changelog

systemd (240-5) unstable; urgency=medium

  [ Felipe Sateler ]
  * Revert interface renaming changes. (Closes: #919390)

  [ Martin Pitt ]
  * process-util: Fix memory leak (Closes: #920018)

 -- Martin Pitt <mpitt@debian.org>  Sun, 27 Jan 2019 21:33:07 +0000

systemd (240-4) unstable; urgency=medium

  [ Benjamin Drung ]
  * Fix shellcheck issues in initramfs-tools scripts

  [ Michael Biebl ]
  * Import patches from v240-stable branch (up to f02b5472c6)
    - Fixes a problem in logind closing the controlling terminal when using
      startx. (Closes: #918927)
    - Fixes various journald vulnerabilities via attacker controlled alloca.
      (CVE-2018-16864, CVE-2018-16865, Closes: #918841, Closes: #918848)
  * sd-device-monitor: Fix ordering of setting buffer size.
    Fixes an issue with uevents not being processed properly during coldplug
    stage and some kernel modules not being loaded via "udevadm trigger".
    (Closes: #917607)
  * meson: Stop setting -fPIE globally.
    Setting -fPIE globally can lead to miscompilations on certain
    architectures. Instead use the b_pie=true build option, which was
    introduced in meson 0.49. Bump the Build-Depends accordingly.
    (Closes: #909396)

 -- Michael Biebl <biebl@debian.org>  Sat, 12 Jan 2019 21:49:44 +0100

systemd (240-3) unstable; urgency=medium

  * udev.init: Trigger add events for subsystems.
    Update the SysV init script and mimic the behaviour of the initramfs and
    systemd-udev-trigger.service which first trigger subsystems and then
    devices during the coldplug stage.
  * udevadm: Refuse to run trigger, control, settle and monitor commands in
    chroot (Closes: #917633)
  * network: Set link state configuring before setting addresses.
    Fixes a crash in systemd-networkd caused by an assertion failure.
    (Closes: #918658)
  * libudev-util: Make util_replace_whitespace() read only len characters.
    Fixes a regression where /dev/disk/by-id/ names had additional
    underscores.
  * man: Update color of journal logs in DEBUG level (Closes: #917948)
  * Remove old state directory of systemd-timesyncd on upgrades.
    Otherwise timesyncd will fail to update the clock file if it was created
    as /var/lib/private/systemd/timesync/clock.
    This was the case when the service was using DynamicUser=yes which it no
    longer does in v240. (Closes: #918190)

 -- Michael Biebl <biebl@debian.org>  Wed, 09 Jan 2019 18:40:57 +0100

systemd (240-2) unstable; urgency=medium

  * Pass separate dev_t var to device_path_parse_major_minor.
    Fixes FTBFS on mips/mipsel (MIPS/O32). (Closes: #917195)
  * test-json: Check absolute and relative difference in floating point test.
    Fixes FTBFS due to test-suite failures on armel, armhf and hppa.
    (Closes: #917215)
  * sd-device: Fix segfault when error occurs in device_new_from_{nulstr,strv}()
    Fixes a segfault in systemd-udevd when debug logging is enabled.
  * udev-event: Do not read stdout or stderr if the pipefd is not created.
    This fixes problems with device-mapper symlinks no longer being created
    or certain devices not being marked as ready. (Closes: #917124)
  * Don't bump fs.nr_open in PID 1.
    In v240, systemd bumped fs.nr_open in PID 1 to the highest possible
    value. Processes that are spawned directly by systemd, will have
    RLIMIT_NOFILE be set to 512K (hard).
    pam_limits in Debian defaults to "set_all", i.e. for limits which are
    not explicitly configured in /etc/security/limits.conf, the value from
    PID 1 is taken, which means for login sessions, RLIMIT_NOFILE is set to
    the highest possible value instead of 512K. Not every software is able
    to deal with such an RLIMIT_NOFILE properly.
    While this is arguably a questionable default in Debian's pam_limit,
    work around this problem by not bumping fs.nr_open in PID 1.
    (Closes: #917167)

 -- Michael Biebl <biebl@debian.org>  Thu, 27 Dec 2018 14:03:57 +0100

systemd (240-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 240
    - core: Skip cgroup_subtree_mask_valid update if UNIT_STUB
      (Closes: #903011)
    - machined: Rework referencing of machine scopes from machined
      (Closes: #903288)
    - timesync: Fix serialization of IP address
      (Closes: #916516)
    - core: Don't track jobs-finishing-during-reload explicitly
      (Closes: #916678)
  * Rebase patches
  * Install new systemd-id128 binary
  * Update symbols file for libsystemd0
  * Update nss build options

  [ Martin Pitt ]
  * tests: Disable some flaky upstream tests.
    See https://github.com/systemd/systemd/issues/11195
  * tests: Disable flaky TEST-17-UDEV-WANTS upstream test.
    See https://github.com/systemd/systemd/issues/11195

 -- Michael Biebl <biebl@debian.org>  Sat, 22 Dec 2018 16:01:43 +0100

systemd (239-15) unstable; urgency=medium

  [ Felipe Sateler ]
  * Fix container check in udev init script.
    Udev needs writable /sys, so the init script tried to check before
    starting. Unfortunately, the check was inverted. Let's add the missing
    '!' to negate the check.
    (Closes: #915261)
  * Add myself to uploaders

  [ Michael Biebl ]
  * Remove obsolete systemd-shim conffile on upgrades.
    The D-Bus policy file was dropped from the systemd-shim package in
    version 8-4, but apparently there are cases where users removed the
    package before that cleanup happened. The D-Bus policy file that was
    shipped by systemd-shim was much more restrictive and now prevents
    calling GetDynamicUsers() and other recent APIs on systemd Manager.
    (Closes: #914285)

