8 years agoip6: accept RAs when forwarding
Tore Anderson [Mon, 29 Aug 2011 12:26:40 +0000]
ip6: accept RAs when forwarding

This patch makes NM set the "accept_ra" sysctl to 1 rather than 2. This
causes the kernel to process RAs even if it configured to forward IPv6
traffic on the interface in question.

IPv6 forwarding would likely be enabled on a host running virtualised
operating systems with virtualised network adapters, for example. This
should not prevent NM from successfully activating IPv6 on a
NM-controlled interface configured with IPv6 mode Auto.

8 years agolibnm-util: fix deprecated g_value_get_char() for glib 2.29.90 and later
Dan Williams [Mon, 3 Oct 2011 15:33:12 +0000]
libnm-util: fix deprecated g_value_get_char() for glib 2.29.90 and later

8 years agotrivial: remove unwanted exclamation mark to fix compilation
Jiří Klimeš [Mon, 3 Oct 2011 13:54:25 +0000]
trivial: remove unwanted exclamation mark to fix compilation

8 years agoifcfg-rh: don't use spaces in ifcfg file names (rh #742273)
Jiří Klimeš [Mon, 3 Oct 2011 08:30:50 +0000]
ifcfg-rh: don't use spaces in ifcfg file names (rh #742273)

8 years agocore: improve config error handling
Thomas Bechtold [Fri, 30 Sep 2011 22:22:09 +0000]
core: improve config error handling

  * better error messages
  * fix memory leak in parse_state_file ()
  * create intermediate parent directories as needed for state file

8 years agowifi: add debug logging to new AP merge paths
Dan Williams [Fri, 30 Sep 2011 18:23:52 +0000]
wifi: add debug logging to new AP merge paths

8 years agowifi: tweak scanning debug message
Dan Williams [Fri, 30 Sep 2011 17:59:59 +0000]
wifi: tweak scanning debug message

8 years agocore: more verbose message when ignoring certain interface types
Dan Williams [Fri, 30 Sep 2011 17:50:15 +0000]
core: more verbose message when ignoring certain interface types

8 years agowifi: rename some AP debug dumping functions
Dan Williams [Fri, 30 Sep 2011 17:34:17 +0000]
wifi: rename some AP debug dumping functions

8 years agocore: improving handling of rfkill (bgo #655773)
Gary Ching-Pang Lin [Tue, 20 Sep 2011 08:36:35 +0000]
core: improving handling of rfkill (bgo #655773)

This commit improves the handling of rfkill.

- The original two passes check gathers the states of platform
  and non-platform switches in two separate loops. Now we gather
  the both states in one loop and determine the final states later.

- A new rule is used to determine the states of switches.

  if (platform_state == UNBLOCKED)
          choose non_platform_state;
          choose platform_state;

  The state is UNBLOCKED if and only if both the platform and
  non-platform switches are unblocked, so the ambiguous state in
  bgo#655773 will not happen.

  Original code always preferred the platform switch state over
  the device switch state, so if the platform switch was UNBLOCKED
  but the device was BLOCKED, NM would treat the device as
  UNBLOCKED and try to activate it, and obviously fail.

8 years agocore: Include <linux/if.h> instead of <net/if.h>
Thomas Graf [Fri, 23 Sep 2011 11:46:41 +0000]
core: Include <linux/if.h> instead of <net/if.h>

NM already includes <linux/if.h> in some places, f.e. nm-netlink-monitor and
we can't mix usage of the two. Stick to using <linux/if.h> as it provides
additional flag definitions such as operational link state and link mode.

Signed-off-by: Thomas Graf <>

8 years agoconfigure: Check for libnl-route-3 package
Thomas Graf [Fri, 23 Sep 2011 11:43:01 +0000]
configure: Check for libnl-route-3 package

NM not only depends on libnl but also on libnl-route. Therefore check for the
corresponding pkg-config file and use its CFLAGS and LIBS. Otherwise fall
back to using libnl-2 or libnl-1.

