Sync from SUSE:SLFO:Main xdg-desktop-portal revision 403c8298f5801dcf1d970a4a13a45d99

This commit is contained in:
Adrian Schröter 2024-06-08 17:41:20 +02:00
parent 52205fe663
commit 31164de778
4 changed files with 227 additions and 16 deletions

BIN
xdg-desktop-portal-1.16.0.tar.xz (Stored with Git LFS)

Binary file not shown.

BIN
xdg-desktop-portal-1.18.4.tar.xz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@ -1,3 +1,204 @@
-------------------------------------------------------------------
Sat May 18 15:53:53 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.18.4:
+ Don't allow commandline arrays when the first commandline item
starts with whitespace or hyphen. (CVE-2024-32462, boo#1223110)
+ Do not store device access permission if it returned an error
+ Fix crash with config files without a default backend set
- includes changes from 1.18.3:
+ Don't try to read D-Bus object properties of Request objects on
construction
+ Fix various memory and file descriptor leaks.
+ Minuscule optimization to the ScreenCast portal so that it
stores restoration data with a single D-Bus call, instead of two.
+ Fix a crash in the OpenURI file when trying to open a non-
existing file
+ Fix a bug in PipeWire that prevented cameras from being
reported reliably.
+ Various smaller bug fixes.
-------------------------------------------------------------------
Fri Jan 12 12:48:49 UTC 2024 - Callum Farmer <gmbr3@opensuse.org>
- Also own the packaging directory used by portals themselves
-------------------------------------------------------------------
Fri Dec 1 12:15:24 UTC 2023 - Callum Farmer <gmbr3@opensuse.org>
- Own the directory which packages will use for portals.conf
configuration files
-------------------------------------------------------------------
Thu Nov 23 17:09:58 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 1.18.2:
+ Pass the token to the OpenURI portal and, when missing, an
empty string.
+ Fix various memory and file descriptor leaks in the Document
portal.
+ Make files and folders openend with the Document portal close
properly. This should fix cases where the Document portal
prevented external devices from unmounting, due to files inside
them not getting closed after applications stop using them.
+ Implement FUSE getlk and setlk callbacks.This should enable
using sqlite3 through the Document portal.
+ Properly resolve fd symlinks before opening them with
O_NOFOLLOW.
+ Fix cases where the portal id is assumed to match the .desktop
file name.
+ Allow sending directories in the file transfer portal. This
should make it possible to, among other things, drag and drop
folders and files simultaneously from and to sandboxed
applications.
+ Fallback to a hardcoded check to xdg-desktop-portal-gtk in the
absence of any other portal or configuration file, as a last
resort mechanism.
+ Various smaller fixes to the build system.
-------------------------------------------------------------------
Thu Oct 26 18:10:50 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 1.18.1:
+ Communicate better when the Background portal kills an app.
+ Properly quote Flatpak command in the Background portal.
+ Improve documentation of the "cursor_mode" propery of the
ScreenCast backend D-Bus interface.
+ Fix ScreenCast portal removing transient restore permissions
too early. This fixes screen sharing dialogs on Chromium asking
for the screen multiple times.
+ Only send the Closed session signal to the sender.
+ Add Meson options to disable building with Bubblewrap, and
without the Flatpak portal documentation. Disabling Bubblewrap
is highly discouraged, and only meant to be used on platforms
that do not currently support it. By disabling Bubblewrap,
bitmap validation happens without a sandbox, which is highly
insecure since image parsing is a common source of exploits.
Really, just do not disable Bubblewrap please.
+ Improve the manpage of portals.conf.
+ Various spelling fixes to the Document portal.
+ Add a new website! We don't have a fancy domain yet, but the
website can be accessed at
https://flatpak.github.io/xdg-desktop-portal/
+ Improve pid mapping for host system apps. This should get rid
of some rare, unnecessary warnings.
+ Adjust documentation of Global Shortcuts portal's timestamps to
millisecond granularity.
+ Bump minimum Meson version to 0.58.
-------------------------------------------------------------------
Tue Oct 3 12:20:53 UTC 2023 - Antonio Larrosa <alarrosa@suse.com>
- Support building with meson 0.61.x used by SLE, where .pc files
in dataonly packages are installed to %_libdir unlike in
meson >= 0.62.0 where the default was changed to %_datadir.
-------------------------------------------------------------------
Mon Sep 18 19:45:54 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 1.18.0:
+ Highlights:
- A new config-based portal matching mechanism that gives
preciser control over which portal backends are picked for
each portal.
- New portals: Clipboard and Input Capture.
- The settings portal now documents an 'accent-color' key.
+ New portal APIs:
- Introduce a new Clipboard portal. This portal extends the
Remote Desktop portal by adding support for sharing clipboard
between remote machines.
- Introduce a new Input Capture portal. This portal adds
mechanisms for taking control of input devices. The primary
usage model is centered around the InputLeap and Synergy use
cases, where local devices are used to control remote
displays.
- Add an "accept-label" option the the Print portal. This lets
apps suggest a proper label to the print operation.
- Document a new 'accent-color' key in the Settings portal.
This key represents an arbitrary color in sRGB colorspace.
How implementations of the portal provide this key is
entirely dependent on their internal policies and design.
- Support restoring remote desktop sessions.
- Introduce the ReadOne() method in the Settings portal. This
method is now preferred over the Read() method, as Read()
mistakenly returned a variant inside a variant. The Read()
method will continue to exist for compatibility with existing
apps, but its usage is deprecated. We recommend apps to port
to the ReadOne() method. Apps can decide whether to use
ReadOne() or Read() by looking at the version of the Settings
portal.
+ Changes that might be relevant for distributors:
- Rework how portal implementations are loaded. This new, more
robust system allows selecting specific backends for specific
portals, and layering them when necessary. Platforms that
provide portals implementation are encouraged to provide a
suitable configuration file.
- Drop the Autotools build. Meson is now the only supported
build system.
- The PipeWire dependency is now mandatory.
- Bump GLib dependency to 2.66.
+ Misc changes:
- Improve robustness of the OpenURI portal by validating more
URIs.
- Various small visual tweaks to the generated documentation.
- Various fixes to the Global Shortcuts portal.
- Stop using the deprecated GTimeVal struct.
- Document xdg-desktop-portal versioning scheme.
- Fix various issues in the OpenURI portal.
- Bump interface version of the Printer portal to 2.
- Validate addresses following the HTML specs in the Email
portal.
- Document minimum version of the new ReadOne() method of the
Settings portal.
- Add a mapping id property to the ScreenCast portal.
- Add activation token parameter to the Email portal.
- Test tarball generation in CI.
- Updated translations.
- Add docutils BuildRequires: New dependency.
-------------------------------------------------------------------
Wed Aug 9 10:53:54 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 1.17.0:
+ Drop the Autotools build. Meson is now the only supported build
system.
+ Rework how portal implementations are loaded. This new, more
robust system allows selecting specific backends for specific
portals, and layering them when necessary. Platforms that
provide portals implementation are encouraged to provide a
suitable configuration file.
+ Introduce a new Clipboard portal. This portal extends the
Remote Desktop portal by adding support for sharing clipboard
between remote machines.
+ Introduce a new Input Capture portal. This portal adds
mechanisms for taking control of input devices. The primary
usage model is centered around the InputLeap and Synergy use
cases, where local devices are used to control remote displays.
+ Stop using the deprecated GTimeVal struct
+ Bump GLib dependency to 2.66
+ Add an "accept-label" option the the Print portal. This lets
apps suggest a proper label to the print operation.
+ Various fixes to the Global Shortcuts portal.
+ Support restoring remote desktop sessions.
+ Improve robustness of the OpenURI portal by validating more
URIs.
+ The PipeWire dependency is now mandatory.
+ Various improvements for the test suite.
+ Updated translations.
- Drop 0001-portal-impl-Only-return-found-implementation-if-it-launched.patch
fixed upstream.
- Switch to meson buildsystem following upstream changes. Add meson
BuildRequires and macros.
-------------------------------------------------------------------
Fri Jun 23 09:54:14 UTC 2023 - Antonio Larrosa <alarrosa@suse.com>
- Add patch from upstream to avoid creating portals with
non-functional backends . This was mentioned in bsc#1212037 and
since I included this fix in the SP4 update that fixed the issue,
I'm fixing this in Factory/SP5 too for consistentcy.
* 0001-portal-impl-Only-return-found-implementation-if-it-launched.patch
-------------------------------------------------------------------
Tue Dec 13 08:23:42 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>

