2012-11-14 19:34:17 +00:00
|
|
|
|
# Only enable if using patches that touches configure.ac,
|
|
|
|
|
# Makefile.am or other build system related files
|
|
|
|
|
#
|
2018-07-10 16:48:26 +00:00
|
|
|
|
#define enable_autoreconf 1
|
2012-11-14 19:34:17 +00:00
|
|
|
|
|
2013-05-10 23:50:29 +00:00
|
|
|
|
Summary: An authorization framework
|
2009-06-08 20:42:27 +00:00
|
|
|
|
Name: polkit
|
2018-07-10 16:48:26 +00:00
|
|
|
|
Version: 0.115
|
2019-01-09 11:53:53 +00:00
|
|
|
|
Release: 2.1%{?dist}
|
2009-06-09 13:33:04 +00:00
|
|
|
|
License: LGPLv2+
|
2012-06-07 18:05:54 +00:00
|
|
|
|
URL: http://www.freedesktop.org/wiki/Software/polkit
|
2017-04-04 19:57:35 +00:00
|
|
|
|
Source0: http://www.freedesktop.org/software/polkit/releases/%{name}-%{version}.tar.gz
|
|
|
|
|
Source1: http://www.freedesktop.org/software/polkit/releases/%{name}-%{version}.tar.gz.sign
|
2017-04-04 19:58:07 +00:00
|
|
|
|
Group: System Environment/Libraries
|
2018-12-07 15:48:03 +00:00
|
|
|
|
|
|
|
|
|
Patch1: CVE-2018-19788.patch
|
2019-01-09 11:53:53 +00:00
|
|
|
|
Patch2: start_time-reuse-exploit.patch
|
2018-12-07 15:48:03 +00:00
|
|
|
|
|
2018-07-10 16:48:26 +00:00
|
|
|
|
BuildRequires: gcc-c++
|
2012-06-07 18:05:54 +00:00
|
|
|
|
BuildRequires: glib2-devel >= 2.30.0
|
2009-06-08 20:42:27 +00:00
|
|
|
|
BuildRequires: expat-devel
|
|
|
|
|
BuildRequires: pam-devel
|
|
|
|
|
BuildRequires: gtk-doc
|
|
|
|
|
BuildRequires: intltool
|
2009-08-12 19:25:45 +00:00
|
|
|
|
BuildRequires: gobject-introspection-devel
|
2015-06-19 01:52:49 +00:00
|
|
|
|
BuildRequires: systemd, systemd-devel
|
2018-04-03 19:42:20 +00:00
|
|
|
|
BuildRequires: pkgconfig(mozjs-52)
|
2018-04-03 19:32:28 +00:00
|
|
|
|
BuildRequires: git
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
2012-11-14 19:34:17 +00:00
|
|
|
|
%if 0%{?enable_autoreconf}
|
|
|
|
|
BuildRequires: autoconf
|
|
|
|
|
BuildRequires: automake
|
|
|
|
|
BuildRequires: libtool
|
|
|
|
|
%endif
|
|
|
|
|
|
2013-05-15 21:40:25 +00:00
|
|
|
|
Requires: dbus, polkit-pkla-compat
|
2015-07-10 17:03:00 +00:00
|
|
|
|
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
2012-06-29 21:25:00 +00:00
|
|
|
|
Requires(pre): shadow-utils
|
2013-05-10 23:40:25 +00:00
|
|
|
|
Requires(post): /sbin/ldconfig, systemd
|
|
|
|
|
Requires(preun): systemd
|
|
|
|
|
Requires(postun): /sbin/ldconfig, systemd
|
2012-06-29 21:25:00 +00:00
|
|
|
|
|
2017-04-04 19:58:07 +00:00
|
|
|
|
Obsoletes: PolicyKit <= 0.10
|
|
|
|
|
Provides: PolicyKit = 0.11
|
|
|
|
|
|
|
|
|
|
# polkit saw some API/ABI changes from 0.96 to 0.97 so require a
|
|
|
|
|
# sufficiently new polkit-gnome package
|
|
|
|
|
Conflicts: polkit-gnome < 0.97
|
|
|
|
|
|
|
|
|
|
Obsoletes: polkit-desktop-policy < 0.103
|
|
|
|
|
Provides: polkit-desktop-policy = 0.103
|
|
|
|
|
|
|
|
|
|
Obsoletes: polkit-js-engine < 0.110-4
|
|
|
|
|
Provides: polkit-js-engine = %{version}-%{release}
|
|
|
|
|
|
2015-07-12 13:35:17 +00:00
|
|
|
|
# when -libs was split out, handle multilib upgrade path -- rex
|
2015-07-14 21:12:47 +00:00
|
|
|
|
Obsoletes: polkit < 0.113-3
|
2015-07-12 13:35:17 +00:00
|
|
|
|
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%description
|
2012-04-24 17:01:14 +00:00
|
|
|
|
polkit is a toolkit for defining and handling authorizations. It is
|
|
|
|
|
used for allowing unprivileged processes to speak to privileged
|
2009-06-08 20:42:27 +00:00
|
|
|
|
processes.
|
|
|
|
|
|
|
|
|
|
%package devel
|
2012-04-24 17:01:14 +00:00
|
|
|
|
Summary: Development files for polkit
|
2009-06-08 20:42:27 +00:00
|
|
|
|
Group: Development/Libraries
|
2015-07-10 17:03:00 +00:00
|
|
|
|
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
2009-06-08 20:42:27 +00:00
|
|
|
|
Requires: %name-docs = %{version}-%{release}
|
|
|
|
|
Requires: glib2-devel
|
2017-04-04 19:58:07 +00:00
|
|
|
|
Obsoletes: PolicyKit-devel <= 0.10
|
|
|
|
|
Provides: PolicyKit-devel = 0.11
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%description devel
|
2012-04-24 17:01:14 +00:00
|
|
|
|
Development files for polkit.