Signed-off-by: Thomas Graf <>

8 years agoconfigure: Fix typo in libnl3 check
Thomas Graf [Fri, 23 Sep 2011 10:58:54 +0000]
configure: Fix typo in libnl3 check

Check for libnl3 sets $have_libnl2 variable instead of $have_libnl3. Mostly a
cosmetic fix since the only usage also has the typo in it.

Signed-off-by: Thomas Graf <>

8 years agoconfigure: Only check for older libnl versions if newer is unavailable
Thomas Graf [Fri, 23 Sep 2011 10:52:39 +0000]
configure: Only check for older libnl versions if newer is unavailable

More recent libnl versions can be installed in parallel. Therefore it is
possible for more than one libnl check to pass successful. The way
the #ifdefs are done this results in code for multiple libnl versions
to be included.

Signed-off-by: Thomas Graf <>

8 years agokeyfile: fix confusion about NULL termination for uchar arrays
Dan Williams [Fri, 30 Sep 2011 04:52:17 +0000]
keyfile: fix confusion about NULL termination for uchar arrays

SSIDs don't want NULL termination, but some of the certificate code
checked for it.  New-style plain strings would never be NULL
terminated (by accident) so fix that and make the code simpler too.

Found by Gary Ching-Pang Lin <>

8 years agomodem: fix a periodic use-after-free crash poking ModemManager
Dan Williams [Thu, 29 Sep 2011 16:14:48 +0000]
modem: fix a periodic use-after-free crash poking ModemManager

See for a backtrace
and more info.

8 years agovpn: fix assertion when getting 'Uuid' property of an active VPN connection
Jiří Klimeš [Thu, 29 Sep 2011 14:37:12 +0000]
vpn: fix assertion when getting 'Uuid' property of an active VPN connection

8 years agovpn: fix 'SpecificObject' path for active VPN connections on D-Bus
Jiří Klimeš [Thu, 29 Sep 2011 14:09:17 +0000]
vpn: fix 'SpecificObject' path for active VPN connections on D-Bus

Active VPN connections exported their own active path instead of active path of
base connection in 'SpecificObject' property. It's a regression caused by commit
bc6fc7b910435aae00ef54db972a3e8359700d09 that split VPN connections to
NMVPNConnectionBase and NMVPNConnection.
Previously, specific object used to be obtained from NMActRequest of parent
connection. The NMActRequest object served also for getting secrets. Commits
0e6a5365d4f3991f6b10b5db1fb211d2d0696f2c and 832e64f8bc36bd4ab5ab6b8e9f6a1582d2e5ded5
removed NMActRequest from VPN connection because it's not necessary any more.
This commit fixes the issue by passing specific object path explicitly.

9 years agocore: split nm_manager_get() to simplify manager creation
Dan Williams [Mon, 26 Sep 2011 16:30:24 +0000]
core: split nm_manager_get() to simplify manager creation

OLPC Mesh code now doesn't have to be updated every time we change
the manager's creation arguments.  We could make all these arguments
GObject properties of the manager too, but that's more code and
we'd eventually like to figure out a better solution for letting
non-NMManager code listen for device addition/removal.

9 years agocore: split out config file handling
Dan Williams [Thu, 22 Sep 2011 15:16:07 +0000]
core: split out config file handling

Make config file stuff somewhat clearer and easier to understand,
and possibly easier to extend later.

9 years agocore: remove unused arguments from nm_manager_get()
Dan Williams [Thu, 22 Sep 2011 14:07:46 +0000]
core: remove unused arguments from nm_manager_get()

9 years agofcfg-rh: remove newlines when writing to ifcfg files (CVE-2011-3364) (rh #737338)
Jiří Klimeš [Tue, 27 Sep 2011 07:26:40 +0000]
fcfg-rh: remove newlines when writing to ifcfg files (CVE-2011-3364) (rh #737338)

9 years agoifcfg-rh: change iscsiadm path to /sbin/iscsiadm (rh #740753)
Jiří Klimeš [Mon, 26 Sep 2011 13:51:49 +0000]
ifcfg-rh: change iscsiadm path to /sbin/iscsiadm (rh #740753)

Using SBINDIR appears to be wrong as it expands to /usr/sbin.

