From d468bca09897750bf7e6f748f1898e65d16c2c82 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Tue, 21 Jul 2020 06:23:38 -0400 Subject: [PATCH] import dbus-1.12.8-10.el8_2 --- .dbus.metadata | 1 + .gitignore | 1 + SOURCES/00-start-message-bus.sh | 14 + ...ols-Use-Python3-for-GetAllMatchRules.patch | 22 + SOURCES/dbus-1.12.8-fix-CVE-2019-12749.patch | 119 ++ SOURCES/dbus-1.12.8-fix-CVE-2020-12049.patch | 74 + SPECS/dbus.spec | 1411 +++++++++++++++++ 7 files changed, 1642 insertions(+) create mode 100644 .dbus.metadata create mode 100644 .gitignore create mode 100755 SOURCES/00-start-message-bus.sh create mode 100644 SOURCES/0001-tools-Use-Python3-for-GetAllMatchRules.patch create mode 100644 SOURCES/dbus-1.12.8-fix-CVE-2019-12749.patch create mode 100644 SOURCES/dbus-1.12.8-fix-CVE-2020-12049.patch create mode 100644 SPECS/dbus.spec diff --git a/.dbus.metadata b/.dbus.metadata new file mode 100644 index 0000000..b643206 --- /dev/null +++ b/.dbus.metadata @@ -0,0 +1 @@ +8e50e46796e8297eaa633da3a61cdc79a500e34a SOURCES/dbus-1.12.8.tar.gz diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..3a43390 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/dbus-1.12.8.tar.gz diff --git a/SOURCES/00-start-message-bus.sh b/SOURCES/00-start-message-bus.sh new file mode 100755 index 0000000..582b424 --- /dev/null +++ b/SOURCES/00-start-message-bus.sh @@ -0,0 +1,14 @@ +#!/bin/sh +# Copyright (C) 2008 Red Hat, Inc. +# +# All rights reserved. This copyrighted material is made available to anyone +# wishing to use, modify, copy, or redistribute it subject to the terms and +# conditions of the GNU General Public License version 2. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. +# +if [ -z "$DBUS_SESSION_BUS_ADDRESS" ]; then + eval `dbus-launch --sh-syntax --exit-with-session` +fi diff --git a/SOURCES/0001-tools-Use-Python3-for-GetAllMatchRules.patch b/SOURCES/0001-tools-Use-Python3-for-GetAllMatchRules.patch new file mode 100644 index 0000000..3836534 --- /dev/null +++ b/SOURCES/0001-tools-Use-Python3-for-GetAllMatchRules.patch @@ -0,0 +1,22 @@ +From 59ddde9e1ed5de03b060ff3ce27e35509707dff2 Mon Sep 17 00:00:00 2001 +From: Colin Walters +Date: Tue, 31 Jul 2018 12:33:59 -0400 +Subject: [PATCH] tools: Use Python3 for GetAllMatchRules + +--- + tools/GetAllMatchRules.py | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/tools/GetAllMatchRules.py b/tools/GetAllMatchRules.py +index 6a7e4cd9..f7e340d6 100755 +--- a/tools/GetAllMatchRules.py ++++ b/tools/GetAllMatchRules.py +@@ -1,4 +1,4 @@ +-#!/usr/bin/env python ++#!/usr/bin/python3 + + import sys + import argparse +-- +2.17.1 + diff --git a/SOURCES/dbus-1.12.8-fix-CVE-2019-12749.patch b/SOURCES/dbus-1.12.8-fix-CVE-2019-12749.patch new file mode 100644 index 0000000..36cc3f1 --- /dev/null +++ b/SOURCES/dbus-1.12.8-fix-CVE-2019-12749.patch @@ -0,0 +1,119 @@ +From 47b1a4c41004bf494b87370987b222c934b19016 Mon Sep 17 00:00:00 2001 +From: Simon McVittie +Date: Thu, 30 May 2019 12:53:03 +0100 +Subject: [PATCH] auth: Reject DBUS_COOKIE_SHA1 for users other than the server + owner + +The DBUS_COOKIE_SHA1 authentication mechanism aims to prove ownership +of a shared home directory by having the server write a secret "cookie" +into a .dbus-keyrings subdirectory of the desired identity's home +directory with 0700 permissions, and having the client prove that it can +read the cookie. This never actually worked for non-malicious clients in +the case where server uid != client uid (unless the server and client +both have privileges, such as Linux CAP_DAC_OVERRIDE or traditional +Unix uid 0) because an unprivileged server would fail to write out the +cookie, and an unprivileged client would be unable to read the resulting +file owned by the server. + +Additionally, since dbus 1.7.10 we have checked that ~/.dbus-keyrings +is owned by the uid of the server (a side-effect of a check added to +harden our use of XDG_RUNTIME_DIR), further ruling out successful use +by a non-malicious client with a uid differing from the server's. + +Joe Vennix of Apple Information Security discovered that the +implementation of DBUS_COOKIE_SHA1 was susceptible to a symbolic link +attack: a malicious client with write access to its own home directory +could manipulate a ~/.dbus-keyrings symlink to cause the DBusServer to +read and write in unintended locations. In the worst case this could +result in the DBusServer reusing a cookie that is known to the +malicious client, and treating that cookie as evidence that a subsequent +client connection came from an attacker-chosen uid, allowing +authentication bypass. + +This is mitigated by the fact that by default, the well-known system +dbus-daemon (since 2003) and the well-known session dbus-daemon (in +stable releases since dbus 1.10.0 in 2015) only accept the EXTERNAL +authentication mechanism, and as a result will reject DBUS_COOKIE_SHA1 +at an early stage, before manipulating cookies. As a result, this +vulnerability only applies to: + +* system or session dbus-daemons with non-standard configuration +* third-party dbus-daemon invocations such as at-spi2-core (although + in practice at-spi2-core also only accepts EXTERNAL by default) +* third-party uses of DBusServer such as the one in Upstart + +Avoiding symlink attacks in a portable way is difficult, because APIs +like openat() and Linux /proc/self/fd are not universally available. +However, because DBUS_COOKIE_SHA1 already doesn't work in practice for +a non-matching uid, we can solve this vulnerability in an easier way +without regressions, by rejecting it early (before looking at +~/.dbus-keyrings) whenever the requested identity doesn't match the +identity of the process hosting the DBusServer. + +Signed-off-by: Simon McVittie +Closes: https://gitlab.freedesktop.org/dbus/dbus/issues/269 +Closes: CVE-2019-12749 +--- + dbus/dbus-auth.c | 32 ++++++++++++++++++++++++++++++++ + 1 file changed, 32 insertions(+) + +diff --git a/dbus/dbus-auth.c b/dbus/dbus-auth.c +index 37d8d4c9..7390a9d5 100644 +--- a/dbus/dbus-auth.c ++++ b/dbus/dbus-auth.c +@@ -529,6 +529,7 @@ sha1_handle_first_client_response (DBusAuth *auth, + DBusString tmp2; + dbus_bool_t retval = FALSE; + DBusError error = DBUS_ERROR_INIT; ++ DBusCredentials *myself = NULL; + + _dbus_string_set_length (&auth->challenge, 0); + +@@ -565,6 +566,34 @@ sha1_handle_first_client_response (DBusAuth *auth, + return FALSE; + } + ++ myself = _dbus_credentials_new_from_current_process (); ++ ++ if (myself == NULL) ++ goto out; ++ ++ if (!