diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2023-07-21 15:41:56 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-21 15:41:56 +0200 |
| commit | 03d298e1e549fb20cd495520cc7ff0fddcb636c7 (patch) | |
| tree | d7b758a59ea7e6a4cb7f0ef2ad34c316b82b89d3 /NEWS | |
| parent | test-ukify: use systemd-measure and bootctl in build directory (diff) | |
| parent | NEWS: note that sd-run --expand-environment will change (diff) | |
| download | systemd-03d298e1e549fb20cd495520cc7ff0fddcb636c7.tar.xz systemd-03d298e1e549fb20cd495520cc7ff0fddcb636c7.zip | |
Merge pull request #28460 from bluca/scope_run_env
run: disable --expand-environment by default for --scope
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -49,6 +49,10 @@ CHANGES WITH 254 in spe: needed in the system service manager. For more details, see: https://lists.freedesktop.org/archives/systemd-devel/2022-December/048682.html + * systemd-run's switch --expand-environment= which currently is disabled + by default when combined with --scope, will be changed in a future + release to be enabled by default. + Security Relevant Changes: * pam_systemd will now by default pass the CAP_WAKE_ALARM ambient @@ -651,7 +655,12 @@ CHANGES WITH 254 in spe: * systemd-run gained a new switch --expand-environment=no to disable server-side environment variable expansion in specified command - lines. + lines. Expansion defaults to enabled for all execution types except + --scope, where it defaults to off (and prints a warning) for backward + compatbility reasons. --scope will be flipped to default enabled too + in a future release, so if you are using --scope and passing a '$' + character in the payload you should start explicitly using + --expand-environment=yes/no according to the use case. * The systemd-system-update-generator has been updated to also look for the special flag file /etc/system-update in addition to the existing |