Commit Graph

553 Commits

Author SHA256 Message Date
26afbea6f4 Accepting request 978892 from home:wfrisch:branches:Base:System
- Update to version 1550+20220524.0345bd9:
  * Add kinfocenter5 whitelisting (bsc#1199735).
  * gconf: cleanup rules used by dropped gconf2 package

OBS-URL: https://build.opensuse.org/request/show/978892
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=454
2022-05-24 09:18:25 +00:00
Dominique Leuenberger
f740afb1d4 Accepting request 966817 from Base:System
OBS-URL: https://build.opensuse.org/request/show/966817
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=213
2022-04-04 13:23:24 +00:00
88fb7348c8 Accepting request 966815 from home:fbonazzi:branches:openSUSE:Factory
- Update to version 1550+20220404.7b4bea2:
  * Add whitelisting to restrictive profile as well
  * Add budgie-control-center whitelisting (bsc#1195023)

OBS-URL: https://build.opensuse.org/request/show/966815
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=452
2022-04-04 13:05:43 +00:00
Dominique Leuenberger
694fc8029b Accepting request 966384 from Base:System
- Update to version 1550+20220401.41ccb1d:
  * usbguard: relax read-only operations to yes

OBS-URL: https://build.opensuse.org/request/show/966384
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=212
2022-04-01 19:35:32 +00:00
Matthias Gerstner
5530a153d4 - Update to version 1550+20220401.41ccb1d:
* usbguard: relax read-only operations to yes

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=450
2022-04-01 09:51:21 +00:00
Dominique Leuenberger
47931d51e0 Accepting request 964852 from Base:System
- Update to version 1550+20220325.163dbdf:
  * whitelisting: add usbguard actions (bsc#1196621)

- Update to version 1550+20220324.7f46822:
  * Fix generation of file /etc/polkit-1/rules.d/90-default-privs.rules

OBS-URL: https://build.opensuse.org/request/show/964852
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=211
2022-03-29 16:13:46 +00:00
Matthias Gerstner
5217c38747 - Update to version 1550+20220325.163dbdf:
* whitelisting: add usbguard actions (bsc#1196621)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=448
2022-03-25 12:27:04 +00:00
Matthias Gerstner
c7ea547465 - Update to version 1550+20220324.7f46822:
* Fix generation of file /etc/polkit-1/rules.d/90-default-privs.rules

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=447
2022-03-24 10:11:12 +00:00
Dominique Leuenberger
3302dfc22f Accepting request 959235 from Base:System
- Update to version 1550+20220303.95a78fb:
  * kpmcore: whitelist block device (re-)partioning helper (bsc#1178848)

OBS-URL: https://build.opensuse.org/request/show/959235
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=210
2022-03-05 13:43:10 +00:00
Matthias Gerstner
8179b734be - Update to version 1550+20220303.95a78fb:
* kpmcore: whitelist block device (re-)partioning helper (bsc#1178848)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=445
2022-03-03 14:13:13 +00:00
Dominique Leuenberger
80f8b91a1d Accepting request 957545 from Base:System
- Update to version 1550+20220225.330e064:
  * Whitelist Kcron (bsc#1193945)
  * deepin-api: drop manage-locale action that is not package on openSUSE
  * udisks2: remove manage-vdo action

OBS-URL: https://build.opensuse.org/request/show/957545
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=209
2022-02-26 16:01:44 +00:00
Matthias Gerstner
643d334305 - Update to version 1550+20220225.330e064:
* Whitelist Kcron (bsc#1193945)
  * deepin-api: drop manage-locale action that is not package on openSUSE
  * udisks2: remove manage-vdo action

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=444
2022-02-25 09:35:44 +00:00
Dominique Leuenberger
264bd0960e Accepting request 940529 from Base:System
- Update to version 1550+20211214.daf2765:
  * fwupd: tighten the downgrade rules (bsc#1193310)

