Matthias Gerstner 1158545ef7 homed: AddSigningKey: only feed data to OpenSSL _after_ Polkit auth ...

As a hardening measure it makes sense not to process potentially crafted
data in `openssl_pubkey_to_pem()` before we know that the caller is
authorized to perform the action.

2025-08-29 14:49:12 +09:00

..

ac-power

…

analyze

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

ask-password

…

backlight

…

basic

chase: trigger automount only when explicitly requested

2025-08-20 02:32:02 +09:00

battery-check

…

binfmt

binfmt-util: rename binfmt_mounted() -> binfmt_mounted_and_writable()

2025-07-10 14:02:00 +09:00

bless-boot

tree-wide: do not use %m with SYNTHETIC_ERRNO()

2025-07-22 03:05:54 +09:00

boot

boot: also remember auto-generated entries

2025-08-25 23:45:12 +09:00

bootctl

bootctl: do not fail on removing unfied kernel image

2025-08-26 15:45:44 +02:00

busctl

tree-wide: check --machine= specification

2025-06-17 02:10:37 +02:00

cgls

…

cgtop

…

core

core: fix typo

2025-08-26 04:54:19 +09:00

coredump

systemd-analyze: added the verb unit-gdb to spawn and attach gdb

2025-07-17 15:09:58 +01:00

coverage

meson: fix coverage build

2025-07-12 21:19:01 +09:00

creds

include: move trivial kernel header wrappers to src/include/override/

2025-07-11 13:05:46 +09:00

cryptenroll

tree-wide: add missing '=' in short comments for function argument

2025-07-22 03:05:54 +09:00

cryptsetup

cryptsetup: reference right variable

2025-08-18 13:03:18 +01:00

debug-generator

…

delta

delta: add missing error check

2025-07-26 05:00:02 +09:00

detect-virt

…

dissect

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

environment-d-generator

…

escape

…

factory-reset

…

firstboot

tree-wide: add missing '=' in short comments for function argument

2025-07-22 03:05:54 +09:00

fsck

fsck: add fsck.mode and fsck.repair credentials support

2025-07-16 05:47:38 +09:00

fstab-generator

fstab-generator: log about the fstype in effect

2025-06-17 16:14:47 +09:00

fundamental

sd-boot: pad .sbat section to 1k bytes

2025-08-19 11:50:27 +02:00

fuzz

tools: make all .py program files executable

2025-07-25 12:33:13 +02:00

getty-generator

getty-generator: improve debugging messages

2025-07-25 14:04:17 +02:00

gpt-auto-generator

…

growfs

…

hibernate-resume

…

home

homed: AddSigningKey: only feed data to OpenSSL _after_ Polkit auth

2025-08-29 14:49:12 +09:00

hostname

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

hwdb

…

id128

…

import

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

include

Update syscalls tables

2025-08-20 13:19:51 +01:00

integritysetup

…

journal

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

journal-remote

journal-gatewayd: fix busy loop when following way beyond journal end

2025-07-31 12:32:10 +01:00

kernel-install

meson: use files() not find_program() for helper scripts

2025-07-25 14:04:17 +02:00

keyutil

keyutil: add parameter to specify hash algorithm used for PKCS#1 signature

2025-06-10 08:45:31 -04:00

libc

libc-wrapper: introduce a tiny libc wrapper

2025-07-11 13:05:46 +09:00

libsystemd

Revert "chase: invert CHASE_NO_AUTOFS and only set it where needed"

2025-08-20 02:15:36 +09:00

libsystemd-network

network: add new DHCPv6 message types and options

2025-07-31 05:41:53 +09:00

libudev

tree-wide: include unistd.h where necessary

2025-06-30 09:19:15 +02:00

locale

locale: escape invalid keymap on logging

2025-07-27 00:58:02 +01:00

login

user-runtime-dir: fix logged quota size

2025-08-06 12:54:26 +09:00

machine

machinectl: set TERM=dumb when running on a dumb terminal or with a pipe

2025-08-13 23:43:51 +09:00

machine-id-setup

…

measure

…

modules-load

…

mount

chase: trigger automount only when explicitly requested

2025-08-20 02:32:02 +09:00

mountfsd

chase: trigger automount only when explicitly requested

2025-08-20 02:32:02 +09:00

network

network/bridge-vlan: fix segfault

2025-08-08 19:39:31 +09:00

notify

notify-recv: disable SO_PASSRIGHTS by default in notify_socket_prepare()

