Change log for policykit package in Ubuntu

policykit (0.9-4ubuntu2) lucid; urgency=low

  * rebuild rest of main for armel armv7/thumb2 optimization;
    UbuntuSpec:mobile-lucid-arm-gcc-v7-thumb2
 -- Alexander Sack <email address hidden>   Sun, 07 Mar 2010 01:01:27 +0100

Available diffs

• diff from 0.9-4ubuntu1 to 0.9-4ubuntu2 (346 bytes)

policykit (0.9-4ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - ubuntu-admin-group.patch: Change PolicyKit.conf to use 'admin' as
      administrator group, instead of the 'root' user. Also grant all
      permissions to root, since root is not in the admin group and is already
      almighty anyway. This unbreaks running tools like g-s-t as root.
    - polkit-deadlock.patch: Fix deadlock when PAM_TEXT_INFO is used.
      (LP #35437)
  * Tag polkit-deadlock.patch.

Available diffs

• diff from 0.9-3ubuntu2 to 0.9-4ubuntu1 (7.9 KiB)

policykit (0.9-3ubuntu2) karmic; urgency=low

    * Add debian/patches/polkit-deadlock.patch.
      - Fix deadlock when PAM_TEXT_INFO is used (LP: #354378). Kudos to James
        Westby.

 -- Iulian Udrea <email address hidden>   Wed, 06 May 2009 08:30:20 +0000

Available diffs

• diff from 0.9-3ubuntu1 to 0.9-3ubuntu2 (1.3 KiB)

policykit (0.9-3ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - debian/patches/04_ubuntu-admin-group.patch: Change PolicyKit.conf to use
      'admin' as administrator group, instead of the 'root' user. Also
      grant all permissions to root, since root is not in the admin group and
      is already almighty anyway. This unbreaks running tools like g-s-t as
      root.
    - debian/policykit.init: Create /var/run/PolicyKit if it does not exist.
      This happens if /var/run is on a tmpfs. Install it in debian/rules.
    - 02_noptrace.patch.disabled: Disable ptrace() and core dumping for
      programs using libpolkit for security reasons; not enabled during
      development.
    - Don't chown /var/run/PolicyKit in the postinst, as /var/run is on a tmpfs,
      and it should be the job of the init script to do this.
    - Use root:polkituser for /var/run/PolicyKit in the init script, as this
      is what the postinst uses. Thanks to Chris Coulson for spotting this.
    - Don't ship /var/run/PolicyKit in the package either, since the init
      script should always handle it per the above.

Available diffs

• diff from 0.9-2ubuntu1 to 0.9-3ubuntu1 (2.0 KiB)

policykit (0.9-2ubuntu1) jaunty; urgency=low

  * Merge from debian unstable, remaining changes: LP: #314985
    - debian/patches/ubuntu-admin-group.patch: Change PolicyKit.conf to use
      'admin' as administrator group, instead of the 'root' user. Also
      grant all permissions to root, since root is not in the admin group and
      is already almighty anyway. This unbreaks running tools like g-s-t as
      root.
    - debian/policykit.init: Create /var/run/PolicyKit if it does not exist.
      This happens if /var/run is on a tmpfs. Install it in debian/rules.
    - debian/control: Drop policykit-gnome from Recommends: to Suggests: to
      match the Suggests semantics and to avoid pulling in -gnome in
      non-GNOMEish installations.
    - 02_noptrace.patch.disabled: Disable ptrace() and core dumping for
      programs using libpolkit for security reasons; not enabled during
      development.
    - Add debian/patches/03_consolekit0.3-api.patch: Try both the ConsoleKit 0.3
      and the older 0.2 API, to work with either.
    - Don't chown /var/run/PolicyKit in the postinst, as /var/run is on a tmpfs,
      and it should be the job of the init script to do this.
    - Use root:polkituser for /var/run/PolicyKit in the init script, as this
      is what the postinst uses. Thanks to Chris Coulson for spotting this.
    - Don't ship /var/run/PolicyKit in the package either, since the init
      script should always handle it per the above.

Available diffs

• diff from 0.9-1ubuntu3 to 0.9-2ubuntu1 (68.9 KiB)

policykit (0.9-1ubuntu3) intrepid; urgency=low

  [ James Westby ]
  * Don't chown /var/run/PolicyKit in the postinst, as /var/run is on a tmpfs,
    and it should be the job of the init script to do this. (LP: #275355)
  * Use root:polkituser for /var/run/PolicyKit in the init script, as this
    is what the postinst uses. Thanks to Chris Coulson for spotting this.