9 years agowimax: log connection progress information
Dan Williams [Wed, 21 Sep 2011 05:30:51 +0000]
wimax: log connection progress information

We don't do anything with it yet, but it's nice to know for debugging.

9 years agocore: release DHCP lease when requested instead of always
Dan Williams [Wed, 21 Sep 2011 05:30:38 +0000]
core: release DHCP lease when requested instead of always

9 years agosettings: fix leaked connection when deleting secrets
Dan Williams [Wed, 21 Sep 2011 04:01:35 +0000]
settings: fix leaked connection when deleting secrets

9 years agosettings: fix refcounting when deleting a default wired connection (lp:797868)
Dan Williams [Wed, 21 Sep 2011 02:49:35 +0000]
settings: fix refcounting when deleting a default wired connection (lp:797868)

When a default wired connection is saved, it gets deleted first since it
has to be re-created using a settings plugin.  But with the settings
rework in 0.9, default wired refcounting changed and the default
wired connection wasn't kept alive in default_wired_try_update()
over the removal/readd.  This caused a use-after-free.

9 years agoexamples: correct a comment in example
Jiří Klimeš [Tue, 20 Sep 2011 16:13:32 +0000]
examples: correct a comment in example

9 years agoexamples: fix to work with 0.9's GetSecrets() API
Jiří Klimeš [Tue, 20 Sep 2011 16:07:25 +0000]
examples: fix to work with 0.9's GetSecrets() API

9 years agorelease: bump version to (0.9.2-beta1)
Dan Williams [Tue, 20 Sep 2011 04:18:12 +0000]
release: bump version to (0.9.2-beta1)

9 years agorelease: update NEWS
Dan Williams [Tue, 20 Sep 2011 04:10:59 +0000]
release: update NEWS

9 years agoifcfg-rh: fix crash when system bus isn't around
Dan Williams [Mon, 19 Sep 2011 22:38:58 +0000]
ifcfg-rh: fix crash when system bus isn't around

9 years agobuild: honor NOCONFIGURE (bgo #659354)
Colin Walters [Mon, 19 Sep 2011 21:45:43 +0000]
build: honor NOCONFIGURE (bgo #659354)

9 years agowimax: more verbose interface add/remove logging
Dan Williams [Fri, 16 Sep 2011 21:30:19 +0000]
wimax: more verbose interface add/remove logging

9 years agocore: print textual description for reason codes on device deactivation too
Jiří Klimeš [Mon, 19 Sep 2011 12:19:53 +0000]
core: print textual description for reason codes on device deactivation too

9 years agoexamples: add python example for listing devices
Dan Williams [Thu, 15 Sep 2011 16:13:38 +0000]
examples: add python example for listing devices

9 years agosupplicant: Don't leak secrets, even if they're probably invalid
Evan Broder [Thu, 15 Sep 2011 07:57:46 +0000]
supplicant: Don't leak secrets, even if they're probably invalid

9 years agocore: storing timestamps also for VPN connections (rh #725353)
Jiří Klimeš [Thu, 15 Sep 2011 12:21:45 +0000]
core: storing timestamps also for VPN connections (rh #725353)

9 years agowifi: remove some dead code
Dan Williams [Wed, 14 Sep 2011 22:30:04 +0000]
wifi: remove some dead code

9 years agoppp: pass novj through to pppd
Gerald [Wed, 14 Sep 2011 17:31:54 +0000]
ppp: pass novj through to pppd

9 years agomonitor: Use nl_socket_alloc() instead of nl_socket_alloc_cb()
Thomas Graf [Wed, 14 Sep 2011 12:43:11 +0000]
monitor: Use nl_socket_alloc() instead of nl_socket_alloc_cb()

We are using the default cb set anyways. This allows running NM with
the NLCB=debug environment variable set to get some debug messages
out of libnl related to netlink communication.

