From e75175d9b4077064382e7c84c0b37b87d832be7d Mon Sep 17 00:00:00 2001
From: David King <amigadave@amigadave.com>
Date: Wed, 19 Feb 2020 11:22:25 +0000
Subject: [PATCH] Verify GPG signature of sources

https://docs.fedoraproject.org/en-US/packaging-guidelines/#_source_file_verification
---
 .gitignore                                    |   1 +
 dbus.spec                                     |  31 +++++++++++-------
 ...EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg | Bin 0 -> 6991 bytes
 sources                                       |   1 +
 4 files changed, 22 insertions(+), 11 deletions(-)
 create mode 100644 gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg

diff --git a/.gitignore b/.gitignore
index a81e03a..eeeea1a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -43,3 +43,4 @@
 /dbus-1.12.12.tar.gz
 /dbus-1.12.14.tar.gz
 /dbus-1.12.16.tar.gz
+/dbus-1.12.16.tar.gz.asc
diff --git a/dbus.spec b/dbus.spec
index 315d0a4..57a1833 100644
--- a/dbus.spec
+++ b/dbus.spec
@@ -23,7 +23,7 @@
 Name:    dbus
 Epoch:   1
 Version: 1.12.16
-Release: 4%{?dist}
+Release: 5%{?dist}
 Summary: D-BUS message bus
 
 # The effective license of the majority of the package, including the shared
@@ -32,16 +32,21 @@ License: (GPLv2+ or AFL) and GPLv2+
 URL:     http://www.freedesktop.org/Software/dbus/
 #VCS:    git:git://git.freedesktop.org/git/dbus/dbus
 Source0: https://dbus.freedesktop.org/releases/%{name}/%{name}-%{version}.tar.gz
-Source1: 00-start-message-bus.sh
-Source2: dbus.socket
-Source3: dbus-daemon.service
-Source4: dbus.user.socket
-Source5: dbus-daemon.user.service
+Source1: https://dbus.freedesktop.org/releases/%{name}/%{name}-%{version}.tar.gz.asc
+# gpg --keyserver keyring.debian.org --recv-keys 36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F
+# gpg --export --export-options export-minimal > gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg
+Source2: gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg
+Source3: 00-start-message-bus.sh
+Source4: dbus.socket
+Source5: dbus-daemon.service
+Source6: dbus.user.socket
+Source7: dbus-daemon.user.service
 Patch0: 0001-tools-Use-Python3-for-GetAllMatchRules.patch
 
 BuildRequires: autoconf-archive
 BuildRequires: libtool
 BuildRequires: audit-libs-devel >= 0.9
+BuildRequires: gnupg2
 BuildRequires: libX11-devel
 BuildRequires: libcap-ng-devel
 BuildRequires: pkgconfig(expat)
@@ -163,6 +168,7 @@ in this separate package so server systems need not install X.
 
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %autosetup -p1
 
 
@@ -216,11 +222,11 @@ rm -f %{buildroot}%{_userunitdir}/dbus.{socket,service}
 rm -f %{buildroot}%{_userunitdir}/sockets.target.wants/dbus.socket
 
 # Install downstream units
-install -Dp -m755 %{SOURCE1} %{buildroot}%{_sysconfdir}/X11/xinit/xinitrc.d/00-start-message-bus.sh
-install -Dp -m644 %{SOURCE2} %{buildroot}%{_unitdir}/dbus.socket
-install -Dp -m644 %{SOURCE3} %{buildroot}%{_unitdir}/dbus-daemon.service
-install -Dp -m644 %{SOURCE4} %{buildroot}%{_userunitdir}/dbus.socket
-install -Dp -m644 %{SOURCE5} %{buildroot}%{_userunitdir}/dbus-daemon.service
+install -Dp -m755 %{SOURCE3} %{buildroot}%{_sysconfdir}/X11/xinit/xinitrc.d/00-start-message-bus.sh
+install -Dp -m644 %{SOURCE4} %{buildroot}%{_unitdir}/dbus.socket
+install -Dp -m644 %{SOURCE5} %{buildroot}%{_unitdir}/dbus-daemon.service
+install -Dp -m644 %{SOURCE6} %{buildroot}%{_userunitdir}/dbus.socket
+install -Dp -m644 %{SOURCE7} %{buildroot}%{_userunitdir}/dbus-daemon.service
 
