-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 21 Sep 2023 13:12:44 +0100 Source: gdm3 Architecture: source Version: 45.0.1-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1051671 1051993 1052374 1052381 Changes: gdm3 (45.0.1-1) unstable; urgency=high . * Team upload . [ Marco Trevisan (Treviño) ] * debian/gdm3.gdm-smartcard-*: Always fallback to password auth if no SC pam module is installed. Both libpam_sss.so and libpam_pkcs11.so might be not be installed in a system, in such case we should not make gdm to enforce the smartcart authentication because that would just lock the user out if there are other login allowed methods. As per this, make these modules partially optional even in the exclusive mode, given that we have not a strong dependency on such modules and so inserting a smartcard is not enough to block a system, unless that's configured. Ideally we should not even try to proceed if the system is not fully configured for smartcards, but that's something that can't be easily controlled from modules settings, so let's just do the quickest thing. (Mitigates: #1051659, #1051785) * d/tests/sssd-softhism2-certificates-tests.sh: Cherry-pick upstream fixes . [ Simon McVittie ] * New upstream release - Fix an intermittent crash when unlocking the screen - Translation updates: en_GB, ko, sv * d/gdm3.links: Create a dconf profile named for the Debian-gdm user. In upstream and Ubuntu gdm, the system username used for the greeter is "gdm", but in Debian, for historical reasons it is "Debian-gdm". Before version 45, the dconf profile name "gdm" was hard-coded, but since version 45 it uses a profile name that matches the system username (to allow gnome-initial-setup to have its own profile). This resulted in the gdm greeter trying to use the ordinary gnome.session instead of gnome-login.session, which caused login to fail when the gnome-session package was not installed, and caused settings in /etc/gdm3/greeter.dconf-defaults to be ineffective. Other differences between gnome.session and gnome-login.session, potentially including security hardening for the greeter, would also not have been effective. (Closes: #1052374, #1051671, #1051993) * Set high urgency for the dconf profile fix . [ Helmut Grohne ] * Avoid FTBFS when systemdsystemunitdir changes in systemd.pc (Closes: #1052381) Checksums-Sha1: 323b4f13c9f1065b79162870fe281a14f1070d3f 3260 gdm3_45.0.1-1.dsc 5fa8aea08b30c14f96103b89293218a1358308cb 855004 gdm3_45.0.1.orig.tar.xz 32043065c0740f934a6bc197cef90ba54586361c 83396 gdm3_45.0.1-1.debian.tar.xz 3cae7684ebedaa0cc7545d929d53544f21887812 16170 gdm3_45.0.1-1_source.buildinfo Checksums-Sha256: 1179df9033bd2c25a5292b508610b0e9121a8a5860edacdb22a8e9659a2ad5c2 3260 gdm3_45.0.1-1.dsc 6572578c05e3c6569d6ed269f7de2aaf3a035657654586d8243907bb7a6ffa85 855004 gdm3_45.0.1.orig.tar.xz 13a4dfcd4167ad3af167591050a6468927b4dab6d61bd5f59b8aec86c29a16dd 83396 gdm3_45.0.1-1.debian.tar.xz 8468954e6589684e81a0f45fc16fa0bfc1dbdf56f7073b853026984575da5395 16170 gdm3_45.0.1-1_source.buildinfo Files: 67736b08efbb51fadebfd41a3235c9dc 3260 gnome optional gdm3_45.0.1-1.dsc 4912429c0231a95fedd086d1ac8f54ea 855004 gnome optional gdm3_45.0.1.orig.tar.xz 6994299133a0a9f39014951ca5359eab 83396 gnome optional gdm3_45.0.1-1.debian.tar.xz 61d5ca9ab5e8aee988b08ee228666e10 16170 gnome optional gdm3_45.0.1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAmUMOYEACgkQ4FrhR4+B TE8MCQ/9Eoot1SAvLwjaa1f3/nd2uyvDSdqBWQWRCWTPWnx8h6/dG+KkpAzEloWt kjIw+YcTd99KnYiMI0zJHmbbCDfdtoy73IFFyFQwjriHAcCig+96ACamZegsuRJ7 7DBJaDC7Cnv1PjYRp/2AUzUxIUYmT/phvBcpdJDTsT4l03D2lo6mt7PPU6eslx1W vSfztSUf1K2ueVEapuGWwJnXkBkEocMSRR6ysx+pjDlbOeHNCDSVZAPKazCQe/yD mjY40Og+go12Xyc432iUHYosHa9TyznHntrd9Mhs1RWSnZWUnvrf7F5OOiz1TGOo AOUgve+bQojjXKGRFwVJOQfsRhjbMP2STBPI/VWUu41Zok7o2JoMEv1Gr7c9RqcJ md5zoxeC8i8FITsKiYuRLrDzCXQ/36GnVtT9k8gwJ7cGGAjjij0V+ybT+714teRG HlOHaoAz5HDcwEhNNxYi3I+PVcIhxP0w6ke1mgnvD/GRr3MZ8dGzmcG4YzXanKya Ut67JhCgWHrQGZq0fqg+Hb1spXSFlh5IK3llzYipTqNC0u0PS+5aNGce5CmSRi2r Vcfs3rGzTYO/QEvws5FJLxOITVhaW5Cc74tu7dqDpokfJXzndCXPKsbgvuGXqRdm 5R4mUBh47cHK+KqSs2KKFXb3/VZiForxuzU4t0HGBuW4KOI89co= =V2MV -----END PGP SIGNATURE-----
