commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2024-06-20 16:46:36
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.18349 (New)
Package is "accountsservice"
Thu Jun 20 16:46:36 2024 rev:90 rq:1181711 version:23.13.9
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2024-05-08 11:39:18.723853583 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.18349/accountsservice.changes
2024-06-20 16:46:41.772567287 +0200
@@ -1,0 +2,6 @@
+Wed Jun 19 01:14:06 UTC 2024 - Xiaoguang Wang
+
+- Update accountsservice-sysconfig.patch: work with SELinux policy
+ (bsc#1222978).
+
+---
Other differences:
--
++ accountsservice-sysconfig.patch ++
--- /var/tmp/diff_new_pack.Co1xjB/_old 2024-06-20 16:46:42.332586984 +0200
+++ /var/tmp/diff_new_pack.Co1xjB/_new 2024-06-20 16:46:42.336587124 +0200
@@ -101,7 +101,7 @@
===
--- /dev/null
+++ accountsservice-23.13.9/src/gdm-sysconfig.c
-@@ -0,0 +1,484 @@
+@@ -0,0 +1,509 @@
+/* -*- Mode: C; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 8 -*-
+ *
+ * Copyright (C) 2008 Hans Petter Jansson
@@ -143,6 +143,7 @@
+#include
+#include
+#include
++#include
+
+#include "gdm-sysconfig.h"
+
@@ -196,10 +197,17 @@
+{
+GIOStatus last_status = G_IO_STATUS_ERROR;
+GIOChannel *channel = NULL;
-+gchar *temp_file_name;
++g_autofree gchar *temp_file_name = NULL;
+ginti;
++gchar *path = NULL;
++g_autofree char *template = NULL;
+
-+temp_file_name = g_strdup_printf ("%s.new.%u", file_name,
g_random_int ());
++template = g_strdup_printf ("/run/sysconfig.XX");
++path = g_mkdtemp (template);
++if (path == NULL)
++goto out;
++
++temp_file_name = g_strdup_printf ("%s/%s.new",path,
g_path_get_basename(file_name));
+
+channel = g_io_channel_new_file (temp_file_name, "w", NULL);
+if (!channel)
@@ -232,10 +240,27 @@
+g_io_channel_unref (channel);
+}
+
-+if (last_status == G_IO_STATUS_NORMAL && g_rename (temp_file_name,
file_name) != 0)
++gboolean result = FALSE;
++if (last_status == G_IO_STATUS_NORMAL && temp_file_name) {
++g_autoptr (GFile) old_file =
g_file_new_for_path(temp_file_name);
++g_autoptr (GFile) new_file = g_file_new_for_path(file_name);
++g_remove(file_name);
++result = g_file_move (old_file,
++ new_file,
++ G_FILE_COPY_OVERWRITE,
++ NULL,
++ NULL,
++ NULL,
++ NULL);
++}
++
++if (last_status == G_IO_STATUS_NORMAL && !result)
+last_status = G_IO_STATUS_ERROR;
+
-+g_free (temp_file_name);
++if (path) {
++g_rmdir(path);
++}
++
+return last_status == G_IO_STATUS_NORMAL ? TRUE : FALSE;
+}
+
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2024-02-15 20:59:28
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.1815 (New)
Package is "accountsservice"
Thu Feb 15 20:59:28 2024 rev:87 rq:1146629 version:23.13.9
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2023-11-29 21:19:20.590101712 +0100
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.1815/accountsservice.changes
2024-02-15 20:59:54.226945751 +0100
@@ -1,0 +2,9 @@
+Wed Feb 14 10:39:36 UTC 2024 - Dominique Leuenberger
+
+- First part to fix build with GCC 14:
+ + Inject patched mocklibc-1.0.tar.gz: only some header
+modifications to address implicit declaration of print_indent.
+ + Add accountsservice-mocklib-gcc14.patch: patch meson'
+subproject definition to validate the injected tarball.
+
+---
New:
accountsservice-mocklib-gcc14.patch
mocklibc-1.0.tar.gz
BETA DEBUG BEGIN:
New:modifications to address implicit declaration of print_indent.
+ Add accountsservice-mocklib-gcc14.patch: patch meson'
subproject definition to validate the injected tarball.
BETA DEBUG END:
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.Afv4br/_old 2024-02-15 20:59:55.454988913 +0100
+++ /var/tmp/diff_new_pack.Afv4br/_new 2024-02-15 20:59:55.454988913 +0100
@@ -1,7 +1,7 @@
#
# spec file for package accountsservice
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -27,14 +27,18 @@
Group: System/Daemons
URL:https://www.freedesktop.org/wiki/Software/AccountsService/
Source0:
https://www.freedesktop.org/software/accountsservice/%{name}-%{version}.tar.xz
+# Patched mocklibc source to fix build with GCC 14
+Source1:mocklibc-1.0.tar.gz
+# PATCH-FIX-UPSTREAM accountsservice-mocklib-gcc14.patch -- Fix meson checksum
to accept patched tarball
+Patch0: accountsservice-mocklib-gcc14.patch
-# WARNING: do not remove/significantly change patch0 without updating the
relevant patch in gdm too
+# WARNING: do not remove/significantly change patch1 without updating the
relevant patch in gdm too
# PATCH-FIX-OPENSUSE accountsservice-sysconfig.patch bnc#688071
vu...@opensuse.org -- Read/write autologin configuration from sysconfig, like
gdm (see gdm-sysconfig-settings.patch) WAS PATCH-FIX-OPENSUSE
-Patch0: accountsservice-sysconfig.patch
+Patch1: accountsservice-sysconfig.patch
# PATCH-FIX-OPENSUSE accountsservice-filter-suse-accounts.patch
vu...@opensuse.org -- Filter out some system users that are specific to openSUSE
-Patch1: accountsservice-filter-suse-accounts.patch
+Patch2: accountsservice-filter-suse-accounts.patch
# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com --
For details please see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
-Patch2: harden_accounts-daemon.service.patch
+Patch3: harden_accounts-daemon.service.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -112,9 +116,12 @@
%prep
%setup -q
+# inject patched mocklibc tarball into package cache
+cp %{SOURCE1} subprojects/packagecache/
%patch -P 0 -p1
%patch -P 1 -p1
%patch -P 2 -p1
+%patch -P 3 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++ accountsservice-mocklib-gcc14.patch ++
Index: accountsservice-23.13.9/subprojects/mocklibc.wrap
===
--- accountsservice-23.13.9.orig/subprojects/mocklibc.wrap
+++ accountsservice-23.13.9/subprojects/mocklibc.wrap
@@ -3,7 +3,7 @@ directory = mocklibc-1.0
source_url =
https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/mocklibc/mocklibc-1.0.tar.gz
source_filename = mocklibc-1.0.tar.gz
-source_hash = b2236a6af1028414783e9734a46ea051916ec226479d6a55a3bb823bff68f120
+source_hash = 48966f7a5d3f2139ffdc1e700de7deb9390f852cd4f2a7b97e55029c14097c6e
patch_url = https://wrapdb.mesonbuild.com/v1/projects/mocklibc/1.0/2/get_zip
patch_filename = mocklibc-1.0-2-wrap.zip
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2023-08-10 15:33:14
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.11712 (New)
Package is "accountsservice"
Thu Aug 10 15:33:14 2023 rev:85 rq:1103247 version:23.13.9
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2023-07-06 18:28:05.466931448 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.11712/accountsservice.changes
2023-08-10 15:33:29.916013394 +0200
@@ -1,0 +2,6 @@
+Wed Aug 9 01:27:12 UTC 2023 - Xiaoguang Wang
+
+- Rebase as-fate318433-prevent-same-account-multi-logins.patch:
+ (bsc#1213884).
