~ubuntu-branches/ubuntu/maverick/gdm/maverick-security : changes

~ubuntu-branches/ubuntu/maverick/gdm/maverick-security » Changes to daemon/gdm-session-worker.c from revision 225

From Revision 225

Rev	Summary	Authors	Tags	Date
225	* SECURITY UPDATE: race condition allowing privilege escalat... * SECURITY UPDATE: race condition allowing privilege escalation - debian/patches/91_CVE-2011-0727.patch: fix daemon/gdm-session-worker.c to copy files as session user rather than root followed by a subsequent chown. - CVE-2011-0727	Steve Beattie	2.30.5-0ubuntu4.1	13 years ago
221	* New upstream version: * New upstream version: - Retry getpw* calls if they return EINTR - #619588, don't show markup tags in UI (lp: #603097) - #626564, fix intermittent failure to load user list (lp: #614810)	Sebastien Bacher	2.30.5-0ubuntu1	13 years ago
220	[ Sebastien Bacher ] [ Sebastien Bacher ] * New upstream versions: - Translation fixes - Many performance improvements for the greeter - Various robustness fixes - Fix XDMCP - Fix switch user menu item detection - Remove obsolete restart and stop scripts - Fixed #618834, GdmProductSlave does not handle OpenSession - Fixed #342397, gdm doesn't respond to XDMCP querys if local X server fails to start - Fixed #544730, XDMCP broadcast discovery not working on BSD w/ ipv6 enabled (lp: #393835) - Fixed #589536, gdm-simple-slave crashed with signal 5 in g_return_if_fail_warning (lp: #403441) - Fixed #592183, GDM entry field loses focus after dialogs are presented - Fixed #594857, Warning when type 'gdm --version' in terminal in new GDM - Fixed #599683, xdmcp Queries from Older software - Fixed #610179, GDM patch for accounts dialogue - Fixed #616722, Xdmcp linking problem - Fixed #616730, user-switch-applet build failure: missing -I for dbus-glib - Fixed #617665, Panel doesn't shrink after disabling "high contrast" - Fixed #619588, User's Real names should be escaped against XML markup (lp: #499690, #585128) - Fixed #620430, memory leaks in gdm - Fixed #620893, bottom panel is overlapping at smaller sizes - Fixed #620908, gdm user switch applet goes nuts while changing password file - Fixed #621045, Improve startup performance of the greeter - Fixed #621131, User switch applet performance issues - Fixed #621661, Make slaves more robust against crashes - Fixed #622069, greeter doesn't work when there's no local user - Fixed #622337, shows shutdown buttons when connecting over xdmcp - Fixed #622430, keyboard layout handling wonky - Fixed #622431, cancel button not shown during timed login - Fixed #601458, Add presence items to status menu and port to JS * Refresh distribution changes * debian/patches/07_correct_distribution_version.patch: - use upstream version * debian/patches/13_cache_ck_history.patch: - dropped since the new upstream version solves this issue differently * debian/patches/23_login_window_hint.patch: - dropped, the change is in the new version [ Kees Cook ] * debian/patches/24_system_uid.patch: - updated for upstream code changes [ Robert Ancell ] * debian/xsession.desktop: * debian/xterm.desktop: - Use clearer session names (LP: #599336) * debian/patches/09_gdmsetup.patch: - Remove session comment from combo box to make it fit better [ Martin Pitt ] * 09_gdmsetup.patch: Only show "Play Login Sound" checkbox if we have /usr/share/gdm/autostart/LoginWindow/libcanberra-ready-sound.desktop. * Add 01_upower.patch: Port to UPower. * debian/control: libdevkit-power-gobject-dev → libupower-glib-dev.	Kees Cook	2.30.4-0ubuntu1	13 years ago
215	* debian/control: * debian/control: - Build-depend on gnome-common for autotools * debian/rules: - Run autotools on build * debian/source: - Use source format 3.0 * debian/patches/: - Use quilt and fix patch headers debian/patches/09_gdmsetup.patch: - Add checkbutton for enabling face browser (LP: #445123) * debian/patches/99_autoreconf.patch: - Removed, autotools now run from debian/rules	Robert Ancell	2.30.2-0ubuntu4	13 years ago
197	* New upsteam release: * New upsteam release: - The greeter is not torn down until pam_open_session finishes since some PAM modules can ask questions up until this point. - The daemon now kills the session process rather than the entire process group, fixing bug #607738. The corresponding gnome-session bug #607658 is released with 2.29.92 so this works properly. * debian/patches/04_fix_external_program_directories.patch: adapt to last upstream version * debian/patches/99_autoreconf.patch: refreshed * debian/control.in: - bump Standards-Version to latest	Didier Roche	2.29.92-0ubuntu1	14 years ago
190	* New upstream version: * New upstream version: - Various build fixes - Crash fix in layout detection - Crash fix in session list detection - Remove timeout for interacting with PAM - Fix compile with --no-as-needed - Add debug message if system lacks fonts - Disable switch user item if user switching won't work * debian/patches/01_disable_hal.patch, debian/patches/00git-add-missing-locale-alias.patch, debian/patches/00git-keyboard-layout-crash.patch, debian/patches/18_do_not_double_free_exec_variable.patch: - those changes are in the new version * debian/patches/15_default_session.patch, debian/patches/99_autoreconf.patch: - new version update	Sebastien Bacher	2.29.6-0ubuntu1	14 years ago
