changelog

systemd (241-7~deb10u6co1) UNRELEASED; urgency=medium

  * PLEASE SUMMARIZE remaining Apertis changes

 -- Apertis CI <devel@lists.apertis.org>  Fri, 19 Feb 2021 14:34:31 +0000

systemd (241-7~deb10u6) buster; urgency=medium

  * journal: do not trigger assertion when journal_file_close() get NULL
    (Closes: #975561)
  * test-bpf: skip test when run inside containers.
    The test reliably fails inside LXC and Docker when run on a new enough
    kernel. It's unclear whether this is a kernel, LXC/Docker or systemd
    issue and apparently there is no real interest to get this fixed, so
    let's skip this test.
  * autopkgtest: mark networkd-test.py as flaky.
    See https://github.com/systemd/systemd/issues/18357
    and https://github.com/systemd/systemd/issues/18196

 -- Michael Biebl <biebl@debian.org>  Fri, 29 Jan 2021 15:16:06 +0100

systemd (241-7~deb10u5) buster; urgency=medium

  * basic/cap-list: parse/print numerical capabilities (Closes: #964926)
  * missing: add new Linux capabilities.
    Linux kernel v5.8 adds two new capabilities. Make sure we can recognize
    them even when built with an older kernel.
  * networkd: do not generate MAC for bridge device (Closes: #963488)

 -- Michael Biebl <biebl@debian.org>  Sat, 24 Oct 2020 20:44:48 +0200

systemd (241-7~deb10u4co5) apertis; urgency=medium

  * Force the call of systemd-journal-flush before `/var` unmount.
    The problem with failed `/var` unmount placed on separate partition
    have a long story: https://github.com/systemd/systemd/issues/867
    According messages after the fix integrated into upstream -- there are
    some corner cases which aren't fully fixed by patches adding [relinquish
    options](https://gitlab.apertis.org/pkg/systemd/-/merge_requests/26)
    In case of ostree-based images we have a similar issue since `/var` is
    bind-mounted in initramfs. Systemd is trying to unmount `/var` on
    shutdown, however `ExecStop=` command from `systemd-journal-flush`
    service is not executed during shutdown.
    By adding `PartOf=var.mount` into service file we force the
    `systemd-journal-flush.service` to be called prior the `/var` unmount.
    This allow to unlock the bind-mount, since `journald` have a chance to
    re-link it's journal into `/run` with `journalctl
    --smart-relinquish-var` call.

 -- Denis Pynkin <denis.pynkin@collabora.com>  Tue, 17 Nov 2020 23:54:02 +0300

systemd (241-7~deb10u4co4) apertis; urgency=medium

  * Handle new capabilities gracefully (PR 16424)
    Backported PR 16424 to avoid message
    'Failed to parse bus message: Invalid argument'
    with an updated kernel using new capabilities.

 -- Denis Pynkin <denis.pynkin@collabora.com>  Sun, 01 Nov 2020 17:54:06 +0300

systemd (241-7~deb10u4co3) apertis; urgency=medium

  * systemd-boot: backport fix of menu ordering with boot counting
    systemd-boot selects the last valid entry by default, not the first, which
    prevent correct rollback.

 -- Frédéric Danis <frederic.danis@collabora.com>  Wed, 23 Sep 2020 17:32:23 +0200

systemd (241-7~deb10u4co2) apertis; urgency=medium

  * journald: Backport support for --relinquish and --smart-relinquish options.
    Newer version of systemd-journald support the --relinquish and
    --smart-relinquish options that enable cleaner handling of mounts at
    shutdown as journald can be told to close any logging under
    /var/log/journal so that the /var filesystem can be unmounted should it be
    on a separate partition.
    Backport this feature as it enables shutdown without failures, a highly
    desirable trait in embedded products using systemd.

 -- Martyn Welch <martyn@hades.welchs.me.uk>  Fri, 21 Aug 2020 14:16:45 +0100

systemd (241-7~deb10u4co1) apertis; urgency=medium

  * Merge changes from Debian Buster. Remaining changes:
    + Fix syntax error in shell script
    + Fix new bashisms introduced on update.
    + AppArmor: Fix conflict with chaiwala-apparmor-profiles
    + AppArmor: Add systemd-logind profile
    + Don’t build against libdw, since 0.158 isn’t available in target.

 -- Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>  Tue, 26 May 2020 11:41:53 +0000

systemd (241-7~deb10u4) buster; urgency=medium

  * polkit: when authorizing via PolicyKit re-resolve callback/userdata
    instead of caching it.
    This fixes a heap use-after-free vulnerability in systemd, when
    asynchronous PolicyKit queries are performed while handling DBus messages.
    CVE-2020-1712 (Closes: #950732)
  * Install 60-block.rules in udev-udeb and initramfs-tools.
    The block device rules were split out from 60-persistent-storage.rules
    into its own rules file in v220. Those rules ensure that change events
    are emitted and the udev db is updated after metadata changes.
    Thanks to Pascal Hambourg (Closes: #958397)

 -- Michael Biebl <biebl@debian.org>  Mon, 27 Apr 2020 19:02:57 +0200

systemd (241-7~deb10u3) buster; urgency=medium

  * core: set fs.file-max sysctl to LONG_MAX rather than ULONG_MAX.
    Since kernel 5.2 (but also stable kernels like 4.19.53) the kernel
    thankfully returns proper errors when we write a value out of range to
    the sysctl. Which however breaks writing ULONG_MAX to request the
    maximum value. Hence let's write the new maximum value instead,
    LONG_MAX. (Closes: #945018)
  * core: change ownership/mode of the execution directories also for static
    users.
    This ensures that execution directories like CacheDirectory and
    StateDirectory are properly chowned to the user specified in User= before
    launching the service. (Closes: #919231)

