Bug 234919 - sysutils/polkit: Update to 0.115
Summary: sysutils/polkit: Update to 0.115
Status: New
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: freebsd-gnome mailing list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-01-13 12:58 UTC by Olivier Duchateau
Modified: 2019-11-18 05:30 UTC (History)
4 users (show)

See Also:
bugzilla: maintainer-feedback? (desktop)


Attachments
Patch to update sysutils/polkit (12.32 KB, patch)
2019-01-13 12:58 UTC, Olivier Duchateau
no flags Details | Diff
Patch to update sysutils/polkit (12.27 KB, patch)
2019-01-28 18:37 UTC, Olivier Duchateau
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Olivier Duchateau 2019-01-13 12:58:34 UTC
Created attachment 201097 [details]
Patch to update sysutils/polkit

- Update to 0.115
- USES= gnome
- Adjust dependencies (remove dbus, polkit* uses gdbus from Gio, and add sysutils/consolekit2 because it checks the org.freedesktop.ConsoleKit service)
- Add patches which fixes CVE-2018-19788 [1] (mostly related to systemd)

Note: linking to sysutils/consolekit2, breaks bug #231730 (this request is primarily for Xfce users), because it hijacks enhancement of shutdown fallback in xfce4-session, for users member of "operator" group, currently only available in Xfce's git repository.

[1] https://nvd.nist.gov/vuln/detail/CVE-2018-19788
Comment 1 Olivier Duchateau 2019-01-13 13:00:50 UTC
Add Guido, because this bug and bug #231730 in the future will affect Xfce users.
Comment 2 Steve Wills freebsd_committer 2019-01-28 03:07:40 UTC
This looks like it creates a dependency loop, and even with the patch in PR 231730, it's a loop since that defaults the polkit option on.
Comment 3 Olivier Duchateau 2019-01-28 18:37:34 UTC
Created attachment 201485 [details]
Patch to update sysutils/polkit

Remove ConsoleKit2 dependency (otherwise same patch).
Comment 4 Olivier Duchateau 2019-01-28 18:42:50 UTC
(In reply to Steve Wills from comment #2)

I known it is dependency loop, but Polkit without systemd (or elogind) expects of org.freedesktop.ConsoleKit service.
Comment 5 Olivier Duchateau 2019-11-18 05:30:25 UTC
Add desktop@ team