-
Notifications
You must be signed in to change notification settings - Fork 0
/
NEWS
1177 lines (907 loc) · 36.3 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
--------------
polkit 0.114
--------------
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.114.
Highlights:
TODO
Build requirements
glib, gobject, gio >= 2.30
mozjs185 or mozjs-17.0
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.113:
TODO
Thanks to our contributors.
Colin Walters and Miloslav Trmač,
$DATE
--------------
polkit 0.113
--------------
NOTE: This release is an important security update, see below.
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.113.
Highlights:
Fixes CVE-2015-4625, a local privilege escalation due to predictable
authentication session cookie values. Thanks to Tavis Ormandy, Google Project
Zero for reporting this issue. For the future, authentication agents are
encouraged to use PolkitAgentSession instead of using the D-Bus agent response
API directly.
Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
JavaScript interpreter, possibly leading to local privilege escalation.
Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
action IDs, possibly leading to local privilege escalation. Thanks to
Laurent Bigonville for reporting this issue.
Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
Tavis Ormandy, Google Project Zero, for reporting this issue.
On systemd-213 and later, the “active” state is shared across all sessions of
an user, instead of being tracked separately.
(pkexec), when not given a program to execute, runs the users’ shell by
default.
Build requirements
glib, gobject, gio >= 2.30
mozjs185 or mozjs-17.0
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.112:
Colin Walters (17):
PolkitSystemBusName: Add public API to retrieve Unix user
examples/cancel: Fix to securely lookup subject
sessionmonitor-systemd: Deduplicate code paths
PolkitSystemBusName: Retrieve both pid and uid
Port internals non-deprecated PolkitProcess API where possible
Use G_GNUC_BEGIN_IGNORE_DEPRECATIONS to avoid warning spam
pkexec: Work around systemd injecting broken XDG_RUNTIME_DIR
pkexec: Support just plain "pkexec" to run shell
.dir-locals: Style for Emacs - we don't use tabs
authority: Avoid cookie wrapping by using u64 counter
CVE-2015-3218: backend: Handle invalid object paths in RegisterAuthenticationAgent
build: Start using git.mk
Revert "authority: Avoid cookie wrapping by using u64 counter"
authority: Add a helper method for checking whether an identity is root
CVE-2015-4625: Use unpredictable cookie values, keep them secret
CVE-2015-4625: Bind use of cookies to specific uids
README: Note to send security reports via DBus's mechanism
Kay Sievers (1):
sessionmonitor-systemd: prepare for D-Bus "user bus" model
Lukasz Skalski (1):
polkitd: Fix problem with removing non-existent source
Max A. Dednev (1):
authority: Fix memory leak in EnumerateActions call results handler
Miloslav Trmač (24):
Post-release version bump to 0.113
Don't discard error data returned by polkit_system_bus_name_get_user_sync
Fix a memory leak
Refuse duplicate --user arguments to pkexec
Fix a possible NULL dereference.
Remove a redundant assignment.
Simplify forced error domain registration
Fix a typo, s/Evaluting/Evaluating/g
s/INCLUDES/AM_CPPFLAGS/g
Fix duplicate GError use when "uid" is missing
Fix a crash when two authentication requests are in flight.
docs: Update for changes to uid binding/AuthenticationAgentResponse2
Don't pass an uninitialized JS parameter
Don't add extra NULL group to subject.groups
Don't store unrooted jsvals on heap
Fix a per-authorization memory leak
Fix a memory leak when registering an authentication agent
Wrap all JS usage within “requests”
Register heap-based JSObject pointers to GC
Prevent builds against SpiderMonkey with exact stack rooting
Clear the JS operation callback before invoking JS in the callback
Fix spurious timeout exceptions on GC
Fix GHashTable usage.
Fix use-after-free in polkitagentsession.c
Philip Withnall (1):
sessionmonitor-systemd: Use sd_uid_get_state() to check session activity
Rui Matos (1):
PolkitAgentSession: fix race between child and io watches
Simon McVittie (1):
Use libsystemd instead of older libsystemd-login if possible
Ting-Wei Lan (1):
build: Fix several issues on FreeBSD
Xabier Rodriguez Calvar (1):
Fixed compilation problem in the backend
Thanks to our contributors.
