| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
| |
|
|
|
|
|
| |
Original author: Wu Xiaotian (@yetist)
Resurrection author, runaway-killer author: Gustavo Lima Chaves (@limachaves)
|
| |
|
|
|
|
|
|
|
|
| |
Recent versions of Gettext are able to translate several formats
that are used in GNOME applications.
This migrates from Intltool to Gettext both autotools and meson
build systems.
|
| |
|
| |
|
|
|
|
|
| |
into 'master'"
This reverts merge request !75
|
|
|
|
| |
Signed-off-by: Philip Withnall <withnall@endlessm.com>
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
This is the new ESR version of the Mozilla JS engine, superceding
mozjs-52.
|
|
|
|
| |
sys/fs/cgroup/systemd/ does not exist on modern systems.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
This is going to briefly break the build.
Signed-off-by: Ray Strode <rstrode@redhat.com>
https://bugs.freedesktop.org/show_bug.cgi?id=105865
|
|
|
|
|
| |
This ensures that we get all of the extensions consistently, rather
than having just a few files `#define _GNU_SOURCE`.
|
|
|
|
|
|
|
|
|
|
| |
Set up glib to use the installed version for deprecation warnings
instead of limiting ourselves to [2.30,2.34]; this will let us use
newer API, and help us keep up to date with future deprecations.
Then fix all the warnings (as of GLib 2.44.1).
https://bugs.freedesktop.org/show_bug.cgi?id=91198
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Currently configure.ac allows the usage of either libsystemd-login or
ConsoleKit for session tracking.
The elogind project (https://github.com/wingo/elogind) provides
systemd-logind as a stand-alone daemon. To allow users of systems not
run by the full systemd suite, for whatever reason there might be, to at
least be able to not have to use ConsoleKit for session tracking, an
integration of elogind usage into PolicyKit would be very helpfull.
As elogind provides the same interface as systemd-logind, integration is
easy.
This commit changes configure.ac to look for elogind in the same way
it looks for systemd-logind.
https://bugs.freedesktop.org/show_bug.cgi?id=98688
|
|
|
|
|
|
|
|
|
| |
I'm trying to keep a relatively standard set around, and the code
there is cleaner than what we had before.
Also, injecting as WARN_CFLAGS rather than changing CFLAGS during
autoconf avoids any surprises from new warnings breaking autoconf
checks.
|
|
|
|
|
|
|
|
|
|
|
| |
Remove mozjs185 and mozjs17 from autoconf and replace them
with mozjs24.
Now that polkitbackendjsauthority is compiling in C++ mode
and the autoconf supports mozjs24, update the module so
that it builds with mozjs24.
Signed-off-by: Jeremy Linton <jeremy.linton@arm.com>
|
|
|
|
|
|
|
|
| |
The JSAPI is now a full C++ interface. Convert the polkit
to JavaScript interface module to C++ compilation in order to
support newer versions of spidermonkey.
Signed-off-by: Jeremy Linton <jeremy.linton@arm.com>
|
|
|
|
| |
https://bugs.freedesktop.org/show_bug.cgi?id=92046
|
|
|
|
|
|
|
|
|
| |
- OpenBSD does not use PAM nor SHADOW but bsd_auth(3) for authentication
- get_kinfo_proc(): adapt FreeBSD code to OpenBSD
- OpenBSD, get/setnetgrent are defined in netgroup.h and getnetgrent(3) takes a
const char
https://bugs.freedesktop.org/show_bug.cgi?id=75187
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Tavis noted that it'd be possible with a 32 bit counter for someone to
cause the cookie to wrap by creating Authentication requests in a
loop.
Something important to note here is that wrapping of signed integers
is undefined behavior in C, so we definitely want to fix that. All
counter integers used in this patch are unsigned.
See the comment above `authentication_agent_generate_cookie` for
details, but basically we're now using a cookie of the form:
```
<agent serial> - <agent random id> - <session serial> - <session
random id>
```
Which has multiple 64 bit counters, plus unpredictable random 128 bit
integer ids (effectively UUIDs, but we're not calling them that
because we don't need to be globally unique.
We further ensure that the cookies are not visible to other processes
by changing the setuid helper to accept them over standard input. This
means that an attacker would have to guess both ids.
In any case, the security hole here is better fixed with the other
change to bind user id (uid) of the agent with cookie lookups, making
cookie guessing worthless.
Nevertheless, I think it's worth doing this change too, for defense in
depth.
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=90832
CVE: CVE-2015-4625
Reported-by: Tavis Ormandy <taviso@google.com>
Reviewed-by: Miloslav Trmač <mitr@redhat.com>
Signed-off-by: Colin Walters <walters@redhat.com>
|
|
|
|
|
|
| |
The command-line option is still --enable-libsystemd-login for now.
Bug-Debian: https://bugs.debian.org/779756
|
|
|
|
|
|
|
|
|
|
|
|
| |
In the D-Bus "user bus" model, all sessions of a user share the same
D-Bus instance, a polkit requesting process might live outside the
login session which registered the user's polkit agent.
In case a polkit requesting process is not part of the user's login
session, we ask systemd-logind for the the user's "display" session
instead.
https://bugs.freedesktop.org/show_bug.cgi?id=78905
|
|
|
|
|
|
|
|
|
|
| |
1. Fallback to fsync() if fdatasync() is not available.
2. Check whether setnetgrent() has a return value.
3. Check whether the system has SIGPOLL.
4. Add configure option to disable test. mocklibc cannot be built on FreeBSD
because of function prototype conflict.
https://bugs.freedesktop.org/show_bug.cgi?id=73821
|
| |
|
| |
|
|
|
|
|
|
| |
... as required by GNU coding standards.
https://bugs.freedesktop.org/show_bug.cgi?id=29936
|
|
|
|
|
|
|
|
|
|
| |
PACKAGE_VERSION curently contains the mailing list address as well; this
leaks into output of --version and other places.
While at it, update AM_INIT_AUTOMAKE to the new form and use correct m4
quoting at least for these lines.
https://bugs.freedesktop.org/show_bug.cgi?id=29936
|
|
|
|
|
|
|
| |
Based on work by Tim Lunn <tim@feathertop.org>, reworked on top of a
regular dynamically-linked js.
https://bugs.freedesktop.org/show_bug.cgi?id=59830
|
|
|
|
|
|
| |
Mainly to avoid deprecation warnings about g_type_init().
https://bugs.freedesktop.org/show_bug.cgi?id=63440
|
|
|
|
|
|
| |
This is a good way for distributors to use -fPIE/-pie.
https://bugs.freedesktop.org/attachment.cgi?id=57584
|
|
|
|
|
|
|
|
| |
Check if the system is booting systemd, and fail if the automatic
configuration picks the wrong value. Emit a warning if the user explicitly
chose one way or the other, to account for cross-building.
https://bugs.freedesktop.org/show_bug.cgi?id=61127
|
|
|
|
|
|
|
| |
In Automake 1.13, the long-deprecated macro AM_CONFIG_HEADER (deprecated
since 2002) has been removed in favour of AC_CONFIG_HEADERS.
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
| |
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
|
|
| |
Part of https://bugs.freedesktop.org/show_bug.cgi?id=59091
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
| |
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
| |
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
| |
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
| |
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
|
|
|
|
| |
It doesn't do anything. This was pointed out in
https://bugs.freedesktop.org/show_bug.cgi?id=51470
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
|
|
| |
This was reported in https://bugs.freedesktop.org/show_bug.cgi?id=51466
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|
|
|
|
| |
Signed-off-by: David Zeuthen <zeuthen@gmail.com>
|