[ubuntu/questing-proposed] gdm3 49~beta-0ubuntu2 (Accepted)
Alessandro Astone
alessandro.astone at canonical.com
Mon Aug 18 19:23:16 UTC 2025
gdm3 (49~beta-0ubuntu2) questing; urgency=medium
* Merge with Debian. Remaining changes:
+ readme.debian: update for correct paths in ubuntu
+ control:
- don't recommend desktop-base
- depend on bash for config_error_dialog.patch
- update vcs field
+ rules:
- don't override default user/group
- -dgdm-xsession=true to install upstream xsession script
- override dh_installinit with --no-start to avoid session being killed
+ rules, readme.debian, gdm3.8.pod:
use upstream custom.conf instead of daemon.conf
+ gdm3.sysusers: rename user and group back to gdm
+ debian/tests/control:
- Use gdm user name
+ gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
settings
+ gdm3.install:
- don't install debian/xsession
+ add run_xsession.d.patch
+ add xresources_is_a_dir.patch
- fix loading from /etc/x11/xresources/*
+ add nvidia_prime.patch:
- add hook to run prime-offload (as root) and prime-switch if
nvidia-prime is installed
+ add revert_override_lang_with_accountservices.patch:
- on ubuntu accountservices only stores the language and not the
full locale as needed by lang.
+ add dont_set_language_env.patch:
- don't run the set_up_session_language() function, since it
overrides variable values set by ~/.pam_environment
+ add config_error_dialog.patch:
- show warning dialog in case of error in ~/.profile etc. and
don't let a syntax error make the login fail
+ add prefer_ubuntu_session_fallback.patch:
- Prefer ubuntu session as fallback instead of GNOME
+ add XSession-Use-x-terminal-emulator-as-fallback-instead-of-x.patch:
- Use x-terminal-emulator as fallback instead of xterm
+ debian/greeter.dconf-defaults: don't set debian settings in the
greeter's dconf db
+ debian/greeter.dconf-defaults: keep smartcard auth enabled by default
+ New upstream release 49~beta
- d/control: Drop dependency on dbus-daemon
- d/control: Require gnome-session 49~beta
- d/rules: Drop meson options working-dir, screenshot-dir,
ran-once-marker-dir
+ Disable x11 greeter
- d/rules: Disable x11-support flag
- d/control: Drop unused build-deps
- d/control: Drop long unused dependency on Xephyr
- d/control: Drop dependency on Xorg
gdm3 (48.0-3) unstable; urgency=medium
* Team upload
[ Luca Boccassi ]
* Use a sysusers.d file to create the Debian-gdm user.
This allows /usr-only images with an ephemeral/factory reset/firstboot
/etc/. (Closes: #1107682)
[ Simon McVittie ]
* Activate dh_installsysusers declaratively rather than imperatively.
This lets debhelper choose a good point in the sequence for it.
* d/gdm3.postrm, d/control: Don't delete system user/group during purge.
In previous discussions like #1006912 there seems to be consensus
that removing uids is dangerous because there might still be files
owned by that uid on the filesystem, causing unintended access to be
granted if the uid is subsequently reused for a different system user.
This also means we can drop the adduser dependency.
* Build-depend on gir1.2-*-dev instead of libgirepository1.0-dev.
libgirepository1.0-dev is not Multi-Arch co-installable and should be
phased out during the forky release cycle.
* d/control, d/rules: Let the package be cross-compiled.
debhelper currently uses debcrossgen which does not support cross
GObject-Introspection, so for now we need to opt-in to using
`meson env2mfile` instead.
We need to run dconf-cli from the build architecture, since we will
be unable to run it from the host architecture in general.
* d/copyright: Don't quote the FSF's former postal address
* Standards-Version: 4.7.2 (no changes required)
gdm3 (48.0-2) unstable; urgency=medium
* Team upload
* d/greeter.dconf-defaults: Remove non-functional theming options.
The visual design of the greeter (login prompt) is no longer intended
to be configurable, and in particular the background is no longer
configurable, so none of the background-related settings have any
effect. The greeter also does not use GTK, so changing the GTK
theme has no effect on it.
Remove these options from the default configuration file so that
they will not mislead sysadmins. (Closes: #1105057)
* d/greeter.dconf-defaults: Add some useful example options.
Disabling fingerprint authentication is one of the examples given
in the GNOME System Administration Guide. The steps from that guide
won't actually work as-is on Debian (because we use a different
username for the greeter, #1107944) but we can make it as easy as
possible to do the equivalent.
Meanwhile, disabling smartcard authentication is a way to avoid the
presence of a smartcard having the side-effect of disabling the user
list, and in some configurations also the ability to log in with a
password (#1051785).
