Take ghost ownership of /var/log/lastlog (#1798685)

lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
lgtm: replace the query used for looking for fgets with a more general query (#2017033)
lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
lgtm: warn about strerror() use (#2017033)
lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
lgtm: don't treat the custom note as a list of tags (#2017033)
lgtm: ignore certain cleanup functions (#2017033)
lgtm: detect more possible problematic scenarios (#2017033)
lgtm: enable more (and potentially useful) queries (#2017033)
test: make TEST-47 less racy (#2017033)
core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
core: Check unit start rate limiting earlier (#2036608)
sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
core: rename/generalize UNIT(u)->test_start_limit() hook (#2036608)
mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
pid1: add a manager_trigger_run_queue() helper (#2036608)
unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
sysctl: prefix ping port range setting with a dash (#2037807)
mount: don't propagate errors from mount_setup_unit() further up (#2036853)

core: consider service with no start command immediately started (#1860899)
core: define "exit" and "exit-force" actions for user units and only accept that (#1860899)
core: accept system mode emergency action specifiers with a warning (#1860899)
core: allow services with no commands but SuccessAction set (#1860899)
core: limit service-watchdogs=no to actual "watchdog" commands (#1860899)
units: use SuccessAction=exit-force in systemd-exit.service (#1860899)
units: use SuccessAction=reboot-force in systemd-reboot.service (#1860899)
units: use SuccessAction=poweroff-force in systemd-poweroff.service (#1860899)
units: allow and use SuccessAction=exit-force in system systemd-exit.service (#1860899)
core: do not "warn" about mundane emergency actions (#1860899)
macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2017033)
tests: add helper function to autodetect CI environments (#2017033)
strv: rework FOREACH_STRING() macro (#2017033)
ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2017033)

sd-hwdb: allow empty properties (#2005009)
Update hwdb (#2005009)
Disable libpitc to fix CentOS Stream CI (#2017033)
rpm: Fix typo in /usr/lib/environment.d (#2018024)
rpm: Add misspelled /usr/lib/environment.d macro for temporary compatibility (#2018024)
rpm: emit warning when macro with typo is used (#2018024)
Remove unintended additions to systemd-analyze man page (#2004765)
core: fix SIGABRT on empty exec command argv (#2020239)
core/service: also check path in exec commands (#2020239)
mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (#2015057)
basic: add vmware hypervisor detection from device-tree (#1959150)
pam: do not require a non-expired password for user@.service (#1961746)
udev rules: add rule to create /dev/ptp_hyperv (#1991834)
process-util: explicitly handle processes lacking parents in get_process_ppid() (#1977569)
errno-util: add ERRNO_IS_PRIVILEGE() helper (#1977569)
procfs-util: fix confusion wrt. quantity limit and maximum value (#1977569)
test-process-util: also add EROFS to the list of "good" errors (#1977569)
journal: refresh cached credentials of stdout streams (#1931806)
util-lib: introduce HAS_FEATURE_ADDRESS_SANITIZER (#2017033)
ci: skip test-execute on GH Actions under ASan (#2017033)
test-seccomp: accept ENOSYS from sysctl(2) too (#2017033)
test: accept that char device 0/0 can now be created witout privileges (#2017033)
meson: do not fail if rsync is not installed with meson 0.57.2 (#2017033)
pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#1970945)
sd-event: take ref on event loop object before dispatching event sources (#1970945)

