| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: polkit | Distribution: openSUSE Tumbleweed |
| Version: 126 | Vendor: openSUSE |
| Release: 3.1 | Build date: Tue Sep 16 16:46:00 2025 |
| Group: System/Libraries | Build host: reproducible |
| Size: 394804 | Source RPM: polkit-126-3.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/polkit-org/polkit | |
| Summary: PolicyKit Authorization Framework | |
PolicyKit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
LGPL-2.1-or-later
* Tue Sep 16 2025 Andreas Schwab <schwab@suse.de>
- Skip tests in qemu emulation
* Mon Sep 15 2025 Marcus Meissner <meissner@suse.com>
- change /etc/polkit-1/rules.d group ownership back to polkitd
(bsc#1249581)
* Fri Sep 12 2025 Dominique Leuenberger <dimstar@opensuse.org>
- Fix user generation: move sysusers_generate_pre to install
section and use the - by then installed - polkit.conf from the
sources.
* Tue Jul 15 2025 Marcus Meissner <meissner@suse.com>
- Updated to version 126:
+ Highlights:
- many code fixes detected either by CI or the author himself (Frantisek Sumsal)
- shellcheck and dependabot integration (Jan Macku)
- search for rules in /usr/local/share rather than /usr/local/lib (Luca Boccassi)
- Implement LogControl1 protocol for dynamic log level changes (Luca Boccassi)
- read actions also from /etc/, /run/ and /usr/local/share/ (Luca Boccassi)
- mozjs dropped in favor of duktape (Xi Ruoyao)
- many other fixes in build system and polkit code (Many thanks to all the authors.)
- Updated to version 125:
+ Highlights:
- introduction of CodeQL and a new integration test suite (Frantisek Sumsal)
- dropped mocklibc (Frantisek Sumsal)
- syslog-style log-levels introduction (Jan Rybar)
- LogControl integration (Luca Boccassi)
- pkexec: "No session for cookie" finally fixed (huxiaodong)
- resources optimizations: only instances affected by sessions-change recalculate authorizations (Jan Rybar, thanks to Michal Sekletar and Milan Crha)
- meson tweaks (Alyssa Ross, Luca Boccassi, Michael Biebl, Michael Olbrich)
- build warnings cleanup (peelz)
- Packit service configuration for the new upstream platform (Vincent Mihalkovic)
- systemd-tmpfiles.d integration (Vincent Mihalkovic)
- other fixes and changes (Gleb Popov, heather7283, Tianyu Chen, Tobias Stoeckmann)
- internationalization: Slovenian (filmsi), Hindi (Scrambled777)
- Updated to version 124:
+ Highlights:
- PIDFDs are used if available to track processes
- pidfd parameter available for CheckAuthorization()
- systemd-sysuser enabled for polkit
- polkit-actions-in-etc.patch: done upstream in commit 9958c259f82b066f613d171d2934c1bd829e31a4
- polkit-fix-implicit.patch: not needed anymore
- revert upstream change to have /etc/polkit-1/rules.d as tempdir
* Wed Aug 14 2024 Dominique Leuenberger <dimstar@opensuse.org>
- BuildRequire gettext-devel instead of gettext: Allows OBS to
shortcut throught gettext-runtime-mini.
* Fri Jul 12 2024 Martin Jambor <mjambor@suse.com>
- Add -Wno-error=implicit-function-declaration to %optflags to
work-around an issue in mocklibc (which has been meanwhile removed
by upstream) with exactly this kind of issue.
* Tue Jun 04 2024 Marcus Meissner <meissner@suse.com>
- polkit-fix-implicit.patch: fixed implicit to make it build with gcc14.
* Fri Dec 08 2023 Tobias Klausmann <tobias.klausmann@freenet.de>
- Add 'dbus-service' as Requires instead of /usr/bin/dbus-daemon
This allow to use other dbus implementations such as dbus-broker with this
package again. (bsc#1217863)
* Fri Sep 29 2023 Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 123:
+ Highlights:
- better safety with deeper restriction of the configuration
files
- better safety with restricting the daemon's owner under
systemd
- better safety with the systemd unit sandboxing
- less thread races during upload of the configuration
- Changes from version 122:
+ Highlights:
- new Georgian translation
- port to mozjs-102
- daemon-less build (support for e.g. flatpak deps)
- re-enable of (API) documentation build
- See more detailed changes in the included NEWS.md file.
- Change URL and Source to new home, and drop polkit.keyring and
tar.gz.sign tarball signature, no longer available.
- Drop polkit-fix-pam-prefix.patch: Fixed upstream.
- Add /usr/bin/dbus-daemon BuildRequires, needed for tests. Replace
the dbus-1 with /usr/bin/dbus-daemon Requires.
* Tue Sep 19 2023 Ludwig Nussel <lnussel@suse.com>
- change /usr/share/polkit-1/rules.d to 555,root:root. /usr content
isn't secret anyway so this avoids non-root owned files in /usr
(boo#1215482)
- update 50-default.rules to allow adding more admin rules
(jsc#PED-260, drop polkit-no-wheel-group.patch)
* Wed Mar 29 2023 Johannes Segitz <jsegitz@suse.com>
- Change permissions for rules folders (bsc#1209282)
* Wed Nov 09 2022 aschnell@suse.com
- read actions also from /etc/polkit-1/actions (jsc#PED-1405)
added polkit-actions-in-etc.patch
* Thu Sep 15 2022 Marcus Meissner <meissner@suse.com>
- obsolete libpolkit0 also from baselibs.
