GitLab

Tested-by: smcv
Reviewed-by: zumbi

mtd_probe.h-Include-stdint.h-for-uint32_t.patch: Add missing <stdint.h> for uint32_t to fix FTBFS on amd64

* Merge from Debian jessie, remaining changes:
  + d/p/sound-no-uaccess.patch
    - SteamOS uses a system-wide PulseAudio instance, which should be the
      only thing with access to the sound devices. As such,
      disable uaccess for sound devices.
  + d/p/pulse-owns-audio.patch
    - Change the sound device group from the default audio to pulse so that
      only the system-wide pulse daemon can access those devices.
  + streamcontroller-support.patch
    - Allow access by the steam group to uinput devices, as used for Steam
      Controller support

Sjoerd Simons authored Jun 02, 2015 and Simon McVittie committed Apr 20, 2018

systemd (215-17+steamos1) brewmaster; urgency=medium

  * Merge SteamOS patches
    + sound-no-uaccess.patch
      - SteamOS uses a system wide pulseaudio instance, which should be the
        only daemon with access to the sound devices. As such disable uaccess
        for sound devices
    + pulse-owns-audio.patch
      - Change the sound device group from the default audio to pulse such that
        only the system-wide pulse daemon can access those devices
    + streamcontroller-support.patch
      - Allow access to the stream group for uinput device as used for stream
        controller support

Otherwise we'll hit an assert sooner or later.

Closes: #856035

This can happen when the configuration is changed and reloaded while we
are executing a service. Let's not hit an assert in this case.

Closes: #856985

The update-rc.d utility does not provide is-enabled, so implement it
ourselves in systemctl using the same logic as systemd-sysv-install from
Stretch.

Closes: #809405

This fixes the problem that on big endian architectures, like mips or
powerpc, boolean properties that were retrieved via sd-bus were always
set to 0 (no).

Closes: #774430

Closes: #776997

Run ifup after all kernel modules have been loaded and all sysctl
settings are applied.

Update ifup@.service to add missing After= for the device unit we bind to.
This ensures that the device unit is active when systemd tries to start
the service.

Closes: #819314

This adds a concept of "extrinsic" mounts. If mounts are extrinsic we
consider them managed by something else and do not add automatic
ordering against umount.target, local-fs.target, remote-fs.target.

Extrinsic mounts include API mounts such as everything below /proc,
/sys, /dev.

This avoids a crash in LXC containers where /dev/urandom is a bind mount
from the host system and unmounting it leads to an assert in systemd.

Closes: #818978

Patch cherry-picked from upstream master.

LP: #1565617
Closes: #774153

The debian-specific patch to read Debian config files was not tolerating
the absence of /etc/default/keyboard. This causes systemd-localed to
fail to start on systems where that file isn't populated (like embedded
systems without keyboards).

Closes: #833849

If manager_dispatch_notify_fd() fails and returns an error then the
handling of service notifications will be disabled entirely leading to a
compromised system.

For example pid1 won't be able to receive the WATCHDOG messages anymore
and will kill all services supposed to send such messages.

Fixes: CVE-2016-7796
Closes: #839607

* Order systemd-user-sessions.service after nss-user-lookup.target. We
  should not allow logins before NIS/LDAP users are available.
* Order systemd-user-sessions.service after network.target. That way we can
  be sure that local users are logged out and SSH sessions are ended cleanly
  before the network is shut down when the system goes down.

Use ConditionPathExists=/dev/tty0, the same check as in getty@.service,
to determine whether we have a functional VC subsystem and we should
start any gettys.

Closes: #824779

Avoids repeated unsuccessful start attempts of agetty inside (docker)
containers.

Closes: #829537

The systemd.resource-control man page had references to /cgroups/ which
moved to /cgroup-v1/.

Closes: #819970

Otherwise a disabled event source can get swapped with an enabled one
and cause a severe sd-event malfunction, breaking the event loop.

Closes: #789796

Closes: #828006

This ensures that services are properly killed after a given timeout.

Closes: #813702

Do not fail when modifying an existing link.

Closes: #813696

Otherwise we break booting with dracut which uses systemd inside the
initramfs.

Closes: #810748

Don't call addgroup with --quiet, so that if the "input"
group already exists as a non-system group you get a sensible error
message. Some broken tutorials forget the --system option.
Do the same when creating the systemd-journal group.

Closes: #769948
LP: #1455956
Closes: #762275

This avoids that swap devices are being stopped prematurely
during shutdown.

Closes: #805133

Prevents future upgrade failures with versioned Breaks: to udev like

  De-configuring udev (228-2ubuntu1) ...
  /var/lib/dpkg/info/udev.prerm called with unknown argument 'deconfigure'
  dpkg: error processing archive /home/ubuntu/./lvm2_2.02.133-1ubuntu1_amd64.deb (--unpack):
   subprocess installed pre-removal script returned error exit status 1

via RequestBroadcast=. This is a backport from upstream which doesn't
change the default setting.

Closes: #797894

Closes: #793477

Otherwise, every daylight saving time change or time zone change by
travelling will make the time jump, and the local time might jump
backwards which creates unsolvable problems with file timestamps.

Closes: #759319

Closes: #802897

Closes: #787758