Sync from SUSE:SLFO:Main colord revision a53dae107352e722063d7ef1c1eb865e

This commit is contained in:
Adrian Schröter 2024-05-03 11:46:54 +02:00
commit bb1745b41a
12 changed files with 2246 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

32
_constraints Normal file
View File

@ -0,0 +1,32 @@
<constraints>
<hardware>
<disk>
<size unit="G">4</size>
</disk>
<physicalmemory>
<size unit="M">8000</size>
</physicalmemory>
</hardware>
<overwrite>
<conditions>
<arch>armv6l</arch>
<arch>armv7l</arch>
</conditions>
<hardware>
<physicalmemory>
<size unit="M">3500</size>
</physicalmemory>
</hardware>
</overwrite>
<overwrite>
<conditions>
<arch>riscv64</arch>
</conditions>
<hardware>
<physicalmemory>
<size unit="M">7250</size>
</physicalmemory>
</hardware>
</overwrite>
</constraints>

1
baselibs.conf Normal file
View File

@ -0,0 +1 @@
libcolord2

BIN
colord-1.4.6.tar.xz (Stored with Git LFS) Normal file

Binary file not shown.

11
colord-1.4.6.tar.xz.asc Normal file
View File

@ -0,0 +1,11 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEEFj61ARkiXbPfj0nqF6y6jfqXDhcFAmINGfUACgkQF6y6jfqX
Dhf9VQgAtPp8r6gRnkblnfuw1LuChCKo+I8wQfw+PMki+J8ojL8EJ7+4U9aIf97p
ueBhhJse0bySKIgiBBMDcIos821tgdtX+19Nj0jfgIrdRGg+jo2leZA1i9WUUo7D
p4sTxHVnt9jP3vLVZqIrhaVLE8O4x54eBLb/Jc+MVE9pDvuVPP7k1M44rJOKY+mH
MMPcCfYvw1N6PpGasfW9P786iLyNz5VoCiGTAI+SmRl0oaXzAjcR2AZkXCUKFba2
L4EogkM4sO+z9e6vnIk3xPeq6xoIylWXzZnty2EE/3Syp7zL4VmkRYOu0J/g0MWk
sfCrNLVoGcUTjl1hImGiSW+aB/DhdA==
=l7fH
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,47 @@
From 1452a975ecae14299fb27d41522dfd32305481ce Mon Sep 17 00:00:00 2001
From: Richard Hughes <richard@hughsie.com>
Date: Wed, 13 Apr 2022 14:21:32 +0100
Subject: [PATCH] trivial: Fix a small memory leak on db open failure
---
src/cd-mapping-db.c | 3 +--
src/cd-profile-db.c | 2 +-
2 files changed, 2 insertions(+), 3 deletions(-)
diff --git a/src/cd-mapping-db.c b/src/cd-mapping-db.c
index 7a3df35..996f07e 100644
--- a/src/cd-mapping-db.c
+++ b/src/cd-mapping-db.c
@@ -67,7 +67,7 @@ cd_mapping_db_open (CdMappingDb *mdb,
GError **error)
{
CdMappingDbPrivate *priv = GET_PRIVATE (mdb);
- gchar *error_msg = NULL;
+ g_autofree gchar *error_msg = NULL;
gint rc;
g_autofree gchar *path = NULL;
@@ -116,7 +116,6 @@ cd_mapping_db_open (CdMappingDb *mdb,
CD_CLIENT_ERROR_INTERNAL,
"Cannot open mapping database: %s",
error_msg);
- sqlite3_free (error_msg);
return FALSE;
}
}
diff --git a/src/cd-profile-db.c b/src/cd-profile-db.c
index 5661d09..57ab864 100644
--- a/src/cd-profile-db.c
+++ b/src/cd-profile-db.c
@@ -48,7 +48,7 @@ cd_profile_db_load (CdProfileDb *pdb,
{
CdProfileDbPrivate *priv = GET_PRIVATE (pdb);
const gchar *statement;
- gchar *error_msg = NULL;
+ g_autofree gchar *error_msg = NULL;
gint rc;
g_autofree gchar *path = NULL;
--
2.37.3

1651
colord.changes Normal file

File diff suppressed because it is too large Load Diff

113
colord.keyring Normal file
View File

@ -0,0 +1,113 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2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=PT+/
-----END PGP PUBLIC KEY BLOCK-----

