Zbigniew Jędrzejewski-Szmek
53cd77523e
Revert one patch that is causing selinux troubles
2023-02-02 13:09:43 +01:00
Zbigniew Jędrzejewski-Szmek
f377b012f2
Revert patch that causes selinux avcs
2023-02-02 13:08:38 +01:00
Zbigniew Jędrzejewski-Szmek
5788784598
Version 250.10
2023-02-01 18:02:55 +01:00
Zbigniew Jędrzejewski-Szmek
08af0db2a3
Fix upgrade detection in %posttrans scriptlet (rhbz#2115094)
...
4047e4fb7b got things very wrong.
The trick with "[ $1 -eq 1 ]" doesn't work for transaction triggers
because the argument is not provided by rpm. We need to use a state
file to propagate the information from %post to %posttrans.
(cherry picked from commit bab6dfc23a )
2023-01-29 16:44:56 +01:00
Zbigniew Jędrzejewski-Szmek
5be6189564
Do not touch /etc/resolv.conf on upgrades
...
(cherry-picked from 4047e4fb7b )
2023-01-29 16:44:40 +01:00
Zbigniew Jędrzejewski-Szmek
a69e3c53bf
Add forgotten changelog entry
...
F36 is not using rpmautospec :(
2023-01-29 16:42:12 +01:00
Nicolas Chauvet
aa4c1caf96
Fixup patch for scheduler
...
Signed-off-by: Nicolas Chauvet <kwizart@gmail.com>
2022-12-26 14:06:13 +01:00
Zbigniew Jędrzejewski-Szmek
8b7a753a0a
Version 250.9
...
- Latest bugfix release with a bunch of fixes (homed, networkd, manager,
resolved, documentation): rhbz#2133792, rhbz#2135778, rhbz#2152685,
and also #2031810 , #2121106 .
- CVE-2022-4415: systemd: coredump not respecting fs.suid_dumpable kernel
setting
2022-12-20 19:46:03 +01:00
Zbigniew Jędrzejewski-Szmek
e518927ce6
Version 250.8
2022-07-14 15:10:16 +02:00
Daan De Meyer
5d156ae24a
Move networkd man pages to networkd package
2022-07-14 15:07:00 +02:00
Zbigniew Jędrzejewski-Szmek
d5adfef1ad
Drop Obsoletes for systemd-standalone-{tmpfiles,sysusers}
...
It turns out that with the Obsoletes, dnf will just install the normal
systemd package if systemd-standalone-* is requested. The commit message
for b36512ad8f which added this says I tested
with local package builds (where it works), but not when going through the
full repo with all packages.
I'm adding the Provides instead, so that it's possible to request on or
the other more easily.
2022-07-14 15:06:05 +02:00
Zbigniew Jędrzejewski-Szmek
9751564650
Add patch to fix build on i686
2022-06-03 09:59:51 +02:00
Zbigniew Jędrzejewski-Szmek
a5272297b3
Version 250.7
2022-06-02 20:52:27 +02:00
Zbigniew Jędrzejewski-Szmek
92e01919e5
Version 250.6
2022-05-25 17:48:20 +02:00
Zbigniew Jędrzejewski-Szmek
1ff9b90627
Supress errors from useradd/groupadd
...
(cherry picked from commit a65bd010dd )
2022-05-25 17:34:41 +02:00
Zbigniew Jędrzejewski-Szmek
cfee8d47db
Add Conflicts for older systemd and systemd-udev versions
...
(cherry picked from commit 23ee798cbd )
2022-05-25 17:33:33 +02:00
Zbigniew Jędrzejewski-Szmek
322bdbdf07
Run sysusers and friends also if systemd is not running
...
I tested this with 'sudo dnf --installroot=…', with both
systemd+system-udev installed in one transaction, and in two separate
transactions. Users are created as expected in both cases.
(cherry picked from commit 3a876074d2 )
2022-05-20 16:35:27 +02:00
Zbigniew Jędrzejewski-Szmek
34346c3662
Remove bfq patch in packit builds
...
