github.com/QubesOS/qubes-core-agent-linux commits

Switched qvm-move-to-vm.{gnome,kde} scripts to use bash not sh

Both these scripts contain `pipefail` which is a bash option and will
fail in dash

53fc7955f96f66838076fce9f339d6d65b79e592 authored almost 10 years ago by Jason Mehring <[email protected]>

Fix "backup: fix qubes.Restore service - do not send garbage as backup data"

fda293f09a23063a1633f8fe6365397ce654b295 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

qrexec: fork into background after setting up qrexec-fork-server socket

This allows qubes-session signalling dom0 when session is really ready.

29f5709c53d216b9cf3ce89d74003788ca60e526 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge tag 'jm_de51e155'

Tag for commit de51e155f3757ec2dd0b8f51ec7e7b5d9dff000b

# gpg: Signature made Fri Feb 20 01:56:...

dc41b3872c533623a3377e04fc74cc6e9867d808 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: Add extend-diff-ignore options to debian packager

This will ignore excluded deb, rpm, pkg and .git directories that were
tar'ed for the .orig.tar....

de51e155f3757ec2dd0b8f51ec7e7b5d9dff000b authored almost 10 years ago by Jason Mehring <[email protected]>

backup: fix qubes.Restore service - do not send garbage as backup data

Do not send 'which' command output to stdout, as it will mess real
backup data.
This fixes regre...

b560596f1beda614299697e4422e5afe0305555b authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: fix version number

3c67f98a9b8bce10be922d5c72a21ce103f5179a authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

version 3.0.1

4947c0c53ae68ebf7b6d9f9200121e67dbc90b4c authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

updates-proxy: allow xz compressed metadata (fc21)

b655d968c4621dc8dddf270c865f6fdeac1ceb22 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: exclude binary packages from source archive

f2f5aa1215b16a290612e07e12581fb5ff2ccb21 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: reenable -Werror, mentioned warning already fixed

2dd2fe83c3fe9412b7eec1389178399ac0e2c651 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

qrexec: fix compile warning

e43c43f7b5f49ac30e3b7e991a71c5c94c412d76 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge remote-tracking branch 'nrgaway/r3-templates'

f8db065a7560109ae52b7f5ce65f20e41ddf0c34 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Adjust permissions of /var/run/qubes

e47197569abc5b0e674d511948f9f28e35c2348c authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge branch 'qrexec-sockets3'

9bbfb4a56778edab1751b51cb6d68561bab3e101 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

qrexec: add simple "fork server" to spawn new processes inside user session

This process should be started from user session (most likely
qubes-session). New processes (of ...

700c240d370eadadc64c8252c7c3650127da4fc3 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

qrexec: reorganise code for upcoming change

Move (qrexec-agent version of) do_exec to qrexec-agent.c, move
handle_handshake to qrexec-agent-...

4b5960daa3c4bdd708ddb33b0f93ad15ea6d699a authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

qrexec: use sockets instead of pipes to communicate with child process

The main advantage is possible use of single socket for both stdin and
stdout. This is strictly ...

c1cb78e0e8e2e6090c32e2c1cddc9f8bcbd8399e authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge branch 'master' of git://git.qubes-os.org/marmarek/core-agent-linux into r3-templates

923416914dcaa16db5cbe385bb97211aa8010456 authored almost 10 years ago by Jason Mehring <[email protected]>

Make sure when user is added to qubes group that the group is appended

added -a option to usermod.
This will prevent other groups from being un-subscribed when qubes g...

567a045bcdb44e1069c4005bc575ebb0627b466a authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Remove unneeded patch file and README

197fa604ed0e1edcc079b15fad2fbd276d929566 authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Remove dist target from Makefile as copy-in is now being used

9b35bbdcb4291b818c4f1cc95d0e59e8caa7e352 authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Move creation of directories into debian.dirs configuration file

51c94ccc2bd8ee231035b5d9a357a07ea325b994 authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Revert depends back to use libxen-dev

45cbeda244fe4b9af5f40163a5322c509b123cf6 authored almost 10 years ago by Jason Mehring <[email protected]>

network: fix handling newline in firewall rules

Since the rules are no more directly handed to echo -e, sed needs to
handle all escape sequences...