_dbus_credentials_same_user (myself, auth->desired_identity)) ++ { ++ /* ++ * DBUS_COOKIE_SHA1 is not suitable for authenticating that the ++ * client is anyone other than the user owning the process ++ * containing the DBusServer: we probably aren't allowed to write ++ * to other users' home directories. Even if we can (for example ++ * uid 0 on traditional Unix or CAP_DAC_OVERRIDE on Linux), we ++ * must not, because the other user controls their home directory, ++ * and could carry out symlink attacks to make us read from or ++ * write to unintended locations. It's difficult to avoid symlink ++ * attacks in a portable way, so we just don't try. This isn't a ++ * regression, because DBUS_COOKIE_SHA1 never worked for other ++ * users anyway. ++ */ ++ _dbus_verbose ("%s: client tried to authenticate as \"%s\", " ++ "but that doesn't match this process", ++ DBUS_AUTH_NAME (auth), ++ _dbus_string_get_const_data (data)); ++ retval = send_rejected (auth); ++ goto out; ++ } ++ + /* we cache the keyring for speed, so here we drop it if it's the + * wrong one. FIXME caching the keyring here is useless since we use + * a different DBusAuth for every connection. +@@ -679,6 +708,9 @@ sha1_handle_first_client_response (DBusAuth *auth, + _dbus_string_zero (&tmp2); + _dbus_string_free (&tmp2); + ++ if (myself != NULL) ++ _dbus_credentials_unref (myself); ++ + return retval; + } + +-- +2.21.0 + diff --git a/SOURCES/dbus-1.12.8-fix-CVE-2020-12049.patch b/SOURCES/dbus-1.12.8-fix-CVE-2020-12049.patch new file mode 100644 index 0000000..181751f --- /dev/null +++ b/SOURCES/dbus-1.12.8-fix-CVE-2020-12049.patch @@ -0,0 +1,74 @@ +From 872b085f12f56da25a2dbd9bd0b2dff31d5aea63 Mon Sep 17 00:00:00 2001 +From: Simon McVittie +Date: Thu, 16 Apr 2020 14:45:11 +0100 +Subject: [PATCH] sysdeps-unix: On MSG_CTRUNC, close the fds we did receive + +MSG_CTRUNC indicates that we have received fewer fds that we should +have done because the buffer was too small, but we were treating it +as though it indicated that we received *no* fds. If we received any, +we still have to make sure we close them, otherwise they will be leaked. + +On the system bus, if an attacker can induce us to leak fds in this +way, that's a local denial of service via resource exhaustion. + +Reported-by: Kevin Backhouse, GitHub Security Lab +Fixes: dbus#294 +Fixes: CVE-2020-12049 +Fixes: GHSL-2020-057 +--- + dbus/dbus-sysdeps-unix.c | 32 ++++++++++++++++++++------------ + 1 file changed, 20 insertions(+), 12 deletions(-) + +diff --git a/dbus/dbus-sysdeps-unix.c b/dbus/dbus-sysdeps-unix.c +index b5fc24663..b176dae1a 100644 +--- a/dbus/dbus-sysdeps-unix.c ++++ b/dbus/dbus-sysdeps-unix.c +@@ -435,18 +435,6 @@ _dbus_read_socket_with_unix_fds (DBusSocket fd, + struct cmsghdr *cm; + dbus_bool_t found = FALSE; + +- if (m.msg_flags & MSG_CTRUNC) +- { +- /* Hmm, apparently the control data was truncated. The bad +- thing is that we might have completely lost a couple of fds +- without chance to recover them. Hence let's treat this as a +- serious error. */ +- +- errno = ENOSPC; +- _dbus_string_set_length (buffer, start); +- return -1; +- } +- + for (cm = CMSG_FIRSTHDR(&m); cm; cm = CMSG_NXTHDR(&m, cm)) + if (cm->cmsg_level == SOL_SOCKET && cm->cmsg_type == SCM_RIGHTS) + { +@@ -501,6 +489,26 @@ _dbus_read_socket_with_unix_fds (DBusSocket fd, + if (!found) + *n_fds = 0; + ++ if (m.msg_flags & MSG_CTRUNC) ++ { ++ unsigned int i; ++ ++ /* Hmm, apparently the control data was truncated. The bad ++ thing is that we might have completely lost a couple of fds ++ without chance to recover them. Hence let's treat this as a ++ serious error. */ ++ ++ /* We still need to close whatever fds we *did* receive, ++ * otherwise they'll never get closed. (CVE-2020-12049) */ ++ for (i = 0; i < *n_fds; i++) ++ close (fds[i]); ++ ++ *n_fds = 0; ++ errno = ENOSPC; ++ _dbus_string_set_length (buffer, start); ++ return -1; ++ } ++ + /* put length back (doesn't actually realloc) */ + _dbus_string_set_length (buffer, start + bytes_read); + +-- +GitLab + diff --git a/SPECS/dbus.spec b/SPECS/dbus.spec new file mode 100644 index 0000000..82d82bb --- /dev/null +++ b/SPECS/dbus.spec @@ -0,0 +1,1411 @@ +%global _hardened_build 1 +%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}} + +%global gettext_package dbus-1 + +%global libselinux_version 2.0.86 + +%global dbus_user_uid 81 + +%global dbus_common_config_opts --enable-libaudit --enable-selinux=yes --with-system-socket=/run/dbus/system_bus_socket --with-dbus-user=dbus --libexecdir=/%{_libexecdir}/dbus-1 --enable-user-session --docdir=%{_pkgdocdir} --enable-installed-tests + +# Allow extra dependencies required for some tests to be disabled. +%bcond_without tests +# Disabled in June 2014: http://lists.freedesktop.org/archives/dbus/2014-June/016223.html +%bcond_with check +# Allow cmake support to be disabled. #1497257 +%bcond_without cmake + +Name: dbus +Epoch: 1 +Version: 1.12.8 +Release: 10%{?dist} +Summary: D-BUS message bus + +Group: System Environment/Libraries +# The effective license of the majority of the package, including the shared +# library, is "GPL-2+ or AFL-2.1". Certain utilities are "GPL-2+" only. +License: (GPLv2+ or AFL) and GPLv2+ +URL: http://www.freedesktop.org/Software/dbus/ +#VCS: git:git://git.freedesktop.org/git/dbus/dbus +Source0: https://dbus.freedesktop.org/releases/%{name}/%{name}-%{version}.tar.gz +Source1: 00-start-message-bus.sh +Patch0: 0001-tools-Use-Python3-for-GetAllMatchRules.patch +# https://bugzilla.redhat.com/show_bug.cgi?id=1725570 +Patch1: dbus-1.12.8-fix-CVE-2019-12749.patch +# https://bugzilla.redhat.com/show_bug.cgi?id=1851996 +Patch2: dbus-1.12.8-fix-CVE-2020-12049.patch + +BuildRequires: autoconf-archive +BuildRequires: libtool +BuildRequires: audit-libs-devel >= 0.9 +BuildRequires: libX11-devel +BuildRequires: libcap-ng-devel +BuildRequires: pkgconfig(expat) +BuildRequires: pkgconfig(libselinux) >= %{libselinux_version} +BuildRequires: pkgconfig(libsystemd) +BuildRequires: pkgconfig(systemd) +BuildRequires: doxygen +# For Ducktype documentation. +BuildRequires: /usr/bin/ducktype +BuildRequires: /usr/bin/yelp-build +# For building XML documentation. +BuildRequires: /usr/bin/xsltproc +BuildRequires: xmlto +%if %{with cmake} +# For AutoReq cmake-filesystem. +BuildRequires: cmake +%endif + +#For macroized scriptlets. +%{?systemd_requires} +BuildRequires: systemd + +# Note: These is only required for --with-tests; when bootstrapping, you can +# pass --without-tests. +%if %{with tests} +BuildRequires: pkgconfig(gio-2.0) >= 2.40.0 +BuildRequires: python3-dbus +BuildRequires: python3-gobject +%endif +%if %{with check} +BuildRequires: /usr/bin/Xvfb +%endif + +Requires: %{name}-daemon = %{epoch}:%{version}-%{release} + +%description +D-BUS is a system for sending messages between applications. It is +used both for the system-wide message bus service, and as a +per-user-login-session messaging facility. + +%package common +Summary: D-BUS message bus configuration +Group: System Environment/Libraries +BuildArch: noarch + +%description common +The %{name}-common package provides the configuration and setup files for D-Bus +implementations to provide a System and User Message Bus. + +%package daemon +Summary: D-BUS message bus +Group: System Environment/Libraries +Requires(pre): /usr/sbin/useradd +Requires: libselinux%{?