229 lines
6.5 KiB
RPMSpec
229 lines
6.5 KiB
RPMSpec
Summary: PolicyKit Authorization Framework
|
||
Name: polkit
|
||
Version: 0.94
|
||
Release: 4%{?dist}
|
||
License: LGPLv2+
|
||
URL: http://www.freedesktop.org/wiki/Software/PolicyKit
|
||
Source0: http://hal.freedesktop.org/releases/%{name}-%{version}.tar.gz
|
||
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
|
||
Group: System Environment/Libraries
|
||
BuildRequires: glib2-devel
|
||
BuildRequires: expat-devel
|
||
BuildRequires: pam-devel
|
||
BuildRequires: eggdbus-devel
|
||
BuildRequires: gtk-doc
|
||
BuildRequires: intltool
|
||
BuildRequires: gobject-introspection-devel
|
||
|
||
Requires: ConsoleKit
|
||
Requires: dbus
|
||
|
||
Patch0: 0001-Sort-by-action-id-in-pkaction-1-output.patch
|
||
Patch1: 0002-Bug-23867-UnixProcess-vs.-SystemBusName-aliasing.patch
|
||
|
||
%description
|
||
PolicyKit is a toolkit for defining and handling authorizations.
|
||
It is used for allowing unprivileged processes to speak to privileged
|
||
processes.
|
||
|
||
%package devel
|
||
Summary: Development files for PolicyKit
|
||
Group: Development/Libraries
|
||
Requires: %name = %{version}-%{release}
|
||
Requires: %name-docs = %{version}-%{release}
|
||
Requires: pkgconfig
|
||
Requires: glib2-devel
|
||
|
||
%description devel
|
||
Development files for PolicyKit.
|
||
|
||
%package docs
|
||
Summary: Development documentation for PolicyKit
|
||
Group: Development/Libraries
|
||
Requires: %name-devel = %{version}-%{release}
|
||
Requires: gtk-doc
|
||
|
||
%description docs
|
||
Development documentation for PolicyKit.
|
||
|
||
%package desktop-policy
|
||
Summary: Roles and default policy for desktop usage
|
||
Group: Development/Libraries
|
||
#Requires: %name = %{version}-%{release}
|
||
Requires(pre): /usr/sbin/groupadd
|
||
Requires(preun): /usr/sbin/groupdel
|
||
BuildArch: noarch
|
||
|
||
%description desktop-policy
|
||
Roles and default policy for desktop usage.
|
||
|
||
%prep
|
||
%setup -q
|
||
%patch0 -p1
|
||
%patch1 -p1
|
||
|
||
%build
|
||
%configure --enable-gtk-doc --disable-static --libexecdir=%{_libexecdir}/polkit-1 --disable-introspection
|
||
make
|
||
|
||
%install
|
||
rm -rf $RPM_BUILD_ROOT
|
||
make install DESTDIR=$RPM_BUILD_ROOT
|
||
|
||
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
|
||
rm -f $RPM_BUILD_ROOT%{_libdir}/polkit-1/extensions/*.la
|
||
|
||
%find_lang polkit-1
|
||
|
||
###
|
||
### BEGIN DESKTOP POLICY CONFIGURATION ###
|
||
###
|
||
|
||
cat > $RPM_BUILD_ROOT%{_sysconfdir}/polkit-1/localauthority.conf.d/60-desktop-policy.conf << EOF
|
||
# This allows users in the desktop_admin_r group to authenticate as
|
||
# the administrator.
|
||
#
|
||
# DO NOT EDIT THIS FILE, it will be overwritten on update.
|
||
|
||
[Configuration]
|
||
AdminIdentities=unix-group:desktop_admin_r
|
||
EOF
|
||
|
||
cat > $RPM_BUILD_ROOT%{_localstatedir}/lib/polkit-1/localauthority/10-vendor.d/10-desktop-policy.pkla << EOF
