[ubuntu/hirsute-proposed] gdm3 3.38.2.1-3ubuntu1 (Accepted)
Marco Trevisan (Treviño)
marco at ubuntu.com
Wed Jun 2 15:40:59 UTC 2021
gdm3 (3.38.2.1-3ubuntu1) hirsute; urgency=medium
* Merge with debian
* debian/gdm3.gdm-smartcard-*: Keep using user_readenv=1 in pam_env.so
* Remaining changes with debian:
+ readme.debian: update for correct paths in ubuntu
+ control.in:
- don't recommend desktop-base
- build depend on libgudev-1.0-dev
- depend on bash for config_error_dialog.patch
- update vcs field
+ rules:
- don't override default user/group
- -dgdm-xsession=true to install upstream xsession script
- override dh_installinit with --no-start to avoid session being killed
+ rules, readme.debian, gdm3.8.pod:
use upstream custom.conf instead of daemon.conf
+ gdm3.{postinst,postrm}: rename user and group back to gdm
+ gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
settings
+ gdm3.install:
- stop installing default.desktop. it adds unnecessary clutter
("system default") to the session chooser.
- don't install debian/xsession
+ add run_xsession.d.patch
+ add xresources_is_a_dir.patch
- fix loading from /etc/x11/xresources/*
+ add nvidia_prime.patch:
- add hook to run prime-offload (as root) and prime-switch if
nvidia-prime is installed
+ add revert_override_lang_with_accountservices.patch:
- on ubuntu accountservices only stores the language and not the
full locale as needed by lang.
+ add dont_set_language_env.patch:
- don't run the set_up_session_language() function, since it
overrides variable values set by ~/.pam_environment
+ add config_error_dialog.patch:
- show warning dialog in case of error in ~/.profile etc. and
don't let a syntax error make the login fail
+ add debian/patches/revert_nvidia_wayland_blacklist.patch:
- don't blacklist nvidia for wayland
+ add gdm3.service-wait-for-drm-device-before-trying-to-start-i.patch:
- wait for the first valid gdm device on pre-start
+ add debian/default.pa
- disable bluetooth audio devices in pulseaudio from gdm3.
+ debian/gdm3.install
- added details of the default.pa file
+ debian/gdm3.postinst
- added installation of default.pa and creation of dir if it doesn't
exist.
+ debian/greeter.dconf-defaults: don't set debian settings in the
greeter's dconf db
gdm3 (3.38.2.1-3) experimental; urgency=medium
* debian/changelog: Remove bad entry meant to be in ubuntu side only
It's not needed in debian
* debian/patches: Correctly return from idle callback
* debian/gdm3.gdm-smartcard-*:
- Do not set user_readenv=1 in pam_env.so (keep it for ubuntu only).
- Ignore invalid user errors on pam_succeed_if.so.
We may call the gdm-smartcard module without an user, leaving the module
to figure it out depending on the smartcard certificate.
So we need to ignore PAM_USER_UNKNOWN errors on pam_suceed_if.so.
While pam_sss.so already checks for the user being non root internally,
it's always better to ensure early this in all the cases.
In the pkcs11 case instead we need to check it again after the module
has returned. (LP: #1917362)
- Check for /var/run/nologin (and friends) only when an user is defined
pam_nologin.so requires a PAM_USER to be defined in order to check if
the request has been done by root, possibly stopping the login otherwise.
And in case none was provided, it will trigger the fallback pam prompt.
However, with smartcard authentication we may initiate the PAM session
without an user defined and leave to the smartcard service to try to
figure it out depending on the token that has been inserted, that may
have an user associated with it.
So, ensure that we load all the PAM modules that require an user after
the smartcard one, that in case will set one for us.
Only after that, we can fail in case /var/run/nologin is present
(LP: #1917362)
Date: Thu, 15 Apr 2021 18:14:18 +0100
Changed-By: Marco Trevisan (Treviño) <marco at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Iain Lane <iain at orangesquash.org.uk>
https://launchpad.net/ubuntu/+source/gdm3/3.38.2.1-3ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 15 Apr 2021 18:14:18 +0100
Source: gdm3
Architecture: source
Version: 3.38.2.1-3ubuntu1
Distribution: hirsute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marco Trevisan (Treviño) <marco at ubuntu.com>
Launchpad-Bugs-Fixed: 1917362
Changes:
gdm3 (3.38.2.1-3ubuntu1) hirsute; urgency=medium
.
