summaryrefslogtreecommitdiff
path: root/NEWS
AgeCommit message (Collapse)Author
2016-06-24resolved: add option to disable caching (#3592)Martin Pitt
In some cases, caching DNS results locally is not desirable, a it makes DNS cache poisoning attacks a tad easier and also allows users on the system to determine whether or not a particular domain got visited by another user. Thus provide a new "Cache" resolved.conf option to disable it.
2016-06-22NEWS: start section for 231, with tmpfs.mount option changes (#3576)Martin Pitt
This documents the "add nosuid and nodev options to tmp.mount" change from commit 2f9df7c96a2.
2016-06-03tests: introduce UNIFIED_CGROUP_HIERARCHY (#3419)Evgeny Vereshchagin
There are many cgroups-related changes (thanks, @htejun!) This commit will simplify testing a bit. Use: make run UNIFIED_CGROUP_HIERARCHY=yes to enable cgroup-v2 make run UNIFIED_CGROUP_HIERARCHY=no to enable cgroup-v1
2016-05-28Typo fix: s/advertisment/advertisement/Zbigniew Jędrzejewski-Szmek
2016-05-26Typo: systemd-nspaw -> systemd-nspawn (#3354)Ansgar Burchardt
2016-05-23Mention initrd-root-device.target in NEWS (#3325)Dave Reisner
2016-05-21NEWS: final updates for v230Zbigniew Jędrzejewski-Szmek
2016-05-20NEWS: typo fix and american english (#3301)Thomas H. P. Andersen
2016-05-19NEWS: mention SessionsMax, InhibitorsMax, MulticastSnooping...Zbigniew Jędrzejewski-Szmek
... logind SIGHUP support, sd_journal_open_{directory,files}_fd, specifiers in DeviceAllow, "generated" and "trasnient" unit types. Move removed features to the end and cluster features by type.
2016-05-17networkd: Add EmitRouter= option for DHCP Server (#3251)Clemens Gruber
Add an option to disable appending DHCP option 3 (Router) to the DHCP OFFER and ACK packets. This commit adds the boolean option EmitRouter= for the [DHCPServer] section in .network files. Rationale: On embedded devices, it is very useful to have a DHCP server running on an USB OTG ethernet gadget interface to avoid manual setup on the client PCs, but it should only serve IP addresses, no route(r)s. Otherwise, Windows clients experience network connectivity issues, due to them using the address set in DHCP option 3 as default gateway. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
2016-05-16update NEWSLennart Poettering
2016-05-16update TODOLennart Poettering
2016-05-07NEWS: typo fix and american english (#3219)Thomas H. P. Andersen
2016-05-07NEWS: machinectl and loginctl also support --valueZbigniew Jędrzejewski-Szmek
2016-05-07NEWS: minor fixesDaniele Medri
2016-05-06NEWS: bring NEWS a bit up-to-dateLennart Poettering
2016-04-21tree-wide: use mdash instead of a two minusesZbigniew Jędrzejewski-Szmek
2016-04-21Merge pull request #3005 from keszybz/kill-user-procesesLennart Poettering
Kill user session scope by default
2016-04-21logind: allow any user to request lingeringZbigniew Jędrzejewski-Szmek
We enable lingering for anyone who wants this. It is still disabled by default to avoid keeping long-running processes accidentally. Admins might want to customize this policy on multi-user sites.
2016-04-21build-sys: add --without-kill-user-processes configure optionZbigniew Jędrzejewski-Szmek
2016-04-21logind: flip KillUserProcesses to on by defaultZbigniew Jędrzejewski-Szmek
This ensures that users sessions are properly cleaned up after. The admin can still enable or disable linger for specific users to allow them to run processes after they log out. Doing that through the user session is much cleaner and provides better control. dbus daemon can now be run in the user session (with --enable-user-session, added in 1.10.2), and most distributions opted to pick this configuration. In the normal case it makes a lot of sense to kill remaining processes. The exception is stuff like screen and tmux. But it's easy enough to work around, a simple example was added to the man page in previous commit. In the long run those services should integrate with the systemd users session on their own. https://bugs.freedesktop.org/show_bug.cgi?id=94508 https://github.com/systemd/systemd/issues/2900
2016-04-12README: document that we only support util-linux built with ↵Lennart Poettering
--enable-libmount-force-mountinfo Fixes: #2978
2016-04-03NEWS: add some more itemsZbigniew Jędrzejewski-Szmek
DUID support is mentioned without details since those are still being worked out.