 # Obsolete, but still widely used, for drop-in configuration snippets.
 install --directory %{buildroot}%{_sysconfdir}/dbus-1/session.d
@@ -447,6 +453,9 @@ systemctl --no-reload --global preset dbus-daemon.service &>/dev/null || :
 
 
 %changelog
+* Wed Feb 19 2020 David King <amigadave@amigadave.com> - 1:1.12.16-5
+- Verify GPG signature of sources
+
 * Fri Jan 31 2020 David King <amigadave@amigadave.com> - 1:1.12.16-4
 - Update python2- to python3-gobject
 
diff --git a/gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg b/gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg
new file mode 100644
index 0000000000000000000000000000000000000000..4a5c6f81084fe2cf4539637eda550a8931a932b6
GIT binary patch
literal 6991
zcmbuDWl$VkmO!DQ8>eyiK(OE*+}#NdX{2%2plJy1ZfP76+}$+<4epQt!3l0bH{VRn
z?9|TgR&DLyTkq$obMAea04!uBWQQR{9E7|@icpm`y6ooI4{1U5X1A9Zx{n)WP7E=e
zol|{!-^xxR7JGw5x59xozZ4zfv0vG9XneuM2GlE;d{OtWC6YN$hlSY5;x58m>=U%l
zjTse?)P}a^%wt?_+P=n_w)dOo$Tk&yjDfYe@=spJk5T)gBQ{OGD}Zjo52UD$?o+I&
zvYRXqPy0UbnU){E5?a_2X^5mh=cb9F^?1!{62RQe$<%Jz@ybA&p}6+wsM74beu3}(
z`<>HV{xP{07`m1|Y$;GvJRR=dJl4lOZ&|dt``w0bUFKrqk*b*IzTF-!+VieEuK-Mu
zE1C5bVdqpKYfDwOvJ}2?T12`Z=IdP2+I`a}L7zUB6rMY30bk6CAILN;dK8@=yl5`E
zH%|%hg_EKl2MVcG(AIT#i8Ov<qaC6aJPM?(sF*)&Wxb9wY7(&`etE#g`&6iEeM0>n
zsVE5leh%^4Qz)|G;WZxLbg3<dGv80X@C?plka(*&AsRv;6sRdB#R&L>H+IYfx$GSA
z%idl);5V?fnz+Z!$J%93vQod<2ZHj6jk3~gxCDD`3ty8<6A1s3jZ*Ga-}#UgnFrpq
z#N2s1SBGZHBrY|L8doLpO2sJoO@Bgnmx;#kC91G?TzeApmP>J!PSmx{7N*jh!4@uP
zZQ43Lq%3iXVo9EI)X*a!dENj47ZCxmfkxZb(b<Vc)k4?S!^0LzBjWC8;U!@SHMcc$
zVt0147K;SvAmbyVBZvXWkpNVP0Ad&r0}T}g2}p>JhKd0s0w5tG5YZwpXPg_Ox(;L+