 -- Michael Biebl <biebl@debian.org>  Wed, 29 Jan 2020 19:07:53 +0100

systemd (241-7~deb10u2) buster; urgency=medium

  * core: never propagate reload failure to service result.
    Fixes a regression introduced in v239 where the main process of a
    service unit gets killed on reload if ExecReload fails. (Closes: #936032)
  * shared/seccomp: add sync_file_range2.
    Some architectures need the arguments to be reordered because of alignment
    issues. Otherwise, it's the same as sync_file_range.
    Fixes sync_file_range failures in nspawn containers on arm, ppc.
    (Closes: #935091)
  * core: factor root_directory application out of apply_working_directory.
    Fixes RootDirectory not working when used in combination with User.
    (Closes: #939408)
  * shared/bus-util: drop trusted annotation from
    bus_open_system_watch_bind_with_description().
    This ensures that access controls on systemd-resolved's D-Bus interface
    are enforced properly.
    (CVE-2019-15718, Closes: #939353)
  * login: add a missing error check for session_set_leader()
    Fixes assertion due to insufficient function return check.
    (Closes: #939998)
  * d/e/r/73-usb-net-by-mac.rules: import net.ifnames only for network devices
    (Closes: #934589)
  * d/e/r/73-usb-net-by-mac.rules: skip if iface name was provided by user-space
  * namespace: make MountFlags=shared work again (Closes: #939551)
  * mount/generators: do not make unit wanted by its device unit.
    Among other things, this fixes StopWhenUnneeded=true being broken for
    mount units. (Closes: #941758)

 -- Michael Biebl <biebl@debian.org>  Wed, 16 Oct 2019 15:24:54 +0200

systemd (241-7~deb10u1co4) apertis; urgency=medium

  * AppArmor: Fix conflict with chaiwala-apparmor-profiles

 -- Frédéric Danis <frederic.danis@collabora.com>  Thu, 19 Dec 2019 11:15:14 +0100

systemd (241-7~deb10u1co3) apertis; urgency=medium

  * AppArmor: Add systemd-logind profile

 -- Frédéric Danis <frederic.danis@collabora.com>  Mon, 16 Dec 2019 11:35:22 +0100

systemd (241-7~deb10u1co2) apertis; urgency=medium

  * Don’t build against libdw, since 0.158 isn’t available in target.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 12 Sep 2019 12:50:38 +0200

systemd (241-7~deb10u1co1) apertis; urgency=medium

  * Merge from Debian. Remaining changes:
    + Sync changes from Debian Buster
    + Fix syntax error in shell script
    + Fix new bashisms introduced on update.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 12 Sep 2019 12:00:35 +0200

systemd (241-7~deb10u1) buster; urgency=medium

  * Rebuild for buster

 -- Michael Biebl <biebl@debian.org>  Tue, 20 Aug 2019 13:50:42 +0200

systemd (241-7) unstable; urgency=medium

  [ Michael Biebl ]
  * network: Fix failure to bring up interface with Linux kernel 5.2.
    Backport two patches from systemd master in order to fix a bug with 5.2
    kernels where the network interface fails to come up with the following
    error: "enp3s0: Could not bring up interface: Invalid argument"
    (Closes: #931636)
  * Use /usr/sbin/nologin as nologin shell.
    In Debian the nologin shell is installed in /usr/sbin, not /sbin.
    (Closes: #931850)

  [ Mert Dirik ]
  * 40-systemd: Don't fail if SysV init script uses set -u and $1 is unset
    (Closes: #931719)

 -- Michael Biebl <biebl@debian.org>  Thu, 18 Jul 2019 19:38:23 +0200

systemd (241-6) unstable; urgency=medium

  * ask-password: Prevent buffer overflow when reading from keyring.
    Fixes a possible memory corruption that causes systemd-cryptsetup to
    crash either when a single large password is used or when multiple
    passwords have already been pushed to the keyring. (Closes: #929726)
  * Clarify documentation regarding %h/%u/%U specifiers.
    Make it clear, that setting "User=" has no effect on those specifiers.
    Also ensure that "%h" is actually resolved to "/root" for the system
    manager instance as documented in the systemd.unit man page.
    (Closes: #927911)
  * network: Behave more gracefully when IPv6 has been disabled.
    Ignore any configured IPv6 settings when IPv6 has been disabled in the
    kernel via sysctl. Instead of failing completely, continue and log a
    warning instead. (Closes: #929469)

 -- Michael Biebl <biebl@debian.org>  Mon, 08 Jul 2019 11:27:51 +0200

systemd (241-5co3) apertis; urgency=medium

  * Fix new bashisms introduced on update.

 -- Frederic Dalleau <frederic.dalleau@collabora.com>  Thu, 15 Aug 2019 15:47:38 +0000

systemd (241-5co2) apertis; urgency=medium

  * Fix syntax error in shell script

 -- Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>  Mon, 12 Aug 2019 20:34:33 +0530

systemd (241-5co1) apertis; urgency=medium

  [ Ritesh Raj Sarraf ]
  * Refresh patches
  * Sync changes from Debian Buster

 -- Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>  Thu, 08 Aug 2019 04:20:28 +0000

systemd (241-5) unstable; urgency=medium

  * Revert "Add check to switch VTs only between K_XLATE or K_UNICODE"
    This change left the keyboard in an unusable state when exiting an X
    session. (Closes: #929229)

