Commit Graph

168 Commits

Author SHA256 Message Date
Dominique Leuenberger
c2858eb5bb Accepting request 899432 from Base:System
- Fix verifyscript: the path to the binary was wrongly defined as
  %{_libexecdir}/lib.

- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
 (bsc#1186497)
  CVE-2021-3560.patch

OBS-URL: https://build.opensuse.org/request/show/899432
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=76
2021-06-12 18:05:39 +00:00
1df0a7ac75 - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
(bsc#1186497)
  CVE-2021-3560.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=156
2021-06-11 09:24:05 +00:00
a04790d11c osc copypac from project:Base:System package:polkit revision:149, using keep-link
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=155
2021-06-11 09:21:57 +00:00
061d318e1e OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=154 2021-06-11 08:49:20 +00:00
f162d3954a OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=153 2021-06-11 07:52:46 +00:00
99afa54882 OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=152 2021-06-11 07:47:54 +00:00
8e8941fad6 OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=151 2021-06-11 07:42:03 +00:00
f2744913e5 - polkit 0.119.
Highlights:
  - meson build system added
  - CVE-2021-3560 mitigation (bsc#1186497)
  - properties in text listener

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=150
2021-06-11 07:23:39 +00:00
cd6d075e79 Accepting request 898646 from home:dimstar:Factory
- Fix verifyscript: the path to the binary was wrongly defined as
  %{_libexecdir}/lib.

OBS-URL: https://build.opensuse.org/request/show/898646
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=149
2021-06-09 07:12:21 +00:00
Dominique Leuenberger
aa18efd35c Accepting request 879208 from Base:System
OBS-URL: https://build.opensuse.org/request/show/879208
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=75
2021-03-17 19:13:26 +00:00
4e6f6da3cb Accepting request 878406 from home:kukuk:branches:Base:System
- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d

OBS-URL: https://build.opensuse.org/request/show/878406
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=148
2021-03-15 12:53:01 +00:00
Dominique Leuenberger
c3e13236a6 Accepting request 860124 from Base:System
OBS-URL: https://build.opensuse.org/request/show/860124
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=74
2021-01-08 16:32:10 +00:00
0baef1ca5f Accepting request 860113 from home:mgerstner:branches:Base:System
move to libexec dir is still not complete:
- add polkit-adjust-libexec-path.patch: There is another hard coded reference
  of lib/ in the code that this patch addresses.
- also adjust invocation of %set_permissions and %verify_permissions to new
  libexec dir location.

OBS-URL: https://build.opensuse.org/request/show/860113
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=147
2021-01-04 10:16:58 +00:00
Dominique Leuenberger
210fab84dc https://bugzilla.opensuse.org/show_bug.cgi?id=1180474
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=73
2020-12-31 09:31:21 +00:00
Dominique Leuenberger
6d10544d71 Accepting request 859155 from Base:System
- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors. (forwarded request 859146 from mgerstner)

OBS-URL: https://build.opensuse.org/request/show/859155
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=72
2020-12-30 16:11:54 +00:00
95fb60a5f1 Accepting request 859146 from home:mgerstner:branches:Base:System
- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.

OBS-URL: https://build.opensuse.org/request/show/859146
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=144
2020-12-29 09:02:16 +00:00
cdbba27e31 Accepting request 859031 from home:mgerstner:branches:Base:System
- Install private binaries into libexec instead of into lib. For this an
  override of the custom libprivdir variable is necessary, because upstream
  explicitly moved away from libexecdir via upstram commit
  6fbcc6cd839680fcefd81c4a43676e7c031c9859.

OBS-URL: https://build.opensuse.org/request/show/859031
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=143
2020-12-29 07:54:33 +00:00
Dominique Leuenberger
d768cf64f0 Accepting request 844237 from Base:System
OBS-URL: https://build.opensuse.org/request/show/844237
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=71
2020-10-29 08:22:23 +00:00
86e89da2f9 Accepting request 843557 from home:iznogood:branches:Base:System
- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.

OBS-URL: https://build.opensuse.org/request/show/843557
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=141
2020-10-27 09:39:20 +00:00
Dominique Leuenberger
5fbf69f657 Accepting request 823734 from Base:System
OBS-URL: https://build.opensuse.org/request/show/823734
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=70
2020-08-03 12:12:38 +00:00
84d393c68f Accepting request 823732 from home:iznogood:branches:Base:System
New upstream release

OBS-URL: https://build.opensuse.org/request/show/823732
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=139
2020-07-31 12:03:13 +00:00
Dominique Leuenberger
75bc550835 Accepting request 754301 from Base:System
OBS-URL: https://build.opensuse.org/request/show/754301
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=69
2019-12-11 10:58:38 +00:00
0919632dac Accepting request 752325 from home:iznogood:branches:Base:System
- Fix usage of libexecdir instead of prefix/lib where applicable.

OBS-URL: https://build.opensuse.org/request/show/752325
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=137
2019-12-05 09:19:13 +00:00
Dominique Leuenberger
57944da805 Accepting request 736148 from Base:System
- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053) (forwarded request 736147 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/736148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=68
2019-10-10 09:52:34 +00:00
ca12638c98 Accepting request 736147 from home:msmeissn:branches:Base:System
- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)

OBS-URL: https://build.opensuse.org/request/show/736147
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=135
2019-10-08 12:46:03 +00:00
Dominique Leuenberger
60d70b0d21 Accepting request 709799 from Base:System
OBS-URL: https://build.opensuse.org/request/show/709799
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=67
2019-06-22 09:03:16 +00:00
66fec04ebd Accepting request 706749 from home:iznogood:branches:Base:System
New upstream release .

