- Add 'dbus-service' as Requires instead of /usr/bin/dbus-daemon
  This allow to use other dbus implementations such as dbus-broker with this
  package again. (bsc#1217863) (forwarded request 1132569 from tobijk)

• Files Changed
• Browse Source

- Update to version 123:
  + Highlights:
    - better safety with deeper restriction of the configuration
      files
    - better safety with restricting the daemon's owner under
      systemd
    - better safety with the systemd unit sandboxing
    - less thread races during upload of the configuration
- Changes from version 122:
  + Highlights:
    - new Georgian translation
    - port to mozjs-102
    - daemon-less build (support for e.g. flatpak deps)
    - re-enable of (API) documentation build
- See more detailed changes in the included NEWS.md file.
- Change URL and Source to new home, and drop polkit.keyring and
  tar.gz.sign tarball signature, no longer available.
- Drop polkit-fix-pam-prefix.patch: Fixed upstream.
- Add /usr/bin/dbus-daemon BuildRequires, needed for tests. Replace
  the dbus-1 with /usr/bin/dbus-daemon Requires.

- change /usr/share/polkit-1/rules.d to 555,root:root. /usr content
  isn't secret anyway so this avoids non-root owned files in /usr
  (boo#1215482)
- update 50-default.rules to allow adding more admin rules
  (jsc#PED-260, drop polkit-no-wheel-group.patch)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
  added polkit-actions-in-etc.patch

• Files Changed
• Browse Source

next try

- obsolete libpolkit0 also from baselibs.

• Files Changed
• Browse Source

Update to 121 stable release. (forwarded request 997456 from luc14n0)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070) (forwarded request 992574 from msmeissn)

• Files Changed
• Browse Source

- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148). (forwarded request 989830 from msmeissn)

• Files Changed
• Browse Source

- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch

• Files Changed
• Browse Source

- Switch from mozjs to duktape:
  * Add duktape-support.patch

Provides the same features as with mozjs, but is *much* smaller both during
build and runtime. Before, installing polkit needed 62.0 MiB, with this it's
just 16.3 MiB. (Tested in an opensuse/tumbleweed container).

I didn't encounter any errors while playing around with it in a Live CD. (forwarded request 949263 from favogt)

• Files Changed
• Browse Source

- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream) (forwarded request 936022 from dirkmueller)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static

- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.

• Files Changed
• Browse Source

- Fix verifyscript: the path to the binary was wrongly defined as
  %{_libexecdir}/lib.

- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
 (bsc#1186497)
  CVE-2021-3560.patch

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

https://bugzilla.opensuse.org/show_bug.cgi?id=1180474

• Files Changed
• Browse Source

- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors. (forwarded request 859146 from mgerstner)

• Files Changed
• Browse Source

• Files Changed
• Browse Source