2020 22:23:34 +0000 (17:23 -0500)] 
Change all fuzzing links to point to OSS-Fuzz site

4 years agodocs: fix HACKING.md broken links
Lynn Kirby [Mon, 10 Feb 2020 21:50:52 +0000 (16:50 -0500)] 
docs: fix HACKING.md broken links

4 years agofixed typo in systemd.netdev Documentation for L2TP
tsia [Sun, 16 Feb 2020 16:39:48 +0000 (17:39 +0100)] 
fixed typo in systemd.netdev Documentation for L2TP

4 years agosystemd: Fix busctl crash on aarch64 when setting output table format
Alin Popa [Fri, 14 Feb 2020 08:33:43 +0000 (09:33 +0100)] 
systemd: Fix busctl crash on aarch64 when setting output table format

The enum used for column names is integer type while table_set_display() is parsing
arguments on size_t alignment which may result in assert in table_set_display() if
the size between types missmatch. This patch cast the enums to size_t.
It also fixes all other occurences for table_set_display() and
table_set_sort().

4 years agosystemd: Fix busctl crash on aarch64 when setting output table format
Alin Popa [Fri, 14 Feb 2020 08:33:43 +0000 (09:33 +0100)] 
systemd: Fix busctl crash on aarch64 when setting output table format

The enum used for column names is integer type while table_set_display() is parsing
arguments on size_t alignment which may result in assert in table_set_display() if
the size between types missmatch. This patch cast the enums to size_t.
An alternative solution would be to change the table_set_display() function
arguments to unsigned type.

4 years agomakefs: strdup arguments to mkfs
Oliver Giles [Thu, 13 Feb 2020 06:55:57 +0000 (08:55 +0200)] 
makefs: strdup arguments to mkfs

Don't pass values from argv[] directly to child process forked using
safe_fork, because it clears argv[]. strdup them first.

4 years agoMerge pull request #14833 from kpfleming/multiple-ipv6token-addresses
Yu Watanabe [Tue, 11 Feb 2020 17:10:44 +0000 (02:10 +0900)] 
Merge pull request #14833 from kpfleming/multiple-ipv6token-addresses

Support multiple IPv6Token 'static' addreses on an interface

4 years agoMerge pull request #14849 from mrc0mmand/lgtm-override-TMPDIR
Evgeny Vereshchagin [Tue, 11 Feb 2020 16:15:48 +0000 (19:15 +0300)] 
Merge pull request #14849 from mrc0mmand/lgtm-override-TMPDIR

lgtm: set TMPDIR to /var/tmp

4 years agoMerge pull request #14584 from ssahani/tc-handle
Yu Watanabe [Mon, 10 Feb 2020 21:17:48 +0000 (06:17 +0900)] 
Merge pull request #14584 from ssahani/tc-handle

network:tc add support for qdisc handle

4 years agolgtm: use the system version of meson 14849/head
Frantisek Sumsal [Mon, 10 Feb 2020 18:42:44 +0000 (19:42 +0100)] 
lgtm: use the system version of meson

LGTM was upgraded to Ubuntu Eoan, so the meson there is pretty new.
Also, the pip command didn't work anyway, since it didn't attempt to
update the previously installed meson.

4 years agolgtm: set TMPDIR to /var/tmp
Frantisek Sumsal [Mon, 10 Feb 2020 17:35:36 +0000 (18:35 +0100)] 
lgtm: set TMPDIR to /var/tmp

`/tmp` has `noexec` set in the LGTM infrastructure which breaks meson's
compilation checks. Let's use `/var/tmp` for now, until the issue is
properly resolved

See: https://discuss.lgtm.com/t/meson-fails-to-determine-sizes-of-basic-data-types/2639

4 years agoRevert "Support Plugable UD-PRO8 dock"
Zbigniew Jędrzejewski-Szmek [Mon, 10 Feb 2020 16:19:52 +0000 (17:19 +0100)] 
Revert "Support Plugable UD-PRO8 dock"

This reverts commit 95f2b4dd237faa57fd3e93245d560e47cdedfc2c.