Colin Walters and Miloslav Trmač,
July 2, 2015
--------------
polkit 0.112
--------------
NOTE: This release is an important security update, see below.
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.112.
Highlights:
This release fixes CVE-2013-4288: Race condition with process subjects that do
not have securely determined uid.
pkcheck(1) now supports a new format for the --process argument; all
applications need to use the new format to avoid a race condition (or use
--system-bus-name to identify the process instead).
Similarly, applications using the API should always use
polkit_unix_process_new_for_owner(). polkit_unix_process_new() and
polkit_unix_process_new_full() are unsafe and have been deprecated.
Thanks to Sebastian Krahmer of the SUSE Security Team for reporting this issue.
Build requirements
glib, gobject, gio >= 2.30
mozjs185 or mozjs-17.0
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.111:
Colin Walters (2):
polkitunixprocess: Deprecate racy APIs
pkcheck: Support --process=pid,start-time,uid syntax too
Miloslav Trmač (1):
Post-release version bump to 0.112
Tomas Bzatek (1):
Use GOnce for interface type registration
Tomas Chvatal (2):
Add czech translation po file to distribution.
Update the czech once more with newest pot file.
Thanks to our contributors.
Colin Walters and Miloslav Trmač,
September 18, 2013
--------------
polkit 0.111
--------------
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.111.
Highlights:
The JavaScript interpreter is now mandatory.
Both js185 and mozjs17 versions of SpiderMonkey are supported.
Build requirements
glib, gobject, gio >= 2.30
mozjs185 or mozjs-17.0
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.110:
Colin Walters (6):
mocklibc: Only require autoconf 2.63
configure: Specify GLib min/max version
jsauthority: We can really only handle a string
jsauthority: Use JSVAL_NULL rather than {0} struct initialization
Revert "Dynamically load libmozjs185.so and cope with it not being available"
jsauthority: Work with mozjs-17.0 too
David Zeuthen (1):
Post-release version bump to 0.111
Giovanni Campagna (1):
build: try harder to avoid systemd/consolekit misconfiguration
Michael Biebl (1):
man: Fix pkaction man page wrt to --action-id option
Miloslav Trmač (28):
Clean (git status) after autogen.sh
Fix build with srcdir!=builddir
Fix DOC_SOURCE_DIR for builddir != srcdir
Fix various memory leaks.
Add annotation glossary
Leave out backend from gtk-doc generation
Fix most "undocumented symbol" warnings
Move polkit_temporary_authorization_new to private header file.
Include documentation of polkit_action_description_get_annotation_keys
Document deprecated functions.
Fold enum documentation into relevant classes
Fix an obvious docstring typo.
Add annotations for element types of returned lists
Add a FIXME to polkitprivate.h
Use auth_admin* instead of auth_self* in examples
More warnings about using auth_self*
Fix a TypeError when no admin rules are registered
Fix handling of null returned from _runRules
Refuse non-string parameters to Polkit.spawn()
Drop unused variable
Fix a memory leak
Remove an unused va_start
Don't spawn man for --help
Fix package version / bug report address mixing
Add bug reporting address and home page to --help output
Refuse unrecognized command-line operands
Exit pkaction with status 0 on success
Fix inclusion of COPYING into documentation with srcdir != builddir
Nuno Araujo (1):
Fix the build with automake 1.13
Samuli Suominen (1):
Add missing #include <sys/wait.h>
Steve Langasek (1):
pkexec: Set process environment from pam_getenvlist()
Vincent Untz (1):
polkitagent, pkexec: Respect SUID_CFLAGS and SUID_LDFLAGS
darkxst (1):
update types for js188
Thanks to our contributors.
Miloslav Trmač,
May 15, 2013
--------------
polkit 0.110
--------------
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.110.
