Daan De Meyer 4dc694f768 nsresourced: test POSIX queue namespace lifetime ...

POSIX queue creation bypasses the path hooks. Its resource accounting must
keep the creator's user namespace alive while the queue exists, or
nsresourced could recycle IDs still recorded in the queue's inode.

Let's check that no namespace-free notification arrives after the creator
exits and the namespace descriptors are closed, then require the
notification after unlinking the queue.

(cherry picked from commit 4b10f0a649)
(cherry picked from commit 4b4d9c9d22)

2026-11-05 14:48:10 +00:00

..

ac-power

…

analyze

analyze: hint when man is not installed

2026-11-05 14:30:22 +00:00

ask-password

ask-password: adjust help for -e/--echo

2026-11-05 13:59:49 +00:00

backlight

…

basic

pidfd-util: flush cached pidfd ID in child after fork()/clone()

2026-11-05 14:48:10 +00:00

battery-check

…

binfmt

binfmt: clear the ignored flush failure before the registration loop

2026-10-17 12:01:00 +01:00

bless-boot

bless-boot: return an error when resetting a bad boot entry to indeterminate

2026-11-05 14:48:10 +00:00

boot

boot: fix HTTP boot URL length

2026-11-05 13:58:21 +00:00

bootctl

bootctl: log correct error

2026-11-05 14:48:10 +00:00

bpf

nsresourced: restrict Btrfs subvolume creation ioctls

2026-11-05 14:48:10 +00:00

busctl

…

cgls

…

cgtop

cgtop: normalize specified cgroup root path

2026-11-05 14:30:21 +00:00

core

core/dbus: skip setting up API bus when it is already disconnected.

2026-11-05 14:48:10 +00:00

coredump

coredump: use cg_pidref_get_path_shifted() for COREDUMP_CGROUP=

2026-11-05 13:59:45 +00:00

coverage

…

creds

creds: log correct error

2026-11-05 14:48:10 +00:00

cryptenroll

cryptsetup,cryptenroll: report continuously changing PCRs explicitly

2026-10-17 12:00:59 +01:00

cryptsetup

cryptsetup: don't pass a success value as error to log_warning_errno()

2026-11-05 14:48:10 +00:00

debug-generator

…

delta

…

detect-virt

detect-virt: continue parsing after --cvm

2026-09-09 10:08:20 +01:00

dissect

import: allocate the tar hardlink db before dropping privileges

2026-09-09 10:08:19 +01:00

environment-d-generator

…

escape

…

factory-reset

…

firstboot

firstboot: validate root shell credentials

2026-07-23 10:54:52 +02:00

fsck

…

fstab-generator

chase: don't force a sync with the server in chase_statx() unless needed

2026-11-05 14:30:22 +00:00

fundamental

…

fuzz

fuzz: fix error handling of fcntl()

2026-10-17 12:01:01 +01:00

getty-generator

getty-generator: strip whitespace from getty.auto credential

2026-09-09 10:08:20 +01:00

gpt-auto-generator

…

growfs

…

hibernate-resume

…

home

homed: don't log a positive IPC search result as an error

2026-11-05 14:48:10 +00:00

hostname

hostname-setup: move the default-hostname hint check next to its writer

2026-11-05 14:30:21 +00:00

hwdb

…

id128

id128: reject app-specific IDs for new

2026-07-23 10:54:52 +02:00

imds

imds: warn if net.ipv4.conf.all.rp_filter breaks locked mode

2026-11-05 14:48:10 +00:00

import

importd: fix polkit policy name used in method_cancel (#44591)