z96Y~L-Fs%S7#d3e0*t44C4guQ86$cK=x8|qnBynoAiy9gjeVVB;s&>~+Dm>x0xEiN
zN|pGxNFL$h7B7P9z4Zk<b8t}Ar|FN<e(+YH6?`q3lwy(M&1p`oX_#~C5r6M<<T{*e
zMndbwkW~iGYvqm5zbSRciPQWv@z^bvj%=hSY$4k5Y#NHjtQw|<sv7JeQ^pH{k%pQo
za46}Pd9ZpzccoF~;_vE9lCRCJQ-0BDX|=aFnPZTIs58`kc0wS=PlujrnO!$u12}RS
z!b~U&9NgRqZr*e@1QcP5HGw+iPfLKoSZbiOWP(HWn-Oc-A|shVc~^p^qDNgSAKx4Y
z3O=oeG4=Oc{^jK_$w&i?Y%BAanb|Mtf`sInFBSILM}d*lMR)umov4XV5Wo)BzQfBq
zvLK#9x%IK=aNgJp$<xF{A7U8vfxc7F=Je52aqLsvN>lJMWWDdIS7>m@$N)464A^}0
zx~R99p=$&hLqgrDhwNz)F3j0OOfTnhH7t&5-;Sk$AY@^4g*yn@9;&a%uH{<t!87^+
zP$MT`HO@i06#u|4@_Uuk4*T$IvHK#~J*&qXr#oWF!H<38fhx$SmTCT29!J{m&`25N
zZsrokAIjO*E(tuMQVJe<4)JvG92l)U^5wd#PH`|y#4tCWsb4;~qp$YAO-D3Ia^!vS
zTzx+Bqx7rvVZQz&SEG~PxFp!}uIT6WRKv@^gQsNX2zCEY{Fuz0-JEE+gamomI0f0b
z`I!H|`0@NZe%wajXRY-Yj#60p-gOgKWxWfuUW7lRj9D+71j&U0;)M}!MCem~x7RL`
zl9+obZstwp&g0EyHg#B?hW+9|%9C4DQMKXc{pO`XHmI<HEg(=W($RG7qa8OrtNrWP
zHNLiK)?O7dcKe>BJ_JS0R=RnI*9YJ51MdA!@SrXEOi>ItHt^QuM^aGvkBV)Jt*@Pi
zL&oMaHcu(ohi_;f*vg1D7jxYdp{@EWY`JVF6PSc`&tA^#%a@dNAB%s}!ff(=FxgNU
z<JfYwjl~Sxl5Y#O)p)!k8t#)+h-wc*hEY|+4pYHP@Ly5F>_@mfg}i6p5v`-2WwG70
zWYt!3bfjXk-EiR5)NlByTb99)Q&hR`Sq&j*;^?Fnic>N8G+N#$FyV<3!*p9UfE5$$
ze8VyX%c~E&f9Hv)TD34IxXY;g(e5dX82497^S2$2`wnrnL_hrQg5VMq?E+c1ahNLN
zA_b<VR!pyq>1@+!PKyB?dfb51iOdSNVLJ%#Y}<%v?OsPT`0)9pvXkS>YEucJ>}+zC
zYe~dd1SX-Ri8fz-`sll>RJ~koFG7tQ>NVq{_M$QK6}Vk%pU0X%ZL5mNlCsrMPV~8p
zYndlWK%KZ|RB=?kE0*&HuT7cZ;x}bgnBlw1-UQv}*UT2Gb-TcoW}PDr#G3f7U0&3@
z=6PpElA{Ku|JHjh?odxlXE!q^OJ_%R3uksu`#=8E`<wqH|LH#fDdPW4fmHv_;Bq4P
z+0>Vx&$;S@nyWu@TwG@>G0(}{!?a3)Wz^F*Vw$hGHEW1QhEL&W=>3ri4+&U<2;;CW
zccwW+i)Hm;suV7+3N5I~78bCQs}@nPr51RmVxKDUvyNKHGo;Qpiw&1wLAP}$etvPe
z3Rs=itg_*YYD|>Cwk@;J-Muxc_Cwfqe^tO;R>Ci+X0h;zW%(0CL?E`=?y&KZ58^<G
