Skip to content
Snippets Groups Projects
changelog 309 KiB
Newer Older
systemd (247.3-6) unstable; urgency=high

  * Non-maintainer upload (acked by maintainers)
  * unit-name: generate a clear error code when converting an overly long fs
    path to a unit name
  * basic/unit-name: do not use strdupa() on a path (CVE-2021-33910)
  * basic/unit-name: adjust comments

 -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 13 Jul 2021 19:29:24 +0200

systemd (247.3-5) unstable; urgency=medium

  * udev-udeb: setup /dev/fd, /dev/std{in,out,err} symlinks.
    As systemd-udevd no longer sets them up itself, we create them manually
    after mounting devtmpfs. This avoids breaking applications which expect
    those symlinks. (Closes: #975018)

 -- Michael Biebl <biebl@debian.org>  Mon, 12 Apr 2021 20:21:24 +0200

systemd (247.3-4) unstable; urgency=medium

  [ Luca Boccassi ]
  * Backport patch to fix assert with invalid LoadCredentials=
    Regression introduced in v247, fixed in v249, see:
    https://github.com/systemd/systemd/issues/19178
    (Closes: #986302)

  [ Michael Biebl ]
  * network: Delay addition of IPv6 Proxy NDP addresses.
    Fixes "IPv6 Proxy NDP addresses are being lost from interfaces after
    networkd adds them". (Closes: #985510)

 -- Michael Biebl <biebl@debian.org>  Sun, 11 Apr 2021 16:06:46 +0200

systemd (247.3-3) unstable; urgency=medium

  * pkg-config: make prefix overridable again (Closes: #984763)
  * Revert "units: turn off DNSSEC validation when timesyncd resolves
    hostnames"
    Support for SYSTEMD_NSS_RESOLVE_VALIDATE=0 requires the changes from
    https://github.com/systemd/systemd/pull/17823 for the dnssec bypass
    logic. Those are rather invasive changes and not suitable for a stable
    backport.

 -- Michael Biebl <biebl@debian.org>  Thu, 11 Mar 2021 18:09:35 +0100

systemd (247.3-2) unstable; urgency=medium

  * Downgrade a couple of warnings to debug.
    If a package still ships only a SysV init script or if a service file or
    tmpfile uses /var/run, downgrade those messages to debug. We can use
    lintian to detect those issues.
    For service files and tmpfiles in /etc, keep the warning, as those files
    are typically added locally and aren't checked by lintian.
    (Closes: #981407)
  * core: fix mtime calculation of dropin files
    (Closes: #975289)
  * analyze: slightly reword PrivateTmp= message
    (Closes: #931753)
  * rules: move ID_SMARTCARD_READER definition to a <70 configuration
    (Closes: #978011)
  * units: turn off DNSSEC validation when timesyncd resolves hostnames
    (Closes: #898530)
  * table: drop trailing white spaces of the last cell in row
    (Closes: #980820)

 -- Michael Biebl <biebl@debian.org>  Sat, 06 Mar 2021 22:32:14 +0100

systemd (247.3-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 247.3
  * Rebase patches

  [ Ioanna Alifieraki ]
  * systemctl: return error code when scheduled shutdown fails

 -- Michael Biebl <biebl@debian.org>  Wed, 03 Feb 2021 17:11:39 +0100

systemd (247.2-5) unstable; urgency=medium

  [ Matthias Klumpp ]
  * Configure localed to run locale-gen to generate missing locale.
    This applies an (upstreamed) patch to permit systemd-localed to run
    locale-gen to generate missing locale when requested to switch the
    system locale.
    This makes localectl usable on Debian for changing locale without
    breaking system localization or even prevent certain applications from
    running at all after switching to a non-generated locale.

  [ Michael Biebl ]
  * systemctl: do not shutdown immediately on scheduled shutdown.
    When, for whatever reason, a scheduled shutdown fails to be set, systemd
    will proceed with immediate shutdown without allowing the user to react.
    This is counterintuitive because when a scheduled shutdown is issued,
    it means the user wants to shutdown at a specified time in the future,
    not immediately. (Closes: #931235)
  * test: disable DnsmasqClientTest.test_resolved_etc_hosts in
    networkd-test.py.
    This test appears to be flaky.
    See: #979716
  * Bump Standards-Version to 4.5.1
  * Set upstream metadata fields: Bug-Submit, Bug-Database, Repository,
    Repository-Browse

 -- Michael Biebl <biebl@debian.org>  Mon, 18 Jan 2021 13:45:15 +0100

systemd (247.2-4) unstable; urgency=medium

  * Move libraries and NSS modules from /lib to /usr/lib.
    Keep libpam_systemd.so installed in /lib, as PAM doesn't support
    loading PAM modules from /usr/lib on a split-usr system.

 -- Michael Biebl <biebl@debian.org>  Sat, 02 Jan 2021 17:06:01 +0100

systemd (247.2-3) unstable; urgency=medium

  * test: use modern qemu numa arguments
    This fixes TEST-36-NUMAPOLICY from the upstream autopkgtest when using
    qemu >= 5.2.
  * Increase timeout when running unit tests.
    The default timeout for individual unit tests is 30s. On slower
    architectures and environments like reproducible-builds, this sometimes
    is not enough.
    Instead of fine-tuning the timeout for each individual test, we instead
    increase the timeouts by a factor of 10.
  * init-functions, getty-static.service: Don't hard-code path to systemctl
    binary.
    This should simplify an eventual move of systemctl from /bin to
    /usr/bin.
  * getty-static.service: Skip if dbus-broker is installed.
    Check for the binary in /usr/bin as this makes it easier to move the
    service files from /lib/systemd to /usr/lib/systemd.

 -- Michael Biebl <biebl@debian.org>  Sat, 26 Dec 2020 13:33:41 +0100

systemd (247.2-2) unstable; urgency=medium

  * Switch to "unified" cgroup hierarchy (i.e. cgroupv2) (Closes: #943981)

 -- Michael Biebl <biebl@debian.org>  Mon, 21 Dec 2020 20:06:49 +0100

systemd (247.2-1) unstable; urgency=medium

  [ Balint Reczey ]
  * debian/systemd.NEWS: Mention udev rules changes in 247

  [ Michael Biebl ]
  * New upstream version 247.2
  * Rebase patches
  * test: fix fd_is_mount_point() check

 -- Michael Biebl <biebl@debian.org>  Sun, 20 Dec 2020 20:44:31 +0100

systemd (247.1-4) unstable; urgency=medium

  [ наб ]
  * debian/extra/kernel-install.d/85-initrd.install: Don't install initrd when
    an explicit path was passed (Closes: #970213)
  * debian/extra/kernel-install.d/85-initrd.install: Match initrd installation
    messages and uninstallation to 90-loaderentry.install

  [ Michael Biebl ]
  * sd-device: keep escaped strings in DEVLINK= property (Closes: #976699)

 -- Michael Biebl <biebl@debian.org>  Fri, 11 Dec 2020 20:25:31 +0100

systemd (247.1-3) unstable; urgency=medium

  * d/t/timedated: Ignore return code of dbus-monitor in wait_mon()
    We are not really interested in the return code and error messages from
    dbus-monitor after killing it, so ignore them to avoid undesired
    autopkgtest failures.

 -- Michael Biebl <biebl@debian.org>  Thu, 03 Dec 2020 23:53:29 +0100

systemd (247.1-2) unstable; urgency=medium

  [ Michael Biebl ]
  * Upload to unstable
  * Revert "d/t/timedated: use /bin/bash to work around job handling issue in
    dash"

  [ Balint Reczey ]
  * debian/tests/timedated: Wait for the killed child only.
    There may be other children of the script due to autopkgtest machinery
    and they exit after the script exited. (LP: #1904406)

 -- Michael Biebl <biebl@debian.org>  Wed, 02 Dec 2020 23:25:32 +0100

systemd (247.1-1) experimental; urgency=medium

  * New upstream version 247.1

 -- Michael Biebl <biebl@debian.org>  Tue, 01 Dec 2020 17:17:28 +0100

systemd (247-1) experimental; urgency=medium

  * New upstream version 247
  * Rebase patches
  * Update symbol versions for the v247 release

 -- Michael Biebl <biebl@debian.org>  Thu, 26 Nov 2020 19:46:41 +0100

systemd (247~rc2-3) experimental; urgency=medium

  * Merge changes from unstable
  * sd-device: make sd_device_has_current_tag() compatible with udev database
    generated by older udevd
    (Closes: #974730)
  * Add Breaks: udev (<< 247~) to systemd.
    This ensures that udev is upgraded alongside systemd and both support
    the new udev tags concept introduced in v247. (Closes: #975554)

 -- Michael Biebl <biebl@debian.org>  Thu, 26 Nov 2020 18:18:53 +0100

systemd (247~rc2-2) experimental; urgency=medium

  * missing: define several syscall numbers for MIPS arch (Closes: #974619)

 -- Michael Biebl <biebl@debian.org>  Fri, 13 Nov 2020 19:22:04 +0100

systemd (247~rc2-1) experimental; urgency=medium

  [ Michael Biebl ]
  * New upstream version 247~rc2
    - tmpfiles: Handle filesystems without ACL support in more cases
      (Closes: #972135)
  * Rebase patches
  * Explicitly disable oomd
  * Use -Dmode=release as we want a release, not developer, build
  * Update symbols file for libudev1 and libsystemd0

  [ Luca Boccassi ]
  * systemd-container: install systemd-dissect binary.
    Required for TEST-50-DISSECT since:
    https://github.com/systemd/systemd/pull/16046
  * d/t/control: install squashfs-tools for upstream test.
    Required by TEST-50-DISSECT since upstream PR:
    https://github.com/systemd/systemd/pull/16046

  [ Dan Streetman ]
  * d/control: update meson minimum version
    https://github.com/systemd/systemd/pull/13842#issuecomment-601105975
  * d/t/upstream: convert 'blacklist' term to 'deny-list'
    Support transition for upstream-ci from
    https://github.com/systemd/systemd/pull/16262

 -- Michael Biebl <biebl@debian.org>  Thu, 12 Nov 2020 21:23:22 +0100

systemd (246.6-5) unstable; urgency=medium

  * Drop non-functional DefaultTasksMax patch.
    This patch was supposed to remove the DefaultTasksMax limit, but lost
    its actual logic over 4 years ago, when the patches were rebased for the
    v231 release. Since nobody has complained so far, we can assume it is
    safe to drop this patch. (Closes: #975335)
  * test-seccomp: accept ENOSYS from sysctl(2) too.
    It seems that kernel 5.9 started returning that.
  * test/test-functions: copy /usr/lib/pam.d into $initdir.
    The systemd-user file has been moved from /etc/pam.d into /usr/lib/pam.d,
    so test-functions needs to copy it from /usr/lib/pam.d instead.

 -- Michael Biebl <biebl@debian.org>  Tue, 24 Nov 2020 21:53:25 +0100

systemd (246.6-4) unstable; urgency=medium

  * Revert "Trigger a systemctl daemon-reload when init scripts are installed
    or removed"
    Remove the dpkg file trigger which called systemctl daemon-reload whenever
    a SysV init script was installed. We have proper support in debhelper
    nowadays which makes this superfluous and we want to avoid unnecessary
    systemctl daemon-reload calls.

