File bolt.changes of Package bolt

Tue Jun 16 11:41:37 UTC 2020 - Robert Frohl <>

- Update to 0.9
  * New Features:
    - Add 'Generation' attribute for the Manager
    - Ability to change the policy of a stored device
    - The BootACL Domain property is now writable
    - Support for systemd's service watchdog
    - Expose Link Speed sysfs attributes
  * Improvements:
    - boltclt: show timestamps in 'monitor' call
    - Persist the host device
  * Bug fixes:
    - Plug small memory leaks in error conditions
    - Ignore spurious wakeup device uevents for probing
    - Preserve keystate when updating devices

Tue Dec 24 10:16:48 UTC 2019 - Dominique Leuenberger <>

- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut though the -mini flavors (complete previos change).

Thu Dec 19 16:17:19 UTC 2019 - Dominique Leuenberger <>

- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.

Sun Jun 16 11:10:05 UTC 2019 - Robert Frohl <>

- Update to 0.8
  * New Features:
    - IOMMU support: adapt behavior iommu support is present and active
      * automatically enroll new devices with the new iommu policy when iommu is active
      * automatically authorize devices with the iommu policy if iommu is active
    - boltctl config command to describe, get and set global, device and domain properties.
    - Chain authorization and enrollment via boltctl {enroll, authorize} --chain
    - bolt-mock script for interactively testing boltd
  * Improvements:
    - Automatically import devices that were authorized at boot
    - Make tests installable
    - Profiling support via gprof
  * Bug fixes:
    - Better handling of random data generation, removed hardening_for_RNG_code.patch
    - Fix double free in case of client creation failure
    - Fix invalid format string in warning
    - dbus configuration moved /usr/share

Fri Feb 22 13:22:06 UTC 2019 - Robert Frohl <>

- Move polkit rules file to into doc folder. The 'wheel' group has no special
  privileges and the file did not have any effect. (boo#1125425)

Mon Jan  7 13:22:09 UTC 2019 - Robert Frohl <>

- use meson macros during build 

Mon Jan  7 12:40:30 UTC 2019 - Robert Frohl <>

- Update to 0.7
  * Features:
    - announce status to systemd via sd_notify (using a simple custom implementation)
  * Bug fixes:
    - properly update global security level status
    - adapt to systemd 240 not sending bind/unbind uevents
    - fix compilation on musl
    - daemon: use g_unix_signal_sourceā€¦ to catch signals
  * Improvements
    - precondition checks cleanup and completion
    - error cleanup
    - fix some leaks and issues uncovered by coverity

Fri Jan  4 12:19:43 UTC 2019 - Robert Frohl <>

- security review: add RNG hardening patch (boo#1119975): 

Mon Dec 10 18:07:49 UTC 2018 - Robert Frohl <>

Update to 0.6

- New Features:
  * pre-boot access control list, aka. BootACL support
	- domains objects are now persistent
	  * new Uid (dbus) / uid (object) property derived from the uuid of the device representing the root switch
	  * sysfs and id attribute will be set/unset on connects and disconnects
	  * domains are now stored in the boltd database
	- domains got the BootACL (dbus) / bootacl (object) property
	  * uuids can be added, removed or set in batch
	  * when domain is online: changes are written to the sysfs boot_acl attribute directly
	  * when domain is offline: changes are written to a journal and then reapplied in order when the domain is connected
	- newly enrolled devices get added to all bootacls of all domains if the policy is BOLT_POLICY_AUTO
	- removed devices get deleted from all bootacls of all domains
	- boltacl domain command will show the bootacl slots and their content
  * boltctl gained the -U, --uuid option, to control how uuids are printed

- Improvements and fixes:
  * Testing
	- boltctl is now included in the tests
  * Bugs and robustness:
	- The device state is verified in Device.Authorize
	- Handle empty 'keys' sysfs device attribute
	- Properly adjust policies when enrolling already authorized devices
	- Fix potential crasher when logging assertions g_return_if_fail
openSUSE Build Service is sponsored by