summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Add morphologybaserock/morphSam Thursfield2012-07-231-0/+9
| | | | Need --disable-man-pages to avoid docbook dependency
* Post-release version bump to 0.108David Zeuthen2012-07-111-2/+2
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Update NEWS for release0.107David Zeuthen2012-07-111-0/+37
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* pkexec: add support for argv1 annotation and mention shebang-wrappersDavid Zeuthen2012-07-112-2/+55
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Introduce a polkit.Result enumeration for authorization rulesDavid Zeuthen2012-07-066-52/+74
| | | | | | | | | | | | | | This way an authorization rule can do this return polkit.Result.YES; which is slightly nicer than return "yes"; https://bugs.freedesktop.org/show_bug.cgi?id=50983 Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Nuke --enable-verbose flagDavid Zeuthen2012-07-061-2/+0
| | | | | | | | It doesn't do anything. This was pointed out in https://bugs.freedesktop.org/show_bug.cgi?id=51470 Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Nuke leftover polkit-backend-1.pc fileDavid Zeuthen2012-07-063-13/+1
| | | | | | This was reported in https://bugs.freedesktop.org/show_bug.cgi?id=51466 Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Try harder to look up the right localizationMatthias Clasen2012-07-061-9/+7
| | | | | | | | | | | The code for looking up localized strings for action descriptions was manually trying to break locale names into pieces, but didn't get it right for e.g. zh_CN.utf-8. Instead, use the GLib function g_get_locale_variants(), which handles this (and more). This fixes the translation problem reported in https://bugzilla.gnome.org/show_bug.cgi?id=665497 Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Update guidance on situations where there is no polkit authorityDavid Zeuthen2012-06-081-1/+6
| | | | | | | | | | | | | | | | | | Now that GDBusProxy does something reasonable for a masked systemd service, see https://bugzilla.gnome.org/show_bug.cgi?id=677718 construction of the PolkitAuthority object does not fail anymore. That doesn't mean the authority is available, though, so mention that users should check the result of the CheckAuthorization() call as well. Or in the case of PolkitAuthority, that the error is not a POLKIT_ERROR. This is actually a nice feature, it means that if you unmask polkit.service then mechanisms using PolkitAuthority will start using it without a restart. Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Post-release version bump to 0.107David Zeuthen2012-06-071-2/+2
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Update NEWS for release0.106David Zeuthen2012-06-071-0/+103
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* docs: add a "make sure your app works when there's no polkitd(8)" noteDavid Zeuthen2012-06-071-0/+22
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Mention the implications of returning *_keep in an authorization ruleDavid Zeuthen2012-06-071-2/+18
| | | | | | Pointed out by Dan Williams <dcbw@redhat.com> on IRC. Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Make it work when using ConsoleKit instead of libsystemd-loginDavid Zeuthen2012-06-065-9/+59
| | | | | | | | ... although it would be nicer to just rip out the CK bits and simply hard-require libsystemd-login instead - it should work just fine on non-systemd systems, same way systemd-udev works fine there. Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* agenthelper-pam: Fix newline-trimming codeColin Walters2012-06-061-3/+8
| | | | | | | | First, we were using == instead of =, as the author probably intended. But after changing that, we're now assigning to const memory. Fix that by writing to a temporary string buffer. Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* autogen.sh: Fix check for libtool (we only need libtoolize)Colin Walters2012-06-061-1/+1
| | | | | | | A pre-built libtool copy may not be installed on all systems; all we need is libtoolize. Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* build: Check for mozjs185, not libjsColin Walters2012-06-061-1/+1
| | | | | | | libjs is a Fedora-specific invention; mozjs185.pc lives in the upstream tarball. Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* State that authorization rules must not rely on SpiderMonkey featureswip/js-rule-filesDavid Zeuthen2012-06-041-5/+13
| | | | | | ... e.g. we reserve the right to switch out the JS engine. Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Small updates to the "Writing polkit applications" chapterDavid Zeuthen2012-06-041-74/+161
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Update pkexec(1) man page with exampleDavid Zeuthen2012-06-041-0/+1
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Update links to udisks docsDavid Zeuthen2012-06-041-4/+2
