Commit Graph

44 Commits

Author SHA1 Message Date
Denys Dmytriyenko
4c00e5fed9 recipes: rename distro_features_check to features_check
Avoid warning due to the class rename in OE-Core.

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-21 17:51:37 -08:00
Andreas Müller
a47d385612 polkit-group-rules: Fix error in do_rootfs for rpm package-manager
* An issue in meta-mortsgna was reported. Discussion is found at [1]
* We do similar in meta-gnome's gvfs for same reason [2]
* This is a bugfix which should apply and work for many release-branches

Fixes:
| Error: Transaction check error:
|   file /etc/polkit-1/rules.d conflicts between attempted installs of polkit-group-rule-datetime-1.0-r0.cortexa7t2hf_neon_vfpv4 and polkit-0.115-r0.cortexa7t2hf_neon_vfpv4

[1] https://github.com/schnitzeltony/meta-mortsgna/issues/11
[2] fd1a0c9210/meta-gnome/recipes-gnome/gvfs/gvfs_1.41.2.bb (L72)

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-09 23:27:15 -07:00
Khem Raj
866daa14e3 polkit: Upgrade to 0.116
Make netgroup support optional so it can be disabled on musl
Drop backported patch 0001-backend-Compare-PolkitUnixProcess-uids-for-temporary.patch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-29 02:26:16 -07:00
Qi.Chen@windriver.com
ec45dce920 polkit: fix CVE-2019-6133
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-21 08:48:56 -07:00
Nicolas Dechesne
62a8c64a02 polkit: add REQUIRED_DISTRO_FEATURES for polkit
After below commits to add polkit as a required
distro feature:
97a1a55 polkit: add polkit as a required distro feature
c049e02 polkit: inherit distro_features_check

All recipes that includes polkit-group-rule.inc will fail to parse
when polkit is not in DISTRO_FEATURE, especially 'world'. e.g.

ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'udisks', 'polkit']

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-22 18:14:53 -08:00
Stefan Agner
c049e02663 polkit: inherit distro_features_check
Make the recently added REQUIRED_DISTRO_FEATURES effective by
inheriting distro_features_check.

Fixes: 97a1a55f47 ("polkit: add polkit as a required distro feature")
Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-28 07:06:19 -08:00
Stefan Agner
97a1a55f47 polkit: add polkit as a required distro feature
Make sure polkit is in DISTRO_FEATURERS if this package is being
installed. This will make sure that people who do use polkit in
their image also do enabled the recently introduced distro feature
polkit in their distro.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-20 10:15:44 -08:00
Hongxu Jia
5cf053a7f5 polkit: 0.113 -> 0.115
- Rebase patches to 0.115
  0001-make-netgroup-support-configurable.patch
  polkit-1_pam.patch

- Add --disable-libelogind which OE does not have recipe
  libelogind

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-16 18:42:41 -07:00
Andreas Müller
45664ad0ea polkit-gnome: remove
* last release was 2011
* it fails on autobuilder
* nothing uses it

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:43:45 -07:00
Armin Kuster
a6d8e7c3c8 polkit-gnome: only include when x11 in DISTRO_FEATURES
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-12 09:59:33 -07:00
Jackie Huang
19f0e8b40b polkit: add consolekit only when x11 is enabled
consolekit depends on virtual/libx11 then it requires x11
distro feature, so add consolekit option only when x11
is in DISTRO_FEATURES.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-19 13:44:17 -08:00
Jackie Huang
0487ed7f1d recipes: fix invalid license file
Use '${COMMON_LICENSE_DIR}/MIT' for MIT License to fix the warning:

| WARNING: packagegroup-xfce-base-1.0-r5 do_populate_lic:
  ${COREBASE}/LICENSE is not a valid license file, please use
  '${COMMON_LICENSE_DIR}/MIT' for a MIT License file in LIC_FILES_CHKSUM.
  This will become an error in the future

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-09-18 10:18:12 +02:00
Robert P. J. Day
6c9c7317e2 polkit-group-rule.inc: Fix comment typo "polkid" -> "polkitd"
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-03-31 13:26:03 +02:00
Peter Kjellerstedt
0c31f55bcf Make use of the new bb.utils.filter() function
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-03-07 13:30:26 +01:00
Martin Jansa
289217bbc3 meta-oe: fix indentation
* remove tabs which sneaked in since last cleanup
* meta-oe layers are using consistent indentation with 4 spaces, see
  http://www.openembedded.org/wiki/Styleguide

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-08-22 15:56:28 +02:00
Ross Burton
21f10c11f3 meta-oe: use bb.utils.contains() instead of base_contains()
base_contains() is a compatibility wrapper and may warn in the future, so
replace all instances with bb.utils.contains().

