- Updated to version 1.8.23 * use libsystemd instead sd-daemon.{c,h} * spy: add support SCardStatus() with NULL pcbAtrLen * Some other minor improvements - remove --auto-exit from service start even if we have socket activation in place (using it as a lightweight approach to unconditional service enablement (reference boo#1063983 and to help workaround boo#1063985) - Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the variable GROUP (call caps) has been claimed by RPM 4.14. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Updated to version 1.8.22 * SCardCancel() was broken in 1.8.21. The call was blocking. * Enable use of info level logging for pcscd using -i/--info - Updated to version 1.8.21 * SCardCancel(): - fix a race condition bug - fix a possible use after free - improve Doxygen documentation * SCardGetStatusChange(): fix a race condition when a reader is removed * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD * pcsc_stringify_error(): use Thread-local storage * pcsc_stringify_error() now returns a const char * * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when pbRecvBuffer is not big enough to receive the card response. * Fix compilation error with GCC 4.9 * UnitaryTests: add support of Python 3 * pcsc-spy: add support of Python 3 * Some other minor improvements - Updated to version 1.8.20 * Fix a crash and potential security issue in pcscd (bsc#1017902, CVE-2016-10109, CWE-415, CWE-416) - Updated to version 1.8.19: * SCardGetStatusChange(): Fix a (rare) race condition * Doxygen updates * pcsc-spy: - fix display of execution time - log the thread number in the results * Some other minor improvements - Version update to 1.8.18: * SCardDisconnect(): much faster with SCARD_UNPOWER_CARD * SCardConnect(): Fix a possible duplicated hCard context * Fix compilation on FreeBSD * Fix compilation on Solaris * Some other minor improvements - Obsolete the conditionals for sle11 as it does not build there and ends unresolvable anyway - Remove the presets magic after discussion with standa as new macros actually work around this correctly - Updated to version 1.8.17 * Fix SCardEndTransaction() issue with a SCARD_SHARE_EXCLUSIVE connection * Fix an issue when used with systemd (problem in signal handler) * SCardGetAttrib(): set pcbAttrLen when buffer is too small * Some other minor improvements - Updated to version 1.8.16 * SCardCancel() was not correctly handled When a SCardGetStatusChange() was cancelled then a next PC/SC call after the SCardGetStatusChange() may fail with a strange error code if the event waited in SCardGetStatusChange() occurs. * Doxygen: fix different documentation issues * SCARD_SCOPE_GLOBAL is now defined in a public header (even if never used) * Enable Trace and Profile features using compiler flags and without modifying the source code * Some other minor improvements and bug corrections - Updated to version 1.8.15 * Add support of remove and/or customize PC/SC reader names using PCSCLITE_FILTER_IGNORE_READER_NAMES and PCSCLITE_FILTER_EXTEND_READER_NAMES * Some other minor improvements and bug corrections - Don't enable polkit for 13.1 and SLE12. There are no policy defaults defined yet (bsc#941721#c7). - Updated to version 1.8.14 * Threading: lock the PC/SC context in a safe way * Threading: lock the card context in a safe way * SCardGetStatusChange(): fix card movement rare bug * Use asprintf(3) instead of strlcat(3) and strlcpy(3) * Allow to use pcscd in a remote session (polkit issue) * Some other minor improvements and bug corrections - Cleanup with the spec-cleaner - Reduce some conditionals - Fix few rpmlint warnings - Add Requires on libpcs1 for main package wrt bnc#782368 - No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify. - Updated to version 1.8.13 * fix a systemd + libudev hotplug bug introduced in version 1.8.12 The list of readers was not (yet) available just after the start of pcscd * Make the license more 3-clause BSD like * Fix a rare race condition in the (non default) libusb hotplug * Some other minor improvements and bug corrections - use a few more conditionals for recent systemd changes - Fix systemd integration and socket activation (boo#900115): * fix quoting in systemd-service.patch * add missing systemd service preset - Drop obsolete upgrade protection in %pre. - fixed sysconfig fillup - Updated to version 1.8.12 * make hotplug using libudev (default) more robust * add ReiserFS file system support (for configuration files) * add musl libC support (increase the thread stack) * Some other minor improvements and bug corrections - Add obsoletes/provides to baselibs.conf. - BuildRequire gcc explicitely (bnc#879608) - enable polkit for 13.2 and above - removed rc script from 13.1 and above - do not use polkit for now - Updated to version 1.8.11 * Add polkit support. See doc/README.polkit * /etc/reader.conf: CHANNELID and DEVICENAME are both optional but not at the same time * Some other minor improvements and bug corrections - remove dependency on sysvinit(syslog) starting with 13.1 - Updated to version 1.8.10 This version is a bug fix for the version 1.8.9: new symbol log_msg was exported by the client library libpcsclite.so.1. This symbol is NOT part of the WinSCard API and should not be exported. It was a bug and needed to be fixed soon to avoid problems in PC/SC applications (like symbol conflict). - Updated to version 1.8.9 * SCardEndTransaction(): Return an error if is called with no corresponding SCardBeginTransaction() * SCardGetAttrib(): Add support of SCARD_ATTR_DEVICE_SYSTEM_NAME * SCardGetAttrib(): Fix bug in SCARD_ATTR_DEVICE_FRIENDLY_NAME * SCardBeginTransaction() was not correctly releasing a mutex when the hCard handle was invalidated. The problem was that SCardGetStatusChange() was blocked because SCardBeginTransaction() had not released the context mutex. * PCSC/reader.h: Use C99 flexible array member The structures PIN_MODIFY_STRUCTURE and PIN_VERIFY_STRUCTURE now use a C99 flexible array member when available for abData field. uint8_t abData[]; * Add support of --reader-name-no-serial and --reader-name-no-interface It is now possible to NOT add the USB serial number of the reader using --reader-name-no-serial It is now possible to NOT add the CCID interface name of the reader using --reader-name-no-interface * Add support of serialconfdir pkg-config variable It is now possible to use pkg-config to get the directory used by pcscd to fetch serial drivers configurations. $ pkg-config libpcsclite --variable=serialconfdir /etc/reader.conf.d * pcsc-spy: Try to display the thread in the order they appear in the log * pcsc-spy: Add SCARD_ATTR_DEVICE_SYSTEM_NAME * Check the Info.plist file is (a minimum) correct * Update PROTOCOL_VERSION_MINOR from 2 to 3 We broke the API between version 1.8.3 and 1.8.4 by changing the value of MAX_READERNAME. This change should have been made before releasing version 1.8.4 to make mix of versions clearly non working instead of failing with strange errors. * hotplug_libudev.c: Fix a memory leak in case of error * Fix OpenBSD 5.2 compilation regarding dlopen * correctly manage thread safe multi-slot readers * Do not use pthread_atfork() any more (fix problem on FreeBSD) * fix memory leaks. This was not really a problem unless you embedd pcscd in another process and do init/deinit pcscd without exiting the process (as maybe used on Android or iOS). * pcscd.8 manpage: add documentation for --max-thread, --max-card-handle-per-thread, --max-card-handle-per-reader, --force-reader-polling, --error, --critical and --color * Some other minor improvements and bug corrections - Updated to version 1.8.8 * /etc/reader.conf: handle FRIENDLYNAME with no " delimiters (serial readers) * Info.plist: Correctly handle reader names containing & (USB readers) - Verify GPG signature. - Fixes for