David Tardon
4a979feb16
Move systemd-cryptenroll to systemd-udev
2022-03-17 17:35:55 +00:00
Michael Catanzaro
28acb3f912
Disable default DNS over TLS ( #1889901 )
2022-03-14 09:48:35 -05:00
Zbigniew Jędrzejewski-Szmek
d906ff0238
Rebase the bfq patch
2022-03-04 17:33:36 +01:00
Zbigniew Jędrzejewski-Szmek
5e7fc47a08
Avoid trying to create the symlink if there's a dangling symlink already
...
'test -e' says 'no' for dangling symlinks.
Let's also ignore the error if this fails. We shouldn't fail the
transaction.
2022-02-24 20:27:09 +01:00
Zbigniew Jędrzejewski-Szmek
a4d136e22a
Add workaround for audit breakage
2022-02-24 08:56:56 +01:00
Zbigniew Jędrzejewski-Szmek
c971c5b980
Drop some unnecessary requirements
2022-02-24 08:45:02 +01:00
Zbigniew Jędrzejewski-Szmek
8c4c6daba9
Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing
...
The analysis in 1ba983e0be
2022-02-24 00:11:19 +01:00
Zbigniew Jędrzejewski-Szmek
4cc75bbba5
Move part of %post scriptlet for resolved to %posttrans (rhbz#2018913)
2022-02-23 23:52:08 +01:00
Zbigniew Jędrzejewski-Szmek
996c95efaf
Bump release
2022-02-16 22:42:27 +01:00
Zbigniew Jędrzejewski-Szmek
4c2d7265ec
Add patch for new kernel headers
...
It's already included in systemd-stable, but v250.4 hasn't been tagged
yet.
2022-02-16 22:33:01 +01:00
Zbigniew Jędrzejewski-Szmek
e48b9066b7
Drop unused dependencies for scriptlets
2022-02-16 22:33:01 +01:00
Zbigniew Jędrzejewski-Szmek
1ba983e0be
Specify owner of /var/log/journal as root in the rpm listing
...
$ rpm -qlv systemd |grep -v 'root root'
-rw-rw-r-- 1 root utmp 0 Jan 22 03:38 /run/utmp
-rw-rw---- 1 root utmp 0 Jan 22 03:38 /var/log/btmp
-rw-rw-r-- 1 root utmp 0 Jan 22 03:38 /var/log/lastlog
-rw-rw-r-- 1 root utmp 0 Jan 22 03:38 /var/log/wtmp
drwxr-sr-x 2 root systemd- 0 Jan 22 03:38 /var/log/journal
During installation rpm would log an error that systemd-journal group
is unknown. We create all our users by calling sysusers in the %post
scriptlet, but that is too late. To avoid the warning we could either
add a %pre scriptlet, but that'd require adding a dependency on
shadow-utils for groupadd, since we can't use our own tools before we
are installed. Let's instead create the directory owned by root.root,
and change the group afterwards. The group ownership is for file
ownership, and in the worst case (we don't assign the group or set
mode +s), unprivileged users will not be able to read the logs.
We also use 'utmp' group, but that is provided by setup.rpm and is not
an issue.
https://bugzilla.redhat.com/show_bug.cgi?id=2018913#c24
2022-02-16 22:33:01 +01:00
Zbigniew Jędrzejewski-Szmek
cac0b2a5a7
Drop scriptlet for handling nobody user upgrades from Fedora <28
...
For https://fedoraproject.org/wiki/Changes/RenameNobodyUser a scriptlet
was introduced with prevents nss-systemd from synthesizing entries for nobody.
Let's remove the scriptlet: very few people upgrade from such old systems,
and even if they do, having a duplicate entry for nobody is annoying
but hardly a big problem.
(The other side of this, support in nss-systemd remains in place.)
This allows deps on the tools used in the scriptlet to be dropped from -libs.
While at it, also drop noop ldconfig scriptlets.
2022-02-16 22:32:56 +01:00
Zbigniew Jędrzejewski-Szmek
2731a22179
Bias the resolver towards libcurl-minimal
2022-02-10 18:14:26 +01:00
Zbigniew Jędrzejewski-Szmek
b54029abba
Drop 20-grubby.install plugin for kernel-install
2022-02-10 18:02:31 +01:00
Zbigniew Jędrzejewski-Szmek
f42ae67ed3
Add pam_namespace to systemd-user pam config
2022-02-10 17:42:47 +01:00
Zbigniew Jędrzejewski-Szmek
3ce3375cc6
Remove duplicated pam systemd-user file
2022-02-10 17:37:56 +01:00
Fedora Release Engineering
c763537617
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-22 02:12:42 +00:00
Zbigniew Jędrzejewski-Szmek
238e8e0e64
Fix creation of /var/log/lastlog
...
I have no idea how I managed to screw that up yesterday…
2022-01-19 08:31:33 +01:00
Zbigniew Jędrzejewski-Szmek
f97cf5817a
Take ownership of /var/log/lastlog
...
https://pagure.io/setup/pull-request/30 and
https://src.fedoraproject.org/rpms/util-linux/pull-request/10 are the
opposite steps for setup and util-linux.
2022-01-18 16:22:31 +01:00
Zbigniew Jędrzejewski-Szmek
3fe8cebea3
Version 250.3
2022-01-18 12:56:37 +01:00
Zbigniew Jędrzejewski-Szmek
d1787ccd07
Version 250.2
2022-01-10 22:04:43 +01:00
Zbigniew Jędrzejewski-Szmek
c1e2f480f7
Disable bpf filters on s390x
2022-01-04 18:27:08 +01:00
Zbigniew Jędrzejewski-Szmek
206f30e9fd
Version 250.1
2022-01-04 18:27:08 +01:00
Zbigniew Jędrzejewski-Szmek
620e0cff6b
Install only license files relevant to the effective license
...