4dbd9e205c413089e9aa8a43b31635fc5725f126 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge branch 'r3-templates' of github.com:nrgaway/core-agent-linux into r3-templates

Conflicts:
debian/rules

6e3be531c5fd62ecfe2e833dad4b317da9a261af authored almost 10 years ago by Jason Mehring <[email protected]>

Remove 'xen.evtchn' udev rule

This rule already gets set in linux-utils
linux-utils/udev/udev-qubes-misc.rules:KERNEL=="xen/ev...

fe7ba5e9d6db914c887a9bf668bc15ef3b0cac27 authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Remove 'exit 0' in maintainer section scripts to all other debhelpers (if any) to also execute

bb850ab95dedc364cd44b379e9a0a14b27973f33 authored almost 10 years ago by Jason Mehring <[email protected]>

Add a qubes group and then add the user 'user' to the group

This is to allow permissions to be set on some devices where the user needs
less restrictive per...

fc42561586aca1384b004ad5f3ef1a198617f531 authored almost 10 years ago by Jason Mehring <[email protected]>

Set permissions to /proc/xen/privcmd, so a user in qubes group can access

f1390c1436af1fe15247f351f6d46bd4004bc4a1 authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Refactor Debian quilt packaging for xen

- Use copy-in for debian-quilt package in Makefile.builder instead of hook (to be removed) in Ma...

2274e65a32d5193a688433e5304c65daa7d56b66 authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Converted debian package to a quilt package to allow patches

Applied patch to qrexec Makefile to prevent compile failure on warnings
qrexec: Disable all wa...

79650f0c4c4455b3a5b89496fe638d773801d7ba authored almost 10 years ago by Jason Mehring <[email protected]>

debian: change systemctl set-default back to manual symlink

systemd in wheezy is old enough to not have this option.

b40c791914939eeadbf8604888b35c0b4c921ab0 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: Converted debian package to a quilt package to allow patches

Applied patch to qrexec Makefile to prevent compile failure on warnings
qrexec: Disable all wa...

0df84c7796ad400c6f6c576880c791360825784f authored almost 10 years ago by Jason Mehring <[email protected]>

Make qvm-run bidirectional and document its limitations.

b37d391f919c24281861bf588a7d7a43edfd626c authored almost 10 years ago by Matt McCutchen <[email protected]>

Switch to preset file for systemd units to disable.

377e0b4cd4f5e2a3830339371630ead861ad0602 authored almost 10 years ago by Matt McCutchen <[email protected]>

Set permissions to /proc/xen/privcmd, so a user in qubes group can access

87bf833368a22d5117815158fe2a3c4e830c4a4b authored almost 10 years ago by Jason Mehring <[email protected]>

Remove 'xen.evtchn' udev rule

This rule already gets set in linux-utils
linux-utils/udev/udev-qubes-misc.rules:KERNEL=="xen/ev...

4366dd9ba7063b33c11c8b75b45b3399ab2e0ff6 authored almost 10 years ago by Jason Mehring <[email protected]>

Add a qubes group and then add the user 'user' to the group

This is to allow permissions to be set on some devices where the user needs
less restrictive per...

ccff1f3149e6a07cb7d2a28c57cb2aac02dbd465 authored almost 10 years ago by Jason Mehring <[email protected]>

debian: Remove 'exit 0' in maintainer section scripts to all other debhelpers (if any) to also execute

328430d3bf3022463c99fd27befbb1fe4afc905a authored almost 10 years ago by Jason Mehring <[email protected]>

Merge remote-tracking branch 'woju/master'

ea47dfbd5dda1312d2795c90da4bf9c1f094f3a0 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: preinst: cleanup user creation

Generate user-groups via -U instead of explicit via groupadd. This also
fix the problem that the...

97dd21bcff175f14e6e33c466615627ff57f72fa authored almost 10 years ago by HW42 <[email protected]>

debian: preinst: don't force the default shell to bash

5c54d48c36bcd643548270cbddf06e39c81c7967 authored almost 10 years ago by HW42 <[email protected]>

debian: prerm: remove obsolete code

this code has been obsoleted by commit 56607800, eb18af4c and 707be87a.