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%package docs
|
2012-04-24 17:01:14 +00:00
|
|
|
|
Summary: Development documentation for polkit
|
2009-06-08 20:42:27 +00:00
|
|
|
|
Group: Development/Libraries
|
|
|
|
|
Requires: %name-devel = %{version}-%{release}
|
2017-04-04 19:58:07 +00:00
|
|
|
|
Obsoletes: PolicyKit-docs <= 0.10
|
|
|
|
|
Provides: PolicyKit-docs = 0.11
|
2012-02-14 02:07:13 +00:00
|
|
|
|
BuildArch: noarch
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%description docs
|
2012-04-24 17:01:14 +00:00
|
|
|
|
Development documentation for polkit.
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
2014-11-08 20:28:23 +00:00
|
|
|
|
%package libs
|
|
|
|
|
Summary: Libraries for polkit
|
|
|
|
|
Group: Development/Libraries
|
|
|
|
|
|
|
|
|
|
%description libs
|
|
|
|
|
Libraries files for polkit.
|
|
|
|
|
|
|
|
|
|
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%prep
|
2018-04-03 19:32:28 +00:00
|
|
|
|
%autosetup -S git
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%build
|
2012-11-14 19:34:17 +00:00
|
|
|
|
%if 0%{?enable_autoreconf}
|
2017-04-04 19:58:07 +00:00
|
|
|
|
autoreconf -i
|
2012-11-14 19:34:17 +00:00
|
|
|
|
%endif
|
2017-04-04 19:58:07 +00:00
|
|
|
|
# we can't use _hardened_build here, see
|
|
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=962005
|
|
|
|
|
export CFLAGS='-fPIC %optflags'
|
|
|
|
|
export LDFLAGS='-pie -Wl,-z,now -Wl,-z,relro'
|
2010-11-13 04:02:06 +00:00
|
|
|
|
%configure --enable-gtk-doc \
|
|
|
|
|
--disable-static \
|
|
|
|
|
--enable-introspection \
|
2013-02-14 13:31:39 +00:00
|
|
|
|
--disable-examples \
|
2017-04-04 19:57:35 +00:00
|
|
|
|
--enable-libsystemd-login=yes --with-mozjs=mozjs-17.0
|
2017-04-04 19:58:07 +00:00
|
|
|
|
make V=1
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%install
|
2017-04-04 19:58:07 +00:00
|
|
|
|
make install DESTDIR=$RPM_BUILD_ROOT INSTALL='install -p'
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
2017-04-04 19:58:07 +00:00
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%find_lang polkit-1
|
|
|
|
|
|
2012-06-07 18:05:54 +00:00
|
|
|
|
%pre
|
|
|
|
|
getent group polkitd >/dev/null || groupadd -r polkitd
|
|
|
|
|
getent passwd polkitd >/dev/null || useradd -r -g polkitd -d / -s /sbin/nologin -c "User for polkitd" polkitd
