2021-06-09 09:12:21 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 9 07:09:16 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Fix verifyscript: the path to the binary was wrongly defined as
|
|
|
|
|
%{_libexecdir}/lib.
|
|
|
|
|
|
2021-03-15 13:53:01 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 11 22:21:07 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
|
|
|
|
|
|
- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
|
|
|
|
|
first location is only for admin changes
|
|
|
|
|
- Move pam configuration to /usr/etc/pam.d
|
|
|
|
|
|
2021-01-04 11:16:58 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 4 09:51:04 UTC 2021 - Matthias Gerstner <matthias.gerstner@suse.com>
|
|
|
|
|
|
|
|
|
|
move to libexec dir is still not complete:
|
|
|
|
|
|
|
|
|
|
- add polkit-adjust-libexec-path.patch: There is another hard coded reference
|
|
|
|
|
of lib/ in the code that this patch addresses.
|
|
|
|
|
- also adjust invocation of %set_permissions and %verify_permissions to new
|
|
|
|
|
libexec dir location.
|
|
|
|
|
|
2020-12-29 10:02:16 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 29 08:39:01 UTC 2020 - Matthias Gerstner <matthias.gerstner@suse.com>
|
|
|
|
|
|
|
|
|
|
- also set libprivdir during build, otherwhise systemd and D-Bus service files
|
|
|
|
|
contain the wrong path and we'll get runtime errors.
|
|
|
|
|
|
2020-12-29 08:54:33 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 28 12:26:34 UTC 2020 - Matthias Gerstner <matthias.gerstner@suse.com>
|
|
|
|
|
|
|
|
|
|
- Install private binaries into libexec instead of into lib. For this an
|
|
|
|
|
override of the custom libprivdir variable is necessary, because upstream
|
|
|
|
|
explicitly moved away from libexecdir via upstram commit
|
|
|
|
|
6fbcc6cd839680fcefd81c4a43676e7c031c9859.
|
|
|
|
|
|
2020-10-27 10:39:20 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 23 08:19:06 UTC 2020 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 0.118:
|
|
|
|
|
+ Updated dependency to mozjs78.
|
|
|
|
|
+ Tarball fixes.
|
|
|
|
|
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
|
|
|
|
|
BuildRequires following upstreams port.
|
|
|
|
|
|
2020-07-31 14:03:13 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 31 11:39:38 UTC 2020 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 0.117:
|
|
|
|
|
+ Activated Gitlab CI.
|
|
|
|
|
+ Updated dependency to mozjs68.
|
|
|
|
|
+ Memory management fixes.
|
|
|
|
|
+ Updated translations.
|
|
|
|
|
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
|
|
|
|
|
BuildRequires following upstreams port.
|
|
|
|
|
|
2019-12-05 10:19:13 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 29 10:36:53 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
|
|
|
|
|
|
- Fix usage of libexecdir instead of prefix/lib where applicable.
|
|
|
|
|
|
2019-10-08 14:46:03 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 8 12:41:44 UTC 2019 - Marcus Meissner <meissner@suse.com>
|
|
|
|
|
|
|
|
|
|
- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)
|
|
|
|
|
|
2019-06-13 21:54:52 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 29 07:57:26 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 0.116:
|
|
|
|
|
+ Leaking zombie child processes.
|
|
|
|
|
+ Possible resource leak found by static analyzer.
|
|
|
|
|
+ Output messages tuneup.
|
|
|
|
|
+ Sanity fixes.
|
|
|
|
|
+ pkttyagent tty echo disabled on SIGINT.
|
|
|
|
|
+ HACKING: add link to Code of Conduct.
|
|
|
|
|
+ polkitbackend: comment typos fix.
|
|
|
|
|
+ configure.ac: fix detection of systemd with cgroups v2.
|
|
|
|
|
+ CVE-2018-19788 High UIDs overflow fix.
|
|
|
|
|
+ CVE-2019-6133 Slowfork vulnerability fix.
|
|
|
|
|
+ Allow unset process-uid.
|
|
|
|
|
+ Port the JS authority to mozjs-60.
|
|
|
|
|
+ Use JS_EncodeStringToUTF8.
|
|
|
|
|
+ Updated translations.
|
|
|
|
|
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
|
|
|
|
|
BuildRequires following upstreams changes.
