[ubuntu/noble-proposed] gdm3 45.0.1-1ubuntu1 (Accepted)
Marco Trevisan (Treviño)
marco at ubuntu.com
Fri Dec 1 19:11:11 UTC 2023
gdm3 (45.0.1-1ubuntu1) noble; urgency=medium
* Merge with Debian, containing new upstream version.
* debian/patches: Refresh
* debian/patches: Cherry pick patches to support JSON binary protocol
* debian/control: Build-depend on libjson-glib-dev for JSON protocol
* debian/libgdm1.symbols: Update symbols for JSON PAM protocol support
* Remaining changes with debian:
+ readme.debian: update for correct paths in ubuntu
+ control.in:
- don't recommend desktop-base
- depend on bash for config_error_dialog.patch
- update vcs field
+ rules:
- don't override default user/group
- -dgdm-xsession=true to install upstream xsession script
- override dh_installinit with --no-start to avoid session being killed
+ rules, readme.debian, gdm3.8.pod:
use upstream custom.conf instead of daemon.conf
+ gdm3.{postinst,postrm}: rename user and group back to gdm
+ debian/tests/control:
- Use gdm user name
- Use needs-root instead of needs-sudo (to remove when ubuntu autopkgtest
will be updated to include such feature)
+ debian/tests/sssd-gdm-smartcard-pam-auth-tester-env.sh:
- Added to use needs-root autopkgtest instead of needs-sudo
+ gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
settings
+ gdm3.install:
- don't install debian/xsession
+ add run_xsession.d.patch
+ add xresources_is_a_dir.patch
- fix loading from /etc/x11/xresources/*
+ add nvidia_prime.patch:
- add hook to run prime-offload (as root) and prime-switch if
nvidia-prime is installed
+ add revert_override_lang_with_accountservices.patch:
- on ubuntu accountservices only stores the language and not the
full locale as needed by lang.
+ add dont_set_language_env.patch:
- don't run the set_up_session_language() function, since it
overrides variable values set by ~/.pam_environment
+ add config_error_dialog.patch:
- show warning dialog in case of error in ~/.profile etc. and
don't let a syntax error make the login fail
+ add debian/patches/revert_nvidia_wayland_blacklist.patch:
- don't blacklist nvidia for wayland
+ add gdm3.service-wait-for-drm-device-before-trying-to-start-i.patch:
- wait for the first valid gdm device on pre-start
+ add prefer_ubuntu_session_fallback.patch:
- Prefer ubuntu session as fallback instead of GNOME
+ add XSession-Use-x-terminal-emulator-as-fallback-instead-of-x.patch:
- Use x-terminal-emulator as fallback instead of xterm
+ add Revert-data-Disable-GDM-on-hybrid-graphics-laptops-with-v.patch:
- Don't disable Wayland on hybrid graphics laptops
+ add debian/default.pa
- disable bluetooth audio devices in pulseaudio from gdm3.
+ debian/gdm3.install
- added details of the default.pa file
+ debian/gdm3.postinst
- added installation of default.pa and creation of dir if it doesn't
exist.
+ debian/greeter.dconf-defaults: don't set debian settings in the
greeter's dconf db
gdm3 (45.0.1-1) unstable; urgency=high
* Team upload
[ Marco Trevisan (Treviño) ]
* debian/gdm3.gdm-smartcard-*: Always fallback to password auth if no SC
pam module is installed.
Both libpam_sss.so and libpam_pkcs11.so might be not be installed in a
system, in such case we should not make gdm to enforce the smartcart
authentication because that would just lock the user out if there are
other login allowed methods.
As per this, make these modules partially optional even in the exclusive
mode, given that we have not a strong dependency on such modules and so
inserting a smartcard is not enough to block a system, unless that's
configured.
Ideally we should not even try to proceed if the system is not fully
configured for smartcards, but that's something that can't be easily
controlled from modules settings, so let's just do the quickest thing.
(Mitigates: #1051659, #1051785)
* d/tests/sssd-softhism2-certificates-tests.sh: Cherry-pick upstream fixes
[ Simon McVittie ]
* New upstream release
- Fix an intermittent crash when unlocking the screen
- Translation updates: en_GB, ko, sv
* d/gdm3.links: Create a dconf profile named for the Debian-gdm user.