zo1UO6ndmvHnSW)W_{A%S;S)+$5ac?Pt@dr-&4?xr*$&<y<A!Ofcote{u?qv>Rw{>~
ziTa_gX6=rxX+eLLLxr}x|9ke7JI*d6NwFK6t_Tqt;bBAF{YLmL*#sIpE}uZKb`#k4
zM8|n^R(qe2ToWgmt(P#}-dmzj|0zY4c!0v-p+nhQ`czz>*_K0t65Aj<%vw#EY&qH=
zVtFNdteshBp)z%KY$m|Hx|4J#p6;|}t7bNeENW5iVwGs2vt@_S05t|P@KesA9~eqm
zdE`-G6c~Y;Yrb3Pn)Q|LbELa3;!C((lg;ul!wDc?VLp9F&9aHI!9mL!9__x$IOFoK
zduBH*4`*5lHnS<?*;vcLtz@2bq~H_hxH$}bStjcWKMCr0;C%f1zPbgDt~dc}%9xOu
zUFh-2yoJtZ7Wo35lWtVeU3IOeaiEf;^w+M{?fms-Q6?FE9_m8&NOPH<29AGY@UIrL
z{|WHlS}bAV?BHPbM~G(sM9~46^G}L(|Ht0yPn-e-DG}T~U7&96P)n#KjkymEkF+4a
z0JkKk9Ip^RkAR#kCqJ*GG!Lg7AGahgk0h5Yuatm*6epk1zb3kv75v2b)U$JV<_{YF
z+3}o(jlLd(*557ht!m&lw*)@!3?b+WfxGOFLB3H%$3j&;|748!u}R6*a~{02cb!xG
zb|jD;I`BH;Xk4d?oWrR(vE8l;|Ldp1DcXj@JF>FTRE^{ErvQB$f{#c(Sjk}t*+|kU
z)wA!t<ZeJrnS{1=2+VTXz9fRzINVhMaUm=vH}l;u?2ltG*gZC-&T@vykKE?AGF^v1
zULwAXayF}<EC`|u>#gG!Ymn!*&UeO5B`RZ^Z^gEv=4onrm9#PG`EgtLw3?1`kI-?Z
zS0S=)f{L`&AGIZZH^l5H1On?T&YCOVBMnxtbQmNMcOBizz0e_M-X_Px4S$*)FIVAj
zsVdyNTGHW_ut&){^d<ScdClYtXBfbn3fADxk~V;X$Cl_0+HOO>7Q9}ao;CMCUW}T1
zeHxIVAVq^?Rz`5Ql_iQEdDFOzGc!GXuxNKCT-U4tEI2h4DE#U0NQw<7lxTIb!IgcS
zGkp2WDrp2}4bczd7M4vnGFO%MCKF}E+zEeaN=0_jwEen!bU*oXj*Lfe3WIE8*GOdc
z_Uw)QMKrdM(7N`e{QQ#7TdlyEh!TtrmZoMT;PK5{ci1~MX+_PX2%)FvBXAYDxmCAr
zQdCrgz7x8Yv0rsu@LI+@+j5SwYdgZ9+Cc>*eQBRI`!+|-TK{${I4=CT6$WZ}vdpQ>
zU1P0V6h9Y%^sKB~$;+EA*X`{{HZPS1%4ZP;F+~pa<xBQ>X(c}XWNL+FGty@9IrCxj
z(1^Ve_mxwnl3pqWHyg6Q)u{u)a<NuA6;>BJZ4Y56d|X$m8?22fPUq1cI(JTMNC147
z??D=BXnfFP&)td}#_{q;e-*ZtZ~g|3*UbHf0E6ASnRn1_RrQMBeqgX`1?iSu@uwA2
zs1`mvR%S?Y;SNK^R3u<e`M7frT&ToBC_>x*Ef0;~Ao%5V>e}bfxC_TfJLp`}O{eh&
zO@&j+QP=0Dk;lXU!CUR^rwS9coW~R=vhQun6Lxn2_P+u;KnEmhfcLuy6;GjpwC~-s
