Marcus Meissner
f9a3701ea0
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/932177 OBS-URL: https://build.opensuse.org/package/show/Base:System/rtkit?expand=0&rev=46
156 lines
5.6 KiB
Plaintext
156 lines
5.6 KiB
Plaintext
-------------------------------------------------------------------
|
|
Tue Nov 16 10:49:44 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
|
|
|
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
|
|
* harden_rtkit-daemon.service.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 28 21:00:35 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
- Replace systemd-devel BuildRequires with pkgconfig(libsystemd):
|
|
allow OBS to shortcut through the systemd-mini flavors.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 8 22:55:08 UTC 2021 - Dirk Müller <dmueller@suse.com>
|
|
|
|
- update to 0.13:
|
|
* Link to libsystemd instead of shipping a copy of sd-daemon
|
|
* Move D-Bus policy to datadir
|
|
* Install the D-Bus interface description
|
|
* Other fixes accumulated over the years from various distributions
|
|
* Add meson build files (autotools stays available for now)
|
|
* Replace the use of as with xxd for including a file as a string, which avoids
|
|
* some pitfalls (#15 and portability problems). The tarball contains the
|
|
* resulting file, so xxd is not necessary when building using autotools
|
|
* Move rtkit-daemon.service from graphical.target to multi-user.target (#12)
|
|
* Make libsystemd an optional dependency (#13)
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 12 10:48:49 UTC 2020 - Fabian Vogt <fvogt@suse.com>
|
|
|
|
- Use /var/lib/empty instead of /proc as home for the rtkit user
|
|
- Use %license
|
|
- Commit _servicedata to avoid updating on every commit
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 03 14:13:21 UTC 2019 - mliska@suse.cz
|
|
|
|
- Update to version 0.11+git.20161005:
|
|
* Drop removed ControlGroup stanza
|
|
* systemd: update sd-daemon.[ch]
|
|
* build-sys: since clock_gettime() moved to libc use mq_open to check for librt
|
|
* Pass uid of caller to polkit
|
|
* systemd: update sd-daemon.[ch]
|
|
* git: update gitignore
|
|
* git: update .gitignore
|
|
* build-sys: modernize build system
|
|
* systemd: secure rtkit service a bit
|
|
* systemd: update unit file a bit
|
|
- Drop rtkit-no-cpu-controlgroup.patch
|
|
- Add -Wno-format-nonliteral -Wno-format-security to optflags in order
|
|
to prepare for -Werror of these warnings in openSUSE:Factory.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 9 13:59:38 UTC 2016 - fbui@suse.com
|
|
|
|
- Drop BR on libsystemd-daemon as rtkit uses a fancy way to reuse
|
|
systemd code :)
|
|
|
|
-------------------------------------------------------------------
|
|
Sun May 8 11:34:06 UTC 2016 - mpluskal@suse.com
|
|
|
|
- Add proper provides/obsoletes due to small change in versioning
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 18 19:58:57 UTC 2016 - mpluskal@suse.com
|
|
|
|
- Update to version 0.11+git.20130926:
|
|
* Pass uid of caller to polkit
|
|
* build-sys: since clock_gettime() moved to libc use mq_open to
|
|
check for librt
|
|
* systemd: update sd-daemon.[ch]
|
|
- Drop upstreamed patches
|
|
* rtkit-bnc836939.patch
|
|
* rtkit-use-system-sd-daemon.patch
|
|
- Add _service
|
|
- Cleanup spec file with spec-cleaner
|
|
- Drop support for pre systemd ditributions
|
|
- Add rc symlink for service
|
|
- Use more strict ldflags
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jan 1 21:49:33 UTC 2015 - meissner@suse.com
|
|
|
|
- build with PIE
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Nov 09 23:38:00 UTC 2014 - Led <ledest@gmail.com>
|
|
|
|
- fix bashism in pre script
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 27 13:28:28 UTC 2014 - meissner@suse.com
|
|
|
|
- rtkit-no-cpu-controlgroup.patch: do not specify the cpu: ControlGroup,
|
|
unsupported by systemd currently. bnc#847948
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 27 22:21:16 UTC 2013 - sreeves@suse.com
|
|
|
|
- Add rtkit-bnc836939.patch
|
|
Fix bnc#836939 - use of insecure polkit DBUS API. CVE-2013-4326
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 17 14:13:55 UTC 2012 - fcrozat@suse.com
|
|
|
|
- Don't buildrequires systemd, it is pulled by
|
|
pkgconfig(libsystemd-daemon), fixes conflict when bootstrapping
|
|
with systemd-mini packages.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Sep 23 13:48:55 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
- rtkit-use-system-sd-daemon.patch Use system sddaemon libs.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Sep 23 03:47:35 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
- Update to version 0.11.x, not much has changed other
|
|
than systemd related updates/improvements.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 20 21:08:37 UTC 2011 - coolo@suse.com
|
|
|
|
- add automake as buildrequire to avoid implicit dependency
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 8 13:52:01 UTC 2011 - coolo@suse.com
|
|
|
|
- fix license to be in spdx.org format
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 2 04:21:25 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
- Update to version 0.10.x
|
|
* fix annoying warning
|
|
Failed to make ourselves RT: Invalid argument [bnc#551777]
|
|
* activation is now done with systemd if possible
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Oct 31 12:37:02 UTC 2010 - jengelh@medozas.de
|
|
|
|
- Use %_smp_mflags
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 25 21:46:13 UTC 2010 - sreeves@novell.com
|
|
|
|
- Update to version 0.5
|
|
+ By default don't demote unknown threads
|
|
- bnc#572989 - change to /bin/false
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Aug 14 17:56:43 CEST 2009 - sreeves@novell.com
|
|
|
|
- Initial package
|
|
|