View File

@ -1,7 +1,8 @@
#
# spec file for package xdg-desktop-portal
#
# Copyright (c) 2022 SUSE LLC
# Copyright (c) 2023 SUSE LLC
# Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -17,7 +18,7 @@
Name: xdg-desktop-portal
Version: 1.16.0
Version: 1.18.4
Release: 0
Summary: A portal frontend service for Flatpak
License: LGPL-2.1-or-later
@ -25,7 +26,8 @@ Group: System/Libraries
URL: https://github.com/flatpak/xdg-desktop-portal
Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.xz
BuildRequires: libtool
BuildRequires: docutils
BuildRequires: meson >= 0.58
BuildRequires: pkgconfig
BuildRequires: systemd-rpm-macros
BuildRequires: xmlto
@ -73,18 +75,17 @@ This package contains convenience files for developers.
%autosetup -p1
%build
export LANG=C.UTF-8
autoreconf -fiv
%configure \
--enable-geoclue \
--enable-pipewire \
--docdir=%{_defaultdocdir}/%{name} \
%meson \
-Dpytest=disabled \
%{nil}
%make_build
%meson_build
%install
export LANG=C.UTF-8
%make_install
%meson_install
# own the packaging directories
install -d %{buildroot}%{_datadir}/xdg-desktop-portal/portals
%find_lang %{name} %{?no_lang_C}
%post
@ -102,6 +103,8 @@ export LANG=C.UTF-8
%{_datadir}/dbus-1/services/org.freedesktop.impl.portal.PermissionStore.service
%{_datadir}/dbus-1/services/org.freedesktop.portal.Desktop.service
%{_datadir}/dbus-1/services/org.freedesktop.portal.Documents.service
%dir %{_datadir}/%{name}
%dir %{_datadir}/%{name}/portals
%{_libexecdir}/%{name}
%{_libexecdir}/xdg-desktop-portal-validate-icon
%{_libexecdir}/xdg-document-portal
@ -111,11 +114,18 @@ export LANG=C.UTF-8
%{_userunitdir}/xdg-document-portal.service
%{_userunitdir}/xdg-permission-store.service
%{_userunitdir}/xdg-desktop-portal-rewrite-launchers.service
%{_mandir}/man5/portals.conf.5%{?ext_man}
%files devel
%doc %{_defaultdocdir}/%{name}/
%license COPYING
%doc %{_datadir}/doc/%{name}/
%if %{pkg_vcmp meson < 0.62.0 }
%{_libdir}/pkgconfig/%{name}.pc
%else
%{_datadir}/pkgconfig/%{name}.pc
%endif
%files lang -f %{name}.lang
%license COPYING
%changelog