Build requirements
glib, gobject, gio >= 2.30
mozjs185
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.109:
David Zeuthen (5):
Post-release version bump to 0.110
Set XAUTHORITY environment variable if is unset
Use mutex and condition variables properly
Remove AM_PROG_CC_STDC
Update NEWS for release
Emilio Pozuelo Monfort (1):
Fix build on GNU Hurd
Michael Biebl (1):
build: Remove generated introspection files on "make clean"
Thanks to our contributors.
David Zeuthen,
Jan 9, 2013
--------------
polkit 0.109
--------------
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.109.
Build requirements
glib, gobject, gio >= 2.30
mozjs185
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.108:
David Zeuthen (4):
Post-release version bump to 0.109
Include gmodule-2.0 to avoid linker errors
Don't require libmozjs185 devel packages for polkit rules to work
Update NEWS for release
Thanks to our contributors.
David Zeuthen,
December 19, 2012
--------------
polkit 0.108
--------------
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.108.
Build requirements
glib, gobject, gio >= 2.30
mozjs185
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.107:
Adam Jackson (1):
PolkitAgent: Avoid crashing if initializing the server object fails
David Zeuthen (5):
Post-release version bump to 0.108
Fall back to authenticating as uid 0 if the list of admin identities is empty
Dynamically load libmozjs185.so and cope with it not being available
docs: mention the audience for authorization rules
Update NEWS for release
Ryan Lortie (1):
build: Fix .gir generation for parallel make
Thanks to our contributors.
David Zeuthen,
November 14, 2012
--------------
polkit 0.107
--------------
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.107
Build requirements
glib, gobject, gio >= 2.30
mozjs185
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.106:
David Zeuthen (7):
Post-release version bump to 0.107
Update guidance on situations where there is no polkit authority
Nuke leftover polkit-backend-1.pc file
Nuke --enable-verbose flag
Introduce a polkit.Result enumeration for authorization rules
pkexec: add support for argv1 annotation and mention shebang-wrappers
Update NEWS for release
Matthias Clasen (1):
Try harder to look up the right localization
Thanks to our contributors.
David Zeuthen,
July 11, 2012
--------------
polkit 0.106
--------------
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
This is polkit 0.106. There's a major change in this release which is
a switch from .pkla files (keyfile-format) to .rules files
(JavaScript), see
http://davidz25.blogspot.com/2012/06/authorization-rules-in-polkit.html
for more information.
Build requirements
glib, gobject, gio >= 2.30
mozjs185
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.105:
Colin Walters (3):
build: Check for mozjs185, not libjs
autogen.sh: Fix check for libtool (we only need libtoolize)
agenthelper-pam: Fix newline-trimming code
David Zeuthen (65):
Post-release version bump to 0.106
Add experimental authority backend using JavaScript rule files
Include seat and session in Subject object
Pass details to JS functions and simplify how Subject instances are constructed
Clean up code a bit
Add a couple of more error checks
Collect garbage
Emit ::Changed signal after reloading rules
Reformat init.js and also avoid quoting non-string properties in toString()
Make it possible for JS code to change details
Add polkit.spawn() to spawn external programs
Make polkit.spawn() take an array of arguments instead of a command-line
Don't include command-line in spawning error messages
docs: add AUTHORIZATION RULES section to the polkit(8) man page
Also add an example of polkit.spawn() to polkit(8) man page
docs: clarify how rules files work
Also load rules from /usr/share/polkit/rules.d
Use addRule() and addAdminRule()
docs: emphasize that registered functions may actually never be called
Add test cases for evaluation order
Test that subject.isInGroup() works
Add netgroup support
Minor doc fixes
Mention unix-netgroup:xyz as a valid return value in addAdminRule() functions
Add test-cases and 10 second timeout for polkit.spawn()
Create rules.d directories
Update docs
docs: enclose local <citerefentry> in <link> to make links work