NLCB=debug won't print received netlink messages as the MSG_IN
handler is in use by NM to verify message origins. It's probably
best to introduce new handlers in libnl for debugging purpose
so both use of MSG_IN and enable debugging is possible.

9 years agocore: Fix check for failure in translating link name to ifindex
Thomas Graf [Tue, 13 Sep 2011 22:05:12 +0000]
core: Fix check for failure in translating link name to ifindex

rtnl_link_name2i() returns 0 (unspecified ifindex) if translation
did not succeed.

9 years agonetlink: fix flags use in nm_netlink_route_add
Alfredo Matos [Tue, 13 Sep 2011 10:25:59 +0000]
netlink: fix flags use in nm_netlink_route_add

Flags are not getting set when a route is added (e.g. NLM_F_REPLACE).
Apparently this was fixed in Ubuntu, but I didn't see a patch here, so
here it is.

9 years agonetlink: alias nlmsg_datalen() for libnl1
Dan Williams [Mon, 12 Sep 2011 22:07:41 +0000]
netlink: alias nlmsg_datalen() for libnl1

9 years agocore: Fix leaks if address parsing fails while setting mac
Thomas Graf [Fri, 9 Sep 2011 09:39:09 +0000]
core: Fix leaks if address parsing fails while setting mac

Both 'old' and 'new' are leaked if nl_addr_build() fails to parse
the mac address.

9 years agocore: fix leaked address structure after parsing mac address
Thomas Graf [Fri, 9 Sep 2011 09:39:08 +0000]
core: fix leaked address structure after parsing mac address

9 years agoip6: Perform sanity check before processing prefix messages
Thomas Graf [Fri, 9 Sep 2011 09:39:07 +0000]
ip6: Perform sanity check before processing prefix messages

Verifies that the provided message consists of at least the prefix header.

9 years agoip6: Perform sanity checks before processing nduseropt messages
Thomas Graf [Fri, 9 Sep 2011 09:39:06 +0000]
ip6: Perform sanity checks before processing nduseropt messages

Verifies that the provided message consists of the nduseropt header
followed by an array of options as specified in the header.

9 years agoip6: Perform sanity check before processing NEWLINK messages
Thomas Graf [Fri, 9 Sep 2011 09:39:05 +0000]
ip6: Perform sanity check before processing NEWLINK messages

Verifies that provided message consists of at least the link message
header. nlmsg_parse() does this so it needs to be called prior to
accessing the message contents.

9 years agoip6: fix leak in process_addr()
Thomas Graf [Fri, 9 Sep 2011 09:39:04 +0000]
ip6: fix leak in process_addr()

rtnladdr is leaked if nm_ip6_manager_get_device() returns NULL.

9 years agoip6: fix leak in process_route()
Thomas Graf [Fri, 9 Sep 2011 09:39:03 +0000]
ip6: fix leak in process_route()

rtnlroute is leaked if nm_ip6_manager_get_device returns NULL

9 years agokeyfile: fix two bugs for updating/writting a keyfile
Jiří Klimeš [Mon, 12 Sep 2011 16:41:59 +0000]
keyfile: fix two bugs for updating/writting a keyfile

* When a connection name (ID) was changed via nm-connection-editor, a new file
  path was created, but the old one was not removed. That resulted in two files
  and in turn in duplicated connections.
* When two connections with the same name (ID) were present, e.g. files ABC and
  ABC-70656842-98ac-4221-aa8b-0d4174770, and nm-connection-editor was used to
  edit ABC-70656842-98ac-4221-aa8b-0d4174770, the operation failed.

9 years agotodo: Infiniband update
Dan Williams [Fri, 9 Sep 2011 17:37:11 +0000]
todo: Infiniband update

9 years agotodo: update TODO for IP over Infiniband
Dan Williams [Wed, 7 Sep 2011 23:54:16 +0000]
todo: update TODO for IP over Infiniband

9 years agowimax: fix connect-during-scan after d4ff43bc1eaf0e0548c778fdd5fa86e1b9cf3b76
Dan Williams [Wed, 7 Sep 2011 22:20:42 +0000]
wimax: fix connect-during-scan after d4ff43bc1eaf0e0548c778fdd5fa86e1b9cf3b76

Oops; mark prepare_done during stage1 not stage2 since stage1 is Prepare
and stage2 isn't.

