Re: PolicyKit 0.90 (pre-)release

2009-01-21 Thread David Zeuthen
On Wed, 2009-01-21 at 12:57 +, Richard Hughes wrote: On Wed, 2009-01-21 at 02:23 -0500, David Zeuthen wrote: http://cgit.freedesktop.org/~david/polkit/tree/ How come not in the main PolicyKit git repo? :-) I wanted to get a release out, not learn more about how git works - I'll move

Re: PolicyKit 0.90 (pre-)release

2009-01-26 Thread David Zeuthen
Hey Michael, Thanks for looking through this and apologies for replying late; just got back from a short vacation. Looks like EggDBus has an unnecessary configure check for expat.h (it seems to be used nowhere in the code). Good catch, expat is indeed not used now as we're now using GMarkup

Re: PolicyKit 0.90 (pre-)release

2009-01-26 Thread David Zeuthen
2009/1/22 Richard Hughes hughsi...@gmail.com: Along with the two patches I sent, the following two minimal spec files produce RPM files. I've not yet checked that they actually work, although they are probably 99% the way there. Is the package going to be called PolicyKit1, policykit1,

repository and TODO list

2009-01-27 Thread David Zeuthen
Hey, I've now moved all the commits of the PolicyKit rewrite into the main repository, see http://cgit.freedesktop.org/PolicyKit/ Also, the old polkit.git repo in my home directory on people.fd.o is no longer available. I promised writing up a TODO list, this is now done, see

polkit 0.91

2009-02-09 Thread David Zeuthen
Hey, Here we go again with a new PolicyKit release http://people.freedesktop.org/~david/polkit-0.91/ http://people.freedesktop.org/~david/polkit-0.91/docs/ Lots of bug fixes and new features this release; major highlights - parallel builds should work - plug-in architecture landed - a

Re: PolicyKit 0.90 (pre-)release

2009-02-09 Thread David Zeuthen
On Sun, 2009-02-01 at 22:16 +0100, Michael Biebl wrote: Just curious: Why the rename from PolicyKit to polkit and PolicyKit-gnome to polkit-gnome? Mostly because the name was going to change. Would you like package descriptions to be updated and use the new names? Yeah, I think so. I also

Re: PolicyKit license

2009-05-26 Thread David Zeuthen
On Wed, 2009-05-20 at 13:40 +0900, Jooncheol Park wrote: Hi, all I saw http://cgit.freedesktop.org/PolicyKit/tree/COPYING but, I know PolicyKit license was MIT/X11 until 0.9 Does PolicyKit going to change the license from MIT to LGPLv2 ? Yes, the new version of PolicyKit is a complete

Re: Local Authority plan

2009-06-26 Thread David Zeuthen
On Fri, 2009-06-26 at 10:26 +0200, Dario Freddi wrote: Hey David, Hey, thanks for looking at this. I won't answer in blocks since your mail was pretty long and clear. First things first, what you described seems great. Although, I have a couple of questions. Basically, your structure of

Re: polkit and PAM

2009-07-08 Thread David Zeuthen
On Wed, 2009-07-08 at 10:30 -0500, Robby Workman wrote: Heh, I just pinged you on IRC about this. I've got a polkitagenthelper.c file that uses shadow instead of PAM (I finally got around to looking at it in more detail last night), but it's not compile tested at all yet; I'm working on some

Return of the annual system bus restart flamewar (Was Re: Some help with PolicyKit basics)

2009-07-27 Thread David Zeuthen
On Mon, 2009-07-27 at 17:58 +0200, Michael Biebl wrote: 2009/7/27 David Zeuthen da...@fubar.dk: this still true if the d-bus daemon is restarted?) The system bus daemon should _never ever_ be restarted. The guarantee that unique system bus names are _never_ recycled is a good reason why

Re: Should the session check a negative authorisation?

2009-08-10 Thread David Zeuthen
Hey Richard, On Mon, 2009-08-10 at 11:41 +0100, Richard Hughes wrote: In https://bugzilla.redhat.com/show_bug.cgi?id=515769 a user has set the PolicyKit action for shutting down the system policy as no. Actually, what the user in the bug report has done won't work since the mechanism used

Re: Should the session check a negative authorisation?