_isa} >= %{libselinux_version} +Requires: dbus-common = %{epoch}:%{version}-%{release} +Requires: dbus-libs%{?_isa} = %{epoch}:%{version}-%{release} +Requires: dbus-tools = %{epoch}:%{version}-%{release} + +%description daemon +D-BUS is a system for sending messages between applications. It is +used both for the system-wide message bus service, and as a +per-user-login-session messaging facility. + +%package tools +Summary: D-BUS Tools and Utilities +Group: Development/Libraries +Requires: dbus-libs%{?_isa} = %{epoch}:%{version}-%{release} + +%description tools +Tools and utilities to interact with a running D-Bus Message Bus, provided by +the reference implementation. + +%package libs +Summary: Libraries for accessing D-BUS +Group: Development/Libraries + +%description libs +This package contains lowlevel libraries for accessing D-BUS. + +%package devel +Summary: Development files for D-BUS +Group: Development/Libraries +# The server package can be a different architecture. +Requires: %{name}-daemon = %{epoch}:%{version}-%{release} +# For xml directory ownership. +Requires: xml-common + +%description devel +This package contains libraries and header files needed for +developing software that uses D-BUS. + +%package tests +Summary: Tests for the %{name}-daemon package +Group: Development/Libraries +Requires: %{name}-daemon%{?_isa} = %{epoch}:%{version}-%{release} + +%description tests +The %{name}-tests package contains tests that can be used to verify +the functionality of the installed %{name}-daemon package. + +%package x11 +Summary: X11-requiring add-ons for D-BUS +Group: Development/Libraries +# The server package can be a different architecture. +Requires: %{name}-daemon = %{epoch}:%{version}-%{release} + +%description x11 +D-BUS contains some tools that require Xlib to be installed, those are +in this separate package so server systems need not install X. + + +%prep +%autosetup -p1 + + +%build +# Avoid rpath. +if test -f autogen.sh; then env NOCONFIGURE=1 ./autogen.sh; else autoreconf --verbose --force --install; fi + +# Call configure here (before the extra directories for the multiple builds +# have been created) to ensure that the hardening flag hack is applied to +# ltmain.sh +%configure %{dbus_common_config_opts} --disable-doxygen-docs %--enable-ducktype-docs --enable-xml-docs --disable-asserts +make distclean + +mkdir build +pushd build +# See /usr/lib/rpm/macros +%global _configure ../configure +%configure %{dbus_common_config_opts} --disable-doxygen-docs --enable-ducktype-docs --enable-xml-docs --disable-asserts +make V=1 %{?_smp_mflags} +popd + +%if %{with check} +mkdir build-check +pushd build-check +%configure %{dbus_common_config_opts} --enable-asserts --enable-verbose-mode --enable-tests +make V=1 %{?_smp_mflags} +popd +%endif + + +%install +pushd build +make install DESTDIR=%{buildroot} INSTALL="install -p" +popd + +# Delete python2 code +rm -f %{buildroot}/%{_pkgdocdir}/examples/GetAllMatchRules.py + +# Delete docs +rm -f %{buildroot}/%{_pkgdocdir}/examples/*.conf +rm -f %{buildroot}/%{_datadir}/gtk-doc + +find %{buildroot} -name '*.a' -type f -delete +find %{buildroot} -name '*.la' -type f -delete + +%if ! %{with cmake} +rm -rf %{buildroot}%{_libdir}/cmake +%endif + +install -Dp -m755 %{SOURCE1} %{buildroot}%{_sysconfdir}/X11/xinit/xinitrc.d/00-start-message-bus.sh + +# Obsolete, but still widely used, for drop-in configuration snippets. +install --directory %{buildroot}%{_sysconfdir}/dbus-1/session.d +install --directory %{buildroot}%{_sysconfdir}/dbus-1/system.d + +install --directory %{buildroot}%{_datadir}/dbus-1/interfaces + +# Make sure that when somebody asks for D-Bus under the name of the +# old SysV script, that he ends up with the standard dbus.service name +# now. +ln -s dbus.service %{buildroot}%{_unitdir}/messagebus.service + +## %find_lang %{gettext_package} + +install --directory %{buildroot}/var/lib/dbus + +install -pm 644 -t %{buildroot}%{_pkgdocdir} \ + doc/introspect.dtd doc/introspect.xsl doc/system-activation.txt + +# Shell wrapper for installed tests, modified from Debian package. +cat > dbus-run-installed-tests < "\$tmpdir/result" + ( set +e; \$timeout \$t; echo "\$?" > "\$tmpdir/result" ) 2>&1 | sed 's/^/# /' + e="\$(cat "\$tmpdir/result")" + case "\$e" in + (0) + echo "ok \$i - \$t" + ;; + (77) + echo "ok \$i # SKIP \$t" + ;; + (*) + echo "not ok \$i - \$t (\$e)" + ret=1 + ;; + esac +done + +rm -rf tmpdir +echo "1..\$i" +exit \$ret +EOF + +install -pm 755 -t %{buildroot}%{_libexecdir}/dbus-1 dbus-run-installed-tests + + +%if %{with check} +%check +pushd build-check + +# TODO: better script for this... +export DISPLAY=42 +{ Xvfb :${DISPLAY} -nolisten tcp -auth /dev/null >/dev/null 2>&1 & + trap "kill -15 $! || true" 0 HUP INT QUIT TRAP TERM; }; +if ! env DBUS_TEST_SLOW=1 make check; then + echo "Tests failed, finding all Automake logs..." 1>&2; + find . -type f -name '*.trs' | while read trs; do cat ${trs}; cat ${trs%%.trs}.log; done + echo "Exiting abnormally due to make check failure above" 1>&2; + exit 1; +fi +popd +%endif + + +%pre daemon +# Add the "dbus" user and group +/usr/sbin/groupadd -r -g %{dbus_user_uid} dbus 2>/dev/null || : +/usr/sbin/useradd -c 'System message bus' -u %{dbus_user_uid} -g %{dbus_user_uid} \ + -s /sbin/nologin -r -d '/' dbus 2> /dev/null || : + +%post daemon +%systemd_post dbus.service dbus.socket +%systemd_user_post dbus.service dbus.socket + +%post libs -p /sbin/ldconfig + +%preun daemon +%systemd_preun dbus.service dbus.socket +%systemd_user_preun dbus.service dbus.socket + +%postun daemon +%systemd_postun dbus.service dbus.socket +%systemd_user_postun dbus.service dbus.socket + +%postun libs -p /sbin/ldconfig + + +%files +# The 'dbus' package is only retained for compatibility purposes. It will +# eventually be removed and then replaced by 'Provides: dbus' in the +# dbus-daemon package. It will then exclusively be used for other packages to +# describe their dependency on a system and user bus. It does not pull in any +# particular dbus *implementation*, nor any libraries. These should be pulled +# in, if required, via explicit dependencies. + +%files common +%dir %{_sysconfdir}/dbus-1 +%dir %{_sysconfdir}/dbus-1/session.d +%dir %{_sysconfdir}/dbus-1/system.d +%config %{_sysconfdir}/dbus-1/session.conf +%config %{_sysconfdir}/dbus-1/system.conf +%dir %{_datadir}/dbus-1 +%{_datadir}/dbus-1/session.conf +%{_datadir}/dbus-1/system.conf +%{_datadir}/dbus-1/services +%{_datadir}/dbus-1/system-services +%{_datadir}/dbus-1/interfaces +%{_sysusersdir}/dbus.conf + +%files daemon +# Strictly speaking, we could remove the COPYING from this subpackage and +# just have it be in libs, because dbus Requires dbus-libs. +%{!?_licensedir:%global license %%doc} +%license COPYING +%doc AUTHORS ChangeLog HACKING NEWS README +%exclude %{_pkgdocdir}/diagram.* +%exclude %{_pkgdocdir}/introspect.