|
|
|
|
Changelog for systemd-selinux-252.4-598.14.hs+fb.el8.noarch.rpm :
* Fri Jul 21 2023 Daan De Meyer - 252.4-598.14- Backport fix for transient ExecStart= escaping (e7416db183cb205146fd7fbb4e791b72cdae2b70) * Thu May 25 2023 Daan De Meyer - 252.4-598.13- Backport https://github.com/systemd/systemd/pull/25385 * Tue May 23 2023 Daan De Meyer - 252.4-598.12- Remove selinux bcond in favor of boolean dependency on selinux-policy so that systemd-selinux is only installed if selinux-policy is installed- Add selinux file contexts for /efi- Remove policycoreutils-python-utils dependency from systemd-selinux * Mon May 15 2023 Daan De Meyer - 252.4-598.11- Backport fixes for journald crashes and bad behavior when dealing with corrupted journals.- Fix changelog date * Thu Apr 13 2023 Daan De Meyer - 252.4-598.10- Revert cpu controller delegation to userAATT.service commit for FB builds * Fri Feb 17 2023 Daan De Meyer - 252.4-598.9- Fix selinux unsupported directive on centos stream 8 * Fri Feb 17 2023 Daan De Meyer - 252.4-598.8- Fix changelog * Fri Feb 17 2023 Daan De Meyer - 252.4-598.7- Backport udev rules fix- Fix selinux module * Wed Jan 04 2023 Daan De Meyer - 252.4-598.6- Bump release for 252.4- Sync from rawhide- Build with libqrencode- Build with libfido2- Build with homed/userdb- Drop pam config directory override- Use python3dist() where applicable- Drop llvm-toolset in favor of having systemd use bpftool gen object- Add back standalone binary packages * Wed Aug 31 2022 Anita Zhang - 251.4-1.3- Fix split-files.py regex for networkd files on non-C8 * Fri Aug 19 2022 Neal Gompa - 251.4-53- Set compile-time fallback hostname to \"localhost\" https://fedoraproject.org/wiki/Changes/FallbackHostname * Thu Aug 18 2022 Kalev Lember - 251.4-52- Avoid requiring systemd-pam from -devel subpackage * Thu Aug 18 2022 Anita Zhang - 251.4-1.2- Revert 32-bit offsets journal commit from hs+fb build * Tue Aug 16 2022 Anita Zhang - 251.4-1.1- Bump release for 251.4 * Tue Aug 09 2022 Zbigniew Jędrzejewski-Szmek - 251.4-51- Manually bump release version for rpmautospec * Tue Aug 09 2022 Luca BRUNO - 251.4-26- Align sysusers-generated shell value with upstream systemd default * Tue Aug 09 2022 Zbigniew Jędrzejewski-Szmek - 251.4-2- Backport patches and do a full preset on first boot (#2114065, https://fedoraproject.org/wiki/Changes/Preset_All_Systemd_Units_on_First_Boot) * Mon Aug 08 2022 Zbigniew Jędrzejewski-Szmek - 251.4-1- Version 251.4 (fixes rhbz#2112551)- A bunch of fixes to documentation, crashes in systemd-resolved, systemd-networkd, systemd itself, and other smaller fixes. * Sat Jul 23 2022 Fedora Release Engineering - 251.3-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jul 21 2022 Anita Zhang - 251.3-1.1- Sync changes from Fedora for new release * Wed Jul 13 2022 Zbigniew Jędrzejewski-Szmek - 251.3-1- Update to latest bugfix release- Drop forgotten \"temporary\" workaround for #1663040 * Wed Jun 29 2022 Zbigniew Jędrzejewski-Szmek - 251.2-2- Drop forward-secure-sealing code from sd-journal and tools * Thu Jun 02 2022 Zbigniew Jędrzejewski-Szmek - 251.2-1- A bunch of man page fixes, a few memory-access correctness fixes, remove excessive messages to utmp sessions, suppress messages about bpf setup in the user manager (#2084955) * Wed May 25 2022 Zbigniew Jędrzejewski-Szmek - 251.1-2- Supress errors from useradd/groupadd (#2090129)- Drop \"v\" from the version tag, add tilde back- The tag for shared-libraries is reintroduced (#1906010) * Tue May 24 2022 Zbigniew Jędrzejewski-Szmek - 251.1-1- First bugfix release for 250- Two fixes for kernel-install and a revert for #2087225, #2088788. * Sat May 21 2022 Zbigniew Jędrzejewski-Szmek - 251-1- Latest upstream release, for details see https://raw.githubusercontent.com/systemd/systemd/v251/NEWS.- Fixes for #2071034, #2084955, #2086166. * Mon May 16 2022 Zbigniew Jędrzejewski-Szmek - 251~rc3-1- Update to latest upstream prerelease (just various bugfixes)- Udev rule processing should be now fixed (#2076459)- Run sysusers and hwdb and catalog updates also if systemd is not running (#2085481) * Wed May 11 2022 Adam Williamson - 251~rc2-2- Backport #23352 to fix RHBZ #2083374 * Thu May 05 2022 Zbigniew Jędrzejewski-Szmek - 251~rc2-1- New upstream prerelease, for details see https://raw.githubusercontent.com/systemd/systemd/v251-rc2/NEWS. * Wed May 04 2022 Daan De Meyer - 250.3-6.7- Backported https://github.com/systemd/systemd/pull/23254 and https://github.com/systemd/systemd/pull/23205- Move more files to the networkd package * Wed Apr 13 2022 Daan De Meyer - 250.3-6.6- Fixed bug in networkd changes to split-files.py that caused the /etc/systemd/network to get moved to the networkd package (which we don\'t want because that\'s where link files for udev are also stored). * Tue Apr 12 2022 Zbigniew Jędrzejewski-Szmek - 251~rc1-3- Do not touch /etc/resolv.conf on upgrades (#2074122)- Add bugfix patch and revert one patch which might be causing problems with the compose * Wed Apr 06 2022 Daan De Meyer - 250.3-6.5- Backport systemd-analyze verify regression fix * Mon Apr 04 2022 Zbigniew Jędrzejewski-Szmek - 251~rc1-2- Merge libsystemd-core back into individual binaries and drop the private shared library suffix (this should server as a work-around for rhbz#2071069) * Mon Apr 04 2022 Daan De Meyer - 250.3-6.4- Make sure our packages override the corresponding backports from EPEL.