+
+---
Other differences:
--
++ as-fate318433-prevent-same-account-multi-logins.patch ++
--- /var/tmp/diff_new_pack.gvRbKI/_old 2023-08-10 15:33:30.956019881 +0200
+++ /var/tmp/diff_new_pack.gvRbKI/_new 2023-08-10 15:33:30.960019905 +0200
@@ -1,7 +1,8 @@
-diff -Nur accountsservice-22.08.8/src/libaccountsservice/act-user.c
new/src/libaccountsservice/act-user.c
accountsservice-22.08.8/src/libaccountsservice/act-user.c 2022-02-23
16:27:48.0 +0100
-+++ new/src/libaccountsservice/act-user.c 2022-04-30 22:34:42.160346848
+0200
-@@ -878,6 +878,8 @@
+Index: accountsservice-23.13.9/src/libaccountsservice/act-user.c
+===
+--- accountsservice-23.13.9.orig/src/libaccountsservice/act-user.c
accountsservice-23.13.9/src/libaccountsservice/act-user.c
+@@ -878,6 +878,8 @@ act_user_is_logged_in (ActUser *user)
* (Currently, this function is only implemented for systemd-logind.
* For ConsoleKit, it is equivalent to act_user_is_logged_in.)
*
@@ -10,7 +11,7 @@
* Returns: %TRUE or %FALSE
*/
gboolean
-@@ -906,6 +908,24 @@
+@@ -906,6 +908,24 @@ act_user_get_saved (ActUser *user)
}
/**
@@ -35,21 +36,23 @@
* act_user_get_locked:
* @user: a #ActUser
*
-diff -Nur accountsservice-22.08.8/src/libaccountsservice/act-user.h
new/src/libaccountsservice/act-user.h
accountsservice-22.08.8/src/libaccountsservice/act-user.h 2022-02-23
16:27:48.0 +0100
-+++ new/src/libaccountsservice/act-user.h 2022-04-30 22:34:42.164346848
+0200
-@@ -61,6 +61,7 @@
- guint act_user_get_num_sessions_anywhere (ActUser *user);
- gboolean act_user_is_logged_in (ActUser *user);
- gboolean act_user_is_logged_in_anywhere (ActUser *user);
-+gboolean act_user_is_x_logged_in_remotely (ActUser *user);
- intact_user_get_login_frequency (ActUser *user);
- gint64 act_user_get_login_time(ActUser *user);
- const GVariant*act_user_get_login_history (ActUser *user);
-diff -Nur accountsservice-22.08.8/src/libaccountsservice/act-user-manager.c
new/src/libaccountsservice/act-user-manager.c
accountsservice-22.08.8/src/libaccountsservice/act-user-manager.c
2022-02-23 16:27:48.0 +0100
-+++ new/src/libaccountsservice/act-user-manager.c 2022-04-30
22:34:42.160346848 +0200
-@@ -1366,12 +1366,22 @@
+Index: accountsservice-23.13.9/src/libaccountsservice/act-user.h
+===
+--- accountsservice-23.13.9.orig/src/libaccountsservice/act-user.h
accountsservice-23.13.9/src/libaccountsservice/act-user.h
+@@ -60,6 +60,7 @@ guint act_user_get_num_sessions
+ guint act_user_get_num_sessions_anywhere (ActUser *user);
+ gboolean act_user_is_logged_in (ActUser *user);
+ gboolean act_user_is_logged_in_anywhere (ActUser *user);
++gboolean act_user_is_x_logged_in_remotely (ActUser *user);
+ intact_user_get_login_frequency (ActUser *user);
+ gint64 act_user_get_login_time (ActUser *user);
+ const GVariant *act_user_get_login_history (ActUser *user);
+Index: accountsservice-23.13.9/src/libaccountsservice/act-user-manager.c
+===
+--- accountsservice-23.13.9.orig/src/libaccountsservice/act-user-manager.c
accountsservice-23.13.9/src/libaccountsservice/act-user-manager.c
+@@ -1425,12 +1425,22 @@ maybe_add_new_session (ActUserManagerNew
if (new_session->x11_display == NULL) {
g_debug ("AcUserManager: (mostly) ignoring session '%s' since
it's not graphical",
new_session->id);
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2023-07-06 18:28:00
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.23466 (New)
Package is "accountsservice"
Thu Jul 6 18:28:00 2023 rev:84 rq:1096940 version:23.13.9
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2023-06-24 20:13:57.252148132 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.23466/accountsservice.changes
2023-07-06 18:28:05.466931448 +0200
@@ -1,0 +2,7 @@
+Wed Jul 5 03:07:00 UTC 2023 - Xiaoguang Wang
+
+- Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973).
+- Remove accountsservice-assume-gdm.patch: Fixed by new rebasing
+ of accountsservice-sysconfig.patch.
