Accepting request 624834 from home:mgerstner:branches:GNOME:Factory

- polkit_rules_usability.patch: Improve usability by allowing members of the
  group 'wheel' to bypass polkit authentication checks when locally logged in
  (bnc#984817). This adds a few polkit actions to the rules that are not
  covered by upstream, because they are set to 'yes' for active users by
  default. On SUSE we require 'auth_admin' for regular users, however.

OBS-URL: https://build.opensuse.org/request/show/624834
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=53
This commit is contained in:
Bjørn Lie 2018-07-28 10:59:58 +00:00 committed by Git OBS Bridge
parent 560dbb27e4
commit 7d1d4dc93a
3 changed files with 27 additions and 0 deletions

View File

@ -1,3 +1,12 @@
-------------------------------------------------------------------
Mon Jul 23 15:13:44 UTC 2018 - matthias.gerstner@suse.com
- polkit_rules_usability.patch: Improve usability by allowing members of the
group 'wheel' to bypass polkit authentication checks when locally logged in
(bnc#984817). This adds a few polkit actions to the rules that are not
covered by upstream, because they are set to 'yes' for active users by
default. On SUSE we require 'auth_admin' for regular users, however.
-------------------------------------------------------------------
Fri Jun 15 03:24:22 UTC 2018 - luc14n0@linuxmail.org

View File

@ -25,6 +25,7 @@ License: LGPL-2.1-or-later
Group: System/Packages
URL: https://flatpak.github.io/
Source: %{name}-%{version}.tar.xz
Patch0: polkit_rules_usability.patch
BuildRequires: bison
BuildRequires: bubblewrap >= 0.2.1
BuildRequires: docbook-xsl-stylesheets
@ -112,6 +113,7 @@ more information.
%prep
%setup -q
%patch0 -p1
%build
NOCONFIGURE=1 ./autogen.sh

View File

@ -0,0 +1,16 @@
Index: flatpak-0.11.8.3/system-helper/org.freedesktop.Flatpak.rules.in
===================================================================
--- flatpak-0.11.8.3.orig/system-helper/org.freedesktop.Flatpak.rules.in
+++ flatpak-0.11.8.3/system-helper/org.freedesktop.Flatpak.rules.in
@@ -3,7 +3,10 @@ polkit.addRule(function(action, subject)
action.id == "org.freedesktop.Flatpak.runtime-install"||
action.id == "org.freedesktop.Flatpak.app-uninstall" ||
action.id == "org.freedesktop.Flatpak.runtime-uninstall" ||
- action.id == "org.freedesktop.Flatpak.modify-repo") &&
+ action.id == "org.freedesktop.Flatpak.modify-repo" ||
+ action.id == "org.freedesktop.Flatpak.app-update" ||
+ action.id == "org.freedesktop.Flatpak.runtime-update" ||
+ action.id == "org.freedesktop.Flatpak.appstream-update") &&
subject.active == true && subject.local == true &&
subject.isInGroup("@privileged_group@")) {
return polkit.Result.YES;