Summary: PolicyKit Authorization Framework Summary(ja): PolicyKit 認証フレームワーク Name: polkit Version: 0.99 Release: 2%{?_dist_release} License: LGPLv2+ URL: http://www.freedesktop.org/wiki/Software/PolicyKit Source0: http://hal.freedesktop.org/releases/%{name}-%{version}.tar.gz Patch100: polkit_CVE-2013-4288.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root Group: System Environment/Libraries BuildRequires: glib2-devel BuildRequires: expat-devel BuildRequires: pam-devel BuildRequires: eggdbus-devel >= 0.6 BuildRequires: gtk-doc BuildRequires: intltool BuildRequires: gobject-introspection-devel Requires: ConsoleKit Requires: dbus #Obsoletes: PolicyKit <= 0.10 #Provides: PolicyKit = 0.11 %description PolicyKit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. %package devel Summary: Development files for PolicyKit Summary(ja): PolicyKit の開発用ファイル Group: Development/Libraries Requires: %name = %{version}-%{release} Requires: %name-docs = %{version}-%{release} Requires: pkgconfig Requires: glib2-devel #Obsoletes: PolicyKit-devel <= 0.10 #Provides: PolicyKit-devel = 0.11 %description devel Development files for PolicyKit. %package docs Summary: Development documentation for PolicyKit Summary(ja): PolicyKit の開発用ドキュメント Group: Development/Libraries Requires: %name-devel = %{version}-%{release} Requires: gtk-doc #Obsoletes: PolicyKit-docs <= 0.10 #Provides: PolicyKit-docs = 0.11 %description docs Development documentation for PolicyKit. %package desktop-policy Summary: Roles and default policy for desktop usage Summary(ja): デスクトップ用途のロールとデフォルトポリシー Group: Development/Libraries #Requires: %name = %{version}-%{release} Requires(pre): /usr/sbin/groupadd Requires(preun): /usr/sbin/groupdel %description desktop-policy Roles and default policy for desktop usage. %prep %setup -q %patch100 -p1 -b .CVE-2013-4288 %build %configure --enable-gtk-doc --disable-static --libexecdir=%{_libexecdir}/polkit-1 --enable-introspection --enable-examples make %install rm -rf $RPM_BUILD_ROOT make install DESTDIR=$RPM_BUILD_ROOT rm -f $RPM_BUILD_ROOT%{_libdir}/*.la rm -f $RPM_BUILD_ROOT%{_libdir}/polkit-1/extensions/*.la %find_lang polkit-1 ### ### BEGIN DESKTOP POLICY CONFIGURATION ### ### cat > $RPM_BUILD_ROOT%{_sysconfdir}/polkit-1/localauthority.conf.d/60-desktop-policy.conf << EOF # This allows users in the desktop_admin_r group to authenticate as # the administrator. # # DO NOT EDIT THIS FILE, it will be overwritten on update. [Configuration] AdminIdentities=unix-group:desktop_admin_r EOF cat > $RPM_BUILD_ROOT%{_localstatedir}/lib/polkit-1/localauthority/10-vendor.d/10-desktop-policy.pkla << EOF # Authorizations/policy for the desktop_admin_r and desktop_user_r groups. # # DO NOT EDIT THIS FILE, it will be overwritten on update. # Allow "standard users" to do some things without being interrupted by # password dialogs (TODO: not complete) # [Desktop User Permissions] Identity=unix-group:desktop_user_r Action=org.gnome.clockapplet.mechanism.settimezone ResultAny=no ResultInactive=no ResultActive=yes # Allow "administrative users" to do a lot of things without being interrupted by # password dialogs (TODO: not complete) # [Desktop Administrator Permissions] Identity=unix-group:desktop_admin_r Action=org.gnome.clockapplet.mechanism.*;org.freedesktop.devicekit.disks.*;org.freedesktop.RealtimeKit1.* ResultAny=no ResultInactive=no ResultActive=yes EOF ### ### END DESKTOP POLICY CONFIGURATION ### %clean rm -rf $RPM_BUILD_ROOT %post -p /sbin/ldconfig %postun -p /sbin/ldconfig %pre desktop-policy /usr/sbin/groupadd -r desktop_admin_r 2> /dev/null || : /usr/sbin/groupadd -r desktop_user_r 2> /dev/null || : %files desktop-policy %{_sysconfdir}/polkit-1/localauthority.conf.d/60-desktop-policy.conf %{_localstatedir}/lib/polkit-1/localauthority/10-vendor.d/10-desktop-policy.pkla %files -f polkit-1.lang %defattr(-,root,root,-) %doc COPYING %{_libdir}/lib*.so.