PAM is now used directly instead of calling su

* fixes-20171019:
debian: cleanup after splitting qubes-core-agent
Fix removing temporary fi...

Displacement of /etc/pam.d/su was moved to
qubes-core-agent-passwordless-root, fix upgrade path.

Fix removing the file - do not free its filename just before unlink call
(scheduled with atexit ...

New udev have `DRIVERS` matcher, instead of `ENV{ID_NET_DRIVER}`. Add
appropriate rule to the fi...

Debian stretch in default configuration calls apt-get update every 24h.
And additionally, have a...

Check if root device was enlarged while domain was powered off and
resize the filesystem in such...

If root filesystem is the last partition (new layout), resize it
in-place. Use 'parted' tool bec...

* fixes-20171002:
qubes.ResizeDisk: handle dmroot being a symlink
qrexec: use user shell ins...

(cherry picked from commit 9d10ec617878b018274dd20800434b2d3d35add5)

* qubesos/pr/56:
archlinux: add correct section to qubes-noupgrade.conf

(cherry picked from commit 8c06c1eabd8f36d307f5956b5fea8d3bbcbb317f)

(cherry picked from commit 6d28d4dfaf0632477321248cdb07b31fcb31ffb2)

(cherry picked from commit 60ee036f04d5f22d1a3a694586f219f5b6ce30a1)

Currently building the package fails with an error 'qubes-r3.2: key "2043E7ACC1833B9C" is unknow...

Without this change the package builds successfully but there is a
file conflict error when inst...

In non-template-based-VMs it can be just a symlink (depending on
initramfs version).

Fixes QubesOS/qubes-issues#3139

Default `ask` policy ignore target domain specified by the caller, so it
doesn't make sense to s...

This will ease running shellcheck from the repository.

Scripts are detected by shebang, not an ideal approach, but should be
good enough.

Most of them are missing quotes, `` -> $(), and -o/-a usage in
conditions. Also add few directiv...

Most of them are missing quotes, `` -> $(), and -o/-a usage in
conditions. Also add few directiv...

Some libalpm based tools fail to correctly parse config files without
sections.

* start-app-kde:
Look for applications also in subdirectories of .../applications

This is especially needed for KDE applications, which live in
/usr/share/applications/kde4.

Fix...

Explicitly block something like "curl http://127.0.0.1:8082" and
return error page in this case....

* qubesos/pr/53:
Handle fallthrough with attribute(noreturn) for consistancy and compatiblity ...

Few reasons for this:
1. new templates use dnf to download packages, so yum.conf is unused
2. do...

Configure selected services to wait until GUI session is available.

QubesOS/qubes-issues#2974

QubesOS/qubes-issues#2974

Some services require GUI access. Make qrexec-agent handling this, based
on per-service configur...

Fixes QubesOS/qubes-issues#2003

* qubesos/pr/47:
minor amends to clock synchronization
clock synchronization rewrite

Prepend "-" to shell name, to instruct it being a login shell. This way
shell will initialize en...

renamed date_out variable to untrusted_date_out

Since some systemd services are moved to other packages, appropriate
%post/%preun should contain...

Debian have different base pam config files to include than Fedora.

Fixes QubesOS/qubes-issues#...

clock synchronization mechanism rewritten to use systemd-timesync instead of NtpDate; at the mom...

It should be up to the base Fedora packages to setup locales correctly.
Additionally, locale sou...

When there is only console=hvc0 (i.e. no output to emulated VGA) and
GRUB_TIMEOUT is set to 0, V...

Instead of calling 'su' to switch the user, use own implementation of
this. Thanks to PAM it's p...

(cherry picked from commit 475421b2e29bd00d9149bbe2ffb77fc481b79ce7)
Apparently some of this com...

It isn't really needed. It was used to workaround libusb bug (causing
crash when the system does...

* qubesos/pr/46:
Enable build for Zesty

When qrexec-client-vm is started with socket on its stdout and no local
process requested, it wi...

Man pages were installed only in RPM package...

This clarifies and also defines some corner cases like exit code
reporting.

QubesOS/qubes-issue...

1. If local process is started, report its exit code, instaed of remote
one. To get remote exit ...

Exit code 1 is very common in all kind of programs, including qrexec
services, so it is hard to ...

This configuration isn't included twice - it's Debian post-installation
script of grub that copy...

Qubes VM require few config options in grub. Ship appropriate
configuration. Debian have grub.d ...

1. Cannot Recommend: nftables, as Debian jessie doesn't have it.
2. gsettings tool is in glib, n...

- there are many netcat versions (openbsd, nmap, ...), which behave
differently - especially w...

Don't rely on legacy feature of interpreting non-executable files as
scripts there.

It is the same as qubes.VMShell - the actual difference is in qrexec
policy, which contains 'use...

qubes-core-agent itself do not use u2mfn module.

This is unused for a long time (since we've moved to USBIP).

qubes-core-agent itself do not require sudo to work.

QubesOS/qubes-issues#2572

While it doesn't make sense to install qubes-core-agent without qrexec,
it may make sense to do ...

Make passwordless root access optional - ease integration qrexec
authorization for sudo.

QubesO...

It is expected to be killed by a signal. Exit with returncode 0 anyway.
While at it, adjust it f...

It should really be in template builder script, or better: meta-package.

QubesOS/qubes-issues#2572

When a file is moved to other package, the new package needs Replaces:
and Breaks: dependecies o...

QubesOS/qubes-issues#2771

In Qubes 4.0 we no longer use two-stage DisposableVM startup.