aboutsummaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-extended/polkit
AgeCommit message (Collapse)Author
2019-10-05polkit: Fix CVE-2018-19788Dan Tran
Signed-off-by: Dan Tran <dantran@microsoft.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-23polkit: Fix CVE-2019-6133Ovidiu Panait
In PolicyKit (aka polkit) 0.115, the start time protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-6133 Upstream patch: https://gitlab.freedesktop.org/polkit/polkit/commit/c898fdf4b1aafaa04f8ada9d73d77c8bb76e2f81 Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-16polkit: 0.113 -> 0.115Hongxu Jia
- Rebase patches to 0.115 0001-make-netgroup-support-configurable.patch polkit-1_pam.patch - Add --disable-libelogind which OE does not have recipe libelogind Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-04-13polkit-gnome: removeAndreas Müller
* last release was 2011 * it fails on autobuilder * nothing uses it Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-12polkit-gnome: only include when x11 in DISTRO_FEATURESArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-19polkit: add consolekit only when x11 is enabledJackie Huang
consolekit depends on virtual/libx11 then it requires x11 distro feature, so add consolekit option only when x11 is in DISTRO_FEATURES. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-18recipes: fix invalid license fileJackie Huang
Use '${COMMON_LICENSE_DIR}/MIT' for MIT License to fix the warning: | WARNING: packagegroup-xfce-base-1.0-r5 do_populate_lic: ${COREBASE}/LICENSE is not a valid license file, please use '${COMMON_LICENSE_DIR}/MIT' for a MIT License file in LIC_FILES_CHKSUM. This will become an error in the future Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-03-31polkit-group-rule.inc: Fix comment typo "polkid" -> "polkitd"Robert P. J. Day
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-03-07Make use of the new bb.utils.filter() functionPeter Kjellerstedt
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-08-22meta-oe: fix indentationMartin Jansa
* remove tabs which sneaked in since last cleanup * meta-oe layers are using consistent indentation with 4 spaces, see http://www.openembedded.org/wiki/Styleguide Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-04-28meta-oe: use bb.utils.contains() instead of base_contains()Ross Burton
base_contains() is a compatibility wrapper and may warn in the future, so replace all instances with bb.utils.contains(). Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-03-14polkit: fix gobject introspection supportAlexander Kanavin
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2016-02-01polkit: Fix build with muslKhem Raj
Make features like netgroup optional, these are not supported by posix secondly they are poked at during configure so nothing changes for glibc based systems but it helps compiling with musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-01-04polkit-gnome: remove unrecognized configure optionsYi Zhao
Fix QA warning: WARNING: QA Issue: polkit-gnome: configure was passed unrecognised options: --disable-examples --disable-introspection [unknown-configure-option] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13polkit: fix relocation of polkit binariesReinette Chatre
Polkit is currently broken in images built with multilib and systemd. This is because the patch, 0001-do-not-hardcoded-libdir.patch, applied on top of the polkit source code modifies where the polkitd binary is installed, but it does not modify the polkit.service file to start the binary from its new location. At first it seemed reasonable to modify the systemd service file to search for the binary in the correct place. This change, as well as what the patch (0001-do-not-hardcoded-libdir.patch) already does was proposed to the polkit maintainers at https://bugs.freedesktop.org/show_bug.cgi?id=92094 During the discussion with the polkit maintainers it became apparent that the change to support multilib polkit should not be done with a patch to the polkit source code, but instead a change to the polkit recipe. Polkit correctly installs libraries when multilib is in use without any changes to its source code. What is being changed by 0001-do-not-hardcoded-libdir.patch is not where the polkit libraries are installed but where the binaries are installed. Installing binaries in /usr/lib when baselib is lib64 is acceptable (see http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s06.html ). So, instead of patching polkit to install its binaries under the same library directory as its libraries we maintain the design of the polkit installer to install the binaries in /usr/lib. This is the same as what is done in distros like Fedora that supports multilib. With this patch the polkit package, when built with multilib, installs files into /usr/lib* as follows: polkit/usr/lib64/libpolkit-agent-1.so.0 polkit/usr/lib64/libpolkit-gobject-1.so.0 polkit/usr/lib64/libpolkit-gobject-1.so.0.0.0 polkit/usr/lib64/libpolkit-agent-1.so.0.0.0 polkit/usr/lib polkit/usr/lib/polkit-1 polkit/usr/lib/polkit-1/polkitd polkit/usr/lib/polkit-1/polkit-agent-helper-1 Signed-off-by: Reinette Chatre <reinette.chatre@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-09-23polkit-group-rule.inc: remove allarchAndreas Müller
Recipes using this include depend on polkit which is not allarch. Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-08-18polkit: 0.112 -> 0.113Li xin
Remove 0001-configure.ac-Check-only-for-libsystemd-not-libsystem.patch, it is not needed anymore. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-05-13polkit: do not hardcode the libdirChunrong Guo
