Martin Weinelt
26ac1d5db9
polkit: Fix local privilege escalation vulnerability
...
Fixes a local privilege escalation using polkit_system_bus_name_get_creds_sync()
Fixes: CVE-2021-3560
2021-06-03 21:31:57 +02:00
Jan Tojnar
0420282780
treewide maintainers: add teams.{freedesktop,gnome}
2021-05-07 15:36:40 +02:00
Vladimír Čunát
9f054b5e1a
treewide: remove worldofpeace from meta.maintainers
...
(It was requested by them.)
I left one case due to fetching from their personal repo:
pkgs/desktops/pantheon/desktop/extra-elementary-contracts/default.nix
2021-05-07 15:36:40 +02:00
Ben Siraphob
66e44425c6
pkgs/development/libraries: stdenv.lib -> lib
2021-01-21 19:11:02 -08:00
Jonathan Ringer
9bb3fccb5b
treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix
...
continuation of #109595
pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.
python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
2021-01-19 01:16:25 -08:00
Florian Klink
4f087a608e
polkit: don't build with gobject-introspection when cross-compiling
...
gobject-introspection doesn't currently cross-compile (see
https://github.com/NixOS/nixpkgs/pull/88222 ), but polkit is somewhat
essential for many system components.
By disabling gobject-introspection when cross-compiling, we get it to
build.
2021-01-01 23:11:53 +01:00
Arnout Engelen
025af7c4f5
polkit: 0.116 -> 0.118 ( #103998 )
2020-11-17 11:15:30 +01:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs
2020-04-10 17:54:53 +01:00
Jan Tojnar
4cb7f43d3a
polkit: rename misleading flag
...
gobject-introspection has nothing to do with graphical systems or GNOME, it is needed for language bindings like Python.
2019-12-01 02:18:00 +01:00
Niklas Hambüchen
504199e48a
polkit: Don't build elogind on non-Linux.
...
In #72057 I added support for elogind when systemd is not supported,
but it occurred to me that it probably doens't make sense to have
either of systemd or elogind on Darwin.
2019-11-20 23:23:46 +01:00
Jan Tojnar
70c0c48970
Merge branch 'staging-next' into staging
2019-11-01 02:58:40 +01:00
Niklas Hambüchen
62fbcea807
Merge pull request #72057 from nh2/polkit-musl-elogind
...
musl support for polkit, add elogind
2019-10-31 17:05:42 +01:00
Niklas Hambüchen
1ca49b80cb
polkit: Disable systemd support on musl, it needs elogind there
2019-10-31 16:47:00 +01:00
Niklas Hambüchen
6b7f343121
Merge pull request #72301 from nh2/polkit-stable-patch-url
...
polkit: Fix unstable patch URL
2019-10-30 16:27:10 +01:00
Niklas Hambüchen
0e10ad926d
polkit: Fix unstable patch URL.
...
Unmerged upstream merge requests can change when iterated on!
2019-10-30 14:53:09 +01:00
worldofpeace
81220cff1e
polkit: add worldofpeace to maintainers
2019-10-28 20:41:36 -04:00
worldofpeace
e570377f52
polkit: drop obsolete comments, whitespace
2019-10-05 07:10:11 -04:00
worldofpeace
670c000eb9
polkit: drop -Wno-deprecated-declarations
...
appears to be uneeded.
2019-10-05 07:09:36 -04:00
worldofpeace
a61db21b36
polkit: propagate glib
...
polkit-gobject-1.pc has glib in Requires, and polkit-agent-1.pc
requires polkit-gobject-1.
2019-10-05 07:08:51 -04:00
worldofpeace
9d0e05233f
polkit: Move D-Bus conf file to share/dbus-1/system.d
...
Since D-Bus 1.9.18 configuration files installed by third-party should
go in share/dbus-1/system.d. The old location is for sysadmin overrides.
2019-09-16 13:59:09 -04:00
volth
f3282c8d1e
treewide: remove unused variables ( #63177 )
...
* treewide: remove unused variables
* making ofborg happy
2019-06-16 19:59:05 +00:00
Will Dietz
eeff4eda14
polkit: 0.115 -> 0.116
...
* now uses mozjs60
* drop CVE patches included in release
* pname-ify
* use flag arrays and placeholder
2019-04-27 07:02:36 +02:00
Michael Eden
d8d8a9cddb
polkit: optional introspection and cross compilation fixes
2019-04-16 19:03:22 +02:00
worldofpeace
7da64c9fbe
polkit: fix CVE-2019-6133
...
Jann Horn of Google found that Polkit doesn't properly check
if a process is already authenticated, which can lead to an
authentication reuse by a different user[0]. See also [1]
Closes #55391
[0]: https://bugs.chromium.org/p/project-zero/issues/detail?id=1692
[1]: https://gitlab.freedesktop.org/polkit/polkit/issues/75
2019-02-07 18:07:08 -05:00
Jörg Thalheim
1b146a8c6f
treewide: remove paxutils from stdenv
...