|
|
|
|
|
- Drop patches fixed upstream:
|
|
|
|
|
+ polkit-fix-possible-resource-leak.patch
|
|
|
|
|
+ polkit-fix-leaking-zombie-child-processes.patch
|
|
|
|
|
+ polkit-CVE-2018-19788.patch
|
|
|
|
|
- Refresh patches with quilt.
|
|
|
|
|
|
2019-05-10 16:54:03 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri May 10 14:44:20 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org>
|
|
|
|
|
|
|
|
|
|
- Use systemd_ordering instead of systemd_requires: strictly
|
|
|
|
|
speaking, polkit does not require systemd to be present. Just
|
|
|
|
|
that when we install on a system with systemd (e.g outside
|
|
|
|
|
containers) we would want systemd to be present before
|
|
|
|
|
installing polkit. Help also reduce a cycle without special hacks
|
|
|
|
|
in systemd.spec.
|
|
|
|
|
|
2019-04-26 14:35:25 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 26 11:06:05 UTC 2019 - mvetter@suse.com
|
|
|
|
|
|
|
|
|
|
- bsc#1130588: Require shadow instead of old pwdutils
|
|
|
|
|
- User proper Requires(pre)/Requires(post) for permissions and
|
|
|
|
|
shadow
|
|
|
|
|
|
2018-12-20 19:04:49 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 20 17:29:58 UTC 2018 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
|
|
|
|
|
(bsc#1118277 CVE-2018-19788)
|
|
|
|
|
|
2018-08-21 07:03:16 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 17 07:56:08 UTC 2018 - bjorn.lie@gmail.com
|
|
|
|
|
|
|
|
|
|
- Add polkit-fix-possible-resource-leak.patch: Fix possible
|
|
|
|
|
resource leak found by static analyzer.
|
|
|
|
|
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
|
|
|
|
|
zombie not reaped when js spawned process timed out (fdo#106021).
|
|
|
|
|
|
2018-07-11 12:50:47 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 11 10:48:37 UTC 2018 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to version 0.115:
|
|
|
|
|
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
|
|
|
|
|
- jsauthority: pass "%s" format string to remaining report function
|
|
|
|
|
(obsoletes polkit-jsauthority-pass-format-string.patch)
|
|
|
|
|
|
2018-04-10 10:51:08 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 9 22:38:39 UTC 2018 - bjorn.lie@gmail.com
|
|
|
|
|
|
|
|
|
|
- Update to version 0.114:
|
|
|
|
|
+ Port to mozjs 52, the latest version of the firefox JavaScript
|
|
|
|
|
engine.
|
|
|
|
|
+ Add gettext support for policy files.
|
|
|
|
|
+ Fixes for various memory leaks.
|
|
|
|
|
+ Updated translations.
|
|
|
|
|
- Update keyring with Ray Strode <halfline@gmail.com> public key.
|
|
|
|
|
- Drop with_systemd define and all conditionals and
|
|
|
|
|
polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
|
|
|
|
|
support systemd now.
|
|
|
|
|
- Drop upstream fixed polkit-itstools.patch.
|
|
|
|
|
- Rebase pkexec.patch with quilt.
|
|
|
|
|
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
|
|
|
|
|
dependencies.
|
|
|
|
|
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
|
|
|
|
|
no longer supported.
|
|
|
|
|
- Drop autoconf and automake BuildRequires: They are implicit via
|
|
|
|
|
libtool BuildRequires.
|
|
|
|
|
- Replace glib2-devel and gobject-introspection-devel with their
|
|
|
|
|
pkgconfig counterparts: pkgconfig(gio-unix-2.0),
|
|
|
|
|
pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
|
|
|
|
|
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
|
|
|
|
|
pass "%s" format string to remaining report function, patch from
|
|
|
|
|
upstream git, adding missed commit (bgo#105865).
|
|
|
|
|
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
|
|
|
|
|
since a long time fixed (gh#systemd#58) (boo#954139).
|
|
|
|
|
|
2018-03-09 16:50:59 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 1 11:23:00 UTC 2018 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- pkexec.patch: pkexec: allow --version and --help even if not setuid
|
|
|
|
|
|
2018-02-28 22:45:09 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 28 16:38:33 UTC 2018 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Modernize spec-file by calling spec-cleaner
|
|
|
|
|
|
2017-08-30 23:08:18 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 15 12:20:52 UTC 2017 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Add polkit-itstools.patch: Add gettext support for .policy files.