libdir is defined as ${prefix}/lib/, but we want it to support multilib path Signed-off-by: Chunrong Guo <B40290@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-05-13polkit-gnome: Upgrade 0.102 -> 0.105Khem Raj
add missing dep on gtk+3 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-02-12polkit-group-rule: Add polkitd user and groupAsh Charles
Recipes including polkit-group-rule.inc correctly install a directory with the user and group set as 'polkitd'. To avoid warnings like these when assemblying the rootfs, WARNING: log_check: warning: user polkitd does not exist - using root ... WARNING: log_check: warning: group polkitd does not exist - using root create this user and group. Note: although the polkit recipe itself, on which this depends, is creating this same user and group, it seems that the useradd class needs this to be specified independently. Signed-off-by: Ash Charles <ashcharles@gmail.com> Acked-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-12-17polkit-gnome, gdm, network-manager-applet: blacklist because ↵Martin Jansa
polkit-gnome.do_configure fails Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-01polkit: update to 0.112Andreas Müller
checked in logfile: setting up ownership/permission is performed by make install Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2014-08-11polkit-gnome: remove unrecognized configure optionsMartin Jansa
* fixes following QA warnings: polkit-gnome-0.102: polkit-gnome: configure was passed unrecognised options: --disable-scrollkeeper --disable-man-pages [unknown-configure-option] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21polkit-gnome: add missing dependency on gnome-commonRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21recipes: add missing dependency on intltool-nativeRichard Purdie
* These recipes all require intltool-native to build but were missing a dependency on it. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-03-19polkit: make it compatible with systemd-209Martin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-04Update after toplevel LICENSE file checksum changeMartin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-06-20polkit-group-rule-datetime: initial addAndreas Müller
add user-group 'datetime' allowing members to change date/time/timezone settings Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-06-20polkit-group-rule-network: initial addAndreas Müller
add user-group 'network' allowing memebers to change networkmanager settings Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-06-20polkit-group-rule.inc: add a common template for polkit-rules/user-groupsAndreas Müller
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-06-20polkit: update to 0.111Andreas Müller
note: this version's rules are written in jscript. The following tests were performed: * run-tests for gnome- and xfce-based image * update a package that installs a new rule to check if the restricted access rights for /etc/polkit-1/rules.d don't cause trouble Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-04-15recipes: Unify indentationMartin Jansa
* This change is only aesthetic (unlike indentation in Python tasks). * Some recipes were using tabs. * Some were using 8 spaces. * Some were using mix or different number of spaces. * Make them consistently use 4 spaces everywhere. * Yocto styleguide advises to use tabs (but the only reason to keep tabs is the need to update a lot of recipes). Lately this advice was also merged into the styleguide on the OE wiki. * Using 4 spaces in both types of tasks is better because it's less error prone when someone is not sure if e.g. do_generate_toolchain_file() is Python or shell task and also allows to highlight every tab used in .bb, .inc, .bbappend, .bbclass as potentially bad (shouldn't be used for indenting of multiline variable assignments and cannot be used for Python tasks). * Don't indent closing quote on multiline variables we're quite inconsistent wheater it's first character on line under opening quote or under first non-whitespace character in previous line. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Acked-by: Koen Kooi <koen@dominion.thruhere.net>
2013-04-15polkit: move systemd support from meta-systemd back to meta-oeMartin Jansa
* POLKITAUTH isn't used anymore PACKAGECONFIG should select right version for systemd now Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-03-21polkit: add (taken from oe-core)Ross Burton
PolKit will be removed from oe-core as it isn't massively applicable in embedded, isn't used by anything by default anymore, and future upgrades require the SpiderMonkey JavaScript runtime. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-03-13polkit: Remove authentication override as it is handled in OE-CoreOtavio Salvador
OE-Core now handles the detection of authentication so we don't need to do it here. The bbappend file is kept to provide the upgrade path only, or the revision would go backwards. Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-07-16polkit: meta-systemd reworkAndreas Müller
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2012-03-04polkit 0.104 bbappend: append to PACkAGECONFIG instead of overwriting itKoen Kooi
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2012-02-23polkit: enable and disable systemd/consolekit support explicitlyMartin Jansa
* people using sysvinit need to add something like PACKAGECONFIG = "${@base_contains('VIRTUAL-RUNTIME_init_manager', 'sysvinit', 'consolekit', 'systemd', d)}" or just PACKAGECONFIG = "consolekit" to their own .bbappend if they don't want to get systemd in their images. * and for the rest it will enable systemd explititly Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-02-20polkit: depends on systemdOtavio Salvador
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-19 21:48:23 +0000