Commit Graph

311 Commits

Author SHA256 Message Date
046499ba6c Accepting request 981338 from home:wfrisch:branches:Base:System
- Update to version 1550+20220608.097448e:
  * Whitelist new systemd methods (bsc#1200098)

OBS-URL: https://build.opensuse.org/request/show/981338
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=456
2022-06-08 14:53:45 +00:00
26afbea6f4 Accepting request 978892 from home:wfrisch:branches:Base:System
- Update to version 1550+20220524.0345bd9:
  * Add kinfocenter5 whitelisting (bsc#1199735).
  * gconf: cleanup rules used by dropped gconf2 package

OBS-URL: https://build.opensuse.org/request/show/978892
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=454
2022-05-24 09:18:25 +00:00
88fb7348c8 Accepting request 966815 from home:fbonazzi:branches:openSUSE:Factory
- Update to version 1550+20220404.7b4bea2:
  * Add whitelisting to restrictive profile as well
  * Add budgie-control-center whitelisting (bsc#1195023)

OBS-URL: https://build.opensuse.org/request/show/966815
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=452
2022-04-04 13:05:43 +00:00
Matthias Gerstner
5530a153d4 - Update to version 1550+20220401.41ccb1d:
* usbguard: relax read-only operations to yes

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=450
2022-04-01 09:51:21 +00:00
Matthias Gerstner
5217c38747 - Update to version 1550+20220325.163dbdf:
* whitelisting: add usbguard actions (bsc#1196621)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=448
2022-03-25 12:27:04 +00:00
Matthias Gerstner
c7ea547465 - Update to version 1550+20220324.7f46822:
* Fix generation of file /etc/polkit-1/rules.d/90-default-privs.rules

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=447
2022-03-24 10:11:12 +00:00
Matthias Gerstner
8179b734be - Update to version 1550+20220303.95a78fb:
* kpmcore: whitelist block device (re-)partioning helper (bsc#1178848)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=445
2022-03-03 14:13:13 +00:00
Matthias Gerstner
643d334305 - Update to version 1550+20220225.330e064:
* Whitelist Kcron (bsc#1193945)
  * deepin-api: drop manage-locale action that is not package on openSUSE
  * udisks2: remove manage-vdo action

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=444
2022-02-25 09:35:44 +00:00
Wolfgang Frisch
0aed6295e8 - Update to version 1550+20211214.daf2765:
* fwupd: tighten the downgrade rules (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=443
2021-12-14 16:49:42 +00:00
Wolfgang Frisch
96f50b8873 - Update to version 1550+20211214.daf2765:
* fwupd: tighten the downgrade rules (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=442
2021-12-14 16:47:28 +00:00
Wolfgang Frisch
2a78da5276 - Update to version 1550+20211209.8ce206c:
* fwupd: whitelist new, more granular permissions (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=441
2021-12-09 19:53:21 +00:00
Wolfgang Frisch
fd8a6a58db Update to version 1550+20211008.9751669:
- fwupd: whitelist new, more granular permissions (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=440
2021-12-09 19:44:33 +00:00
Dominique Leuenberger
de7b3c6ea4 - Change Requires: polkit to Requires(pre): we need to be sure
polkit is instaled first, as we could otherwise end up with wrong
  permissions on /etc/polkit-1/rules.d.

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=439
2021-11-19 13:59:26 +00:00
Matthias Gerstner
f8e4bbce3b explicitly own polkit dirs, otherwise build complains about unowned dirs
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=438
2021-11-19 09:52:44 +00:00
Matthias Gerstner
e94016e3b8 - remove traces of old polkit-whitelisting sub-package
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=437
2021-11-19 09:43:56 +00:00
Matthias Gerstner
9622f45939 Accepting request 932422 from home:dimstar:Factory
- Do not BuildRequire and Require polkit: technically, this is not
  required at all. In plus, it helps us a great deal in bootstrap
  scenarios, as polkit-default-privs is used by rpmlint, and thus
  pulled into every single buildroot.