+
+---
Old:
accountsservice-assume-gdm.patch
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.gt9hym/_old 2023-07-06 18:28:06.058935082 +0200
+++ /var/tmp/diff_new_pack.gt9hym/_new 2023-07-06 18:28:06.062935107 +0200
@@ -35,8 +35,6 @@
Patch1: accountsservice-filter-suse-accounts.patch
# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com --
For details please see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
Patch2: harden_accounts-daemon.service.patch
-# PATCH-FIX-UPSTREAM accountsservice-assume-gdm.patch boo#1212675
dims...@opensuse.org -- Assume GDM if not able to detect the right DM
-Patch3: accountsservice-assume-gdm.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -117,7 +115,6 @@
%patch0 -p1
%patch1 -p1
%patch2 -p1
-%patch3 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++ accountsservice-sysconfig.patch ++
--- /var/tmp/diff_new_pack.gt9hym/_old 2023-07-06 18:28:06.090935278 +0200
+++ /var/tmp/diff_new_pack.gt9hym/_new 2023-07-06 18:28:06.094935304 +0200
@@ -4,9 +4,11 @@
Use autologin configuration from sysconfig (SUSE-ism)
-diff -Nur accountsservice-23.13.9/src/daemon.c new/src/daemon.c
accountsservice-23.13.9/src/daemon.c 2023-03-27 21:27:39.0
+0200
-+++ new/src/daemon.c 2023-06-21 16:13:59.459681670 +0200
+
+Index: accountsservice-23.13.9/src/daemon.c
+===
+--- accountsservice-23.13.9.orig/src/daemon.c
accountsservice-23.13.9/src/daemon.c
@@ -51,6 +51,7 @@
#include "util.h"
#include "user.h"
@@ -15,7 +17,7 @@
#define PATH_PASSWD "passwd"
#define PATH_SHADOW "shadow"
-@@ -1789,6 +1790,43 @@
+@@ -1789,6 +1790,43 @@ load_autologin_lightdm (Daemon *daemon
return TRUE;
}
@@ -59,7 +61,16 @@
gboolean
load_autologin (Daemon *daemon,
gchar **name,
-@@ -1819,6 +1857,8 @@
+@@ -1797,6 +1835,8 @@ load_autologin (Daemon *daemon,
+ {
+ DisplayManagerType dm_type;
+
++return load_autologin_suse (daemon, name, enabled, error);
++
+ dm_type = get_current_system_dm_type ();
+ if (dm_type == DISPLAY_MANAGER_TYPE_LIGHTDM)
+ return load_autologin_lightdm (daemon, name, enabled, error);
+@@ -1819,6 +1859,8 @@ save_autologin_gdm (Daemon *daemon,
gboolean result;
g_autoptr (GError) local_error = NULL;
@@ -68,7 +79,7 @@
keyfile = g_key_file_new ();
if (!g_key_file_load_from_file (keyfile,
PATH_GDM_CUSTOM,
-@@ -1851,6 +1891,8 @@
+@@ -1851,6 +1893,8 @@ save_autologin_lightdm (Daemon *dae
gboolean result;
g_autoptr (GError) local_error = NULL;
@@ -77,9 +88,19 @@
keyfile = g_key_file_new ();
if (!g_key_file_load_from_file (keyfile,
PATH_LIGHTDM_CONF,
-diff -Nur accountsservice-23.13.9/src/gdm-sysconfig.c new/src/gdm-sysconfig.c
accountsservice-23.13.9/src/gdm-sysconfig.c1970-01-01
01:00:00.0 +0100
-+++ new/src/gdm-sysconfig.c2023-06-21 16:13:59.463681938 +0200
+@@ -1879,6 +1923,8 @@ save_autologin (Daemon *daemon,
+ {
+ DisplayManagerType dm_type;
+
++return save_autologin_suse (daemon, name, enabled, error);
++
+ dm_type = get_current_system_dm_type ();
+ if (dm_type == DISPLAY_MANAGER_TYPE_LIGHTDM)
+ return save_autologin_lightdm (daemon, name, enabled, error);
+Index:
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2023-06-24 20:13:40
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.15902 (New)
Package is "accountsservice"
Sat Jun 24 20:13:40 2023 rev:83 rq:1095051 version:23.13.9
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2023-06-23 21:52:14.806500835 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.15902/accountsservice.changes
2023-06-24 20:13:57.252148132 +0200
@@ -1,0 +2,8 @@
+Sat Jun 24 10:36:17 UTC 2023 - Dominique Leuenberger
+
+- Add accountsservice-assume-gdm.patch: assume gdm when not being
+ able to detect the used display manager. This is basically the
+ same as was in place before we gained support for multiple DMs
+ (boo#1212675).
+
+---
New:
accountsservice-assume-gdm.patch
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.tMhkTS/_old 2023-06-24 20:13:57.952152265 +0200
+++ /var/tmp/diff_new_pack.tMhkTS/_new 2023-06-24 20:13:57.956152289 +0200
@@ -35,6 +35,8 @@
Patch1: accountsservice-filter-suse-accounts.patch
# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com --
For details please see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
Patch2: harden_accounts-daemon.service.patch
+# PATCH-FIX-UPSTREAM accountsservice-assume-gdm.patch boo#1212675
dims...@opensuse.org -- Assume GDM if not able to detect the right DM
+Patch3: accountsservice-assume-gdm.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -115,6 +117,7 @@
%patch0 -p1
%patch1 -p1
%patch2 -p1
+%patch3 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++ accountsservice-assume-gdm.patch ++
>From ea88bc6ab047117b989c624d6374396e06699b50 Mon Sep 17 00:00:00 2001
From: Ray Strode
Date: Wed, 19 Apr 2023 11:22:29 -0400
Subject: daemon: Assume GDM for autologin if we can't figure it out from
systemd
Right now we figure out which display manager to configure based on
reading a symlink from systemd.
This isn't full proof though. SELinux security policies may prevent it
from being readable, the system might not be using systemd, etc.
Furthermore, in the case where it fails, we currently don't set a
a GError, which leads to a crash when trying to fetch the error
message.
This commit makes accountsservice fall back to GDM when it can't
figure out what else to do. That way we maintain better backward
compatibility.
https://gitlab.gnome.org/GNOME/gnome-control-center/-/issues/2450
---
src/daemon.c | 8
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/daemon.c b/src/daemon.c
index 1ad7be6..92a5c06 100644
--- a/src/daemon.c
+++ b/src/daemon.c
@@ -1803,9 +1803,8 @@ load_autologin (Daemon *daemon,
else if (dm_type == DISPLAY_MANAGER_TYPE_GDM)
return load_autologin_gdm (daemon, name, enabled, error);
-g_set_error (error, G_IO_ERROR, G_IO_ERROR_NOT_SUPPORTED, _
("Unsupported Display Manager"));
-
-return FALSE;
+/* Default to GDM for backward compatibility */
+return load_autologin_gdm (daemon, name, enabled, error);
}
static gboolean
@@ -1885,7 +1884,8 @@ save_autologin (Daemon *daemon,
else if (dm_type == DISPLAY_MANAGER_TYPE_GDM)
return save_autologin_gdm (daemon, name, enabled, error);
-return FALSE;
+/* Default to GDM for backward compatibility */
+return save_autologin_gdm (daemon, name, enabled, error);
}
gboolean
--
cgit v1.2.1
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2023-06-23 21:52:08
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.15902 (New)
Package is "accountsservice"
Fri Jun 23 21:52:08 2023 rev:82 rq:1094657 version:23.13.9
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2022-08-05 19:50:55.065442761 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.15902/accountsservice.changes
2023-06-23 21:52:14.806500835 +0200
@@ -1,0 +2,27 @@
+Wed Jun 21 14:07:07 UTC 2023 - Ferdinand Thiessen
+
+- Update to version 23.13.9:
+ + daemon: Fix boot delay
+ + user-manager:
+- Add cancellable to fetch user requests
+- Track non-existent users
+- Changes from version 23.11.69:
+ + Add lightdm autologin support
+ + user:
+- Return an error when setting invalid language
+- Throw a warning for invalid locales
+- Support new LocalAccount property in cache file
+- Replace usermod -p with chpasswd -e
+ + main:
+- Use new overridable USERDIR
+- Use new overridable ICONDIR
+- Use new overridable sysconfdir
+ + daemon:
+- Add GetUsersLanguages() function
+- Don't crash if /etc/shadow doesn't exist
+ + Updated translations.