 -- Felipe Sateler <fsateler@debian.org>  Wed, 05 Dec 2018 21:03:34 -0300

systemd (239-14) unstable; urgency=medium

  [ Michael Biebl ]
  * autopkgtest: Drop test_custom_cgroup_cleanup from boot-and-services
  * resolved: Increase size of TCP stub replies (Closes: #915049)
  * meson: Unify linux/stat.h check with other checks and use _GNU_SOURCE.
    Fixes a build failure with glibc 2.28.
  * Drop procps dependency from systemd.
    The systemd-exit.service user service no longer uses the "kill" binary.
  * Simplify container check in udev SysV init script.
    Instead of using "ps" to detect a container environment, simply test if
    /sys is writable. This matches what's used in systemd-udevd.service via
    ConditionPathIsReadWrite=/sys and follows
    https://www.freedesktop.org/wiki/Software/systemd/ContainerInterface/
    This means we no longer need procps, so drop that dependency from the
    udev package. (Closes: #915095)

  [ Mert Dirik ]
  * 40-systemd: Honour __init_d_script_name.
    Make /lib/lsb/init-functions.d/40-systemd use __init_d_script_name
    (if available) to figure out real script name. (Closes: #826214)
  * 40-systemd: Improve heuristics for init-d-script.
    Improve heuristics for scripts run via init-d-script so that the
    redirection works even for older init-d-script versions without the
    __init_d_script_name variable.

 -- Michael Biebl <biebl@debian.org>  Sun, 02 Dec 2018 01:00:01 +0100

systemd (239-13) unstable; urgency=medium

  * autopktest: Add e2fsprogs dependency to upstream test.
    Some of the upstream tests require mkfs.ext4. (Closes: #887250)
  * systemctl: Tell update-rc.d to skip creating any systemd symlinks.
    When calling update-rc.d via systemd-sysv-install, tell it to skip
    creating any systemd symlinks as we want to handle those directly in
    systemctl. Older update-rc.d versions will ignore that request, but
    that's ok. This means we don't need a versioned dependency against
    init-system-helpers. (Closes: #743217)
  * pam_systemd: Suppress LOG_DEBUG log messages if debugging is off
    (Closes: #825949)
  * Drop cgroup-don-t-trim-cgroup-trees-created-by-someone-el.patch.
    The patch is no longer necessary as lxc.service now uses Delegate=yes.
  * Remove obsolete Replaces from pre-jessie

 -- Michael Biebl <biebl@debian.org>  Tue, 20 Nov 2018 19:44:39 +0100

systemd (239-12) unstable; urgency=high

  [ Martin Pitt ]
  * Enable QEMU on more architectures in "upstream" autopkgtest.
    Taken from the Ubuntu package, so apparently QEMU works well enough on
    these architectures now.
  * autopkgtest: Avoid test bed reset for boot-smoke.
    Make "boot-smoke"'s dependencies a strict superset of "upstream"'s, so
    that autopkgtest doesn't have to provide a new testbed.
  * Fix wrong "nobody" group from sysusers.d.
    Fix our make-sysusers-basic sysusers.d generator to special-case the
    nobody group. "nobody" user and "nogroup" group both have the same ID
    65534, which is the only special case for Debian's static users/groups.
    So specify the gid explicitly, to avoid systemd-sysusers creating a
    dynamic system group for "nobody".
    Also clean up the group on upgrades.
    Thanks to Keh-Ming Luoh for the original patch! (Closes: #912525)

  [ Michael Biebl ]
  * autopkgtest: Use shutil.which() which is provided by Python 3
  * Drop non-existing gnuefi=false build option.
    This was mistakenly added when converting from autotools to meson.
  * core: When deserializing state always use read_line(…, LONG_LINE_MAX, …)
    Fixes a vulnerability in unit_deserialize which allows an attacker to
    supply arbitrary state across systemd re-execution via NotifyAccess.
    (CVE-2018-15686, Closes: #912005)
  * meson: Use the host architecture compiler/linker for src/boot/efi.
    Fixes cross build failure for arm64. (Closes: #905381)
  * systemd: Do not pass .wants fragment path to manager_load_unit.
    Fixes an issue with overridden units in /etc not being used due to a
    .wants/ symlink pointing to /lib. (Closes: #907054)
  * machined: When reading os-release file, join PID namespace too.
    This ensures that we properly acquire the os-release file from containers.
    (Closes: #911231)

 -- Michael Biebl <biebl@debian.org>  Sat, 17 Nov 2018 18:39:21 +0100

systemd (239-11) unstable; urgency=high

  [ Michael Biebl ]
  * debian/tests/upstream: Clean up after each test run.
    Otherwise the loopback images used by qemu are not properly released and
    we might run out of disk space.
  * dhcp6: Make sure we have enough space for the DHCP6 option header.
    Fixes out-of-bounds heap write in systemd-networkd dhcpv6 option
    handling.
    (CVE-2018-15688, LP: #1795921, Closes: #912008)
  * chown-recursive: Rework the recursive logic to use O_PATH.
    Fixes a race condition in chown_one() which allows an attacker to cause
    systemd to set arbitrary permissions on arbitrary files.
    (CVE-2018-15687, LP: #1796692, Closes: #912007)

  [ Martin Pitt ]
  * debian/tests/boot-and-services: Use gdm instead of lightdm.
    This seems to work more reliably, on Ubuntu CI's i386 instances lightdm
    fails.

