systemd (241-7~deb10u7) buster; urgency=medium
authorMichael Biebl <biebl@debian.org>
Thu, 18 Mar 2021 19:59:14 +0000 (19:59 +0000)
committerMichael Biebl <biebl@debian.org>
Thu, 18 Mar 2021 19:59:14 +0000 (19:59 +0000)
commit2e335da5b1d15648868860dc18cdb549555be5cc
tree25a5c235ed7728a82ad219da8dffce1af0aee651
parent77e0b057c3794fd06dd68dd3fc7cd754d99c1e76
parent891cbaf84bae1471fb07f7472a788fb075088ce9
systemd (241-7~deb10u7) buster; urgency=medium

  * core: make sure to restore the control command id, too.
    Fixes a segfault in systemd that can be triggered when both
    daemon-reload and a service restart happen concurrently. (Closes: #984495)
  * seccomp: allow turning off of seccomp filtering via env var.
    Since glibc 2.33 faccessat() is implemented via faccessat2(), which
    is breaking running containers that use such a version of glibc under
    systemd-nspawn in Buster.
    Turning off seccomp filtering via the SYSTEMD_SECCOMP env var makes it
    possible to run such new containers. (Closes: #984573)

[dgit import unpatched systemd 241-7~deb10u7]
209 files changed:
debian/README.Debian
debian/README.source
debian/changelog
debian/compat
debian/control
debian/copyright
debian/extra/checkout-upstream
debian/extra/dhclient-exit-hooks.d/timesyncd
debian/extra/fbdev-blacklist.conf
debian/extra/init-functions.d/40-systemd
debian/extra/initramfs-tools/hooks/udev
debian/extra/initramfs-tools/scripts/init-bottom/udev
debian/extra/initramfs-tools/scripts/init-top/udev
debian/extra/kernel-install.d/85-initrd.install
debian/extra/make-fbdev-blacklist
debian/extra/make-sysusers-basic
debian/extra/pam-configs/systemd
debian/extra/pam.d/systemd-user
debian/extra/rules-ubuntu/40-vm-hotadd.rules
debian/extra/rules-ubuntu/61-persistent-storage-android.rules
debian/extra/rules-ubuntu/71-power-switch-proliant.rules
debian/extra/rules-ubuntu/78-graphics-card.rules
debian/extra/rules/50-firmware.rules
debian/extra/rules/73-special-net-names.rules
debian/extra/rules/73-usb-net-by-mac.rules
debian/extra/rules/80-debian-compat.rules
debian/extra/set-cpufreq
debian/extra/start-udev
debian/extra/systemd-sysv-install
debian/extra/systemd.py
debian/extra/tmpfiles.d/debian.conf
debian/extra/udev.py
debian/extra/units-ubuntu/ondemand.service
debian/extra/units-ubuntu/user@.service.d/timeout.conf
debian/extra/units/getty-static.service
debian/extra/units/rc-local.service.d/debian.conf
debian/extra/units/systemd-resolved.service.d/resolvconf.conf
debian/extra/units/systemd-timesyncd.service.d/disable-with-time-daemon.conf
debian/gbp.conf
debian/git-cherry-pick
debian/libnss-myhostname.install
debian/libnss-myhostname.lintian-overrides
debian/libnss-myhostname.postinst
debian/libnss-myhostname.postrm
debian/libnss-mymachines.install
debian/libnss-mymachines.lintian-overrides
debian/libnss-mymachines.postinst
debian/libnss-mymachines.postrm
debian/libnss-resolve.install
debian/libnss-resolve.lintian-overrides
debian/libnss-resolve.postinst
debian/libnss-resolve.postrm
debian/libnss-systemd.install
debian/libnss-systemd.lintian-overrides
debian/libnss-systemd.postinst
debian/libnss-systemd.postrm
debian/libpam-systemd.install
debian/libpam-systemd.postinst
debian/libpam-systemd.prerm
debian/libsystemd-dev.install
debian/libsystemd0.install
debian/libsystemd0.symbols
debian/libudev-dev.install
debian/libudev-dev.maintscript
debian/libudev1-udeb.install
debian/libudev1.install
debian/libudev1.symbols
debian/patches/Fix-typo-in-function-name.patch
debian/patches/Re-add-uaccess-tag-for-dev-dri-renderD.patch