281
colord.spec Normal file
View File

@ -0,0 +1,281 @@
#
# spec file for package colord
#
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%define _udevrulesdir %(pkg-config --variable=udevdir udev)/rules.d
Name: colord
Version: 1.4.6
Release: 0
Summary: System Daemon for Managing Color Devices
License: GPL-2.0-or-later
Group: System/Daemons
URL: https://github.com/hughsie/colord/
Source0: https://www.freedesktop.org/software/colord/releases/%{name}-%{version}.tar.xz
Source1: https://www.freedesktop.org/software/colord/releases/%{name}-%{version}.tar.xz.asc
Source2: %{name}.keyring
Patch0: harden_colord.service.patch
# Apparmor profile
Source3: usr.lib.colord
Source4: colord.sysusers
Source99: baselibs.conf
# PATCH-FIX-UPSTREAM colord-CVE-2021-42523.patch boo#1202802 mgorse@suse.com -- fix a small memory leak on db open failure.
Patch1: colord-CVE-2021-42523.patch
BuildRequires: argyllcms
BuildRequires: docbook5-xsl-stylesheets
BuildRequires: gobject-introspection-devel
BuildRequires: gtk-doc
BuildRequires: meson
BuildRequires: pkgconfig
BuildRequires: sysuser-tools
BuildRequires: pkgconfig(bash-completion) >= 2.0
BuildRequires: pkgconfig(dbus-1)
BuildRequires: pkgconfig(gio-2.0) >= 2.25.9
BuildRequires: pkgconfig(gio-unix-2.0)
BuildRequires: pkgconfig(glib-2.0) >= 2.36.0
BuildRequires: pkgconfig(gmodule-2.0)
BuildRequires: pkgconfig(gobject-2.0)
BuildRequires: pkgconfig(gudev-1.0)
BuildRequires: pkgconfig(gusb) >= 0.2.2
BuildRequires: pkgconfig(lcms2) >= 2.6
BuildRequires: pkgconfig(libsystemd)
BuildRequires: pkgconfig(libudev)
BuildRequires: pkgconfig(polkit-gobject-1) >= 0.103
BuildRequires: pkgconfig(sqlite3)
BuildRequires: pkgconfig(systemd)
BuildRequires: pkgconfig(udev)
BuildRequires: pkgconfig(vapigen)
Requires: argyllcms
Requires: colord-color-profiles
%sysusers_requires
%{?systemd_requires}
%description
colord is a system activated daemon that maps devices to color profiles.
It is used by gnome-color-manager for system integration and use when
there are no users logged in.
%package -n libcolord2
Summary: Library for managing color devices
Group: System/Libraries
Suggests: %{name}
%description -n libcolord2
colord is a system activated daemon that maps devices to color profiles.
It is used by gnome-color-manager for system integration and use when
there are no users logged in.
%package -n libcolorhug2
Summary: Library for managing color devices
Group: System/Libraries
Suggests: %{name}
%description -n libcolorhug2
colord is a system activated daemon that maps devices to color profiles.
It is used by gnome-color-manager for system integration and use when
there are no users logged in.
%package color-profiles
Summary: Color profiles for colord
Group: System/Libraries
# Last version of shared-color profiles packaged
Obsoletes: shared-color-profiles <= 0.1.6
Provides: shared-color-profiles = %{version}
%description color-profiles
colord is a system activated daemon that maps devices to color profiles.
It is used by gnome-color-manager for system integration and use when
there are no users logged in.
This package provides color profiles previously provided by shared-color-profiles
%package -n typelib-1_0-Colord-1_0
Summary: Introspection bindings for libcolord
Group: System/Libraries
%description -n typelib-1_0-Colord-1_0
colord is a system activated daemon that maps devices to color profiles.
It is used by gnome-color-manager for system integration and use when
there are no users logged in.
This package provides the GObject Introspection bindings for the
libcolord library.
%package -n typelib-1_0-Colorhug-1_0
Summary: Introspection bindings for libcolorhug
Group: System/Libraries
%description -n typelib-1_0-Colorhug-1_0
colord is a system activated daemon that maps devices to color profiles.
It is used by gnome-color-manager for system integration and use when
there are no users logged in.
This package provides the GObject Introspection bindings for the
libcolorhug library.
%package -n libcolord-devel
Summary: Development files for libcolord
Group: Development/Languages/C and C++
Requires: %{name}-color-profiles = %{version}
Requires: libcolord2 = %{version}
