gdm3 (49.2-2) unstable; urgency=medium

  [ Alessandro Astone ]
  * d/control: Remove obsolete dependency on dbus-daemon

  [ Jeremy Bícha ]
  * Remove support for DEB_BUILD_OPTIONS=debug

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 03 Dec 2025 22:34:05 -0500

gdm3 (49.2-1) unstable; urgency=medium

  * New upstream release
  * Disable xdmcp; this feature is being removed for GNOME 50 anyway
  * Remove obsolete Conflicts/Replaces
  * Remove obsolete Recommends: xserver-xephyr (Closes: #792220)
  * Remove obsolete details from README.Debian
  * Add patch to support Debian's Xsession.options.d
  * Add patch from Ubuntu to have Xsession run scripts from /etc/X11/Xsession.d
  * Add patch from Ubuntu to use x-terminal-emulator instead of xterm
  * Add patch from Ubuntu to handle /etc/X11/Xresources/*
  * Fix what appears to be a mistake in the Xresources patch description
  * Use upstream's Xsession file (with some patching as mentioned above)
    (Closes: #1120328)

 -- Jeremy Bícha <jbicha@ubuntu.com>  Mon, 24 Nov 2025 19:38:50 -0500

gdm3 (49.1-6) unstable; urgency=medium

  * Team upload
  * d/Xsession, d/gdm3.install, d/rules:
    Restore ability to launch X11 sessions.
    Version 49.0.1-1 removed the example of a non-package-manager-provided
    X11 session, but also removed the ability to launch X11 sessions
    at all: all sessions that do not have X-GDM-BypassXsession
    in their .desktop file require an Xsession script, which was
    historically provided by Debian rather than by upstream. Restore
    that functionality.
    In a future upload we should look at whether we can use
    /etc/X11/Xsession as-is, but let's get the GNOME 49 transition
    done first.

 -- Simon McVittie <smcv@debian.org>  Fri, 31 Oct 2025 19:13:51 +0000

gdm3 (49.1-5) unstable; urgency=medium

  * Team upload
  * d/control: Increase gnome-session-{bin,common} dependency to 49.
    The new version of gdm doesn't start successfully with the old
    gnome-session. The new gnome-session-bin already Breaks the older
    gdm3, but the new gdm3 didn't yet force installation of the new
    gnome-session. (Closes: #1119809)

 -- Simon McVittie <smcv@debian.org>  Fri, 31 Oct 2025 18:12:04 +0000

gdm3 (49.1-4) unstable; urgency=medium

  * Team upload
  * Release to unstable (transition: #1116394)

 -- Simon McVittie <smcv@debian.org>  Fri, 31 Oct 2025 10:49:43 +0000

gdm3 (49.1-3) experimental; urgency=medium

  * Team upload
  * d/control: Remove :native annotation from dconf-cli.
    Now that dconf-cli is Multi-Arch: foreign, this is unsatisfiable.

 -- Simon McVittie <smcv@debian.org>  Mon, 27 Oct 2025 16:51:20 +0000

gdm3 (49.1-2) experimental; urgency=medium

  * Team upload
  * d/control: Depend on a version of libnss-systemd with #1118640 fixed.
    Otherwise, looking up the gdm-greeter* dynamic users in shadow/gshadow
    will not work on systems that were installed as Debian 11 or older,
    and then upgraded. (Closes: #1116563, #1118454) (LP: #2121017)
  * d/greeter.dconf-defaults: Improve documentation a bit
  * d/greeter.dconf-defaults: Mention the accent colour option.
    When we reach the forky freeze and background/branding images become
    available in desktop-base, we might want to set this to a coordinating
    colour (see #1105056). Until then, leave the default commented-out.

 -- Simon McVittie <smcv@debian.org>  Mon, 27 Oct 2025 15:18:06 +0000

gdm3 (49.1-1) experimental; urgency=medium

  * Team upload

  [ Simon McVittie ]
  * New upstream bugfix release

  [ Luca Boccassi ]
  * Do not patch out display-manager.service alias from .service file
    (Closes: #1025349)

 -- Simon McVittie <smcv@debian.org>  Tue, 14 Oct 2025 10:28:41 +0100

gdm3 (49.0.1-1) experimental; urgency=medium

  [ Jeremy Bícha ]
  * New upstream release
  * udev rules are no longer installed
  * Completely stop providing Debian custom xsession support

  [ Alessandro Astone ]
  * d/libgdm1.symbols: Add new symbols
  * d/rules: Remove obsolete meson options screenshot-dir, ran-once-marker-dir
  * Remove gcc 15 patch: applied in new release

  [ Daniel van Vugt ]
  * Make gdm3 depend on libnss-systemd (LP: #2121017)

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 16 Sep 2025 20:47:25 -0400

gdm3 (48.0-3) unstable; urgency=medium

  * Team upload

  [ Luca Boccassi ]
  * Use a sysusers.d file to create the Debian-gdm user.
    This allows /usr-only images with an ephemeral/factory reset/firstboot
    /etc/. (Closes: #1107682)

  [ Simon McVittie ]
  * Activate dh_installsysusers declaratively rather than imperatively.
    This lets debhelper choose a good point in the sequence for it.
  * d/gdm3.postrm, d/control: Don't delete system user/group during purge.
    In previous discussions like #1006912 there seems to be consensus
    that removing uids is dangerous because there might still be files
    owned by that uid on the filesystem, causing unintended access to be
    granted if the uid is subsequently reused for a different system user.
    This also means we can drop the adduser dependency.
  * Build-depend on gir1.2-*-dev instead of libgirepository1.0-dev.
    libgirepository1.0-dev is not Multi-Arch co-installable and should be
    phased out during the forky release cycle.
  * d/control, d/rules: Let the package be cross-compiled.
    debhelper currently uses debcrossgen which does not support cross
    GObject-Introspection, so for now we need to opt-in to using
    `meson env2mfile` instead.
    We need to run dconf-cli from the build architecture, since we will
    be unable to run it from the host architecture in general.
  * d/copyright: Don't quote the FSF's former postal address
  * Standards-Version: 4.7.2 (no changes required)

