Hello community, here is the log from the commit of package polkit-default-privs for openSUSE:12.3 checked in at 2013-03-01 07:46:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.3/polkit-default-privs (Old) and /work/SRC/openSUSE:12.3/.polkit-default-privs.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "polkit-default-privs", Maintainer is "[email protected]" Changes: -------- --- /work/SRC/openSUSE:12.3/polkit-default-privs/polkit-default-privs.changes 2013-02-23 08:18:07.000000000 +0100 +++ /work/SRC/openSUSE:12.3/.polkit-default-privs.new/polkit-default-privs.changes 2013-03-01 07:46:04.000000000 +0100 @@ -1,0 +2,23 @@ +Wed Feb 27 12:54:05 UTC 2013 - [email protected] + +- add /etc/polkit-1/rules.d/50-default-privs.rules as ghost so it + gets associated with the package + +------------------------------------------------------------------- +Wed Feb 27 10:34:24 UTC 2013 - [email protected] + +- require ibmozjs185-1_0 as polkit won't apply the policy without it + (bnc#804376) + +------------------------------------------------------------------- +Tue Feb 26 16:37:28 UTC 2013 - [email protected] + +- set logind inhibit policies to upstream defaults (bnc#804376) +- more elaborate --check-override option + +------------------------------------------------------------------- +Mon Feb 25 15:36:41 UTC 2013 - [email protected] + +- add some debugging capabilities in generated code + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ polkit-default-privs.spec ++++++ --- /var/tmp/diff_new_pack.DnBFEe/_old 2013-03-01 07:46:04.000000000 +0100 +++ /var/tmp/diff_new_pack.DnBFEe/_new 2013-03-01 07:46:04.000000000 +0100 @@ -26,6 +26,7 @@ Source: polkit-default-privs-%version.tar.bz2 BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: polkit +Requires: libmozjs185-1_0 Requires: polkit Supplements: PolicyKit Supplements: libpolkit0, polkit @@ -50,6 +51,7 @@ %install make install DESTDIR=$RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/etc/polkit-1/rules.d/ +> $RPM_BUILD_ROOT/etc/polkit-1/rules.d/50-default-privs.rules %post %{fillup_only -ns security polkit_default_privs} @@ -60,6 +62,7 @@ %files %defattr(-,root,root,-) +%ghost %attr(0644,root,root) /etc/polkit-1/rules.d/50-default-privs.rules %config /etc/polkit-default-privs.standard %config /etc/polkit-default-privs.restrictive %config(noreplace) /etc/polkit-default-privs.local ++++++ polkit-default-privs-12.3.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polkit-default-privs-12.3/chkstat-polkit new/polkit-default-privs-12.3/chkstat-polkit --- old/polkit-default-privs-12.3/chkstat-polkit 2013-02-22 09:39:59.000000000 +0100 +++ new/polkit-default-privs-12.3/chkstat-polkit 2013-02-26 17:37:01.000000000 +0100 @@ -88,6 +88,8 @@ * see man set_polkit_default_privs * \************************************/ polkit.addRule(function(action, subject) { + // set to true for debugging + var debug = false; rules = { "INSERT_RULES_HERE" : [ "auth_admin", "auth_admin", "auth_admin" ], }; @@ -99,7 +101,17 @@ i = 1; } } + if (debug) + polkit.log(subject); + if (rules[action.id]) { + if (debug) + polkit.log(action.id + " => " + rules[action.id][i]); return rules[action.id][i]; - } + } else { + if (debug) + polkit.log(action.id + " => no override found"); + } }); + +// vim: syntax=javascript diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polkit-default-privs-12.3/listpolicies.pl new/polkit-default-privs-12.3/listpolicies.pl --- old/polkit-default-privs-12.3/listpolicies.pl 2013-02-22 09:39:59.000000000 +0100 +++ new/polkit-default-privs-12.3/listpolicies.pl 2013-02-26 17:37:01.000000000 +0100 @@ -27,11 +27,13 @@ \%options, "verbose|v", "policy=s@", - "check-override", + "check-override:s", + "all", "help|h", ) or usage(1); usage(0) if ($options{'help'}); +die "check-override must be active/local/any\n" if ($options{'check-override'} && $options{'check-override'} !~ /active|local|any/); my %known; my @policies; @@ -94,15 +96,18 @@ if (!$options{'policy'}) { map { print $_->{'name'}, "\n" } @policies; } elsif ($options{'check-override'}) { + my $what = 2; + $what = 1 if $options{'check-override'} eq 'local'; + $what = 0 if $options{'check-override'} eq 'any'; for my $p (@policies) { next unless exists $known{$p->{'name'}}; - next if $known{$p->{'name'}}->[2] eq $p->{'value'}->[2]; - print sprintf('%-63s %s -> %s'."\n", $p->{'name'}, $p->{'value'}->[2], $known{$p->{'name'}}->[2]); + next if $known{$p->{'name'}}->[$what] eq $p->{'value'}->[$what]; + print sprintf('%-63s %s -> %s'."\n", $p->{'name'}, $p->{'value'}->[$what], $known{$p->{'name'}}->[$what]); } } else { my $have_unknown; for (@policies) { - next if exists $known{$_->{'name'}}; + next unless $options{'all'} or ! exists $known{$_->{'name'}}; print sprintf('%-63s %s'."\n", $_->{'name'}, join(':', @{$_->{'value'}})); $have_unknown = 1; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polkit-default-privs-12.3/polkit-default-privs.standard new/polkit-default-privs-12.3/polkit-default-privs.standard --- old/polkit-default-privs-12.3/polkit-default-privs.standard 2013-02-22 09:39:59.000000000 +0100 +++ new/polkit-default-privs-12.3/polkit-default-privs.standard 2013-02-26 17:37:01.000000000 +0100 @@ -341,16 +341,16 @@ org.freedesktop.login1.hibernate-multiple-sessions auth_admin_keep org.freedesktop.login1.hibernate-ignore-inhibit auth_admin_keep # want more rights: -org.freedesktop.login1.inhibit-block-shutdown auth_admin_keep -org.freedesktop.login1.inhibit-block-sleep auth_admin_keep -org.freedesktop.login1.inhibit-handle-power-key auth_admin_keep -org.freedesktop.login1.inhibit-handle-suspend-key auth_admin_keep -org.freedesktop.login1.inhibit-handle-hibernate-key auth_admin_keep -org.freedesktop.login1.inhibit-handle-lid-switch auth_admin_keep +org.freedesktop.login1.inhibit-block-shutdown no:yes:yes +org.freedesktop.login1.inhibit-block-sleep no:yes:yes +org.freedesktop.login1.inhibit-handle-power-key no:yes:yes +org.freedesktop.login1.inhibit-handle-suspend-key no:yes:yes +org.freedesktop.login1.inhibit-handle-hibernate-key no:yes:yes +org.freedesktop.login1.inhibit-handle-lid-switch no:yes:yes # even more -org.freedesktop.login1.inhibit-delay-shutdown auth_admin_keep -org.freedesktop.login1.inhibit-delay-sleep auth_admin_keep -org.freedesktop.login1.inhibit-block-idle auth_admin_keep +org.freedesktop.login1.inhibit-delay-shutdown yes +org.freedesktop.login1.inhibit-delay-sleep yes +org.freedesktop.login1.inhibit-block-idle yes org.freedesktop.login1.suspend auth_admin_keep:auth_admin_keep:yes org.freedesktop.login1.suspend-multiple-sessions auth_admin_keep:auth_admin_keep:yes org.freedesktop.login1.hibernate auth_admin_keep:auth_admin_keep:yes -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