debian/patches/ask-password-prevent-buffer-overflow-when-reading-from-ke.patch
debian/patches/bash-completion-use-default-completion-for-redirect-opera.patch
debian/patches/basic-cap-list-parse-print-numerical-capabilities.patch
debian/patches/bus-polkit-rename-return-error-parameter-to-ret_error.patch
debian/patches/bus-util-treat-org.freedesktop.DBus.Error.ServiceUnknown-.patch
debian/patches/cgtop-Fix-processing-of-controllers-other-than-CPU.patch
debian/patches/core-change-ownership-mode-of-the-execution-directories-a.patch
debian/patches/core-factor-root_directory-application-out-of-apply_worki.patch
debian/patches/core-make-sure-to-restore-the-control-command-id-too.patch
debian/patches/core-never-propagate-reload-failure-to-service-result.patch
debian/patches/core-set-fs.file-max-sysctl-to-LONG_MAX-rather-than-ULONG.patch
debian/patches/core-unset-HOME-that-the-kernel-gives-us.patch
debian/patches/debian/Add-env-variable-for-machine-ID-path.patch
debian/patches/debian/Add-support-for-TuxOnIce-hibernation.patch
debian/patches/debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch
debian/patches/debian/Don-t-enable-audit-by-default.patch
debian/patches/debian/Drop-seccomp-system-call-filter-for-udev.patch
debian/patches/debian/Let-graphical-session-pre.target-be-manually-started.patch
debian/patches/debian/Make-run-lock-tmpfs-an-API-fs.patch
debian/patches/debian/Only-start-logind-if-dbus-is-installed.patch
debian/patches/debian/Re-enable-journal-forwarding-to-syslog.patch
debian/patches/debian/Revert-core-enable-TasksMax-for-all-services-by-default-a.patch
debian/patches/debian/Revert-core-one-step-back-again-for-nspawn-we-actual.patch
debian/patches/debian/Revert-core-set-RLIMIT_CORE-to-unlimited-by-default.patch
debian/patches/debian/Revert-udev-network-device-renaming-immediately-give.patch
debian/patches/debian/Skip-filesystem-check-if-already-done-by-the-initram.patch
debian/patches/debian/Use-Debian-specific-config-files.patch
debian/patches/debian/fsckd-daemon-for-inter-fsckd-communication.patch
debian/patches/execute-remove-one-redundant-comparison-check.patch
debian/patches/journal-do-not-trigger-assertion-when-journal_file_close-.patch
debian/patches/journal-remote-do-not-request-Content-Length-if-Transfer-.patch
debian/patches/login-add-a-missing-error-check-for-session_set_leader.patch
debian/patches/man-add-note-that-h-u-U-are-mostly-useless.patch
debian/patches/meson-make-nologin-path-build-time-configurable.patch
debian/patches/missing-Add-new-Linux-capabilities.patch
debian/patches/mount-generators-do-not-make-unit-wanted-by-its-device-un.patch
debian/patches/mount-remove-unused-mount_is_auto-and-mount_is_automount.patch
debian/patches/namespace-make-MountFlags-shared-work-again.patch
debian/patches/network-check-whether-ipv6-is-enabled-in-sysctl.patch
debian/patches/network-do-not-remove-rule-when-it-is-requested-by-existi.patch
debian/patches/network-do-not-send-ipv6-token-to-kernel.patch
debian/patches/network-ignore-requested-ipv6-addresses-when-ipv6-is-disa.patch
debian/patches/network-ignore-requested-ipv6-route-when-ipv6-is-disabled.patch
debian/patches/network-ignore-requested-ipv6-routing-policy-rule-when-ip.patch
debian/patches/network-read-link-specific-sysctl-value.patch
debian/patches/network-remove-routing-policy-rule-from-foreign-rule-data.patch
debian/patches/networkd-clarify-that-IPv6-RA-uses-our-own-stack-no-the-k.patch
debian/patches/networkd-do-not-generate-MAC-for-bridge-device.patch
debian/patches/networkd-fix-link_up-12505.patch