|
|
|
|
|
|
2017-06-14 09:42:13 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 13 15:25:58 UTC 2017 - lnussel@suse.de
|
|
|
|
|
|
|
|
|
|
- Use gettext as fallback to get potential distro translations for
|
|
|
|
|
polkit actions. Similar mechnism as used for desktop file
|
|
|
|
|
translations. That way it's possible to use weblate to add
|
|
|
|
|
additional translations that are not provided by upstream
|
|
|
|
|
(polkit-gettext.patch).
|
|
|
|
|
|
2016-06-08 13:19:35 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 8 11:13:43 UTC 2016 - fbui@suse.com
|
|
|
|
|
|
|
|
|
|
- Use pkgconfig() instead of requiring systemd package names directly.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 7 15:25:00 UTC 2016 - fbui@suse.com
|
|
|
|
|
|
|
|
|
|
- systemd.pc is shipped by systemd main package (bsc#983167)
|
|
|
|
|
Strangely polkit wants systemd.pc to detect that the target system
|
|
|
|
|
is running systemd even if its configured to build systemd support...
|
|
|
|
|
|
2015-11-26 17:31:33 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 26 16:26:09 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
2015-11-26 17:49:11 +01:00
|
|
|
|
- polkit-revert-session-magic.patch: revert a session detection change
|
|
|
|
|
that could lead to sessions not being detected as active due to
|
2015-11-26 17:31:33 +01:00
|
|
|
|
a systemd bug. bsc#954139
|
|
|
|
|
|
2015-09-10 10:17:08 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 6 21:26:18 UTC 2015 - antoine.belvire@laposte.net
|
|
|
|
|
|
|
|
|
|
- Update to 0.113:
|
|
|
|
|
* Fix CVE-2015-4625
|
|
|
|
|
* Fix CVE-2015-3256
|
|
|
|
|
* Fix CVE-2015-3255
|
|
|
|
|
* Fix CVE-2015-3218
|
|
|
|
|
* On systemd-213 and later, the “active” state is shared across
|
|
|
|
|
all sessions of an user, instead of being tracked separately
|
|
|
|
|
* pkexec: when not given a program to execute, runs the users’
|
|
|
|
|
shell by default
|
|
|
|
|
- Remove polkit-no-kded-leak.patch (upstreamed)
|
|
|
|
|
|
2015-01-13 09:51:10 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 12 13:21:20 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Try to fix kded leaking due to powerdevil exposing this issue in
|
2015-01-13 11:39:00 +01:00
|
|
|
|
polkit: (bsc#912889)
|
2015-01-13 09:51:10 +01:00
|
|
|
|
* polkit-no-kded-leak.patch
|
|
|
|
|
|
2014-12-30 12:34:25 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 9 16:23:50 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
|
|
|
|
|
ids.
|
|
|
|
|
|
2013-09-27 10:51:58 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 27 08:16:34 UTC 2013 - toms@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Fixed URL
|
|
|
|
|
|
2013-09-19 04:38:37 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 19 01:13:08 UTC 2013 - hrvoje.senjan@gmail.com
|
|
|
|
|
|
|
|
|
|
- Update to 0.112
|
|
|
|
|
+ polkitunixprocess: Deprecate racy APIs
|
|
|
|
|
+ pkcheck: Support --process=pid,start-time,uid syntax too
|
|
|
|
|
(CVE-2013-4288)
|
|
|
|
|
+ Use GOnce for interface type registration
|
|
|
|
|
+ Add czech translation po file to distribution
|
|
|
|
|
+ Update the czech once more with newest pot file
|
|
|
|
|
|
2013-07-05 14:29:07 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jul 5 11:50:44 UTC 2013 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
|
|
|
|
|
+ Conditionally BuildRequire pkgconfig(mozjs-17.0).
|
|
|
|
|
- Drop libmozjs185-1_0 Recommends: the library is actually required
|
|
|
|
|
and auto-detected as such by rpm (from 0.111 changes: "The
|
|
|
|
|
JavaScript interpreter is now mandatory").