Added option --check-inhibitors for non-tty usage (#1269726)
logind: Introduce RebootWithFlags and others (#1269726)
logind: add …WithFlags methods to policy (#1269726)
logind: simplify flags handling a bit (#1269726)
Update link to RHEL documentation (#1982584)
Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
shared/seccomp-util: address family filtering is broken on ppc (#1982650)
logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
logind: fix serialization/deserialization of user's "display session" (#1642460)
logind: turn of stdio locking when writing session files too (#1642460)
units: set StopWhenUnneeded= for the user slice units too (#1642460)
units: improve Description= string a bit (#1642460)
logind: improve logging in manager_connect_console() (#1642460)
logind: save/restore User object's "stopping" field during restarts (#1642460)
logind: correct bad clean-up path (#1642460)
logind: fix bad error propagation (#1642460)
logind: never elect a session that is stopping as display (#1642460)
logind: introduce little helper that checks whether a session is ready (#1642460)
logind: propagate session stop errors (#1642460)
logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
logind: improve error propagation of user_check_linger_file() (#1642460)
logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
pam_systemd: simplify code which with we set environment variables (#1642460)
logind: validate /run/user/1000 before we set it (#1642460)

remove a left-over break (#1970860)
basic/unit-name: do not use strdupa() on a path (#1974700)
sd-event: change ordering of pending/ratelimited events (#1968528)
sd-event: drop unnecessary "else" (#1968528)
sd-event: use CMP() macro (#1968528)
sd-event: use usec_add() (#1968528)
sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
ci: run unit tests on z-stream branches as well (#1970860)
ci: drop forgotten Travis references (#1934504)
ci: run unit tests on CentOS 8 Stream as well (#1934504)
ci: add missing test dependencies (#1934504)
meson: bump timeout for test-udev to 180s (#1934504)

cgroup: Also set io.bfq.weight (#1927290)
seccomp: allow turning off of seccomp filtering via env var (#1916835)
meson: remove strange dep that causes meson to enter infinite loop (#1970860)
copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
core: Hide "Deactivated successfully" message (#1954802)
util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
initrd: do a debug log if failed to detect rootfs type (#1959339)
initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
shared/install: Preserve escape characters for escaped unit names (#1952686)
basic/virt: Detect PowerVM hypervisor (#1937989)
man: document differences in clean exit status for Type=oneshot (#1940078)
busctl: add a timestamp to the output of the busctl monitor command (#1909214)
basic/cap-list: parse/print numerical capabilities (#1946943)
shared/mount-util: convert to libmount (#1885143)
mount-util: bind_remount: avoid calling statvfs (#1885143)
mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
test-install-root: create referenced targets (#1835351)
install: warn if WantedBy targets don't exist (#1835351)
test-install-root: add test for unknown WantedBy= target (#1835351)
ceph is a network filesystem (#1952013)
sysctl: set kernel.core_pipe_limit=16 (#1949729)
core: don't drop timer expired but not yet processed when system date is changed (#1899402)
core: Detect initial timer state from serialized data (#1899402)
rc-local: order after network-online.target (#1934028)
set core ulimit to 0 like on RHEL-7 (#1905582)
test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)

systemd-binfmt: Add safeguard in triggers (#1787144)
spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
spec: Disable libiptc support (#1817265)

Revert "udev: run link_update() with increased retry count in second invocation" (#1942299)
Revert "udev: make algorithm that selects highest priority devlink less susceptible to race conditions" (#1942299)
test/udev-test.pl: drop test cases that add mutliple devices (#1942299)

Revert "test: add test cases for empty string match" and "test: add test case for multi matches when use ||" (#1935124)
test/sys-script.py: add missing DEVNAME entries to uevents (#1935124)
sd-event: split out helper functions for reshuffling prioqs (#1937315)
sd-event: split out enable and disable codepaths from sd_event_source_set_enabled() (#1937315)
sd-event: mention that two debug logged events are ignored (#1937315)
sd-event: split clock data allocation out of sd_event_add_time() (#1937315)
sd-event: split out code to add/remove timer event sources to earliest/latest prioq (#1937315)
sd-event: fix delays assert brain-o (#17790) (#1937315)
sd-event: let's suffix last_run/last_log with "_usec" (#1937315)
sd-event: refuse running default event loops in any other thread than the one they are default for (#1937315)
sd-event: ref event loop while in sd_event_prepare() ot sd_event_run() (#1937315)
sd-event: follow coding style with naming return parameter (#1937315)
sd-event: remove earliest_index/latest_index into common part of event source objects (#1937315)
sd-event: update state at the end in event_source_enable (#1937315)
sd-event: increase n_enabled_child_sources just once (#1937315)
sd-event: add ability to ratelimit event sources (#1937315)
test: add ratelimiting test (#1937315)
core: prevent excessive /proc/self/mountinfo parsing (#1937315)
udev: run link_update() with increased retry count in second invocation (#1935124)
pam-systemd: use secure_getenv() rather than getenv() (#1936866)

