[ubuntu/hirsute-proposed] gdm3 3.38.2.1-3ubuntu1 (Accepted)

Marco Trevisan (Treviño) marco at ubuntu.com
Wed Jun 2 15:40:59 UTC 2021


gdm3 (3.38.2.1-3ubuntu1) hirsute; urgency=medium

  * Merge with debian
  * debian/gdm3.gdm-smartcard-*: Keep using user_readenv=1 in pam_env.so
  * Remaining changes with debian:
    + readme.debian: update for correct paths in ubuntu
    + control.in:
      - don't recommend desktop-base
      - build depend on libgudev-1.0-dev
      - depend on bash for config_error_dialog.patch
      - update vcs field
    + rules:
      - don't override default user/group
      - -dgdm-xsession=true to install upstream xsession script
      - override dh_installinit with --no-start to avoid session being killed
    + rules, readme.debian, gdm3.8.pod:
      use upstream custom.conf instead of daemon.conf
    + gdm3.{postinst,postrm}: rename user and group back to gdm
    + gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
      settings
    + gdm3.install:
      - stop installing default.desktop. it adds unnecessary clutter
        ("system default") to the session chooser.
      - don't install debian/xsession
    + add run_xsession.d.patch
    + add xresources_is_a_dir.patch
      - fix loading from /etc/x11/xresources/*
    + add nvidia_prime.patch:
      - add hook to run prime-offload (as root) and prime-switch if
        nvidia-prime is installed
    + add revert_override_lang_with_accountservices.patch:
      - on ubuntu accountservices only stores the language and not the
        full locale as needed by lang.
    + add dont_set_language_env.patch:
      - don't run the set_up_session_language() function, since it
        overrides variable values set by ~/.pam_environment
    + add config_error_dialog.patch:
      - show warning dialog in case of error in ~/.profile etc. and
        don't let a syntax error make the login fail
    + add debian/patches/revert_nvidia_wayland_blacklist.patch:
      - don't blacklist nvidia for wayland
    + add gdm3.service-wait-for-drm-device-before-trying-to-start-i.patch:
      - wait for the first valid gdm device on pre-start
    + add debian/default.pa
      - disable bluetooth audio devices in pulseaudio from gdm3.
    + debian/gdm3.install
      - added details of the default.pa file
    + debian/gdm3.postinst
      - added installation of default.pa and creation of dir if it doesn't
        exist.
    + debian/greeter.dconf-defaults: don't set debian settings in the
      greeter's dconf db

gdm3 (3.38.2.1-3) experimental; urgency=medium

  * debian/changelog: Remove bad entry meant to be in ubuntu side only
    It's not needed in debian
  * debian/patches: Correctly return from idle callback
  * debian/gdm3.gdm-smartcard-*:
    - Do not set user_readenv=1 in pam_env.so (keep it for ubuntu only).
    - Ignore invalid user errors on pam_succeed_if.so.
      We may call the gdm-smartcard module without an user, leaving the module
      to figure it out depending on the smartcard certificate.
      So we need to ignore PAM_USER_UNKNOWN errors on pam_suceed_if.so.
      While pam_sss.so already checks for the user being non root internally,
      it's always better to ensure early this in all the cases.
      In the pkcs11 case instead we need to check it again after the module
      has returned. (LP: #1917362)
    - Check for /var/run/nologin (and friends) only when an user is defined
      pam_nologin.so requires a PAM_USER to be defined in order to check if
      the request has been done by root, possibly stopping the login otherwise.
      And in case none was provided, it will trigger the fallback pam prompt.
      However, with smartcard authentication we may initiate the PAM session
      without an user defined and leave to the smartcard service to try to
      figure it out depending on the token that has been inserted, that may
      have an user associated with it.
      So, ensure that we load all the PAM modules that require an user after
      the smartcard one, that in case will set one for us.
      Only after that, we can fail in case /var/run/nologin is present
      (LP: #1917362)