 -- Simon McVittie <smcv@debian.org>  Fri, 15 Aug 2025 10:53:47 +0100

gdm3 (48.0-2) unstable; urgency=medium

  * Team upload
  * d/greeter.dconf-defaults: Remove non-functional theming options.
    The visual design of the greeter (login prompt) is no longer intended
    to be configurable, and in particular the background is no longer
    configurable, so none of the background-related settings have any
    effect. The greeter also does not use GTK, so changing the GTK
    theme has no effect on it.
    Remove these options from the default configuration file so that
    they will not mislead sysadmins. (Closes: #1105057)
  * d/greeter.dconf-defaults: Add some useful example options.
    Disabling fingerprint authentication is one of the examples given
    in the GNOME System Administration Guide. The steps from that guide
    won't actually work as-is on Debian (because we use a different
    username for the greeter, #1107944) but we can make it as easy as
    possible to do the equivalent.
    Meanwhile, disabling smartcard authentication is a way to avoid the
    presence of a smartcard having the side-effect of disabling the user
    list, and in some configurations also the ability to log in with a
    password (#1051785).
  * d/gdm3.alternatives: When smart card authentication is re-enabled,
    make gdm-smartcard-sssd-or-password the default.
    With the previous default, gdm-smartcard-sssd-exclusive, if a smart
    card was plugged in and libpam-sss was installed, we would reject
    attempts to log in with a password. This is the most-hardened choice
    if smart cards are being used for authentication, but prevents login
    if the smart card has not been enrolled for authentication and is
    actually being used for some other purpose such as OpenPGP or X509.
    (Closes: #1051785)
  * d/greeter.dconf-defaults: Disable smartcard authentication by default.
    Enabling smartcard authentication has side-effects on other aspects of
    greeter behaviour if a compatible smartcard happens to be connected:
    in particular, it disables the user list, resulting in users being
    required to type their username to log in.
    Enrolling smartcards to be used for authentication requires sysadmin
    action, so it seems reasonable to require the sysadmin to take action
    to enable it after they have done the necessary enrolment step.
    (Closes: #1051785)
  * d/p/gdm-settings-utils-rename-variable-to-fix-build-with-gcc-.patch:
    Add patch from upstream 49.alpha.0 to fix FTBFS in C23 mode.
    This won't become relevant until gcc 15 becomes the default during
    the forky cycle, but is a harmless change while we're uploading anyway.
    (Closes: #1096689)

 -- Simon McVittie <smcv@debian.org>  Sun, 13 Jul 2025 20:08:32 +0100

gdm3 (48.0-1) unstable; urgency=medium

  * New upstream release
  * debian/gdm3.install: Install new polkit rules to allow changing
    global network settings from the login screen (LP: #2098016)

 -- Jeremy Bícha <jbicha@ubuntu.com>  Mon, 17 Mar 2025 12:33:51 -0400

gdm3 (48~beta-1) unstable; urgency=medium

  [ Jeremy Bícha ]
  * New upstream release
  * Remove gsettings schema patch: applied in new release

  [ Marco Trevisan (Treviño) ]
  * debian/tests/sssd-gdm: Use random PIN values by default
  * debian/tests/sssd-gdm: Sync with upstream cleanups
  * d/tests/sssd-gdm-smartcard-pam-auth-tester.sh: Ensure auth fails
    with invalid cert
  * debian/tests/sssd-softhism2-certificates-tests.sh: Remove unused
    v3_ca settings

 -- Jeremy Bícha <jbicha@ubuntu.com>  Mon, 10 Feb 2025 10:47:28 -0500

gdm3 (47.0-4) unstable; urgency=medium

  * Cherry-pick gsettings schema addition required by GNOME Shell 48 Beta

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 05 Feb 2025 08:11:50 -0500

gdm3 (47.0-3) unstable; urgency=medium

  * Team upload
  * d/tests/control: Don't test gdm3 on armel.
    The library is available on armel, but the daemon is not.

 -- Simon McVittie <smcv@debian.org>  Sat, 21 Sep 2024 14:45:40 +0100

gdm3 (47.0-2) unstable; urgency=medium

  * Release to unstable

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 18 Sep 2024 09:55:29 -0400

gdm3 (47.0-1) experimental; urgency=medium

  [ Simon McVittie ]
  * New upstream release candidate 47
  * d/rules: Explicitly enable X11 support.
    If upstream disables this in some future release, we'll want it to be
    an intentional decision whether we follow that.
  * d/control: Drop dependency on libcanberra-gtk, no longer checked
  * d/control: Don't build gdm3 binary package on armel.
    gdm3 requires GNOME Shell, which is unlikely to be practically useful
    on the older ARM machines that can't run armhf or arm64. GNOME Shell
    also requires gjs, which is likely to be removed from armel.
    (Helps: #1080521)
  * Standards-Version: 4.7.0 (no changes required)
  * Update Lintian overrides
  * d/control: Add ${gir:Provides} to libgdm-dev

  [ Marco Trevisan (Treviño) ]
  * New upstream release 47.0
  * debian: Drop gdm-screenshot references, as it has been removed upstream