(cherry picked from commit 95c9cf61af )
2022-05-20 16:35:27 +02:00
Zbigniew Jędrzejewski-Szmek
54f0a8df78
Version 250.5
2022-05-20 16:24:54 +02:00
Zbigniew Jędrzejewski-Szmek
62cd72228a
Fix regexp syntax
2022-03-18 13:39:32 +01:00
Zbigniew Jędrzejewski-Szmek
24e81e56a2
Fix the wrong file assignment done in previous version
2022-03-18 13:35:22 +01:00
Zbigniew Jędrzejewski-Szmek
cf2f43fd04
Fix bug number
2022-03-17 21:41:47 +01:00
Zbigniew Jędrzejewski-Szmek
ddc8f75483
Really move libcryptsetup plugins to -udev
2022-03-17 21:40:26 +01:00
David Tardon
5c19e29a84
Move systemd-cryptenroll to systemd-udev
2022-03-17 21:40:24 +01:00
Michael Catanzaro
750b1da141
Disable default DNS over TLS ( #1889901 )
2022-03-14 09:49:23 -05:00
Zbigniew Jędrzejewski-Szmek
a31629ed62
Avoid trying to create the symlink if there's a dangling symlink already
...
'test -e' says 'no' for dangling symlinks.
Let's also ignore the error if this fails. We shouldn't fail the
transaction.
2022-02-24 20:27:51 +01:00
Zbigniew Jędrzejewski-Szmek
3cd1f84f9a
Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing
...
The analysis in 1ba983e0be was wrong.
Both systemd-journal and utmp need to be created. For some reason rpm
reports only the first group which is not available. It was
complaining about systemd-journal, and when that was "fixed", it
started complaining about utmp. Let's apply the same logic here.
Non-root users of files owned by utmp group should only matter after a
reboot, and tmpfiles will adjust the ownership.
Running transaction
Running scriptlet: filesystem-3.16-2.fc36.x86_64 1/1
Preparing : 1/1
Installing : libgcc-12.0.1-0.8.fc37.x86_64 1/76
Running scriptlet: libgcc-12.0.1-0.8.fc37.x86_64 1/76
Installing : fedora-release-identity-basic-37-0.2.noarch 2/76
Installing : tzdata-2021e-4.fc36.noarch 3/76
Installing : pcre2-syntax-10.39-1.fc36.1.noarch 4/76
Installing : ncurses-base-6.2-9.20210508.fc36.noarch 5/76
Installing : fedora-gpg-keys-37-0.1.noarch 6/76
Installing : fedora-release-37-0.2.noarch 7/76
Installing : fedora-release-common-37-0.2.noarch 8/76
Installing : fedora-repos-rawhide-37-0.1.noarch 9/76
Installing : fedora-repos-37-0.1.noarch 10/76
Installing : setup-2.13.9.1-3.fc36.noarch 11/76
Running scriptlet: setup-2.13.9.1-3.fc36.noarch 11/76
Installing : filesystem-3.16-2.fc36.x86_64 12/76
Installing : basesystem-11-13.fc36.noarch 13/76
Installing : glibc-minimal-langpack-2.35-2.fc37.x86_64 14/76
Installing : glibc-common-2.35-2.fc37.x86_64 15/76
Running scriptlet: glibc-2.35-2.fc37.x86_64 16/76
Installing : glibc-2.35-2.fc37.x86_64 16/76
Running scriptlet: glibc-2.35-2.fc37.x86_64 16/76
Installing : ncurses-libs-6.2-9.20210508.fc36.x86_64 17/76
Installing : bash-5.1.16-2.fc36.x86_64 18/76
Running scriptlet: bash-5.1.16-2.fc36.x86_64 18/76
Installing : libuuid-2.38-0.2.fc36.x86_64 19/76
Installing : libcap-2.48-4.fc36.x86_64 20/76
Installing : libattr-2.5.1-4.fc36.x86_64 21/76
Installing : libacl-2.3.1-3.fc36.x86_64 22/76
Installing : libzstd-1.5.2-1.fc36.x86_64 23/76
Installing : xz-libs-5.2.5-8.fc36.x86_64 24/76