 -- Michael Biebl <biebl@debian.org>  Fri, 24 May 2019 22:58:59 +0200

systemd (241-4) unstable; urgency=medium

  * journal-remote: Do not request Content-Length if Transfer-Encoding is
    chunked (Closes: #927008)
  * systemctl: Restore "systemctl reboot ARG" functionality.
    Fixes a regression introduced in v240. (Closes: #928659)
  * random-util: Eat up bad RDRAND values seen on AMD CPUs.
    Some AMD CPUs return bogus data via RDRAND after a suspend/resume cycle
    while still reporting success via the carry flag.
    Filter out invalid data like -1 (and also 0, just to be sure).
    (Closes: #921267)
  * Add check to switch VTs only between K_XLATE or K_UNICODE.
    Switching to K_UNICODE from other than L_XLATE can make the keyboard
    unusable and possibly leak keypresses from X.
    (CVE-2018-20839, Closes: #929116)
  * Document that DRM render nodes are now owned by group "render"
    (Closes: #926886)

 -- Michael Biebl <biebl@debian.org>  Fri, 17 May 2019 21:16:33 +0200

systemd (241-3) unstable; urgency=high

  [ Michael Biebl ]
  * Drop systemd-shim alternative from libpam-systemd.
    A fixed systemd-shim package which works with newer versions of systemd
    is unlikely to happen given that the systemd-shim package has been
    removed from the archive. Drop the alternative dependency from
    libpam-systemd accordingly.
  * Properly remove duplicate directories from systemd package.
    When removing duplicate directories from the systemd package, sort the
    list of directories in reverse order so we properly delete nested
    directories.
  * udev: Run programs in the specified order (Closes: #925190)
  * bash-completion: Use default completion for redirect operators
    (Closes: #924541)
  * networkd: Clarify that IPv6 RA uses our own stack, no the kernel's
    (Closes: #815582)
  * Revert "Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf"
    Apparently Conflicts= are not a reliable mechanism to ensure alternative
    NTP implementations take precedence over systemd-timesyncd.
    (Closes: #902026)
  * network: Fix routing policy rule issue.
    When multiple links request a routing policy, make sure they are all
    applied correctly. (Closes: #924406)
  * pam-systemd: Use secure_getenv() rather than getenv()
    Fixes a vulnerability in the systemd PAM module which insecurely uses
    the environment and lacks seat verification permitting spoofing an
    active session to PolicyKit. (CVE-2019-3842)

  [ Martin Pitt ]
  * Enable udev autopkgtest in containers.
    This test doesn't actually need udev.service (which is disabled in
    containers) and works fine in LXC.
  * Enable boot-and-service autopkgtest in containers
    - Skip tests which can't work in containers.
    - Add missing rsyslog test dependency.
    - e2scrub_reap.service fails in containers, ignore (filed as #926138)
    - Relax pgrep pattern for gdm, as there's no wayland session in
      containers.

 -- Michael Biebl <biebl@debian.org>  Mon, 08 Apr 2019 12:59:32 +0200

systemd (241-2) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/tests/boot-smoke: Create journal and udevdb artifacts on all
    failures
  * autopkgtests: Replace obsolete $ADT_* variables
  * networkd-test: Ignore failures of test_route_only_dns* in containers.
    This test exposes a race condition when running in LXC, see issue #11848
    for details. Until that is understood and fixed, skip the test as it's
    not a recent regression. (Closes: #924539)
  * Bump Standards-Version to 4.3.0.
    No changes necessary.
  * debian/tests/boot-smoke: Only check current boot for connection timeouts.
    Otherwise we'll catch some
        Failed to resolve group 'render': Connection timed out
    messages that happen in earlier boots during VM setup, before the
    "render" group is created.
    Fixes https://github.com/systemd/systemd/issues/11875
  * timedated: Fix emitted value when ntp client is enabled/disabled.
    Fixes a regression introduced in 241.
  * debian/tests/timedated: Check enabling/disabling NTP.
    Assert that `timedatectl set-ntp` correctly controls the service, sets
    the `org.freedesktop.timedate1 NTP` property, and sends the right
    `PropertiesChanged` signal.
    This reproduces <https://github.com/systemd/systemd/issues/11944> and
    also the earlier <https://github.com/systemd/systemd/issues/9672>.

  [ Michael Biebl ]
  * Disable fallback DNS servers in resolved (Closes: #923081)
  * cgtop: Fix processing of controllers other than CPU (Closes: #921280)
  * udev: Restore debug level when logging a failure in the external prog
    called by IMPORT{program} (Closes: #924199)
  * core: Remove "." path components from required mount paths.
    Fixes mount related failures when a user's home directory contains "/./"
    (Closes: #923881)
  * udev.init: Use new s-s-d --notify-await to start udev daemon.
    Fixes a race condition during startup under SysV init.
    Add versioned dependency on dpkg (>= 1.19.3) to ensure that a version
    of start-stop-daemon which supports --notify-await is installed.
    (Closes: #908796)
  * Make /dev/dri/renderD* accessible to group "render"
    Follow upstream and make render nodes available to a dedicated system
    group "render" instead of "video". Keep the uaccess tag for local,
    active users.

 -- Michael Biebl <biebl@debian.org>  Fri, 15 Mar 2019 18:33:54 +0100

systemd (241-1) unstable; urgency=medium

  [ Adam Borowski ]
  * Make libpam-systemd Provide: logind, default-logind.
    This allows alternate logind implementations such as elogind, without
    having to recompile every dependent package -- as long as the client API
    remains compatible.
    These new virtual packages got policy-approved in #917431. (Closes: #915407)

  [ Felipe Sateler ]
  * New upstream version 241
    - Refresh patches
    - Backport upstream fix for Driver= matches in .network files

  [ Martin Pitt ]
  * debian/libsystemd0.symbols: Add new symbol from release 241
  * Fix various bugs and races in networkd tests.
    This should get the autopkgtest back to green, which regressed with
    dnsmasq 2.80.