 -- Michael Biebl <biebl@debian.org>  Thu, 19 Nov 2020 22:35:48 +0100

systemd (246.6-3) unstable; urgency=medium

  * pam: include pam_keyinit session module in systemd-user.
    We want that systemd --user gets its own keyring, not the basic keyring
    set up by systemd --system.
  * pam: move systemd-user PAM config from /etc/pam.d to /usr/lib/pam.d.
    This is supported since PAM 1.2 and we want as little files in /etc as
    possible.
  * init-functions: update LSB hook to not use ignore-dependencies
    job-mode=ignore-dependencies, as currently used in the LSB hook during
    bootup and shutdown, can have undesired side-effects, like changing the
    ordering of services and ultimately causing them to fail, due to unmet
    dependencies.
    So simplify that, and only apply --no-block on reload requests during
    bootup and shutdown. (Closes: #960594)
  * d/t/timedated: use /bin/bash to work around job handling issue in dash.
    See: #975010

 -- Michael Biebl <biebl@debian.org>  Tue, 17 Nov 2020 23:34:07 +0100

systemd (246.6-2) unstable; urgency=medium

  * XDG autostart improvements
    - Add support for Path= in XDG Desktop File
    - Ignore more common XDG Desktop Entry fields
    - Lower most info messages to debug level (Closes: #968116)
  * Re-enable seccomp support on riscv64.
    This should be safe now, as the code has fallbacks for systems with
    older libseccomp versions.
  * Move sysusers.d/sysctl.d/binfmt.d/modules-load.d back to /usr.
    In Debian, late mounting of /usr is no longer supported, so it is safe
    to install those files in /usr.
    We want those facilities in /usr, not /, as this will make an eventual
    switch to a merged-usr setup easier. (Closes: #971282)
  * units: update serial-getty@.service to support 57600 baud rate
    (Closes: #969144)
  * bootspec: don't fail with EIO if searching for ESP and finding one without
    an enveloping partition table
    (Closes: #970534)

 -- Michael Biebl <biebl@debian.org>  Thu, 15 Oct 2020 23:48:34 +0200

systemd (246.6-1) unstable; urgency=medium

  * New upstream version 246.6
  * Rebase patches

 -- Michael Biebl <biebl@debian.org>  Mon, 21 Sep 2020 20:28:36 +0200

systemd (246.5-1) unstable; urgency=medium

  * New upstream version 246.5
    - network: fix NDisc handling for the case when multiple routers exist
      (Closes: #969599)
    - core/socket: we may get ENOTCONN from socket_instantiate_service()
      (Closes: #970156)
  * Rebase patches

 -- Michael Biebl <biebl@debian.org>  Mon, 14 Sep 2020 08:04:39 +0200

systemd (246.4-1) unstable; urgency=medium

  * New upstream version 246.4
  * Rebase patches

 -- Michael Biebl <biebl@debian.org>  Wed, 02 Sep 2020 13:30:52 +0200

systemd (246.3-1) unstable; urgency=medium

  * New upstream version 246.3
  * Rebase patches

 -- Michael Biebl <biebl@debian.org>  Sat, 29 Aug 2020 18:39:32 +0200

systemd (246.2-2) unstable; urgency=medium

  [ Balint Reczey ]
  * debian/systemd.postinst: Restart systemd-networkd.socket on incompatible
    change.
    PassCredentials=yes is replaced with PassPacketInfo=yes and extra padding is
    dropped, too.
    (Closes: #968589, LP: #1891716)

  [ Michael Biebl ]
  * Fix restart of systemd-networkd.socket.
    We can't restart the socket while systemd-networkd.service is still
    active. Instead we stop the socket and ensure, that a try-restart of
    systemd-networkd.service also starts the socket.
  * seccomp: Add support for riscv64 (Closes: #954312)
  * Support missing conditions/asserts everywhere (Closes: #968612)
  * path: Skip directories when finalising $PATH search (Closes: #969006)

 -- Michael Biebl <biebl@debian.org>  Sat, 29 Aug 2020 16:24:49 +0200

systemd (246.2-1) unstable; urgency=medium

  * New upstream version 246.2
  * Remove resolvconf.conf drop-in, resolved integration moved to resolvconf
    package
  * Rebase patches
  * Add versioned Breaks against resolvconf (<< 1.83~) to systemd.
    The PathExists= directive was changed in v246 to match the documented
    behaviour but now causes resolvconf-pull-resolved.service to be
    continuously triggered by resolvconf-pull-resolved.path.
    This requires a fix in the resolvconf package, see #968015.
    (Closes: #967906)
  * Keep journal files compatible with older versions.
    Disable the KEYED-HASH journal feature by default and keep LZ4 (instead
    of ZSTD) as default compression for new journal files. Otherwise journal
    files are incompatible and can't be read by older journalctl
    implementations.
    This patch can be dropped in bullseye+1, as journalctl from bullseye
    will then be able to read journal files with those features.
    (Closes: #968055)

 -- Michael Biebl <biebl@debian.org>  Mon, 17 Aug 2020 22:28:09 +0200

systemd (246.1-1) unstable; urgency=medium

  * New upstream version 246.1
  * Rebase patches

 -- Michael Biebl <biebl@debian.org>  Sun, 16 Aug 2020 13:14:46 +0200

systemd (246-2) unstable; urgency=medium

  * Upload to unstable

 -- Michael Biebl <biebl@debian.org>  Mon, 03 Aug 2020 09:46:27 +0200

systemd (246-1) experimental; urgency=medium

  * New upstream version 246
  * Rebase patches
  * Update symbols file for libsystemd0
  * Bump libapparmor-dev Build-Depends to (>= 2.13)
  * Disable libfido2 support.
    This is only used by homed which we don't enable.

 -- Michael Biebl <biebl@debian.org>  Thu, 30 Jul 2020 22:22:24 +0200

systemd (245.7-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 245.7
    - resolve: enable RES_TRUSTAD towards the 127.0.0.53 stub resolver
      (Closes: #965371)
    - basic/cap-list: parse/print numerical capabilities
      (Closes: #964926)
  * Rebase patches

  [ Dan Streetman ]
  * Add libzstd-dev and zstd as build and test deps.
    https://github.com/systemd/systemd/pull/15422

 -- Michael Biebl <biebl@debian.org>  Mon, 27 Jul 2020 23:24:47 +0200

systemd (245.6-3) unstable; urgency=medium

  [ Dan Streetman ]
  * d/t/upstream: capture new merged 'system.journal' from tests.
    https://github.com/systemd/systemd/pull/15281
  * d/t/upstream: use --directory or --file param for journalctl.
    Properly tell journalctl if the journal to parse is a dir or file.
  * d/t/storage: check for ext2 or ext4 fs when using crypttab 'tmp' option.
    https://github.com/systemd/systemd/pull/15853

  [ Martin Pitt ]
  * debian/tests/localed-locale: Fix for environments without en_US.UTF-8.
    Unconditionally back up/restore locale configuration files and generate
    en_US.UTF-8. Previously the test failed in environments which have some
    locale other than en_US.UTF-8 in /etc/default/locale.
    Also fix the assertion of /etc/locale.conf not being present after
    localectl. This only applies to Debian/Ubuntu tests, not upstream ones.

  [ Dimitri John Ledkov ]
  * Enable EFI/bootctl on armhf.

 -- Michael Biebl <biebl@debian.org>  Tue, 14 Jul 2020 18:16:57 +0200

systemd (245.6-2) unstable; urgency=medium

  [ Dan Streetman ]
  * 40-vm-hotadd.rules: check offline before onlining memory/cpus.
    The kernel will return EINVAL if the memory or cpu is already online,
    which is harmless, but adds a confusing error to the log. Avoid the error
    message by only onlining if the memory or cpu is currently offline.
    (LP: #1876018)

  [ Michael Biebl ]
  * d/t/boot-and-services: use canonical name for NetworkManager service
  * Fix build with libmicrohttpd 0.9.71.
    The return type of callbacks was changed from int to an enum.

  [ Youfu Zhang ]
  * fsckd: avoid useless CR displayed on console (LP: #1692353)

  [ Balint Reczey ]
  * dhclient-exit-hooks.d/timesyncd: Act only when systemd-timesyncd is available.
    Otherwise the hook script might trigger an error if the
    systemd-timesyncd package is uninstalled but not purged. (LP: #1873031)

 -- Michael Biebl <biebl@debian.org>  Sun, 05 Jul 2020 11:44:39 +0200

systemd (245.6-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 245.6
  * Rebase patches

  [ Balint Reczey ]
  * debian/tests/boot-and-services: Handle missing fstab (LP: #1877078)

 -- Michael Biebl <biebl@debian.org>  Mon, 08 Jun 2020 00:56:37 +0200

systemd (245.5-3) unstable; urgency=medium

  [ Michael Biebl ]
  * Bump priority of libnss-systemd to standard
  * logind: avoid shadow lookups when doing userdb client side
  * Disable DNSSEC support by default in resolved.
    The upstream default, DNSSEC=allow-downgrade can lead to compatibility
    issues with certain network access points. Previously, DNSSEC support
    was only turned off when built for a stable Debian release, but it is
    safer and more consistent to just generally change the default to
    DNSSEC=no. (Closes: #959996)
  * Bump debhelper compatibility level to 13.
    Use the debhelper-compat package to declare the compatibility level and
    drop debian/compat.
  * Convert to dh_installsystemd and disable dh_installsystemduser
  * Drop custom initramfs update code.
    Now handled by dh_installinitramfs which is enabled by default in compat
    level 12 and above.

  [ Dan Streetman ]
  * Cherry-pick fix from upstream master to adjust UseGateway= default
    - network: change UseGateway= default to UseRoutes= setting
    - network: honor SetDNSRoutes= even if UseGateway=False
    (LP: #1867375)

  [ Topi Miettinen ]
  * Delete empty lines at end of file.
    Upstream commit hooks don't allow empty lines and of course they serve no
    purpose.

 -- Michael Biebl <biebl@debian.org>  Sun, 17 May 2020 19:28:49 +0200

systemd (245.5-2) unstable; urgency=medium

  * Cherry-pick various fixes from upstream master
    - network: add a flag to ignore gateway provided by DHCP server
    - userdb: when doing client-side NSS look-ups optionally avoid shadow
      look-ups
    - nss-systemd: don't synthesize root/nobody when iterating
    - core: make sure we don't get confused when setting TERM for a tty fd
    - core: make sure to restore the control command id, too
  * Install 60-block.rules in udev-udeb and initramfs-tools.
    The block device rules were split out from 60-persistent-storage.rules
    into its own rules file in v220. Those rules ensure that change events
    are emitted and the udev db is updated after metadata changes.
    Thanks to Pascal Hambourg (Closes: #958397)

 -- Michael Biebl <biebl@debian.org>  Mon, 27 Apr 2020 17:38:44 +0200
systemd (245.5-1) unstable; urgency=medium
  [ Michael Biebl ]
  * New upstream version 245.5
  * Rebase patches
  [ Dan Streetman ]
  * Follow symlinks when finding link files to copy into initramfs.
    If the /{etc,lib}/systemd/network directory itself is a symlink, the find
    command will not actually find any of the files in the dir it links to.
    Use the find -L param to follow symlinks.
    (LP: #1868892)
  * Remove Ubuntu-specific ondemand.service.
    New processors handle scaling/throttling in internal firmware
    (e.g. intel_pstate), and do not require OS config.
    Additionally, nobody else does this, not even Debian.
 -- Michael Biebl <biebl@debian.org>  Sat, 18 Apr 2020 20:41:18 +0200
systemd (245.4-4) unstable; urgency=medium

  * Drop Conflicts: virtualbox-guest-utils from systemd-timesyncd.
    Otherwise this could lead to virtualbox-guest-utils being uninstalled on
    upgrades which is not intended. (Closes: #956436)
  * pid1: automatically generate systemd-remount-fs.service deps, plus enable
    systemd-pstore from sysinit.target
  * Fix systemd-pstore.service enablement symlink on upgrades.
    It is now started via sysinit.target. Also clean up the symlink on
    purge.

