You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

636 lines
19 KiB

  1. --------------
  2. polkit 0.105
  3. --------------
  4. This is polkit 0.105
  5. WARNING WARNING WARNING: This is a prerelease on the road to polkit
  6. 1.0. Public API might change and certain parts of the code still needs
  7. some security review. Use at your own risk.
  8. Build requirements
  9. glib, gobject, gio >= 2.28
  10. gobject-introspection >= 0.6.2 (optional)
  11. pam (optional)
  12. ConsoleKit OR systemd
  13. Changes since polkit 0.104:
  14. David Zeuthen (11):
  15. Post-release version bump
  16. PolkitUnixSession: Set error if we cannot find a session for the given pid
  17. PolkitUnixSession: Actually return TRUE if a session exists
  18. PolkitAgentSession: Don't leak file descriptors
  19. Add pkttyagent(1) helper
  20. Make it possible to influence agent registration with an a{sv} parameter
  21. Fix type in docs
  22. Mention pkttyagent(1) in "Writing PolicyKit applications" chapter
  23. Update the docs to use 'polkit' (instead of 'PolicyKit') as the name
  24. Add Makefile rules for signing and publishing releases and docs
  25. Update NEWS for release
  26. Ryan Lortie (1):
  27. Various builddir != srcdir fixes
  28. Thanks to our contributors.
  29. David Zeuthen,
  30. April 24, 2012
  31. --------------
  32. PolicyKit 0.104
  33. --------------
  34. This is PolicyKit 0.104
  35. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  36. 1.0. Public API might change and certain parts of the code still needs
  37. some security review. Use at your own risk.
  38. Build requirements
  39. glib, gobject, gio >= 2.28
  40. gobject-introspection >= 0.6.2 (optional)
  41. pam (optional)
  42. ConsoleKit OR systemd
  43. Changes since PolicyKit 0.103:
  44. David Zeuthen (3):
  45. Post-release version bump to 0.104
  46. Detect whether systemd is available and default to use if so
  47. Update NEWS for release
  48. Matthias Clasen (1):
  49. Add optional systemd support
  50. Nikki VonHollen (2):
  51. Bug 43608 – Add unit tests
  52. Bug 43610 - Add netgroup support
  53. Thanks to our contributors.
  54. David Zeuthen,
  55. January 3, 2012
  56. --------------
  57. PolicyKit 0.103
  58. --------------
  59. This is PolicyKit 0.103
  60. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  61. 1.0. Public API might change and certain parts of the code still needs
  62. some security review. Use at your own risk.
  63. Build requirements
  64. glib, gobject, gio >= 2.28
  65. gobject-introspection >= 0.6.2 (optional)
  66. pam (optional)
  67. IMPORTANT: As of release 0.103, the default Authority backend now
  68. defaults to allowing members of the 'wheel' group to authenticate as
  69. an administator since this is common usage in popular Linux
  70. distributions. Distributors can change this by patching the
  71. 50-localauthority.conf file in /etc/polkit-1/localauthority.conf.d as
  72. needed.
  73. Changes since PolicyKit 0.102:
  74. Alan Near (1):
  75. Mistype in DBus object: PoliycKit1 -> PolicyKit1
  76. David Zeuthen (7):
  77. Post-release version bump to 0.103
  78. Add support for the org.freedesktop.policykit.imply annotation
  79. Add --no-debug option and use this for D-Bus activation
  80. Bug 41025 – Add org.freedesktop.policykit.owner annotation
  81. Default to AdminIdentities=unix-group:wheel for local authority
  82. Update NEWS for release
  83. Fix typo
  84. Thanks to our contributors.
  85. David Zeuthen,
  86. December 6, 2011
  87. --------------
  88. PolicyKit 0.102
  89. --------------
  90. This is PolicyKit 0.102
  91. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  92. 1.0. Public API might change and certain parts of the code still needs
  93. some security review. Use at your own risk.
  94. Build requirements
  95. glib, gobject, gio >= 2.28
  96. gobject-introspection >= 0.6.2 (optional)
  97. pam (optional)
  98. Changes since PolicyKit 0.101:
  99. Benjamin Otte (1):
  100. introspection: Add --c-include to the gir files
  101. David Zeuthen (7):
  102. Post-release version bump to 0.102
  103. Don't show diagnostic messages intended for the administrator to the end u
  104. PolkitUnixProcess: Clarify that the real uid is returned, not the effectiv
  105. Make PolkitUnixProcess also record the uid of the process
  106. Use polkit_unix_process_get_uid() to get the owner of a process
  107. pkexec: Avoid TOCTTOU problems with parent process
  108. Update NEWS for release
  109. Evan Nemerson (1):
  110. Specify exported pkg-config files in GIRs
  111. Marc Deslauriers (1):
  112. Fix multi-line pam prompt handling
  113. Martin Pitt (3):
  114. Ignore .po/ for intltool
  115. Fix backend crash if a .policy file does not specify <message>
  116. Bug 38769 — pkexec: Support running X11 apps
  117. Thanks to our contributors.
  118. David Zeuthen,
  119. August 1, 2011
  120. --------------
  121. PolicyKit 0.101
  122. --------------
  123. This is PolicyKit 0.101
  124. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  125. 1.0. Public API might change and certain parts of the code still needs
  126. some security review. Use at your own risk.