|
|
|
|
|
exit 0
|
|
|
|
|
|
2013-05-10 23:40:25 +00:00
|
|
|
|
%post
|
|
|
|
|
# The implied (systemctl preset) will fail and complain, but the macro hides
|
|
|
|
|
# and ignores the fact. This is in fact what we want, polkit.service does not
|
|
|
|
|
# have an [Install] section and it is always started on demand.
|
|
|
|
|
%systemd_post polkit.service
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
2013-05-10 23:40:25 +00:00
|
|
|
|
%preun
|
|
|
|
|
%systemd_preun polkit.service
|
|
|
|
|
|
|
|
|
|
%postun
|
2015-07-02 18:37:11 +00:00
|
|
|
|
%systemd_postun_with_restart polkit.service
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%files -f polkit-1.lang
|
2017-04-04 19:58:07 +00:00
|
|
|
|
%doc COPYING NEWS README
|
2009-08-12 19:25:45 +00:00
|
|
|
|
%{_datadir}/man/man1/*
|
|
|
|
|
%{_datadir}/man/man8/*
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%{_datadir}/dbus-1/system-services/*
|
2013-05-10 23:43:02 +00:00
|
|
|
|
%{_unitdir}/polkit.service
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%dir %{_datadir}/polkit-1/
|
|
|
|
|
%dir %{_datadir}/polkit-1/actions
|
2012-06-07 18:05:54 +00:00
|
|
|
|
%attr(0700,polkitd,root) %dir %{_datadir}/polkit-1/rules.d
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy
|
2012-06-07 18:05:54 +00:00
|
|
|
|
%dir %{_sysconfdir}/polkit-1
|
|
|
|
|
%{_sysconfdir}/polkit-1/rules.d/50-default.rules
|
|
|
|
|
%attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
|
|
|
|
|
%{_sysconfdir}/pam.d/polkit-1
|
|
|
|
|
%{_bindir}/pkaction
|
|
|
|
|
%{_bindir}/pkcheck
|
2012-04-24 17:01:14 +00:00
|
|
|
|
%{_bindir}/pkttyagent
|
2012-06-07 18:05:54 +00:00
|
|
|
|
%dir %{_prefix}/lib/polkit-1
|
|
|
|
|
%{_prefix}/lib/polkit-1/polkitd
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
# see upstream docs for why these permissions are necessary
|
|
|
|
|
%attr(4755,root,root) %{_bindir}/pkexec
|
2012-06-07 18:05:54 +00:00
|
|
|
|
%attr(4755,root,root) %{_prefix}/lib/polkit-1/polkit-agent-helper-1
|
2009-08-12 19:25:45 +00:00
|
|
|
|
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%files devel
|
|
|
|
|
%{_libdir}/lib*.so
|
|
|
|
|
%{_libdir}/pkgconfig/*.pc
|
2010-11-13 04:02:06 +00:00
|
|
|
|
%{_datadir}/gir-1.0/*.gir
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%{_includedir}/*
|
2017-04-13 17:14:27 +00:00
|
|
|
|
%{_datadir}/gettext/its/polkit.its
|
|
|
|
|
%{_datadir}/gettext/its/polkit.loc
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
|
|
|
|
%files docs
|
2010-08-23 23:19:35 +00:00
|
|
|
|
%{_datadir}/gtk-doc
|
2009-06-08 20:42:27 +00:00
|
|
|
|
|
2015-01-25 19:47:21 +00:00
|
|
|
|
%post libs -p /sbin/ldconfig
|
|
|
|
|
%postun libs -p /sbin/ldconfig
|
|
|
|
|
|
2014-11-08 20:28:23 +00:00
|
|
|
|
%files libs
|
|
|
|
|
%{_libdir}/lib*.so.*
|
|
|
|
|
%{_libdir}/girepository-1.0/*.typelib
|
|
|
|
|
|
2009-06-08 20:42:27 +00:00
|
|
|
|
%changelog
|
2019-01-09 11:53:53 +00:00
|
|
|
|
* Wed Jan 09 2019 Jan Rybar <jrybar@redhat.com> - 0.115-2.1
|
|
|
|
|
- Fix of start_time reuse exploit (slowfork)
|
|
|
|
|
|
2018-12-07 15:48:03 +00:00
|
|
|
|
* Fri Dec 07 2018 Jan Rybar <jrybar@redhat.com> - 0.115-2
|
|
|
|
|
- Fix of CVE-2018-19788, priv escalation with high UIDs
|
|
|
|
|
- Resolves: rhbz#1655926
|
|
|
|
|
|
2018-07-10 16:48:26 +00:00
|
|
|
|
* Tue Jul 10 2018 Miloslav Trmač <mitr@redhat.com> - 0.115-1
|
|
|
|
|
- Update to 0.115 (CVE-2018-1116)
|
|
|
|
|
|
2018-04-03 19:32:28 +00:00
|
|
|
|
* Tue Apr 03 2018 Ray Strode <rstrode@redhat.com> - 0.114-1
|
|
|
|
|
- Update to 0.114
|
|
|
|
|
|
2018-02-09 05:31:30 +00:00
|
|
|
|
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-16
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
|
|
2017-08-03 06:15:29 +00:00
|
|
|
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-15
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
|
|
2017-07-27 08:53:56 +00:00
|
|
|
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-14
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
|
|
2017-04-13 17:14:27 +00:00
|
|
|
|
* Thu Apr 13 2017 Richard Hughes <rhughes@redhat.com> - 0.113-13
|
|
|
|
|
- Add the its files from upstream.
|
|
|
|
|
|
2017-04-04 21:00:07 +00:00
|
|
|
|
* Tue Apr 4 2017 Miloslav Trmač <mitr@redhat.com> - 0.113-12
|
|
|
|
|
- Fix a memory leak in PolkitPermission.
|
|
|
|
|
Patch by Rui Matos <tiagomatos@gmail.com>
|
|
|
|
|
Resolves: #1433915
|
|
|
|
|
|
2017-04-04 19:24:49 +00:00
|
|
|
|
* Tue Apr 4 2017 Miloslav Trmač <mitr@redhat.com> - 0.113-11
|
|
|
|
|
- Revert back to the state in 0.113-7, undoing the untested changes.