+- Rebase patches:
+ + accountsservice-sysconfig.patch
+ + accountsservice-filter-suse-accounts.patch
+
+---
Old:
accountsservice-22.08.8.tar.xz
New:
accountsservice-23.13.9.tar.xz
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.O41ysy/_old 2023-06-23 21:52:16.270508788 +0200
+++ /var/tmp/diff_new_pack.O41ysy/_new 2023-06-23 21:52:16.314509027 +0200
@@ -1,7 +1,7 @@
#
# spec file for package accountsservice
#
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
%bcond_without vala
Name: accountsservice
-Version:22.08.8
+Version:23.13.9
Release:0
Summary:D-Bus Service to Manipulate User Account Information
License:GPL-3.0-or-later
@@ -97,9 +97,9 @@
%package vala
Summary:Vala bindings for accountsservice
Group: Development/Libraries/C and C++
+BuildRequires: vala
Requires: libaccountsservice0 = %{version}
Requires: typelib-1_0-AccountsService-1_0 = %{version}
-BuildRequires: vala
%description vala
The accountsservice server provides a set of D-Bus interfaces for
++ accountsservice-22.08.8.tar.xz -> accountsservice-23.13.9.tar.xz ++
8800 lines of diff (skipped)
++ accountsservice-filter-suse-accounts.patch ++
--- /var/tmp/diff_new_pack.O41ysy/_old 2023-06-23 21:52:17.302514394 +0200
+++ /var/tmp/diff_new_pack.O41ysy/_new 2023-06-23 21:52:17.342514612 +0200
@@ -1,9 +1,9 @@
-diff -Nur accountsservice-22.08.8/src/user-classify.c new/src/user-classify.c
accountsservice-22.08.8/src/user-classify.c2022-02-23
16:27:48.0 +0100
-+++ new/src/user-classify.c2022-04-30 22:33:44.148344188 +0200
-@@ -52,7 +52,13 @@
- "at",
+diff -Nur old/src/user-classify.c new/src/user-classify.c
+--- old/src/user-classify.c2023-06-21 16:19:26.984665518 +0200
new/src/user-classify.c2023-06-21 16:19:33.793285366 +0200
+@@ -53,7 +53,13 @@
"gdm",
+ "lightdm",
"gnome-initial-setup",
-"git"
+"git",
++ accountsservice-sysconfig.patch ++
--- /var/tmp/diff_new_pack.O41ysy/_old 2023-06-23 21:52:17.366514742 +0200
+++ /var/tmp/diff_new_pack.O41ysy/_new 2023-06-23 21:52:17.378514808 +0200
@@ -4,29 +4,19 @@
Use autologin configuration from sysconfig (SUSE-ism)
-
-diff -Nur accountsservice-22.08.8/src/daemon.c new/src/daemon.c
accountsservice-22.08.8/src/daemon.c 2022-02-23 16:27:48.0
+0100
-+++ new/src/daemon.c 2022-04-30 22:23:22.228315678 +0200
-@@ -50,6 +50,7 @@
+diff -Nur accountsservice-23.13.9/src/daemon.c new/src/daemon.c
+--- accountsservice-23.13.9/src/daemon.c 2023-03-27 21:27:39.0
+0200
new/src/daemon.c 2023-06-21 16:13:59.459681670 +0200
+@@ -51,6 +51,7 @@
#include "util.h"
#include "user.h"
#include "accounts-user-generated.h"
+#include "gdm-sysconfig.h"
- #define PATH_PASSWD "/etc/passwd"
- #define PATH_SHADOW "/etc/shadow"
-@@ -581,7 +582,7 @@
- priv->autologin_id = 0;
-
- if (!load_autologin (daemon, , , )) {
--g_debug
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2022-08-05 19:50:23
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.1521 (New)
Package is "accountsservice"
Fri Aug 5 19:50:23 2022 rev:81 rq:993122 version:22.08.8
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2022-06-24 08:45:16.523136814 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.1521/accountsservice.changes
2022-08-05 19:50:55.065442761 +0200
@@ -1,0 +2,15 @@
+Mon Aug 1 12:01:59 UTC 2022 - Matthias Gerstner
+
+- Remove BuildIgnore for rpmlint-mini. This is a violation of the
+ security policies applying to SUSE products as it circumvents the
+ SUSE security team's control over what enters Factory and what
+ not.
+
+---
+Fri Jul 29 13:11:50 UTC 2022 - Frederic Crozat
+
+- Allow to build without vala support.
+- Refresh harden_accounts-daemon.service.patch to not duplicate
+ existing entries.
+
+---
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.CrmC9p/_old 2022-08-05 19:50:55.633444227 +0200
+++ /var/tmp/diff_new_pack.CrmC9p/_new 2022-08-05 19:50:55.641444248 +0200
@@ -16,7 +16,9 @@
#
-#!BuildIgnore: rpmlint-mini
+# allow to not build vala binding
+%bcond_without vala
+
Name: accountsservice
Version:22.08.8
Release:0
@@ -41,7 +43,6 @@
BuildRequires: gtk-doc
BuildRequires: meson
BuildRequires: pkgconfig
-BuildRequires: vala
BuildRequires: pkgconfig(dbus-1)
BuildRequires: pkgconfig(gio-2.0) >= 2.63.5
BuildRequires: pkgconfig(gio-unix-2.0)
@@ -92,17 +93,20 @@
The accountsservice server provides a set of D-Bus interfaces for
querying and manipulating user account information.
+%if %{with vala}
%package vala
Summary:Vala bindings for accountsservice
Group: Development/Libraries/C and C++
Requires: libaccountsservice0 = %{version}
Requires: typelib-1_0-AccountsService-1_0 = %{version}
+BuildRequires: vala
%description vala
The accountsservice server provides a set of D-Bus interfaces for
querying and manipulating user account information.
This package contains the Vala bindings for accountservice.