9 years agowimax: fix Active NSP notification issue
Dan Williams [Wed, 7 Sep 2011 19:20:30 +0000]
wimax: fix Active NSP notification issue

A race condition meant that sometimes, if the wimax device finished
scanning while stage1 (Prepare) was scheduled but hadn't executed yet:

NetworkManager[8700]: <info> (wmx0): device state change: disconnected -> prepare (reason 'none') [30 40 0]
NetworkManager[8700]: <info> Activation (wmx0) Stage 1 of 5 (Device Prepare) scheduled...
NetworkManager[8700]: <info> (wmx0): wimax state change scanning -> ready (reason 0)

the code would schedule stage2 which meant that stage1 was completely
skipped.  But that's where the active-nsp property was set, which
meant clients would not be notified of the new active NSP.  This
caused nm-applet to show a zero-signal-strength icon for WiMAX
because libnm-glib didn't know there was an active NSP, even though
NM was connected.

9 years agocli: increase values indentation in multiline mode to align printed text
Jiří Klimeš [Wed, 7 Sep 2011 10:20:56 +0000]
cli: increase values indentation in multiline mode to align printed text

9 years agocli: print some missing properties in settings
Jiří Klimeš [Wed, 7 Sep 2011 10:10:42 +0000]
cli: print some missing properties in settings

9 years agosharing: fix handling of rule negation (debian #638995)
Dan Williams [Tue, 6 Sep 2011 23:31:40 +0000]
sharing: fix handling of rule negation (debian #638995)

! after the option is deprecated at least as far back as iptables
1.4.12 on 2.6.32.  ! should be before the option instead.

Reported-by: Ralf Jung <>

9 years agodocs: add Secret Agent API bits to HTML spec
Dan Williams [Tue, 6 Sep 2011 22:31:27 +0000]
docs: add Secret Agent API bits to HTML spec

9 years agocli: print 'Permissions' property of NMSettingConnection setting
Jiří Klimeš [Tue, 6 Sep 2011 15:17:01 +0000]
cli: print 'Permissions' property of NMSettingConnection setting

9 years agocli: use libnm-util's constants for settings types
Jiří Klimeš [Tue, 6 Sep 2011 14:04:12 +0000]
cli: use libnm-util's constants for settings types

9 years agocli: add missing GSM bands for GSM setting
Jiří Klimeš [Tue, 6 Sep 2011 13:56:57 +0000]
cli: add missing GSM bands for GSM setting

9 years agocli: remove useless static function prototypes
Jiří Klimeš [Tue, 6 Sep 2011 13:30:15 +0000]
cli: remove useless static function prototypes

9 years agocli: add 'nmcli con delete' command for removing configured connections
Jiří Klimeš [Tue, 6 Sep 2011 13:07:58 +0000]
cli: add 'nmcli con delete' command for removing configured connections

9 years agocli: use nm_access_point_get_bssid() instead of nm_access_point_get_hw_address()
Jiří Klimeš [Tue, 6 Sep 2011 11:37:23 +0000]
cli: use nm_access_point_get_bssid() instead of nm_access_point_get_hw_address()

nm_access_point_get_hw_address() is deprecated in 0.9.
Also change 'hwaddr' parameter for 'nmcli dev wifi list' to 'bssid'. 'hwaddr'
still works but is deprecated and not documented any more.

9 years agoifnet: add testcase for incorrect config
Jiří Klimeš [Thu, 1 Sep 2011 09:29:32 +0000]
ifnet: add testcase for incorrect config

Missing config_<name> line (containing method, i.e. dhcp, ...) should
fail with error 'Unknown config for <name>'.

