Re: [systemd-devel] CAD often useless

2015-04-17 Thread Felix Miata
Lennart Poettering composed on 2015-04-16 12:16 (UTC+0200): Felix Miata wrote: Zbigniew Jędrzejewski-Szmek composed on 2015-04-15 18:11 (UTC): On Wed, Apr 15, 2015 at 13:31:38 -0400, Felix Miata wrote: This isn't the first time or the only system. This particular one is an old

Re: [systemd-devel] CAD often useless

2015-04-17 Thread Felix Miata
Lennart Poettering composed on 2015-04-16 12:32 (UTC+0200): Felix Miata wrote: Needing again to CAD on yet another machine (kt88b this time, kt400 earlier), again encountering / going into RO state, I noticed this time the message Ctrl-Alt-Del was pressed more than 7 times within 2s,

Re: [systemd-devel] black screen on startx exit

2015-04-17 Thread Felix Miata
Lennart Poettering composed on 2015-04-16 12:40 (UTC+0200): Felix Miata wrote: I asked the following on freedesktop list a month ago and got no response. As there was quite some time between this showing up in Fedora and Tumbleweed, and Tumbleweed only lately upgraded systemd from 210 to

Re: [systemd-devel] CAD often useless

2015-04-17 Thread Lennart Poettering
On Fri, 17.04.15 02:25, Felix Miata (mrma...@earthlink.net) wrote: Lennart Poettering composed on 2015-04-16 12:16 (UTC+0200): Felix Miata wrote: Zbigniew Jędrzejewski-Szmek composed on 2015-04-15 18:11 (UTC): On Wed, Apr 15, 2015 at 13:31:38 -0400, Felix Miata wrote: This

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Simon McVittie
On 16/04/15 15:52, Andy Lutomirski wrote: (I really think this dichotomy needs to be removed, *especially* since it looks like code already exists to try to use both metadata sources. This seems like it's just asking for security screw-ups.) Would it address this concern if there was an

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Cristian Rodríguez
On Fri, Apr 17, 2015 at 7:51 AM, Lennart Poettering lenn...@poettering.net wrote: Groups *suck* as authentication scheme. If you add one group for each privilege you want, then you'll have a huge number of groups, and that's hardly desirable. It's pretty close to being unmanagable with

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Lennart Poettering
On Thu, 16.04.15 12:45, Cameron Norman (camerontnor...@gmail.com) wrote: On Thu, Apr 16, 2015 at 9:43 AM, Tom Gundersen t...@jklm.no wrote: On Thu, Apr 16, 2015 at 4:52 PM, Andy Lutomirski l...@amacapital.net wrote: The ratio of complexity of capability code the kdbus folks have already

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Lennart Poettering
On Thu, 16.04.15 12:30, Andy Lutomirski (l...@amacapital.net) wrote: systemd itself checks CAP_SYS_KILL for clients asking to kill arbitrary services (which means invoking kill() to all PIDs in the service's cgroup). Similar to this, logind checks CAP_SYS_KILL for clients asking to kill

Re: [systemd-devel] How to get systemd boot messages on serial console and screen?

2015-04-17 Thread Frank Steiner
Lennart Poettering wrote We write the status output to /dev/console, see status_vprintf(): http://cgit.freedesktop.org/systemd/systemd/tree/src/shared/terminal-util.c#n643 Usually the kernel will forward what is written to /dev/console to all console= terminals listed on the kernel

[systemd-devel] [PATCH v4 0/4] udev: Add builtin and hwdb files for setting pointingstick properties

2015-04-17 Thread Hans de Goede
Hi All, Here is v4 of my pointstick set. Changes since v3: -Use the existing evdev matching rules -Make setting the sensitivity part of the evdev builtin (which is called keyboard for historical reasons) Changes since v2: -Fix numerous spelling / gramatical errors in commit messages -Add a

[systemd-devel] [PATCH v4 4/4] hwdb: Add entries for the pointingstick on 2 Dell Latitudes