|
|
|
|
|
|
|
|
|
|
* Tue Apr 4 2017 Peter Robinson <pbrobinson@fedoraproject.org> 0.113-10
|
|
|
|
|
- Move to an upstream snapshot, rebase patches
|
|
|
|
|
|
|
|
|
|
* Fri Mar 31 2017 Rex Dieter <rdieter@fedoraproject.org> - 0.113-9
|
|
|
|
|
- restore Provides: polkit-desktop-policy polkit-js-engine
|
|
|
|
|
|
|
|
|
|
* Thu Mar 30 2017 Peter Robinson <pbrobinson@fedoraproject.org> 0.113-8
|
|
|
|
|
- Use %%license, license needs to be in -libs as it's the only guaranteed installed package
|
|
|
|
|
- Move to mozjs38
|
|
|
|
|
- Other upstream fixes
|
|
|
|
|
- Spec cleanups
|
|
|
|
|
|
2017-02-13 16:49:35 +00:00
|
|
|
|
* Mon Feb 13 2017 Miloslav Trmač <mitr@redhat.com> - 0.113-7
|
|
|
|
|
- Fix memory leaks when calling authentication agents
|
|
|
|
|
Resolves: #1380166
|
|
|
|
|
|
2017-02-11 07:43:27 +00:00
|
|
|
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-6
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
|
|
2016-02-04 18:19:08 +00:00
|
|
|
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.113-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
|
|
2015-07-14 21:12:47 +00:00
|
|
|
|
* Tue Jul 14 2015 Miloslav Trmač <mitr@redhat.com> - 0.113-4
|
|
|
|
|
- Bump the Obsoletes: to < 0.113-3 to account for the non-split 0.113-2.fc21
|
|
|
|
|
Resolves: #1243004
|
|
|
|
|
|
2015-07-12 13:35:17 +00:00
|
|
|
|
* Sun Jul 12 2015 Rex Dieter <rdieter@fedoraproject.org> 0.113-3
|
|
|
|
|
- Obsoletes: polkit < 0.112-8 (handle multilib upgrade path)
|
|
|
|
|
|
2015-07-10 17:03:00 +00:00
|
|
|
|
* Fri Jul 10 2015 Miloslav Trmač <mitr@redhat.com> - 0.113-2
|
|
|
|
|
- Add a fully versioned dependency from polkit to polkit-libs
|
|
|
|
|
Resolves: #1241759
|
|
|
|
|
- Require polkit-libs, not polkit, in polkit-devel
|
|
|
|
|
|
2015-07-02 18:37:11 +00:00
|
|
|
|
* Thu Jul 2 2015 Miloslav Trmač <mitr@redhat.com> - 0.113-1
|
|
|
|
|
- Update to polkit-0.113 (CVE-2015-3218, CVE-2015-3255, CVE-2015-3256,
|
|
|
|
|
CVE-2015-4625)
|
|
|
|
|
Resolves: #910262, #1175061, #1177930, #1194391, #1228739, #1233810
|
|
|
|
|
|
2015-06-19 01:52:49 +00:00
|
|
|
|
* Fri Jun 19 2015 Miloslav Trmač <mitr@redhat.com> - 0.112-11
|
|
|
|
|
- Add BuildRequires: systemd so that %%{_unitdir} is defined, to fix the build.
|
|
|
|
|
|
2015-06-18 15:37:11 +00:00
|
|
|
|
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.112-10
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
|
|
2015-01-25 19:47:21 +00:00
|
|
|
|
* Sun Jan 25 2015 Rex Dieter <rdieter@fedoraproject.org> - 0.112-9
|
|
|
|
|
- polkit doesn't release reference counters of GVariant data (#1180886)
|
|
|
|
|
- fix ldconfig scriptlets (move to -libs subpkg)
|
|
|
|
|
|
2014-11-08 20:28:23 +00:00
|
|
|
|
* Sat Nov 08 2014 Colin Walters <walters@redhat.com> - 0.112-8
|
|
|
|
|
- Split separate -libs package, so that NetworkManager can just depend on
|
|
|
|
|
that, without dragging in the daemon (as well as libmozjs17). This
|
|
|
|
|
allows the creation of more minimal systems that want programs like NM,
|
|
|
|
|
but do not need the configurability of the daemon; it would be ok if only
|
|
|
|
|
root is authorized.
|
|
|
|
|
|
2014-08-17 19:29:36 +00:00
|
|
|
|
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.112-7
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
|
|
|
2014-07-22 18:20:26 +00:00
|
|
|
|
* Tue Jul 22 2014 Kalev Lember <kalevlember@gmail.com> - 0.112-6
|
|
|
|
|
- Rebuilt for gobject-introspection 1.41.4
|
|
|
|
|
|
2014-06-07 16:43:06 +00:00
|
|
|
|
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.112-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
|
|
2014-06-05 15:17:06 +00:00
|
|
|
|
* Thu Jun 5 2014 Kay Sievers <kay@redhat.com> - 0.112-4
|
|
|
|
|
- backport upstream D-Bus "user bus" changes
|
|
|
|
|
|
2014-02-11 10:09:04 +00:00
|
|
|
|
* Mon Feb 10 2014 Miloslav Trmač <mitr@redhat.com> - 0.112-3
|
|
|
|
|
- Fix a PolkitAgentSession race condition
|
|
|
|
|
Resolves: #1063193
|
|
|
|
|
|
2013-12-07 01:36:29 +00:00
