Merge ~fourdollars/ubuntu/+source/systemd:ubuntu-bionic into ~ubuntu-core-dev/ubuntu/+source/systemd:ubuntu-bionic

[Shih-Yuan Lee]

[Robert Ancell (robert-ancell)]

review: Approve

diff --git a/debian/changelog b/debian/changelog
index eaf374a..0900cd2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,22 @@
+systemd (237-3ubuntu10.29) bionic; urgency=medium
+
+  * d/p/d/Revert-udev-network-device-renaming-immediately-give.patch:
+    - udev: add Revert-udev-network-device-renaming-immediately-give.patch back
+      Dropping this patch will cause the persistent network regression.
+      (LP: #1842651)
+
+ -- Shih-Yuan Lee (FourDollars) <[e-mail]>  Thu, 05 Sep 2019 11:59:51 +0800
+
+systemd (237-3ubuntu10.28) bionic-security; urgency=medium
+
+  * SECURITY UPDATE: Unprivileged users are granted access to privileged
+    systemd-resolved D-Bus methods
+    - d/p/0001-shared-but-util-drop-trusted-annotation-from-bus_ope.patch:
+      drop trusted annotation from bus_open_system_watch_bind()
+    - CVE-2019-15718
+
+ -- Chris Coulson <[e-mail]>  Thu, 29 Aug 2019 23:30:33 +0100
+
 systemd (237-3ubuntu10.26) bionic; urgency=medium
 
