Revisions of bolt

Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 678235 from Robert Frohl's avatar Robert Frohl (rfrohl) (revision 2)
Move polkit rules file to into doc folder. The 'wheel' group has no special
privileges and the file did not have any effect. (boo#1125425)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 663603 from Tomáš Chvátal's avatar Tomáš Chvátal (scarabeus_iv) (revision 1)
- use meson macros during build 
- Update to 0.7
  * Features:
    - announce status to systemd via sd_notify (using a simple custom implementation)
  * Bug fixes:
    - properly update global security level status
    - adapt to systemd 240 not sending bind/unbind uevents
    - fix compilation on musl
    - daemon: use g_unix_signal_source… to catch signals
  * Improvements
    - precondition checks cleanup and completion
    - error cleanup
    - fix some leaks and issues uncovered by coverity
- security review: add RNG hardening patch (boo#1119975): 
  hardening_for_RNG_code.patch
Update to 0.6
- New Features:
  * pre-boot access control list, aka. BootACL support
	- domains objects are now persistent
	  * new Uid (dbus) / uid (object) property derived from the uuid of the device representing the root switch
	  * sysfs and id attribute will be set/unset on connects and disconnects
	  * domains are now stored in the boltd database
	- domains got the BootACL (dbus) / bootacl (object) property
	  * uuids can be added, removed or set in batch
	  * when domain is online: changes are written to the sysfs boot_acl attribute directly
	  * when domain is offline: changes are written to a journal and then reapplied in order when the domain is connected
	- newly enrolled devices get added to all bootacls of all domains if the policy is BOLT_POLICY_AUTO
	- removed devices get deleted from all bootacls of all domains
	- boltacl domain command will show the bootacl slots and their content
  * boltctl gained the -U, --uuid option, to control how uuids are printed
- Improvements and fixes:
  * Testing
	- boltctl is now included in the tests
  * Bugs and robustness:
	- The device state is verified in Device.Authorize
	- Handle empty 'keys' sysfs device attribute
	- Properly adjust policies when enrolling already authorized devices
	- Fix potential crasher when logging assertions g_return_if_fail
Displaying all 15 revisions
openSUSE Build Service is sponsored by