diff --git a/.flatpak.metadata b/.flatpak.metadata deleted file mode 100644 index 56a0c50..0000000 --- a/.flatpak.metadata +++ /dev/null @@ -1 +0,0 @@ -41429400eab33868b6c6045fe235e86e1086a056 SOURCES/flatpak-1.12.9.tar.xz diff --git a/.gitignore b/.gitignore index 804ac25..0a856d8 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/flatpak-1.12.9.tar.xz +flatpak-1.15.8.tar.xz diff --git a/SOURCES/flatpak-1.12.x-CVE-2024-42472.patch b/SOURCES/flatpak-1.12.x-CVE-2024-42472.patch deleted file mode 100644 index 0fc23a5..0000000 --- a/SOURCES/flatpak-1.12.x-CVE-2024-42472.patch +++ /dev/null @@ -1,330 +0,0 @@ -From 8451fa0ae30397b83705a193aa0d3f7752486dda Mon Sep 17 00:00:00 2001 -From: Alexander Larsson -Date: Mon, 3 Jun 2024 12:22:30 +0200 -Subject: [PATCH 1/4] Don't follow symlinks when mounting persisted directories - -These directories are in a location under application control, so we -can't trust them to not be a symlink outside of the files accessibe to -the application. - -Continue to treat --persist=/foo as --persist=foo for backwards compat, -since this is how it (accidentally) worked before, but print a warning. - -Don't allow ".." elements in persist paths: these would not be useful -anyway, and are unlikely to be in use, however they could potentially -be used to confuse the persist path handling. - -This partially addresses CVE-2024-42472. If only one instance of the -malicious or compromised app is run at a time, the vulnerability -is avoided. If two instances can run concurrently, there is a -time-of-check/time-of-use issue remaining, which can only be resolved -with changes to bubblewrap; this will be resolved in a separate commit, -because the bubblewrap dependency might be more difficult to provide in -LTS distributions. - -Helps: CVE-2024-42472, GHSA-7hgv-f2j8-xw87 -[smcv: Make whitespace consistent] -[smcv: Use g_warning() if unable to create --persist paths] -[smcv: Use stat() to detect symlinks and warn about them] -[smcv: Use glnx_steal_fd() for portability to older GLib] -Co-authored-by: Simon McVittie -Signed-off-by: Simon McVittie ---- - common/flatpak-context.c | 108 +++++++++++++++++++++++++++++++++++++-- - 1 file changed, 105 insertions(+), 3 deletions(-) - -diff --git a/common/flatpak-context.c b/common/flatpak-context.c -index 53b79807..8c784acf 100644 ---- a/common/flatpak-context.c -+++ b/common/flatpak-context.c -@@ -2686,6 +2686,90 @@ flatpak_context_get_exports_full (FlatpakContext *context, - return g_steal_pointer (&exports); - } - -+/* This creates zero or more directories unders base_fd+basedir, each -+ * being guaranteed to either exist and be a directory (no symlinks) -+ * or be created as a directory. The last directory is opened -+ * and the fd is returned. -+ */ -+static gboolean -+mkdir_p_open_nofollow_at (int base_fd, -+ const char *basedir, -+ int mode, -+ const char *subdir, -+ int *out_fd, -+ GError **error) -+{ -+ glnx_autofd int parent_fd = -1; -+ -+ if (g_path_is_absolute (subdir)) -+ { -+ const char *skipped_prefix = subdir; -+ -+ while (*skipped_prefix == '/') -+ skipped_prefix++; -+ -+ g_warning ("--persist=\"%s\" is deprecated, treating it as --persist=\"%s\"", subdir, skipped_prefix); -+ subdir = skipped_prefix; -+ } -+ -+ g_autofree char *subdir_dirname = g_path_get_dirname (subdir); -+ -+ if (strcmp (subdir_dirname, ".") == 0) -+ { -+ /* It is ok to open basedir with follow=true */ -+ if (!glnx_opendirat (base_fd, basedir, TRUE, &parent_fd, error)) -+ return FALSE; -+ } -+ else if (strcmp (subdir_dirname, "..") == 0) -+ { -+ return glnx_throw (error, "'..' not supported in --persist paths"); -+ } -+ else -+ { -+ if (!mkdir_p_open_nofollow_at (base_fd, basedir, mode, -+ subdir_dirname, &parent_fd, error)) -+ return FALSE; -+ } -+ -+ g_autofree char *subdir_basename = g_path_get_basename (subdir); -+ -+ if (strcmp (subdir_basename, ".") == 0) -+ { -+ *out_fd = glnx_steal_fd (&parent_fd); -+ return TRUE; -+ } -+ else if (strcmp (subdir_basename, "..") == 0) -+ { -+ return glnx_throw (error, "'..' not supported in --persist paths"); -+ } -+ -+ if (!glnx_shutil_mkdir_p_at (parent_fd, subdir_basename, mode, NULL, error)) -+ return FALSE; -+ -+ int fd = openat (parent_fd, subdir_basename, O_PATH | O_NONBLOCK | O_DIRECTORY | O_CLOEXEC | O_NOCTTY | O_NOFOLLOW); -+ if (fd == -1) -+ { -+ int saved_errno = errno; -+ struct stat stat_buf; -+ -+ /* If it's a symbolic link, that could be a user trying to offload -+ * large data to another filesystem, but it could equally well be -+ * a malicious or compromised app trying to exploit GHSA-7hgv-f2j8-xw87. -+ * Produce a clearer error message in this case. -+ * Unfortunately the errno we get in this case is ENOTDIR, so we have -+ * to ask again to find out whether it's really a symlink. */ -+ if (saved_errno == ENOTDIR && -+ fstatat (parent_fd, subdir_basename, &stat_buf, AT_SYMLINK_NOFOLLOW) == 0 && -+ S_ISLNK (stat_buf.st_mode)) -+ return glnx_throw (error, "Symbolic link \"%s\" not allowed to avoid sandbox escape", subdir_basename); -+ -+ return glnx_throw_errno_prefix (error, "openat(%s)", subdir_basename); -+ } -+ -+ *out_fd = fd; -+ return TRUE; -+} -+ - void - flatpak_context_append_bwrap_filesystem (FlatpakContext *context, - FlatpakBwrap *bwrap, -@@ -2709,12 +2793,30 @@ flatpak_context_append_bwrap_filesystem (FlatpakContext *context, - while (g_hash_table_iter_next (&iter, &key, NULL)) - { - const char *persist = key; -- g_autofree char *src = g_build_filename (g_get_home_dir (), ".var/app", app_id, persist, NULL); -+ g_autofree char *appdir = g_build_filename (g_get_home_dir (), ".var/app", app_id, NULL); - g_autofree char *dest = g_build_filename (g_get_home_dir (), persist, NULL); -+ g_autoptr(GError) local_error = NULL; -+ -+ if (g_mkdir_with_parents (appdir, 0755) != 0) -+ { -+ g_warning ("Unable to create directory %s", appdir); -+ continue; -+ } -+ -+ /* Don't follow symlinks from the persist directory, as it is under user control */ -+ glnx_autofd int src_fd = -1; -+ if (!mkdir_p_open_nofollow_at (AT_FDCWD, appdir, 0755, -+ persist, &src_fd, -+ &local_error)) -+ { -+ g_warning ("Failed to create persist path %s: %s", persist, local_error->message); -+ continue; -+ } - -- g_mkdir_with_parents (src, 0755); -+ g_autofree char *src_via_proc = g_strdup_printf ("/proc/self/fd/%d", src_fd); - -- flatpak_bwrap_add_bind_arg (bwrap, "--bind", src, dest); -+ flatpak_bwrap_add_fd (bwrap, glnx_steal_fd (&src_fd)); -+ flatpak_bwrap_add_bind_arg (bwrap, "--bind", src_via_proc, dest); - } - } - --- -2.46.0 - - -From 5462c9b1e1a34b1104c8a0843a10382e90c9bb6b Mon Sep 17 00:00:00 2001 -From: Alexander Larsson -Date: Mon, 3 Jun 2024 12:59:05 +0200 -Subject: [PATCH 2/4] Add test coverage for --persist - -This adds three "positive" tests: the common case --persist=.persist, the -deprecated spelling --persist=/.persist, and the less common special case ---persist=. as used by Steam. - -It also adds "negative" tests for CVE-2024-42472: if the --persist -directory is a symbolic link or