Commit Graph

1323 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
1393f849d5 rpm: add missing BuildRequires: libX11-devel
misc/close-window.c requires it.

(cherry picked from commit 0f67930d0e)

Conflicts:
	rpm_spec/core-vm.spec
2015-04-04 18:47:23 +02:00
Marek Marczykowski-Górecki
de0b4b73f7 qrexec: move qrexec-client-vm to /usr/bin 2015-03-15 01:53:03 +01:00
Marek Marczykowski-Górecki
21cb5bc512 qrexec: add simple stdio handling in qrexec-client-vm without a child process
This way simple qrexec services like qubes.VMShell would be much easier
to implement - no need to do anything at client side.
2015-03-15 01:40:05 +01:00
Marek Marczykowski-Górecki
6160ae8230 qrexec: expand tabs, no functional change 2015-03-15 00:54:43 +01:00
Marek Marczykowski-Górecki
4a7928212b version 2.1.56 2015-03-05 03:40:08 +01:00
Jason Mehring
e549897f57 debian: Remove 'exit 0' in maintainer section scripts to all other debhelpers (if any) to also execute
(cherry picked from commit 328430d3bf)
2015-03-05 01:00:05 +01:00
Marek Marczykowski-Górecki
c304933fb7 dispvm: close only visible windows during DispVM preparation
Closing some invisible window can cause e.g. Firefox crash. Send the
message to visible windows and others should be cleaned up by the
application.

(cherry picked from commit 5c4e88a765)
2015-03-05 00:55:00 +01:00
Marek Marczykowski-Górecki
7d3797eb15 dispvm: kill all process after populating caches
Do not longer rely on killing X server.

(cherry picked from commit 8118037820)
2015-03-05 00:54:53 +01:00
Marek Marczykowski-Górecki
63e4b76169 fc21: fix DispVM preparation - Xorg has new name
(cherry picked from commit fdca69ae78)
2015-03-05 00:54:43 +01:00
Jason Mehring
5146fe6481 Removed code that deleted original nautilus actions
dpkg/rpm should handle this automatically on upgrading package

(cherry picked from commit da2b0cde16)
2015-03-05 00:54:37 +01:00
Jason Mehring
4c031ef786 Removed nautilus-actions depend and replaced with nautilus-python
nautilus-actions was orphaned in fc21, so all nautilus context menus have
been re-written as nautilus-python extensions

(cherry picked from commit 6836420c3c)

Conflicts:
	debian/control
2015-03-05 00:54:18 +01:00
Jason Mehring
8dcf61ba33 Switched qvm-move-to-vm.{gnome,kde} scripts to use bash not sh
Both these scripts contain `pipefail` which is a bash option and will
fail in dash

(cherry picked from commit 53fc7955f9)
2015-03-05 00:52:49 +01:00
Marek Marczykowski-Górecki
26a4d12990 Fix "backup: fix qubes.Restore service - do not send garbage as backup data"
(cherry picked from commit fda293f09a)
2015-03-05 00:52:43 +01:00
Marek Marczykowski-Górecki
0e7936006a backup: fix qubes.Restore service - do not send garbage as backup data
Do not send 'which' command output to stdout, as it will mess real
backup data.
This fixes regression introduced by this commit:
commit dad5bfbd18
Author: HW42 <hw42@ipsumj.de>
Date:   Thu Feb 5 03:14:41 2015 +0100

    remove 'bashisms' or explicit use bash

(cherry picked from commit b560596f1b)
2015-03-05 00:52:37 +01:00
Marek Marczykowski-Górecki
a04bcf602b updates-proxy: allow xz compressed metadata (fc21)
(cherry picked from commit b655d968c4)
2015-03-05 00:52:31 +01:00
Marek Marczykowski-Górecki
36d9330f36 network: fix handling newline in firewall rules
Since the rules are no more directly handed to echo -e, sed needs to
handle all escape sequences used in rules (newline only, but in
different notations).

(cherry picked from commit 4dbd9e205c)