|
|
|
|
* Sat Dec 7 2013 Miloslav Trmač <mitr@redhat.com> - 0.112-2
|
|
|
|
|
- Workaround pam_systemd setting broken XDG_RUNTIME_DIR
|
|
|
|
|
Resolves: #1033774
|
2013-12-07 01:36:40 +00:00
|
|
|
|
- Always use mozjs-17.0 even if js-devel is installed
|
2013-12-07 01:36:29 +00:00
|
|
|
|
|
2013-09-18 17:39:38 +00:00
|
|
|
|
* Wed Sep 18 2013 Miloslav Trmač <mitr@redhat.com> - 0.112-1
|
|
|
|
|
- Update to polkit-0.112
|
|
|
|
|
- Resolves: #1009538, CVE-2013-4288
|
|
|
|
|
|
2013-08-04 04:48:21 +00:00
|
|
|
|
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.111-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
|
|
2013-05-29 14:43:17 +00:00
|
|
|
|
* Wed May 29 2013 Tomas Bzatek <tbzatek@redhat.com> - 0.111-2
|
|
|
|
|
- Fix a race on PolkitSubject type registration (#866718)
|
|
|
|
|
|
2013-05-15 21:40:25 +00:00
|
|
|
|
* Wed May 15 2013 Miloslav Trmač <mitr@redhat.com> - 0.111-1
|
|
|
|
|
- Update to polkit-0.111
|
|
|
|
|
Resolves: #917888
|
2013-05-15 21:40:51 +00:00
|
|
|
|
- Use SpiderMonkey from mozjs17 instead of js
|
2013-05-15 21:41:05 +00:00
|
|
|
|
- Ship the signature in the srpm
|
2013-05-15 21:41:18 +00:00
|
|
|
|
- Try to preserve timestamps in (make install)
|
2013-05-15 21:40:25 +00:00
|
|
|
|
|
2013-05-10 22:44:20 +00:00
|
|
|
|
* Fri May 10 2013 Miloslav Trmač <mitr@redhat.com> - 0.110-4
|
2013-05-10 23:50:29 +00:00
|
|
|
|
- Shut up rpmlint about Summary:
|
2013-05-10 22:44:20 +00:00
|
|
|
|
- Build with V=1
|
2013-05-10 23:43:02 +00:00
|
|
|
|
- Use %%{_unitdir} instead of hard-coding the path
|
2013-05-10 23:40:25 +00:00
|
|
|
|
- Use the new systemd macros, primarily to run (systemctl daemon-reload)
|
|
|
|
|
Resolves: #857382
|
2013-05-10 22:44:20 +00:00
|
|
|
|
|
2013-05-10 16:34:11 +00:00
|
|
|
|
* Fri May 10 2013 Miloslav Trmač <mitr@redhat.com> - 0.110-4
|
|
|
|
|
- Make the JavaScript engine mandatory. The polkit-js-engine package has been
|
|
|
|
|
removed, main polkit package Provides:polkit-js-engine for compatibility.
|
2013-05-10 16:35:32 +00:00
|
|
|
|
- Add Requires: polkit-pkla-compat
|
|
|
|
|
Resolves: #908808
|
2013-05-10 16:34:11 +00:00
|
|
|
|
|
2013-02-14 13:31:39 +00:00
|
|
|
|
* Wed Feb 13 2013 Miloslav Trmač <mitr@redhat.com> - 0.110-3
|
|
|
|
|
- Don't ship pk-example-frobnicate in the "live" configuration
|
|
|
|
|
Resolves: #878112
|
|
|
|
|
|
2013-02-09 00:07:23 +00:00
|
|
|
|
* Fri Feb 8 2013 Miloslav Trmač <mitr@redhat.com> - 0.110-2
|
|
|
|
|
- Own %%{_docdir}/polkit-js-engine-*
|
|
|
|
|
Resolves: #907668
|
|
|
|
|
|
2013-01-09 20:11:15 +00:00
|
|
|
|
* Wed Jan 9 2013 David Zeuthen <davidz@redhat.com> - 0.110-1%{?dist}
|
|
|
|
|
- Update to upstream release 0.110
|
|
|
|
|
|
2013-01-08 00:43:29 +00:00
|
|
|
|
* Mon Jan 7 2013 Matthias Clasen <mclasen@redhat.com> - 0.109-2%{?dist}
|
|
|
|
|
- Build with pie and stuff
|
|
|
|
|
|
2012-12-19 15:12:09 +00:00
|
|
|
|
* Wed Dec 19 2012 David Zeuthen <davidz@redhat.com> 0.109-1%{?dist}
|
|
|
|
|
- Update to upstream release 0.109
|
|
|
|
|
- Drop upstreamed patches
|
|
|
|
|
|
2012-11-15 15:16:46 +00:00
|
|
|
|
* Thu Nov 15 2012 David Zeuthen <davidz@redhat.com> 0.108-3%{?dist}
|
|
|
|
|
- Attempt to open the correct libmozjs185 library, otherwise polkit
|
|
|
|
|
authz rules will not work unless js-devel is installed (fdo #57146)
|
|
|
|
|
|
2012-11-14 19:34:17 +00:00
|
|
|
|
* Wed Nov 14 2012 David Zeuthen <davidz@redhat.com> 0.108-2%{?dist}
|
|
|
|
|
- Include gmodule-2.0 to avoid build error
|
|
|
|
|
|
2012-11-14 19:15:33 +00:00
|
|
|
|
* Wed Nov 14 2012 David Zeuthen <davidz@redhat.com> 0.108-1%{?dist}
|
|
|
|
|
- Update to upstream release 0.108
|
|
|
|
|
- Drop upstreamed patches
|
|
|
|
|
- This release dynamically loads the JavaScript interpreter and can
|
|
|
|
|
cope with it not being available. In this case, polkit authorization
|
|
|
|
|
rules are not processed and the defaults for an action - as defined
|
|
|
|
|
in its .policy file - are used for authorization decisions.