In upstream and Ubuntu gdm, the system username used for the greeter
is "gdm", but in Debian, for historical reasons it is "Debian-gdm".
Before version 45, the dconf profile name "gdm" was hard-coded,
but since version 45 it uses a profile name that matches the system
username (to allow gnome-initial-setup to have its own profile).
This resulted in the gdm greeter trying to use the ordinary
gnome.session instead of gnome-login.session, which caused login to
fail when the gnome-session package was not installed, and caused
settings in /etc/gdm3/greeter.dconf-defaults to be ineffective. Other
differences between gnome.session and gnome-login.session, potentially
including security hardening for the greeter, would also not have
been effective.
(Closes: #1052374, #1051671, #1051993)
* Set high urgency for the dconf profile fix
[ Helmut Grohne ]
* Avoid FTBFS when systemdsystemunitdir changes in systemd.pc
(Closes: #1052381)
Date: Fri, 01 Dec 2023 06:00:55 +0100
Changed-By: Marco Trevisan (Treviño) <marco at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Jeremy Bícha <jeremy.bicha at canonical.com>
https://launchpad.net/ubuntu/+source/gdm3/45.0.1-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 01 Dec 2023 06:00:55 +0100
Source: gdm3
Built-For-Profiles: noudeb
Architecture: source
Version: 45.0.1-1ubuntu1
Distribution: noble
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marco Trevisan (Treviño) <marco at ubuntu.com>
Closes: 1051671 1051993 1052374 1052381
Changes:
gdm3 (45.0.1-1ubuntu1) noble; urgency=medium
.
* Merge with Debian, containing new upstream version.
* debian/patches: Refresh
* debian/patches: Cherry pick patches to support JSON binary protocol
* debian/control: Build-depend on libjson-glib-dev for JSON protocol
* debian/libgdm1.symbols: Update symbols for JSON PAM protocol support
* Remaining changes with debian:
+ readme.debian: update for correct paths in ubuntu
+ control.in:
- don't recommend desktop-base
- depend on bash for config_error_dialog.patch
- update vcs field
+ rules:
- don't override default user/group
- -dgdm-xsession=true to install upstream xsession script
- override dh_installinit with --no-start to avoid session being killed
+ rules, readme.debian, gdm3.8.pod:
use upstream custom.conf instead of daemon.conf
+ gdm3.{postinst,postrm}: rename user and group back to gdm
+ debian/tests/control:
- Use gdm user name
- Use needs-root instead of needs-sudo (to remove when ubuntu autopkgtest
will be updated to include such feature)
+ debian/tests/sssd-gdm-smartcard-pam-auth-tester-env.sh:
- Added to use needs-root autopkgtest instead of needs-sudo
+ gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
settings
+ gdm3.install:
- don't install debian/xsession
+ add run_xsession.d.patch
+ add xresources_is_a_dir.patch
- fix loading from /etc/x11/xresources/*
+ add nvidia_prime.patch:
- add hook to run prime-offload (as root) and prime-switch if
nvidia-prime is installed
+ add revert_override_lang_with_accountservices.patch:
- on ubuntu accountservices only stores the language and not the
full locale as needed by lang.
+ add dont_set_language_env.patch:
- don't run the set_up_session_language() function, since it
overrides variable values set by ~/.pam_environment
+ add config_error_dialog.patch:
- show warning dialog in case of error in ~/.profile etc. and
don't let a syntax error make the login fail
+ add debian/patches/revert_nvidia_wayland_blacklist.patch:
- don't blacklist nvidia for wayland
+ add gdm3.service-wait-for-drm-device-before-trying-to-start-i.patch:
- wait for the first valid gdm device on pre-start
+ add prefer_ubuntu_session_fallback.patch:
- Prefer ubuntu session as fallback instead of GNOME
+ add XSession-Use-x-terminal-emulator-as-fallback-instead-of-x.patch:
- Use x-terminal-emulator as fallback instead of xterm
+ add Revert-data-Disable-GDM-on-hybrid-graphics-laptops-with-v.patch:
- Don't disable Wayland on hybrid graphics laptops
+ add debian/default.pa
- disable bluetooth audio devices in pulseaudio from gdm3.
