policykit-1 122-2 source package in Ubuntu
Changelog
policykit-1 (122-2) unstable; urgency=medium
[ Debian Janitor ]
* d/changelog: Trim trailing whitespace
* d/upstream/metadata: Update URLs for Bug-Database, Bug-Submit
[ Simon McVittie ]
* Update how we assign root-equivalent groups
- d/p/debian/50-default.rules-Replace-wheel-group-with-sudo-group.patch,
d/rules:
Set up Debian's default root-equivalent group 'sudo' in
50-default.rules rather than in 40-debian-sudo.rules. This ensures
that users of polkitd-pkla can override it by configuring admin
identities the old way. Previously, because 40-debian-sudo.rules was
earlier in the sequence than 49-polkit-pkla-compat.rules, it would
take precedence and the admin identities from polkitd-pkla were
ignored. (Closes: #1023393)
By default, polkitd-pkla does not provide any admin identities,
which means we behave as though polkitd-pkla was not installed at all,
and fall back to the sudo group defined in 50-default.rules.
- d/p/debian/05_revert-admin-identities-unix-group-wheel.patch:
Drop patch, superseded by the one described above
- d/rules: When built for Ubuntu, also install an Ubuntu-specific file
sequenced after 49-polkit-pkla-compat.rules but before
50-default.rules, which treats both the 'sudo' group and the legacy
'admin' group as root-equivalent.
* Replace /etc/pam.d/polkit-1 with /usr/lib/pam.d/polkit-1.
/usr/lib/pam.d has been supported since at least 1.4.0 (Debian 11),
so we can make this an ordinary packaged file instead of a conffile.
Local sysadmin overrides can still be done via /etc/pam.d/polkit-1
as before.
This sidesteps dpkg's inability to keep track of a conffile when it is
moved from one package to another (#399829, #645849, #163657, #595112).
(Closes: #1006203)
* postinst: Only clean up config directories if not owned.
If we only have polkitd installed, then we want to clean up the obsolete
directory /etc/polkit-1/localauthority.conf.d on upgrade, but if we
have polkitd-pkla installed, then it owns that directory and we should
not remove it. (Closes: #1026425)
* d/policykit-1.dirs: Continue to own some legacy directory names.
Having the transitional package continue to own these directories until
it has had a chance to clean up obsolete conffiles will silence warnings
from dpkg about inability to remove them. (Closes: #1027420)
* d/polkitd.postrm: Clean up /var/lib/polkit-1 on purge.
If /var/lib/polkit-1 was the polkitd user's home directory, then it
might contain a .cache subdirectory; clean that up too.
* Create polkitd user with home directory /nonexistent in new installations.
This will prevent it from creating detritus in /var/lib/polkit-1.
* polkitd.postinst: Change polkitd home directory to /nonexistent on upgrade
* Remove version constraints unnecessary since buster (oldstable)
* Update standards version to 4.6.2 (no changes needed)
-- Simon McVittie <email address hidden> Fri, 20 Jan 2023 13:22:24 +0000
Upload details
- Uploaded by:
- Utopia Maintenance Team
- Uploaded to:
- Sid
- Original maintainer:
- Utopia Maintenance Team
- Architectures:
- any all
- Section:
- admin
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| policykit-1_122-2.dsc | 3.5 KiB | 1c5f1e2430ad805fe27131e812653e8ce9712a41321240eb9a63bc340f895a98 |
| policykit-1_122.orig-polkit-pkla-compat.tar.bz2 | 368.2 KiB | 28ec66928327031c9a4155a1c901fdf223d2fb7030c58fc584a96e43af9d2783 |
| policykit-1_122.orig.tar.bz2 | 688.4 KiB | e0fe9c7feac5a90d60891be5fbbebfe4ebfd7460691414d1bd64e73e0675b965 |
| policykit-1_122-2.debian.tar.xz | 44.0 KiB | 95c6abf7c872ac89fc999ce463d40b34a203e891c3ae63f9d18dfae89803ae89 |
Available diffs
- diff from 122-1 to 122-2 (4.9 KiB)
No changes file available.