ci: PowerTools repo was renamed to powertools in RHEL 8.3 (#1871827)
ci: use quay.io instead of Docker Hub to avoid rate limits (#1871827)
ci: move jobs from Travis CI to GH Actions (#1871827)
unit: make UNIT() cast function deal with NULL pointers (#1871827)
use link to RHEL-8 docs (#1623116)
cgroup: Also set blkio.bfq.weight (#1657810)
units: make sure initrd-cleanup.service terminates before switching to rootfs (#1657810)
core: reload SELinux label cache on daemon-reload (#1888912)
selinux: introduce mac_selinux_create_file_prepare_at() (#1888912)
selinux: add trigger for policy reload to refresh internal selabel cache (#1888912)
udev/net_id: give RHEL-8.4 naming scheme a name (#1827462)
basic/stat-util: make mtime check stricter and use entire timestamp (#1642728)
udev: make algorithm that selects highest priority devlink less susceptible to race conditions (#1642728)
test: create /dev/null in test-udev.pl (#1642728)
test: missing "die" (#1642728)
udev-test: remove a check for whether the test is run in a container (#1642728)
udev-test: skip the test only if it can't setup its environment (#1642728)
udev-test: fix test skip condition (#1642728)
udev-test: fix missing directory test/run (#1642728)
udev-test: check if permitted to create block device nodes (#1642728)
test-udev: add a testcase of too long line (#1642728)
test-udev: use proper semantics for too long line with continuation (#1642728)
test-udev: add more tests for line continuations and comments (#1642728)
test-udev: add more tests for line continuation (#1642728)
test-udev: fix alignment and drop unnecessary white spaces (#1642728)
test/udev-test.pl: cleanup if skipping test (#1642728)
test: add test cases for empty string match (#1642728)
test: add test case for multi matches when use "||" (#1642728)
udev-test: do not rely on "mail" group being defined (#1642728)
test/udev-test.pl: allow multiple devices per test (#1642728)
test/udev-test.pl: create rules only once (#1642728)
test/udev-test.pl: allow concurrent additions and removals (#1642728)
test/udev-test.pl: use computed devnode name (#1642728)
test/udev-test.pl: test correctness of symlink targets (#1642728)
test/udev-test.pl: allow checking multiple symlinks (#1642728)
test/udev-test.pl: fix wrong test descriptions (#1642728)
test/udev-test.pl: last_rule is unsupported (#1642728)
test/udev-test.pl: Make some tests a little harder (#1642728)
test/udev-test.pl: remove bogus rules from magic subsys test (#1642728)
test/udev-test.pl: merge "space and var with space" tests (#1642728)
test/udev-test.pl: merge import parent tests into one (#1642728)
test/udev-test.pl: count "good" results (#1642728)
tests/udev-test.pl: add multiple device test (#1642728)
test/udev-test.pl: add repeat count (#1642728)
test/udev-test.pl: generator for large list of block devices (#1642728)
test/udev-test.pl: suppress umount error message at startup (#1642728)
test/udev_test.pl: add "expected good" count (#1642728)
test/udev-test: gracefully exit when imports fail (#1642728)