Date: Thu, 15 Apr 2021 18:14:18 +0100
Changed-By: Marco Trevisan (Treviño) <marco at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Iain Lane <iain at orangesquash.org.uk>
https://launchpad.net/ubuntu/+source/gdm3/3.38.2.1-3ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 15 Apr 2021 18:14:18 +0100
Source: gdm3
Architecture: source
Version: 3.38.2.1-3ubuntu1
Distribution: hirsute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marco Trevisan (Treviño) <marco at ubuntu.com>
Launchpad-Bugs-Fixed: 1917362
Changes:
 gdm3 (3.38.2.1-3ubuntu1) hirsute; urgency=medium
 .
   * Merge with debian
   * debian/gdm3.gdm-smartcard-*: Keep using user_readenv=1 in pam_env.so
   * Remaining changes with debian:
     + readme.debian: update for correct paths in ubuntu
     + control.in:
       - don't recommend desktop-base
       - build depend on libgudev-1.0-dev
       - depend on bash for config_error_dialog.patch
       - update vcs field
     + rules:
       - don't override default user/group
       - -dgdm-xsession=true to install upstream xsession script
       - override dh_installinit with --no-start to avoid session being killed
     + rules, readme.debian, gdm3.8.pod:
       use upstream custom.conf instead of daemon.conf
     + gdm3.{postinst,postrm}: rename user and group back to gdm
     + gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
       settings
     + gdm3.install:
       - stop installing default.desktop. it adds unnecessary clutter
         ("system default") to the session chooser.
       - don't install debian/xsession
     + add run_xsession.d.patch
     + add xresources_is_a_dir.patch
       - fix loading from /etc/x11/xresources/*
     + add nvidia_prime.patch:
       - add hook to run prime-offload (as root) and prime-switch if
         nvidia-prime is installed
     + add revert_override_lang_with_accountservices.patch:
       - on ubuntu accountservices only stores the language and not the
         full locale as needed by lang.
     + add dont_set_language_env.patch:
       - don't run the set_up_session_language() function, since it
         overrides variable values set by ~/.pam_environment
     + add config_error_dialog.patch:
       - show warning dialog in case of error in ~/.profile etc. and
         don't let a syntax error make the login fail
     + add debian/patches/revert_nvidia_wayland_blacklist.patch:
       - don't blacklist nvidia for wayland
     + add gdm3.service-wait-for-drm-device-before-trying-to-start-i.patch:
       - wait for the first valid gdm device on pre-start
     + add debian/default.pa
       - disable bluetooth audio devices in pulseaudio from gdm3.
     + debian/gdm3.install
       - added details of the default.pa file
     + debian/gdm3.postinst
       - added installation of default.pa and creation of dir if it doesn't
         exist.
     + debian/greeter.dconf-defaults: don't set debian settings in the
       greeter's dconf db
 .
 gdm3 (3.38.2.1-3) experimental; urgency=medium
 .
   * debian/changelog: Remove bad entry meant to be in ubuntu side only
     It's not needed in debian
   * debian/patches: Correctly return from idle callback
   * debian/gdm3.gdm-smartcard-*:
     - Do not set user_readenv=1 in pam_env.so (keep it for ubuntu only).
     - Ignore invalid user errors on pam_succeed_if.so.
       We may call the gdm-smartcard module without an user, leaving the module
       to figure it out depending on the smartcard certificate.
       So we need to ignore PAM_USER_UNKNOWN errors on pam_suceed_if.so.
       While pam_sss.so already checks for the user being non root internally,
       it's always better to ensure early this in all the cases.
       In the pkcs11 case instead we need to check it again after the module
       has returned. (LP: #1917362)
     - Check for /var/run/nologin (and friends) only when an user is defined
       pam_nologin.so requires a PAM_USER to be defined in order to check if
       the request has been done by root, possibly stopping the login otherwise.
       And in case none was provided, it will trigger the fallback pam prompt.
       However, with smartcard authentication we may initiate the PAM session
       without an user defined and leave to the smartcard service to try to
       figure it out depending on the token that has been inserted, that may
       have an user associated with it.
       So, ensure that we load all the PAM modules that require an user after
       the smartcard one, that in case will set one for us.
       Only after that, we can fail in case /var/run/nologin is present
       (LP: #1917362)
Checksums-Sha1:
 d36558df1fa5215dec7a92596a77fc1bc0ba0f56 3088 gdm3_3.38.2.1-3ubuntu1.dsc
 50cc6a4f6f4f131d0da84001773d1a96dbf54e79 106040 gdm3_3.38.2.1-3ubuntu1.debian.tar.xz
 2e17d41d38e72d61151756ac1e9f43fe415e33ff 21853 gdm3_3.38.2.1-3ubuntu1_source.buildinfo
Checksums-Sha256:
 1f5819f3ddc96ab29f4823c4498816190651bfbf1bb1cdc08f7c4c7a78b94ea9 3088 gdm3_3.38.2.1-3ubuntu1.dsc
 8a6c1405f312507726d9f2c1656dbf0cddeec815b9d57ad217706ab2d1bf938f 106040 gdm3_3.38.2.1-3ubuntu1.debian.tar.xz
 ce31bb80ad3cf69b00b010cb6b594b58f30b6fe97fe9361b4031182cf479a7bd 21853 gdm3_3.38.2.1-3ubuntu1_source.buildinfo
Files:
 e14c6fedf99fe22c70a0c89dabbf2077 3088 gnome optional gdm3_3.38.2.1-3ubuntu1.dsc
 9aca50e8bc3b0d051f95062c9e0dcc43 106040 gnome optional gdm3_3.38.2.1-3ubuntu1.debian.tar.xz
 3affd0b25656ec232324257286fbed4d 21853 gnome optional gdm3_3.38.2.1-3ubuntu1_source.buildinfo
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>


More information about the Hirsute-changes mailing list