Skip to content
Snippets Groups Projects
  1. Feb 09, 2022
  2. Feb 05, 2022
  3. Feb 03, 2022
    • Simon McVittie's avatar
      Update changelog · 67143c66
      Simon McVittie authored
      67143c66
    • Simon McVittie's avatar
      Always configure the sudo group as root-equivalent · afbbf671
      Simon McVittie authored
      This avoids Debian derivatives getting an unexpected change in behaviour
      when they switch from inheriting Debian's policykit-1 package to
      building their own policykit-1 package, perhaps as a result of wanting
      to apply an unrelated patch.
      
      The sudo group is defined to be root-equivalent in base-passwd, so this
      should be equally true for all Debian derivatives.
      
      Thanks: Arnaud Rebillout
      Closes: !3
      afbbf671
    • Simon McVittie's avatar
      Update changelog · 2849f2e8
      Simon McVittie authored
      2849f2e8
    • Simon McVittie's avatar
      d/copyright: Update · 76baa093
      Simon McVittie authored
      76baa093
    • Simon McVittie's avatar
      6b4eaabc
    • Simon McVittie's avatar
      Adjust Lintian override syntax · 21431ad4
      Simon McVittie authored
      21431ad4
    • Simon McVittie's avatar
      Reinstate the .pkla backend as a separate binary package · e31c7b6e
      Simon McVittie authored
      Upstream polkit switched its authorization rule syntax from .ini-style
      .pkla files to JavaScript in version 0.106. Debian has historically used
      a fork of the last .pkla-based version, but this was becoming
      unsustainable: bug fixes from subsequent upstream versions were either
      applied as patches, or missing from the Debian package.
      
      The "local authority" code that implements .pkla files is not actually
      all that large, so patching it into a modern upstream version is a
      much smaller task than patching modern upstream bug fixes into an old
      upstream version.
      
      For this upload to experimental, keep both the JavaScript backend and the
      .pkla backend intact, by compiling polkitd twice with different options.
      This lets us preserve existing functionality of upstream and experimental
      polkit (with the more powerful JavaScript-based rules, which can base
      their authorization decisions on service-specific information like the
      name of a systemd unit), while also having the opportunity to evaluate
      polkitd-pkla as a more direct replacement for what's in bookworm.
      e31c7b6e
    • Simon McVittie's avatar
      d/control: Split the package · 81c21cda
      Simon McVittie authored
      pkexec is a setuid program, which makes it a higher security risk than
      the more typical IPC-based uses of polkit. If we separate out pkexec
      into its own package, then only packages that rely on being able to run
      pkexec will have to depend on it, reducing attack surface for users
      who are able to remove the pkexec package.
      81c21cda
    • Simon McVittie's avatar
      d/patches: Move Debian-specific patches to d/p/debian/ · 29c9a578
      Simon McVittie authored
      This makes it clearer that these are not intended to go upstream.
      29c9a578
    • Simon McVittie's avatar
      d/patches: Use upstream's final patch for CVE-2021-4034 · 58c91719
      Simon McVittie authored
      The patch that was provided to distributors under embargo was not the
      final version: it used a different exit status, and made an attempt to
      show help. The version that was actually committed after the embargo
      period ended interprets argc == 0 as an attack rather than a mistake,
      and does not attempt to show the help message.
      58c91719
  4. Jan 26, 2022
  5. Jan 24, 2022
  6. Oct 28, 2021
  7. Oct 26, 2021
  8. Oct 25, 2021
  9. Sep 29, 2021
  10. Sep 07, 2021
  11. Jul 29, 2021
    • Iñigo Martínez's avatar
      build: Migrate from Intltool to Gettext · 96c6fc83
      Iñigo Martínez authored
      Recent versions of Gettext are able to translate several formats
      that are used in GNOME applications.
      
      This migrates from Intltool to Gettext both autotools and meson
      build systems.
      96c6fc83
  12. Jul 21, 2021
Loading