* Enable dbus audit logs.

dbus has implemented its own SELinux rules. When dbus blocks an
operation based on SELinux, it has logic to log the violation to the
security audit logs (as it should). Unfortunatley, this logic is
currently incorrectly disabled by a build flag. This changes fixes this
problem.

Note: The audit client lib supports and actively encourages clients to
not fail when the audit service is not available on the system. So,
this does not add a dependency on the audit package.

* .spec linting fixes
This commit is contained in:
Chris Gunn 2023-06-29 12:36:36 -07:00 коммит произвёл GitHub
Родитель c80f4afe9b
Коммит d97c132503
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
1 изменённых файлов: 7 добавлений и 4 удалений

Просмотреть файл

@ -2,17 +2,18 @@
Summary: DBus for systemd
Name: dbus
Version: 1.15.2
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv2+ OR AFL
Vendor: Microsoft Corporation
Distribution: Mariner
Group: Applications/File
URL: https://www.freedesktop.org/wiki/Software/dbus
Source0: https://%{name}.freedesktop.org/releases/%{name}/%{name}-%{version}.tar.xz
BuildRequires: audit-devel
BuildRequires: expat-devel
BuildRequires: libselinux-devel
BuildRequires: systemd-bootstrap-devel
BuildRequires: xz-devel
BuildRequires: libselinux-devel
Requires: expat
Requires: xz
# Using the weak dependency 'Recommends' to break a circular dependency during
@ -20,7 +21,6 @@ Requires: xz
# In real-life situations systemd will always be present and thus installed.
Recommends: systemd
Provides: dbus-libs = %{version}-%{release}
# NOTE: We currently do not build with X11 support.
# build with X11 support in the future.
Provides: %{name}-x11
@ -42,7 +42,7 @@ It contains the libraries and header files to create applications
%build
%configure \
--docdir=%{_versioneddocdir} \
--enable-libaudit=no \
--enable-libaudit=yes \
--enable-selinux=yes \
--with-console-auth-dir=/run/console
@ -86,6 +86,9 @@ make %{?_smp_mflags} check
%{_libdir}/*.so
%changelog
* Tue Jun 27 2023 Chris Gunn <chrisgun@microsoft.com> - 1.15.2-3
- Enable audit integration
* Fri Oct 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.15.2-2
- Add an explicit provides `dbus-x11`