Unfortunately the same usb hub is used in other places, and causes
numerous regressions (#14822,
https://bugzilla.redhat.com/show_bug.cgi?id=1800820). Let's revert
until a non-regressing approach is found.

4 years agofix typo in object field
Chris Murphy [Mon, 10 Feb 2020 06:54:12 +0000 (23:54 -0700)] 
fix typo in object field

# homectl create hack --fs-type=btrfs
Unexpected object field 'fileSytemType'.

4 years agonetwork: Allow multiple IPv6Token 'static' items to generate addresses 14833/head
Kevin P. Fleming [Sun, 9 Feb 2020 12:25:59 +0000 (07:25 -0500)] 
network: Allow multiple IPv6Token 'static' items to generate addresses

This patch allows multiple addresses using 'static' IPv6Tokens to
be generated for a single network interface.

4 years agotest-network: add tests for qdisc Handle= 14584/head
Yu Watanabe [Mon, 10 Feb 2020 07:44:19 +0000 (16:44 +0900)] 
test-network: add tests for qdisc Handle=

4 years agonetwork: add support for qdisc handle
Susant Sahani [Mon, 10 Feb 2020 07:05:35 +0000 (16:05 +0900)] 
network: add support for qdisc handle

4 years agonetwork: fix indentation
Yu Watanabe [Mon, 10 Feb 2020 06:55:04 +0000 (15:55 +0900)] 
network: fix indentation

4 years agonetwork: Make address_hash_ops available outside of networkd-address.c
Kevin P. Fleming [Sun, 9 Feb 2020 12:18:35 +0000 (07:18 -0500)] 
network: Make address_hash_ops available outside of networkd-address.c

In order to allow other parts of systemd-networkd to use sets/hashmaps
of Address objects, the address_hash_ops structure needs to be made
available to them.

4 years agonetwork: Document the lack of actual DAD usage in prefixstable algorithm 14831/head
Kevin P. Fleming [Sat, 8 Feb 2020 20:40:40 +0000 (15:40 -0500)] 
network: Document the lack of actual DAD usage in prefixstable algorithm

The RFC 7217 (prefixstable) algorithm can use Duplicate Address
Detection to produce multiple candidate addresses, but the implementation
here does not currently employ that mechanism.

4 years agonetwork: Rewrite IPv6Token documentation for new modes
Kevin P. Fleming [Sat, 8 Feb 2020 20:36:37 +0000 (15:36 -0500)] 
network: Rewrite IPv6Token documentation for new modes

This patch provides new documentation for IPv6Token,
reflecting the new modes (and the existing mode), and documents
various caveats users should be aware of when using these
modes.

4 years agonetwork: Correct typo and naming in error message
Kevin P. Fleming [Sat, 8 Feb 2020 20:35:47 +0000 (15:35 -0500)] 
network: Correct typo and naming in error message

This error message will be emitted when any form of SLAAC address
generation fails, not just 'prefix stable', so the message should
only refer to SLAAC.

4 years agonetwork: Improve variable name for address generation
Kevin P. Fleming [Sat, 8 Feb 2020 20:34:35 +0000 (15:34 -0500)] 
network: Improve variable name for address generation

The logic which can produce an IPv6 address using SLAAC produces an
address, not a prefix, so the boolean variable used to detect whether
it succeeded should reflect that.

4 years agoMerge pull request #14836 from yuwata/network-fix-ipv6-token-parser
Yu Watanabe [Mon, 10 Feb 2020 06:16:31 +0000 (15:16 +0900)] 
Merge pull request #14836 from yuwata/network-fix-ipv6-token-parser

network: fix IPv6Token= parser

4 years agotest-network: tentatively stops .socket units for udevd 14836/head
Yu Watanabe [Sun, 9 Feb 2020 15:43:58 +0000 (00:43 +0900)] 
test-network: tentatively stops .socket units for udevd

To suppress the following warning:
---
Warning: Stopping systemd-udevd.service, but it can still be activated by:
  systemd-udevd-control.socket
  systemd-udevd-kernel.socket

4 years agonetwork: Add test for explicit 'static' IPv6Token
Kevin P. Fleming [Sun, 9 Feb 2020 01:27:06 +0000 (20:27 -0500)] 
network: Add test for explicit 'static' IPv6Token

Add a test case for an explicitly-specified 'static' IPv6Token.