More then one year ago we removed grsecurity kernels from nixpkgs:
https://github.com/NixOS/nixpkgs/pull/25277
This removes now also paxutils from stdenv.
2018-12-22 12:55:05 +01:00
c0bw3b
a14af16cfc
polkit: add patch for CVE-2018-19788
...
unprivileged users with UID > INT_MAX can successfully execute any systemctl command
Original issue: https://gitlab.freedesktop.org/polkit/polkit/issues/74
2018-12-07 19:35:43 +01:00
Jan Tojnar
a51a99c690
gobject-introspection: rename package
...
camelCase package name was a huge inconsistency in GNOME package set.
2018-12-02 12:42:29 +01:00
Markus Kowalewski
0320769991
polkit: add license
2018-08-18 00:12:55 +02:00
Uli Baum
6840ae4aee
polkit: 0.114 -> 0.115
2018-08-02 21:33:35 +02:00
Symphorien Gibol
2a51780f2c
polkit: 0.113 -> 0.114
2018-07-08 22:33:29 +02:00
Silvan Mosberger
57bccb3cb8
treewide: http -> https sources ( #42676 )
...
* treewide: http -> https sources
This updates the source urls of all top-level packages from http to
https where possible.
* buildtorrent: fix url and tab -> spaces
2018-06-28 20:43:35 +02:00
Matthew Justin Bauer
bad3800307
polkit: fix paxmark script
2018-06-16 21:24:27 -04:00
Matthew Bauer
133cf0ce1b
polkit: supports darwin
...
- apply musl patch unconditionally
- add doCheck arg
- make paxmark linux0nly
2018-06-15 22:57:44 -04:00
Jan Tojnar
a31d98f312
tree-wide: autorename gnome packages to use dashes
2018-02-25 17:41:16 +01:00
Will Dietz
551f0702c2
polkit: patch to fix w/musl, POSIX
2018-02-13 09:44:56 -06:00
Dan Peebles
dfd300c81d
treewide: s/pkgs.fedoraproject.org/src.fedoraproject.org/
...
Upstream killed the pkgs server but src continues to serve up the exact
same content, so we can just point there and all hashes should be unchanged.
2018-02-08 16:38:08 -05:00
John Ericson
abec0e7645
polkit: Recategorize some dependencies
2017-09-21 15:49:54 -04:00
Nikolay Amiantov
e7fa6220d6
polkit: add patches from Fedora
...
This fixes few leaks and adds ITS description files which are needed for some
reverse dependencies.
2017-05-25 19:07:21 +03:00
Vladimír Čunát
96d41e393d
treewide: purge maintainers.urkud
...
It's sad, but he's been inactive for the last five years.
Keeping such people in meta.maintainers is counter-productive.
2017-03-27 19:52:29 +02:00
Parnell Springmeyer
4aa0923009
Getting rid of the var indirection and using a bin path instead
2017-01-29 04:11:01 -06:00
Parnell Springmeyer
e92b8402b0
Addressing PR feedback
2017-01-28 20:48:03 -08:00
Parnell Springmeyer
bae00e8aa8
setcap-wrapper: Merging with upstream master and resolving conflicts
2017-01-25 11:08:05 -08:00
Nikolay Amiantov
c2274cdfb5
spidermonkey: cleanup and rename versions
2016-11-21 02:46:35 +03:00
Parnell Springmeyer
98c058a1ee
Adapting everything for the merged permissions wrappers work.
2016-09-01 19:21:06 -05:00
Tuomas Tynkkynen
a17216af4c
treewide: Shuffle outputs
...
Make either 'bin' or 'out' the first output.
2016-08-29 14:49:51 +03:00
Vladimír Čunát
2490848627
polkit: split dev and bin outputs
2015-10-14 14:32:26 +02:00
William A. Kennington III
76483363d1
polkit: 0.112 -> 0.113
2015-07-07 00:01:33 -07:00
Domen Kožar
9b7b2ce8eb
Revert "Introduce patchShebangsPhase ran in preConfigurePhases"
...
This reverts commit 512fbb280f
.
See #5368
2015-01-08 10:26:49 +01:00
Domen Kožar
512fbb280f
Introduce patchShebangsPhase ran in preConfigurePhases
...
(cherry picked from commit 91c7e8747af1fdc2a70cd98594ccbb12a5c6902d)
Signed-off-by: Domen Kožar <domen@dev.si>
2015-01-02 02:58:32 +01:00
Eelco Dolstra
84b87af15a
polkit: Add docbook DTD
2014-08-25 09:48:09 +02:00