166ec3323f6df040764f85593cb03f761d346f4e authored almost 10 years ago by HW42 <[email protected]>

remove 'bashisms' or explicit use bash

dad5bfbd18bf233126263bf985777ef6f28cbc1e authored almost 10 years ago by HW42 <[email protected]>

debian: preinst: remove modification of /etc/modules

modules are already handled by systemd and /lib/modules-load/qubes-*

77392fd3a93d07f9b76518a28b54b7eec3afd85d authored almost 10 years ago by HW42 <[email protected]>

debian: install fstab as normal config file

6ff749a13adb15cfdd8bf19fa214bfeaf09ae302 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: enable haveged only if installed

60a181b3f45307aa3c4b7fae988cd14b17aa71d6 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: remove redundant and misleading trigger output

641c516d7614eddd5a0883b80d6c2fc220c00a9a authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: enable netfilter-persistent service

de53e1d0bbf75e4e44da307445249428ab3d0877 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: cleanup

e8f25bfac80d279de76c22bacde39dec8aa40e6f authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: remove fedora specific code

/etc/iptables/rules.* are already part of the packet.
The removed code has never done something ...

5080c7c2d34bd1e746082f3eff39926f841f4887 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: use systemctl to set default target

07c2f2a5f4e3a508ccdbbda1bf23015bab0bd7d2 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: don't remove /etc/udev/rules.d/*

removing /etc/udev/rules.d/* in debian makes no sense since this folder
is only for custom udev ...

b2307cfee60a86ab8b19b23d49d071835fbce5e8 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: don't create /rw - it is already part of the package

a5fbbea98d8977728309aa857b4c9c6a76de8ac5 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: don't start systemd services

Starting services in the postinst script doesn't make much sense since
the package is normally i...

05da6e63796501701f91c005b6e70f280db589b9 authored almost 10 years ago by HW42 <[email protected]>

debian: don't generate regular conf files in postinst

47550ee2b63ff5e714e0f7b4dcf8f6dd1bcaffe4 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: use systemctl mask

4faece9e899be1828f372e4ea2fd035034508383 authored almost 10 years ago by HW42 <[email protected]>

debian: fix for QSB #014 requires up to date qubes-utils

d7fac08792e0376214c38548a5065c857b896039 authored almost 10 years ago by HW42 <[email protected]>

debian: postinst: use dpkg-divert

dpkg-divert is not ideal for config files but should work better than
direct cp/mv.

8a9d2378f68f35b08e0b5355312a65013061a331 authored almost 10 years ago by HW42 <[email protected]>

rpm: add missing R: pygobject3-base

490176f180ae51fbf285d64e2d33454f4b9875a8 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

spec: require linux-utils-3.0.1

591b95a81b1399ffe52576b6510c6e1ec42a0efc authored almost 10 years ago by Wojtek Porczyk <[email protected]>

network: support for not setting DNS and/or default gateway (v2)

This patch introduces two new qvm-services:
- disable-default-route
- disable-dns-server
Both ...

19a4c6d0dd16412b4b867190a64164281d7e89ae authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

filecopy: fallback to "open(..., 000)" method when /proc inaccessible

/proc is needed to link files opened with O_TMPFILE to the filesystem.
If not available, fallbac...

9f51c826669d7302192a3471f5e50d0ccd6fce03 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

systemd: allow to start cron daemon (#909)

efb79d5784afce1bd0a40dcc3b2127070bca8e9c authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

fedora: reduce code duplication in systemd triggers

55904453191a617c633e9e96d6cd5569ca6311ef authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

fedora: reload systemd only once

ab637395cbbba54f6163b090444468d8dbc82463 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

archlinux: align with fedora changes related to imsettings

898f223cd42224021830f5cdf0594c1285ff1665 authored almost 10 years ago by Olivier MEDOC <[email protected]>

network: support for not setting DNS and/or default gateway

This patch introduces two new qvm-services:
- set-default-route
- set-dns-server
Both enabled ...

4637735882fb642fc5cc98749ccd5308f6d5257a authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

archlinux: fix new packaging requirements related to sbin, lib64, run ...

a94f1f411165cfc8ee61c93ba541ba85e246088a authored almost 10 years ago by Olivier MEDOC <[email protected]>

don't ignore asprintf() return value

13bca3d05f3f260a47cfb0aaab6ba93c3b6489ad authored almost 10 years ago by HW42 <[email protected]>

fedora: Fix iptables config installation one more time

bc8a6a0a2095229654454e1898fcc25ca2d4e431 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

fedora: Fix iptables config install script

66620c10050d1405ce095f54fb1688a1411eaf22 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

filecopy: prevent files/dirs movement outside incoming directory during transfer

Otherwise, when the user moves directory, which is still in transfer,
somewhere else, it could a...

efc7d4d1f249873bde58ee68d25c0b7c13538fd7 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

fedora: Add security-testing repo definition

Conflicts:
misc/qubes-r2.repo

50b536bee38f66259cc9bfcf68566fc2fbe5fe36 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

fc21: iptables configurations conflict with fc21 yum package manager

Moved iptables configuration to /usr/lib/qubes/init
fc21 + debian + arch will place them in prop...