  127. Build requirements
  128. glib, gobject, gio >= 2.28
  129. gobject-introspection >= 0.6.2 (optional)
  130. pam (optional)
  131. Changes since PolicyKit 0.100:
  132. Adrian Bunk (1):
  133. Bug 27253 – Use GOBJECT_INTROSPECTION_CHECK from gobject-introspection
  134. David Zeuthen (16):
  135. Post-release version bump to 0.101
  136. Bug 30653 – No way to detect cancellation in pkexec
  137. Bug 27081 – pkexec fails to build on non glibc systems
  138. Bug 30438 – PolicyKit fails to build on AIX
  139. Bug 32334 – Always set polkit.retains_authorization_after_challenge
  140. Fix a memory leak
  141. Be more specific about what info we want when enumerating files
  142. Make pkcheck(1) report if the authentication dialog was dismissed
  143. pkcheck: Make it possible to list and revoke temporary authorizations
  144. Be a bit more careful parsing the command-line
  145. Bug 29712 – Use monotonic for temporary authorizations
  146. Allow overriding message shown in authentication dialog
  147. Deprecated PolkitBackendActionLookup
  148. Fix a couple of warnings triggered by gcc 4.6
  149. Build examples by default and fix compiler warnings
  150. Update NEWS for release
  151. Michael Biebl (1):
  152. Bug 29871 – Fix build failures with binutils-gold
  153. Thanks to our contributors.
  154. David Zeuthen,
  155. March 3, 2011
  156. --------------
  157. PolicyKit 0.100
  158. --------------
  159. This is PolicyKit 0.100
  160. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  161. 1.0. Public API might change and certain parts of the code still needs
  162. some security review. Use at your own risk.
  163. Build requirements
  164. glib, gobject, gio >= 2.25.12
  165. gobject-introspection >= 0.6.2 (optional)
  166. pam (optional)
  167. Changes since PolicyKit 0.99:
  168. David Zeuthen (12):
  169. Post-release version bump to 0.100
  170. Add missing GObject Introspection annotations
  171. Build gir/typelib for PolkitAgent-1.0
  172. Fix-up PolkitAgentSession to use GObject properties
  173. Improve error reporting for authentication sessions
  174. Add some debug info that can be shown with the env var POLKIT_DEBUG
  175. Fix up debug and timeouts in agent helper
  176. Always pass non-zero value to g_once_init_leave()
  177. Add a note about POLKIT_DEBUG
  178. Pass caller and subject pid to authentication agent
  179. Update NEWS for release
  180. Fix 'make distcheck'
  181. Thanks to our contributors.
  182. David Zeuthen,
  183. February 21, 2011
  184. --------------
  185. PolicyKit 0.99
  186. --------------
  187. This is PolicyKit 0.99
  188. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  189. 1.0. Public API might change and certain parts of the code still needs
  190. some security review. Use at your own risk.
  191. Build requirements
  192. glib, gobject, gio >= 2.25.12
  193. gobject-introspection >= 0.6.2 (optional)
  194. pam (optional)
  195. Changes since PolicyKit 0.98:
  196. Colin Walters (3):
  197. Remove duplicate definitions of enumeration types
  198. Fix (correct) GCC warning about possibly-uninitialized variable
  199. Fix another GCC uninitialized variable warning
  200. David Zeuthen (2):
  201. Post-release version bump to 0.99
  202. Update NEWS for release
  203. Vincent Untz (1):
  204. Bug 29816 – Install polkitagentenumtypes.h
  205. Thanks to our contributors.
  206. David Zeuthen,
  207. September 15, 2010
  208. --------------
  209. PolicyKit 0.98
  210. --------------
  211. This is PolicyKit 0.98.
  212. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  213. 1.0. Public API might change and certain parts of the code still needs
  214. some security review. Use at your own risk.