docs: update SEE ALSO to make each man page point to all other man pages
Clarify docs a bit
polkitd: add reference to polkit(8) from its man page
Fix speling
Fix a couple typos in the docs
Mention details["polkit.message"] and add an example using details
Use <variablelist> instead of <informaltable> for Subject attributes
Make polkit_details_insert() remove the key if passed value is NULL
Add real-world example featuring udisks2 and the drive.* variables it passes
Rename --enable-systemd to --enable-libsystemd-login
Fix distcheck
Add a systemd .service file
Nuke polkitbackend library, localauthority backend and extension system
Mention systemd(1) in the polkitd(8) man page
Store private binaries in /usr/lib/polkit-1 instead of /usr/libexec
Add default rules
Pass expanded identity list to the AuthenticationSession
Use "rules", not "scripts" to refer to files in rules.d
Terminate runaway scripts
Use a condition variable to signal that runaway killer thread is ready
Combine action and details parameters
Clarify pkexec(1) variables
Use g_unix_signal_add() from GLib 2.30
Move polkitd into src/polkitbackend
Ensure polkitd is rebuilt if libpolkit-backend-1.la changes
Remove unused DBUS_GLIB_* and GIO_* variables
Run polkitd as an unprivileged user
Log when the name org.fd.PolicyKit1 has been acquired
Rewrite the "Writing polkit applications" chapter
Update links to udisks docs
Update pkexec(1) man page with example
Small updates to the "Writing polkit applications" chapter
State that authorization rules must not rely on SpiderMonkey features
Make it work when using ConsoleKit instead of libsystemd-login
Mention the implications of returning *_keep in an authorization rule
docs: add a "make sure your app works when there's no polkitd(8)" note
Update NEWS for release
Thanks to our contributors.
David Zeuthen,
June 7, 2012
--------------
polkit 0.105
--------------
This is polkit 0.105
WARNING WARNING WARNING: This is a prerelease on the road to polkit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.28
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since polkit 0.104:
David Zeuthen (11):
Post-release version bump
PolkitUnixSession: Set error if we cannot find a session for the given pid
PolkitUnixSession: Actually return TRUE if a session exists
PolkitAgentSession: Don't leak file descriptors
Add pkttyagent(1) helper
Make it possible to influence agent registration with an a{sv} parameter
Fix type in docs
Mention pkttyagent(1) in "Writing PolicyKit applications" chapter
Update the docs to use 'polkit' (instead of 'PolicyKit') as the name
Add Makefile rules for signing and publishing releases and docs
Update NEWS for release
Ryan Lortie (1):
Various builddir != srcdir fixes
Thanks to our contributors.
David Zeuthen,
April 24, 2012
--------------
PolicyKit 0.104
--------------
This is PolicyKit 0.104
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.28
gobject-introspection >= 0.6.2 (optional)
pam (optional)
ConsoleKit OR systemd
Changes since PolicyKit 0.103:
David Zeuthen (3):
Post-release version bump to 0.104
Detect whether systemd is available and default to use if so
Update NEWS for release
Matthias Clasen (1):
Add optional systemd support
Nikki VonHollen (2):
Bug 43608 – Add unit tests
Bug 43610 - Add netgroup support
Thanks to our contributors.
David Zeuthen,
January 3, 2012
--------------
PolicyKit 0.103
--------------
This is PolicyKit 0.103
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.28
gobject-introspection >= 0.6.2 (optional)
pam (optional)
IMPORTANT: As of release 0.103, the default Authority backend now
defaults to allowing members of the 'wheel' group to authenticate as
an administator since this is common usage in popular Linux
distributions. Distributors can change this by patching the
50-localauthority.conf file in /etc/polkit-1/localauthority.conf.d as
needed.
Changes since PolicyKit 0.102:
Alan Near (1):
Mistype in DBus object: PoliycKit1 -> PolicyKit1
David Zeuthen (7):
Post-release version bump to 0.103
Add support for the org.freedesktop.policykit.imply annotation
Add --no-debug option and use this for D-Bus activation
Bug 41025 – Add org.freedesktop.policykit.owner annotation
Default to AdminIdentities=unix-group:wheel for local authority
Update NEWS for release
Fix typo
Thanks to our contributors.
