Commit Graph

312 Commits

Author SHA256 Message Date
Matthias Gerstner
1c7af1fb62 - Update to version 1550+20220727.3ce2e2f:
* iio-sensor-proxy (bsc#1201558): add claim-sensor action

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=458
2022-08-02 08:11:15 +00:00
046499ba6c Accepting request 981338 from home:wfrisch:branches:Base:System
- Update to version 1550+20220608.097448e:
  * Whitelist new systemd methods (bsc#1200098)

OBS-URL: https://build.opensuse.org/request/show/981338
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=456
2022-06-08 14:53:45 +00:00
26afbea6f4 Accepting request 978892 from home:wfrisch:branches:Base:System
- Update to version 1550+20220524.0345bd9:
  * Add kinfocenter5 whitelisting (bsc#1199735).
  * gconf: cleanup rules used by dropped gconf2 package

OBS-URL: https://build.opensuse.org/request/show/978892
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=454
2022-05-24 09:18:25 +00:00
88fb7348c8 Accepting request 966815 from home:fbonazzi:branches:openSUSE:Factory
- Update to version 1550+20220404.7b4bea2:
  * Add whitelisting to restrictive profile as well
  * Add budgie-control-center whitelisting (bsc#1195023)

OBS-URL: https://build.opensuse.org/request/show/966815
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=452
2022-04-04 13:05:43 +00:00
Matthias Gerstner
5530a153d4 - Update to version 1550+20220401.41ccb1d:
* usbguard: relax read-only operations to yes

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=450
2022-04-01 09:51:21 +00:00
Matthias Gerstner
5217c38747 - Update to version 1550+20220325.163dbdf:
* whitelisting: add usbguard actions (bsc#1196621)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=448
2022-03-25 12:27:04 +00:00
Matthias Gerstner
c7ea547465 - Update to version 1550+20220324.7f46822:
* Fix generation of file /etc/polkit-1/rules.d/90-default-privs.rules

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=447
2022-03-24 10:11:12 +00:00
Matthias Gerstner
8179b734be - Update to version 1550+20220303.95a78fb:
* kpmcore: whitelist block device (re-)partioning helper (bsc#1178848)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=445
2022-03-03 14:13:13 +00:00
Matthias Gerstner
643d334305 - Update to version 1550+20220225.330e064:
* Whitelist Kcron (bsc#1193945)
  * deepin-api: drop manage-locale action that is not package on openSUSE
  * udisks2: remove manage-vdo action

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=444
2022-02-25 09:35:44 +00:00
Wolfgang Frisch
0aed6295e8 - Update to version 1550+20211214.daf2765:
* fwupd: tighten the downgrade rules (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=443
2021-12-14 16:49:42 +00:00
Wolfgang Frisch
96f50b8873 - Update to version 1550+20211214.daf2765:
* fwupd: tighten the downgrade rules (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=442
2021-12-14 16:47:28 +00:00
Wolfgang Frisch
2a78da5276 - Update to version 1550+20211209.8ce206c:
* fwupd: whitelist new, more granular permissions (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=441
2021-12-09 19:53:21 +00:00
Wolfgang Frisch
fd8a6a58db Update to version 1550+20211008.9751669:
- fwupd: whitelist new, more granular permissions (bsc#1193310)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=440
2021-12-09 19:44:33 +00:00
Dominique Leuenberger
de7b3c6ea4 - Change Requires: polkit to Requires(pre): we need to be sure
polkit is instaled first, as we could otherwise end up with wrong
  permissions on /etc/polkit-1/rules.d.

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=439
2021-11-19 13:59:26 +00:00
Matthias Gerstner
f8e4bbce3b explicitly own polkit dirs, otherwise build complains about unowned dirs
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=438
2021-11-19 09:52:44 +00:00
Matthias Gerstner
e94016e3b8 - remove traces of old polkit-whitelisting sub-package
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=437
2021-11-19 09:43:56 +00:00
Matthias Gerstner
9622f45939 Accepting request 932422 from home:dimstar:Factory
- Do not BuildRequire and Require polkit: technically, this is not
  required at all. In plus, it helps us a great deal in bootstrap
  scenarios, as polkit-default-privs is used by rpmlint, and thus
  pulled into every single buildroot.