contains path segment "..", we want that -to be rejected. - -Reproduces: CVE-2024-42472, GHSA-7hgv-f2j8-xw87 -[smcv: Add "positive" tests] -[smcv: Exercise --persist=..] -[smcv: Assert that --persist with a symlink produces expected message] -Co-authored-by: Simon McVittie -Signed-off-by: Simon McVittie ---- - tests/test-run.sh | 41 ++++++++++++++++++++++++++++++++++++++++- - 1 file changed, 40 insertions(+), 1 deletion(-) - -diff --git a/tests/test-run.sh b/tests/test-run.sh -index dd371df3..bca0845d 100644 ---- a/tests/test-run.sh -+++ b/tests/test-run.sh -@@ -24,7 +24,7 @@ set -euo pipefail - skip_without_bwrap - skip_revokefs_without_fuse - --echo "1..20" -+echo "1..21" - - # Use stable rather than master as the branch so we can test that the run - # command automatically finds the branch correctly -@@ -512,3 +512,42 @@ ${FLATPAK} ${U} info -m org.test.App > out - assert_file_has_content out "^sdk=org\.test\.Sdk/$(flatpak --default-arch)/stable$" - - ok "--sdk option" -+ -+rm -fr "$HOME/.var/app/org.test.Hello" -+mkdir -p "$HOME/.var/app/org.test.Hello" -+run --command=sh --persist=.persist org.test.Hello -c 'echo can-persist > .persist/rc' -+sed -e 's,^,#--persist=.persist# ,g' < "$HOME/.var/app/org.test.Hello/.persist/rc" >&2 -+assert_file_has_content "$HOME/.var/app/org.test.Hello/.persist/rc" "can-persist" -+ -+ok "--persist=.persist persists a directory" -+ -+rm -fr "$HOME/.var/app/org.test.Hello" -+mkdir -p "$HOME/.var/app/org.test.Hello" -+# G_DEBUG= to avoid the deprecation warning being fatal -+G_DEBUG= run --command=sh --persist=/.persist org.test.Hello -c 'echo can-persist > .persist/rc' -+sed -e 's,^,#--persist=/.persist# ,g' < "$HOME/.var/app/org.test.Hello/.persist/rc" >&2 -+assert_file_has_content "$HOME/.var/app/org.test.Hello/.persist/rc" "can-persist" -+ -+ok "--persist=/.persist is a deprecated form of --persist=.persist" -+ -+rm -fr "$HOME/.var/app/org.test.Hello" -+mkdir -p "$HOME/.var/app/org.test.Hello" -+run --command=sh --persist=. org.test.Hello -c 'echo can-persist > .persistrc' -+sed -e 's,^,#--persist=.# ,g' < "$HOME/.var/app/org.test.Hello/.persistrc" >&2 -+assert_file_has_content "$HOME/.var/app/org.test.Hello/.persistrc" "can-persist" -+ -+ok "--persist=. persists all files" -+ -+mkdir "${TEST_DATA_DIR}/inaccessible" -+echo FOO > ${TEST_DATA_DIR}/inaccessible/secret-file -+rm -fr "$HOME/.var/app/org.test.Hello" -+mkdir -p "$HOME/.var/app/org.test.Hello" -+ln -fns "${TEST_DATA_DIR}/inaccessible" "$HOME/.var/app/org.test.Hello/persist" -+# G_DEBUG= to avoid the warnings being fatal when we reject a --persist option. -+# LC_ALL=C so we get the expected non-localized string. -+LC_ALL=C G_DEBUG= run --command=ls --persist=persist --persist=relative/../escape org.test.Hello -la ~/persist &> hello_out || true -+sed -e 's,^,#--persist=symlink# ,g' < hello_out >&2 -+assert_file_has_content hello_out "not allowed to avoid sandbox escape" -+assert_not_file_has_content hello_out "secret-file" -+ -+ok "--persist doesn't allow sandbox escape via a symlink (CVE-2024-42472)" --- -2.46.0 - - -From 04d8ad3009cd8a4350fba6cf7cc6c7819ccdfd34 Mon Sep 17 00:00:00 2001 -From: Simon McVittie -Date: Mon, 12 Aug 2024 19:48:18 +0100 -Subject: [PATCH 3/4] build: Require a version of bubblewrap with the --bind-fd - option - -We need this for the --bind-fd option, which will close a race -condition in our solution to CVE-2024-42472. - -For this stable branch, check the --help output for a --bind-fd option -instead of requiring a specific version number, to accommodate possible -backports in LTS distributions. - -Signed-off-by: Simon McVittie ---- - configure.ac | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/configure.ac b/configure.ac -index 0a44e11a..0c8e2d0e 100644 ---- a/configure.ac -+++ b/configure.ac -@@ -175,6 +175,9 @@ if test "x$BWRAP" != xfalse; then - BWRAP_VERSION=`$BWRAP --version | sed 's,.*\ \([0-9]*\.[0-9]*\.[0-9]*\)$,\1,'` - AX_COMPARE_VERSION([$SYSTEM_BWRAP_REQS],[gt],[$BWRAP_VERSION], - [AC_MSG_ERROR([You need at least version $SYSTEM_BWRAP_REQS of bubblewrap to use the system installed version])]) -+ AS_IF([$BWRAP --help | grep '@<:@-@:>@-bind-fd' >/dev/null], -+ [:], -+ [AC_MSG_ERROR([$BWRAP does not list required option --bind-fd in its --help])]) - AM_CONDITIONAL([WITH_SYSTEM_BWRAP], [true]) - else - AC_CHECK_LIB(cap, cap_from_text, CAP_LIB=-lcap) --- -2.46.0 - - -From 2772f19e50c0e809dde8cf3c105d90ee8baf4fa8 Mon Sep 17 00:00:00 2001 -From: Simon McVittie -Date: Wed, 14 Aug 2024 13:44:30 +0100 -Subject: [PATCH 4/4] persist directories: Pass using new bwrap --bind-fd - option - -Instead of passing a /proc/self/fd bind mount we use --bind-fd, which -has two advantages: - * bwrap closes the fd when used, so it doesn't leak into the started app - * bwrap ensures that what was mounted was the passed in fd (same dev/ino), - as there is a small (required) gap between symlink resolve and mount - where the target path could be replaced. - -Please note that this change requires an updated version of bubblewrap. - -Resolves: CVE-2024-42472, GHSA-7hgv-f2j8-xw87 -[smcv: Make whitespace consistent] -Co-authored-by: Simon McVittie -Signed-off-by: Simon McVittie ---- - common/flatpak-context.c | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -diff --git a/common/flatpak-context.c b/common/flatpak-context.c -index 8c784acf..baa62728 100644 ---- a/common/flatpak-context.c -+++ b/common/flatpak-context.c -@@ -2813,10 +2813,10 @@ flatpak_context_append_bwrap_filesystem (FlatpakContext *context, - continue; - } - -- g_autofree char *src_via_proc = g_strdup_printf ("/proc/self/fd/%d", src_fd); -+ g_autofree char *src_via_proc = g_strdup_printf ("%d", src_fd); - - flatpak_bwrap_add_fd (bwrap, glnx_steal_fd (&src_fd)); -- flatpak_bwrap_add_bind_arg (bwrap, "--bind", src_via_proc, dest); -+ flatpak_bwrap_add_bind_arg (bwrap, "--bind-fd", src_via_proc, dest); - } - } - --- -2.46.0 - diff --git a/SOURCES/flatpak-Revert-selinux-Permit-using-systemd-userdbd.patch b/SOURCES/flatpak-Revert-selinux-Permit-using-systemd-userdbd.patch deleted file mode 100644 index 8c9dd9f..0000000 --- a/SOURCES/flatpak-Revert-selinux-Permit-using-systemd-userdbd.