Luca Boccassi 4dddcce874 machine: do not allow unprivileged users to register other users' processes as machines (#38911) ...

Registering a process as a machine means a caller can get machined to
send sigterm to it, and more. If an unpriv user is registering, ensure
the registered process has the same uid.

Follow-up for adaff8eb35

2025-09-16 17:59:45 +01:00

..

ac-power

…

analyze

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

ask-password

…

backlight

…

basic

ansi-color: fix stack overflow with debug level and invalid SYSTEMD_COLORS env var

2025-09-12 10:58:26 +01:00

battery-check

…

binfmt

…

bless-boot

tree-wide: do not use %m with SYNTHETIC_ERRNO()

2025-07-22 03:05:54 +09:00

boot

boot: also remember auto-generated entries

2025-08-25 23:45:12 +09:00

bootctl

bootctl: clarify that --secure-boot-auto-enroll requires a boolean value

2025-09-08 12:31:27 +02:00

busctl

…

cgls

…

cgtop

…

core

core/varlink: do not call io.systemd.oom.ReportManagedOOMCGroups() with empty "cgroups" parameter

2025-09-04 19:50:28 +09:00

coredump

systemd-analyze: added the verb unit-gdb to spawn and attach gdb

2025-07-17 15:09:58 +01:00

coverage

meson: fix coverage build

2025-07-12 21:19:01 +09:00

creds

…

cryptenroll

tree-wide: add missing '=' in short comments for function argument

2025-07-22 03:05:54 +09:00

cryptsetup

cryptsetup: reference right variable

2025-08-18 13:03:18 +01:00

debug-generator

…

delta

delta: add missing error check

2025-07-26 05:00:02 +09:00

detect-virt

…

dissect

dissect: include unistd.h

2025-09-14 09:47:30 +02:00

environment-d-generator

…

escape

…

factory-reset

…

firstboot

tree-wide: add missing '=' in short comments for function argument

2025-07-22 03:05:54 +09:00

fsck

fsck: add fsck.mode and fsck.repair credentials support

2025-07-16 05:47:38 +09:00

fstab-generator

…

fundamental

sd-boot: pad .sbat section to 1k bytes

2025-08-19 11:50:27 +02:00

fuzz

tools: make all .py program files executable

2025-07-25 12:33:13 +02:00

getty-generator

getty-generator: improve debugging messages

2025-07-25 14:04:17 +02:00

gpt-auto-generator

gpt-auto-generator: Pass verity settings to dissect_loop_device()

2025-09-05 07:48:15 +02:00

growfs

…

hibernate-resume

…

home

homed: AddSigningKey: only feed data to OpenSSL _after_ Polkit auth

2025-08-29 14:49:12 +09:00

hostname

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

hwdb

…

id128

…

import

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

include

Update syscalls tables

2025-08-20 13:19:51 +01:00

integritysetup

…

journal

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

journal-remote

journal-gatewayd: fix busy loop when following way beyond journal end

2025-07-31 12:32:10 +01:00

kernel-install

meson: use files() not find_program() for helper scripts

2025-07-25 14:04:17 +02:00

keyutil

…

libc

…

libsystemd

Revert "chase: invert CHASE_NO_AUTOFS and only set it where needed"

2025-08-20 02:15:36 +09:00

libsystemd-network

network: add new DHCPv6 message types and options

2025-07-31 05:41:53 +09:00

libudev

…

locale

locale: escape invalid keymap on logging

2025-07-27 00:58:02 +01:00

login

user-runtime-dir: fix logged quota size

2025-08-06 12:54:26 +09:00

machine

machine: add a comment to clarify that root_directory is informational only

2025-09-16 15:58:28 +01:00

machine-id-setup

…

measure

…

modules-load

…

mount

chase: trigger automount only when explicitly requested

2025-08-20 02:32:02 +09:00

mountfsd

chase: trigger automount only when explicitly requested

2025-08-20 02:32:02 +09:00

network

network: remove unnecessary fd saved in fd-store

2025-09-04 19:50:28 +09:00

notify

…

nspawn

nspawn: Drop CAP_NET_BIND_SERVICE if in userns with identity mapping

2025-09-05 08:24:39 +02:00

nsresourced

nsresourced: use a hashed rather than a mangled name as fallback

2025-08-26 15:30:39 +02:00

nss-myhostname

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

nss-mymachines

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

nss-resolve

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

nss-systemd

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

oom

test: fix repeated runs of test-oomd-util by clearing test cgroup

2025-08-06 14:09:33 +01:00

path

systemd-path: return accumulated error instead of last result

2025-09-14 22:18:19 +02:00

pcrextend

…

pcrlock

pcrlock: use WRITE_STRING_FILE_LABEL

2025-09-03 11:14:04 +02:00

portable

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

pstore

…

ptyfwd

…

quotacheck

quotacheck: add quotacheck.mode credential support

2025-07-16 05:47:38 +09:00

random-seed

…

rc-local-generator

…

remount-fs

…

repart

repart: fix memleak

2025-09-04 06:52:17 +09:00

reply-password

…

resolve

resolvectl: add missing error check

2025-08-28 14:09:14 +02:00

rfkill

…

rpm

meson: Fix missing test dependencies

2025-07-14 13:07:29 +01:00

run

run: make PTY forwarder honor vhangup() after service finished

2025-07-30 01:15:29 +09:00

run-generator

…

sbsign

…

shared

generators: fix parameters naming in symlink helper

2025-09-16 16:50:22 +02:00

shutdown

…

sleep

…

socket-activate

…

socket-proxy

…

ssh-generator

…

stdio-bridge

…

storagetm

…

sulogin-shell

…

sysctl

…

sysext

tree-wide: add missing '=' in short comments for function argument

2025-07-22 03:05:54 +09:00

system-update-generator

…

systemctl

systemctl: remove unnecessary assignment

2025-07-16 21:03:10 +09:00

systemd

network: add new DHCPv6 message types and options

2025-07-31 05:41:53 +09:00

sysupdate

chase: trigger automount only when explicitly requested

2025-08-20 02:32:02 +09:00

sysusers

…

sysv-generator

…

test

test: PR_DEATHSIG is reset after changing id/gid

2025-09-11 13:37:34 +01:00

timedate

…

timesync

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

tmpfiles

tmpfiles: don't relabel files in dry run mode

2025-08-26 04:07:24 +09:00

tpm2-setup

tpm2-clear: build only if bootloader/openssl are enabled

2025-07-24 17:10:17 +01:00

tty-ask-password-agent

…

udev

udev: fix grammar

2025-08-26 06:00:03 +09:00

ukify

Add padding to sbat section (#38621)

2025-08-19 17:49:07 +01:00

update-done

…

update-utmp

utmp: drop setting runlevel entry in utmp

2025-07-13 05:49:00 +09:00

user-sessions

…

userdb

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

validatefs

…

varlinkctl

…

vconsole

…

veritysetup

…

version

meson: fix coverage build

2025-07-12 21:19:01 +09:00

vmspawn

vmspawn: fix --smbios

2025-08-18 15:37:43 +09:00

volatile-root

…

vpick

…

xdg-autostart-generator

…