From 934207baaa210ccd18c54ceacf674dfad7c222ea Mon Sep 17 00:00:00 2001 From: Chris Gunn Date: Tue, 27 Jun 2023 15:43:54 -0700 Subject: [PATCH 1/2] Enable dbus audit logs. dbus has implemented its own SELinux rules. When dbus blocks an operation based on SELinux, it has logic to log the violation to the security audit logs (as it should). Unfortunatley, this logic is currently incorrectly disabled by a build flag. This changes fixes this problem. Note: The audit client lib supports and actively encourages clients to not fail when the audit service is not available on the system. So, this does not add a dependency on the audit package. --- SPECS/dbus/dbus.spec | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/SPECS/dbus/dbus.spec b/SPECS/dbus/dbus.spec index fbff122117c..998a0adf7f3 100644 --- a/SPECS/dbus/dbus.spec +++ b/SPECS/dbus/dbus.spec @@ -2,13 +2,14 @@ Summary: DBus for systemd Name: dbus Version: 1.15.2 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv2+ OR AFL Vendor: Microsoft Corporation Distribution: Mariner Group: Applications/File URL: https://www.freedesktop.org/wiki/Software/dbus Source0: https://%{name}.freedesktop.org/releases/%{name}/%{name}-%{version}.tar.xz +BuildRequires: audit-devel BuildRequires: expat-devel BuildRequires: systemd-bootstrap-devel BuildRequires: xz-devel @@ -42,7 +43,7 @@ It contains the libraries and header files to create applications %build %configure \ --docdir=%{_versioneddocdir} \ - --enable-libaudit=no \ + --enable-libaudit=yes \ --enable-selinux=yes \ --with-console-auth-dir=/run/console @@ -86,6 +87,9 @@ make %{?_smp_mflags} check %{_libdir}/*.so %changelog +* Tue Jun 27 2023 Chris Gunn - 1.15.2-3 +- Enable audit integration + * Fri Oct 14 2022 Muhammad Falak - 1.15.2-2 - Add an explicit provides `dbus-x11` From ad0383af2280f093ad2456a2b3f48c1b5d1e7ce6 Mon Sep 17 00:00:00 2001 From: Chris Gunn Date: Wed, 28 Jun 2023 14:30:47 -0700 Subject: [PATCH 2/2] .spec linting fixes --- SPECS/dbus/dbus.spec | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/SPECS/dbus/dbus.spec b/SPECS/dbus/dbus.spec index 998a0adf7f3..4c2342bef4a 100644 --- a/SPECS/dbus/dbus.spec +++ b/SPECS/dbus/dbus.spec @@ -11,9 +11,9 @@ URL: https://www.freedesktop.org/wiki/Software/dbus Source0: https://%{name}.freedesktop.org/releases/%{name}/%{name}-%{version}.tar.xz BuildRequires: audit-devel BuildRequires: expat-devel +BuildRequires: libselinux-devel BuildRequires: systemd-bootstrap-devel BuildRequires: xz-devel -BuildRequires: libselinux-devel Requires: expat Requires: xz # Using the weak dependency 'Recommends' to break a circular dependency during @@ -21,7 +21,6 @@ Requires: xz # In real-life situations systemd will always be present and thus installed. Recommends: systemd Provides: dbus-libs = %{version}-%{release} - # NOTE: We currently do not build with X11 support. # build with X11 support in the future. Provides: %{name}-x11