9 years agoifnet: fix tests
Jiří Klimeš [Wed, 31 Aug 2011 17:05:21 +0000]
ifnet: fix tests

9 years agoifnet: fix GError handling in ifnet_update_connection_from_config_block()
Jiří Klimeš [Wed, 31 Aug 2011 15:27:27 +0000]
ifnet: fix GError handling in ifnet_update_connection_from_config_block()

9 years agodnsmasq: use '@interface' for link-local DNS servers in the dnsmasq config
Michael Stapelberg [Fri, 12 Aug 2011 11:43:07 +0000]
dnsmasq: use '@interface' for link-local DNS servers in the dnsmasq config

inet_ntop() either returns 'address%interface' or just 'address'. In the first
case, we replace '%' with '@' since dnsmasq supports '%' only since version
2.58. In the second case, we append '@interface' to make it work.

(small fixes by dcbw)

9 years agorelease: update NEWS
Dan Williams [Thu, 25 Aug 2011 18:13:54 +0000]
release: update NEWS

9 years agorelease: update NEWS; forgot about the WiMAX support in 0.9
Dan Williams [Wed, 24 Aug 2011 22:22:30 +0000]
release: update NEWS; forgot about the WiMAX support in 0.9

9 years agotodo: add notes about pushing network selection to wpa_supplicant
Dan Williams [Wed, 24 Aug 2011 15:51:39 +0000]
todo: add notes about pushing network selection to wpa_supplicant

9 years agotodo: add some notes about tablet/mobile optimizations we should do
Dan Williams [Wed, 24 Aug 2011 15:17:36 +0000]
todo: add some notes about tablet/mobile optimizations we should do

9 years agorelease: update NEWS with 0.9 changes
Dan Williams [Wed, 24 Aug 2011 13:51:20 +0000]
release: update NEWS with 0.9 changes

Grr.  Forgot to do this before rolling the 0.9 tarball even
though I'd been religiously updating 0.8 NEWS.  Sorry...

9 years agoMerge remote-tracking branch 'origin/agent-secrets'
Dan Williams [Tue, 23 Aug 2011 14:34:55 +0000]
Merge remote-tracking branch 'origin/agent-secrets'

9 years agoMerge branch 'libnl3'
Dan Williams [Tue, 23 Aug 2011 14:30:50 +0000]
Merge branch 'libnl3'

9 years agorelease: version bump after release
Dan Williams [Tue, 23 Aug 2011 14:29:43 +0000]
release: version bump after release

Start of new development version 0.9.1; next stable release
will be 0.9.2.

9 years agorelease: bump version to 0.9.0
Dan Williams [Mon, 22 Aug 2011 23:30:56 +0000]
release: bump version to 0.9.0


9 years agodocs: update documentation for nm_utils_security_valid()
Dan Williams [Tue, 23 Aug 2011 01:23:33 +0000]
docs: update documentation for nm_utils_security_valid()

9 years agodocs: update NetworkManager.h code documentation
Dan Williams [Tue, 23 Aug 2011 01:23:20 +0000]
docs: update NetworkManager.h code documentation

9 years agobuild: update gitignore
Dan Williams [Tue, 23 Aug 2011 01:22:00 +0000]
build: update gitignore

9 years agodocs: fix a wrong variable name in code documentation
Dan Williams [Tue, 23 Aug 2011 00:02:43 +0000]
docs: fix a wrong variable name in code documentation

9 years agodocs: fix a prototype causing doc generation warnings
Dan Williams [Tue, 23 Aug 2011 00:02:12 +0000]
docs: fix a prototype causing doc generation warnings

9 years agodoc: fix a settings specification type
Dan Williams [Mon, 22 Aug 2011 23:15:41 +0000]
doc: fix a settings specification type

9 years agopo: updated Indonesian translation (bgo #656514)
Andika Triwidada [Mon, 22 Aug 2011 23:08:07 +0000]
po: updated Indonesian translation (bgo #656514)

9 years agobuild: mention libiw (in addition to wireless-tools) if headers aren't found (bgo...
Dan Williams [Mon, 22 Aug 2011 22:30:45 +0000]
build: mention libiw (in addition to wireless-tools) if headers aren't found (bgo #656340)

