Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

Add missing license information to help
license scan to generate a complete report.

Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

Signed-off-by: Vignesh Raman <vignesh.raman@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

The prestwood-dev package contains an GObject-Introspection XML file, so it needs
to depend on the package containing the corresponding binary typelib.

See: https://lintian.debian.org/tags/gir-missing-typelib-dependency



Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

Signed-off-by: Akshay M <M.Akshay@in.bosch.com>

Signed-off-by: Akshay M <M.Akshay@in.bosch.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Andrew Lee (李健秋) <ajqlee@debian.org>

We wish to use only the Apertis CI pipeline workflow to build source
packages from Apertis GitLab and then submit them to OBS.

For packages where Apertis is the upstream the simplest approach is to
set them up as native packages to avoid having to generate orig tarballs
and manage changes on top of them.

Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Newer hotdoc (0.10) introduced several breaking changes which cause the
documentation to be misbuilt, so let's explicitly depend on the old version.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

apparmor-session-lockdown-no-deny test returns the following events:
$ sudo journalctl -b -t audit -o cat | aa_log_extract_tokens.sh DENIED
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/proc/905/mountinfo
requested_mask:r
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/etc/fstab
requested_mask:r
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/proc/905/mountinfo
requested_mask:r
====
profile:/usr/bin/prestwood
apparmor:DENIED
denied_mask:r
operation:open
name:/proc/905/mounts
requested_mask:r

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

Signed-off-by: Simon McVittie <smcv@collabora.com>

Otherwise we aren't gaining any actual security from AppArmor.

Apertis: https://phabricator.apertis.org/T3853



Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6790

Signed-off-by: Simon McVittie <smcv@collabora.com>

gvfs now has a single AppArmor profile named /usr/lib/gvfs/gvfs{d,}-*
which won't be matched by any of the old patterns.

Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6494

When Prestwood is started as either a systemd service or a child
process of Canterbury, this is what it will get.

Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6222

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6123

Since the project does not use gschemas, it does not need to
compile schemas at postinst

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6117

Typo in .arcconfig prevent to use git phab attach properly

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D6116

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>

The signal handler doesn't do anything except exit unsuccessfully,
which is the same thing that would happen if we were interrupted
by a signal. exit() is also not async-signal-safe, so calling it
in this context is undefined behaviour, although _exit() would
be OK.

The cleanup function also doesn't do anything, so don't register it.

The initialization function also doesn't do much, so inline it into
its only caller.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5501

As required by Debian Policy §8.

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Reviewed-by: André Magalhães <andre.magalhaes@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D5498