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 1c73110795b865246ce3595042dcd2d5e7891359 Mon Sep 17 00:00:00 2001 -From: Debarshi Ray -Date: Mon, 6 Nov 2023 20:27:16 +0100 -Subject: [PATCH] Revert "selinux: Permit using systemd-userdbd" - -This reverts commit 399710ada185c1ee232bc3e6266a71688eb152b7. ---- - selinux/flatpak.te | 4 ---- - 1 file changed, 4 deletions(-) - -diff --git a/selinux/flatpak.te b/selinux/flatpak.te -index bb3d80e316eb..4cf895c44abe 100644 ---- a/selinux/flatpak.te -+++ b/selinux/flatpak.te -@@ -33,10 +33,6 @@ optional_policy(` - policykit_dbus_chat(flatpak_helper_t) - ') - --optional_policy(` -- systemd_userdbd_stream_connect(flatpak_helper_t) --') -- - optional_policy(` - unconfined_domain(flatpak_helper_t) - ') --- -2.41.0 - diff --git a/SPECS/flatpak.spec b/SPECS/flatpak.spec deleted file mode 100644 index 452dca7..0000000 --- a/SPECS/flatpak.spec +++ /dev/null @@ -1,588 +0,0 @@ -%global bubblewrap_version 0.4.0-2 -%global ostree_version 2020.8 - -Name: flatpak -Version: 1.12.9 -Release: 3%{?dist} -Summary: Application deployment framework for desktop apps - -License: LGPLv2+ -URL: http://flatpak.org/ -Source0: https://github.com/flatpak/flatpak/releases/download/%{version}/%{name}-%{version}.tar.xz - -%if 0%{?fedora} -# Add Fedora flatpak repositories -Source1: flatpak-add-fedora-repos.service -%endif - -# https://issues.redhat.com/browse/RHEL-4220 -Patch0: flatpak-Revert-selinux-Permit-using-systemd-userdbd.patch - -# Backported upstream patch for CVE-2024-42472 -Patch1: flatpak-1.12.x-CVE-2024-42472.patch - -BuildRequires: pkgconfig(appstream-glib) -BuildRequires: pkgconfig(dconf) -BuildRequires: pkgconfig(fuse) -BuildRequires: pkgconfig(gdk-pixbuf-2.0) -BuildRequires: pkgconfig(gio-unix-2.0) -BuildRequires: pkgconfig(gobject-introspection-1.0) >= 1.40.0 -BuildRequires: pkgconfig(gpgme) -BuildRequires: pkgconfig(json-glib-1.0) -BuildRequires: pkgconfig(libarchive) >= 2.8.0 -BuildRequires: pkgconfig(libseccomp) -BuildRequires: pkgconfig(libsoup-2.4) -BuildRequires: pkgconfig(libsystemd) -BuildRequires: pkgconfig(libxml-2.0) >= 2.4 -BuildRequires: pkgconfig(libzstd) >= 0.8.1 -BuildRequires: pkgconfig(ostree-1) >= %{ostree_version} -BuildRequires: pkgconfig(polkit-gobject-1) -BuildRequires: pkgconfig(xau) -BuildRequires: bison -BuildRequires: bubblewrap >= %{bubblewrap_version} -BuildRequires: docbook-dtds -BuildRequires: docbook-style-xsl -BuildRequires: gettext -BuildRequires: libassuan-devel -BuildRequires: libcap-devel -BuildRequires: python3-devel -BuildRequires: python3-pyparsing -BuildRequires: systemd -BuildRequires: /usr/bin/xmlto -BuildRequires: /usr/bin/xsltproc - -Requires: bubblewrap >= %{bubblewrap_version} -Requires: librsvg2%{?_isa} -Requires: ostree-libs%{?_isa} >= %{ostree_version} -# https://fedoraproject.org/wiki/SELinux/IndependentPolicy -Requires: (flatpak-selinux = %{?epoch:%{epoch}:}%{version}-%{release} if selinux-policy-targeted) -Requires: %{name}-session-helper%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release} -Recommends: p11-kit-server - -# Make sure the document portal is installed -%if 0%{?fedora} || 0%{?rhel} > 7 -Recommends: xdg-desktop-portal > 0.10 -# Remove in F30. -Conflicts: xdg-desktop-portal < 0.10 -%else -Requires: xdg-desktop-portal > 0.10 -%endif - -%description -flatpak is a system for building, distributing and running sandboxed desktop -applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for -more information. - -%package devel -Summary: Development files for %{name} -License: LGPLv2+ -Requires: %{name}%{?_isa} = %{version}-%{release} -Requires: %{name}-libs%{?_isa} = %{version}-%{release} - -%description devel -This package contains the pkg-config file and development headers for %{name}. - -%package libs -Summary: Libraries for %{name} -License: LGPLv2+ -Requires: bubblewrap >= %{bubblewrap_version} -Requires: ostree%{?_isa} >= %{ostree_version} -Requires(pre): /usr/sbin/useradd - -%description libs -This package contains libflatpak. - -%package selinux -Summary: SELinux policy module for %{name} -License: LGPLv2+ -BuildRequires: selinux-policy -BuildRequires: selinux-policy-devel -BuildArch: noarch -%{?selinux_requires} - -%description selinux -This package contains the SELinux policy module for %{name}. - -%package session-helper -Summary: User D-Bus service used by %{name} and others -License: LGPLv2+ -Conflicts: flatpak < 1.4.1-2 -Requires: systemd - -%description session-helper -This package contains the org.freedesktop.Flatpak user D-Bus service -that's used by %{name} and other packages. - -%package tests -Summary: Tests for %{name} -License: LGPLv2+ -Requires: %{name}%{?_isa} = %{version}-%{release} -Requires: %{name}-libs%{?_isa} = %{version}-%{release} -Requires: %{name}-session-helper%{?_isa} = %{version}-%{release} -Requires: bubblewrap >= %{bubblewrap_version} -Requires: ostree%{?_isa} >= %{ostree_version} - -%description tests -This package contains installed tests for %{name}. - - -%prep -%autosetup -p1 -# Make sure to use the RHEL-lifetime supported Python and no other -%py3_shebang_fix scripts/* subprojects/variant-schema-compiler/* tests/* - - -%build -(if ! test -x configure; then NOCONFIGURE=1 ./autogen.sh; CONFIGFLAGS=--enable-gtk-doc; fi; - # Generate consistent IDs between runs to avoid multilib problems. - export XMLTO_FLAGS="--stringparam generate.consistent.ids=1" - %configure \ - --enable-docbook-docs \ - --enable-installed-tests \ - --enable-selinux-module \ - --with-priv-mode=none \ - --with-system-bubblewrap \ - $CONFIGFLAGS) -%make_build V=1 - - -%install -%make_install -install -pm 644 NEWS README.md %{buildroot}/%{_pkgdocdir} -# The system repo is not installed by the flatpak build system. -install -d %{buildroot}%{_localstatedir}/lib/flatpak -install -d %{buildroot}%{_sysconfdir}/flatpak/remotes.d -rm -f %{buildroot}%{_libdir}/libflatpak.la - -%if 0%{?fedora} -install -D -t %{buildroot}%{_unitdir} %{SOURCE1} -%endif - -%find_lang %{name} - -# Work around selinux denials, see -# https://github.com/flatpak/flatpak/issues/4128 for details. Note that we are -# going to need the system env generator if we should enable malcontent support -# in the future. -rm %{buildroot}%{_systemd_system_env_generator_dir}/60-flatpak-system-only - -%pre -getent group flatpak >/dev/null || groupadd -r flatpak -getent passwd flatpak >/dev/null || \ - useradd -r -g flatpak -d / -s /sbin/nologin \ - -c "User for flatpak system helper" flatpak -exit 0 - - -%if 0%{?fedora} -%post -%systemd_post flatpak-add-fedora-repos.service -%endif - - -%post selinux -%selinux_modules_install %{_datadir}/selinux/packages/flatpak.pp.bz2 - - -%if 0%{?fedora} -%preun -%systemd_preun flatpak-add-fedora-repos.service -%endif - - -%if 0%{?fedora} -%postun -%systemd_postun_with_restart flatpak-add-fedora-repos.service -%endif - - -%postun selinux -if [ $1 -eq 0 ]; then - %selinux_modules_uninstall %{_datadir}/selinux/packages/flatpak.pp.bz2 -fi - - -%ldconfig_scriptlets libs - - -%files -f %{name}.lang -%license COPYING -# Comply with the packaging guidelines about not mixing relative and absolute -# paths in doc. -%doc %{_pkgdocdir} -%{_bindir}/flatpak -%{_bindir}/flatpak-bisect -%{_bindir}/flatpak-coredumpctl -%{_datadir}/bash-completion -%{_datadir}/dbus-1/interfaces/org.freedesktop.portal.Flatpak.xml -%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.Authenticator.xml -%{_datadir}/dbus-1/services/org.flatpak.Authenticator.Oci.service -%{_datadir}/dbus-1/services/org.freedesktop.portal.Flatpak.service -%{_datadir}/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service -%{_datadir}/fish -%{_datadir}/%{name} -%{_datadir}/polkit-1/actions/org.freedesktop.Flatpak.policy -%{_datadir}/polkit-1/rules.d/org.freedesktop.Flatpak.rules -%{_datadir}/zsh/site-functions -%{_libexecdir}/flatpak-dbus-proxy -%{_libexecdir}/flatpak-oci-authenticator -%{_libexecdir}/flatpak-portal -%{_libexecdir}/flatpak-system-helper -%{_libexecdir}/flatpak-validate-icon -%{_libexecdir}/revokefs-fuse -%dir %{_localstatedir}/lib/flatpak -%{_mandir}/man1/%{name}*.1* -%{_mandir}/man5/%{name}-metadata.5* -%{_mandir}/man5/flatpak-flatpakref.5* -%{_mandir}/man5/flatpak-flatpakrepo.5* -%{_mandir}/man5/flatpak-installation.5* -%{_mandir}/man5/flatpak-remote.5* -%{_sysconfdir}/dbus-1/system.d/org.freedesktop.Flatpak.SystemHelper.conf -%dir %{_sysconfdir}/flatpak -%{_sysconfdir}/flatpak/remotes.d -%{_sysconfdir}/profile.d/flatpak.sh -%{_sysusersdir}/flatpak.conf -%{_unitdir}/flatpak-system-helper.service -%{_userunitdir}/flatpak-oci-authenticator.service -%{_userunitdir}/flatpak-portal.service -%{_systemd_user_env_generator_dir}/60-flatpak - -%if 0%{?fedora} -%{_unitdir}/flatpak-add-fedora-repos.service -%endif - -%files devel -%{_datadir}/gir-1.0/Flatpak-1.0.gir -%{_datadir}/gtk-doc/ -%{_includedir}/%{name}/ -%{_libdir}/libflatpak.so -%{_libdir}/pkgconfig/%{name}.pc - -%files libs -%license COPYING -%{_libdir}/girepository-1.0/Flatpak-1.0.typelib -%{_libdir}/libflatpak.so.* - -%files selinux -%{_datadir}/selinux/packages/flatpak.pp.bz2 -%{_datadir}/selinux/devel/include/contrib/flatpak.if - -%files session-helper -%license COPYING -%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.xml -%{_datadir}/dbus-1/services/org.freedesktop.Flatpak.service -%{_libexecdir}/flatpak-session-helper -%{_userunitdir}/flatpak-session-helper.service - -%files tests -%{_datadir}/installed-tests -%{_libexecdir}/installed-tests - - -%changelog -* Wed Sep 04 2024 Kalev Lember - 1.12.9-3 -- Fix previous changelog entry - -* Mon Sep 02 2024 Kalev Lember - 1.12.9-2 -- Backport upstream patches for CVE-2024-42472 -- Require bubblewrap version that has new --bind-fd option backported for - addressing CVE-2024-42472 - -* Tue Apr 30 2024 Kalev Lember - 1.12.9-1 -- Update to 1.12.9 (CVE-2024-32462) - -* Mon Nov 06 2023 Debarshi Ray - 1.12.8-1 -- Rebase to 1.12.8 (RHEL-4220) - -* Mon Nov 06 2023 Debarshi Ray - 1.10.8-3 -- Let flatpak own %%{_sysconfdir}/flatpak (RHEL-15822) - -* Mon Sep 04 2023 Miro Hrončok - 1.10.8-2 -- Make sure to use the RHEL-lifetime supported Python and no other (RHEL-2225) - -* Tue Jul 11 2023 Debarshi Ray - 1.10.8-1 -- Rebase to 1.10.8 (#2222103) -- Fix CVE-2023-28100 and CVE-2023-28101 (#2180311) - -* Wed Mar 09 2022 Debarshi Ray - 1.10.7-1 -- Rebase to 1.10.7 (#2062417) - -* Thu Feb 03 2022 Debarshi Ray - 1.8.7-1 -- Rebase to 1.8.7 (#2041972) - -* Tue Jan 25 2022 Debarshi Ray - 1.8.6-1 -- Rebase to 1.8.6 (#2010533) - -* Tue Oct 26 2021 Debarshi Ray - 1.8.5-6 -- Fix CVE-2021-41133 (#2012869) - -* Tue Oct 05 2021 Debarshi Ray - 1.8.5-5 -- Disable gvfs plugins when listing flatpak installations (#1980438) - -* Wed Jul 28 2021 Tomas Popela - 1.8.5-4 -- Ship flatpak-devel in CRB (#1938064) - -* Mon Mar 22 2021 David King - 1.8.5-3 -- Fix CVE-2021-21381 (#1938064) - -* Mon Jan 25 2021 David King - 1.8.5-2 -- Apply post-release CVE fixes (#1918776) - -* Thu Jan 14 2021 David King - 1.8.5-1 -- Rebase to 1.8.5 (#1851958) - -* Tue Nov 17 2020 David King - 1.8.3-1 -- Rebase to 1.8.3 (#1851958) - -* Mon Oct 05 2020 David King - 1.8.2-1 -- Rebase to 1.8.2 (#1851958) - -* Mon Sep 14 2020 Kalev Lember - 1.6.2-4 -- OCI: extract appstream data for runtimes (#1878231) - -* Wed Jun 17 2020 David King - 1.6.2-3 -- Further fixes for OCI authenticator (#1847201) - -* Fri Mar 20 2020 David King - 1.6.2-2 -- Fixes for OCI authenticator (#1814045) - -* Thu Feb 13 2020 David King - 1.6.2-1 -- Rebase to 1.6.2 (#1775339) - -* Thu Jan 23 2020 David King - 1.6.1-1 -- Rebase to 1.6.1 (#1775339) - -* Fri Jan 17 2020 David King - 1.6.0-2 -- Remove broken python3 sed hack (#1775339) - -* Sat Dec 21 2019 David King - 1.6.0-1 -- Rebase to 1.6.0 (#1775339) - -* Fri Nov 08 2019 David King - 1.4.3-2 -- Use %%{?selinux_requires} for proper install ordering - -* Tue Oct 08 2019 David King - 1.4.3-1 -- Rebase to 1.4.3 (#1748276) - -* Fri Sep 20 2019 Kalev Lember - 1.0.9-1 -- Update to 1.0.9 (#1753613) - -* Tue May 14 2019 David King - 1.0.6-4 -- Bump release (#1700654) - -* Mon Apr 29 2019 David King - 1.0.6-3 -- Fix IOCSTI sandbox bypass (#1700654) - -* Wed Feb 13 2019 David King - 1.0.6-2 -- Do not mount /proc in root sandbox (#1675776) - -* Tue Dec 18 2018 Kalev Lember - 1.0.6-1 -- Update to 1.0.6 (#1630249) -- Recommend p11-kit-server instead of just p11-kit (#1649049) - -* Mon Dec 10 2018 David King - 1.0.4-2 -- Backport patches to improve OCI support (#1657306) - -* Fri Oct 12 2018 Kalev Lember - 1.0.4-1 -- Update to 1.0.4 (#1630249) - -* Thu Sep 13 2018 Kalev Lember - 1.0.2-1 -- Update to 1.0.2 (#1630249) - -* Tue Aug 28 2018 David King - 1.0.1-1 -- Update to 1.0.1 (#1621401) - -* Wed Aug 01 2018 David King - 0.99.3-1 -- Update to 0.99.3 - -* Wed May 23 2018 Adam Jackson - 0.11.7-2 -- Remove Requires: kernel >= 4.0.4-202, which corresponds to rawhide - somewhere before Fedora 22 which this spec file certainly no longer - supports. - -* Thu May 03 2018 Kalev Lember - 0.11.7-1 -- Update to 0.11.7 - -* Wed May 02 2018 Kalev Lember - 0.11.6-1 -- Update to 0.11.6 - -* Wed May 02 2018 Kalev Lember - 0.11.5-2 -- Backport a fix for a gnome-software crash installing .flatpakref files - -* Mon Apr 30 2018 David King - 0.11.5-1 -- Update to 0.11.5 - -* Thu Apr 26 2018 Kalev Lember - 0.11.4-1 -- Update to 0.11.4 - -* Mon Feb 19 2018 David King - 0.11.3-1 -- Update to 0.11.3 - -* Mon Feb 19 2018 David King - 0.11.2-1 -- Update to 0.11.2 - -* Wed Feb 14 2018 David King - 0.11.1-1 -- Update to 0.11.1 (#1545224) - -* Wed Feb 07 2018 Fedora Release Engineering - 0.10.3-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Fri Feb 02 2018 Igor Gnatenko - 0.10.3-2 -- Switch to %%ldconfig_scriptlets - -* Tue Jan 30 2018 Kalev Lember - 0.10.3-1 -- Update to 0.10.3 - -* Thu Dec 21 2017 David King - 0.10.2.1-1 -- Update to 0.10.2.1 - -* Fri Dec 15 2017 Kalev Lember - 0.10.2-1 -- Update to 0.10.2 - -* Fri Nov 24 2017 David King - 0.10.1-1 -- Update to 0.10.1 - -* Thu Oct 26 2017 Kalev Lember - 0.10.0-1 -- Update to 0.10.0 - -* Mon Oct 09 2017 Kalev Lember - 0.9.99-1 -- Update to 0.9.99 - -* Tue Sep 26 2017 Kalev Lember - 0.9.98.2-1 -- Update to 0.9.98.2 - -* Tue Sep 26 2017 Kalev Lember - 0.9.98.1-1 -- Update to 0.9.98.1 - -* Mon Sep 25 2017 Kalev Lember - 0.9.98-1 -- Update to 0.9.98 - -* Thu Sep 14 2017 Kalev Lember - 0.9.12-1 -- Update to 0.9.12 - -* Wed Sep 13 2017 Kalev Lember - 0.9.11-1 -- Update to 0.9.11 - -* Mon Sep 04 2017 Kalev Lember - 0.9.10-1 -- Update to 0.9.10 -- Split out flatpak-builder to a separate source package - -* Fri Aug 25 2017 Kalev Lember - 0.9.8-2 -- Backport a patch to fix regression in --devel - -* Mon Aug 21 2017 David King - 0.9.8-1 -- Update to 0.9.8 - -* Wed Aug 02 2017 Fedora Release Engineering - 0.9.7-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - -* Sun Jul 30 2017 Florian Weimer - 0.9.7-4 -- Rebuild with