Hello community, here is the log from the commit of package dbus-1 checked in at Wed Oct 22 17:46:48 CEST 2008. -------- --- dbus-1/dbus-1.changes 2008-10-07 10:10:42.000000000 +0200 +++ /mounts/work_src_done/STABLE/dbus-1/dbus-1.changes 2008-10-17 11:18:52.521055000 +0200 @@ -1,0 +2,5 @@ +Thu Oct 9 20:44:10 CDT 2008 - hpj@novell.com + +- Add dbus-allow-root-access-to-session-bus.patch (bnc#428963). + +------------------------------------------------------------------- dbus-1-x11.changes: same change calling whatdependson for head-i586 New: ---- dbus-allow-root-access-to-session-bus.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dbus-1.spec ++++++ --- /var/tmp/diff_new_pack.C16546/_old 2008-10-22 17:46:17.000000000 +0200 +++ /var/tmp/diff_new_pack.C16546/_new 2008-10-22 17:46:17.000000000 +0200 @@ -35,13 +35,14 @@ BuildRequires: libselinux-devel %endif Version: 1.2.4 -Release: 1 +Release: 2 AutoReqProv: on Source0: dbus-%{version}.tar.bz2 Source1: rc.boot.dbus Source2: dbus-1.desktop Source3: dbus_at_console.ck Patch0: dbus-do-not-abort-on-check-thoenig-01.patch +Patch1: dbus-allow-root-access-to-session-bus.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build # COMMON1-END PreReq: permissions /usr/sbin/groupadd /usr/sbin/useradd /sbin/insserv /etc/init.d/boot.localfs @@ -146,6 +147,7 @@ %setup -n dbus-%{version} -q # Disable this until we hit RC phase #%patch0 +%patch1 -p1 %build autoreconf -fi @@ -203,6 +205,7 @@ # install -d %{buildroot}%{_sysconfdir}/ConsoleKit/run-session.d install -m 755 %{SOURCE3} %{buildroot}%{_sysconfdir}/ConsoleKit/run-session.d +mkdir -p %{buildroot}%{_localstatedir}/lib/dbus %clean %{__rm} -rf %{buildroot} @@ -216,7 +219,6 @@ %{stop_on_removal dbus} %post -mkdir -p %{_localstatedir}/lib/dbus /bin/dbus-uuidgen --ensure %{insserv_force_if_yast dbus} /sbin/ldconfig @@ -226,19 +228,16 @@ %postun %{insserv_cleanup} -%{run_ldconfig} +/sbin/ldconfig %endif -%post devel -p /sbin/ldconfig - -%postun devel -p /sbin/ldconfig - %files %defattr(-, root, root) %dir %{_datadir}/dbus-1 %dir %{_datadir}/dbus-1/services %dir %{_datadir}/dbus-1/system-services %dir %{_datadir}/dbus-1/interfaces +%dir %{_localstatedir}/lib/dbus %doc AUTHORS COPYING HACKING NEWS README %{_sysconfdir}/dbus-1 %{_sysconfdir}/init.d/dbus @@ -277,6 +276,8 @@ %{_datadir}/susehelp %changelog +* Thu Oct 09 2008 hpj@novell.com +- Add dbus-allow-root-access-to-session-bus.patch (bnc#428963). * Tue Oct 07 2008 thoenig@suse.de - Update to D-Bus 1.2.4 - fix for CVE-2008-3834 (bnc#432901) @@ -462,7 +463,7 @@ * Thu Nov 09 2006 thoenig@suse.de - start service for D-Bus system bus also in run level 2 (b.n.c [#216805]) -* Sat Nov 04 2006 thoenig@suse.de +* Fri Nov 03 2006 thoenig@suse.de - remove patch dbus-send-do-not-close-shared-connection-thoenig-01.patch (fix is now upstream) @@ -555,7 +556,7 @@ * Thu Aug 31 2006 dkukawka@suse.de - added patch dbus-display_DBUS_DAEMONDIR_in_configure.diff to expand the complete path of DBUS_DAEMONDIR (b.n.c. #202854) -* Thu Aug 24 2006 thoenig@suse.de +* Wed Aug 23 2006 thoenig@suse.de - add patch dbus-unref-connections-on-close-thoenig-01.patch: Unref connections on dbus_connection_close (b.n.c. #201164). * Sat Aug 19 2006 thoenig@suse.de @@ -689,7 +690,7 @@ - Remove unneeded BuildRequires. * Sun Jan 29 2006 aj@suse.de - Splitup packages dbus-1-qt3-devel, dbus-1-qt-devel (#144857). -* Fri Jan 27 2006 mls@suse.de +* Thu Jan 26 2006 mls@suse.de - converted neededforbuild to BuildRequires * Mon Jan 23 2006 thoenig@suse.de - Fixed D-BUS to restart on `rcdbus restart` id session busses @@ -715,7 +716,7 @@ - removed patches: * dbus-dnotify_configure-01.diff (fixed upstream) * dbus-dnotify_watchdirs-01.diff (fixed upstream) -* Fri Dec 