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Mon, 16 Sep 2024 17:32:15 +0200

gdm3 (46.2-1) unstable; urgency=medium

  [ Jeremy Bícha ]
  * New upstream release
  * Drop 2 patches applied in new release

  [ Sebastian Andrzej Siewior ]
  * Adapt autopkgtest for openssl3.2 (Closes: #1061458)

 -- Jeremy Bícha <jbicha@ubuntu.com>  Mon, 01 Jul 2024 07:45:23 -0400

gdm3 (46.0-2) unstable; urgency=medium

  * debian/rules: Set the distro as debian
  * debian/patches/gdm-auth-config-debian: Install hook for gdm-config.
    This is distro-specific configuration that gdm allows distro to
    configure so add the debian version for it and install it /usr/libexec
  * debian/patches: Refresh indexes
  * debian/patches: Cherry-pick upstream fixes:
     - manager: Move g-i-s chown to when PAM authentication completed
     - udev rules: Add check for nvidia S0ix suspend

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Thu, 04 Apr 2024 05:51:44 +0200

gdm3 (46.0-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bícha <jbicha@ubuntu.com>  Mon, 01 Apr 2024 08:03:50 -0400

gdm3 (46~rc-1) unstable; urgency=medium

  * New upstream release
  * Add Build-Depends: libjson-glib-dev
  * debian/libgdm1.symbols: Add new symbols
  * debian/gdm3.install: Install /usr/bin/gdm-config

 -- Jeremy Bícha <jbicha@ubuntu.com>  Fri, 15 Mar 2024 13:41:09 -0400

gdm3 (45.0.1-3) unstable; urgency=medium

  * Team upload

  [ Simon McVittie ]
  * d/control: Stop generating from d/control.in
  * d/control: Remove unnecessary B-D on systemd, udev.
    This package already build-depends on systemd-dev. (Closes: #1060507)
  * d/gdm3.lintian-overrides: Update to accomodate merged /usr
  * d/gdm3.lintian-overrides: Add an override for #1031037
  * d/source/lintian-overrides: Silence warnings for local dh-exec
    substitutions

  [ Dandan Zhang ]
  * Add loong64 to the list of architectures where gjs is available
    (Closes: #1058673)

  [ Michael Biebl ]
  * Install PAM module into /usr (Closes: #1061244)

 -- Michael Biebl <biebl@debian.org>  Wed, 31 Jan 2024 14:56:12 +0100

gdm3 (45.0.1-2) unstable; urgency=medium

  * debian/gdm3.gdm-smartcard-pkcs11-exclusive.pam: Make Smart Card module
    really exclusive
    pam_pkcs11 may stil return PAM_IGNORE in case of smart-card errors if no
    card_only is parameter is provided, potentially leading to an unexpected
    login.
    This should not be an issue anymore in recent versions of this service
    files since we always fallback to password auth, but it's still a bug
    since we should not really fallback to password if this service file is
    selected. (LP: #2017870)

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Sat, 23 Dec 2023 03:29:50 +0100

gdm3 (45.0.1-1) unstable; urgency=high

  * Team upload

  [ Marco Trevisan (Treviño) ]
  * debian/gdm3.gdm-smartcard-*: Always fallback to password auth if no SC
    pam module is installed.
    Both libpam_sss.so and libpam_pkcs11.so might be not be installed in a
    system, in such case we should not make gdm to enforce the smartcart
    authentication because that would just lock the user out if there are
    other login allowed methods.
    As per this, make these modules partially optional even in the exclusive
    mode, given that we have not a strong dependency on such modules and so
    inserting a smartcard is not enough to block a system, unless that's
    configured.
    Ideally we should not even try to proceed if the system is not fully
    configured for smartcards, but that's something that can't be easily
    controlled from modules settings, so let's just do the quickest thing.
    (Mitigates: #1051659, #1051785)
  * d/tests/sssd-softhism2-certificates-tests.sh: Cherry-pick upstream fixes

  [ Simon McVittie ]
  * New upstream release
    - Fix an intermittent crash when unlocking the screen
    - Translation updates: en_GB, ko, sv
  * d/gdm3.links: Create a dconf profile named for the Debian-gdm user.
    In upstream and Ubuntu gdm, the system username used for the greeter
    is "gdm", but in Debian, for historical reasons it is "Debian-gdm".
    Before version 45, the dconf profile name "gdm" was hard-coded,
    but since version 45 it uses a profile name that matches the system
    username (to allow gnome-initial-setup to have its own profile).
    This resulted in the gdm greeter trying to use the ordinary
    gnome.session instead of gnome-login.session, which caused login to
    fail when the gnome-session package was not installed, and caused
    settings in /etc/gdm3/greeter.dconf-defaults to be ineffective. Other
    differences between gnome.session and gnome-login.session, potentially
    including security hardening for the greeter, would also not have
    been effective.
    (Closes: #1052374, #1051671, #1051993)
  * Set high urgency for the dconf profile fix

  [ Helmut Grohne ]
  * Avoid FTBFS when systemdsystemunitdir changes in systemd.pc
    (Closes: #1052381)

 -- Simon McVittie <smcv@debian.org>  Thu, 21 Sep 2023 13:12:44 +0100

gdm3 (45~beta-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bícha <jbicha@ubuntu.com>  Thu, 07 Sep 2023 09:28:08 -0400

gdm3 (44.1-2) unstable; urgency=medium

  * Clean up some old package relationships
  * Release to unstable

 -- Jeremy Bícha <jbicha@ubuntu.com>  Sun, 23 Jul 2023 16:10:57 -0400

gdm3 (44.1-1) experimental; urgency=medium

  * New upstream release

 -- Jarred Wilson <jarred.wilson@canonical.com>  Mon, 15 May 2023 12:39:35 -0400

gdm3 (44.0-1) experimental; urgency=medium

  [ Jeremy Bicha ]
  * New upstream release
  * debian/control.in: Bump minimum meson to 0.57

