Simon Lees
8b4cd106c1
- Update to 1.12.20
* On Unix, avoid a use-after-free if two usernames have the same
numeric uid. In older versions this could lead to a crash (denial of
service) or other undefined behaviour, possibly including incorrect
authorization decisions if <policy group=...> is used.
Like Unix filesystems, D-Bus' model of identity cannot distinguish
between users of different names with the same numeric uid, so this
configuration is not advisable on systems where D-Bus will be used.
Thanks to Daniel Onaca.
(dbus#305, dbus!166; Simon McVittie)
- From 1.12.18
* CVE-2020-12049: If a message contains more file descriptors than can
be sent, close those that did get through before reporting error.
Previously, a local attacker could cause the system dbus-daemon (or
another system service with its own DBusServer) to run out of file
descriptors, by repeatedly connecting to the server and sending fds that
would get leaked.
Thanks to Kevin Backhouse of GitHub Security Lab.
(dbus#294, GHSL-2020-057; Simon McVittie)
* Fix a crash when the dbus-daemon is terminated while one or more
monitors are active (dbus#291, dbus!140; Simon McVittie)
* The dbus-send(1) man page now documents --bus and --peer instead of
the old --address synonym for --peer, which has been deprecated since
the introduction of --bus and --peer in 1.7.6
(fd.o #48816, dbus!115; Chris Morin)
* Fix a wrong environment variable name in dbus-daemon(1)
(dbus#275, dbus!122; Mubin, Philip Withnall)
* Fix formatting of dbus_message_append_args example
(dbus!126, Felipe Franciosi)
* Avoid a test failure on Linux when built in a container as uid 0, but
without the necessary privileges to increase resource limits
(dbus!58, Debian #908092; Simon McVittie)
* When building with CMake, cope with libX11 in a non-standard location
(dbus!129, Tuomo Rinne)
- Run spec-cleaner
OBS-URL: https://build.opensuse.org/request/show/821367
OBS-URL: https://build.opensuse.org/package/show/Base:System/dbus-1?expand=0&rev=293
114 lines
3.7 KiB
RPMSpec
114 lines
3.7 KiB
RPMSpec
#
|
|
# spec file for package dbus-1-x11
|
|
#
|
|
# Copyright (c) 2020 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define _name dbus
|
|
%define _libname libdbus-1-3
|
|
%if 0%{?suse_version} <= 1320
|
|
%define _userunitdir %{_prefix}/lib/systemd/user
|
|
%endif
|
|
%bcond_without selinux
|
|
Name: dbus-1-x11
|
|
Version: 1.12.20
|
|
Release: 0
|
|
Summary: D-Bus Message Bus System
|
|
License: GPL-2.0-or-later OR AFL-2.1
|
|
URL: https://dbus.freedesktop.org/
|
|
Source0: http://dbus.freedesktop.org/releases/dbus/%{_name}-%{version}.tar.gz
|
|
Source1: http://dbus.freedesktop.org/releases/dbus/%{_name}-%{version}.tar.gz.asc
|
|
Source2: dbus-1.keyring
|
|
Source3: baselibs.conf
|
|
Source4: dbus-1.desktop
|
|
Patch0: feature-suse-log-deny.patch
|
|
# PATCH-FIX-OPENSUSE coolo@suse.de -- force a feature configure won't accept without x11 in buildrequires
|
|
Patch1: feature-suse-do-autolaunch.patch
|
|
# Patch-Feature-opensuse sflees@suse.de, users shouldn't be allowed to start / stop the dbus service.
|
|
Patch2: feature-suse-refuse-manual-start-stop.patch
|
|
BuildRequires: autoconf-archive
|
|
BuildRequires: libcap-ng-devel
|
|
BuildRequires: libexpat-devel >= 2.1.0
|
|
BuildRequires: libtool
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: pkgconfig(libsystemd) >= 209
|
|
BuildRequires: pkgconfig(x11)
|
|
Requires(post): update-alternatives
|
|
Requires(preun): update-alternatives
|
|
Supplements: (dbus-1 and libX11-6)
|
|
Provides: dbus-launch
|
|
%if %{with selinux}
|
|
BuildRequires: libselinux-devel
|
|
%endif
|
|
|
|
%description
|
|
D-Bus contains some tools that require Xlib to be installed, those are
|
|
in this separate package so server systems need not install X.
|
|
|
|
%prep
|
|
%setup -q -n %{_name}-%{version}
|
|
%autopatch -p1
|
|
|
|
%build
|
|
echo 'HTML_TIMESTAMP=NO' >> Doxyfile.in
|
|
autoreconf -fi
|
|
# We use -fpie/-pie for the whole build; this is the recommended way to harden
|
|
# the build upstream, see discussion in fdo#46570
|
|
export CFLAGS="%{optflags} -fno-strict-aliasing -fPIC -fpie"
|
|
export LDFLAGS="-pie"
|
|
export CXXFLAGS="%{optflags} -fno-strict-aliasing"
|
|
export V=1
|
|
%configure \
|
|
--disable-static \
|
|
--libexecdir=%{_libexecdir}/dbus-1 \
|
|
--enable-inotify \
|
|
--disable-doxygen-docs \
|
|
%if %{with selinux}
|
|
--enable-selinux \
|
|
%endif
|
|
--enable-systemd \
|
|
--enable-user-session \
|
|
--enable-libaudit \
|
|
--with-console-auth-dir=/run/dbus/at_console/ \
|
|
--with-system-pid-file=/run/dbus/pid \
|
|
--with-system-socket=/run/dbus/system_bus_socket \
|
|
--with-systemdsystemunitdir=%{_unitdir} \
|
|
--with-systemduserunitdir=%{_userunitdir} \
|
|
--with-x
|
|
%make_build
|
|
|
|
%install
|
|
tdir=$(mktemp -d)
|
|
make DESTDIR=$tdir install
|
|
mkdir -p %{buildroot}/%{_bindir}
|
|
mv $tdir/%{_bindir}/dbus-launch %{buildroot}/%{_bindir}/dbus-launch.x11
|
|
mkdir -p %{buildroot}%{_sysconfdir}/alternatives
|
|
ln -s -f %{_sysconfdir}/alternatives/dbus-launch %{buildroot}%{_bindir}/dbus-launch
|
|
|
|
%post
|
|
%{_sbindir}/update-alternatives --install %{_bindir}/dbus-launch dbus-launch %{_bindir}/dbus-launch.x11 20
|
|
|
|
%preun
|
|
if [ "$1" = 0 ] ; then
|
|
%{_sbindir}/update-alternatives --remove dbus-launch %{_bindir}/dbus-launch.x11
|
|
fi
|
|
|
|
%files
|
|
%ghost %{_sysconfdir}/alternatives/dbus-launch
|
|
%{_bindir}/dbus-launch
|
|
%{_bindir}/dbus-launch.x11
|
|
|
|
%changelog
|