Binary packages built by this source
- gir1.2-polkit-1.0: GObject introspection data for PolicyKit
PolicyKit is a toolkit for defining and handling the policy that
allows unprivileged processes to speak to privileged processes.
.
This package contains introspection data for PolicyKit.
.
It can be used by packages using the GIRepository format to generate
dynamic bindings.
- libpolkit-agent-1-0: PolicyKit Authentication Agent API
PolicyKit is a toolkit for defining and handling the policy that
allows unprivileged processes to speak to privileged processes.
.
This package contains a library for accessing the authentication agent.
- libpolkit-agent-1-0-dbgsym: debug symbols for libpolkit-agent-1-0
- libpolkit-agent-1-dev: PolicyKit Authentication Agent API - development files
PolicyKit is a toolkit for defining and handling the policy that
allows unprivileged processes to speak to privileged processes.
.
This package contains the development files for the library found in
libpolkit-agent-1- 0.
- libpolkit-gobject-1-0: PolicyKit Authorization API
PolicyKit is a toolkit for defining and handling the policy that
allows unprivileged processes to speak to privileged processes.
.
This package contains a library for accessing PolicyKit.
- libpolkit-gobject-1-0-dbgsym: debug symbols for libpolkit-gobject-1-0
- libpolkit-gobject-1-dev: PolicyKit Authorization API - development files
PolicyKit is a toolkit for defining and handling the policy that
allows unprivileged processes to speak to privileged processes.
.
This package contains the development files for the library found in
libpolkit-gobject- 1-0.
- pkexec: run commands as another user with polkit authorization
polkit is an application-level toolkit for defining and handling the policy
that allows unprivileged processes to speak to privileged processes.
It was previously named PolicyKit.
.
pkexec is a setuid program to allow certain users to run commands as
root or as a different user, similar to sudo. Unlike sudo, it carries
out authentication and authorization by sending a request to polkit,
so it uses desktop environments' familiar prompting mechanisms for
authentication and uses polkit policies for authorization decisions.
.
By default, members of the 'sudo' Unix group can use pkexec to run any
command after authenticating. The authorization rules can be changed by
the local system administrator.
.
If this functionality is not required, removing the pkexec package will
reduce security risk by removing a setuid program.
- pkexec-dbgsym: debug symbols for pkexec
- policykit-1: transitional package for polkitd and pkexec
polkit is an application-level toolkit for defining and handling the policy
that allows unprivileged processes to speak to privileged processes.
It was previously named PolicyKit.
.
This transitional package depends on polkitd, the system service used by
polkit, and pkexec, a setuid program analogous to sudo. They were
historically packaged together, but have been separated so that users of
polkitd are not required to install pkexec.
- policykit-1-doc: documentation for PolicyKit-1
PolicyKit is a toolkit for defining and handling the policy that
allows unprivileged processes to speak to privileged processes.
.
This package contains the API documentation of PolicyKit.
- polkitd: framework for managing administrative policies and privileges
PolicyKit is an application-level toolkit for defining and handling the policy
that allows unprivileged processes to speak to privileged processes.
.
It is a framework for centralizing the decision making process with respect to
granting access to privileged operations for unprivileged (desktop)
applications.
.
In a typical use of polkit, an unprivileged application such as gnome-disks
sends requests via D-Bus or other inter-process communication mechanisms
to a privileged system service such as udisks, which asks polkitd for
permission to process those requests. This allows the application to carry
out privileged tasks without making use of setuid, which avoids several
common sources of security vulnerabilities.
.
This package provides the polkitd D-Bus service and supporting programs.
The pkexec program is not included, and can be found in the pkexec package.
- polkitd-dbgsym: debug symbols for polkitd
- polkitd-javascript: No summary available for polkitd-javascript in ubuntu lunar.
No description available for polkitd-javascript in ubuntu lunar.
- polkitd-pkla: No summary available for polkitd-pkla in ubuntu lunar.
No description available for polkitd-pkla in ubuntu lunar.
- polkitd-pkla-dbgsym: No summary available for polkitd-pkla-dbgsym in ubuntu lunar.
No description available for polkitd-pkla-dbgsym in ubuntu lunar.