OBS-URL: https://build.opensuse.org/request/show/932422
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=436
2021-11-19 09:42:50 +00:00
Matthias Gerstner
ba32a266f2 - drop backward compatibility symlink in /etc/polkit-default-privs.standard.
rpmlint 2.0 is now in Factory and the check there directly uses the profile
  in /usr/etc/polkit-default-privs/profiles/standard.
- drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0
  internally.

- Update to version 1550+20211008.9751669:
  * whitelist power-profiles-daemon actions (bsc#1189900)
  * cleanup: remove polkit-rules-whitelist.json

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=435
2021-10-08 09:30:17 +00:00
Matthias Gerstner
35a6727a04 - Update to version 1550+20210818.b0c41fd:
* whitelist deepin-api service actions (bsc#1070943)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=434
2021-08-18 13:08:15 +00:00
Matthias Gerstner
5fbd8e486f - Update to version 1550+20210813.ce0df56:
* malcontent: loosen restrictive ReadOwn actions to prevent spurious auth requests (#56)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=433
2021-08-13 11:48:10 +00:00
Johannes Segitz
8a3b918293 Accepting request 907887 from home:mgerstner:branches:Base:System
- Update to version 1550+20210722.ae1891d:
  * whitelist zypp-gui action (bsc#1188364)
  * introduce sub-directories for profiles in both /etc and /usr/etc
  * remove polkit-default-privs.d package specific directory
  * Moving polkit-default-privs.easy, polkit-default-privs.local and polkit-default-privs.restrictive from /etc /to /usr/etc directory

OBS-URL: https://build.opensuse.org/request/show/907887
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=432
2021-07-23 08:24:47 +00:00
Wolfgang Frisch
178b3f6413 - Update to version 1550+20210715.b7d5b97:
* kdenetwork-filesharing: tighten the restrictive profile

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=431
2021-07-15 11:22:48 +00:00
Wolfgang Frisch
50e04dbd86 See also: https://build.opensuse.org/request/show/905083
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=430
2021-07-14 09:41:25 +00:00
Wolfgang Frisch
72e8b371a1 - Update to version 1550+20210714.9c51c0e:
* 50-default.rules: move to /usr (contents unchanged)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=429
2021-07-14 09:40:21 +00:00
Wolfgang Frisch
b51b77541b - Update to version 1550+20210708.6401347:
* fprint.device.enroll: keep restrictive profile in sync with upstream

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=428
2021-07-08 11:50:33 +00:00
Wolfgang Frisch
ab967cfca3 - Update to version 1550+20210708.c4d6bf4:
* kdenetwork-filesharing: align with upstream (#49)

- Update to version 1550+20210701.3047fcb:
  * ModemManager1.USSD: fix inconsistencies in standard and easy profiles
  * powerdevil.discretegpuhelper.hasdualgpu: align with upstream settings
  * cupspkhelper.mechanism.job-edit: align with upstream setting
  * org.fedoraproject.FirewallD1.info: don't be more restrictive than the 'standard' profile
  * remove org.selinux.* (policycoreutils) since they no longer exist in Factory
  * remove cinnamon.controlcenter.datetime.configure: no longer packaged
  * net.connman.vpn.secret: fix invalid label "auth_admin_keep_session"

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=427
2021-07-08 11:43:00 +00:00
Wolfgang Frisch
60f2490b04 - Update to version 1550+20210615.e149f78:
* profiles: cinnamon-settings-daemon (bsc#1186845)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=425
2021-06-15 09:34:10 +00:00
Wolfgang Frisch
bbee569c09 Accepting request 898984 from home:jsegitz:branches:Base:System
- Update to version 1550+20210610.25c9b98:
  * Whitelist setroubleshoot (boo#1186344)