Signed-off-by: Kevin P. Fleming <kevin@km6g.us>
4 years agonetwork fix parser for IPv6Token=
Yu Watanabe [Sun, 9 Feb 2020 15:40:13 +0000 (00:40 +0900)] 
network fix parser for IPv6Token=

extract_first_word() drops multiple ':'. So, it is not suitable for
parsing 'static' case.

4 years agotest: give systemd chance to actually start the unit
Frantisek Sumsal [Mon, 3 Feb 2020 12:07:45 +0000 (13:07 +0100)] 
test: give systemd chance to actually start the unit

In certain cases the expected enqueue-start-replace-continue
sequence would end up as enqueue-replace-start-continue which causes
unexpected fails even though the serialization/deserialization part
works as expected. As we can't use `--wait` in this case, let's give
sysetmd a second to actually start the unit before replacing it with
another one.

Also, switch from the single-letter test output to a bit verbose format.

Fixes: #14632
4 years agoportablectl: add --now and --enable to attach/detach
Luca Boccassi [Thu, 23 Jan 2020 16:50:15 +0000 (16:50 +0000)] 
portablectl: add --now and --enable to attach/detach

Add shortcuts to enable and start, or disable and stop, portable
services with a single portablectl command.
Allow to pass a filter on detach, as it's necessary to call
GetImageMetadata to get the unit names associated with an image.

Fixes #10232

4 years agoMerge pull request #14805 from yuwata/network-ipv6-token-follow-up
Zbigniew Jędrzejewski-Szmek [Fri, 7 Feb 2020 16:05:33 +0000 (17:05 +0100)] 
Merge pull request #14805 from yuwata/network-ipv6-token-follow-up

network: rename eui64 to static

4 years agoMerge pull request #14784 from yuwata/network-rename-qdisc-follow-up
Zbigniew Jędrzejewski-Szmek [Fri, 7 Feb 2020 14:41:05 +0000 (15:41 +0100)] 
Merge pull request #14784 from yuwata/network-rename-qdisc-follow-up

network: introduce [QDisc] section to support Parent=ingress or clsact

4 years agohwdb: Fix touchpad toggle on WeiHeng P325J
Matthew Leeds [Fri, 7 Feb 2020 00:30:25 +0000 (16:30 -0800)] 
hwdb: Fix touchpad toggle on WeiHeng P325J

On the WeiHeng P325J laptop, Fn+F2 sends LeftWindow (0xe0 0x5b) +
LeftCtrl (0x1d) + F24 (0x76). Add a quirk to remap the 0x76 to F21 which
toggles the touchpad. The Ctrl + Win part is handled in userspace, e.g
by gnome-settings-daemon here:
https://gitlab.gnome.org/GNOME/gnome-settings-daemon/commit/f545950fe

This is analogous to what was done for the T-bao hardware here:
https://github.com/systemd/systemd/commit/d4a5df521d

4 years agojournal: fix log message
Yu Watanabe [Fri, 7 Feb 2020 05:11:11 +0000 (14:11 +0900)] 
journal: fix log message

4 years agorepart: do not quit earlier when --empty=force
Yu Watanabe [Fri, 7 Feb 2020 08:32:41 +0000 (17:32 +0900)] 
repart: do not quit earlier when --empty=force

Follow-up for 0ae5ffe0630aecd91b00af0ddd90c32c2d9c663b.

