summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2014-12-15Make dbus-daemon-launch-helper permissions more robust (Closes: #773107)debian/1.9.4-2Simon McVittie4-2/+42
* postinst: use dpkg-statoverride to set the permissions for dbus-daemon-launch-helper (expected to be 04754 root:messagebus) as suggested in Policy §10.9. This avoids a temporarily broken state when an upgraded dbus is unpacked but not yet configured (Closes: #773107) * preinst: opportunistically set up the same dpkg-statoverride entry if the group already exists, to avoid the same broken state during upgrades from older versions without needing Pre-Depends: adduser * postrm: delete the dpkg-statoverride entry on purge
2014-11-24New upstream release 1.9.4debian/1.9.4-1Simon McVittie2-0/+44
2014-11-24Merge tag 'upstream/1.9.4' into experimentalSimon McVittie13-21/+89
Upstream version 1.9.4
2014-11-24Imported Upstream version 1.9.4upstream/1.9.4Simon McVittie13-21/+89
2014-11-06add new symbolsdebian/1.9.2-1Simon McVittie1-0/+2
2014-11-06releaseSimon McVittie1-2/+2
2014-11-06Merge tag 'upstream/1.9.2' into experimentalSimon McVittie57-1127/+2283
Upstream version 1.9.2 Conflicts: NEWS configure.ac
2014-11-06Imported Upstream version 1.9.2upstream/1.9.2Simon McVittie57-1127/+2283
2014-11-06Merge branch 'master' into experimentalSimon McVittie2-1/+9
Conflicts: NEWS configure configure.ac
2014-11-061.9.2, spec 0.25Simon McVittie3-8/+8
2014-11-06Merge branch 'dbus-1.8'Simon McVittie7-43/+234
Conflicts: NEWS configure.ac
2014-11-06prepare releasedebian/1.8.10-1Simon McVittie1-2/+2
2014-11-06Start 'dbus-daemon --system' as root under sysvinit, so it can increase its ↵Simon McVittie2-1/+4
file descriptor limit
2014-11-06New upstream release 1.8.10Simon McVittie1-0/+9
- raise dbus-daemon's file descriptor limit to 65536 to avoid an opportunity for denial of service (CVE-2014-7824, an incomplete fix for CVE-2014-3636)
2014-11-06Merge tag 'upstream/1.8.10'Simon McVittie11-65/+260
Upstream version 1.8.10
2014-11-06Imported Upstream version 1.8.10upstream/1.8.10Simon McVittie11-65/+260
2014-11-06Embargoed security release for MondaySimon McVittie2-4/+11
2014-11-06CVE-2014-7824: set fd rlimit to 64k for the system dbus-daemonSimon McVittie6-43/+227
This ensures that our rlimit is actually high enough to avoid the denial of service described in CVE-2014-3636 part A. CVE-2014-7824 has been allocated for this incomplete fix. Restore the original rlimit for activated services, to avoid them getting undesired higher limits. (Thanks to Alban Crequy for various adjustments which have been included in this commit.) Bug: https://bugs.freedesktop.org/show_bug.cgi?id=85105 Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk>
2014-11-06NEWSSimon McVittie1-0/+8
2014-11-06Add NetBSD to the list of platforms where credentials-passing a pid should workSimon McVittie1-1/+2
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=69702 Reviewed-by: Patrick Welche <prlw1@cam.ac.uk> Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk> Tested-by: Patrick Welche <prlw1@cam.ac.uk>
2014-11-06test_processid: only assert that it works if we expect it to workSimon McVittie1-10/+22
Otherwise, this would fail on, for instance, QNX. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=69702 Reviewed-by: Patrick Welche <prlw1@cam.ac.uk> Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk> Tested-by: Patrick Welche <prlw1@cam.ac.uk>
2014-11-06whitespace/comment fixesPatrick Welche2-2/+2
[originally part of the previous commit -smcv] Bug: https://bugs.freedesktop.org/show_bug.cgi?id=69702 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk>
2014-11-06Implement NetBSD credentials-passing with LOCAL_PEEREIDPatrick Welche4-6/+96
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=69702 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk> Tested-by: Patrick Welche <prlw1@cam.ac.uk>
2014-11-06dbus-daemon test: don't assert we pass uid/pid on unknown Unix platformsSimon McVittie1-1/+28
We know that Linux, FreeBSD and OpenBSD are "first class citizens" for credentials-passing, with NetBSD not far behind: people have turned up on the bug tracking system and told us that tests passed. On other Unixes, we can't really assert that it works, until someone who runs them tells us that it worked for them. Additions to these lists are welcome. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=69702 Reviewed-by: Patrick Welche <prlw1@cam.ac.uk> Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk> Tested-by: Patrick Welche <prlw1@cam.ac.uk>
2014-10-29NEWSSimon McVittie1-0/+15
2014-10-29dbus-spawn: do not forget the exec() errno when the grandchild exitsSimon McVittie1-1/+17
As is already noted in a comment in _dbus_babysitter_set_child_exit_error(), if the grandchild fails to exec() the desired process, we get both CHILD_EXEC_FAILED (with an errno) and CHILD_EXITED (with a status), and we want to report the former, since it is more informative. However, clearing sitter->errnum meant we lose the errno value. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=24821 Reviewed-by: Ross Lagerwall
2014-10-29dbus-tutorial: replace the entire GLib section with "use GDBus"Simon McVittie1-939/+13
Also provide links to relevant GLib and Qt documentation. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=25140
2014-10-29Stop asserting that we're not using the dummy lock implementationSimon McVittie1-10/+0
That implementation no longer exists, so neither 0xABCDEF nor 0xABCDEF2 has any special meaning any more. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=54972 Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk>
2014-10-29Use a better NoReply message for disconnection with reply pendingSimon McVittie5-3/+120
As an implementation detail, dbus-daemon handles this situation by artificially triggering a timeout (even if its configured timeout for method calls is in fact infinite). However, using the same debug message for both is misleading, and can lead people who are debugging a service crash to blame dbus-daemon instead, wasting their time. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=76112