zrn|d`)mH9Qiqy?9P`pEoJR43a62$phjp0%L26v@TnPPFs?|+leBlp+n3>UgRmNote
zq_EaGvR3R#M>2GJsFR4|<Lm8MNf2z!&EybvHdbeHtdD!emqgeY^kWVOl*cv@T$~p@
zrlHBJ9~BIX79R_y$d}U09sN0Dv-8X!cVSzX=P=d9y5ucvkV0EolX1j0zq7IWZ91mL
zV|!g$j>S;$L(7b^Gh@Sxg*mzNlDJNCyZ0wUv2bk;Pjo}Xrq@_43}v6}>Q$#CPl$y@
zEwBc$Q;V5aYw{mfkN5j?_g^)xSwu5DGHO!1L5U;iYO!8@*Y)CWw?ZU91exTIeqI8|
zG5<#c{n_|EfoMcah&lhN6PEAbJAe&qG9uY!?$jaBZ;XgnoDg)8zq0}ZwPy)af10Wo
zT)U|vXh<VP?{a#ga(%su6P1#&Y<etNNcN=)plMn*qFy3bJ+Z1eGVQ+ylHqCK9cX$r
zues=z7JAsRvc?>Tf3Fgt6wE(vYchBIMG-Ur8=r0;bQ<S@q#*G{ZQb5eoo=Xar|5Tc
zD$b?tN##u(>m4+Q{}7fJjIVc%3RB}--gwiJCUEq!zZ@OjQTQlTuuVj4EE^fL-zO*N
z%S?u!TEn?tC>tukkSppJxrMRT0jcpuzGn@xcqML4j>`g(m6t>xjpNeIoN{U%BwMOC
zu%)ieLgnpo+vcPaAlQ5br`o&X-;rIW&KY@pzbnl7$+QX~{GI@afy(RReKVGMD7T5O
zKV|vOqBkX$6n3j9-@{Ts6+AvvjDMk%z(nW9SwP~n>sEI~dzX(V^<jCAAJL+4Z4ujD
zz_8}i(om$sDK5f}607C_yF~2puoaR(NQY%ipd_w30r{8;dQ3xB^g!%2-v)WNt`SDH
z8R;17@T&kT-MyIXR>_nYCaVpCkw7d?=i->(#T%JP01$P~my^;|IIpmuZqwrVPR-Yu
z@qV4u$zSK%g<pOP=&Ra$SD~vpYWX}$5nDM2G1hw&eJDE3CMWZpQPa6}XIYK0tY6Vh
z@v$C{aj#+h6_oNFk^L{780a;h{Lx9P$>o7l4c*-iQA-{O7{d7lbksmATB{ZxE)p#&
z9zFqUZpa!5$ohF@OhE;2qHg<nanja%ZW1u}Lr0<Q0|>n2A_iufWX7?;!-{`LGbeN&
z`a;ZT(z&?xg{4s8`2#&WSL{)WSuLKPTUHHlg(y{&oG)y3&*;;OFAXav7CQAVheQiN
zzDvubJV)7hD>~r-l?<QdCKXj`>en5GJF!05rF5K;N)Jwo6I4uv76_ACtlbqA)cGZq
z#5M>T>G;~Gq<f@2LgmO5=ha`<Y<zRkC=sJ|aB2Iy^eUOQ?9HpaKD9l8O$&6*Yb`rI
zEUik2ZE&@`I1R$0>Qq1zVhF99(`2*9*gOCD=8>>>pm0^h^tu#|>|Ss}o_dCUrW&_m
zmqAjf#sDi&+nDi0pRx`w+seYy+Ojj4Rp>DQyG^^lFnh+cMQReTS9|s0=FLO=#pucb
z8GY2Vmd2Y;E5u_9Eh%E60fjaJjl;YSEWhQMo9%bz_JUmTipqT|xU755RAF!KNh7z(
z=OHWFH&-LQzcZ@UZs^e4T}5(va_yOPad7cCYh3mQ2D7IK97*%{sJ~U-5wi1(r#kwX
zQd&-90tcY35cnY4Ks@>J#Sh;Vx|_5M%s8=$%DI9{^!2hvrHp7ju-CqHr0SqhOj-pT