 -- Felipe Sateler <fsateler@debian.org>  Thu, 21 Feb 2019 20:10:15 -0300

systemd (240-6) unstable; urgency=high

  * High urgency as this fixes a vulnerability.

  [ Felipe Sateler ]
  * Reenable pristine-tar in gbp.conf.
    The pristine-tar bug has been fixed, so we can use it again.
    This reverts commit 9fcfbbf6fea15eacfa3fad74240431c5f2c3300e.
  * d/watch: add version mangle to transform -rc to ~rc.
    Upstream has started releasing rcs, so let's account for that
  * Fix comment about why we disable hwclock.service.
    Systemd nowadays doesn't do it itself because the kernel does it on its
    own when necessary, and when not, it is not safe to save the hwclock (eg,
    there is no certainty the system clock
    is correct)
  * udev: Backport upstream preventing mass killings when not running under
    systemd (Closes: #918764)

  [ Dimitri John Ledkov ]
  * debian/tests/storage: improve cleanups.
    On fast ppc64el machines, cryptsetup start job may not complete by the
    time tearDown is executed. In that case stop, causes to simply cancel the
    start job without actually cleaning up the dmsetup node. This leads to
    failing subsequent test as it no longer starts with a clean device. Thus
    ensure the systemd-cryptsetup unit is started, before stopping it.
    Also rmmod scsi_debug module at the end, to allow re-running the test in a
    loop.
  * debian/tests/upstream: Mark TEST-13-NSPAWN-SMOKE as flakey.
  * debian/tests/control: add socat to upstream tests for pull #11591
  * Blacklist TEST-10-ISSUE-2467 #11706
  * debian/tests/storage: fix for LUKS2 and avoid interactive password
    prompts.

  [ Martin Pitt ]
  * udevadm: Fix segfault with subsystem-match containing '/'
    (Closes: #919206)
  * sd-bus: if we receive an invalid dbus message, ignore and proceed
  * sd-bus: enforce a size limit on D-Bus object paths.
    This avoids accessing/modifying memory outside of the allocated stack
    region by sending specially crafted D-Bus messages with very large object
    paths.
    Vulnerability discovered by Chris Coulson <chris.coulson@canonical.com>,
    patch provided by Riccardo Schirone <rschiron@redhat.com>.
    (CVE-2019-6454)

 -- Martin Pitt <mpitt@debian.org>  Mon, 18 Feb 2019 13:54:04 +0000

systemd (240-5co3) apertis; urgency=medium

  * d/patches/disable-failing-tests.patch
    - Disable tests failing in Bosch's build environment (APERTIS-6048)
    - test-netlink, test-stat-util

 -- Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>  Tue, 21 May 2019 09:43:06 +0530

systemd (240-5co2) apertis; urgency=medium

  * Uncomment code for initramfs compatibility.
    Forgot to uncomment this code by occasion.

 -- Denis Pynkin <denis.pynkin@collabora.com>  Thu, 14 Feb 2019 13:58:11 +0000

systemd (240-5co1) apertis; urgency=medium

  * Add patches removing bashisms from kernel-install.
    Adapt kernel-install and parts for /bin/sh.
  * Call `kernel-install` on kernel install and remove.
    Set appropriate symlinks for kernel-install script to copy the kernel
    and initramfs to EFI partition with generation of EFI loader entry
    during kernel package install anr remove them on deinstallation.
  * Add systemd-boot binary package.
    Move all stuff related to EFI boot into separate package.
  * Call `kernel-install` on changes in initramfs.
    Allow to update the EFI loader entry on changes in initramfs.

 -- Denis Pynkin <denis.pynkin@collabora.com>  Wed, 13 Feb 2019 16:43:19 +0000

systemd (240-5) unstable; urgency=medium

  [ Felipe Sateler ]
  * Revert interface renaming changes. (Closes: #919390)

  [ Martin Pitt ]
  * process-util: Fix memory leak (Closes: #920018)

 -- Martin Pitt <mpitt@debian.org>  Sun, 27 Jan 2019 21:33:07 +0000

systemd (240-4) unstable; urgency=medium

  [ Benjamin Drung ]
  * Fix shellcheck issues in initramfs-tools scripts

  [ Michael Biebl ]
  * Import patches from v240-stable branch (up to f02b5472c6)
    - Fixes a problem in logind closing the controlling terminal when using
      startx. (Closes: #918927)
    - Fixes various journald vulnerabilities via attacker controlled alloca.
      (CVE-2018-16864, CVE-2018-16865, Closes: #918841, Closes: #918848)
  * sd-device-monitor: Fix ordering of setting buffer size.
    Fixes an issue with uevents not being processed properly during coldplug
    stage and some kernel modules not being loaded via "udevadm trigger".
    (Closes: #917607)
  * meson: Stop setting -fPIE globally.
    Setting -fPIE globally can lead to miscompilations on certain
    architectures. Instead use the b_pie=true build option, which was
    introduced in meson 0.49. Bump the Build-Depends accordingly.
    (Closes: #909396)

 -- Michael Biebl <biebl@debian.org>  Sat, 12 Jan 2019 21:49:44 +0100

systemd (240-3) unstable; urgency=medium

  * udev.init: Trigger add events for subsystems.
    Update the SysV init script and mimic the behaviour of the initramfs and
    systemd-udev-trigger.service which first trigger subsystems and then
    devices during the coldplug stage.
  * udevadm: Refuse to run trigger, control, settle and monitor commands in
    chroot (Closes: #917633)
  * network: Set link state configuring before setting addresses.
    Fixes a crash in systemd-networkd caused by an assertion failure.
    (Closes: #918658)
  * libudev-util: Make util_replace_whitespace() read only len characters.
    Fixes a regression where /dev/disk/by-id/ names had additional
    underscores.
  * man: Update color of journal logs in DEBUG level (Closes: #917948)
  * Remove old state directory of systemd-timesyncd on upgrades.
    Otherwise timesyncd will fail to update the clock file if it was created
    as /var/lib/private/systemd/timesync/clock.
    This was the case when the service was using DynamicUser=yes which it no
    longer does in v240. (Closes: #918190)