  215. Build requirements
  216. glib, gobject, gio >= 2.25.12
  217. gobject-introspection >= 0.6.2 (optional)
  218. pam (optional)
  219. Changes since PolicyKit 0.97:
  220. David Zeuthen (11):
  221. Post-release version bump to 0.98
  222. Require GLib 2.25.12
  223. Fix scanning of unix-process subjects
  224. Add textual authentication agent and use it in pkexec(1)
  225. Fix ConsoleKit interaction bug
  226. pkexec: add --disable-internal-agent option
  227. pkcheck: add --enable-internal-agent option
  228. Fix wording in pkexec(1) man page
  229. Various doc cleanups
  230. Fix dist-check
  231. Update NEWS for release
  232. Thanks to our contributors.
  233. David Zeuthen,
  234. August 20, 2010
  235. --------------
  236. PolicyKit 0.97
  237. --------------
  238. This is PolicyKit 0.97.
  239. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  240. 1.0. Public API might change and certain parts of the code still needs
  241. some security review. Use at your own risk.
  242. The main change since the previous version is a port from eggdbus to
  243. GLib's new D-Bus implementation. Other changes includes various bug
  244. fixes and support for shadow authentication. Support for the
  245. AddLockdown() and RemoveLockdown() methods has been removed. You will
  246. need an updated version of PolicyKit-gnome to go with this release.
  247. Build requirements
  248. glib, gobject, gio >= 2.25.11
  249. gobject-introspection >= 0.6.2 (optional)
  250. pam (optional)
  251. Changes since PolicyKit 0.96:
  252. Andrew Psaltis (1):
  253. Add shadow support
  254. Dan Rosenberg (1):
  255. Bug 26982 – pkexec information disclosure vulnerability
  256. David Zeuthen (23):
  257. Post-release version bump to 0.97
  258. Port core bits to gdbus
  259. Port CK class to gdbus
  260. Port PolkitBackendInteractiveAuthority to gdbus
  261. Port PolkitAgent to gdbus
  262. Add generated docbook D-Bus API docs to git
  263. Nuke eggdbus usage
  264. Make polkitd accept --replace and gracefully handle SIGINT
  265. Implement polkit_temporary_authorization_new_for_gvariant()
  266. Remove Lock Down functionality
  267. Make NameOwnerChanged a private impl detail of the interactive authority
  268. Update README
  269. Merge remote branch 'origin/gdbus'
  270. Add a GPermission implementation
  271. PolkitAuthority: Implement failable initialization
  272. PolkitAuthority: Add g_return_if_fail() checks
  273. Add g_return_if_fail() to all public API entry points
  274. Use polkit_authority_get_sync() instead of deprecated polkit_authority_get
  275. PolkitBackend: Don't export unneeded convenience API
  276. Update GI annotations
  277. Don't dist org.freedesktop.ConsoleKit.xml; It's dead, Jim
  278. Properly reference headers
  279. Update NEWS for release
  280. Petr Mrázek (1):
  281. Bug 29051 – Configuration reload on every query
  282. Thanks to our contributors.
  283. David Zeuthen,
  284. August 9, 2010
  285. --------------
  286. PolicyKit 0.96
  287. --------------
  288. This is PolicyKit 0.96. This is supposed to be the last release until 1.0.
  289. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  290. 1.0. Public API might change and certain parts of the code still needs
  291. some security review. Use at your own risk.
  292. Build requirements
  293. glib, gobject, gio >= 2.21.4
  294. eggdbus-1 >= 0.6
  295. gobject-introspection >= 0.6.2 (optional)
  296. pam
  297. Changes since PolicyKit 0.95:
  298. David Zeuthen (15):
  299. Bug 25367 — Also read local authority configuration data from /etc
  300. Fix logic error in pk-example-frobnicate
  301. Run the open_session part of the PAM stack in pkexec(1)
  302. Fix up last comment
  303. Bug 25594 – System logging
  304. Remove trailing whitespace from log messages
  305. Properly handle return value from getpwnam_r()
  306. Fix error message when no authentication agent is available
  307. Make pkexec(1) validate environment variables
  308. Make pkexec(1) use the syslogging facilities
  309. Save original cwd in pkexec(1) since it will change during the life-time
  310. Complain on stderr, not stdout
  311. Post-release version bump to 0.96
  312. Don't log authorization checks
  313. Update NEWS for release
  314. David Zeuthen,
  315. January 15, 2010
  316. --------------
  317. PolicyKit 0.95
  318. --------------
  319. This is PolicyKit 0.95. This is supposed to be the last release until 1.0.
  320. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  321. 1.0. Public API might change and certain parts of the code still needs
  322. some security review. Use at your own risk.
