core-qrexec v4.1.4 (r4.1)

[qubesos-bot]

Update of core-qrexec to v4.1.4 for Qubes r4.1, see comments below for details.

Built from: QubesOS/qubes-core-qrexec@a23648b

Changes since previous version:
QubesOS/qubes-core-qrexec@a23648b version 4.1.4
QubesOS/qubes-core-qrexec@9f621e6 Merge remote-tracking branch 'origin/pr/37'
QubesOS/qubes-core-qrexec@bd07c52 Fix race condition in process_io
QubesOS/qubes-core-qrexec@5dc2e4c Add an error message in case of early break
QubesOS/qubes-core-qrexec@5938b66 Handle POLLERR for stdin as well as POLLHUP
QubesOS/qubes-core-qrexec@5312443 process_io: use poll, detect socket close
QubesOS/qubes-core-qrexec@efb794c Fix qrexec-fork-server handling of MSG_JUST_EXEC
QubesOS/qubes-core-qrexec@857e753 Update log messages
QubesOS/qubes-core-qrexec@c469fb7 Include program name in logs
QubesOS/qubes-core-qrexec@65a60f7 Fix "executed user pid" message
QubesOS/qubes-core-qrexec@44bcc76 Convert error messages to logging macros
QubesOS/qubes-core-qrexec@9f1bfce Add logging macros
QubesOS/qubes-core-qrexec@b1db5ac Adjust dependencies to avoid breaking non-executable services
QubesOS/qubes-core-qrexec@2fed52e Ensure matching libqrexec-utils package
QubesOS/qubes-core-qrexec@7acd48a Merge branch 'fixes20200224'
QubesOS/qubes-core-qrexec@a97d482 Test closing stdout early also through qrexec service
QubesOS/qubes-core-qrexec@ffafd01 Fix not closed file descriptors in qubes-rpc-multiplexer
QubesOS/qubes-core-qrexec@a0b2122 policy daemon: fix double ++ in logs
QubesOS/qubes-core-qrexec@bc5078d gitignore: ignore 'build' dir
QubesOS/qubes-core-qrexec@87c589b Add '[Install]' section to qubes-qrexec-policy-daemon.service
QubesOS/qubes-core-qrexec@b68bde2 libqrexec: fix cleanup on qubes_connect error
QubesOS/qubes-core-qrexec@4c51f26 qrexec-client{,-vm}: do not fail if cannot sent just final EOF
QubesOS/qubes-core-qrexec@d4c589b Use different error messages for different error paths
QubesOS/qubes-core-qrexec@96c279f Test stdio socket for client-vm as well
QubesOS/qubes-core-qrexec@335a24b Handle SIGPIPE in qrexec-client-vm
QubesOS/qubes-core-qrexec@2397e1e Fix test_exit_before_closing_streams
QubesOS/qubes-core-qrexec@676f960 policy: improve PolicyCache.cleanup()
QubesOS/qubes-core-qrexec@2cf9aad policy: don't fail if policy directory doesn't exist
QubesOS/qubes-core-qrexec@489f2e8 Remove debug print
QubesOS/qubes-core-qrexec@3a8cbd6 Add a test for replace_chars
QubesOS/qubes-core-qrexec@7bbfeaf Split handle_new_process_common
QubesOS/qubes-core-qrexec@1613675 qrexec-client-vm: pass local process PID to process_io
QubesOS/qubes-core-qrexec@dfc55e6 Always return remote exit status
QubesOS/qubes-core-qrexec@216dba9 Fix timeout in wait_for_vchan_or_argfd
QubesOS/qubes-core-qrexec@405ae7d Move all closing code to process_io.c; don't exit early
QubesOS/qubes-core-qrexec@4166b19 Add a test in which we wait for a granchild to close streams
QubesOS/qubes-core-qrexec@908a156 Fix reading from a dead process (ECONNRESET on read)
QubesOS/qubes-core-qrexec@95fa4bb agent: fix error path on failed service exec
QubesOS/qubes-core-qrexec@80002db qrexec-client: use common code for process_io
QubesOS/qubes-core-qrexec@0802df7 Factor out process_child_io
QubesOS/qubes-core-qrexec@3c65541 Fix replace_chars usage
QubesOS/qubes-core-qrexec@925c5cd Factor out send_exit_code()
QubesOS/qubes-core-qrexec@b4a6029 qrexec-client: use the common handle_input
QubesOS/qubes-core-qrexec@c7b7317 Factor out handle_input from qrexec-agent-data.c
QubesOS/qubes-core-qrexec@33ec781 qrexec-client: use handle_remote_data instead of handle_vchan_data
QubesOS/qubes-core-qrexec@6aadf77 Factor out handle_remote_data to libqrexec
QubesOS/qubes-core-qrexec@26376b3 Extract do_replace_chars()
QubesOS/qubes-core-qrexec@255debd Add tests that trigger WRITE_STDIN_BUFFERED
