[ubuntu/vivid-proposed] dbus 1.8.12-1ubuntu1 (Accepted)
Iain Lane
iain at orangesquash.org.uk
Mon Dec 15 18:03:15 UTC 2014
dbus (1.8.12-1ubuntu1) vivid; urgency=low
* Merge from Debian unstable. Remaining changes:
- Install binaries into / rather than /usr:
+ debian/rules: Set --exec-prefix=/
+ debian/dbus.install, debian/dbus-x11.install: Install from /bin
- Use upstart to start:
+ Add debian/dbus.upstart and dbus.user-session.upstart
+ debian/dbus.postinst: Use upstart call instead of invoking the init.d
script for checking if we are already running.
+ debian/control: versioned dependency on netbase that emits the new
deconfiguring-networking event used in upstart script.
- 20_system_conf_limit.patch: Increase max_match_rules_per_connection for
the system bus to 5000 (LP #454093)
- 81-session.conf-timeout.patch: Raise the service startup timeout from 25
to 60 seconds. It may be too short on the live CD with slow machines.
- debian/dbus.user-session.upstart, debian/rules: Communicate session bus
to Upstart Session Init to avoid potential out-of-memory scenario
triggered by Upstart clients that do not run main loops. Store the
session bus address in XDG_RUNTIME_DIR.
(LP: #1235649, LP: #1252317).
- debian/control, debian/rules: Build against libapparmor for AppArmor
D-Bus mediation
- debian/control: Use logind for session tracking, so that "at_console"
policies work with logind instead of ConsoleKit. Add "libpam-systemd"
recommends.
- debian/rules: Adjust dbus-send path to our changed install layout.
(LP: #1325364)
- debian/dbus-Xsession: Don't start a session bus if there already is
one, i. e. $DBUS_SESSION_BUS_ADDRESS is already set. (Closes: #681241)
- 0001-Document-AppArmor-enforcement-in-the-dbus-daemon-man.patch,
0002-Add-apparmor-element-and-attributes-to-the-bus-confi.patch,
0003-Update-autoconf-file-to-build-against-libapparmor.patch,
0004-Add-apparmor-element-support-to-bus-config-parsing.patch,
0005-Initialize-AppArmor-mediation.patch,
0006-Store-AppArmor-label-of-bus-during-initialization.patch,
0007-Store-AppArmor-label-of-connecting-processes.patch,
0008-Mediation-of-processes-that-acquire-well-known-names.patch,
0009-Do-LSM-checks-after-determining-if-the-message-is-a-.patch,
0010-Mediation-of-processes-sending-and-receiving-message.patch,
0011-Mediation-of-processes-eavesdropping.patch,
0012-New-a-sv-helper-for-using-byte-arrays-as-the-variant.patch,
0013-Add-AppArmor-support-to-GetConnectionCredentials.patch: Add the
latest set of AppArmor D-Bus mediation patches. This the v3 patch set
from the upstream feature inclusion bug.
- https://bugs.freedesktop.org/show_bug.cgi?id=75113
- aa-get-connection-apparmor-security-context.patch: This is not
intended for upstream inclusion. It implements a bus method
(GetConnectionAppArmorSecurityContext) to get a connection's AppArmor
security context but upstream D-Bus has recently added a generic way of
getting a connection's security credentials (GetConnectionCredentials).
Ubuntu should carry this patch until packages in the archive are moved
over to the new, generic method of getting a connection's credentials.