- Modify the networkd fix from the previous release so that it can be merged into the c9s branch. * Fri Apr 01 2022 Daan De Meyer - 250.3-6.3- Move systemd-network-generator and networkd man pages to networkd package to avoid conflicts with systemd-extras from EPEL * Tue Mar 29 2022 Zbigniew Jędrzejewski-Szmek - 251~rc1-1- First release candidate in the new cycle- Fixes rhbz#1449751, rhbz#1906010 * Fri Mar 18 2022 Zbigniew Jędrzejewski-Szmek - 250.4-2- Fix the wrong file assignment done in previous version * Thu Mar 17 2022 Zbigniew Jędrzejewski-Szmek - 250.4-1- Move libcryptsetup plugins to -udev (#2031873)- Move systemd-cryptenroll to -udev (David Tardon)- Disable default DNS over TLS (#1889901) (Michael Catanzaro) * Wed Mar 16 2022 Daan De Meyer - 250.3-6.2- Backport PR #22757: BPF error logging improvements * Mon Feb 28 2022 Daan De Meyer - 250.3-6.1- New release for v250- Sync latest changes from Fedora rawhide- Use source archives from https://pagure.io/centos-sig-hyperscale/systemd instead of github. All Hyperscale patches have moved to pagure- Added llvm-toolset to BuildRequires (for llvm-strip) to make build succeed- Enable p11kit and pwquality options in the systemd build * Thu Feb 24 2022 Zbigniew Jędrzejewski-Szmek - 250.3-6- Avoid trying to create the symlink if there\'s a dangling symlink already in place (#2058388) * Thu Feb 24 2022 Daan De Meyer - 249-2.13- Move to dist-git layout used by Fedora (no more SOURCES/ and SPECS/)- Switch to .gitignore from commit 46a40810 from the Fedora RPM repo- Add back removed files from commit 46a40810 from the Fedora RPM repo * Wed Feb 23 2022 Zbigniew Jędrzejewski-Szmek - 250.3-5- Move part of %post scriptlet for resolved to %posttrans (#2018913)- Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing * Wed Feb 16 2022 Zbigniew Jędrzejewski-Szmek - 250.3-4- Drop scriptlet for handling nobody user upgrades from Fedora <28- Specify owner of /var/log/journal as root in the rpm listing (#2018913) * Thu Feb 10 2022 Zbigniew Jędrzejewski-Szmek - 250.3-3- Add pam_namespace to systemd-user pam config (rhbz#2053098)- Drop 20-grubby.install plugin for kernel-install (rhbz#2033646) * Wed Feb 09 2022 Anita Zhang - 249.4-2.12- Backport PR #20695: Sync if_arp.h with Linux 5.14- FB-only backport PR #22426: MemoryZSwapMax= to configure memory.zswap.max * Sat Jan 22 2022 Fedora Release Engineering - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Jan 18 2022 Zbigniew Jędrzejewski-Szmek - 250.3-2- Take ghost ownership of /var/log/lastlog (#1798685) * Tue Jan 18 2022 Zbigniew Jędrzejewski-Szmek - 250.3-1- Third stable release after v250: fixes for sd-boot on fringe hardware (e.g. VirtualBox), various man page updates, sd-journal file verification is now stricter, systemd-networkd by default will not add routes for wireguard AllowedIPs= systemd nss modules shouldn\'t try to read kernel command line- Don\'t do sd-boot updates when not installed (#2038289)- xdg-autostart-service will ignore ExecCondition= when the helper binary is missing- kernel-install does cleanup better (#2016630) * Fri Jan 07 2022 Zbigniew Jędrzejewski-Szmek - 250.2-1- Second stable release after v250: various bugfixes (systemd-resolved, systemd-journald, userdbctl, homed).- The manager should now gracefully handle the case where BPF LSM cannot be initialized (#2036145). The BPF filters are enabled again on all architectures, so *other * filter should also work on the affected architectures.- kernel-install now checks paths used by grub2 before sd-boot paths again (#2036199)- fstab-generator now ignores root-on-nfs/cifs/iscsi and live (#2037233)- CVE-2021-3997, #2024639: systemd-tmpfiles would exhaust the stack and crash during excessive recursion on a very deeply nested directory structure. * Tue Jan 04 2022 Zbigniew Jędrzejewski-Szmek - 250.1-1- First stable version after v250: various bugfixes, in particular for sd-boot, systemd-networkd, and various build issues.- Fixes #2036517, #2035608, #2036217. * Thu Dec 30 2021 Zbigniew Jędrzejewski-Szmek - 250-3- Disable bpf filters on arm64 (#2036145) * Sat Dec 25 2021 Zbigniew Jędrzejewski-Szmek - 250-2- Fix warning about systemd-boot-update.service not existing on non-uefi architectures- Enable all bpf features (#2035608) * Thu Dec 23 2021 Zbigniew Jędrzejewski-Szmek - 250-1- Version 250, only some very small changes since -rc3.- Switch unit status name format to \'combined\' (#2028169) * Mon Dec 20 2021 Zbigniew Jędrzejewski-Szmek - 250~rc3-1- Latest prerelease, see https://raw.githubusercontent.com/systemd/systemd/v250-rc3/NEWS for details.- Fixes rhbz#2006761, rhbz#2027627, rhbz#1926323, rhbz#1919538. * Sun Dec 12 2021 Zbigniew Jędrzejewski-Szmek - 250~rc1-4- Move systemd-boot-update.service to -udev subpackage and add it the the installation scriptlets (#2031400)- Move libcryptsetup-token-systemd plugins to -udev (#2031873)- Create /etc/resolv.conf symlink if nothing is present yet (#2032085) * Fri Dec 10 2021 Pavel Březina - 250~rc1-3- Remove nsswitch.conf scriptlets (#2023743) * Thu Dec 09 2021 Zbigniew Jędrzejewski-Szmek - 250~rc1-1- Version 250-rc1, see https://raw.githubusercontent.com/systemd/systemd/v250-rc1/NEWS for details. * Tue Nov 30 2021 Anita Zhang - 249.4-2.11- Backport PR #21241: fix bpf-foreign cgroup controller realization * Tue Nov 30 2021 Anita Zhang - 249.4-2.10- Re-enable fdisk and repart since util-linux-2.32.1-26 in C8s has the fix it needs for tests to pass. * Wed Nov 24 2021 Davide Cavalca - 249.4-2.9- Disable legacy iptables support * Fri Nov 19 2021 Davide Cavalca - 249.7-3- Disable legacy iptables support * Mon Nov 15 2021 Zbigniew Jędrzejewski-Szmek - 249.7-2- Supress errors from update-helper when selinux is enabled (see #2023332) * Sun Nov 14 2021 Zbigniew Jędrzejewski-Szmek - 249.7-1- Latest bugfix release (better erofs detection, sd-event memory corruption bugfix, logind, documentation)- Really fix helper to restart user units with older systemd (#2020415) * Sun Nov 14 2021 Petr Menšík - 249.7-1- Switch /etc/resolv.conf over to NM when systemd-resolved is uninstalled * Thu Nov 11 2021 Anita Zhang - 249.4-2.8- Remove revert_d219a2b07cc5dc8ffd5010f08561fab2780d8616.patch and replace with proper fix (PR #21221) * Wed Nov 10 2021 Kir Kolyshkin - 249.7-1- Fix scope activation from a user instance (#2022041) * Wed Nov 10 2021 Anita Zhang - 249.4-2.7- Add meson >= 0.57 for el8 builds. This version uses python 3.8. * Mon Nov 08 2021 Zbigniew Jędrzejewski-Szmek - 249.6-3- Fix helper to restart user units with older systemd (#2020415) * Thu Nov 04 2021 Zbigniew Jędrzejewski-Szmek - 249.6-2- Latest bugfix release (networkd, coredumpctl, varlink, udev, systemctl, systemd itself, better detection of Hyper-V and Virtualbox virtualization, documentation updates)- Fix helper to restart user units * Fri Oct 29 2021 Adam Williamson - 249.5-2- Backport PR #133 to fix boot * Wed Oct 20 2021 Anita Zhang - 249.4-2.6- Revert d219a2b because it creates non-determinisitic Slice= assignments * Tue Oct 12 2021 Zbigniew Jędrzejewski-Szmek - 249.5-1- Latest bugfix release (various fixes in systemd-networkd, -timesyncd, -journald, -udev, homed, -resolved, -repart, -oomd, -coredump, systemd itself, seccomp filters, TPM2 handling, -documentation, sd-event, sd-journal, journalctl, and nss-systemd).