  [ Simon McVittie ]
  * d/tests: Don't reset root password
  * d/tests: Explicitly use blank input when checking for blank password

  [ Marco Trevisan (Treviño) ]
  * debian/tests/control: Add explicit dependency on libpam-sss
  * debian/gdm3.install: Do not list config files, just install all gdm3 ones
  * debian/tests/sssd-gdm-smartcard-pam-auth-tester.sh: Some minor cleanups

 -- Jeremy Bicha <jbicha@ubuntu.com>  Mon, 27 Mar 2023 15:32:48 -0400

gdm3 (43.0-3) unstable; urgency=medium

  * Team upload

  [ Marco Trevisan (Treviño) ]
  * debian/tests/control: Use multi-line Test-Command for easier
    maintenance
  * debian/tests/sssd-gdm-smartcard-pam-auth-tester.sh:
    Assert that entering the wrong PIN leads to authentication failure

  [ Patrice Duroux ]
  * d/rules: Generate one man page at a time.
    Otherwise, the content of one arbitrary .pod file gets duplicated into
    each of the man pages. (Closes: #1029839)

  [ Simon McVittie ]
  * d/tests: Avoid autopkgtest failure if test user has blank password.
    If the test user has a blank password (which might be the case in an
    expendable test VM) and PAM accepts blank passwords, then
    gdm-smartcard-sssd-or-password will always authenticate successfully.
    If that's the case, temporarily change the user's password to be
    non-empty while running our tests. Also do the same for root.
  * Move dbus-daemon security policy from /etc to /usr/share
  * d/control.in: Drop unnecessary dependency on lsb-base
  * d/control.in: Remove Multi-Arch: same from gir1.2-gdm-1.0.
    It is not usefully multi-arch co-installable because it depends on
    libgdm1, which contains /usr/bin/gdmflexiserver.
  * d/po/sv.po: Transcode from ISO-8859-1 to UTF-8
  * Update syntax of Lintian overrides
  * Standards-Version: 4.6.2 (no changes required)

 -- Simon McVittie <smcv@debian.org>  Sun, 29 Jan 2023 17:32:20 +0000

gdm3 (43.0-2) unstable; urgency=medium

  * debian/gdm3-gdm-smartcard*: Do not fail if pam_succeed_if suceeded.
    We were not handling the success case in pam_succeed_if.so, and so even
    if other modules were successful, gdm-smartcard was failing with a
    permission denied error, because the pam_succeed_if default was bad, and
    this was applied to the success case too.
    Alternatively we could even just use success=ignore here, but it's
    better to be consistent with other usages. (LP: #1999884)
  * debian/gdm3.gdm-smartcard-sssd-or-password.pam: Always load gnome keyring
    and nologin.
    Ensure that we load the nologin and gnome-key-ring modules also if sss
    module succeeded.
  * debian/tests: Add autopkg tests testing gdm smartcard authentication.
    Create fake certificates from fake CA's and verify they can be used with
    from a virtual smartcard.

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Sat, 28 Jan 2023 09:57:53 +0100

gdm3 (43.0-1) unstable; urgency=medium

  [ Jeremy Bicha ]
  * New upstream release
  * debian/control.in: Build gdm3 on armel since gjs & mozjs102
    are built there now
  * Release to unstable

  [ Simon McVittie ]
  * d/control.in: Depend on polkitd instead of policykit-1

 -- Jeremy Bicha <jbicha@ubuntu.com>  Sat, 24 Sep 2022 23:48:19 -0400

gdm3 (42.0-2) experimental; urgency=medium

  * Team upload
  * Only build gdm3 on architectures with working mozjs102 and gjs.
    gjs is likely to be removed from armel as part of the move to mozjs102
    (see #1018076), and is unbuildable or fails tests on most non-release
    architectures. gdm3 requires gnome-shell at runtime, which requires gjs.
    To avoid having an uninstallable gdm3 package, only build it on
    architectures where gjs is known to be available.
  * NEWS: Use correct version number and suite (Closes: #1008663)
  * Standards-Version: 4.6.1 (no changes required)
  * Upload to experimental: unstable upload will be done as part of #1018076

 -- Simon McVittie <smcv@debian.org>  Wed, 31 Aug 2022 11:36:12 +0100

gdm3 (42.0-1) unstable; urgency=medium

  [ Jeremy Bicha ]
  * New upstream release
    - Fix hang caused by GDM starting sooner than nvidia_drm
      (Closes: #1004131, LP: #1958488)
    - Default to Wayland for nvidia 510 drivers (LP: #1962523)
  * debian/control.in: Build-Depend on libgudev-1.0-dev

  [ Simon McVittie ]
  * Add a NEWS.Debian entry for the removal of "System X11 Default"

