[systemd-devel] Conflict between 1-indexed kernel struct rtc_time and 0-indexed userspace struct tm

2025-08-25 Thread Daniel Tang
Hello, The difference seems undocumented and ignored by userspace. At https:// github.com/util-linux/util-linux/issues/3707 , we discussed the mismatch. My kernel module's assertion that a `rtc_time64_to_tm(rtc_tm_to_time64(tm), &tm_check)` will result in a bit-identical struct failed at tm_yday

Re: [systemd-devel] RestrictSUIDSGID causing unexpected error

2025-08-25 Thread Ian Pilcher
On 8/25/25 6:57 AM, Michal Sekletar wrote: openat2() is disabled due to the seccomp filter applied as a consequence of RestrictSUIDSGID=yes. Rationale for this behavior is described in code comment here, https://github.com/systemd/systemd/blob/main/src/shared/seccomp- util.c#L2311

Re: [systemd-devel] RestrictSUIDSGID causing unexpected error

2025-08-25 Thread Michal Sekletar
On Sun, Aug 24, 2025 at 11:59 PM Ian Pilcher wrote: > Any suggestions on what might be going on here or what my program should > be doing differently to make this call work would be appreciated. This > error is preventing me from setting DynamicUser=true, because it implies > RestrictSUIDSGID=tru

Re: [systemd-devel] PAM conversation function via varlink?

2025-08-25 Thread Thorsten Kukuk
On Mon, Aug 25, 2025 at 10:34 AM Lennart Poettering wrote: > > On Fr, 22.08.25 14:32, Thorsten Kukuk (ku...@suse.com) wrote: > > > Hi, > > > > Would it be possible or has anybody ever tried to implement the PAM > > conversation function (https://manpages.opensuse.org/pam_conv.3) via > > varlink? >

Re: [systemd-devel] PAM conversation function via varlink?

2025-08-25 Thread Lennart Poettering
On Fr, 22.08.25 14:32, Thorsten Kukuk (ku...@suse.com) wrote: > Hi, > > Would it be possible or has anybody ever tried to implement the PAM > conversation function (https://manpages.opensuse.org/pam_conv.3) via > varlink? > > To get rid of setuid binaries (here passwd, chsh and chfn) my idea was >