SLE10. - Fix path to nologin in useradd (bnc#796242). - Updated to version 1.8.7 * Fix a problem when a reader is unplugged (and the reader is still in use) - Fix useradd/groupadd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now. - Updated to version 1.8.6 * Fix a problem when only serial drivers are used (no hotplug/USB driver) * increase log buffer size from 160 to 2048. Some "long" log lines where truncated. * Fix redirection of stdin, stdout and stderr to /dev/null when pcscd is started as a daemon (default) * Some other minor improvements and bug corrections - Updated to version 1.8.5 * Fix crash when a reader is unplugged while pcscd is in the middle of a PC/SC function * SCardBeginTransaction(): fix a bug introduced in version 1.8.4 related to sharing * Some other minor improvements and bug corrections - Updated to version 1.8.4 * Add [ and ] in the list of accepted characters for a reader name * truncates the reader name if it is too long instead of rejecting the reader * The restriction to have to call SCardEstablishContext() in each thread has been removed. Threads could now share a PC/SC context. * Update IFDHandler API Doxygen regarding the "libusb-1.0" naming scheme * Some other minor improvements and bug corrections - Updated to version 1.8.3 * ignore directories and hidden (.*) files when parsing a configuration directory (like /etc/reader.conf.d/) * fix a bug in PC/SC spy tool when loading of the real library fails * add PCSCv2_PART10_PROPERTY_dwMaxAPDUDataSize, PCSCv2_PART10_PROPERTY_wIdVendor, PCSCv2_PART10_PROPERTY_wIdProduct from PC/SC v2 part 10 release 2.02.09 * Some other minor improvements and bug corrections - Updated to version 1.8.2 * rename pcsc-spy.py to pcsc-spy * pcsc-spy.1 manpage * fix a bug with a multi-slot reader * Info.plist parser: avoid a buffer read overflow in & management - moved internal changelogs to devel package - Move libpcsclite.so file to the main package (bnc#732911). - Updated to version 1.8.1 * added missing files in source archive - Updated to version 1.8.0: * PC/SC spy tool * Support systemd socket activation (the auto start of pcscd from the library has been removed. Use systemd instead) * SCardGetStatusChange(): check all the readers are already known and return SCARD_E_UNKNOWN_READER if a reader name is not present. * SCardEstablishContext(): Invalidate all the handles in the son after a fork * Add define of FEATURE_EXECUTE_PACE from PCSC v2 Part 10 Amendment 1 2011-06-03 * Fix some memory leaks repoted by Coverity * Some other minor improvements and bug corrections - enabled usage of systemd init for 12.1 and newer - add libtool as buildrequire to avoid implicit dependency - Readd if structure to support older versions like evergreen & SLES 11 - Fixed runlevel, hal, and /var/lock/subsys - Updated to version 1.7.4 * fix regression in 1.7.3: T=1 cards were not working - Updated to version 1.7.3: * hotplug libudev: support libudev >= 171 * hotplug libusb: Fix a memory leak * pcscd: exit immediately in case of SIGTERM (Closes Debian bug #620305 "pcscd slows down shutdown/restart") * Send logs to stdout instead of stderr * Add command line option -T, --color: force use of colored logs * Define g_rgSCardT?Pci as const structures to be more Windows like * log at level PCSC_LOG_DEBUG instead of PCSC_LOG_ERROR to avoid filling the system log file * Remove the deprecated define FEATURE_MCT_READERDIRECT (replaced by FEATURE_MCT_READER_DIRECT) * some other minor improvements and bug corrections - allow the automatic power off feature - cleanup spec file and requires - moved libpcsclite1.so back to devel package - make startup more robust by checking status files (bnc#686674) - disable auto power off/on feature - Updated to version 1.7.2: * use libudev only on Linux and libusb elsewhere * Try to use a (CCID) class driver if a specific driver fails to use the reader. * add support of multi-interfaces readers