# Only enable if using patches that touches configure.ac, # Makefile.am or other build system related files # %define enable_autoreconf 0 Summary: polkit Authorization Framework Name: polkit Version: 0.110 Release: 2%{?dist} License: LGPLv2+ URL: http://www.freedesktop.org/wiki/Software/polkit Source0: http://www.freedesktop.org/software/polkit/releases/%{name}-%{version}.tar.gz Group: System Environment/Libraries BuildRequires: glib2-devel >= 2.30.0 BuildRequires: expat-devel BuildRequires: pam-devel BuildRequires: gtk-doc BuildRequires: intltool BuildRequires: gobject-introspection-devel BuildRequires: systemd-devel BuildRequires: js-devel %if 0%{?enable_autoreconf} BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool %endif Requires: dbus Requires(pre): shadow-utils Obsoletes: PolicyKit <= 0.10 Provides: PolicyKit = 0.11 # polkit saw some API/ABI changes from 0.96 to 0.97 so require a # sufficiently new polkit-gnome package Conflicts: polkit-gnome < 0.97 Obsoletes: polkit-desktop-policy < 0.103 Provides: polkit-desktop-policy = 0.103 %description polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. %package devel Summary: Development files for polkit Group: Development/Libraries Requires: %name = %{version}-%{release} Requires: %name-docs = %{version}-%{release} Requires: glib2-devel Obsoletes: PolicyKit-devel <= 0.10 Provides: PolicyKit-devel = 0.11 %description devel Development files for polkit. %package docs Summary: Development documentation for polkit Group: Development/Libraries Requires: %name-devel = %{version}-%{release} Obsoletes: PolicyKit-docs <= 0.10 Provides: PolicyKit-docs = 0.11 BuildArch: noarch %description docs Development documentation for polkit. %package js-engine Summary: Meta-package for JavaScript engine used by polkit Group: Development/Libraries Requires: %name = %{version}-%{release} Requires: js %description js-engine Meta-package for JavaScript engine used by polkit. %prep %setup -q %build %if 0%{?enable_autoreconf} autoreconf %endif # we can't use _hardened_build here, see # https://bugzilla.redhat.com/show_bug.cgi?id=892837 export CFLAGS='-fPIC %optflags' export LDFLAGS='-pie -Wl,-z,now -Wl,-z,relro' %configure --enable-gtk-doc \ --disable-static \ --enable-introspection \ --enable-examples \ --enable-systemd=yes make %install make install DESTDIR=$RPM_BUILD_ROOT rm -f $RPM_BUILD_ROOT%{_libdir}/*.la rm -f $RPM_BUILD_ROOT%{_libdir}/polkit-1/extensions/*.la mkdir polkit-js-engine cat > polkit-js-engine/README << EOF This is a meta-package to pull in the required JavaScript packages to make polkit authorization rules work. EOF %find_lang polkit-1 %pre getent group polkitd >/dev/null || groupadd -r polkitd getent passwd polkitd >/dev/null || useradd -r -g polkitd -d / -s /sbin/nologin -c "User for polkitd" polkitd exit 0 %post -p /sbin/ldconfig %postun -p /sbin/ldconfig %files -f polkit-1.lang %defattr(-,root,root,-) %doc COPYING NEWS README %{_libdir}/lib*.so.* %{_datadir}/man/man1/* %{_datadir}/man/man8/* %{_datadir}/dbus-1/system-services/* %{_prefix}/lib/systemd/system/polkit.service %dir %{_datadir}/polkit-1/ %dir %{_datadir}/polkit-1/actions %attr(0700,polkitd,root) %dir %{_datadir}/polkit-1/rules.d %{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy %dir %{_sysconfdir}/polkit-1 %{_sysconfdir}/polkit-1/rules.d/50-default.rules %attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf %{_sysconfdir}/pam.d/polkit-1 %{_bindir}/pkaction %{_bindir}/pkcheck %{_bindir}/pkttyagent %dir %{_prefix}/lib/polkit-1 %{_prefix}/lib/polkit-1/polkitd %{_libdir}/girepository-1.0/*.typelib # see upstream docs for why these permissions are necessary %attr(4755,root,root) %{_bindir}/pkexec %attr(4755,root,root) %{_prefix}/lib/polkit-1/polkit-agent-helper-1 %files devel %defattr(-,root,root,-) %{_libdir}/lib*.so %{_libdir}/pkgconfig/*.pc %{_datadir}/gir-1.0/*.gir %{_includedir}/* %{_bindir}/pk-example-frobnicate %{_datadir}/polkit-1/actions/org.freedesktop.policykit.examples.pkexec.policy %files docs %defattr(-,root,root,-) %{_datadir}/gtk-doc %files js-engine %defattr(-,root,root,-) %doc polkit-js-engine/README %changelog * Fri Feb 8 2013 Miloslav Trmač - 0.110-2 - Own %%{_docdir}/polkit-js-engine-* Resolves: #907668 * Wed Jan 9 2013 David Zeuthen - 0.110-1%{?dist} - Update to upstream release 0.110 * Mon Jan 7 2013 Matthias Clasen - 0.109-2%{?dist} - Build with pie and stuff * Wed Dec 19 2012 David Zeuthen 0.109-1%{?dist} - Update to upstream release 0.109 - Drop upstreamed patches * Thu Nov 15 2012 David Zeuthen 0.108-3%{?dist} - Attempt to open the correct libmozjs185 library, otherwise polkit authz rules will not work unless js-devel is installed (fdo #57146) * Wed Nov 14 2012 David Zeuthen 0.108-2%{?dist} - Include gmodule-2.0 to avoid build error * Wed Nov 14 2012 David Zeuthen 0.108-1%{?dist} - Update to upstream release 0.108 - Drop upstreamed patches - This release dynamically loads the JavaScript interpreter and can cope with it not being available. In this case, polkit authorization rules are not processed and the defaults for an action - as defined in its .policy file - are used for authorization decisions. - Add new meta-package, polkit-js-engine, that pulls in the required JavaScript bits to make polkit authorization rules work. The default install - not the minimal install - should include this package * Wed Oct 10 2012 Adam Jackson 0.107-4 - Don't crash if initializing the server object fails * Tue Sep 18 2012 David Zeuthen 0.107-3%{?dist} - Authenticate as root if e.g. the wheel group is empty (#834494) * Fri Jul 27 2012 Fedora Release Engineering - 0.107-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jul 11 2012 David Zeuthen 0.107-1%{?dist} - Update to upstream release 0.107 * Fri Jun 29 2012 David Zeuthen 0.106-2%{?dist} - Add forgotten Requires(pre): shadow-utils * Thu Jun 07 2012 David Zeuthen 0.106-1%{?dist} - Update to upstream release 0.106 - Authorizations are no longer controlled by .pkla files - from now on, use the new .rules files described in the polkit(8) man page * Tue Apr 24 2012 David Zeuthen 0.105-1%{?dist} - Update to upstream release 0.105 - Nuke patches that are now upstream - Change 'PolicyKit' to 'polkit' in summary and descriptions * Thu Mar 08 2012 David Zeuthen 0.104-6%{?dist} - Don't leak file descriptors (bgo #671486) * Mon Feb 13 2012 Matthias Clasen - 0.104-5%{?dist} - Make the -docs subpackage noarch * Mon Feb 06 2012 David Zeuthen 0.104-4%{?dist} - Set error if we cannot obtain a PolkitUnixSession for a given PID (#787222) * Sat Jan 14 2012 Fedora Release Engineering - 0.104-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Jan 03 2012 David Zeuthen 0.104-2%{?dist} - Nuke the ConsoleKit run-time requirement * Tue Jan 03 2012 David Zeuthen 0.104-1%{?dist} - Update to upstream release 0.104 - Force usage of systemd (instead of ConsoleKit) for session tracking * Tue Dec 06 2011 David Zeuthen 0.103-1%{?dist} - Update to upstream release 0.103 - Drop upstreamed patch - Drop Fedora-specific policy, it is now upstream (fdo #41008) * Wed Oct 26 2011 Fedora Release Engineering - 0.102-3 - Rebuilt for glibc bug#747377 * Tue Oct 18 2011 David Zeuthen 0.102-2%{?dist} - Add patch to neuter the annoying systemd behavior where stdout/stderr is sent to the system logs * Fri Aug 04 2011 David Zeuthen 0.102-1 - Update to 0.102 release * Fri May 13 2011 Bastien Nocera 0.101-7 - Allow setting the pretty hostname without a password for wheel, change matches systemd in git * Mon May 2 2011 Matthias Clasen - 