   [ You-Sheng Yang ]
diff --git a/debian/patches/0001-shared-but-util-drop-trusted-annotation-from-bus_ope.patch b/debian/patches/0001-shared-but-util-drop-trusted-annotation-from-bus_ope.patch
new file mode 100644
index 0000000..8186f70
--- /dev/null
+++ b/debian/patches/0001-shared-but-util-drop-trusted-annotation-from-bus_ope.patch
@@ -0,0 +1,31 @@
+From 35e528018f315798d3bffcb592b32a0d8f5162bd Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= <[e-mail]>
+Date: Tue, 27 Aug 2019 19:00:34 +0200
+Subject: [PATCH] shared/but-util: drop trusted annotation from
+ bus_open_system_watch_bind_with_description()
+
+https://bugzilla.redhat.com/show_bug.cgi?id=1746057
+
+This only affects systemd-resolved. bus_open_system_watch_bind_with_description()
+is also used in timesyncd, but it has no methods, only read-only properties, and
+in networkd, but it annotates all methods with SD_BUS_VTABLE_UNPRIVILEGED and does
+polkit checks.
+---
+ src/shared/bus-util.c | 4 ----
+ 1 file changed, 4 deletions(-)
+
+diff --git a/src/shared/bus-util.c b/src/shared/bus-util.c
+index 6af115e7aa..821339d4ae 100644
+--- a/src/shared/bus-util.c
++++ b/src/shared/bus-util.c
+@@ -1705,10 +1705,6 @@ int bus_open_system_watch_bind_with_description(sd_bus **ret, const char *descri
+         if (r < 0)
+                 return r;
+ 
+-        r = sd_bus_set_trusted(bus, true);
+-        if (r < 0)
+-                return r;
+-
+         r = sd_bus_negotiate_creds(bus, true, SD_BUS_CREDS_UID|SD_BUS_CREDS_EUID|SD_BUS_CREDS_EFFECTIVE_CAPS);
+         if (r < 0)
+                 return r;
diff --git a/debian/patches/debian/Revert-udev-network-device-renaming-immediately-give.patch b/debian/patches/debian/Revert-udev-network-device-renaming-immediately-give.patch
new file mode 100644
index 0000000..121c7c4
--- /dev/null
+++ b/debian/patches/debian/Revert-udev-network-device-renaming-immediately-give.patch
@@ -0,0 +1,75 @@
+From: Michael Biebl <[e-mail]>
+Date: Thu, 18 Jul 2013 01:04:07 +0200
+Subject: Revert "udev: network device renaming - immediately give up if the
+ target name isn't available"
+
+This reverts commit 97595710b77aa162ca5e20da57d0a1ed7355eaad.
+
+We need to keep supporting systems with 75-persistent-net-generator.rules
+generated names for a while after switching to net.ifnames. Re-apply this old
+hack to make the renaming less likely to fail.
+---
+ src/udev/udev-event.c | 41 ++++++++++++++++++++++++++++++++++++++---
+ 1 file changed, 38 insertions(+), 3 deletions(-)
+
+diff --git a/src/udev/udev-event.c b/src/udev/udev-event.c
+index d0befba..c3ed2da 100644
+--- a/src/udev/udev-event.c
++++ b/src/udev/udev-event.c
+@@ -832,18 +832,53 @@ static int rename_netif(struct udev_event *event) {
+         char name[IFNAMSIZ];
+         const char *oldname;
+         int r;
++        int loop;
+ 
+         oldname = udev_device_get_sysname(dev);
+ 
+         strscpy(name, IFNAMSIZ, event->name);
+ 
++        r = rtnl_set_link_name(&event->rtnl, udev_device_get_ifindex(dev), name);
++        if (r >= 0) {
++                log_debug("renamed network interface %s to %s\n", oldname, name);
++                goto out;
++        }
++
++        /* keep trying if the destination interface name already exists */
++        if (r != -EEXIST)
++                goto out;
++
++        /* free our own name, another process may wait for us */
++        snprintf(name, IFNAMSIZ, "rename%u", udev_device_get_ifindex(dev));
+         r = rtnl_set_link_name(&event->rtnl, udev_device_get_ifindex(dev), name);
+         if (r < 0)
+-                return log_error_errno(r, "Error changing net interface name '%s' to '%s': %m", oldname, name);
++                  goto out;
+ 
+-        log_debug("renamed network interface '%s' to '%s'", oldname, name);
++        /* log temporary name */
++        log_debug("renamed network interface %s to %s\n", oldname, name);
+ 
+-        return 0;
++        /* wait a maximum of 90 seconds for our target to become available */
++        strscpy(name, IFNAMSIZ, event->name);
++        loop = 90 * 20;
++        while (loop--) {
++                const struct timespec duration = { 0, 1000 * 1000 * 1000 / 20 };
++
++                nanosleep(&duration, NULL);
++
++                r = rtnl_set_link_name(&event->rtnl, udev_device_get_ifindex(dev), name);
++                if (r >= 0) {
++                        log_debug("renamed network interface %s to %s\n", oldname, name);
++                        break;
++                }
++                if (r != -EEXIST)
++                        break;
++        }
++
++out:
++        if (r < 0)
++                log_error("error changing net interface name '%s' to '%s': %s",
++                          oldname, name, strerror(-r));
++        return r;
+ }
+ 
+ void udev_event_execute_rules(struct udev_event *event,
diff --git a/debian/patches/series b/debian/patches/series
index afe70cd..1ebfb43 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -42,6 +42,7 @@ debian/Add-run-initctl-support-to-SysV-compat-tools.patch
 debian/Add-note-to-udev.conf-that-changes-to-that-file-requ.patch
 debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch
 debian/Make-run-lock-tmpfs-an-API-fs.patch
+debian/Revert-udev-network-device-renaming-immediately-give.patch
 debian/Add-support-for-TuxOnIce-hibernation.patch
 debian/Include-additional-directories-in-ProtectSystem.patch
 debian/Re-enable-journal-forwarding-to-syslog.patch
@@ -122,3 +123,4 @@ lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch
 lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch
 lp1833671-networkd-keep-bond-slave-up-if-already-attached.patch
 hwdb-revert-airplane-mode-keys-handling-on-Dell.patch
+0001-shared-but-util-drop-trusted-annotation-from-bus_ope.patch