Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package polkit for openSUSE:Factory checked in at 2022-07-31 23:00:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/polkit (Old) and /work/SRC/openSUSE:Factory/.polkit.new.1533 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "polkit" Sun Jul 31 23:00:22 2022 rev:82 rq:989831 version:0.120 Changes: -------- --- /work/SRC/openSUSE:Factory/polkit/polkit.changes 2022-02-23 16:26:15.815508430 +0100 +++ /work/SRC/openSUSE:Factory/.polkit.new.1533/polkit.changes 2022-07-31 23:00:32.451621470 +0200 @@ -1,0 +2,6 @@ +Mon Jul 18 09:38:28 UTC 2022 - Marcus Meissner <[email protected]> + +- split out pkexec into seperate package to make system hardening + easier (to avoid installing it jsc#PED-132 jsc#PED-148). + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ polkit.spec ++++++ --- /var/tmp/diff_new_pack.oO2mxF/_old 2022-07-31 23:00:32.987623028 +0200 +++ /var/tmp/diff_new_pack.oO2mxF/_new 2022-07-31 23:00:32.991623039 +0200 @@ -90,6 +90,14 @@ %description devel Development files for PolicyKit Authorization Framework. +%package -n pkexec +Summary: pkexec component of polkit +Group: System/Libraries +Requires: %{name} = %{version}-%{release} + +%description -n pkexec +This package contains the pkexec setuid root binary part of polkit. + %package doc Summary: Development documentation for PolicyKit Group: Development/Libraries/C and C++ @@ -183,13 +191,17 @@ %postun %service_del_postun polkit.service -%post +%post -n pkexec %set_permissions %{_bindir}/pkexec + +%post %set_permissions %{_libexecdir}/polkit-1/polkit-agent-helper-1 %service_add_post polkit.service -%verifyscript +%verifyscript -n pkexec %verify_permissions -e %{_bindir}/pkexec + +%verifyscript %verify_permissions -e %{_libexecdir}/polkit-1/polkit-agent-helper-1 %post -n libpolkit-agent-1-0 -p /sbin/ldconfig @@ -210,7 +222,6 @@ %files -f polkit-1.lang %license COPYING -%{_mandir}/man1/pkexec.1%{?ext_man} %{_mandir}/man1/pkaction.1%{?ext_man} %{_mandir}/man1/pkcheck.1%{?ext_man} %{_mandir}/man1/pkttyagent.1%{?ext_man} @@ -231,7 +242,6 @@ %attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d %{_bindir}/pkaction %{_bindir}/pkcheck -%verify(not mode) %attr(4755,root,root) %{_bindir}/pkexec %{_bindir}/pkttyagent %dir %{_libexecdir}/polkit-1 %{_libexecdir}/polkit-1/polkitd @@ -253,6 +263,10 @@ %{_datadir}/gettext/its/polkit.its %{_datadir}/gettext/its/polkit.loc +%files -n pkexec +%{_mandir}/man1/pkexec.1%{?ext_man} +%verify(not mode) %attr(4755,root,root) %{_bindir}/pkexec + %files doc %doc NEWS %doc %{_datadir}/gtk-doc/html/polkit-1/
