-
policykit-1 (0.94-1ubuntu1.1) karmic-security; urgency=low
* SECURITY UPDATE: avoid /proc race conditions when checking privileges
for pkexec.
- 10_fix_proc_race.patch
- CVE-2011-1485
-- Kees Cook <email address hidden> Tue, 19 Apr 2011 13:06:21 -0700
-
policykit-1 (0.94-1ubuntu1) karmic; urgency=low
* fix network-manager crashes when opening connection editor
with system connections; crahes turned out to be caused by
freed policy kit authority - fix involves propery reffing
authority in singleton accessor (LP: #438574, #432452)
- See: https://bugs.freedesktop.org/show_bug.cgi?id=24566
- add 03_0001-authority-g_object_ref-authority-when-returning-sing.patch
-- Alexander Sack <email address hidden> Fri, 16 Oct 2009 12:18:17 +0200
-
policykit-1 (0.94-1) unstable; urgency=low
* Rename package to policykit-1. Upstream (at least temporarily) forked
the project to make it installable in parallel with policykit 0.9, until
all programs are ported to the new API.
* Drop all patches except 01_pam_polkit.patch.
* Refresh debian/patches/01_pam_polkit.patch.
* debian/control
- Update Build-Depends
+ Drop libdbus-1-dev, libdbus-glib-1-dev.
+ Add libeggdbus-1-dev (>= 0.5) and lsb-release.
+ Bump libglib2-dev dependency to (>= 2.21.4).
- Update list of binary packages and their package descriptions.
- Drop dependency on adduser.
- Bump Standards-Version to 3.8.3.
+ Add README.source which refers to the quilt documentation.
- Update Vcs-* fields. Package is now managed using Git and hosted on
git.debian.org.
* Update shared library structure: libpolkit-{,dbus,grant} →
libpolkit-{agent,backend,gobject}-1.
* Rename policykit, policykit-doc → policykit-1, policykit-1-doc.
* Update and revise all *.install files.
* debian/rules, debian/policykit.init: Drop init script, package doesn't use
/var/run any more.
* debian/policykit-1.postinst: Don't create "polkituser" system user, it's
not used any more.
* Update watch file.
* debian/patches/02_dont_export_private_symbols.patch
- Don't export private symbols in the libraries.
* debian/patches/99_autoreconf.patch
- Update the autotools files as the previous patch also touches the build
system.
* Add symbols files for libpolkit-{agent,backend,gobject}-1 for improved
shlibs dependencies.
* debian/rules
- Disable introspection support.
- When building for Ubuntu, install a localauthority.conf.d configuration
file which considers "admin" group users as administrators.
- Don't install example application.
* debian/copyright
- Update copyright holder.
- License was changed to LGPL 2.1+.
-- Martin Pitt <email address hidden> Mon, 28 Sep 2009 09:19:38 +0100
-
policykit-1 (0.94-0ubuntu2) karmic; urgency=low
* Add proper shlibs files. Don't use symbols files, they are too complex
because of the egg-dbus-binding-tool clutter.
-- Martin Pitt <email address hidden> Wed, 26 Aug 2009 14:38:34 +0200
-
policykit-1 (0.94-0ubuntu1) karmic; urgency=low
* New upstream release (LP: #417984)
[ 0.94 ]
- Post-release version bump to 0.94
- Require correct versions of glib and eggdbus
- Ignore .pkla files starting with dot and don't segfault on error path
- Allow unprivileged callers to check authorizations
- Don't spawn man(1) from a setuid program
- Add polkit.retains_authorization_after_challenge to authz result
- Ensure all fds except stdin/stdout/stderr are closed after exec(2)
- Be more careful when determining process start time
- Pass the right struct offset for the ::changed class signal handler
- Don't set the GError if the process doesn't exist
- Remove temporary authorization when the subject it applies to vanishes
- Generate GI gir and typelibs for libpolkit-gobject-1
- Update NEWS for release
- Bug 23093 – FreeBSD portability fixes
[ 0.93 ]
- Post-release version bump to 0.93
- GIO modules need to be prefix with lib
- Cancel an authentication if the unique name for the subject vanishes
- Plug a couple of memory leaks
- Move local authority management to a separate library
- Rip out polkit-local and refactor local authority to only use tmp authz
- Move authentication agent bits to separate authority subclass
- Also pass the identity of the subject we are checking for
- Actually make the local authority look up authorization files
- In .pkla files, use Result{Any,Inactive,Active} instead of just Result
- Rename some man pages and the daemon binary
- Add docs detailing how the Local Authority works
- Add support for querying and revoking temporary authorizations
- Fix make distcheck
- Update TODO
- Update NEWS for release
- Use unique ids for sections to prevent them being autogenerated
- More unique ids to get the docs build fully predictable
* debian/control:
- Add BZR link
- Bump glib and eggdbus depends
* debian/rules:
- Disable introspection
* debian/watch:
- Updated download link
-- Robert Ancell <email address hidden> Mon, 24 Aug 2009 09:11:46 +0200
-
policykit-1 (0.92-0ubuntu1) karmic; urgency=low
* Rename package to policykit-1. Upstream (at least temporarily) forked
the project to make it installable in parallel with policykit 0.9, until
all programs are ported to the new API.
* Drop all patches except 01_pam_polkit.patch.
* Update shared library structure: libpolkit-{,dbus,grant} →
libpolkit-{agent,backend,gobject}-1.
* debian/control:
- libdbus-1-dev, libdbus-glib-1-dev → libeggdbus-1-dev
* debian/copyright: Update copyright.
* debian/rules, debian/policykit.init: Drop init script, package doesn't use
/var/run any more.
* debian/rules: Fix permissions of /var/lib/polkit-1/ which upstream build
system installs without executable permissions.
* debian/rules: Don't create "polkituser" system user, it's not used any
more.
* debian/rules: When building for Ubuntu, install a localauthority.conf.d
configuration file which considers "admin" group users as administrators.
Add "lsb-release" build dependency.
-- Martin Pitt <email address hidden> Mon, 22 Jun 2009 09:24:18 +0200