 -- Michael Biebl <biebl@debian.org>  Wed, 09 Jan 2019 18:40:57 +0100

systemd (240-2) unstable; urgency=medium

  * Pass separate dev_t var to device_path_parse_major_minor.
    Fixes FTBFS on mips/mipsel (MIPS/O32). (Closes: #917195)
  * test-json: Check absolute and relative difference in floating point test.
    Fixes FTBFS due to test-suite failures on armel, armhf and hppa.
    (Closes: #917215)
  * sd-device: Fix segfault when error occurs in device_new_from_{nulstr,strv}()
    Fixes a segfault in systemd-udevd when debug logging is enabled.
  * udev-event: Do not read stdout or stderr if the pipefd is not created.
    This fixes problems with device-mapper symlinks no longer being created
    or certain devices not being marked as ready. (Closes: #917124)
  * Don't bump fs.nr_open in PID 1.
    In v240, systemd bumped fs.nr_open in PID 1 to the highest possible
    value. Processes that are spawned directly by systemd, will have
    RLIMIT_NOFILE be set to 512K (hard).
    pam_limits in Debian defaults to "set_all", i.e. for limits which are
    not explicitly configured in /etc/security/limits.conf, the value from
    PID 1 is taken, which means for login sessions, RLIMIT_NOFILE is set to
    the highest possible value instead of 512K. Not every software is able
    to deal with such an RLIMIT_NOFILE properly.
    While this is arguably a questionable default in Debian's pam_limit,
    work around this problem by not bumping fs.nr_open in PID 1.
    (Closes: #917167)

 -- Michael Biebl <biebl@debian.org>  Thu, 27 Dec 2018 14:03:57 +0100

systemd (240-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 240
    - core: Skip cgroup_subtree_mask_valid update if UNIT_STUB
      (Closes: #903011)
    - machined: Rework referencing of machine scopes from machined
      (Closes: #903288)
    - timesync: Fix serialization of IP address
      (Closes: #916516)
    - core: Don't track jobs-finishing-during-reload explicitly
      (Closes: #916678)
  * Rebase patches
  * Install new systemd-id128 binary
  * Update symbols file for libsystemd0
  * Update nss build options

  [ Martin Pitt ]
  * tests: Disable some flaky upstream tests.
    See https://github.com/systemd/systemd/issues/11195
  * tests: Disable flaky TEST-17-UDEV-WANTS upstream test.
    See https://github.com/systemd/systemd/issues/11195

 -- Michael Biebl <biebl@debian.org>  Sat, 22 Dec 2018 16:01:43 +0100

systemd (239-15) unstable; urgency=medium

  [ Felipe Sateler ]
  * Fix container check in udev init script.
    Udev needs writable /sys, so the init script tried to check before
    starting. Unfortunately, the check was inverted. Let's add the missing
    '!' to negate the check.
    (Closes: #915261)
  * Add myself to uploaders

  [ Michael Biebl ]
  * Remove obsolete systemd-shim conffile on upgrades.
    The D-Bus policy file was dropped from the systemd-shim package in
    version 8-4, but apparently there are cases where users removed the
    package before that cleanup happened. The D-Bus policy file that was
    shipped by systemd-shim was much more restrictive and now prevents
    calling GetDynamicUsers() and other recent APIs on systemd Manager.
    (Closes: #914285)

 -- Felipe Sateler <fsateler@debian.org>  Wed, 05 Dec 2018 21:03:34 -0300

systemd (239-14) unstable; urgency=medium

  [ Michael Biebl ]
  * autopkgtest: Drop test_custom_cgroup_cleanup from boot-and-services
  * resolved: Increase size of TCP stub replies (Closes: #915049)
  * meson: Unify linux/stat.h check with other checks and use _GNU_SOURCE.
    Fixes a build failure with glibc 2.28.
  * Drop procps dependency from systemd.
    The systemd-exit.service user service no longer uses the "kill" binary.
  * Simplify container check in udev SysV init script.
    Instead of using "ps" to detect a container environment, simply test if
    /sys is writable. This matches what's used in systemd-udevd.service via
    ConditionPathIsReadWrite=/sys and follows
    https://www.freedesktop.org/wiki/Software/systemd/ContainerInterface/
    This means we no longer need procps, so drop that dependency from the
    udev package. (Closes: #915095)

  [ Mert Dirik ]
  * 40-systemd: Honour __init_d_script_name.
    Make /lib/lsb/init-functions.d/40-systemd use __init_d_script_name
    (if available) to figure out real script name. (Closes: #826214)
  * 40-systemd: Improve heuristics for init-d-script.
    Improve heuristics for scripts run via init-d-script so that the
    redirection works even for older init-d-script versions without the
    __init_d_script_name variable.