2015-04-17 Thread Hans de Goede
The pointingstick of the Dell Latitude E6400 is somewhat slow by default, whereas the pointingstick of the Dell Latitude D620 is much too fast by default, set POINTINGSTICK_CONST_ACCEL for both of them to adjust for this. --- hwdb/70-pointingstick.hwdb | 12 1 file changed, 12

[systemd-devel] [PATCH v4 1/4] udev: Add hwdb file for setting pointingstick properties

2015-04-17 Thread Hans de Goede
There is quite a wide spread in the delta events generated by pointingsticks, some generate deltas of 1-2 under normal use, while others generate deltas from 1-20. This commit adds a hwdb file which allows specifying a per model POINTINGSTICK_CONST_ACCEL value which can be used by the userspace

[systemd-devel] [PATCH v4 3/4] hwdb: Add entries for the trackpoint on 2 Thinkpads

2015-04-17 Thread Hans de Goede
Lenovo has changed the sensitivity of the trackpoint on the x240 / T440s / T540 generation of Thinkpads, making them somewhat insensitive by default, add a hwdb entry to tweak the sensitivity setting. The ThinkPad X200s is way way too slow by default and unless you push the trackpoint quite hard

[systemd-devel] [PATCH v4 2/4] udev: keyboard-builtin: Add support for setting IBM trackpoint sensitivity

2015-04-17 Thread Hans de Goede
IBM / Lenovo trackpoints allow specifying a sensitivity setting through a ps/2 command, which changes the range of the deltas sent when using the trackpoint. On some models with normal usage only deltas of 1 or 2 are send, resulting in there only being 2 mouse cursor movement speeds, rather than

[systemd-devel] Adopt processes spawned before /lib/systemd/systemd takes over as PID 1?

2015-04-17 Thread Matt Hoosier
Hi, I'm writing to see whether there's a best way to allow systemd to inherit ownership of a process forked from a hand-crafted /sbin/init process before that hand-crafted process turns over the keys to systemd by doing exec(/lib/systemd/systemd) over the top of itself and allowing it to take

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Djalal Harouni
Hi Andy, On Thu, Apr 16, 2015 at 12:30:28PM -0700, Andy Lutomirski wrote: On Thu, Apr 16, 2015 at 11:23 AM, Lennart Poettering lenn...@poettering.net wrote: [...] AFAICT this piece of kdbus code serves to enable a rather odd way to write privilege-separated services to change the time and

Re: [systemd-devel] CAD often useless

2015-04-17 Thread Lennart Poettering
On Fri, 17.04.15 03:29, Felix Miata (mrma...@earthlink.net) wrote: When you see this message, then systemd will not bother with shuttding down daemons cleanly anymore. However, it will still unmount all file systems and sync things do disk. It will also pass control back to the initrd,

Re: [systemd-devel] controlling serial console using a token

2015-04-17 Thread Lennart Poettering
On Fri, 17.04.15 15:54, Praveen kumar R (praveenrgo...@gmail.com) wrote: I have a token passed on by command line argument on which I need to decide to start the serial On which command line? Kernel command line? What kind of token? console or not. I plan to tweak the getty*ttyS0.service and

Re: [systemd-devel] [PATCH] udevd: fix synchronization with settle when handling inotify events

2015-04-17 Thread David Herrmann
Hi On Mon, Apr 13, 2015 at 4:49 PM, Daniel Drake dr...@endlessm.com wrote: On Sat, Apr 11, 2015 at 5:13 AM, David Herrmann dh.herrm...@gmail.com wrote: Nice catch! There's indeed a small race between handling inotify and queuing up the change-event. We need to re-loop there. One day we

[systemd-devel] controlling serial console using a token

2015-04-17 Thread Praveen kumar R
I have a token passed on by command line argument on which I need to decide to start the serial console or not. I plan to tweak the getty*ttyS0.service and add the script which validates the token and starts the console. Is this the right approach or is there any better way of handling it ??