  [ Manuel A. Fernandez Montecelo ]
  * Run "meson test" instead of "ninja test"
    Upstream developers of meson recommend to run it in this way, because
    "ninja test" just calls "meson test", and by using meson directly and
    using extra command line arguments it is possible to control aspects of
    how the tests are run.
  * Increase timeout for test in riscv64.
    The buildds for the riscv64 arch used at the moment are slow, so increase
    the timeouts for this arch by a factor of 10, for good measure.
    (Closes: #906429)

 -- Michael Biebl <biebl@debian.org>  Sun, 28 Oct 2018 13:02:18 +0100

systemd (239-10) unstable; urgency=medium

  [ Michael Biebl ]
  * meson: Rename -Ddebug to -Ddebug-extra.
    Meson added -Doptimization and -Ddebug options, which obviously causes
    a conflict with our -Ddebug options. Let's rename it.
    (Closes: #909455)
  * Add conflicts against consolekit.
    Letting both ConsoleKit and logind manage dynamic device permissions
    will only lead to inconsistent and unexpected results.

  [ Felipe Sateler ]
  * Link systemctl binary statically against libshared.
    This reduces the Pre-Depends list considerably, and is more resilient
    against borked installs.

 -- Michael Biebl <biebl@debian.org>  Tue, 25 Sep 2018 16:11:12 +0200

systemd (239-9) unstable; urgency=medium

  * autopkgtest: Remove needs-recommends runtime restriction.
    This restriction has been deprecated and there are plans to remove it
    altogether. The tests pass withouth needs-recommends, so it seems safe
    to remove.
  * test: Use installed catalogs when test-catalog is not located at build
    dir.
    This makes it possible to run test-catalog as installed test, so we no
    longer need to mark it as EXFAIL in our root-unittests autopkgtest.
  * test: Use "systemd-runtest.env" to set $SYSTEMD_TEST_DATA and
    $SYSTEMD_CATALOG_DIR.
    This avoids embedding ABS_{SRC,BUILD}_DIR into libsystemd-shared.so and
    the test binaries and should make the build reproducible.
    (Closes: #908365)

 -- Michael Biebl <biebl@debian.org>  Wed, 12 Sep 2018 19:07:38 +0200

systemd (239-8) unstable; urgency=medium

  [ Michael Biebl ]
  * Clean up dbus-org.freedesktop.timesync1.service Alias on purge
    (Closes: #904290)
  * user-runtime-dir: Fix wrong SELinux context (Closes: #908026)
  * core: Fix gid when DynamicUser=yes with static user (Closes: #904335)
  * Remove udev control socket on shutdown under sysvinit.
    The udev control socket is no longer removed automatically when the
    daemon is stopped. As this can confuse other software, update the SysV
    init script to remove the control socket manually and make sure the init
    script is executed on shutdown (runlevel 0) and reboot (runlevel 6).
    (Closes: #791944)
  * Bump Standards-Version to 4.2.1

  [ Martin Pitt ]
  * timedated: Fix wrong PropertyChanged values and refcounting

 -- Michael Biebl <biebl@debian.org>  Fri, 07 Sep 2018 08:41:12 +0200

systemd (239-7) unstable; urgency=medium

  * autopkgtest: Add iputils-ping dependency to root-unittests.
    The ping binary is required by test-bpf.
  * autopkgtest: Add dbus-user-session and libpam-systemd dependency to
    root-unittests.
    Without a working D-Bus user session, a lot of the test-bus-* tests are
    skipped.
  * network/link: Fix logic error in matching devices by MAC (Closes: #904198)

 -- Michael Biebl <biebl@debian.org>  Sun, 22 Jul 2018 13:40:15 +0200

systemd (239-6) unstable; urgency=medium

  [ Martin Pitt ]
  * autopkgtest: Install libnss-systemd.
    Make sure that dynamic users can be resolved. This e. g. prevents a
    startup failure for systemd-resolved.
  * autopkgtest: Add missing python3 test dependency for udev test

  [ Michael Biebl ]
  * autopkgtest: Make AppArmor violator test work with merged-usr
  * Make /dev/kvm accessible to local users and group kvm.
    Re-add the uaccess tag to /dev/kvm to make it accessible to local
    users. Access is also granted via group kvm, so create that in
    udev.postinst. (Closes: #887852)
  * Move a few man pages from systemd to systemd-journal-remote.
    The systemd package shipped a few systemd-journal-remote and
    systemd-journal-upload related man pages which really belong into the
    systemd-journal-remote package. Move those man pages into the correct
    package and add a Breaks/Replaces against systemd accordingly.
    (Closes: #903557)
  * autopkgtest: Drop no-longer needed workaround from upstream test
  * Go back to statically allocate system users for timesyncd, networkd and
    resolved.
    There are currently too many open issues related to D-Bus and the usage
    of DynamicUser. (Closes: #902971)
  * Change python3-minimal dependency to python3.
    While we strictly only need python3-minimal, the usage of
    python3-minimal triggers a lintian error: depends-on-python-minimal
  * test: Drop SKIP_INITRD for QEMU-based tests.
    The Debian Linux kernel ships ext4 support as a module, so we require an
    initrd to successfully start the QEMU images.
  * debian/tests/localed-x11-keymap: Deal with absence of
    /etc/default/keyboard more gracefully
  * autopkgtest: Add various dependencies to make upstream test pass on Debian
    - netcat-openbsd: Required by TEST-12-ISSUE-3171.
    - busybox-static: Required by TEST-13-NSPAWN-SMOKE.
    - plymouth: Required by TEST-15-DROPIN and TEST-22-TMPFILES.
  * Drop seccomp system call filter for udev.
    The seccomp based system call whitelist requires at least systemd 239 to
    be the active init and during a dist-upgrade we can't guarantee that
    systemd has been fully configured before udev is restarted.
    The versioned systemd Breaks that was added to udev for #902185 didn't
    really fix this issue, so revert that change again. (Closes: #903224)