2009-08-10 Thread David Zeuthen
On Mon, 2009-08-10 at 20:44 +0100, Richard Hughes wrote: 2009/8/10 Matthias Clasen matthias.cla...@gmail.com: Or you simply call org.freedesktop.ConsoleKit.Manager.CanStop which was added for just this purpose... Seems odd being a method, shouldn't this be a property? No, the value

Re: is no as a typical default for inactive sessions the right thing to do?

2009-08-12 Thread David Zeuthen
On Wed, 2009-08-12 at 17:11 +0100, James Westby wrote: Hi, Many policies specify no for inactive sessions, which makes sense given the name, but the behaviour of consolekit means that users who log in over ssh are considered inactive, and so they cannot use apps with such policies.

Re: polkit 0.95 released - (hopefully) the last stop before 1.0!

2009-11-18 Thread David Zeuthen
On Wed, 2009-11-18 at 22:45 +0100, Dario Freddi wrote: Hey, On Friday 13 November 2009 22:20:59 David Zeuthen wrote: Hey, Here's a couple of new release I'm missing the git tag for them. Could you please tag them up on git as well? Done. Thanks. David

Re: syslogging in policykit

2009-11-30 Thread David Zeuthen
Hi, Sounds good to me in principle and something I've been wanting to do for some time. I prefer to deal with things like this in bugzilla - so please open a bug at https://bugs.freedesktop.org/enter_bug.cgi?product=PolicyKit and we can look at the details there. Thanks, David

Re: syslogging in policykit

2009-12-11 Thread David Zeuthen
On Mon, 2009-11-30 at 12:41 -0500, Matthew Miller wrote: On Mon, Nov 30, 2009 at 11:47:46AM -0500, David Zeuthen wrote: Sounds good to me in principle and something I've been wanting to do for some time. I prefer to deal with things like this in bugzilla - so please open a bug at https

Re: questions about pkexec

2009-12-15 Thread David Zeuthen
On Fri, 2009-12-11 at 12:54 -0500, Matthew Miller wrote: Sudo does, in a rudimentary way. Anything in the env_check list is removed if the value contains a % or a / character. The default list treated this way is: TERM LINGUAS LC_* LANGUAGE LANG COLORTERM Additionally,

Re: syslogging in policykit

2009-12-15 Thread David Zeuthen
On Fri, 2009-12-11 at 15:42 -0500, Matthew Miller wrote: On Fri, Dec 11, 2009 at 03:27:19PM -0500, David Zeuthen wrote: I just implemented this - see https://bugs.freedesktop.org/show_bug.cgi?id=25594 Awesome. Thanks much. Sorry I've been swamped with other things recently -- didn't mean

polkit 0.96

2010-01-15 Thread David Zeuthen
since PolicyKit 0.95: David Zeuthen (15): Bug 25367 — Also read local authority configuration data from /etc Fix logic error in pk-example-frobnicate Run the open_session part of the PAM stack in pkexec(1) Fix up last comment Bug 25594 – System logging Remove

Re: policykit.exec mechanism

2010-03-26 Thread David Zeuthen
On Wed, 2010-03-24 at 18:22 -0400, Yclept Nemo wrote: Polkit contains the /usr/share/polkit-1/actions/org.freedesktop.policykit.policy actions file. Is any accompanying mechanism provided as well? I am hoping along the lines of: /usr/share/dbus-1/system-services/* - a service file that

Re: Polkit-1 Shadow Patch

2010-06-28 Thread David Zeuthen
to David Zeuthen for the idea. */ Technically you are just speaking to libpolkit-agent-1 (or whoever launched the helper). No need for this comment. + /* Ask shadow about the user requesting authentication */ + if ((shadow = getspnam (user_to_auth)) == NULL) Split into separate lines

Re: How do I suppress auth requests for PackageKit, just like in F12, or the NOPASSWD directive in sudo?