* +%exclude %{_pkgdocdir}/system-activation.txt +%exclude %{_pkgdocdir}/*.html +%ghost %dir /run/%{name} +%dir %{_localstatedir}/lib/dbus/ +%{_bindir}/dbus-daemon +%{_bindir}/dbus-cleanup-sockets +%{_bindir}/dbus-run-session +%{_bindir}/dbus-test-tool +%{_mandir}/man1/dbus-cleanup-sockets.1* +%{_mandir}/man1/dbus-daemon.1* +%{_mandir}/man1/dbus-run-session.1* +%{_mandir}/man1/dbus-test-tool.1* +%dir %{_libexecdir}/dbus-1 +# See doc/system-activation.txt in source tarball for the rationale +# behind these permissions +%attr(4750,root,dbus) %{_libexecdir}/dbus-1/dbus-daemon-launch-helper +%exclude %{_libexecdir}/dbus-1/dbus-run-installed-tests +%{_tmpfilesdir}/dbus.conf +%{_unitdir}/dbus.service +%{_unitdir}/dbus.socket +%{_unitdir}/messagebus.service +%{_unitdir}/multi-user.target.wants/dbus.service +%{_unitdir}/sockets.target.wants/dbus.socket +%{_userunitdir}/dbus.service +%{_userunitdir}/dbus.socket +%{_userunitdir}/sockets.target.wants/dbus.socket + +%files tools +%{!?_licensedir:%global license %%doc} +%license COPYING +%{_bindir}/dbus-send +%{_bindir}/dbus-monitor +%{_bindir}/dbus-update-activation-environment +%{_bindir}/dbus-uuidgen +%{_mandir}/man1/dbus-monitor.1* +%{_mandir}/man1/dbus-send.1* +%{_mandir}/man1/dbus-update-activation-environment.1* +%{_mandir}/man1/dbus-uuidgen.1* + +%files libs +%{!?_licensedir:%global license %%doc} +%license COPYING +%{_libdir}/*dbus-1*.so.* + +%files tests +%{_libexecdir}/dbus-1/installed-tests +%{_libexecdir}/dbus-1/dbus-run-installed-tests +%{_datadir}/installed-tests + +%files x11 +%{_bindir}/dbus-launch +%{_mandir}/man1/dbus-launch.1* +%{_sysconfdir}/X11/xinit/xinitrc.d/00-start-message-bus.sh + +%files devel +%{_datadir}/xml/dbus-1 +%{_libdir}/lib*.so +%dir %{_libdir}/dbus-1.0 +%if %{with cmake} +%{_libdir}/cmake/DBus1 +%endif +%{_libdir}/dbus-1.0/include/ +%{_libdir}/pkgconfig/dbus-1.pc +%{_includedir}/* + + +%changelog +* Tue Jun 30 2020 David King - 1:1.12.8-10 +- Fix CVE-2020-12049 (#1851996) + +* Thu Aug 01 2019 David King - 1:1.12.8-9 +- Ensure that patches are applied (#1725570) + +* Tue Jul 09 2019 David King - 1:1.12.8-8 +- Fix CVE-2019-12749 (#1725570) + +* Wed Oct 24 2018 Martin Pitt - 1:1.12.8-7 +- Fix useradd dependency of dbus-daemon rhbz#1634496 + +* Thu Oct 18 2018 Martin Pitt +- Drop unpublished -doc package to fix FTBFS rhbz#1640736 +- Add dist-git smoketest rhbz#1625683 +- Move dbus system user creation to correct package rhbz#1634496 + +* Sat Aug 11 2018 Troy Dawson +- BuildRequire python3-gobject instead of pygobject3 +- Related: bug#1614611 + +* Tue Jul 31 2018 Colin Walters - 1:1.12.8-5 +- More python3 + +* Tue Jul 31 2018 Colin Walters - 1:1.12.8-4 +- Use python3-dbus to drop python2 deps + +* Thu Jul 12 2018 Fedora Release Engineering - 1:1.12.8-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed May 16 2018 David Herrmann - 1:1.12.8-2 +- Extract 'dbus-tools' package from 'dbus-daemon' to provide all command-line + utilities independent of the actual message bus. They are valid to be used + with independent message-bus implementations, so they should not needlessly + pull in dbus-daemon. + +* Wed May 16 2018 David Herrmann - 1:1.12.8-1 +- Extract 'dbus-common' package from 'dbus-daemon' to provide XML configuration + and setup files as independent package ready for alternative Message Bus + implementations to be used. + +* Wed May 16 2018 David Herrmann - 1:1.12.8-1 +- Turn 'dbus' package into 'dbus-daemon' package, but keep 'dbus' for + compatibility around and make it pull in the new 'dbus-daemon' package. + +* Mon Apr 30 2018 David King - 1:1.12.8-1 +- Update to 1.12.8 (#1556590) + +* Tue Feb 20 2018 Adam Jackson - 1:1.12.0-3 +- Don't Require: xorg-x11-xinit. We don't actually need it, and newer + filesystem packages own the directory for us. + +* Wed Feb 07 2018 Fedora Release Engineering - 1:1.12.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Mon Oct 30 2017 David King - 1:1.12.0-1 +- Update to 1.12.0 + +* Mon Oct 23 2017 David King - 1:1.11.22-1 +- Update to 1.11.22 + +* Tue Oct 03 2017 David King - 1:1.11.20-1 +- Update to 1.11.20 +- Allow cmake support to be disabled (#1497257) + +* Wed Sep 27 2017 David King - 1:1.11.18-1 +- Update to 1.11.18 + +* Sun Aug 06 2017 Björn Esser - 1:1.11.16-4 +- Rebuilt for AutoReq cmake-filesystem + +* Wed Aug 02 2017 Fedora Release Engineering - 1:1.11.16-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Sat Jul 29 2017 Florian Weimer - 1:1.11.16-2 +- Rebuild with binutils fix for ppc64le (#1475636) + +* Fri Jul 28 2017 David King - 1:1.11.16-1 +- Update to 1.11.16 + +* Wed Jul 26 2017 Fedora Release Engineering - 1:1.11.14-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Thu Jun 29 2017 David King - 1:1.11.14-1 +- Update to 1.11.14 + +* Fri Apr 07 2017 David King - 1:1.11.12-1 +- Update to 1.11.12 + +* Thu Mar 02 2017 David King - 1:1.11.10-2 +- Own session.d and system.d directories (#1285033) + +* Fri Feb 17 2017 David King - 1:1.11.10-1 +- Update to 1.11.10 + +* Fri Feb 10 2017 Fedora Release Engineering - 1:1.11.8-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Tue Nov 29 2016 David King - 1:1.11.8-1 +- Update to 1.11.8 + +* Tue Oct 11 2016 David King - 1:1.11.6-1 +- Update to 1.11.6 +- Use systemd user unit macros + +* Tue Aug 16 2016 David King - 1:1.11.4-1 +- Update to 1.11.4 + +* Wed Mar 16 2016 David King - 1:1.11.2-1 +- Update to 1.11.2 + +* Wed Feb 03 2016 Fedora Release Engineering - 1:1.11.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Thu Dec 03 2015 David King - 1:1.11.0-1 +- Update to 1.11.0 +- Fix sending of audit events (#1278602) + +* Wed Dec 02 2015 David King - 1:1.10.6-1 +- Update to 1.10.6 + +* Sat Nov 21 2015 David King - 1:1.10.4-1 +- Update to 1.10.4 + +* Mon Nov 02 2015 David King - 1:1.10.2-1 +- Update to 1.10.2 + +* Sun Oct 25 2015 David King - 1:1.10.0-4 +- Inject session bus address into user bus environment (#1274700) + +* Fri Sep 04 2015 David King - 1:1.10.0-3 +- Enable Ducktype documentation + +* Mon Aug 31 2015 Kay Sievers - 1:1.10.0-2 +- add --enable-user-session to ship systemd user bus units + +* Wed Aug 26 2015 David King - 1:1.10.0-1 +- Update to 1.10.0 + +* Thu Aug 20 2015 David King - 1:1.9.20-3 +- Adjust configure calls to make LDFLAGS patch unneccesary + +* Fri Aug 14 2015 Adam Jackson 1:1.9.20-2 +- Link libdbus with -z now + +* Tue Aug 11 2015 David King - 1:1.9.20-1 +- Update to 1.9.20 + +* Mon Jul 27 2015 David King - 1:1.9.18-1 +- Update to 1.9.18 + +* Wed Jun 17 2015 Fedora Release Engineering - 1:1.9.16-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Thu May 14 2015 David King - 1:1.9.16-1 +- Update to 1.9.16 + +* Thu Apr 23 2015 David King - 1:1.9.14-1 +- Update to 1.9.14 +- Update man page globs in files section +- Build tests in a separate build directory +- Enable installed tests, with new -tests subpackage +- Allow extra dependencies for tests to be disabled independently of check + +* Mon Mar 16 2015 Than Ngo - 1:1.8.16-2 +- bump release and rebuild so that koji-shadow can rebuild it + against new gcc on secondary arch + +* Mon Feb 09 2015 David King - 1:1.8.16-1 +- Update to 1.8.16 +- Fixes CVE-2015-0245 (fd.o#88811) + +* Mon Jan 05 2015 David King - 1:1.8.14-1 +- Update to 1.8.14 + +* Thu Dec 18 2014 David King - 1:1.8.12-3 +- Relax subpackage dependencies (#1175837) + +* Wed Dec 03 2014 David King - 1:1.8.12-2 +- Drop bindir patch, and update to comply with UsrMove +- Correct license description for multiple licenses +- Use macroized systemd scriptlets (#850083) +- Add some more documentation from the upstream tarball +- Tighten subpackage dependencies by using %%{?