polkit: 0.120 → 121

Adds supports for mozjs-91 and switches the default JS engine to Duktape.

https://gitlab.freedesktop.org/polkit/polkit/-/compare/0.120...121
This commit is contained in:
Jan Tojnar 2022-07-12 22:09:30 +02:00
parent 60c97a605c
commit 15cdfd5e31

View File

@ -13,7 +13,7 @@
, python3
, fetchpatch
, gettext
, spidermonkey_78
, duktape
, gobject-introspection
, libxslt
, docbook-xsl-nons
@ -37,7 +37,7 @@ let
in
stdenv.mkDerivation rec {
pname = "polkit";
version = "0.120";
version = "121";
outputs = [ "bin" "dev" "out" ]; # small man pages in $bin
@ -47,7 +47,7 @@ stdenv.mkDerivation rec {
owner = "polkit";
repo = "polkit";
rev = version;
sha256 = "oEaRf1g13zKMD+cP1iwIA6jaCDwvNfGy2i8xY8vuVSo=";
sha256 = "Lj7KSGILc6CBsNqPO0G0PNt6ClikbRG45E8FZbb46yY=";
};
patches = [
@ -57,23 +57,6 @@ stdenv.mkDerivation rec {
url = "https://gitlab.freedesktop.org/polkit/polkit/-/commit/7ba07551dfcd4ef9a87b8f0d9eb8b91fabcb41b3.patch";
sha256 = "ebbLILncq1hAZTBMsLm+vDGw6j0iQ0crGyhzyLZQgKA=";
})
# pkexec: local privilege escalation (CVE-2021-4034)
(fetchpatch {
url = "https://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683.patch";
sha256 = "162jkpg2myq0rb0s5k3nfr4pqwv9im13jf6vzj8p5l39nazg5i4s";
})
# File descriptor leak allows an unprivileged user to cause a crash (CVE-2021-4115)
(fetchpatch {
name = "CVE-2021-4115.patch";
url = "https://src.fedoraproject.org/rpms/polkit/raw/0a203bd46a1e2ec8cc4b3626840e2ea9d0d13a9a/f/CVE-2021-4115.patch";
sha256 = "sha256-BivHVVpYB4Ies1YbBDyKwUmNlqq2D1MpMipH9/dZM54=";
})
# Fix build with meson 0.61
# https://gitlab.freedesktop.org/polkit/polkit/-/merge_requests/99
(fetchpatch {
url = "https://gitlab.freedesktop.org/polkit/polkit/-/commit/a96c5119f726225f8d79b222c85d71a9f0e32419.patch";
sha256 = "sha256-/hm/m22dKA50sDmw4L1VAlgvCm8CuIyNjHxF/2YgMKo=";
})
] ++ lib.optionals stdenv.hostPlatform.isMusl [
# Make netgroup support optional (musl does not have it)
# Upstream MR: https://gitlab.freedesktop.org/polkit/polkit/merge_requests/10
@ -119,8 +102,8 @@ stdenv.mkDerivation rec {
gobject-introspection
expat
pam
spidermonkey_78
dbus
duktape
] ++ lib.optionals stdenv.isLinux [
# On Linux, fall back to elogind when systemd support is off.
(if useSystemd then systemd else elogind)