2010-07-07 Thread David Zeuthen
Hi, On Wed, Jul 7, 2010 at 2:37 AM, Nicolas Monnet n...@altiva.fr wrote: I tried. I'm obviously not smart enough, but thanks for the condescension. It always helps. Dude, don't be like that - Matthias is trying to help you. FWIW, it's very common that end users don't read docs but rely on

polkit 0.97 and polkit-gnome 0.97

2010-08-09 Thread David Zeuthen
gobject-introspection = 0.6.2 (optional) pam (optional) Changes since PolicyKit 0.96: Andrew Psaltis (1): Add shadow support Dan Rosenberg (1): Bug 26982 – pkexec information disclosure vulnerability David Zeuthen (23): Post-release version bump to 0.97 Port core bits

Re: polkit 0.97 and polkit-gnome 0.97

2010-08-10 Thread David Zeuthen
Hi, On Tue, Aug 10, 2010 at 8:57 AM, Radek Novacek rnova...@redhat.com wrote: On Monday 09 of August 2010 23:53:19 David Zeuthen wrote: Build requirements  glib, gobject, gio    = 2.25.11 Actually I think that at least version 2.25.12 is required. With 2.25.11 it throws

polkit 0.99

2010-09-15 Thread David Zeuthen
Walters (3): Remove duplicate definitions of enumeration types Fix (correct) GCC warning about possibly-uninitialized variable Fix another GCC uninitialized variable warning David Zeuthen (2): Post-release version bump to 0.99 Update NEWS for release Vincent

Re: polkit 0.99

2010-09-15 Thread David Zeuthen
version 0.99. Build requirements polkit= 0.97 gtk+-2.0 = 2.17.1 Changes since 0.97: David Zeuthen (5): Post-release version bump to 0.98 Fix wrong date in NEWS file Fix up --string-prefix usage to work with latest gobject-introspection Bump version to 0.99

CVE-2011-1485

2011-04-19 Thread David Zeuthen
Hey, A while ago, I was privately contacted about a vulnerability in PolicyKit. For more details see, https://bugzilla.redhat.com/show_bug.cgi?id=692922 Now that the embargo for this issue has been lifted (my contact from Red Hat's security response team has been in contact with other vendors

polkit 0.102

2011-08-01 Thread David Zeuthen
of the code still needs some security review. Use at your own risk. Build requirements glib, gobject, gio= 2.28 gobject-introspection = 0.6.2 (optional) pam (optional) Changes since PolicyKit 0.101: Benjamin Otte (1): introspection: Add --c-include to the gir files David Zeuthen

Re: Mistype in DBus object name

2011-11-17 Thread David Zeuthen
Hi, On Mon, Nov 7, 2011 at 2:38 AM, Alan Near l...@sendrecv.net wrote: I've found a mistype in documentation. Committed, thanks. Sorry for the lag. David ___ polkit-devel mailing list polkit-devel@lists.freedesktop.org

Re: Making to/from gvariant/string methods in PolkitIdentity virtual

2011-11-17 Thread David Zeuthen
Hey, Sorry I missed your message, for some reason it was in my spam folder. On Fri, Nov 11, 2011 at 8:08 PM, Nikki VonHollen vonhol...@google.com wrote: Hi David and friends, I'm working on adding netgroup support to Policy Kit. Before we start talking about specifics or the code, do you

polkit 0.103

2011-12-06 Thread David Zeuthen
): Mistype in DBus object: PoliycKit1 - PolicyKit1 David Zeuthen (7): Post-release version bump to 0.103 Add support for the org.freedesktop.policykit.imply annotation Add --no-debug option and use this for D-Bus activation Bug 41025 – Add

polkit 0.106

2012-06-07 Thread David Zeuthen
) pam (optional) ConsoleKit OR systemd Changes since polkit 0.105: Colin Walters (3): build: Check for mozjs185, not libjs autogen.sh: Fix check for libtool (we only need libtoolize) agenthelper-pam: Fix newline-trimming code David Zeuthen (65): Post-release version bump

Re: PolicyKit agent for KDE3

2012-06-26 Thread David Zeuthen
On Mon, Jun 25, 2012 at 4:42 PM, Serghei Amelian serg...@thel.ro wrote: Hello, I'm trying to create a polkit agent for KDE3, using dbus calls and polkit-agent-helper-1. Two things: 1. Please don't do this - just use libpolkit-agent-1.so instead, it's much easier and it's better if we are all