2025-06-17 13:16:43 +02:00

nspawn

nspawn: the second time on_orderly_shutdown() is called userdata is NULL (#38709)

2025-08-25 19:08:01 +01:00

nsresourced

nsresourced: use a hashed rather than a mangled name as fallback

2025-08-26 15:30:39 +02:00

nss-myhostname

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

nss-mymachines

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

nss-resolve

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

nss-systemd

nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h

2025-08-17 00:14:42 +09:00

oom

test: fix repeated runs of test-oomd-util by clearing test cgroup

2025-08-06 14:09:33 +01:00

path

tree-wide: Add initrd presets

2025-07-03 17:43:01 +02:00

pcrextend

…

pcrlock

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

portable

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

pstore

…

ptyfwd

…

quotacheck

quotacheck: add quotacheck.mode credential support

2025-07-16 05:47:38 +09:00

random-seed

basic: move missing_random.h -> include/sys/random.h

2025-07-01 12:24:32 +09:00

rc-local-generator

…

remount-fs

…

repart

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

reply-password

…

resolve

resolvectl: add missing error check

2025-08-28 14:09:14 +02:00

rfkill

…

rpm

meson: Fix missing test dependencies

2025-07-14 13:07:29 +01:00

run

run: make PTY forwarder honor vhangup() after service finished

2025-07-30 01:15:29 +09:00

run-generator

…

sbsign

openssl: add hash_algorithm parameter to pkcs7_new()

2025-06-10 08:44:51 -04:00

shared

resolve: include DNSSEC and DNSOverTLS modes in dumps

2025-08-27 22:33:38 +09:00

shutdown

reboot-util: merge with raw-reboot.h

2025-07-11 13:05:46 +09:00

sleep

…

socket-activate

socket-activate: Always send NOTIFY=ready

2025-07-10 16:19:46 +02:00

socket-proxy

…

ssh-generator

errno-util: introduce ERRNO_IS_NEG_FS_WRITE_REFUSED()

2025-07-10 14:02:00 +09:00

stdio-bridge

tree-wide: check --machine= specification

2025-06-17 02:10:37 +02:00

storagetm

…

sulogin-shell

tree-wide: include unistd.h where necessary

2025-06-30 09:19:15 +02:00

sysctl

errno-util: introduce ERRNO_IS_NEG_FS_WRITE_REFUSED()

2025-07-10 14:02:00 +09:00

sysext

tree-wide: add missing '=' in short comments for function argument

2025-07-22 03:05:54 +09:00

system-update-generator

…

systemctl

systemctl: remove unnecessary assignment

2025-07-16 21:03:10 +09:00

systemd

network: add new DHCPv6 message types and options

2025-07-31 05:41:53 +09:00

sysupdate

chase: trigger automount only when explicitly requested

2025-08-20 02:32:02 +09:00

sysusers

libc-wrapper: introduce a tiny libc wrapper

2025-07-11 13:05:46 +09:00

sysv-generator

…

test

chase: trigger autofs only when explicitly requested (#38641)

2025-08-20 14:02:45 +02:00

timedate

tree-wide: use sd_bus_message_send() instead of sd_bus_send() wherever possible

2025-06-24 23:23:40 +09:00

timesync

tree-wide: fix log messages: "Failed VERB" -> "Failed to VERB"

2025-07-22 03:05:33 +09:00

tmpfiles

tmpfiles: don't relabel files in dry run mode

2025-08-26 04:07:24 +09:00

tpm2-setup

tpm2-clear: build only if bootloader/openssl are enabled

2025-07-24 17:10:17 +01:00

tty-ask-password-agent

…

udev

udev: fix grammar

2025-08-26 06:00:03 +09:00

ukify

Add padding to sbat section (#38621)

2025-08-19 17:49:07 +01:00

update-done

…

update-utmp

utmp: drop setting runlevel entry in utmp

2025-07-13 05:49:00 +09:00

user-sessions

…

userdb

tree-wide: avoid logging 2 error messages if table_print_with_pager() fails

2025-08-28 14:09:50 +02:00

validatefs

…

varlinkctl

tree-wide: include unistd.h where necessary

2025-06-30 09:19:15 +02:00

vconsole

…

veritysetup

…

version

meson: fix coverage build

2025-07-12 21:19:01 +09:00

vmspawn

vmspawn: fix --smbios

2025-08-18 15:37:43 +09:00

volatile-root

tree-wide: include unistd.h where necessary

2025-06-30 09:19:15 +02:00

vpick

…

xdg-autostart-generator

…