  [ Steve Langasek ]
  * Don't ship /var/run/PolicyKit in the package either, since the init
    script should always handle it per the above.

 -- Steve Langasek <email address hidden>   Wed, 08 Oct 2008 06:42:17 +0000

Available diffs

• diff from 0.9-1ubuntu2 to 0.9-1ubuntu3 (68.1 KiB)

policykit (0.9-1ubuntu2) intrepid; urgency=low

  * Add debian/patches/03_consolekit0.3-api.patch: Try both the ConsoleKit 0.3
    and the older 0.2 API, to work with either. (LP: #273711)

 -- Martin Pitt <email address hidden>   Wed, 24 Sep 2008 13:41:28 +0200

Available diffs

• diff from 0.9-1ubuntu1 to 0.9-1ubuntu2 (1.2 KiB)

policykit (0.9-1ubuntu1) intrepid; urgency=low

  * Merge from debian unstable. Remaining Ubuntu changes:
    - debian/patches/ubuntu-admin-group.patch: Change PolicyKit.conf to use
      'admin' as administrator group, instead of the 'root' user. Also
      grant all permissions to root, since root is not in the admin group and
      is already almighty anyway. This unbreaks running tools like g-s-t as
      root.
    - debian/policykit.init: Create /var/run/PolicyKit if it does not exist.
      This happens if /var/run is on a tmpfs. Install it in debian/rules.
    - debian/control: Drop policykit-gnome from Recommends: to Suggests: to
      match the Suggests semantics and to avoid pulling in -gnome in
      non-GNOMEish installations.
    - 02_noptrace.patch.disabled: Disable ptrace() and core dumping for
      programs using libpolkit for security reasons; not enabled during
      development.

Available diffs

• diff from 0.8-1ubuntu2 to 0.9-1ubuntu1 (240.7 KiB)

policykit (0.8-1ubuntu2) intrepid; urgency=low

  * Changed policykit Recommends policykit-gnome to a Suggests to
    which causes packages like landscape-client to install a lot of
    unneeded packages (LP: #250619)

 -- Michael Casadevall <email address hidden>   Tue, 22 Jul 2008 05:34:34 +0000

Available diffs

• diff from 0.8-1ubuntu1 to 0.8-1ubuntu2 (597 bytes)

policykit (0.8-1ubuntu1) intrepid; urgency=low

  * Merge from debian unstable (LP: #232227), remaining changes:
    - debian/patches/ubuntu-admin-group.patch: Change PolicyKit.conf to use
      'admin' as administrator group, instead of the 'root' user. Also
      grant all permissions to root, since root is not in the admin group and
      is already almighty anyway. This unbreaks running tools like g-s-t as
      root.
    - debian/policykit.init: Create /var/run/PolicyKit if it does not exist.
      This happens if /var/run is on a tmpfs. Install it in debian/rules.
    - Add Breaks: policykit (<< 0.7) to libpolkit2.
    - debian/policykit.postinst: Drop the dpkg-statoverride and chown
      operations for /var/run/PolicyKit. /var/run is a tmpfs and thus
      volatile, stat overrides do not make sense on it, and it's the init
      script's job to properly set up the directory.
  * Disable debian/patches/02_noptrace.patch for now, since it prevents us
    from collecting crash reports for gnome-panel and other PK-using
    applications. This will be re-enabled again just before the intrepid
    release.
  * Drop debian/patches/03_readdir_filetype_unknown.patch as it is
    now fixed upstream.
  * Drop debian/patches/10_format-string-security.patch as it is now
    fixed upstream.
  * debian/policykit.postinst: change the permissions applied to some
    files to match what is now required upstream:
    - /var/lib/PolicyKit - Now owned by polkituser:polkituser and mode 770
    - /var/lib/PolicyKit-public - Now owned by polkituser and mode 755
    - /var/lib/misc/PolicyKit.reload - Now owned by polkituser and mode 755
    - /usr/lib/policykit/polkit-set-default-helper - Now owned by polkituser
      and mode 4755.
    - /usr/lib/policykit/polkit-resolve-exe-helper - Now in group polkituser
      and mode 4755

policykit (0.7-2ubuntu7) hardy; urgency=low

  * Re-enable 02_noptrace.patch again for the final release, where security
    matters more than getting core dumps (apport is disabled by default in the
    final release anyway). (LP: #207151)

 -- Martin Pitt <email address hidden>   Wed, 16 Apr 2008 12:48:03 +0200

policykit (0.7-2ubuntu6) hardy; urgency=low

  * Add 10_format-string-security.patch: fix format strings (LP: #205037).

