Commit Graph

8138 Commits

Author SHA1 Message Date
Jelle van der Waa
090c15e87e build: don't record timestamp in builtin.quirk.gz
On Arch Linux fwupd is almost reproducible except for the timestamp
recorded in the generated gzip file.
2022-11-29 22:18:56 +00:00
Richard Hughes
e1fdc5218f trivial: Use #defines when building report metadata 2022-11-29 17:31:36 +00:00
Richard Hughes
3a8824d4e7 Add FwupdReport to expose the signed reports from QA teams
Some front end clients are going to be allow-listing updates based on what
the release was tested on, or by who the testing team was.

Export this data from each report when requested.
2022-11-29 16:55:55 +00:00
Richard Hughes
9d20464606 Add more metadata to the report attributes
This can be used in gnome-control-center when building the security report.

Fixes https://github.com/fwupd/fwupd/discussions/5262
2022-11-29 16:55:25 +00:00
Richard Hughes
a08f8b229c Only modify the historical metadata if a release is available
This was causing the SystemIntegrityOld metadata key to be overwritten and not
included in the upload. It is much better to be explicit rather than using the
default release, which may not be what the user actually upgraded to.
2022-11-29 09:05:16 +00:00
Richard Hughes
b521924b00 Make fu_device_get_release_default() match the parent semantics
In various places the code was checking if a release was set, but this would
always be false as the release was being auto-created. This was masking valid
bugs, and was confusing to have the superclass have different semantics to the
baseclass.
2022-11-29 09:05:16 +00:00
Richard Hughes
ae8e553cb2 Abstract out the polkit auth implementation 2022-11-29 09:04:09 +00:00
Demi Marie Obenour
ff1f3677d9 Drop sys-usb support
sys-usb will use the Qubes OS updates proxy and an in-VM fwupd instance.
This allows shedding a large amount of code.
2022-11-29 09:03:08 +00:00
Demi Marie Obenour
0bbdc8a0b6 Prevent exception when comparing invalid versions
This broke the test suite.
2022-11-29 09:03:08 +00:00
Demi Marie Obenour
1836433efc Pass -q and -a to qvm-run
Useful to avoid junk in e.g. stderr.
2022-11-29 09:03:08 +00:00
Demi Marie Obenour
49fa741fcf trivial: contrib/qubes: fix AttributeError and ImportError
Also make various minor cleanups.
2022-11-29 09:03:08 +00:00
Demi Marie Obenour
63903c82d9 contrib/qubes: Do not dynamically create shell commands
The security reasons for this are obvious.  When shell commands must be
generated dynamically, use shlex.join() to ensure that proper quoting is
done.
2022-11-29 09:03:08 +00:00
Demi Marie Obenour
cb8c163462 trivial: contrib/qubes: Use fwupdmgr --json instead of fwupdagent
The later is deprecated and the former is a drop-in replacement.
2022-11-29 09:03:08 +00:00
Demi Marie Obenour
4110e356bf contrib/qubes: Do not perform manual .cab verification
fwupd already does this, and besides the file has been checked against
the metadata already.
2022-11-29 09:03:08 +00:00
Demi Marie Obenour
3150f04acf trivial: contrib/qubes: Place cache in /var/cache
/root/.cache is for applications run by the root user in an interactive
session, not for system services.
2022-11-29 09:03:08 +00:00
Richard Hughes
ef6536a424 Incorporate the device when merging in properties for GetDetails 2022-11-29 09:02:13 +00:00
Richard Hughes
40d02f3ae1 Add fwupd_release_incorporate() for future usage 2022-11-29 09:01:58 +00:00
Richard Hughes
3bf53fe35b intel-usb4: Ensure the device name is set with FuUsbDevice->setup 2022-11-29 09:01:29 +00:00
dx
30a726faee
elantp: Include 04F3:0400 (bootloader) as a valid i2c-hid touchpad (#5283)
* elantp: Include 04F3:0400 (bootloader) as a valid i2c-hid touchpad

ELAN Touchpads with product ids between 0x3000 and 0x4000 can sometimes
end up in bootloader mode (due to not having a valid firmware, for
example)

The bootloader has a product id outside of the range checked by
fu_elantp_hid_device_probe, resulting in the device disappearing from
get-devices when it's in that mode, which makes it seem dead.

This expands the range of that check to include 0x400 so that it is
possible to upload a valid firmware to it.
2022-11-28 13:37:42 +00:00
Richard Hughes
85495b5bb2 Generate OVAL rules 2022-11-24 10:22:27 +00:00
Daniel Schaefer
8b94080ca0 goodix-moc: Add quirk for 609C used on Framework
Framework Laptops use this device.

Output from `fwupdtool get-devices`:

```
├─Fingerprint Sensor:
│     Device ID:          4295296d98b3ba38c72f6baa33d24f03a1d428f6
│     Summary:            Match-On-Chip fingerprint sensor
│     Current version:    01000252
│     Vendor:             Goodix (USB:0x27C6)
│     Install Duration:   10 seconds
│     Serial Number:      UID2E43190D_XXXX_MOC_B0
│     GUIDs:              1e8c8470-a49c-571a-82fd-19c9fa32b8c3 ← USB\VID_27C6&PID_609C
│                         34def4c7-9461-5a32-a945-5dde0ca57d88 ← USB\VID_27C6&PID_609C&REV_0100
│     Device Flags:       • Updatable
│                         • Device can recover flash failures
│                         • Signed Payload
```

