Bug 234919

Summary: sysutils/polkit: Update to 0.115
Product: Ports & Packages Reporter: Olivier Duchateau <duchateau.olivier>
Component: Individual Port(s)Assignee: freebsd-gnome (Nobody) <gnome>
Status: Closed Overcome By Events    
Severity: Affects Only Me CC: desktop, duchateau.olivier, madpilot, samy.mahmoudi, swills
Priority: --- Flags: bugzilla: maintainer-feedback? (desktop)
Version: Latest   
Hardware: Any   
OS: Any   
See Also: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=231730
Attachments:
Description Flags
Patch to update sysutils/polkit
none
Patch to update sysutils/polkit none

Description Olivier Duchateau 2019-01-13 12:58:34 UTC 
Created attachment 201097 [details]
Patch to update sysutils/polkit

- Update to 0.115
- USES= gnome
- Adjust dependencies (remove dbus, polkit* uses gdbus from Gio, and add sysutils/consolekit2 because it checks the org.freedesktop.ConsoleKit service)
- Add patches which fixes CVE-2018-19788 [1] (mostly related to systemd)

Note: linking to sysutils/consolekit2, breaks bug #231730 (this request is primarily for Xfce users), because it hijacks enhancement of shutdown fallback in xfce4-session, for users member of "operator" group, currently only available in Xfce's git repository.

[1] https://nvd.nist.gov/vuln/detail/CVE-2018-19788
Comment 1 Olivier Duchateau 2019-01-13 13:00:50 UTC 
Add Guido, because this bug and bug #231730 in the future will affect Xfce users.
Comment 2 Steve Wills freebsd_committer freebsd_triage 2019-01-28 03:07:40 UTC 
This looks like it creates a dependency loop, and even with the patch in PR 231730, it's a loop since that defaults the polkit option on.
Comment 3 Olivier Duchateau 2019-01-28 18:37:34 UTC 
Created attachment 201485 [details]
Patch to update sysutils/polkit

Remove ConsoleKit2 dependency (otherwise same patch).
Comment 4 Olivier Duchateau 2019-01-28 18:42:50 UTC 
(In reply to Steve Wills from comment #2)

I known it is dependency loop, but Polkit without systemd (or elogind) expects of org.freedesktop.ConsoleKit service.
Comment 5 Olivier Duchateau 2019-11-18 05:30:25 UTC 
Add desktop@ team
Comment 6 Olivier Duchateau 2020-01-15 20:00:45 UTC 
Superseded by bug #243378
Comment 7 Samy Mahmoudi 2020-06-11 12:52:22 UTC 
Hi Olivier,

About your note in the description of this PR: What is the status of bug 231730 now that bug 243378 has been committed?