Ross Burton 50af58cedb systemd: refuse to load units with errors (CVE-2017-1000082) ...

If a unit has a statement such as User=0day where the username exists but is
strictly speaking invalid, the unit will be started as the root user instead.

Backport a patch from upstream to mitigate this by refusing to start units such
as this.

(From OE-Core rev: 549cb941c5b19909fb00f2bef9c04172ca1c162d)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-07-19 11:30:16 +01:00

..

base-files

base-files: ignore "mesg n" error messages

2017-07-17 14:01:39 +01:00

base-passwd

base-passwd/useradd: Various improvements to useradd with RSS

2017-04-14 09:47:08 +01:00

bsd-headers

bsd-headers: set SUMMARY instead of DESCRIPTION

2016-05-30 15:58:10 +01:00

busybox

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

console-tools

console-tools: fix string formatting issue

2017-02-15 20:06:42 -08:00

coreutils

recipes: Replace "cp -a" with "cp -R --no-dereference --preserve=mode, links"

2017-06-06 19:02:43 +01:00

dbus

dbus-test: 1.10.14 -> 1.10.18

2017-05-16 14:08:29 +01:00

dbus-wait

recipes: Add missing pkgconfig class inherits

2014-06-03 16:49:19 +01:00

dropbear

dropbear: reduce local pending patches

2017-07-17 14:01:39 +01:00

expat

expat: upgrade to 2.2.1

2017-07-06 14:38:14 +01:00

fts

fts: Switch SRC_URI to github

2017-06-12 15:08:30 +01:00

gettext

gettext: relocate msgfmt utility for all recipes

2017-06-28 15:52:18 +01:00

glib-2.0

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

glib-networking

glib-networking: remove intltool dependency

2016-11-23 11:10:11 +00:00

glibc

glibc: Enable obsoleted nsl

2017-07-11 15:57:08 +01:00

ifupdown

meta: Add/fix missing Upstream-Status to patches

2017-06-27 10:38:43 +01:00

images

build-appliance-image: Update to master head revision

2017-05-01 08:56:47 +01:00

init-ifupdown

meta: set proper S value

2015-01-23 11:36:27 +00:00

initrdscripts

gummiboot: Remove/change gummiboot references with systemd-boot

2017-01-09 13:39:11 +00:00

initscripts

initscripts: Populate volatile from existing file

2017-06-06 19:02:44 +01:00

kbd

kbd: update to 2.0.4

2017-03-01 23:27:09 +00:00

libcgroup

libcgroup: Add dependency on fts when building on musl

2016-01-24 09:40:26 +00:00

libxml

meta: Fix malformed Upstream-Status tags

2017-06-27 10:38:43 +01:00

meta

wic-tools: don't create wic-tools.env

2017-07-17 14:01:37 +01:00

musl

musl: Update to latest on master

2017-07-11 15:57:08 +01:00

ncurses

ncurses: Drop incorrect option

2017-04-10 23:00:44 +01:00

netbase

netbase: upgrade to version 5.4

2017-01-19 22:47:21 +00:00

os-release

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

ovmf

ovmf: Fix build with toolchain defaulting to PIE

2017-07-08 13:34:45 +01:00

packagegroups

meta: Drop remnants of uclibc support

2017-06-22 09:16:00 +01:00

psplash

psplash: Add PACKAGE_WRITE_DEPS for postinst

2017-01-20 11:53:50 +00:00

readline

readline: Remove unused patch

2017-03-16 22:11:32 +00:00

sysfsutils

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

systemd

systemd: refuse to load units with errors (CVE-2017-1000082)

2017-07-19 11:30:16 +01:00

sysvinit

start_getty: Over added SERIAL_CONSOLE cause error in userspace log

2017-06-03 23:46:06 +01:00

udev

eudev: set LGPL-2.1+ for libudev package

2017-04-10 23:00:43 +01:00

update-rc.d

update-rc.d: Correct trivial typo in DESCRIPTION line.

2016-08-01 11:47:11 +01:00

util-linux

util-linux: fix "su -" and package su separately

2017-07-17 14:01:39 +01:00

volatile-binds

volatile-binds: correct some errors reported by systemd

2017-04-01 08:14:57 +01:00

zlib

zlib: Pass pre-calculate uname enable re-entrant flags

2017-06-23 11:44:14 +01:00