Conflicts:
	network/qubes-firewall
2015-03-05 00:52:14 +01:00
Marek Marczykowski-Górecki
866344b28b version 2.1.55 2015-02-10 17:17:29 +01:00
Marek Marczykowski-Górecki
fcb0fdb6ab debian: change systemctl set-default back to manual symlink
systemd in wheezy is old enough to not have this option.
2015-02-10 17:15:37 +01:00
Marek Marczykowski-Górecki
13f7e49ff5 version 2.1.54 2015-02-10 14:57:57 +01:00
Marek Marczykowski-Górecki
ca2e837540 tag for commit 62a0b065ab
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJU0uQnAAoJEIwFIWzgnAk8/RkP/jpxwugpbPGSZwEl6X3P4D7D
 MI7kh6sMatIaqj/+vHok165OVtsxZsQZURvlZ5FSh9YFKPcly+ibnSEV5cUf0RxZ
 n0BytRVHV4ZLzP00uEnYpvsvc22qP4CzeUbbM1t8QA4BncNDkqTrMGDF8ZE6CueA
 DtMXRWCpMUxzIfDMOTYntG1ohet+evY1Ymy4acwfxb0XSzwCzewfe1sUZeIXd9oz
 Mez/ddeBmty37uJUJd233uCrH/lpG3Zpr+1aWziPpZtxm9IyICIDqG2cWG1+KDaa
 KBPFqOHtJ6xylCqARNfzkiPlvnuFP0Ojt8f9dUTK62JBzd4zOczXZlHLhfkVIEOp
 3d5oDNI9c6OTGunUTdz5Yvi2YQ4uKqu3dAGPRyYA4MjsVaRuFqfcMqGT/gJD9ffB
 7tybYAsvGT104cVQXQpiduLMw1Ki7wimzmeD2u4bq9L0mdG2zZ1aFZmIOdP7wf9c
 1ShPLIo5MayQ3qKMSjgi7pF/LMt5+RGUjeoaCPs+6T+dIM1XOkpsbMEwoOxiCTN5
 CssC97h0MFhFI30oluJuHRJMxAro+NTVc+CCVPMX16HKVHzlkwPRDx60mLmtlda8
 hjjoPZ46vlwcaUJPY7YrvKGzsS+LWvbx21FKNADzHz8ySbimqjAff9VUb3dZyC9k
 1upOvyF+jkD+zU+HRZwn
 =zO0z
 -----END PGP SIGNATURE-----

Merge tag 'hw42_62a0b065' into release2

tag for commit 62a0b065ab

# gpg: Signature made Thu Feb  5 04:31:51 2015 CET using RSA key ID E09C093C
# gpg: Good signature from "HW42 (Qubes Signing Key) <hw42-qubes@ipsumj.de>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: FC1A C023 76D0 4C68 341F  406F 8C05 216C E09C 093C
2015-02-05 05:13:18 +01:00
Marek Marczykowski-Górecki
e33722c3dd tag for commit de9b3b55a6
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJU0t3QAAoJEIwFIWzgnAk8vuwP/RahfA4Zxm4RA5sstvcodVOO
 nArqQOQ8G3oawttNDbRa4VZ0fSRXGYinGNH79Z5s26LFwu1NTWq7RoyDDc2N8CS8
 VLhAV+jUE2EmouTC0ZL4ytLOdQefstoO2c9YkOFHdeWvzlUxwsf05SoqaHGDIiaq
 k6BAv1/kcCMJfVXgj8z/5nwdefjju+O/91mF0H1cLzW2EdcH2chmll9gKFHlg4iA
 rUUROzHQPrwmqNGlZYBddB2Pr6HgVWACnpTjXs1rzY87JcGs/0iiUCOW6tKd2RuU
 JwRGQ9ITTdHB1YFjB644iG9TH9l8gf/K9ZgmNxT194oDSh26LuWtX7hYFY4geVxv
 CEJa2XiND9sevlHF5bBWEU/Q4ToOJd+d4HtrWODFMRX3eQKFdMLYDYsGPZLIeUEV
 0VO01lFuPgOp9PYemr52tnRMHxOJuAB1GA3s7SKxu9uJAK3/GMZpdDfcOBGVTksG
 X/jtfGAZmvPvionmuGLgVjjtOosEohh5gQwKmHxVRLckN9uE0ble2et4Ib7r54NS
 FmIfVr2f5FPGfCv9jAwAsyVzrVAf0VfQpzmnmAPG0o/WK6hsyovim2CLHs2E3sfS
 rQXzTf+SU8Jhpl7uDV9gqMtaeCkGtBGnlfTGP1YTGW4g0oqZvAQhf1tHQiiXnX7H
 7m0aBNPxkTH0V3p5Ttpm
 =EloY
 -----END PGP SIGNATURE-----

Merge tag 'hw42_de9b3b55' into release2

tag for commit de9b3b55a6

# gpg: Signature made Thu Feb  5 04:04:48 2015 CET using RSA key ID E09C093C
# gpg: Good signature from "HW42 (Qubes Signing Key) <hw42-qubes@ipsumj.de>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: FC1A C023 76D0 4C68 341F  406F 8C05 216C E09C 093C
2015-02-05 05:11:27 +01:00
HW42
62a0b065ab debian: preinst: cleanup user creation
Generate user-groups via -U instead of explicit via groupadd. This also
fix the problem that the tinyproxy group were not gererated as
"system"-group.

