[systemd-devel] User bus broke automatic multiseat

2016-12-14 Thread Oleg Samarin
The following change in systemd-226: systemd now supports the concept of user buses replacing session buses, if used with dbus-1.10 (and enabled via dbus --enable-user-session). It previously only supported this on kdbus-enabled systems, and this release expands this to 'dbus-daemon' systems tota

Re: [systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Lennart Poettering
On Wed, 14.12.16 12:37, Richard Hughes ([email protected]) wrote: > On 14 December 2016 at 11:36, Lennart Poettering > wrote: > > RestrictNamespaces=yes > > I didn't see this on > https://www.freedesktop.org/software/systemd/man/systemd.exec.html -- > is super-new or just undocumented? Otherw

Re: [systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Richard Hughes
On 14 December 2016 at 11:36, Lennart Poettering wrote: > RestrictNamespaces=yes I didn't see this on https://www.freedesktop.org/software/systemd/man/systemd.exec.html -- is super-new or just undocumented? Otherwise, thanks! Richard. ___ systemd-devel

Re: [systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Lennart Poettering
On Wed, 14.12.16 10:55, Richard Hughes ([email protected]) wrote: > On 14 December 2016 at 09:32, Reindl Harald wrote: > > RestrictAddressFamilies=AF_NETLINK > > Great, that was the pointer I needed, thanks. I'm currently setting > this in the service file: > > NoNewPrivileges=yes > PrivateTm

Re: [systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Richard Hughes
On 14 December 2016 at 09:32, Reindl Harald wrote: > RestrictAddressFamilies=AF_NETLINK Great, that was the pointer I needed, thanks. I'm currently setting this in the service file: NoNewPrivileges=yes PrivateTmp=yes PrivateUsers=yes ProtectControlGroups=yes ProtectHome=yes ProtectKernelModules=

Re: [systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Reindl Harald
Am 14.12.2016 um 10:25 schrieb Richard Hughes: It would be a shame to have PrivateNetwork commented out in fwupd, especially as it's a root daemon that has no business dealing with networking stuff. Is there a way of using PrivateNetwork=yes and allowing AF_NETLINK to correctly work? Restrict

[systemd-devel] PrivateNetwork and libusb

2016-12-14 Thread Richard Hughes
Hi all, For a long time colord has had PrivateNetwork commented out in colord, as it prevented libudev working correctly. We thought that perhaps udev's AF_NETLINK messages are being filtered when network namespacing is on. In an unrelated project (this time fwupd) we recently also found that libu

[systemd-devel] service timeout during startup

2016-12-14 Thread Johnny Karlsson
Hi! I'm investigating an issue with systemd(225) services that has type=Dbus which time out during startup. I've also tested om 228 and the problem doesn't seem to occur any more but I would like to be sure that it's solved in the later version. It could be related to https://github.com/systemd/sy