Fix desktop centric polkit policy file

This commit is contained in:
Jakub Filak 2014-05-06 13:08:27 +02:00
parent ffb34b1eea
commit 86cae0cb5d
2 changed files with 50 additions and 1 deletions

View File

@ -0,0 +1,44 @@
From e98c8766655216db3d9a08b1fa52ba7decf57c46 Mon Sep 17 00:00:00 2001
From: Stef Walter <stefw@redhat.com>
Date: Mon, 5 May 2014 08:41:00 +0200
Subject: [PATCH 2/2] dbus: Fix desktop centric polkit policy file
In order to allow use of ABRT's DBus API on servers, the polkit
policy should allow admin usage even when not logged in an active
seat (ie: monitor and keyboard). Otherwise use from ssh logins and
Cockpit is prevented.
---
src/dbus/abrt_polkit.policy | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/dbus/abrt_polkit.policy b/src/dbus/abrt_polkit.policy
index 06008b4..a3425d9 100644
--- a/src/dbus/abrt_polkit.policy
+++ b/src/dbus/abrt_polkit.policy
@@ -19,9 +19,9 @@ Copyright (c) 2012 ABRT Team <crash-catcher@fedorahosted.com>
<description>Get problems from all users</description>
<message>Reading others problems requires authentication</message>
<defaults>
- <allow_any>no</allow_any>
+ <allow_any>auth_admin</allow_any>
<allow_active>auth_admin_keep</allow_active>
- <allow_inactive>no</allow_inactive>
+ <allow_inactive>auth_admin</allow_inactive>
</defaults>
</action>
@@ -30,9 +30,9 @@ Copyright (c) 2012 ABRT Team <crash-catcher@fedorahosted.com>
<description>Set value of configuration properties</description>
<message>Update configuration values reuquires authentication</message>
<defaults>
- <allow_any>no</allow_any>
+ <allow_any>auth_admin</allow_any>
<allow_active>auth_admin_keep</allow_active>
- <allow_inactive>no</allow_inactive>
+ <allow_inactive>auth_admin</allow_inactive>
</defaults>
</action>
--
1.9.0

View File

@ -40,7 +40,7 @@
Summary: Automatic bug detection and reporting tool Summary: Automatic bug detection and reporting tool
Name: abrt Name: abrt
Version: 2.2.1 Version: 2.2.1
Release: 1%{?dist} Release: 2%{?dist}
License: GPLv2+ License: GPLv2+
Group: Applications/System Group: Applications/System
URL: https://fedorahosted.org/abrt/ URL: https://fedorahosted.org/abrt/
@ -48,6 +48,8 @@ Source: https://fedorahosted.org/released/%{name}/%{name}-%{version}.tar.gz
# don't remove this patch, packages in rawhide are not signed! # don't remove this patch, packages in rawhide are not signed!
Patch0: disable-OpenGPGCheck-in-Fedora-Rawhide.patch Patch0: disable-OpenGPGCheck-in-Fedora-Rawhide.patch
Patch2: 0002-dbus-Fix-desktop-centric-polkit-policy-file.patch
# '%%autosetup -S git' -> git # '%%autosetup -S git' -> git
BuildRequires: git BuildRequires: git
@ -922,6 +924,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
%config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh
%changelog %changelog
* Tue May 06 2014 Jakub Filak <jfilak@redhat.com> 2.2.1-2
- dbus: Fix desktop centric polkit policy file
* Tue Apr 22 2014 Jakub Filak <jfilak@redhat.com> 2.2.1-1 * Tue Apr 22 2014 Jakub Filak <jfilak@redhat.com> 2.2.1-1
- stop using deprecated json-c functions - stop using deprecated json-c functions
- vmcore: start the service after kdump service - vmcore: start the service after kdump service