dbus (1.8.12-1) unstable; urgency=medium
* New upstream release 1.8.12
- increase auth_timeout from 5 seconds back to 30 seconds since it
appears to cause slow or failed boot on some systems, reverting a
change in 1.8.8 (Closes: #769069)
- add a README.Debian to the dbus package documenting how
sysadmins with hostile local users can get the lower timeout back,
if their systems are fast enough to boot correctly like that
dbus (1.8.10-1) unstable; urgency=medium
* New upstream release 1.8.10
- raise dbus-daemon's file descriptor limit to 65536 to avoid an
opportunity for denial of service
(CVE-2014-7824, an incomplete fix for CVE-2014-3636)
* Start 'dbus-daemon --system' as root under sysvinit (it already
starts as root under systemd), so it can increase its file
descriptor limit
Date: Fri, 12 Dec 2014 18:04:56 +0000
Changed-By: Iain Lane <iain at orangesquash.org.uk>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/dbus/1.8.12-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 12 Dec 2014 18:04:56 +0000
Source: dbus
Binary: dbus dbus-udeb dbus-x11 libdbus-1-3 libdbus-1-3-udeb dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: source
Version: 1.8.12-1ubuntu1
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Iain Lane <iain at orangesquash.org.uk>
Description:
dbus - simple interprocess messaging system (daemon and utilities)
dbus-1-dbg - simple interprocess messaging system (debug symbols)
dbus-1-doc - simple interprocess messaging system (documentation)
dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb)
dbus-x11 - simple interprocess messaging system (X11 deps)
libdbus-1-3 - simple interprocess messaging system (library)
libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb)
libdbus-1-dev - simple interprocess messaging system (development headers)
Closes: 681241 769069
Launchpad-Bugs-Fixed: 1235649 1252317 1325364
Changes:
dbus (1.8.12-1ubuntu1) vivid; urgency=low
.
* Merge from Debian unstable. Remaining changes:
- Install binaries into / rather than /usr:
+ debian/rules: Set --exec-prefix=/
+ debian/dbus.install, debian/dbus-x11.install: Install from /bin
- Use upstart to start:
+ Add debian/dbus.upstart and dbus.user-session.upstart
+ debian/dbus.postinst: Use upstart call instead of invoking the init.d
script for checking if we are already running.
+ debian/control: versioned dependency on netbase that emits the new
deconfiguring-networking event used in upstart script.
- 20_system_conf_limit.patch: Increase max_match_rules_per_connection for
the system bus to 5000 (LP #454093)
- 81-session.conf-timeout.patch: Raise the service startup timeout from 25
to 60 seconds. It may be too short on the live CD with slow machines.
- debian/dbus.user-session.upstart, debian/rules: Communicate session bus
to Upstart Session Init to avoid potential out-of-memory scenario
triggered by Upstart clients that do not run main loops. Store the
session bus address in XDG_RUNTIME_DIR.
(LP: #1235649, LP: #1252317).
- debian/control, debian/rules: Build against libapparmor for AppArmor
D-Bus mediation
- debian/control: Use logind for session tracking, so that "at_console"
policies work with logind instead of ConsoleKit. Add "libpam-systemd"
recommends.
- debian/rules: Adjust dbus-send path to our changed install layout.
(LP: #1325364)
- debian/dbus-Xsession: Don't start a session bus if there already is
one, i. e. $DBUS_SESSION_BUS_ADDRESS is already set. (Closes: #681241)
- 0001-Document-AppArmor-enforcement-in-the-dbus-daemon-man.patch,
0002-Add-apparmor-element-and-attributes-to-the-bus-confi.patch,
0003-Update-autoconf-file-to-build-against-libapparmor.patch,
0004-Add-apparmor-element-support-to-bus-config-parsing.patch,
0005-Initialize-AppArmor-mediation.patch,
0006-Store-AppArmor-label-of-bus-during-initialization.patch,
0007-Store-AppArmor-label-of-connecting-processes.patch,
0008-Mediation-of-processes-that-acquire-well-known-names.patch,
0009-Do-LSM-checks-after-determining-if-the-message-is-a-.patch,
0010-Mediation-of-processes-sending-and-receiving-message.patch,
0011-Mediation-of-processes-eavesdropping.patch,
0012-New-a-sv-helper-for-using-byte-arrays-as-the-variant.patch,
0013-Add-AppArmor-support-to-GetConnectionCredentials.patch: Add the
latest set of AppArmor D-Bus mediation patches. This the v3 patch set
from the upstream feature inclusion bug.
- https://bugs.freedesktop.org/show_bug.cgi?id=75113
- aa-get-connection-apparmor-security-context.patch: This is not
intended for upstream inclusion. It implements a bus method
(GetConnectionAppArmorSecurityContext) to get a connection's AppArmor
security context but upstream D-Bus has recently added a generic way of
getting a connection's security credentials (GetConnectionCredentials).