 -- Michael Biebl <biebl@debian.org>  Thu, 19 Jul 2018 00:04:54 +0200

systemd (239-5) unstable; urgency=medium

  * Add inverse version restriction of the Breaks to the systemd-shim
    alternative in libpam-systemd.
    Otherwise apt will fail to find an installation path for libpam-systemd
    in cases where libpam-systemd is an indirect dependency. (Closes: #902998)

 -- Michael Biebl <biebl@debian.org>  Thu, 05 Jul 2018 11:50:10 +0200

systemd (239-4) unstable; urgency=medium

  [ Michael Biebl ]
  * Drop outdated section from README.Debian about switching back to SysV init
  * sleep: Fix one more printf format of a fiemap field
  * basic: Add missing comma in raw_clone assembly for sparc
  * bus-util: Make log level lower in request_name_destroy_callback()
  * tmpfiles: Specify access mode for /run/systemd/netif
  * Add Breaks against python-dbusmock (<< 0.18) to systemd.
    The logind and timedated tests in python-dbusmock were broken by the
    latest systemd release and had to be adjusted to work with systemd 239.
    See #902602
  * Drop patches which try to support running systemd services without systemd
    as pid 1.
    No one is currently actively maintaining systemd-shim, which means that
    e.g. running systemd-logind no longer works when systemd is not pid 1.
    Thus drop our no longer working patches. Bump the Breaks against
    systemd-shim accordingly.
    See #895292, #901404, #901405

  [ Martin Pitt ]
  * test: fix networkd-test.py rate limiting and dynamic user

 -- Michael Biebl <biebl@debian.org>  Tue, 03 Jul 2018 23:36:28 +0200

systemd (239-3) unstable; urgency=medium

  * Revert "systemctl: when removing enablement or mask symlinks, cover both
    /run and /etc"
    We currently have packages in the archive which use
    "systemctl --runtime unmask" and are broken by this change.
    This is a intermediate step until it is clear whether upstream will
    revert this commit or whether we will have to update affected packages
    to deal with this changed behaviour.
    See #902287 and https://github.com/systemd/systemd/issues/9393

 -- Michael Biebl <biebl@debian.org>  Wed, 27 Jun 2018 14:46:06 +0200

systemd (239-2) unstable; urgency=medium

  * sleep: Fix printf format of fiemap fields.
    This should fix a FTBFS on ia64.
  * timesync: Change type of drift_freq to int64_t.
    This should fix a FTBFS on x32.
  * Bump systemd Breaks to ensure it is upgraded in lockstep with udev.
    The hardening features used by systemd-udevd.service require systemd 239
    and udev will fail to start with older versions. (Closes: #902185)

 -- Michael Biebl <biebl@debian.org>  Wed, 27 Jun 2018 13:59:24 +0200

systemd (239-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 239
  * Drop alternative iptables-dev Build-Depends.
    It is no longer needed as both Ubuntu and Debian now ship libiptc-dev in
    their latest stable (LTS) release.
  * Drop alternative btrfs-tools Recommends.
    It is no longer needed as btrfs-progs is now available in both Debian
    and Ubuntu and keeping the alternative around prevents the transitional
    package from being autoremoved.
  * Disable installation of RPM macros.
    This avoids having to remove them manually later on.
  * Drop cleanup rules for libtool .la files.
    With the switch to Meson, libtool is no longer used.
  * Drop fallback for older kernels when running the test suite.
    We now assume that we have a kernel newer then 3.13.
  * Stop cleaning up .busname units.
    Those are gone upstream, so we no longer need to remove them manually.
  * Update symbols file for libsystemd0
  * Rebase patches
  * Install new resolvectl tool.
    Don't ship the /sbin/resolvconf compat symlink in the systemd package,
    as this would cause a file conflict with the resolvconf and openresolv
    package.
  * Disable support for "Portable Services"
    This is still an experimental feature.
  * Disable pristine-tar in gbp.conf.
    It is currently not possible to import the systemd v239 tarball using
    pristine-tar due to #902115.
  * Bump Build-Depends on meson to (>= 0.44)
  * Stop setting the path for the kill binary, no longer necessary
  * Stop creating systemd-network and systemd-resolve system user
    systemd-networkd.service and systemd-resolved.service now use
    DynamicUser=yes.

  [ Dimitri John Ledkov ]
  * Run all upstream tests, and then report all that failed.

 -- Michael Biebl <biebl@debian.org>  Sat, 23 Jun 2018 00:18:08 +0200

systemd (238-5) unstable; urgency=medium

  [ Evgeny Vereshchagin ]
  * upstream autopkgtest: Copy journal subdirectories.
    Otherwise logs are missing on failures.

  [ Martin Pitt ]
  * debian/tests/boot-and-services: Ignore cpi.service failure.
    This is apparently a regression in Ubuntu 18.04, not in systemd, so
    ignore it.

  [ Michael Biebl ]
  * sd-bus: Do not try to close already closed fd (Closes: #896781)
  * Use dh_missing to act on uninstalled files.
    The usage of dh_install --fail-missing has been deprecated.
  * meson: Avoid warning about comparison of bool and string.
    The result of this is undefined and will become a hard error in a future
    Meson release.
  * login: Respect --no-wall when cancelling a shutdown request
    (Closes: #897938)
  * Add dependencies of libsystemd-shared to Pre-Depends.
    This is necessary so systemctl is functional at all times during a
    dist-upgrade. (Closes: #897986)
  * Drop dh_strip override, the dbgsym migration is done

  [ Felipe Sateler ]
  * Don't include libmount.h in a header file.
    Kernel and glibc headers both use MS_* constants, but are not in sync, so
    only one of them can be used at a time. Thus, only import them where
    needed. Works around #898743.

