[systemd-devel] Secret machine-id for RFC 7217 stable addresses

2015-09-07 Thread Lubomir Rintel
Hello, the RFC 7217 specifies an algorithm for generating an IPv6 host address that stays stable in a particular network but changes when the machine enters another network to prevent tracking [1]. It works by hashing a tuple of various parameters one of which is "secret_key" -- a secret value

[systemd-devel] [PATCH] importd: add CAP_DAC_OVERRIDE capability

2015-04-13 Thread Lubomir Rintel
Fedora's filesystem package ships /usr/bin (and other directories) which are not writable by its owner. machinectl pull-dkr (and possibly others) are not able to extract those: 14182 mkdirat(3, usr, 0700) = 0 14182 mkdirat(3, usr/bin, 0500) = 0 14182 openat(3, usr/bin/[,

[systemd-devel] [PATCH] hwdb: fix ThinkPad X6* Tablet special keys

2015-02-18 Thread Lubomir Rintel
Some (all? -- an equivalent rule exists for X200t already) ThinkPad tablet firmware has DMI product name and version reversed: Handle 0x0001, DMI type 1, 27 bytes System Information Manufacturer: LENOVO Product Name: 7762AS1 Version: ThinkPad X61 Tablet Serial

[systemd-devel] [PATCH 1/2] man: Document server sockets in use by journald

2014-05-28 Thread Lubomir Rintel
--- man/systemd-journald.service.xml | 11 +++ 1 file changed, 11 insertions(+) diff --git a/man/systemd-journald.service.xml b/man/systemd-journald.service.xml index f0ce7aa..715 100644 --- a/man/systemd-journald.service.xml +++ b/man/systemd-journald.service.xml @@ -86,6 +86,17 @@

[systemd-devel] [PATCH 2/2] journald: Add UDP syslog listener

2014-05-28 Thread Lubomir Rintel
This is fairly simple, yet useful with netconsole. Remote socket address is not used to obtain hostname, it would be easy to fake it via UDP anyway, which is probably not desirable. If clients wish, they should identify themselves via identifier field in syslog packets. Disabled by default. ---