Also suppress unneeded output of the existence test.
2015-02-05 04:22:48 +01:00
Marek Marczykowski-Górecki
92b544fd9b tag for commit 413d6ffa0e
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJU0tR+AAoJEIwFIWzgnAk88SMQAKdutkGwOt9gYIcoZ95JsxCP
 h7Bj8ZU1t8oZUN7RXuQlqRD6iOL5/VThhCr7TCQcoZQzAUrjIBUkQ7uoTxGocdsO
 uBOlT8MCXQsd3K0n1loHtdmVGGuQSeLO/sg+l0BOhW0PPwEPoGCQOWWK3uyfnwnC
 pQTSryRQQaCzqJLrNdJk7HPZ7RT5K0vhggsTs9f0FfK557QQIFwr6cFyPmuV4611
 1cmDXVGUGMZOW+HTbty+jvcw6xGE64Mph2YC7HM6dxmPppOSnWmpGQu99LE3DY9e
 nM/roi7JOHmswTo7PBh5yZyKtuovUs1PLfTW+G0XoBO2wcCcnzncishdamv/E5uF
 NdbLYaY/5qIbxb7GERJoreRnYyLq1n5ksvSfAJgD2aXwkbXNlqjh9vcZGX5oxERf
 AmpkDYKJFMp63iSPZS1tQxVWET2mhqUAOyEF+E/+4fonYGi04J4leeVlEAX1jyIH
 fmhCPlzyJQTgMQi+elJISNi+2IevIyon10yZqGbZDX0OmCywEjub5UVdSnkyMUnd
 MyEHXjKi1/pOUbtbH7V9PJaz3K14fVfW3eDHnsz/va+KWUOKVgBuvIpO56Ni3/VL
 /8QTBQj5z5dkxvvSDGZaL3Odnsmx8pAPZazNZTlxhwOxlPCd49P3dnAt7OJpxJTR
 VSEc276o4piogx6Icg8S
 =XUGP
 -----END PGP SIGNATURE-----

Merge tag 'hw42_413d6ffa' into release2

tag for commit 413d6ffa0e

# gpg: Signature made Thu Feb  5 03:25:02 2015 CET using RSA key ID E09C093C
# gpg: Good signature from "HW42 (Qubes Signing Key) <hw42-qubes@ipsumj.de>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: FC1A C023 76D0 4C68 341F  406F 8C05 216C E09C 093C
2015-02-05 04:19:28 +01:00
HW42
de9b3b55a6 debian: prerm: remove obsolete code
this code has been obsoleted by commit 56607800, eb18af4c and 707be87a.
2015-02-05 04:03:49 +01:00
HW42
413d6ffa0e debian: preinst: don't force the default shell to bash 2015-02-05 03:15:36 +01:00
HW42
ec8bf45dd1 remove 'bashisms' or explicit use bash 2015-02-05 03:14:41 +01:00
Marek Marczykowski-Górecki
e1f6a469ff tag for commit 977da9ccef
-----BEGIN PGP SIGNATURE-----
 
 iQIcBAABCgAGBQJU0jm2AAoJEIwFIWzgnAk8zVMP/A8iXCWtHL5dVsXhVfFWHTDB
 OMuPzpkTWHcmwHtGWEsNXuKUhpBARqoBEX4y+xmnTYfUXimxrxZLaEkgWw9+js3O
 HCH7u0FYcUphs6g/v0xhfKkB9YDYQpJuajSsc0qvytkJ+Y7jauPw327rwyDEVPQ6
 fSc0okX/cNOd9iOdnb3ZyHZr/LX/OkXI1/jT4Xn5fPG3hP8GlBNOsCF/ebwm0KT0
 xunc7N9Q5xsYoZHAeaPUP9yXyB63yzKwMFBZTp/JHDKE4C/sXdkAIgXiLpY58Mzo
 FzXadVvVltRvpXNWhMVmP8ETtGd4s5A7ou3JObqkoBlnKwvoUBNOOstL3EWhE7zO
 CRhWJZJm+tC9L1m8GoKCdgAb9wo2lcrq++BXSOuF80HLJEJiqe6dqlnrNLmmdqkI
 WrReexfyTNal/57fyl+sfwQ0z0l38sFciCQ0g8mShI3/Y1+btfQNjkxbhCO/SP1A
 yk1SYUOEH4H/lHMW0cDI+GrzqzeXbZjHmL34UoWr3IhByUd8Sf3YgubZyCwdIAIZ
 YVe6nIpGEmFzVHaGvMJsMNsDXgXI7UB4kChB9lLahKQwpDYL07hlvXTQmxbJUGXc
 q3+OJnpLn7GQaO9MUTZB7QfgCFG2J35WXSddFnP+owizm1otGuIFhzFIrA6U6wsR
 8ASxygaDOnVudY97TZlz
 =eitW
 -----END PGP SIGNATURE-----