- Fixes #1976445. * Mon Oct 11 2021 Anita Zhang - 249.4-2.5- Remove duplicate Address= properties in network configs (part of PR #20892)- Serialize bpf device programs across reloads/reexecs (PR #20978)- Don\'t rewrite sysctls that are already set (PR #20676) * Wed Oct 06 2021 Davide Cavalca - 249.4-2.4- Drop qrencode-devel from BuildRequires as it\'s not actually used * Wed Sep 29 2021 Anita Zhang - 249.4-2.3- Fix to allow verifying hidden (dot) files again (PR #20875) * Fri Sep 24 2021 Anita Zhang - 249.4-2.2- Backport more feature support for systemd-networkd (#20450, #20541, #20729, #20828) * Wed Sep 22 2021 Anita Zhang - 249.4-2.1- Sync changes from Fedora- Backport one more feature for systemd-networkd (#20489) * Mon Sep 20 2021 Anita Zhang - 249.4-1.1- New stable point release- Backport optimization for read_virtual_file() (#20743)- Backport new features for systemd-networkd (#20743, #20472, #20477, #20484) * Tue Sep 14 2021 Sahana Prasad - Rebuilt with OpenSSL 3.0.0 * Tue Aug 24 2021 Zbigniew Jędrzejewski-Szmek - 249.4-1- Latest bugfix release: various fixes for systemd-networkd, systemd-resolved, systemd, systemd-boot.- Backport of macros to restart systemd user units (#1993244) * Fri Aug 06 2021 Zbigniew Jędrzejewski-Szmek - 249.3-1- Latest bugfix release: improved compatibility with latest glibc, various small documentation fixes, and fixes for systemd-networkd bridging, other minor fixes.- systemctl set-property accepts glob patterns now (#1986258) * Thu Jul 29 2021 Anita Zhang - 249.2-1.2- Remove Obsoletes lines on systemd-resolved and systemd-networkd since we don\'t want to install these by default. * Wed Jul 28 2021 Anita Zhang - 249.2-1.1- New release for 249- Drop merged patches- Split networkd and resolved into their own subpackages. * Tue Jul 27 2021 Davide Cavalca - 248.5-1.3- Add missing SELinux rules for the GNOME and KDE LiveDVD spins (https://pagure.io/centos-sig-hyperscale/package-bugs/issue/7) * Fri Jul 23 2021 Zbigniew Jędrzejewski-Szmek - 249.2-1- Latest bugfix release (a minor hwdb regression bugfix, and correction to kernel commandline handling when reexecuting PID 1 in a container) * Fri Jul 23 2021 Michael Catanzaro - 249.2-1- Build with -Ddefault-dns-over-tls=opportunistic (https://fedoraproject.org/wiki/Changes/DNS_Over_TLS, #1889901) * Wed Jul 21 2021 Davide Cavalca - 248.5-1.2- Add missing SELinux rules for 248 (https://pagure.io/centos-sig-hyperscale/package-bugs/issue/1) * Wed Jul 21 2021 Anita Zhang - 248.5-1.1- Update to systemd-stable 248.5 (includes fix for CVE-2021-33910) * Tue Jul 20 2021 Zbigniew Jędrzejewski-Szmek - 249.1-1- Various minor documentation and correctness fixes.- CVE-2021-33910, #1984020: an unchecked stack allocation could be used to crash systemd and cause the system to reboot by creating a very long fuse mountpoint path. * Mon Jul 12 2021 Zbigniew Jędrzejewski-Szmek - 248.4-1- Assorted fixes (some systemd-resolved crashes, invalid systemd-tmpfiles assertion, etc.)- systemd-networkd workaround for TALOS-2020-1142, CVE-2020-13529.- A big update of hardware descriptions. * Wed Jul 07 2021 Neal Gompa - 249-2- Use correct NEWS URLs for systemd 249 releases in changelog entries * Wed Jul 07 2021 Zbigniew Jędrzejewski-Szmek - 249-1- Latest upstream release with minor bugfixes, see https://github.com/systemd/systemd/blob/v249/NEWS.- systemd-oomd cpu usage is reduced (#1944646) * Thu Jul 01 2021 Zbigniew Jędrzejewski-Szmek - 249~rc3-1- Latest upstream prerelease with various bugfixes, see https://github.com/systemd/systemd/blob/v249-rc3/NEWS. * Fri Jun 25 2021 Zbigniew Jędrzejewski-Szmek - 249~rc2-1- Latest upstream prerelease with various bugfixes, see https://github.com/systemd/systemd/blob/v249-rc2/NEWS.- Ignore FORCERENEW DHCP packets (TALOS-2020-1142, CVE-2020-13529, #1959398) * Thu Jun 17 2021 Adam Williamson - 249~rc1-2- Stop systemd providing systemd-resolved, now the subpackage exists (#1973462) * Wed Jun 16 2021 Zbigniew Jędrzejewski-Szmek - 249~rc1-1- Latest upstream prerelease, see https://github.com/systemd/systemd/blob/v249-rc1/NEWS. Fixes #1963428.- Use systemd-sysusers to create users (#1965815)- Move systemd-resolved into systemd-resolved subpackage (#1923727) [patch from Petr Menšík] * Mon Jun 14 2021 Anita Zhang - 248.2-1.5- Remove backport PR #19811 since it\'s still buggy- Remove d586f642fd90e3bb378f7b6d3e3a64a753e51756 to fix rate limiting instead (at least until sd-event rate limiting is fixed in 249). * Thu Jun 10 2021 Anita Zhang - 248.2-1.4- Backport PR #19811 to fix issues with mount sd-event rate limiting * Wed May 19 2021 Davide Cavalca - 248.2-1.3- Add BuildRequires for python-jinja2 in preparation for 249 (see PR#19630) * Mon May 17 2021 Davide Cavalca - 248.2-1.2- Add systemd-oomd-defaults subpackage from Fedora * Sat May 15 2021 Zbigniew Jędrzejewski-Szmek - 248.3-1- A fix for resolved crashes (#1946386, #1960227, #1950241)- Some minor fixes for documentation, systemd-networkd, systemd-run, bootctl. * Mon May 10 2021 Anita Zhang - 248.2-1.1- New release for 248- Drop patches merged in 248.2- FB only backport PR #13496 (Extend bpf cgroup program support) * Fri May 07 2021 Zbigniew Jędrzejewski-Szmek - 248.2-1- Pull in some more patches from upstream (#1944646, #1885090, #1941340)- Adjust modes of some %ghost files (#1956059) * Thu May 06 2021 Zbigniew Jędrzejewski-Szmek - 248.1-1- Latest stable version: a long list of minor correctness fixes all around (#1955475, #911766, #1958167, #1952919)- Enable tpm2-tss dependency (#1949505) * Wed Apr 14 2021 Anita Zhang - 247.3-10- Remove systemd-resolved enablement * Wed Apr 07 2021 Davide Cavalca - 247.3-9- Reenable LTO now that binutils has been fixed- Update FB configure options * Tue Apr 06 2021 Adam Williamson - 248-2- Re-enable resolved caching, we hope all major bugs are resolved now * Thu Apr 01 2021 Davide Cavalca - 247.3-8- Backport https://github.com/SELinuxProject/refpolicy/pull/308 to fix systemd-hostnamed and systemd-localed when SELinux is enabled. * Thu Apr 01 2021 Anita Zhang - 247.3-7- Downgrade sysv-generator warning even more (to debug) * Wed Mar 31 2021 Zbigniew Jędrzejewski-Szmek - 248-1- Latest upstream release, see https://github.com/systemd/systemd/blob/v248/NEWS.