* Tue Aug 09 2022 Luciano Santos <luc14n0@opensuse.org>
- Update to version 121:
+ Addition of duktape as a JS engine backend.
+ Other small fixes and improvements. For more details, visit:
gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
+ Updated translations.
- Drop merged-upstream patches:
+ CVE-2021-4034-pkexec-fix.patch;
+ 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
+ duktape-support.patch;
+ pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
replace all Autotools macros with Meson ones. And pass the
following options to Meson: session_tracking=libsystemd-login;
systemdsystemunitdir=%{_unitdir}; os_type=suse;
pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
examples=true; tests=true; gtk_doc=true; man=true and
js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
gobject-2.0 that are searched by the build scripts. They were
already being pulled by their siblings [pkgconfig(gio-2.0) and
pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
for the doc subpackage, based on long gone EOLed (open)SUSE
release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
Meson option, like it was designed to, rather than hard-coded
path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.
* Mon Aug 08 2022 Thorsten Kukuk <kukuk@suse.com>
- Use %_pam_vendordir
* Wed Aug 03 2022 Marcus Meissner <meissner@suse.com>
- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)
* Mon Jul 18 2022 Marcus Meissner <meissner@suse.com>
- split out pkexec into seperate package to make system hardening
easier (to avoid installing it jsc#PED-132 jsc#PED-148).
* Tue Feb 22 2022 Marcus Meissner <meissner@suse.com>
- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
0001-CVE-2021-4115-GHSL-2021-077-fix.patch
* Wed Jan 26 2022 Fabian Vogt <fvogt@suse.com>
- Switch from mozjs to duktape:
* Add duktape-support.patch
* Tue Jan 25 2022 Marcus Meissner <meissner@suse.com>
- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
CVE-2021-4034-pkexec-fix.patch
/etc/polkit-1 /etc/polkit-1/actions /etc/polkit-1/rules.d /usr/bin/pkaction /usr/bin/pkcheck /usr/bin/pkttyagent /usr/lib/pam.d/polkit-1 /usr/lib/systemd/system/polkit.service /usr/lib/sysusers.d/polkit.conf /usr/libexec/polkit-1 /usr/libexec/polkit-1/polkit-agent-helper-1 /usr/libexec/polkit-1/polkitd /usr/share/dbus-1 /usr/share/dbus-1/system-services /usr/share/dbus-1/system-services/org.freedesktop.PolicyKit1.service /usr/share/dbus-1/system.d /usr/share/dbus-1/system.d/org.freedesktop.PolicyKit1.conf /usr/share/doc/packages/polkit /usr/share/doc/packages/polkit/NEWS.md /usr/share/doc/packages/polkit/README.md /usr/share/licenses/polkit /usr/share/licenses/polkit/COPYING /usr/share/locale/cs/LC_MESSAGES/polkit-1.mo /usr/share/locale/da/LC_MESSAGES/polkit-1.mo /usr/share/locale/de/LC_MESSAGES/polkit-1.mo /usr/share/locale/hi/LC_MESSAGES/polkit-1.mo /usr/share/locale/hr/LC_MESSAGES/polkit-1.mo /usr/share/locale/hu/LC_MESSAGES/polkit-1.mo /usr/share/locale/id/LC_MESSAGES/polkit-1.mo /usr/share/locale/it/LC_MESSAGES/polkit-1.mo /usr/share/locale/ka/LC_MESSAGES/polkit-1.mo /usr/share/locale/nl/LC_MESSAGES/polkit-1.mo /usr/share/locale/nn/LC_MESSAGES/polkit-1.mo /usr/share/locale/pl/LC_MESSAGES/polkit-1.mo /usr/share/locale/pt/LC_MESSAGES/polkit-1.mo /usr/share/locale/pt_BR/LC_MESSAGES/polkit-1.mo /usr/share/locale/ro/LC_MESSAGES/polkit-1.mo /usr/share/locale/ru/LC_MESSAGES/polkit-1.mo /usr/share/locale/sk/LC_MESSAGES/polkit-1.mo /usr/share/locale/sl/LC_MESSAGES/polkit-1.mo /usr/share/locale/sv/LC_MESSAGES/polkit-1.mo /usr/share/locale/tr/LC_MESSAGES/polkit-1.mo /usr/share/locale/uk/LC_MESSAGES/polkit-1.mo /usr/share/locale/zh_CN/LC_MESSAGES/polkit-1.mo /usr/share/locale/zh_TW/LC_MESSAGES/polkit-1.mo /usr/share/man/man1/pkaction.1.gz /usr/share/man/man1/pkcheck.1.gz /usr/share/man/man1/pkttyagent.1.gz /usr/share/man/man8/polkit.8.gz /usr/share/man/man8/polkitd.8.gz /usr/share/polkit-1 /usr/share/polkit-1/actions /usr/share/polkit-1/actions/org.freedesktop.policykit.policy /usr/share/polkit-1/policyconfig-1.dtd /usr/share/polkit-1/rules.d /usr/share/polkit-1/rules.d/50-default.rules /var/lib/polkit
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Oct 23 22:49:34 2025