JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
168,439 Commits 1 Branch 0 Tags 12 GiB
7da64c9fbe
Commit Graph

45 Commits

Author SHA1 Message Date
worldofpeace
7da64c9fbe polkit: fix CVE-2019-6133 
Jann Horn of Google found that Polkit doesn't properly check
if a process is already authenticated, which can lead to an
authentication reuse by a different user[0]. See also [1]

Closes #55391

[0]: https://bugs.chromium.org/p/project-zero/issues/detail?id=1692
[1]: https://gitlab.freedesktop.org/polkit/polkit/issues/75
 2019-02-07 18:07:08 -05:00
Jörg Thalheim
1b146a8c6f
treewide: remove paxutils from stdenv 
More then one year ago we removed grsecurity kernels from nixpkgs:
https://github.com/NixOS/nixpkgs/pull/25277

This removes now also paxutils from stdenv.
 2018-12-22 12:55:05 +01:00
c0bw3b
a14af16cfc polkit: add patch for CVE-2018-19788 
unprivileged users with UID > INT_MAX can successfully execute any systemctl command
Original issue: https://gitlab.freedesktop.org/polkit/polkit/issues/74
 2018-12-07 19:35:43 +01:00
Jan Tojnar
a51a99c690
gobject-introspection: rename package 
camelCase package name was a huge inconsistency in GNOME package set.
 2018-12-02 12:42:29 +01:00
Markus Kowalewski
0320769991
polkit: add license 2018-08-18 00:12:55 +02:00
Uli Baum
6840ae4aee polkit: 0.114 -> 0.115 2018-08-02 21:33:35 +02:00
Symphorien Gibol
2a51780f2c polkit: 0.113 -> 0.114 2018-07-08 22:33:29 +02:00
Silvan Mosberger
57bccb3cb8 treewide: http -> https sources (#42676) 
* treewide: http -> https sources

This updates the source urls of all top-level packages from http to
https where possible.

* buildtorrent: fix url and tab -> spaces
 2018-06-28 20:43:35 +02:00
Matthew Justin Bauer
bad3800307
polkit: fix paxmark script 2018-06-16 21:24:27 -04:00
Matthew Bauer
133cf0ce1b polkit: supports darwin 
- apply musl patch unconditionally
- add doCheck arg
- make paxmark linux0nly
 2018-06-15 22:57:44 -04:00
Jan Tojnar
a31d98f312
tree-wide: autorename gnome packages to use dashes 2018-02-25 17:41:16 +01:00
Will Dietz
551f0702c2 polkit: patch to fix w/musl, POSIX 2018-02-13 09:44:56 -06:00
Dan Peebles
dfd300c81d treewide: s/pkgs.fedoraproject.org/src.fedoraproject.org/ 
Upstream killed the pkgs server but src continues to serve up the exact
same content, so we can just point there and all hashes should be unchanged.
 2018-02-08 16:38:08 -05:00
John Ericson
abec0e7645 polkit: Recategorize some dependencies 2017-09-21 15:49:54 -04:00
Nikolay Amiantov
e7fa6220d6 polkit: add patches from Fedora 
This fixes few leaks and adds ITS description files which are needed for some
reverse dependencies.
 2017-05-25 19:07:21 +03:00
Vladimír Čunát
96d41e393d
treewide: purge maintainers.urkud 
It's sad, but he's been inactive for the last five years.
Keeping such people in meta.maintainers is counter-productive.
 2017-03-27 19:52:29 +02:00
Parnell Springmeyer
4aa0923009
Getting rid of the var indirection and using a bin path instead 2017-01-29 04:11:01 -06:00
Parnell Springmeyer
e92b8402b0
Addressing PR feedback 2017-01-28 20:48:03 -08:00
Parnell Springmeyer
bae00e8aa8
setcap-wrapper: Merging with upstream master and resolving conflicts 2017-01-25 11:08:05 -08:00
Nikolay Amiantov
c2274cdfb5 spidermonkey: cleanup and rename versions 2016-11-21 02:46:35 +03:00
Parnell Springmeyer
98c058a1ee Adapting everything for the merged permissions wrappers work. 2016-09-01 19:21:06 -05:00
Tuomas Tynkkynen
a17216af4c treewide: Shuffle outputs 
Make either 'bin' or 'out' the first output.
 2016-08-29 14:49:51 +03:00
Vladimír Čunát
2490848627 polkit: split dev and bin outputs 2015-10-14 14:32:26 +02:00
William A. Kennington III
76483363d1 polkit: 0.112 -> 0.113 2015-07-07 00:01:33 -07:00
Domen Kožar
9b7b2ce8eb Revert "Introduce patchShebangsPhase ran in preConfigurePhases" 
This reverts commit 512fbb280f.