Installing : zlib-1.2.11-31.fc36.x86_64 25/76
Installing : bzip2-libs-1.0.8-11.fc36.x86_64 26/76
Installing : libcap-ng-0.8.2-9.fc36.x86_64 27/76
Installing : audit-libs-3.0.7-1.fc36.x86_64 28/76
Installing : libsepol-3.3-3.fc36.x86_64 29/76
Installing : libxcrypt-4.4.28-1.fc37.x86_64 30/76
Installing : lz4-libs-1.9.3-4.fc36.x86_64 31/76
Installing : pcre2-10.39-1.fc36.1.x86_64 32/76
Installing : libselinux-3.3-4.fc36.x86_64 33/76
Installing : libsemanage-3.3-3.fc37.x86_64 34/76
Installing : shadow-utils-2:4.11.1-2.fc37.x86_64 35/76
Installing : sed-4.8-10.fc36.x86_64 36/76
Installing : dbus-common-1:1.13.20-3.fc36.noarch 37/76
Running scriptlet: dbus-common-1:1.13.20-3.fc36.noarch 37/76
Installing : alternatives-1.19-2.fc36.x86_64 38/76
Installing : expat-2.4.6-1.fc37.x86_64 39/76
Installing : gmp-1:6.2.1-2.fc36.x86_64 40/76
Installing : json-c-0.15-3.fc36.x86_64 41/76
Installing : libargon2-20171227-8.fc36.x86_64 42/76
Installing : libeconf-0.4.0-3.fc36.x86_64 43/76
Installing : pam-libs-1.5.2-11.fc37.x86_64 44/76
Installing : libffi-3.4.2-8.fc36.x86_64 45/76
Installing : p11-kit-0.24.1-2.fc36.x86_64 46/76
Installing : libgpg-error-1.44-1.fc36.x86_64 47/76
Installing : libgcrypt-1.10.0-1.fc36.x86_64 48/76
Installing : systemd-libs-250.3-4.fc37.x86_64 49/76
Running scriptlet: dbus-broker-29-5.fc36.x86_64 50/76
useradd warning: dbus's uid 81 outside of the SYS_UID_MIN 201 and SYS_UID_MAX 999 range.
Installing : dbus-broker-29-5.fc36.x86_64 50/76
Running scriptlet: dbus-broker-29-5.fc36.x86_64 50/76
Installing : dbus-1:1.13.20-3.fc36.x86_64 51/76
Installing : libseccomp-2.5.3-2.fc36.x86_64 52/76
Installing : libsmartcols-2.38-0.2.fc36.x86_64 53/76
Installing : libtasn1-4.18.0-2.fc36.x86_64 54/76
Installing : p11-kit-trust-0.24.1-2.fc36.x86_64 55/76
Running scriptlet: p11-kit-trust-0.24.1-2.fc36.x86_64 55/76
Installing : libunistring-1.0-1.fc36.x86_64 56/76
Installing : libidn2-2.3.2-4.fc36.x86_64 57/76
Installing : pcre-8.45-1.fc36.1.x86_64 58/76
Installing : grep-3.7-2.fc36.x86_64 59/76
Installing : crypto-policies-20220203-2.git112f859.fc36.noarch 60/76
Running scriptlet: crypto-policies-20220203-2.git112f859.fc36.noarch 60/76
Installing : coreutils-common-9.0-3.fc36.x86_64 61/76
Installing : openssl-libs-1:3.0.0-1.fc36.x86_64 62/76
Installing : coreutils-9.0-3.fc36.x86_64 63/76
Running scriptlet: ca-certificates-2021.2.52-3.fc36.noarch 64/76
Installing : ca-certificates-2021.2.52-3.fc36.noarch 64/76
Running scriptlet: ca-certificates-2021.2.52-3.fc36.noarch 64/76
Installing : libblkid-2.38-0.2.fc36.x86_64 65/76
Running scriptlet: libblkid-2.38-0.2.fc36.x86_64 65/76
Installing : libmount-2.38-0.2.fc36.x86_64 66/76
Installing : util-linux-core-2.38-0.2.fc36.x86_64 67/76
Running scriptlet: util-linux-core-2.38-0.2.fc36.x86_64 67/76
Installing : libfdisk-2.38-0.2.fc36.x86_64 68/76
Installing : kmod-libs-29-7.fc36.x86_64 69/76
Installing : cryptsetup-libs-2.4.3-2.fc36.x86_64 70/76
Installing : device-mapper-libs-1.02.175-7.fc36.x86_64 71/76
Installing : device-mapper-1.02.175-7.fc36.x86_64 72/76
Installing : systemd-pam-250.3-4.fc37.x86_64 73/76