 -- Jeremy Bicha <jbicha@ubuntu.com>  Tue, 22 Mar 2022 16:45:54 -0400

gdm3 (41.3-1) unstable; urgency=medium

  * Team upload
  * New upstream release
    - Explicitly pass "-listen tcp" to Xorg if configured with
      DisallowTCP=false (Closes: #785495). Please note that this
      configuration continues to be insecure if you have any untrusted
      devices on your LAN, including games consoles, smart lightbulbs
      and other embedded devices.
    - libgdm: Handle GDM_SUPPORTED_SESSION_TYPES being unset
    - Keep wayland enabled for simple-framebuffer DRM drivers
    - Restart greeter session if it crashes
    - Translation updates
    - Various other fixes that were already included as patches in Debian
  * Drop patches that were taken from upstream
  * Generically depend on any logind implementation on Linux
    (Closes: #991880)
  * Change uid to Debian-gdm for all accesses to /var/lib/gdm3, which is
    safer than manipulating a non-root-owned directory as root
    - d/generate-config: Create /var/lib/gdm3 if needed, but subsequently
      don't change anything as root
    - d/generate-config: Run `dconf compile` as Debian-gdm
    - d/generate-config: Run pkill as Debian-gdm too, while we're there
    - d/gdm3.postinst: Don't create /var/lib/gdm3, it will be created on
      a just-in-time basis by d/generate-config
    - d/gdm3.postinst: Don't change ownership of /var/lib/gdm3
    - d/gdm3.dirs: Don't ship root-owned directories which will become
      owned by Debian-gdm on running systems
  * Update spelling of Lintian overrides
  * Silence Lintian false positive for
    package-supports-alternative-init-but-no-init.d-script.
    /etc/init.d/gdm3 is the LSB equivalent of both gdm3.service and
    gdm.service.
  * d/gdm3.dirs: Drop unnecessary directories

 -- Simon McVittie <smcv@debian.org>  Sat, 29 Jan 2022 18:28:14 +0000

gdm3 (41.0-3) unstable; urgency=medium

  * Team upload
  * d/control.in: Depend on specific dbus components.
    We need the well-known system bus (any implementation, typically either
    dbus or dbus-broker), plus dbus-daemon/dbus-run-session (for the greeter).
    Additionally, /etc/init.d/gdm3 needs dbus-send from dbus-bin, although
    the systemd unit doesn't necessarily need that.
  * d/rules: Stop using obsolete check-accelerated-dir option.
    Meson 0.60.0 makes unknown options an error. (Closes: #997935)

 -- Simon McVittie <smcv@debian.org>  Thu, 28 Oct 2021 10:11:51 +0100

gdm3 (41.0-2) unstable; urgency=medium

  * Team upload
  * Trim trailing whitespace in d/changelog
  * Update standards version to 4.6.0 (no changes needed)
  * Avoid explicitly specifying -Wl,--as-needed linker flag.
    This is the default in current toolchains.
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Wed, 13 Oct 2021 23:01:42 +0100

gdm3 (41.0-1) experimental; urgency=medium

  * Team upload
  * New upstream release
    - Allow Wayland user sessions for single-GPU-vendor NVIDIA machines
      if the v470 NVIDIA proprietary driver is in use (LP: #1942911)
  * d/p/gdm.rules-Keep-wayland-enabled-in-all-nvidia-configuratio.patch:
    Also allow Wayland user sessions for hybrid (Optimus) NVIDIA systems
  * d/p/local-display-factory-Don-t-try-to-respawn-displays-on-sh.patch,
    d/p/xdmcp-display-factory-Set-supported-session-types-for-XDM.patch,
    d/p/daemon-Infer-session-type-from-desktop-file-if-user-has-n.patch,
    d/p/local-display-factory-Don-t-crash-if-Xorg-and-Wayland-are.patch,
    d/p/meson-Fix-detection-of-Xorg-versions-that-need-listen-tcp.patch:
    Various post-release fixes from upstream
  * Drop default.desktop session.
    Its name is deeply misleading when it hasn't been GDM's default for
    several years, and GDM/GNOME is increasingly moving towards Wayland
    rather than X11. It also seems undesirable to present users with an
    option that will always need to have a vague, generic name, because we
    cannot predict what specific session or window manager it will launch.
    Instead, provide an example file with a more appropriate name,
    /usr/share/doc/gdm3/examples/custom-x11-session.desktop, which
    users of ~/.xsession can either install as-is, or use as a basis for
    their own custom session types as documented in gnome-user-docs.
  * Xsession: quote more defensively

 -- Simon McVittie <smcv@debian.org>  Sun, 10 Oct 2021 19:52:43 +0100

gdm3 (40.1-2) unstable; urgency=medium

  * Team upload

  [ Marco Trevisan (Treviño) ]
  * debian/gbp.conf: Update upstream-vcs-tag format to work with
    pre-releases

  [ Simon McVittie ]
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Sun, 12 Sep 2021 21:46:25 +0100

gdm3 (40.1-1) experimental; urgency=medium

  [ Laurent Bigonville ]
  * debian/rules: Drop compatibility symlinks now that bullseye is released
  * debian/watch: Update the watch file to follow the new version scheme
  * debian/control.in: Suggest orca instead of gnome-orca.
    The latter is a transitonal package.

  [ Simon McVittie ]
  * Add Recommends on gnome-session | x-session-manager.
    gdm3 already Depends on gnome-session | x-session-manager |
    x-window-manager | x-terminal-emulator, but not all packages that
    provide x-window-manager are usable as desktop environments (in
    particular, the example window manager in the mutter package does not
    have a built-in way to launch programs). Adding a Recommends here
    provides a stronger hint that nearly all gdm3 users are going to want
    an implementation of x-session-manager, preferably GNOME's.
    (Closes: #986046)
  * d/watch: Don't use @PACKAGE@.
    For historical reasons, the Debian package is gdm3 rather than gdm.
  * New upstream release
    - Includes changes from Marco Trevisan that were previously committed
      as patches (LP: #1935818)