|
|
|
|
|
|
2013-06-15 09:47:13 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 14 20:34:39 UTC 2013 - hrvoje.senjan@gmail.com
|
|
|
|
|
|
|
|
|
|
- Update to 0.111
|
|
|
|
|
+ Both js185 and mozjs17 versions of SpiderMonkey are supported
|
|
|
|
|
+ The JavaScript interpreter is now mandatory
|
|
|
|
|
+ Fixed various memory leaks
|
|
|
|
|
+ Respect SUID_CFLAGS and SUID_LDFLAGS
|
|
|
|
|
+ Set process environment from pam_getenvlist()
|
|
|
|
|
+ Fix the build with automake 1.13
|
|
|
|
|
- Drop polkit-suid_flags.patch and automake-113.patch, those
|
|
|
|
|
patches are included in this release
|
|
|
|
|
|
2013-02-18 23:47:20 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2013-04-11 14:12:08 +02:00
|
|
|
|
Thu Apr 11 01:17:21 UTC 2013 - hrvoje.senjan@gmail.com
|
|
|
|
|
|
|
|
|
|
- Add automake-113.patch, fixes build with automake-1.13
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2013-02-18 23:47:20 +01:00
|
|
|
|
Mon Feb 18 19:47:33 UTC 2013 - gber@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
|
|
|
|
|
rules
|
|
|
|
|
|
2013-01-15 10:22:38 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 14 15:51:20 UTC 2013 - hrvoje.senjan@gmail.com
|
|
|
|
|
|
|
|
|
|
- Update to 0.110
|
|
|
|
|
+ Set XAUTHORITY environment variable if is unset
|
|
|
|
|
+ Use mutex and condition variables properly
|
2013-01-15 10:23:57 +01:00
|
|
|
|
+ Build fixes.
|
2013-01-15 10:22:38 +01:00
|
|
|
|
- Changes from version 0.109:
|
|
|
|
|
+ Include gmodule-2.0 to avoid linker errors
|
2013-01-15 10:23:57 +01:00
|
|
|
|
+ Don't require libmozjs185 devel packages for polkit rules
|
2013-01-15 10:22:38 +01:00
|
|
|
|
to work
|
|
|
|
|
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
|
|
|
|
|
are merged upstream
|
|
|
|
|
|
2013-01-09 15:30:23 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 9 14:08:57 UTC 2013 - saschpe@suse.de
|
|
|
|
|
|
|
|
|
|
- Only mark the following files as %config, not %config(noreplace):
|
|
|
|
|
+ %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
|
|
|
|
|
+ %{_sysconfdir}/pam.d/polkit-1
|
|
|
|
|
+ %{_sysconfdir}/polkit-1/rules.d/50-default.rules
|
|
|
|
|
PolicyKit's own config files should only be changed for good reason
|
|
|
|
|
and we want to prefer openSUSE's defaults (you still get an .rpmsafe
|
|
|
|
|
file)
|
|
|
|
|
|
2012-12-10 11:13:59 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 10 07:45:47 UTC 2012 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
|
|
|
|
|
libmozjs185.so, which is packaged in the -devel package
|
|
|
|
|
(bnc#793562)
|
|
|
|
|
|
2012-11-16 03:04:03 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 15 21:31:19 UTC 2012 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.108:
|
|
|
|
|
+ PolkitAgent: Avoid crashing if initializing the server object
|
|
|
|
|
fails
|
|
|
|
|
+ Fall back to authenticating as uid 0 if the list of admin
|
|
|
|
|
identities is empty
|
|
|
|
|
+ Dynamically load libmozjs185.so and cope with it not being
|
|
|
|
|
available
|
|
|
|
|
+ docs: mention the audience for authorization rules
|
|
|
|
|
+ build: Fix .gir generation for parallel make
|
|
|
|
|
- Only conditionally Require ConsoleKit when with_systemd is 0:
|
|
|
|
|
systemd support obsoletes ConsoleKit.
|
|
|
|
|
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
|
|
|
|
|
- Change libpolkit0 to require polkit >= %version instead of the
|
|
|
|
|
exact version. This will ease upgrade problems should there ever
|
|
|
|
|
be a soname bump of libpolkit0.
|
|
|
|
|
|
2012-11-15 11:48:44 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 14 09:26:14 UTC 2012 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Enable systemd inetegration (change with_systemd to 1): As an
|
|
|
|
|
agreed target for 12.3, systemd integration will be enabled.
|
|
|
|
|
|
2012-11-09 18:52:25 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 8 21:34:15 UTC 2012 - aj@suse.de
|
|
|
|
|
|
|
|
|
|
- Add pwdutils to prereq for groupadd and useradd.