debian/patches/networkd-test-disable-DNSSEC-in-domain-restricted-DNS-tes.patch
debian/patches/networkd-test-fix-test_dropin.patch
debian/patches/networkd-test-ignore-failures-of-test_route_only_dns-in-c.patch
debian/patches/networkd-test-use-a-complete-domain-name-in-test_route_on.patch
debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch
debian/patches/polkit-on-async-pk-requests-re-validate-action-details.patch
debian/patches/polkit-reuse-some-common-bus-message-appending-code.patch
debian/patches/polkit-use-structured-initialization.patch
debian/patches/polkit-when-authorizing-via-PK-let-s-re-resolve-callback-.patch
debian/patches/random-util-eat-up-bad-RDRAND-values-seen-on-AMD-CPUs.patch
debian/patches/remove-.-path-components-from-required-mount-paths.patch
debian/patches/resolve-fix-memleak.patch
debian/patches/sd-bus-enforce-a-size-limit-on-D-Bus-object-paths.patch
debian/patches/sd-bus-introduce-API-for-re-enqueuing-incoming-messages.patch
debian/patches/sd-device-also-store-properties-read-from-udev-database-t.patch
debian/patches/seccomp-allow-turning-off-of-seccomp-filtering-via-env-va.patch
debian/patches/series
debian/patches/shared-bus-util-drop-trusted-annotation-from-bus_open_sys.patch
debian/patches/shared-seccomp-add-sync_file_range2.patch
debian/patches/shared-split-out-polkit-stuff-from-bus-util.c-bus-polkit..patch
debian/patches/sysctl-util-add-sysctl_read_ip_property.patch
debian/patches/systemctl-restore-systemctl-reboot-ARG-functionality.patch
debian/patches/test-bpf-skip-test-when-run-inside-containers.patch
debian/patches/tests-skip-test-bpf-only-when-we-re-100-sure-it-s-run-in-.patch
debian/patches/timedate-fix-emitted-value-when-ntp-client-is-enabled-dis.patch
debian/patches/udev-network-drop-unused-parent_driver-argument-from-net_.patch
debian/patches/udev-restore-debug-level-when-logging-a-failure-in-the-ex.patch
debian/patches/udev-run-programs-in-the-specified-order.patch
debian/rules
debian/shlibs.local.in
debian/source/format
debian/systemd-container.install
debian/systemd-container.maintscript
debian/systemd-container.postinst
debian/systemd-container.postrm
debian/systemd-coredump.install
debian/systemd-coredump.postinst
debian/systemd-coredump.prerm
debian/systemd-journal-remote.install
debian/systemd-journal-remote.postinst
debian/systemd-sysv.install
debian/systemd-sysv.postinst
debian/systemd-tests.install
debian/systemd-tests.lintian-overrides
debian/systemd.NEWS
debian/systemd.bug-control
debian/systemd.bug-script
debian/systemd.dirs
debian/systemd.install
debian/systemd.links
debian/systemd.lintian-overrides
debian/systemd.maintscript
debian/systemd.postinst
debian/systemd.postrm
debian/systemd.prerm
debian/systemd.triggers
debian/tests/assert.sh
debian/tests/boot-and-services
debian/tests/boot-smoke
debian/tests/build-login
debian/tests/control
debian/tests/fsck
debian/tests/hostnamed
debian/tests/lidswitch.evemu
debian/tests/localed-locale
debian/tests/localed-x11-keymap
debian/tests/logind
debian/tests/process-killer
debian/tests/root-unittests
debian/tests/storage
debian/tests/systemd-fsckd
debian/tests/timedated
debian/tests/udev
debian/tests/unit-config
debian/tests/upstream
debian/udev-udeb.dirs
debian/udev-udeb.install
debian/udev.NEWS
debian/udev.README.Debian
debian/udev.bug-control
debian/udev.bug-script
debian/udev.init
debian/udev.install
debian/udev.links
debian/udev.maintscript
debian/udev.postinst
debian/udev.postrm
debian/udev.preinst
debian/udev.prerm
debian/udev.triggers
debian/watch