Installing : systemd-resolved-250.3-4.fc37.x86_64 74/76
Running scriptlet: systemd-resolved-250.3-4.fc37.x86_64 74/76
Installing : systemd-networkd-250.3-4.fc37.x86_64 75/76
Running scriptlet: systemd-networkd-250.3-4.fc37.x86_64 75/76
Installing : systemd-250.3-4.fc37.x86_64 76/76
warning: group utmp does not exist - using root
warning: group utmp does not exist - using root
warning: group utmp does not exist - using root
warning: group utmp does not exist - using root
Running scriptlet: systemd-250.3-4.fc37.x86_64 76/76
Creating group 'utmp' with GID 22.
Creating group 'input' with GID 104.
Creating group 'kvm' with GID 36.
Creating group 'render' with GID 105.
Creating group 'sgx' with GID 106.
Creating group 'systemd-journal' with GID 190.
Creating group 'systemd-network' with GID 192.
Creating user 'systemd-network' (systemd Network Management) with UID 192 and GID 192.
Creating group 'systemd-oom' with GID 999.
Creating user 'systemd-oom' (systemd Userspace OOM Killer) with UID 999 and GID 999.
Creating group 'systemd-resolve' with GID 193.
Creating user 'systemd-resolve' (systemd Resolver) with UID 193 and GID 193.
Running scriptlet: filesystem-3.16-2.fc36.x86_64 76/76
Running scriptlet: ca-certificates-2021.2.52-3.fc36.noarch 76/76
Running scriptlet: systemd-resolved-250.3-4.fc37.x86_64 76/76
'/etc/resolv.conf' -> '../run/systemd/resolve/stub-resolv.conf'
Running scriptlet: systemd-250.3-4.fc37.x86_64 76/76
2022-02-24 00:15:33 +01:00
Zbigniew Jędrzejewski-Szmek
890fc095b6
Move part of %post scriptlet for resolved to %posttrans (rhbz#2018913)
2022-02-24 00:15:33 +01:00
Zbigniew Jędrzejewski-Szmek
cf9a3be466
Bump release
2022-02-16 22:42:05 +01:00
Zbigniew Jędrzejewski-Szmek
a262b349c7
Add patch for new kernel headers
...
It's already included in systemd-stable, but v250.4 hasn't been tagged
yet.
(cherry picked from commit 4c2d7265ec )
2022-02-16 22:39:01 +01:00
Zbigniew Jędrzejewski-Szmek
f4416d7304
Drop unused dependencies for scriptlets
...
(cherry picked from commit e48b9066b7 )
2022-02-16 22:38:56 +01:00
Zbigniew Jędrzejewski-Szmek
7cb9d9ece0
Specify owner of /var/log/journal as root in the rpm listing
...
$ rpm -qlv systemd |grep -v 'root root'
-rw-rw-r-- 1 root utmp 0 Jan 22 03:38 /run/utmp
-rw-rw---- 1 root utmp 0 Jan 22 03:38 /var/log/btmp
-rw-rw-r-- 1 root utmp 0 Jan 22 03:38 /var/log/lastlog
-rw-rw-r-- 1 root utmp 0 Jan 22 03:38 /var/log/wtmp
drwxr-sr-x 2 root systemd- 0 Jan 22 03:38 /var/log/journal
During installation rpm would log an error that systemd-journal group
is unknown. We create all our users by calling sysusers in the %post
scriptlet, but that is too late. To avoid the warning we could either
add a %pre scriptlet, but that'd require adding a dependency on
shadow-utils for groupadd, since we can't use our own tools before we
are installed. Let's instead create the directory owned by root.root,
and change the group afterwards. The group ownership is for file
ownership, and in the worst case (we don't assign the group or set
mode +s), unprivileged users will not be able to read the logs.
