* origin/pr/72:
systemd: order units checking for qubes-service after qubes-sysinit

Files in /var/run/qubes-service are created by qubes-sysinit.service. So
defer that condition ch...

* origin/pr/70:
fixed sh syntax error

https://forums.whonix.org/t/qvm-run-fails-in-whonix-vms

Thanks to entr0py for the bug report!

https://phabricator.whonix.org/T501

Qrexec policy is really stored in core-admin repo.

https://github.com/QubesOS/qubes-issues/issues/1889

rsvg-convert doesn't scale the image. Do it with convert, only when
really needed. Don't upscale...

Fixes QubesOS/qubes-issues#1882

Fixes QubesOS/qubes-issues#1876

* qubesos/pr/13:
Remove exec in last line of qvm-copy-to-vm

* origin/pr/65:
minor indent

* origin/pr/64:
use 'true' rather than ':' for consistency

Always set QREXEC_AGENT_PID variable, setup SIGUSR1 handler. And do that
before starting child p...

Those services are called just before/after host suspend.

Thanks @adrelanos for help.
Fixes Qub...

* qubesos/pr/11:
Properly handle case of empty domain name.
Use proper quoting around variab...

* qubesos/pr/10:
Use && in qvm-move-to-vm
qvm-move-to-vm: Use '--' before file arguments
q...

* origin/pr/58:
refactoring / code simplification
fixed broken file copy for files in multi ...

* origin/pr/60:
do not start the Tor service inside Qubes TemplateVMs

* origin/pr/63:
qrexec: hide timing debug messages in vm-file-editor
qrexec: write service s...

* origin/pr/62:
disable systemd-timesyncd

For a long time the DNS address was the same as default gateway. This is
still the case in R3.x,...

Those are currently barely useful, since starting the application isn't
the biggest bottleneck o...

In case of some services it makes much sense for caller to receive also
stderr in addition to st...

fixes https://github.com/QubesOS/qubes-issues/issues/1754

&& is safer in case qvm-*copy*-to-vm is ever changed to call 'set +e'.

* origin/pr/61:
update-proxy: use curl instead of wget in archlinux in order to limit addition...

xdg-open is more robust in choosing default application for particular
file type: it supports fa...

No functional change.

This will make it easier to switch the tool (without recompiling
vm-file-...

* qubesos/pr/8:
Proposed solution for issue #1657

Fixes QubesOS/qubes-issues#1657

qvm-sync-appmenus fails when a shortcut have spaces in the file name #1657

Private data inside /var/lib/tor should not be shared.
Tor should not be run inside TemplateVMs....

qubes-sysinit.sh waits for xenbus initialization by watching its
interface file presence. In lin...

Sending dbus calls to a service which isn't running _and is blocked to
not be started_ would res...

Many USB controllers doesn't play nice with suspend when attached to PV
domain, so unload those ...

Thanks to @marmarek for the suggestion!

Thanks to @marmarek for the report and help fixing!

It is expected to not output anything on stdout. Especially remote end
may be already terminated...

Thanks to @marmarek for the suggestion!

https://github.com/QubesOS/qubes-issues/issues/1328#iss...

* origin/pr/59:
archlinux: Added python{2,3} as dependency. Solved python22 bug.

Thanks @axon-qubes for the idea.

Fixes QubesOS/qubes-issues#1574

qvm-mru-entry requires it.

Fixes QubesOS/qubes-issues#1567

Do not allow ICMP from uplink VM (or the outside world). Also do not
send ICMP icmp-host-prohibi...

Check `yum check-update` exit code, instead of `grep` - when there are
multiple commands on the ...

https://phabricator.whonix.org/T414

https://phabricator.whonix.org/T414

https://phabricator.whonix.org/T414

DNF in Fedora 22 uses python2, but in Fedora 23 - python3. Package both
of them, in separate pac...

QubesOS/qubes-issues#1529

Apparently tinyproxy does not notice /etc/resolv.conf change, so need to
be kicked to reload it....

* origin/pr/57:
archlinux: ensure systemctl reset preset correctly (need to be started twice)

Fixes QubesOS/qubes-issues#1522

There was missing "/mime" in entry for user home.

QubesOS/qubes-issues#1490

Explicitly block something like "curl http://10.137.255.254:8082" and
return error page in this ...

* Check whether sysctl is accessible
* Check whether a key which exists when CONFIG_MODULES=y is...

Apparently unmanaged devices are loaded only from main
NetworkManager.conf. Exactly the same lin...

This fixes using minimal-template based VMs to store/retrieve backup.