dracut-112

Notes

This release includes the following security related commits:

• network-legacy: sanitize DHCP values in dhclient-script.sh (11577739)
• overlayfs-crypt: prevent eval injection in parse_overlay_opts() (584e95be)
• dracut-lib: sanitize variable assignments using eval (4d2d812b)
• base: add escape function implementing printf %q (207c3397)
• systemd-networkd: escape values from DHCP options (b456aee2)
• iscsi: normalize initiator and target names (843af3e7)
• net-lib: validate iSCSI LUN parameters (05c02db9)

This release includes the following new dracut modules:

• chrony: introducing the chrony module (4d64d0b9)
• qcom-adsp: add module to load Qualcomm ADSP module pre-udev (647a685d)

Bug Fixes

• remove basename calls (1898470b)
• remove dirname calls (66111f49)
• replace true by : (37717095)
• base: use printf instead of echo for hook variable (ceadcea0)
• bluetooth: skip warning when module is explicitly requested (f334ea7c)
• crypt: do not call return to exit a systemd generator (fbb7270e, closes #2490)
• dbus: restrict After/Requires removal patterns (95a4da1b)
• docs: declare the correct location to report vulnerabilities (6a9d409f)
• dracut:
  • write force_drivers cmdline file in one step (f72f94a2)
  • use dstdir in build_ld_cache() (6b7db010)
  • do not exit the loop in push_user_devs() without checking all items (573b91ee)
  • do not exit the loop in push_host_devs() without checking all items (b57d2c2e)
  • log warning if touch fails (fcffd4a0)
  • two typos in the 3cpio fallback (852aeeb2)
  • default to hostonly_cmdline=no in chroot (67d82872)
  • properly pass user-supplied SBAT to ukify (abef6535)
  • remove support for tmpfilesconfdir (fb09ec26)
  • support chmod applet from busybox (8a0ee588)
• dracut-functions:
  • reset _found flag per rule in inst_rules() (a0383c8d)
  • correct hostonly path for Gentoo sysusers (f037de42)
• dracut-install:
  • check return value in modalias read() (379e6b35)
  • handle empty string in dir_len() (0224b30e)
  • remove FTS_NOSTAT in install_modules() fts traversal (40e7af01)
• dracut-lib: sanitize variable assignments using eval (4d2d812b)
• dracut-systemd: add ordering constraints (8aa5c93b)
• dracut.conf.5: move fstab/chroot warning to hostonly_mode section (1374dc95)
• iscsi:
  • normalize initiator and target names (843af3e7)
  • handle empty URI in firmware boot mode (3c1a3846)
• kernel-modules:
  • include xhci-pci-prom21 for early USB (bccf5798)
  • add Mediatek MTU3 USB controller (8f243cfb)
• lunmask: use function in parse-lunmask.sh (4815bf38)
• mdraid:
  • escape slash in sed regular expression (a76d9cbe)
  • install 59-persistent-storage-md.rules only when needed (78c043a9)
• net-lib: validate iSCSI LUN parameters (05c02db9)
• network-legacy: sanitize DHCP values in dhclient-script.sh (11577739)
• network-manager: prevent command injection while parsing DHCP options (589bef03)
• nfs: rpc.statd binary is not required for NFSv4 (d152163a)
• nvmf:
  • parse json output from "nvme list-subsys" (c2729e52)
  • make network driver determination work without nbft$X (21db5cb4)
• overlayfs-crypt: prevent eval injection in parse_overlay_opts() (584e95be)
• systemd-*: add new dlopen dependencies to modules lists (7ef765d6)
• systemd-networkd:
  • use another name for the default .network file (0d35650a)
  • escape values from DHCP options (b456aee2)
  • get DHCP options values from networkctl (7c57b1cc)
• systemd-pcrextend: add missing systemd-pcr{nvdone,osseparator}.service (e57ad524)
• systemd-tmpfiles: do not include tmpfiles configured in /etc (73e9b649, closes #1706)
• systemd-udevd: install systemd-udevd-varlink.socket (4323cf07)
• tpm2-tss:
  • add missing 60-tpm2-id.rules (5e133721)
  • add missing systemd-tpm2-setup-early.service (98d6a569)
• usrmount: filter out subvolid option for btrfs (26bafde3)
• virtfs: move mount hook to pre-mount (7e02a913)

Performance

• devicetree-firmware: do not call inst_multiple if there are no fw files (c1cb94f0)
• dracut-systemd: drop ExecStart from oneshot shutdown service (bb2f35cb)
• systemd-modules-load: remove duplicate paths from inst_multiple (a1b9f9ec)
• systemd-networkd: remove duplicate service from inst_multiple (d2599468)
• systemd-sysctl: remove duplicate paths from inst_multiple (40eae157)
• systemd-tmpfiles: do not install systemd-tmpfiles-clean.service (ce430f1e)
• udev-rules:
  • do not install the mtp-probe udev helper (9f772844)
  • do not install the hid2hci udev helper (bc63ac2c)
  • do not try to install fw_unit_symlinks.sh (d0146924)
  • do not try to install create_floppy_devices (55bf9202)
  • do not try to install udev built-ins (b82d7152)
  • do not try to install 59-scsi-sg3_utils.rules (4c226acd)
  • do not try to install 95-udev-late.rules (5c227d40)

Features

• check shellcode to support busybox (25bedc75)
• Makefile: allow running syntax checks separately (3a489b1c)
• base: add escape function implementing printf %q (207c3397)
• chrony: introducing the chrony module (4d64d0b9)
• dracut:
  • add module to load Qualcomm ADSP module pre-udev (647a685d)
  • add parameter --nvmf-nbft-mode (146927ce)
• network-manager:
  • write info about NTP servers in dhcpopts file (8b77df75)
  • use escape to drop requiring bash (9c7459bd)
• nvmf:
  • set rd.nvmf.nm=1 if NetworkManager 1.54 is detected (97858467)
  • allow using system interface naming policy (00df7431)
  • add dracut.conf option nvmf_nbft_mode (bc1f1405)
  • enable adapting to NBFT reconfiguration (3ecd3048)
• resume:
  • include in hostonly sloppy mode if supported by kernel (0589c659)
  • add debug logs to check() (03a5ea09)
• systemd: drop unnecessary dependency on libgcrypt (0406aa64)
• systemd-networkd: write info about NTP servers in dhcpopts file (96c9d5c4)