- The changes since -rc4 are rather small, various fixes all over the place. A fix to how systemd-oomd selects a candidate to kill, and more debug logging to make this more transparent. * Wed Mar 31 2021 Anita Zhang - 247.3-6- Backport PR#18621 (Ignore attempts at hidepid and subset for older kernels)- Downgrade sysv-generator warning about missing native systemd unit * Wed Mar 31 2021 Davide Cavalca - 247.3-5- Add selinux subpackage * Tue Mar 30 2021 Anita Zhang - 248~rc4-6- Increase oomd user memory pressure limit to 50% (#1941170) * Fri Mar 26 2021 Zbigniew Jędrzejewski-Szmek - 248~rc4-5- Do not preset systemd-networkd.service and systemd-networkd-wait-online.service on upgrades from before systemd-networkd was split out (#1943263)- In nsswitch.conf, move nss-myhostname to the front, before nss-mdns4 (#1943199) * Wed Mar 24 2021 Zbigniew Jędrzejewski-Szmek - 248~rc4-4- Revert patch that seems to cause problems with dns resolution (see comments on https://bodhi.fedoraproject.org/updates/FEDORA-2021-1c1a870ceb) * Mon Mar 22 2021 Zbigniew Jędrzejewski-Szmek - 248~rc4-3- Fix hang when processing timers during DST switch in Europe/Dublin timezone (#1941335)- Fix returning combined IPv4/IPv6 responses from systemd-resolved cache (#1940715) (But note that the disablement of caching added previously is retained until we can do more testing.)- Minor fix to interface naming by udev- Fix for systemd-repart --size * Fri Mar 19 2021 Adam Williamson - 248~rc4-2- Disable resolved cache via config snippet (#1940715) * Thu Mar 18 2021 Yu Watanabe - 248~rc4-1- Latest upstream prerelease, see https://github.com/systemd/systemd/blob/v248-rc4/NEWS.- A bunch of documentation updates, and correctness fixes. * Wed Mar 17 2021 Anita Zhang - 247.3-4- Backport PR #18955 (Fixes fstab parsing)- FB only backport PR #18886 (systemd-shutdown logs to /dev/console not stderr)- Reenable tests by disabling LTO (work around binutils bug) * Tue Mar 16 2021 Adam Williamson - 248~rc3-2- Backport PR #19009 to fix CNAME redirect resolving some more (#1933433) * Thu Mar 11 2021 Zbigniew Jędrzejewski-Szmek - 248~rc3-1- Latest upstream prerelease, see https://github.com/systemd/systemd/blob/v248-rc3/NEWS.- A bunch of documentation updates, correctness fixes, and systemd-networkd features.- Resolves #1933137, #1935084, #1933873, #1931181, #1933335, #1935062, #1927148. * Thu Mar 11 2021 Zbigniew Jędrzejewski-Szmek - 248~rc2-5- Fix crash in pid1 during daemon-reexec (#1931034) * Fri Mar 05 2021 Adam Williamson - 248~rc2-3- Fix stub resolver CNAME chain resolving (#1933433) * Mon Mar 01 2021 Josh Boyer - 248~rc2-2- Don\'t set the fallback hostname to Fedora on non-Fedora OSes * Wed Feb 24 2021 Davide Cavalca - 247.3-3- Remove careinversion usage to make the package usable on older mock versions * Tue Feb 23 2021 Zbigniew Jędrzejewski-Szmek - 248~rc2-1- Latest upstream prelease, just a bunch of small fixes.- Fixes #1931957. * Tue Feb 23 2021 Zbigniew Jędrzejewski-Szmek - 248~rc1-2- Rebuild with the newest scriptlets * Tue Feb 23 2021 Zbigniew Jędrzejewski-Szmek - 248~rc1-1- Latest upstream prerelease, see https://github.com/systemd/systemd/blob/v248-rc1/NEWS.- Fixes #1614751 by only restarting services at the end of transcation. Various packages need to be rebuilt to have the updated macros.- Fixes #1879028, though probably not completely.- Fixes #1925805, #1928235. * Fri Feb 19 2021 Davide Cavalca - 247.3-2- Disable some tests to workaround a binutils bug triggered by enabling audit- Refresh patches * Wed Feb 17 2021 Michel Alexandre Salim - 247.3-3- Increase oomd user memory pressure limit to 10% (#1929856) * Wed Feb 17 2021 Anita Zhang - 247.3-1- New release for 247- Backport PR #18211 (Fixes ExecCondition= dependency bug)- Backport PR #17872 (Fixes PrivateUsers=yes with other sandboxing properties)- FB only backport PR #17495 (Fixes BPF pinning post-coldplug)- Reenable audit support * Sun Feb 07 2021 Davide Cavalca - 246.1-2- Initial Hyperscale SIG package- Update release to use %dist macro- Drop el7 logic- Explicitly default non-FB built to the legacy hierarchy- Drop no longer needed FB FusionIO patch- Temporarily disable audit support while debugging a link issue * Fri Feb 05 2021 Anita Zhang - 247.3-2- Changes for https://fedoraproject.org/wiki/Changes/EnableSystemdOomd.- Backports consist primarily of PR #18361, #18444, and #18401 (plus some additional ones to handle merge conflicts).- Create systemd-oomd-defaults subpackage to install unit drop-ins that will configure systemd-oomd to monitor and act. * Tue Feb 02 2021 Zbigniew Jędrzejewski-Szmek - 247.3-1- Minor stable release- Fixes #1895937, #1813219, #1903106. * Wed Jan 27 2021 Fedora Release Engineering - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Jan 25 2021 Anita Zhang - 246.1-1.fb6- Backport PR #16803 to fix ConditionEnvironment= * Wed Jan 13 2021 Zbigniew Jędrzejewski-Szmek - 247.2-2- Fix bfq patch again (#1813219) * Wed Dec 23 2020 Jonathan Underwood - 247.2-2- Add patch to enable crypttab to support disabling of luks read and write workqueues (corresponding to https://github.com/systemd/systemd/pull/18062/). * Wed Dec 16 2020 Zbigniew Jędrzejewski-Szmek - 247.2-1- Minor stable release- Fixes #1908071. * Tue Dec 08 2020 Zbigniew Jędrzejewski-Szmek - 247.1-3- Rebuild with fallback hostname change reverted. * Fri Dec 04 2020 Bastien Nocera - 247.1-2- Unset fallback-hostname as plenty of applications expected localhost to mean \"default hostname\" without ever standardising it (#1892235) * Tue Dec 01 2020 Zbigniew Jędrzejewski-Szmek - 247.1-1- Latest stable release- Fixes #1902819.