_isa} +- Use --with-tests to conditionalize test dependencies +- Use /run instead of /var/run +- Remove obsolete dbus.target.wants (#1084087) + +* Wed Nov 26 2014 David King - 1:1.8.12-1 +- Update to 1.8.12 (#1168438) +- Fixes CVE-2014-3635 (fd.o#83622) +- Fixes CVE-2014-3636 (fd.o#82820) +- Fixes CVE-2014-3637 (fd.o#80559) +- Fixes CVE-2014-3638 (fd.o#81053) +- Fixes CVE-2014-3639 (fd.o#80919) +- Fixes CVE-2014-7824 (fd.o#85105) + +* Sat Aug 16 2014 Fedora Release Engineering - 1:1.8.6-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Fri Jul 11 2014 Tom Callaway - 1:1.8.6-2 +- fix license handling + +* Thu Jul 10 2014 Colin Walters - 1:1.8.6-1 +- New upstream version +- Fixes CVE-2014-3477 (fd.o#80163) +- Fixes CVE-2014-3533 (fd.o#79694) + +* Tue Jun 10 2014 Colin Walters - 1:1.8.4-2 +- New upstream version: +- Fixes CVE-2014-3477 (fd.o#78979): "local DoS in dbus-daemon" +- Drop "make check" for now, per http://lists.freedesktop.org/archives/dbus/2014-June/016223.html +- BR systemd-devel + +* Sat Jun 07 2014 Fedora Release Engineering - 1:1.6.18-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Tue Jan 21 2014 Ville Skyttä - 1:1.6.18-3 +- Adapt to unversioned docdirs; don't ship all docs in main package. +- Fix bogus dates in %%changelog and tabs vs spaces warning. + +* Fri Dec 20 2013 Colin Walters - 1:1.6.18-2 +- Test rebuild to see if we are affected by cast-align warnings now. + +* Mon Nov 11 2013 Colin Walters - 1:1.6.18-1 +- New upstream version +- Added backported patch which should fix the test suite; thanks to + Yanko Kaneti for the suggestion. + +* Wed Jul 24 2013 Colin Walters - 1:1.6.12-4 +- Add patch to fix test-marshal on s390. + +* Thu Jul 18 2013 Colin Walters - 1:1.6.12-3 +- Find all logs automake has hidden and cat them for visibility + into the mock logs. + +* Thu Jul 18 2013 Colin Walters - 1:1.6.12-2 +- Enable all upstream tests + Resolves: #955532 + This is fairly hacky; a much better replacement would be + something like the InstalledTests system. But we have to live + with rpm and stuff for now... + +* Mon Jun 17 2013 Colin Walters - 1:1.6.12-1 +- New upstream release +- CVE-2013-2168 + +* Thu Apr 18 2013 Matthias Clasen - 1:1.6.8-5 +- Hardened build + +* Tue Feb 05 2013 Colin Walters - 1:1.6.8-4 +- Add patch from Matej Cepl to enable check section, modified by me + to use common configure opts. + +* Sun Oct 14 2012 Rex Dieter - 1:1.6.8-3 +- minor .spec cleanups +- tighten lib deps via %%{?_isa} +- drop old Conflicts/Obsoletes/patches + +* Wed Oct 3 2012 Bill Nottingham - 1:1.6.8-2 +- Drop systemd-sysv-convert in trigger, and resulting dependency (#852822) + +* Fri Sep 28 2012 Colin Walters - 1:1.6.8-1 +- 1.6.8 + +* Fri Sep 28 2012 Colin Walters - 1:1.6.6-1 +- 1.6.6 + +* Thu Sep 13 2012 Colin Walters - 1:1.6.0-3 +- CVE-2012-3524 + +* Wed Jul 18 2012 Fedora Release Engineering - 1:1.6.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Tue Jun 5 2012 Colin Walters - 1:1.6.0-1 +- Update to 1.6.0 + +* Sun Apr 22 2012 Lennart Poettering - 1:1.4.20-2 +- Make D-Bus work in containers + +* Fri Apr 13 2012 Colin Walters +- Update to 1.4.20; closes #806082 +- Ensure /var/lib/dbus exists; this seems to have been + dropped from upstream build rules. +- Adapt to documentation actually being installed + +* Fri Jan 13 2012 Fedora Release Engineering - 1:1.4.10-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Mon Aug 22 2011 Lennart Poettering - 1:1.4.10-3 +- Don't restart D-Bus on upgrades, dont' enable D-Bus, since it is statically enabled. +- https://bugzilla.redhat.com/show_bug.cgi?id=732426 + +* Wed Aug 03 2011 David Zeuthen - 1:1.4.10-2 +- Drop SysV support, #697523 (from Jóhann B. Guðmundsson ) + +* Thu Jun 2 2011 Colin Walters - 1:1.4.10-1 +- New upstream version +- Drop XML docs patch which is now upstream +- Drop devhelp stuff; people should be using GDBus now. If you + don't, the raw doxygen is fine. + +* Tue Feb 08 2011 Fedora Release Engineering - 1:1.4.0-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Fri Jan 28 2011 Matthias Clasen - 1:1.4.0-2 +- %%ghost /var/run content (#656571) + +* Mon Sep 6 2010 Lennart Poettering - 1:1.4.0-1 +- New upstream release + +* Thu Jul 29 2010 Lennart Poettering - 1:1.3.2-0.1.885483%{?dist} +- Conversion from systemd-install to systemctl + +* Fri Jul 9 2010 Lennart Poettering - 1:1.3.2-0.0.885483 +- git Snapshot with systemd activation + +* Wed Jun 23 2010 Lennart Poettering - 1:1.3.1-1 +- New upstream release + +* Wed Mar 24 2010 Colin Walters - 1:1.2.24-1 +- New upstream release +- Drop upstreamed patch + +* Mon Mar 22 2010 Colin Walters - 1:1.2.22-2 +- Add patch to fix syslog crasher + +* Wed Mar 17 2010 Colin Walters - 1:1.2.22-1 +- New upstream release + +* Wed Feb 03 2010 Colin Walters - 1:1.2.20-1 +- New upstream release +- Actually add start-early.patch + +* Tue Feb 02 2010 Colin Walters - 1:1.2.18-1 +- New upstream release + Drop all upstreamed patches. +- start-early.patch had both bindir changes and start-early; the + latter was upstreamed, so start-early is now bindir.patch. + Ideally later get this partial-bindir stuff upstream. + +* Thu Jan 21 2010 Colin Walters - 1:1.2.16-11 +- Drop dbus-libs requiring dbus; this was unnecessary for programs + which happened to speak the dbus protocol but don't require + the daemon. + Note that libdbus does support autolaunching dbus-daemon in + the session as an emergency fallback for legacy situations; however, + these cases were likely to have dbus installed already (via comps). + If they don't, well one turned to the wrong page in the choose your + own adventure book. + +* Tue Jan 12 2010 Matthias Clasen - 1:1.2.16-10 +- Don't link libdub against libcap-ng + +* Fri Dec 18 2009 Ray Strode - 1:1.2.16-9 +- Fix activation of daemons (#545267) +- Fix reload memleak (fdo #24697) +- Don't forget about pending activations on reload (fdo #24350) +- Fix reload race (fdo #21597) + +* Wed Oct 7 2009 Matthias Clasen - 1:1.2.16-8 +- Drop capabilities (#518541) + +* Wed Oct 7 2009 Matthias Clasen - 1:1.2.16-7 +- Add missing diagrams to the docs (#527650) + +* Thu Oct 1 2009 Matthias Clasen - 1:1.2.16-6 +- Fix timeout accounting + +* Fri Aug 21 2009 Tomas Mraz - 1:1.2.16-5 +- rebuilt with new audit + +* Fri Jul 24 2009 Fedora Release Engineering - 1:1.2.16-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Thu Jul 23 2009 Colin Walters - 1:1.2.16-3 +- Remove conflicting -U option to useradd + +* Wed Jul 22 2009 Colin Walters - 1:1.2.16-2 +- Explicitly add a dbus group id, fixes dbus files getting a + random group id in cases where the RPM install order varies. + Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183 + +* Tue Jul 14 2009 Colin Walters - 1:1.2.16-1 +- Upstream 1.2.16 +- Remove inotify patch, now upstreamed +- Remove timeout patch, obsolete with upstream change to infinite + timeout maximum by default + +* Sat Jun 27 2009 Matthias Clasen - 1:1.2.14-2 +- Don't leak inotify fd (#505338) + +* Wed Apr 22 2009 Colin Walters - 1:1.2.14-1 +- CVE-2009-1189 + * Update to 1.2.14 + +* Thu Mar 12 2009 Colin Walters - 1:1.2.12-1 +- Switch to non-permissive branch: + http://fedoraproject.org/wiki/Features/DBusPolicy + +* Fri Feb 27 2009 Matthias Clasen - 1:1.2.4.4permissive-4 +- Mark -doc content as %%doc + +* Tue Feb 24 2009 Matthias Clasen - 1:1.2.4.4permissive-2 +- Make -doc noarch + +* Tue Feb 24 2009 Fedora Release Engineering - 1:1.2.4.4permissive-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Tue Jan 06 2009 Colin Walters - 1:1.2.4.4.permissive-1 +- New upstream + +* Thu Dec 18 2008 Colin Walters - 1:1.2.4.2.permissive-1 +- New upstream + +* Fri Dec 12 2008 Colin Walters - 1:1.2.4-2 +- Revert to upstream 1.2.4, add epoch + +* Thu Dec 11 2008 Colin Walters - 1.2.8-4 +- And drop it again, needs more work + +* Wed Dec 10 2008 Colin Walters - 1.2.8-3 +- Add back working syslog patch + +* Tue Dec 09 2008 Colin Walters - 1.2.8-2 +- Remove accidentally added syslog patch + +* Tue Dec 09 2008 Colin Walters - 1.2.8-1 +- New upstream 1.2.8 + Allows signals by default. + +* Fri Dec 05 2008 Colin Walters - 1.2.6-1 +- New upstream 1.2.6 + +* Fri Nov 21 2008 Matthias Clasen - 1.2.4-2 +- Tweak descriptions + +* Mon Oct 06 2008 Colin Walters - 1.2.4-1 +- New upstream 1.2.4 + +* Thu Sep 25 2008 David Zeuthen - 1.2.3-2%{?dist} +- Avoid using noreplace for files that aren't really config files + +* Wed Aug 06 2008 Colin Walters - 1.2.3-1 +- New upstream 1.2.2 +- Drop patches that were upstreamed + +* Wed Jul 23 2008 Matthias Clasen - 1.2.1-7 +- Own /usr/share/dbus-1/interfaces + +* Fri Jul 18 2008 Matthias Clasen - 1.2.1-6 +- Add a patch from upstream git that adds a method + for changing the activation environment on the session bus + +* Thu Jul 17 2008 Casey Dahlin - 1.2.1-5 +- Patch to increase max method timeout + +* Thu May 29 2008 Casey Dahlin - 1.2.1-4 +- Patches for fd.o bugs 15635, 15571, 15588, 15570 + +* Mon May 12 2008 Ray Strode - 1.2.1-3 +- drop last patch after discussion on dbus list + +* Mon May 12 2008 Ray Strode - 1.2.1-2 +- ensure uuid is created at post time + +* Fri Apr 04 2008 John (J5) Palmieri - 1.2.1-1 +- update to latest upstream +- major version change is really a maint release for 1.1.20 + please read the NEWS file in the source for more information + +* Wed Feb 27 2008 David Zeuthen - 1.1.20-1%{?dist} +- Update to latest upstream release. Includes fix for CVE-2008-0595. +- Drop some patches that went upstream already + +* Wed Feb 20 2008 Mamoru Tasaka - 1.1.4-6 +- Really rebuild against new libcap + +* Sun Feb 17 2008 Adam Tkac - 1.1.4-5 +- rebuild against new libcap + +* Tue Feb 5 2008 Matthias Clasen - 1.1.4-4 +- Fix a dbus-launch problem (#430412) + +* Mon Feb 4 2008 Ray Strode - 1.1.4-3 +- Start message bus from xinitrc.d instead of hard coding it +at the end of Xsession + +* Mon Feb 4 2008 Matthias Clasen - 1.1.4-2 +- Make it build against the latest gcc/glibc + +* Thu Jan 17 2008 John (J5) Palmieri - 1.1.4-1 +- new upstream version +- fixes inotify patch which was consuming 100% cpu and memory + +* Wed Jan 16 2008 John (J5) Palmieri - 1.1.3-1 +- new upstream version which obsoletes a number of our patches +- doc section added for the devhelp docs + +* Thu Nov 15 2007 John (J5) Palmieri - 1.1.2-9 +- clean up spec file as per the merge review (#225676) + +* Thu Oct 25 2007 Bill Nottingham - 1.1.2-8 +- have -libs obsolete older versions of the main package so that yum upgrades work + +* Thu Oct 4 2007 Matthias Clasen - 1.1.2-7 +- Make the daemon a PIE executable (#210039) + +* Fri Sep 14 2007 Bill Nottingham - 1.1.2-6%{?dist} +- fix daemon abort when SELinux denies passing on a message (#283231) + +* Fri Sep 14 2007 Dan Walsh - 1.1.2-5%{?dist} +- Reverse we_were_root check to setpcap if we were root. Also only init +audit if we were root. So error dbus message will not show up when policy +reload happens. dbus -session will no longer try to send audit message, +only system will. + +* Tue Aug 28 2007 David Zeuthen - 1.1.2-4%{?dist} +- Make dbus require dbus-libs (#261721) + +* Mon Aug 27 2007 Adel Gadllah - 1.1.2-3 +- Add libs to a libs subpackage +- Update license tag + +* Wed Aug 01 2007 David Zeuthen - 1.1.2-2%{?dist} +- Move system bus activation helper to /{lib,lib64}/dbus-1. Also set + the correct mode and permissions. +- Own the directory /usr/share/dbus-1/system-services +- Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used +- Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid + system bus activation helper fails + +* Sat Jul 28 2007 Matthias Clasen - 1.1.2-1 +- Update to 1.1.2 + +* Fri Jul 6 2007 Matthias Clasen - 1.1.1-3 +- Add LSB header to init script (#246902) + +* Thu Jun 28 2007 Ray Strode - 1.1.1-2 +- include session.d directory in package manifest + +* Thu Jun 28 2007 Ray Strode - 1.1.1-1 +- Update to 1.1.1 + +* Fri Jun 22 2007 Matthias Clasen - 1.0.2-6 +- Don't require libxml-python needlessly (#245300) + +* Sun Jun 17 2007 Matthias Clasen - 1.0.2-5 +- Require pkgconfig in -devel, not in -x11 (#244385) + +* Sat Apr 14 2007 Matthias Clasen - 1.0.2-4 +- Move the dbus-launch man page to the x11 subpackage + +* Thu Apr 12 2007 David Zeuthen - 1.0.2-3 +- Start SELinux thread after setuid call (#221168) + +* Wed Mar 28 2007 Matthias Clasen - 1.0.2-2 +- Require pkgconfig in the -devel package + +* Sun Mar 25 2007 Matthias Clasen - 1.0.2-1 +- Update to 1.0.2 +- Drop obsolete patches +- Fix directory ownership issues (#233753) + +* Fri Dec 15 2006 David Zeuthen - 1.0.1-3%{?dist} +- CVE-2006-6107: D-Bus denial of service + +* Sun Nov 26 2006 Matthias Clasen - 1.0.1-2 +- Include docs, and make them show up in devhelp + +* Mon Nov 20 2006 Ray Strode - 1.0.1-1 +- Update to 1.0.1 +- Apply patch from Thiago Macieira to + fix failed assertion in threading implementation +- Drop some crazy looking build time speed optimization + +* Tue Nov 14 2006 John (J5) Palmieri - 1.0.0-2 +- add patch to fix dbus_threads_init_default + +* Mon Nov 13 2006 John (J5) Palmieri - 1.0.0-1 +- update to D-Bus 1.0.0 "Blue Bird" +- build with verbose mode on but tests and asserts off + +* Sun Nov 12 2006 Ray Strode - 0.95-3 +- dont let dbus-launch session sitter