09 2005 ro@suse.de +* Thu Dec 08 2005 ro@suse.de - disable selinux * Tue Nov 22 2005 coolo@suse.de - make libdbus-1-qt self containing lib @@ -803,14 +804,14 @@ * Sun Mar 13 2005 thoenig@suse.de - applied `dbus-mono-leak.diff` which fixes memory leaks of the mono bindings. -* Sat Mar 12 2005 thoenig@suse.de +* Fri Mar 11 2005 thoenig@suse.de - new upstream version 0.23.4 * Thu Mar 10 2005 thoenig@suse.de - new upstream version 0.23.3 - removed obsolete patch (python_bindings_x86_64_fix.diff) * Thu Mar 03 2005 dkukawka@suse.de - fixed boot.dbus [see bug# 65775] -* Tue Mar 01 2005 thoenig@suse.de +* Mon Feb 28 2005 thoenig@suse.de - moved files from dbus-1-devel to dbus-1-{glib,java,qt} * Tue Feb 22 2005 thoenig@suse.de - added fix for python bindings to compile on 64 bit @@ -834,12 +835,12 @@ - Use mono-devel-packages in neededforbuild - pass --enable-mono in ./configure - Make sure the symbolic link of dbus-sharp.dll is installed -* Fri Feb 04 2005 thoenig@suse.de +* Thu Feb 03 2005 thoenig@suse.de - fixed assignment of .pc files * dbus-1.pc is now owned by dbus-1-devel * dbus-glib-1.pc is now owned by dbus-1-glib * dbus-sharp.pc is now owned by dbus-1-mono -* Fri Feb 04 2005 thoenig@suse.de +* Thu Feb 03 2005 thoenig@suse.de - fixed assignment of .pc files * dbus-1.pc is now owned by dbus-1-devel * dbus-glib-1.pc is now owned by dbus-1-glib @@ -881,7 +882,7 @@ - start depends on boot.localfs - changed spec-file, now insserv instead of chkconfig - fixed bug #49410 -* Tue Jan 11 2005 ro@suse.de +* Mon Jan 10 2005 ro@suse.de - added /usr/lib/qt3/bin to PATH (for moc) * Mon Jan 10 2005 adrian@suse.de - fix build, qt developer tools aren't in default PATH anymore @@ -908,14 +909,14 @@ spec-file - stop dbus automatically before uninstall - add/remove now dbus automatically to/from system services -* Sun Nov 21 2004 dkukawka@suse.de +* Sat Nov 20 2004 dkukawka@suse.de - fixed bug in spec-file * Thu Nov 18 2004 dkukawka@suse.de - removed binding package for Python while automake is fixed ! -* Thu Nov 18 2004 dkukawka@suse.de +* Wed Nov 17 2004 dkukawka@suse.de - added binding packages [java, qt, gtk, python] * Fri Nov 05 2004 thoenig@suse.de - dynamic allocation of user id user messagebus - dynamic allocation of group id for group messagebus -* Thu Oct 21 2004 thoenig@suse.de +* Wed Oct 20 2004 thoenig@suse.de - init ++++++ dbus-1-x11.spec ++++++ --- /var/tmp/diff_new_pack.C16546/_old 2008-10-22 17:46:18.000000000 +0200 +++ /var/tmp/diff_new_pack.C16546/_new 2008-10-22 17:46:18.000000000 +0200 @@ -37,13 +37,14 @@ BuildRequires: libselinux-devel %endif Version: 1.2.4 -Release: 1 +Release: 2 AutoReqProv: on Source0: dbus-%{version}.tar.bz2 Source1: rc.boot.dbus Source2: dbus-1.desktop Source3: dbus_at_console.ck Patch0: dbus-do-not-abort-on-check-thoenig-01.patch +Patch1: dbus-allow-root-access-to-session-bus.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build # COMMON1-END # COMMON1-END @@ -77,6 +78,7 @@ %setup -n dbus-%{version} -q # Disable this until we hit RC phase #%patch0 +%patch1 -p1 %build autoreconf -fi @@ -128,6 +130,8 @@ %{_mandir}/man1/dbus-launch.1* %changelog +* Thu Oct 09 2008 hpj@novell.com +- Add dbus-allow-root-access-to-session-bus.patch (bnc#428963). * Tue Oct 07 2008 thoenig@suse.de - Update to D-Bus 1.2.4 - fix for CVE-2008-3834 (bnc#432901) @@ -313,7 +317,7 @@ * Thu Nov 09 2006 thoenig@suse.de - start service for D-Bus system bus also in run level 2 (b.n.c [#216805]) -* Sat Nov 04 2006 thoenig@suse.de +* Fri Nov 03 2006 thoenig@suse.de - remove patch dbus-send-do-not-close-shared-connection-thoenig-01.patch (fix is now upstream) @@ -406,7 +410,7 @@ * Thu Aug 31 2006 dkukawka@suse.de - added patch dbus-display_DBUS_DAEMONDIR_in_configure.diff