summaryrefslogtreecommitdiff
path: root/polkit.spec
blob: 73763ae74cacebd05c7eb7fb8057eebf5673936b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
Name:             polkit
Version:          126
Release:          1
Summary:          Define and Handle authorizations tool
License:          LGPL-2.0-or-later
URL:              https://polkit.pages.freedesktop.org/polkit/
Source0:          https://github.com/polkit-org/polkit/archive/refs/tags/%{version}.tar.gz
Source1:          polkit.sysusers

Patch0:           modify-admin-authorization-from-wheel-group-to-root.patch
Patch1:           backport-CVE-2025-7519.patch
Patch2:           backport-Leaking-zombie-child-processes.patch

BuildRequires: meson >= 0.63.0
BuildRequires: pkgconfig(dbus-1)
BuildRequires: pkgconfig(duktape) >= 2.2.0
BuildRequires: pkgconfig(expat)
BuildRequires: pkgconfig(gio-2.0) >= 2.30.0
BuildRequires: pkgconfig(gio-unix-2.0) >= 2.30.0
BuildRequires: pkgconfig(glib-2.0) >= 2.30.0
BuildRequires: pkgconfig(gobject-2.0) >= 2.30.0
BuildRequires: pkgconfig(gobject-introspection-1.0) >= 0.6.2
BuildRequires: pkgconfig(libsystemd)
BuildRequires: pkgconfig(systemd)
BuildRequires: pam-devel
BuildRequires: gettext
BuildRequires: gtk-doc

Requires:         dbus polkit-pkla-compat
Requires:         %{name}-libs%{?_isa} = %{version}-%{release}
%{?sysusers_requires_compat}
%{?systemd_requires}

Obsoletes:        PolicyKit <= 0.10 polkit-desktop-policy < 0.103 polkit-js-engine < 0.120-5 polkit < 0.113-3
Provides:         PolicyKit = 0.11 polkit-desktop-policy = 0.103 polkit-js-engine = %{version}-%{release}
Conflicts:        polkit-gnome < 0.97

%description
polkit is a toolkit for defining and handling authorizations. It is
used for allowing unprivileged processes to speak to privileged processes.

%package libs
Summary:          Libraries for polkit

%description libs
Libraries files for polkit.

%package          devel
Summary:          Development files for %{name}
Requires:         %{name}-libs%{?_isa} = %{version}-%{release}
Requires:         %{name}-help = %{version}-%{release}
Obsoletes:        PolicyKit-devel <= 0.10 PolicyKit-docs <= 0.10
Provides:         PolicyKit-devel = 0.11 PolicyKit-docs = 0.11 polkit-docs

%description      devel
Development files for polkit.

%package_help

%prep
%autosetup -n %{name}-%{version} -p1

%build
%meson -D gtk_doc=true \
       -D introspection=true \
       -D man=true \
       -D session_tracking=logind \
       -D os_type='redhat' \
       -D examples=false \
       -D tests=false

%meson_build

%install
%meson_install
install -Dpm 0644 %{S:1} %{buildroot}%{_sysusersdir}/polkit.conf

%find_lang polkit-1

%pre
%sysusers_create_compat %{S:1}

%post
%systemd_post polkit.service

%preun
%systemd_preun polkit.service

%postun
%systemd_postun_with_restart polkit.service

%files -f polkit-1.lang
%license COPYING
%doc NEWS.md README.md
%{_datadir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
%{_datadir}/dbus-1/system-services/*
%{_unitdir}/polkit.service
%dir %{_datadir}/polkit-1/
%dir %{_datadir}/polkit-1/actions
%attr(0700,polkitd,root) %dir %{_datadir}/polkit-1/rules.d
%{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy
%{_datadir}/polkit-1/policyconfig-1.dtd
%{_datadir}/polkit-1/rules.d/50-default.rules
%attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d
%{_bindir}/pkaction
%{_bindir}/pkcheck
%{_bindir}/pkttyagent
%dir %{_prefix}/lib/polkit-1
%{_prefix}/lib/polkit-1/polkitd
%dir %{_prefix}/lib/pam.d
%{_prefix}/lib/pam.d/polkit-1
%dir %{_prefix}/lib/sysusers.d
%{_prefix}/lib/sysusers.d/polkit.conf
%{_tmpfilesdir}/polkit-tmpfiles.conf
%{_sysusersdir}/polkit.conf
%attr(4755,root,root) %{_bindir}/pkexec
%attr(4755,root,root) %{_prefix}/lib/polkit-1/polkit-agent-helper-1