9 years agopo: updated Ukranian translation (bgo #656921)
Yuri Chornoivan [Mon, 22 Aug 2011 22:25:08 +0000]
po: updated Ukranian translation (bgo #656921)

9 years agosupplicant: incorporate subject_match and altsubject_matches into supplicant config...
Evan Broder [Fri, 29 Jul 2011 19:38:25 +0000]
supplicant: incorporate subject_match and altsubject_matches into supplicant config (bgo #341323)

9 years agosupplicant: add new separator option to ADD_STRING_LIST_VAL macro
Evan Broder [Fri, 29 Jul 2011 19:38:24 +0000]
supplicant: add new separator option to ADD_STRING_LIST_VAL macro

9 years agosettings: add 802.1X setting properties for subject and altsubject matches
Evan Broder [Fri, 29 Jul 2011 19:38:23 +0000]
settings: add 802.1X setting properties for subject and altsubject matches

Includes subject_match and phase2_subject_match (string) parameters,
and altsubject_matches and phase2_altsubject_matches (list of string)

subject_match is matched against a substring of the subject from the
certificate presented by the remote authentication server. If this
option is unset, no subject verification is performed.

altsubject_matches are each tested against the alternate subject name
(altSubjectName) of the certificate presented by the remote
authentication server. If this option is unset, no verification of the
altSubjectName is performed.

9 years agodbus: ensure NM can talk to newly installed VPN plugins (fdo #39463)
Dan Williams [Fri, 19 Aug 2011 21:55:16 +0000]
dbus: ensure NM can talk to newly installed VPN plugins (fdo #39463)

When new services are installed and the daemon reloads bus policy
(like when installing new VPN plugins with rpm or dpkg) it appears
the rules don't get loaded into NetworkManager's policy space.
Thus any D-Bus message NM sends to the newly installed VPN plugin
gets denied until a restart of NM or the machine.  Work around
this dbus bug by letting NM talk to all known VPN services in the
NM policy file which will always exist when NM is around.

9 years agoMerge remote-tracking branch 'origin/master' into agent-secrets
Dan Williams [Tue, 16 Aug 2011 23:00:32 +0000]
Merge remote-tracking branch 'origin/master' into agent-secrets

9 years agoMerge remote-tracking branch 'origin/master' into libnl3
Dan Williams [Tue, 16 Aug 2011 22:58:52 +0000]
Merge remote-tracking branch 'origin/master' into libnl3

9 years agolibnm-glib: allow to constuct NMObject with NULL bus
Tomeu Vizoso [Tue, 9 Aug 2011 14:31:20 +0000]
libnm-glib: allow to constuct NMObject with NULL bus

9 years agolibnm-glib: warn early if an object is tried to be instantiated without a path
Tomeu Vizoso [Tue, 9 Aug 2011 14:31:19 +0000]
libnm-glib: warn early if an object is tried to be instantiated without a path

9 years agolibnm-glib: allow NMRemoteSettings constructor with NULL bus
Daniel Drake [Sat, 6 Aug 2011 18:59:32 +0000]
libnm-glib: allow NMRemoteSettings constructor with NULL bus

NMRemoteSettings's constructor requires a DBusGConnection, but there
currently aren't any usable gobject-introspection bindings for that class.
This means that NMRemoteSettings can't be used over gobject-introspection.

Move the default fallback to the system bus into the constructor path, so
that introspection bindings are usable.

Python test case:
from gi.repository import NMClient

Before, this produced a segfault. Now it returns a usable RemoteSettings

9 years agolibnl: Move to common route add function interface
Alfredo Matos [Fri, 5 Aug 2011 15:02:44 +0000]
libnl: Move to common route add function interface

9 years agolibnl: Create a common netlink route add function
Alfredo Matos [Fri, 5 Aug 2011 15:02:34 +0000]
libnl: Create a common netlink route add function

9 years agolibnl: route delete can return ERANGE in libnl-1
Alfredo Matos [Fri, 5 Aug 2011 15:02:26 +0000]
libnl: route delete can return ERANGE in libnl-1