OBS-URL: https://build.opensuse.org/request/show/932422
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=436
2021-11-19 09:42:50 +00:00
Matthias Gerstner
ba32a266f2 - drop backward compatibility symlink in /etc/polkit-default-privs.standard.
rpmlint 2.0 is now in Factory and the check there directly uses the profile
  in /usr/etc/polkit-default-privs/profiles/standard.
- drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0
  internally.

- Update to version 1550+20211008.9751669:
  * whitelist power-profiles-daemon actions (bsc#1189900)
  * cleanup: remove polkit-rules-whitelist.json

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=435
2021-10-08 09:30:17 +00:00
Matthias Gerstner
35a6727a04 - Update to version 1550+20210818.b0c41fd:
* whitelist deepin-api service actions (bsc#1070943)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=434
2021-08-18 13:08:15 +00:00
Matthias Gerstner
5fbd8e486f - Update to version 1550+20210813.ce0df56:
* malcontent: loosen restrictive ReadOwn actions to prevent spurious auth requests (#56)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=433
2021-08-13 11:48:10 +00:00
Johannes Segitz
8a3b918293 Accepting request 907887 from home:mgerstner:branches:Base:System
- Update to version 1550+20210722.ae1891d:
  * whitelist zypp-gui action (bsc#1188364)
  * introduce sub-directories for profiles in both /etc and /usr/etc
  * remove polkit-default-privs.d package specific directory
  * Moving polkit-default-privs.easy, polkit-default-privs.local and polkit-default-privs.restrictive from /etc /to /usr/etc directory

OBS-URL: https://build.opensuse.org/request/show/907887
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=432
2021-07-23 08:24:47 +00:00
Wolfgang Frisch
178b3f6413 - Update to version 1550+20210715.b7d5b97:
* kdenetwork-filesharing: tighten the restrictive profile

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=431
2021-07-15 11:22:48 +00:00
Wolfgang Frisch
50e04dbd86 See also: https://build.opensuse.org/request/show/905083
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=430
2021-07-14 09:41:25 +00:00
Wolfgang Frisch
72e8b371a1 - Update to version 1550+20210714.9c51c0e:
* 50-default.rules: move to /usr (contents unchanged)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=429
2021-07-14 09:40:21 +00:00
Wolfgang Frisch
b51b77541b - Update to version 1550+20210708.6401347:
* fprint.device.enroll: keep restrictive profile in sync with upstream

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=428
2021-07-08 11:50:33 +00:00
Wolfgang Frisch
ab967cfca3 - Update to version 1550+20210708.c4d6bf4:
* kdenetwork-filesharing: align with upstream (#49)

- Update to version 1550+20210701.3047fcb:
  * ModemManager1.USSD: fix inconsistencies in standard and easy profiles
  * powerdevil.discretegpuhelper.hasdualgpu: align with upstream settings
  * cupspkhelper.mechanism.job-edit: align with upstream setting
  * org.fedoraproject.FirewallD1.info: don't be more restrictive than the 'standard' profile
  * remove org.selinux.* (policycoreutils) since they no longer exist in Factory
  * remove cinnamon.controlcenter.datetime.configure: no longer packaged
  * net.connman.vpn.secret: fix invalid label "auth_admin_keep_session"

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=427
2021-07-08 11:43:00 +00:00
Wolfgang Frisch
60f2490b04 - Update to version 1550+20210615.e149f78:
* profiles: cinnamon-settings-daemon (bsc#1186845)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=425
2021-06-15 09:34:10 +00:00
Wolfgang Frisch
bbee569c09 Accepting request 898984 from home:jsegitz:branches:Base:System
- Update to version 1550+20210610.25c9b98:
  * Whitelist setroubleshoot (boo#1186344)