We also use 'utmp' group, but that is provided by setup.rpm and is not
an issue.
https://bugzilla.redhat.com/show_bug.cgi?id=2018913#c24
(cherry picked from commit 1ba983e0be )
2022-02-16 22:38:52 +01:00
Zbigniew Jędrzejewski-Szmek
e65d52fe63
Drop scriptlet for handling nobody user upgrades from Fedora <28
...
For https://fedoraproject.org/wiki/Changes/RenameNobodyUser a scriptlet
was introduced with prevents nss-systemd from synthesizing entries for nobody.
Let's remove the scriptlet: very few people upgrade from such old systems,
and even if they do, having a duplicate entry for nobody is annoying
but hardly a big problem.
(The other side of this, support in nss-systemd remains in place.)
This allows deps on the tools used in the scriptlet to be dropped from -libs.
While at it, also drop noop ldconfig scriptlets.
(cherry picked from commit cac0b2a5a7 )
2022-02-16 22:38:48 +01:00
Zbigniew Jędrzejewski-Szmek
f42ae67ed3
Add pam_namespace to systemd-user pam config
2022-02-10 17:42:47 +01:00
Zbigniew Jędrzejewski-Szmek
3ce3375cc6
Remove duplicated pam systemd-user file
2022-02-10 17:37:56 +01:00
Fedora Release Engineering
c763537617
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-22 02:12:42 +00:00
Zbigniew Jędrzejewski-Szmek
238e8e0e64
Fix creation of /var/log/lastlog
...
I have no idea how I managed to screw that up yesterday…
2022-01-19 08:31:33 +01:00
Zbigniew Jędrzejewski-Szmek
f97cf5817a
Take ownership of /var/log/lastlog
...
https://pagure.io/setup/pull-request/30 and
https://src.fedoraproject.org/rpms/util-linux/pull-request/10 are the
opposite steps for setup and util-linux.
2022-01-18 16:22:31 +01:00
Zbigniew Jędrzejewski-Szmek
3fe8cebea3
Version 250.3
2022-01-18 12:56:37 +01:00
Zbigniew Jędrzejewski-Szmek
d1787ccd07
Version 250.2
2022-01-10 22:04:43 +01:00
Zbigniew Jędrzejewski-Szmek
c1e2f480f7
Disable bpf filters on s390x
2022-01-04 18:27:08 +01:00
Zbigniew Jędrzejewski-Szmek
206f30e9fd
Version 250.1
2022-01-04 18:27:08 +01:00
Zbigniew Jędrzejewski-Szmek
620e0cff6b
Install only license files relevant to the effective license
...
We installed all the license files for the licenses used in the sources
(as %doc), but that doesn't seem useful.
2022-01-04 18:27:08 +01:00
Zbigniew Jędrzejewski-Szmek
60d0bbefe2
Disable bpf filters on arm64
2021-12-30 21:42:10 +01:00
Zbigniew Jędrzejewski-Szmek
114f45fe1f
Skip bpf filtering on arm32 and ppc64el
2021-12-28 16:10:15 +01:00
Zbigniew Jędrzejewski-Szmek
7993a98ea4
Enable bpf-framework
2021-12-25 15:31:58 +01:00
Zbigniew Jędrzejewski-Szmek
3c872dc5d9
Fix warning about systemd-boot-update.service not existing on arm32
2021-12-25 11:02:05 +01:00
Zbigniew Jędrzejewski-Szmek
2edf38c273
Version 250
2021-12-23 21:15:44 +01:00
Zbigniew Jędrzejewski-Szmek
34a8fa5907
Switch unit status name format to 'combined'
2021-12-23 13:45:31 +01:00
Zbigniew Jędrzejewski-Szmek
b1af825426
Version 250-rc3
2021-12-20 19:48:35 +01:00