Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

The prestwood-dev package contains an GObject-Introspection XML file, so it needs
to depend on the package containing the corresponding binary typelib.

See: https://lintian.debian.org/tags/gir-missing-typelib-dependency



Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Akshay M <M.Akshay@in.bosch.com>

Signed-off-by: Akshay M <M.Akshay@in.bosch.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Andrew Lee (李健秋) <ajqlee@debian.org>

We wish to use only the Apertis CI pipeline workflow to build source
packages from Apertis GitLab and then submit them to OBS.

For packages where Apertis is the upstream the simplest approach is to
set them up as native packages to avoid having to generate orig tarballs
and manage changes on top of them.

Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Newer hotdoc (0.10) introduced several breaking changes which cause the
documentation to be misbuilt, so let's explicitly depend on the old version.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

apparmor-session-lockdown-no-deny test returns the following events:
$ sudo journalctl -b -t audit -o cat | aa_log_extract_tokens.sh DENIED
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/proc/905/mountinfo
requested_mask:r
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/etc/fstab
requested_mask:r
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/proc/905/mountinfo
requested_mask:r
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/proc/905/mounts
requested_mask:r

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Otherwise we aren't gaining any actual security from AppArmor.

Apertis: https://phabricator.apertis.org/T3853



Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6790

Signed-off-by: Simon McVittie <smcv@collabora.com>

gvfs now has a single AppArmor profile named /usr/lib/gvfs/gvfs{d,}-*
which won't be matched by any of the old patterns.

Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6494

When Prestwood is started as either a systemd service or a child
process of Canterbury, this is what it will get.

Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6222

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6123

Since the project does not use gschemas, it does not need to
compile schemas at postinst

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6117

Typo in .arcconfig prevent to use git phab attach properly

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6116

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>

The signal handler doesn't do anything except exit unsuccessfully,
which is the same thing that would happen if we were interrupted
by a signal. exit() is also not async-signal-safe, so calling it
in this context is undefined behaviour, although _exit() would
be OK.

The cleanup function also doesn't do anything, so don't register it.

The initialization function also doesn't do much, so inline it into
its only caller.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5501

As required by Debian Policy §8.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5498

Our toolchain now produces -dbgsym packages automatically.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5497

- The library is installed to a multiarch location now
- Explicitly select /usr/lib for libexecdir, similar to D4606
- Do not explicitly use dh_systemd or dh_autoreconf, they are now
  the default

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5496

Prestwood has a D-Bus API to get mount points and local media paths,
but it has no such thing for UPnP; so now that we do not notify
Canterbury about UPnP shares, there is no point in maintaining
this list.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5494

This is no longer needed.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5493

These structs are allocated and (in most cases) leaked, but are
otherwise never used for anything.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5492