 -- Kees Cook <email address hidden>   Mon, 31 Mar 2008 16:06:38 -0700

policykit (0.7-2ubuntu5) hardy; urgency=low

  * debian/policykit.postinst: Drop the dpkg-statoverride and chown operations
    for /var/run/PolicyKit. /var/run is a tmpfs and thus volatile, stat
    overrides do not make sense on it, and it's the init script's job to
    properly set up the directory. (LP: #193533)
  * debian/policykit.init: Make setup of /var/run/PolicyKit more robust.
  * Disable debian/patches/02_noptrace.patch for now, since it prevents us
    from collecting crash reports for gnome-panel and other PK-using
    applications. This will be re-enabled again just before the hardy release.
    (LP: #202314)

 -- Martin Pitt <email address hidden>   Wed, 26 Mar 2008 16:05:58 +0100

policykit (0.7-2ubuntu4) hardy; urgency=low

  * debian/patches/ubuntu-admin-group.patch: Grant all permissions to root,
    since root is not in the admin group and is already almighty anyway. This
    unbreaks running tools like g-s-t as root. Thanks to Colin Watson for this
    idea. (LP: #188650)

 -- Martin Pitt <email address hidden>   Mon, 04 Feb 2008 09:17:59 +0100

policykit (0.7-2ubuntu3) hardy; urgency=low

  * Add Breaks: policykit (<< 0.7) to libpolkit2.

 -- Martin Pitt <email address hidden>   Mon, 28 Jan 2008 14:56:45 +0100

policykit (0.7-2ubuntu2) hardy; urgency=low

  * Add Breaks: policykit-gnome (<< 0.7). (LP: #183673)

 -- Martin Pitt <email address hidden>   Thu, 17 Jan 2008 23:13:29 +0100

policykit (0.7-2ubuntu1) hardy; urgency=low

  * Merge with Debian unstable. Remaining Ubuntu changes:
    - debian/patches/ubuntu-admin-group.patch: Change PolicyKit.conf to use
      'admin' as administrator group, instead of the 'root' user.
    - debian/policykit.init: Create /var/run/PolicyKit if it does not exist.
      This happens if /var/run is on a tmpfs. Install it in debian/rules.
    - debian/patches/02_noptrace.patch: Disable ptrace() for
      polkit-gnome-manager, to make it harder to silently abuse gained PK
      privileges. (See policykit-integration spec). Forwarded to FD#13742.
  * Add debian/patches/03_readdir_filetype_unknown.patch:
    - Fall back to stat() if readdir() cannot determine the type of an entry
      (this happens for some file systems).
    - Forwarded to FD #14082

policykit (0.6-1ubuntu4) hardy; urgency=low

  * Disable 02_noptrace.patch for now, since disabling ptrace() also disables
    reading /proc/<pid>/exe and PK 0.6 depends on this. (LP: #181088)

 -- Martin Pitt <email address hidden>   Tue, 08 Jan 2008 09:50:53 +0100

policykit (0.6-1ubuntu3) hardy; urgency=low

  * Add debian/patches/02_noptrace.patch: Disable ptrace() for
    polkit-gnome-manager, to make it harder to silently abuse gained PK
    privileges.
    (See https://wiki.ubuntu.com/DesktopTeam/Specs/PolicyKitIntegration)
    Forwarded to FD #13742.

 -- Martin Pitt <email address hidden>   Thu, 20 Dec 2007 01:16:47 +0100

policykit (0.6-1ubuntu2) hardy; urgency=low

  * Add debian/policykit.init: Create /var/run/PolicyKit if it does not exist.
    This happens if /var/run is on a tmpfs.
  * debian/rules: Install init script.

 -- Martin Pitt <email address hidden>   Tue, 20 Nov 2007 21:42:46 +0100

policykit (0.6-1ubuntu1) hardy; urgency=low

  * Add debian/patches/ubuntu-admin-group.patch:
    - Change PolicyKit.conf to use 'admin' as administrator group, instead of
      the 'root' user.
  * Modify Maintainer value to match the DebianMaintainerField
    specification.

 -- Martin Pitt <email address hidden>   Tue, 20 Nov 2007 15:18:39 +0100

policykit (0.6-1) experimental; urgency=low

  * New upstream release.
  * debian/control
    - Use new "Homepage:" field to specify the upstream URL.
    - The Vcs-* fields are now officially supported, so remove the XS- prefix.  
    - Add a Recommends: policykit-gnome to the policykit package.
    - Enable SELinux support by adding a Build-Depends on libselinux1-dev for
      all supported platforms.
  * debian/policykit.postinst
    - Install polkit-grant-helper-pam with the correct permissions.