import CS gdm-40.1-50.el9
This commit is contained in:
AlmaLinux RelEng Bot
parent
1c35a4d94f
commit
fa9e54d201
@ -1,7 +1,7 @@
|
||||
From 4c3f937ec0b694819823ea3ffb0aea361b62976b Mon Sep 17 00:00:00 2001
|
||||
From: Joan Torres Lopez <joantolo@redhat.com>
|
||||
Date: Thu, 18 Sep 2025 16:42:37 +0200
|
||||
Subject: [PATCH 1/2] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is
|
||||
Subject: [PATCH 1/3] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is
|
||||
set
|
||||
|
||||
This is only useful for debugging and testing.
|
||||
@ -32,7 +32,7 @@ index 6f53b5dfa..2f820015c 100644
|
||||
From a823f0f0fd3262770599d24de7efd0c2462ca61f Mon Sep 17 00:00:00 2001
|
||||
From: Ray Strode <rstrode@redhat.com>
|
||||
Date: Mon, 22 Jan 2024 09:40:39 -0500
|
||||
Subject: [PATCH 2/2] data: Add support for unified authentication
|
||||
Subject: [PATCH 2/3] data: Add support for unified authentication
|
||||
|
||||
At the moment, every authentication mechanism gets its own
|
||||
separate PAM conversation.
|
||||
@ -127,6 +127,53 @@ index 000000000..6648c3cec
|
||||
+session include switchable-auth
|
||||
+session optional pam_gnome_keyring.so auto_start
|
||||
+session include postlogin
|
||||
--
|
||||
--
|
||||
2.47.3
|
||||
|
||||
|
||||
From 4df14596b9d9cbd82fd4a79a0decd70297a886d8 Mon Sep 17 00:00:00 2001
|
||||
From: Joan Torres Lopez <joantolo@redhat.com>
|
||||
Date: Sat, 18 Jul 2026 18:17:07 +0200
|
||||
Subject: [PATCH 3/3] data: Drop passkey and web authentication settings
|
||||
|
||||
The login-screen settings schema is only meant to enable or disable PAM
|
||||
auth services. Passkey and web authentication are specific auth roles
|
||||
already handled by the gdm-switchable-auth service.
|
||||
---
|
||||
data/org.gnome.login-screen.gschema.xml | 20 --------------------
|
||||
1 file changed, 20 deletions(-)
|
||||
|
||||
diff --git a/data/org.gnome.login-screen.gschema.xml b/data/org.gnome.login-screen.gschema.xml
|
||||
index 91e223dc5..6c2a0ad48 100644
|
||||
--- a/data/org.gnome.login-screen.gschema.xml
|
||||
+++ b/data/org.gnome.login-screen.gschema.xml
|
||||
@@ -16,26 +16,6 @@
|
||||
multiple authentication mechanisms via a GDM PAM.
|
||||
</description>
|
||||
</key>
|
||||
- <key name="enable-web-authentication" type="b">
|
||||
- <default>true</default>
|
||||
- <summary>
|
||||
- Whether or not to allow authentication via external web site
|
||||
- </summary>
|
||||
- <description>
|
||||
- The login screen can optionally allow users to authenticate via
|
||||
- web login.
|
||||
- </description>
|
||||
- </key>
|
||||
- <key name="enable-passkey-authentication" type="b">
|
||||
- <default>true</default>
|
||||
- <summary>
|
||||
- Whether or not to allow authentication using a passkey
|
||||
- </summary>
|
||||
- <description>
|
||||
- The login screen can optionally allow users who have passkeys to log
|
||||
- in using those passkeys.
|
||||
- </description>
|
||||
- </key>
|
||||
<key name="enable-fingerprint-authentication" type="b">
|
||||
<default>true</default>
|
||||
<summary>
|
||||
--
|
||||
2.55.0
|
||||
|
||||
|
||||
@ -0,0 +1,26 @@
|
||||
From 5a0c2afd7e2001a848101a8154d38fcf1b092963 Mon Sep 17 00:00:00 2001
|
||||
From: Ignacio Casal Quinteiro <qignacio@amazon.com>
|
||||
Date: Fri, 14 Aug 2026 11:43:09 +0200
|
||||
Subject: [PATCH] gdm-session-settings: keep a ref to the user
|
||||
|
||||
The user needs to keep a reference so it stays alive during
|
||||
the signal emissions in case the manager decides to remove
|
||||
the user internally.
|
||||
|
||||
Part-of: <https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/392>
|
||||
---
|
||||
daemon/gdm-session-settings.c | 3 ++-
|
||||
1 file changed, 2 insertions(+), 1 deletion(-)
|
||||
|
||||
diff --git a/daemon/gdm-session-settings.c b/daemon/gdm-session-settings.c
|
||||
index fd1c097..7a604d7 100644
|
||||
--- a/daemon/gdm-session-settings.c
|
||||
+++ b/daemon/gdm-session-settings.c
|
||||
@@ -356,6 +356,7 @@ gdm_session_settings_load (GdmSessionSettings *settings,
|
||||
|
||||
settings->priv->user = act_user_manager_get_user (settings->priv->user_manager,
|
||||
username);
|
||||
+ g_object_ref (settings->priv->user);
|
||||
|
||||
g_clear_object (&old_user);
|
||||
|
||||
@ -11,7 +11,7 @@
|
||||
Name: gdm
|
||||
Epoch: 1
|
||||
Version: 40.1
|
||||
Release: 48%{?dist}
|
||||
Release: 50%{?dist}
|
||||
Summary: The GNOME Display Manager
|
||||
|
||||
License: GPLv2+
|
||||
@ -83,6 +83,8 @@ Patch180002: 0001-data-Add-support-for-unified-authentication.patch
|
||||
|
||||
Patch190001: 0001-data-Add-PAM-substack-wrappers-to-prevent-auth-bypas.patch
|
||||
|
||||
Patch200001: 0001-gdm-session-settings-keep-a-ref-to-the-user.patch
|
||||
|
||||
# Non-upstreamable workarounds
|
||||
Patch66610001: 0001-data-reap-gdm-sessions-on-shutdown.patch
|
||||
|
||||
@ -394,6 +396,14 @@ dconf update || :
|
||||
%{_libdir}/pkgconfig/gdm-pam-extensions.pc
|
||||
|
||||
%changelog
|
||||
* Tue Aug 18 2026 Joan Torres Lopez <joantolo@redhat.com> - 40.1-50
|
||||
- Update unified authentication patch to drop passkey/web auth settings
|
||||
Resolves: https://redhat.atlassian.net/browse/RHEL-236551
|
||||
|
||||
* Fri Aug 14 2026 Joan Torres Lopez <joantolo@redhat.com> - 40.1-49
|
||||
- Fix crash in session-settings related with ActUser
|
||||
Resolves: https://redhat.atlassian.net/browse/RHEL-240874
|
||||
|
||||
* Fri Jul 10 2026 Joan Torres Lopez <joantolo@redhat.com> - 40.1-48
|
||||
- Fix auth bypass in authselect pam substacks
|
||||
Resolves: https://redhat.atlassian.net/browse/RHEL-194090
|
||||
|
||||
Loading…
Reference in New Issue
Block a user