OBS-URL: https://build.opensuse.org/request/show/940529
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=208
2021-12-18 19:29:57 +00:00
Wolfgang Frisch
0aed6295e8 - Update to version 1550+20211214.daf2765:
* fwupd: tighten the downgrade rules (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=443
2021-12-14 16:49:42 +00:00
Wolfgang Frisch
96f50b8873 - Update to version 1550+20211214.daf2765:
* fwupd: tighten the downgrade rules (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=442
2021-12-14 16:47:28 +00:00
Dominique Leuenberger
dd3b6cd3e0 Accepting request 938268 from Base:System
- Update to version 1550+20211209.8ce206c:
  * fwupd: whitelist new, more granular permissions (bsc#1193310)

OBS-URL: https://build.opensuse.org/request/show/938268
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=207
2021-12-12 20:27:29 +00:00
Wolfgang Frisch
2a78da5276 - Update to version 1550+20211209.8ce206c:
* fwupd: whitelist new, more granular permissions (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=441
2021-12-09 19:53:21 +00:00
Wolfgang Frisch
fd8a6a58db Update to version 1550+20211008.9751669:
- fwupd: whitelist new, more granular permissions (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=440
2021-12-09 19:44:33 +00:00
Dominique Leuenberger
05844386e9 Accepting request 932545 from Base:System
- Change Requires: polkit to Requires(pre): we need to be sure
  polkit is instaled first, as we could otherwise end up with wrong
  permissions on /etc/polkit-1/rules.d.

- remove traces of old polkit-whitelisting sub-package

OBS-URL: https://build.opensuse.org/request/show/932545
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=206
2021-11-22 22:03:48 +00:00
Dominique Leuenberger
de7b3c6ea4 - Change Requires: polkit to Requires(pre): we need to be sure
polkit is instaled first, as we could otherwise end up with wrong
  permissions on /etc/polkit-1/rules.d.

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=439
2021-11-19 13:59:26 +00:00
Matthias Gerstner
f8e4bbce3b explicitly own polkit dirs, otherwise build complains about unowned dirs
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=438
2021-11-19 09:52:44 +00:00
Matthias Gerstner
e94016e3b8 - remove traces of old polkit-whitelisting sub-package
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=437
2021-11-19 09:43:56 +00:00
Matthias Gerstner
9622f45939 Accepting request 932422 from home:dimstar:Factory
- Do not BuildRequire and Require polkit: technically, this is not
  required at all. In plus, it helps us a great deal in bootstrap
  scenarios, as polkit-default-privs is used by rpmlint, and thus
  pulled into every single buildroot.

OBS-URL: https://build.opensuse.org/request/show/932422
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=436
2021-11-19 09:42:50 +00:00
Dominique Leuenberger
2dbc4b6d48 Accepting request 924174 from Base:System
- drop backward compatibility symlink in /etc/polkit-default-privs.standard.
  rpmlint 2.0 is now in Factory and the check there directly uses the profile
  in /usr/etc/polkit-default-privs/profiles/standard.
- drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0
  internally.

- Update to version 1550+20211008.9751669:
  * whitelist power-profiles-daemon actions (bsc#1189900)
  * cleanup: remove polkit-rules-whitelist.json

OBS-URL: https://build.opensuse.org/request/show/924174
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=205
2021-10-11 14:48:41 +00:00
Matthias Gerstner
ba32a266f2 - drop backward compatibility symlink in /etc/polkit-default-privs.standard.
rpmlint 2.0 is now in Factory and the check there directly uses the profile
  in /usr/etc/polkit-default-privs/profiles/standard.
- drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0
  internally.

- Update to version 1550+20211008.9751669:
  * whitelist power-profiles-daemon actions (bsc#1189900)
  * cleanup: remove polkit-rules-whitelist.json

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=435
2021-10-08 09:30:17 +00:00
Dominique Leuenberger
30968ae65f Accepting request 912905 from Base:System
- Update to version 1550+20210818.b0c41fd:
  * whitelist deepin-api service actions (bsc#1070943)

OBS-URL: https://build.opensuse.org/request/show/912905
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=204
2021-08-25 18:55:55 +00:00
Matthias Gerstner
35a6727a04 - Update to version 1550+20210818.b0c41fd:
* whitelist deepin-api service actions (bsc#1070943)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=434
2021-08-18 13:08:15 +00:00
Richard Brown
20b8ecd673 Accepting request 911976 from Base:System
- Update to version 1550+20210813.ce0df56:
  * malcontent: loosen restrictive ReadOwn actions to prevent spurious auth requests (#56)

