jengelh/virtualbox
SHA256
1
0
Fork 0
forked from pool/virtualbox
Code Pull Requests Activity
ba36997994
virtualbox/virtualbox-wrapper.sh

67 lines
2.3 KiB
Bash
Raw Normal View History

osc copypac from project:home:mseben:branches:Virtualization package:virtualbox-ose revision:7 OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=1
2010-12-23 11:08:49 +01:00
#!/bin/bash
export QT_NO_KDE_INTEGRATION=1
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
# make certain that the user/group combination is valid
osc copypac from project:home:mseben:branches:Virtualization package:virtualbox-ose revision:7 OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=1
2010-12-23 11:08:49 +01:00
/usr/bin/id -nG | grep -v -e "root" -e "vboxusers" >/dev/null && /usr/lib/virtualbox/VBoxPermissionMessage && exit
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
#
# Handle the issue regarding USB passthru
# The following conditions apply:
# 1. If ~/.vbox/enable exists, the user accepts the security risk.
Accepting request 690451 from home:frispete:kernel Hi Larry, here's is my current state of VB affairs. It's more a RFC, but it contains everything to build that biest for the most prominent distributions. The new patch virtualbox-fix-ui-background-color.patch is an attempt to deuglify the UI with certain color schemes. Again, RFC stuff for you to look at. Thanks, Pete - adjust patch virtualbox-fix-ui-background-color.patch to really fix the background color messing... - add patch to stop UI messing with Highlight Color for background - apply fixes_for_qt5.13.patch for Qt versions >= 5.13.0 only - Add setBadness('permissions-unauthorized-file',333) to rpmlintrc - Remove suid attributes from all files - add libgsoap version dependency >= 2.8.50 (recv_maxlength) - Fix virtualbox wrapper script virtualbox-wrapper.sh to check 60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d Logic is still flawed, until it doesn't take both locations into account - Add custom /etc/permission.d/virtualbox{,.paranoid} definitions - Add compatibility symlink to keep old desktop links functional OBS-URL: https://build.opensuse.org/request/show/690451 OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=479
2019-04-05 16:49:14 +02:00
# 2. If ~/.vbox/disable exists, the user does not accept the risk. That file will contain the inode of /usr/lib/udev/rules.d/60-vboxdrv.rules.
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
# When that changes, the VBoxUSB_DevRules will again be displayed as that means that VB has been reloaded.
#
devrules()
{
- The printing of the warning about the insecurity in USB passthru had been lost. As most people are likely to want that feature, the logic has been inverted. Now, the required udev commands to allow passthru are included. The first time that VB is started, the user will get a screen that points to the bug entry discussing the problem and states what they should do to block the insecure usage. In any case, that screen will only be printed once. File "virtualbox-60-vboxdrv.rules" has been added These changes address the issues in bnc #1018340. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=303
2017-01-14 03:16:29 +01:00
/usr/lib/virtualbox/VBoxUSB_DevRules
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
if [ $? -eq 0 ] ; then
# User accepts the risk
touch ~/.vbox/enable
rm -f ~/.vbox/disable
else
# User declines the risk - save the inode
echo "" > ~/.vbox/disable
rm -f ~/.vbox/enable
fi
}
# Start of main routine
#
# Ensure that ~/.vbox exists
mkdir -p ~/.vbox/
Accepting request 690451 from home:frispete:kernel Hi Larry, here's is my current state of VB affairs. It's more a RFC, but it contains everything to build that biest for the most prominent distributions. The new patch virtualbox-fix-ui-background-color.patch is an attempt to deuglify the UI with certain color schemes. Again, RFC stuff for you to look at. Thanks, Pete - adjust patch virtualbox-fix-ui-background-color.patch to really fix the background color messing... - add patch to stop UI messing with Highlight Color for background - apply fixes_for_qt5.13.patch for Qt versions >= 5.13.0 only - Add setBadness('permissions-unauthorized-file',333) to rpmlintrc - Remove suid attributes from all files - add libgsoap version dependency >= 2.8.50 (recv_maxlength) - Fix virtualbox wrapper script virtualbox-wrapper.sh to check 60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d Logic is still flawed, until it doesn't take both locations into account - Add custom /etc/permission.d/virtualbox{,.paranoid} definitions - Add compatibility symlink to keep old desktop links functional OBS-URL: https://build.opensuse.org/request/show/690451 OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=479
2019-04-05 16:49:14 +02:00
# Get the inode for /usr/lib/udev/rules.d/60-vboxdrv.rules
INODE=$(stat /usr/lib/udev/rules.d/60-vboxdrv.rules | grep Inode | cut -d' ' -f3)
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
if [ ! -f ~/.vbox/enable ] && [ ! -f ~/.vbox/disable ] ; then
# Neither file exists - find what the user wants
devrules
- The printing of the warning about the insecurity in USB passthru had been lost. As most people are likely to want that feature, the logic has been inverted. Now, the required udev commands to allow passthru are included. The first time that VB is started, the user will get a screen that points to the bug entry discussing the problem and states what they should do to block the insecure usage. In any case, that screen will only be printed once. File "virtualbox-60-vboxdrv.rules" has been added These changes address the issues in bnc #1018340. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=303
