summaryrefslogtreecommitdiff
path: root/configure.ac
Commit message (Collapse)AuthorAgeFilesLines
* hardening: Use __secure_getenv if availableColin Walters2012-09-281-1/+1
| | | | | | | | This helps us in the case where we were executed via filesystem capabilities or a SELinux domain transition, not necessarily a plain old setuid binary. https://bugs.freedesktop.org/show_bug.cgi?id=52202
* CVE-2012-3524: Don't access environment variables or run dbus-launch when setuidColin Walters2012-09-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This matches a corresponding change in GLib. See glib/gutils.c:g_check_setuid(). Some programs attempt to use libdbus when setuid; notably the X.org server is shipped in such a configuration. libdbus never had an explicit policy about its use in setuid programs. I'm not sure whether we should advertise such support. However, given that there are real-world programs that do this currently, we can make them safer with not too much effort. Better to fix a problem caused by an interaction between two components in *both* places if possible. How to determine whether or not we're running in a privilege-escalated path is operating system specific. Note that GTK+'s code to check euid versus uid worked historically on Unix, more modern systems have filesystem capabilities and SELinux domain transitions, neither of which are captured by the uid comparison. On Linux/glibc, the way this works is that the kernel sets an AT_SECURE flag in the ELF auxiliary vector, and glibc looks for it on startup. If found, then glibc sets a public-but-undocumented __libc_enable_secure variable which we can use. Unfortunately, while it *previously* worked to check this variable, a combination of newer binutils and RPM break it: http://www.openwall.com/lists/owl-dev/2012/08/14/1 So for now on Linux/glibc, we fall back to the historical Unix version until we get glibc fixed. On some BSD variants, there is a issetugid() function. On other Unix variants, we fall back to what GTK+ has been doing. Reported-by: Sebastian Krahmer <krahmer@suse.de> Signed-off-by: Colin Walters <walters@verbum.org>
* Merge branch 'dbus-1.6'Simon McVittie2012-09-031-1/+3
|\
| * Detect MSG_NOSIGNAL and SCM_RIGHTS on OpenBSDBrad Smith2012-09-031-1/+3
| | | | | | | | | | | | | | On OpenBSD, sys/socket.h requires sys/types.h to be included first. Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Bug: https://bugs.freedesktop.org/show_bug.cgi?id=54418
| * Revert "cmake: use the same default system bus address as for autotools"Simon McVittie2012-08-131-11/+2
| | | | | | | | This reverts commit 05b0b9e65b6a58f0b0cb56d6ee8cf100061250b3.
| * Revert "Split DBUS_SESSION_BUS_DEFAULT_ADDRESS into listen, connect ↵Simon McVittie2012-08-131-57/+7
| | | | | | | | | | | | | | | | addresses and set better defaults" This reverts commit b5d36dc27d1905d4d46ad7f0097f0ea0e0776adb. On second thoughts, this is too big a change for a stable branch.
* | Merge branch 'dbus-1.6'Simon McVittie2012-08-131-9/+68
|\ \ | |/
| * Split DBUS_SESSION_BUS_DEFAULT_ADDRESS into listen, connect addresses and ↵Simon McVittie2012-08-131-7/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | set better defaults On Unix, the connect address should basically always be "autolaunch:" but the listen address has to be something you can listen on. On Windows, you can listen on "autolaunch:" or "autolaunch:scope=*install-path", for instance, and the dbus-daemon is involved in the auto-launching process. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=38201 Reviewed-by: David Zeuthen <davidz@redhat.com> [default address changed to autolaunch: for interop with GDBus -smcv] Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
| * cmake: use the same default system bus address as for autotoolsSimon McVittie2012-08-131-2/+11
| | | | | | | | | | | | | | | | | | | | | | The system bus is unsupported (and rather meaningless) on Windows anyway, so we can use anything. Also, make it clear that it has to be a "specific" address that can be listened on *and* connected to, like unix:path=/xxx - a listen-only address like unix:tmpdir=/xxx or nonce-tcp: would not be suitable. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=38201 Reviewed-by: David Zeuthen <davidz@redhat.com>
* | Merge branch 'dbus-1.6'Simon McVittie2012-08-091-0/+2
|\ \ | |/ | | | | | | | | Conflicts: NEWS configure.ac
| * Define __EXTENSIONS__ on Solaris to get sockaddr_in6 and sockaddr_storageJonathan Perkin2012-08-091-0/+2
| | | | | | | | | | | | [smcv: comments updated, commit message added] Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Bug: https://bugs.freedesktop.org/show_bug.cgi?id=53286
| * 1.6.5Simon McVittie2012-07-181-1/+1
| |
| * Prepare 1.6.4 releasedbus-1.6.4Simon McVittie2012-07-181-1/+1
| |
* | Merge branch 'dbus-1.6'Simon McVittie2012-07-031-2/+3
|\ \ | |/
| * Set enable-developer default to 'no'Simon McVittie2012-07-031-2/+3
