Request 1090446 (accepted)

Overview

Request 1090446 accepted

- Import commit 07bb12a282b0ea378850934c4a76008b448b8bad (merge of v253.5)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/25aec157888f7aa9a36726962fcbbf2c74ead440...07bb12a282b0ea378850934c4a76008b448b8bad

- Reexecute user managers on package updates.
For now we send signal to user instances to trigger their reexecution. It's
asynchronous but it shouldn't cause any problem in practice and it's probably
safer than triggering reexecution with "systemctl --user -M 1000@
daemon-reexec" command. The latter command creates a new PAM session behind
the scene bringing with it the known issue (upstream issue #8598) with
"(sd-pam)" helper process when the PAM session is being closed.

Created by fbui over 1 year ago
In state accepted

Submit systemd

Comments for request 1090446 4

Dominique Leuenberger (dimstar) - over 1 year ago

reviewer

[  709s] systemd.x86_64: E: polkit-untracked-privilege (Badness: 10000) org.freedesktop.systemd1.bypass-dump-ratelimit (auth_admin:auth_admin:auth_admin_keep)
[  709s] The polkit action is not listed in the polkit-default-privs profiles which
[  709s] makes it harder for admins to find. Furthermore improper polkit authorization
[  709s] checks can easily introduce security issues. If the package is intended for
[  709s] inclusion in any SUSE product please open a bug report to request review of
[  709s] the package by the security team. Please refer to
[  709s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[  709s] more information.