metalefty/xrdp-next
1
0
Fork 0
Code Issues Pull Requests Releases Activity
134 Commits 1 Branch 0 Tags 265 KiB
288dcc812b
Commit Graph

134 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bojan Smojver
288dcc812b Actually add the patch. 2017-05-18 12:29:13 +10:00
Bojan Smojver
0e4fbd83c7 Add a patch that allows equal signs in ini file values. 2017-05-18 12:28:38 +10:00
Bojan Smojver
4b1af7e079 Use epoch in version dependency. 
Provide SELinux scriptlets.
 2017-04-13 15:22:09 +10:00
Bojan Smojver
294ba5281a Adjust Fedora README file for SELinux changes. 2017-04-13 08:31:21 +10:00
Bojan Smojver
75d49d9d76 Add SELinux policy sub-package. 2017-04-12 22:15:12 +10:00
Bojan Smojver
24e3a2139d Own /usr/libexec/xrdp directory. 2017-04-11 11:23:00 +10:00
Bojan Smojver
ba89333c84 Move scripts to /usr/libexec/xrdp, so that they get labelled as bin_t. 2017-04-11 11:16:53 +10:00
Bojan Smojver
c89b807752 Rework starting of Xorg to use setpriv, directly from xrdp. 
Document SELinux deficiencies.
 2017-04-08 16:24:24 +10:00
Bojan Smojver
0e2197f37f Fix the name of the renamed patch. 2017-04-07 14:19:03 +10:00
Bojan Smojver
c248a7d1ef Avoid SELinux context transition after prctl() call by using setpriv. 2017-04-07 14:13:47 +10:00
Bojan Smojver
2824937920 Do not attempt xrdp restarts, may cause dnf transaction problems. 
Stop depending on Xorg server, xorgxrdp already does.
Add README.Fedora.
 2017-04-04 08:49:00 +10:00
Bojan Smojver
9b7edb41eb Stop using /usr/libexec/Xorg, not present on EL7. 2017-04-03 19:04:12 +10:00
Bojan Smojver
ef84d9ffb3 Add nasm to the list of build requirements. 2017-03-31 11:38:39 +11:00
Bojan Smojver
19dd11b67f Bump up to 0.9.2. 2017-03-31 11:37:08 +11:00
Pavel Roskin
84a28878e6 Upload xrdp-0.9.2.tar.gz 2017-03-29 23:59:01 -07:00
Bojan Smojver
1316fae0cf Revert "Patch CVE-2017-6967." 
This reverts commit 34847db9aa.
 2017-03-21 19:34:09 +11:00
Bojan Smojver
a009df5bb7 Revert "Correct the patch for CVE-2017-6967." 
This reverts commit 39eedd2899.
 2017-03-21 19:34:04 +11:00
Bojan Smojver
39eedd2899 Correct the patch for CVE-2017-6967. 2017-03-21 19:25:13 +11:00
Bojan Smojver
34847db9aa Patch CVE-2017-6967. 2017-03-21 19:12:27 +11:00
Bojan Smojver
fdd3ba2522 Bump up release number. 2017-03-14 15:39:33 +11:00
Bojan Smojver
5e20737406 Require tigervnc-server-minimal again, make it default. 
Comment out references to X11rdp.
 2017-03-14 15:35:35 +11:00
Pavel Roskin
f1350805d5 Revert the last change, it's not working on f25 2017-03-11 00:07:43 -08:00
Pavel Roskin
cf3b9a55dc Set tls_ciphers to PROFILE=SYSTEM, disable SSLv3 
See https://fedoraproject.org/wiki/Packaging:CryptoPolicies
 2017-03-10 14:24:08 -08:00
Pavel Roskin
e27e31d616 Exclude *.so files for non-modules 2017-03-10 13:08:40 -08:00
Pavel Roskin
81cb1033b1 Call xrdp-keygen with full path in %posttrans 2017-03-10 10:31:17 -08:00
Pavel Roskin
3c9d286368 Require Xsession 
- Require /etc/X11/xinit/Xsession, it's called from startwm.sh
 2017-03-10 09:13:02 -08:00
Pavel Roskin
d3c649536b Use xorgxrdp by default 
- Make xrdp depend on xorgxrdp, not on tigervnc-server-minimal
- Make Xorg backend default
- Call /usr/libexec/Xorg directly to avoid permission checks
 2017-03-09 15:51:11 -08:00
Bojan Smojver
2d35ec095a Require openssl in posttrans phase. 
Move conditional restart to posttrans phase.
 2017-02-21 05:15:28 +11:00
Bojan Smojver
7271948d04 Move key/cert generation to posttrans phase. 2017-02-20 15:13:56 +11:00
Bojan Smojver
341ecd47bb Fix log file rotation. 
PID files do not exist, so sending a HUP will not be possible. Use
copytruncate instead. Create option is irrelevant in that case.