David Zeuthen,
December 6, 2011
--------------
PolicyKit 0.102
--------------
This is PolicyKit 0.102
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.28
gobject-introspection >= 0.6.2 (optional)
pam (optional)
Changes since PolicyKit 0.101:
Benjamin Otte (1):
introspection: Add --c-include to the gir files
David Zeuthen (7):
Post-release version bump to 0.102
Don't show diagnostic messages intended for the administrator to the end u
PolkitUnixProcess: Clarify that the real uid is returned, not the effectiv
Make PolkitUnixProcess also record the uid of the process
Use polkit_unix_process_get_uid() to get the owner of a process
pkexec: Avoid TOCTTOU problems with parent process
Update NEWS for release
Evan Nemerson (1):
Specify exported pkg-config files in GIRs
Marc Deslauriers (1):
Fix multi-line pam prompt handling
Martin Pitt (3):
Ignore .po/ for intltool
Fix backend crash if a .policy file does not specify <message>
Bug 38769 — pkexec: Support running X11 apps
Thanks to our contributors.
David Zeuthen,
August 1, 2011
--------------
PolicyKit 0.101
--------------
This is PolicyKit 0.101
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.28
gobject-introspection >= 0.6.2 (optional)
pam (optional)
Changes since PolicyKit 0.100:
Adrian Bunk (1):
Bug 27253 – Use GOBJECT_INTROSPECTION_CHECK from gobject-introspection
David Zeuthen (16):
Post-release version bump to 0.101
Bug 30653 – No way to detect cancellation in pkexec
Bug 27081 – pkexec fails to build on non glibc systems
Bug 30438 – PolicyKit fails to build on AIX
Bug 32334 – Always set polkit.retains_authorization_after_challenge
Fix a memory leak
Be more specific about what info we want when enumerating files
Make pkcheck(1) report if the authentication dialog was dismissed
pkcheck: Make it possible to list and revoke temporary authorizations
Be a bit more careful parsing the command-line
Bug 29712 – Use monotonic for temporary authorizations
Allow overriding message shown in authentication dialog
Deprecated PolkitBackendActionLookup
Fix a couple of warnings triggered by gcc 4.6
Build examples by default and fix compiler warnings
Update NEWS for release
Michael Biebl (1):
Bug 29871 – Fix build failures with binutils-gold
Thanks to our contributors.
David Zeuthen,
March 3, 2011
--------------
PolicyKit 0.100
--------------
This is PolicyKit 0.100
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.25.12
gobject-introspection >= 0.6.2 (optional)
pam (optional)
Changes since PolicyKit 0.99:
David Zeuthen (12):
Post-release version bump to 0.100
Add missing GObject Introspection annotations
Build gir/typelib for PolkitAgent-1.0
Fix-up PolkitAgentSession to use GObject properties
Improve error reporting for authentication sessions
Add some debug info that can be shown with the env var POLKIT_DEBUG
Fix up debug and timeouts in agent helper
Always pass non-zero value to g_once_init_leave()
Add a note about POLKIT_DEBUG
Pass caller and subject pid to authentication agent
Update NEWS for release
Fix 'make distcheck'
Thanks to our contributors.
David Zeuthen,
February 21, 2011
--------------
PolicyKit 0.99
--------------
This is PolicyKit 0.99
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.25.12
gobject-introspection >= 0.6.2 (optional)
pam (optional)
Changes since PolicyKit 0.98:
Colin Walters (3):
Remove duplicate definitions of enumeration types
Fix (correct) GCC warning about possibly-uninitialized variable
Fix another GCC uninitialized variable warning
David Zeuthen (2):
Post-release version bump to 0.99
Update NEWS for release
Vincent Untz (1):
Bug 29816 – Install polkitagentenumtypes.h
Thanks to our contributors.
David Zeuthen,
September 15, 2010
--------------
PolicyKit 0.98
--------------
This is PolicyKit 0.98.
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.25.12
gobject-introspection >= 0.6.2 (optional)
pam (optional)
Changes since PolicyKit 0.97:
David Zeuthen (11):
Post-release version bump to 0.98
Require GLib 2.25.12
Fix scanning of unix-process subjects
Add textual authentication agent and use it in pkexec(1)
Fix ConsoleKit interaction bug
pkexec: add --disable-internal-agent option
pkcheck: add --enable-internal-agent option
Fix wording in pkexec(1) man page
Various doc cleanups
Fix dist-check
Update NEWS for release
Thanks to our contributors.