zl|Ilgndk=KoYWTxGcPdvyH1eZ{-G1V|E7~*AR0<&a~MFP*MkO`^pAfi|GefuGPG1E
zx;pXcddm1=xFH`Oq@oT4{Ds$F+WE)Cv=98O%xEzP?RgCWTbXCjiPqr!;)@cQ%;pT)
zzf1duVsF$49(bg`lw>DS=X@S)IyTlN?d{@{59u+_Zt3;39g^BLyzJ)+=$t00!g~Vv
zqtyW(@8TyR4T*l=>NG7O4W6O9*E#yPB?2A=lc@?bL32wv?{ZQ@F5rRb=dbUc9XP9H
zgCmyQ1#Q|==0aZ(erz$lqVIkfiq4|NXeHy3t-}Y>ZWAtr<C9>uG3F1cz<p2wYj}hZ
zQ%x3Q$q<?oNtcD(S_Q2P0GWlb?*mbgp?ux`cUlN#`fZ|t;gZXN|60SkhnkuEqu#Ju
zpInwu))}FsvoS;fPlh>nDZSv>x2q~X&kaxHry7BJj#5pesSf>T968~L$xl1C+ec{>
z(Qh`+skV4R`?$EKQ_VRu*k&U>&SZQLZ^nySG)dEFKibxuK(c~ZXa5vJ{(SvH3d*`3
zA=OHg`9duCTXkXA^eB1!lp!j;btxNb>;Tx=8|9kIbvL0pf;#Q@p_gmatQcmc>ua!M
zAX)*iw3D}K3q(Tahf3kqb|FlHLhD!JywBSAky2yd-qimi!Q~~+my>Bj$&rL}Xi!3)
z)fEd#ylb0M*rXtyCiS#&49tx`tb7i6g}cgE9u|e0R=ZMD9S%_a<zMqSL?VZR(}}c0
zc*#ulP)!roT(5aTm0(!wf~VE>pWjX$<lqN1wy$Ak6!AZ->p>irw3|#2@@b8|oJC^u
zrI5EiDs5yD&UKSXLS@1(73>)J_QKG940dtGdE}b`qln&o@m%8y;i!CwK~!nH$D;pA
z+^mH5`jIXVWXuS$UwC!A9P)clV)|uWJoV{NDf`gGm)b4ts0<7`0iK=j6egPn(lmVr
z+y~aEqu8{6Zt|HGdm(36qwh(DYuqmcrMoIEg$#w26k&0lW%irFZn89{00#_eG;Pc=
zxAoMXQ$>{+TV)n(V|(@csoF(dHV1DWQ+rDDyTINgpC=skPW`li2gVNTm(AN&?Psn<
zCW0xH3`$AFlqQ;*wYBtoJ2LM^Lr<K($vt0nwHno0BOZE;Y8|~2Ss|2sH;8C`y{Ek5
z^~AtwaJ$_sit#H>Ij#*$RMZ>kzHFItQ8on0C4G<<Pi{|mXbeG9*#%VCI40ezb-h2<
z9w-<f6mW7k;S9oon<+|R&c3WdC2@#)0qO+;SA<P>xpbT}+|LQ#N9?)ycJGa?9L!+3
z1xc>6BqYxD$gISBFBE@{mH$DIn#EZk;Yj*;0&i(da3k1*Dyeg0J|Mblrlgl>A}s}2
zvAW6SW{D#h8*brxgQA(Z)ec6~LJ)Oj3N~~UtdBPxQ9pZKgXW;$R@Cfv;)Eug2Cfku
z`E`W1J4h<#eT8cocIsq^O)~cX9-)q^KM|_8_jHYk;5<nSQHm<5jM;<t65!v3G4PCT
zPWaQcjAIo6@kL}*E5ofXdp~N#ef7G=Ra}anq>u-doH@Qw4*qqDIP2{0B1M^&b$EM5
zLx#2adnMNoNx_U~2MudAVSnSxZi)p8M1lL#*U?9l$4mAS57e{#3)O54%g)}buhas?