NOTE! -- Do not ack this until mozjs60 sub https://build.opensuse.org/request/show/706263 is acked into Factory -- Needs this change to build OK.

OBS-URL: https://build.opensuse.org/request/show/706749
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=133
2019-06-13 19:54:52 +00:00
Dominique Leuenberger
3aadbf5b3f Accepting request 702612 from Base:System
Do not forcibly require systemd

OBS-URL: https://build.opensuse.org/request/show/702612
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=66
2019-05-21 08:21:46 +00:00
edb824684c Accepting request 702025 from home:dimstar:Factory
- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.

OBS-URL: https://build.opensuse.org/request/show/702025
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=131
2019-05-10 14:54:03 +00:00
Dominique Leuenberger
a5cc81e759 Accepting request 698215 from Base:System
- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow (forwarded request 698177 from jubalh)

OBS-URL: https://build.opensuse.org/request/show/698215
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=65
2019-05-03 20:06:48 +00:00
1d920613ed Accepting request 698177 from home:jubalh:branches:Base:System
- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow

OBS-URL: https://build.opensuse.org/request/show/698177
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=129
2019-04-26 12:35:25 +00:00
Dominique Leuenberger
3a5319c5e0 Accepting request 660357 from Base:System
- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788) (forwarded request 660356 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/660357
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=64
2018-12-26 23:21:37 +00:00
08b20c96ba Accepting request 660356 from home:msmeissn:branches:Base:System
- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)

OBS-URL: https://build.opensuse.org/request/show/660356
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=127
2018-12-20 18:04:49 +00:00
Dominique Leuenberger
0a21c7be49 Accepting request 630680 from Base:System
OBS-URL: https://build.opensuse.org/request/show/630680
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=63
2018-08-28 07:21:58 +00:00
78f3f3ba95 Accepting request 629743 from home:iznogood:branches:Base:System
- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).

OBS-URL: https://build.opensuse.org/request/show/629743
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=125
2018-08-21 05:03:16 +00:00
Dominique Leuenberger
a3e5647872 Accepting request 622066 from Base:System
- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)

OBS-URL: https://build.opensuse.org/request/show/622066
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=62
2018-07-18 20:35:02 +00:00
9049ba1cda - Update to version 0.115:
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function

OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=123
2018-07-11 10:50:47 +00:00
Dominique Leuenberger
9b4d809aaa Accepting request 595145 from Base:System
- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode <halfline@gmail.com> public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139). (forwarded request 595009 from iznogood)

OBS-URL: https://build.opensuse.org/request/show/595145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=61
2018-04-26 11:25:59 +00:00
eb1406e636 Accepting request 595009 from home:iznogood:branches:Base:System
- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode <halfline@gmail.com> public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).

OBS-URL: https://build.opensuse.org/request/show/595009
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=121
2018-04-10 08:51:08 +00:00
Dominique Leuenberger
e2ff049f7d Accepting request 585102 from Base:System
OBS-URL: https://build.opensuse.org/request/show/585102
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=60
2018-03-12 11:03:04 +00:00
60f1b7fe5f Accepting request 581654 from openSUSE:Factory:RISCV
- pkexec.patch: pkexec: allow --version and --help even if not setuid

OBS-URL: https://build.opensuse.org/request/show/581654
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=119
2018-03-09 15:50:59 +00:00
Dominique Leuenberger
ac6004c002 Accepting request 581491 from Base:System
cleaned (forwarded request 581346 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/581491
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=59
2018-03-07 09:28:41 +00:00
0effc29d63 Accepting request 581346 from GNOME:Next
cleaned

OBS-URL: https://build.opensuse.org/request/show/581346
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=117
2018-02-28 21:45:09 +00:00
Dominique Leuenberger
ba3f3705ac Accepting request 519773 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/519773
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=58
2017-09-04 10:17:41 +00:00
Bjørn Lie
45877daa6a Accepting request 519461 from GNOME:Next
Scripted push of project GNOME:Next

OBS-URL: https://build.opensuse.org/request/show/519461
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=115
2017-08-30 21:08:18 +00:00
Dominique Leuenberger
01433480c4 Accepting request 503611 from Base:System
- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch). (forwarded request 503447 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/503611
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=57
2017-06-18 11:49:34 +00:00
2b176576d5 Accepting request 503447 from home:lnussel:branches:Base:System
- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).

OBS-URL: https://build.opensuse.org/request/show/503447
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=113
2017-06-14 07:42:13 +00:00
Dominique Leuenberger
2e150fc1e3 Accepting request 400666 from Base:System
- Use pkgconfig() instead of requiring systemd package names directly.

- systemd.pc is shipped by systemd main package (bsc#983167) (forwarded request 400659 from fbui)

OBS-URL: https://build.opensuse.org/request/show/400666
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=56
2016-06-12 16:51:08 +00:00
f6c497c819 Accepting request 400659 from home:fbui:branches:Base:System
- Use pkgconfig() instead of requiring systemd package names directly.

- systemd.pc is shipped by systemd main package (bsc#983167)

OBS-URL: https://build.opensuse.org/request/show/400659
OBS-URL: https://build.opensuse.org/package/show/Base:System/polkit?expand=0&rev=111
2016-06-08 11:19:35 +00:00
Dominique Leuenberger
9cd6695f73 Accepting request 346801 from Base:System
- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to 
  a systemd bug. bsc#954139

OBS-URL: https://build.opensuse.org/request/show/346801
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/polkit?expand=0&rev=55
2015-12-09 19:33:30 +00:00