QubesOS/qubes-core-qrexec@ec18e37 Add tests that cover writing into closed stdin
QubesOS/qubes-core-qrexec@283c6d7 Add more tests for qrexec
QubesOS/qubes-core-qrexec@c46e3b1 Compile C programs with -std=gnu11
QubesOS/qubes-core-qrexec@8a82f00 Merge remote-tracking branch 'origin/pr/27'
QubesOS/qubes-core-qrexec@0612d93 Remove ConfirmCreate (unused)
QubesOS/qubes-core-qrexec@09516b3 daemon, agent: ensure proper shutdown
QubesOS/qubes-core-qrexec@a095f34 Merge branch 'master' into coverage
QubesOS/qubes-core-qrexec@d02af30 PolicyCache: add option to lazy load policy
QubesOS/qubes-core-qrexec@6d1584e Merge remote-tracking branch 'origin/pr/25'
QubesOS/qubes-core-qrexec@dc3723e Merge remote-tracking branch 'origin/pr/24'
QubesOS/qubes-core-qrexec@066c122 Add a TODO about test_run_dom0_command_and_connect_vm
QubesOS/qubes-core-qrexec@fb7fa9d Make trailing whitespace in tests visible
QubesOS/qubes-core-qrexec@e65c601 Update qrexec-client error handling
QubesOS/qubes-core-qrexec@4e97e44 Remove _GNU_SOURCE (definition moved to Makefile)
QubesOS/qubes-core-qrexec@7c073a7 Merge remote-tracking branch 'origin/master' into qrexec-policy-daemon
QubesOS/qubes-core-qrexec@46d7854 policy: move source=target check later
QubesOS/qubes-core-qrexec@0fb8b70 Add test for terminating agent before restarting
QubesOS/qubes-core-qrexec@06572c4 tests: run strace detached (-D)
QubesOS/qubes-core-qrexec@cfce05d client tests: always wait for client to end
QubesOS/qubes-core-qrexec@92506bf Add a TODO about test_run_dom0_command_and_connect_vm
QubesOS/qubes-core-qrexec@c07e3d3 agent: add SIGTERM handler for graceful exit
QubesOS/qubes-core-qrexec@5ab9b25 tests: terminate daemon before client
QubesOS/qubes-core-qrexec@71e5c07 Add a wait to port allocation test
QubesOS/qubes-core-qrexec@26251dc Add a test for QUBESRPC and socket-based services
QubesOS/qubes-core-qrexec@2642f5e Refactor execute_parsed_qubes_rpc_command
QubesOS/qubes-core-qrexec@06a98a7 daemon: fix handling EINTR in the main loop
QubesOS/qubes-core-qrexec@5bb74bb daemon: add SIGTERM handler for graceful exit
QubesOS/qubes-core-qrexec@e49ed8d daemon: minor cleanup of SIGCHLD setup
QubesOS/qubes-core-qrexec@8e4f47f Collect test coverage data about C programs too
QubesOS/qubes-core-qrexec@17ff933 travis: workaround for coverage 5.0 incompatibility
QubesOS/qubes-core-qrexec@502d917 tests: adjust after recent changes
QubesOS/qubes-core-qrexec@41e0914 Merge remote-tracking branch 'origin/pr/23'
QubesOS/qubes-core-qrexec@7ab6518 Merge remote-tracking branch 'origin/pr/3'
QubesOS/qubes-core-qrexec@47e0f69 Merge remote-tracking branch 'origin/pr/21'
QubesOS/qubes-core-qrexec@c05c3a1 Fix exit status of qrexec-client
QubesOS/qubes-core-qrexec@e3f0fcf make some variables static
QubesOS/qubes-core-qrexec@1ef6018 Add a test for client with both remote and local cmdline
QubesOS/qubes-core-qrexec@3595c49 daemon: prevent collisions between port numbers
QubesOS/qubes-core-qrexec@108972f Close the vchan when exiting
QubesOS/qubes-core-qrexec@45b491e Merge remote-tracking branch 'marmarek/socket-merge2' into dummy-rebase
QubesOS/qubes-core-qrexec@b392a3a Socket-based services have no child processes
QubesOS/qubes-core-qrexec@9b138ca Avoid closing local_stdout_fd if writing to local_stdin_fd fails
QubesOS/qubes-core-qrexec@fa7645b Add coveragerc
QubesOS/qubes-core-qrexec@6af8067 Merge remote-tracking branch 'origin/pr/3' into socket-merge2
QubesOS/qubes-core-qrexec@82da653 Merge remote-tracking branch 'origin/pr/21'
QubesOS/qubes-core-qrexec@c33646d Do not try to close the same file descriptor twice
QubesOS/qubes-core-qrexec@306f88d Add tests for qrexec-client
QubesOS/qubes-core-qrexec@e0bab78 qrexec-client: close vchan before exiting
QubesOS/qubes-core-qrexec@ebc2e26 Add --socket-dir option to qrexec-client