 -- Simon McVittie <smcv@debian.org>  Tue, 07 Sep 2021 10:42:00 +0100

gdm3 (3.38.2.1-3) experimental; urgency=medium

  * debian/changelog: Remove bad entry meant to be in ubuntu side only
    It's not needed in debian
  * debian/patches: Correctly return from idle callback
  * debian/gdm3.gdm-smartcard-*:
    - Do not set user_readenv=1 in pam_env.so (keep it for ubuntu only).
    - Ignore invalid user errors on pam_succeed_if.so.
      We may call the gdm-smartcard module without an user, leaving the module
      to figure it out depending on the smartcard certificate.
      So we need to ignore PAM_USER_UNKNOWN errors on pam_suceed_if.so.
      While pam_sss.so already checks for the user being non root internally,
      it's always better to ensure early this in all the cases.
      In the pkcs11 case instead we need to check it again after the module
      has returned. (LP: #1917362)
    - Check for /var/run/nologin (and friends) only when an user is defined
      pam_nologin.so requires a PAM_USER to be defined in order to check if
      the request has been done by root, possibly stopping the login otherwise.
      And in case none was provided, it will trigger the fallback pam prompt.
      However, with smartcard authentication we may initiate the PAM session
      without an user defined and leave to the smartcard service to try to
      figure it out depending on the token that has been inserted, that may
      have an user associated with it.
      So, ensure that we load all the PAM modules that require an user after
      the smartcard one, that in case will set one for us.
      Only after that, we can fail in case /var/run/nologin is present
      (LP: #1917362)

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Thu, 15 Apr 2021 17:55:12 +0200

gdm3 (3.38.2.1-2) experimental; urgency=medium

  * debian: Add gdm-smartcard PAM module implemented with libpam_sss.
    The implementation uses update-alternatives to provide a generic
    gdm-smartcard PAM module that can be changed using the tool.
    Potentially other systems could be used or supported (such as pam_pkcs11
    or pam_p11) by adding other modules implementing the gdm-smartcard auth
    service. (LP: #1865226, Closes: #953557)
  * debian: Add gdm-smartcard implementation using pkcs11
  * debian/gdm3.gdm-smartcard-sssd-exclusive.pam:
    - PAM config to use exclusive (no fallback is supported) smartcard
      authentication via libpam_sss
  * debian/gdm3.gdm-smartcard-sssd-or-password.pam:
    - PAM config to optionally use smartcard authentication via libpam_sss,
      on failure it fallbacks to password authentication
  * debian/gdm3.gdm-smartcard-pkcs11-exclusive.pam:
    - PAM config to use exclusive (no fallback is supported) smartcard
      authentication via libpam_pkcs11
  * debian/control:
    - Suggests libam-sss and libam-pkcs11
  * debian/gdm3.alternatives:
    - Add gdm-smartcard alternatives to be used as /etc/pam.d/gdm-smartcard
  * debian/patches: Cherry-pick upstream fixes, including better auth error
    handling (LP: #1865838)

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Thu, 25 Feb 2021 16:40:24 +0100

gdm3 (3.38.2.1-1) unstable; urgency=medium

  * New upstream release
  * debian/control.in: Add a Homepage field (Closes: #976768)

 -- Laurent Bigonville <bigon@debian.org>  Fri, 18 Dec 2020 19:35:23 +0100

gdm3 (3.38.2-1) unstable; urgency=medium

  * Team upload

  [ Simon McVittie ]
  * New upstream release
    - Fix location of locale directory
    - display: Exit with failure if loading existing users fails
      (GHSL-2020-202, CVE-2020-16125)
  * Xsession: Use run-parts --list instead of reimplementing it.
    Taken from x11-common.

  [ Dmitry Borodaenko ]
  * Implement has_option in Xsession.
    Now that x11-common moved this function from 20x11-common_process-args
    to Xsession (see #920778), gdm's version of Xsession also has to
    implement it. (Closes: #972108)

 -- Simon McVittie <smcv@debian.org>  Wed, 04 Nov 2020 17:41:42 +0000

gdm3 (3.38.1-2) unstable; urgency=medium

  * debian/gdm3.preinst: Add script to replace possibly wrong .conf file.
    In gdm3 versions of the 3.38 series a regression was introduced causing
    the /usr/libexec/gdm-disable-wayland tool to write its supposedly
    temporary gdm file to the persistent location.
    This is particularly harmful for users of the NVIDIA drivers as they
    will get their default config file (/etc/gdm3/daemon.conf in debian and
    /etc/gdm3/custom.conf in Ubuntu) modified for good, making impossible to
    login in a Wayland session (once nvidia driver is disabled).
    As per this, in case of upgrades or install with configuration files
    left, we replace the gdm's daemon.conf/custom.conf file in case it
    matches the one that the disable-wayland tool would produce.
    https://discourse.gnome.org/t/gdm-3-38-0-has-bad-bug-for-nvidia-users/4517
    (LP: #1899673)

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Wed, 14 Oct 2020 01:29:48 +0200

gdm3 (3.38.1-1) unstable; urgency=medium

  * New upstream release:
    - Fix bug leading to users /etc/gdm/custom.conf getting overwritten on
      nvidia systems (LP: #1899673).
    - Fix typo in comment
    - Translation updates
  * debian/rules: Don't override the runtime-conf path anymore.
    Upstream fixed the root issue for changing this, so the default runtime
    configuration file will be correctly written in the runtime path again.