33d3a6c9eae411340b4dd82328ed8e983e4b3ea4 authored almost 10 years ago by Jason Mehring <[email protected]>

fc21: Remove left-over code comment

546b4c7911d9705f0ce308857227b1b0ab355260 authored almost 10 years ago by Jason Mehring <[email protected]>

network: fix NM config preparation

The same variables are reused to configure downlink in ProxyVM, so
create NM config before they ...

0be213200a2ad8302996c417893e32a9b167cd99 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

network: set uplink configuration based on MAC (NetworkManager)

b3429b596dd9cafaa7cc8b11f6c67b7a5ff206c3 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: remove unneeded acpid dependency

https://groups.google.com/forum/?_escaped_fragment_=msg/qubes-devel/oY7m9zNEXFw/N94pknsTg7oJ

Co...

dbd19698b3a70ff28a32028a8ef3c25ffb356d16 authored almost 10 years ago by HW42 <[email protected]>

debian: move not strictly required packages to Recommends-Section.

https://groups.google.com/forum/?_escaped_fragment_=msg/qubes-devel/oY7m9zNEXFw/N94pknsTg7oJ

Co...

6f056486e04d0183d244b3080d8cdf10e4f8282d authored almost 10 years ago by HW42 <[email protected]>

debian: fix service name in postinst script

a4ad010a45ed1839becbf0c07720dca6293834d3 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Update update-proxy rules for debian security fixes repo

The name can be "wheezy/updates".

5bd308052156265ed78d2beb0e7b8236309f5223 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: add missing python-gi to dependencies

Required for qubes-desktop-run tool.

45e7cbb2ac89f13013c1678bacb45b5d29d24888 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: remove obsolete code from postinst script

NetworkManager-dispatcher.service issue seems to be already fixed in
upstream package.

c3ef00303f6fa2bbea41bde437fbeb37efa783c7 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: fix generation of apt sources list file

Use codename, instead of release number.

Conflicts:
Makefile

7476eb2f246e1437ada22ab7cea899327c515836 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Fix disabling nm-applet when NM is disabled

756293ec75e75f1f3a62bb28c14caa13f95be30f authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

debian: create tinyproxy as system user

995c758d1472f79fa2da337553aaab4abe7fbd17 authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Merge branch 'debian'

Conflicts:
misc/qubes-r2.list.in
misc/qubes-trigger-sync-appmenus.sh
network/30-qubes-externa...

9130636c8857b58ea32b9bf6d1c4a9a90f86791e authored almost 10 years ago by Marek Marczykowski-Górecki <[email protected]>

version 3.0.0

3a0ad108d496b736699ea450bc42f5863a9ae7f3 authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Disable R3 repos by default

1f1a33be2128ccf536de68b05056343c6e008830 authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Update repos and keys for Qubes R3

9b71e6db8bd8b787ca2ae23a710bafaab224e5ad authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

qrexec: new protocol - direct data vchan connections

b13844afe13b68c7544e6d27c6eda08d20130a9a authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

code style: replace tabs with spaces

d84381b87ffc0ef36391a000d31b1c496f51361b authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Use xenstore.h instead of xs.h

17350f6f69f37a118582652f07468da7af14a1ba authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

qrexec: register exec function

Update for shared libqrexec.so API (instead of statically linked one).

48685938ff887077db0e56aa4003bcd541f893cc authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

rpm: fix typo

a3aab7dab2980e3dbb4102c93f64e3679e0d0a79 authored about 10 years ago by Marek Marczykowski <[email protected]>

systemd: fix qubes-service handling

qubesdb-list does show only list of paths, without values. Use
qubesdb-multiread instead. Path (...

1f04cf34cc298ef70cef09c6cd240f5ee309468f authored about 10 years ago by Marek Marczykowski <[email protected]>

Use Qubes DB instead of Xenstore

db35abadc85ebb406a7ca2e65829b58baabc3879 authored about 10 years ago by Marek Marczykowski <[email protected]>

qrexec: remove dom0 targets from makefile

b8588c4856f90137841dd1e740f95551386d452a authored about 10 years ago by Marek Marczykowski-Górecki <[email protected]>

Ecosyste.ms: OpenCollective

github.com/QubesOS/qubes-core-agent-linux