OBS-URL: https://build.opensuse.org/request/show/898984
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=424
2021-06-10 09:18:16 +00:00
Matthias Gerstner
d7a82af453 - Update to version 1550+20210520.336dcea:
* whitelist incremental libvirt org.libvirt.api.node-device.delete (bsc#1186270)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=421
2021-05-20 14:11:47 +00:00
Wolfgang Frisch
655bbbcfe4 Accepting request 893791 from home:pperego:branches:Base:System
- Update to version 1550+20210517.56da22d:
  * Add systemd homed (boo#1185285)

OBS-URL: https://build.opensuse.org/request/show/893791
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=420
2021-05-17 15:34:17 +00:00
Matthias Gerstner
bd1ef15bc5 - Update to version 1550+20210503.88baaca:
* whitelist deepin-system-monitor pkexec actions (bsc#1181886)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=418
2021-05-03 11:17:06 +00:00
Matthias Gerstner
53e94dc0ee - Update to version 1550+20210430.c408cda:
* systemd: add newly added inhibit-handle-reboot-key action (bsc#1185468)
  * whitelist non-functional change in systemd-networkd rules (bsc#1185469)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=416
2021-04-30 13:26:07 +00:00
Matthias Gerstner
667cf93f85 - Update to version 1550+20210429.a605b7d:
* tuned: whitelist incrementally added polkit action (bsc#1185418)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=415
2021-04-29 10:30:55 +00:00
Wolfgang Frisch
4c126ec53c OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=413 2021-04-13 13:48:50 +00:00
Wolfgang Frisch
80ee05e3bf - Updated tarball.
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=412
2021-04-12 08:21:03 +00:00
Wolfgang Frisch
92580bcd25 - Update to version 1550+20210409.c29362e:
* profiles: add KDiskMark (bsc#1182521)
  * profiles: add kdenetwork-filesharing (bsc#1175633) (#37)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=411
2021-04-12 07:47:29 +00:00
Matthias Gerstner
1a6540aef0 - Update to version 1550+20210111.f725c25:
* polkit-rules-whitelist: add brltty brlapi group rule (bsc#1180593)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=409
2021-01-11 13:02:56 +00:00
Matthias Gerstner
ba3751f1c1 - Update to version 1550+20201208.135bf51:
* libvirt: allow the active session to create read-only connections (bsc#1179126)
  * profiles: cleanup outdates keep_always entries

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=407
2020-12-08 13:03:31 +00:00
Matthias Gerstner
edf5314730 - Update to version 1550+20201119.2c1dce4:
- cleanup of dead and inconsistent polkit actions:
    * profiles: drop the now rather confusing comment from nwfilter-binding actions
    * profiles: harmonize and normalize profile syntax and style
    * profiles: harmonize spice-space.lowlevelusbaccess actions
    * profiles: remove dead pantheon actions
    * profiles: remove dead org.gnome.DejaDup.duplicity action
    * profiles: drop dead com.redhat.tuned.gui.run action
    * profiles: fix brltty action(s)
    * profiles: remove dead netvisix action
    * profiles: realmd.discover-realm action: fix restrictive any setting
    * profiles: remove dead com.redhat.lvm2.* actions
    * profiles: group together org.kde.powerdevil actions
    * profiles: remove dead org.kde.powerdevil.backlighthelper actions
    * profiles: fix FirewallD1.info action in standard profile
    * profiles: remove dead org.kde.baloo action
    * profiles: remove dead kwallet actions and fix kwallet5 restrictive setting
    * profiles: selinux actions: make restrictive profile no weaker than upstream
    * profiles: remove dead gufw pkexec action
    * profiles: adjust mate actions better to upstream defaults
    * profiles: remove dead org.libvirt.api.newfilter.bind-* actions
    * profiles: clear dead nepomuk.filewatch.raiselimit action
    * profiles: remove dead kcmlightdm actions
    * profiles: adjust gnome.controlcenter actions better to upstream defaults
    * profiles: remove dead org.kde.recorditnow helper
    * profiles: remove dead de.berlios.smb4k.mounthelper actions
    * profiles: adjust user-administration action better to upstream defaults
    * profiles: cleanup urfkill actions
    * profiles: adjust ModemManager1 actions better to upstream settings
    * profiles: cleanup ModemManager actions