Signed-off-by: Daniel Schaefer <dhs@frame.work>
2022-11-23 09:21:14 +00:00
Richard Hughes
e02a094ca3 trivial: Fix memory leak when incorporating FuMeiDevice 2022-11-19 12:59:30 +00:00
Richard Hughes
fd7bec2e2f trivial: Fix a tiny leak when translating the security attr 2022-11-19 12:59:30 +00:00
Mario Limonciello
5b44de228e Add BIOS rollback protection support for Dell systems 2022-11-18 14:28:13 +00:00
Mario Limonciello
61cf08ef50 Add BIOS rollback protection support for Lenovo systems 2022-11-18 14:28:13 +00:00
Mario Limonciello
5d25661727 Add security attribute for OEM specific implementations of BIOS rollback protection 2022-11-18 14:28:13 +00:00
Mario Limonciello
daac8b31da Move AMD platform rollback protection into level 4
This was expected to be used more prevalently than it is being used
in practice.

Link: https://github.com/fwupd/fwupd/issues/5261
2022-11-18 14:28:13 +00:00
Vincent Huang
540043ffa2 synaptics-rmi: show correct bootloader version on V5 and V6 device 2022-11-18 08:03:54 +00:00
Vincent Huang
a66c4ccbd5 synaptics-rmi: Fix the issue when updating non-secure devices 2022-11-18 08:03:54 +00:00
Sanjay Sheth
8e32b6a353 New plugin for Logitech Whiteboard camera 2022-11-17 16:42:04 +00:00
Jan Tojnar
716f41b7b2 build: Do not check markdown version for gi-docgen 2022
There is no guarantee that Python environment used for the build contains
the same `markdown` version as the one used for running `gi-docgen`.
For example, Nixpkgs uses a self-contained Python environment for the latter,
so `markdown` package is not even available in fwupd build environment.
Fortunately, gi-docgen 2022.2 already checks for `markdown` version
so we can omit our own check for newer gi-docgen versions.
2022-11-16 12:32:57 -06:00
Kevin Chen
a447fca101 qsi-dock: Create a new plugin to update docks from QSI 2022-11-11 07:58:35 +00:00
Richard Hughes
14ef2d17c6 trivial: Fix the tests on s390x 2022-11-10 12:22:45 +00:00
Richard Hughes
f445181580 dfu-csr: Fix a critical warning when deploying firmware
The last chunk of data has zero size, and so never copy from a NULL source.

Fixes https://github.com/fwupd/fwupd/issues/5251
2022-11-10 12:10:41 +00:00
Richard Hughes
73a63b89a0 trivial: Fix lvfs-testing remote file 2022-11-09 16:41:10 +00:00
Richard Hughes
159f7883db trivial: post release version bump 2022-11-09 14:19:58 +00:00
Richard Hughes
ebb6237e97 Release fwupd 1.8.7 2022-11-09 14:12:27 +00:00
Richard Hughes
72a84c5977 trivial: Fix capsule image generation for broken locales 2022-11-09 14:02:39 +00:00
Vitaly Lubart
f385762242 igsc: Fix README.md
Intel Arc products do not require the host CSME to update Arc firmware.
Firmware updates will work on both AMD and Intel platforms.
Arc products have their own Graphics Security Control for firmware updates and
leverage existing Intel technology like the MEI interface protocol to implement
the firmware update flow.

Signed-off-by: Vitaly Lubart <vitaly.lubart@intel.com>
2022-11-08 14:46:05 +00:00
jinglewu
f93f5ebffa
elantp: Add support for more haptic hardware
Support ic_type 0x12 & 0x13, iap_ver 0x3 & 0x5 iap flow.
2022-11-08 11:32:56 +00:00
Richard Hughes
be8fb81103 elantp: Use fu_device_retry_full() to avoid a Coverity warning 2022-11-07 14:19:20 +00:00
chenhong
58090ffc29 Add Goodix GF3258WNC support 2022-11-07 09:18:32 +00:00
Richard Hughes
4c75d9a7dc Add more EFI keys to the integrity check list 2022-11-04 13:46:06 +00:00
Richard Hughes
c79e14d63d Flip around the FuDeviceInstanceFlags logic
Opt-ing 'in' to each both behaviours requires less mental gymnastics compared
to having one flag inverted.
2022-11-04 13:44:23 +00:00
Richard Hughes
32e3241578 Do not add duplicate quirk instance IDs
It's pointless, and just wastes RSS.
2022-11-04 13:44:23 +00:00
Kai Michaelis
6519f28d26
Explain the smc bmc license issue
Add documentation and a helper license script.
2022-11-04 12:55:48 +00:00
Richard Hughes
26e1b7c49b Never hang in g_udev_device_get_parent() if there is never a busnum
Spotted by Coverity.
2022-11-03 23:51:00 -05:00
Richard Hughes
44f816e1c6 trivial: Fix invalid self test loop
Spotted by Coverity.
2022-11-03 23:51:00 -05:00
Aaron Armstrong Skomra
6bc1ecd615 wacom-usb: remove the use-runtime-version flag from IPS
The use-runtime-version flag was initially used with the Intuos
Pro Small (2nd-gen USB v2) to force the use of the legacy code
path. The legacy code path was required because of a bug in the
identification of the Bluetooth (I6) firmware.

It has been decided that the bug will be fixed before any fimware
changes are released, removing the need to use the legacy code path.
2022-11-03 23:26:30 -05:00
Richard Hughes
05e75fd87a analogix: Fix potential division by zero when writing 2022-11-03 18:18:34 +00:00