Commit Graph

2115 Commits

Author SHA1 Message Date
Cyril Brulebois
070e85622c Import Debian changes 234-2.2
systemd (234-2.2) unstable; urgency=high

  * Non-maintainer upload.
  * Switch to gcc-6 on all architectures, working around an FTBFS on mips64el,
    apparently due to a gcc-7 bug (See: #871514):
    - Add gcc-6 to Build-Depends in debian/control
    - Export CC = gcc-6 in debian/rules
2017-08-30 10:42:00 -03:00
Cyril Brulebois
273dd69a12 Import Debian changes 234-2.1
systemd (234-2.1) unstable; urgency=high

  * Non-maintainer upload.
  * Fix missing 60-input-id.rules in udev-udeb, which breaks the graphical
    version of the Debian Installer, as no key presses or mouse events get
    processed (Closes: #872598).
2017-08-30 10:41:41 -03:00
Michael Biebl
b63f1284a9 Release version 234-2 to unstable 2017-07-20 15:14:03 +02:00
Michael Biebl
e3727685e9 Revert "units: Tell login to preserve environment"
Environment=LANG= LANGUAGE= LC_CTYPE= ... as used in the getty units is
not unsetting the variables but instead sets it to an empty var. Passing
that environment to login messes up the system locale settings and
breaks programs like gpg-agent.

This reverts commit db6aedab9292678918f15807a0d835be35511667.

Closes: #868695
2017-07-20 15:12:50 +02:00
Felipe Sateler
35a0cbc891 test-condition: Don't assume that all non-root users are normal users
Automated builders may run under a dedicated system user, and this test
would fail that.
2017-07-20 15:07:39 +02:00
Martin Pitt
a9683ef10c udev README.Debian: Fix name of example *.link file 2017-07-14 08:21:36 +02:00
Michael Biebl
5a37101838 Release version 234-1 to unstable 2017-07-13 17:42:52 +02:00
Michael Biebl
be1af41367 Avoid requiring a "kvm" system group
This group is not universally available and as a result generates a
warning during boot:

 systemd-udevd: Specified group 'kvm' unknown

As kvm is only really useful if the qemu package is installed and this
package already takes care of setting up the proper permissions for
/dev/kvm, drop this rule from 50-udev-default.rules.

See https://github.com/systemd/systemd/issues/6360
2017-07-13 17:42:46 +02:00
Michael Biebl
5ec38b7c44 Do not link udev against libsystemd-shared
We ship udev in a separate binary package, so can't use
libsystemd-shared, which is part of the systemd binary package.
2017-07-13 16:24:49 +02:00
Michael Biebl
26ea947484 Mark test-timesync as manual
The test tries to setup inotify watches for /run/systemd/netif/links
which fails in a buildd environment where systemd is not active.

See https://github.com/systemd/systemd/issues/6353
2017-07-13 15:15:10 +02:00
Michael Biebl
b23f4f6c98 Use UTF-8 locale when building the package
Otherwise meson will be pretty unhappy when trying to process files with
unicode characters. Use C.UTF-8 as this locale is pretty much guaranteed
to be available everywhere.
2017-07-13 15:03:17 +02:00
Martin Pitt
e54b571bb9 udev README.Debian: Update transitional rules and mention *.link files
- 01-mac-for-usb.link got replaced with 73-usb-net-by-mac.rules

 - /etc/systemd/network/50-virtio-kernel-names.link is an upgrade
   transition for VMs with virtio

 - Describe *.link files as a simpler/less error prone (but also less
   flexible) way of customizing interface names.