4 years agol10n: update Ukrainian translation
Yuri Chornoivan [Fri, 7 Feb 2020 10:40:54 +0000 (12:40 +0200)] 
l10n: update Ukrainian translation

4 years agotest-network: add test for teql 14784/head
Yu Watanabe [Thu, 6 Feb 2020 08:53:04 +0000 (17:53 +0900)] 
test-network: add test for teql

4 years agonetwork: tc: support teql
Yu Watanabe [Thu, 6 Feb 2020 08:52:24 +0000 (17:52 +0900)] 
network: tc: support teql

Closes #14792.

4 years agotest-network: add more tests for traffic control
Yu Watanabe [Wed, 5 Feb 2020 10:23:11 +0000 (19:23 +0900)] 
test-network: add more tests for traffic control

4 years agonetwork: fix ABRT 14805/head
Yu Watanabe [Fri, 7 Feb 2020 04:35:29 +0000 (13:35 +0900)] 
network: fix ABRT

Fixes #14811 and oss-fuzz#20548.

4 years agonetwork: update log message
Yu Watanabe [Wed, 5 Feb 2020 12:12:34 +0000 (21:12 +0900)] 
network: update log message

4 years agonetwork: append period if error message provided by kernel does not contain it
Yu Watanabe [Wed, 5 Feb 2020 12:09:03 +0000 (21:09 +0900)] 
network: append period if error message provided by kernel does not contain it

4 years agonetwork: drop redundant %m
Yu Watanabe [Wed, 5 Feb 2020 12:02:05 +0000 (21:02 +0900)] 
network: drop redundant %m

4 years agonetwork: introduce new [QDisc] section to support Parent=ingress
Yu Watanabe [Wed, 5 Feb 2020 10:10:33 +0000 (19:10 +0900)] 
network: introduce new [QDisc] section to support Parent=ingress

Follow-up for 18de0969c5763ce119692b59f8622c379e79c6cc.

4 years agocore: sync SeccompParseFlags between dbus-execute and load-fragment
Anita Zhang [Thu, 6 Feb 2020 23:34:17 +0000 (15:34 -0800)] 
core: sync SeccompParseFlags between dbus-execute and load-fragment

9e486265716963439fb0fd7f2a97abf109f24f75 added some new syscalls to the
filter lists. However, on systems that do not yet support the new calls,
running systemd-run with the filter set results in error:

```
$ sudo systemd-run -t -r -p "SystemCallFilter=~@mount" /bin/true
Failed to start transient service unit: Invalid argument
```

Having the same properties in a unit file will start the service
without issue. This is because the load-fragment code will parse the
syscall filters in permissive mode:
https://github.com/systemd/systemd/blob/master/src/core/load-fragment.c#L2909
whereas the dbus-execute equivalent of the code does not.

Since the permissive mode appears to be the right setting to support
older kernels/libseccomp, this will update the dbus-execute parsing
to also be permissive.

4 years agonetwork: rename eui64 to static
Yu Watanabe [Thu, 6 Feb 2020 11:05:16 +0000 (20:05 +0900)] 
network: rename eui64 to static

See RFC 4291.

Follow-up for 5f506a55606fed9fd74b851a18f15a9835a26d08.

4 years agochromiumos: sync auto suspend rules with chromeos commit e348a229bacc3
Mario Limonciello [Thu, 6 Feb 2020 15:55:42 +0000 (09:55 -0600)] 
chromiumos: sync auto suspend rules with chromeos commit e348a229bacc3

Enables autosuspend for the following:
    - Microchip (Composite HID + CDC)
    - i915
    - proc_thermal
    - xchi_hdc
    - snd_hda
    - pcieport
    - lpc_ich
    - iosf_mbi_pci
    - Realtek RTL8822C BT

4 years agoMerge pull request #14813 from keszybz/renames-and-null-printf
Yu Watanabe [Fri, 7 Feb 2020 04:21:17 +0000 (13:21 +0900)] 
Merge pull request #14813 from keszybz/renames-and-null-printf

Rename follow-up and gcc warning fix

4 years agocore/selinux-access: use _cleanup_ and improve logging 14813/head
Zbigniew Jędrzejewski-Szmek [Thu, 6 Feb 2020 20:39:40 +0000 (21:39 +0100)] 
core/selinux-access: use _cleanup_ and improve logging

Instead of setting the bus error structure and then freeing it, let's only set
it if used. If we will ignore the selinux denial, say ", ignore" to make this
clear. Also, use _cleanup_ to avoid gotos.