+%endif
%lang_package
@@ -121,6 +125,11 @@
%meson \
-Dintrospection=true \
-Dgtk_doc=true \
+%if %{with vala}
+ -Dvapi=true \
+%else
+ -Dvapi=false \
+%endif
%{nil}
%meson_build
@@ -175,10 +184,12 @@
%{_includedir}/accountsservice-1.0/
%{_datadir}/gir-1.0/AccountsService-1.0.gir
+%if %{with vala}
%files vala
%dir %{_datadir}/vala/vapi
%{_datadir}/vala/vapi/accountsservice.deps
%{_datadir}/vala/vapi/accountsservice.vapi
+%endif
%files lang -f accounts-service.lang
++ harden_accounts-daemon.service.patch ++
--- /var/tmp/diff_new_pack.CrmC9p/_old 2022-08-05 19:50:55.681444351 +0200
+++ /var/tmp/diff_new_pack.CrmC9p/_new 2022-08-05 19:50:55.685444362 +0200
@@ -1,20 +1,16 @@
-Index: accountsservice-0.6.55/data/accounts-daemon.service.in
+Index: accountsservice-22.08.8/data/accounts-daemon.service.in
===
accountsservice-0.6.55.orig/data/accounts-daemon.service.in
-+++ accountsservice-0.6.55/data/accounts-daemon.service.in
-@@ -8,6 +8,15 @@ After=nss-user-lookup.target
+--- accountsservice-22.08.8.orig/data/accounts-daemon.service.in
2022-02-23 16:27:48.0 +0100
accountsservice-22.08.8/data/accounts-daemon.service.in2022-08-02
09:17:14.424438207 +0200
+@@ -8,6 +8,11 @@
Wants=nss-user-lookup.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
-+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
-+ProtectKernelTunables=true
-+ProtectKernelModules=true
+ProtectKernelLogs=true
-+ProtectControlGroups=true
Type=dbus
BusName=org.freedesktop.Accounts
ExecStart=@libexecdir@/accounts-daemon
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package accountsservice for openSUSE:Factory checked in at 2022-06-24 08:45:05 Comparing /work/SRC/openSUSE:Factory/accountsservice (Old) and /work/SRC/openSUSE:Factory/.accountsservice.new.1548 (New) Package is "accountsservice" Fri Jun 24 08:45:05 2022 rev:80 rq:984690 version:22.08.8 Changes: --- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes 2022-03-28 18:01:01.445261794 +0200 +++ /work/SRC/openSUSE:Factory/.accountsservice.new.1548/accountsservice.changes 2022-06-24 08:45:16.523136814 +0200 @@ -1,0 +2,36 @@ +Sat Apr 30 20:16:58 UTC 2022 - Ferdinand Thiessen + +- Update to version 22.08.8 + + Handle missing admin groups when changing account types + + Set PrivateTmp to false in the systemd service + + Add function to set user password expiration policy +- Update to version 22.04.62 + + Updated Swedish translation + + Updated Indonesian translation + + Updated German translation + + Updated slovak translation + + Update Ukrainian translation + + Updated Brazilian Portuguese translation + + act-user: Use stronger hashing methods in make_crypted() if available. + + act-user-manager: Watch for the daemon going away and coming back + + user-manager: Update users tables on username changes + + user: Translate property x-session property name to match the proxy one + + Check GDBusMessage for INTERACTIVE_AUTHORIZATION flag + + daemon: Fix error check in save_autologin() + + Never delete the root filesystem when removing users + + Remove user heuristics + + user-classify: Add git to username blacklist + + daemon: ensure cache files for system users are processed + + daemon: Don't try to add admin users to non existing groups + + Move D-Bus conf file to $(datadir)/dbus-1/system.d +- Rebased patches: + + accountsservice-sysconfig.patch + + accountsservice-filter-suse-accounts.patch + + as-fate318433-prevent-same-account-multi-logins.patch +- Drop upstream fixed patches: + + ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch + + accountsservice-fix-gdm-crash.patch + + accountsservice-read-root-user-cache.patch + + accountsservice-wtmp-io-improvements.patch + +--- Old: ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch accountsservice-0.6.55.tar.xz accountsservice-fix-gdm-crash.patch accountsservice-read-root-user-cache.patch accountsservice-wtmp-io-improvements.patch New: accountsservice-22.08.8.tar.xz Other differences: -- ++ accountsservice.spec ++ --- /var/tmp/diff_new_pack.eJpAb1/_old 2022-06-24 08:45:17.031137383 +0200 +++ /var/tmp/diff_new_pack.eJpAb1/_new 2022-06-24 08:45:17.035137387 +0200 @@ -18,7 +18,7 @@ #!BuildIgnore: rpmlint-mini Name: accountsservice -Version:0.6.55 +Version:22.08.8 Release:0 Summary:D-Bus Service to Manipulate User Account Information License:GPL-3.0-or-later @@ -31,16 +31,8 @@ Patch0: accountsservice-sysconfig.patch # PATCH-FIX-OPENSUSE accountsservice-filter-suse-accounts.patch vu...@opensuse.org -- Filter out some system users that are specific to openSUSE Patch1: accountsservice-filter-suse-accounts.patch -# PATCH-FIX-UPSTREAM accountsservice-read-root-user-cache.patch bsc#1114292 glfo#accountsservice/accountsservice#65 xw...@suse.com-- read root user cache file WAS PATCH-FIX-UPSTREAM -Patch2: accountsservice-read-root-user-cache.patch -# PATCH-FIX-UPSTREAM accountsservice-wtmp-io-improvements.patch boo#1139487 fezh...@suse.com -- Backports that improve wtmp io performance. -Patch3: accountsservice-wtmp-io-improvements.patch -# PATCH-FIX-UPSTREAM accountsservice-fix-gdm-crash.patch glfo#accountsservice/accountsservice#55 antoine.belv...@opensuse.org -- Prevent gdm crash upon service restart when autologin is enabled -Patch4: accountsservice-fix-gdm-crash.patch # PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com -- For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -Patch5: harden_accounts-daemon.service.patch -# PATCH-FIX-UPSTREAM ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch -- Fix build with meson 0.61.0 -Patch6: https://gitlab.freedesktop.org/accountsservice/accountsservice/-/commit/ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch +Patch2: harden_accounts-daemon.service.patch ## SLE and Leap only patches start at 1000 # PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch fate#318433 cxi...@suse.com -- prevent multiple simultaneous login. @@ -49,10 +41,11 @@
