coredump: dump priviliges when processing system coredumps Let's add an extra-safety net and change UID/GID to the "systemd-coredump" user when processing coredumps from system user. For coredumps of normal users we keep the current logic of processing the coredumps from the user id the coredump was created under. Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=87354

README: drop link to systemd-commits ML Since we moved to github the commits ML is basically dead, hence don't advertise it anymore.

README, tests: remove /etc/mtab This is a followup for 1d40ddb

README: Recommend kinvolk regarding engineering services They are our friends, do systemd development, hence add them.

core: drop check for /etc/mtab util-linux 2.27.1 now entirely stops looking at /etc/mtab, so we don't need to verify /etc/mtab during early boot any more. Later on, tmpfiles.d/etc.conf will fix /etc/mtab anyway, so there's not even a point in warning about it. Drop test_mtab() and bump the util-linux dependency to >= 2.17.1. Fixes #1495

mount: use libmount to monitor mountinfo & utab The current implementation directly monitor /proc/self/mountinfo and /run/mount/utab files. It's really not optimal because utab file is private libmount stuff without any official guaranteed semantic. The libmount since v2.26 provides API to monitor mount kernel & userspace changes and since v2.27 the monitor is usable for non-root users too. This patch replaces the current implementation with libmount based solution. Signed-off-by: Karel Zak <kzak@redhat.com>

README: remove obsolete instructions regarding python-systemd/sphinx

README: document new /etc/mtab requirement

README: bump minimal required kernel version We generally try to support 2y old kernels, which allows us bump the minimal required version to 3.11 now. Also, clarify that support for the unified cgroup hierarchy requires 4.2 or newer.

README: drop reference to Endocode Chris Kühl does not work at Endocode anymore, the contact data is no longer valid.

README: document that RT group sched should be turned off https://bugs.freedesktop.org/show_bug.cgi?id=87570 https://bugzilla.redhat.com/show_bug.cgi?id=1229700

build-sys: warn if people don't change the default NTP servers when building systemd Also, explain the situation in the docs. Relates to #437

README: mention "git archive"

build-sys: split internal basic/ library from shared/ basic/ can be used by everything cannot use anything outside of basic/ libsystemd/ can use basic/ cannot use shared/ shared/ can use libsystemd/

build-sys: drop references to gobject-introspection It has been removed alongside gudev

point to github issues instead of freedesktop bugzilla

README: update links to reference new home (GitHub)

remove gudev and gtk-doc The library moved to: https://git.gnome.org/browse/libgudev/

README: fix typo

systemctl: drop hardcoded chkconfig invocation Introduce /usr/lib/systemd/systemd-sysv-install [--root=] <action> <name> abstraction, replacing the direct calling of chkconfig. This allows distributions to call their specific tools like update-rc.d without patching systemd. Ship systemd-sysv-install.SKELETON as an example for packagers how to implement this. Drop the --enable-chkconfig configure option. Document this in README and point to it in NEWS.

swap: use swapon -o This patch simplify swapon usage in systemd. The command swapon(8) since util-linux v2.26 supports "-o <list>". The idea is exactly the same like for mount(8). The -o specifies options in fstab-compatible way. For systemd it means that it does not have to care about things like "discard" or another swapon specific options. swapon -o <options-from-fstab> For backward compatibility the code cares about "Priority:" swap unit field (for a case when Priority: is set, but pri= in the Options: is missing). References: http://lists.freedesktop.org/archives/systemd-devel/2014-October/023576.html

README: document that we prefer if CONFIG_CHECKPOINT_RESTORE is turned on, for the kcmp() syscall

README: glibc version 2.16 is required for IP_UNICAST_IF https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=be08eda5 https://bugs.gentoo.org/show_bug.cgi?id=546194

README: mention ACLs more They are now useful for any fs used for journal storage.

README: add pkg-config to required deps for autogen Otherwise, several macros are undefined.

tmpfiles: use ACL magic on journal directories

README: CONFIG_DEVPTS_MULTIPLE_INSTANCES is necessary https://bugs.debian.org/773932

blkid: Warn when rejecting a superblock with a bad csum Bump libblkid requirement from 2.20 to 2.24. util-linux 2.25 is actually required since fdbbad981cc5da8bb4ed7e9b6646e7a114745ec5

README: notice kernel config for CPUQuota

mount: use libmount to enumerate /proc/self/mountinfo This lets libmount add in user options from /run/mount/utab, like _netdev which is needed to get proper ordering against remote-fs.target

README: mention that engineering services for systemd are available from endocode

remove references of readahead

README: simplify documented dependency on util-linux we stritcly require features from util-linux v2.25, such a new version is not optional, hence document this.