 -- Michael Biebl <biebl@debian.org>  Sun, 02 Dec 2018 01:00:01 +0100

systemd (239-13) unstable; urgency=medium

  * autopktest: Add e2fsprogs dependency to upstream test.
    Some of the upstream tests require mkfs.ext4. (Closes: #887250)
  * systemctl: Tell update-rc.d to skip creating any systemd symlinks.
    When calling update-rc.d via systemd-sysv-install, tell it to skip
    creating any systemd symlinks as we want to handle those directly in
    systemctl. Older update-rc.d versions will ignore that request, but
    that's ok. This means we don't need a versioned dependency against
    init-system-helpers. (Closes: #743217)
  * pam_systemd: Suppress LOG_DEBUG log messages if debugging is off
    (Closes: #825949)
  * Drop cgroup-don-t-trim-cgroup-trees-created-by-someone-el.patch.
    The patch is no longer necessary as lxc.service now uses Delegate=yes.
  * Remove obsolete Replaces from pre-jessie

 -- Michael Biebl <biebl@debian.org>  Tue, 20 Nov 2018 19:44:39 +0100

systemd (239-12) unstable; urgency=high

  [ Martin Pitt ]
  * Enable QEMU on more architectures in "upstream" autopkgtest.
    Taken from the Ubuntu package, so apparently QEMU works well enough on
    these architectures now.
  * autopkgtest: Avoid test bed reset for boot-smoke.
    Make "boot-smoke"'s dependencies a strict superset of "upstream"'s, so
    that autopkgtest doesn't have to provide a new testbed.
  * Fix wrong "nobody" group from sysusers.d.
    Fix our make-sysusers-basic sysusers.d generator to special-case the
    nobody group. "nobody" user and "nogroup" group both have the same ID
    65534, which is the only special case for Debian's static users/groups.
    So specify the gid explicitly, to avoid systemd-sysusers creating a
    dynamic system group for "nobody".
    Also clean up the group on upgrades.
    Thanks to Keh-Ming Luoh for the original patch! (Closes: #912525)

  [ Michael Biebl ]
  * autopkgtest: Use shutil.which() which is provided by Python 3
  * Drop non-existing gnuefi=false build option.
    This was mistakenly added when converting from autotools to meson.
  * core: When deserializing state always use read_line(…, LONG_LINE_MAX, …)
    Fixes a vulnerability in unit_deserialize which allows an attacker to
    supply arbitrary state across systemd re-execution via NotifyAccess.
    (CVE-2018-15686, Closes: #912005)
  * meson: Use the host architecture compiler/linker for src/boot/efi.
    Fixes cross build failure for arm64. (Closes: #905381)
  * systemd: Do not pass .wants fragment path to manager_load_unit.
    Fixes an issue with overridden units in /etc not being used due to a
    .wants/ symlink pointing to /lib. (Closes: #907054)
  * machined: When reading os-release file, join PID namespace too.
    This ensures that we properly acquire the os-release file from containers.
    (Closes: #911231)

 -- Michael Biebl <biebl@debian.org>  Sat, 17 Nov 2018 18:39:21 +0100

systemd (239-11) unstable; urgency=high

  [ Michael Biebl ]
  * debian/tests/upstream: Clean up after each test run.
    Otherwise the loopback images used by qemu are not properly released and
    we might run out of disk space.
  * dhcp6: Make sure we have enough space for the DHCP6 option header.
    Fixes out-of-bounds heap write in systemd-networkd dhcpv6 option
    handling.
    (CVE-2018-15688, LP: #1795921, Closes: #912008)
  * chown-recursive: Rework the recursive logic to use O_PATH.
    Fixes a race condition in chown_one() which allows an attacker to cause
    systemd to set arbitrary permissions on arbitrary files.
    (CVE-2018-15687, LP: #1796692, Closes: #912007)

  [ Martin Pitt ]
  * debian/tests/boot-and-services: Use gdm instead of lightdm.
    This seems to work more reliably, on Ubuntu CI's i386 instances lightdm
    fails.

  [ Manuel A. Fernandez Montecelo ]
  * Run "meson test" instead of "ninja test"
    Upstream developers of meson recommend to run it in this way, because
    "ninja test" just calls "meson test", and by using meson directly and
    using extra command line arguments it is possible to control aspects of
    how the tests are run.
  * Increase timeout for test in riscv64.
    The buildds for the riscv64 arch used at the moment are slow, so increase
    the timeouts for this arch by a factor of 10, for good measure.
    (Closes: #906429)

 -- Michael Biebl <biebl@debian.org>  Sun, 28 Oct 2018 13:02:18 +0100

systemd (239-10) unstable; urgency=medium

  [ Michael Biebl ]
  * meson: Rename -Ddebug to -Ddebug-extra.
    Meson added -Doptimization and -Ddebug options, which obviously causes
    a conflict with our -Ddebug options. Let's rename it.
    (Closes: #909455)
  * Add conflicts against consolekit.
    Letting both ConsoleKit and logind manage dynamic device permissions
    will only lead to inconsistent and unexpected results.

  [ Felipe Sateler ]
  * Link systemctl binary statically against libshared.
    This reduces the Pre-Depends list considerably, and is more resilient
    against borked installs.

 -- Michael Biebl <biebl@debian.org>  Tue, 25 Sep 2018 16:11:12 +0200

systemd (239-9) unstable; urgency=medium

  * autopkgtest: Remove needs-recommends runtime restriction.
    This restriction has been deprecated and there are plans to remove it
    altogether. The tests pass withouth needs-recommends, so it seems safe
    to remove.
  * test: Use installed catalogs when test-catalog is not located at build
    dir.
    This makes it possible to run test-catalog as installed test, so we no
    longer need to mark it as EXFAIL in our root-unittests autopkgtest.
  * test: Use "systemd-runtest.env" to set $SYSTEMD_TEST_DATA and
    $SYSTEMD_CATALOG_DIR.
    This avoids embedding ABS_{SRC,BUILD}_DIR into libsystemd-shared.so and
    the test binaries and should make the build reproducible.
    (Closes: #908365)