OBS-URL: https://build.opensuse.org/request/show/898984
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=424
2021-06-10 09:18:16 +00:00
Matthias Gerstner
d7a82af453 - Update to version 1550+20210520.336dcea:
* whitelist incremental libvirt org.libvirt.api.node-device.delete (bsc#1186270)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=421
2021-05-20 14:11:47 +00:00
Wolfgang Frisch
655bbbcfe4 Accepting request 893791 from home:pperego:branches:Base:System
- Update to version 1550+20210517.56da22d:
  * Add systemd homed (boo#1185285)

OBS-URL: https://build.opensuse.org/request/show/893791
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=420
2021-05-17 15:34:17 +00:00
Matthias Gerstner
bd1ef15bc5 - Update to version 1550+20210503.88baaca:
* whitelist deepin-system-monitor pkexec actions (bsc#1181886)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=418
2021-05-03 11:17:06 +00:00
Matthias Gerstner
53e94dc0ee - Update to version 1550+20210430.c408cda:
* systemd: add newly added inhibit-handle-reboot-key action (bsc#1185468)
  * whitelist non-functional change in systemd-networkd rules (bsc#1185469)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=416
2021-04-30 13:26:07 +00:00
Matthias Gerstner
667cf93f85 - Update to version 1550+20210429.a605b7d:
* tuned: whitelist incrementally added polkit action (bsc#1185418)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=415
2021-04-29 10:30:55 +00:00
Wolfgang Frisch
4c126ec53c OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=413 2021-04-13 13:48:50 +00:00
Wolfgang Frisch
80ee05e3bf - Updated tarball.
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=412
2021-04-12 08:21:03 +00:00
Wolfgang Frisch
92580bcd25 - Update to version 1550+20210409.c29362e:
* profiles: add KDiskMark (bsc#1182521)
  * profiles: add kdenetwork-filesharing (bsc#1175633) (#37)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=411
2021-04-12 07:47:29 +00:00
Matthias Gerstner
1a6540aef0 - Update to version 1550+20210111.f725c25:
* polkit-rules-whitelist: add brltty brlapi group rule (bsc#1180593)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=409
2021-01-11 13:02:56 +00:00
Matthias Gerstner
ba3751f1c1 - Update to version 1550+20201208.135bf51:
* libvirt: allow the active session to create read-only connections (bsc#1179126)
  * profiles: cleanup outdates keep_always entries

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=407
2020-12-08 13:03:31 +00:00
Matthias Gerstner
edf5314730 - Update to version 1550+20201119.2c1dce4:
- cleanup of dead and inconsistent polkit actions:
    * profiles: drop the now rather confusing comment from nwfilter-binding actions
    * profiles: harmonize and normalize profile syntax and style
    * profiles: harmonize spice-space.lowlevelusbaccess actions
    * profiles: remove dead pantheon actions
    * profiles: remove dead org.gnome.DejaDup.duplicity action
    * profiles: drop dead com.redhat.tuned.gui.run action
    * profiles: fix brltty action(s)
    * profiles: remove dead netvisix action
    * profiles: realmd.discover-realm action: fix restrictive any setting
    * profiles: remove dead com.redhat.lvm2.* actions
    * profiles: group together org.kde.powerdevil actions
    * profiles: remove dead org.kde.powerdevil.backlighthelper actions
    * profiles: fix FirewallD1.info action in standard profile
    * profiles: remove dead org.kde.baloo action
    * profiles: remove dead kwallet actions and fix kwallet5 restrictive setting
    * profiles: selinux actions: make restrictive profile no weaker than upstream
    * profiles: remove dead gufw pkexec action
    * profiles: adjust mate actions better to upstream defaults
    * profiles: remove dead org.libvirt.api.newfilter.bind-* actions
    * profiles: clear dead nepomuk.filewatch.raiselimit action
    * profiles: remove dead kcmlightdm actions
    * profiles: adjust gnome.controlcenter actions better to upstream defaults
    * profiles: remove dead org.kde.recorditnow helper
    * profiles: remove dead de.berlios.smb4k.mounthelper actions
    * profiles: adjust user-administration action better to upstream defaults
    * profiles: cleanup urfkill actions
    * profiles: adjust ModemManager1 actions better to upstream settings
    * profiles: cleanup ModemManager actions

