From 86cae0cb5d75b3d4e78161024eba42a153dae2b9 Mon Sep 17 00:00:00 2001
From: Jakub Filak <jfilak@redhat.com>
Date: Tue, 6 May 2014 13:08:27 +0200
Subject: [PATCH] Fix desktop centric polkit policy file

---
 ...x-desktop-centric-polkit-policy-file.patch | 44 +++++++++++++++++++
 abrt.spec                                     |  7 ++-
 2 files changed, 50 insertions(+), 1 deletion(-)
 create mode 100644 0002-dbus-Fix-desktop-centric-polkit-policy-file.patch

diff --git a/0002-dbus-Fix-desktop-centric-polkit-policy-file.patch b/0002-dbus-Fix-desktop-centric-polkit-policy-file.patch
new file mode 100644
index 0000000..f5743e9
--- /dev/null
+++ b/0002-dbus-Fix-desktop-centric-polkit-policy-file.patch
@@ -0,0 +1,44 @@
+From e98c8766655216db3d9a08b1fa52ba7decf57c46 Mon Sep 17 00:00:00 2001
+From: Stef Walter <stefw@redhat.com>
+Date: Mon, 5 May 2014 08:41:00 +0200
+Subject: [PATCH 2/2] dbus: Fix desktop centric polkit policy file
+
+In order to allow use of ABRT's DBus API on servers, the polkit
+policy should allow admin usage even when not logged in an active
+seat (ie: monitor and keyboard). Otherwise use from ssh logins and
+Cockpit is prevented.
+---
+ src/dbus/abrt_polkit.policy | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/src/dbus/abrt_polkit.policy b/src/dbus/abrt_polkit.policy
+index 06008b4..a3425d9 100644
+--- a/src/dbus/abrt_polkit.policy
++++ b/src/dbus/abrt_polkit.policy
+@@ -19,9 +19,9 @@ Copyright (c) 2012 ABRT Team <crash-catcher@fedorahosted.com>
+     <description>Get problems from all users</description>
+     <message>Reading others problems requires authentication</message>
+     <defaults>
+-      <allow_any>no</allow_any>
++      <allow_any>auth_admin</allow_any>
+       <allow_active>auth_admin_keep</allow_active>
+-      <allow_inactive>no</allow_inactive>
++      <allow_inactive>auth_admin</allow_inactive>
+     </defaults>
+   </action>
+ 
+@@ -30,9 +30,9 @@ Copyright (c) 2012 ABRT Team <crash-catcher@fedorahosted.com>
+     <description>Set value of configuration properties</description>
+     <message>Update configuration values reuquires authentication</message>
+     <defaults>
+-      <allow_any>no</allow_any>
++      <allow_any>auth_admin</allow_any>
+       <allow_active>auth_admin_keep</allow_active>
+-      <allow_inactive>no</allow_inactive>
++      <allow_inactive>auth_admin</allow_inactive>
+     </defaults>
+   </action>
+ 
+-- 
+1.9.0
+
diff --git a/abrt.spec b/abrt.spec
index a454fc3..2a5c51e 100644
--- a/abrt.spec
+++ b/abrt.spec
@@ -40,7 +40,7 @@
 Summary: Automatic bug detection and reporting tool
 Name: abrt
 Version: 2.2.1
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPLv2+
 Group: Applications/System
 URL: https://fedorahosted.org/abrt/
@@ -48,6 +48,8 @@ Source: https://fedorahosted.org/released/%{name}/%{name}-%{version}.tar.gz
 # don't remove this patch, packages in rawhide are not signed!
 Patch0: disable-OpenGPGCheck-in-Fedora-Rawhide.patch
 
+Patch2: 0002-dbus-Fix-desktop-centric-polkit-policy-file.patch
+
 # '%%autosetup -S git' -> git
 BuildRequires: git
 
@@ -922,6 +924,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh
 
 %changelog
+* Tue May 06 2014 Jakub Filak <jfilak@redhat.com> 2.2.1-2
+- dbus: Fix desktop centric polkit policy file
+
 * Tue Apr 22 2014 Jakub Filak <jfilak@redhat.com> 2.2.1-1
 - stop using deprecated json-c functions
 - vmcore: start the service after kdump service