crash in the + non-autolaunch code path (bug 214649) + +* Mon Nov 06 2006 John (J5) Palmieri - 0.95-2 +- Add /var/lib/dbus directory to %%files + +* Fri Nov 03 2006 John (J5) Palmieri - 0.95-1 +- Update to D-Bus 1.0 RC 3 (0.95) +- don't build with tests on + +* Sat Oct 14 2006 John (J5) Palmieri - 0.94-1 +- Update to D-Bus 1.0 RC 2 (0.94) + +* Sun Oct 01 2006 Jesse Keating - 0.93-3 +- rebuilt for unwind info generation, broken in gcc-4.1.1-21 + +* Tue Sep 19 2006 Matthias Clasen - 0.93-2 +- Add a Requires for libxml2-python (#201877) + +* Thu Sep 14 2006 John (J5) Palmieri - 0.93-1 +- Updated from upstream D-Bus 1.0 RC 1 (0.93) + +* Wed Sep 6 2006 Dan Walsh - 0.92-2 +- Only audit on the system bus + +* Fri Aug 18 2006 John (J5) Palmieri - 0.92-1 +- Update to 0.92 +- remove old patches + +* Sat Jul 22 2006 John (J5) Palmieri - 0.90-8 +- add patch to fix timeout removal assertion + +* Thu Jul 20 2006 John (J5) Palmieri - 0.90-7 +- add patch to fix taking a connection ref when it is locked + +* Wed Jul 19 2006 John (J5) Palmieri - 0.90-6 +- change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64] + in the dbus-1.pc file after compile + +* Wed Jul 19 2006 John (J5) Palmieri - 0.90-5 +- Move arch include file from lib to libdir + +* Tue Jul 18 2006 John (J5) Palmieri - 0.90-4 +- add patch that pregenerates the xml introspect file so d-bus doesn't + have to be running suring the build. + +* Tue Jul 18 2006 John (J5) Palmieri - 0.90-3 +- s/--libdir=\/lib/--libdir=%%{_lib}/ in configure stage +- add / before %%{_lib} + +* Tue Jul 18 2006 John (J5) Palmieri - 0.90-2 +- Remove some remnants of the GLIB bindings from configure.in + +* Mon Jul 17 2006 John (J5) Palmieri - 0.90-1 +- Update to upstream 0.90 +- Split out bindings + +* Wed Jul 12 2006 Jesse Keating - 0.62-1.1 +- rebuild + +* Mon Jun 12 2006 John (J5) Palmieri - 0.62-1 +- Update to upstream 0.62 +- Remove mono for s390s + +* Tue Jun 6 2006 Matthias Clasen 0.61-6 +- Rebuild + +* Wed May 17 2006 Karsten Hopp 0.61-5.2 +- add buildrequires libICE-devel, libSM-devel, libcap-devel +- change buildrequires form libX11 to libX11-devel + +* Mon May 15 2006 John (J5) Palmieri - 0.61-5.1 +- Bump and rebuild. Add a BR and R for libX11 + +* Tue Apr 25 2006 John (J5) Palmieri - 0.61-5 +- Backport patch from dbus-connection.c + - Allows interfaces to be NULL in the message header as per the spec + - Fixes a problem with pendings calls blocking on a data starved socket + +* Mon Apr 17 2006 John (J5) Palmieri 0.61-4 +- New audit patch + +* Fri Feb 24 2006 John (J5) Palmieri 0.61-3 +- ABI hasn't changed so add patch that makes dbus-sharp think + it is still 0.60 (mono uses hard version names so any change + means apps need to recompile) + +* Fri Feb 24 2006 John (J5) Palmieri 0.61-2 +- Make sure chkconfig rests the priorities so we can start earlier + +* Fri Feb 24 2006 John (J5) Palmieri 0.61-1 +- Upgrade to upstream version 0.61 +- remove python callchain patch +- update avc patch + +* Fri Feb 10 2006 Jesse Keating - 0.60-7.2 +- bump again for double-long bug on ppc(64) + +* Tue Feb 07 2006 Jesse Keating - 0.60-7.1 +- rebuilt for new gcc4.1 snapshot and glibc changes + +* Mon Jan 23 2006 John (J5) Palmieri 0.60-7 +- Add patch to fix the python callchain +- Symlink dbus-send to /usr/bin because some applications + look for it there + +* Fri Jan 20 2006 John (J5) Palmieri 0.60-6 +- Fix up patch to init script so it refrences /bin not /usr/bin + +* Fri Jan 20 2006 John (J5) Palmieri 0.60-5 +- move base libraries and binaries to /bin and /lib so they can be started + before /usr is mounted on network mounted /usr systems +- have D-Bus start early + +* Thu Jan 19 2006 Alexander Larsson 0.60-4 +- mono now built on s390x + +* Mon Jan 9 2006 Alexander Larsson 0.60-3 +- Don't exclude non-mono arches + +* Mon Jan 9 2006 Alexander Larsson - 0.60-2 +- Add dbus-sharp sub-package + +* Fri Dec 09 2005 Jesse Keating - 0.60-1.1 +- rebuilt + +* Thu Dec 01 2005 John (J5) Palmieri - 0.60-1 +- upgrade to 0.60 + +* Thu Sep 08 2005 John (J5) Palmieri - 0.50-1 +- upgrade to 0.50 + +* Mon Aug 29 2005 John (J5) Palmieri - 0.36.2-1 +- upgrade to 0.36.2 which fixes an exploit where + users can attach to another user's session bus (CAN-2005-0201) + +* Wed Aug 24 2005 John (J5) Palmieri - 0.36.1-1 +- Upgrade to dbus-0.36.1 +- Install all files to lib64/ on 64bit machines + +* Tue Aug 23 2005 John (J5) Palmieri - 0.36-1 +- Upgrade to dbus-0.36 +- Split modules that go into %%{_lib}/python2.4/site-packages/dbus +and those that go into %%{python_sitelib}/dbus (they differ on 64bit) +- Renable Qt bindings since packages in core can use them + +* Mon Jul 18 2005 John (J5) Palmieri - 0.35.2-1 +- Upgrade to dbus-0.35.2 +- removed dbus-0.34-kill-babysitter.patch +- removed dbus-0.34-python-threadsync.patch +- removed dbus-0.23-selinux-avc-audit.patch +- added dbus-0.35.2-selinux-avc-audit.patch +- take out restarts on upgrade + +* Tue Jun 28 2005 John (J5) Palmieri - 0.34-1 +- Upgrade to dbus-0.34 +- added dbus-0.34-kill-babysitter.patch +- added dbus-0.34-python-threadsync.patch +- remove dbus-0.32-print_child_pid.patch +- remove dbus-0.32-deadlock-fix.patch +- remove dbus-0.33-types.patch + +* Wed Jun 8 2005 John (J5) Palmieri - 0.33-4 +- Add new libaudit patch from Steve Grub and enable in configure + (Bug #159218) + +* Mon May 23 2005 Bill Nottingham - 0.33-3 +- remove static libraries from python bindings + +* Sun May 01 2005 John (J5) Palmieri - 0.33-2 +- Backport patch from CVS that fixes int32's being marshaled as +uint16's in the python bindings + +* Mon Apr 25 2005 John (J5) Palmieri - 0.33-1 +- update to upstream 0.33 +- renable selinux audit patch + +* Tue Apr 12 2005 John (J5) Palmieri - 0.32-6 +- Added patch to fix deadlocks when using recursive g_mains + +* Tue Apr 12 2005 John (J5) Palmieri - 0.32-5 +- replace selinux_init patch with selinux_chroot_workaround patch + to work around bad selinux interactions when using chroots + on the beehive build machines + +* Mon Apr 11 2005 John (J5) Palmieri - 0.32-4 +- add print_child_pid patch which make sure we prin the child's pid if we fork + +* Thu Apr 7 2005 David Zeuthen - 0.32-3 +- add fix for glib infinite loop (fdo #2889) + +* Thu Mar 31 2005 John (J5) Palmieri - 0.32-2 +- add selinux-init patch to fix dbus from segfaulting when + building on machines that don't have selinux enabled + +* Thu Mar 31 2005 John (J5) Palmieri - 0.32-1 +- update to upstream version 0.32 + +* Wed Mar 23 2005 John (J5) Palmieri - 0.31-4 +- Pyrex has been patched to generate gcc4.0 complient code +- Rebuild for gcc4.0 + +* Wed Mar 16 2005 John (J5) Palmieri - 0.31-3 +- change compat-gcc requirement to compat-gcc-32 +- rebuild with gcc 3.2 + +* Tue Mar 08 2005 John (J5) Palmieri - 0.31-2 +- Remove precompiled init script and let the sources generate it + +* Mon Mar 07 2005 John (J5) Palmieri - 0.31-1 +- update to upstream version 0.31 +- take