- Files to configure networking with systemd-networkd in a VM or container are moved to systemd-networkd subpackage. (They were previously in the -container subpackage, which is for container/VM management.) * Thu Nov 26 2020 Zbigniew Jędrzejewski-Szmek - 247-1- Update to the latest version- #1900878 should be fixed * Thu Nov 19 2020 Chris Down - 246.1-1.fb5- Updated version of PR #17495 to fix program leak * Thu Nov 19 2020 Chris Down - 246.1-1.fb4- Backport PR #17495 to fix BPF program lifecycle- Backport PR #17422 to clean up cgroups more reliably after exit- Backport PR #17497 to add FixedRandomDelay= support * Tue Oct 20 2020 Zbigniew Jędrzejewski-Szmek - 247~rc2- New upstream pre-release. See https://github.com/systemd/systemd/blob/v247-rc1/NEWS. Many smaller and bigger improvements and features are introduced. (#1885101, #1890632, #1879216) A backwards-incompatible change affects PCI network devices which are connected through a bridge which is itself associated with a slot. When more than one device was associated with the same slot, one of the devices would pseudo-randomly get named after the slot. That name is now not generated at all. This changed behaviour is causes the net naming scheme to be changed to \"v247\". To restore previous behaviour, specify net.naming-scheme=v245. systemd-oomd is built, but should not be considered \"production ready\" at this point. Testing and bug reports are welcome. * Wed Sep 30 2020 Dusty Mabe - 246.6-3- Try to make files in subpackages (especially the networkd subpackage) more appropriate. * Thu Sep 24 2020 Filipe Brandenburger - 246.6-2- Build a package with standalone binaries for non-systemd systems. For now, only systemd-sysusers is included. * Thu Sep 24 2020 Christian Glombek - 246.6-2- Split out networkd sub-package and add to main package as recommended dependency * Sun Sep 20 2020 Zbigniew Jędrzejewski-Szmek - 246.6-1- Update to latest stable release (various minor fixes: manager, networking, bootct, kernel-install, systemd-dissect, systemd-homed, fstab-generator, documentation) (#1876905)- Do not fail in test because of kernel bug (#1803070) * Fri Sep 18 2020 Anita Zhang - 246.1-1.fb3- Backport PR #16838 and #16857 to improve $PATH handling- Backport PR #16940 to fix ECONN handling in sockets- Backport PR #17031 to fix rate limiting on units in restart loop- Backport PR #17082 to get nspawn TTY tweaks * Sun Sep 13 2020 Zbigniew Jędrzejewski-Szmek - 246.5-1- Update to latest stable release (a bunch of small network-related fixes in systemd-networkd and socket handling, documentation updates, a bunch of fixes for error handling).- Also remove existing file when creating /etc/resolv.conf symlink upon installation (#1873856 again) * Wed Sep 02 2020 Zbigniew Jędrzejewski-Szmek - 246.4-1- Update to latest stable version: a rework of how the unit cache mtime works (hopefully #1872068, #1871327, #1867930), plus various fixes to systemd-resolved, systemd-dissect, systemd-analyze, systemd-ask-password-agent, systemd-networkd, systemd-homed, systemd-machine-id-setup, presets for instantiated units, documentation and shell completions.- Create /etc/resolv.conf symlink upon installation (#1873856)- Move nss-mdns before nss-resolve in /etc/nsswitch.conf and disable mdns by default in systemd-resolved (#1867830) * Wed Aug 26 2020 Zbigniew Jędrzejewski-Szmek - 246.3-1- Update to bugfix version (some networkd fixes, minor documentation fixes, relax handling of various error conditions, other fixlets for bugs without bugzilla numbers). * Tue Aug 18 2020 Anita Zhang - 246.1-1.fb2- Gate \"Obsoletes: systemd < 245.6-1\" out due to dependency issues on Facebook systems * Mon Aug 17 2020 Anita Zhang - 246.1-1.fb1- Facebook rebuild- Don\'t compile in systemd-repart (needs libfdisk >= 2.33 and C8 has 2.32)- Remove unused systemd-journal-remote.xml and systemd-journal-gatewayd.xml files since we never used firewalld * Mon Aug 17 2020 Zbigniew Jędrzejewski-Szmek - 246.2-1- A few minor bugfixes- Adjust seccomp filter for kernel 5.8 and glibc 2.32 (#1869030)- Create /etc/resolv.conf symlink on upgrade (#1867865) * Fri Aug 07 2020 Zbigniew Jędrzejewski-Szmek - 246.1-1- A few minor bugfixes- Remove /etc/resolv.conf on upgrades (if managed by NetworkManager), so that systemd-resolved can take over the management of the symlink. * Thu Jul 30 2020 Zbigniew Jędrzejewski-Szmek - 246-1- Update to released version. Only some minor bugfixes since the pre-release. * Sun Jul 26 2020 Zbigniew Jędrzejewski-Szmek - 246~rc2-2- Make /tmp be 50% of RAM again (#1856514)- Re-run \'systemctl preset systemd-resolved\' on upgrades. /etc/resolv.conf is not modified, by a hint is emitted if it is managed by NetworkManager. * Fri Jul 24 2020 Zbigniew Jędrzejewski-Szmek - 246~rc2-1- New pre-release with incremental fixes (#1856037, #1858845, #1856122, #1857783)- Enable systemd-resolved (with DNSSEC disabled by default, and LLMNR and mDNS support in resolve-only mode by default). See https://fedoraproject.org/wiki/Changes/systemd-resolved. * Thu Jul 09 2020 Zbigniew Jędrzejewski-Szmek - 246~rc1-1- New upstream release, see https://raw.githubusercontent.com/systemd/systemd/v246-rc1/NEWS. This release includes many new unit settings, related inter alia to cgroupsv2 freezer support and cpu affinity, encryption and verification. systemd-networkd has a ton of new functionality and many other tools gained smaller enhancements. systemd-homed gained FIDO2 support. Documentation has been significantly improved: sd-bus and sd-hwdb libraries are now fully documented; man pages have been added for the D-BUS APIs of systemd daemons and various new interfaces. Closes #1392925, #1790972, #1197886, #1525593. * Wed Jun 24 2020 