with libusb * fix a problem with a multi-slots reader * some other minor improvements and bug corrections - cosmetic changes to init script output - fix syslog not being present in runlevel 4 - Updated to version 1.6.6: * code and behavior improvements * many fixes * uses libusb-1.0 * two security fixes (bnc#609317, CVE-2010-0407, bnc#661000, CVE-2010-4531) * for more see ChangeLog - Disabled HAL support. - Create dedicated UID and GID "scard". - add baselibs.conf as a source - Updated to version 1.5.3: * add the reader interface name if provided by the device * SCardTransmit(): return SCARD_E_UNSUPPORTED_FEATURE if SCARD_PROTOCOL_RAW is requested by unsupported * SCardConnect() and SCardReconnect(): set dwActiveProtocol to SCARD_PROTOCOL_UNDEFINED if SCARD_SHARE_DIRECT is used (conform to MSDN). * SCardControl(): correctly check for buffer overflow. * SCardGetStatusChange() works again. * detect buffer overflows if pcscd if used by a rogue client * force access rights on /var/run/pcscd to be sure it can be used by a libpcsclite client without privileges * create the PCSCLITE_EVENTS_DIR directory with the sticky bit so only root or the owner of the event files can remove them * if RFAddReader() fails with the libhal scheme then we try with the (old) libusb scheme. * give a higher priority to a specific driver over the CCID Class driver. * some other minor improvements and bug corrections - Fixed baselibs.conf. - Fixed permissions of /var/run/pcscd (bnc#466211). - Updated to version 1.5.3: * SCardEstablishContext(): check we do not reuse an already allocated hContext * pcsclite.h: add missing SCARD_E_* and SCARD_W_* return code. * reader.h: add PIN_PROPERTIES_STRUCTURE structure and FEATURE_IFD_PIN_PROPERTIES * remove powermgt_macosx.c since it is using APSL version 1.1 instead of the BSD-like licence (bnc#474818) * avoid a possible crash due to a race condition * change default log level from PCSC_LOG_INFO to PCSC_LOG_ERROR * CardDisconnect(): call RFUnlockAllSharing() instead of RFUnlockSharing() to release all nested locks. Visible in OpenSC "pkcs11-tool -I". * some other minor improvements and bug corrections - Fixed possible overflows (bnc#499734). - Updated to version 1.5.2: * SCardGetStatusChange(): return if the state of the reader changed since the previous call * SCardCancel() now works as expected * log TxBuffer and RxBuffer if the SCardControl() command failed * add a mutex to avoid a race condition * SCardGetStatusChange() may not return if the reader was removed * some other minor improvements and bug corrections - Start daemon by default (bnc#466430). - Ensure that Apple Public Source License Version 1.1 does not apply (bnc#474818). - Updated to version 1.5.1: * Fixed extended APDU of more than 2048 bytes * some other minor improvements and bug corrections * correctly handle up to PCSCLITE_MAX_READERS_CONTEXTS * SCardGetStatusChange() behavior change * SCardStatus(): support of SCARD_AUTOALLOCATE * SCardGetStatusChange() now uses asynchronous events * more and/or better documentation * SCardTransmit(): correctly pass the pioRecvPci parameter * SCardConnect() and SCardReconnect(): correct a race condition * pcscd logs the command name sent by the application * some other minor improvements and bug corrections - Split according to shared library packaging rules (bnc#466430#c5). - Removed obsolete udev rules. - Install init script based on upstream one (bnc#467255). - Removed upgrade protection for <= SLE9. - Do not call autoreconf for SLE10. - Updated to version 1.4.102: * pcscd -v now displays enabled features * add support of SCARD_AUTOALLOCATE in SCardListReaders(), SCardListReaderGroups() and SCardGetAttrib * add SCardFreeMemory() * try to use the reader polling thread also for the other slots on a multi-slots reader * solve a possible crash with SCardCancel() in multithreading environment * SCardConnect(), SCardReconnect(): do