0.101-6 - Update the action id of the datetime mechanism * Tue Apr 19 2011 David Zeuthen - 0.101-5 - CVE-2011-1485 (#697951) * Tue Mar 22 2011 Kevin Kofler - 0.101-4 - Also allow org.kde.kcontrol.kcmclock.save without password for wheel * Thu Mar 17 2011 David Zeuthen - 0.101-3 - Fix typo in pkla file (thanks notting) * Thu Mar 17 2011 David Zeuthen - 0.101-2 - Nuke desktop_admin_r and desktop_user_r groups - just use the wheel group instead (#688363) - Update the set of configuration directives that gives users in the wheel group extra privileges * Thu Mar 03 2011 David Zeuthen - 0.101-1 - New upstream version * Mon Feb 21 2011 David Zeuthen - 0.100-1 - New upstream version * Wed Feb 09 2011 Fedora Release Engineering - 0.98-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Fri Jan 28 2011 Matthias Clasen - 0.98-6 - Own /usr/libexec/polkit-1 * Fri Nov 14 2010 Matthias Clasen - 0.98-5 - Enable introspection * Thu Sep 02 2010 David Zeuthen - 0.98-4 - Fix #629515 in a way that doesn't require autoreconf * Thu Sep 02 2010 David Zeuthen - 0.98-2 - Include polkitagentenumtypes.h (#629515) * Mon Aug 23 2010 Matthias Clasen - 0.98-1 - Update to upstream release 0.98 - Co-own /usr/share/gtk-doc (#604410) * Wed Aug 18 2010 Matthias Clasen - 0.97-5 - Rebuid to work around bodhi limitations * Wed Aug 18 2010 Matthias Clasen - 0.97-4 - Fix a ConsoleKit interaction bug * Fri Aug 13 2010 David Zeuthen - 0.97-3 - Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257) - Require GLib >= 2.25.12 instead of 2.25.11 - Ensure polkit-gnome packages earlier than 0.97 are not used with these packages * Mon Aug 09 2010 David Zeuthen - 0.97-2 - Rebuild * Mon Aug 09 2010 David Zeuthen - 0.97-1 - Update to 0.97. This release contains a port from EggDBus to the GDBus code available in recent GLib releases. * Fri Jan 15 2010 David Zeuthen - 0.96-1 - Update to 0.96 - Disable introspection support for the time being * Fri Nov 13 2009 David Zeuthen - 0.95-2 - Rebuild * Fri Nov 13 2009 David Zeuthen - 0.95-1 - Update to 0.95 - Drop upstreamed patches * Tue Oct 20 2009 Matthias Clasen - 0.95-0.git20090913.3 - Fix a typo in pklocalauthority(8) * Mon Sep 14 2009 David Zeuthen - 0.95-0.git20090913.2 - Refine how Obsolete: is used and also add Provides: (thanks Jesse Keating and nim-nim) * Mon Sep 14 2009 David Zeuthen - 0.95-0.git20090913.1 - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera) - Obsolete old PolicyKit packages * Sun Sep 13 2009 David Zeuthen - 0.95-0.git20090913 - Update to git snapshot - Drop upstreamed patches - Turn on GObject introspection - Don't delete desktop_admin_r and desktop_user_r groups when uninstalling polkit-desktop-policy * Fri Sep 11 2009 David Zeuthen - 0.94-4 - Add some patches from git master - Sort pkaction(1) output - Bug 23867 – UnixProcess vs. SystemBusName aliasing * Thu Aug 13 2009 David Zeuthen - 0.94-3 - Add desktop_admin_r and desktop_user_r groups along with a first cut of default authorizations for users in these groups. * Wed Aug 12 2009 David Zeuthen - 0.94-2 - Disable GObject Introspection for now as it breaks the build * Wed Aug 12 2009 David Zeuthen - 0.94-1 - Update to upstream release 0.94 * Sun Jul 26 2009 Fedora Release Engineering - 0.93-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Mon Jul 20 2009 David Zeuthen - 0.93-2 - Rebuild * Mon Jul 20 2009 David Zeuthen - 0.93-1 - Update to 0.93 * Tue Jun 09 2009 David Zeuthen - 0.92-3 - Don't make docs noarch (I *heart* multilib) - Change license to LGPLv2+ * Mon Jun 08 2009 David Zeuthen - 0.92-2 - Rebuild * Mon Jun 08 2009 David Zeuthen - 0.92-1 - Update to 0.92 release * Wed May 27 2009 David Zeuthen - 0.92-0.git20090527 - Update to 0.92 snapshot * Mon Feb 9 2009 David Zeuthen - 0.91-1 - Initial spec file.