lp:~ddstreet/systemd/+git/systemd

Author: Yu Watanabe
Author Date: 2024-03-21 13:00:52 UTC

Merge pull request #31880 from yuwata/network-varlink-trivial-cleanups

network: trivial varlink cleanups

Author: Dan Streetman
Author Date: 2024-01-16 15:39:06 UTC

tpm2: If unsealing results in policy hash mismatch when using RSA pubkey, possibly retry

The commit e3acb4d24c68291376b11bea5787112978e2775f changed how we format a
TPM2B_PUBLIC object from an openssl PEM RSA key if it used the TPM-defined
"default" RSA exponent, to instead set the TPM2B_PUBLIC RSA exponent to the
special-case value of 0. This broke backwards compatibility with
previously-sealed data. The previous commit fixed our code to no longer use the
"special case" exponent value of 0, while this commit adds a fallback check for
any sealed data that used the exponent value of 0. Now unsealing should work
for sealed data that used either method (either 0 or the actual value).

Author: Dan Streetman
Author Date: 2023-07-05 17:23:33 UTC

tpm2: update tpm2_digest_many() to use openssl_digest_many()

Update the function to use openssl_digest_many() so more hash functions besides
SHA256 can be used.

If built without openssl, this falls back to the internal sha256 hashing.

Also add GREEDY_REALLOC_PREPREND() helper function.

Author: Dan Streetman
Author Date: 2023-10-03 23:48:14 UTC

tpm2: add TPM2B_PUBLIC_MAKE()

Add macro to make a TPM2B_PUBLIC object from TPMT_PUBLIC object and size.

Author: Dan Streetman
Author Date: 2023-02-25 00:24:59 UTC

tpm2: add tests for tpm2 marshal/unmarshal macros

Author: Dan Streetman
Author Date: 2023-08-04 22:51:55 UTC

openssl: add log_openssl_errors()

Add a macro to log all errors in the openssl 'thread error queue'.

This consolidates all the openssl-generated errors to return -EIO and log at
debug level.

Also add a 'invalid' test in test-openssl, to allow manual verification that
the openssl error(s) are logged.

Author: Dan Streetman
Author Date: 2023-01-02 01:19:12 UTC

tpm2: add functions to get fixed and variable TPM property capabilities

This allows querying the capabilities for TPM properties, and also caches the
fixed TPM properties.

Author: Dan Streetman
Author Date: 2023-02-17 13:36:19 UTC

tmp - working on key selection in seal/unseal

Author: Dan Streetman
Author Date: 2023-06-05 21:59:40 UTC

tpm2: Add use of swtpm in test-tpm2

This attempts to use local 'swtpm' program to start a software TPM, and use
that for testing. This requires the executables 'swtpm', 'swtpm_setup', and
'swtpm_ioctl'. If the swtpm cannot be setup, this attempts fallback to a real
TPM, if any.

Author: Dan Streetman
Author Date: 2023-02-25 00:24:59 UTC

tpm2: add tests for tpm2 marshal/unmarshal macros

Author: Dan Streetman
Author Date: 2023-03-10 22:55:09 UTC

test/test-variadic: add unit tests for variadic helper macros

Author: Dan Streetman
Author Date: 2023-02-25 00:24:59 UTC

tpm2: add tests for tpm2 marshal/unmarshal macros

Author: Dan Streetman
Author Date: 2023-03-10 22:55:09 UTC

test/test-variadic: add unit tests for variadic helper macros

Author: Dan Streetman
Author Date: 2023-01-20 17:42:52 UTC

tpm2: fix build failure without openssl

Author: Dan Streetman
Author Date: 2023-01-20 17:42:52 UTC

tpm2: fix build failure without openssl

Author: Dan Streetman
Author Date: 2022-12-06 18:46:18 UTC

tmp commit

Author: Dan Streetman
Author Date: 2022-12-02 21:32:30 UTC

tmp commit, in progress

Author: Dan Streetman
Author Date: 2021-11-10 17:38:18 UTC

checkout-upstream: replace with upstream code at version 249.1987.g4b499063ac

Author: Dan Streetman
Author Date: 2021-09-21 21:47:55 UTC

userdb: fix if-else to allow NameServiceSwitch lookups

Fixes: #20809. Bug introduced in 8fbb1941f1a8c3d9eda920891b2b51a67f2a2375

Author: Michael Biebl
Author Date: 2021-07-01 20:07:16 UTC

pristine-tar data for systemd_249~rc3.orig.tar.gz

Author: Dan Streetman
Author Date: 2021-05-17 20:58:55 UTC

tmp commit...

Author: Dan Streetman
Author Date: 2020-11-15 22:35:35 UTC

test/test-functions: do not use qemu if it has no default machine type

Most qemu archs include a default machine type, so users don't have to
know which machine type to pick for each arch. If the qemu we're
about to test with doesn't have a default machine type, and it's
not one that we specifically know about and have hardcoded a machine
type for, then don't use qemu as calling it would fail anyway.

As we know qemu on arm doesn't provide a default machine type, this also
sets it if needed.

Author: Zbigniew Jędrzejewski-Szmek
Author Date: 2021-04-14 14:25:35 UTC

Merge pull request #19302 from bluca/uninit

tree-wide: avoid uninitialized warning on _cleanup_ variables

Author: Dan Streetman
Author Date: 2021-01-21 21:09:53 UTC

test: use -snapshot for qemu tests

The qemu tests currently cache the test image, as well as using cache=unsafe,
and so it's possible for image corruption to happen across tests. Using
the -snapshot qemu option causes qemu to run each test using the base
image file without needing to re-create it, but each test's modifications
are discarded between tests, which should avoid image corruption or
test-to-test failure propagation.

Author: Dan Streetman
Author Date: 2020-04-27 19:47:28 UTC

test: add bridge configure-without-carrier test

Verify configure-without-carrier works, and retains configuration
across carrier losses/gains.

Author: Dan Streetman
Author Date: 2020-04-27 19:47:28 UTC

test: add bridge configure-without-carrier test

Verify configure-without-carrier works, and retains configuration
across carrier losses/gains.

Author: Dan Streetman
Author Date: 2020-04-25 13:38:14 UTC

udevd: add short-duration inotify watch during udev block device event processing

While external programs that take an exclusive flock on block devices while
modifying them (e.g. partitioning or mkfs) will safely work with udevd so
that the block device modifications don't race with udevd processing of the
device (e.g. creating symlinks for the newly-created partitions), any
external program that doesn't take an exclusive flock will race with udevd,
and the changes made to the block device may be missed by udevd, leading to
failures, e.g. udevd might not create the symlinks for new partitions, or
might not create the /dev/disk/by-* for new filesystems.

This updates the flock function to also take a short-duration inotify
watch, so that after processing the device, udevd can synthesize a new
uevent if it detected any IN_CLOSE_WRITE while the device was being
processed, before the real watch was added.

One example is the mkswap that we ourselves actually run, from the service
created by cryptsetup-generator; we have it running mkswap:

if (swap)
  fprintf(f,
    "ExecStartPost=/sbin/mkswap '/dev/mapper/%s'\n",
    name_escaped);

However, this is racy, because it doesn't take an exclusive flock. This
(and probably other places in our own code) should have done "flock ..."
instead. If it's hard for us to get this right, it seems too much to
expect all other non-systemd programs to also be aware they need to flock
the block device.

Fixes: #10179

Author: Dan Streetman
Author Date: 2019-07-15 13:56:24 UTC

log: add support for prefixing console log messages with current timestamp