out user has same id patch (merged upstream) +- udi patch updated +- dbus-daemon-1 renamed to dbus-daemon +- dbus-glib-tool renamed to dbus-binding-tool +- force gcc33 because pyrex generate improper lvalue code +- disable audit patch for now + +* Tue Feb 01 2005 John (J5) Palmieri - 0.23-4 +- Explicitly pass in the pid file location to ./configure instead of + letting it guess based on the build enviornment + +* Mon Jan 31 2005 John (J5) Palmieri - 0.23-3 +- Add patch to fix random users from connecting to a users session bus + +* Fri Jan 21 2005 John (J5) Palmieri - 0.23-2 +- Add Steve Grubb's SE-Linux audit patch (Bug# 144920) + +* Fri Jan 21 2005 John (J5) Palmieri - 0.23-1 +- Update to upstream version 0.23 +- Drop all patches except for the UDI patch as they have been + integrated upstream +- List of API changes: + * add setgroups() to drop supplementary groups + * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get + * added support for int64 and uint64 to the python bindings + * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted + +* Mon Nov 8 2004 Jeremy Katz - 0.22-12 +- rebuild against python 2.4 + +* Tue Nov 02 2004 John (J5) Palmieri +- Add a requires for glib2-devel in the devel package +- Add SE-Linux backport from Colin Walters that fixes + messages getting lost in SE-Linux contexts + +* Wed Oct 13 2004 John (J5) Palmieri +- Bump up release and rebuild + +* Mon Oct 11 2004 Tim Waugh +- Run /sbin/ldconfig for glib sub-package (bug #134062). + +* Wed Sep 22 2004 John (J5) Palmieri +- Fixed patch to use dbus-1 instead of dbus-1.0 +- (configure.in): Exported just the datadir instead of + the full path to the dbus datadir for consistency + +* Wed Sep 22 2004 John (J5) Palmieri +- Adding patch to move /usr/lib/dbus-1.0/services to + /usr/share/dbus-1.0/services + +* Thu Sep 16 2004 John (J5) Palmieri +- reverting BuildRequires: redhat-release because of issues with build system +- added precompiled version of the messagebus init script + +* Thu Sep 16 2004 John (J5) Palmieri +- changed /etc/redhat-release to the package redhat-release + +* Thu Sep 16 2004 John (J5) Palmieri +- added python int64 patch from davidz + +* Thu Sep 16 2004 John (J5) Palmieri +- added BuildRequires: /etc/redhat-release (RH Bug #132436) + +* Wed Aug 18 2004 John (J5) Palmieri +- Added Steve Grubb's spec file patch (RH Bug #130201) + +* Mon Aug 16 2004 John (J5) Palmieri +- Disabled dbus-gtk since dbus-viewer doesn't do anything right now + +* Mon Aug 16 2004 John (J5) Palmieri +- Moved dbus-viewer to new dbus-gtk package so that dbus-glib + no longer requires X or GTK libraries. (RH Bug #130029) + +* Thu Aug 12 2004 John (J5) Palmieri +- Update to new 0.22 release + +* Thu Aug 05 2004 John (J5) Palmieri +- Added BuildRequires for libselinux-devel and Requires for libselinux + +* Mon Aug 02 2004 Colin Walters +- Add SE-DBus patch + +* Fri Jul 30 2004 John (J5) Palmieri +- Added lib64 workaround for python bindings installing to + the wrong lib directory on 64 bit archs + +* Fri Jul 30 2004 John (J5) Palmieri +- Updated console-auth patch +- rebuild + +* Thu Jul 22 2004 John (J5) Palmieri +- Update to upstream CVS build +- Added console-auth patch + +* Fri Jun 25 2004 John (J5) Palmieri +- Workaround added to fix gcc-3.4 bug on ia64 + +* Fri Jun 25 2004 John (J5) Palmieri +- require new Pyrex version and see if it builds this time + +* Fri Jun 25 2004 John (J5) Palmieri +- rebuild with updated Pyrex (0.9.2.1) + +* Tue Jun 15 2004 Elliot Lee +- rebuilt + +* Fri Jun 04 2004 John (J5) Palmieri +- Moved dbus-viewer, dbus-monitor and dbus-glib-tool + into the dbus-glib package so that the main dbus + package does not depend on glib (Bug #125285) + +* Thu Jun 03 2004 John (J5) Palmieri +- rebuilt + +* Thu May 27 2004 John (J5) Palmieri +- added my Python patch +- took out the qt build requires +- added a gtk+ build requires + +* Fri Apr 23 2004 John (J5) Palmieri +- Changed build requirement to version 0.9-3 of Pyrex + to fix problem with builing on x86_64 + +* Tue Apr 20 2004 John (J5) Palmieri +- update to upstream 0.21 +- removed dbus-0.20-varargs.patch patch (fixed upstream) + +* Mon Apr 19 2004 John (J5) Palmieri +- added a dbus-python package to generate python bindings +- added Pyrex build dependacy + +* Tue Mar 02 2004 Elliot Lee +- rebuilt + +* Wed Feb 25 2004 Bill Nottingham 0.20-4 +- fix dbus error functions on x86-64 (#116324) +- add prereq (#112027) + +* Fri Feb 13 2004 Elliot Lee +- rebuilt + +* Fri Feb 13 2004 Tim Waugh +- Conflict with cups prior to configuration file change, so that the + %%postun service condrestart works. + +* Wed Feb 11 2004 Havoc Pennington 0.20-2 +- rebuild in fc2, cups now updated + +* Wed Jan 7 2004 Bill Nottingham 0.20-1 +- update to upstream 0.20 + +* Thu Oct 16 2003 Havoc Pennington 0.13-6 +- hmm, dbus doesn't support uids in the config file. fix. + +* Thu Oct 16 2003 Havoc Pennington 0.13-5 +- put uid instead of username in the config file, to keep things working with name change + +* Thu Oct 16 2003 Havoc Pennington 0.13-4 +- make subpackages require the specific release, not just version, of base package + +* Thu Oct 16 2003 Havoc Pennington 0.13-3 +- change system user "messagebus" -> "dbus" to be under 8 chars + +* Mon Sep 29 2003 Havoc Pennington 0.13-2 +- see if removing qt subpackage for now will get us through the build system, + qt bindings not useful yet anyway + +* Sun Sep 28 2003 Havoc Pennington 0.13-1 +- 0.13 fixes a little security oops + +* Mon Aug 4 2003 Havoc Pennington 0.11.91-3 +- break the tiny dbus-launch that depends on X into separate package + so a CUPS server doesn't need X installed + +* Wed Jun 04 2003 Elliot Lee +- rebuilt + +* Sat May 17 2003 Havoc Pennington 0.11.91-1 +- 0.11.91 cvs snap properly merges system.d + +* Fri May 16 2003 Havoc Pennington 0.11.90-1 +- build a cvs snap with a few more fixes + +* Fri May 16 2003 Havoc Pennington 0.11-2 +- fix a crash that was breaking cups + +* Thu May 15 2003 Havoc Pennington 0.11-1 +- 0.11 + +* Thu May 15 2003 Havoc Pennington 0.10.90-1 +- use rc.d/init.d not init.d, bug #90192 +- include the new man pages + +* Fri Apr 11 2003 Havoc Pennington 0.9-1 +- 0.9 +- export QTDIR explicitly +- re-enable qt, the problem was most likely D-BUS configure + +* Tue Apr 1 2003 Havoc Pennington 0.6.94-1 +- update from CVS with a fix to set uid after gid + +* Tue Apr 1 2003 Havoc Pennington 0.6.93-1 +- new cvs snap that actually forks to background and changes + user it's running as and so forth +- create our system user in pre + +* Mon Mar 31 2003 Havoc Pennington 0.6.92-1 +- fix for "make check" test that required a home directory + +* Mon Mar 31 2003 Havoc Pennington 0.6.91-1 +- disable qt for now because beehive hates me +- pull a slightly newer cvs snap that creates socket directory +- cat the make check log after make check fails + +* Mon Mar 31 2003 Havoc Pennington 0.6.90-1 +- initial build