See #5368
 2015-01-08 10:26:49 +01:00
Domen Kožar
512fbb280f Introduce patchShebangsPhase ran in preConfigurePhases 
(cherry picked from commit 91c7e8747af1fdc2a70cd98594ccbb12a5c6902d)
Signed-off-by: Domen Kožar <domen@dev.si>
 2015-01-02 02:58:32 +01:00
Eelco Dolstra
84b87af15a polkit: Add docbook DTD 2014-08-25 09:48:09 +02:00
Ricardo M. Correia
b30f41976c polkit: Add support for grsecurity 2014-05-15 13:25:47 +02:00
Domen Kožar
344e440835 polkit: fix gobject introspection support 2014-01-26 00:15:51 +01:00
Vladimír Čunát
8d14c7baa6 polkit: major update 0.105 -> 0.112 
- It now uses JavaScript for configuration (only),
  so I had to "convert" config for NetworkManager.
- I tested suspend/restart/(un)mount on KDE/Xfce,
  Phreedom tested NetworkManager config conversion.
 2013-11-09 16:29:18 +01:00
Eelco Dolstra
9db68de9e6 polkit, pulseaudio: Drop some Linux-specific dependencies 2013-10-06 00:21:28 +02:00
Eelco Dolstra
9322bee988 Use systemd instead of udev, and don't use consolekit 2012-11-06 13:02:11 +01:00
Eelco Dolstra
8b6edfe78d polkit: Update to 0.105 and enable systemd (logind) support 
There are even newer polkit releases, but they have a spidermonkey
dependency which I don't want to bother with right now.
 2012-08-21 08:42:44 -04:00
Yury G. Kudryashov
dc4833f773 polkit-0.104 
cherry-pick ^/nixpkgs/branches/glib-2.30@31425

svn path=/nixpkgs/branches/glib-2.30-take2/; revision=32941
 2012-03-09 06:13:10 +00:00
Yury G. Kudryashov
edd651131b Revert "polkit-0.104" 
This reverts revision 31411

polkit-0.104 depends on glib-2.30, so this upgrade goes to branches/glib-2.30

svn path=/nixpkgs/trunk/; revision=31423
 2012-01-07 20:29:08 +00:00
Yury G. Kudryashov
b4c7de3b7e polkit-0.104 
svn path=/nixpkgs/trunk/; revision=31411
 2012-01-07 19:41:52 +00:00
Eelco Dolstra
b4ca59e17f * Polkit: look for ‘polkit-agent-helper-1’ in the right location (for 
NixOS, that is), i.e., /var/setuid-wrappers.

svn path=/nixpkgs/trunk/; revision=28733
 2011-08-22 11:45:51 +00:00
Eelco Dolstra
1317e5bdaa * Polkit updated to 0.102. 
svn path=/nixpkgs/trunk/; revision=28725
 2011-08-21 19:10:36 +00:00
Eelco Dolstra
6ce3b9a806 * PolKit updated to 0.101. 
svn path=/nixpkgs/branches/kde-4.7/; revision=27636
 2011-07-07 18:16:03 +00:00
Eelco Dolstra
57eed75265 * polkit updated to 0.99. 
svn path=/nixpkgs/branches/x-updates/; revision=25916
 2011-02-12 09:25:10 +00:00
Yury G. Kudryashov
c270663fec Move polkit-1 libexec files into libexec/polkit-1/ 
svn path=/nixpkgs/trunk/; revision=21842
 2010-05-18 16:40:17 +00:00
Yury G. Kudryashov
07c11bbec2 Make polkit compile 
svn path=/nixpkgs/trunk/; revision=21788
 2010-05-15 09:55:31 +00:00
Yury G. Kudryashov
062c48db4b Start migrating to polkit-0.9.6 
svn path=/nixpkgs/trunk/; revision=21786
 2010-05-15 09:55:15 +00:00
Yury G. Kudryashov
84984310e9 Update polkit-1 meta info 
svn path=/nixpkgs/trunk/; revision=21784
 2010-05-15 09:54:56 +00:00
Eelco Dolstra
7dd58cda98 * Sigh. For PolicyKit, follow the upstream names, otherwise I'll get 
a headache.  "polkit" is the new, unstable release series.
  "policykit" is the old series.  (See
  http://lists.freedesktop.org/archives/polkit-devel/2009-February/000106.html
  for an "explanation" of the name change.)  It seems that for HAL we
  need to revert to the old "policykit", since it doesn't compile
  against "polkit".

svn path=/nixpkgs/trunk/; revision=17425
 2009-09-25 20:06:36 +00:00