* %dir %{_libdir}/polkit-1 %dir %{_libdir}/polkit-1/extensions %{_libdir}/polkit-1/extensions/*.so %{_datadir}/man/man1/* %{_datadir}/man/man8/* %{_datadir}/dbus-1/system-services/* %dir %{_datadir}/polkit-1/ %dir %{_datadir}/polkit-1/actions %{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf %{_sysconfdir}/pam.d/polkit-1 %{_sysconfdir}/polkit-1 %{_bindir}/pkaction %{_bindir}/pkcheck %{_libexecdir}/polkit-1/polkitd %{_libdir}/girepository-1.0/*.typelib # see upstream docs for why these permissions are necessary %attr(4755,root,root) %{_bindir}/pkexec %attr(4755,root,root) %{_libexecdir}/polkit-1/polkit-agent-helper-1 %attr(0700,root,root) %dir %{_localstatedir}/lib/polkit-1/ %dir %{_localstatedir}/lib/polkit-1/localauthority %dir %{_localstatedir}/lib/polkit-1/localauthority/10-vendor.d %dir %{_localstatedir}/lib/polkit-1/localauthority/20-org.d %dir %{_localstatedir}/lib/polkit-1/localauthority/30-site.d %dir %{_localstatedir}/lib/polkit-1/localauthority/50-local.d %dir %{_localstatedir}/lib/polkit-1/localauthority/90-mandatory.d %files devel %defattr(-,root,root,-) %{_libdir}/lib*.so %{_libdir}/pkgconfig/*.pc %{_datadir}/gir-1.0/*.gir %{_includedir}/* %{_bindir}/pk-example-frobnicate %{_datadir}/polkit-1/actions/org.freedesktop.policykit.examples.pkexec.policy %files docs %defattr(-,root,root,-) %{_datadir}/gtk-doc/html/* %changelog * Sat Sep 21 2013 Toshiharu Kudoh 0.99-2 - added Patch100 to fix CVE-2013-4288 * Sat Oct 02 2010 Yoji TOYODA 0.99-1 - new upstream release * Tue Sep 21 2010 IWAI, Masaharu 0.96-2 - build with rpm-4.8.1-1 for pkg-config file * Mon Feb 22 2010 Daisuke SUZUKI 0.96-1 - update to 0.96 - BR: eggdbus-devel >= 0.6 * Mon Oct 19 2009 Daisuke SUZUKI 0.95-0.2.git20090913 - remove Obsoletes:/Provides: PolicyKit* * Sat Sep 26 2009 Daisuke SUZUKI 0.95-0.1.git20090913 - initial build for Vine Linux * Mon Sep 14 2009 David Zeuthen - 0.95-0.git20090913.2 - Refine how Obsolete: is used and also add Provides: (thanks Jesse Keating and nim-nim) * Mon Sep 14 2009 David Zeuthen - 0.95-0.git20090913.1 - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera) - Obsolete old PolicyKit packages * Sun Sep 13 2009 David Zeuthen - 0.95-0.git20090913 - Update to git snapshot - Drop upstreamed patches - Turn on GObject introspection - Don't delete desktop_admin_r and desktop_user_r groups when uninstalling polkit-desktop-policy * Fri Sep 11 2009 David Zeuthen - 0.94-4 - Add some patches from git master - Sort pkaction(1) output - Bug 23867 – UnixProcess vs. SystemBusName aliasing * Thu Aug 13 2009 David Zeuthen - 0.94-3 - Add desktop_admin_r and desktop_user_r groups along with a first cut of default authorizations for users in these groups. * Wed Aug 12 2009 David Zeuthen - 0.94-2 - Disable GObject Introspection for now as it breaks the build * Wed Aug 12 2009 David Zeuthen - 0.94-1 - Update to upstream release 0.94 * Sun Jul 26 2009 Fedora Release Engineering - 0.93-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Mon Jul 20 2009 David Zeuthen - 0.93-2 - Rebuild * Mon Jul 20 2009 David Zeuthen - 0.93-1 - Update to 0.93 * Tue Jun 09 2009 David Zeuthen - 0.92-3 - Don't make docs noarch (I *heart* multilib) - Change license to LGPLv2+ * Mon Jun 08 2009 David Zeuthen - 0.92-2 - Rebuild * Mon Jun 08 2009 David Zeuthen - 0.92-1 - Update to 0.92 release * Wed May 27 2009 David Zeuthen - 0.92-0.git20090527 - Update to 0.92 snapshot * Mon Feb 9 2009 David Zeuthen - 0.91-1 - Initial spec file.