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package accountsservice for openSUSE:Factory checked in at 2022-03-28 18:01:00 Comparing /work/SRC/openSUSE:Factory/accountsservice (Old) and /work/SRC/openSUSE:Factory/.accountsservice.new.1900 (New) Package is "accountsservice" Mon Mar 28 18:01:00 2022 rev:79 rq: version:0.6.55 Changes: --- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes 2022-03-28 13:43:29.558541001 +0200 +++ /work/SRC/openSUSE:Factory/.accountsservice.new.1900/accountsservice.changes 2022-03-28 18:01:01.445261794 +0200 @@ -2,111 +1,0 @@ -Mon Mar 28 11:34:44 UTC 2022 - Dominique Leuenberger - -- Add accountsservice-too-restrictive.patch: weaken upstreams - policy of accounts-daemon.service to be similar, but still - stricter, to what we had with harden-accounts-daemon.service.patch. - Attempt to workaround - https://gitlab.freedesktop.org/accountsservice/accountsservice/-/issues/102 - -Mon Mar 28 07:32:37 UTC 2022 - Dominique Leuenberger - -- Drop harden_accounts-daemon.service.patch: Seems to conflict with - SELinux since version 22.04.62. - -Fri Feb 11 23:35:22 UTC 2022 - Bj??rn Lie - -- Update to version 22.04.62: - + act-user-manager: -- Fix incorrect return types in some finish() functions -- Fix various refcounting bugs -- Make a private function static -- Remove ConsoleKit support -- Watch for the daemon going away and coming back - + act-user: -- Use G_DECLARE_FINAL_TYPE to declare ActUser -- Use stronger hashing methods in make_crypted() if available. - + Add .service file to POTFILES.skip - + Add support to build vala bindings - + build: -- Add missing pkg-config Requires.private dependencies -- Bump minimum version of meson required -- Expose chosen path_wtmp value as a variable - + Check GDBusMessage for INTERACTIVE_AUTHORIZATION flag - + ci: -- Add test stage, reusing the build one -- Cleanup the build stage so that we can define dependencies - just once - + Conditionalize more use of shadow.h - + daemon: -- Allow SystemAccount=false to be set in cache file -- Don't try to add admin users to non existing groups -- Ensure cache files for system users are processed -- Fix error check in save_autologin() -- Remove duplicate "changed" signal emission -- Write GDM custom.conf file if it doesn't exist - + data: -- Don't send change updates for login-history -- Tighten up systemd sandboxing of accounts-daemon.service - + Drop .service file from POTFILES.in - + Fix build with meson 0.60 - + Fix g-i annotation of act_user_get_password_expiration_policy - + libaccountsservice: Expand documentation of ActUser:language - + main: -- Allow cache files to be marked immutable -- Don???t print translation header with `--help` - + meson: Determine project version from date - + Move D-Bus conf file to $(datadir)/dbus-1/system.d - + Never delete the root filesystem when removing users - + NEWS: Drop NEWS file - + po: delete obsolete po/accounts-service.pot - + Remove user heuristics - + Replace empty he.po with an actual translation - + Stop ignoring autotools generated files - + tests: -- Add unit tests for libaccountservice using dbusmock and gir - bindings -- Sync tests with upstream python-dbusmock - + user-classify: Add git to username blacklist - + user: -- Don't overwrite entire GECOS field when setting full name -- Fix double-unref of GDBusMethodInvocation throughout -- Fix indentation error -- Introduce user templates for setting default session etc -- Reject requests to change full name to something including a - comma -- Remove user from extra_admin_groups when demoting them from - admin -- Translate property x-session property name to match the proxy - one - + user-manager: Update users tables on username changes - + Use timestamps instead of (expiration time and last change -time)days - + util: -- Get uid when needed -- Split out helper method for getting admin group IDs - + Updated translations. -- Drop patches fixed upstream: - + accountsservice-read-root-user-cache.patch - + accountsservice-wtmp-io-improvements.patch - + accountsservice-fix-gdm-crash.patch - + ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch - + accountsservice-fix-gdm-crash.patch -- Note that accountsservice-fix-gdm-crash.patch was not applied - upstream, the issue was fixed in a different way. Upstream - encourages issue reports should the current fix prove to not be - good enough. -- Rebase accountsservice-sysconfig.patch and -
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2022-03-28 13:43:28
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.1900 (New)
Package is "accountsservice"
Mon Mar 28 13:43:28 2022 rev:78 rq: version:22.04.62
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2022-03-28 09:33:04.403014360 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.1900/accountsservice.changes
2022-03-28 13:43:29.558541001 +0200
@@ -1,0 +2,9 @@
+Mon Mar 28 11:34:44 UTC 2022 - Dominique Leuenberger
+
+- Add accountsservice-too-restrictive.patch: weaken upstreams
+ policy of accounts-daemon.service to be similar, but still
+ stricter, to what we had with harden-accounts-daemon.service.patch.
+ Attempt to workaround
+ https://gitlab.freedesktop.org/accountsservice/accountsservice/-/issues/102
+
+---
New:
accountsservice-too-restrictive.patch
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.a3KIlL/_old 2022-03-28 13:43:30.042541624 +0200
+++ /var/tmp/diff_new_pack.a3KIlL/_new 2022-03-28 13:43:30.050541635 +0200
@@ -28,6 +28,8 @@
# WARNING: do not remove/significantly change patch0 without updating the
relevant patch in gdm too
# PATCH-FIX-OPENSUSE accountsservice-sysconfig.patch bnc#688071
vu...@opensuse.org -- Read/write autologin configuration from sysconfig, like
gdm (see gdm-sysconfig-settings.patch)
Patch1: accountsservice-sysconfig.patch
+# PATCH-FIX-UPSTREAM accountsservice-too-restrictive.patch
https://gitlab.freedesktop.org/accountsservice/accountsservice/-/issues/102 --
Allow NAMESPACE switching until upstream finds the right flag
+Patch2: accountsservice-too-restrictive.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -95,6 +97,7 @@
%prep
%setup -q
%patch1 -p1
+%patch2 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++ accountsservice-too-restrictive.patch ++
Index: accountsservice-22.04.62/data/accounts-daemon.service.in
===
--- accountsservice-22.04.62.orig/data/accounts-daemon.service.in
+++ accountsservice-22.04.62/data/accounts-daemon.service.in
@@ -18,7 +18,7 @@ Environment=GVFS_REMOTE_VOLUME_MONITOR_I
StateDirectory=AccountsService
StateDirectoryMode=0775
-ProtectSystem=strict
+ProtectSystem=false
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
@@ -33,7 +33,7 @@ PrivateUsers=false
RestrictAddressFamilies=AF_UNIX
SystemCallArchitectures=native
SystemCallFilter=~@mount
-RestrictNamespaces=true
+RestrictNamespaces=false
LockPersonality=true
MemoryDenyWriteExecute=true
RestrictRealtime=true
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2022-03-28 09:33:03
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.1900 (New)
Package is "accountsservice"
Mon Mar 28 09:33:03 2022 rev:77 rq: version:22.04.62
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2022-03-25 21:54:31.426269660 +0100
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.1900/accountsservice.changes
2022-03-28 09:33:04.403014360 +0200
@@ -1,0 +2,6 @@
+Mon Mar 28 07:32:37 UTC 2022 - Dominique Leuenberger
+
+- Drop harden_accounts-daemon.service.patch: Seems to conflict with
+ SELinux since version 22.04.62.