 -- Michael Biebl <biebl@debian.org>  Sat, 26 May 2018 10:31:29 +0200

systemd (238-4) unstable; urgency=medium

  [ Michael Biebl ]
  * udev/net-id: Fix check for address to keep interface names stable
  * debian/copyright: Move global wildcard section to the top

  [ Martin Pitt ]
  * Fix daemon reload failures

  [ Laurent Bigonville ]
  * Fix /sys/fs/cgroup mount when using SELinux.
    Since v236, all cgroups except /sys/fs/cgroup/systemd and
    /sys/fs/cgroup/unified are not mounted when SELinux is enabled (even in
    permissive mode). Disabling SELinux completely restores these cgroups.
    This patch fixes that issue by no longer making the assumption that those
    cgroups are mounted by initrd/dracut before systemd is started.

 -- Michael Biebl <biebl@debian.org>  Sun, 01 Apr 2018 13:02:57 +0200

systemd (238-3) unstable; urgency=medium

  [ Martin Pitt ]
  * Enable systemd-sysusers unit and provide correct Debian static u/gids.
    Add a helper script debian/extra/make-sysusers-basic which generates a
    sysusers.d(5) file from Debian's static master passwd/group files.
    systemd 238 now supports  specifying different uid and gid and a
    non-default login shell, so this is possible now. (Closes: #888126)
  * udev README.Debian: Include initrd rebuild and some clarifications in
    migration.
    While initrd update is already being mentioned in the introductory
    section, it is easy to miss when going through the migration steps, so
    explicitly mention it again. Also add a warning about keeping a fallback
    on misconfigurations, and the possibility to migrate one interface at a
    time.
    Thanks to Karl O. Pinc for the suggestions! (Closes: #881769)

  [ Michael Biebl ]
  * basic/macros: Rename noreturn into _noreturn_.
    "noreturn" is reserved and can be used in other header files we include.
    (Closes: #893426)
  * units: Fix SuccessAction that belongs to [Unit] section not [Service]
    section (Closes: #893282)

 -- Michael Biebl <biebl@debian.org>  Tue, 20 Mar 2018 23:22:57 +0100

systemd (238-2) unstable; urgency=medium

  [ Alf Gaida ]
  * core: do not free stack-allocated strings.
    Fixes a crash in systemd when the cpuacct cgroup controller is not
    available. (Closes: #892360)

 -- Michael Biebl <biebl@debian.org>  Sat, 10 Mar 2018 01:12:47 +0100

systemd (238-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 238
    - Fixes systemd-tmpfiles to correctly handle symlinks present in
      non-terminal path components. (CVE-2018-6954, Closes: #890779)
  * Rebase patches
  * Use compat symlinks as provided by upstream.
    As the upstream build system now creates those symlinks for us, we no
    longer have to create them manually.
  * Update symbols file for libsystemd0
  * test-cgroup-util: bail out when running under a buildd environment

  [ Dimitri John Ledkov ]
  * systemd-sysv-install: Fix name initialisation.
    Only initialise NAME after --root optional argument has been parsed,
    otherwise NAME is initialized to e.g. `enable`, instead of to the
    `unit-name`, resulting in failures. (LP: #1752882)

 -- Michael Biebl <biebl@debian.org>  Wed, 07 Mar 2018 23:21:53 +0100

systemd (237-4) unstable; urgency=medium

  [ Gunnar Hjalmarsson ]
  * Fix PO template creation.
    Cherry-pick upstream patches to build a correct systemd.pot including
    the polkit policy files even without policykit-1 being installed.
    (LP: #1707898)

  [ Michael Biebl ]
  * Drop mask for fuse SysV init script.
    The fuse package has removed its SysV init script a long time ago, so
    the mask is no longer needed.
  * Replace two Debian specific patches which cherry-picks from upstream
    master

 -- Michael Biebl <biebl@debian.org>  Wed, 28 Feb 2018 19:18:34 +0100

systemd (237-3) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/tests/boot-smoke: More robust journal checking.
    Also fail the test if calling journalctl fails, and avoid calling it
    twice. See https://github.com/systemd/systemd/pull/8032
  * Simplify PO template creation.
    Use the existing upstream build system instead of a manual call to
    `intltool-update` and `xgettext` to build systemd.pot. Remove the now
    obsolete intltool build dependency, but still explicitly keep gettext.
    (LP: #1707898)
  * Make systemd-sysv-install robust against existing $ROOT.
    Always initialize `$ROOT`, to avoid the script getting confused by an
    existing outside env variable. Also fix the `--root` option to actually
    work, the previous approach was conceptually broken due to how shell
    quoting works. Make the work with `set -u`. (Closes: #890436)

  [ Felipe Sateler ]
  * Backport upstream patch fixing a wrong assert() call (Closes: #890423)

 -- Michael Biebl <biebl@debian.org>  Wed, 14 Feb 2018 23:07:17 +0100

systemd (237-2) unstable; urgency=medium

  * Drop debian/extra/rules/70-debian-uaccess.rules.
    Up-to-date udev rules for U2F devices are shipped in libu2f-udev nowadays.
    (Closes: #889665)
  * service: relax PID file symlink chain checks a bit.
    Let's read the PID file after all if there's a potentially unsafe symlink
    chain in place. But if we do, then refuse taking the PID if its outside of
    the cgroup. (Closes: #889144)

 -- Michael Biebl <biebl@debian.org>  Fri, 09 Feb 2018 23:35:31 +0100

systemd (237-1) unstable; urgency=medium

  * New upstream version 237
  * Rebase patches
  * Update symbols file for libsystemd0
  * Update Vcs-* to point to https://salsa.debian.org
  * Bump Standards-Version to 4.1.3
  * Set Rules-Requires-Root to no