|
|
|
|
|
- Add new meta-package, polkit-js-engine, that pulls in the required
|
|
|
|
|
JavaScript bits to make polkit authorization rules work. The default
|
|
|
|
|
install - not the minimal install - should include this package
|
|
|
|
|
|
2012-10-10 13:35:04 +00:00
|
|
|
|
* Wed Oct 10 2012 Adam Jackson <ajax@redhat.com> 0.107-4
|
|
|
|
|
- Don't crash if initializing the server object fails
|
|
|
|
|
|
2012-09-18 18:56:20 +00:00
|
|
|
|
* Tue Sep 18 2012 David Zeuthen <davidz@redhat.com> 0.107-3%{?dist}
|
|
|
|
|
- Authenticate as root if e.g. the wheel group is empty (#834494)
|
|
|
|
|
|
2012-07-27 06:10:09 +00:00
|
|
|
|
* Fri Jul 27 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.107-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
|
|
2013-05-15 20:55:51 +00:00
|
|
|
|
* Wed Jul 11 2012 David Zeuthen <davidz@redhat.com> 0.107-1%{?dist}
|
2012-07-11 17:38:33 +00:00
|
|
|
|
- Update to upstream release 0.107
|
|
|
|
|
|
2012-06-29 21:25:00 +00:00
|
|
|
|
* Fri Jun 29 2012 David Zeuthen <davidz@redhat.com> 0.106-2%{?dist}
|
|
|
|
|
- Add forgotten Requires(pre): shadow-utils
|
|
|
|
|
|
2012-06-07 18:05:54 +00:00
|
|
|
|
* Thu Jun 07 2012 David Zeuthen <davidz@redhat.com> 0.106-1%{?dist}
|
|
|
|
|
- Update to upstream release 0.106
|
|
|
|
|
- Authorizations are no longer controlled by .pkla files - from now
|
|
|
|
|
on, use the new .rules files described in the polkit(8) man page
|
|
|
|
|
|
2012-04-24 17:01:14 +00:00
|
|
|
|
* Tue Apr 24 2012 David Zeuthen <davidz@redhat.com> 0.105-1%{?dist}
|
|
|
|
|
- Update to upstream release 0.105
|
|
|
|
|
- Nuke patches that are now upstream
|
|
|
|
|
- Change 'PolicyKit' to 'polkit' in summary and descriptions
|
|
|
|
|
|
2012-02-14 02:07:13 +00:00
|
|
|
|
* Thu Mar 08 2012 David Zeuthen <davidz@redhat.com> 0.104-6%{?dist}
|
2012-03-08 20:40:59 +00:00
|
|
|
|
- Don't leak file descriptors (bgo #671486)
|
|
|
|
|
|
2012-02-14 02:07:13 +00:00
|
|
|
|
* Mon Feb 13 2012 Matthias Clasen <mclasen@redhat.com> - 0.104-5%{?dist}
|
|
|
|
|
- Make the -docs subpackage noarch
|
|
|
|
|
|
2012-02-06 17:44:21 +00:00
|
|
|
|
* Mon Feb 06 2012 David Zeuthen <davidz@redhat.com> 0.104-4%{?dist}
|
|
|
|
|
- Set error if we cannot obtain a PolkitUnixSession for a given PID (#787222)
|
|
|
|
|
|
2012-01-14 01:06:32 +00:00
|
|
|
|
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.104-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
|
|
|
2012-01-03 17:30:05 +00:00
|
|
|
|
* Tue Jan 03 2012 David Zeuthen <davidz@redhat.com> 0.104-2%{?dist}
|
|
|
|
|
- Nuke the ConsoleKit run-time requirement
|
|
|
|
|
|
2012-01-03 17:06:44 +00:00
|
|
|
|
* Tue Jan 03 2012 David Zeuthen <davidz@redhat.com> 0.104-1%{?dist}
|
|
|
|
|
- Update to upstream release 0.104
|
|
|
|
|
- Force usage of systemd (instead of ConsoleKit) for session tracking
|
|
|
|
|
|
2011-12-06 16:03:28 +00:00
|
|
|
|
* Tue Dec 06 2011 David Zeuthen <davidz@redhat.com> 0.103-1%{?dist}
|
|
|
|
|
- Update to upstream release 0.103
|
|
|
|
|
- Drop upstreamed patch
|
|
|
|
|
- Drop Fedora-specific policy, it is now upstream (fdo #41008)
|
|
|
|
|
|
2011-10-27 00:18:49 +00:00
|
|
|
|
* Wed Oct 26 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.102-3
|
|
|
|
|
- Rebuilt for glibc bug#747377
|
|
|
|
|
|
2011-10-18 17:29:14 +00:00
|
|
|
|
* Tue Oct 18 2011 David Zeuthen <davidz@redhat.com> 0.102-2%{?dist}
|
|
|
|
|
- Add patch to neuter the annoying systemd behavior where stdout/stderr
|
|
|
|
|
is sent to the system logs
|
|
|
|
|
|
2013-05-15 20:55:51 +00:00
|
|
|
|
* Thu Aug 04 2011 David Zeuthen <davidz@redhat.com> 0.102-1
|
2011-08-04 13:54:20 +00:00
|
|
|
|
- Update to 0.102 release