| | | | | | | | | | | | | | | | | | | | | | Misplaced [] and () led to enable_developer=no being part of the option's documentation instead of actually being the default value. Regression in 1.6.2, caused by #34671. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=51657 Bug-Debian: http://bugs.debian.org/680027 Reviewed-by: David Zeuthen <davidz@redhat.com>
* | Merge branch 'dbus-1.6'Simon McVittie2012-06-281-9/+16
|\ \ | |/ | | | | | | | | Conflicts: NEWS configure.ac
| * Resume developmentSimon McVittie2012-06-271-1/+1
| |
| * Second go at 1.6.2dbus-1.6.2Simon McVittie2012-06-271-1/+1
| |
| * Stop release preparation, --exit-with-x11 doesn't workSimon McVittie2012-06-251-1/+1
| |
| * Prepare 1.6.2Simon McVittie2012-06-251-2/+2
| |
| * Enable Automake maintainer mode by default, but let distros disable itSimon McVittie2012-06-251-1/+3
| | | | | | | | | | | | | | | | See http://blogs.gnome.org/desrt/2011/09/08/am_maintainer_mode-is-not-cool/ for more information. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=34671 Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
| * Set configure defaults from --enable-developer, not Automake maintainer modeSimon McVittie2012-06-251-7/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automake maintainer mode isn't about whether you're a maintainer or not (although its name would suggest that), it's about whether files that are normally distributed in the tarball get regenerated. As such, it's not really appropriate to use it to drive defaults for things like assertions and extra test code. The desired effect is that developers building from git normally get tests and assertions, while distribution packagers don't. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=34671 Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Colin Walters <walters@verbum.org>
* | Merge branch 'dbus-1.6'Simon McVittie2012-06-151-0/+10
|\ \ | |/
| * When not producing a dynamic library, define DBUS_STATIC_BUILDSimon McVittie2012-06-151-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | When targeting Windows, linking against the static library requires special effort to turn off DLL import/export processing. We normally link some things against the dynamic library, but if we're not building that, we'll have to link everything statically. Based on patches from 'william' on fd.o #46367. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=33973 Tested-by: René Berber <Rene.Berber gmail com>
| * Start 1.6.2 developmentSimon McVittie2012-06-051-1/+1
| |
* | Cut minor version down to 255Simon McVittie2012-06-151-1/+1
| | | | | | | | | | | | Entertainingly, bits of libdbus assume that one byte is enough for each version number component (as API!), and one test even fails if this isn't true.
* | Start 1.7.0 developmentbaserock/genivi/af-bus-masterSimon McVittie2012-06-051-1/+1
|/
* Prepare version 1.6.0 (new stable branch)Simon McVittie2012-06-051-3/+3
|
* 1.5.13Simon McVittie2012-03-271-1/+1
|
* Prepare dbus 1.5.12dbus-1.5.12Simon McVittie2012-03-271-4/+4
|
* Development versionSimon McVittie2012-02-211-1/+1
|
* Prepare 1.5.10dbus-1.5.10Simon McVittie2012-02-211-2/+2
|
* Allow a reduced set of installable tests (none yet) to be built without GLibSimon McVittie2012-02-211-9/+15
| | | | | | | | | --enable-modular-tests=auto will build as many as possible, perhaps excluding the GLib ones. --enable-modular-tests=yes or --enable-tests=yes will insist on having GLib, to be able to run everything. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=42811 Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
* Do not AC_SUBST systemd flags from PKG_CHECK_MODULESSimon McVittie2012-02-211-2/+0
| | | | | | | | They're automatically substituted already. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=46095 Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Guillaume Desmottes <guillaume.desmottes@collabora.co.uk>
* Invoke PKG_PROG_PKG_CONFIG early in configure.acSimon McVittie2012-02-211-0/+1
| | | | | | | | | Otherwise, autoconf can generate wrong code, because our first use of PKG_CHECK_MODULES is conditional. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=46095 Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Guillaume Desmottes <guillaume.desmottes@collabora.co.uk>
* Add support for inserting (a subset of) Valgrind client requestsSimon McVittie2012-02-131-0/+11
| | | | | | | | | | | | If valgrind support is disabled, we define stub versions of the Valgrind client requests I plan to use, so the actual code doesn't need #ifdef hell. [With unnecessary AC_SUBST removed as per Lennart's review -smcv] Bug: https://bugs.freedesktop.org/show_bug.cgi?id=37286 Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Lennart Poettering <lennart@poettering.net>
* Check for a new enough systemd that sd_uid_get_seats (., ., NULL) is validSimon McVittie2012-02-071-1/+1
| | | | Bug: https://bugs.freedesktop.org/show_bug.cgi?id=39609
* at_console: ask systemd whether a user is at the consoleLennart Poettering2012-02-071-0/+22