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=405
2020-11-19 09:21:17 +00:00
Matthias Gerstner
eb6c474e80 - Update to version 1550+20201103.994a5ed:
* udisks2: rename of manage-led action to match upstream changes (bsc#1178321)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=403
2020-11-03 10:14:27 +00:00
Matthias Gerstner
3a6daefb0d - Update to version 1550+20201030.d1b5d8b:
* whitelisting of GNOME malcontent parental controls (bsc#1177974)
  * restrictive profile: fix conflicting duplicate action org.kde.powerdevil.backlighthelper.setbrightness
  * restrictive profile: fix conflicting duplicate action org.freedesktop.color-manager.delete-profile
  * profiles: fix conflicting duplicate action org.kde.powerdevil.backlighthelper.brightness
  * profiles: remove duplicate actions with same authentication settings
  * tools: new script to cleanly remove duplicate actions

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=402
2020-11-02 08:35:36 +00:00
Matthias Gerstner
b6383ac336 - Update to version 1550+20201012.1df5a0d:
* whitelist new plasma5-disks smartmon helper (bsc#1176742)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=400
2020-10-19 12:52:42 +00:00
Johannes Segitz
6377aa6716 Accepting request 838984 from home:mgerstner:branches:Base:System
- Update to version 1550+20201001.cb7020b:
  * Whitelist newly added powerdevil battery charge threshold actions (bsc#1176474)

OBS-URL: https://build.opensuse.org/request/show/838984
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=398
2020-10-02 12:26:08 +00:00
Matthias Gerstner
e1b5e7e9b9 - Update to version 1550+20200909.647e56f:
* whitelist org.freedesktop.network1.forcerenew (bsc#1176215)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=396
2020-09-10 07:57:41 +00:00
Matthias Gerstner
42d35c7902 - Update to version 1550+20200715.6ddc764:
* whitelist libvirt-dbus rule file (bsc#1173093)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=394
2020-07-15 07:49:27 +00:00
Johannes Segitz
1db44fd1e9 Accepting request 818033 from home:jsegitz:branches:Base:System
- Update to version 1550+20200630.e9f182b:
  * whitelist io.veyon.pkexec.veyon-configurator (bsc#1172318)

OBS-URL: https://build.opensuse.org/request/show/818033
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=392
2020-07-01 06:24:25 +00:00
Johannes Segitz
067bed39dd Accepting request 807746 from home:jsegitz:branches:devel:openSUSE:Factory:rpmlint
- Update to version 1550+20200520.d0dc67f:
  * whitelist org.cockpit-project.cockpit.root-bridge (bsc#1169614)

OBS-URL: https://build.opensuse.org/request/show/807746
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=390
2020-05-20 14:44:14 +00:00
Johannes Segitz
ae628c03fd Accepting request 795688 from home:mgerstner:branches:Base:System
- Update to version 1550+20200417.940923e:
  * packagekit: allow system-sources-refresh w/o password entry (bsc#1169540)

OBS-URL: https://build.opensuse.org/request/show/795688
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=388
2020-04-20 08:25:47 +00:00
Malte Kraus
72afb53ee0 - Update to version 1550+20200325.f1362c4:
* whitelist chvt action in logind (bsc#1167542)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=386
2020-03-25 15:22:02 +00:00
Matthias Gerstner
b184f10711 - Update to version 1550+20200310.cdde967:
* profiles: whitelist new timeshift pkexec actions (bsc#1165436)
  * polkit profile: remove trailing '###' lines

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=384
2020-03-10 13:37:55 +00:00
Johannes Segitz
a4b39daa6c Accepting request 780220 from home:jsegitz:branches:Base:System
- Going back to old versioning scheme as only %suse_version doesn't
  carry enough information. Keeping the git hash would be enough,
  but with that we can't ensure that versions increase. So we keep
  also the timestamp and prefix it with the current %suse_version

OBS-URL: https://build.opensuse.org/request/show/780220
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=382
2020-02-28 10:33:10 +00:00