|
||
# Authorizations/policy for the desktop_admin_r and desktop_user_r groups.
|
||
#
|
||
# DO NOT EDIT THIS FILE, it will be overwritten on update.
|
||
|
||
# Allow "standard users" to do some things without being interrupted by
|
||
# password dialogs (TODO: not complete)
|
||
#
|
||
[Desktop User Permissions]
|
||
Identity=unix-group:desktop_user_r
|
||
Action=org.gnome.clockapplet.mechanism.settimezone
|
||
ResultAny=no
|
||
ResultInactive=no
|
||
ResultActive=yes
|
||
|
||
# Allow "administrative users" to do a lot of things without being interrupted by
|
||
# password dialogs (TODO: not complete)
|
||
#
|
||
[Desktop Administrator Permissions]
|
||
Identity=unix-group:desktop_admin_r
|
||
Action=org.gnome.clockapplet.mechanism.*;org.freedesktop.devicekit.disks.*;org.freedesktop.RealtimeKit1.*
|
||
ResultAny=no
|
||
ResultInactive=no
|
||
ResultActive=yes
|
||
|
||
EOF
|
||
|
||
###
|
||
### END DESKTOP POLICY CONFIGURATION
|
||
###
|
||
|
||
%clean
|
||
rm -rf $RPM_BUILD_ROOT
|
||
|
||
%post -p /sbin/ldconfig
|
||
|
||
%postun -p /sbin/ldconfig
|
||
|
||
%pre desktop-policy
|
||
/usr/sbin/groupadd -r desktop_admin_r 2> /dev/null || :
|
||
/usr/sbin/groupadd -r desktop_user_r 2> /dev/null || :
|
||
|
||
%preun desktop-policy
|
||
/usr/sbin/groupdel desktop_admin_r 2> /dev/null || :
|
||
/usr/sbin/groupdel desktop_user_r 2> /dev/null || :
|
||
|
||
%files desktop-policy
|
||
%{_sysconfdir}/polkit-1/localauthority.conf.d/60-desktop-policy.conf
|
||
%{_localstatedir}/lib/polkit-1/localauthority/10-vendor.d/10-desktop-policy.pkla
|
||
|
||
%files -f polkit-1.lang
|
||
%defattr(-,root,root,-)
|
||
%doc COPYING
|
||
%{_libdir}/lib*.so.*
|
||
%dir %{_libdir}/polkit-1
|
||
%dir %{_libdir}/polkit-1/extensions
|
||
%{_libdir}/polkit-1/extensions/*.so
|
||
%{_datadir}/man/man1/*
|
||
%{_datadir}/man/man8/*
|
||
%{_datadir}/dbus-1/system-services/*
|
||
%dir %{_datadir}/polkit-1/
|
||
%dir %{_datadir}/polkit-1/actions
|
||
%{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy
|
||
%{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
|
||
%{_sysconfdir}/pam.d/polkit-1
|
||
%{_sysconfdir}/polkit-1
|
||
%{_bindir}/pkaction
|
||
%{_bindir}/pkcheck
|
||
%{_libexecdir}/polkit-1/polkitd
|
||
#%{_libdir}/girepository-1.0/*.typelib
|
||
|
||
# see upstream docs for why these permissions are necessary
|
||
%attr(0700,root,root) %dir %{_localstatedir}/lib/polkit-1/
|
||
%attr(4755,root,root) %{_bindir}/pkexec
|
||
%attr(4755,root,root) %{_libexecdir}/polkit-1/polkit-agent-helper-1
|
||
|
||
%attr(0700,root,root) %dir /var/lib/polkit-1/
|
||
%dir /var/lib/polkit-1/localauthority
|
||
%dir /var/lib/polkit-1/localauthority/10-vendor.d
|
||
%dir /var/lib/polkit-1/localauthority/20-org.d
|
||
%dir /var/lib/polkit-1/localauthority/30-site.d
|
||
%dir /var/lib/polkit-1/localauthority/50-local.d
|
||
%dir /var/lib/polkit-1/localauthority/90-mandatory.d
|
||
|
||
%files devel
|
||
%defattr(-,root,root,-)
|
||
%{_libdir}/lib*.so
|
||
%{_libdir}/pkgconfig/*.pc
|
||
#%{_datadir}/gir-1.0/*.gir
|
||
%{_includedir}/*
|
||
%{_bindir}/pk-example-frobnicate
|
||
%{_datadir}/polkit-1/actions/org.freedesktop.policykit.examples.pkexec.policy
|
||
|
||
%files docs
|
||
%defattr(-,root,root,-)
|
||
%{_datadir}/gtk-doc/html/*
|
||
|
||
%changelog
|
||
* Fri Sep 11 2009 David Zeuthen <davidz@redhat.com> - 0.94-4
|
||
- Add some patches from git master
|
||
- Sort pkaction(1) output
|
||
- Bug 23867 – UnixProcess vs. SystemBusName aliasing
|
||
|
||
* Thu Aug 13 2009 David Zeuthen <davidz@redhat.com> - 0.94-3
|
||
- Add desktop_admin_r and desktop_user_r groups along with a first cut
|
||
of default authorizations for users in these groups.
|
||
|
||
* Wed Aug 12 2009 David Zeuthen <davidz@redhat.com> - 0.94-2
|
||
- Disable GObject Introspection for now as it breaks the build
|
||
|
||
* Wed Aug 12 2009 David Zeuthen <davidz@redhat.com> - 0.94-1
|
||
- Update to upstream release 0.94
|
||
|
||
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.93-3
|
||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
||
|
||
* Mon Jul 20 2009 David Zeuthen <davidz@redhat.com> - 0.93-2
|
||
- Rebuild
|
||
|
||
* Mon Jul 20 2009 David Zeuthen <davidz@redhat.com> - 0.93-1
|
||
- Update to 0.93
|
||
|
||
* Tue Jun 09 2009 David Zeuthen <davidz@redhat.com> - 0.92-3
|
||
- Don't make docs noarch (I *heart* multilib)
|
||
- Change license to LGPLv2+
|
||
|
||
* Mon Jun 08 2009 David Zeuthen <davidz@redhat.com> - 0.92-2
|
||
- Rebuild
|
||
|
||
* Mon Jun 08 2009 David Zeuthen <davidz@redhat.com> - 0.92-1
|
||
- Update to 0.92 release
|
||
|
||
* Wed May 27 2009 David Zeuthen <davidz@redhat.com> - 0.92-0.git20090527
|
||
- Update to 0.92 snapshot
|
||
|
||
* Mon Feb 9 2009 David Zeuthen <davidz@redhat.com> - 0.91-1
|
||
- Initial spec file.
|