%files libs
%{_libdir}/lib*.so.*
%{_libdir}/girepository-1.0/*.typelib

%files devel
%{_includedir}/*
%{_libdir}/pkgconfig/*.pc
%{_libdir}/lib*.so
%{_datadir}/gir-1.0/*.gir
%{_datadir}/gettext/its/polkit.its
%{_datadir}/gettext/its/polkit.loc
%{_datadir}/gtk-doc/*

%files help
%{_mandir}/man?/*

%changelog
* Tue Oct 07 2025 Funda Wang <fundawang@yeah.net> - 126-1
- update to 126
- convert user creation to systemd style

* Tue Aug 5 2025 fuanan <fuanan3@h-partners.com> - 125-3
- fix Leaking zombie child processes

* Mon Jul 28 2025 yanglongkang <yanglongkang@h-partners.com> - 125-2
- fix CVE-2025-7519

* Wed Aug 21 2024 Funda Wang <fundawang@yeah.net> - 125-1
- update to 125

* Thu Aug 15 2024 dillon chen <dillon.chen@gmail.com> - 124-1
- update to 124
  - duktape:prevent wrongful termination of runway thread

* Tue Jan 30 2024 wangyu <wangqingsan@huawei.com> - 123-1
- update to 123
  - duktape:prevent wrongful termination of runway thread
  - harden the security features of the systemd service
  - add packit build tool
  - systemd:set User/Group and don't change uid/gid if already set
  - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
  - moving the 50-default.rules file location

* Fri Feb 17 2023 wangyu <wangyu283@huawei.com> - 122-2
- revert: delete the expired polkit-pkla-compat

* Wed Feb 01 2023 wangyu <wangyu283@huawei.com> - 122-1
- Upgrade to 122

* Thu Dec 15 2022 shenxiangwei <shenxiangwei1@huawei.com> - 0.120-8
- fix core dump problem

* Fri Nov 11 2022 wangyu <wangyu283@huawei.com> - 0.120-7
- remake even configure scripts and configuration headers that are newer than their input files

* Mon Aug 22 2022 gengqihu <qihu@nfschina.com> - 0.120-6
- delete the expired polkit-pkla-compat

* Thu May 5 2022 Hugel <gengqihu1@h-partners.com> - 0.120-5
- change jsauthority to duktape 

* Fri Apr 1 2022 Hugel <gengqihu1@h-partners.com> - 0.120-4
- change jsauthority to mozjs91

* Sat Mar 5 2022 panxiaohe <panxh.life@foxmail.com> - 0.120-3
- Fix CVE-2021-4115

* Wed Jan 26 2022 panxiaohe <panxiaohe@huawei.com> - 0.120-2
- Fix CVE-2021-4034

* Mon Dec 6 2021 panxiaohe <panxiaohe@huawei.com> - 0.120-1
- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update to 0.120

* Tue Jun 15 2021 panxiaohe <panxiaohe@huawei.com> - 0.118-2
- Fix CVE-2021-3560

* Thu Jan 21 2021 yixiangzhike <zhangxingliang3@huawei.com> - 0.118-1
- update to 0.118

* Wed Jan 6 2021 Liquor <lirui130@huawei.com> - 0.116-6
- remove 10-shutdown.rules

* Fri Nov 13 2020 Hugel <gengqihu1@huawei.com> - 0.116-5
- Port polkit to mozjs78

* Sun Sep 29 2019 openEuler Buildteam <buildteam@openeuler.org> - 0.116-4
- Add libs

* Sat Sep 28 2019 openEuler Buildteam <buildteam@openeuler.org> - 0.116-3
- Fix requires

* Tue Sep 24 2019 chengquan <chengquan3@huawei.com> - 0.116-2
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:revise requires of polkit

* Wed Sep 18 2019 openEuler Buildteam <buildteam@openeuler.org> - 0.116-1
- Package init