Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.co.uk>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

In order to avoid using an old version of readline due to license issues,
switch to libedit.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Ritesh Raj Sarraf authored 3 years ago and Ariel D'Alessandro committed 3 years ago

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>
[Add Apertis delta to changelog entry]
Signed-off-by: Ariel D'Alessandro <ariel.dalessandro@collabora.com>

Merge remote-tracking branch 'origin/debian/bullseye' into wip/ritesh/merge-updates-bullseye.apertis/v2022dev3

* origin/debian/bullseye:
  Import Debian changes 5.55-3.1

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

* origin/debian/bullseye:
  Import Upstream version 5.55

bluez (5.55-3) unstable; urgency=medium

  * Add d/salsa-ci.yml.
  * Update d/control.
    * Add Rules-Requires-Root: no

bluez (5.55-2) unstable; urgency=medium

  * Update d/control.
    * Use debhelper-compat instead of debhelper, and update to 13.
    * Bump Standards-Version to 4.5.1 (no change).
    * Add libell-dev to B-D.
    * Add dbus-user-session to bluez-obexd's Recommends.
    * Add libjson-c-dev to B-D.
    * Use libdbus-1-dev instead of libdbus-glib-1-dev. (Closes: #955823)
  * Update d/rules.
    * Drop unnecessary autoreconf option for dh.
    * Add --exclude=.la to option of dh.
    * Add --enable-external-ell.
    * Enable mesh support, add bluez-meshd package. (Closes: #973579)
    * Fix contains bluez-source-tmp directory. (Closes: #970130)
      Thanks to Chris Lamb and Vagrant Cascadian.
  * Update d/gbp.conf
    Change debian-branch to debian/sid.
  * Update d/patches/allow-using-obexd-without-systemd-in-the-user-sessio.patch
    Fix path of obexd. (Closes: #972070, #971533)
  * Remove d/compat.

bluez (5.55-1) unstable; urgency=medium

  * Update to 5.55.
  * Remove patches applied in upstream.
    - input-hog-Attempt-to-set-security-level-if-not-bonde.patch
    - input-Add-LEAutoSecurity-setting-to-input.conf.patch
  * Add --enable-hid2hci to configure's option.
    Add --enable-hid2hci option to explicitly enable the hid2hci tool.

bluez (5.54-1) unstable; urgency=medium

  * Update to 5.54. (Closes: #946711, #966564, #925369)
  * Update d/libbluetooth3.symbols.
  * Delete unnecessary patches.
  * Add zsh completion file to bluez. (Closes: #954281)
    Thanks to Laurent Bigonville <bigon@debian.org>.
  * Omit bluez-cups on Ubuntu/i386. (Closes: #947084)
    Thanks to Steve Langasek <steve.langasek@canonical.com>.
  * Fix typo in d/bluez.bluetooth.default. (Closes: #959483)
    Thanks to Vincent Lefevre <vincent@vinc17.net>.
  * Move daemon to /usr/libexec/bluetooth instead of /usr/lib/bluetooth.
    (Closes: #954282)
    Thanks to Laurent Bigonville <bigon@debian.org>.

bluez (5.52-1) experimental; urgency=medium

  * Update to 5.52.
  * Add bluez-source package.

bluez (5.51-1) experimental; urgency=medium

  * Update to 5.51.
  * Fix lintian warnings:
    - skip-systemd-native-flag-missing-pre-depends.
    - executable-not-elf-or-script.
    - maintainer-script-should-not-use-dpkg-maintscript-helper
      Use new dh_installdeb maintscript.
  * dh_installsystemd instread of dh_systemd_enable and start.

bluez (5.50-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * input: hog: Attempt to set security level if not bonded
  * input: Add LEAutoSecurity setting to input.conf

Signed-off-by: Tarun Baghmar <tarun.baghmar@in.bosch.com>

The above test cases are failing as apparmor policies needs to be updated for both the cases. Apparmor denied can be seen in the logs.
connman-pan-tethering: apparmor="DENIED" operation="create" profile="/usr/lib/bluetooth/bluetoothd" pid=2092 comm="bluetoothd" family="inet" sock_type="s"
connman-pan-network-access: apparmor="DENIED" operation="create" profile="/usr/lib/bluetooth/bluetoothd" pid=726 comm="bluetoothd" family="inet" sock_type="dgram"

Fix:
apparmor policy has been updated for ipv4 for different socket connections.

Apertis:
T5930, T5929

Signed-off-by: Tarun Baghmar <tarun.baghmar@in.bosch.com>

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

* debian/buster-security:
  Import Debian changes 5.50-1.2~deb10u1

/dev/hidraw child nodes are accessed when attempting out-of-band USB pairing in
some devices, for instance sixaxis controllers.

Signed-off-by: Christopher Obbard <chris.obbard@collabora.com>

bluez (5.50-1.2~deb10u1) buster-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Rebuild for buster-security.

bluez (5.50-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * input: hog: Attempt to set security level if not bonded
  * input: Add LEAutoSecurity setting to input.conf

bluez (5.50-1.1) unstable; urgency=high

  * Non-maintainer upload.
  * Address INTEL-SA-00352 (CVE-2020-0556) (Closes: #953770)
    - HOGP must only accept data from bonded devices
    - HID accepts bonded device connections only

Sjoerd Simons authored 5 years ago and Andrej Shadura committed 5 years ago

debian/bluez.tmpfile: Create /var/lib/bluetooth on boot as apparmor won't
allow bluetoothd to create it, which means all Bluetooth operations will
fail.

Signed-off-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Need to (re)load the AppArmor profile on package install.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Some Apertis apps use label '/usr/lib/bluetooth/bluetoothd' for
accessing to bluetooth daemon, hence use expected name for the label.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>