+
+---
Old:
harden_accounts-daemon.service.patch
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.c85Egg/_old 2022-03-28 09:33:04.983015155 +0200
+++ /var/tmp/diff_new_pack.c85Egg/_new 2022-03-28 09:33:04.987015160 +0200
@@ -28,8 +28,6 @@
# WARNING: do not remove/significantly change patch0 without updating the
relevant patch in gdm too
# PATCH-FIX-OPENSUSE accountsservice-sysconfig.patch bnc#688071
vu...@opensuse.org -- Read/write autologin configuration from sysconfig, like
gdm (see gdm-sysconfig-settings.patch)
Patch1: accountsservice-sysconfig.patch
-# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com --
For details please see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
-Patch2: harden_accounts-daemon.service.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -97,7 +95,6 @@
%prep
%setup -q
%patch1 -p1
-%patch2 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package accountsservice for openSUSE:Factory checked in at 2022-03-25 21:54:26 Comparing /work/SRC/openSUSE:Factory/accountsservice (Old) and /work/SRC/openSUSE:Factory/.accountsservice.new.1900 (New) Package is "accountsservice" Fri Mar 25 21:54:26 2022 rev:76 rq:964524 version:22.04.62 Changes: --- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes 2022-02-09 20:37:59.254201960 +0100 +++ /work/SRC/openSUSE:Factory/.accountsservice.new.1900/accountsservice.changes 2022-03-25 21:54:31.426269660 +0100 @@ -1,0 +2,96 @@ +Fri Feb 11 23:35:22 UTC 2022 - Bj??rn Lie + +- Update to version 22.04.62: + + act-user-manager: +- Fix incorrect return types in some finish() functions +- Fix various refcounting bugs +- Make a private function static +- Remove ConsoleKit support +- Watch for the daemon going away and coming back + + act-user: +- Use G_DECLARE_FINAL_TYPE to declare ActUser +- Use stronger hashing methods in make_crypted() if available. + + Add .service file to POTFILES.skip + + Add support to build vala bindings + + build: +- Add missing pkg-config Requires.private dependencies +- Bump minimum version of meson required +- Expose chosen path_wtmp value as a variable + + Check GDBusMessage for INTERACTIVE_AUTHORIZATION flag + + ci: +- Add test stage, reusing the build one +- Cleanup the build stage so that we can define dependencies + just once + + Conditionalize more use of shadow.h + + daemon: +- Allow SystemAccount=false to be set in cache file +- Don't try to add admin users to non existing groups +- Ensure cache files for system users are processed +- Fix error check in save_autologin() +- Remove duplicate "changed" signal emission +- Write GDM custom.conf file if it doesn't exist + + data: +- Don't send change updates for login-history +- Tighten up systemd sandboxing of accounts-daemon.service + + Drop .service file from POTFILES.in + + Fix build with meson 0.60 + + Fix g-i annotation of act_user_get_password_expiration_policy + + libaccountsservice: Expand documentation of ActUser:language + + main: +- Allow cache files to be marked immutable +- Don???t print translation header with `--help` + + meson: Determine project version from date + + Move D-Bus conf file to $(datadir)/dbus-1/system.d + + Never delete the root filesystem when removing users + + NEWS: Drop NEWS file + + po: delete obsolete po/accounts-service.pot + + Remove user heuristics + + Replace empty he.po with an actual translation + + Stop ignoring autotools generated files + + tests: +- Add unit tests for libaccountservice using dbusmock and gir + bindings +- Sync tests with upstream python-dbusmock + + user-classify: Add git to username blacklist + + user: +- Don't overwrite entire GECOS field when setting full name +- Fix double-unref of GDBusMethodInvocation throughout +- Fix indentation error +- Introduce user templates for setting default session etc +- Reject requests to change full name to something including a + comma +- Remove user from extra_admin_groups when demoting them from + admin +- Translate property x-session property name to match the proxy + one + + user-manager: Update users tables on username changes + + Use timestamps instead of (expiration time and last change +time)days + + util: +- Get uid when needed +- Split out helper method for getting admin group IDs + + Updated translations. +- Drop patches fixed upstream: + + accountsservice-read-root-user-cache.patch + + accountsservice-wtmp-io-improvements.patch + + accountsservice-fix-gdm-crash.patch + + ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch + + accountsservice-fix-gdm-crash.patch +- Note that accountsservice-fix-gdm-crash.patch was not applied + upstream, the issue was fixed in a different way. Upstream + encourages issue reports should the current fix prove to not be + good enough. +- Rebase accountsservice-sysconfig.patch and + harden_accounts-daemon.service.patch +- Drop accountsservice-filter-suse-accounts.patch: The system users + we were filtering are not present on any of today as far as I can + tell, so drop this patch filtering out "common system users" such + as beagleindex, fax and suse-ncc. +- Stop passing systemd=true to meson, no longer recognized, nor + needed. +- Add pkgconfig(vapigen) BuildRequires: New dependency. +- Add fdupes BuildRequires and macro, remove duplicates. +- Add python3-dbusmock and python3-gobject BuildRequires and add a + check section, run meson_test macro. + +--- Old:
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2022-02-09 20:37:57
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.1898 (New)
Package is "accountsservice"
Wed Feb 9 20:37:57 2022 rev:75 rq:952657 version:0.6.55
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2021-11-06 18:17:44.428875532 +0100
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.1898/accountsservice.changes
2022-02-09 20:37:59.254201960 +0100
@@ -1,0 +2,6 @@
+Tue Feb 1 09:20:24 UTC 2022 - Bj??rn Lie
+
+- Add ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch: Fix build
+ with meson 0.61.0.
+
+---
New:
ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.K32jl6/_old 2022-02-09 20:38:00.154204113 +0100
+++ /var/tmp/diff_new_pack.K32jl6/_new 2022-02-09 20:38:00.162204132 +0100
@@ -1,7 +1,7 @@
#
# spec file for package accountsservice
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -38,6 +38,8 @@
Patch4: accountsservice-fix-gdm-crash.patch
# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com --
For details please see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
Patch5: harden_accounts-daemon.service.patch
+# PATCH-FIX-UPSTREAM ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch -- Fix
build with meson 0.61.0
+Patch6:
https://gitlab.freedesktop.org/accountsservice/accountsservice/-/commit/ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -106,6 +108,7 @@
%patch3 -p1
%patch4 -p1
%patch5 -p1
+%patch6 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++ ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch ++
>From ac9b14f1c1bbca413987d0bbfeaad05804107e9a Mon Sep 17 00:00:00 2001
From: Luca Boccassi
Date: Sun, 31 Oct 2021 12:29:14 +
Subject: [PATCH] Fix build with meson 0.60
Positional parameters to merge_file() were never allowed and always
ignored, so just drop it.
See: https://github.com/mesonbuild/meson/issues/9441
Fixes #97
---
data/meson.build | 1 -
1 file changed, 1 deletion(-)
diff --git a/data/meson.build b/data/meson.build
index 70edf89..9e80299 100644
--- a/data/meson.build
+++ b/data/meson.build
@@ -33,7 +33,6 @@ configure_file(
policy = act_namespace.to_lower() + '.policy'
i18n.merge_file(
- policy,
input: policy + '.in',
output: policy,
po_dir: po_dir,
--
GitLab
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package accountsservice for openSUSE:Factory checked in at 2021-11-06 18:15:29 Comparing /work/SRC/openSUSE:Factory/accountsservice (Old) and /work/SRC/openSUSE:Factory/.accountsservice.new.1890 (New) Package is "accountsservice" Sat Nov 6 18:15:29 2021 rev:74 rq:929601 version:0.6.55 Changes: --- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes 2021-08-26 23:15:06.252247069 +0200 +++ /work/SRC/openSUSE:Factory/.accountsservice.new.1890/accountsservice.changes 2021-11-06 18:17:44.428875532 +0100 @@ -1,0 +2,6 @@ +Thu Nov 4 10:39:37 UTC 2021 - Bj??rn Lie + +- Stop passing the no longer used nor recognized option + user-heuristics=true to meson. + +--- Other differences: -- ++ accountsservice.spec ++ --- /var/tmp/diff_new_pack.yoSXYi/_old 2021-11-06 18:17:45.036875847 +0100 +++ /var/tmp/diff_new_pack.yoSXYi/_new 2021-11-06 18:17:45.036875847 +0100 @@ -114,7 +114,6 @@ %build %meson \ - -Duser-heuristics=true \ -Dsystemd=true \ -Dintrospection=true \ -Dgtk_doc=true \
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package accountsservice for openSUSE:Factory checked in at 2021-08-26 23:14:35 Comparing /work/SRC/openSUSE:Factory/accountsservice (Old) and /work/SRC/openSUSE:Factory/.accountsservice.new.1899 (New) Package is "accountsservice" Thu Aug 26 23:14:35 2021 rev:73 rq:914414 version:0.6.55 Changes: --- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes 2021-08-25 20:56:27.673298803 +0200 +++ /work/SRC/openSUSE:Factory/.accountsservice.new.1899/accountsservice.changes 2021-08-26 23:15:06.252247069 +0200 @@ -1,0 +2,7 @@ +Thu Aug 26 15:07:51 UTC 2021 - Dominique Leuenberger + +- Update harden_accounts-daemon.service.patch: Do not proect home + directories: the accounts daemon is used to create home + directories upon user creation (boo#1189853). + +--- Other differences: -- ++ harden_accounts-daemon.service.patch ++ --- /var/tmp/diff_new_pack.Tl3osg/_old 2021-08-26 23:15:07.100246712 +0200 +++ /var/tmp/diff_new_pack.Tl3osg/_new 2021-08-26 23:15:07.104246711 +0200 @@ -2,13 +2,12 @@ === --- accountsservice-0.6.55.orig/data/accounts-daemon.service.in +++ accountsservice-0.6.55/data/accounts-daemon.service.in -@@ -8,6 +8,16 @@ After=nss-user-lookup.target +@@ -8,6 +8,15 @@ After=nss-user-lookup.target Wants=nss-user-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -+ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2021-08-25 20:56:10
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.1899 (New)
Package is "accountsservice"
Wed Aug 25 20:56:10 2021 rev:72 rq:913679 version:0.6.55
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2021-03-16 15:44:05.669007425 +0100
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.1899/accountsservice.changes
2021-08-25 20:56:27.673298803 +0200
@@ -1,0 +2,11 @@
+Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang
+
+- Spec layout cleaning up for harden_accounts-daemon.service.patch.