Requires: libcolorhug2 = %{version}
Requires: typelib-1_0-Colord-1_0 = %{version}
Requires: typelib-1_0-Colorhug-1_0 = %{version}
%description -n libcolord-devel
colord is a system activated daemon that maps devices to color profiles.
It is used by gnome-color-manager for system integration and use when
there are no users logged in.
%lang_package
%prep
%autosetup -p1
%build
%sysusers_generate_pre %{SOURCE4} %{name} %{name}.conf
# Set ~2 GiB limit so that colprof is forced to work in chunks when
# generating the print profile rather than trying to allocate a 3.1 GiB
# chunk of RAM to put the entire B-to-A tables in.
ulimit -Sv 2000000
%meson \
-Dsession_example=false \
-Dbash_completion=true \
-Dsystemd=true \
-Dlibcolordcompat=true \
-Dargyllcms_sensor=true \
-Dsane=false \
-Dvapi=true \
-Dprint_profiles=true \
-Dtests=false \
-Dinstalled_tests=false \
-Ddaemon_user=colord \
-Dman=true \
-Ddocs=true \
-Dudev_rules=true \
%{nil}
%meson_build
%install
%meson_install
# Create colord rclink
mkdir %{buildroot}/%{_sbindir}
ln -sf %{_sbindir}/service %{buildroot}/%{_sbindir}/rc%{name}
find %{buildroot} -type f -name "*.la" -delete -print
# Install Apparmor profile
mkdir -p %{buildroot}%{_sysconfdir}/apparmor.d/
install -c -m 644 %{SOURCE3} %{buildroot}%{_sysconfdir}/apparmor.d/
install -Dm0644 %{SOURCE4} %{buildroot}%{_sysusersdir}/%{name}.conf
%find_lang %{name}
%pre -f %{name}.pre
%service_add_pre %{name}.service
# Fix ownership of /var/lib/colord from first packages (in 12.1)
test ! -d %{_localstatedir}/lib/colord || chown -R colord:colord %{_localstatedir}/lib/colord
%preun
%service_del_preun %{name}.service
%post
%tmpfiles_create %{_tmpfilesdir}/colord.conf
%service_add_post %{name}.service
%postun
%service_del_postun %{name}.service
%post -n libcolord2 -p /sbin/ldconfig
%postun -n libcolord2 -p /sbin/ldconfig
%post -n libcolorhug2 -p /sbin/ldconfig
%postun -n libcolorhug2 -p /sbin/ldconfig
%files
%license COPYING
%doc AUTHORS NEWS
%{_unitdir}/colord.service
%{_sysusersdir}/%{name}.conf
%{_udevrulesdir}/*.rules
%attr(755,colord,colord) %dir %{_localstatedir}/lib/colord
%ghost %attr(755,colord,colord) %{_localstatedir}/lib/colord/icc
%attr(644,,-,-) %{_datadir}/bash-completion/completions/colormgr
%{_bindir}/cd-create-profile
%{_bindir}/cd-fix-profile
%{_bindir}/cd-iccdump
%{_bindir}/cd-it8
%{_bindir}/colormgr
%{_libdir}/colord-sensors/
%{_libexecdir}/%{name}
%{_libexecdir}/%{name}-session
%{_datadir}/%{name}/
%{_datadir}/dbus-1/interfaces/org.freedesktop.ColorHelper.xml
%{_datadir}/dbus-1/interfaces/org.freedesktop.ColorManager.*
%{_datadir}/dbus-1/services/org.freedesktop.ColorHelper.service
%{_datadir}/dbus-1/system-services/org.freedesktop.ColorManager.service
%dir %{_datadir}/dbus-1/system.d
%{_datadir}/dbus-1/system.d/org.freedesktop.ColorManager.conf
%{_datadir}/glib-2.0/schemas/org.freedesktop.ColorHelper.gschema.xml
%{_datadir}/polkit-1/actions/org.freedesktop.color.policy
%{_mandir}/man1/cd-create-profile.1%{?ext_man}
%{_mandir}/man1/cd-fix-profile.1%{?ext_man}
%{_mandir}/man1/cd-it8.1%{?ext_man}
%{_mandir}/man1/colormgr.1%{?ext_man}
%dir %{_sysconfdir}/apparmor.d/
%config %{_sysconfdir}/apparmor.d/usr.lib.colord
%dir %{_libdir}/colord-plugins
%{_libdir}/libcolordcompat.so
%{_libdir}/colord-plugins/libcolord_sensor_camera.so
%{_libdir}/colord-plugins/libcolord_sensor_scanner.so
%{_sbindir}/rc%{name}
%{_userunitdir}/colord-session.service
%{_tmpfilesdir}/colord.conf
%files color-profiles
%{_datadir}/color/
%files -n libcolord2
%{_libdir}/libcolord.so.*
%{_libdir}/libcolordprivate.so.*
%files -n libcolorhug2
%{_libdir}/libcolorhug.so.*
%files -n typelib-1_0-Colord-1_0
%{_libdir}/girepository-1.0/Colord-1.0.typelib
%files -n typelib-1_0-Colorhug-1_0
%{_libdir}/girepository-1.0/Colorhug-1.0.typelib
%files -n libcolord-devel
%{_includedir}/colord-1/
%{_libdir}/libcolord.so
%{_libdir}/libcolordprivate.so
%{_libdir}/libcolorhug.so
%{_libdir}/pkgconfig/colord.pc
%{_libdir}/pkgconfig/colorhug.pc
%{_datadir}/gir-1.0/Colord-1.0.gir
%{_datadir}/gir-1.0/Colorhug-1.0.gir
%{_datadir}/vala/vapi/colord.deps
%{_datadir}/vala/vapi/colord.vapi
%{_datadir}/gtk-doc/html/colord/
%files lang -f %{name}.lang
%changelog

