diff --git a/.gitignore b/.gitignore index 8731516..01b9acf 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ SOURCES/gpgkey-F5E11B9FFE911146F41D953D78A1B4DFE8F9C57E.gpg -SOURCES/pcsc-lite-1.8.23.tar.bz2 +SOURCES/pcsc-lite-1.9.5.tar.bz2 diff --git a/.pcsc-lite.metadata b/.pcsc-lite.metadata index 632e9b3..a726171 100644 --- a/.pcsc-lite.metadata +++ b/.pcsc-lite.metadata @@ -1,2 +1,2 @@ 13df650b9548b4ef1b24ad11ef6b573af4d48011 SOURCES/gpgkey-F5E11B9FFE911146F41D953D78A1B4DFE8F9C57E.gpg -6645f9554b7e031d309bec6d56e031f67ddae771 SOURCES/pcsc-lite-1.8.23.tar.bz2 +66ab757215d5ea436e0f2dffb8594d71904e9d9c SOURCES/pcsc-lite-1.9.5.tar.bz2 diff --git a/SOURCES/org.debian.pcsc-lite.policy b/SOURCES/org.debian.pcsc-lite.policy deleted file mode 100644 index cbae505..0000000 --- a/SOURCES/org.debian.pcsc-lite.policy +++ /dev/null @@ -1,30 +0,0 @@ - - - - The PCSC-lite Project - http://pcsclite.alioth.debian.org/ - - - - Access to the PC/SC daemon - Authentication is required to access the PC/SC daemon - - auth_admin - auth_admin - yes - - - - - Access to the smart card - Authentication is required to access the smart card - - auth_admin - auth_admin - yes - - - - diff --git a/SOURCES/pcsc-lite-1.8.23-maxreaders.patch b/SOURCES/pcsc-lite-1.8.23-maxreaders.patch index 0852fce..bed7bea 100644 --- a/SOURCES/pcsc-lite-1.8.23-maxreaders.patch +++ b/SOURCES/pcsc-lite-1.8.23-maxreaders.patch @@ -15,7 +15,7 @@ diff -up ./src/PCSC/pcsclite.h.readers_32 ./src/PCSC/pcsclite.h +++ ./src/PCSC/pcsclite.h 2018-08-20 16:03:00.061567242 -0700 @@ -281,7 +281,7 @@ extern const SCARD_IO_REQUEST g_rgSCardT - #define PCSCLITE_VERSION_NUMBER "1.8.23" /**< Current version */ + #define PCSCLITE_VERSION_NUMBER "1.9.5" /**< Current version */ /** Maximum readers context (a slot is count as a reader) */ -#define PCSCLITE_MAX_READERS_CONTEXTS 16 +#define PCSCLITE_MAX_READERS_CONTEXTS 48 diff --git a/SOURCES/pcsc-lite-1.8.23.tar.bz2.asc b/SOURCES/pcsc-lite-1.8.23.tar.bz2.asc deleted file mode 100644 index 7396dc0..0000000 --- a/SOURCES/pcsc-lite-1.8.23.tar.bz2.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCAAdFiEE9eEbn/6REUb0HZU9eKG03+j5xX4FAlo4D+QACgkQeKG03+j5 -xX5DZQ//SMsKZKAm1DBU3IMYjMkHNchuouuzdK5e8y3J/xs2fL2ZI3m2pHHBUsgH -Pol+4D78RgZGD/BG8NBZe3vUoCeeW1VY7Ovn+ZwIV0DgGRJ0tYazVMNBz/mmDFlv -RGcoBHeSVvGrrhd8IIx1oAEx96rWuPwUdLiMozoTmVhd0YE0H6qc3uNga1PoWs5m -ZYnz7d6OrGGlvOSHQUMqqxd1gTuktBRmVvxWbjjCNqUNE/JitjgBnjf3BU5ylFuV -SwvDwN6g404oQbSzdqJNyZd/ZQfTYhc+AS7Xm2kFl1tZoHCIAbYYSBdz138qSpMN -XVkIVBQ/iXuGEEqSsIZ5MIs0L72oUATpr5DL8XhcY+HP27SRB14kEp1OrCAwjOGt -nV46dRzPV5LqeA+2WKP993ZAjZfBEwEB6OdFYNyEkulL1f2FSuZKat4xgOHiyFH0 -99/mbnVy5js2MOm3il4oihLNjkiT2QpuI88Q9JbgqJAwM4GKGIk0tCST+DIzNkA0 -LPLaYskNYXTywl0q9l2dS8lpUUF2ubMlHf+3BySDhyrH2lQrc2h/bfLW62LOKxnG -4GhrnchaiFkRQoVRu5SoKdwKrMvtStXWnsZLC1K9xyWTBhx3WjgLkn90DQThhib+ -i4h1XiHTuEaqoADT9iwqsJ1BiIYtLUPcLzcnQCzaH0gtWme0XxA= -=ie6D ------END PGP SIGNATURE----- diff --git a/SOURCES/pcsc-lite-1.9.5.tar.bz2.asc b/SOURCES/pcsc-lite-1.9.5.tar.bz2.asc new file mode 100644 index 0000000..8bac82e --- /dev/null +++ b/SOURCES/pcsc-lite-1.9.5.tar.bz2.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEE9eEbn/6REUb0HZU9eKG03+j5xX4FAmGrX3QACgkQeKG03+j5 +xX6OYhAAlPiKTLWkHUq0edTZqptfYvjflQ3oBRSz5aGl1v95RyuklhGSK7H6fVez +eYTG8bVKJDaHQBE+b1LukvIrhVlRGSHzTChTjc4k8qGjvSIqTp3t5Zhi0TDBIBov +agLr2YP6Bi07nJZ+UzE5ssx0zk8Ca4xJDoSpBuD6ZcdTzSJ1VW8DZwD0bpco4a1u +l8/b/DgzLPtzsSeBDoIGRlZsx6VYoxH83vaUp0FUNcdbLnA7teeWgnkSFJws8YAe +TXd10bv3OYYqC/vCcQUv96tZaN2aekhYH9CeefAb6EC+kVWEXvV7d0BN29ToWuDm +AQqkXpSYVihhkmQjTOmX6sKYbXpIkL13Rvmsz++Sf1tKQNuFcudtD2D4BZy4cglk +DwX0dlJeHcQadeeyvC61G5BzreykhD6891PaxTs+BeGLKHe/VXmLhPcbA1r0oOKB +A1G6lie02u2lCeohVFOvrIg7Pgx/msEqvGlqqYAYIz7s3bH0y88dw/QQW0le94Vr +HefVx/dAqN1n90DTwKR5s10OgMAVGj4g9FkxNV/rVqKK6PwpM8wu1RuUeJhbeioN +FVwJXzSsVoLkUn+GEQHXFtx/uOpQcJ63CPybULSXHp9xh4XecEBbJ695TZkzikP0 +Y+eAurhL7mKFpWwVIxTqYy+JU6B2r/p7pY0i15i8nGa2xkda/M8= +=nBYh +-----END PGP SIGNATURE----- diff --git a/SPECS/pcsc-lite.spec b/SPECS/pcsc-lite.spec index 06ecc06..02f061a 100644 --- a/SPECS/pcsc-lite.spec +++ b/SPECS/pcsc-lite.spec @@ -1,19 +1,17 @@ -%global upstream_build 4235 - Name: pcsc-lite -Version: 1.8.23 -Release: 4.1%{?dist} +Version: 1.9.5 +Release: 1%{?dist} Summary: PC/SC Lite smart card framework and applications Group: System Environment/Daemons License: BSD -URL: http://pcsclite.alioth.debian.org/ -Source0: https://alioth.debian.org/frs/download.php/file/%{upstream_build}/%{name}-%{version}.tar.bz2 -Source1: https://alioth.debian.org/frs/download.php/file/%{upstream_build}/%{name}-%{version}.tar.bz2.asc +URL: https://pcsclite.apdu.fr/ +Source0: https://pcsclite.apdu.fr/files/%{name}-%{version}.tar.bz2 +Source1: https://pcsclite.apdu.fr/files/%{name}-%{version}.tar.bz2.asc Source2: gpgkey-F5E11B9FFE911146F41D953D78A1B4DFE8F9C57E.gpg -Source3: org.debian.pcsc-lite.policy Patch1: pcsc-lite-1.8.23-maxreaders.patch +BuildRequires: make BuildRequires: doxygen BuildRequires: graphviz BuildRequires: systemd-devel @@ -23,6 +21,8 @@ BuildRequires: autoconf BuildRequires: automake BuildRequires: gettext-devel BuildRequires: libtool +BuildRequires: gnupg2 +BuildRequires: gcc Requires(post): systemd Requires(preun): systemd @@ -31,6 +31,8 @@ Requires: pcsc-ifd-handler Requires: %{name}-libs = %{version}-%{release} Requires: polkit Recommends: pcsc-lite-ccid +# This is bundled in upstream without simple way to remove +Provides: bundled(simclist) = 1.6 %description @@ -86,16 +88,11 @@ done --disable-static \ --enable-polkit \ --enable-usbdropdir=%{_libdir}/pcsc/drivers -make %{?_smp_mflags} +%make_build doxygen doc/doxygen.conf ; rm -f doc/api/*.{map,md5} - %install -make install DESTDIR=$RPM_BUILD_ROOT -rm -f $RPM_BUILD_ROOT%{_datadir}/polkit-1/actions/org.debian.pcsc-lite.policy - -mkdir -p $RPM_BUILD_ROOT%{_datadir}/polkit-1/actions/ -install -p -m 644 %{SOURCE3} $RPM_BUILD_ROOT%{_datadir}/polkit-1/actions/ +%make_install # Create empty directories mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/reader.conf.d @@ -104,14 +101,17 @@ mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/run/pcscd rm $RPM_BUILD_ROOT%{_libdir}/*.la -# Remove documentation installed in a wrong directory -rm $RPM_BUILD_ROOT%{_docdir}/pcsc-lite/README.DAEMON - -# Fix python shebangs -sed -i 's|^#! /usr/bin/python|#!/usr/bin/python3|' %{buildroot}/usr/bin/pcsc-spy - %post %systemd_post pcscd.socket pcscd.service +# If install, test if pcscd socket is enabled. +# If enabled, then attempt to start it. This will silently fail +# in chroots or other environments where services aren't expected +# to be started. +if [ $1 -eq 1 ] ; then + if systemctl -q is-enabled pcscd.socket > /dev/null 2>&1 ; then + systemctl start pcscd.socket > /dev/null 2>&1 || : + fi +fi %preun %systemd_preun pcscd.socket pcscd.service @@ -125,7 +125,7 @@ sed -i 's|^#! /usr/bin/python|#!/usr/bin/python3|' %{buildroot}/usr/bin/pcsc-spy %files -%doc AUTHORS ChangeLog DRIVERS HELP README SECURITY TODO +%doc AUTHORS ChangeLog HELP README SECURITY TODO %doc doc/README.polkit %dir %{_sysconfdir}/reader.conf.d/ %{_unitdir}/pcscd.service @@ -155,6 +155,10 @@ sed -i 's|^#! /usr/bin/python|#!/usr/bin/python3|' %{buildroot}/usr/bin/pcsc-spy %changelog +* Fri Jan 07 2022 Jakub Jelen - 1.9.5-1 +- Rebase to 1.9.5 version to address race conditions (#2014641) +- Drop dowstream polkit policy to avoid repeated authentication requests in remote sessions (#1928154) + * Thu Jun 17 2021 Bob Relyea - 1.8.23-4.1 - rebuild to retrigger gating