|
|
|
|
|
|
2011-05-13 12:32:22 +00:00
|
|
|
|
* Fri May 13 2011 Bastien Nocera <bnocera@redhat.com> 0.101-7
|
|
|
|
|
- Allow setting the pretty hostname without a password for wheel,
|
|
|
|
|
change matches systemd in git
|
|
|
|
|
|
2011-05-02 15:16:38 +00:00
|
|
|
|
* Mon May 2 2011 Matthias Clasen <mclasen@redhat.com> - 0.101-6
|
|
|
|
|
- Update the action id of the datetime mechanism
|
|
|
|
|
|
2011-04-19 19:09:42 +00:00
|
|
|
|
* Tue Apr 19 2011 David Zeuthen <davidz@redhat.com> - 0.101-5
|
|
|
|
|
- CVE-2011-1485 (#697951)
|
|
|
|
|
|
2011-03-22 17:43:45 +00:00
|
|
|
|
* Tue Mar 22 2011 Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.101-4
|
|
|
|
|
- Also allow org.kde.kcontrol.kcmclock.save without password for wheel
|
|
|
|
|
|
2011-03-17 14:52:48 +00:00
|
|
|
|
* Thu Mar 17 2011 David Zeuthen <davidz@redhat.com> - 0.101-3
|
|
|
|
|
- Fix typo in pkla file (thanks notting)
|
|
|
|
|
|
2011-03-17 14:41:49 +00:00
|
|
|
|
* Thu Mar 17 2011 David Zeuthen <davidz@redhat.com> - 0.101-2
|
|
|
|
|
- Nuke desktop_admin_r and desktop_user_r groups - just use the
|
|
|
|
|
wheel group instead (#688363)
|
|
|
|
|
- Update the set of configuration directives that gives users
|
|
|
|
|
in the wheel group extra privileges
|
|
|
|
|
|
2011-03-03 19:00:44 +00:00
|
|
|
|
* Thu Mar 03 2011 David Zeuthen <davidz@redhat.com> - 0.101-1
|
|
|
|
|
- New upstream version
|
|
|
|
|
|
2011-02-21 23:01:08 +00:00
|
|
|
|
* Mon Feb 21 2011 David Zeuthen <davidz@redhat.com> - 0.100-1
|
|
|
|
|
- New upstream version
|
|
|
|
|
|
2011-02-09 15:40:13 +00:00
|
|
|
|
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.98-7
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
|
|
|
2011-01-28 18:56:06 +00:00
|
|
|
|
* Fri Jan 28 2011 Matthias Clasen <mclasen@redhat.com> - 0.98-6
|
|
|
|
|
- Own /usr/libexec/polkit-1
|
|
|
|
|
|
2013-05-15 20:55:51 +00:00
|
|
|
|
* Fri Nov 12 2010 Matthias Clasen <mclasen@redhat.com> - 0.98-5
|
2010-11-13 04:02:06 +00:00
|
|
|
|
- Enable introspection
|
|
|
|
|
|
2010-09-02 15:25:25 +00:00
|
|
|
|
* Thu Sep 02 2010 David Zeuthen <davidz@redhat.com> - 0.98-4
|
|
|
|
|
- Fix #629515 in a way that doesn't require autoreconf
|
|
|
|
|
|
2010-09-02 15:09:26 +00:00
|
|
|
|
* Thu Sep 02 2010 David Zeuthen <davidz@redhat.com> - 0.98-2
|
|
|
|
|
- Include polkitagentenumtypes.h (#629515)
|
|
|
|
|
|
2010-08-23 23:19:35 +00:00
|
|
|
|
* Mon Aug 23 2010 Matthias Clasen <mclasen@redhat.com> - 0.98-1
|
2010-08-20 17:23:51 +00:00
|
|
|
|
- Update to upstream release 0.98
|
2010-08-23 23:19:35 +00:00
|
|
|
|
- Co-own /usr/share/gtk-doc (#604410)
|
2010-08-20 17:23:51 +00:00
|
|
|
|
|
2010-08-18 18:57:22 +00:00
|
|
|
|
* Wed Aug 18 2010 Matthias Clasen <mclasen@redhat.com> - 0.97-5
|
|
|
|
|
- Rebuid to work around bodhi limitations
|
|
|
|
|
|
2010-08-18 18:38:44 +00:00
|
|
|
|
* Wed Aug 18 2010 Matthias Clasen <mclasen@redhat.com> - 0.97-4
|
|
|
|
|
- Fix a ConsoleKit interaction bug
|
|
|
|
|
|
2010-08-13 15:23:27 +00:00
|
|
|
|
* Fri Aug 13 2010 David Zeuthen <davidz@redhat.com> - 0.97-3
|
|
|
|
|
- Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257)
|
|
|
|
|
- Require GLib >= 2.25.12 instead of 2.25.11
|
|
|
|
|
- Ensure polkit-gnome packages earlier than 0.97 are not used with
|
|
|
|
|
these packages
|
|
|
|
|
|
2010-08-09 21:25:18 +00:00
|
|
|
|
* Mon Aug 09 2010 David Zeuthen <davidz@redhat.com> - 0.97-2
|
|
|
|
|
- Rebuild
|
|
|
|
|
|
2010-08-09 21:00:35 +00:00
|
|
|
|
* Mon Aug 09 2010 David Zeuthen <davidz@redhat.com> - 0.97-1
|
|
|
|
|
- Update to 0.97. This release contains a port from EggDBus to the
|
|
|
|
|
GDBus code available in recent GLib releases.
