[abrt] Fix desktop centric polkit policy file
Jakub Filak
jfilak at fedoraproject.org
Tue May 6 11:16:42 UTC 2014
commit 86cae0cb5d75b3d4e78161024eba42a153dae2b9
Author: Jakub Filak <jfilak at redhat.com>
Date: Tue May 6 13:08:27 2014 +0200
Fix desktop centric polkit policy file
...us-Fix-desktop-centric-polkit-policy-file.patch | 44 ++++++++++++++++++++
abrt.spec | 7 +++-
2 files changed, 50 insertions(+), 1 deletions(-)
---
diff --git a/0002-dbus-Fix-desktop-centric-polkit-policy-file.patch b/0002-dbus-Fix-desktop-centric-polkit-policy-file.patch
new file mode 100644
index 0000000..f5743e9
--- /dev/null
+++ b/0002-dbus-Fix-desktop-centric-polkit-policy-file.patch
@@ -0,0 +1,44 @@
+From e98c8766655216db3d9a08b1fa52ba7decf57c46 Mon Sep 17 00:00:00 2001
+From: Stef Walter <stefw at redhat.com>
+Date: Mon, 5 May 2014 08:41:00 +0200
+Subject: [PATCH 2/2] dbus: Fix desktop centric polkit policy file
+
+In order to allow use of ABRT's DBus API on servers, the polkit
+policy should allow admin usage even when not logged in an active
+seat (ie: monitor and keyboard). Otherwise use from ssh logins and
+Cockpit is prevented.
+---
+ src/dbus/abrt_polkit.policy | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/src/dbus/abrt_polkit.policy b/src/dbus/abrt_polkit.policy
+index 06008b4..a3425d9 100644
+--- a/src/dbus/abrt_polkit.policy
++++ b/src/dbus/abrt_polkit.policy
+@@ -19,9 +19,9 @@ Copyright (c) 2012 ABRT Team <crash-catcher at fedorahosted.com>
+ <description>Get problems from all users</description>
+ <message>Reading others problems requires authentication</message>
+ <defaults>
+- <allow_any>no</allow_any>
++ <allow_any>auth_admin</allow_any>
+ <allow_active>auth_admin_keep</allow_active>
+- <allow_inactive>no</allow_inactive>
++ <allow_inactive>auth_admin</allow_inactive>
+ </defaults>
+ </action>
+
+@@ -30,9 +30,9 @@ Copyright (c) 2012 ABRT Team <crash-catcher at fedorahosted.com>
+ <description>Set value of configuration properties</description>
+ <message>Update configuration values reuquires authentication</message>
+ <defaults>
+- <allow_any>no</allow_any>
++ <allow_any>auth_admin</allow_any>
+ <allow_active>auth_admin_keep</allow_active>
+- <allow_inactive>no</allow_inactive>
++ <allow_inactive>auth_admin</allow_inactive>
+ </defaults>
+ </action>
+
+--
+1.9.0
+
diff --git a/abrt.spec b/abrt.spec
index a454fc3..2a5c51e 100644
--- a/abrt.spec
+++ b/abrt.spec
@@ -40,7 +40,7 @@
Summary: Automatic bug detection and reporting tool
Name: abrt
Version: 2.2.1
-Release: 1%{?dist}
+Release: 2%{?dist}
License: GPLv2+
Group: Applications/System
URL: https://fedorahosted.org/abrt/
@@ -48,6 +48,8 @@ Source: https://fedorahosted.org/released/%{name}/%{name}-%{version}.tar.gz
# don't remove this patch, packages in rawhide are not signed!
Patch0: disable-OpenGPGCheck-in-Fedora-Rawhide.patch
+Patch2: 0002-dbus-Fix-desktop-centric-polkit-policy-file.patch
+
# '%%autosetup -S git' -> git
BuildRequires: git
@@ -922,6 +924,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
%config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh
%changelog
+* Tue May 06 2014 Jakub Filak <jfilak at redhat.com> 2.2.1-2
+- dbus: Fix desktop centric polkit policy file
+
* Tue Apr 22 2014 Jakub Filak <jfilak at redhat.com> 2.2.1-1
- stop using deprecated json-c functions
- vmcore: start the service after kdump service
More information about the scm-commits
mailing list