2026-11-05 14:48:10 +00:00

include

include: fix limits.h override

2026-10-17 12:00:59 +01:00

integritysetup

generators: check the error fopen_unlocked() returns, not errno

2026-11-05 14:48:10 +00:00

journal

journald: include socket cookie in stream state file names

2026-11-05 14:48:10 +00:00

journal-remote

journal-remote: unregister failed MHD daemons

2026-11-05 14:30:22 +00:00

kernel-install

kernel-install: allow tries/devicetree files without trailing newline

2026-11-05 14:30:22 +00:00

keyutil

…

libc

libc: call epoll_pwait2 syscall directly instead of resolving glibc symbols

2026-09-09 10:08:21 +01:00

libsystemd

sd-bus: don't assert_return on closing/closed bus state

2026-11-05 14:48:10 +00:00

libsystemd-network

networkd: reject special addresses in static leases

2026-11-05 14:48:10 +00:00

libudev

libudev: cache the errno for a failed parent lookup

2026-09-09 10:08:19 +01:00

locale

locale: update Context only on success

2026-09-09 10:08:19 +01:00

login

logind: log correct error

2026-11-05 14:48:10 +00:00

machine

machine: fix typo in polkit policy name

2026-11-05 14:48:10 +00:00

machine-id-setup

…

measure

…

modules-load

…

mount

…

mountfsd

mountfsd: stop when the worker binary cannot be executed

2026-11-05 14:48:09 +00:00

mstack

…

mute-console

mute-console: refuse multiple requests per connection

2026-09-09 10:08:20 +01:00

network

networkd: preserve exact host-prefix pool addresses

2026-11-05 14:48:10 +00:00

notify

…

nspawn

nspawn: socket activation fixes

2026-11-05 14:48:10 +00:00

nsresourced

nsresourced: test POSIX queue namespace lifetime

2026-11-05 14:48:10 +00:00

nss-myhostname

nss-myhostname: keep IPv6 probe result stable

2026-07-19 22:34:06 +01:00

nss-mymachines

…

nss-resolve

…

nss-systemd

nss-systemd: copy PASSWORD_SEE_SHADOW into the group record buffer

2026-10-17 12:01:01 +01:00

oom

…

path

…

pcrextend

tpm2-util: initialize NvPCRs on first extension

2026-07-19 22:34:06 +01:00

pcrlock

pcrlock: don't pass a success value as error

2026-11-05 14:48:10 +00:00

portable

portable: re-enable verity sharing

2026-11-05 14:48:09 +00:00

pstore

…

ptyfwd

…

quotacheck

…

random-seed

…

remount-fs

…

repart

repart: use libcryptsetup to set default kdf params

2026-11-05 14:48:10 +00:00

reply-password

…

report

…

resolve

resolved: return NXDOMAIN for .onion domains

2026-11-05 14:48:09 +00:00

rfkill

…

rpm

rpm: Fix copy paste bug in lua triggers

2026-10-17 12:01:00 +01:00

run

run: reject waiting for remain-after-exit services

2026-07-19 22:34:06 +01:00

run-generator

…

sbsign

sbsign: name the input file when hashing it fails

2026-10-17 12:01:01 +01:00

shared

nsresourced: restrict Btrfs subvolume creation ioctls

2026-11-05 14:48:10 +00:00

shutdown

shutdown: return correct errors after pipe2()

2026-11-05 14:48:10 +00:00

sleep

…

socket-activate

…

socket-proxy

socket-proxyd: fix off-by-one in connection limit

2026-10-17 12:01:00 +01:00

ssh-generator

ssh-generator: do not log unusable CID

2026-10-17 12:01:01 +01:00

stdio-bridge

…

storage

…

storagetm

…

sulogin-shell

…

sysctl

sysctl: skip leading whitespaces and ignore arguments start with '#' when --inline

2026-09-09 10:08:20 +01:00

sysext

sysext: validate work directory metadata before removal

2026-07-19 22:34:06 +01:00

sysinstall

sysinstall: correct end marker log message

2026-10-17 12:01:00 +01:00

system-update-generator

…

systemctl

systemctl-clean-or-freeze: do not wait for units with --no-block

2026-11-05 14:48:10 +00:00

systemd

sd-json: Introduce SD_JSON_FORMAT_EMPTY_OBJECT

2026-10-17 12:01:02 +01:00

sysupdate

updatectl: sort features table

2026-11-05 14:48:10 +00:00

sysusers

sysusers: gracefully handle existing group in /etc/gshadow

2026-09-09 10:08:19 +01:00

test

curl-util: dispatch near curl timers accurately

2026-11-05 14:48:10 +00:00

timedate

timedated: roll back state on config write failure

2026-09-09 10:08:20 +01:00

timesync

systemd-time-wait-sync: add forgotten log setup

2026-11-05 14:30:21 +00:00

tmpfiles

sysctl-util: add sysctl_read_int() and friends

2026-11-05 14:48:10 +00:00

tpm2-setup

various: attach errno to structured logs, even if not used in msg

2026-09-09 10:08:19 +01:00

tty-ask-password-agent

…

udev

udev: validate SMBIOS3 entry point length

2026-11-05 14:48:09 +00:00

ukify

ukify: decompress all Zstandard frames with the standard library

2026-11-05 13:59:45 +00:00

update-done

…

update-utmp

update-utmp: shorten comm on boot/shutdown

2026-09-09 10:08:19 +01:00

user-sessions

…

userdb

userdbd: stop when the worker binary cannot be executed

2026-11-05 14:48:09 +00:00

validatefs

…

varlinkctl

fd-util: dup regular files on stdout instead of reopening them

2026-11-05 14:48:10 +00:00

vconsole

vconsole-setup: skip font setup on a KD_GRAPHICS vc instead of failing

2026-10-17 12:01:02 +01:00

veritysetup

generators: check the error fopen_unlocked() returns, not errno

2026-11-05 14:48:10 +00:00

version

…

vmspawn

vmspawn: log the error returned by invoke_callout_binary()

2026-11-05 14:48:09 +00:00

volatile-root

…

vpick

vpick: terminate tries output with newline

2026-09-09 10:08:20 +01:00

xdg-autostart-generator

…