2014-10-29dbus-sysdeps-unix: document the assumption that makes our use of credentials ↵Simon McVittie1-0/+19
secure Bug: https://bugs.freedesktop.org/show_bug.cgi?id=83499 Reviewed-by: Alban Crequy <alban.crequy@collabora.co.uk>
2014-10-29Consistently save and restore errnoSimon McVittie7-51/+90
Some functions in dbus-transport-socket.c make a (wrapped) socket syscall, then call other APIs, then test the result and errno of the socket syscall. This would break horribly if those "other APIs" overwrote errno with their own value (... and this is part of why errno is an awful API). Notably, if running under DBUS_VERBOSE, _dbus_verbose() is basically fprintf(), which sets errno; and our Unix fd-passing support makes calls of the form _dbus_verbose ("Read/wrote %i unix fds\n", n) between the syscall and the result processing. Maybe one day we'll convert all of dbus' syscall wrappers to either raise a DBusError, or use the "negative errno" convention that systemd borrowed from the Linux kernel, and in particular, we would need to do that if we ever ported it to a platform where socket error reporting was not basically errno. However, in practice everyone uses something derived from BSD sockets, so "this sets errno, you know what errno is" is a good enough internal API if we make sure to use it correctly. Nothing calls _dbus_get_is_errno_nonzero(), so I just removed it instead of converting it to the new calling convention. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=83625
2014-10-29NEWSSimon McVittie1-1/+19
2014-10-28Implement getter, setter for ALLOW_INTERACTIVE_AUTHORIZATION flagSimon McVittie2-0/+56
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=83449 Reviewed-by: Lennart Poettering
2014-10-28build: include dbus-sysdeps-unix.h for _dbus_fd_set_close_on_execPatrick Welche1-0/+1
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=85563 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-28dbus-spec, dbus-protocol: add ALLOW_INTERACTIVE_AUTHORIZATION flagSimon McVittie2-0/+69
Heavily based on a patch from Lennart Poettering. This is useful for authentication frameworks such as polkit, but this flag is supposed to be generic, and not be bound to any implementation of such a framework. The dbus specification already clarifies that unknown flags must be ignored, the reference implementation and the other implementations we checked indeed ignore any new flags, hence we should be fine with compatibility here. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=83449
2014-10-24Include test-dbus and test-bus in cmake 'make check' target.Ralf Habacker2-4/+3
Because test-dbus and test-bus lives in subdirectory dbus/bus, we need to define make 'check' in top level source directory. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=73689 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-24test-bus, test-dbus: close any inherited fds from callerSimon McVittie2-0/+18
It is probably a bug for them to pass us any fds without close-on-exec; but apparently CMake has this bug, and so does at least some NetBSD GUI environment. Cope. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=73689 Bug: https://bugs.freedesktop.org/show_bug.cgi?id=83899 Reviewed-by: Ralf Habacker <ralf.habacker@freenet.de>
2014-10-24cmake: only copy session.conf and system.conf into test data dirSimon McVittie1-1/+4
Historically, CMake used the glob *.conf.in whereas Autotools listed the files explicitly. This used to be equivalent, but broke down when we added example-*.conf.in which are just snippets rather than complete configuration files (they're intended to go in session.d or system.d, or otherwise get included by the main config file). Bug: https://bugs.freedesktop.org/show_bug.cgi?id=73689 Reviewed-by: Ralf Habacker <ralf.habacker@freenet.de>
2014-10-24Add configure checks for accept4, dirfd, inotify_init1 and unix_fd_passing ↵Ralf Habacker2-0/+9
to cmake build system. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=73689 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-17Add configure check for pipe2 to cmake build system.Ralf Habacker2-0/+5
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=73689 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-14NEWSSimon McVittie1-0/+7
2014-10-14dbus-test-tool: add black-hole modeAlban Crequy3-32/+123
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=34140 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-14dbus-test-tool spam: add --messages-per-conn=NAlban Crequy1-17/+77
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=34140 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-14Add dbus-test-tool, currently with "echo" and "spam" modesAlban Crequy8-0/+842
This is installed by default, but easy to filter out for embedded systems or whatever. Based on earlier work by Simon McVittie and Will Thompson Bug: https://bugs.freedesktop.org/show_bug.cgi?id=34140 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-13dbus_shutdown: document its effect on shared connectionsSimon McVittie1-0/+7
In practice, the sort of applications that call dbus_shutdown() (e.g. regression tests) will want to either use private connections, or turn off exit-on-disconnect on the shared connection, or both. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=16924
2014-10-13Do not claim that '*' resolves to INADDR_ANY on all OSsSimon McVittie1-3/+5
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=72296
2014-10-13NEWSSimon McVittie1-0/+1
2014-10-13spec: introduce new value "const" for EmitsChangedSignal annotationLennart Poettering1-1/+18
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=72958 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
2014-10-13NEWSSimon McVittie1-0/+5
2014-10-13Let pkg-config expand directory variables recursivelyРуслан Ижбулатов3-10/+19
In particular this makes them more MinGW-friendly: pkg-config on Windows has specific code to rewrite the ${prefix} when installed in a different prefix. [add @datarootdir@, expand commit message -smcv] Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Bug: https://bugs.freedesktop.org/show_bug.cgi?id=75858
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-21 18:43:23 +0000