 -- Michael Biebl <biebl@debian.org>  Tue, 30 Jan 2018 01:55:24 +0100

systemd (236-4) unstable; urgency=medium

  [ Felipe Sateler ]
  * Allow systemd-timesyncd to start when libnss-systemd is not installed.
    Pick upstream patch requiring the existence of the systemd-timesync user
    only when running as root, which is not the case for the system unit.
    (Closes: #887343)

  [ Nicolas Braud-Santoni ]
  * debian/copyright: Refer to the CC0 license file (Closes: #882629)

  [ Michael Biebl ]
  * Add Build-Depends on python3-evdev <!nocheck>
    This is used by hwdb/parse_hwdb.py to perform additional validation on
    hwdb files.

 -- Michael Biebl <biebl@debian.org>  Sun, 28 Jan 2018 22:29:32 +0100

systemd (236-3) unstable; urgency=medium

  * Revert "core/execute: RuntimeDirectory= or friends requires mount
    namespace"
    This was making mounts from SSH sessions invisible to the system.
    (Closes: #885325)

 -- Michael Biebl <biebl@debian.org>  Thu, 11 Jan 2018 16:46:04 +0100

systemd (236-2) unstable; urgency=medium

  * Downgrade priority of libudev1 to optional.
    This makes it compliant with recent versions of debian-policy which
    recommends to use priority optional for library packages.
  * Clarify NEWS entry about removal of system users.
    Mention in the recent NEWS entry that the associated system groups
    should be removed as well. (Closes: #885061)
  * cryptsetup-generator: Don't mistake NULL input as OOM.
    Fixes systemd-cryptsetup-generator failing to run during boot.
    (Closes: #885201)
  * analyze: Use normal bus connection for "plot" verb.
    Fixes "systemd-analyze plot" failing to run as root. (Closes: #884506)
  * Stop re-enabling systemd services on every upgrade.
    This was done so changes to the [Install] section would be applied on
    upgrades. Forcefully re-enabling a service might overwrite local
    modifications though and thus far, none of the affected services did
    actually change its [Install] section. So remove this code from the
    maintainer scripts as it was apparently doing more harm then good.
    (Closes: #869354)

 -- Michael Biebl <biebl@debian.org>  Tue, 02 Jan 2018 00:35:14 +0100

systemd (236-1) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/tests/upstream: Only show ≥ warning in journal dumps.
    Showing the entire debug log is too hard to scan visually, and most of
    the time the warnings and errors are sufficient to explain a failure.
    Put the journal files into the artifacts though, in case the debug
    information is necessary.

  [ Michael Biebl ]
  * New upstream version 236
    - nspawn: Adjust path to static resolv.conf to support split usr.
      (Closes: #881310)
    - networkd: Don't stop networkd if CONFIG_FIB_RULES=n in kernel.
      (Closes: #881823)
    - core: Fix segfault in compile_bind_mounts() when BindPaths= or
      BindReadOnlyPaths= is set. (Closes: #883380)
    - meson: Link NSS modules with -z nodelete to fix memory leak in
      nss-systemd. (Closes: #883407)
    - logind: Make sure we don't acces m->action_what if it's not initialized.
      (Closes: #882270)
    - systemctl: Ignore shutdown's "-t" argument. (Closes: #882245)
    - core: Be more defensive if we can't determine per-connection socket
      peer. (Closes: #879603)
    - bpf-firewall: Actually invoke BPF_PROG_ATTACH to check whether
      cgroup/bpf is available. (Closes: #878965)
  * Rebase patches
  * Update symbols file for libsystemd0
  * Bump Standards-Version to 4.1.2
  * Clean up old /var/lib/systemd/clock on upgrade.
    The clock file used by systemd-timesyncd is now stored in
    StateDirectory=systemd/timesync. (Closes: #883605)
  * Stop creating systemd-timesync system user.
    DynamicUser=yes has been enabled for systemd-timesyncd.service so
    allocating a system user statically is no longer necessary.
  * Document removal of systemd-{timesync,journal-gateway,journal-upload} user.
    We no longer create those system users as the corresponding services now
    use DynamicUser=yes. Removing those system users automatically is tricky,
    as the relevant services might be running during upgrade. Add a NEWS
    entry instead which documents this change.
  * Revert "udev-rules: Permission changes for /dev/dri/renderD*"
    This would introduce a new system group "render". As the name is rather
    generic, this needs further discussion first, so revert this change for
    now.

 -- Michael Biebl <biebl@debian.org>  Sun, 17 Dec 2017 21:45:51 +0100

systemd (235-3) unstable; urgency=medium

  [ Michael Biebl ]
  * Switch from XC-Package-Type to Package-Type. As of dpkg-dev 1.15.7
    Package-Type is recognized as an official field name.
  * Install modprobe configuration file to /lib/modprobe.d.
    Otherwise it is not read by kmod. (Closes: #879191)

  [ Felipe Sateler ]
  * Backport upstream (partial) fix for combined DynamicUser= + User=
    UID was not allowed to be different to GID, which is normally the case in
    debian, due to the group users being allocated the GID 100 without an
    equivalent UID 100 being allocated.
  * Backport upstream patches to fully make DynamicUser=yes + static,
    pre-existing User= work.