* Merge with debian
* debian/gdm3.gdm-smartcard-*: Keep using user_readenv=1 in pam_env.so
* Remaining changes with debian:
+ readme.debian: update for correct paths in ubuntu
+ control.in:
- don't recommend desktop-base
- build depend on libgudev-1.0-dev
- depend on bash for config_error_dialog.patch
- update vcs field
+ rules:
- don't override default user/group
- -dgdm-xsession=true to install upstream xsession script
- override dh_installinit with --no-start to avoid session being killed
+ rules, readme.debian, gdm3.8.pod:
use upstream custom.conf instead of daemon.conf
+ gdm3.{postinst,postrm}: rename user and group back to gdm
+ gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
settings
+ gdm3.install:
- stop installing default.desktop. it adds unnecessary clutter
("system default") to the session chooser.
- don't install debian/xsession
+ add run_xsession.d.patch
+ add xresources_is_a_dir.patch
- fix loading from /etc/x11/xresources/*
+ add nvidia_prime.patch:
- add hook to run prime-offload (as root) and prime-switch if
nvidia-prime is installed
+ add revert_override_lang_with_accountservices.patch:
- on ubuntu accountservices only stores the language and not the
full locale as needed by lang.
+ add dont_set_language_env.patch:
- don't run the set_up_session_language() function, since it
overrides variable values set by ~/.pam_environment
+ add config_error_dialog.patch:
- show warning dialog in case of error in ~/.profile etc. and
don't let a syntax error make the login fail
+ add debian/patches/revert_nvidia_wayland_blacklist.patch:
- don't blacklist nvidia for wayland
+ add gdm3.service-wait-for-drm-device-before-trying-to-start-i.patch:
- wait for the first valid gdm device on pre-start
+ add debian/default.pa
- disable bluetooth audio devices in pulseaudio from gdm3.
+ debian/gdm3.install
- added details of the default.pa file
+ debian/gdm3.postinst
- added installation of default.pa and creation of dir if it doesn't
exist.
+ debian/greeter.dconf-defaults: don't set debian settings in the
greeter's dconf db
.
gdm3 (3.38.2.1-3) experimental; urgency=medium
.
* debian/changelog: Remove bad entry meant to be in ubuntu side only
It's not needed in debian
* debian/patches: Correctly return from idle callback
* debian/gdm3.gdm-smartcard-*:
- Do not set user_readenv=1 in pam_env.so (keep it for ubuntu only).
- Ignore invalid user errors on pam_succeed_if.so.
We may call the gdm-smartcard module without an user, leaving the module
to figure it out depending on the smartcard certificate.
So we need to ignore PAM_USER_UNKNOWN errors on pam_suceed_if.so.
While pam_sss.so already checks for the user being non root internally,
it's always better to ensure early this in all the cases.
In the pkcs11 case instead we need to check it again after the module
has returned. (LP: #1917362)
- Check for /var/run/nologin (and friends) only when an user is defined
pam_nologin.so requires a PAM_USER to be defined in order to check if
the request has been done by root, possibly stopping the login otherwise.
And in case none was provided, it will trigger the fallback pam prompt.
However, with smartcard authentication we may initiate the PAM session
without an user defined and leave to the smartcard service to try to
figure it out depending on the token that has been inserted, that may
have an user associated with it.
So, ensure that we load all the PAM modules that require an user after
the smartcard one, that in case will set one for us.
Only after that, we can fail in case /var/run/nologin is present
(LP: #1917362)
Checksums-Sha1:
d36558df1fa5215dec7a92596a77fc1bc0ba0f56 3088 gdm3_3.38.2.1-3ubuntu1.dsc
50cc6a4f6f4f131d0da84001773d1a96dbf54e79 106040 gdm3_3.38.2.1-3ubuntu1.debian.tar.xz
2e17d41d38e72d61151756ac1e9f43fe415e33ff 21853 gdm3_3.38.2.1-3ubuntu1_source.buildinfo
Checksums-Sha256:
1f5819f3ddc96ab29f4823c4498816190651bfbf1bb1cdc08f7c4c7a78b94ea9 3088 gdm3_3.38.2.1-3ubuntu1.dsc
8a6c1405f312507726d9f2c1656dbf0cddeec815b9d57ad217706ab2d1bf938f 106040 gdm3_3.38.2.1-3ubuntu1.debian.tar.xz
ce31bb80ad3cf69b00b010cb6b594b58f30b6fe97fe9361b4031182cf479a7bd 21853 gdm3_3.38.2.1-3ubuntu1_source.buildinfo
Files:
e14c6fedf99fe22c70a0c89dabbf2077 3088 gnome optional gdm3_3.38.2.1-3ubuntu1.dsc
9aca50e8bc3b0d051f95062c9e0dcc43 106040 gnome optional gdm3_3.38.2.1-3ubuntu1.debian.tar.xz
3affd0b25656ec232324257286fbed4d 21853 gnome optional gdm3_3.38.2.1-3ubuntu1_source.buildinfo
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
More information about the Hirsute-changes
mailing list