2017-01-14 03:16:29 +01:00
fi
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
# Get the original Inode if it exists
if [ -f ~/.vbox/disable ] ; then
read LINE < ~/.vbox/disable
else
LINE=" "
fi
Accepting request 690451 from home:frispete:kernel Hi Larry, here's is my current state of VB affairs. It's more a RFC, but it contains everything to build that biest for the most prominent distributions. The new patch virtualbox-fix-ui-background-color.patch is an attempt to deuglify the UI with certain color schemes. Again, RFC stuff for you to look at. Thanks, Pete - adjust patch virtualbox-fix-ui-background-color.patch to really fix the background color messing... - add patch to stop UI messing with Highlight Color for background - apply fixes_for_qt5.13.patch for Qt versions >= 5.13.0 only - Add setBadness('permissions-unauthorized-file',333) to rpmlintrc - Remove suid attributes from all files - add libgsoap version dependency >= 2.8.50 (recv_maxlength) - Fix virtualbox wrapper script virtualbox-wrapper.sh to check 60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d Logic is still flawed, until it doesn't take both locations into account - Add custom /etc/permission.d/virtualbox{,.paranoid} definitions - Add compatibility symlink to keep old desktop links functional OBS-URL: https://build.opensuse.org/request/show/690451 OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=479
2019-04-05 16:49:14 +02:00
# If user originally declined, make certain that /usr/lib/udev/rules.d/60-vboxdrv.rules has not been changed
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
if [ -f ~/.vbox/disable ] && [ "$LINE" != "$INODE" ] && [ "$LINE" != "" ] ; then
# disable is selected and the Inode has changed - ask again
devrules
fi
if [ -f ~/.vbox/disable ] ; then
echo $INODE > ~/.vbox/disable
if [ "$LINE" != "$INODE" ] ; then
if [ -f /usr/bin/kdesu ] ; then
kdesu /sbin/vbox-fix-usb-rules.sh
fi
if [ -f /usr/bin/gnomesu ] ; then
gnomesu /sbin/vbox-fix-usb-rules.sh
fi
fi
fi
Accepting request 696073 from home:lwfinger:branches:openSUSE:Factory - Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa. Remove "BuildRequires: quilt" - that package is not needed. VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721, CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679, CVE-2019-2678, and CVE-2019-2574 boo#1132827. - Version bump to 6.0.6 (released April 17 2019 by Oracle) The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and "fixes_for_5.1.patch". These issues are fixed upstream. OBS-URL: https://build.opensuse.org/request/show/696073 OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=486
2019-04-30 02:56:27 +02:00
# Check that /usr/lib/virtualbox/VirtualBoxVM has SUID permissions
PERM=$(ls -l /usr/lib/virtualbox/VirtualBoxVM | grep rwsr)
if [ -z "$PERM" ]
then
logger -s "Wrong permissions for VirtualBoxVM - use 'sudo chmod 4711 /usr/lib/virtualbox/VirtualBoxVM' to fix"
/usr/lib/virtualbox/VBoxSUIDMessage
exit 1
fi
- Revise warning screen concerning USB passthru - fixes bnc#1041137. USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default. Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed, the popup will show the next time VB is started. File "fix_usb_rules.sh" is added. OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=336
2017-06-09 00:26:55 +02:00
# Now run the VB GUI
- Version bump to 6.0.4 (released January 28 2019 by Oracle) Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream. This is a maintenance release. The following items were fixed and/or added: Virtualization core: support Shanghai/Zhaoxin CPUs. User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197) User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window User interface: various small fixes and improvements Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync Graphics: basic support for VMSVGA graphics device in virtual machines using EFI Network: fix occasional NATNet crashes (bug #13899) Network: worked around problems in certain PCnet drivers on old operating systems Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319) Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker - Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050 Files "vboxweb-service.service" and "vboxweb-service.sh" are added. File "vbox-vboxweb-init-script.diff" is removed. File "fixes_for_4.20.patch" is removed - the code was fixed upstream. File "fix_lib_search.patch" is added to fix the build of VBox0GL. File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0. File "virtualbox-system-x.patch" is removed. File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15<F5>.1. - Version bump to 6.0.2 (released January 15 2019 by Oracle) This is a maintenance release. The following items were fixed and/or added: User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207) User interface: allow the first run window to selecting host drives (bug #18230) User interface: fixed attaching empty host optical drives (bug #18223) User interface: implemented a new virtual optical disk creation window USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored) PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286) OBS-URL: https://build.opensuse.org/package/show/Virtualization/virtualbox?expand=0&rev=465
2019-01-28 21:37:13 +01:00
LD_LIBRARY_PATH="/usr/lib/virtualbox${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}" /usr/lib/virtualbox/VirtualBox6 $@
Copy Permalink