binutils fix for ppc64le (#1475636) - -* Thu Jul 27 2017 Owen Taylor - 0.9.7-3 -- Add a patch to fix OCI refname annotation - -* Wed Jul 26 2017 Fedora Release Engineering - 0.9.7-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Sat Jul 01 2017 David King - 0.9.7-1 -- Update to 0.9.7 (#1466970) - -* Tue Jun 20 2017 David King - 0.9.6-1 -- Update to 0.9.6 - -* Sat Jun 10 2017 David King - 0.9.5-1 -- Update to 0.9.5 (#1460437) - -* Tue May 23 2017 David King - 0.9.4-1 -- Update to 0.9.4 (#1454750) - -* Mon Apr 24 2017 David King - 0.9.3-1 -- Update to 0.9.3 - -* Fri Apr 07 2017 David King - 0.9.2-2 -- Add eu-strip dependency for flatpak-builder - -* Wed Apr 05 2017 Kalev Lember - 0.9.2-1 -- Update to 0.9.2 - -* Wed Mar 15 2017 Kalev Lember - 0.9.1-1 -- Update to 0.9.1 - -* Fri Mar 10 2017 Kalev Lember - 0.8.4-1 -- Update to 0.8.4 - -* Sun Feb 19 2017 David King - 0.8.3-3 -- Make flatpak-builder require bzip2 (#1424857) - -* Wed Feb 15 2017 Kalev Lember - 0.8.3-2 -- Avoid pulling in all of ostree and only depend on ostree-libs subpackage - -* Tue Feb 14 2017 Kalev Lember - 0.8.3-1 -- Update to 0.8.3 - -* Fri Feb 10 2017 Fedora Release Engineering - 0.8.2-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Fri Jan 27 2017 Kalev Lember - 0.8.2-1 -- Update to 0.8.2 - -* Wed Jan 18 2017 David King - 0.8.1-1 -- Update to 0.8.1 - -* Tue Dec 20 2016 Kalev Lember - 0.8.0-1 -- Update to 0.8.0 - -* Tue Nov 29 2016 David King - 0.6.14-2 -- Add a patch to fix a GNOME Software crash -- Silence repository listing during post - -* Tue Nov 29 2016 Kalev Lember - 0.6.14-1 -- Update to 0.6.14 - -* Wed Oct 26 2016 David King - 0.6.13-2 -- Add empty /etc/flatpak/remotes.d - -* Tue Oct 25 2016 David King - 0.6.13-1 -- Update to 0.6.13 - -* Thu Oct 06 2016 David King - 0.6.12-1 -- Update to 0.6.12 - -* Tue Sep 20 2016 Kalev Lember - 0.6.11-1 -- Update to 0.6.11 -- Set minimum ostree and bubblewrap versions - -* Mon Sep 12 2016 David King - 0.6.10-1 -- Update to 0.6.10 - -* Tue Sep 06 2016 David King - 0.6.9-2 -- Look for bwrap in PATH - -* Thu Aug 25 2016 David King - 0.6.9-1 -- Update to 0.6.9 - -* Mon Aug 01 2016 David King - 0.6.8-1 -- Update to 0.6.8 (#1361823) - -* Thu Jul 21 2016 David King - 0.6.7-2 -- Use system bubblewrap - -* Fri Jul 01 2016 David King - 0.6.7-1 -- Update to 0.6.7 - -* Thu Jun 23 2016 David King - 0.6.6-1 -- Update to 0.6.6 - -* Fri Jun 10 2016 David King - 0.6.5-1 -- Update to 0.6.5 - -* Wed Jun 01 2016 David King - 0.6.4-1 -- Update to 0.6.4 - -* Tue May 31 2016 David King - 0.6.3-1 -- Update to 0.6.3 -- Move bwrap to main package - -* Tue May 24 2016 David King - 0.6.2-1 -- Rename from xdg-app to flatpak (#1337434) diff --git a/flatpak.spec b/flatpak.spec new file mode 100644 index 0000000..6a98b1d --- /dev/null +++ b/flatpak.spec @@ -0,0 +1,881 @@ +%global appstream_version 1.0.0~ +%global bubblewrap_version 0.8.0 +%global glib_version 2.46.0 +%global gpgme_version 1.8.0 +%global libcurl_version 7.29.0 +%global ostree_version 2020.8 +%global wayland_protocols_version 1.32 +%global wayland_scanner_version 1.15 + +# Disable parental control for RHEL builds +%bcond malcontent %[!0%{?rhel}] + +Name: flatpak +Version: 1.15.8 +Release: 2%{?dist} +Summary: Application deployment framework for desktop apps + +License: LGPL-2.1-or-later +URL: https://flatpak.org/ +Source0: https://github.com/flatpak/flatpak/releases/download/%{version}/%{name}-%{version}.tar.xz + +%if 0%{?fedora} +# Add Fedora flatpak repositories +Source1: flatpak-add-fedora-repos.service +%endif + +# systemd-sysusers config. Only used for the %%pre macro. Must be kept in sync +# with the config from upstream sources. +Source2: flatpak.sysusers.conf + +# ostree not on i686 for RHEL 10 +# https://github.com/containers/composefs/pull/229#issuecomment-1838735764 +%if 0%{?rhel} >= 10 +ExcludeArch: %{ix86} +%endif + +BuildRequires: pkgconfig(appstream) >= %{appstream_version} +BuildRequires: pkgconfig(dconf) +BuildRequires: pkgconfig(fuse3) +BuildRequires: pkgconfig(gdk-pixbuf-2.0) +BuildRequires: pkgconfig(gio-unix-2.0) >= %{glib_version} +BuildRequires: pkgconfig(gobject-introspection-1.0) >= 1.40.0 +BuildRequires: pkgconfig(gpgme) >= %{gpgme_version} +BuildRequires: pkgconfig(json-glib-1.0) +BuildRequires: pkgconfig(libarchive) >= 2.8.0 +BuildRequires: pkgconfig(libseccomp) +BuildRequires: pkgconfig(libcurl) >= %{libcurl_version} +BuildRequires: pkgconfig(libsystemd) +BuildRequires: pkgconfig(libxml-2.0) >= 2.4 +BuildRequires: pkgconfig(libzstd) >= 0.8.1 +%if %{with malcontent} +BuildRequires: pkgconfig(malcontent-0) +%endif +BuildRequires: pkgconfig(ostree-1) >= %{ostree_version} +BuildRequires: pkgconfig(polkit-gobject-1) +BuildRequires: pkgconfig(wayland-client) +BuildRequires: pkgconfig(wayland-protocols) >= %{wayland_protocols_version} +BuildRequires: pkgconfig(wayland-scanner) >= %{wayland_scanner_version} +BuildRequires: pkgconfig(xau) +BuildRequires: bison +BuildRequires: bubblewrap >= %{bubblewrap_version} +BuildRequires: docbook-dtds +BuildRequires: docbook-style-xsl +BuildRequires: gettext-devel +BuildRequires: gtk-doc +BuildRequires: libcap-devel +BuildRequires: meson +BuildRequires: python3-pyparsing +BuildRequires: systemd +BuildRequires: systemd-rpm-macros +BuildRequires: /usr/bin/fusermount3 +BuildRequires: /usr/bin/pkcheck +BuildRequires: /usr/bin/socat +BuildRequires: /usr/bin/xdg-dbus-proxy +BuildRequires: /usr/bin/xmlto +BuildRequires: /usr/bin/xsltproc + +%{?sysusers_requires_compat} + +Requires: appstream%{?_isa} >= %{appstream_version} +Requires: bubblewrap >= %{bubblewrap_version} +Requires: glib2%{?_isa} >= %{glib_version} +Requires: libcurl%{?_isa} >= %{libcurl_version} +Requires: librsvg2%{?_isa} +Requires: ostree-libs%{?_isa} >= %{ostree_version} +Requires: /usr/bin/fusermount3 +Requires: /usr/bin/xdg-dbus-proxy +# https://fedoraproject.org/wiki/SELinux/IndependentPolicy +Requires: (flatpak-selinux = %{?epoch:%{epoch}:}%{version}-%{release} if selinux-policy-targeted) +Requires: %{name}-session-helper%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release} +Recommends: p11-kit-server + +# Make sure the document portal is installed +%if 0%{?fedora} || 0%{?rhel} > 7 +Recommends: xdg-desktop-portal > 0.10 +%else +Requires: xdg-desktop-portal > 0.10 +%endif + +%description +flatpak is a system for building, distributing and running sandboxed desktop +applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for +more information. + +%package devel +Summary: Development files for %{name} +Requires: %{name}%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release} +Requires: %{name}-libs%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release} + +%description devel +This package contains the pkg-config file and development headers for %{name}. + +%package libs +Summary: Libraries for %{name} +Requires: bubblewrap >= %{bubblewrap_version} +# We can assume ostree is installed on ostree systems +# So do not enforce it on non-ostree ones +Requires: ostree-libs%{?