Bastien Nocera - 245.6-3- Set fallback-hostname to fedora so that unset hostnames are still recognisable (#1392925) * Fri Jun 05 2020 Anita Zhang - 245.5-2.fb3- Backport 156a5fd to mitigate CVE-2020-13776 * Thu Jun 04 2020 Anita Zhang - 245.5-2.fb2- Revert c7d26ac which is causing SMI count to go up leading to increased microstalls during Chef runs * Tue Jun 02 2020 Zbigniew Jędrzejewski-Szmek - 245.6-2- Add self-obsoletes to fix upgrades from F31 * Sun May 31 2020 Zbigniew Jędrzejewski-Szmek - 245.6-1- Update to latest stable version (some documentation updates, minor memory correctness issues) (#1815605, #1827467, #1842067) * Thu Apr 30 2020 Anita Zhang - 245.5-2.fb1- Facebook rebuild- Don\'t compile in systemd-homed, systemd-userdb, and p11kit- Backport PR #15544 and #15551 (drops FB rlimit_memlock patch) * Tue Apr 21 2020 Björn Esser - 245.5-2- Add explicit BuildRequires: acl- Bootstrapping for json-c SONAME bump * Fri Apr 17 2020 Zbigniew Jędrzejewski-Szmek - 245.5-1- Update to latest stable version (#1819313, #1815412, #1800875) * Thu Apr 16 2020 Björn Esser - 245.4-2- Add bootstrap option to break circular deps on cryptsetup * Wed Apr 01 2020 Zbigniew Jędrzejewski-Szmek - 245.4-1- Update to latest stable version (#1814454) * Thu Mar 26 2020 Zbigniew Jędrzejewski-Szmek - 245.3-1- Update to latest stable version (no issue that got reported in bugzilla) * Wed Mar 18 2020 Zbigniew Jędrzejewski-Szmek - 245.2-1- Update to latest stable version (a few bug fixes for random things) (#1798776) * Wed Mar 18 2020 Andrew Gallagher - 244-2.fb4- Bump HIGH_RLIMIT_MEMLOCK to 512M * Fri Mar 06 2020 Zbigniew Jędrzejewski-Szmek - 245-1- Update to latest version (#1807485) * Wed Feb 26 2020 Zbigniew Jędrzejewski-Szmek - 245~rc2-1- Modify the downstream udev rule to use bfq to only apply to disks (#1803500)- \"Upgrade\" dependency on kbd package from Recommends to Requires (#1408878)- Move systemd-bless-boot.service and systemd-boot-system-token.service to systemd-udev subpackage (#1807462)- Move a bunch of other services to systemd-udev: systemd-pstore.service, all fsck-related functionality, systemd-volatile-root.service, systemd-verity-setup.service, and a few other related files.- Fix daemon-reload rule to not kill non-systemd pid1 (#1803240)- Fix namespace-related failure when starting systemd-homed (#1807465) and group lookup failure in nss_systemd (#1809147)- Drop autogenerated BOOT_IMAGE= parameter from stored kernel command lines (#1716164)- Don\'t require /proc to be mounted for systemd-sysusers to work (#1807768) * Fri Feb 21 2020 Filipe Brandenburger - 245~rc1-4- Update daemon-reexec fallback to check whether the system is booted with systemd as PID 1 and check whether we\'re upgrading before using kill -TERM on PID 1 (#1803240) * Thu Feb 20 2020 Filipe Brandenburger - 244-2.fb3- Only kill -TERM 1 when systemd is actually running. * Tue Feb 18 2020 Adam Williamson - 245~rc1-3- Revert 097537f0 to fix plymouth etc. running when they shouldn\'t (#1803293) * Fri Feb 07 2020 Zbigniew Jędrzejewski-Szmek - 245~rc1-2- Add default \'disable *\' preset for user units (#1792474, #1468501), see https://fedoraproject.org/wiki/Changes/Systemd_presets_for_user_units.- Add macro to generate \"compat\" scriptlets based off sysusers.d format and autogenerate user() and group() virtual provides (#1792462), see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format.- Revert patch to udev rules causing regression with usb hubs (#1800820). * Thu Feb 06 2020 Anita Zhang - 244-2.fb2- Backport PR#14815 (Permissive syscall filtering in dbus-execute) * Wed Feb 05 2020 Zbigniew Jędrzejewski-Szmek - 245~rc1-1- New upstream release, see https://raw.githubusercontent.com/systemd/systemd/v245-rc1/NEWS. This release includes completely new functionality: systemd-repart, systemd-homed, user reconds in json, and multi-instantiable journald, and a partial rework of internal communcation to use varlink, and bunch of more incremental changes. The \"predictable\" interface name naming scheme is changed, net.naming-scheme= can be used to undo the change. The change applies to container interface names on the host.- Fixes #1774242, #1787089, #1798414/CVE-2020-1712. * Fri Jan 31 2020 Fedora Release Engineering - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jan 09 2020 Anita Zhang - 244-2.fb1- Facebook rebuild- Backport PR#13823 (PrivateUsers=true for unprivileged user managers)- Backport PR#14441 (Fix type.d drop-in ordering) * Sat Dec 21 2019 - 244.1-2- Disable service watchdogs (for systemd units) * Sun Dec 15 2019 - 244.1-1- Update to latest stable batch (systemd-networkd fixups, better support for seccomp on s390x, minor cleanups to documentation).- Drop patch to revert addition of NoNewPrivileges to systemd units * Fri Nov 29 2019 Zbigniew Jędrzejewski-Szmek - 244-1- Update to latest version. Just minor bugs fixed since the pre-release. * Fri Nov 22 2019 Zbigniew Jędrzejewski-Szmek - 244~rc1-1- Update to latest pre-release version, see https://github.com/systemd/systemd/blob/master/NEWS#L3. Biggest items: cgroups v2 cpuset controller, fido_id builtin in udev, systemd-networkd does not create a default route for link local addressing, systemd-networkd supports dynamic reconfiguration and a bunch of new settings. Network files support matching on WLAN SSID and BSSID.- Better error messages when preset/enable/disable are used with a glob (#1763488)- u2f-hidraw-policy package is obsoleted (#1753381) * Tue Nov 19 2019 Zbigniew Jędrzejewski-Szmek - 243.4- Latest bugfix release. Systemd-stable snapshots will now be numbered.