|
|
|
|
|
|
2012-09-27 11:04:21 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 27 07:55:23 UTC 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Add polkit-no-systemd.patch: this patch, only applied when not
|
|
|
|
|
building systemd support, removes the systemd service reference
|
|
|
|
|
from the dbus .service file. This is needed as the systemd
|
|
|
|
|
.service file does not get installed in that case and dbus gets
|
|
|
|
|
confused because it expects it.
|
|
|
|
|
- Make %{_datadir}/polkit-1/rules.d and
|
|
|
|
|
%{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
|
|
|
|
|
directories have 0700 as permissions.
|
|
|
|
|
- Those two changes should fix polkit so it can start.
|
|
|
|
|
Fix bnc#782395.
|
|
|
|
|
|
2012-09-25 17:49:47 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 25 09:05:02 UTC 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
|
|
|
|
|
instead of %{_libexecdir}/polkit-1. The directory is manually
|
|
|
|
|
created in %install.
|
|
|
|
|
|
2012-09-21 23:03:29 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 14 18:20:06 UTC 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.107:
|
|
|
|
|
+ Try harder to look up the right localization
|
|
|
|
|
+ Introduce a polkit.Result enumeration for authorization rules
|
|
|
|
|
+ pkexec: add support for argv1 annotation and mention
|
|
|
|
|
shebang-wrappers
|
|
|
|
|
+ doc: update guidance on situations where there is no polkit
|
|
|
|
|
authority
|
|
|
|
|
- Changes from version 0.106:
|
|
|
|
|
+ Major change: switch from .pkla files (keyfile-format) to
|
|
|
|
|
.rules files (JavaScript)
|
|
|
|
|
+ Nuke polkitbackend library, localauthority backend and
|
|
|
|
|
extension system
|
|
|
|
|
+ Run polkitd as an unprivileged user
|
|
|
|
|
+ Add a systemd .service file
|
|
|
|
|
+ Several other code changes.
|
|
|
|
|
+ Updated documentation.
|
|
|
|
|
- Changes from version 0.105:
|
|
|
|
|
+ Add pkttyagent(1) helper
|
|
|
|
|
+ Make it possible to influence agent registration with an a{sv}
|
|
|
|
|
parameter
|
|
|
|
|
+ Several other code changes.
|
|
|
|
|
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
|
|
|
|
|
authority backend.
|
|
|
|
|
- Rebase polkit-no-wheel-group.patch: the admin configuration is
|
|
|
|
|
now in a .rules file.
|
|
|
|
|
- Rebase polkit-suid_flags.patch.
|
|
|
|
|
- Explicitly pass --enable-libsystemd-login or
|
|
|
|
|
--disable-libsystemd-login, depending on whether we build systemd
|
|
|
|
|
support.
|
|
|
|
|
- Add a %pre script to create the polkitd group and user, as
|
|
|
|
|
polkitd now run as an unprivileged user.
|
|
|
|
|
|
2012-08-22 20:26:50 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 22 15:52:30 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- also use -z now for binary hardening
|
|
|
|
|
|
2012-06-14 09:36:01 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 13 20:54:29 CEST 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Package /etc/polkit-1/localauthority and its subdirectories. They
|
|
|
|
|
were forgotten because they were empty, but people might need
|
|
|
|
|
them to put .pkla files.
|
|
|
|
|
|
2012-02-24 13:54:59 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 24 12:11:04 UTC 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Change the way we pass -fpie/-pie:
|
|
|
|
|
+ Drop polkit-pie.patch: this was not upstreamable.
|
|
|
|
|
+ Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
|
|
|
|
|
when building the suid binaries (pkexec and
|
|
|
|
|
polkit-agent-helper-1).
|
|
|
|
|
+ Add autoconf, automake and libtool BuildRequires, and call
|
|
|
|
|
autoreconf, for the new patch.
|
|
|
|
|
+ Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
|
|
|
|
|
+ Pass --with-pic to configure instead of changing CFLAGS to
|
|
|
|
|
contain -fPIC.
|
|
|
|
|
|
2012-01-09 11:07:22 +01:00
|
|
|
|
-------------------------------------------------------------------
|
2012-02-09 18:05:33 +01:00
|
|
|
|
Tue Feb 7 14:39:43 UTC 2012 - dlovasko@suse.com
|
|
|
|
|
|
|
|
|
|
- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2012-01-09 11:07:22 +01:00
|
|
|
|
Mon Jan 9 09:33:30 UTC 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Split typelib file into typelib-1_0-Polkit-1_0 subpackage.