2016-03-16Reference correct `machinectl` command in 219 NEWSElias Probst
NEWS for `219` references `machinectl list-images` to describe the introduced clone feature - this looks like a copy'n'paste problem. Use `machinectl clone` instead.
2016-02-24treewide: fix typos and then/that useTorstein Husebø
2016-02-16resolved: turn on DNSSEC by default, unless configured otherwiseLennart Poettering
Let's make sure DNSSEC gets more testing, by defaulting DNSSEC to "allow-downgrade" mode. Since distros should probably not ship DNSSEC enabled by default add a configure switch to disable this again. DNSSEC in "allow-downgrade" mode should mostly work without affecting user experience. There's one exception: some captive portal systems rewrite DNS in order to redirect HTTP traffic to the captive portal. If these systems implement DNS servers that are otherwise DNSSEC-capable (which in fact is pretty unlikely, but still...), then this will result in the captive portal being inaccessible. To fix this support in NetworkManager (or any other network management solution that does captive portal detection) is required, which simply turns off DNSSEC during the captive portal detection, and resets it back to the default (i.e. on) after captive portal authentication is complete.
2016-02-14Promote systemd-activate to /usr/bin/systemd-socket-activateZbigniew Jędrzejewski-Szmek
It has fairly wide functionality now and the interface has been stable for a while. It it a useful testing tool. The name is changed to better indicate what it does.
2016-02-11NEWS: journal device support is limited to current boot, grammarZbigniew Jędrzejewski-Szmek
Reword some sentences for better flow.
2016-02-11fill in contributors list in NEWSLennart Poettering
2016-02-10Merge pull request #2574 from zonque/netclass-removeLennart Poettering
cgroup: remove support for NetClass= directive
2016-02-10cgroup: remove support for NetClass= directiveDaniel Mack
Support for net_cls.class_id through the NetClass= configuration directive has been added in v227 in preparation for a per-unit packet filter mechanism. However, it turns out the kernel people have decided to deprecate the net_cls and net_prio controllers in v2. Tejun provides a comprehensive justification for this in his commit, which has landed during the merge window for kernel v4.5: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bd1060a1d671 As we're aiming for full support for the v2 cgroup hierarchy, we can no longer support this feature. Userspace tool such as nftables are moving over to setting rules that are specific to the full cgroup path of a task, which obsoletes these controllers anyway. This commit removes support for tweaking details in the net_cls controller, but keeps the NetClass= directive around for legacy compatibility reasons.
2016-02-10update NEWSLennart Poettering
2016-02-10NEWS: Various clarification and grammar fixesMartin Pitt
2016-02-10NEWS: start putting together a NEWS file for 229Lennart Poettering
Totally incomplete, but let's get this started.
2016-02-01tmpfiles: drop /run/lock/lockdevMartin Pitt
Hardly any software uses that any more, and better locking mechanisms like flock() have been available for many years. Also drop the corresponding "lock" group from sysusers.d/basic.conf.in, as nothing else is using this.
2015-11-18NEWS: add in missing NEWS entry for 228 feature RemainAfterElapse=Lennart Poettering
2015-11-18build: bump version numberssystemd/v228David Herrmann
Prepare for v228 release and bump version numbers.
2015-11-17Some additions to NEWSLennart Poettering
2015-11-15NEWS: typo fixesThomas Hindoe Paaboel Andersen
2015-11-13NEWS: document two more changes in behaviourLennart Poettering
2015-11-13NEWS: add more stuff, and reorder things a bitLennart Poettering
2015-11-12NEWS: begin putting together a NEWS section for the next releaseLennart Poettering
2015-11-06doc: correct orthography, word forms and missing/extraneous wordsJan Engelhardt
2015-11-06doc: correct punctuation and improve typography in documentationJan Engelhardt
2015-10-07update NEWSDaniel Mack
2015-10-07NEWS: re-order entries slightlyDaniel Mack
Also, the release is actually done in Berlin ;)
2015-10-07Update NEWSLennart Poettering
2015-10-07update NEWSLennart Poettering
2015-10-06update NEWSLennart Poettering
2015-10-06NEWSTom Gundersen