summaryrefslogtreecommitdiff
path: root/configure.in
AgeCommit message (Collapse)AuthorFilesLines
2012-10-04bump versionSimon McVittie1-1/+1
2012-10-04Prepare 1.2.30dbus-1.2.30Simon McVittie1-2/+2
2012-10-02CVE-2012-3524: Don't access environment variables or run dbus-launch when setuidColin Walters1-1/+1
This matches a corresponding change in GLib. See glib/gutils.c:g_check_setuid(). Some programs attempt to use libdbus when setuid; notably the X.org server is shipped in such a configuration. libdbus never had an explicit policy about its use in setuid programs. I'm not sure whether we should advertise such support. However, given that there are real-world programs that do this currently, we can make them safer with not too much effort. Better to fix a problem caused by an interaction between two components in *both* places if possible. How to determine whether or not we're running in a privilege-escalated path is operating system specific. Note that GTK+'s code to check euid versus uid worked historically on Unix, more modern systems have filesystem capabilities and SELinux domain transitions, neither of which are captured by the uid comparison. On Linux/glibc, the way this works is that the kernel sets an AT_SECURE flag in the ELF auxiliary vector, and glibc looks for it on startup. If found, then glibc sets a public-but-undocumented __libc_enable_secure variable which we can use. Unfortunately, while it *previously* worked to check this variable, a combination of newer binutils and RPM break it: http://www.openwall.com/lists/owl-dev/2012/08/14/1 So for now on Linux/glibc, we fall back to the historical Unix version until we get glibc fixed. On some BSD variants, there is a issetugid() function. On other Unix variants, we fall back to what GTK+ has been doing. Reported-by: Sebastian Krahmer <krahmer@suse.de> Signed-off-by: Colin Walters <walters@verbum.org> [backported to 1.2 -smcv]
2011-06-10bump versionSimon McVittie1-1/+1
2011-06-101.2.28dbus-1.2.28Simon McVittie1-2/+2
2011-01-14configure.in: use AC_TRY_COMPILE to avoid a symlink attack in /tmp during ↵Simon McVittie1-11/+7
compilation
2010-12-21Post-release version bump to 1.2.27Will Thompson1-1/+1
2010-12-21Version 1.2.26dbus-1.2.26Will Thompson1-2/+2
2010-12-21Fix configure doc: libxml may be named libxml2 on some systems.Ralf Habacker1-1/+1
2010-03-23Post-release version bumpColin Walters1-1/+1
2010-03-23Release 1.2.24dbus-1.2.24Colin Walters1-1/+1
2010-03-22Add DBUS_INT64_MODIFIER define, turn on -WformatColin Walters1-6/+39
https://bugs.freedesktop.org/show_bug.cgi?id=19195 We were previously using -Wno-format because we didn't have a #define for DBUS_INT64_MODIFIER, which was really lame because it easily hid problems. For now, just define it if we're on glibc; this is obviously not strictly correct but it's safe, because the formatting is only used in DBUS_VERBOSE mode, and in tools/dbus-monitor. Ideally we get the the glib code relicensed.
2010-03-17Post-release version bumpColin Walters1-1/+1
2010-03-16Release 1.2.22dbus-1.2.22Colin Walters1-1/+1
2010-03-12[configure.in] Use AM_SILENT_RULES if availableColin Walters1-0/+2
By rough consensus, and to keep up with the cool kids. Note to builders: you need to use V=1 to enable verbose mode.
2010-02-03Release 1.2.20dbus-1.2.20Colin Walters1-1/+1
2010-02-02Release 1.2.18dbus-1.2.18Colin Walters1-1/+1
2010-01-28Switch to libcap-ng, avoid linking libdbus against libcap[-ng]Colin Walters1-3/+2
(Commit message written by Colin Walters <walters@verbum.org>) A current Fedora goal is to convert projects to libcap-ng which more easily allows dropping Linux capabilities. For software which also links to libdbus, it's problematic to link against libcap as well. Though really, libdbus should have never linked against libcap in the first place, which is another thing this patch changes by moving the libcap-using bits out of dbus/ and into bus/. https://bugzilla.redhat.com/show_bug.cgi?id=518541
2010-01-28Ignore exit code zero from activated servicesColin Walters1-0/+1
A variety of system components have migrated from legacy init into DBus service activation. Many of these system components "daemonize", which involves forking. The DBus activation system treated an exit as an activation failure, assuming that the child process which grabbed the DBus name didn't run first. While we're in here, also differentiate in this code path between the servicehelper (system) versus direct activation (session) paths. In the session activation path our error message mentioned a helper process which was confusing, since none was involved. Based on a patch and debugging research from Ray Strode <rstrode@redhat.com>
2009-07-15Bug 22788 - Fix detection of getpwnam_r on SolarisBrian Cameron1-7/+7
Define POSIX_PTHREAD_SEMANTICS earlier so more things use it. Signed-off-by: Colin Walters <walters@verbum.org>
2009-07-14Release 1.2.16dbus-1.2.16Colin Walters1-1/+1
2009-07-14Bug 19446 - HaikuOS supportGrzegorz Dąbrowski1-1/+1
Signed-off-by: Colin Walters <walters@verbum.org> (cherry picked from commit 97c58ace430fb58cedfc1e5c83db9759063b6946)
2009-07-14Bug 18121 - Use a monotonic clock for pthread timeoutsColin Walters1-1/+24