 -- Michael Biebl <biebl@debian.org>  Mon, 13 Apr 2020 11:34:31 +0200

systemd (245.4-3) unstable; urgency=medium

  [ Dan Streetman ]
  * d/rules: in dh_auto_test, include meson param --print-errorlogs.
    Also, don't cat testlog.txt; it's noisy and not very helpful.
    Upstream request:
    https://github.com/systemd/systemd/pull/14338#issuecomment-603432989

  [ Michael Biebl ]
  * pid1: by default make user units inherit their umask from the user manager
    (Closes: #945000)
  * user-util: rework how we validate user names.
    This reworks the user validation infrastructure. There are now two
    modes. In regular mode we are strict and test against a strict set of
    valid chars. And in "relaxed" mode we just filter out some really
    obvious, dangerous stuff. i.e. strict is whitelisting what is OK, but
    "relaxed" is blacklisting what is really not OK.
    The idea is that we use strict mode whenever we allocate a new user,
    while "relaxed" mode is used when we process users registered elsewhere.
    (Closes: #955541)

 -- Michael Biebl <biebl@debian.org>  Fri, 10 Apr 2020 11:55:15 +0200

systemd (245.4-2) unstable; urgency=medium

  [ Balint Reczey ]
  * Ship systemd-timesyncd in a separate package.
    The new systemd-timesyncd package conflicting with other NTP-related
    packages resolves the problems arising when running systemd-timesyncd
    and other NTP servers on the same system.
    (LP: #1849156, Closes: #805927, #947936)

 -- Michael Biebl <biebl@debian.org>  Sat, 04 Apr 2020 08:59:50 +0200

systemd (245.4-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 245.4
    - Allow names starting with a digit (Closes: #954174)
    - Recognize davfs as network file system (Closes: #954755)
  * Enable systemd-pstore.service by default on new installs and upgrades
    (Closes: #952767)
  * Revert "Enable seccomp support on riscv64"
    This requires further changes to the source code and a newer, not yet
    officially released, libseccomp. Since this complicates backports revert
    this change for the time being.

  [ Dan Streetman ]
  * d/t/logind: use grep -s when checking /sys/power/state.
    Some kernels in Ubuntu (e.g. linux-kvm) do not enable CONFIG_PM, which
    results in stderr output when the logind test tries to grep the power
    state file, causing the test to fail.  The test already handles skipping
    the test if suspend isn't supported, so just use -s to suppress grep
    from printing to stderr if the file doesn't exist.

 -- Michael Biebl <biebl@debian.org>  Thu, 02 Apr 2020 11:58:18 +0200

systemd (245.2-1) unstable; urgency=medium

  * New upstream version 245.2
  * Rebase patches
  * Enable seccomp support on riscv64 (Closes: #954077)
  * Drop migration code for the switch from DynamicUser=yes to no.
    This code is no longer needed as it only affected systems between 239-1
    and 239-5, i.e. it never affected a stable release.

 -- Michael Biebl <biebl@debian.org>  Wed, 18 Mar 2020 23:32:08 +0100

systemd (245-2) unstable; urgency=medium

  * Revert "job: Don't mark as redundant if deps are relevant"
    This change negatively affects plymouth which was no longer properly
    stopped after the system has completed booting. The running plymouth
    daemon can trigger a VT switch (to tty1). (Closes: #953670)

 -- Michael Biebl <biebl@debian.org>  Thu, 12 Mar 2020 13:55:26 +0100

systemd (245-1) unstable; urgency=medium

  [ Balint Reczey ]
  * New upstream version 245
  * Refresh patches
  * Update symbols

  [ Michael Biebl ]
  * Disable repart, userdb, homed, fdisk, pwquality, p11kit feature.
    Those are new features which drag in new dependencies and need further
    review first.
  * analyze: Fix table time output
  * execute: Fix migration from DynamicUser=yes to no
  * Drop manual clean up of /var/lib/private/systemd/timesync.
    This is now done properly by systemd itself when a service switches from
    DynamicUser=yes to no.

 -- Michael Biebl <biebl@debian.org>  Wed, 11 Mar 2020 13:33:37 +0100

systemd (244.3-1) unstable; urgency=medium

  * New upstream version 244.3
    - Revert "Support Plugable UD-PRO8 dock"
      Unfortunately the same usb hub is used in other places, and causes
      numerous regressions. (Closes: #951330)

 -- Michael Biebl <biebl@debian.org>  Sat, 15 Feb 2020 15:44:45 +0100

systemd (244.2-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 244.2
    - polkit: when authorizing via PolicyKit re-resolve callback/userdata
      instead of caching it (CVE-2020-1712, Closes: #950732)
  * Rebase patches
  * Bump Standards-Version to 4.5.0

  [ Balint Reczey ]
  * Remove empty /var/log/journal/ on purge

 -- Michael Biebl <biebl@debian.org>  Fri, 07 Feb 2020 19:24:20 +0100

systemd (244.1-3) unstable; urgency=medium

  * Update documentation regarding network interface naming.
    Document that 73-usb-net-by-mac.link needs to be masked together with
    99-default.link if one wants to disable the systemd naming scheme and keep
    the kernel-provided names. (Closes: #946196)
  * Update debian/rules clean target to remove all Python bytecode
  * Update systemd package description.
    Recommend init=/lib/systemd/systemd instead of init=/bin/systemd.
    The latter is just a compat symlink which might go away eventually.
  * shared/dropin: fix assert for invalid drop-in.
    Fixes an assertion when running systemctl cat on inexistent
    unit templates. (Closes: #950489)
  * core: call dynamic_user_acquire() only when 'group' is non-null.
    Fixes an assertion in systemd which could happen if a unit is reloaded
    and the unit is in bad-setting state. (Closes: #950409)
  * Don't fail upgrade if /proc is not mounted.
    Applying ACLs on /var/log/journal via systemd-tmpfiles requires a
    mounted /proc. Skip this step if /proc is not available, e.g. in a
    chroot. (Closes: #950533)

 -- Michael Biebl <biebl@debian.org>  Tue, 04 Feb 2020 00:11:55 +0100

systemd (244.1-2) unstable; urgency=medium

  * Report status of libpam-systemd and libnss-systemd in systemd reportbug
    template.
    Since the libpam-systemd Recommends was moved from systemd to
    systemd-sysv we no longer get this information automatically, so request
    it explicitly.
  * Drop btrfs-progs Recommends from systemd-container.
    Upstream has dropped the logic of setting up /var/lib/machines as btrfs
    loopback mount so this Recommends is no longer necessary.
  * Fix processing of dpkg triggers in systemd.
    We need to use $@ instead of "$@" so we can iterate through the
    individual trigger names which are passed as a space separated list in
    the second argument.
  * Fix cleanup of timesyncd state directory
  * Enable persistent journal.
    Create /var/log/journal on upgrades and new installs. This enables
    persistent journal in auto mode. (Closes: #717388)

 -- Michael Biebl <biebl@debian.org>  Sat, 01 Feb 2020 02:59:12 +0100

systemd (244.1-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 244.1
    - network: fix segfault in parsing SendOption= (Closes: #946475)
  * core: don't allow perpetual units to be masked (Closes: #948710)

  [ Balint Reczey ]
  * debian/watch: Switch to watch tags at github.com/systemd/systemd-stable.
    Upstream point releases appear there.

  [ Helmut Grohne ]
  * Add basic support for the noinsttest build profile
  * Annotate dbus build dependency with <!noinsttest>
    The dbus library is needed for building tests. As such it must be
    present unless we disable both build time and installed tests.
    Previously, building with the nocheck profile worked, but it didn't
    reproduce a regular build.

 -- Michael Biebl <biebl@debian.org>  Sat, 25 Jan 2020 18:53:23 +0100

systemd (244-3) unstable; urgency=medium

  * Update udev-udeb to use 73-usb-net-by-mac.link

 -- Michael Biebl <biebl@debian.org>  Mon, 02 Dec 2019 23:44:52 +0100

systemd (244-2) unstable; urgency=medium

  * Add lintian override for udev.
    60-autosuspend-chromiumos.rules triggers a udev-rule-missing-subsystem
    warning. This is a false positive, as SUBSYSTEM is tested at the
    beginning of the rules file.
  * Add lintian override for systemd-container
    systemd-nspawn@.service triggers a
    systemd-service-file-refers-to-unusual-wantedby-target warning but
    nspawn containers are supposed to be started via machines.target.
  * Make it easier to override MAC based name policy for USB network adapters.
    Replace 73-usb-net-by-mac.rules with 73-usb-net-by-mac.link. The .link
    file provides the same functionality but makes it easier to set a custom
    name for USB network adapters via the systemd.link mechanism.
    Thanks to Benjamin Poirier (Closes: #941636)
  * Move libpam-systemd Recommends from systemd to systemd-sysv.
    libpam-systemd is only really useful if systemd is PID 1 and the systemd
    package should be installable without affecting another installed init
    system. (Closes: #926316)
  * Upload to unstable

 -- Michael Biebl <biebl@debian.org>  Mon, 02 Dec 2019 17:57:55 +0100

systemd (244-1) experimental; urgency=medium

  * New upstream version 244
    - udev: do not propagate error when executing PROGRAM and IMPORT{program}
      (Closes: #944675)
    - sd-event: don't invalidate source type on disconnect
      (Closes: #945332)
  * Rebase patches

 -- Michael Biebl <biebl@debian.org>  Sat, 30 Nov 2019 16:39:57 +0100

systemd (243-9) unstable; urgency=medium

  [ Daniel Kahn Gillmor ]
  * resolved: fix connection failures with TLS 1.3 and GnuTLS (Closes: #945507)

 -- Michael Biebl <biebl@debian.org>  Fri, 29 Nov 2019 21:33:19 +0100

systemd (243-8) unstable; urgency=medium

  * udevadm: ignore EROFS and return earlier.
    Fixes failures of "udevadm trigger" in containers with a readonly /sys.
    (Closes: #944860)
  * udev: silence warning about PROGRAM+= or IMPORT+= rules (Closes: #944917)
  * man: add entry about SpeedMeter= (Closes: #944597)
  * udev: drop SystemCallArchitectures=native from systemd-udevd.service.
    We can't really control what helper programs are run from other udev
    rules. E.g. running i386 binaries under amd64 is a valid use case and
    should not trigger a SIGSYS failure. (Closes: #869719)

 -- Michael Biebl <biebl@debian.org>  Tue, 19 Nov 2019 09:17:12 +0100

systemd (243-7) unstable; urgency=medium

  * Fix build failure on arm64 with libseccomp >= 2.4.2

 -- Michael Biebl <biebl@debian.org>  Fri, 15 Nov 2019 22:01:17 +0100

systemd (243-6) unstable; urgency=medium

  * Revert "sysusers: properly mark generated accounts as locked"
    We shouldn't lock the accounts because people actually need to use them, and
    if they are locked, various tools will refuse.
  * udev: ignore error caused by device disconnection.
    During an add or change event, the device may be disconnected.
    (Closes: #944586)
  * udev: do not append newline when writing attributes

 -- Michael Biebl <biebl@debian.org>  Thu, 14 Nov 2019 14:09:49 +0100

systemd (243-5) unstable; urgency=medium

  * Switch default hierarchy (back) to hybrid.
    Since v243, the new upstream default is unified, but this still causes
    regressions in important packages, like LXC or Docker, so switch the
    default back to hybrid for now.
  * Drop masks for SysV init scripts that have been dropped
  * Drop masks for SysV init scripts provided by initscripts and bootlogd
  * logind: fix emission of PropertiesChanged signal for users and seats
  * Bump Standards Version to 4.4.1
  * Upload to unstable

 -- Michael Biebl <biebl@debian.org>  Mon, 11 Nov 2019 00:58:41 +0100

systemd (243-4) experimental; urgency=medium

   * Merge changes from unstable branch

 -- Michael Biebl <biebl@debian.org>  Sat, 09 Nov 2019 01:15:08 +0100

systemd (243-3) experimental; urgency=medium

  * Import patches from v243-stable branch (up to ef677436aa)

 -- Michael Biebl <biebl@debian.org>  Mon, 14 Oct 2019 15:26:01 +0200

systemd (243-2) experimental; urgency=medium

  * Import patches from v243-stable branch (up to fab6f010ac)