fsck: re-enable fsck -l The -l (lock) has been temporary disabled due to conflict with udev (https://bugs.freedesktop.org/show_bug.cgi?id=79576) The problem is fixed since util-linux v2.25 (Jul 2014).

udev: remove userspace firmware loading support

README: mention the new optional libidn dependency

README: document what to do with the NSS modules

README: add liblz4

doc: grammatical corrections

README: mention that elfutils is an (optional) dependency now

README: add gobject-introspection

Remove libattr mentions from README It is no longer required.

udev: assign group "input" to all input devices

doc: specify kernel configs for cpushares

udev: stop using "floppy" group

README: mention new required user systemd-bus-proxy

resolved: run as unpriviliged "systemd-resolve" user This service is not yet network facing, but let's prepare nonetheless. Currently all caps are dropped, but some may need to be kept in the future.

README: document the new "systemd-network" user we require for systemd-networkd

fix spelling of privilege

timesyncd: run timesyncd as unpriviliged user "systemd-timesync" (but still with CAP_SYS_TIME)

doc: comma placement corrections and word order Set commas where there should be some. Some improvements to word order.

doc: typographical fine tuning

doc: use non-contracted forms in written documents

Document CONFIG_NET_NS as a required kernel option Several units now utilize the PrivateNetwork parameter, which requires network namespace support.

core: remove tcpwrap support tcpwrap is legacy code, that is barely maintained upstream. It's APIs are awful, and the feature set it exposes (such as DNS and IDENT access control) questionnable. We should not support this natively in systemd. Hence, let's remove the code. If people want to continue making use of this, they can do so by plugging in "tcpd" for the processes they start. With that scheme things are as well or badly supported as they were from traditional inetd, hence no functionality is really lost.

README: update

README: Correct EFI requirements systemd does not need or use CONFIG_EFI_VARS anywhere, this should be CONFIG_EFIVAR_FS instead.

README: document that we still encourage people to turn off audit when they want to use containers

README: document that /var/run must be a symlink → /run

sd-damon is LGPL now

README: mention libudev's requirement

syscallfilter: port to libseccomp

build-sys: make lxml required when generating indices Since the manpage indices generated without lxml would be missing some parts, it doesn't make sense to keep lxml optional anymore.

build-sys: default to gold linker gold doesn't exhibit the problems with linking of compatibility libraries. It is also slightly faster: make clean && make -j5 bfd gold real 34.885s 33.707s user 34.486s 32.189s sys 9.929s 10.845s real 35.128s 33.508s user 34.660s 31.858s sys 10.798s 10.341s real 35.405s 33.748s user 34.765s 32.384s sys 11.635s 10.998s real 35.250s 33.795s user 34.704s 32.253s sys 11.220s 11.469s touch src/libsystemd/sd-bus.c && make -j5 bfd gold real 10.224s 9.030s user 11.664s 9.877s sys 3.431s 2.878s real 10.021s 9.165s user 11.526s 9.990s sys 3.061s 3.015s real 10.233s 8.961s user 11.657s 9.973s sys 3.467s 2.202s real 10.160s 9.086s user 11.637s 9.950s sys 3.188s 2.859s

README: list CONFIG_FHANDLE in main section

readme: CONFIG_FHANDLE is a requirement

bus: switch kdbus bloom filter over to SipHash (from MurmurHash3) Let's try to standardize on a single non-cryptographic hash algorithm, and for that SipHash appears to be the best answer. With this change there are two other hash functions left in systemd: an older version of MurmurHash embedded into libudev for the bloom filters in udev messages (which is hard to update, given that the we probably should stay compatible with older versions of the library). And lookup3 in the journal files (which we could replace for new files, but which is probably not worth the work).

libudev: ship the original MurmurHash2.[ch] file

Update README with test/ requirements

update README to not suggest that systemd works without procfs

README: remove obsolete paragraph about D-Bus

TODO: add dbus runtime depedency

TODO: remove dbus requirement

updates for TODO and README * library support for setns() system call was added to glibc version 2.14 (setns() call is use in src/machine/machinectl.c and src/libsystemd-bus-container.c) * utf8 validation call are already exported (via sd-utf8.c file) - commit - 369c583b3fb3d672ef469d53141e274ec9d2e8a7

man: wording and grammar updates This is a recurring submission and includes corrections to various issue spotted.

static-nodes: don't call mkdir This is no longer necessary with kmod-15. Bump the requirement.

