From 23516b24e8958ca94f8d384355e50c90c5753dbc Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai Date: May 28 2008 16:01:54 +0000 Subject: - update to version 0.29.1 to include config file fixes and a couple of bug fixes --- diff --git a/COPYING b/COPYING index c06eee6..5cc6521 100644 --- a/COPYING +++ b/COPYING @@ -1,4 +1,4 @@ -Copyright (c) 2005,2006 Red Hat, Inc. +Copyright (c) 2005,2006,2007,2008 Red Hat, Inc. All rights reserved. Redistribution and use in source and binary forms, with or without diff --git a/ChangeLog b/ChangeLog index 0e12596..ca7a018 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,15 @@ +2008-05-28 nalin + * common.h: include to avoid defining DBUS_MAJOR_VERSION + when we don't have to. + * src/oddjob-dbus.c: fix a quoting warning in a comment. Don't use + "uid" to create a string, which we would overwrite anyway, before it's + been initialized. + * src/oddjob-mkhomedir.conf.in,src/mkhomedirfor.in,src/mkmyhomedir.in: + fix a couple of places where the namespacing changes for splitting out + mkhomedir didn't quite get made right. + * oddjob.spec: check for a running daemon and tell it to reload its + configuration when oddjob-mkhomedir gets installed + 2007-12-10 nalin * src/mkhomedir.c: apply the umask to newly-created files as well. diff --git a/doc/oddjob.html b/doc/oddjob.html index 0dd9987..341f0f9 100644 --- a/doc/oddjob.html +++ b/doc/oddjob.html @@ -1,11 +1,11 @@ -oddjob: Threat or Menace?

oddjob: Threat or +oddjob: Threat or Menace?

oddjob: Threat or Menace?

Nalin Dahyabhai

Red Hat, Inc.

Abstract

The oddjob package provides a means for unprivileged applications to invoke and take limited control of privileged applications by issuing requests using the D-Bus system message bus. -


Background

+


Background

In many applications, particularly those which perform some sort of administrative task, it becomes useful to separate the presentation (which needn't have any special privileges, and frequently shouldn't) @@ -60,7 +60,7 @@

The oddjob package implements such a server. -

oddjob

+

oddjob

The server provided by oddjob, oddjobd, provides services which appear to be @@ -100,7 +100,7 @@ implemented on web servers using scripting engines and applications which are implemented using the Common Gateway Interface (CGI). -

An Example

+

An Example

Take for example, a service which is provided by the well-known address "com.example.system_manager". This management service controls multiple systems, each of which is represented as a different @@ -120,7 +120,7 @@ Using oddjobd, the entire implementation can be synthesized by providing the proper configuration files and shell scripts. -

D-Bus +

D-Bus Configuration

The D-Bus system bus enforces restrictions on which applications can reserve @@ -164,7 +164,7 @@ </policy> </busconfig>

-

oddjobd Configuration

+

oddjobd Configuration

The oddjobd daemon provides services which are implemented by external helper applications. The helpers are executed with superuser privileges, and receive their @@ -205,7 +205,7 @@ </object> </service> </oddjobconfig>

-

Configuring oddjobd

+

Configuring oddjobd

The oddjobd configuration is normally read from /etc/oddjobd.conf, but in most deployments it will direct the daemon to read all of the configuration files from @@ -332,7 +332,7 @@ If the helper runs to completion, oddjobd reports the helper's exit status, along with any data which the helper output to its standard output and error descriptors. -

Built-in Methods

+

Built-in Methods

The oddjobd server implements a small set of methods internally as part of the com.redhat.oddjob interface of the /com/redhat/oddjob object provided by the com.redhat.oddjob @@ -346,7 +346,7 @@ D-Bus introspection interface for all services which it provides to clients. By default, attempts to call these interfaces are denied unless ACLs have been put in place to allow it. -

Implementation Limits

+

Implementation Limits

The current implementation of oddjobd imposes some limitations on clients.

  • A client request can contain no more than 65535 diff --git a/doc/oddjob.xml.in b/doc/oddjob.xml.in index d8d0ca5..7a61a09 100644 --- a/doc/oddjob.xml.in +++ b/doc/oddjob.xml.in @@ -6,7 +6,7 @@ @DOCBOOK_PACKAGE_START@oddjob@DOCBOOK_PACKAGE_END@: Threat or Menace? - 2005,2006,2007 + 2005,2006,2007,2008 Red Hat, Inc. diff --git a/oddjob.spec b/oddjob.spec index 3b7b301..8610f02 100644 --- a/oddjob.spec +++ b/oddjob.spec @@ -1,9 +1,10 @@ %define build_sample 0 +%define dbus_send /bin/dbus-send Name: oddjob -Version: 0.29 -Release: 1%{?dist} -Source: http://people.redhat.com/nalin/oddjob/oddjob-%{version}-1.tar.gz +Version: 0.29.1 +Release: 0%{?dist} +Source: http://people.redhat.com/nalin/oddjob/oddjob-%{version}-0.tar.gz Summary: A D-BUS service which runs odd jobs on behalf of client applications License: BSD Group: System Environment/Daemons @@ -13,6 +14,7 @@ BuildRequires: pam-devel, python-devel, pkgconfig BuildRequires: cyrus-sasl-devel, krb5-devel, openldap-devel BuildRequires: docbook-dtds, xmlto Requires(post): /sbin/service +Requires(postun): /sbin/service Requires(post): /sbin/chkconfig Requires(pre): /sbin/chkconfig URL: http://people.redhat.com/nalin/oddjob/ @@ -23,8 +25,9 @@ connect to it and issue requests using the system-wide message bus. %package mkhomedir Group: System Environment/Daemons -Summary: Files for developing oddjob clients +Summary: An oddjob helper which creates and populates home directories Requires: %{name} = %{version}-%{release} +Requires(post): %{dbus_send} %description mkhomedir This package contains the oddjob helper which can be used by the @@ -70,7 +73,7 @@ Requires: %{name} = %{version}-%{release} This package contains a trivial sample oddjob service. %prep -%setup -q -n %{name}-%{version}-1 +%setup -q -n %{name}-%{version}-0 %build sample_flag= @@ -165,6 +168,12 @@ install -m755 sample/oddjob-sample.sh sample-install-root/sample/%{_libdir}/% %post /sbin/chkconfig --add oddjobd +%postun +if [ $1 -gt 0 ] ; then + /sbin/service oddjobd condrestart 2>&1 > /dev/null || : +fi +exit 0 + %preun if [ $1 -eq 0 ] ; then /sbin/service oddjobd stop > /dev/null 2>&1 @@ -174,7 +183,22 @@ fi %post libs -p /sbin/ldconfig %postun libs -p /sbin/ldconfig +%post mkhomedir +if [ -f /var/lock/subsys/oddjobd ] ; then + %{dbus_send} --system --dest=com.redhat.oddjob /com/redhat/oddjob com.redhat.oddjob.reload +fi +exit 0 + %changelog +* Wed May 28 2008 Nalin Dahyabhai 0.29.1-1 +- when we install the mkhomedir subpackage, if there's a running oddjobd, ask + it to reload its configuration +- fix missing bits from the namespace changes in configuration files +- restart the service in %%postun + +* Tue Feb 19 2008 Fedora Release Engineering - 0.29-2 +- Autorebuild for GCC 4.3 + * Wed Sep 5 2007 Nalin Dahyabhai 0.29-1 - split off mkhomedir bits into a subpackage (#236820) - take a pass at new-init-ifying the init script (#247005)