OBS-URL: https://build.opensuse.org/request/show/911976
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=203
2021-08-16 08:08:29 +00:00
Matthias Gerstner
5fbd8e486f - Update to version 1550+20210813.ce0df56:
* malcontent: loosen restrictive ReadOwn actions to prevent spurious auth requests (#56)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=433
2021-08-13 11:48:10 +00:00
Dominique Leuenberger
779319a36c Accepting request 907891 from Base:System
OBS-URL: https://build.opensuse.org/request/show/907891
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=202
2021-07-26 15:37:53 +00:00
Johannes Segitz
8a3b918293 Accepting request 907887 from home:mgerstner:branches:Base:System
- Update to version 1550+20210722.ae1891d:
  * whitelist zypp-gui action (bsc#1188364)
  * introduce sub-directories for profiles in both /etc and /usr/etc
  * remove polkit-default-privs.d package specific directory
  * Moving polkit-default-privs.easy, polkit-default-privs.local and polkit-default-privs.restrictive from /etc /to /usr/etc directory

OBS-URL: https://build.opensuse.org/request/show/907887
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=432
2021-07-23 08:24:47 +00:00
Dominique Leuenberger
72357ee54a Accepting request 906457 from Base:System
- Update to version 1550+20210715.b7d5b97:
  * kdenetwork-filesharing: tighten the restrictive profile

- Update to version 1550+20210714.9c51c0e:
  * 50-default.rules: move to /usr (contents unchanged)
  See also: https://build.opensuse.org/request/show/905083

OBS-URL: https://build.opensuse.org/request/show/906457
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=201
2021-07-18 21:45:01 +00:00
Wolfgang Frisch
178b3f6413 - Update to version 1550+20210715.b7d5b97:
* kdenetwork-filesharing: tighten the restrictive profile

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=431
2021-07-15 11:22:48 +00:00
Wolfgang Frisch
50e04dbd86 See also: https://build.opensuse.org/request/show/905083
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=430
2021-07-14 09:41:25 +00:00
Wolfgang Frisch
72e8b371a1 - Update to version 1550+20210714.9c51c0e:
* 50-default.rules: move to /usr (contents unchanged)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=429
2021-07-14 09:40:21 +00:00
Dominique Leuenberger
0aea2505b5 Accepting request 904755 from Base:System
- Update to version 1550+20210708.6401347:
  * fprint.device.enroll: keep restrictive profile in sync with upstream

- Update to version 1550+20210708.c4d6bf4:
  * kdenetwork-filesharing: align with upstream (#49)

- Update to version 1550+20210701.3047fcb:
  * ModemManager1.USSD: fix inconsistencies in standard and easy profiles
  * powerdevil.discretegpuhelper.hasdualgpu: align with upstream settings
  * cupspkhelper.mechanism.job-edit: align with upstream setting
  * org.fedoraproject.FirewallD1.info: don't be more restrictive than the 'standard' profile
  * remove org.selinux.* (policycoreutils) since they no longer exist in Factory
  * remove cinnamon.controlcenter.datetime.configure: no longer packaged
  * net.connman.vpn.secret: fix invalid label "auth_admin_keep_session"

OBS-URL: https://build.opensuse.org/request/show/904755
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=200
2021-07-11 23:24:44 +00:00
Wolfgang Frisch
b51b77541b - Update to version 1550+20210708.6401347:
* fprint.device.enroll: keep restrictive profile in sync with upstream

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=428
2021-07-08 11:50:33 +00:00
Wolfgang Frisch
ab967cfca3 - Update to version 1550+20210708.c4d6bf4:
* kdenetwork-filesharing: align with upstream (#49)

- Update to version 1550+20210701.3047fcb:
  * ModemManager1.USSD: fix inconsistencies in standard and easy profiles
  * powerdevil.discretegpuhelper.hasdualgpu: align with upstream settings
  * cupspkhelper.mechanism.job-edit: align with upstream setting
  * org.fedoraproject.FirewallD1.info: don't be more restrictive than the 'standard' profile
  * remove org.selinux.* (policycoreutils) since they no longer exist in Factory
  * remove cinnamon.controlcenter.datetime.configure: no longer packaged
  * net.connman.vpn.secret: fix invalid label "auth_admin_keep_session"