 -- Michael Biebl <biebl@debian.org>  Sun, 22 Sep 2019 12:46:02 +0200

systemd (243-1) experimental; urgency=medium

  * New upstream version 243
  * Merge changes from unstable branch

 -- Michael Biebl <biebl@debian.org>  Thu, 05 Sep 2019 01:21:49 +0200

systemd (243~rc2-1) experimental; urgency=medium

  * New upstream version 243~rc2
    - man: document that "systemd-analyze blame/critical-chain" is not useful
      to track down job latency. (Closes: #920234)
    - systemctl: process all units matched by a glob in the cat verb by
      default. (Closes: #904913)
    - units: automatically revert to /run logging on shutdown if necessary.
      Prevents /var staying busy on shutdown due to journald.
      (Closes: #851402)
    - bash-completion: don't sort syslog priorities. (Closes: #913222)
    - man: add example for setting multiple properties at once.
      (Closes: #807464)
  * Rebase patches
  * Update symbols file for libsystemd0
  * core: stop removing non-existent and duplicate lookup paths
  * Install static-nodes-permissions.conf tmpfile in udev

 -- Michael Biebl <biebl@debian.org>  Sat, 31 Aug 2019 00:20:41 +0200

systemd (242-8) unstable; urgency=medium

  [ Dan Streetman ]
  * d/extra/rules/73-special-net-names.rules: use $$ instead of $ in PROGRAM=
    value.
    Fixes incorrect variable substitution.
  * Rework and improve blacklist handling in debian/tests/upstream

  [ Balint Reczey ]
  * Various improvements to debian/extra/checkout-upstream making it more
    straightforward to override the default behaviour
  * Use package version as systemd's reported version (LP: #1849158)

  [ Michael Biebl]
  * debiant/tests/udev: replace deprecated ADTTMP with AUTOPKGTEST_TMP

 -- Michael Biebl <biebl@debian.org>  Fri, 08 Nov 2019 23:18:00 +0100

systemd (242-7) unstable; urgency=medium

  * sleep: properly pass verb to sleep script
  * core: factor root_directory application out of apply_working_directory.
    Fixes RootDirectory not working when used in combination with User.
    (Closes: #939408)
  * shared/bus-util: drop trusted annotation from
    bus_open_system_watch_bind_with_description().
    This ensures that access controls on systemd-resolved's D-Bus interface
    are enforced properly.
    (CVE-2019-15718, Closes: #939353)

 -- Michael Biebl <biebl@debian.org>  Wed, 04 Sep 2019 19:34:17 +0200

systemd (242-6) unstable; urgency=medium

  [ Dan Streetman ]
  * d/t/control: upstream test requires qemu-system-ppc on ppc64el
  * d/t/control: install seabios for upstream test.
    Some archs (at least arm64) qemu implementation require the vga bios.

  [ Michael Biebl ]
  * Drop unused lintian override
  * network: fix ListenPort= in [WireGuard] section (Closes: #936198)
  * d/e/r/73-usb-net-by-mac.rules: import net.ifnames only for network devices
    (Closes: #934589)
  * d/e/r/73-usb-net-by-mac.rules: skip if iface name was provided by
    user-space
  * Drop dbus activation stub service.
    Since dbus 1.11.0, a dbus-daemon that is run with --systemd-activation
    automatically assumes that o.fd.systemd1 is an activatable service.
    As a result, with a new enough dbus version,
    /usr/share/dbus-1/services/org.freedesktop.systemd1.service and
    /usr/share/dbus-1/system-services/org.freedesktop.systemd1.service
    become unnecessary and can be removed. (Closes: #914015)
  * Revert "core: check start limit on condition checks too"
    If a unit was referenced too often, it hit the restart limit and the
    unit was marked as failed. Fixes a regression introduced in v242.
    (Closes: #935829)

  [ Michael Prokop ]
  * README.Debian: document KillUserProcesses behavior in Debian

 -- Michael Biebl <biebl@debian.org>  Tue, 03 Sep 2019 11:09:07 +0200

systemd (242-5) unstable; urgency=medium

  [ Dan Streetman ]
  * d/rules: add CONFFGLAGS_UPSTREAM to dh_auto_configure -- params

  [ Michael Biebl ]
  * core: never propagate reload failure to service result.
    Fixes a regression introduced in v239 where the main process of a
    service unit gets killed on reload if ExecReload fails. (Closes: #936032)
  * shared/seccomp: add sync_file_range2.
    Some architectures need the arguments to be reordered because of alignment
    issues. Otherwise, it's the same as sync_file_range.
    Fixes sync_file_range failures in nspawn containers on arm, ppc.
    (Closes: #935091)
  * bash-completion: don't sort syslog priorities.
    By default, the available completions are sorted alphabetically, which
    is counterproductive in case of syslog priorities. Override the default
    behavior using the `nosort` option. (Closes: #913222)
  * test-bpf: skip test when run inside containers

 -- Michael Biebl <biebl@debian.org>  Thu, 29 Aug 2019 16:18:18 +0200

systemd (242-4) unstable; urgency=medium

  * Upload to unstable

 -- Michael Biebl <biebl@debian.org>  Wed, 21 Aug 2019 22:09:13 +0200

systemd (242-3) experimental; urgency=medium

  [ Dan Streetman ]
  * d/t/boot-and-services: fix test_failing()
  * d/t/boot-and-services: check for any kernel message, not just first kernel
    message (Closes: #929730)
  * d/t/upstream: add TEST-30, TEST-34 to blacklist
  * d/t/timedated: replace systemctl is-active with systemctl show
  * d/t/control: root-unittests can break networking, add breaks-testbed
  * d/t/control: mark udev test skippable
  * d/t/upstream: always cleanup after (and before) each test
  * d/t/control: upstream test requires dmeventd
  * d/e/checkout-upstream: don't remove .git
  * d/e/checkout-upstream: move change to debian/ files above other changes
  * d/e/checkout-upstream: add UPSTREAM_KEEP_CHANGELOG param
  * d/e/checkout-upstream: create git commits for each change
  * d/e/checkout-upstream: switch from 'quilt' to 'native' format
  * d/e/checkout-upstream: set user.name, user.email if unset
  * d/t/storage: change plaintext_name to include testname
  * d/t/storage: increase wait for plaintext_dev from 5 to 30 seconds
  * d/t/storage: wait for service to start, only stop if active
  * d/t/storage: don't search for 'scsi_debug' in ask_password
  * d/t/storage: manage scsi_debug using add_hosts (Closes: #929728)
  * d/t/storage: use short timeout waiting for scsi_debug block dev to appear
  * d/t/storage: convert password agent into normal Thread
  * d/t/storage: fail if socket info not in ask_password contents
  * d/t/boot-smoke: pass failure reason to fail() to print instead of separate
    echo
  * d/t/boot-smoke: in fail() set +e so errors are ignored while gathering
    data
  * d/t/boot-smoke: gather still running jobs in fail()
  * d/t/boot-smoke: wait for is-system-running
  * d/t/boot-smoke: call fail if pidof polkitd fails
  * d/t/boot-smoke: remove check for running jobs

  [ Michael Biebl ]
  * d/t/boot-smoke: check for NetworkManager instead of D-Bus activated
    polkitd (Closes: #934992)

 -- Michael Biebl <biebl@debian.org>  Wed, 21 Aug 2019 00:12:22 +0200

systemd (242-2) experimental; urgency=medium

  [ Michael Biebl ]
  * Drop dependency on lsb-base.
    It is only needed when booting with sysvinit and initscripts, but
    initscripts already Depends on lsb-base (see #864999).
  * Stop removing enablement symlinks in /etc/systemd/system.
    With v242 this is no longer necessary as `ninja install` will no longer
    create those symlinks.
  * Replace manual removal of halt-local.service with upstream patch

  [ Dimitri John Ledkov ]
  * Build manpages in .deb variant.
    Upstream snapshots are switching to building manpages off by default.

  [ Luca Boccassi ]
  * Enable portabled and install related files in systemd-container.
    Keep disabled for the udeb profile. (Closes: #918606)
 -- Michael Biebl <biebl@debian.org>  Fri, 07 Jun 2019 22:41:50 +0200
systemd (242-1) experimental; urgency=medium
  * New upstream version 242
    - Change ownership/mode of the execution directories also for static users
      (Closes: #919231)
    - A new boolean sandboxing option RestrictSUIDSGID= has been added that is
      built on seccomp. When turned on, creation of SUID/SGID files is
      prohibited. The NoNewPrivileges= and the new RestrictSUIDSGID= options
      are now implied if DynamicUser= is turned on for a service.
      (Closes: #928102, CVE-2019-3843, CVE-2019-3844)
  * Drop Revert-udev-network-device-renaming-immediately-give.patch.
    This patch needs ongoing maintenance work to be adapted to new releases
    and fails to apply with v242. Instead of investing more time into it we
    are going to drop the patch as it was a hack anyway.
  * Rebase patches
  * Drop pre-stretch migration code
  * Drop /sbin/udevadm compat symlink (Closes: #852580)
  * socket-util: Make sure flush_accept() doesn't hang on unexpected
    EOPNOTSUPP
  * Enable regexp matching support in journalctl using pcre2 (Closes: #898892)
  * Switch from libidn to libidn2 (Closes: #928615)
 -- Michael Biebl <biebl@debian.org>  Wed, 08 May 2019 01:33:56 +0200

systemd (241-7) unstable; urgency=medium

  [ Michael Biebl ]
  * network: Fix failure to bring up interface with Linux kernel 5.2.
    Backport two patches from systemd master in order to fix a bug with 5.2
    kernels where the network interface fails to come up with the following
    error: "enp3s0: Could not bring up interface: Invalid argument"
    (Closes: #931636)
  * Use /usr/sbin/nologin as nologin shell.
    In Debian the nologin shell is installed in /usr/sbin, not /sbin.
    (Closes: #931850)

  [ Mert Dirik ]
  * 40-systemd: Don't fail if SysV init script uses set -u and $1 is unset
    (Closes: #931719)

 -- Michael Biebl <biebl@debian.org>  Thu, 18 Jul 2019 19:38:23 +0200

systemd (241-6) unstable; urgency=medium

  * ask-password: Prevent buffer overflow when reading from keyring.
    Fixes a possible memory corruption that causes systemd-cryptsetup to
    crash either when a single large password is used or when multiple
    passwords have already been pushed to the keyring. (Closes: #929726)
  * Clarify documentation regarding %h/%u/%U specifiers.
    Make it clear, that setting "User=" has no effect on those specifiers.
    Also ensure that "%h" is actually resolved to "/root" for the system
    manager instance as documented in the systemd.unit man page.
    (Closes: #927911)
  * network: Behave more gracefully when IPv6 has been disabled.
    Ignore any configured IPv6 settings when IPv6 has been disabled in the
    kernel via sysctl. Instead of failing completely, continue and log a
    warning instead. (Closes: #929469)

 -- Michael Biebl <biebl@debian.org>  Mon, 08 Jul 2019 11:27:51 +0200

systemd (241-5) unstable; urgency=medium

  * Revert "Add check to switch VTs only between K_XLATE or K_UNICODE"
    This change left the keyboard in an unusable state when exiting an X
    session. (Closes: #929229)

 -- Michael Biebl <biebl@debian.org>  Fri, 24 May 2019 22:58:59 +0200

systemd (241-4) unstable; urgency=medium

  * journal-remote: Do not request Content-Length if Transfer-Encoding is
    chunked (Closes: #927008)
  * systemctl: Restore "systemctl reboot ARG" functionality.
    Fixes a regression introduced in v240. (Closes: #928659)
  * random-util: Eat up bad RDRAND values seen on AMD CPUs.
    Some AMD CPUs return bogus data via RDRAND after a suspend/resume cycle
    while still reporting success via the carry flag.
    Filter out invalid data like -1 (and also 0, just to be sure).
    (Closes: #921267)
  * Add check to switch VTs only between K_XLATE or K_UNICODE.
    Switching to K_UNICODE from other than L_XLATE can make the keyboard
    unusable and possibly leak keypresses from X.
    (CVE-2018-20839, Closes: #929116)
  * Document that DRM render nodes are now owned by group "render"
    (Closes: #926886)