| | | | Signed-off-by: David Zeuthen <zeuthen@gmail.com>
* Rewrite the "Writing polkit applications" chapterDavid Zeuthen2012-05-251-38/+142
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Log when the name org.fd.PolicyKit1 has been acquiredDavid Zeuthen2012-05-251-6/+6
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Run polkitd as an unprivileged userDavid Zeuthen2012-05-257-14/+136
| | | | | | There's really no reason to run all this code as uid 0. Signed-off-by: David Zeuthen <davidz@redhat.com>
* Remove unused DBUS_GLIB_* and GIO_* variablesDavid Zeuthen2012-05-252-5/+0
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Ensure polkitd is rebuilt if libpolkit-backend-1.la changesDavid Zeuthen2012-05-251-1/+1
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Move polkitd into src/polkitbackendDavid Zeuthen2012-05-255-43/+27
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Use g_unix_signal_add() from GLib 2.30David Zeuthen2012-05-255-199/+4
| | | | | | ... instead of the one I wrote myself. Signed-off-by: David Zeuthen <davidz@redhat.com>
* Clarify pkexec(1) variablesDavid Zeuthen2012-05-245-38/+42
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Combine action and details parametersDavid Zeuthen2012-05-249-352/+382
| | | | | | | | | | This also removes the ability to change detail parameters which is actually a good thing. If we later need a way to change the authentication message, we can always add something like polkit.addAuthenticationMessageRule() so the user can register a function returning a string. Signed-off-by: David Zeuthen <davidz@redhat.com>
* Use a condition variable to signal that runaway killer thread is readyDavid Zeuthen2012-05-241-5/+16
| | | | | | ... instead of the unsafe g_thread_yield() busy-wait loop. Signed-off-by: David Zeuthen <davidz@redhat.com>
* Terminate runaway scriptsDavid Zeuthen2012-05-244-25/+205
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Use "rules", not "scripts" to refer to files in rules.dDavid Zeuthen2012-05-231-3/+3
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Pass expanded identity list to the AuthenticationSessionDavid Zeuthen2012-05-231-24/+24
| | | | | | | ... otherwise it things like admin-identities being set to ["unix-group:session"] won't work. Signed-off-by: David Zeuthen <davidz@redhat.com>
* Add default rulesDavid Zeuthen2012-05-233-10/+16
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Store private binaries in /usr/lib/polkit-1 instead of /usr/libexecDavid Zeuthen2012-05-237-19/+16
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Mention systemd(1) in the polkitd(8) man pageDavid Zeuthen2012-05-231-3/+11
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Nuke polkitbackend library, localauthority backend and extension systemDavid Zeuthen2012-05-2327-2751/+16
| | | | | | | | | | | Any backend can now be implemented in JavaScript (if so desired) so we don't need any of this any more. Note that the libpolkitbackend library was never declared stable (the preprocessor symbol POLKIT_BACKEND_I_KNOW_API_IS_SUBJECT_TO_CHANGE had to be defined) so removing it is not an API/ABI break. Signed-off-by: David Zeuthen <davidz@redhat.com>
* Add a systemd .service fileDavid Zeuthen2012-05-235-3/+42
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Fix distcheckDavid Zeuthen2012-05-231-1/+2
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Rename --enable-systemd to --enable-libsystemd-loginDavid Zeuthen2012-05-233-23/+23
| | | | | | | | It's useful to be more specific because we also want an option to install a systemd .service file which you may not want even if you are using libsystemd-login... Signed-off-by: David Zeuthen <davidz@redhat.com>
* Add real-world example featuring udisks2 and the drive.* variables it passesDavid Zeuthen2012-05-231-1/+25
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Make polkit_details_insert() remove the key if passed value is NULLDavid Zeuthen2012-05-231-1/+6
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Use <variablelist> instead of <informaltable> for Subject attributesDavid Zeuthen2012-05-231-48/+64
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Mention details["polkit.message"] and add an example using detailsDavid Zeuthen2012-05-231-5/+48
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Fix a couple typos in the docsDavid Zeuthen2012-05-233-5/+5
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Fix spelingDavid Zeuthen2012-05-221-1/+1
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* polkitd: add reference to polkit(8) from its man pageDavid Zeuthen2012-05-221-1/+4
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* Clarify docs a bitDavid Zeuthen2012-05-221-8/+6
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>
* docs: update SEE ALSO to make each man page point to all other man pagesDavid Zeuthen2012-05-225-8/+16
| | | | Signed-off-by: David Zeuthen <davidz@redhat.com>