* d/gdm3.alternatives: When smart card authentication is re-enabled,
make gdm-smartcard-sssd-or-password the default.
With the previous default, gdm-smartcard-sssd-exclusive, if a smart
card was plugged in and libpam-sss was installed, we would reject
attempts to log in with a password. This is the most-hardened choice
if smart cards are being used for authentication, but prevents login
if the smart card has not been enrolled for authentication and is
actually being used for some other purpose such as OpenPGP or X509.
(Closes: #1051785)
* d/greeter.dconf-defaults: Disable smartcard authentication by default.
Enabling smartcard authentication has side-effects on other aspects of
greeter behaviour if a compatible smartcard happens to be connected:
in particular, it disables the user list, resulting in users being
required to type their username to log in.
Enrolling smartcards to be used for authentication requires sysadmin
action, so it seems reasonable to require the sysadmin to take action
to enable it after they have done the necessary enrolment step.
(Closes: #1051785)
* d/p/gdm-settings-utils-rename-variable-to-fix-build-with-gcc-.patch:
Add patch from upstream 49.alpha.0 to fix FTBFS in C23 mode.
This won't become relevant until gcc 15 becomes the default during
the forky cycle, but is a harmless change while we're uploading anyway.
(Closes: #1096689)
Date: Mon, 18 Aug 2025 21:10:23 +0200
Changed-By: Alessandro Astone <alessandro.astone at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gdm3/49~beta-0ubuntu2
-------------- next part --------------
Format: 1.8
Date: Mon, 18 Aug 2025 21:10:23 +0200
Source: gdm3
Built-For-Profiles: noudeb
Architecture: source
Version: 49~beta-0ubuntu2
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Alessandro Astone <alessandro.astone at canonical.com>
Closes: 1051785 1096689 1105057 1107682
Changes:
gdm3 (49~beta-0ubuntu2) questing; urgency=medium
.
* Merge with Debian. Remaining changes:
+ readme.debian: update for correct paths in ubuntu
+ control:
- don't recommend desktop-base
- depend on bash for config_error_dialog.patch
- update vcs field
+ rules:
- don't override default user/group
- -dgdm-xsession=true to install upstream xsession script
- override dh_installinit with --no-start to avoid session being killed
+ rules, readme.debian, gdm3.8.pod:
use upstream custom.conf instead of daemon.conf
+ gdm3.sysusers: rename user and group back to gdm
+ debian/tests/control:
- Use gdm user name
+ gdm3.*.pam: make pam_env read ~/.pam_environment, as we use in g-c-c
settings
+ gdm3.install:
- don't install debian/xsession
+ add run_xsession.d.patch
+ add xresources_is_a_dir.patch
- fix loading from /etc/x11/xresources/*
+ add nvidia_prime.patch:
- add hook to run prime-offload (as root) and prime-switch if
nvidia-prime is installed
+ add revert_override_lang_with_accountservices.patch:
- on ubuntu accountservices only stores the language and not the
full locale as needed by lang.
+ add dont_set_language_env.patch:
- don't run the set_up_session_language() function, since it
overrides variable values set by ~/.pam_environment
+ add config_error_dialog.patch:
- show warning dialog in case of error in ~/.profile etc. and
don't let a syntax error make the login fail
+ add prefer_ubuntu_session_fallback.patch:
- Prefer ubuntu session as fallback instead of GNOME
+ add XSession-Use-x-terminal-emulator-as-fallback-instead-of-x.patch:
- Use x-terminal-emulator as fallback instead of xterm
+ debian/greeter.dconf-defaults: don't set debian settings in the
greeter's dconf db
+ debian/greeter.dconf-defaults: keep smartcard auth enabled by default
+ New upstream release 49~beta
- d/control: Drop dependency on dbus-daemon
- d/control: Require gnome-session 49~beta
- d/rules: Drop meson options working-dir, screenshot-dir,
ran-once-marker-dir
+ Disable x11 greeter
- d/rules: Disable x11-support flag
- d/control: Drop unused build-deps
- d/control: Drop long unused dependency on Xephyr
- d/control: Drop dependency on Xorg
.
gdm3 (48.0-3) unstable; urgency=medium
.
* Team upload
.
[ Luca Boccassi ]
* Use a sysusers.d file to create the Debian-gdm user.
This allows /usr-only images with an ephemeral/factory reset/firstboot
/etc/. (Closes: #1107682)
.
[ Simon McVittie ]
* Activate dh_installsysusers declaratively rather than imperatively.
This lets debhelper choose a good point in the sequence for it.
* d/gdm3.postrm, d/control: Don't delete system user/group during purge.
In previous discussions like #1006912 there seems to be consensus
that removing uids is dangerous because there might still be files
owned by that uid on the filesystem, causing unintended access to be
granted if the uid is subsequently reused for a different system user.
