-
Notifications
You must be signed in to change notification settings - Fork 16
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
polkit: Version bump. There have been changes in file locations with …
…versions 0.109 and greater, so adjusting the BUILD to reflect that (see the comments within the BUILD). Notabley it does not use /var. Additionally, versions 0.109 require a polkitd user. Just to make sure the old dirs/files are removed I have used the hammer. Editing the polkit.service and getting rid of the --no-debug as it wouldn't even tell you it wants/needs a "home". Ratler noted other distros use / and so shall we unless there are objections. Based on input from Ratler our pam guru, inserting an additional pam rule to its /etc/pam.d/polkit-1.
- Loading branch information
stumbles
committed
Jan 11, 2013
1 parent
3b8e63b
commit 59a8bce
Showing
2 changed files
with
40 additions
and
17 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,28 +1,49 @@ | ||
( | ||
|
||
OPTS+=" --disable-gtk-doc-html" && | ||
|
||
OPTS+=" --disable-gtk-doc-html " && | ||
|
||
if module_installed systemd ; then | ||
OPTS+=" --enable-libsystemd-login" | ||
fi && | ||
|
||
# If expat is yes the make tanks on "line 5975: cd: yes/lib: No such file or directory" | ||
sedit "s:\$withval/:/usr/:g" configure.ac && | ||
|
||
# Yes its a hammer but want to make sure the old polkit stuff is gone, especially when this | ||
# version does not use or have /var. | ||
rm -rf /etc/polkit-1 && | ||
rm -rf /var/lib/polkit-1 && | ||
rm -rf /usr/libexec/polkit-agent-helper-1 && | ||
rm -rf /usr/bin/pkexec && | ||
|
||
autoconf && | ||
default_build && | ||
|
||
# The following notes are from the ./confiugre summary; | ||
#NOTE: The directory /etc/polkit-1/localauthority must be owned | ||
# by root and have mode 700 | ||
chmod 700 /etc/polkit-1/localauthority && | ||
add_priv_user polkitd:polkitd -d / -s /bin/false && | ||
|
||
#NOTE: The directory /var/lib/polkit-1 must be owned | ||
# by root and have mode 700 | ||
chmod 700 /var/lib/polkit-1 && | ||
sedit "s:--no-debug::" /usr/lib/systemd/system/polkit.service && | ||
|
||
#NOTE: The file ${exec_prefix}/libexec/polkit-agent-helper-1 must be owned | ||
#NOTE: The file /usr/lib/polkit-1/polkit-agent-helper-1 must be owned | ||
# by root and have mode 4755 (setuid root binary) | ||
chmod 4755 /usr/libexec/polkit-agent-helper-1 && | ||
chmod 4755 /usr/lib/polkit-1/polkit-agent-helper-1 && | ||
|
||
#NOTE: The file ${exec_prefix}/bin/pkexec must be owned by root and | ||
# have mode 4755 (setuid root binary) | ||
chmod 4755 /usr/bin/pkexec | ||
|
||
chmod 4755 /usr/bin/pkexec && | ||
|
||
#NOTE: The directory ${prefix}/etc/polkit-1/rules.d must be owned | ||
# by user 'polkitd' and have mode 700 | ||
chown polkitd:polkitd /etc/polkit-1/rules.d && | ||
chmod 700 /etc/polkit-1/rules.d && | ||
|
||
#NOTE: The directory ${datarootdir}/polkit-1/rules.d must be owned | ||
# by user 'polkitd' and have mode 700 | ||
chown polkitd:polkitd /usr/share/polkit-1/rules.d && | ||
chmod 700 /usr/share/polkit-1/rules.d && | ||
|
||
if in_depends $MODULE Linux-PAM ; then | ||
sedit "4i account required pam_nologin.so" /etc/pam.d/polkit-1 | ||
fi | ||
|
||
) > $C_FIFO 2>&1 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,13 +1,15 @@ | ||
MODULE=polkit | ||
VERSION=0.109 | ||
VERSION=0.110 | ||
SOURCE=$MODULE-$VERSION.tar.gz | ||
SOURCE_URL=http://www.freedesktop.org/software/$MODULE/releases | ||
SOURCE_VFY=sha1:774a55ea99b6d2a0f4f730bc498a9fa9c17ea02a | ||
SOURCE_VFY=sha1:022ee5a189e3fae8a68e261dac746dfcdee77add | ||
WEB_SITE=http://www.freedesktop.org/software/$MODULE | ||
ENTERED=20091226 | ||
UPDATED=20130108 | ||
SHORT="polkit" | ||
UPDATED=20130111 | ||
SHORT="toolkit for defining and handling authorization" | ||
|
||
cat << EOF | ||
polkit. | ||
Polkit is a toolkit for defining and handling authorizations. It is | ||
used for allowing unprivileged processes to speak to privileged | ||
processes. | ||
EOF |