|
|
|
|
|
|
2010-01-15 19:35:24 +00:00
|
|
|
|
* Fri Jan 15 2010 David Zeuthen <davidz@redhat.com> - 0.96-1
|
|
|
|
|
- Update to 0.96
|
|
|
|
|
- Disable introspection support for the time being
|
|
|
|
|
|
2010-01-08 20:37:28 +00:00
|
|
|
|
* Fri Nov 13 2009 David Zeuthen <davidz@redhat.com> - 0.95-2
|
|
|
|
|
- Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Nov 13 2009 David Zeuthen <davidz@redhat.com> - 0.95-1
|
|
|
|
|
- Update to 0.95
|
|
|
|
|
- Drop upstreamed patches
|
|
|
|
|
|
|
|
|
|
* Tue Oct 20 2009 Matthias Clasen <mclasen@redhat.com> - 0.95-0.git20090913.3
|
|
|
|
|
- Fix a typo in pklocalauthority(8)
|
|
|
|
|
|
2009-09-14 19:57:29 +00:00
|
|
|
|
* Mon Sep 14 2009 David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.2
|
|
|
|
|
- Refine how Obsolete: is used and also add Provides: (thanks Jesse
|
|
|
|
|
Keating and nim-nim)
|
|
|
|
|
|
2009-09-14 17:41:41 +00:00
|
|
|
|
* Mon Sep 14 2009 David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
|
|
|
|
|
- Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
|
|
|
|
|
- Obsolete old PolicyKit packages
|
|
|
|
|
|
2009-09-13 19:52:31 +00:00
|
|
|
|
* Sun Sep 13 2009 David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913
|
|
|
|
|
- Update to git snapshot
|
|
|
|
|
- Drop upstreamed patches
|
|
|
|
|
- Turn on GObject introspection
|
|
|
|
|
- Don't delete desktop_admin_r and desktop_user_r groups when
|
|
|
|
|
uninstalling polkit-desktop-policy
|
|
|
|
|
|
2009-09-11 19:50:47 +00:00
|
|
|
|
* Fri Sep 11 2009 David Zeuthen <davidz@redhat.com> - 0.94-4
|
|
|
|
|
- Add some patches from git master
|
|
|
|
|
- Sort pkaction(1) output
|
|
|
|
|
- Bug 23867 – UnixProcess vs. SystemBusName aliasing
|
|
|
|
|
|
2009-08-13 17:56:44 +00:00
|
|
|
|
* Thu Aug 13 2009 David Zeuthen <davidz@redhat.com> - 0.94-3
|
|
|
|
|
- Add desktop_admin_r and desktop_user_r groups along with a first cut
|
|
|
|
|
of default authorizations for users in these groups.
|
|
|
|
|
|
2009-08-12 19:42:21 +00:00
|
|
|
|
* Wed Aug 12 2009 David Zeuthen <davidz@redhat.com> - 0.94-2
|
|
|
|
|
- Disable GObject Introspection for now as it breaks the build
|
|
|
|
|
|
2009-08-12 19:25:45 +00:00
|
|
|
|
* Wed Aug 12 2009 David Zeuthen <davidz@redhat.com> - 0.94-1
|
|
|
|
|
- Update to upstream release 0.94
|
|
|
|
|
|
2009-07-26 19:08:08 +00:00
|
|
|
|
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.93-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
|
|
|
2009-07-21 00:47:47 +00:00
|
|
|
|
* Mon Jul 20 2009 David Zeuthen <davidz@redhat.com> - 0.93-2
|
|
|
|
|
- Rebuild
|
|
|
|
|
|
2009-07-21 00:30:33 +00:00
|
|
|
|
* Mon Jul 20 2009 David Zeuthen <davidz@redhat.com> - 0.93-1
|
|
|
|
|
- Update to 0.93
|
|
|
|
|
|
2009-06-09 13:33:04 +00:00
|
|
|
|
* Tue Jun 09 2009 David Zeuthen <davidz@redhat.com> - 0.92-3
|
|
|
|
|
- Don't make docs noarch (I *heart* multilib)
|
|
|
|
|
- Change license to LGPLv2+
|
|
|
|
|
|
2009-06-08 20:42:58 +00:00
|
|
|
|
* Mon Jun 08 2009 David Zeuthen <davidz@redhat.com> - 0.92-2
|
|
|
|
|
- Rebuild
|
|
|
|
|
|
2009-06-08 20:42:27 +00:00
|
|
|
|
* Mon Jun 08 2009 David Zeuthen <davidz@redhat.com> - 0.92-1
|
|
|
|
|
- Update to 0.92 release
|
|
|
|
|
|
|
|
|
|
* Wed May 27 2009 David Zeuthen <davidz@redhat.com> - 0.92-0.git20090527
|
|
|
|
|
- Update to 0.92 snapshot
|
|
|
|
|
|
|
|
|
|
* Mon Feb 9 2009 David Zeuthen <davidz@redhat.com> - 0.91-1
|
|
|
|
|
- Initial spec file.
|