Ross Burton 07e5111828 systemd: refuse to load units with errors (CVE-2017-1000082) ...

If a unit has a statement such as User=0day where the username exists but is
strictly speaking invalid, the unit will be started as the root user instead.

Backport a patch from upstream to mitigate this by refusing to start units such
as this.

(From OE-Core rev: e56cb926c170f493ee2a9c4c63d0ecbf883d4685)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-08-29 16:50:54 +01:00

..

base-files

base-files: resize only serial tty's in profile

2017-05-18 13:07:33 +01:00

base-passwd

busybox/gtk/perl/base-passwd: Ensure data is correctly expanded

2016-02-04 23:39:00 +00:00

bsd-headers

bsd-headers: set SUMMARY instead of DESCRIPTION

2016-05-30 15:58:10 +01:00

busybox

busybox: Security fix BUG9071

2017-05-18 13:07:33 +01:00

console-tools

console-tools: Fix header inclusion when not using glibc

2016-01-24 09:40:31 +00:00

coreutils

coreutils: enable xattr for native

2016-09-06 10:24:04 +01:00

dbus

dbus-glib: enable gtk-doc

2016-09-09 12:12:22 +01:00

dbus-wait

recipes: Add missing pkgconfig class inherits

2014-06-03 16:49:19 +01:00

dropbear

dropbear: deterministic selection of system -vs- bundled libtom libs

2016-09-20 15:11:08 +01:00

expat

expat: Upgrade 2.1.1 -> 2.2.0

2016-07-20 10:28:48 +01:00

fts

fts: set SUMMARY instead of DESCRIPTION

2016-05-30 15:58:10 +01:00

gettext

gettext_0.16.1: whitespace changes to align with v0.19.8.1

2016-08-23 17:44:40 +01:00

glib-2.0

glib-2.0: 2.48.1 -> 2.48.2

2016-08-20 16:06:03 +01:00

glib-networking

glib-networking: Upgrade 2.46.1 -> 2.48.2

2016-05-17 14:43:28 +01:00

glibc

glibc: fix pthread_cond_broadcast issue (arm)

2017-08-29 16:50:53 +01:00

ifupdown

ifupdown: remove EXTRA_OEMAKE workaround

2016-09-03 09:58:40 +01:00

images

build-appliance-image: Update to morty head revision

2017-05-29 00:21:14 +01:00

init-ifupdown

meta: set proper S value

2015-01-23 11:36:27 +00:00

initrdscripts

init-install: Fixes the install script failing when not finding any mmcblk devices

2016-08-30 07:57:50 +01:00

initscripts

initscripts: Start devpts at 06 instead of 38

2016-09-03 23:45:53 +01:00

kbd

kbd: create ptest sub-package

2016-10-01 21:45:56 +01:00

libcgroup

libcgroup: Add dependency on fts when building on musl

2016-01-24 09:40:26 +00:00

libxml

libxml2: CVE-2016-9318

2017-05-18 13:07:34 +01:00

meta

classes/populate_sdk_ext: add symlinks and unfsd to support Eclipse plugin

2016-10-07 16:52:54 +01:00

musl

SDK: Allow changing SDKMACHINE without wiping TMP folder

2016-09-28 10:16:03 +01:00

ncurses

ncurses: upgrade to 6.0+20160625

2016-08-17 10:35:43 +01:00

netbase

netbase: use snapshot.debian.org for SRC_URI

2016-08-01 11:47:14 +01:00

os-release

os-release: sanitise VERSION_ID field

2016-02-28 11:33:02 +00:00

packagegroups

packagegroup-core-standalone-sdk-target: add libssp

2017-08-29 16:50:52 +01:00

psplash

psplash: update to latest git version

2015-12-01 21:32:13 +00:00

readline

readline: don't install readline C examples

2016-08-01 11:47:14 +01:00

sysfsutils

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

systemd

systemd: refuse to load units with errors (CVE-2017-1000082)

2017-08-29 16:50:54 +01:00

sysvinit

sysvinit-inittab_2.88dsf.bb: Allow aliasing with SERIAL_CONSOLES_CHECK

2016-08-10 10:46:32 +01:00

udev

eudev: set LGPL-2.1+ for libudev package

2017-08-29 16:50:53 +01:00

update-rc.d

update-rc.d: Correct trivial typo in DESCRIPTION line.

2016-08-01 11:47:11 +01:00

util-linux

util-linux: add su.1 to update-alternatives

2016-11-16 10:37:57 +00:00

volatile-binds

volatile-binds: correct some errors reported by systemd

2017-05-18 13:07:33 +01:00

zlib

zlib: update SRC_URI to fix fetching

2017-01-12 17:52:04 +00:00