_isa} >= %{ostree_version} + +%description libs +This package contains libflatpak. + +%package selinux +Summary: SELinux policy module for %{name} +BuildRequires: selinux-policy +BuildRequires: selinux-policy-devel +BuildRequires: make +BuildArch: noarch +%{?selinux_requires} + +%description selinux +This package contains the SELinux policy module for %{name}. + +%package session-helper +Summary: User D-Bus service used by %{name} and others +Conflicts: flatpak < 1.4.1-2 +Requires: systemd + +%description session-helper +This package contains the org.freedesktop.Flatpak user D-Bus service +that's used by %{name} and other packages. + +%package tests +Summary: Tests for %{name} +Requires: %{name}%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release} +Requires: %{name}-libs%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release} +Requires: %{name}-session-helper%{?_isa} = %{?epoch:%{epoch}:}%{version}-%{release} +Requires: bubblewrap >= %{bubblewrap_version} +Requires: ostree%{?_isa} >= %{ostree_version} + +%description tests +This package contains installed tests for %{name}. + + +%prep +%autosetup -p1 + + +%build +%meson \ + -Dinstalled_tests=true \ + -Dsystem_bubblewrap=/usr/bin/bwrap \ + -Dsystem_dbus_proxy=/usr/bin/xdg-dbus-proxy \ + -Dtmpfilesdir=%{_tmpfilesdir} \ +%if %{with malcontent} + -Dmalcontent=enabled \ +%else + -Dmalcontent=disabled \ +%endif + -Dwayland_security_context=enabled \ + %{nil} +%meson_build + + +%install +%meson_install +install -pm 644 NEWS README.md %{buildroot}/%{_pkgdocdir} +# The system repo is not installed by the flatpak build system. +install -d %{buildroot}%{_localstatedir}/lib/flatpak +install -d %{buildroot}%{_sysconfdir}/flatpak/remotes.d + +%if 0%{?fedora} +install -D -t %{buildroot}%{_unitdir} %{SOURCE1} +%endif + +%find_lang %{name} + +%pre +%sysusers_create_compat %{SOURCE2} + + +%if 0%{?fedora} +%post +%systemd_post flatpak-add-fedora-repos.service +%endif + + +%post selinux +%selinux_modules_install %{_datadir}/selinux/packages/flatpak.pp.bz2 + + +%if 0%{?fedora} +%preun +%systemd_preun flatpak-add-fedora-repos.service +%endif + + +%if 0%{?fedora} +%postun +%systemd_postun_with_restart flatpak-add-fedora-repos.service +%endif + + +%postun selinux +if [ $1 -eq 0 ]; then + %selinux_modules_uninstall %{_datadir}/selinux/packages/flatpak.pp.bz2 +fi + + +%files -f %{name}.lang +%license COPYING +# Comply with the packaging guidelines about not mixing relative and absolute +# paths in doc. +%doc %{_pkgdocdir} +%{_bindir}/flatpak +%{_bindir}/flatpak-bisect +%{_bindir}/flatpak-coredumpctl +%{_datadir}/bash-completion +%{_datadir}/dbus-1/interfaces/org.freedesktop.portal.Flatpak.xml +%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.Authenticator.xml +%{_datadir}/dbus-1/services/org.flatpak.Authenticator.Oci.service +%{_datadir}/dbus-1/services/org.freedesktop.portal.Flatpak.service +%{_datadir}/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service +%{_datadir}/fish/ +%{_datadir}/%{name} +%{_datadir}/polkit-1/actions/org.freedesktop.Flatpak.policy +%{_datadir}/polkit-1/rules.d/org.freedesktop.Flatpak.rules +%{_datadir}/zsh/site-functions +%{_libexecdir}/flatpak-oci-authenticator +%{_libexecdir}/flatpak-portal +%{_libexecdir}/flatpak-system-helper +%{_libexecdir}/flatpak-validate-icon +%{_libexecdir}/revokefs-fuse +%dir %{_localstatedir}/lib/flatpak +%{_mandir}/man1/%{name}*.1* +%{_mandir}/man5/%{name}-metadata.5* +%{_mandir}/man5/flatpak-flatpakref.5* +%{_mandir}/man5/flatpak-flatpakrepo.5* +%{_mandir}/man5/flatpak-installation.5* +%{_mandir}/man5/flatpak-remote.5* +%{_mandir}/man5/flatpakref.5* +%{_mandir}/man5/flatpakrepo.5* +%{_sysconfdir}/dbus-1/system.d/org.freedesktop.Flatpak.SystemHelper.conf +%dir %{_sysconfdir}/flatpak +%{_sysconfdir}/flatpak/remotes.d +%{_sysconfdir}/profile.d/flatpak.sh +%{_sysusersdir}/%{name}.conf +%{_unitdir}/flatpak-system-helper.service +%{_userunitdir}/flatpak-oci-authenticator.service +%{_userunitdir}/flatpak-portal.service +%{_systemd_system_env_generator_dir}/60-flatpak-system-only +%{_systemd_user_env_generator_dir}/60-flatpak +%{_tmpfilesdir}/%{name}.conf + +%if 0%{?fedora} +%{_unitdir}/flatpak-add-fedora-repos.service +%endif + +%files devel +%{_datadir}/gir-1.0/Flatpak-1.0.gir +%{_datadir}/gtk-doc/ +%{_includedir}/%{name}/ +%{_libdir}/libflatpak.so +%{_libdir}/pkgconfig/%{name}.pc + +%files libs +%license COPYING +%{_libdir}/girepository-1.0/Flatpak-1.0.typelib +%{_libdir}/libflatpak.so.* + +%files selinux +%{_datadir}/selinux/packages/flatpak.pp.bz2 +%{_datadir}/selinux/devel/include/contrib/flatpak.if + +%files session-helper +%license COPYING +%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.xml +%{_datadir}/dbus-1/services/org.freedesktop.Flatpak.service +%{_libexecdir}/flatpak-session-helper +%{_userunitdir}/flatpak-session-helper.service + +%files tests +%{_datadir}/installed-tests +%{_libexecdir}/installed-tests + + +%changelog +* Mon Jun 24 2024 Troy Dawson - 1.15.8-2 +- Bump release for June 2024 mass rebuild + +* Fri Jun 07 2024 Kalev Lember - 1.15.8-1 +- Update to 1.15.8 (CVE-2024-32462) + +* Wed Jan 24 2024 Fedora Release Engineering - 1.15.6-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Fri Jan 19 2024 Fedora Release Engineering - 1.15.6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Thu Nov 16 2023 Debarshi Ray - 1.15.6-1 +- Update to 1.15.6 (#2249763) + +* Tue Nov 07 2023 Neal Gompa - 1.15.4-5 +- Fix appstream_version macro for prerelease appstream 1.0 package + +* Tue Nov 07 2023 Debarshi Ray - 1.15.4-4 +- Adjust to Appstream 1.0 API changes +- Fix Appstream regression in 'remote-info' + +* Wed Jul 19 2023 Fedora Release Engineering - 1.15.4-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + +* Thu Jun 22 2023 Tomas Popela - 1.15.4-2 +- Disable parental control support (through malcontent) on RHEL + +* Fri Mar 17 2023 David King - 1.15.4-1 +- Update to 1.15.4 + +* Thu Feb 23 2023 David King - 1.15.3-1 +- Update to 1.15.3 (#2120890) + +* Thu Jan 19 2023 Fedora Release Engineering - 1.15.1-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + +* Fri Jan 06 2023 David King - 1.15.1-2 +- Require fusermount (#2158474) + +* Tue Dec 13 2022 David King - 1.15.1-1 +- Update to 1.15.1 + +* Thu Dec 08 2022 David King - 1.14.1-1 +- Update to 1.14.1 (#2151850) + +* Thu Sep 15 2022 Michael Catanzaro - 1.14.0-2 +- Refresh gssproxy patch to use new socket path + +* Wed Sep 07 2022 Kalev Lember - 1.14.0-1 +- Update to 1.14.0 + +* Fri Aug 19 2022 Debarshi Ray - 1.13.3-6 +- Use %%sysusers_requires_compat to match %%sysusers_create_compat + +* Thu Jul 21 2022 Fedora Release Engineering - 1.13.3-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + +* Thu Jul 14 2022 Debarshi Ray - 1.13.3-4 +- Avoid SELinux denials caused by reading symbolic links in /var/lib/flatpak + +* Sun Jun 26 2022 Ralf Corsépius - 1.13.3-3 +- Let flatpak own %%{_sysconfdir}/flatpak (RHBZ#2101073). + +* Fri Jun 17 2022 David King - 1.13.3-2 +- Add gssproxy support + +* Fri Jun 17 