2
colord.sysusers Normal file
View File

@ -0,0 +1,2 @@
#Type Name ID GECOS Home directory Shell
u colord - "user for colord" /var/lib/colord -

View File

@ -0,0 +1,19 @@
Index: colord-1.4.5/data/colord.service.in
===================================================================
--- colord-1.4.5.orig/data/colord.service.in
+++ colord-1.4.5/data/colord.service.in
@@ -10,3 +10,14 @@ User=@daemon_user@
# network namespacing is on.
# PrivateNetwork=yes
PrivateTmp=yes
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions

63
usr.lib.colord Normal file
View File

@ -0,0 +1,63 @@
# Last Modified: Thu Oct 17 14:07:52 2013
#include <tunables/global>
/usr/lib/colord (attach_disconnected) {
#include <abstractions/base>
#include <abstractions/nameservice>
capability dac_override,
deny /usr/share/gvfs/remote-volume-monitors/ r,
deny /usr/share/gvfs/remote-volume-monitors/afc.monitor r,
deny /usr/share/gvfs/remote-volume-monitors/udisks2.monitor r,
/dev/ r,
/dev/bus/usb/ r,
/dev/bus/usb/[0-9]*/[0-9]* rw,
/etc/colord.conf r,
/etc/fstab r,
/etc/udev/hwdb.bin r,
/etc/udev/udev.conf r,
/proc/*/fd/ r,
/proc/*/mountinfo r,
/proc/*/mounts r,
/proc/*/cgroup r,
/proc/*/cmdline r, # not only @{pid}, bnc#846301
/run/systemd/sessions/[0-9]* r,
/run/systemd/sessions/c[0-9]* r,
/run/udev/data/* r,
/run/udev/queue.bin r,
/sys/bus/ r,
/sys/bus/usb/devices/ r,
/sys/class/ r,
/sys/class/drm/ r,
/sys/class/video4linux/** r,
/sys/class/video4linux/ r,
/sys/devices/** r,
/usr/bin/spotread ix, # inherit colord profile, needed to support USB colorimeter not natively supported by colord
/usr/lib/colord mr,
/usr/local/share/mime/** r,
/usr/local/share/color/**/ r,
/usr/local/share/color/icc/** r,
/usr/share/color/**/ r,
/usr/share/color/icc/** r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Device.xml r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Profile.xml r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Sensor.xml r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.xml r,
/usr/share/gvfs/remote-volume-monitors/gphoto2.monitor r,
/usr/share/locale-bundle/**.mo r,
/usr/share/mime/** r,
/var/lib/color/icc/ r,
/var/lib/colord/icc/ r,
/var/lib/colord/.cache/ rw,
/var/lib/colord/.cache/** rw,
/var/lib/colord/mapping.db rwk,
/var/lib/colord/mapping.db-journal rw,
/var/lib/colord/storage.db rwk,
/var/lib/colord/storage.db-journal rw,
@{HOME}/.local/share/icc/*.icc r,
@{HOME}/.local/share/color/icc/*.icc r,
/var/lib/gdm/.local/share/icc/*.icc r,
}