{"push_id":1032635142,"size":43,"distinct_size":43,"ref":"refs/heads/master","head":"944dedd302f7b579655d873bcbc91b81dc548820","before":"b18eb0a676bdd5e00ce43ec31540653f94f82c83","commits":[{"sha":"19c0b0b9a5039b842cf9e6c3e7ece75fb8725602","author":{"email":"740e0ad5ef30a7853ec51274f6bed74873d1d415@gmail.com","name":"Ronny Chevalier"},"message":"core: set NoNewPrivileges for seccomp if we don't have CAP_SYS_ADMIN\n\nThe manpage of seccomp specify that using seccomp with\nSECCOMP_SET_MODE_FILTER will return EACCES if the caller do not have\nCAP_SYS_ADMIN set, or if the no_new_privileges bit is not set. Hence,\nwithout NoNewPrivilege set, it is impossible to use a SystemCall*\ndirective with a User directive set in system mode.\n\nNow, NoNewPrivileges is set if we are in user mode, or if we are in\nsystem mode and we don't have CAP_SYS_ADMIN, and SystemCall*\ndirectives are used.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/19c0b0b9a5039b842cf9e6c3e7ece75fb8725602"},{"sha":"50f130c286c4a4cb87a94a0fc419a4462a98a7a1","author":{"email":"740e0ad5ef30a7853ec51274f6bed74873d1d415@gmail.com","name":"Ronny Chevalier"},"message":"test-execute: add nfsnobody alternative as a nobody user","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/50f130c286c4a4cb87a94a0fc419a4462a98a7a1"},{"sha":"0513ea4e3fc42c2d495ae47d83815ce09d2274b2","author":{"email":"16e26612e4159990a6b3691e92592e691ff74132@redhat.com","name":"Thomas Haller"},"message":"lldp: fix starting ttl timer for lldp neighbor\n\nlldp_start_timer() was only called during sd_lldp_get_neighbors().\nEnsure that the timer is (re-)started when a new neighbor appears.\nOtherwise, the timer is not started when relying on the events alone.\n\nFixes: 34437b4f9c9c51b0a6f93788bdb9a105b8e46b66","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/0513ea4e3fc42c2d495ae47d83815ce09d2274b2"},{"sha":"ce33fddad0806f859ff7324527ee0525dd10455e","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"test-copy: add a test shuffling bytes between normal files\n\nI started looking into adding copy_file_range support, and discovered\nthat we can improve the way we call sendfile:\n- sendfile(2) man page is missing an important bit: the number of bytes to\n  copy cannot be too big (SSIZE_MAX actually), and the description of EINVAL\n  return code does not mention this either,\n- our implementation works but calls sendfile over and over with a small\n  size, which seems suboptimal.\n\nFirst add a test which (under strace) can be used to see current behaviour.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/ce33fddad0806f859ff7324527ee0525dd10455e"},{"sha":"00a8cf7763ec5e132efd4c974fbc6530c82240d0","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"basic/copy: use sendfile smarter\n\nWe called sendfile with 16kb (a.k.a. COPY_BUFFER_SIZE) as the maximum\nnumber of bytes to copy. This seems rather inefficient, especially with\nlarge files. Instead, call sendfile with a \"large\" maximum.\n\nWhat \"large\" max means is a bit tricky: current file offset + max\nmust fit in loff_t. This means that as we call sendfile more than once,\nwe have to lower the max size.\n\nWith this patch, test-copy calls sendfile twice, e.g.:\nsendfile(4, 3, NULL, 9223372036854775807) = 738760\nsendfile(4, 3, NULL, 9223372036854037047) = 0\nThe second call is necessary to determine EOF.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/00a8cf7763ec5e132efd4c974fbc6530c82240d0"},{"sha":"7a827fcb115b6e03e351599db76f247e199d6351","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"test-copy: test with different max_bytes values","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/7a827fcb115b6e03e351599db76f247e199d6351"},{"sha":"26e9e10b39fdf343dcb7e11b6cb4eecf11a45970","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"basic/macros: clang 3.5 doesn't support alloc_size\n\nThe attribute was removed in commit c047507 in the clang repository as it\nwas never properly implemented anyway. Avoid using the attribute with\nclang because it generates a ton of annoying warnings.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/26e9e10b39fdf343dcb7e11b6cb4eecf11a45970"},{"sha":"d2d23cf240a207d4b719c46e71dd869836a02c0e","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"basic/c-rbtree: remove unused function","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/d2d23cf240a207d4b719c46e71dd869836a02c0e"},{"sha":"c337642992892219479704460a8d7042d66ce1e7","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"basic/log: remove unused return value","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/c337642992892219479704460a8d7042d66ce1e7"},{"sha":"7aad67e7f2b3dfbc3b5a884471bd551e4bf997cc","author":{"email":"6e59e185bd8aa811a02a56907f7a42849a4588d3@redhat.com","name":"Michal Sekletar"},"message":"core: look for instance when processing template name\n\nIf first attempt to merge units failed and we are trying to do\nmerge the other way around and at the same time we are working with\ntemplate name, then other unit can't possibly be template, because it is\nnot possible to have template unit running, only instances of the\ntemplate. Thus we need to look for already active instance instead.