README: add SCSI BSG option

README: update list of used LICENSEs

README: Bump to Linux 3.0 Support for writing to cgroup.procs was introduced in 3.0

README Bump minimum required version of kmod See edeb68c53f1cdc452016b4c8512586a70b1262e3.

audit: since audit is apparently never going to be fixed for containers tell the user what's going on Let's try to be helpful to the user and give him a hint what he can do to make nspawn work with normal OS containers. https://bugzilla.redhat.com/show_bug.cgi?id=893751

man: use lxml for faster generation and pretty printing

core: mount and initialize Smack SMACK is the Simple Mandatory Access Control Kernel, a minimal approach to Access Control implemented as a kernel LSM. The kernel exposes the smackfs filesystem API through which access rules can be loaded. At boot time, we want to load the access rules as early as possible to ensure all early boot steps are checked by Smack. This patch mounts smackfs at the new location at /sys/fs/smackfs for kernels 3.8 and above. The /smack mountpoint is not supported. After mounting smackfs, rules are loaded from the usual location. For more information about Smack see: http://www.kernel.org/doc/Documentation/security/Smack.txt

README: more CONFIG_* updates

README: remove CONFIG_HOTPLUG, add CONFIG_NET

README: add kernel config options

Fix typos

journal: make gatewayd run under its own user ID

README: add udev goups

journald: introduce new "systemd-journal" group and make it own the journal files Previously all journal files were owned by "adm". In order to allow specific users to read the journal files without granting it access to the full "adm" powers, introduce a new specific group for this. "systemd-journal" has to be created by the packaging scripts manually at installation time. It's a good idea to assign a static UID/GID to this group, since /var/log/journal might be shared across machines via NFS. This commit also grants read access to the journal files by default to members of the "wheel" and "adm" groups via file system ACLs, since these "almost-root" groups should be able to see what's going on on the system. These ACLs are created by "make install". Packagers probably need to duplicate this logic in their postinst scripts. This also adds documentation how to grant access to the journal to additional users or groups via fs ACLs.

ProFUSION got bought by Intel

python: build html docs using sphinx Build instructions: make make DESTIDIR=/tmp/... install make DESTIDIR=/tmp/... sphinx-html sphinx-man sphinx-epub ...

man: move bootchart README to manpage, docbooksify

build-sys: make PolicyKit support compile-time optional (was runtime-optional already)

README: remove mentioning of nss-myhostname "package"

README - dependencies: unify and add util-linux reference Use '>=' everywhere for consistency and point out that new util-linux provides sulogin.

README: mention dependency on libpython

build-sys: make loadable module support optional kmod is unecessary if loadable module support is disabled in the kernel, so make the dependency optional.

README: don't list libgcrypt twice as dep

README,TODO: typo fixes

journal: implement time-based rotation/vacuuming This also enables time-based rotation (but not vacuuming) after 1month, so that not more one month of journal is lost at a time per vacuuming.

journal: fix build in VALGRIND compatibility mode

README: update

journal: add minimal journal gateway daemon based on GNU libmicrohttpd This minimal HTTP server can serve journal data via HTTP. Its primary purpose is synchronization of journal data across the network. It serves journal data in three formats: text/plain: the text format known from /var/log/messages application/json: the journal entries formatted as JSON application/vnd.fdo.journal: the binary export format of the journal The HTTP server also serves a small HTML5 app that makes use of the JSON serialization to present the journal data to the user. Examples: This downloads the journal in text format: # systemctl start systemd-journal-gatewayd.service # wget http://localhost:19531/entries Same for JSON: # curl -H"Accept: application/json" http://localhost:19531/entries Access via web browser: $ firefox http://localhost:19531/

journal: make libgcrypt dependency optional

Add a few more dependencies to README

Spelling fixes.

delete plymouth units; moved to plymouth

README: update udev requirements

relicense to LGPLv2.1 (with exceptions) We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends.

remove GTK pieces They've moved to systemd-ui.

README: update header line

README: fix git URLs

README: correct license claims

update README

use libexecdir, bindir, sbindir, switch to /usr/lib/udev in documentation

README: explain dependency on cgroups

update README

update README

README: we need Linux 2.6.39

build-sys: make gperf configure check fatal and document the new build requirement.

configure: reorder options

libsystemd-daemon: support installation in --with-rootlibdir

README: document license

README: document relation to nss-myhostname

update NEWS

bump requirement to Linux kernel 2.6.32 and ARM 2.6.36

configure: allow to enable/disable extras individually - remove gobject introspection switch - disable hid2hci by default (moved to bluez) - disable action-modeswitch by default (will move to usb_modeswitch) - disable edd_id by default (problems with disk signatures) - disable legacy floppy by default (no more nasty device node hacks by default)