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=405
2020-11-19 09:21:17 +00:00
Matthias Gerstner
eb6c474e80 - Update to version 1550+20201103.994a5ed:
* udisks2: rename of manage-led action to match upstream changes (bsc#1178321)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=403
2020-11-03 10:14:27 +00:00
Matthias Gerstner
3a6daefb0d - Update to version 1550+20201030.d1b5d8b:
* whitelisting of GNOME malcontent parental controls (bsc#1177974)
  * restrictive profile: fix conflicting duplicate action org.kde.powerdevil.backlighthelper.setbrightness
  * restrictive profile: fix conflicting duplicate action org.freedesktop.color-manager.delete-profile
  * profiles: fix conflicting duplicate action org.kde.powerdevil.backlighthelper.brightness
  * profiles: remove duplicate actions with same authentication settings
  * tools: new script to cleanly remove duplicate actions

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=402
2020-11-02 08:35:36 +00:00
Matthias Gerstner
b6383ac336 - Update to version 1550+20201012.1df5a0d:
* whitelist new plasma5-disks smartmon helper (bsc#1176742)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=400
2020-10-19 12:52:42 +00:00
Johannes Segitz
6377aa6716 Accepting request 838984 from home:mgerstner:branches:Base:System
- Update to version 1550+20201001.cb7020b:
  * Whitelist newly added powerdevil battery charge threshold actions (bsc#1176474)

OBS-URL: https://build.opensuse.org/request/show/838984
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=398
2020-10-02 12:26:08 +00:00
Matthias Gerstner
e1b5e7e9b9 - Update to version 1550+20200909.647e56f:
* whitelist org.freedesktop.network1.forcerenew (bsc#1176215)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=396
2020-09-10 07:57:41 +00:00
Matthias Gerstner
42d35c7902 - Update to version 1550+20200715.6ddc764:
* whitelist libvirt-dbus rule file (bsc#1173093)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=394
2020-07-15 07:49:27 +00:00
Johannes Segitz
1db44fd1e9 Accepting request 818033 from home:jsegitz:branches:Base:System
- Update to version 1550+20200630.e9f182b:
  * whitelist io.veyon.pkexec.veyon-configurator (bsc#1172318)

OBS-URL: https://build.opensuse.org/request/show/818033
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=392
2020-07-01 06:24:25 +00:00
Johannes Segitz
067bed39dd Accepting request 807746 from home:jsegitz:branches:devel:openSUSE:Factory:rpmlint
- Update to version 1550+20200520.d0dc67f:
  * whitelist org.cockpit-project.cockpit.root-bridge (bsc#1169614)

OBS-URL: https://build.opensuse.org/request/show/807746
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=390
2020-05-20 14:44:14 +00:00
Johannes Segitz
ae628c03fd Accepting request 795688 from home:mgerstner:branches:Base:System
- Update to version 1550+20200417.940923e:
  * packagekit: allow system-sources-refresh w/o password entry (bsc#1169540)

OBS-URL: https://build.opensuse.org/request/show/795688
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=388
2020-04-20 08:25:47 +00:00
Malte Kraus
72afb53ee0 - Update to version 1550+20200325.f1362c4:
* whitelist chvt action in logind (bsc#1167542)

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=386
2020-03-25 15:22:02 +00:00
Matthias Gerstner
b184f10711 - Update to version 1550+20200310.cdde967:
* profiles: whitelist new timeshift pkexec actions (bsc#1165436)
  * polkit profile: remove trailing '###' lines

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit-default-privs?expand=0&rev=384
2020-03-10 13:37:55 +00:00