2022 Debarshi Ray - 1.13.3-1 +- Update to 1.13.3 +- Remove downstream patch for gssproxy support until it gets rebased + +* Tue Jun 07 2022 David King - 1.13.2-4 +- Add gssproxy support + +* Tue May 17 2022 Timothée Ravier - 1.13.2-3 +- Use sysusers_create_compat macro to create user & group. + +* Tue Apr 12 2022 Debarshi Ray - 1.13.2-2 +- Avoid SELinux denials caused by read access to /etc/passwd, watching files + inside /usr/libexec and read access to /var/lib/flatpak + +* Thu Mar 17 2022 Debarshi Ray - 1.13.2-1 +- Update to 1.13.2 (#2064038) + +* Sat Mar 12 2022 Debarshi Ray - 1.13.1-1 +- Update to 1.13.1 (#2059784) + +* Wed Mar 02 2022 Debarshi Ray - 1.12.6-2 +- Specify the %%{epoch} consistently + +* Fri Feb 25 2022 Debarshi Ray - 1.12.6-1 +- Update to 1.12.6 (#2053655) + +* Mon Feb 14 2022 Debarshi Ray - 1.12.5-1 +- Update to 1.12.5 (#2032528) + +* Tue Feb 08 2022 Debarshi Ray - 1.12.4-2 +- Don't try to add Fedora's OCI Flatpak repository on RHEL +- Remove an obsolete Fedora-specific update path + +* Thu Jan 20 2022 Fedora Release Engineering - 1.12.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Tue Jan 18 2022 Debarshi Ray - 1.12.4-1 +- Update to 1.12.4 (#2042071) + +* Fri Jan 14 2022 Debarshi Ray - 1.12.3-1 +- Update to 1.12.3 (#2040094) + +* Wed Oct 13 2021 David King - 1.12.2-1 +- Update to 1.12.2 (#2013492) + +* Fri Oct 08 2021 David King - 1.12.1-1 +- Update to 1.12.1 (#2012273) + +* Fri Oct 08 2021 David King - 1.12.0-1 +- Update to 1.12.0 (#2012246) + +* Thu Sep 09 2021 Kalev Lember - 1.11.3-2 +- Enable malcontent support + +* Wed Aug 25 2021 Kalev Lember - 1.11.3-1 +- Update to 1.11.3 + +* Wed Jul 21 2021 Fedora Release Engineering - 1.11.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Wed Jul 14 2021 David King - 1.11.2-1 +- Update to 1.11.2 (#1973591) + +* Thu May 13 2021 Jeff Law - 1.11.1-2 +- Re-enable LTO + +* Tue Apr 27 2021 David King - 1.11.1-1 +- Update to 1.11.1 (#1953833) + +* Wed Apr 14 2021 Kalev Lember - 1.10.2-3 +- Disable system env generator to work around selinux denials (#1947214) + +* Mon Apr 05 2021 Kalev Lember - 1.10.2-2 +- OCI: Switch to pax format for tar archives + +* Wed Mar 10 2021 Kalev Lember - 1.10.2-1 +- Update to 1.10.2 + +* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek - 1.10.1-4 +- Rebuilt for updated systemd-rpm-macros + See https://pagure.io/fesco/issue/2583. + +* Fri Feb 12 2021 Kalev Lember - 1.10.1-3 +- Add G_BEGIN_DECLS/G_END_DECLS to public headers (#1927439) +- Drop unneeded ldconfig_scriptlets macro call + +* Tue Jan 26 2021 Fedora Release Engineering - 1.10.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Thu Jan 21 2021 Kalev Lember - 1.10.1-1 +- Update to 1.10.1 + +* Thu Jan 14 2021 Kalev Lember - 1.10.0-1 +- Update to 1.10.0 + +* Mon Jan 11 2021 Kalev Lember - 1.9.3-2 +- Use "Fedora Flatpaks" as the visible repo name + +* Tue Dec 22 2020 David King - 1.9.3-1 +- Update to 1.9.3 (#1910054) + +* Fri Nov 20 2020 Kalev Lember - 1.9.2-1 +- Update to 1.9.2 + +* Thu Nov 19 2020 Kalev Lember - 1.9.1-1 +- Update to 1.9.1 + +* Wed Nov 18 2020 David King - 1.8.3-2 +- Drop obsolete Requires on system-release + +* Tue Nov 17 2020 Kalev Lember - 1.8.3-1 +- Update to 1.8.3 + +* Sat Oct 31 2020 Jeff Law - 1.8.2-3 +- Fix bogus volatiles caught by gcc-11 + +* Fri Sep 11 2020 Kalev Lember - 1.8.2-2 +- Backport various OCI fixes from upstream + +* Fri Aug 21 2020 Kalev Lember - 1.8.2-1 +- Update to 1.8.2 + +* Mon Jul 27 2020 Fedora Release Engineering - 1.8.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Fri Jul 03 2020 David King - 1.8.1-1 +- Update to 1.8.1 (#1853667) + +* Tue Jun 30 2020 Jeff Law - 1.8.0-2 +- Disable LTO + +* Wed Jun 24 2020 David King - 1.8.0-1 +- Update to 1.8.0 (#1850676) + +* Wed Jun 10 2020 David King - 1.7.3-1 +- Update to 1.7.3 (#1820762) + +* Fri Apr 03 2020 Kalev Lember - 1.7.2-1 +- Update to 1.7.2 + +* Mon Mar 30 2020 David King - 1.7.1-1 +- Update to 1.7.1 (#1818882) + +* Mon Mar 30 2020 Kalev Lember - 1.6.3-1 +- Update to 1.6.3 + +* Thu Feb 13 2020 David King - 1.6.2-1 +- Update to 1.6.2 (#1802609) + +* Tue Jan 28 2020 Fedora Release Engineering - 1.6.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Thu Jan 23 2020 David King - 1.6.1-1 +- Update to 1.6.1 + +* Fri Jan 17 2020 David King - 1.6.0-2 +- Remove broken python3 sed hack + +* Fri Dec 20 2019 David King - 1.6.0-1 +- Update to 1.6.0 + +* Mon Dec 16 2019 David King - 1.5.2-1 +- Update to 1.5.2 + +* Thu Nov 28 2019 David King - 1.5.1-1 +- Update to 1.5.1 + +* Fri Nov 01 2019 Orion Poplawski - 1.5.0-2 +- Use %%{?selinux_requires} for proper install ordering + +* Thu Oct 03 2019 David King - 1.5.0-1 +- Update to 1.5.0 + +* Thu Sep 19 2019 Kalev Lember - 1.4.3-1 +- Update to 1.4.3 + +* Wed Sep 18 2019 Debarshi Ray - 1.4.2-6 +- Trim unused shared library linkages from the session helper + +* Wed Aug 7 2019 Owen Taylor - 1.4.2-5 +- Add patch fixing problem with downloading icons for OCI remotes (#1683375) + +* Thu Jul 25 2019 Tim Zabel - 1.4.2-4 +- SELinux needs additional Requires (#1732132) + +* Thu Jul 25 2019 Fedora Release Engineering - 1.4.2-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Tue Jul 09 2019 Kalev Lember - 1.4.2-2 +- Backport a patch that fixes a fairly large memory leak in gnome-software + +* Fri Jun 28 2019 David King - 1.4.2-1 +- Update to 1.4.2 (#1725071) + +* Tue Jun 25 2019 David King - 1.4.1-3 +- Use Requires(post) for selinux-policy (#1723118) + +* Tue Jun 25 2019 Debarshi Ray - 1.4.1-2 +- Split the session helper into a separate sub-package + +* Thu Jun 13 2019 Kalev Lember - 1.4.1-1 +- Update to 1.4.1 + +* Wed Jun 12 2019 Kalev Lember - 1.4.0-2 +- Backport an upstream patch to fix gnome-software CI + +* Tue May 28 2019 Kalev Lember - 1.4.0-1 +- Update to 1.4.0 + +* Fri May 10 2019 Kalev Lember - 1.3.4-1 +- Update to 1.3.4 + +* Tue Apr 30 2019 David King - 1.3.3-2 +- Generate consistent anchor IDs + +* Fri Apr 26 2019 David King - 1.3.3-1 +- Update to 1.3.3 (#1699338) + +* Wed Apr 17 2019 Igor Gnatenko - 1.3.2-2 +- Fixup selinux requires + +* Fri Apr 12 2019 David King - 1.3.2-1 +- Update to 1.3.2 (#1699338) + +* Wed Apr 03 2019 Kalev Lember - 1.3.1-2 +- Add a oneshot systemd service to add Fedora flatpak repos +- Remove the post script to create system repo now that we have the service + +* Wed Mar 27 2019 David King - 1.3.1-1 +- Update to 1.3.1 (#1693207) + +* Tue Mar 12 2019 David King - 1.3.0-1 +- Update to 1.3.0 + +* Thu Feb 14 2019 David King - 1.2.3-2 +- Remove an obsolete Conflicts +- Use xdg-dbus-proxy + +* Mon Feb 11 2019 David King - 1.2.3-1 +- Update to 1.2.3 + +* Wed Feb 06 2019 David King - 1.2.2-1 +- Update to 1.2.2 + +* Tue Feb 05 2019 Kalev Lember - 1.2.1-1 +- Update to 1.2.1 + +* Mon Feb 4 2019 fedora-toolbox - 1.2.0-4 +- Add an upstream patch to add flatpak build-export --disable-sandbox + +* Thu Jan 31 2019 Bastien Nocera - 1.2.0-3 +- Require librsvg2 so SVG icons can be exported + +* Tue Jan 29 2019 Kalev Lember - 1.2.0-2 +- Enable libsystemd support + +* Mon Jan 