Docs: README: Add a comma to offset the modifier Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: `set up' is the verb; `setup' is a noun Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: Flip sentence structure to improve wording Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: `does never apply' -> `never applies' Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: Clarify configuration of existing devices Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: Clean up `udev extras' requirements Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: Remove commas and use subjective mood Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: Add missing `and' Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: Use present tense Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: Clean up a sentence Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: `,' -> `;' Signed-off-by: Michael Witten <mfwitten@gmail.com>

Docs: README: `to replace' -> `replacing' Signed-off-by: Michael Witten <mfwitten@gmail.com>

main: add link to wiki page with longer explanation of the /usr madness

s/seperate/separate/

README: refer to profusion if people ask for consulting/engineering services

ask-password: supported plymouth cached passwords

README: document that we need ipv6

README: update requirements

update README

update README

shutdown: create /var/run/nologin instead of /etc/nologin which is supported since PAM 1.1.2

README: Check for libudev-160, as in configure.ac

README: mention libcap dependency https://bugs.freedesktop.org/show_bug.cgi?id=30060

update NEWS README

build-sys: remove vala generated sources only when valac is around

build-sys: include README and LICENSE in tarball

update README regarding kernel version and default rules

update README and NEWS

require 2.6.27 for proper signalfd handling <zzam> kay: ping I found out why udev-145 fails on some systems with kernel 2.6.25 and 2.6.26 <zzam> kay: it is because glibc was compiled against linux-headers-2.6.27 or newer and issues signalfd4 syscall which was introduced in kernel 2.6.27 and not older signalfd syscall

update README

README: add CONFIG_BLK_DEV_BSG

README: update

README: add /lib/udev/ is private

configure: enable all extras by default, provide --disable-extras

README: add INOTIFY and SIGNALFD

README: add kernel options

udevd: convert to event worker processes Event processes now get re-used after they handled an event. This reduces pressure on the CPU significantly because cloned event processes no longer cause page faults in the main daemon. After the events have settled, the no longer needed worker processes get killed.

update NEWS

rules: Ubuntu merge - s/uucp/dialout/

rules: Ubuntu merge - use group "tape"

require 2.6.22+ kernel

require non-SYSFS_DEPRECATED 2.6.20+ kernel

remove old README

libudev: monitor - add event properties to udev_device

use autotools

release 125

release 119

switch mailing lists to linux-hotplug@vger.kernel.org

update README

update README

switch ifdef __KLIBC__ to ifndef __GLIBC__

update README

remove all stripping code

update README Signed-off-by: Kay Sievers <kay.sievers@suse.de>

remove outdated and misleading stuff Packagers who still need this, should carry it in their own package. It just causes too much trouble to users to have it in the tree and expect that it's needed or the way to do it. Signed-off-by: Kay Sievers <kay.sievers@suse.de>

clean up for distribution git-svn-id: svn+ssh://rootserver/home/lennart/svn/private/projects/nss-myhostname@85 bf9bc1cc-28ce-0310-abfb-9041aa761afb

update README Signed-off-by: Kay Sievers <kay.sievers@suse.de>

update README and RELEASE-NOTES Signed-off-by: Kay Sievers <kay.sievers@suse.de>

remove our own copy of klibc Signed-off-by: Kay Sievers <kay.sievers@suse.de>

clarify README Signed-off-by: Kay Sievers <kay.sievers@suse.de>

add EXTRAS documentation to the README file. Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

trivial text cleanups Signed-off-by: Kay Sievers <kay.sievers@suse.de>

update README Signed-off-by: Kay Sievers <kay.sievers@suse.de>

remove device node, when type block/char has changed Signed-off-by: Kay Sievers <kay.sievers@suse.de>

[PATCH] rename namedev_dev to udev_rule

[PATCH] add USE_SELINUX to README documentation so people have a chance to see what is going on.

[PATCH] remove USE_DBUS and USE_SELINUX flags from the README as they are no longer present.

[PATCH] Add initial SELinux support for udev Based on a patch from Daniel J Walsh <dwalsh@redhat.com>

[PATCH] add KERNEL_DIR option so that the distros will be happy Based on a patch from Svetoslav Slavtchev <svetljo@gmx.de>

[PATCH] clean up the logging patch a bit to make the option more like the other options. Also documented it and added it to the .spec file.

[PATCH] update the README in a few places.

[PATCH] dump latest klibc into the udev build tree KLIBC is used as an internal makefile variable, it expands to either true or false right now. udev should use something else than KLIBC to allow build against the latest and greatest klibc version.

[PATCH] document the different Makefile config options that we have.

[PATCH] 005 release

[PATCH] add klibc linux symlink info to the README

[PATCH] added README info for how to build using klibc.

[PATCH] Updatd the README

[PATCH] added 0.2 change log info.

[PATCH] added more documentation in README and TODO files.