184	[ Robert Ancell ] [ Robert Ancell ] * debian/patches/29_switch_user.patch: - Add bug link [ Milan Bouchet-Valat ] * debian/gdm.pam: allow members or the 'nopasswdlogin' group to log in without password. This integrates with the gnome-system-tools, which include such an option in 2.27. * debian/gdm.postinst: create this group on install, which enables that feature in the g-s-t. [ Martin Pitt ] * New upstream release: - XDMCP fixes on Solaris - run PostLogin script as user instead of gdm - Fix ellipses usage on User Switch Applet - Add ability to customize system language list - Solaris NULL printf fixes - Convert from glade to gtkbuilder - Detect default keyboard layout better - Ignore executable subfolders of xinitrc.d - Don't reveal valid usernames when authenticating * Drop 01_default_keyboard_layout.patch, accepted upstream. * Refresh patches for new upstream version. * Add 01_disable_hal.patch: Don't attempt to connect to Hal. The hal-using code is already commented out, and this just needlessly triggers Hal startup during boot. * Add 00git-add-missing-locale-alias.patch: Add missing locale.alias file (taken from upstream git head).	Martin Pitt	2.29.5-0ubuntu1	14 years ago
167	* New upstream release (LP: #455944) * New upstream release (LP: #455944) - GDM will now avoid calling XAddHosts for remote connections. - Now GDM uses DeviceKit-power instead of gnome-power-manager for Suspend support. - Now the at-spi-registryd-wrapper.desktop GDM autostart file will run at-spi-registryd directly instead of calling at-spi-registryd-wrapper. - Fix to the visibility check for the "Other" button which corrects some situations where the button would not appear when it was supposed to. - Now the GDM daemon will make the /var/log/gdm directory if it does not exist. - Fixes to avoid autologin failure when a NULL username is passed in. - Restore CTYPE when canonicalizing codesets. - Several fixes to avoid warnings. * debian/patches/18_create_log_dir_when_required.patch: * debian/patches/21_dkpower.patch: - Applied upstream * debian/patches/22_shutdown_menu.patch: - Updated	Robert Ancell	2.28.1-0ubuntu1	14 years ago
150	* New upstream release (LP: #434354) * New upstream release (LP: #434354) - Now GDM supports the ability to specify the automatic/timed login user via a script via the same interface that the old GDM supported. - Now the user's dmrc and face image files are stored in /var/cache/gdm, so that the login process does not need to access the user's $HOME directory before authentication. - Fix the login GUI options widget so the language/session/layout choices are not reset after a failed login. - Fix language dialog so it does not crash if the user click's the "OK" button when no language is selected. - Fix to ensure that the login dialog regains focus after the language or layout dialogs are used. - The language dialog has improved logic to sort the language names more correctly. - Make sure to check error variable is not NULL before referencing it in the gdm-user-manager code. - Make sure to not print NULL strings since this causes crashes on some platforms. - Improve documentation. * debian/patches/09_gdmsetup.patch: updated: - Filter ConsoleKit system users (LP: #432271) - Make window size fixed (LP: #429206) * debian/patches/01_default_keyboard_layout_hal.patch, debian/patches/99_autoreconf.patch: updated.	Robert Ancell	2.28.0-0ubuntu1	14 years ago
143	[ Robert Ancell ] [ Robert Ancell ] * New upstream release: (LP: #418426) - Autostart polkit-gnome authentication agent. - Add screen capture sound effect to screenshot tool. - If HOST_NAME_MAX is not available, try _POSIX_HOST_NAME_MAX, then default to 256. - Add users "nobody4" and "noaccess" to the list of users to filter from the Face Browser. - Add Solaris logindevperm support. - Fix mispelling of XDMCP. - Improve documentation. * debian/control: - Depend on libcanberra-gtk * debian/patches/01_default_keyboard_layout_hal.patch: * debian/patches/02_x_server_location.patch: * debian/patches/03_hide_system_users.patch: * debian/patches/04_fix_external_program_directories.patch: * debian/patches/08_use_polkit_for_settings.patch: * debian/patches/99_autoreconf.patch: - Refreshed * debian/patches/09_gdmsetup.patch: - Set gdmsetup window title and icon - Fix crash when have no default users configured [ Ted Gould ] * Add 12_fusa_name_change.patch: Change the Bonobo activation server name of the FUSA applet. * debian/rules: Rename the Bonobo activate server description before installing it. (LP: #410498)	Robert Ancell	2.27.90-0ubuntu1	14 years ago
132	* New upstream release: * New upstream release: - Favor XFree86 Xinerama over Solaris Xinerama on Solaris - Make greeter a well behaved session client - XDMCP fixes - Fix up btmp record handling - Handle locales with modifiers better - Use better logic with keyboard layout handling - Change example PAM file/documentation to demonstrate password-less login - Handle usernames from non-utf8 locales - Allow dbus introspection for gdm services - Show more details authentication error messages in UI - Allow uppercase and lowercase booleans in config file - Be more consistent with booleans in schemas - Use g_timeout_add_seconds to reduce wakeups - Make greeter window more clear when user list is disabled - Put greeter login window in same ctrl-alt-tab menu as panel - Port greeter to PolicyKit 1.0 - Shave off 1/2 second delay when bringing up greeter - OS X portability fixes - Look for locales in /usr/lib/locale instead of /usr/share/locale - Better handling when two users have the same name * Drop 01_xrdb_nocpp.patch, applied upstream. * debian/control: - use conflicts on the buggy libxklavier version to avoid race upgrade leading to a gdm greeter crash	Sebastien Bacher	2.27.4-0ubuntu1	14 years ago
123	* Upload the new gdm codebase to karmic, there is several kn... * Upload the new gdm codebase to karmic, there is several known issues but the new version need testing: - there is no graphical configure tool yet - gdm will not work correctly after upgrade until restart (restarting on upgrade is not possible since it would close running xsession) - the fast user switch applet ubuntu changes and the guest session have not been updated yet	Sebastien Bacher	2.26.1-0ubuntu1	14 years ago