New upstream release

Merge branch 'debian' into bookworm

debian/changelog

@@ -1,3 +1,21 @@
+systemd (252.33-1~deb12u1+pexip24u1) pexip; urgency=medium
+
+  * New upstream release
+
+ -- Steve McIntyre <[email protected]>  Mon, 13 Jan 2025 17:41:07 +0000
+
+systemd (252.33-1~deb12u1) bookworm; urgency=medium
+
+  * New upstream version 252.33
+
+ -- Luca Boccassi <[email protected]>  Sun, 01 Dec 2024 13:28:27 +0000
+
+systemd (252.32-1~deb12u1) bookworm; urgency=medium
+
+  * New upstream version 252.32
+
+ -- Luca Boccassi <[email protected]>  Sat, 16 Nov 2024 18:35:32 +0000
+
 systemd (252.31-1~deb12u1+pexip24u2) pexip; urgency=medium
 
   * Rebuild to fix libssl build failure

docs/CODING_STYLE.md

@@ -539,6 +539,14 @@ SPDX-License-Identifier: LGPL-2.1-or-later
   important for objects that unprivileged users may allocate, but also matters
   for everything else any user may allocate.
 
+- Please use `secure_getenv()` for all environment variable accesses, unless
+  it's clear that `getenv()` would be the better choice. This matters in
+  particular in `src/basic/` and `src/shared/` (i.e. library code that might
+  end up in unexpected processes), but should be followed everywhere else too
+  (in order to make it unproblematic to move code around). To say this clearly:
+  the default should be `secure_getenv()`, the exception should be regular
+  `getenv()`.
+
 ## Types
 
 - Think about the types you use. If a value cannot sensibly be negative, do not

docs/ENVIRONMENT.md

@@ -313,7 +313,7 @@ All tools:
   subvolumes if the backing filesystem supports them. If set to `0`, these
   lines will always create directories.
 
-`systemd-sysusers`
+`systemd-sysusers`:
 
 * `SOURCE_DATE_EPOCH` — if unset, the field of the date of last password change
   in `/etc/shadow` will be the number of days from Jan 1, 1970 00:00 UTC until