- Fix broken PrivateDevices filter on big-endian, s390x in particular (#1769148)- systemd-modules-load.service should only warn, not fail, on error (#1254340)- Fix incorrect certificate validation with DNS over TLS (#1771725, #1771726, CVE-2018-21029)- Fix regression with crypttab keys with colons- Various memleaks and minor memory access issues, warning adjustments * Thu Oct 31 2019 Davide Cavalca - 243-2.fb3- Backport PR#13754 (allow restart for oneshot units)- Misc specfiles fixes to support building on el8 as well- Default el8 builds to the unified hierarchy * Fri Oct 18 2019 Adam Williamson - 243-4.gitef67743- Backport PR #13792 to fix nomodeset+BIOS CanGraphical bug (#1728240) * Thu Oct 10 2019 Zbigniew Jędrzejewski-Szmek - 243-3.gitef67743- Various minor documentation and error message cleanups- Do not use cgroup v1 hierarchy in nspawn on groups v2 (#1756143) * Wed Oct 02 2019 Davide Cavalca - 243-2.fb2- Backport PR#13689 (a bunch of protection-related fixes) * Fri Sep 27 2019 Davide Cavalca - 243-2.fb1- Facebook rebuild- drop \"use bfq as the default scheduler\" patch- backport PR#13369 (ExecXYZEx= bus hook ups)- disable udev-test.pl for now due to flakiness * Sat Sep 21 2019 Zbigniew Jędrzejewski-Szmek - 243-2.gitfab6f01- Backport a bunch of patches (memory access issues, improvements to error reporting and handling in networkd, some misleading man page contents #1751363)- Fix permissions on static nodes (#1740664)- Make systemd-networks follow the RFC for DHPCv6 and radv timeouts- Fix one crash in systemd-resolved (#1703598)- Make journal catalog creation reproducible (avoid unordered hashmap use)- Mark the accelerometer in HP laptops as part of the laptop base- Fix relabeling of directories with relabel-extra.d/- Fix potential stuck noop jobs in pid1- Obsolete timedatex package (#1735584) * Tue Sep 03 2019 Zbigniew Jędrzejewski-Szmek - 243-1- Update to latest release- Emission of Session property-changed notifications from logind is fixed (this was breaking the switching of sessions to and from gnome).- Security issue: unprivileged users were allowed to change DNS servers configured in systemd-resolved. Now proper polkit authorization is required. * Mon Aug 26 2019 Adam Williamson - 243~rc2-2- Backport PR #13406 to solve PATH ordering issue (#1744059) * Thu Aug 22 2019 Zbigniew Jędrzejewski-Szmek - 243~rc2-1- Update to latest pre-release. Fixes #1740113, #1717712.- The default scheduler for disks is set to BFQ (1738828)- The default cgroup hierarchy is set to unified (cgroups v2) (#1732114). Use systemd.unified-cgroup-hierarchy=0 on the kernel command line to revert. See https://fedoraproject.org/wiki/Changes/CGroupsV2. * Wed Aug 07 2019 Adam Williamson - 243~rc1-2- Backport PR #1737362 so we own /etc/systemd/system again (#1737362) * Wed Aug 07 2019 Anita Zhang - 242-2.fb4- Backport PR#12933 (core: ExecCondition= for services)- Backport PR#13096 (Preparatory work for the unit loading rework)- Backport PR#13119 (Rework unit loading to take into account all aliases) * Tue Jul 30 2019 Zbigniew Jędrzejewski-Szmek - 243~rc1-1- Update to latest version (#1715699, #1696373, #1711065, #1718192) * Sat Jul 27 2019 Fedora Release Engineering - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Jul 20 2019 Zbigniew Jędrzejewski-Szmek - 242-6.git9d34e79- Ignore bad rdrand output on AMD CPUs (#1729268)- A bunch of backported patches from upstream: documentation, memory access fixups, command output tweaks (#1708996) * Thu Jul 18 2019 Anita Zhang - 242-2.fb3- Backport PR#12346 (make sure accept_flush() doesn\'t hang on EOPNOTSUPP)- Backport PR#12979 (add SystemCallErrorNumber=EPERM to systemd-portabled.service) * Tue Jun 25 2019 Björn Esser - 242-5.git7a6d834- Rebuilt (libqrencode.so.4) * Tue Jun 25 2019 Miro Hrončok - 242-4.git7a6d834- Rebuilt for iptables update (libip4tc.so.2) * Thu Jun 20 2019 Anita Zhang - 242-2.fb2- Backport PR#11778 (ExecStartXYZEx= dbus support)- Backport PR#12729 (nspawn: don\'t hard fail when setting capabilities)- Backport PR#12745 (IPAddressXYZ=\"any\" for users with CAP_NET_ADMIN) * Fri Apr 26 2019 Zbigniew Jędrzejewski-Szmek - 242-3.git7a6d834- Add symbol to mark vtable format changes (anything using sd_add_object_vtable or sd_add_fallback_vtable needs to be rebuilt)- Fix wireguard ListenPort handling in systemd-networkd- Fix hang in flush_accept (#1702358)- Fix handling of RUN keys in udevd- Some documentation and shell completion updates and minor fixes * Thu Apr 25 2019 Davide Cavalca - 242-2.fb1- Facebook rebuild- Backport PR#12336 (support DisableControllers= for transient units) * Tue Apr 16 2019 Adam Williamson - 242-2- Rebuild with Meson fix for #1699099 * Thu Apr 11 2019 Zbigniew Jędrzejewski-Szmek - 242-1- Update to latest release- Make scriptlet failure non-fatal * Tue Apr 09 2019 Zbigniew Jędrzejewski-Szmek - 242~rc4-1- Update to latest prerelease * Thu Apr 04 2019 Zbigniew Jędrzejewski-Szmek - 242~rc3-1- Update to latest prerelease * Wed Apr 03 2019 Zbigniew Jędrzejewski-Szmek - 242~rc2-1- Update to the latest prerelease.- The bug reported on latest update that systemd-resolved and systemd-networkd are re-enabled after upgrade is fixed. * Fri Mar 29 2019 Zbigniew Jędrzejewski-Szmek - 241-4.gitcbf14c9- Backport various patches from the v241..v242 range: kernel-install will not create the boot loader entry automatically (#1648907), various bash completion improvements (#1183769), memory leaks and such (#1685286). * Fri Mar 22 2019 Davide Cavalca - 241-1.fb2- Backport PR#11754 (sd-bus fixes for CVE-2019-6454)- Backport PR#12078 (nspawn fix) * Thu Mar 14 2019 Zbigniew Jędrzejewski-Szmek - 241-3.gitc1f8ff8- Declare hyperv and framebuffer devices master-of-seat again (#1683197) * Wed Feb 27 2019 Davide Cavalca - 241-1.fb1- Facebook rebuild- Rebase fio udev patch (this will likely be dropped in the next release)- Drop the mock testing patches, not needed anymore- Ignore errors for Python bytecompiling due to run-unit-tests.py- Fix the run-unit-tests.py shebang to use python36- Backport PR#11831 (missing include) and PR#11836 (test-chown-rec fix) * Wed Feb 20 2019 Zbigniew Jędrzejewski-Szmek - 241-2.gita09c170- Prevent buffer overread in systemd-udevd- Properly validate dbus paths received over dbus (#1678394, CVE-2019-6454) * Sat Feb 09 2019 Zbigniew Jędrzejewski-Szmek - 241~rc2-2- Turn LTO back on * Tue Feb 05 2019 Zbigniew Jędrzejewski-Szmek - 241~rc2-1- Update to latest release -rc2 * Sun Feb 03 2019 Fedora Release Engineering - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Sun Jan 27 2019 Yu Watanabe - 241~rc1-2- Backport a patch for kernel-install * Sat Jan 26 2019 Zbigniew Jędrzejewski-Szmek - 241~rc1-1- Update to latest release -rc1 * Tue Jan 15 2019 Zbigniew Jędrzejewski-Szmek - 240-6.gitf02b547- Add a work-around for #1663040 * Mon Jan 14 2019 Björn Esser - Rebuilt for libcrypt.so.2 (#1666033) * Fri Jan 11 2019 Zbigniew Jędrzejewski-Szmek - 240-4.gitf02b547- Add a work-around for selinux issue on live images (#1663040) * Fri Jan 11 2019 Zbigniew Jędrzejewski-Szmek - 240-3.gitf02b547- systemd-journald and systemd-journal-remote reject entries which contain too many fields (CVE-2018-16865, #1664973) and set limits on the process\' command line length (CVE-2018-16864, #1664972)- $DBUS_SESSION_BUS_ADDRESS is again exported by pam_systemd (#1662857)- A fix for systemd-udevd crash (#1662303) * Sat Dec 22 2018 Zbigniew Jędrzejewski-Szmek - 240-2- Add two more patches that revert recent udev changes * Fri Dec 21 2018 Zbigniew Jędrzejewski-Szmek - 240-1- Update to latest release See https://github.com/systemd/systemd/blob/master/NEWS for the list of changes. * Mon Dec 17 2018 Zbigniew Jędrzejewski-Szmek - 239-10.git9f3aed1- Hibernation checks for resume= are rescinded (#1645870)- Various patches: - memory issues in logind, networkd, journald (#1653068), sd-device, etc. - Adaptations for newer meson, lz4, kernel - Fixes for misleading bugs in documentation- net.ipv4.conf.all.rp_filter is changed from 1 to 2 * Mon Dec 10 2018 Davide Cavalca - 239-1.fb6- Backport PR#10411 and PR#10493 (systemd-analyze timespan command)- Rebase our PR#10507 and PR#10567 backports onto the version merged upstream- Backport PR#10757 (cgroup2 BPF devices fixes)- Backport PR#10876 (cgroup_subtree_mask propagation fix) * Thu Nov 29 2018 Zbigniew Jędrzejewski-Szmek - Adjust scriptlets to modify /etc/authselect/user-nsswitch.conf (see https://github.com/pbrezina/authselect/issues/77)- Drop old scriptlets for nsswitch.conf modifications for nss-mymachines and nss-resolve * Sun Nov 18 2018 Alejandro Domínguez Muñoz - Remove link creation for rsyslog.service * Thu Nov 08 2018 Adam Williamson - 239-9.git9f3aed1- Go back to using systemctl preset-all in %post (#1647172, #1118740) * Mon Nov 05 2018 Adam Williamson - 239-8.git9f3aed1- Requires(post) openssl-libs to fix live image build machine-id issue See: https://pagure.io/dusty/failed-composes/issue/960 * Mon Nov 05 2018 Yu Watanabe - Set proper attributes to private directories * Fri Nov 02 2018 Davide Cavalca - 239-1.fb5- Backport PR#10507 (don\'t require CPU controller for CPU accounting)- Backport PR#10567 (DisableControllers= directive) * Fri Nov 02 2018 Zbigniew Jędrzejewski-Szmek - 239-7.git9f3aed1- Split out the rpm macros into systemd-rpm-macros subpackage (#1645298) * Sun Oct 28 2018 Zbigniew Jędrzejewski-Szmek - 239-6.git9f3aed1- Fix a local vulnerability from a race condition in chown-recursive (CVE-2018-15687, #1639076)- Fix a local vulnerability from invalid handling of long lines in state deserialization (CVE-2018-15686, #1639071)- Fix a remote vulnerability in DHCPv6 in systemd-networkd (CVE-2018-15688, #1639067)- The DHCP server is started only when link is UP- DHCPv6 prefix delegation is improved- Downgrade logging of various messages and add loging in other places- Many many fixes in error handling and minor memory leaks and such- Fix typos and omissions in documentation- Typo in %_environmnentdir rpm macro is fixed (with backwards compatiblity preserved)- Matching by MACAddress= in systemd-networkd is fixed- Creation of user runtime directories is improved, and the user manager is only stopped after 10 s after the user logs out (#1642460 and other bugs)- systemd units systemd-timesyncd, systemd-resolved, systemd-networkd are switched back to use DynamicUser=0- Aliases are now resolved when loading modules from pid1. This is a (redundant) fix for a brief kernel regression.- \"systemctl --wait start\" exits immediately if no valid units are named- zram devices are not considered as candidates for hibernation- ECN is not requested for both in- and out-going connections (the sysctl overide for net.ipv4.tcp_ecn is removed)- Various smaller improvements to unit ordering and dependencies- generators are now called with the manager\'s environment- Handling of invalid (intentionally corrupt) dbus messages is improved, fixing potential local DOS avenues- The target of symlinks links in .wants/ and .requires/ is now ignored. This fixes an issue where the unit file would sometimes be loaded from such a symlink, leading to non-deterministic unit contents.- Filtering of kernel threads is improved. This fixes an issues with newer kernels where hybrid kernel/user threads are used by bpfilter.- \"noresume\" can be used on the kernel command line to force normal boot even if a hibernation images is present- Hibernation is not advertised if resume= is not present on the kernenl command line- Hibernation/Suspend/... modes can be disabled using AllowSuspend=, AllowHibernation=, AllowSuspendThenHibernate=, AllowHybridSleep=- LOGO= and DOCUMENTATION_URL= are documented for the os-release file- The hashmap mempool is now only used internally in systemd, and is disabled for external users of the systemd libraries- Additional state is serialized/deserialized when logind is restarted, fixing the handling of user objects- Catalog entries for the journal are improved (#1639482)- If suspend fails, the post-suspend hooks are still called.- Various build issues on less-common architectures are fixed * Fri Oct 12 2018 Davide Cavalca - 239-1.fb4- Backport PR#10062 (cgroup2 BPF device controller support)- Backport PR#10203, PR#10363 (tests fixes for supplementary groups)- Backport PR#10368 (%g, %G specifiers support)- Add hostname to BuildRequires (it\'s needed by test-execute)- Reenable test-execute now that it\'s finally working * Wed Oct 03 2018 Jan Synáček - 239-5- Fix meson using -Ddebug, which results in FTBFS- Fix line_begins() to accept word matching full string (#1631840) | |