|
|
|
|
|
- Add typelib-1_0-Polkit-1_0 Requires to devel subpackage.
|
|
|
|
|
- Add explicit libpolkit0 Requires to devel subpackage: it was
|
|
|
|
|
missing before.
|
|
|
|
|
- Remove explicit glib2-devel Requires from devel subpackage: it
|
|
|
|
|
will automatically be added the pkgconfig() way.
|
|
|
|
|
- Improve summary of libpolkit0 subpackage.
|
|
|
|
|
|
2012-01-04 23:08:35 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 4 22:03:54 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
|
|
- A quick test reveals that the systemd backend does not
|
|
|
|
|
integrate very well with packages yet, revert.
|
|
|
|
|
|
2012-01-04 22:05:01 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 4 21:02:38 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Previous update missed systemd-devel in buildrequires
|
|
|
|
|
without it no systemd support is built
|
|
|
|
|
|
2012-01-04 21:57:24 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 4 13:52:09 UTC 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.104:
|
|
|
|
|
+ Add optional systemd support
|
|
|
|
|
+ Add netgroup support (fdo#43610)
|
|
|
|
|
+ Add unit tests (fdo#43608)
|
|
|
|
|
- Changes from version 0.103:
|
|
|
|
|
+ Mistype in DBus object: PoliycKit1 -> PolicyKit1
|
|
|
|
|
+ Add support for the org.freedesktop.policykit.imply annotation
|
|
|
|
|
+ Add --no-debug option and use this for D-Bus activation
|
|
|
|
|
+ Add org.freedesktop.policykit.owner annotation (fdo#41025)
|
|
|
|
|
+ Default to AdminIdentities=unix-group:wheel for local authority
|
|
|
|
|
- Drop patches that were taken from upstream:
|
|
|
|
|
+ 0001-Add-support-for-the-org.freedesktop.policykit.imply-a.diff
|
|
|
|
|
+ 0002-Add-no-debug-option-and-use-this-for-D-Bus-activation.diff
|
|
|
|
|
+ 0003-Bug-41025-Add-org.freedesktop.policykit.owner-annotat.diff
|
|
|
|
|
- Add polkit-no-wheel-group.patch: do not allow the wheel group as
|
|
|
|
|
admin identity, and revert to only accept the root user for this.
|
|
|
|
|
|
2011-11-02 17:05:54 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 2 10:30:03 UTC 2011 - lnussel@suse.de
|
|
|
|
|
|
|
|
|
|
- pick some patches from git to add support for
|
|
|
|
|
org.freedesktop.policykit.imply, disable debug spam and allow
|
|
|
|
|
unprivileged users to query authorizations (bnc#698250)
|
|
|
|
|
|
2011-09-02 19:04:47 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 2 10:42:54 UTC 2011 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.102:
|
|
|
|
|
+ pkexec:
|
|
|
|
|
- fdo#38769: Support running X11 apps
|
|
|
|
|
- Avoid time-of-check-to-time-of-use problems with parent
|
|
|
|
|
process
|
|
|
|
|
+ Fix backend crash if a .policy file does not specify <message>
|
|
|
|
|
+ Fix multi-line pam prompt handling
|
|
|
|
|
+ Don't show diagnostic messages intended for the administrator
|
|
|
|
|
to the end user
|
|
|
|
|
+ PolkitUnixProcess:
|
|
|
|
|
- Clarify that the real uid is returned, not the effective one
|
|
|
|
|
- Record the uid of the process
|
|
|
|
|
+ Backend: Use polkit_unix_process_get_uid() to get the owner of
|
|
|
|
|
a process
|
|
|
|
|
+ Introspection fixes:
|
|
|
|
|
- Add --c-include to the gir files
|
|
|
|
|
- Specify exported pkg-config files in GIRs
|
|
|
|
|
+ Build fix.
|
|
|
|
|
- Drop polkit-CVE-2011-1485-1.patch, polkit-CVE-2011-1485-2.patch,
|
|
|
|
|
polkit-CVE-2011-1485-3.patch, polkit-CVE-2011-1485-4.patch: fixed
|
|
|
|
|
upstream.