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Tue, 13 Oct 2020 19:51:14 +0200

gdm3 (3.38.0-2) unstable; urgency=medium

  * Team upload
  * d/rules: Set runtime configuration path.
    In Autotools, the default runtime configuration path used to be
    ${GDM_RUN_DIR}/custom.conf, but in the Meson build system the fallback
    changed to be the same as the custom.conf path in /etc (set to
    /etc/gdm3/daemon.conf in Debian for historical reasons).
    Explicitly set it to the path we used before switching to Meson, so
    that configuration changes by gdm-disable-wayland are temporary as
    intended, and do not persist to a subsequent boot.
  * Revert "debian/watch: Monitor unstable versions"
  * d/upstream/metadata: Add
  * Merge packaging from unstable
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Sat, 26 Sep 2020 16:52:06 +0100

gdm3 (3.38.0-1) experimental; urgency=medium

  * Team upload
  * New upstream release
  * Remove patches that were applied upstream (in some cases differently)
  * Remove special case for s390x.
    gjs and gnome-shell now exist there, so we no longer need to avoid
    depending on them. In particular this makes the GNOME metapackages
    installable on that architecture again. (Closes: #970245)

 -- Simon McVittie <smcv@debian.org>  Sun, 13 Sep 2020 18:03:34 +0100

gdm3 (3.37.90-2) experimental; urgency=medium

  * Team upload

  [ Simon McVittie ]
  * Add patch to remove deprecated StandardOutput=syslog from systemd unit
  * Build-Depend on systemd, for /usr/share/pkgconfig/systemd.pc

  [ Iain Lane ]
  * debian/control: Bump depends on gnome-{session,settings-daemon,shell}
    We require the newly rearranged systemd units that are in these
    versions.
  * debian/control: Make gdm depend on gnome-session-common ≥ 3.37.0-2~
    This is where the systemd units live now.

 -- Simon McVittie <smcv@debian.org>  Wed, 09 Sep 2020 00:51:41 +0100

gdm3 (3.37.90-1) experimental; urgency=medium

  [ Marco Trevisan (Treviño) ]
  * New upstream release:
    - Updates to systemd integration
    - Support killling X on login even when wayland support is disabled
    - Fix multi-seat support (LP: #1891815)
    - Don't keep login screen running in background on Xorg
    - Fixes for when GDM isn't started on its configured initial VT
    - Don't hardcode path to plymouth
    - Enable wayland on cirrus
    - Chrome remote desktop fix
    - Always use separate session bus for greeter sessions
      This runs dbus-run-session, so the binary needs to be available
  * debian/rules:
    - Build with meson
    - Use --fail-missing if not in library-only mode
    - Expose to meson only X bin path
  * debian/control:
    - Depend on debhelper-compat = 13
    - Cleanup the Build-Depends: Remove dependencies that are not required
      explicitly by gdm
  * debian/libgdm1.symbols: Remove various (private) symbols.
    - They were wrongly exported as there's no trace of them in the
      public API.
  * debian/patches: Refresh as per meson port
  * d/p/16_xserver_path.patch:
    - Make meson read the X bin path from environment
  * d/p/meson-Fix-keyutils-pkg-config-name.patch,
    d/p/meson-Obey-at-Dcustom-conf-option-when-installing-custom..patch,
    d/p/meson-Use-correct-rules-path-when-getting-udevdir-from-pk.patch:
    - Fix some meson issues causing diffs with autotools
  * d/p/meson-Don-t-look-for-non-existent-journald-dependency.patch,
    d/p/meson_options-Enable-systemd-journal-by-default.patch:
    - Make gdm log again to the journal by default
  * debian/gdm3.install: Update install paths.
    Install everything under usr/share/gdm
  * debian/*.install: Use dh 13 ${DEB_HOST_MULTIARCH} instead of wildcards

  [ Simon McVittie ]
  * d/p/local-display-factory-always-force-login-screen-to-VT-1.patch:
    - Drop, applied upstream

 -- Marco Trevisan (Treviño) <marco@ubuntu.com>  Fri, 28 Aug 2020 22:37:09 +0200

gdm3 (3.36.3-1) unstable; urgency=medium

  * Team upload
  * New upstream release
    - d/p/local-display-factory-always-force-login-screen-to-VT-1.patch:
      Drop, applied upstream
    - This version is functionally equivalent to 3.36.2-1
  * Remove special case for s390x.
    gjs and gnome-shell now exist there, so we no longer need to avoid
    depending on them. In particular this makes the GNOME metapackages
    installable on that architecture again. (Closes: #970245)
  * d/gbp.conf: Switch branch for uploads to unstable.
    3.37.x is already in experimental.
  * d/watch: Only watch for 3.36.x versions

 -- Simon McVittie <smcv@debian.org>  Sun, 13 Sep 2020 18:05:02 +0100

gdm3 (3.36.2-1) unstable; urgency=medium

  * Team upload
  * New upstream release
    - Use a separate D-Bus session bus for each greeter
      + Add Depends on dbus, for dbus-run-session
    - Don't disable Wayland on Cirrus hardware (or more likely, emulated
      Cirrus hardware in qemu). A 5.2+ kernel is recommended.
    - Check for keyutils using pkg-config
    - Fixes for when GDM isn't started on its configured initial VT
    - Don't hard-code /bin/plymouth
    - Translation updates
  * d/watch: Only watch for even-numbered (stable) releases
  * d/p/local-display-factory-always-force-login-screen-to-VT-1.patch:
    Add post-release fix from upstream gnome-3-36 branch to fix a fast
    user switching regression in 3.36.2, by forcing the greeter to appear
    on tty1
  * Update symbols file.
    This ignores a change to private symbols:
    gdm_find_display_session_for_uid isn't declared in a public header,
    and nothing in Debian seems to call it.