QubesOS/qubes-core-qrexec@4bad1bd daemon: add tests for port allocation and connecting a service
QubesOS/qubes-core-qrexec@8fd6216 Test that agent is sending MSG_CONNECTION_TERMINATED
QubesOS/qubes-core-qrexec@738d409 Add tests for agent communication
QubesOS/qubes-core-qrexec@6429de2 agent: don't skip PAM setup outside of tests
QubesOS/qubes-core-qrexec@036a808 Merge remote-tracking branch 'origin/pr/3' into socket-merge
QubesOS/qubes-core-qrexec@c26af84 Merge remote-tracking branch 'origin/pr/19'
QubesOS/qubes-core-qrexec@ea8ca0b Merge remote-tracking branch 'origin/pr/17'
QubesOS/qubes-core-qrexec@ad63bcf daemon: don't listen to clients while reconnecting to agent
QubesOS/qubes-core-qrexec@df1dbf5 qrexec-daemon: don't open log file when run with --direct
QubesOS/qubes-core-qrexec@c014a88 Socket-based services do not have a local process
QubesOS/qubes-core-qrexec@36402b6 Don't run tests as root in Docker
QubesOS/qubes-core-qrexec@735e042 Add tests for qrexec-daemon
QubesOS/qubes-core-qrexec@5ce3e24 daemon: add options to enable testing
QubesOS/qubes-core-qrexec@3aaa5b0 Add tests for MSG_SERVICE_REFUSED
QubesOS/qubes-core-qrexec@2a64cbb Move socket tests to qrexec/tests/socket
QubesOS/qubes-core-qrexec@68dda8f Skip GTK tests when DISPLAY is not set or empty
QubesOS/qubes-core-qrexec@6a88a0b Separate GTK test classes from object under test
QubesOS/qubes-core-qrexec@f9ec673 Add tests for agent using vchan-socket
QubesOS/qubes-core-qrexec@af34138 agent: don't try to change user if not necessary
QubesOS/qubes-core-qrexec@04ce723 agent: add options for alternative socket paths
QubesOS/qubes-core-qrexec@33db54c flush_client_data(-1, buffer) should be a no-op
QubesOS/qubes-core-qrexec@6751f39 Prevent socket-based services in dom0 from hanging
QubesOS/qubes-core-qrexec@b7b0862 Pass service parameters to sockets
QubesOS/qubes-core-qrexec@76697e3 Working socket-based qrexec
QubesOS/qubes-core-qrexec@980fdcb Ensure that stdout and stdin use distinct file descriptors
QubesOS/qubes-core-qrexec@b19c457 Add assertions and fix compiler warnings
QubesOS/qubes-core-qrexec@b883dcb Makefile improvements
QubesOS/qubes-core-qrexec@42211b2 Add more generated files to .gitignore
QubesOS/qubes-core-qrexec@22769ce qrexec-client: ignore SIGPIPE
QubesOS/qubes-core-qrexec@bf57fe5 Typos cleanup
QubesOS/qubes-core-qrexec@d6bf65d Added tests to PolicyCache
QubesOS/qubes-core-qrexec@c4c72dd Added policy caching
QubesOS/qubes-core-qrexec@bd2c581 Fixed tests and assorted bugs discovered with them
QubesOS/qubes-core-qrexec@ccb4bcb Fixed assorted errors and better handling for logging
QubesOS/qubes-core-qrexec@de23776 Working qrexec-policy-daemon
QubesOS/qubes-core-qrexec@703f6cd Qrexec policy daemon and tests

Referenced issues:
QubesOS/qubes-issues#5347
QubesOS/qubes-issues#5125
QubesOS/qubes-issues#3318
QubesOS/qubes-issues#5686
QubesOS/qubes-issues#5597

If you're release manager, you can issue GPG-inline signed command:

• Upload core-qrexec a23648bd279f6ab6bce5e578b457ce600c157c53 r4.1 current repo (available 7 days from now)
• Upload core-qrexec a23648bd279f6ab6bce5e578b457ce600c157c53 r4.1 current (dists) repo, you can choose subset of distributions, like vm-fc24 vm-fc25 (available 7 days from now)
• Upload core-qrexec a23648bd279f6ab6bce5e578b457ce600c157c53 r4.1 security-testing repo

Above commands will work only if packages in current-testing repository were built from given commit (i.e. no new version superseded it).

[qubesos-bot]

Package for bullseye was built (build log) and uploaded to current-testing repository

[qubesos-bot]

Package for buster was built (build log) and uploaded to current-testing repository

[qubesos-bot]

Package for stretch was built (build log) and uploaded to current-testing repository

[marmarek]

Superseded by #1728