+
+---
+Tue Jul 27 11:53:56 UTC 2021 - Johannes Segitz
+
+- Added hardening to systemd service(s). Added patch(es):
+ * harden_accounts-daemon.service.patch
+
+---
New:
harden_accounts-daemon.service.patch
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.lYcxdE/_old 2021-08-25 20:56:28.325297947 +0200
+++ /var/tmp/diff_new_pack.lYcxdE/_new 2021-08-25 20:56:28.329297941 +0200
@@ -36,6 +36,8 @@
Patch3: accountsservice-wtmp-io-improvements.patch
# PATCH-FIX-UPSTREAM accountsservice-fix-gdm-crash.patch
glfo#accountsservice/accountsservice#55 antoine.belv...@opensuse.org -- Prevent
gdm crash upon service restart when autologin is enabled
Patch4: accountsservice-fix-gdm-crash.patch
+# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com --
For details please see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+Patch5: harden_accounts-daemon.service.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -103,6 +105,7 @@
%patch2 -p1
%patch3 -p1
%patch4 -p1
+%patch5 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++ harden_accounts-daemon.service.patch ++
Index: accountsservice-0.6.55/data/accounts-daemon.service.in
===
--- accountsservice-0.6.55.orig/data/accounts-daemon.service.in
+++ accountsservice-0.6.55/data/accounts-daemon.service.in
@@ -8,6 +8,16 @@ After=nss-user-lookup.target
Wants=nss-user-lookup.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
Type=dbus
BusName=org.freedesktop.Accounts
ExecStart=@libexecdir@/accounts-daemon
commit accountsservice for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2021-03-16 15:42:57
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.2401 (New)
Package is "accountsservice"
Tue Mar 16 15:42:57 2021 rev:71 rq:879128 version:0.6.55
Changes:
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2020-04-18 00:27:13.881654854 +0200
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.2401/accountsservice.changes
2021-03-16 15:44:05.669007425 +0100
@@ -1,0 +2,7 @@
+Tue Mar 2 21:05:33 UTC 2021 - Antoine Belvire
+
+- Add accountsservice-fix-gdm-crash.patch: Prevent crash of gdm
+ upon service restart when automatic login is enabled
+ (glfo#accountsservice/accountsservice#55).
+
+---
New:
accountsservice-fix-gdm-crash.patch
Other differences:
--
++ accountsservice.spec ++
--- /var/tmp/diff_new_pack.VdIJgM/_old 2021-03-16 15:44:06.237008334 +0100
+++ /var/tmp/diff_new_pack.VdIJgM/_new 2021-03-16 15:44:06.241008340 +0100
@@ -1,7 +1,7 @@
#
# spec file for package accountsservice
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -34,6 +34,8 @@
Patch2: accountsservice-read-root-user-cache.patch
# PATCH-FIX-UPSTREAM accountsservice-wtmp-io-improvements.patch boo#1139487
fezh...@suse.com -- Backports that improve wtmp io performance.
Patch3: accountsservice-wtmp-io-improvements.patch
+# PATCH-FIX-UPSTREAM accountsservice-fix-gdm-crash.patch
glfo#accountsservice/accountsservice#55 antoine.belv...@opensuse.org -- Prevent
gdm crash upon service restart when autologin is enabled
+Patch4: accountsservice-fix-gdm-crash.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -100,6 +102,7 @@
%patch1 -p1
%patch2 -p1
%patch3 -p1
+%patch4 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++ accountsservice-fix-gdm-crash.patch ++
>From 323707648fdefd11502faf44c2aa41d9b9500078 Mon Sep 17 00:00:00 2001
From: Iain Lane
Date: Tue, 28 Apr 2020 16:47:00 +0100
Subject: [PATCH] act-user-manager: Watch for the daemon going away and coming
back
And set is-loaded accordingly. This causes properties to be invalidated
on the client side and then get re-fetched when the daemon comes back.
https://gitlab.freedesktop.org/accountsservice/accountsservice/issues/55
---
src/libaccountsservice/act-user-manager.c | 21 +
1 file changed, 21 insertions(+)
diff --git a/src/libaccountsservice/act-user-manager.c
b/src/libaccountsservice/act-user-manager.c
index 61a8719..a317507 100644
--- a/src/libaccountsservice/act-user-manager.c
+++ b/src/libaccountsservice/act-user-manager.c
@@ -2298,6 +2298,23 @@ act_user_manager_queue_load (ActUserManager *manager)
}
}
+static void
+on_name_owner_changed (GObject *object,
+ GParamSpec *pspec,
+ gpointer user_data)
+{
+ActUserManager *manager = ACT_USER_MANAGER (user_data);
+GDBusProxy *accounts_proxy = G_DBUS_PROXY (object);
+g_autofree gchar *owner = NULL;
+
+g_return_if_fail (ACT_IS_USER_MANAGER (manager));
+g_return_if_fail (accounts_proxy != NULL);
+
+owner = g_dbus_proxy_get_name_owner (accounts_proxy);
+
+set_is_loaded (manager, owner != NULL);
+}
+
static gboolean
ensure_accounts_proxy (ActUserManager *manager)
{
@@ -2335,6 +2352,10 @@ ensure_accounts_proxy (ActUserManager *manager)
"user-deleted",
G_CALLBACK (on_user_removed_in_accounts_service),
manager);
+g_signal_connect (priv->accounts_proxy,
+ "notify::g-name-owner",
+ G_CALLBACK (on_name_owner_changed),
+ manager);
return TRUE;
}
--
GitLab