We installed all the license files for the licenses used in the sources
(as %doc), but that doesn't seem useful.
2022-01-04 18:27:08 +01:00
Zbigniew Jędrzejewski-Szmek
60d0bbefe2
Disable bpf filters on arm64
2021-12-30 21:42:10 +01:00
Zbigniew Jędrzejewski-Szmek
114f45fe1f
Skip bpf filtering on arm32 and ppc64el
2021-12-28 16:10:15 +01:00
Zbigniew Jędrzejewski-Szmek
7993a98ea4
Enable bpf-framework
2021-12-25 15:31:58 +01:00
Zbigniew Jędrzejewski-Szmek
3c872dc5d9
Fix warning about systemd-boot-update.service not existing on arm32
2021-12-25 11:02:05 +01:00
Zbigniew Jędrzejewski-Szmek
2edf38c273
Version 250
2021-12-23 21:15:44 +01:00
Zbigniew Jędrzejewski-Szmek
34a8fa5907
Switch unit status name format to 'combined'
2021-12-23 13:45:31 +01:00
Zbigniew Jędrzejewski-Szmek
b1af825426
Version 250-rc3
2021-12-20 19:48:35 +01:00
Zbigniew Jędrzejewski-Szmek
7f4e198603
Create /etc/resolv.conf symlink if nothing is present yet
2021-12-18 17:40:12 +01:00
Zbigniew Jędrzejewski-Szmek
184bb74091
Move libcryptsetup-token plugins to -udev
2021-12-14 19:09:00 +01:00
Zbigniew Jędrzejewski-Szmek
711d924ba3
Move systemd-boot-update.service to -udev subpackage
...
It will not be enabled on upgrades, but I think this is OK. sd-boot
is not very widely used anyway.
2021-12-12 13:01:40 +01:00
Pavel Březina
0898a89444
spec: remove nsswitch.conf scriptlet
...
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory
Both systemd and resolved nss modules are now enabled by default in
authselect. Users are now expected to use authselect to configure
the system and packages should no longer support non-authselect
configurations.
Resolves: rhbz#2023743
2021-12-10 17:09:21 +01:00
Zbigniew Jędrzejewski-Szmek
b24b99d669
Add Recommends for dlopened libs and move files into subpackages
2021-12-09 23:23:39 +01:00
Zbigniew Jędrzejewski-Szmek
1634b1b16a
Revert "spec: remove nsswitch.conf scriptlet"
...
This reverts commit 2afe364ac4
2021-12-09 18:49:59 +01:00
Pavel Březina
2afe364ac4
spec: remove nsswitch.conf scriptlet
...
Related to: https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory
Both systemd and resolved nss modules are now enabled by default in
authselect. Users are now expected to use authselect to configure
the system and packages should no longer support non-authselect
configurations.
Resolves: rhbz#2023743
2021-12-09 18:27:16 +01:00
Zbigniew Jędrzejewski-Szmek
11bf124056
Fix memleak
2021-12-09 16:02:25 +01:00
Zbigniew Jędrzejewski-Szmek
ce4156b3dd
Version 250-rc1
...
The crypto backend is switched to openssl.
gcrypt is still used for FSS in libsystemd.so.
2021-12-09 16:02:25 +01:00
Zbigniew Jędrzejewski-Szmek
e19aaa4604
Drop comments about already-merged pull request
2021-12-03 15:48:22 +01:00
Ludwig Nussel
6ffa8d89d6
Fix video link
2021-12-02 16:28:17 +00:00
Zbigniew Jędrzejewski-Szmek
d1ad6b189d
%ghost /var/lib/{machines,portables}
2021-11-24 10:00:32 +01:00
Davide Cavalca
b7c95ddd9e
Disable legacy iptables support
2021-11-19 08:29:38 -08:00
Luca BRUNO
21ca64d8e0
sysusers/provides: parse and output static IDs
...
This adds support for parsing static UIDs and GIDs from sysusers.d
fragments, and automatically forwarding them to the generated
'Provides' entries.
It will allow inspecting users/groups with static IDs directly
from package metadata:
```
$ rpm --query --provides --package gdm-41.0-3.fc36.x86_64.rpm
[...]
group(gdm) = 42
user(gdm) = 42
```
2021-11-16 16:36:58 +00:00
Zbigniew Jędrzejewski-Szmek
2d54326a8c
Bump release
...
Oh, no autorelease here!
2021-11-15 14:09:32 +01:00
Zbigniew Jędrzejewski-Szmek
1d712f8acf
Supress errors on selinux systems
...
See https://bugzilla.redhat.com/show_bug.cgi?id=2023332 .
https://bugzilla.redhat.com/show_bug.cgi?id=2023332 is also related.
2021-11-15 13:47:07 +01:00
Zbigniew Jędrzejewski-Szmek
87e1ce3317
Version 249.7
2021-11-14 16:12:23 +01:00
Petr Menšík
27cc5e08c2
Switch to NM resolver on systemd-resolved uninstall
...
If /etc/resolv.conf pointed to systemd-resolved stub configuration, it
is obvious it would stop working. Compensate it by deleting the link, it
would be created again on installation. Try to pass ownership to NM,
which also provides similar file. Keep it missing otherwise, might be
created by unknown tool on reboot.
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2021-11-14 09:38:52 +00:00
