Lennart Poettering 004e60e0fc chase: put limit on overall chase cycles ...

Let's add some protections in case we deal with inodes owned by an
untrusted person, with concurrent access: let's put a limit on how long
we traverse, and fail eventually so that live changes cannot send us in
circles indefinitely.

This reworks the current CHASE_MAX logic so that it not only applies to
symlinks transitions, but to any transitions.

This also bumps CHASE_MAX a bit, given that it's now bumped on every
single iteration of the loop.

2026-03-03 08:48:01 +01:00

..

ac-power

…

analyze

analyzer: remove spurious empty line

2026-02-24 17:11:54 +01:00

ask-password

ask-password: install polkit policy

2026-02-03 08:16:25 +09:00

backlight

backlight: also change clamp percentage on ID_BACKLIGHT_CLAMP/ID_LEDS_CLAMP=yes

2026-02-16 21:24:55 +09:00

basic

chase: put limit on overall chase cycles

2026-03-03 08:48:01 +01:00

battery-check

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

binfmt

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

bless-boot

bless-boot-generator: skip if current system is entered via soft-reboot

2026-01-20 11:09:27 +09:00

boot

Install hwids in /usr/lib/systemd/boot/hwids/<EFI_ARCH>/

2026-02-25 13:51:31 +00:00

bootctl

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

busctl

busctl: handle --limit-messages option under the wait verb

2026-01-19 22:41:33 +09:00

cgls

…

cgtop

cgtop: fix confusion in --help

2026-02-11 11:46:12 +01:00

core

core/varlink-unit: use VARLINK_ERROR_UNIT_NO_SUCH_UNIT macro

2026-03-02 10:49:51 +01:00

coredump

coredump: Use error log level in coredump_send_to_container()

2026-02-17 16:44:35 +01:00

coverage

…

creds

…

cryptenroll

cryptenroll: Save primary algorithm type to the LUKS token

2026-02-27 14:01:10 +01:00

cryptsetup

cryptsetup-tokens: Print tpm2-primary-alg: only when it is known

2026-02-27 14:22:22 +01:00

debug-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

delta

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

detect-virt

…

dissect

dissect: Go via service on ENOENT from loop_device_make() as well

2026-02-24 18:29:37 +01:00

environment-d-generator

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

escape

tree-wide: flatten nested error checks

2025-12-10 18:59:44 +09:00

factory-reset

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

firstboot

firstboot/homectl: hide plymouth splashscreen when asking questions

2026-02-03 13:21:03 +01:00

fsck

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

fstab-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

fundamental

systemd-boot: add a preferred setting that's similar to default but avoids booting known-bad entries

2026-02-18 03:28:12 +09:00

fuzz

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

getty-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

gpt-auto-generator

gpt-auto-generator: enable nvpcr logic by default

2026-02-17 22:00:14 +01:00

growfs

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

hibernate-resume

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

home

Use sectorsize for partition tables on block devs

2026-02-17 18:23:35 +05:30

hostname

pam_systemd: remove handling of obsolete "existing" attr from CreateSession() call (#40432)

2026-01-23 17:50:44 +01:00

hwdb

…

id128

…

import

import,nspawn: fix a couple of typos in mountfsd

2026-03-03 00:03:19 +01:00

include

include: update kernel headers from v7.0-rc1

2026-02-24 23:08:52 +09:00

integritysetup

tree-wide: use full paths to tools defined in config.h

2026-01-12 22:17:36 +01:00

journal

journalctl-vl-server: allow querying units for specific uid in system scope

2026-02-23 10:43:00 +01:00

journal-remote

journal-remote: fix error number confusion

2026-03-02 23:09:53 +09:00

kernel-install

kernel-install: allocate "Context" object only in verb_xyz() functions, not already in run()

2026-02-09 10:21:16 +01:00

keyutil

keyutil: Add extract-certificate

2025-12-18 13:57:32 +01:00

libc

Bump required minimum version of glibc to 2.34

2026-01-28 10:56:53 +09:00

libsystemd

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

libsystemd-network

network: add DHCPv6 message types to string table (#40912)

2026-03-03 01:50:12 +09:00

libudev

libudev: Fix declaration argument names

2026-01-02 09:39:31 +01:00

locale

clang-tidy: Enable more warnings (#39910)

2026-01-03 06:00:30 +09:00

login

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

machine

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

machine-id-setup

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

measure

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

modules-load

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

mount

mount-tool: fix confusion in --help

2026-02-11 11:46:44 +01:00

mountfsd

mountfsd: include imageName in MountImage Varlink reply

2026-02-27 08:48:48 +01:00

mstack

mstack: parse --mkdir option

2026-02-20 16:56:16 +01:00

mute-console

mute-console: io.systemd.MuteConsole requires 'more'

2026-02-16 09:44:54 +01:00

network

network: fix error aggregation in wwan_check_and_set_configuration()

