flatpak/polkit_rules_usability.patch
Dominique Leuenberger 22771ae9f1 - Added p11-kit-server to fix boo#1221557
After OBS Studio flatpak updating to KDE Runtime 6.6 it was revealed that it no longer could verify SSL certificates. The root cause turned out to be a missing p11-kit-server which on most distributions is installed as recommended along side flatpak (see Fedora).

With this little addition I hope to fix random SSL errors for KDE Runtime 6.6 and newer also for openSUSE Tumbleweed.

As a side note Leap is affected as well by this. Might be worth back porting this patch?
- As per documentation from flatpak 1.0: add weak dep on
  p11-kit-server for certificate transfer (boo#1188902)

OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=202
2024-08-08 12:38:47 +00:00

17 lines
1021 B
Diff

Index: flatpak-0.11.8.3/system-helper/org.freedesktop.Flatpak.rules.in
===================================================================
--- flatpak-0.11.8.3.orig/system-helper/org.freedesktop.Flatpak.rules.in
+++ flatpak-0.11.8.3/system-helper/org.freedesktop.Flatpak.rules.in
@@ -3,7 +3,10 @@ polkit.addRule(function(action, subject)
action.id == "org.freedesktop.Flatpak.runtime-install"||
action.id == "org.freedesktop.Flatpak.app-uninstall" ||
action.id == "org.freedesktop.Flatpak.runtime-uninstall" ||
- action.id == "org.freedesktop.Flatpak.modify-repo") &&
+ action.id == "org.freedesktop.Flatpak.modify-repo" ||
+ action.id == "org.freedesktop.Flatpak.app-update" ||
+ action.id == "org.freedesktop.Flatpak.runtime-update" ||
+ action.id == "org.freedesktop.Flatpak.appstream-update") &&
subject.active == true && subject.local == true &&
subject.isInGroup("@privileged_group@")) {
return polkit.Result.YES;