 -- Simon McVittie <smcv@debian.org>  Thu, 25 Jun 2020 10:55:01 +0100

gdm3 (3.34.1-3) unstable; urgency=medium

  * Team upload

  [ Simon McVittie ]
  * d/greeter.dconf-defaults: Use 64px instead of 128px logo.
    Until gnome-shell 3.36.1, the logo was scaled down to be 48px tall.
    Since 3.36.1, it's shown at actual size, and 128px looks silly.
    desktop-base doesn't currently have a 48px version, but 64px is close
    enough. (Closes: #955759)

  [ Alexander Kurtz ]
  * debian/generate-config: Re-compile the dconf database unconditionally.
    Previously we tried to determine whether running `dconf compile` was
    really necessary by comparing the timestamps of the input and output
    files in a make-like fashion, but this was unnecessarily complicated,
    since both the CPU and IO load are negligible.

 -- Simon McVittie <smcv@debian.org>  Sun, 05 Apr 2020 17:16:30 +0100

gdm3 (3.34.1-2) unstable; urgency=medium

  [ Alexander Kurtz ]
  * debian/gdm3.postinst: Remove obsolete cleanup code now that buster has
    been released.

  [ Laurent Bigonville ]
  * debian/control.in: Bump Standards-Version to 4.5.0 (no further changes)
  * Move the daemons to libexec now that's allowed in the policy
  * Move everything from /var/run to /run as the former is a link to the later
    for quite some time
  * debian/gdm3.postinst: Remove obsolete cleanup code for gdm-welcome PAM
    service, this dates from 2012

 -- Laurent Bigonville <bigon@debian.org>  Sun, 15 Mar 2020 10:50:21 +0100

gdm3 (3.34.1-1) unstable; urgency=medium

  * New upstream release
    - De-duplicate sessions on pure Xorg too
    - Fix fast user switching by assuming the login screen VT is always the
      initial one

 -- Iain Lane <laney@debian.org>  Mon, 07 Oct 2019 16:25:24 +0100

gdm3 (3.34.0-2) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- Andreas Henriksson <andreas@fatal.se>  Mon, 30 Sep 2019 17:34:26 +0200

gdm3 (3.34.0-1) experimental; urgency=medium

  * New upstream translation release

 -- Iain Lane <laney@debian.org>  Wed, 11 Sep 2019 17:29:53 +0100

gdm3 (3.33.92-2) experimental; urgency=medium

  [ Simon McVittie ]
  * Merge packaging changes from unstable (Closes: #935699)

  [ Laurent Bigonville ]
  * Add extra explanation to the GDM PAM service about what pam_selinux is
    actually doing

 -- Iain Lane <laney@debian.org>  Fri, 06 Sep 2019 16:44:21 +0100

gdm3 (3.33.92-1) experimental; urgency=medium

  * New upstream release
    - Fix typo in debug message
    - Revert vt changing fix, because it exposes logind bug and it wasn't
      quite right anyway
    - Ensure login screen gets reaped when user switching

 -- Iain Lane <laney@debian.org>  Fri, 06 Sep 2019 13:41:32 +0100

gdm3 (3.30.2-5) unstable; urgency=medium

  * Team upload
  * Don't try to manipulate files in debian/gdm3/ when building for
    s390x, fixing FTBFS

 -- Simon McVittie <smcv@debian.org>  Thu, 29 Aug 2019 18:11:08 +0100

gdm3 (3.30.2-4) unstable; urgency=medium

  * Team upload
  * d/gbp.conf: Use debian/unstable, upstream/3.30.x branches
  * Skip building the gdm3 binary package on s390x.
    GDM requires GNOME Shell, which provides its GUI, but GNOME Shell
    is unavailable on s390x.
    Our previous attempt to avoid building an uninstallable gdm3 package
    on s390x involved a spurious build-dependency on gjs, but mozjs60 and
    gjs now work well enough on s390x to pass most of their own tests.
    However, GNOME Shell still fails tests on s390x, and in any case is
    not appropriate for mainframe-class machines that do not normally have
    a GPU or a local display.
    Continuing to build libgdm binaries for s390x, as opposed to forcing the
    entire source package to FTBFS on s390x, means we can continue to build
    gnome-panel without special hacks, allowing s390x users to install the
    GNOME 2-based GNOME Flashback environment if they particularly want a
    GNOME-based desktop on their mainframes. (Closes: #935699)
  * d/control.in: Add versioned Recommends on desktop-base (>= 10.0.0)
    In a previous version this was added to d/control, but d/control is
    regenerated from d/control.in during clean.
  * Remove spurious gjs build-dependency.
    This is less help than we had anticipated in making gdm3 unavailable on
    architectures where gnome-shell is unavailable, because gjs mostly works
    on s390x but gnome-shell does not. It is also desirable to build libgdm
    on even the architectures that do not have a working gdm, so that they
    can use gnome-panel and hence gnome-flashback.

 -- Simon McVittie <smcv@debian.org>  Thu, 29 Aug 2019 11:08:50 +0100

gdm3 (3.33.90-1) experimental; urgency=medium

  * New upstream release
    - Update for changes to gnome-settings-daemon
    - initial-setup permissions fix
    - allow users to set PATH from ~/.config/environmet
    - support systemd user sessions
    - leak fix in libgdm
    - vt changing fix
  * gdm3.install: Stop installing pixmaps/icons which have been dropped
  * debian/libgdm1.symbols: Add new symbols

 -- Iain Lane <laney@debian.org>  Thu, 15 Aug 2019 15:07:42 +0100

gdm3 (3.33.4-1) experimental; urgency=medium

  * New upstream release
    - Fix session search directories
    - Kill user sessions when stopping gdm
    - Add way for sessions to register when they successfully started (LP:
      #1798790)
  * libgdm-Remove-duplicate-sessions-once-after-all-sessions-.patch: Drop,
    upstream
  * debian/libgdm1.symbols: Update

 -- Iain Lane <iain.lane@canonical.com>  Fri, 02 Aug 2019 13:56:49 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libgdm1`.
