Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package polkit for openSUSE:Factory checked in at 2022-07-31 23:00:22
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/polkit (Old)
and /work/SRC/openSUSE:Factory/.polkit.new.1533 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "polkit"
Sun Jul 31 23:00:22 2022 rev:82 rq:989831 version:0.120
Changes:
--------
--- /work/SRC/openSUSE:Factory/polkit/polkit.changes 2022-02-23 16:26:15.815508430 +0100
+++ /work/SRC/openSUSE:Factory/.polkit.new.1533/polkit.changes 2022-07-31 23:00:32.451621470 +0200
@@ -1,0 +2,6 @@
+Mon Jul 18 09:38:28 UTC 2022 - Marcus Meissner <meissner(a)suse.com>
+
+- split out pkexec into seperate package to make system hardening
+ easier (to avoid installing it jsc#PED-132 jsc#PED-148).
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ polkit.spec ++++++
--- /var/tmp/diff_new_pack.oO2mxF/_old 2022-07-31 23:00:32.987623028 +0200
+++ /var/tmp/diff_new_pack.oO2mxF/_new 2022-07-31 23:00:32.991623039 +0200
@@ -90,6 +90,14 @@
%description devel
Development files for PolicyKit Authorization Framework.
+%package -n pkexec
+Summary: pkexec component of polkit
+Group: System/Libraries
+Requires: %{name} = %{version}-%{release}
+
+%description -n pkexec
+This package contains the pkexec setuid root binary part of polkit.
+
%package doc
Summary: Development documentation for PolicyKit
Group: Development/Libraries/C and C++
@@ -183,13 +191,17 @@
%postun
%service_del_postun polkit.service
-%post
+%post -n pkexec
%set_permissions %{_bindir}/pkexec
+
+%post
%set_permissions %{_libexecdir}/polkit-1/polkit-agent-helper-1
%service_add_post polkit.service
-%verifyscript
+%verifyscript -n pkexec
%verify_permissions -e %{_bindir}/pkexec
+
+%verifyscript
%verify_permissions -e %{_libexecdir}/polkit-1/polkit-agent-helper-1
%post -n libpolkit-agent-1-0 -p /sbin/ldconfig
@@ -210,7 +222,6 @@
%files -f polkit-1.lang
%license COPYING
-%{_mandir}/man1/pkexec.1%{?ext_man}
%{_mandir}/man1/pkaction.1%{?ext_man}
%{_mandir}/man1/pkcheck.1%{?ext_man}
%{_mandir}/man1/pkttyagent.1%{?ext_man}
@@ -231,7 +242,6 @@
%attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d
%{_bindir}/pkaction
%{_bindir}/pkcheck
-%verify(not mode) %attr(4755,root,root) %{_bindir}/pkexec
%{_bindir}/pkttyagent
%dir %{_libexecdir}/polkit-1
%{_libexecdir}/polkit-1/polkitd
@@ -253,6 +263,10 @@
%{_datadir}/gettext/its/polkit.its
%{_datadir}/gettext/its/polkit.loc
+%files -n pkexec
+%{_mandir}/man1/pkexec.1%{?ext_man}
+%verify(not mode) %attr(4755,root,root) %{_bindir}/pkexec
+
%files doc
%doc NEWS
%doc %{_datadir}/gtk-doc/html/polkit-1/