2010-08-26 11:13:54 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Aug 26 10:04:44 CEST 2010 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
|
|
- Update to version 0.98:
|
|
|
|
|
|
+ Fix scanning of unix-process subjects
|
|
|
|
|
|
+ Add textual authentication agent and use it in pkexec(1)
|
|
|
|
|
|
+ Fix ConsoleKit interaction bug
|
|
|
|
|
|
+ pkexec: add --disable-internal-agent option
|
|
|
|
|
|
+ pkcheck: add --enable-internal-agent option
|
|
|
|
|
|
+ Fix wording in pkexec(1) man page
|
|
|
|
|
|
+ Various doc cleanups
|
|
|
|
|
|
- Changes from version 0.97:
|
|
|
|
|
|
+ Port to GDBus
|
|
|
|
|
|
+ Add shadow authentication support
|
|
|
|
|
|
+ Remove Lock Down functionality
|
|
|
|
|
|
+ fdo#26982: pkexec information disclosure vulnerability
|
|
|
|
|
|
+ Make polkitd accept --replace and gracefully handle SIGINT
|
|
|
|
|
|
+ Implement polkit_temporary_authorization_new_for_gvariant()
|
|
|
|
|
|
+ Make NameOwnerChanged a private impl detail of the interactive
|
|
|
|
|
|
authority
|
|
|
|
|
|
+ Add a GPermission implementation
|
|
|
|
|
|
+ PolkitAuthority: Implement failable initialization
|
|
|
|
|
|
+ PolkitAuthority: Add g_return_if_fail() checks
|
|
|
|
|
|
+ Add g_return_if_fail() to all public API entry points
|
|
|
|
|
|
+ Use polkit_authority_get_sync() instead of deprecated
|
|
|
|
|
|
polkit_authority_get
|
|
|
|
|
|
+ PolkitBackend: Don't export unneeded convenience API
|
|
|
|
|
|
+ Update GI annotations
|
|
|
|
|
|
+ Don't dist org.freedesktop.ConsoleKit.xml.
|
|
|
|
|
|
+ Properly reference headers
|
|
|
|
|
|
+ fdo#29051: Configuration reload on every query
|
|
|
|
|
|
- Drop pkexec-information-disclosure.patch: fixed upstream.
|
|
|
|
|
|
- Add polkit-install-missing-header.patch to install a header that
|
|
|
|
|
|
should get installed.
|
|
|
|
|
|
- Remove eggdbus-devel BuildRequires.
|
|
|
|
|
|
- Build with introspection support: add gobject-introspection
|
|
|
|
|
|
BuildRequires and pass --enable-introspection to configure.
|
|
|
|
|
|
- Fix groups of all packages to be valid groups.
|
|
|
|
|
|
|
2010-07-20 20:13:37 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jun 28 06:38:35 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
|
|
- use %_smp_mflags
|
|
|
|
|
|
|
2010-04-16 01:31:12 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Fri Apr 9 19:14:09 CEST 2010 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- fix pkexec information disclosure
|
|
|
|
|
|
(fdo#26982, CVE-2010-0750, bnc#593959)
|
|
|
|
|
|
|
2010-01-21 10:44:18 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jan 18 14:20:11 CET 2010 - dmueller@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- add baselibs.conf
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Mon Jan 18 12:56:02 CET 2010 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- new upstream release 0.96
|
|
|
|
|
|
- Bug 25367 — Also read local authority configuration data from /etc
|
|
|
|
|
|
- Run the open_session part of the PAM stack in pkexec(1)
|
|
|
|
|
|
- Bug 25594 – System logging
|
|
|
|
|
|
- Properly handle return value from getpwnam_r()
|
|
|
|
|
|
- Fix error message when no authentication agent is available
|
|
|
|
|
|
- Make pkexec(1) validate environment variables
|
|
|
|
|
|
- Make pkexec(1) use the syslogging facilities
|
|
|
|
|
|
- Save original cwd in pkexec(1) since it will change during the life-time
|
|
|
|
|
|
- Complain on stderr, not stdout
|
|
|
|
|
|
- Don't log authorization checks
|
|
|
|
|
|
|
2010-01-18 13:07:53 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Jan 6 18:22:23 CET 2010 - dmueller@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- update to 0.95:
|
|
|
|
|
|
The major change this release is that the lockdown feature has
|
|
|
|
|
|
been cleaned up in a way so it isn't specific to the local
|
|
|
|
|
|
authority. See the NEWS files for more details.
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Dec 16 10:44:34 CET 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
|
|
- Package documentation as noarch
|
|
|
|
|
|
|
2009-08-28 20:12:54 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Wed Aug 19 23:22:44 CEST 2009 - vuntz@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- Add Requires on polkit to libpolkit0: all applications using
|
|
|
|
|
|
libpolkit0 will really need polkit to be installed to work
|
|
|
|
|
|
properly.
|
|
|
|
|
|
|
2009-08-13 23:33:53 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Aug 13 04:31:38 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- new upstream release 0.94
|
|
|
|
|
|
- Allow unprivileged callers to check authorizations
|
|
|
|
|
|
- Don't spawn man(1) from a setuid program
|
|
|
|
|
|
- Add polkit.retains_authorization_after_challenge to authz result
|
|
|
|
|
|
- Ensure all fds except stdin/stdout/stderr are closed after exec(2)
|
|
|
|
|
|
- Be more careful when determining process start time
|
|
|
|
|
|
- Remove temporary authorization when the subject it applies to vanishes
|
|
|
|
|
|
- Generate GI gir and typelibs for libpolkit-gobject-1
|
|
|
|
|
|
- drop patches which are in the release now
|
|
|
|
|
|
- disable introspection
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Aug 11 21:23:49 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- add upstream patches:
|
|
|
|
|
|
polkit-close-stdfds.patch
|
|
|
|
|
|
polkit-no-man-spawn.patch
|
|
|
|
|
|
polkit-proc-stat-parse-fix.patch
|
|
|
|
|
|
- drop rpmlint patch
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Aug 6 17:36:16 CEST 2009 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
|
|
- check for the right binary in verify_permisisons
|
|
|
|
|
|
|
2009-07-30 18:07:53 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Thu Jul 30 17:32:41 CEST 2009 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- disable suid bit for now to get software build on top
|
|
|
|
|
|
- split out libraries to follow shared library policy
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Tue Jul 21 03:20:55 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- update to version 0.93
|
|
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
|
Sun Jul 19 15:31:44 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
|
|
- initial import of polkit 0.92
|
|
|
|
|
|
|
