diff --git a/NEWS b/NEWS index 10daec629d..ecb5df82b3 100644 --- a/NEWS +++ b/NEWS @@ -251,7 +251,7 @@ CHANGES WITH 248: be restored for individual services with NoExecPaths=/dev (or by allow- listing and excluding /dev from ExecPaths=). - * Permissions for /dev/vsock are now set to 0666, and /dev/vhost-vsock + * Permissions for /dev/vsock are now set to 0o666, and /dev/vhost-vsock and /dev/vhost-net are owned by the kvm group. * The hardware database has been extended with a list of fingerprint diff --git a/man/systemd.device.xml b/man/systemd.device.xml index 255ca3373b..596d334d5d 100644 --- a/man/systemd.device.xml +++ b/man/systemd.device.xml @@ -26,11 +26,10 @@ Description - A unit configuration file whose name ends in - .device encodes information about a device unit - as exposed in the - sysfs/udev7 - device tree. + A unit configuration file whose name ends in .device encodes information about a + device unit as exposed in the + sysfs/udev7 device + tree. This may be used to define dependencies between devices and other units. This unit type has no specific options. See systemd.unit5 @@ -40,14 +39,10 @@ sections. A separate [Device] section does not exist, since no device-specific options may be configured. - systemd will dynamically create device units for all kernel - devices that are marked with the "systemd" udev tag (by default - all block and network devices, and a few others). This may be used - to define dependencies between devices and other units. To tag a - udev device, use TAG+="systemd" in the udev - rules file, see - udev7 - for details. + systemd will dynamically create device units for all kernel devices that are marked with the + systemd udev tag (by default all block and network devices, and a few others). Note + that if systemd-udev.service is not running, no device units will be + available (for example in a typical container). Device units are named after the /sys/ and /dev/ paths they control. Example: the @@ -57,6 +52,10 @@ name see systemd.unit5. + To tag a udev device, use TAG+="systemd" in the udev rules file, see + udev7 for details. + + Device units will be reloaded by systemd whenever the corresponding device generates a changed event. Other units can use ReloadPropagatedFrom= to react diff --git a/src/basic/log.c b/src/basic/log.c index 0e6023cff2..595db0c395 100644 --- a/src/basic/log.c +++ b/src/basic/log.c @@ -252,18 +252,14 @@ int log_open(void) { /* Do not call from library code. */ - /* This function is often called in preparation for being able - * to log. Let's make sure we don't clobber errno, so that a call - * to a logging function immediately following a log_open() call - * can still easily reference an error that happened immediately - * before the log_open() call. */ + /* This function is often called in preparation for logging. Let's make sure we don't clobber errno, + * so that a call to a logging function immediately following a log_open() call can still easily + * reference an error that happened immediately before the log_open() call. */ PROTECT_ERRNO; - /* If we don't use the console we close it here, to not get - * killed by SAK. If we don't use syslog we close it here so - * that we are not confused by somebody deleting the socket in - * the fs, and to make sure we don't use it if prohibit_ipc is - * set. If we don't use /dev/kmsg we still keep it open, + /* If we don't use the console, we close it here to not get killed by SAK. If we don't use syslog, we + * close it here too, so that we are not confused by somebody deleting the socket in the fs, and to + * make sure we don't use it if prohibit_ipc is set. If we don't use /dev/kmsg we still keep it open, * because there is no reason to close it. */ if (log_target == LOG_TARGET_NULL) {