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-04-28 10:38:38 +02:00
Alexander Kanavin
2ba35c90c0 polkit: fix gobject introspection support
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2016-03-14 12:15:31 +01:00
Khem Raj
8404784b35 polkit: Fix build with musl
Make features like netgroup optional, these are not supported by posix
secondly they are poked at during configure so nothing changes for glibc
based systems but it helps compiling with musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-02-01 15:58:04 +01:00
Yi Zhao
a26902970c polkit-gnome: remove unrecognized configure options
Fix QA warning:
WARNING: QA Issue: polkit-gnome: configure was passed unrecognised options:
--disable-examples --disable-introspection [unknown-configure-option]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-01-04 14:56:41 +01:00
Reinette Chatre
f86ba9a558 polkit: fix relocation of polkit binaries
Polkit is currently broken in images built with multilib and systemd.
This is because the patch, 0001-do-not-hardcoded-libdir.patch, applied on
top of the polkit source code modifies where the polkitd binary is
installed, but it does not modify the polkit.service file to start the
binary from its new location.

At first it seemed reasonable to modify the systemd service file to
search for the binary in the correct place. This change, as well as what
the patch (0001-do-not-hardcoded-libdir.patch) already does was proposed to
the polkit maintainers at https://bugs.freedesktop.org/show_bug.cgi?id=92094

During the discussion with the polkit maintainers it became apparent that the
change to support multilib polkit should not be done with a patch to
the polkit source code, but instead a change to the polkit recipe.

Polkit correctly installs libraries when multilib is in use without any
changes to its source code. What is being changed by
0001-do-not-hardcoded-libdir.patch is not where the polkit libraries are
installed but where the binaries are installed.

Installing binaries in /usr/lib when baselib is lib64 is acceptable (see
http://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch04s06.html ).

So, instead of patching polkit to install its binaries under the same
library directory as its libraries we maintain the design of the polkit
installer to install the binaries in /usr/lib. This is the same as what is
done in distros like Fedora that supports multilib.

With this patch the polkit package, when built with multilib, installs
files into /usr/lib* as follows:
polkit/usr/lib64/libpolkit-agent-1.so.0
polkit/usr/lib64/libpolkit-gobject-1.so.0
polkit/usr/lib64/libpolkit-gobject-1.so.0.0.0
polkit/usr/lib64/libpolkit-agent-1.so.0.0.0
polkit/usr/lib
polkit/usr/lib/polkit-1
polkit/usr/lib/polkit-1/polkitd
polkit/usr/lib/polkit-1/polkit-agent-helper-1

Signed-off-by: Reinette Chatre <reinette.chatre@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 12:28:13 +02:00
Andreas Müller
315a2f9026 polkit-group-rule.inc: remove allarch
Recipes using this include depend on polkit which is not allarch.

Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-09-23 15:39:44 +02:00
Li xin
175fb66551 polkit: 0.112 -> 0.113
Remove 0001-configure.ac-Check-only-for-libsystemd-not-libsystem.patch,
it is not needed anymore.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-08-18 11:38:01 +02:00
Chunrong Guo
dce88e4a2c polkit: do not hardcode the libdir
libdir is defined as ${prefix}/lib/, but we want it to support multilib path

Signed-off-by: Chunrong Guo <B40290@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-05-13 14:34:24 +02:00
Khem Raj
b22ffc5f7e polkit-gnome: Upgrade 0.102 -> 0.105
add missing dep on gtk+3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-05-13 14:34:21 +02:00
Ash Charles
b196d3e213 polkit-group-rule: Add polkitd user and group
Recipes including polkit-group-rule.inc correctly install a directory
with the user and group set as 'polkitd'.  To avoid warnings like
these when assemblying the rootfs,

  WARNING: log_check: warning: user polkitd does not exist - using root
  ...
  WARNING: log_check: warning: group polkitd does not exist - using root

create this user and group.

Note: although the polkit recipe itself, on which this depends, is
      creating this same user and group, it seems that the useradd class
      needs this to be specified independently.