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=427
2021-07-08 11:43:00 +00:00
Dominique Leuenberger
755a1d3e65 Accepting request 900117 from Base:System
- Update to version 1550+20210615.e149f78:
  * profiles: cinnamon-settings-daemon (bsc#1186845)

- Update to version 1550+20210610.25c9b98:
  * Whitelist setroubleshoot (boo#1186344)

OBS-URL: https://build.opensuse.org/request/show/900117
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=199
2021-06-18 08:13:12 +00:00
Wolfgang Frisch
60f2490b04 - Update to version 1550+20210615.e149f78:
* profiles: cinnamon-settings-daemon (bsc#1186845)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=425
2021-06-15 09:34:10 +00:00
Wolfgang Frisch
bbee569c09 Accepting request 898984 from home:jsegitz:branches:Base:System
- Update to version 1550+20210610.25c9b98:
  * Whitelist setroubleshoot (boo#1186344)

OBS-URL: https://build.opensuse.org/request/show/898984
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=424
2021-06-10 09:18:16 +00:00
Dominique Leuenberger
fdc6c4a7ec Accepting request 895291 from Base:System
- Update to version 1550+20210520.336dcea:
  * whitelist incremental libvirt org.libvirt.api.node-device.delete (bsc#1186270)

OBS-URL: https://build.opensuse.org/request/show/895291
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=198
2021-06-01 08:32:55 +00:00
Dominique Leuenberger
2a74a90699 Accepting request 893792 from Base:System
- Update to version 1550+20210517.56da22d:
  * Add systemd homed (boo#1185285) (forwarded request 893791 from pperego)

OBS-URL: https://build.opensuse.org/request/show/893792
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=197
2021-05-21 19:49:43 +00:00
Matthias Gerstner
d7a82af453 - Update to version 1550+20210520.336dcea:
* whitelist incremental libvirt org.libvirt.api.node-device.delete (bsc#1186270)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=421
2021-05-20 14:11:47 +00:00
Wolfgang Frisch
655bbbcfe4 Accepting request 893791 from home:pperego:branches:Base:System
- Update to version 1550+20210517.56da22d:
  * Add systemd homed (boo#1185285)

OBS-URL: https://build.opensuse.org/request/show/893791
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=420
2021-05-17 15:34:17 +00:00
Dominique Leuenberger
e554b08743 Accepting request 890018 from Base:System
- Update to version 1550+20210503.88baaca:
  * whitelist deepin-system-monitor pkexec actions (bsc#1181886)

OBS-URL: https://build.opensuse.org/request/show/890018
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=196
2021-05-10 13:36:11 +00:00
Matthias Gerstner
bd1ef15bc5 - Update to version 1550+20210503.88baaca:
* whitelist deepin-system-monitor pkexec actions (bsc#1181886)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=418
2021-05-03 11:17:06 +00:00
Dominique Leuenberger
1a3c83a934 Accepting request 889562 from Base:System
- Update to version 1550+20210430.c408cda:
  * systemd: add newly added inhibit-handle-reboot-key action (bsc#1185468)
  * whitelist non-functional change in systemd-networkd rules (bsc#1185469)

- Update to version 1550+20210429.a605b7d:
  * tuned: whitelist incrementally added polkit action (bsc#1185418)

OBS-URL: https://build.opensuse.org/request/show/889562
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit-default-privs?expand=0&rev=195
2021-04-30 22:46:26 +00:00
Matthias Gerstner
53e94dc0ee - Update to version 1550+20210430.c408cda:
* systemd: add newly added inhibit-handle-reboot-key action (bsc#1185468)
  * whitelist non-functional change in systemd-networkd rules (bsc#1185469)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=416
2021-04-30 13:26:07 +00:00
Matthias Gerstner
667cf93f85 - Update to version 1550+20210429.a605b7d:
* tuned: whitelist incrementally added polkit action (bsc#1185418)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=415
2021-04-29 10:30:55 +00:00