Also, include xrdp.log file.
 2017-02-16 10:02:51 +11:00
Fedora Release Engineering
3a33d2ee40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 18:08:46 +00:00
Pavel Roskin
041d3cee4a Enable hardened build, it's required for daemons that run as root 2017-02-08 00:24:48 -08:00
Pavel Roskin
5504de0cad Be careful to only package xrdp headers in xrdp-devel 2017-01-25 01:17:08 -08:00
Pavel Roskin
c02680c663 Use version 0.9.1-1 for the package, it was never built 2017-01-24 00:54:06 -08:00
Pavel Roskin
cb6a7d777b Fix permissions on keys and certificates 
Make sure to generate them with mode 400. Adjust permissions on
preexisiting keys. Regenerate empty keys.
 2017-01-24 00:11:42 -08:00
Pavel Roskin
6277dbab0f Enable libpainter for compatibility with "noorders" clients 2017-01-23 23:46:02 -08:00
Pavel Roskin
c90b0028bb Put Xvnc first, then Xorg and X11rdp, remove rdp-any 
Until xorgxrdp package is ready and is a dependency of xrdp, Xvnc should
be first. Enable X11rdp, but put it to the end of the list. rdp-any is
beyond repair and has been deleted in git, so don't leave it even
commented out.
 2017-01-23 23:34:41 -08:00
Pavel Roskin
dcc8234cc7 Remove duplicate files, prepare 0.9.1-2 build 2017-01-23 23:13:54 -08:00
Pavel Roskin
993073e124 Stop services on package removal (see bug 1349083) 2017-01-23 22:51:59 -08:00
Pavel Roskin
7e4969065f Mark xrdp.log as ghost, don't create empty xrdp-sesman.log 2017-01-22 22:45:41 -08:00
Pavel Roskin
703134b7c4 Add expanded openssl.conf to sources, use no location in certificate 2017-01-22 22:23:24 -08:00
Pavel Roskin
74dabc2cd6 Split out xrdp-devel package 2017-01-22 20:10:58 -08:00
Pavel Roskin
5872e948e0 Add fastpath hotfix 2017-01-22 12:31:24 -08:00
Pavel Roskin
66c205af73 Restore patch for *.service files 
Thanks to Bojan Smojver.
 2017-01-22 11:59:32 -08:00
Pavel Roskin
ab7b4e9cce Don't package xrdp.sh, it's for systems without systemd 2016-12-27 00:32:11 -08:00
Pavel Roskin
1ab54b8592 Move key generation to the post-install stage 
Don't package any keys. Generate the keys only if they are missing. Keep
the keys on uninstall.

For TLS keys, increase validity to 10 years. No need to have xrdp stop
working in one year.
 2016-12-27 00:22:59 -08:00
Pavel Roskin
85247383dc Use %make_build and %make_install 2016-12-26 23:50:42 -08:00
Pavel Roskin
b3f77696e1 Use %autosetup instead of %setup and %patch 2016-12-26 23:38:44 -08:00
Pavel Roskin
91f91dc6ef Exclude *.a and *.la from package instead of removing them 2016-12-26 23:19:25 -08:00
Pavel Roskin
a8b78e203e Express build dependencies using pkgconfig() when pkg-config is used 2016-12-26 22:57:38 -08:00