David Zeuthen,
August 20, 2010
--------------
PolicyKit 0.97
--------------
This is PolicyKit 0.97.
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
The main change since the previous version is a port from eggdbus to
GLib's new D-Bus implementation. Other changes includes various bug
fixes and support for shadow authentication. Support for the
AddLockdown() and RemoveLockdown() methods has been removed. You will
need an updated version of PolicyKit-gnome to go with this release.
Build requirements
glib, gobject, gio >= 2.25.11
gobject-introspection >= 0.6.2 (optional)
pam (optional)
Changes since PolicyKit 0.96:
Andrew Psaltis (1):
Add shadow support
Dan Rosenberg (1):
Bug 26982 – pkexec information disclosure vulnerability
David Zeuthen (23):
Post-release version bump to 0.97
Port core bits to gdbus
Port CK class to gdbus
Port PolkitBackendInteractiveAuthority to gdbus
Port PolkitAgent to gdbus
Add generated docbook D-Bus API docs to git
Nuke eggdbus usage
Make polkitd accept --replace and gracefully handle SIGINT
Implement polkit_temporary_authorization_new_for_gvariant()
Remove Lock Down functionality
Make NameOwnerChanged a private impl detail of the interactive authority
Update README
Merge remote branch 'origin/gdbus'
Add a GPermission implementation
PolkitAuthority: Implement failable initialization
PolkitAuthority: Add g_return_if_fail() checks
Add g_return_if_fail() to all public API entry points
Use polkit_authority_get_sync() instead of deprecated polkit_authority_get
PolkitBackend: Don't export unneeded convenience API
Update GI annotations
Don't dist org.freedesktop.ConsoleKit.xml; It's dead, Jim
Properly reference headers
Update NEWS for release
Petr Mrázek (1):
Bug 29051 – Configuration reload on every query
Thanks to our contributors.
David Zeuthen,
August 9, 2010
--------------
PolicyKit 0.96
--------------
This is PolicyKit 0.96. This is supposed to be the last release until 1.0.
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.21.4
eggdbus-1 >= 0.6
gobject-introspection >= 0.6.2 (optional)
pam
Changes since PolicyKit 0.95:
David Zeuthen (15):
Bug 25367 — Also read local authority configuration data from /etc
Fix logic error in pk-example-frobnicate
Run the open_session part of the PAM stack in pkexec(1)
Fix up last comment
Bug 25594 – System logging
Remove trailing whitespace from log messages
Properly handle return value from getpwnam_r()
Fix error message when no authentication agent is available
Make pkexec(1) validate environment variables
Make pkexec(1) use the syslogging facilities
Save original cwd in pkexec(1) since it will change during the life-time
Complain on stderr, not stdout
Post-release version bump to 0.96
Don't log authorization checks
Update NEWS for release
David Zeuthen,
January 15, 2010
--------------
PolicyKit 0.95
--------------
This is PolicyKit 0.95. This is supposed to be the last release until 1.0.
WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
1.0. Public API might change and certain parts of the code still needs
some security review. Use at your own risk.
Build requirements
glib, gobject, gio >= 2.21.4
eggdbus-1 >= 0.6
gobject-introspection >= 0.6.2 (optional)
pam
Changes since PolicyKit 0.94:
Alexander Sack (1):
Bug 24566 – Properly _ref authority in singleton constructor
Andreas Sandberg (1):
Bug 24235 – polkit-agent-helper may call pam_end with a stale pam handle
Bastien Nocera (1):
Fix process start time when using polkit_unix_process_new_full()
David Zeuthen (20):
Post-release version bump to 0.95
Use correct program name when complaining about not being setuid root
Sort by action id in pkaction(1) output
Bug 23867 – UnixProcess vs. SystemBusName aliasing
Implement lockdown for the Local Authority implementation
Remove POLKIT_USER from configuration summary
Add missing comma so we're save both LANG and LANGUAGE, not only LANGLANGUAGE
Pass --libtool to g-ir-scanner