2026-03-03 08:59:48 +09:00

notify

tree-wide: Remove unnecessary SIGCHLD blocking

2025-12-20 15:50:47 +01:00

nspawn

import,nspawn: fix a couple of typos in mountfsd

2026-03-03 00:03:19 +01:00

nsresourced

nsresourced: Optionally map foreign UID range

2026-02-24 18:29:37 +01:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

nss-resolve: add env var to specify resolved ifindex

2025-12-18 10:53:27 +01:00

nss-systemd

nss-systemd,strv: use a common definition of a non-NULL but empty strv

2026-03-01 08:51:14 +01:00

oom

oomd: Fix unnecessary delays during OOM kills with pending kills present

2026-02-17 18:26:04 +09:00

path

path: simplify run()

2026-02-11 11:47:18 +01:00

pcrextend

pcrextend: allow access to the userspace event type field when measuring something

2026-02-17 22:00:13 +01:00

pcrlock

tree-wide: drop redundant check for SD_VARLINK_METHOD_MORE flag

2026-02-16 09:44:54 +01:00

portable

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

pstore

pstore: fix typo

2026-01-06 08:45:22 +09:00

ptyfwd

tree-wide: Remove unnecessary SIGCHLD blocking

2025-12-20 15:50:47 +01:00

quotacheck

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

random-seed

…

remount-fs

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

repart

repart: Report correct current disk size and error (#39813)

2026-02-20 17:00:28 +00:00

reply-password

…

report

report: install systemd-report binary to /usr/lib/systemd/ for now

2026-02-20 08:25:12 +01:00

resolve

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

rfkill

…

rpm

rpm/systemd-update-helper: use 'enqueue-marked-jobs'

2026-02-25 23:03:14 +00:00

run

parse-argument: make parse_tristate_argument() do something useful

2026-02-20 21:20:45 +01:00

run-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

sbsign

bootctl,sbsign: fix $SOURCE_DATE_EPOCH parsing

2026-01-20 15:54:55 +01:00

shared

network: fix LLDP field type in Interface Varlink IDL

2026-03-03 00:04:50 +01:00

shutdown

cryptenroll,cryptsetup,shutdown: only call mlockall if we have CAP_IPC_LOCK

2026-01-18 19:15:30 +01:00

sleep

sleep: allow HibernateDelaySec and low-battery hibernation to work together

2026-02-05 10:28:47 +01:00

socket-activate

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

socket-proxy

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

ssh-generator

ssh-proxy: Support ssh machine/xxx for nspawn containers

2026-02-19 21:32:29 +01:00

stdio-bridge

…

storagetm

Fix bug in DM iteration and standardise how to iterate through DM layers (#40426)

2026-01-30 15:36:03 +09:00

sulogin-shell

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

sysctl

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

sysext

tree-wide: drop redundant check for SD_VARLINK_METHOD_MORE flag

2026-02-16 09:44:54 +01:00

system-update-generator

…

systemctl

systemctl-start-unit: drop redundant check for enqueue-marked-jobs --wait

2026-02-25 05:09:38 +09:00

systemd

systemd/sd-varlink-idl.h: fix ABI breakage

2026-03-02 10:49:52 +01:00

sysupdate

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

sysusers

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

test

tree-wide: use _contains() rather than _get()/_find()

2026-03-02 23:10:22 +09:00

timedate

conf-files: introduce CONF_FILES_WARN flag and set it at various places

2026-01-16 23:05:33 +09:00

timesync

timesync: actually disables built-in fallback NTP servers when an empty string is specified

2026-02-16 09:53:03 +09:00

tmpfiles

tmpfiles: downgrade log level for non-existent symlink target

2026-02-27 17:11:41 +01:00

tpm2-setup

tpm2-setup: make NV index space exhaustion issues more discoverable

2026-02-26 11:34:59 +01:00

tty-ask-password-agent

tree-wide: Migrate to pidref_safe_fork()

2026-01-02 20:08:41 +01:00

udev

udev/varlink: ignore polkit related field

2026-03-02 19:24:40 +01:00

ukify

ukify: default --hwids to /usr/lib/systemd/boot/hwids/<EFI_ARCH>/

2026-02-25 13:51:31 +00:00

update-done

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

update-utmp

…

user-sessions

…

userdb

userdbd: avoid sending gshadow hash to unprivileged callers via varlink

2026-02-25 02:52:37 +01:00

validatefs

mountpoint-util: make is_mount_point_at() take usual dir_fd + path style arguments

2026-01-13 10:21:05 +09:00

varlinkctl

varlinkctl: add pluggable protocol support to sd-varlink

2026-02-13 19:07:20 +01:00

vconsole

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

veritysetup

veritysetup: optionally measure Verity once we activated it

2026-02-17 22:00:14 +01:00

version

meson: add tools/meson.build

2025-12-01 16:18:11 +01:00

vmspawn

vmspawn: Add support for foreign UID range owned directories

2026-02-25 11:31:04 +01:00

volatile-root

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

vpick

vpick: Make suffix a single string again instead of a strv

2026-02-18 23:14:11 +01:00

xdg-autostart-generator

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00