Ross Burton b7e7b5e294 systemd: refuse to load units with errors (CVE-2017-1000082) ...

If a unit has a statement such as User=0day where the username exists but is
strictly speaking invalid, the unit will be started as the root user instead.

Backport a patch from upstream to mitigate this by refusing to start units such
as this.

(From OE-Core rev: a6eaef0f179a341c0b96bb30aaec2d80862a11d6)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-07-27 22:36:44 +01:00

..

00-create-volatile.conf

systemd: correct permission mode of /var/volatile/tmp

2015-03-10 10:47:48 +00:00

0001-core-device.c-Change-the-default-device-timeout-to-2.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0001-core-load-fragment-refuse-units-with-errors-in-certa.patch

systemd: refuse to load units with errors (CVE-2017-1000082)

2017-07-27 22:36:44 +01:00

0002-units-Prefer-getty-to-agetty-in-console-setup-system.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0003-define-exp10-if-missing.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0004-Use-getenv-when-secure-versions-are-not-available.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0005-binfmt-Don-t-install-dependency-links-at-install-tim.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0006-configure-Check-for-additional-features-that-uclibc-.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0007-use-lnr-wrapper-instead-of-looking-for-relative-opti.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0008-nspawn-Use-execvpe-only-when-libc-supports-it.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0009-util-bypass-unimplemented-_SC_PHYS_PAGES-system-conf.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0010-implment-systemd-sysv-install-for-OE.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0011-nss-mymachines-Build-conditionally-when-HAVE_MYHOSTN.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0012-rules-whitelist-hd-devices.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0013-Make-root-s-home-directory-configurable.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0014-Revert-rules-remove-firmware-loading-rules.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0015-Revert-udev-remove-userspace-firmware-loading-suppor.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0016-make-test-dir-configurable.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0017-remove-duplicate-include-uchar.h.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0018-check-for-uchar.h-in-configure.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0019-socket-util-don-t-fail-if-libc-doesn-t-support-IDN.patch

systemd: Upgrade to 232

2016-12-08 10:31:29 +00:00

0020-back-port-233-don-t-use-the-unified-hierarchy-for-the-systemd.patch

systemd: Backport cgroup fix from 233 to 232

2016-12-13 22:55:21 +00:00

init

systemd: Ensure that we mount devtmpfs

2013-06-28 09:14:07 +01:00

run-ptest

systemd: Fix and expand ptests

2016-03-20 23:12:27 +00:00

touchscreen.rules

systemd: add systemd recipes

2013-01-20 12:58:55 +00:00