 -- Michael Biebl <biebl@debian.org>  Fri, 17 May 2019 21:16:33 +0200

systemd (241-3) unstable; urgency=high

  [ Michael Biebl ]
  * Drop systemd-shim alternative from libpam-systemd.
    A fixed systemd-shim package which works with newer versions of systemd
    is unlikely to happen given that the systemd-shim package has been
    removed from the archive. Drop the alternative dependency from
    libpam-systemd accordingly.
  * Properly remove duplicate directories from systemd package.
    When removing duplicate directories from the systemd package, sort the
    list of directories in reverse order so we properly delete nested
    directories.
  * udev: Run programs in the specified order (Closes: #925190)
  * bash-completion: Use default completion for redirect operators
    (Closes: #924541)
  * networkd: Clarify that IPv6 RA uses our own stack, no the kernel's
    (Closes: #815582)
  * Revert "Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf"
    Apparently Conflicts= are not a reliable mechanism to ensure alternative
    NTP implementations take precedence over systemd-timesyncd.
    (Closes: #902026)
  * network: Fix routing policy rule issue.
    When multiple links request a routing policy, make sure they are all
    applied correctly. (Closes: #924406)
  * pam-systemd: Use secure_getenv() rather than getenv()
    Fixes a vulnerability in the systemd PAM module which insecurely uses
    the environment and lacks seat verification permitting spoofing an
    active session to PolicyKit. (CVE-2019-3842)

  [ Martin Pitt ]
  * Enable udev autopkgtest in containers.
    This test doesn't actually need udev.service (which is disabled in
    containers) and works fine in LXC.
  * Enable boot-and-service autopkgtest in containers
    - Skip tests which can't work in containers.
    - Add missing rsyslog test dependency.
    - e2scrub_reap.service fails in containers, ignore (filed as #926138)
    - Relax pgrep pattern for gdm, as there's no wayland session in
      containers.

 -- Michael Biebl <biebl@debian.org>  Mon, 08 Apr 2019 12:59:32 +0200

systemd (241-2) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/tests/boot-smoke: Create journal and udevdb artifacts on all
    failures
  * autopkgtests: Replace obsolete $ADT_* variables
  * networkd-test: Ignore failures of test_route_only_dns* in containers.
    This test exposes a race condition when running in LXC, see issue #11848
    for details. Until that is understood and fixed, skip the test as it's
    not a recent regression. (Closes: #924539)
  * Bump Standards-Version to 4.3.0.
    No changes necessary.
  * debian/tests/boot-smoke: Only check current boot for connection timeouts.
    Otherwise we'll catch some
        Failed to resolve group 'render': Connection timed out
    messages that happen in earlier boots during VM setup, before the
    "render" group is created.
    Fixes https://github.com/systemd/systemd/issues/11875
  * timedated: Fix emitted value when ntp client is enabled/disabled.
    Fixes a regression introduced in 241.
  * debian/tests/timedated: Check enabling/disabling NTP.
    Assert that `timedatectl set-ntp` correctly controls the service, sets
    the `org.freedesktop.timedate1 NTP` property, and sends the right
    `PropertiesChanged` signal.
    This reproduces <https://github.com/systemd/systemd/issues/11944> and
    also the earlier <https://github.com/systemd/systemd/issues/9672>.

  [ Michael Biebl ]
  * Disable fallback DNS servers in resolved (Closes: #923081)
  * cgtop: Fix processing of controllers other than CPU (Closes: #921280)
  * udev: Restore debug level when logging a failure in the external prog
    called by IMPORT{program} (Closes: #924199)
  * core: Remove "." path components from required mount paths.
    Fixes mount related failures when a user's home directory contains "/./"
    (Closes: #923881)
  * udev.init: Use new s-s-d --notify-await to start udev daemon.
    Fixes a race condition during startup under SysV init.
    Add versioned dependency on dpkg (>= 1.19.3) to ensure that a version
    of start-stop-daemon which supports --notify-await is installed.
    (Closes: #908796)
  * Make /dev/dri/renderD* accessible to group "render"
    Follow upstream and make render nodes available to a dedicated system
    group "render" instead of "video". Keep the uaccess tag for local,
    active users.

 -- Michael Biebl <biebl@debian.org>  Fri, 15 Mar 2019 18:33:54 +0100

systemd (241-1) unstable; urgency=medium

  [ Adam Borowski ]
  * Make libpam-systemd Provide: logind, default-logind.
    This allows alternate logind implementations such as elogind, without
    having to recompile every dependent package -- as long as the client API
    remains compatible.
    These new virtual packages got policy-approved in #917431. (Closes: #915407)

  [ Felipe Sateler ]
  * New upstream version 241
    - Refresh patches
    - Backport upstream fix for Driver= matches in .network files

  [ Martin Pitt ]
  * debian/libsystemd0.symbols: Add new symbol from release 241
  * Fix various bugs and races in networkd tests.
    This should get the autopkgtest back to green, which regressed with
    dnsmasq 2.80.

 -- Felipe Sateler <fsateler@debian.org>  Thu, 21 Feb 2019 20:10:15 -0300

systemd (240-6) unstable; urgency=high

  * High urgency as this fixes a vulnerability.

  [ Felipe Sateler ]
  * Reenable pristine-tar in gbp.conf.
    The pristine-tar bug has been fixed, so we can use it again.
    This reverts commit 9fcfbbf6fea15eacfa3fad74240431c5f2c3300e.
  * d/watch: add version mangle to transform -rc to ~rc.
    Upstream has started releasing rcs, so let's account for that
  * Fix comment about why we disable hwclock.service.
    Systemd nowadays doesn't do it itself because the kernel does it on its
    own when necessary, and when not, it is not safe to save the hwclock (eg,
    there is no certainty the system clock
    is correct)
  * udev: Backport upstream preventing mass killings when not running under
    systemd (Closes: #918764)

  [ Dimitri John Ledkov ]
  * debian/tests/storage: improve cleanups.
    On fast ppc64el machines, cryptsetup start job may not complete by the
    time tearDown is executed. In that case stop, causes to simply cancel the
    start job without actually cleaning up the dmsetup node. This leads to
    failing subsequent test as it no longer starts with a clean device. Thus
    ensure the systemd-cryptsetup unit is started, before stopping it.
    Also rmmod scsi_debug module at the end, to allow re-running the test in a
    loop.
  * debian/tests/upstream: Mark TEST-13-NSPAWN-SMOKE as flakey.
  * debian/tests/control: add socat to upstream tests for pull #11591
  * Blacklist TEST-10-ISSUE-2467 #11706
  * debian/tests/storage: fix for LUKS2 and avoid interactive password
    prompts.

  [ Martin Pitt ]
  * udevadm: Fix segfault with subsystem-match containing '/'
    (Closes: #919206)
  * sd-bus: if we receive an invalid dbus message, ignore and proceed
  * sd-bus: enforce a size limit on D-Bus object paths.
    This avoids accessing/modifying memory outside of the allocated stack
    region by sending specially crafted D-Bus messages with very large object
    paths.
    Vulnerability discovered by Chris Coulson <chris.coulson@canonical.com>,
    patch provided by Riccardo Schirone <rschiron@redhat.com>.
    (CVE-2019-6454)

 -- Martin Pitt <mpitt@debian.org>  Mon, 18 Feb 2019 13:54:04 +0000

Martin Pitt's avatar
Martin Pitt committed
1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197 2198 2199 2200
systemd (240-5) unstable; urgency=medium

  [ Felipe Sateler ]
  * Revert interface renaming changes. (Closes: #919390)

  [ Martin Pitt ]
  * process-util: Fix memory leak (Closes: #920018)

 -- Martin Pitt <mpitt@debian.org>  Sun, 27 Jan 2019 21:33:07 +0000

systemd (240-4) unstable; urgency=medium

  [ Benjamin Drung ]
  * Fix shellcheck issues in initramfs-tools scripts

  [ Michael Biebl ]
  * Import patches from v240-stable branch (up to f02b5472c6)
    - Fixes a problem in logind closing the controlling terminal when using
      startx. (Closes: #918927)
    - Fixes various journald vulnerabilities via attacker controlled alloca.
      (CVE-2018-16864, CVE-2018-16865, Closes: #918841, Closes: #918848)
  * sd-device-monitor: Fix ordering of setting buffer size.
    Fixes an issue with uevents not being processed properly during coldplug
    stage and some kernel modules not being loaded via "udevadm trigger".
    (Closes: #917607)
  * meson: Stop setting -fPIE globally.
    Setting -fPIE globally can lead to miscompilations on certain
    architectures. Instead use the b_pie=true build option, which was
    introduced in meson 0.49. Bump the Build-Depends accordingly.
    (Closes: #909396)

 -- Michael Biebl <biebl@debian.org>  Sat, 12 Jan 2019 21:49:44 +0100

systemd (240-3) unstable; urgency=medium

  * udev.init: Trigger add events for subsystems.
    Update the SysV init script and mimic the behaviour of the initramfs and
    systemd-udev-trigger.service which first trigger subsystems and then
    devices during the coldplug stage.
  * udevadm: Refuse to run trigger, control, settle and monitor commands in
    chroot (Closes: #917633)
  * network: Set link state configuring before setting addresses.
    Fixes a crash in systemd-networkd caused by an assertion failure.
    (Closes: #918658)
  * libudev-util: Make util_replace_whitespace() read only len characters.
    Fixes a regression where /dev/disk/by-id/ names had additional
    underscores.
  * man: Update color of journal logs in DEBUG level (Closes: #917948)
  * Remove old state directory of systemd-timesyncd on upgrades.
    Otherwise timesyncd will fail to update the clock file if it was created
    as /var/lib/private/systemd/timesync/clock.
    This was the case when the service was using DynamicUser=yes which it no
    longer does in v240. (Closes: #918190)

 -- Michael Biebl <biebl@debian.org>  Wed, 09 Jan 2019 18:40:57 +0100

systemd (240-2) unstable; urgency=medium

  * Pass separate dev_t var to device_path_parse_major_minor.
    Fixes FTBFS on mips/mipsel (MIPS/O32). (Closes: #917195)
  * test-json: Check absolute and relative difference in floating point test.
    Fixes FTBFS due to test-suite failures on armel, armhf and hppa.
    (Closes: #917215)
  * sd-device: Fix segfault when error occurs in device_new_from_{nulstr,strv}()
    Fixes a segfault in systemd-udevd when debug logging is enabled.
  * udev-event: Do not read stdout or stderr if the pipefd is not created.
    This fixes problems with device-mapper symlinks no longer being created
    or certain devices not being marked as ready. (Closes: #917124)
  * Don't bump fs.nr_open in PID 1.
    In v240, systemd bumped fs.nr_open in PID 1 to the highest possible
    value. Processes that are spawned directly by systemd, will have
    RLIMIT_NOFILE be set to 512K (hard).
    pam_limits in Debian defaults to "set_all", i.e. for limits which are
    not explicitly configured in /etc/security/limits.conf, the value from
    PID 1 is taken, which means for login sessions, RLIMIT_NOFILE is set to
    the highest possible value instead of 512K. Not every software is able
    to deal with such an RLIMIT_NOFILE properly.
    While this is arguably a questionable default in Debian's pam_limit,
    work around this problem by not bumping fs.nr_open in PID 1.
    (Closes: #917167)

 -- Michael Biebl <biebl@debian.org>  Thu, 27 Dec 2018 14:03:57 +0100

systemd (240-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 240
    - core: Skip cgroup_subtree_mask_valid update if UNIT_STUB
      (Closes: #903011)
    - machined: Rework referencing of machine scopes from machined
      (Closes: #903288)
    - timesync: Fix serialization of IP address
      (Closes: #916516)
    - core: Don't track jobs-finishing-during-reload explicitly
      (Closes: #916678)
  * Rebase patches
  * Install new systemd-id128 binary
  * Update symbols file for libsystemd0
  * Update nss build options