  [ Martin Pitt ]
  * Add missing python3-minimal dependency to systemd-tests
  * Drop long-obsolete systemd-bus-proxy system user
    systemd-bus-proxy hasn't been shipped since before stretch and never
    created any files. Thus clean up the obsolete system user on upgrades.
    (Closes: #878182)
  * Drop static systemd-journal-gateway system user
    systemd-journal-gatewayd.service now uses DynamicUser=, so we don't need
    to create this statically any more. Don't remove the user on upgrades
    though, as there is likely still be a running process. (Closes: #878183)
  * Use DynamicUser= for systemd-journal-upload.service.
  * Add Recommends: libnss-systemd to systemd-sysv.
    This is useful to actually be able to resolve dynamically created system
    users with DynamicUser=true. This concept is going to be used much more
    in future versions and (hopefully) third-party .services, so pulling it
    into the default installation seems prudent now.
  * resolved: Fix loop on packets with pseudo dns types.
    (CVE-2017-15908, Closes: #880026, LP: #1725351)
  * bpf-firewall: Properly handle kernels without BPF cgroup but with TRIE maps.
    Fixes "Detaching egress BPF: Invalid argument" log spam. (Closes: #878965)
  * Fix MemoryDenyWriteExecution= bypass with pkey_mprotect() (LP: #1725348)

 -- Martin Pitt <mpitt@debian.org>  Wed, 15 Nov 2017 09:34:00 +0100

systemd (235-2) unstable; urgency=medium

  * Revert "tests: when running a manager object in a test, migrate to private
    cgroup subroot first"
    This was causing test suite failures when running inside a chroot.

 -- Michael Biebl <biebl@debian.org>  Wed, 11 Oct 2017 00:46:07 +0200

systemd (235-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 235
    - cryptsetup-generator: use remote-cryptsetup.target when _netdev is
      present (Closes: #852534)
    - tmpfiles: change btmp mode 0600 → 0660 (Closes: #870638)
    - networkd: For IPv6 addresses do not treat IFA_F_DEPRECATED as not ready
      (Closes: #869995)
    - exec-util,conf-files: skip non-executable files in execute_directories()
      (Closes: #867902)
    - man: update udevadm -y/--sysname-match documentation (Closes: #865081)
    - tmpfiles: silently ignore any path that passes through autofs
      (Closes: #805553)
    - shared: end string with % if one was found at the end of a expandible
      string (Closes: #865450)
  * Refresh patches
  * Bump Build-Depends on libmount-dev to (>= 2.30)
  * Install new modprobe.d config file
  * Bump Standards-Version to 4.1.1

  [ Martin Pitt ]
  * Merge logind-kill-off autopkgtest into logind test.
    This was horribly inefficient as a separate test (from commit
    6bd0dab41e), as that cost two VM resets plus accompanying boots; and
    this does not change any state thus does not require this kind of
    isolation.

 -- Michael Biebl <biebl@debian.org>  Tue, 10 Oct 2017 18:29:28 +0200

systemd (234-3) unstable; urgency=medium

  [ Martin Pitt ]
  * Various fixes for the upstream autopkgtest.

  [ Felipe Sateler ]
  * Add fdisk to the dependencies of the upstream autopkgtest.
    The upstream autopkgtest uses sfdisk, which is now in the non-essential
    fdisk package. (Closes: #872119)
  * Disable nss-systemd on udeb builds
  * Correctly disable resolved on udeb builds
  * Help fix collisions in libsystemd-shared symbols by versioning them.
    Backport upstream patch to version the symbols provided in the private
    library, so that they cannot confuse unversioned pam modules or libraries
    linked into them. (Closes: #873708)

  [ Dimitri John Ledkov ]
  * Cherrypick upstream networkd-test.py assertion/check fixes.
    This resolves ADT test suite failures, when running tests under lxc/lxd
    providers.
  * Cherrypick arm* seccomp fixes.
    This should resolve ADT test failures, on arm64, when running as root.
  * Disable KillUserProcesses, yet again, with meson this time.
  * initramfs-tools: trigger udevadm add actions with subsystems first.
    This updates the initramfs-tools init-top udev script to trigger udevadm
    actions with type specified. This mimics the systemd-udev-trigger.service.
    Without type specified only devices are triggered, but triggering
    subsystems may also be required and should happen before triggering the
    devices. This is the case for example on s390x with zdev generated udev
    rules. (LP: #1713536)

  [ Michael Biebl ]
  * (Re)add --quiet flag to addgroup calls.
    This is now safe with adduser having been fixed to no longer suppress
    fatal error messages if --quiet is used. (Closes: #837871)
  * Switch back to default GCC (Closes: #873661)
  * Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf.
    All major NTP implementations ship a native service file nowadays with a
    Conflicts=systemd-timesyncd.service so this drop-in is no longer
    necessary. (Closes: #873185)

 -- Michael Biebl <biebl@debian.org>  Mon, 04 Sep 2017 00:17:00 +0200

systemd (234-2.3) unstable; urgency=high

  * Non-maintainer upload.
  * Also switch to g++-6 temporarily (needed for some tests):
    - Add g++-6 to Build-Depends
    - Export CXX = g++-6

 -- Cyril Brulebois <kibi@debian.org>  Thu, 24 Aug 2017 02:40:53 +0200

systemd (234-2.2) unstable; urgency=high

  * Non-maintainer upload.
  * Switch to gcc-6 on all architectures, working around an FTBFS on mips64el,
    apparently due to a gcc-7 bug (See: #871514):
    - Add gcc-6 to Build-Depends in debian/control
    - Export CC = gcc-6 in debian/rules

 -- Cyril Brulebois <kibi@debian.org>  Wed, 23 Aug 2017 22:53:09 +0000

systemd (234-2.1) unstable; urgency=high

  * Non-maintainer upload.
  * Fix missing 60-input-id.rules in udev-udeb, which breaks the graphical
    version of the Debian Installer, as no key presses or mouse events get
    processed (Closes: #872598).