to expand the complete path of DBUS_DAEMONDIR (b.n.c. #202854) -* Thu Aug 24 2006 thoenig@suse.de +* Wed Aug 23 2006 thoenig@suse.de - add patch dbus-unref-connections-on-close-thoenig-01.patch: Unref connections on dbus_connection_close (b.n.c. #201164). * Sat Aug 19 2006 thoenig@suse.de @@ -540,7 +544,7 @@ - Remove unneeded BuildRequires. * Sun Jan 29 2006 aj@suse.de - Splitup packages dbus-1-qt3-devel, dbus-1-qt-devel (#144857). -* Fri Jan 27 2006 mls@suse.de +* Thu Jan 26 2006 mls@suse.de - converted neededforbuild to BuildRequires * Mon Jan 23 2006 thoenig@suse.de - Fixed D-BUS to restart on `rcdbus restart` id session busses @@ -566,7 +570,7 @@ - removed patches: * dbus-dnotify_configure-01.diff (fixed upstream) * dbus-dnotify_watchdirs-01.diff (fixed upstream) -* Fri Dec 09 2005 ro@suse.de +* Thu Dec 08 2005 ro@suse.de - disable selinux * Tue Nov 22 2005 coolo@suse.de - make libdbus-1-qt self containing lib @@ -654,14 +658,14 @@ * Sun Mar 13 2005 thoenig@suse.de - applied `dbus-mono-leak.diff` which fixes memory leaks of the mono bindings. -* Sat Mar 12 2005 thoenig@suse.de +* Fri Mar 11 2005 thoenig@suse.de - new upstream version 0.23.4 * Thu Mar 10 2005 thoenig@suse.de - new upstream version 0.23.3 - removed obsolete patch (python_bindings_x86_64_fix.diff) * Thu Mar 03 2005 dkukawka@suse.de - fixed boot.dbus [see bug# 65775] -* Tue Mar 01 2005 thoenig@suse.de +* Mon Feb 28 2005 thoenig@suse.de - moved files from dbus-1-devel to dbus-1-{glib,java,qt} * Tue Feb 22 2005 thoenig@suse.de - added fix for python bindings to compile on 64 bit @@ -685,12 +689,12 @@ - Use mono-devel-packages in neededforbuild - pass --enable-mono in ./configure - Make sure the symbolic link of dbus-sharp.dll is installed -* Fri Feb 04 2005 thoenig@suse.de +* Thu Feb 03 2005 thoenig@suse.de - fixed assignment of .pc files * dbus-1.pc is now owned by dbus-1-devel * dbus-glib-1.pc is now owned by dbus-1-glib * dbus-sharp.pc is now owned by dbus-1-mono -* Fri Feb 04 2005 thoenig@suse.de +* Thu Feb 03 2005 thoenig@suse.de - fixed assignment of .pc files * dbus-1.pc is now owned by dbus-1-devel * dbus-glib-1.pc is now owned by dbus-1-glib @@ -732,7 +736,7 @@ - start depends on boot.localfs - changed spec-file, now insserv instead of chkconfig - fixed bug #49410 -* Tue Jan 11 2005 ro@suse.de +* Mon Jan 10 2005 ro@suse.de - added /usr/lib/qt3/bin to PATH (for moc) * Mon Jan 10 2005 adrian@suse.de - fix build, qt developer tools aren't in default PATH anymore @@ -759,14 +763,14 @@ spec-file - stop dbus automatically before uninstall - add/remove now dbus automatically to/from system services -* Sun Nov 21 2004 dkukawka@suse.de +* Sat Nov 20 2004 dkukawka@suse.de - fixed bug in spec-file * Thu Nov 18 2004 dkukawka@suse.de - removed binding package for Python while automake is fixed ! -* Thu Nov 18 2004 dkukawka@suse.de +* Wed Nov 17 2004 dkukawka@suse.de - added binding packages [java, qt, gtk, python] * Fri Nov 05 2004 thoenig@suse.de - dynamic allocation of user id user messagebus - dynamic allocation of group id for group messagebus -* Thu Oct 21 2004 thoenig@suse.de +* Wed Oct 20 2004 thoenig@suse.de - init ++++++ dbus-allow-root-access-to-session-bus.patch ++++++ diff -upr dbus-1.2.4-pre/bus/session.conf.in dbus-1.2.4-post/bus/session.conf.in --- dbus-1.2.4-pre/bus/session.conf.in 2008-08-07 13:44:35.000000000 -0500 +++ dbus-1.2.4-post/bus/session.conf.in 2008-10-09 20:35:17.000000000 -0500 @@ -19,6 +19,10 @@ <allow eavesdrop="true"/> <!-- Allow anyone to own anything --> <allow own="*"/> + <!-- Allow root to access anyone's session bus --> + <allow user="root"/> + <!-- Allow anyone to access anyone else's session bus --> + <!-- <allow user="*"/> --> </policy> Reply