From 39590e756db878c05ce40d3a624443853ae6670e60a31c683e5ad01717b42fa4 Mon Sep 17 00:00:00 2001
From: Richard Brown <rbrown@suse.com>
Date: Mon, 25 Sep 2023 09:07:26 +0000
Subject: [PATCH] - Tune up polkit/sudo drop in permissions,
 require/buildrequire   sudo/polkit to avoid needing to own their drop-in
 folders

OBS-URL: https://build.opensuse.org/package/show/devel:microos:aeon/gnome-branding-Aeon?expand=0&rev=12
---
 gnome-branding-Aeon.changes |  6 ++++++
 gnome-branding-Aeon.spec    | 10 ++++++----
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/gnome-branding-Aeon.changes b/gnome-branding-Aeon.changes
index ad8c4fb..77420f8 100644
--- a/gnome-branding-Aeon.changes
+++ b/gnome-branding-Aeon.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Sep 25 09:06:27 UTC 2023 - Richard Brown <rbrown@suse.com>
+
+- Tune up polkit/sudo drop in permissions, require/buildrequire
+  sudo/polkit to avoid needing to own their drop-in folders
+
 -------------------------------------------------------------------
 Thu Sep  7 11:40:52 UTC 2023 - Richard Brown <rbrown@suse.com>
 
diff --git a/gnome-branding-Aeon.spec b/gnome-branding-Aeon.spec
index 092a5cb..1128483 100644
--- a/gnome-branding-Aeon.spec
+++ b/gnome-branding-Aeon.spec
@@ -39,6 +39,10 @@ BuildRequires:  flatpak
 BuildRequires:  gio-branding-openSUSE
 BuildRequires:  transactional-update
 BuildRequires:  systemd-rpm-macros
+BuildRequires:  sudo
+BuildRequires:  polkit
+Requires:       polkit
+Requires:       sudo
 Requires:       flatpak
 Requires:       gio-branding-openSUSE
 Requires:       sound-theme-freedesktop
@@ -87,11 +91,11 @@ install -d %{buildroot}%{_userunitdir}
 install -m0644 distrobox-upgrade-all.service %{buildroot}%{_userunitdir}/distrobox-upgrade-all.service
 install -m0644 distrobox-upgrade-all.timer %{buildroot}%{_userunitdir}/distrobox-upgrade-all.timer
 install -d %{buildroot}%{_sysconfdir}/sudoers.d/
-install -m0644 50-aeon %{buildroot}%{_sysconfdir}/sudoers.d/50-aeon
+install -m0640 50-aeon %{buildroot}%{_sysconfdir}/sudoers.d/50-aeon
 install -d %{buildroot}%{_datadir}/gnome-background-properties
 install -m0644 wallpaper-branding-Aeon.xml %{buildroot}%{_datadir}/gnome-background-properties/wallpaper-branding-Aeon.xml
 install -d %{buildroot}%{_datadir}/polkit-1/rules.d/
-install -m0644 49-aeon.rules %{buildroot}%{_datadir}/polkit-1/rules.d/49-aeon.rules
+install -m0444 49-aeon.rules %{buildroot}%{_datadir}/polkit-1/rules.d/49-aeon.rules
 
 %pre
 %systemd_user_pre distrobox-upgrade-all.service
@@ -122,11 +126,9 @@ install -m0644 49-aeon.rules %{buildroot}%{_datadir}/polkit-1/rules.d/49-aeon.ru
 %{_datadir}/wallpapers/aeonwallpaper.png
 %{_userunitdir}/distrobox-upgrade-all.service
 %{_userunitdir}/distrobox-upgrade-all.timer
-%dir %{_sysconfdir}/sudoers.d
 %{_sysconfdir}/sudoers.d/50-aeon
 %dir %{_datadir}/gnome-background-properties
 %{_datadir}/gnome-background-properties/wallpaper-branding-Aeon.xml
-%dir %{_datadir}/polkit-1/rules.d
 %{_datadir}/polkit-1/rules.d/49-aeon.rules
 
 %changelog