This also means we can drop the adduser dependency.
* Build-depend on gir1.2-*-dev instead of libgirepository1.0-dev.
libgirepository1.0-dev is not Multi-Arch co-installable and should be
phased out during the forky release cycle.
* d/control, d/rules: Let the package be cross-compiled.
debhelper currently uses debcrossgen which does not support cross
GObject-Introspection, so for now we need to opt-in to using
`meson env2mfile` instead.
We need to run dconf-cli from the build architecture, since we will
be unable to run it from the host architecture in general.
* d/copyright: Don't quote the FSF's former postal address
* Standards-Version: 4.7.2 (no changes required)
.
gdm3 (48.0-2) unstable; urgency=medium
.
* Team upload
* d/greeter.dconf-defaults: Remove non-functional theming options.
The visual design of the greeter (login prompt) is no longer intended
to be configurable, and in particular the background is no longer
configurable, so none of the background-related settings have any
effect. The greeter also does not use GTK, so changing the GTK
theme has no effect on it.
Remove these options from the default configuration file so that
they will not mislead sysadmins. (Closes: #1105057)
* d/greeter.dconf-defaults: Add some useful example options.
Disabling fingerprint authentication is one of the examples given
in the GNOME System Administration Guide. The steps from that guide
won't actually work as-is on Debian (because we use a different
username for the greeter, #1107944) but we can make it as easy as
possible to do the equivalent.
Meanwhile, disabling smartcard authentication is a way to avoid the
presence of a smartcard having the side-effect of disabling the user
list, and in some configurations also the ability to log in with a
password (#1051785).
* d/gdm3.alternatives: When smart card authentication is re-enabled,
make gdm-smartcard-sssd-or-password the default.
With the previous default, gdm-smartcard-sssd-exclusive, if a smart
card was plugged in and libpam-sss was installed, we would reject
attempts to log in with a password. This is the most-hardened choice
if smart cards are being used for authentication, but prevents login
if the smart card has not been enrolled for authentication and is
actually being used for some other purpose such as OpenPGP or X509.
(Closes: #1051785)
* d/greeter.dconf-defaults: Disable smartcard authentication by default.
Enabling smartcard authentication has side-effects on other aspects of
greeter behaviour if a compatible smartcard happens to be connected:
in particular, it disables the user list, resulting in users being
required to type their username to log in.
Enrolling smartcards to be used for authentication requires sysadmin
action, so it seems reasonable to require the sysadmin to take action
to enable it after they have done the necessary enrolment step.
(Closes: #1051785)
* d/p/gdm-settings-utils-rename-variable-to-fix-build-with-gcc-.patch:
Add patch from upstream 49.alpha.0 to fix FTBFS in C23 mode.
This won't become relevant until gcc 15 becomes the default during
the forky cycle, but is a harmless change while we're uploading anyway.
(Closes: #1096689)
Checksums-Sha1:
1ebc4a688c28ff7f22f2661bef582023ff770046 2707 gdm3_49~beta-0ubuntu2.dsc
13509b63635446c04989dd56640bff3f99d42d08 943724 gdm3_49~beta.orig.tar.xz
05766dde782c2bb55dfb5a3ab0a4031239d3f261 97908 gdm3_49~beta-0ubuntu2.debian.tar.xz
566497b582cfc90232bd065c35682fe523fe1338 15991 gdm3_49~beta-0ubuntu2_source.buildinfo
Checksums-Sha256:
03cf867e228958899272e94330b49047c8f5fdbf60e802f8c98e43585122e27c 2707 gdm3_49~beta-0ubuntu2.dsc
ba81047e6a76c36a51079f5ba5fcddfc9c7a754cde10d5da33cb698fe77a13dd 943724 gdm3_49~beta.orig.tar.xz
e8810e666e67bb0df06c21cfa2b8f6ef8e84028aa6e057ace88be2109ae55355 97908 gdm3_49~beta-0ubuntu2.debian.tar.xz
c4353f42ca52d7c5b3387a83bd40e43e4c61d5392b87cbefda2604301eb7f81a 15991 gdm3_49~beta-0ubuntu2_source.buildinfo
Files:
1d70f94c23882c2bceb950c61099fcc8 2707 gnome optional gdm3_49~beta-0ubuntu2.dsc
e9d93c2a93bbc4020e53fa4c027e4fd2 943724 gnome optional gdm3_49~beta.orig.tar.xz
5ae386fff334490618c1655d0d73c32c 97908 gnome optional gdm3_49~beta-0ubuntu2.debian.tar.xz
6168874fe4f3b483c82a6ed90c4904a6 15991 gnome optional gdm3_49~beta-0ubuntu2_source.buildinfo
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
More information about the Questing-changes
mailing list