man: mention System Administrator's Guide in systemctl manpage (#1623116)
udev: introduce udev net_id "naming schemes" (#1827462)
meson: make net.naming-scheme= default configurable (#1827462)
man: describe naming schemes in a new man page (#1827462)
udev/net_id: parse _SUN ACPI index as a signed integer (#1827462)
udev/net_id: don't generate slot based names if multiple devices might claim the same slot (#1827462)
fix typo in ProtectSystem= option (#1871139)
remove references of non-existent man pages (#1876807)
log: Prefer logging to CLI unless JOURNAL_STREAM is set (#1865840)
locale-util: add new helper locale_is_installed() (#1755287)
test: add test case for locale_is_installed() (#1755287)
tree-wide: port various bits over to locale_is_installed() (#1755287)
install: allow instantiated units to be enabled via presets (#1812972)
install: small refactor to combine two function calls into one function (#1812972)
test: fix a memleak (#1812972)
docs: Add syntax for templated units to systemd.preset man page (#1812972)
shared/install: fix preset operations for non-service instantiated units (#1812972)
introduce setsockopt_int() helper (#1887181)
socket-util: add generic socket_pass_pktinfo() helper (#1887181)
core: add new PassPacketInfo= socket unit property (#1887181)
resolved: tweak cmsg calculation (#1887181)

logind: don't print warning when user@.service template is masked (#1880270)
build: use simple project version in pkgconfig files (#1862714)
basic/virt: try the /proc/1/sched hack also for PID1 (#1868877)
seccomp: rework how the S[UG]ID filter is installed (#1860374)
vconsole-setup: downgrade log message when setting font fails on dummy console (#1889996)
units: fix systemd.special man page reference in system-update-cleanup.service (#1871827)
units: drop reference to sushell man page (#1871827)
sd-bus: break the loop in bus_ensure_running() if the bus is not connecting (#1885553)
core: add new API for enqueing a job with returning the transaction data (#846319)
systemctl: replace switch statement by table of structures (#846319)
systemctl: reindent table (#846319)
systemctl: Only wait when there's something to wait for. (#846319)
systemctl: clean up start_unit_one() error handling (#846319)
systemctl: split out extra args generation into helper function of its own (#846319)
systemctl: add new --show-transaction switch (#846319)
test: add some basic testing that "systemctl start -T" does something (#846319)
man: document the new systemctl --show-transaction option (#846319)
socket: New option 'FlushPending' (boolean) to flush socket before entering listening state (#1870638)
core: remove support for API bus "started outside our own logic" (#1764282)
mount-setup: fix segfault in mount_cgroup_controllers when using gcc9 compiler (#1868877)
dbus-execute: make transfer of CPUAffinity endian safe (#12711) (#1740657)
core: add support for setting CPUAffinity= to special "numa" value (#1740657)
basic/user-util: always use base 10 for user/group numbers (#1848373)
parse-util: sometimes it is useful to check if a string is a valid integer, but not actually parse it (#1848373)
basic/parse-util: add safe_atoux64() (#1848373)
parse-util: allow tweaking how to parse integers (#1848373)
parse-util: allow '-0' as alternative to '0' and '+0' (#1848373)
parse-util: make return parameter optional in safe_atou16_full() (#1848373)
parse-util: rewrite parse_mode() on top of safe_atou_full() (#1848373)
user-util: be stricter in parse_uid() (#1848373)
strv: add new macro STARTSWITH_SET() (#1848373)
parse-util: also parse integers prefixed with 0b and 0o (#1848373)
tests: beef up integer parsing tests (#1848373)
shared/user-util: add compat forms of user name checking functions (#1848373)
shared/user-util: emit a warning on names with dots (#1848373)
user-util: Allow names starting with a digit (#1848373)
shared/user-util: allow usernames with dots in specific fields (#1848373)
user-util: switch order of checks in valid_user_group_name_or_id_full() (#1848373)
user-util: rework how we validate user names (#1848373)

cgroup: freezer action must be NOP when cgroup v2 freezer is not available (#1868831)

units: add generic boot-complete.target (#1872243)
man: document new "boot-complete.target" unit (#1872243)
core: make sure to restore the control command id, too (#1829867)

device: make sure we emit PropertiesChanged signal once we set sysfs (#1793533)
device: don't emit PropetiesChanged needlessly (#1793533)