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/7aad67e7f2b3dfbc3b5a884471bd551e4bf997cc"},{"sha":"483d8bbb4c0190f419bf9fba57fb0feb1a56bea6","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"rules: allow users to access frame buffer devices\n\nFor example it allows weston to be started unprivileged.\n\nRelated discussion:\nhttps://bugs.freedesktop.org/show_bug.cgi?id=73782\nhttps://lists.freedesktop.org/archives/wayland-devel/2015-May/022005.html\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1226680","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/483d8bbb4c0190f419bf9fba57fb0feb1a56bea6"},{"sha":"dc9b58166ca062583bcc8145ab3df79b2b39b9ae","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"systemd: obey systemd.log_color config\n\nFixes #2845.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/dc9b58166ca062583bcc8145ab3df79b2b39b9ae"},{"sha":"f66a1c48cf5b904205c1b1f110b4c9a79f77c5f6","author":{"email":"6e59e185bd8aa811a02a56907f7a42849a4588d3@redhat.com","name":"Michal Sekletar"},"message":"units: run ldconfig.service after we have mounted all local file systems\n\nAlso drop ConditionNeedsUpdate=|/etc. Regardless if system is updated\nonline or offline, updating dynamic loader cache should always be\nresponsibility of packaging tools/scripts.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/f66a1c48cf5b904205c1b1f110b4c9a79f77c5f6"},{"sha":"ce1d15ed0f944b864ac1ea0025297daede7b45f4","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"Merge pull request #2859 from msekletar/ldconfig-after-localfs\n\nunits: run ldconfig.service after we have mounted all local file systems","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/ce1d15ed0f944b864ac1ea0025297daede7b45f4"},{"sha":"c31be17f6bfb0a7c6f8ecb892f125016b7986f5c","author":{"email":"64b2b6d12bfe4baae7dad3d018f8cbf6b0e7a044@zonque.org","name":"Daniel Mack"},"message":"Merge pull request #2848 from keszybz/clang-warnings\n\nClang warnings","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/c31be17f6bfb0a7c6f8ecb892f125016b7986f5c"},{"sha":"2ddbdcc9c24b802564784f0812611b368a733e51","author":{"email":"fb53b2ddb8d141e0cb39d7c67c2f81b6bc2eb0f7@googlemail.com","name":"David Herrmann"},"message":"Merge pull request #2858 from keszybz/fbdev-uaccess\n\nrules: allow users to access frame buffer devices","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/2ddbdcc9c24b802564784f0812611b368a733e51"},{"sha":"1d4b557d1b5cd200b27562808c690653658ffadf","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"basic/missing: add copy_file_range\n\nsyscall numbers based on:\nhttps://fedora.juszkiewicz.com.pl/syscalls.html","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/1d4b557d1b5cd200b27562808c690653658ffadf"},{"sha":"a44202e98b638024c45e50ad404c7069c7835c04","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"basic/copy: use copy_file_range()\n\nFor btrfs, c_f_r() is like BTRFS_IOC_CLONE which we already used, but also\nworks when max_bytes is set. We do call copy_bytes in coredump code with\nmax_bytes set, and for large files, so we might see some benefit from using\nc_f_r() on btrfs.\n\nFor other filesystems, c_f_r() falls back to do_splice_direct(), the same as\nsendfile, which we already call, so there shouldn't be much difference.\n\nTested with test-copy and systemd-coredump on Linux 4.3 (w/o c_f_r)\nand 4.5 (w/ c_f_r).","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/a44202e98b638024c45e50ad404c7069c7835c04"},{"sha":"2f368e4a114888dae8c7ebb1020efc3d922b61e9","author":{"email":"1a002461b1932d3892b64879e6e8987274fa7074@in.waw.pl","name":"Zbigniew Jędrzejewski-Szmek"},"message":"basic/missing: move syscall definitions to basic/missing_syscall.h\n\nWe have a bunch of syscall wrapper definitions and it's easier to\nsee that they follow the same pattern if they are not interspersed\nwith other defines.\n\nChange the wrappers to be uniform:\n- if __NR_XXX is not defined, do not bother to call the syscall,\n  and return -1/ENOSYS immediately.\n- do not check __NR_XXX defines if we detect the symbol as defined,\n  since we don't need them anyway\n- reindent stuff for readability\n\nNew file basic/missing_syscall.h is included at the end of missing.h\nbecause it might make use of some of the definitions in missing.h.","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/2f368e4a114888dae8c7ebb1020efc3d922b61e9"},{"sha":"90e644608ebf94f5f3c8acb1317bf4723826e337","author":{"email":"64b2b6d12bfe4baae7dad3d018f8cbf6b0e7a044@zonque.org","name":"Daniel Mack"},"message":"Merge pull request #2856 from msekletar/merge-instance\n\ncore: look for instance when processing template name","distinct":true,"url":"https://api.github.com/repos/splantefeve/systemd/commits/90e644608ebf94f5f3c8acb1317bf4723826e337"}]}