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Lennart Poettering
On Thu, 16.04.15 12:52, Cameron Norman (camerontnor...@gmail.com) wrote: It's easy to construct similar examples, for example for timedated, where setting the system clock is subject to CAP_SYS_TIME, exactly like the underlying system call. Using timedated instead of the system call gives

Re: [systemd-devel] How to get systemd boot messages on serial console and screen?

2015-04-17 Thread Lennart Poettering
On Fri, 17.04.15 13:57, Frank Steiner (fsteiner-ma...@bio.ifi.lmu.de) wrote: Lennart Poettering wrote We write the status output to /dev/console, see status_vprintf(): http://cgit.freedesktop.org/systemd/systemd/tree/src/shared/terminal-util.c#n643 Usually the kernel will forward

Re: [systemd-devel] Adopt processes spawned before /lib/systemd/systemd takes over as PID 1?

2015-04-17 Thread Lennart Poettering
On Fri, 17.04.15 09:00, Matt Hoosier (matt.hoos...@gmail.com) wrote: Hi, I'm writing to see whether there's a best way to allow systemd to inherit ownership of a process forked from a hand-crafted /sbin/init process before that hand-crafted process turns over the keys to systemd by doing

Re: [systemd-devel] machinectl login machine fails systemd 219

2015-04-17 Thread Keller, Jacob E
On Wed, 2015-04-15 at 00:07 +0200, Stefan Tatschner wrote: On Di, 2015-04-14 at 21:56 +, Keller, Jacob E wrote: Failed to get machine PTY: Message did not receive a reply (timeout by message bus) I get a notification on the machine itself that it started container getty and then

Re: [systemd-devel] [PATCH v2] cryptsetup: Implement offset and skip options

2015-04-17 Thread Martin Pitt
Hello all, Zbigniew Jędrzejewski-Szmek [2015-04-16 23:42 +]: Hm, I'd go even further and add a check: if (arg_offset arg_type != NULL arg_type != CRYPT_PLAIN) log_warning(offset= ignored with type %s, arg_type); if (arg_skip arg_type != NULL arg_type != CRYPT_PLAIN)

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Andy Lutomirski
On Apr 17, 2015 4:53 AM, Djalal Harouni tix...@opendz.org wrote: Hi Andy, On Thu, Apr 16, 2015 at 12:30:28PM -0700, Andy Lutomirski wrote: On Thu, Apr 16, 2015 at 11:23 AM, Lennart Poettering lenn...@poettering.net wrote: [...] AFAICT this piece of kdbus code serves to enable a rather

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Andy Lutomirski
On Apr 17, 2015 5:42 AM, Simon McVittie simon.mcvit...@collabora.co.uk wrote: On 16/04/15 15:52, Andy Lutomirski wrote: (I really think this dichotomy needs to be removed, *especially* since it looks like code already exists to try to use both metadata sources. This seems like it's just

Re: [systemd-devel] Adopt processes spawned before /lib/systemd/systemd takes over as PID 1?

2015-04-17 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Apr 17, 2015 at 09:00:49AM -0500, Matt Hoosier wrote: Hi, I'm writing to see whether there's a best way to allow systemd to inherit ownership of a process forked from a hand-crafted /sbin/init process before that hand-crafted process turns over the keys to systemd by doing

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Josh Triplett
On Thu, Apr 16, 2015 at 08:23:45PM +0200, Lennart Poettering wrote: Now, to put together a more complex scenario for you: consider a small web UI that can be used to set the system time. It should realy run at minimal privileges, after all it has a surface to the web. Hence you write it as

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread David Herrmann
Hi On Fri, Apr 17, 2015 at 5:52 PM, Josh Triplett j...@joshtriplett.org wrote: On Thu, Apr 16, 2015 at 08:23:45PM +0200, Lennart Poettering wrote: Now, to put together a more complex scenario for you: consider a small web UI that can be used to set the system time. It should realy run at