 -- Cyril Brulebois <kibi@debian.org>  Wed, 23 Aug 2017 20:41:33 +0200

systemd (234-2) unstable; urgency=medium

  [ Martin Pitt ]
  * udev README.Debian: Fix name of example *.link file

  [ Felipe Sateler ]
  * test-condition: Don't assume that all non-root users are normal users.
    Automated builders may run under a dedicated system user, and this test
    would fail that.

  [ Michael Biebl ]
  * Revert "units: Tell login to preserve environment"
    Environment=LANG= LANGUAGE= LC_CTYPE= ... as used in the getty units is
    not unsetting the variables but instead sets it to an empty var. Passing
    that environment to login messes up the system locale settings and
    breaks programs like gpg-agent.
    (Closes: #868695)

 -- Michael Biebl <biebl@debian.org>  Thu, 20 Jul 2017 15:13:42 +0200

systemd (234-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 234
    - tmpfiles: Create /var/log/lastlog if it does not exist.
      (Closes: #866313)
    - network: Bridge vlan without PVID. (Closes: #859941)
  * Rebase patches
  * Switch build system from autotools to meson.
    Update the Build-Depends accordingly.
  * Update fsckd patch for meson
  * udev autopkgtest: no longer install test-udev binary manually.
    This is now done by the upstream build system.
  * Update symbols file for libsystemd0
  * Update lintian override for systemd-tests.
    Upstream now installs manual and unsafe tests in subdirectories of
    /usr/lib/systemd/tests/, so ignore those as well.
  * Bump Standards-Version to 4.0.0
  * Change priority of libnss-* packages from extra to optional.
  * Use UTF-8 locale when building the package.
    Otherwise meson will be pretty unhappy when trying to process files with
    unicode characters. Use C.UTF-8 as this locale is pretty much guaranteed
    to be available everywhere.
  * Mark test-timesync as manual.
    The test tries to setup inotify watches for /run/systemd/netif/links
    which fails in a buildd environment where systemd is not active.
  * Do not link udev against libsystemd-shared.
    We ship udev in a separate binary package, so can't use
    libsystemd-shared, which is part of the systemd binary package.
  * Avoid requiring a "kvm" system group.
    This group is not universally available and as a result generates a
    warning during boot. As kvm is only really useful if the qemu package is
    installed and this package already takes care of setting up the proper
    permissions for /dev/kvm, drop this rule from 50-udev-default.rules.

  [ Martin Pitt ]
  * udev README.Debian: Update transitional rules and mention *.link files.
    - 01-mac-for-usb.link got replaced with 73-usb-net-by-mac.rules
    - /etc/systemd/network/50-virtio-kernel-names.link is an upgrade
      transition for VMs with virtio
    - Describe *.link files as a simpler/less error prone (but also less
      flexible) way of customizing interface names. (Closes: #868002)

 -- Michael Biebl <biebl@debian.org>  Thu, 13 Jul 2017 17:38:28 +0200

systemd (233-10) unstable; urgency=medium

  [ Martin Pitt ]
  * Adjust var-lib-machines.mount target.
    Upstream PR #6095 changed the location to
    {remote-fs,machines}.target.wants, so just install all available ones.

  [ Dimitri John Ledkov ]
  * Fix out-of-bounds write in systemd-resolved.
    CVE-2017-9445 (Closes: #866147, LP: #1695546)

  [ Michael Biebl ]
  * Be truly quiet in systemctl -q is-enabled (Closes: #866579)
  * Improve RLIMIT_NOFILE handling.
    Use /proc/sys/fs/nr_open to find the current limit of open files
    compiled into the kernel instead of using a hard-coded value of 65536
    for RLIMIT_NOFILE. (Closes: #865449)

  [ Nicolas Braud-Santoni ]
  * debian/extra/rules: Use updated U2F ruleset.
    This ruleset comes from Yubico's libu2f-host. (Closes: #824532)

 -- Michael Biebl <biebl@debian.org>  Mon, 03 Jul 2017 18:51:58 +0200

systemd (233-9) unstable; urgency=medium

  * hwdb: Use path_join() to generate the hwdb_bin path.
    This ensures /lib/udev/hwdb.bin gets the correct SELinux context. Having
    double slashes in the path makes selabel_lookup_raw() return the wrong
    context. (Closes: #851933)
  * Drop no longer needed Breaks against usb-modeswitch
  * Drop Breaks for packages shipping rcS init scripts.
    This transition was completed in stretch.

 -- Michael Biebl <biebl@debian.org>  Mon, 19 Jun 2017 15:10:14 +0200

systemd (233-8) experimental; urgency=medium

  * Bump debhelper compatibility level to 10
  * Drop versioned Build-Depends on dpkg-dev.
    It's no longer necessary as even Jessie ships a new enough version.
  * timesyncd: don't use compiled-in list if FallbackNTP has been configured
    explicitly (Closes: #861769)
  * resolved: fix null pointer p->question dereferencing.
    This fixes a bug which allowed a remote DoS (daemon crash) via a crafted
    DNS response with an empty question section.
    Fixes: CVE-2017-9217 (Closes: #863277)

 -- Michael Biebl <biebl@debian.org>  Mon, 29 May 2017 14:12:08 +0200

systemd (233-7) experimental; urgency=medium

  [ Michael Biebl ]
  * basic/journal-importer: Fix unaligned access in get_data_size()
    (Closes: #862062)
  * ima: Ensure policy exists before asking the kernel to load it
    (Closes: #863111)
  * Add Depends: procps to systemd.
    It's required by /usr/lib/systemd/user/systemd-exit.service which calls
    /bin/kill to stop the systemd --user instance. (Closes: #862292)