4 years agorepart: quit earlier if no .conf file exists
Yu Watanabe [Thu, 6 Feb 2020 14:43:02 +0000 (23:43 +0900)] 
repart: quit earlier if no .conf file exists

Fixes #14804.

4 years agobasic/selinux-util: expose _cleanup_freecon_
Zbigniew Jędrzejewski-Szmek [Thu, 6 Feb 2020 20:37:49 +0000 (21:37 +0100)] 
basic/selinux-util: expose _cleanup_freecon_

4 years agocore/selinux-access: do not use NULL for %s
Zbigniew Jędrzejewski-Szmek [Thu, 6 Feb 2020 20:16:08 +0000 (21:16 +0100)] 
core/selinux-access: do not use NULL for %s

../src/core/selinux-access.c: In function ‘mac_selinux_generic_access_check’:
../src/basic/log.h:223:27: error: ‘%s’ directive argument is null [-Werror=format-overflow=]
../src/core/selinux-access.c:235:85: note: format string is defined here
  235 |                         log_warning_errno(errno, "SELinux getcon_raw failed (tclass=%s perm=%s): %m", tclass, permission);
      |                                                                                     ^~

I wonder why nobody ever noticed this.

Fixes #14691 (other issues listed in that ticket have already been fixed).

4 years agonetwork: also change fair_queue_traffic_policing→fair_queueing
Zbigniew Jędrzejewski-Szmek [Wed, 5 Feb 2020 14:55:43 +0000 (15:55 +0100)] 
network: also change fair_queue_traffic_policing→fair_queueing

Follow-up for ca58d00c68bce8ac33439fccd81491bf04205fc5. I messed
up the "ing" suffix in the regex when doing the initial patch.

4 years agoselinux: update log message to suppress warning by coverity
Yu Watanabe [Thu, 6 Feb 2020 10:47:28 +0000 (19:47 +0900)] 
selinux: update log message to suppress warning by coverity

Fixes CID#1417440 and CID#1417438.

4 years agoMerge pull request #14800 from keszybz/ask-password-echo
Yu Watanabe [Thu, 6 Feb 2020 14:49:54 +0000 (23:49 +0900)] 
Merge pull request #14800 from keszybz/ask-password-echo

ask-password: give a hint to cancel echo

4 years agosysctl: fix segfault
Yu Watanabe [Thu, 6 Feb 2020 10:13:11 +0000 (19:13 +0900)] 
sysctl: fix segfault

Fixes #14801.

4 years agoshared/ask-password-api: show "(press TAB for no echo)" 14800/head
Zbigniew Jędrzejewski-Szmek [Thu, 6 Feb 2020 08:50:35 +0000 (09:50 +0100)] 
shared/ask-password-api: show "(press TAB for no echo)"

For #8495: it is arguably useful to not show the length of the password
in public spaces. It is possible to press TAB or BS to cancel the asterisks,
but this is not very discoverable. Let's make it discoverable by showing
a message (in gray). The message is "erased" after the first character
is entered.

4 years agoshared/ask-password-api: return "error" when dialogue is cancelled
Zbigniew Jędrzejewski-Szmek [Thu, 6 Feb 2020 08:32:16 +0000 (09:32 +0100)] 
shared/ask-password-api: return "error" when dialogue is cancelled

test-ask-password-api would crash if ^D was pressed.
If think the callers generally expect a non-empty strv as reply. Let's
return an error if we have nothing to return.

Also modernize test-ask-password-api a bit.