Patch based on one from Keith Mok <ek9852@gmail.com>, some followup work from Janne Karhunen <Janne.Karhunen@gmail.com>. We don't want condition variable timeouts to be affected by the system clock. Use the POSIX CLOCK_MONOTONIC if available. (cherry picked from commit ae24bb35e2ee3ecde990f55852982b573754ec43)
2009-07-14Bug 22516 - Ensure inotify fd is set close on execMatthias Clasen1-1/+1
This prevents it leaking into spawned child processes. Signed-off-by: Colin Walters <walters@verbum.org> (cherry picked from commit f4e15893e5be6da6c7642bb7ef9b14d5531afe41)
2009-07-14Bug 21545 - Move CFLAGS modification towards the end of configureColin Walters1-243/+244
This prevents the flags from screwing up autoconf tests. (cherry picked from commit 98bbe8c7941f2c643dc55b4e7329c0da57d2c7bc)
2009-07-14Bug 21657 - Fix configure checks for va_list in maintainer modeChristian Persch (GNOME)1-3/+6
Include the right headers. (cherry picked from commit fe86222d10f0b2532be314a58841db82b1f5887e)
2009-05-13configure.in: fail abstract socket test gracefully when cross-compilingMarc Mutz1-2/+10
* configure.in: only run AC_CACHE_CHECK if enable_abstract_sockets=auto * configure.in: warn that, when cross-compiling, we're unable to detect abstract sockets availability automatically Signed-off-by: Thiago Macieira <thiago@kde.org>
2009-05-13configure.in: not all gccs support -Wno-pointer-signMarc Mutz1-1/+4
Signed-off-by: Thiago Macieira <thiago@kde.org>
2009-05-06Release 1.2.14dbus-1.2.14Colin Walters1-1/+1
2009-04-28configure.in: fix help string alignmentMarc Mutz1-1/+1
* AC_ARG_ENABLE(libaudit: use AS_HELP_STRING for aligned help messages Signed-off-by: Thiago Macieira <thiago@kde.org> (cherry picked from commit 660073925b03cad2f6e95ba9f25a81c2d9727185)
2009-01-06Bump for unstable cycleColin Walters1-1/+1
2009-01-06Release 1.2.12.dbus-1.2.12Colin Walters1-1/+1
2009-01-06Bug 17060: Explicitly hard fail if expat is not availableColin Walters1-11/+8
* configure.in: Tweak libxml/expat detection and handling.
2009-01-06Bug 17969: Don't test for abstract sockets if explicitly disabledLionel Landwerlin1-0/+2
Signed-off-by: Colin Walters <walters@verbum.org>
2009-01-06Fix cross-compiling with autotools.Diego E. 'Flameeyes' Pettenò1-4/+4
The AC_CANONICAL_TARGET macro and the $target_os variables are used for the target of compilers and other code-generation tools, and should not be used during cross-compile of generic software. Replace them with AC_CANONICAL_HOST and $host_os instead, as they should have been from the start. For a breakdown of what host, build and target machines are, please see http://blog.flameeyes.eu/s/canonical-target .
2009-01-06Enable -Werror by default with --enable-maintainer-mode, and change warningsColin Walters1-6/+42
Important compiler warnings were being lost in the noise from warnings we know about but aren't problems, and moreover made using -Werror difficult. Now we expect *all* developers and testers to be using -Werror.
2008-12-19Bump for unstable cycleColin Walters1-1/+1
2008-12-19Release 1.2.10dbus-1.2.10Colin Walters1-1/+1
2008-12-09Bump version for unstable cycleColin Walters1-1/+1
2008-12-09Release 1.2.8dbus-1.2.8Colin Walters1-1/+1
2008-12-05Release 1.2.6dbus-1.2.6Colin Walters1-1/+1
2008-10-06Bump configure again for gitColin Walters1-1/+1
2008-10-06Release 1.2.4dbus-1.2.4Colin Walters1-1/+1
2008-08-06Correctly dist 1.2.3 tarball with docs enableddbus-1.2.3Colin Walters1-1/+1
2008-08-06Bump configure.ac to 1.2.2Colin Walters1-2/+2
2008-06-05Bug 15740: Solaris/ADT auditing support (simon zheng)Colin Walters1-1/+19
* bus/driver.c: Add GetAdtAuditSessionData method which returns audit data for a connection. * configure.in: Detect ADT auditing support * dbus/dbus-auth.c: Read ADT auditing creds. * dbus/dbus-connection.c: Implement dbus_connection_get_adt_audit_session_data. * dbus/dbus-connection.h: Export it. * dbus/dbus-credentials.c: Add support for gathering adt_audit_data and retrieving it via _dbus_credentials_get_adt_audit_data. * dbus/dbus-credentials.h: Add DBUS_CREDENTIAL_ADT_AUDIT_DATA_ID. * dbus/dbus-protocol.h: New error DBUS_ERROR_ADT_AUDIT_DATA_UNKNOWN. * dbus/dbus-sysdeps.c: Support for reading audit credentials via ADT API. * dbus/dbus-transport.c: New function _dbus_transport_get_adt_audit_session_data to retrieve credentials. * dbus/dbus-transport.h: Export it.
2008-05-30Add "PrivServer" test which exercises DBusServer and dbus_shutdownColin Walters1-0/+2
* test/data/valid-service-files/org.freedesktop.DBus.TestSuite.PrivServer.service.in: New service file for PrivServer. * configure.in: Generate it. * test/name-test/Makefile.am: Build test-privserver and test-privserver-client. * test/name-test/test-privserver.c: Use DBusServer to serve a private connection. * test/name-test/test-privserver-client.c: Connect via session bus and get address of private server, exercise dbus_shutdown(). * test/name-test/run-test.sh: Run it.
2008-04-04up version for unstable developmentJohn (J5) Palmieri1-2/+2
2008-04-04bump version after releaseJohn (J5) Palmieri1-1/+1
2008-04-04change version to 1.2.1 to prep releaseJohn (J5) Palmieri1-2/+2
* we are moving to the 1.2.x version scheme because re-licensing seems to be blocked indefinitely