journal-remote: fix mem leak on error
shell-completion: fix completion of inactive units

Units which not loaded were not proposed properly. OTOH, we should
filter units from get-unit-files by their state if they are currently
loaded. Bring zsh completions in line with bash completion, the same
logic should be used in both implementations.

https://bugzilla.redhat.com/show_bug.cgi?id=1024379
https://bugzilla.redhat.com/show_bug.cgi?id=790768
https://bugs.freedesktop.org/show_bug.cgi?id=84720
shell-completion: propose templates for disable/[re]enable/[re]start

Templates can be [re]enabled, on their own if the have DefaultInstance set,
and with an instance suffix in all cases. Propose just the template name
ending in @, to underline the instance suffix may have to be appended.

Likewise for start/restart.

This means that sometimes superflous units that one will not really
want to operate on will be proposed, but this seems better than
proposing a very incomplete set of names.

https://bugs.freedesktop.org/show_bug.cgi?id=66912
bus-proxyd: add missing flag translation for RequestName
man: we don't have 'Wanted' dependency
selinux: fix potential double free crash in child process

Before returning from function we should reset ret to NULL, thus cleanup
function is nop.

Also context_str() returns pointer to a string containing context but not a
copy, hence we must make copy it explicitly.
man: fix typos
man: fix copy/paste error in CPUQuota= section of resource-control
terminal: split ANSI from DEC mode changes
terminal: log unsupported ANSI or DEC mode changes
resolve: add missing header

Change-Id: I64f7c6b446f6d92057c35cc3d4e29bd2bad8f75b
Revert "sd-bus: sync kdbus.h (ABI break)"

This reverts commit 1a2409e262da65a4b0ca8ab18fcf5eabd2d404ca.

Support from the kdbus interface was removed. We require
memfds to be supported by all clients.
execute: don't fail child when we don't have privileges to setup namespaces

If we don't have privileges to setup the namespaces then we are most likely
running inside some sort of unprivileged container, hence not being able to
create namespace is not a problem because spawned service can't access host
system anyway.
systemctl: by default interactively ask for polkit authorization, if possible

Also, allow using --no-ask-password to turn off ineractive polkit
authorization.
namespace: add missing 'const' to parameters
update TODO
execute: downgrade namespace error to "warning"

Also, extend the printed warning a bit, explaining the situation more
verbosely.
missing: remove fanotify

It was only used in readahead.
environment: append unit_id to error messages regarding EnvironmentFile
nspawn: fix DeviceAllow list

Commit 864e17068 ("nspawn: actually allow access to /dev/net/tun in the
container") added "/dev/net/tun" to the list of allowed devices but forgot
to tweak the array length, which caused "/dev/kdbus/*" to be missed.