28 2019 David King - 1.2.0-1 +- Update to 1.2.0 + +* Tue Jan 15 2019 Kalev Lember - 1.1.3-1 +- Update to 1.1.3 + +* Fri Dec 21 2018 David King - 1.1.2-1 +- Update to 1.1.2 + +* Mon Dec 17 2018 David King - 1.1.1-2 +- Enable installed tests and add to tests subpackage + +* Mon Dec 10 2018 Kalev Lember - 1.1.1-1 +- Update to 1.1.1 + +* Fri Nov 30 2018 fedora-toolbox - 1.0.6-3 +- Add a patch to fix OCI system remotes +- Add patch fixing permissions on icons downloaded from an OCI registry + +* Fri Nov 16 2018 Kalev Lember - 1.0.6-1 +- Update to 1.0.6 + +* Mon Nov 12 2018 Kalev Lember - 1.0.5-2 +- Recommend p11-kit-server instead of just p11-kit (#1649049) + +* Mon Nov 12 2018 Kalev Lember - 1.0.5-1 +- Update to 1.0.5 + +* Fri Oct 12 2018 Kalev Lember - 1.0.4-1 +- Update to 1.0.4 + +* Thu Oct 04 2018 Kalev Lember - 1.0.3-1 +- Update to 1.0.3 + +* Thu Sep 13 2018 Kalev Lember - 1.0.2-1 +- Update to 1.0.2 + +* Tue Aug 28 2018 David King - 1.0.1-1 +- Update to 1.0.1 + +* Mon Aug 20 2018 David King - 1.0.0-2 +- Fix double dash in XML documentation + +* Mon Aug 20 2018 David King - 1.0.0-1 +- Update to 1.0.0 + +* Fri Jul 13 2018 Fedora Release Engineering - 0.99.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Tue Jul 10 2018 Kalev Lember - 0.99.3-1 +- Update to 0.99.3 + +* Wed Jun 27 2018 Kalev Lember - 0.99.2-1 +- Update to 0.99.2 + +* Thu Jun 21 2018 David King - 0.99.1-1 +- Update to 0.99.1 + +* Wed Jun 13 2018 David King - 0.11.8.3-1 +- Update to 0.11.8.3 (#1590808) + +* Mon Jun 11 2018 David King - 0.11.8.2-1 +- Update to 0.11.8.2 (#1589810) + +* Fri Jun 08 2018 David King - 0.11.8.1-1 +- Update to 0.11.8.1 (#1588868) + +* Fri Jun 08 2018 David King - 0.11.8-1 +- Update to 0.11.8 (#1588868) + +* Wed May 23 2018 Adam Jackson - 0.11.7-2 +- Remove Requires: kernel >= 4.0.4-202, which corresponds to rawhide + somewhere before Fedora 22 which this spec file certainly no longer + supports. + +* Thu May 03 2018 Kalev Lember - 0.11.7-1 +- Update to 0.11.7 + +* Wed May 02 2018 Kalev Lember - 0.11.6-1 +- Update to 0.11.6 + +* Wed May 02 2018 Kalev Lember - 0.11.5-2 +- Backport a fix for a gnome-software crash installing .flatpakref files + +* Mon Apr 30 2018 David King - 0.11.5-1 +- Update to 0.11.5 + +* Thu Apr 26 2018 Kalev Lember - 0.11.4-1 +- Update to 0.11.4 + +* Mon Feb 19 2018 David King - 0.11.3-1 +- Update to 0.11.3 + +* Mon Feb 19 2018 David King - 0.11.2-1 +- Update to 0.11.2 + +* Wed Feb 14 2018 David King - 0.11.1-1 +- Update to 0.11.1 (#1545224) + +* Wed Feb 07 2018 Fedora Release Engineering - 0.10.3-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Fri Feb 02 2018 Igor Gnatenko - 0.10.3-2 +- Switch to %%ldconfig_scriptlets + +* Tue Jan 30 2018 Kalev Lember - 0.10.3-1 +- Update to 0.10.3 + +* Thu Dec 21 2017 David King - 0.10.2.1-1 +- Update to 0.10.2.1 + +* Fri Dec 15 2017 Kalev Lember - 0.10.2-1 +- Update to 0.10.2 + +* Fri Nov 24 2017 David King - 0.10.1-1 +- Update to 0.10.1 + +* Thu Oct 26 2017 Kalev Lember - 0.10.0-1 +- Update to 0.10.0 + +* Mon Oct 09 2017 Kalev Lember - 0.9.99-1 +- Update to 0.9.99 + +* Tue Sep 26 2017 Kalev Lember - 0.9.98.2-1 +- Update to 0.9.98.2 + +* Tue Sep 26 2017 Kalev Lember - 0.9.98.1-1 +- Update to 0.9.98.1 + +* Mon Sep 25 2017 Kalev Lember - 0.9.98-1 +- Update to 0.9.98 + +* Thu Sep 14 2017 Kalev Lember - 0.9.12-1 +- Update to 0.9.12 + +* Wed Sep 13 2017 Kalev Lember - 0.9.11-1 +- Update to 0.9.11 + +* Mon Sep 04 2017 Kalev Lember - 0.9.10-1 +- Update to 0.9.10 +- Split out flatpak-builder to a separate source package + +* Fri Aug 25 2017 Kalev Lember - 0.9.8-2 +- Backport a patch to fix regression in --devel + +* Mon Aug 21 2017 David King - 0.9.8-1 +- Update to 0.9.8 + +* Wed Aug 02 2017 Fedora Release Engineering - 0.9.7-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Sun Jul 30 2017 Florian Weimer - 0.9.7-4 +- Rebuild with binutils fix for ppc64le (#1475636) + +* Thu Jul 27 2017 Owen Taylor - 0.9.7-3 +- Add a patch to fix OCI refname annotation + +* Wed Jul 26 2017 Fedora Release Engineering - 0.9.7-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Sat Jul 01 2017 David King - 0.9.7-1 +- Update to 0.9.7 (#1466970) + +* Tue Jun 20 2017 David King - 0.9.6-1 +- Update to 0.9.6 + +* Sat Jun 10 2017 David King - 0.9.5-1 +- Update to 0.9.5 (#1460437) + +* Tue May 23 2017 David King - 0.9.4-1 +- Update to 0.9.4 (#1454750) + +* Mon Apr 24 2017 David King - 0.9.3-1 +- Update to 0.9.3 + +* Fri Apr 07 2017 David King - 0.9.2-2 +- Add eu-strip dependency for flatpak-builder + +* Wed Apr 05 2017 Kalev Lember - 0.9.2-1 +- Update to 0.9.2 + +* Wed Mar 15 2017 Kalev Lember - 0.9.1-1 +- Update to 0.9.1 + +* Fri Mar 10 2017 Kalev Lember - 0.8.4-1 +- Update to 0.8.4 + +* Sun Feb 19 2017 David King - 0.8.3-3 +- Make flatpak-builder require bzip2 (#1424857) + +* Wed Feb 15 2017 Kalev Lember - 0.8.3-2 +- Avoid pulling in all of ostree and only depend on ostree-libs subpackage + +* Tue Feb 14 2017 Kalev Lember - 0.8.3-1 +- Update to 0.8.3 + +* Fri Feb 10 2017 Fedora Release Engineering - 0.8.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Fri Jan 27 2017 Kalev Lember - 0.8.2-1 +- Update to 0.8.2 + +* Wed Jan 18 2017 David King - 0.8.1-1 +- Update to 0.8.1 + +* Tue Dec 20 2016 Kalev Lember - 0.8.0-1 +- Update to 0.8.0 + +* Tue Nov 29 2016 David King - 0.6.14-2 +- Add a patch to fix a GNOME Software crash +- Silence repository listing during post + +* Tue Nov 29 2016 Kalev Lember - 0.6.14-1 +- Update to 0.6.14 + +* Wed Oct 26 2016 David King - 0.6.13-2 +- Add empty /etc/flatpak/remotes.d + +* Tue Oct 25 2016 David King - 0.6.13-1 +- Update to 0.6.13 + +* Thu Oct 06 2016 David King - 0.6.12-1 +- Update to 0.6.12 + +* Tue Sep 20 2016 Kalev Lember - 0.6.11-1 +- Update to 0.6.11 +- Set minimum ostree and bubblewrap versions + +* Mon Sep 12 2016 David King - 0.6.10-1 +- Update to 0.6.10 + +* Tue Sep 06 2016 David King - 0.6.9-2 +- Look for bwrap in PATH + +* Thu Aug 25 2016 David King - 0.6.9-1 +- Update to 0.6.9 + +* Mon Aug 01 2016 David King - 0.6.8-1 +- Update to 0.6.8 (#1361823) + +* Thu Jul 21 2016 David King - 0.6.7-2 +- Use system bubblewrap + +* Fri Jul 01 2016 David King - 0.6.7-1 +- Update to 0.6.7 + +* Thu Jun 23 2016 David King - 0.6.6-1 +- Update to 0.6.6 + +* Fri Jun 10 2016 David King - 0.6.5-1 +- Update to 0.6.5 + +* Wed Jun 01 2016 David King - 0.6.4-1 +- Update to 0.6.4 + +* Tue May 31 2016 David King - 0.6.3-1 +- Update to 0.6.3 +- Move bwrap to main package + +* Tue May 24 2016 David King - 0.6.2-1 +- Rename from xdg-app to flatpak (#1337434) diff --git a/flatpak.sysusers.conf b/flatpak.sysusers.conf new file mode 100644 index 0000000..8203ed5 --- /dev/null +++ b/flatpak.sysusers.conf @@ -0,0 +1 @@ +u flatpak - "Flatpak system helper" - diff --git a/sources b/sources new file mode 100644 index 0000000..7b41a08 --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (flatpak-1.15.8.tar.xz) = 76374fa1334d1ffca05a4309975c4f19ac15c23585d0a90772195ee850d4da54a232bd557a5ec4d579c50204c8d1d651e58372312013668dc6d79c2376391606