Merge tag 'hw42_977da9cc' into release2

tag for commit 977da9ccef

# gpg: Signature made Wed Feb  4 16:24:38 2015 CET using RSA key ID E09C093C
# gpg: Good signature from "HW42 (Qubes Signing Key) <hw42-qubes@ipsumj.de>"
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: FC1A C023 76D0 4C68 341F  406F 8C05 216C E09C 093C
2015-02-05 01:20:13 +01:00
HW42
977da9ccef debian: preinst: remove modification of /etc/modules
modules are already handled by systemd and /lib/modules-load/qubes-*
2015-02-03 05:58:58 +01:00
HW42
5660780033 debian: install fstab as normal config file 2015-02-03 05:58:58 +01:00
HW42
92ec06ccf7 debian: postinst: remove redundant and misleading trigger output 2015-02-03 05:58:58 +01:00
HW42
f6567eb9b4 debian: postinst: enable haveged only if installed 2015-02-03 05:58:57 +01:00
HW42
9449ac693b debian: postinst: don't start systemd services
Starting services in the postinst script doesn't make much sense since
the package is normally installed in the template. In addition the start
can fail when executed through a trigger.
2015-02-03 05:58:57 +01:00
HW42
39640e5354 debian: postinst: cleanup 2015-02-03 05:58:57 +01:00
HW42
84fb72b3fd debian: postinst: enable netfilter-persistent service 2015-02-03 05:58:57 +01:00
HW42
ce595bc3d4 debian: postinst: remove fedora specific code
/etc/iptables/rules.* are already part of the packet.
The removed code has never done something in debian (since
/etc/iptables/rules.* already exists).
2015-02-03 05:58:57 +01:00
HW42
91c892fabc debian: postinst: use systemctl to set default target 2015-02-03 05:58:57 +01:00
HW42
27208897ae debian: postinst: don't create /rw - it is already part of the package 2015-02-03 05:58:57 +01:00
HW42
eb18af4cbd debian: postinst: don't remove /etc/udev/rules.d/*
removing /etc/udev/rules.d/* in debian makes no sense since this folder
is only for custom udev rules.
2015-02-03 05:58:56 +01:00
HW42
e73ad96995 debian: don't generate regular conf files in postinst 2015-02-03 05:58:56 +01:00
HW42
707be87a6f debian: postinst: use dpkg-divert
dpkg-divert is not ideal for config files but should work better than
direct cp/mv.
2015-02-03 05:58:56 +01:00
HW42
461a13f882 debian: postinst: use systemctl mask 2015-02-03 05:58:56 +01:00
HW42
47d1fdcbdc debian: fix for QSB #014 requires up to date qubes-utils 2015-02-03 05:58:56 +01:00
Marek Marczykowski-Górecki
dd210066bc rpm: add missing R: pygobject3-base 2015-02-02 06:10:45 +01:00
Marek Marczykowski-Górecki
64c14088fc version 2.1.53 2015-01-29 03:01:19 +01:00
Marek Marczykowski-Górecki
a714162dfe network: support for not setting DNS and/or default gateway (v2)
This patch introduces two new qvm-services:
 - disable-default-route
 - disable-dns-server
Both disabled by default. You can enable any of them to not set default
route and/or DNS servers in the VM. Those settings have no effect on
NetVM, where such settings are controlled by NetworkManager.

This is based on patch sent by Joonas Lehtonen
<joonas.lehtonen@openmailbox.org>
https://groups.google.com/d/msgid/qubes-devel/54C7FB59.2020603%40openmailbox.org
2015-01-29 01:10:34 +01:00
Marek Marczykowski-Górecki
cbf77fd005 filecopy: fallback to "open(..., 000)" method when /proc inaccessible
/proc is needed to link files opened with O_TMPFILE to the filesystem.
If not available, fallback to using permissions to block file access,
instead of failing the whole file copy.
2015-01-29 00:44:38 +01:00
Marek Marczykowski-Górecki
cac23b6d77 version 2.1.52 2015-01-27 01:07:52 +01:00
Marek Marczykowski-Górecki
24c74c44e8 systemd: allow to start cron daemon (#909) 2015-01-27 00:43:27 +01:00
Marek Marczykowski-Górecki
0470341d87 fedora: reload systemd only once 2015-01-27 00:43:27 +01:00
Marek Marczykowski-Górecki
0805f0eecc fedora: reduce code duplication in systemd triggers 2015-01-27 00:43:27 +01:00