Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package polkit for openSUSE:Factory checked in at 2021-07-21 19:05:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/polkit (Old) and /work/SRC/openSUSE:Factory/.polkit.new.2632 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "polkit" Wed Jul 21 19:05:47 2021 rev:77 rq:907023 version:0.118 Changes: -------- --- /work/SRC/openSUSE:Factory/polkit/polkit.changes 2021-06-12 20:05:46.588691121 +0200 +++ /work/SRC/openSUSE:Factory/.polkit.new.2632/polkit.changes 2021-07-21 19:06:40.951323020 +0200 @@ -1,0 +2,16 @@ +Sun Jul 18 12:16:13 UTC 2021 - Callum Farmer <[email protected]> + +- Change to using systemd-sysusers +- Remove unneeded shadow dependency, no longer required due to + systemd-sysusers +- Fix 50-default.rules file-parent-ownership-mismatch warning +- Remove --with-pic, no effect with --disable-static + +------------------------------------------------------------------- +Wed Jul 7 08:15:04 UTC 2021 - Stefan Schubert <[email protected] + +- Move /etc/polkit-1/rules.d/50-default.rules to + /usr/share/polkit-1/rules.d/50-default.rules. The first location + is only for admin changes. + +------------------------------------------------------------------- New: ---- system-user-polkitd.conf ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ polkit.spec ++++++ --- /var/tmp/diff_new_pack.UCNdzF/_old 2021-07-21 19:06:41.559324077 +0200 +++ /var/tmp/diff_new_pack.UCNdzF/_new 2021-07-21 19:06:41.563324084 +0200 @@ -26,6 +26,7 @@ Source0: https://www.freedesktop.org/software/polkit/releases/%{name}-%{version}.tar.gz Source1: https://www.freedesktop.org/software/polkit/releases/%{name}-%{version}.tar.gz.sign Source2: %{name}.keyring +Source3: system-user-polkitd.conf Source99: baselibs.conf # PATCH-FIX-OPENSUSE polkit-no-wheel-group.patch [email protected] -- In openSUSE, there's no special meaning for the wheel group, so we shouldn't allow it to be admin @@ -49,6 +50,7 @@ BuildRequires: libtool BuildRequires: pam-devel BuildRequires: systemd-rpm-macros +BuildRequires: sysuser-tools BuildRequires: pkgconfig(gio-unix-2.0) >= 2.32.0 BuildRequires: pkgconfig(gmodule-2.0) >= 2.32.0 BuildRequires: pkgconfig(gobject-introspection-1.0) >= 0.6.2 @@ -59,7 +61,7 @@ #!BuildIgnore: ruby Requires: dbus-1 Requires: libpolkit0 = %{version}-%{release} -Requires(pre): shadow +%sysusers_requires Requires(post): permissions %systemd_ordering @@ -128,13 +130,13 @@ %configure \ --with-os-type=suse \ --enable-gtk-doc \ - --with-pic \ --disable-static \ --enable-introspection \ --enable-examples \ --enable-libsystemd-login \ %{nil} %make_build libprivdir=%{_libexecdir}/polkit-1 +%sysusers_generate_pre %{SOURCE3} polkit system-user-polkitd.conf %install # install explicitly into libexec. upstream has some unflexible logic for @@ -151,12 +153,12 @@ mv %{buildroot}%{_sysconfdir}/dbus-1/system.d/* %{buildroot}%{_datadir}/dbus-1/system.d/ mkdir -p %{buildroot}%{_distconfdir}/pam.d mv %{buildroot}%{_sysconfdir}/pam.d/* %{buildroot}%{_distconfdir}/pam.d/ +mv %{buildroot}%{_sysconfdir}/polkit-1/rules.d/50-default.rules %{buildroot}%{_datadir}/polkit-1/rules.d/50-default.rules +mkdir -p %{buildroot}%{_sysusersdir} +install -m0644 %{SOURCE3} %{buildroot}%{_sysusersdir}/ -%pre -getent group polkitd > /dev/null || groupadd -r polkitd -getent passwd polkitd > /dev/null || useradd -r -g polkitd -d %{_localstatedir}/lib/polkit -s /sbin/nologin -c "User for polkitd" polkitd +%pre -f polkit.pre %service_add_pre polkit.service -exit 0 %preun %service_del_preun polkit.service @@ -202,10 +204,10 @@ %dir %{_datadir}/polkit-1/actions %{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy %attr(0700,polkitd,root) %dir %{_datadir}/polkit-1/rules.d +%attr(0700,polkitd,root) %{_datadir}/polkit-1/rules.d/50-default.rules %{_distconfdir}/pam.d/polkit-1 %dir %{_sysconfdir}/polkit-1 %attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d -%config %{_sysconfdir}/polkit-1/rules.d/50-default.rules %{_bindir}/pkaction %{_bindir}/pkcheck %verify(not mode) %attr(4755,root,root) %{_bindir}/pkexec @@ -215,6 +217,7 @@ %verify(not mode) %attr(4755,root,root) %{_libexecdir}/polkit-1/polkit-agent-helper-1 # $HOME for polkit user %dir %{_localstatedir}/lib/polkit +%{_sysusersdir}/system-user-polkitd.conf %{_unitdir}/polkit.service %files devel ++++++ system-user-polkitd.conf ++++++ #Type Name ID GECOS Home directory Shell u polkitd - "User for polkitd" /var/lib/polkit -