 -- Michael Biebl <biebl@debian.org>  Wed, 12 Sep 2018 19:07:38 +0200

systemd (239-8) unstable; urgency=medium

  [ Michael Biebl ]
  * Clean up dbus-org.freedesktop.timesync1.service Alias on purge
    (Closes: #904290)
  * user-runtime-dir: Fix wrong SELinux context (Closes: #908026)
  * core: Fix gid when DynamicUser=yes with static user (Closes: #904335)
  * Remove udev control socket on shutdown under sysvinit.
    The udev control socket is no longer removed automatically when the
    daemon is stopped. As this can confuse other software, update the SysV
    init script to remove the control socket manually and make sure the init
    script is executed on shutdown (runlevel 0) and reboot (runlevel 6).
    (Closes: #791944)
  * Bump Standards-Version to 4.2.1

  [ Martin Pitt ]
  * timedated: Fix wrong PropertyChanged values and refcounting

 -- Michael Biebl <biebl@debian.org>  Fri, 07 Sep 2018 08:41:12 +0200

systemd (239-7) unstable; urgency=medium

  * autopkgtest: Add iputils-ping dependency to root-unittests.
    The ping binary is required by test-bpf.
  * autopkgtest: Add dbus-user-session and libpam-systemd dependency to
    root-unittests.
    Without a working D-Bus user session, a lot of the test-bus-* tests are
    skipped.
  * network/link: Fix logic error in matching devices by MAC (Closes: #904198)

 -- Michael Biebl <biebl@debian.org>  Sun, 22 Jul 2018 13:40:15 +0200

systemd (239-6) unstable; urgency=medium

  [ Martin Pitt ]
  * autopkgtest: Install libnss-systemd.
    Make sure that dynamic users can be resolved. This e. g. prevents a
    startup failure for systemd-resolved.
  * autopkgtest: Add missing python3 test dependency for udev test

  [ Michael Biebl ]
  * autopkgtest: Make AppArmor violator test work with merged-usr
  * Make /dev/kvm accessible to local users and group kvm.
    Re-add the uaccess tag to /dev/kvm to make it accessible to local
    users. Access is also granted via group kvm, so create that in
    udev.postinst. (Closes: #887852)
  * Move a few man pages from systemd to systemd-journal-remote.
    The systemd package shipped a few systemd-journal-remote and
    systemd-journal-upload related man pages which really belong into the
    systemd-journal-remote package. Move those man pages into the correct
    package and add a Breaks/Replaces against systemd accordingly.
    (Closes: #903557)
  * autopkgtest: Drop no-longer needed workaround from upstream test
  * Go back to statically allocate system users for timesyncd, networkd and
    resolved.
    There are currently too many open issues related to D-Bus and the usage
    of DynamicUser. (Closes: #902971)
  * Change python3-minimal dependency to python3.
    While we strictly only need python3-minimal, the usage of
    python3-minimal triggers a lintian error: depends-on-python-minimal
  * test: Drop SKIP_INITRD for QEMU-based tests.
    The Debian Linux kernel ships ext4 support as a module, so we require an
    initrd to successfully start the QEMU images.
  * debian/tests/localed-x11-keymap: Deal with absence of
    /etc/default/keyboard more gracefully
  * autopkgtest: Add various dependencies to make upstream test pass on Debian
    - netcat-openbsd: Required by TEST-12-ISSUE-3171.
    - busybox-static: Required by TEST-13-NSPAWN-SMOKE.
    - plymouth: Required by TEST-15-DROPIN and TEST-22-TMPFILES.
  * Drop seccomp system call filter for udev.
    The seccomp based system call whitelist requires at least systemd 239 to
    be the active init and during a dist-upgrade we can't guarantee that
    systemd has been fully configured before udev is restarted.
    The versioned systemd Breaks that was added to udev for #902185 didn't
    really fix this issue, so revert that change again. (Closes: #903224)

 -- Michael Biebl <biebl@debian.org>  Thu, 19 Jul 2018 00:04:54 +0200

systemd (239-5) unstable; urgency=medium

  * Add inverse version restriction of the Breaks to the systemd-shim
    alternative in libpam-systemd.
    Otherwise apt will fail to find an installation path for libpam-systemd
    in cases where libpam-systemd is an indirect dependency. (Closes: #902998)

 -- Michael Biebl <biebl@debian.org>  Thu, 05 Jul 2018 11:50:10 +0200

systemd (239-4) unstable; urgency=medium

  [ Michael Biebl ]
  * Drop outdated section from README.Debian about switching back to SysV init
  * sleep: Fix one more printf format of a fiemap field
  * basic: Add missing comma in raw_clone assembly for sparc
  * bus-util: Make log level lower in request_name_destroy_callback()
  * tmpfiles: Specify access mode for /run/systemd/netif
  * Add Breaks against python-dbusmock (<< 0.18) to systemd.
    The logind and timedated tests in python-dbusmock were broken by the
    latest systemd release and had to be adjusted to work with systemd 239.
    See #902602
  * Drop patches which try to support running systemd services without systemd
    as pid 1.
    No one is currently actively maintaining systemd-shim, which means that
    e.g. running systemd-logind no longer works when systemd is not pid 1.
    Thus drop our no longer working patches. Bump the Breaks against
    systemd-shim accordingly.
    See #895292, #901404, #901405

  [ Martin Pitt ]
  * test: fix networkd-test.py rate limiting and dynamic user

 -- Michael Biebl <biebl@debian.org>  Tue, 03 Jul 2018 23:36:28 +0200

systemd (239-3) unstable; urgency=medium

  * Revert "systemctl: when removing enablement or mask symlinks, cover both
    /run and /etc"
    We currently have packages in the archive which use
    "systemctl --runtime unmask" and are broken by this change.
    This is a intermediate step until it is clear whether upstream will
    revert this commit or whether we will have to update affected packages
    to deal with this changed behaviour.
    See #902287 and https://github.com/systemd/systemd/issues/9393