4 years agoMerge pull request #14156 from fbuihuu/deal-with-aliases-when-disabling
Zbigniew Jędrzejewski-Szmek [Thu, 6 Feb 2020 09:46:21 +0000 (10:46 +0100)] 
Merge pull request #14156 from fbuihuu/deal-with-aliases-when-disabling

Consider aliases in /usr when disabling units

4 years agocore: do not prepare a SELinux context for dummy files for devicenode bind-mounting
Christian Göttsche [Tue, 4 Feb 2020 17:07:07 +0000 (18:07 +0100)] 
core: do not prepare a SELinux context for dummy files for devicenode bind-mounting

Let systemd create the dummy file where a device node will be mounted on with the default label for the parent directory (e.g. /tmp/namespace-dev-yTMwAe/dev/).

Fixes: #13762
4 years agofirstboot: add missing check
Zbigniew Jędrzejewski-Szmek [Thu, 6 Feb 2020 08:19:46 +0000 (09:19 +0100)] 
firstboot: add missing check

If we check length of 'a', we must do the same for 'b'.

4 years agoman: fix typo in systemd.unit man page
Will Fleming [Thu, 6 Feb 2020 01:48:44 +0000 (20:48 -0500)] 
man: fix typo in systemd.unit man page

This commit fixes a minor typo: "setttings" -> "settings".

4 years agonetwork: remove unnecessary link->ifname from debug log statements
Mike Gilbert [Wed, 5 Feb 2020 16:04:50 +0000 (11:04 -0500)] 
network: remove unnecessary link->ifname from debug log statements

Since 98b0299479a68ffd414888368907fc776a46b82a, we log the interface
name automatically via log_link_debug().

Fixes: https://github.com/systemd/systemd/issues/14782
4 years agosd-journal: close journal files that were deleted by journald before we've setup...
Michal Sekletár [Tue, 4 Feb 2020 13:23:14 +0000 (14:23 +0100)] 
sd-journal: close journal files that were deleted by journald before we've setup inotify watch

Fixes #14695

4 years agounits: drop OnFailure= from .target units
Zbigniew Jędrzejewski-Szmek [Wed, 5 Feb 2020 12:11:01 +0000 (13:11 +0100)] 
units: drop OnFailure= from .target units

See c80a9a33d04fb4381327a69ce929c94a9f1d0e6c, target units can't fail.
I guess we need to figure out some replacement functionality, but at least
let's avoid the warning from systemd for now.

4 years agocgroup: systemctl: Don't display NULL if protection was set to max
Chris Down [Wed, 5 Feb 2020 12:12:52 +0000 (12:12 +0000)] 
cgroup: systemctl: Don't display NULL if protection was set to max

Inside format_bytes, we return NULL if the value is UINT64_MAX. This
makes some kind of sense where this has some other semantic meaning than
being a value, but in this case the value is both a.) not the default
(so we definitely want to display it), and b.) means "infinity" (or
"max" in cgroup terminology).

This patch adds a small wrapper around format_bytes that can be used for
these cases, to avoid the following situation:

    [root@tangsanjiao ~]# cat /sys/fs/cgroup/workload.slice/memory.low
    max
    [root@tangsanjiao ~]# systemctl show workload.slice -p MemoryLow
    MemoryLow=infinity
    [root@tangsanjiao ~]# systemctl status workload.slice | grep low:
Memory: 14.9G (low: (null))

After the patch:

    [root@tangsanjiao ~]# systemctl status workload.slice | grep low:
Memory: 15.1G (low: infinity)

4 years agodocs: Correct resource weight range
Michal Koutný [Wed, 5 Feb 2020 16:21:32 +0000 (17:21 +0100)] 
docs: Correct resource weight range

4 years agoMerge pull request #14415 from ssahani/prefixstable-rfc-7217-new
Zbigniew Jędrzejewski-Szmek [Wed, 5 Feb 2020 16:05:33 +0000 (17:05 +0100)] 
Merge pull request #14415 from ssahani/prefixstable-rfc-7217-new

network: Allow to specify multiple IPv6Token for SLAAC

4 years agopolkit: remove unused variable
Yu Watanabe [Wed, 5 Feb 2020 10:40:23 +0000 (19:40 +0900)] 
polkit: remove unused variable

Follow-up for 637486261528e8aa3da9f26a4487dc254f4b7abb.