+ debian/gdm3.install
- added details of the default.pa file
+ debian/gdm3.postinst
- added installation of default.pa and creation of dir if it doesn't
exist.
+ debian/greeter.dconf-defaults: don't set debian settings in the
greeter's dconf db
.
gdm3 (45.0.1-1) unstable; urgency=high
.
* Team upload
.
[ Marco Trevisan (Treviño) ]
* debian/gdm3.gdm-smartcard-*: Always fallback to password auth if no SC
pam module is installed.
Both libpam_sss.so and libpam_pkcs11.so might be not be installed in a
system, in such case we should not make gdm to enforce the smartcart
authentication because that would just lock the user out if there are
other login allowed methods.
As per this, make these modules partially optional even in the exclusive
mode, given that we have not a strong dependency on such modules and so
inserting a smartcard is not enough to block a system, unless that's
configured.
Ideally we should not even try to proceed if the system is not fully
configured for smartcards, but that's something that can't be easily
controlled from modules settings, so let's just do the quickest thing.
(Mitigates: #1051659, #1051785)
* d/tests/sssd-softhism2-certificates-tests.sh: Cherry-pick upstream fixes
.
[ Simon McVittie ]
* New upstream release
- Fix an intermittent crash when unlocking the screen
- Translation updates: en_GB, ko, sv
* d/gdm3.links: Create a dconf profile named for the Debian-gdm user.
In upstream and Ubuntu gdm, the system username used for the greeter
is "gdm", but in Debian, for historical reasons it is "Debian-gdm".
Before version 45, the dconf profile name "gdm" was hard-coded,
but since version 45 it uses a profile name that matches the system
username (to allow gnome-initial-setup to have its own profile).
This resulted in the gdm greeter trying to use the ordinary
gnome.session instead of gnome-login.session, which caused login to
fail when the gnome-session package was not installed, and caused
settings in /etc/gdm3/greeter.dconf-defaults to be ineffective. Other
differences between gnome.session and gnome-login.session, potentially
including security hardening for the greeter, would also not have
been effective.
(Closes: #1052374, #1051671, #1051993)
* Set high urgency for the dconf profile fix
.
[ Helmut Grohne ]
* Avoid FTBFS when systemdsystemunitdir changes in systemd.pc
(Closes: #1052381)
Checksums-Sha1:
4132d7062855d3e6e9872a92738af4a6f96e9189 3419 gdm3_45.0.1-1ubuntu1.dsc
5fa8aea08b30c14f96103b89293218a1358308cb 855004 gdm3_45.0.1.orig.tar.xz
fb241bdcde1f0cfabf85bee37925467ff14fb7f8 103272 gdm3_45.0.1-1ubuntu1.debian.tar.xz
94d35b0b1b1be6295f49ad9fb07bf9227808e31c 18697 gdm3_45.0.1-1ubuntu1_source.buildinfo
Checksums-Sha256:
bbb0c0e3b537dfb02fe4e78b7a1aabd1a0de8d70a2e288cd0b38462eaad44eb5 3419 gdm3_45.0.1-1ubuntu1.dsc
6572578c05e3c6569d6ed269f7de2aaf3a035657654586d8243907bb7a6ffa85 855004 gdm3_45.0.1.orig.tar.xz
df45fb38e16aff1b94153f1075da1b3f4f9904f1db761c805b2d5669a0618021 103272 gdm3_45.0.1-1ubuntu1.debian.tar.xz
94b36c7cb02d4a548d318759f6fd14790254ab45b40807ae943e812bbd0dd5ad 18697 gdm3_45.0.1-1ubuntu1_source.buildinfo
Files:
384d613a507dc479bc6d5df1f6eb68f6 3419 gnome optional gdm3_45.0.1-1ubuntu1.dsc
4912429c0231a95fedd086d1ac8f54ea 855004 gnome optional gdm3_45.0.1.orig.tar.xz
258423875d34f21395ed1f2e47ba0bc9 103272 gnome optional gdm3_45.0.1-1ubuntu1.debian.tar.xz
dbe38f58a7b83b82116cf2565593af3a 18697 gnome optional gdm3_45.0.1-1ubuntu1_source.buildinfo
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
More information about the noble-changes
mailing list