z*VwQcC^4KgxzMjOG}vNjhTj$ypL<OF@VP{>#tf_d%(0mf-|)mluDbg74Ec0BAxl9~
z?CnWd479offpB%tZ+{O$+_C!*Fe8R<J@pkB0t~omn#RoKOt6+(XqVaMS!bG#iw*9b
z!cfoaA2TsGs*PQ_tMzEIzK(H-YqxYZ#U&h+^JXxE1yi(!n|#p<#tM_l=)&=AGF&#T
z;J-s<-m$Td5noITn@!%#v8elwP+NLLO>c!>T2;<pI4AJ<D5%-wgvP7)L&+`(ac_@R
zg+OE`vFMuRXnmMiLi;SX={KewLrjt9IWkD>Z4<=|H2-YSnBCwzX)+DcZ&92J!%gce
z+!i8l&<%OS?+vFki(#sapX}rTbNM1~+DA6VYs@+Cd-RKjE)*Uz7D`K|F}cxmWXb7?
z=*(G=euSs;8o0nyg@lF1xeSzs-cA@xLyj3}3_An@cI_`3NzbHh0`ZjaIRT&f>|tnN
zw+S^}r}ik>=H#)iG47Fy^nUsOy3^A9ZxM?5D?)Wc|GLu}?EZ-haSJJyJA0YDK;-vf
ztJ{@(`?~{4O4n=qP-~jJOx%9>dOvnGLn9$T-|?sTs2^Bav2=mFC1;-kKYZEI<Ctg$
zMmMtXm3N_aZHI$8uSe<TJ*|%ZZeT&kL$lC?4Gt*{t7X=AYYsP~T^A}Ur^%T|rhK<-
zBX{oySQA7U^cnHlRYZ>Co&7fhX%F8_U7KsXFAFG2Dj1h9CqjzkGK6X0<r0Z7#Cv73
zbb(Ot5r+;?$^~OvUxLbRiIND<zqmG!6={iw6Q}TQDDDU>1xNcA+LS3fz~XcLxjaUK
zjo=BD+hVwfC}|Q@%E<duxCrY6zc4m4L9b%T@G6&Tvo7vodKR%3shGxPdeSgPknSma
zzU9HqB|9{ydzV|gpvEh{izc&Nwwfb}SDKm+Q~aFHk<(4wp`-N#3l1OlA_T0`qO#*M
zhgS{s0@U7Wz^t}wQCPcznD3}V6YoW!^5o@IJ*J&j$XDczl`eRcVcA40^8=+RrE=TF
zO}z!W!Y`B2*WsGOZG(tOHx({}MqsOae$ZpL$n_BYYw`v??aWXwp5$k5QH2-<^yq!)
zE51g<jELLc7DP%{*kPv4w%g_63ERNWqcbSF`=wzIt<a4)neRsCkZz<icl?1IR9JWT
jsb0^=2lscO{V$j4?s9_h-r#OD0=?qzT>-EafiM37^yvWn

literal 0
HcmV?d00001

diff --git a/sources b/sources
index e0dc31d..6c36856 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
 SHA512 (dbus-1.12.16.tar.gz) = 27ae805170e9515a8bb0fba5f29d414edc70e3b6b28b7b65bbea47035b8eafa9ac4820cdc92645be6035f6748f8aa45679e1ffc84ba74a64859a3056d318b9bb
+SHA512 (dbus-1.12.16.tar.gz.asc) = 6d19bf7be86ae1dc70550ba472e5761f3ed1a71007c00679e3a586d567776e82cf9869c9a7021c1324990615657a054b949dc5bbd8e60b0a8843ef6d977eda24