Hello community,
here is the log from the commit of package polkit-default-privs for
openSUSE:Factory checked in at 2015-05-23 12:51:03
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/polkit-default-privs (Old)
and /work/SRC/openSUSE:Factory/.polkit-default-privs.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "polkit-default-privs"
Changes:
--------
---
/work/SRC/openSUSE:Factory/polkit-default-privs/polkit-default-privs.changes
2015-04-25 16:46:23.000000000 +0200
+++
/work/SRC/openSUSE:Factory/.polkit-default-privs.new/polkit-default-privs.changes
2015-05-23 12:51:05.000000000 +0200
@@ -1,0 +2,6 @@
+Fri May 22 09:42:37 UTC 2015 - [email protected]
+
+- instead of auth-admin, disallow colord management for inactive and
+ other users, so they do not get root password popups bsc#918594
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ polkit-default-privs-13.2.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/polkit-default-privs-13.2/polkit-default-privs.restrictive
new/polkit-default-privs-13.2/polkit-default-privs.restrictive
--- old/polkit-default-privs-13.2/polkit-default-privs.restrictive
2015-04-20 11:25:15.000000000 +0200
+++ new/polkit-default-privs-13.2/polkit-default-privs.restrictive
2015-05-22 11:41:38.000000000 +0200
@@ -40,11 +40,12 @@
# bnc#822405
org.gnome.settings-daemon.plugins.wacom.wacom-oled-helper auth_admin
#
-# colord (bnc#698250, bnc#887511)
+# colord (bnc#698250, bnc#887511) (bsc#918594)
#
-org.freedesktop.color-manager.create-device
auth_admin:auth_admin:yes
-org.freedesktop.color-manager.create-profile
auth_admin:auth_admin:yes
-org.freedesktop.color-manager.delete-device
auth_admin:auth_admin:yes
+org.freedesktop.color-manager.create-device no:no:yes
+org.freedesktop.color-manager.create-profile no:no:yes
+org.freedesktop.color-manager.delete-device no:no:yes
+org.freedesktop.color-manager.delete-profile no:no:yes
org.freedesktop.color-manager.delete-profile auth_admin
org.freedesktop.color-manager.modify-device auth_admin
org.freedesktop.color-manager.modify-profile auth_admin
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/polkit-default-privs-13.2/polkit-default-privs.standard
new/polkit-default-privs-13.2/polkit-default-privs.standard
--- old/polkit-default-privs-13.2/polkit-default-privs.standard 2015-04-20
11:25:15.000000000 +0200
+++ new/polkit-default-privs-13.2/polkit-default-privs.standard 2015-05-22
11:41:38.000000000 +0200
@@ -41,12 +41,12 @@
# bnc#822405
org.gnome.settings-daemon.plugins.wacom.wacom-oled-helper no:no:yes
#
-# colord (bnc#698250)
+# colord (bnc#698250) (bsc#918594)
#
-org.freedesktop.color-manager.create-device
auth_admin:auth_admin:yes
-org.freedesktop.color-manager.create-profile
auth_admin:auth_admin:yes
-org.freedesktop.color-manager.delete-device
auth_admin:auth_admin:yes
-org.freedesktop.color-manager.delete-profile
auth_admin:auth_admin:yes
+org.freedesktop.color-manager.create-device no:no:yes
+org.freedesktop.color-manager.create-profile no:no:yes
+org.freedesktop.color-manager.delete-device no:no:yes
+org.freedesktop.color-manager.delete-profile no:no:yes
org.freedesktop.color-manager.modify-device
auth_admin:auth_admin:yes
org.freedesktop.color-manager.modify-profile
auth_admin:auth_admin:yes
org.freedesktop.color-manager.install-system-wide
auth_admin:auth_admin:auth_admin_keep