|
|
|
|
|
- Remove service usage, following the new consensus on Factory
|
|
|
|
|
packaging.
|
|
|
|
|
|
2011-08-12 20:03:34 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 10 12:20:39 UTC 2011 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
|
|
- BuildIgnore ruby, which is being dragged in via indirect
|
|
|
|
|
dependencies by gtk-doc for one of the helpers, which we do not
|
|
|
|
|
need during the build of polkit. Not dragging ruby in resolves a
|
|
|
|
|
build-cycle.
|
|
|
|
|
|
2011-05-06 23:12:17 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 5 19:35:05 CEST 2011 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Use %set_permissions instead of deprecated %run_permissions in
|
|
|
|
|
%post.
|
|
|
|
|
- Add permissions PreReq, which was missing before.
|
|
|
|
|
|
2011-04-26 21:21:00 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 26 21:19:32 CEST 2011 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- use LGPLv2.1+ in spec file
|
|
|
|
|
|
2011-04-26 19:03:02 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 26 18:24:01 CEST 2011 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- stat race condition (CVE-2011-1485) (bnc#688788)
|
|
|
|
|
|
2011-04-15 16:12:10 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 6 15:40:51 UTC 2011 - fcrozat@novell.com
|
|
|
|
|
|
|
|
|
|
- Remove PolkitAgent-1.0.typelib from main package, it is in
|
|
|
|
|
library package.
|
|
|
|
|
|
2011-03-09 15:03:42 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 9 13:54:11 UTC 2011 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- update to 0.101:
|
|
|
|
|
* tons of bug fixes, see NEWS
|
|
|
|
|
|
2010-11-11 13:26:16 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 10 15:04:36 UTC 2010 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- fix file list
|
|
|
|
|
|
2010-08-26 11:13:54 +02:00
|
|
|
|
-------------------------------------------------------------------
|
2010-09-17 21:00:24 +02:00
|
|
|
|
Thu Sep 16 09:34:50 CEST 2010 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.99:
|
|
|
|
|
+ Remove duplicate definitions of enumeration types
|
|
|
|
|
+ Fix (correct) GCC warning about possibly-uninitialized variable
|
|
|
|
|
+ Fix another GCC uninitialized variable warning
|
|
|
|
|
+ fdo#29816: Install polkitagentenumtypes.h
|
|
|
|
|
- Drop polkit-install-missing-header.patch: fixed upstream.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2010-08-26 11:13:54 +02:00
|
|
|
|
Thu Aug 26 10:04:44 CEST 2010 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.98:
|
|
|
|
|
+ Fix scanning of unix-process subjects
|
|
|
|
|
+ Add textual authentication agent and use it in pkexec(1)
|
|
|
|
|
+ Fix ConsoleKit interaction bug
|
|
|
|
|
+ pkexec: add --disable-internal-agent option
|
|
|
|
|
+ pkcheck: add --enable-internal-agent option
|
|
|
|
|
+ Fix wording in pkexec(1) man page
|
|
|
|
|
+ Various doc cleanups
|
|
|
|
|
- Changes from version 0.97:
|
|
|
|
|
+ Port to GDBus
|
|
|
|
|
+ Add shadow authentication support
|
|
|
|
|
+ Remove Lock Down functionality
|
|
|
|
|
+ fdo#26982: pkexec information disclosure vulnerability
|
|
|
|
|
+ Make polkitd accept --replace and gracefully handle SIGINT
|
|
|
|
|
+ Implement polkit_temporary_authorization_new_for_gvariant()
|
|
|
|
|
+ Make NameOwnerChanged a private impl detail of the interactive
|
|
|
|
|
authority
|
|
|
|
|
+ Add a GPermission implementation
|
|
|
|
|
+ PolkitAuthority: Implement failable initialization
|
|
|
|
|
+ PolkitAuthority: Add g_return_if_fail() checks
|
|
|
|
|
+ Add g_return_if_fail() to all public API entry points
|
|
|
|
|
+ Use polkit_authority_get_sync() instead of deprecated
|
|
|
|
|
polkit_authority_get
|
|
|
|
|
+ PolkitBackend: Don't export unneeded convenience API
|
|
|
|
|
+ Update GI annotations
|
|
|
|
|
+ Don't dist org.freedesktop.ConsoleKit.xml.