  [ Martin Pitt ]
  * tests: Disable some flaky upstream tests.
    See https://github.com/systemd/systemd/issues/11195
  * tests: Disable flaky TEST-17-UDEV-WANTS upstream test.
    See https://github.com/systemd/systemd/issues/11195

 -- Michael Biebl <biebl@debian.org>  Sat, 22 Dec 2018 16:01:43 +0100

systemd (239-15) unstable; urgency=medium

  [ Felipe Sateler ]
  * Fix container check in udev init script.
    Udev needs writable /sys, so the init script tried to check before
    starting. Unfortunately, the check was inverted. Let's add the missing
    '!' to negate the check.
    (Closes: #915261)
  * Add myself to uploaders

  [ Michael Biebl ]
  * Remove obsolete systemd-shim conffile on upgrades.
    The D-Bus policy file was dropped from the systemd-shim package in
    version 8-4, but apparently there are cases where users removed the
    package before that cleanup happened. The D-Bus policy file that was
    shipped by systemd-shim was much more restrictive and now prevents
    calling GetDynamicUsers() and other recent APIs on systemd Manager.
    (Closes: #914285)

 -- Felipe Sateler <fsateler@debian.org>  Wed, 05 Dec 2018 21:03:34 -0300

systemd (239-14) unstable; urgency=medium

  [ Michael Biebl ]
  * autopkgtest: Drop test_custom_cgroup_cleanup from boot-and-services
  * resolved: Increase size of TCP stub replies (Closes: #915049)
  * meson: Unify linux/stat.h check with other checks and use _GNU_SOURCE.
    Fixes a build failure with glibc 2.28.
  * Drop procps dependency from systemd.
    The systemd-exit.service user service no longer uses the "kill" binary.
  * Simplify container check in udev SysV init script.
    Instead of using "ps" to detect a container environment, simply test if
    /sys is writable. This matches what's used in systemd-udevd.service via
    ConditionPathIsReadWrite=/sys and follows
    https://www.freedesktop.org/wiki/Software/systemd/ContainerInterface/
    This means we no longer need procps, so drop that dependency from the
    udev package. (Closes: #915095)

  [ Mert Dirik ]
  * 40-systemd: Honour __init_d_script_name.
    Make /lib/lsb/init-functions.d/40-systemd use __init_d_script_name
    (if available) to figure out real script name. (Closes: #826214)
  * 40-systemd: Improve heuristics for init-d-script.
    Improve heuristics for scripts run via init-d-script so that the
    redirection works even for older init-d-script versions without the
    __init_d_script_name variable.

 -- Michael Biebl <biebl@debian.org>  Sun, 02 Dec 2018 01:00:01 +0100

systemd (239-13) unstable; urgency=medium

  * autopktest: Add e2fsprogs dependency to upstream test.
    Some of the upstream tests require mkfs.ext4. (Closes: #887250)
  * systemctl: Tell update-rc.d to skip creating any systemd symlinks.
    When calling update-rc.d via systemd-sysv-install, tell it to skip
    creating any systemd symlinks as we want to handle those directly in
    systemctl. Older update-rc.d versions will ignore that request, but
    that's ok. This means we don't need a versioned dependency against
    init-system-helpers. (Closes: #743217)
  * pam_systemd: Suppress LOG_DEBUG log messages if debugging is off
    (Closes: #825949)
  * Drop cgroup-don-t-trim-cgroup-trees-created-by-someone-el.patch.
    The patch is no longer necessary as lxc.service now uses Delegate=yes.
  * Remove obsolete Replaces from pre-jessie

 -- Michael Biebl <biebl@debian.org>  Tue, 20 Nov 2018 19:44:39 +0100

systemd (239-12) unstable; urgency=high

  [ Martin Pitt ]
  * Enable QEMU on more architectures in "upstream" autopkgtest.
    Taken from the Ubuntu package, so apparently QEMU works well enough on
    these architectures now.
  * autopkgtest: Avoid test bed reset for boot-smoke.
    Make "boot-smoke"'s dependencies a strict superset of "upstream"'s, so
    that autopkgtest doesn't have to provide a new testbed.
  * Fix wrong "nobody" group from sysusers.d.
    Fix our make-sysusers-basic sysusers.d generator to special-case the
    nobody group. "nobody" user and "nogroup" group both have the same ID
    65534, which is the only special case for Debian's static users/groups.
    So specify the gid explicitly, to avoid systemd-sysusers creating a
    dynamic system group for "nobody".
    Also clean up the group on upgrades.
    Thanks to Keh-Ming Luoh for the original patch! (Closes: #912525)

  [ Michael Biebl ]
  * autopkgtest: Use shutil.which() which is provided by Python 3
  * Drop non-existing gnuefi=false build option.
    This was mistakenly added when converting from autotools to meson.
  * core: When deserializing state always use read_line(…, LONG_LINE_MAX, …)
    Fixes a vulnerability in unit_deserialize which allows an attacker to
    supply arbitrary state across systemd re-execution via NotifyAccess.
    (CVE-2018-15686, Closes: #912005)
  * meson: Use the host architecture compiler/linker for src/boot/efi.
    Fixes cross build failure for arm64. (Closes: #905381)
  * systemd: Do not pass .wants fragment path to manager_load_unit.
    Fixes an issue with overridden units in /etc not being used due to a
    .wants/ symlink pointing to /lib. (Closes: #907054)
  * machined: When reading os-release file, join PID namespace too.
    This ensures that we properly acquire the os-release file from containers.
    (Closes: #911231)

 -- Michael Biebl <biebl@debian.org>  Sat, 17 Nov 2018 18:39:21 +0100

systemd (239-11) unstable; urgency=high

  [ Michael Biebl ]
  * debian/tests/upstream: Clean up after each test run.
    Otherwise the loopback images used by qemu are not properly released and
    we might run out of disk space.
  * dhcp6: Make sure we have enough space for the DHCP6 option header.
    Fixes out-of-bounds heap write in systemd-networkd dhcpv6 option
    handling.
    (CVE-2018-15688, LP: #1795921, Closes: #912008)
  * chown-recursive: Rework the recursive logic to use O_PATH.
    Fixes a race condition in chown_one() which allows an attacker to cause
    systemd to set arbitrary permissions on arbitrary files.
    (CVE-2018-15687, LP: #1796692, Closes: #912007)

  [ Martin Pitt ]
  * debian/tests/boot-and-services: Use gdm instead of lightdm.
    This seems to work more reliably, on Ubuntu CI's i386 instances lightdm
    fails.

  [ Manuel A. Fernandez Montecelo ]
  * Run "meson test" instead of "ninja test"
    Upstream developers of meson recommend to run it in this way, because
    "ninja test" just calls "meson test", and by using meson directly and
    using extra command line arguments it is possible to control aspects of
    how the tests are run.
  * Increase timeout for test in riscv64.
    The buildds for the riscv64 arch used at the moment are slow, so increase
    the timeouts for this arch by a factor of 10, for good measure.
    (Closes: #906429)

 -- Michael Biebl <biebl@debian.org>  Sun, 28 Oct 2018 13:02:18 +0100

systemd (239-10) unstable; urgency=medium

  [ Michael Biebl ]
  * meson: Rename -Ddebug to -Ddebug-extra.
    Meson added -Doptimization and -Ddebug options, which obviously causes
    a conflict with our -Ddebug options. Let's rename it.
    (Closes: #909455)
  * Add conflicts against consolekit.
    Letting both ConsoleKit and logind manage dynamic device permissions
    will only lead to inconsistent and unexpected results.

  [ Felipe Sateler ]
  * Link systemctl binary statically against libshared.
    This reduces the Pre-Depends list considerably, and is more resilient
    against borked installs.

 -- Michael Biebl <biebl@debian.org>  Tue, 25 Sep 2018 16:11:12 +0200

systemd (239-9) unstable; urgency=medium

  * autopkgtest: Remove needs-recommends runtime restriction.
    This restriction has been deprecated and there are plans to remove it
    altogether. The tests pass withouth needs-recommends, so it seems safe
    to remove.
  * test: Use installed catalogs when test-catalog is not located at build
    dir.
    This makes it possible to run test-catalog as installed test, so we no
    longer need to mark it as EXFAIL in our root-unittests autopkgtest.
  * test: Use "systemd-runtest.env" to set $SYSTEMD_TEST_DATA and
    $SYSTEMD_CATALOG_DIR.
    This avoids embedding ABS_{SRC,BUILD}_DIR into libsystemd-shared.so and
    the test binaries and should make the build reproducible.
    (Closes: #908365)

 -- Michael Biebl <biebl@debian.org>  Wed, 12 Sep 2018 19:07:38 +0200

systemd (239-8) unstable; urgency=medium

  [ Michael Biebl ]
  * Clean up dbus-org.freedesktop.timesync1.service Alias on purge
    (Closes: #904290)
  * user-runtime-dir: Fix wrong SELinux context (Closes: #908026)
  * core: Fix gid when DynamicUser=yes with static user (Closes: #904335)
  * Remove udev control socket on shutdown under sysvinit.
    The udev control socket is no longer removed automatically when the
    daemon is stopped. As this can confuse other software, update the SysV
    init script to remove the control socket manually and make sure the init
    script is executed on shutdown (runlevel 0) and reboot (runlevel 6).
    (Closes: #791944)
  * Bump Standards-Version to 4.2.1

  [ Martin Pitt ]
  * timedated: Fix wrong PropertyChanged values and refcounting

 -- Michael Biebl <biebl@debian.org>  Fri, 07 Sep 2018 08:41:12 +0200

systemd (239-7) unstable; urgency=medium

  * autopkgtest: Add iputils-ping dependency to root-unittests.
    The ping binary is required by test-bpf.
  * autopkgtest: Add dbus-user-session and libpam-systemd dependency to
    root-unittests.
    Without a working D-Bus user session, a lot of the test-bus-* tests are
    skipped.
  * network/link: Fix logic error in matching devices by MAC (Closes: #904198)

 -- Michael Biebl <biebl@debian.org>  Sun, 22 Jul 2018 13:40:15 +0200

systemd (239-6) unstable; urgency=medium

  [ Martin Pitt ]
  * autopkgtest: Install libnss-systemd.
    Make sure that dynamic users can be resolved. This e. g. prevents a
    startup failure for systemd-resolved.
  * autopkgtest: Add missing python3 test dependency for udev test

  [ Michael Biebl ]
  * autopkgtest: Make AppArmor violator test work with merged-usr
  * Make /dev/kvm accessible to local users and group kvm.
    Re-add the uaccess tag to /dev/kvm to make it accessible to local
    users. Access is also granted via group kvm, so create that in
    udev.postinst. (Closes: #887852)
  * Move a few man pages from systemd to systemd-journal-remote.
    The systemd package shipped a few systemd-journal-remote and
    systemd-journal-upload related man pages which really belong into the
    systemd-journal-remote package. Move those man pages into the correct
    package and add a Breaks/Replaces against systemd accordingly.
    (Closes: #903557)
  * autopkgtest: Drop no-longer needed workaround from upstream test
  * Go back to statically allocate system users for timesyncd, networkd and
    resolved.
    There are currently too many open issues related to D-Bus and the usage
    of DynamicUser. (Closes: #902971)
  * Change python3-minimal dependency to python3.
    While we strictly only need python3-minimal, the usage of
    python3-minimal triggers a lintian error: depends-on-python-minimal
  * test: Drop SKIP_INITRD for QEMU-based tests.
    The Debian Linux kernel ships ext4 support as a module, so we require an
    initrd to successfully start the QEMU images.
  * debian/tests/localed-x11-keymap: Deal with absence of
    /etc/default/keyboard more gracefully
  * autopkgtest: Add various dependencies to make upstream test pass on Debian
    - netcat-openbsd: Required by TEST-12-ISSUE-3171.
    - busybox-static: Required by TEST-13-NSPAWN-SMOKE.
    - plymouth: Required by TEST-15-DROPIN and TEST-22-TMPFILES.
  * Drop seccomp system call filter for udev.
    The seccomp based system call whitelist requires at least systemd 239 to
    be the active init and during a dist-upgrade we can't guarantee that
    systemd has been fully configured before udev is restarted.
    The versioned systemd Breaks that was added to udev for #902185 didn't
    really fix this issue, so revert that change again. (Closes: #903224)