Re: [systemd-devel] Another attempt: Making dependencies properly overridable

2015-04-17 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Feb 16, 2015 at 04:19:47PM +0100, Christian Seiler wrote: Am 2015-02-16 14:16, schrieb Lennart Poettering: On Mon, 16.02.15 14:13, Michael Biebl (mbi...@gmail.com) wrote: Not quite. While you can use drop-in snippets to amend orderings/depends, it's (unfortunately) not possible to

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread josh
On Fri, Apr 17, 2015 at 06:00:04PM +0200, David Herrmann wrote: Hi On Fri, Apr 17, 2015 at 5:52 PM, Josh Triplett j...@joshtriplett.org wrote: On Thu, Apr 16, 2015 at 08:23:45PM +0200, Lennart Poettering wrote: Now, to put together a more complex scenario for you: consider a small web UI

Re: [systemd-devel] Adopt processes spawned before /lib/systemd/systemd takes over as PID 1?

2015-04-17 Thread Matt Hoosier
On Fri, Apr 17, 2015 at 12:22 PM, Lennart Poettering lenn...@poettering.net wrote: On Fri, 17.04.15 09:00, Matt Hoosier (matt.hoos...@gmail.com) wrote: Hi, I'm writing to see whether there's a best way to allow systemd to inherit ownership of a process forked from a hand-crafted

[systemd-devel] Zombie process still exists after stopping gdm.service

2015-04-17 Thread Daniel Drake
Hi, I'm investigating why systemctl stop gdm; Xorg usually fails. The new X process complains that X is still running. Here's what I think is happening: 1. systemd sends SIGTERM to gdm to stop the service 2. gdm exits - it has a simple SIGTERM handler which just quits the mainloop without

Re: [systemd-devel] Adopt processes spawned before /lib/systemd/systemd takes over as PID 1?

2015-04-17 Thread Cristian Rodríguez
On Fri, Apr 17, 2015 at 4:06 PM, Matt Hoosier matt.hoos...@gmail.com wrote: On Fri, Apr 17, 2015 at 12:22 PM, Lennart Poettering lenn...@poettering.net wrote: On Fri, 17.04.15 09:00, Matt Hoosier (matt.hoos...@gmail.com) wrote: Hi, I'm writing to see whether there's a best way to allow

Re: [systemd-devel] machinectl login machine fails systemd 219

2015-04-17 Thread Keller, Jacob E
On Fri, 2015-04-17 at 18:40 +, Keller, Jacob E wrote: On Wed, 2015-04-15 at 00:07 +0200, Stefan Tatschner wrote: On Di, 2015-04-14 at 21:56 +, Keller, Jacob E wrote: Failed to get machine PTY: Message did not receive a reply (timeout by message bus) I get a notification on

Re: [systemd-devel] SD_BUS_VTABLE_CAPABILITY

2015-04-17 Thread Andy Lutomirski
On Apr 17, 2015 6:05 AM, Cristian Rodríguez crrodrig...@opensuse.org wrote: On Fri, Apr 17, 2015 at 7:51 AM, Lennart Poettering lenn...@poettering.net wrote: Groups *suck* as authentication scheme. If you add one group for each privilege you want, then you'll have a huge number of groups,

Re: [systemd-devel] Adopt processes spawned before /lib/systemd/systemd takes over as PID 1?

2015-04-17 Thread Matt Hoosier
On Fri, Apr 17, 2015 at 3:52 PM, Cristian Rodríguez crrodrig...@opensuse.org wrote: On Fri, Apr 17, 2015 at 4:06 PM, Matt Hoosier matt.hoos...@gmail.com wrote: On Fri, Apr 17, 2015 at 12:22 PM, Lennart Poettering lenn...@poettering.net wrote: On Fri, 17.04.15 09:00, Matt Hoosier

[systemd-devel] Socket activation of container with private network

2015-04-17 Thread sbaugh
--text follows this line-- Hi, I am having trouble with socket-activated containers, where the socket is first opened outside the container, on an interface/IP address that is then passed in to the container. In short, when I try to ssh to the IP address of the container, the container is