| | | | | | | | | | | | | systemd manages seats and users. This patch optionally asks systemd whether a user is at the console. It used libsystemd-login for that, a low-level library that allows querying this kind of information without expensive round trips. In order to be nice to the Debian folks this patch falls back to traditional modes of operation if systemd is not found to be around. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=39609 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
* Merge branch 'socket-set-33337'Simon McVittie2012-02-071-0/+30
|\ | | | | | | | | Reviewed-by: Will Thompson <will.thompson@collabora.co.uk> Bug: https://bugs.freedesktop.org/show_bug.cgi?id=33337
| * Use epoll in a backwards-compatible way on Linux < 2.6.27Simon McVittie2011-06-131-0/+3
| | | | | | | | | | | | Bug: https://bugs.freedesktop.org/show_bug.cgi?id=33337 Bug-NB: NB#197191 Bug-NB: NB#225019
| * Add an implementation of DBusSocketSet using epollSimon McVittie2011-06-131-0/+3
| | | | | | | | | | | | Bug: https://bugs.freedesktop.org/show_bug.cgi?id=33337 Bug-NB: NB#197191 Bug-NB: NB#225019
| * Check for epoll in configure.acSimon McVittie2011-06-131-0/+24
| | | | | | | | | | Bug: https://bugs.freedesktop.org/show_bug.cgi?id=33337 Bug-NB: NB#197191
* | Port to glib 2.31.x g_thread APISimon McVittie2012-01-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | g_thread_init() is deprecated since glib 2.24, call g_type_init() instead. Bump glib requirement accordingly. g_thread_create is deprecated since 2.31, use g_thread_new() instead. When building with a glib earlier than 2.31, provide a backwards compatibility shim. [Added a comment about why we're using g_type_init() in a test that doesn't otherwise use GObject -smcv] Bug: https://bugs.freedesktop.org/show_bug.cgi?id=44413 Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
* | Merge branch 'dbus-1.4'Ralf Habacker2011-12-211-1/+2
|\ \
| * \ Merge branch 'dbus-1.4' of ssh://git.freedesktop.org/git/dbus/dbus into dbus-1.4Ralf Habacker2011-12-211-1/+2
| |\ \
| | * | Adds a configure time key --with-dbus-session-bus-default-addressSiraj Razick2011-12-211-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With this key we can specifiy the default session bus address at compile time with autotool builds made with mingw32. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=43639 Reviewed-by: Ralf Habacker <ralf.habacker@freenet.de>
| | * | Micro versionSimon McVittie2011-09-211-1/+1
| | | |
| | * | Prepare version 1.4.16dbus-1.4.16Simon McVittie2011-09-211-2/+2
| | | |
* | | | Merge tests' cmake and autotools bus configurationSimon McVittie2011-09-281-0/+9
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In Unix, the tests listened on both debug-pipe (which is a socketpair, or a TCP emulation of socketpair on Windows) and a Unix socket. In the Windows port, the tests were hard-coded to listen on a particular port, which allowed the dispatch test to connect to that port, as long as no two tests ran simultaneously (which I don't think was ever guaranteed - make -j can violate this). That's valid out-of-process, and also fully-specified, so they only needed one <listen> directive, so the CMake input only had one. To make the tests work under CMake on Unix, there was a hack: the string substituted for the content of the <listen> directive contained </listen><listen> to get the other address in, which is pretty nasty. Instead of doing that, I've made both build systems, on both Unix and Windows, use both debug-pipe and a more normal transport (Unix or TCP). debug-pipe has a Windows implementation and it's used in dbus-spawn-win.c, so it'd better work. The use of debug-pipe is now hard-coded rather than being a configure parameter (there's no reason to vary it in different builds), and I used TEST_LISTEN as the name of the Unix/TCP address, because it's a "vague" address (no specific Unix path, no TCP port), that you can listen on but not connect to. This in turn means that we can merge the Autoconf .in and CMake .cmake files, similar to Bug #41033. You might wonder why I've kept debug-pipe. I did try to get rid of it, but it turns out that the tests in dispatch.c rely on dbus_connection_open_private() not blocking, and normal socket connections block on connect(). Until we fix that by adding an async version of dbus_connection_open_private(), it won't be safe to have a test like dispatch.c that "talks to itself", unless it uses a transport as trivial as debug-pipe in which neither end has to block on the other. Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Ralf Habacker <ralf.habacker@freenet.de> Bug: https://bugs.freedesktop.org/show_bug.cgi?id=41222
* | | Simplify substitution of test executables to use fewer variablesSimon McVittie2011-09-281-13/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | Also use EXEEXT in all the service files, even in the automake build system. Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Ralf Habacker <ralf.habacker@freenet.de> Bug: https://bugs.freedesktop.org/show_bug.cgi?id=41222