 -- Michael Biebl <biebl@debian.org>  Thu, 19 Jul 2018 00:04:54 +0200

systemd (239-5) unstable; urgency=medium

  * Add inverse version restriction of the Breaks to the systemd-shim
    alternative in libpam-systemd.
    Otherwise apt will fail to find an installation path for libpam-systemd
    in cases where libpam-systemd is an indirect dependency. (Closes: #902998)

 -- Michael Biebl <biebl@debian.org>  Thu, 05 Jul 2018 11:50:10 +0200

systemd (239-4) unstable; urgency=medium

  [ Michael Biebl ]
  * Drop outdated section from README.Debian about switching back to SysV init
  * sleep: Fix one more printf format of a fiemap field
  * basic: Add missing comma in raw_clone assembly for sparc
  * bus-util: Make log level lower in request_name_destroy_callback()
  * tmpfiles: Specify access mode for /run/systemd/netif
  * Add Breaks against python-dbusmock (<< 0.18) to systemd.
    The logind and timedated tests in python-dbusmock were broken by the
    latest systemd release and had to be adjusted to work with systemd 239.
    See #902602
  * Drop patches which try to support running systemd services without systemd
    as pid 1.
    No one is currently actively maintaining systemd-shim, which means that
    e.g. running systemd-logind no longer works when systemd is not pid 1.
    Thus drop our no longer working patches. Bump the Breaks against
    systemd-shim accordingly.
    See #895292, #901404, #901405

  [ Martin Pitt ]
  * test: fix networkd-test.py rate limiting and dynamic user

 -- Michael Biebl <biebl@debian.org>  Tue, 03 Jul 2018 23:36:28 +0200

systemd (239-3) unstable; urgency=medium

  * Revert "systemctl: when removing enablement or mask symlinks, cover both
    /run and /etc"
    We currently have packages in the archive which use
    "systemctl --runtime unmask" and are broken by this change.
    This is a intermediate step until it is clear whether upstream will
    revert this commit or whether we will have to update affected packages
    to deal with this changed behaviour.
    See #902287 and https://github.com/systemd/systemd/issues/9393

 -- Michael Biebl <biebl@debian.org>  Wed, 27 Jun 2018 14:46:06 +0200

systemd (239-2) unstable; urgency=medium

  * sleep: Fix printf format of fiemap fields.
    This should fix a FTBFS on ia64.
  * timesync: Change type of drift_freq to int64_t.
    This should fix a FTBFS on x32.
  * Bump systemd Breaks to ensure it is upgraded in lockstep with udev.
    The hardening features used by systemd-udevd.service require systemd 239
    and udev will fail to start with older versions. (Closes: #902185)

 -- Michael Biebl <biebl@debian.org>  Wed, 27 Jun 2018 13:59:24 +0200

systemd (239-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 239
  * Drop alternative iptables-dev Build-Depends.
    It is no longer needed as both Ubuntu and Debian now ship libiptc-dev in
    their latest stable (LTS) release.
  * Drop alternative btrfs-tools Recommends.
    It is no longer needed as btrfs-progs is now available in both Debian
    and Ubuntu and keeping the alternative around prevents the transitional
    package from being autoremoved.
  * Disable installation of RPM macros.
    This avoids having to remove them manually later on.
  * Drop cleanup rules for libtool .la files.
    With the switch to Meson, libtool is no longer used.
  * Drop fallback for older kernels when running the test suite.
    We now assume that we have a kernel newer then 3.13.
  * Stop cleaning up .busname units.
    Those are gone upstream, so we no longer need to remove them manually.
  * Update symbols file for libsystemd0
  * Rebase patches
  * Install new resolvectl tool.
    Don't ship the /sbin/resolvconf compat symlink in the systemd package,
    as this would cause a file conflict with the resolvconf and openresolv
    package.
  * Disable support for "Portable Services"
    This is still an experimental feature.
  * Disable pristine-tar in gbp.conf.
    It is currently not possible to import the systemd v239 tarball using
    pristine-tar due to #902115.
  * Bump Build-Depends on meson to (>= 0.44)
  * Stop setting the path for the kill binary, no longer necessary
  * Stop creating systemd-network and systemd-resolve system user
    systemd-networkd.service and systemd-resolved.service now use
    DynamicUser=yes.

  [ Dimitri John Ledkov ]
  * Run all upstream tests, and then report all that failed.

 -- Michael Biebl <biebl@debian.org>  Sat, 23 Jun 2018 00:18:08 +0200

systemd (238-5) unstable; urgency=medium

  [ Evgeny Vereshchagin ]
  * upstream autopkgtest: Copy journal subdirectories.
    Otherwise logs are missing on failures.

  [ Martin Pitt ]
  * debian/tests/boot-and-services: Ignore cpi.service failure.
    This is apparently a regression in Ubuntu 18.04, not in systemd, so
    ignore it.

  [ Michael Biebl ]
  * sd-bus: Do not try to close already closed fd (Closes: #896781)
  * Use dh_missing to act on uninstalled files.
    The usage of dh_install --fail-missing has been deprecated.
  * meson: Avoid warning about comparison of bool and string.
    The result of this is undefined and will become a hard error in a future
    Meson release.
  * login: Respect --no-wall when cancelling a shutdown request
    (Closes: #897938)
  * Add dependencies of libsystemd-shared to Pre-Depends.
    This is necessary so systemctl is functional at all times during a
    dist-upgrade. (Closes: #897986)
  * Drop dh_strip override, the dbgsym migration is done

  [ Felipe Sateler ]
  * Don't include libmount.h in a header file.
    Kernel and glibc headers both use MS_* constants, but are not in sync, so
    only one of them can be used at a time. Thus, only import them where
    needed. Works around #898743.

 -- Michael Biebl <biebl@debian.org>  Sat, 26 May 2018 10:31:29 +0200

systemd (238-4) unstable; urgency=medium

  [ Michael Biebl ]
  * udev/net-id: Fix check for address to keep interface names stable
  * debian/copyright: Move global wildcard section to the top

  [ Martin Pitt ]
  * Fix daemon reload failures

  [ Laurent Bigonville ]
  * Fix /sys/fs/cgroup mount when using SELinux.
    Since v236, all cgroups except /sys/fs/cgroup/systemd and
    /sys/fs/cgroup/unified are not mounted when SELinux is enabled (even in
    permissive mode). Disabling SELinux completely restores these cgroups.
    This patch fixes that issue by no longer making the assumption that those
    cgroups are mounted by initrd/dracut before systemd is started.

 -- Michael Biebl <biebl@debian.org>  Sun, 01 Apr 2018 13:02:57 +0200

systemd (238-3) unstable; urgency=medium

  [ Martin Pitt ]
  * Enable systemd-sysusers unit and provide correct Debian static u/gids.
    Add a helper script debian/extra/make-sysusers-basic which generates a
    sysusers.d(5) file from Debian's static master passwd/group files.
    systemd 238 now supports  specifying different uid and gid and a
    non-default login shell, so this is possible now. (Closes: #888126)
  * udev README.Debian: Include initrd rebuild and some clarifications in
    migration.
    While initrd update is already being mentioned in the introductory
    section, it is easy to miss when going through the migration steps, so
    explicitly mention it again. Also add a warning about keeping a fallback
    on misconfigurations, and the possibility to migrate one interface at a
    time.
    Thanks to Karl O. Pinc for the suggestions! (Closes: #881769)

  [ Michael Biebl ]
  * basic/macros: Rename noreturn into _noreturn_.
    "noreturn" is reserved and can be used in other header files we include.
    (Closes: #893426)
  * units: Fix SuccessAction that belongs to [Unit] section not [Service]
    section (Closes: #893282)

 -- Michael Biebl <biebl@debian.org>  Tue, 20 Mar 2018 23:22:57 +0100

systemd (238-2) unstable; urgency=medium

  [ Alf Gaida ]
  * core: do not free stack-allocated strings.
    Fixes a crash in systemd when the cpuacct cgroup controller is not
    available. (Closes: #892360)

 -- Michael Biebl <biebl@debian.org>  Sat, 10 Mar 2018 01:12:47 +0100

systemd (238-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 238
    - Fixes systemd-tmpfiles to correctly handle symlinks present in
      non-terminal path components. (CVE-2018-6954, Closes: #890779)
  * Rebase patches
  * Use compat symlinks as provided by upstream.
    As the upstream build system now creates those symlinks for us, we no
    longer have to create them manually.
  * Update symbols file for libsystemd0
  * test-cgroup-util: bail out when running under a buildd environment

  [ Dimitri John Ledkov ]
  * systemd-sysv-install: Fix name initialisation.
    Only initialise NAME after --root optional argument has been parsed,
    otherwise NAME is initialized to e.g. `enable`, instead of to the
    `unit-name`, resulting in failures. (LP: #1752882)

 -- Michael Biebl <biebl@debian.org>  Wed, 07 Mar 2018 23:21:53 +0100

systemd (237-4) unstable; urgency=medium

  [ Gunnar Hjalmarsson ]
  * Fix PO template creation.
    Cherry-pick upstream patches to build a correct systemd.pot including
    the polkit policy files even without policykit-1 being installed.
    (LP: #1707898)

  [ Michael Biebl ]
  * Drop mask for fuse SysV init script.
    The fuse package has removed its SysV init script a long time ago, so
    the mask is no longer needed.
  * Replace two Debian specific patches which cherry-picks from upstream
    master

 -- Michael Biebl <biebl@debian.org>  Wed, 28 Feb 2018 19:18:34 +0100

systemd (237-3) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/tests/boot-smoke: More robust journal checking.
    Also fail the test if calling journalctl fails, and avoid calling it
    twice. See https://github.com/systemd/systemd/pull/8032
  * Simplify PO template creation.
    Use the existing upstream build system instead of a manual call to
    `intltool-update` and `xgettext` to build systemd.pot. Remove the now
    obsolete intltool build dependency, but still explicitly keep gettext.
    (LP: #1707898)
  * Make systemd-sysv-install robust against existing $ROOT.
    Always initialize `$ROOT`, to avoid the script getting confused by an
    existing outside env variable. Also fix the `--root` option to actually
    work, the previous approach was conceptually broken due to how shell
    quoting works. Make the work with `set -u`. (Closes: #890436)

  [ Felipe Sateler ]
  * Backport upstream patch fixing a wrong assert() call (Closes: #890423)

 -- Michael Biebl <biebl@debian.org>  Wed, 14 Feb 2018 23:07:17 +0100

systemd (237-2) unstable; urgency=medium

  * Drop debian/extra/rules/70-debian-uaccess.rules.
    Up-to-date udev rules for U2F devices are shipped in libu2f-udev nowadays.
    (Closes: #889665)
  * service: relax PID file symlink chain checks a bit.
    Let's read the PID file after all if there's a potentially unsafe symlink
    chain in place. But if we do, then refuse taking the PID if its outside of
    the cgroup. (Closes: #889144)

 -- Michael Biebl <biebl@debian.org>  Fri, 09 Feb 2018 23:35:31 +0100

systemd (237-1) unstable; urgency=medium

  * New upstream version 237
  * Rebase patches
  * Update symbols file for libsystemd0
  * Update Vcs-* to point to https://salsa.debian.org
  * Bump Standards-Version to 4.1.3
  * Set Rules-Requires-Root to no

 -- Michael Biebl <biebl@debian.org>  Tue, 30 Jan 2018 01:55:24 +0100

systemd (236-4) unstable; urgency=medium

  [ Felipe Sateler ]
  * Allow systemd-timesyncd to start when libnss-systemd is not installed.
    Pick upstream patch requiring the existence of the systemd-timesync user
    only when running as root, which is not the case for the system unit.
    (Closes: #887343)

  [ Nicolas Braud-Santoni ]
  * debian/copyright: Refer to the CC0 license file (Closes: #882629)

  [ Michael Biebl ]
  * Add Build-Depends on python3-evdev <!nocheck>
    This is used by hwdb/parse_hwdb.py to perform additional validation on
    hwdb files.