 -- Michael Biebl <biebl@debian.org>  Wed, 27 Jun 2018 14:46:06 +0200

systemd (239-2) unstable; urgency=medium

  * sleep: Fix printf format of fiemap fields.
    This should fix a FTBFS on ia64.
  * timesync: Change type of drift_freq to int64_t.
    This should fix a FTBFS on x32.
  * Bump systemd Breaks to ensure it is upgraded in lockstep with udev.
    The hardening features used by systemd-udevd.service require systemd 239
    and udev will fail to start with older versions. (Closes: #902185)

 -- Michael Biebl <biebl@debian.org>  Wed, 27 Jun 2018 13:59:24 +0200

systemd (239-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 239
  * Drop alternative iptables-dev Build-Depends.
    It is no longer needed as both Ubuntu and Debian now ship libiptc-dev in
    their latest stable (LTS) release.
  * Drop alternative btrfs-tools Recommends.
    It is no longer needed as btrfs-progs is now available in both Debian
    and Ubuntu and keeping the alternative around prevents the transitional
    package from being autoremoved.
  * Disable installation of RPM macros.
    This avoids having to remove them manually later on.
  * Drop cleanup rules for libtool .la files.
    With the switch to Meson, libtool is no longer used.
  * Drop fallback for older kernels when running the test suite.
    We now assume that we have a kernel newer then 3.13.
  * Stop cleaning up .busname units.
    Those are gone upstream, so we no longer need to remove them manually.
  * Update symbols file for libsystemd0
  * Rebase patches
  * Install new resolvectl tool.
    Don't ship the /sbin/resolvconf compat symlink in the systemd package,
    as this would cause a file conflict with the resolvconf and openresolv
    package.
  * Disable support for "Portable Services"
    This is still an experimental feature.
  * Disable pristine-tar in gbp.conf.
    It is currently not possible to import the systemd v239 tarball using
    pristine-tar due to #902115.
  * Bump Build-Depends on meson to (>= 0.44)
  * Stop setting the path for the kill binary, no longer necessary
  * Stop creating systemd-network and systemd-resolve system user
    systemd-networkd.service and systemd-resolved.service now use
    DynamicUser=yes.

  [ Dimitri John Ledkov ]
  * Run all upstream tests, and then report all that failed.

 -- Michael Biebl <biebl@debian.org>  Sat, 23 Jun 2018 00:18:08 +0200

systemd (238-5) unstable; urgency=medium

  [ Evgeny Vereshchagin ]
  * upstream autopkgtest: Copy journal subdirectories.
    Otherwise logs are missing on failures.

  [ Martin Pitt ]
  * debian/tests/boot-and-services: Ignore cpi.service failure.
    This is apparently a regression in Ubuntu 18.04, not in systemd, so
    ignore it.

  [ Michael Biebl ]
  * sd-bus: Do not try to close already closed fd (Closes: #896781)
  * Use dh_missing to act on uninstalled files.
    The usage of dh_install --fail-missing has been deprecated.
  * meson: Avoid warning about comparison of bool and string.
    The result of this is undefined and will become a hard error in a future
    Meson release.
  * login: Respect --no-wall when cancelling a shutdown request
    (Closes: #897938)
  * Add dependencies of libsystemd-shared to Pre-Depends.
    This is necessary so systemctl is functional at all times during a
    dist-upgrade. (Closes: #897986)
  * Drop dh_strip override, the dbgsym migration is done

  [ Felipe Sateler ]
  * Don't include libmount.h in a header file.
    Kernel and glibc headers both use MS_* constants, but are not in sync, so
    only one of them can be used at a time. Thus, only import them where
    needed. Works around #898743.

 -- Michael Biebl <biebl@debian.org>  Sat, 26 May 2018 10:31:29 +0200

systemd (238-4) unstable; urgency=medium

  [ Michael Biebl ]
  * udev/net-id: Fix check for address to keep interface names stable
  * debian/copyright: Move global wildcard section to the top

  [ Martin Pitt ]
  * Fix daemon reload failures

  [ Laurent Bigonville ]
  * Fix /sys/fs/cgroup mount when using SELinux.
    Since v236, all cgroups except /sys/fs/cgroup/systemd and
    /sys/fs/cgroup/unified are not mounted when SELinux is enabled (even in
    permissive mode). Disabling SELinux completely restores these cgroups.
    This patch fixes that issue by no longer making the assumption that those
    cgroups are mounted by initrd/dracut before systemd is started.

 -- Michael Biebl <biebl@debian.org>  Sun, 01 Apr 2018 13:02:57 +0200

systemd (238-3) unstable; urgency=medium

  [ Martin Pitt ]
  * Enable systemd-sysusers unit and provide correct Debian static u/gids.
    Add a helper script debian/extra/make-sysusers-basic which generates a
    sysusers.d(5) file from Debian's static master passwd/group files.
    systemd 238 now supports  specifying different uid and gid and a
    non-default login shell, so this is possible now. (Closes: #888126)
  * udev README.Debian: Include initrd rebuild and some clarifications in
    migration.
    While initrd update is already being mentioned in the introductory
    section, it is easy to miss when going through the migration steps, so
    explicitly mention it again. Also add a warning about keeping a fallback
    on misconfigurations, and the possibility to migrate one interface at a
    time.
    Thanks to Karl O. Pinc for the suggestions! (Closes: #881769)

  [ Michael Biebl ]
  * basic/macros: Rename noreturn into _noreturn_.
    "noreturn" is reserved and can be used in other header files we include.
    (Closes: #893426)
  * units: Fix SuccessAction that belongs to [Unit] section not [Service]
    section (Closes: #893282)

 -- Michael Biebl <biebl@debian.org>  Tue, 20 Mar 2018 23:22:57 +0100

systemd (238-2) unstable; urgency=medium

  [ Alf Gaida ]
  * core: do not free stack-allocated strings.