Ubuntu should carry this patch until packages in the archive are moved
over to the new, generic method of getting a connection's credentials.
.
dbus (1.8.12-1) unstable; urgency=medium
.
* New upstream release 1.8.12
- increase auth_timeout from 5 seconds back to 30 seconds since it
appears to cause slow or failed boot on some systems, reverting a
change in 1.8.8 (Closes: #769069)
- add a README.Debian to the dbus package documenting how
sysadmins with hostile local users can get the lower timeout back,
if their systems are fast enough to boot correctly like that
.
dbus (1.8.10-1) unstable; urgency=medium
.
* New upstream release 1.8.10
- raise dbus-daemon's file descriptor limit to 65536 to avoid an
opportunity for denial of service
(CVE-2014-7824, an incomplete fix for CVE-2014-3636)
* Start 'dbus-daemon --system' as root under sysvinit (it already
starts as root under systemd), so it can increase its file
descriptor limit
Checksums-Sha1:
af247a71e7982780dcdf88e1884fd9fe309d12d6 2968 dbus_1.8.12-1ubuntu1.dsc
9dc3003a53892b41eb61ade20051aba57be1b4b1 1864609 dbus_1.8.12.orig.tar.gz
367be214103d952874b8d746ad10b22f9d5bdd62 61432 dbus_1.8.12-1ubuntu1.debian.tar.xz
Checksums-Sha256:
8774700961bcbe949ef19a215c3e1961957a7b8e94b71cd2319665dea81e6c87 2968 dbus_1.8.12-1ubuntu1.dsc
c91428f28d2925ba32d34ffc824bfcf4d40d5e1e67befc4bcf2202f0a862501e 1864609 dbus_1.8.12.orig.tar.gz
45baa91982b6e217d0c333321473b547a3f82950be9df5cc4d566b428450c75c 61432 dbus_1.8.12-1ubuntu1.debian.tar.xz
Files:
661002a3174605568557e2a383eb2cc1 2968 admin optional dbus_1.8.12-1ubuntu1.dsc
0ca23fc84c09cb3d29b9c27811ff4475 1864609 admin optional dbus_1.8.12.orig.tar.gz
b1b68718e5b569c9bf731a4e0cccbf15 61432 admin optional dbus_1.8.12-1ubuntu1.debian.tar.xz
Original-Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCgAGBQJUjyGkAAoJEONS1cUcUEHUEZQQAKNm2lzrr3RcKIQt44f+uDar
T4rl/Tfgtv4sIerTvgtyTalkiDH9ECS/747eVfpRkPBpYt05hBOiHBORnn6U4G2B
EMW5gOSd8y2Ee7zMFFsV1owFyNtqRqnR8nBQGa0uXW0g5oQgnUNZRJB4WQMXpQu/
Ry4alhk6LfnhISWVhZhJ+CTgi9i0JT7C4LzRmo+/GIWe0g6t96er4lAK55fkoVet
rcNEz9NTAUVRKeplauM1ckSgHd1C3jgwhX9r7XX3SQY05RJbatFDgMDoIU8tMhaF
U9MM5yYm3krMSdL3ldUtaPsHxKIFZqVwNQCEOj+pLiD0rYfTWXe7M1r8Y2Z6mWJ8
B+GKiwICuvJ+3FBE9mEW0hfV3yos5oNJzLXU8HnM9UJsJfjyPXjQ0D6THK1PMahN
ecw0HV7if77GbhtC8vpTT+eR+eXtG9+ygHMQkMj4609+lEkWliMgirpJTjwlPlsL
pmnpsLMy43r4IHKCxK1FhTln4LJEpje7E4n2nkxZ71zCGqcLVn2D2k53R3DVAVS5
ewEGozq+thPnOHcIt6FLlqlbG3cF5zrVBsevgfyffykAk79NqqzaSLCBNXzCP+EK
yYuNzN0Lw8QSWQpxIoUF6OXjr52X0DlaFE4QogfJxJ8CTQHOpYIYIsZOnJnQZ5hI
GB/lwQmaRJHMRmLmVUKp
=/HAs
-----END PGP SIGNATURE-----
More information about the Vivid-changes
mailing list