 -- Michael Biebl <biebl@debian.org>  Sun, 28 Jan 2018 22:29:32 +0100

systemd (236-3) unstable; urgency=medium

  * Revert "core/execute: RuntimeDirectory= or friends requires mount
    namespace"
    This was making mounts from SSH sessions invisible to the system.
    (Closes: #885325)

 -- Michael Biebl <biebl@debian.org>  Thu, 11 Jan 2018 16:46:04 +0100

systemd (236-2) unstable; urgency=medium

  * Downgrade priority of libudev1 to optional.
    This makes it compliant with recent versions of debian-policy which
    recommends to use priority optional for library packages.
  * Clarify NEWS entry about removal of system users.
    Mention in the recent NEWS entry that the associated system groups
    should be removed as well. (Closes: #885061)
  * cryptsetup-generator: Don't mistake NULL input as OOM.
    Fixes systemd-cryptsetup-generator failing to run during boot.
    (Closes: #885201)
  * analyze: Use normal bus connection for "plot" verb.
    Fixes "systemd-analyze plot" failing to run as root. (Closes: #884506)
  * Stop re-enabling systemd services on every upgrade.
    This was done so changes to the [Install] section would be applied on
    upgrades. Forcefully re-enabling a service might overwrite local
    modifications though and thus far, none of the affected services did
    actually change its [Install] section. So remove this code from the
    maintainer scripts as it was apparently doing more harm then good.
    (Closes: #869354)

 -- Michael Biebl <biebl@debian.org>  Tue, 02 Jan 2018 00:35:14 +0100

systemd (236-1) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/tests/upstream: Only show ≥ warning in journal dumps.
    Showing the entire debug log is too hard to scan visually, and most of
    the time the warnings and errors are sufficient to explain a failure.
    Put the journal files into the artifacts though, in case the debug
    information is necessary.

  [ Michael Biebl ]
  * New upstream version 236
    - nspawn: Adjust path to static resolv.conf to support split usr.
      (Closes: #881310)
    - networkd: Don't stop networkd if CONFIG_FIB_RULES=n in kernel.
      (Closes: #881823)
    - core: Fix segfault in compile_bind_mounts() when BindPaths= or
      BindReadOnlyPaths= is set. (Closes: #883380)
    - meson: Link NSS modules with -z nodelete to fix memory leak in
      nss-systemd. (Closes: #883407)
    - logind: Make sure we don't acces m->action_what if it's not initialized.
      (Closes: #882270)
    - systemctl: Ignore shutdown's "-t" argument. (Closes: #882245)
    - core: Be more defensive if we can't determine per-connection socket
      peer. (Closes: #879603)
    - bpf-firewall: Actually invoke BPF_PROG_ATTACH to check whether
      cgroup/bpf is available. (Closes: #878965)
  * Rebase patches
  * Update symbols file for libsystemd0
  * Bump Standards-Version to 4.1.2
  * Clean up old /var/lib/systemd/clock on upgrade.
    The clock file used by systemd-timesyncd is now stored in
    StateDirectory=systemd/timesync. (Closes: #883605)
  * Stop creating systemd-timesync system user.
    DynamicUser=yes has been enabled for systemd-timesyncd.service so
    allocating a system user statically is no longer necessary.
  * Document removal of systemd-{timesync,journal-gateway,journal-upload} user.
    We no longer create those system users as the corresponding services now
    use DynamicUser=yes. Removing those system users automatically is tricky,
    as the relevant services might be running during upgrade. Add a NEWS
    entry instead which documents this change.
  * Revert "udev-rules: Permission changes for /dev/dri/renderD*"
    This would introduce a new system group "render". As the name is rather
    generic, this needs further discussion first, so revert this change for
    now.

 -- Michael Biebl <biebl@debian.org>  Sun, 17 Dec 2017 21:45:51 +0100

systemd (235-3) unstable; urgency=medium

  [ Michael Biebl ]
  * Switch from XC-Package-Type to Package-Type. As of dpkg-dev 1.15.7
    Package-Type is recognized as an official field name.
  * Install modprobe configuration file to /lib/modprobe.d.
    Otherwise it is not read by kmod. (Closes: #879191)

  [ Felipe Sateler ]
  * Backport upstream (partial) fix for combined DynamicUser= + User=
    UID was not allowed to be different to GID, which is normally the case in
    debian, due to the group users being allocated the GID 100 without an
    equivalent UID 100 being allocated.
  * Backport upstream patches to fully make DynamicUser=yes + static,
    pre-existing User= work.

  [ Martin Pitt ]
  * Add missing python3-minimal dependency to systemd-tests
  * Drop long-obsolete systemd-bus-proxy system user
    systemd-bus-proxy hasn't been shipped since before stretch and never
    created any files. Thus clean up the obsolete system user on upgrades.
    (Closes: #878182)
  * Drop static systemd-journal-gateway system user
    systemd-journal-gatewayd.service now uses DynamicUser=, so we don't need
    to create this statically any more. Don't remove the user on upgrades
    though, as there is likely still be a running process. (Closes: #878183)
  * Use DynamicUser= for systemd-journal-upload.service.
  * Add Recommends: libnss-systemd to systemd-sysv.
    This is useful to actually be able to resolve dynamically created system
    users with DynamicUser=true. This concept is going to be used much more
    in future versions and (hopefully) third-party .services, so pulling it
    into the default installation seems prudent now.
  * resolved: Fix loop on packets with pseudo dns types.
    (CVE-2017-15908, Closes: #880026, LP: #1725351)
  * bpf-firewall: Properly handle kernels without BPF cgroup but with TRIE maps.
    Fixes "Detaching egress BPF: Invalid argument" log spam. (Closes: #878965)
  * Fix MemoryDenyWriteExecution= bypass with pkey_mprotect() (LP: #1725348)

 -- Martin Pitt <mpitt@debian.org>  Wed, 15 Nov 2017 09:34:00 +0100

systemd (235-2) unstable; urgency=medium

  * Revert "tests: when running a manager object in a test, migrate to private
    cgroup subroot first"
    This was causing test suite failures when running inside a chroot.

 -- Michael Biebl <biebl@debian.org>  Wed, 11 Oct 2017 00:46:07 +0200

systemd (235-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 235
    - cryptsetup-generator: use remote-cryptsetup.target when _netdev is
      present (Closes: #852534)
    - tmpfiles: change btmp mode 0600 → 0660 (Closes: #870638)
    - networkd: For IPv6 addresses do not treat IFA_F_DEPRECATED as not ready
      (Closes: #869995)
    - exec-util,conf-files: skip non-executable files in execute_directories()
      (Closes: #867902)
    - man: update udevadm -y/--sysname-match documentation (Closes: #865081)
    - tmpfiles: silently ignore any path that passes through autofs
      (Closes: #805553)
    - shared: end string with % if one was found at the end of a expandible
      string (Closes: #865450)
  * Refresh patches
  * Bump Build-Depends on libmount-dev to (>= 2.30)
  * Install new modprobe.d config file
  * Bump Standards-Version to 4.1.1

  [ Martin Pitt ]
  * Merge logind-kill-off autopkgtest into logind test.
    This was horribly inefficient as a separate test (from commit
    6bd0dab41e), as that cost two VM resets plus accompanying boots; and
    this does not change any state thus does not require this kind of
    isolation.

 -- Michael Biebl <biebl@debian.org>  Tue, 10 Oct 2017 18:29:28 +0200

systemd (234-3) unstable; urgency=medium

  [ Martin Pitt ]
  * Various fixes for the upstream autopkgtest.

  [ Felipe Sateler ]
  * Add fdisk to the dependencies of the upstream autopkgtest.
    The upstream autopkgtest uses sfdisk, which is now in the non-essential
    fdisk package. (Closes: #872119)
  * Disable nss-systemd on udeb builds
  * Correctly disable resolved on udeb builds
  * Help fix collisions in libsystemd-shared symbols by versioning them.
    Backport upstream patch to version the symbols provided in the private
    library, so that they cannot confuse unversioned pam modules or libraries
    linked into them. (Closes: #873708)

  [ Dimitri John Ledkov ]
  * Cherrypick upstream networkd-test.py assertion/check fixes.
    This resolves ADT test suite failures, when running tests under lxc/lxd
    providers.
  * Cherrypick arm* seccomp fixes.
    This should resolve ADT test failures, on arm64, when running as root.
  * Disable KillUserProcesses, yet again, with meson this time.
  * initramfs-tools: trigger udevadm add actions with subsystems first.
    This updates the initramfs-tools init-top udev script to trigger udevadm
    actions with type specified. This mimics the systemd-udev-trigger.service.
    Without type specified only devices are triggered, but triggering
    subsystems may also be required and should happen before triggering the
    devices. This is the case for example on s390x with zdev generated udev
    rules. (LP: #1713536)

  [ Michael Biebl ]
  * (Re)add --quiet flag to addgroup calls.
    This is now safe with adduser having been fixed to no longer suppress
    fatal error messages if --quiet is used. (Closes: #837871)
  * Switch back to default GCC (Closes: #873661)
  * Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf.
    All major NTP implementations ship a native service file nowadays with a
    Conflicts=systemd-timesyncd.service so this drop-in is no longer
    necessary. (Closes: #873185)

 -- Michael Biebl <biebl@debian.org>  Mon, 04 Sep 2017 00:17:00 +0200

systemd (234-2.3) unstable; urgency=high

  * Non-maintainer upload.
  * Also switch to g++-6 temporarily (needed for some tests):
    - Add g++-6 to Build-Depends
    - Export CXX = g++-6

 -- Cyril Brulebois <kibi@debian.org>  Thu, 24 Aug 2017 02:40:53 +0200

systemd (234-2.2) unstable; urgency=high

  * Non-maintainer upload.
  * Switch to gcc-6 on all architectures, working around an FTBFS on mips64el,
    apparently due to a gcc-7 bug (See: #871514):
    - Add gcc-6 to Build-Depends in debian/control
    - Export CC = gcc-6 in debian/rules

 -- Cyril Brulebois <kibi@debian.org>  Wed, 23 Aug 2017 22:53:09 +0000

systemd (234-2.1) unstable; urgency=high

  * Non-maintainer upload.
  * Fix missing 60-input-id.rules in udev-udeb, which breaks the graphical
    version of the Debian Installer, as no key presses or mouse events get
    processed (Closes: #872598).

 -- Cyril Brulebois <kibi@debian.org>  Wed, 23 Aug 2017 20:41:33 +0200

systemd (234-2) unstable; urgency=medium

  [ Martin Pitt ]
  * udev README.Debian: Fix name of example *.link file

  [ Felipe Sateler ]
  * test-condition: Don't assume that all non-root users are normal users.
    Automated builders may run under a dedicated system user, and this test
    would fail that.

  [ Michael Biebl ]
  * Revert "units: Tell login to preserve environment"
    Environment=LANG= LANGUAGE= LC_CTYPE= ... as used in the getty units is
    not unsetting the variables but instead sets it to an empty var. Passing
    that environment to login messes up the system locale settings and
    breaks programs like gpg-agent.
    (Closes: #868695)

 -- Michael Biebl <biebl@debian.org>  Thu, 20 Jul 2017 15:13:42 +0200

systemd (234-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 234
    - tmpfiles: Create /var/log/lastlog if it does not exist.
      (Closes: #866313)
    - network: Bridge vlan without PVID. (Closes: #859941)
  * Rebase patches
  * Switch build system from autotools to meson.
    Update the Build-Depends accordingly.
  * Update fsckd patch for meson
  * udev autopkgtest: no longer install test-udev binary manually.
Loading
Loading full blame...