|
|
|
|
|
+ Properly reference headers
|
|
|
|
|
+ fdo#29051: Configuration reload on every query
|
|
|
|
|
- Drop pkexec-information-disclosure.patch: fixed upstream.
|
|
|
|
|
- Add polkit-install-missing-header.patch to install a header that
|
|
|
|
|
should get installed.
|
|
|
|
|
- Remove eggdbus-devel BuildRequires.
|
|
|
|
|
- Build with introspection support: add gobject-introspection
|
|
|
|
|
BuildRequires and pass --enable-introspection to configure.
|
|
|
|
|
- Fix groups of all packages to be valid groups.
|
|
|
|
|
|
2010-07-20 20:13:37 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 28 06:38:35 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- use %_smp_mflags
|
|
|
|
|
|
2010-04-16 01:31:12 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 9 19:14:09 CEST 2010 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- fix pkexec information disclosure
|
|
|
|
|
(fdo#26982, CVE-2010-0750, bnc#593959)
|
|
|
|
|
|
2010-01-21 10:44:18 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 18 14:20:11 CET 2010 - dmueller@suse.de
|
|
|
|
|
|
|
|
|
|
- add baselibs.conf
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 18 12:56:02 CET 2010 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- new upstream release 0.96
|
|
|
|
|
- Bug 25367 — Also read local authority configuration data from /etc
|
|
|
|
|
- Run the open_session part of the PAM stack in pkexec(1)
|
|
|
|
|
- Bug 25594 – System logging
|
|
|
|
|
- Properly handle return value from getpwnam_r()
|
|
|
|
|
- Fix error message when no authentication agent is available
|
|
|
|
|
- Make pkexec(1) validate environment variables
|
|
|
|
|
- Make pkexec(1) use the syslogging facilities
|
|
|
|
|
- Save original cwd in pkexec(1) since it will change during the life-time
|
|
|
|
|
- Complain on stderr, not stdout
|
|
|
|
|
- Don't log authorization checks
|
|
|
|
|
|
2010-01-18 13:07:53 +01:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 6 18:22:23 CET 2010 - dmueller@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 0.95:
|
|
|
|
|
The major change this release is that the lockdown feature has
|
|
|
|
|
been cleaned up in a way so it isn't specific to the local
|
|
|
|
|
authority. See the NEWS files for more details.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 16 10:44:34 CET 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- Package documentation as noarch
|
|
|
|
|
|
2009-08-28 20:12:54 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 19 23:22:44 CEST 2009 - vuntz@novell.com
|
|
|
|
|
|
|
|
|
|
- Add Requires on polkit to libpolkit0: all applications using
|
|
|
|
|
libpolkit0 will really need polkit to be installed to work
|
|
|
|
|
properly.
|
|
|
|
|
|
2009-08-13 23:33:53 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 13 04:31:38 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- new upstream release 0.94
|
|
|
|
|
- Allow unprivileged callers to check authorizations
|
|
|
|
|
- Don't spawn man(1) from a setuid program
|
|
|
|
|
- Add polkit.retains_authorization_after_challenge to authz result
|
|
|
|
|
- Ensure all fds except stdin/stdout/stderr are closed after exec(2)
|
|
|
|
|
- Be more careful when determining process start time
|
|
|
|
|
- Remove temporary authorization when the subject it applies to vanishes
|
|
|
|
|
- Generate GI gir and typelibs for libpolkit-gobject-1
|
|
|
|
|
- drop patches which are in the release now
|
|
|
|
|
- disable introspection
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 11 21:23:49 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- add upstream patches:
|
|
|
|
|
polkit-close-stdfds.patch
|
|
|
|
|
polkit-no-man-spawn.patch
|
|
|
|
|
polkit-proc-stat-parse-fix.patch
|
|
|
|
|
- drop rpmlint patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 6 17:36:16 CEST 2009 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- check for the right binary in verify_permisisons
|
|
|
|
|
|
2009-07-30 18:07:53 +02:00
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 30 17:32:41 CEST 2009 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- disable suid bit for now to get software build on top
|
|
|
|
|
- split out libraries to follow shared library policy
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 21 03:20:55 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- update to version 0.93
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Jul 19 15:31:44 CEST 2009 - kay.sievers@novell.com
|
|
|
|
|
|
|
|
|
|
- initial import of polkit 0.92
|
|
|
|
|
|