Hello community,

here is the log from the commit of package flatpak for openSUSE:Factory checked 
in at 2018-11-18 23:26:30
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/flatpak (Old)
 and      /work/SRC/openSUSE:Factory/.flatpak.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "flatpak"

Sun Nov 18 23:26:30 2018 rev:24 rq:649586 version:1.0.5

Changes:
--------
--- /work/SRC/openSUSE:Factory/flatpak/flatpak.changes  2018-10-25 
08:10:40.808253334 +0200
+++ /work/SRC/openSUSE:Factory/.flatpak.new/flatpak.changes     2018-11-18 
23:26:45.173875483 +0100
@@ -1,0 +2,51 @@
+Fri Nov 16 10:09:01 UTC 2018 - [email protected]
+
+- Make polkit_rules_usability.patch effective by adding a 60- prefix to the
+  rules file. This will cause it to be executed before the
+  polkit-default-privs are executed (bsc#984817).
+
+-------------------------------------------------------------------
+Tue Nov 13 08:55:03 UTC 2018 - Antonio Larrosa <[email protected]>
+
+- Update to version 1.0.5:
+  + Make the /etc -> /usr/etc bind-mounts read-only.
+  + Make various app-specific configuration files read-only.
+  + flatpak is more picky about remote names to avoid problems with
+    storing weird names in the ostree config.
+  + A segfault in libflatpak handling of bundles was fixed.
+  + Updated translations
+  + Fixed a regression in flatpak run that caused problems running
+    user-installed apps when the system installation was broken.
+  + Implicity grant MPRIS2 permissions
+- Changes from version 1.0.4:
+  + Flatpak 0.99.1 removed the inheritance of permissions from the
+    runtime due to concerns with dynamic app permissions. Due to
+    popular requests, this version re-introduces such inheritance,
+    but does it instead at build time. This solved the issues with
+    dynamic permissions while still allowing runtimes to have
+    default permissions. Apps can disable this by passing
+    --no-inherit-permissions to build-finish.
+  + The sandbox now always includes a /etc/timezone file, following
+    the (old) debian standard for this. This is needed, because the
+    more modern way of exposing the timezone name by having
+    /etc/localtime be a symlink into /usr/share/zoneinfo doesn't
+    work when exposing the host timezone.
+  + All apps now have automatic permissions to own their own app id
+    as a subname of org.mpris.MediaPlayer2.
+  + We now properly re-load remote state in FlatpakTransaction if
+    the metadata was updated for the remote.
+  + The signature of the FlatpakTransaction::operation-done signal
+    was wrong in the header and has now been corrected to the
+    signature that is actually emitted.
+  + A crash was fixed when reading invalid .flatpakref files.
+  + A crash during updates when a local ref was unexpectedly
+    missing was fixed.
+  + An error case on uninstalling was incorrectly returning success
+    even thought there was an error.
+  + flatpak_installation_modify_remote did not correctly save the
+    nodeps state.
+  + flatpak_installation_load_app_overrides() was improperly
+    returning freed memory.
+  + The tarball now ships with an icon (flatpak.png).
+
+-------------------------------------------------------------------

Old:
----
  flatpak-1.0.3.tar.xz

New:
----
  flatpak-1.0.5.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ flatpak.spec ++++++
--- /var/tmp/diff_new_pack.s2Q2Zv/_old  2018-11-18 23:26:46.045874425 +0100
+++ /var/tmp/diff_new_pack.s2Q2Zv/_new  2018-11-18 23:26:46.049874420 +0100
@@ -12,13 +12,13 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via https://bugs.opensuse.org/
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
 
 %define libname libflatpak0
 Name:           flatpak
-Version:        1.0.3
+Version:        1.0.5
 Release:        0
 Summary:        OSTree based application bundles management
 License:        LGPL-2.1-or-later
@@ -132,6 +132,12 @@
 find %{buildroot} -type f -name "*.la" -delete -print
 mkdir -p %{buildroot}%{_sbindir}
 ln -s service %{buildroot}%{_sbindir}/rcflatpak-system-helper
+# add a 60- prefix to the rules file, otherwise it is not effective, because
+# /etc/polkit-1/rules.d/90-default-privs.rules is executed first and if no
+# polkit-default-privs rule grants access then an explicit reject is the
+# result. This should fix bsc#984817, granting members of group wheel access
+# w/o password entry.
+mv 
%{buildroot}/%{_datadir}/polkit-1/rules.d/{,60-}org.freedesktop.Flatpak.rules
 
 %find_lang %{name}
 
@@ -170,7 +176,7 @@
 %{_datadir}/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service
 # policykit rules
 %{_datadir}/polkit-1/actions/org.freedesktop.Flatpak.policy
-%{_datadir}/polkit-1/rules.d/org.freedesktop.Flatpak.rules
+%{_datadir}/polkit-1/rules.d/60-org.freedesktop.Flatpak.rules
 %{_mandir}/man1/%{name}*.1%{ext_man}
 %{_mandir}/man5/flatpak-metadata.5%{ext_man}
 %{_mandir}/man5/flatpak-flatpakref.5%{ext_man}

++++++ _service ++++++
--- /var/tmp/diff_new_pack.s2Q2Zv/_old  2018-11-18 23:26:46.073874391 +0100
+++ /var/tmp/diff_new_pack.s2Q2Zv/_new  2018-11-18 23:26:46.073874391 +0100
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
-    <param name="revision">refs/tags/1.0.3</param>
+    <param name="revision">refs/tags/1.0.5</param>
   </service>
   <service name="recompress" mode="disabled">
     <param name="file">*.tar</param>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.s2Q2Zv/_old  2018-11-18 23:26:46.089874371 +0100
+++ /var/tmp/diff_new_pack.s2Q2Zv/_new  2018-11-18 23:26:46.089874371 +0100
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param 
name="url">https://github.com/flatpak/flatpak.git</param>
-              <param 
name="changesrevision">b6a8cab35ff7628050a5e5c385979a034a2ff2dc</param></service></servicedata>
+              <param 
name="changesrevision">89a7da60a21678bd1fc4b020050cf66feb676a0d</param></service></servicedata>
\ No newline at end of file

++++++ flatpak-1.0.3.tar.xz -> flatpak-1.0.5.tar.xz ++++++
++++ 12185 lines of diff (skipped)


Reply via email to