not check the parameter dwPreferredProtocols if dwShareMode == SCARD_SHARE_DIRECT * better support of driver termination (when pcscd exits) * kill the driver polling thread only if the driver supports it. * support for fork(). Handles are now invalid in the child process. * SCardStatus() returns SCARD_W_REMOVED_CARD instead of SCARD_W_RESET_CARD when a card has been removed and inserted * some other minor improvements and bug corrections - remove resmgr from BuildRequires - added baselibs.conf file to build xxbit packages for multilib support - Updated to version 1.4.100: * add libhal support to avoid polling the USB bus. * improve performances. * SCardListReaders(): returns SCARD_E_NO_READERS_AVAILABLE when no reader are available. * add support of TAG_IFD_POLLING_THREAD to use an asynchronous card movements detection instead of an active polling. * CardCheckDaemonAvailability(): lower the priority of the log message in case of "PCSC Not Running" or "PCSC restarted" so that nothing is logged by default. * default log level is PCSC_LOG_CRITICAL+1 so that NO log is sent to stderr by default. * Document more details about deviceName argument of IFDHCreateChannelByName() * add support of mix 32/64 bits platforms. * increase MAX_READERNAME from 52 to 100 * default ipcdir is /var/run/pcscd instead of /var/run so the directory can be shared locally between 32/64 bits systems on chroots * display time delta between two lines of logs when printed to stderr * return EXIT_SUCCESS (instead of EXIT_SUCCESS) if parsing /etc/reader.conf fails. * performance improvement when powering a card after insertion * some other minor improvements and bug corrections * do not call a Log function in a signal handler and do hotplug synchronously. * some other minor improvements and bug corrections - Added necessary udev rule (#337666). - Applied Jacob Berkman's patch for 32-64-bit interoperability. - Updated to version 1.4.3: * see ChangeLog for complete list of changes - Buildrequires libusb -> libusb-devel - fixed 'warning: array subscript is above array bounds' (#239174) - Updated to version 1.3.3: * Added -H --hotplug argument. * Added support for IFD_GENERATE_HOTPLUG bit in driver Info.plist ifdCapabilities. * SCardConnect() & SCardDisconnect(): Wait until any transaction finishes before going on. * Removed tools installifd and formaticc. * SCardControl(): do not limit cbSendLength to MAX_BUFFER_SIZE. * implement SCardIsValidContext() PC/SC call. * Other API changes and improvements. - Spec file cleanup. - Moved testpcsc to /usr/sbin. - pcsclite.so moved to the main package (#235773). - update to version 1.3.2 * add support of extended APDU in the standard configuration and in a backward compatible way: pcscd 1.3.2 can be used with libpcsclite <= 1.3.2 * define MAX_BUFFER_SIZE_EXTENDED as the maximal size allowed for a extended APDU (64KB) * LPCTSTR and LPTSTR types are deprecated. Use LPCSTR and LPSTR instead * Dual licence src/error.c so it can be used bu OpenSC. It is now BSD-like, see the COPYING file and GNU Lesser General Licence 2.1 or (at your option) any later version * document that the 4 bytes field value in PCSC_TLV_STRUCTURE is always in big endian as documented in PCSC v2 part 10 ch 2.2 page 2. You can use ntohl() to convert the value. * some other minor improvements and bug corrections - fixed compiler warning: subscript out of range [#204770] (overflow.patch) - update to version 1.3.1 * use fprintf(stderr,) instead of syslog(3) to log messages from libpcsclite * use PCSCLITE_DEBUG to activate the debug messages in libpcsclite * add the reader serial number in the reader name only if ADD_SERIAL_NUMBER is defined - remove powermgt_macosx.c from the package (#161324) - mount /proc/bus/usb in initscript anyway (#146979) - start after kbd instead of mounting usbfs ourselfs (#146979) - mount /proc/bus/usb in initscript (#146979) - converted neededforbuild to