Closes: #868002
2017-07-13 13:05:33 +02:00
Michael Biebl
26da576604 Change priority of libnss-* packages from extra to optional
This follows a change in the archive triggered by
https://anonscm.debian.org/git/dbnpolicy/policy.git/commit/?id=4b3e61ac3fa06d8b82433e09a76f42a4f8859306
2017-07-12 22:48:20 +02:00
Michael Biebl
5f5de71820 Bump Standards-Version to 4.0.0 2017-07-12 22:46:27 +02:00
Michael Biebl
428df0b050 Update lintian override for systemd-tests
Upstream now installs manual and unsafe tests in subdirectories of
/usr/lib/systemd/tests/, so ignore those as well.
2017-07-12 22:28:57 +02:00
Michael Biebl
7e37fb3bc8 Update symbols file for libsystemd0 2017-07-12 22:28:57 +02:00
Michael Biebl
1866313760 udev autopkgtest: no longer install test-udev binary manually
This is now done by the upstream build system.

See https://github.com/systemd/systemd/pull/6178
2017-07-12 22:28:57 +02:00
Martin Pitt
2607164cd6 Fix debhelper build dependency for backports
Gbp-Dch: Ignore
2017-07-12 22:28:57 +02:00
Michael Biebl
d0d4c4121a Update fsckd patch for meson 2017-07-12 22:28:57 +02:00
Michael Biebl
0a079888b5 Switch build system from autotools to meson
Update the Build-Depends accordingly.
2017-07-12 22:27:57 +02:00
Michael Biebl
47c4ed7559 Rebase patches 2017-07-12 21:29:54 +02:00
Michael Biebl
a00e6e49e0 Release version 233-10 to unstable 2017-07-03 18:52:23 +02:00
Nicolas Braud-Santoni
19c9134649 debian/extra/rules: Use updated U2F ruleset
This ruleset comes from Yubico's libu2f-host.

Closes: #824532
2017-07-03 18:49:27 +02:00
Michael Biebl
fb58ef0154 Improve RLIMIT_NOFILE handling
Use /proc/sys/fs/nr_open to find the current limit of open files
compiled into the kernel instead of using a hard-coded value of 65536
for RLIMIT_NOFILE.

Closes: #865449
2017-07-03 18:13:26 +02:00
Michael Biebl
6ed43a4e71 Be truly quiet in systemctl -q is-enabled
Closes: #866579
2017-07-03 18:13:14 +02:00
Dimitri John Ledkov
f28cb6f578
Fix out-of-bounds write in systemd-resolved.
CVE-2017-9445
LP: #1695546
Closes: #866147
2017-07-03 14:57:50 +01:00
Martin Pitt
71f9a39ac1 Adjust var-lib-machines.mount target
Upstream PR #6095 changed the location to
{remote-fs,machines}.target.wants, so just install all available ones.
2017-06-22 15:56:19 +02:00
Michael Biebl
da581f6c05 Drop leftover BREAKS_RCS_COMPAT
Followup for commit 928e4fd7be.

Gbp-Dch: Ignore
2017-06-21 16:24:58 +02:00
Michael Biebl
68998a5a1b Release version 233-9 to unstable 2017-06-19 16:06:13 +02:00
Michael Biebl
928e4fd7be Drop Breaks for packages shipping rcS init scripts
This transition was completed in stretch.
2017-06-19 16:05:59 +02:00
Michael Biebl
f4dbed4ee5 Drop no longer needed Breaks against usb-modeswitch 2017-06-19 16:05:59 +02:00
Michael Biebl
c39b6018c2 hwdb: Use path_join() to generate the hwdb_bin path
This ensures /lib/udev/hwdb.bin gets the correct SELinux context. Having
double slashes in the path makes selabel_lookup_raw() return the wrong
context.

Closes: #851933
2017-06-01 16:09:31 +02:00
Michael Biebl
731e739c0e Release version 233-8 to experimental 2017-05-29 14:14:32 +02:00
Michael Biebl
9027eabb43 resolved: fix null pointer p->question dereferencing
This fixes a bug which allowed a remote DoS (daemon crash) via a crafted
DNS response with an empty question section.