Signed-off-by: Ash Charles <ashcharles@gmail.com>
Acked-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-02-12 19:33:24 +01:00
Martin Jansa
27a660fa7e polkit-gnome, gdm, network-manager-applet: blacklist because polkit-gnome.do_configure fails
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-12-17 12:56:21 +01:00
Andreas Müller
ceb70b7c8a polkit: update to 0.112
checked in logfile: setting up ownership/permission is performed by make install

Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2014-10-01 10:11:36 +02:00
Martin Jansa
3341f96372 polkit-gnome: remove unrecognized configure options
* fixes following QA warnings:
  polkit-gnome-0.102: polkit-gnome: configure was passed unrecognised
    options: --disable-scrollkeeper --disable-man-pages
    [unknown-configure-option]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-11 10:59:22 +02:00
Richard Purdie
e29addd7d6 polkit-gnome: add missing dependency on gnome-common
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie
0ee1083568 recipes: add missing dependency on intltool-native
* These recipes all require intltool-native to build but were missing
  a dependency on it.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Martin Jansa
acd60a9825 polkit: make it compatible with systemd-209
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-03-19 15:53:32 +01:00
Martin Jansa
6daf75e4e9 Update after toplevel LICENSE file checksum change
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-04 08:47:18 +01:00
Andreas Müller
010f75a8d0 polkit-group-rule-datetime: initial add
add user-group 'datetime' allowing members to change date/time/timezone settings

Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-06-20 12:28:00 +02:00
Andreas Müller
2ae8dbddf8 polkit-group-rule-network: initial add
add user-group 'network' allowing memebers to change networkmanager settings

Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-06-20 12:28:00 +02:00
Andreas Müller
79b7cbaaee polkit-group-rule.inc: add a common template for polkit-rules/user-groups
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-06-20 12:28:00 +02:00
Andreas Müller
da51d044a8 polkit: update to 0.111
note: this version's rules are written in jscript.

The following tests were performed:

* run-tests for gnome- and xfce-based image
* update a package that installs a new rule to check if the restricted access
  rights for /etc/polkit-1/rules.d don't cause trouble

Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2013-06-20 12:27:59 +02:00
Martin Jansa
a45830a39b recipes: Unify indentation
* This change is only aesthetic (unlike indentation in Python
  tasks).
* Some recipes were using tabs.
* Some were using 8 spaces.
* Some were using mix or different number of spaces.
* Make them consistently use 4 spaces everywhere.
* Yocto styleguide advises to use tabs (but the only reason to keep
  tabs is the need to update a lot of recipes). Lately this advice
  was also merged into the styleguide on the OE wiki.
* Using 4 spaces in both types of tasks is better because it's less
  error prone when someone is not sure if e.g.
  do_generate_toolchain_file() is Python or shell task and also allows
  to highlight every tab used in .bb, .inc, .bbappend, .bbclass as
  potentially bad (shouldn't be used for indenting of multiline
  variable assignments and cannot be used for Python tasks).
* Don't indent closing quote on multiline variables
  we're quite inconsistent wheater it's first character on line
  under opening quote or under first non-whitespace character in
  previous line.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Acked-by: Koen Kooi <koen@dominion.thruhere.net>
2013-04-15 16:23:17 +02:00
Martin Jansa
54bcafbd5f polkit: move systemd support from meta-systemd back to meta-oe
* POLKITAUTH isn't used anymore PACKAGECONFIG should select right version for systemd now

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-04-15 16:22:06 +02:00
Ross Burton
8a1c0ebb3d polkit: add (taken from oe-core)
PolKit will be removed from oe-core as it isn't massively applicable in
embedded, isn't used by anything by default anymore, and future upgrades require
the SpiderMonkey JavaScript runtime.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-03-21 22:01:08 +01:00
Otavio Salvador
d928d6c885 polkit: Remove authentication override as it is handled in OE-Core
OE-Core now handles the detection of authentication so we don't need
to do it here. The bbappend file is kept to provide the upgrade path
only, or the revision would go backwards.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-03-13 17:21:53 +01:00
Andreas Müller
fb56d13c70 polkit: meta-systemd rework
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
2012-07-16 09:39:05 +02:00
Koen Kooi
81dc4e7028 polkit 0.104 bbappend: append to PACkAGECONFIG instead of overwriting it
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2012-03-04 14:31:02 +01:00
Martin Jansa
c81d25cd9b polkit: enable and disable systemd/consolekit support explicitly
* people using sysvinit need to add something like
  PACKAGECONFIG = "${@base_contains('VIRTUAL-RUNTIME_init_manager', 'sysvinit', 'consolekit', 'systemd', d)}"
  or just
  PACKAGECONFIG = "consolekit"
  to their own .bbappend if they don't want to get systemd in their
  images.
* and for the rest it will enable systemd explititly

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-02-23 16:46:32 +01:00
Otavio Salvador
6f371fa946 polkit: depends on systemd
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2012-02-20 22:22:02 +01:00