BuildRequires - move drivers to separate source packages - branch devel subpackage - removed obsolete hotplug stuff for cyberjack - Updated pcsc-lite to version 1.2.9-beta9 - Updated CCID driver to 0.9.4 - Updated GemPC driver to 1.0.0 - package pkgconfig files to be able to build drivers outside the package - removed unpackaged man-page symlinks - remove keeper from nfb (unused) - Updated towitoko driver to 2.0.7 and install USB bundle - Repackaged CCID as bundle for USB usage (#116497) - handle old reader.conf in upgrade case - compile with -fno-strict-aliasing - fixed missing return in ctapi-cyberjack - Updated pcsc-lite to version 1.2.9beta8 (#116497) * use /etc/reader.conf.d/ * adapted init script to create /etc/reader.conf - Updated cyberjack driver to version 2.0.9 * use rpath for cyberjack tools - Updated ccid driver to version 0.9.3 (#116497) - Use RPM_OPT_FLAGS everywhere - Fixed serious compiler warnings - fix off-by-one error in hotplug_libusb.c [#112964] - Remove unnecessary files from pcsc-acr38 again [#112927] - package ACR38 driver in correct bundle format [#112927] - remove orphaned /var/run/pcscd.pub when necessary [#112928] - update ACR38u driver to version 100705 to fix crash when reader is plugged in [#112964] - Updated ACR38u driver to version 100703 - Added ACR38u driver - Updated description in init script (#79287) - use RPM_OPT_FLAGS in 1 more driver - added includes to avoid implict declaration of memcpy and similar. - make it build with gcc-4 - Disable support for extended-apdus, it eats 32MB of memory (#73629) - Fix default search location for USB bundles - Updated to latest upstream version - Updated several drivers - Added CCID driver - Provide a more informative readers.conf file (#42620) - drop subpackage gpr400 - compile formaticc with no-strict-aliasing - fix unused return type in musclecard.c - Properly install testpcsc, formaticc (#37625) - Build towitoko driver with --enable-win32-com - cyberjack apps installed in /bin should be executable (#36409) - add %run_ldconfig - merge ctapi-cyberjack into pcsc-lite: two additional packages are created: ctapi-cyberjack and pcsc-cyberjack - remove unpackaged files from buildroot - added directories to filelist - added -fPIC when building eToken driver - Updated to latest upstream version - Included driver for Aladdin eToken PRO - More GNU auto#*@! headaches - Various minor fixes - Moved shared objects to /usr/lib64 on ppc64/s390x (#18421) - fix initscript, Should-start: setserial hotplug - added PreReq for insserv_and_fillup - fixed build problem on s390x (force aclocal.m4 regen) - use -fPIC when building a shared lib - fix for bug #15051 (hey, it's a palindrome bug:): missing %doc DRIVERS file; misc silly binaries moved out of /usr/bin - Fixed build problem introduced by previous patch - updated to latest upstream version - added drivers for these readers: Towitoko, Schlumberger Reflex 6x, Gemplus GPR 400, GemPlus GemPC 410/430 - fixed for latest automake/autoconf - spec-file cleanup - LSB compliant init-script - removed START_PCSCD - call aclocal - updated to 1.0.0Beta - fixed /etc/init.d/pcscd status-handling (bug #9069) - fix broken Makefile.am - update to 0.9.1 - created package OBS-URL: https://build.opensuse.org/request/show/560991 OBS-URL: https://build.opensuse.org/package/show/security:chipcard/pcsc-lite?expand=0&rev=138
16 lines
468 B
Diff
16 lines
468 B
Diff
diff --git a/etc/pcscd.service.in b/etc/pcscd.service.in
|
|
index 7934050..ddbdcc4 100644
|
|
--- a/etc/pcscd.service.in
|
|
+++ b/etc/pcscd.service.in
|
|
@@ -3,7 +3,9 @@ Description=PC/SC Smart Card Daemon
|
|
Requires=pcscd.socket
|
|
|
|
[Service]
|
|
-ExecStart=@sbindir_exp@/pcscd --foreground --auto-exit
|
|
+Environment="PCSCD_OPTIONS="
|
|
+EnvironmentFile=-/etc/sysconfig/pcscd
|
|
+ExecStart=@sbindir_exp@/pcscd --foreground $PCSCD_OPTIONS
|
|
ExecReload=@sbindir_exp@/pcscd --hotplug
|
|
|
|
[Install]
|