Closes: #863277
Fixes: CVE-2017-9217
2017-05-29 14:10:53 +02:00
Michael Biebl
a0e7ccccca timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
Closes: #861769
2017-05-29 13:34:30 +02:00
Michael Biebl
5471a7bf36 Drop versioned Build-Depends on dpkg-dev
It's no longer necessary as even Jessie ships a new enough version.
2017-05-26 15:38:19 +02:00
Michael Biebl
639a12938b Bump debhelper compatibility level to 10
Drop --with autoreconf and --parallel as those are now enabled by
default.

The systemd sequence is now also enabled by default. We don't strictly
need the additional complexity that comes with init-system-helpers, as
we can just rely on systemctl being available. So use --without systemd
for the time being.

Gbp-Dch: Short
2017-05-26 15:15:23 +02:00
Michael Biebl
b33f8bda39 Release version 233-7 to experimental 2017-05-24 12:26:56 +02:00
Felipe Sateler
1f9f713f59 Specify nobody user and group
Otherwise nss-systemd will translate to group 'nobody', which doesn't
exist on debian systems.
2017-05-22 19:09:56 +02:00
Michael Biebl
e8bb223fa6 seccomp: Add clone syscall definitions for mips
Closes: #861171
2017-05-22 15:48:17 +02:00
Michael Biebl
4ee4c8c119 service: Serialize information about currently executing command
Closes: #861157
2017-05-22 15:40:56 +02:00
Michael Biebl
a73b5e03eb Add Depends: procps to systemd
It's required by /usr/lib/systemd/user/systemd-exit.service which calls
/bin/kill to stop the systemd --user instance.

Closes: #862292
2017-05-22 14:50:51 +02:00
Michael Biebl
443cbc030a ima: Ensure policy exists before asking the kernel to load it
Closes: #863111
2017-05-22 13:35:09 +02:00
Dimitri John Ledkov
baa789362f
ubuntu: disable dnssec on any ubuntu releases
The internet is broken, and debugging the internet with Ubuntu is not
helpful. Too many websites are incorrectly signed with dnssec, and there are
many outstanding bugs upstream and newly reported in Ubuntu as soon as artful
landed with dnssec re-enabled. Ubuntu devel releases are used on day to day
basis and are not experimental enough to break developers'
networking. Re-enabling dnssec should only be considered once existing upstream
and launchpad dnssec bugs are resolved.

LP: #1690605
Gbp-Dch: Short
2017-05-17 17:05:44 +01:00
Michael Biebl
060f8e5705 basic/journal-importer: Fix unaligned access in get_data_size()
Closes: #862062
2017-05-08 15:00:27 +02:00
Michael Biebl
4a47a2e0e6 Release version 233-6 to experimental 2017-04-28 21:49:33 +02:00
Martin Pitt
b744f71282 debian/extra/checkout-upstream: Rebase PR against master
With this, what we test will be much closer to what we will actually
merge. It also avoids older PRs to now suddenly fail because they are
based against an older HEAD without the meson patches.
2017-04-26 08:56:21 +02:00
Sjoerd Simons
f713edf4a4 init-functions Only call daemon-reload when planning to redirect
systemctl daemon-reload is a quite a heavy operation, it will re-parse
all configuration and re-run all generators. This should only be done
when strictly needed.

The init-function helpers try to cope with an lsb init script being
called *before* the sysv generator has run. Unfortunately that always got
triggered when other script sourced the helpers as there won't be a
service matching them.

Resolve this by only potentially reloading the daemon when preparing to
redirect.

Closes: #861158
2017-04-25 10:04:45 +02:00
Michael Biebl
6731a761fe Get PACKAGE_VERSION from config.h
This also works with meson and is not autotools specific.
2017-04-14 00:12:43 +02:00
Michael Biebl
beb9813840 Please lintian and fix description-is-pkg-name
Gbp-Dch: Ignore
2017-04-14 00:12:04 +02:00