  323. Build requirements
  324. glib, gobject, gio >= 2.21.4
  325. eggdbus-1 >= 0.6
  326. gobject-introspection >= 0.6.2 (optional)
  327. pam
  328. Changes since PolicyKit 0.94:
  329. Alexander Sack (1):
  330. Bug 24566 – Properly _ref authority in singleton constructor
  331. Andreas Sandberg (1):
  332. Bug 24235 – polkit-agent-helper may call pam_end with a stale pam handle
  333. Bastien Nocera (1):
  334. Fix process start time when using polkit_unix_process_new_full()
  335. David Zeuthen (20):
  336. Post-release version bump to 0.95
  337. Use correct program name when complaining about not being setuid root
  338. Sort by action id in pkaction(1) output
  339. Bug 23867 – UnixProcess vs. SystemBusName aliasing
  340. Implement lockdown for the Local Authority implementation
  341. Remove POLKIT_USER from configuration summary
  342. Add missing comma so we're save both LANG and LANGUAGE, not only LANGLANGUAGE
  343. Pass --libtool to g-ir-scanner
  344. Clarify comment on where to find process start-time on Linux
  345. Add properties with information about the currently used authority
  346. Clarify when AllowUserInteraction should and shouldn't be used
  347. Add methods AddLockdownForAction() and RemoveLockdownForAction()
  348. Port lockdown from pklalockdown(1) to D-Bus methods
  349. Drop ununsed policykit actions
  350. Remove TODO about symbol visibility as this has been fixed for a while
  351. Clarify pklocalauthority(8) man page
  352. Properly validate all arguments passed via D-Bus
  353. Add Python example
  354. Fix make distcheck
  355. Update NEWS for release
  356. Matthias Clasen (1):
  357. Bug 24640 – Typos in pklocalauthority(8)
  358. Michael Biebl (8):
  359. Trim the list of exported symbols
  360. Use _polkit_agent_marshal prefix
  361. Make private symbols accessible to libpolkitagent and libpolkitbackend
  362. Make examples optional
  363. Enable silent rules
  364. Remove POLKIT_USER option
  365. Don't include Polkit-1.0.gir in the dist tarball
  366. Bug 24176 – Current git master fails to build, GLIB_LDADD -> GLIB_LIBS
  367. Samuel Thibault (1):
  368. Bug 24495 – Fails to build on platforms without PATH_MAX (like hurd)
  369. David Zeuthen,
  370. November 13, 2009
  371. --------------
  372. PolicyKit 0.94
  373. --------------
  374. This is PolicyKit 0.94.
  375. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  376. 1.0. Public API might change and certain parts of the code still needs
  377. some security review. Use at your own risk.
  378. Build requirements
  379. glib, gobject, gio >= 2.21.4
  380. eggdbus-1 >= 0.5
  381. gobject-introspection >= 0.6.2 (optional)
  382. pam
  383. Changes since PolicyKit 0.93:
  384. David Zeuthen (13):
  385. Post-release version bump to 0.94
  386. Require correct versions of glib and eggdbus
  387. Ignore .pkla files starting with dot and don't segfault on error path
  388. Allow unprivileged callers to check authorizations
  389. Don't spawn man(1) from a setuid program
  390. Add polkit.retains_authorization_after_challenge to authz result
  391. Ensure all fds except stdin/stdout/stderr are closed after exec(2)
  392. Be more careful when determining process start time
  393. Pass the right struct offset for the ::changed class signal handler
  394. Don't set the GError if the process doesn't exist
  395. Remove temporary authorization when the subject it applies to vanishes
  396. Generate GI gir and typelibs for libpolkit-gobject-1
  397. Update NEWS for release
  398. Joe Marcus Clarke (1):
  399. Bug 23093 – FreeBSD portability fixes
  400. David Zeuthen,
  401. August 12, 2009
  402. --------------
  403. PolicyKit 0.93
  404. --------------
  405. This is PolicyKit 0.93.
  406. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  407. 1.0. Public API might change and certain parts of the code still needs
  408. some security review. Use at your own risk.
  409. Build requirements
  410. glib, gobject, gio >= 2.21.4
  411. eggdbus-1 >= 0.5
  412. pam
  413. Changes since PolicyKit 0.92:
  414. David Zeuthen (16):
  415. Post-release version bump to 0.93
  416. GIO modules need to be prefix with lib
  417. Cancel an authentication if the unique name for the subject vanishes
  418. Plug a couple of memory leaks
  419. Move local authority management to a separate library
  420. Rip out polkit-local and refactor local authority to only use tmp authz
  421. Move authentication agent bits to separate authority subclass
  422. Also pass the identity of the subject we are checking for
  423. Actually make the local authority look up authorization files
  424. In .pkla files, use Result{Any,Inactive,Active} instead of just Result
  425. Rename some man pages and the daemon binary
  426. Add docs detailing how the Local Authority works
  427. Add support for querying and revoking temporary authorizations
  428. Fix make distcheck
  429. Update TODO
  430. Update NEWS for release
  431. Yanko Kaneti (2):
  432. Use unique ids for sections to prevent them being autogenerated
  433. More unique ids to get the docs build fully predictable
  434. David Zeuthen,
  435. July 20th, 2009
  436. --------------
  437. PolicyKit 0.92
  438. --------------
  439. This is PolicyKit 0.92.
  440. WARNING WARNING WARNING: This is a prerelease on the road to PolicyKit
  441. 1.0. Public API might change and certain parts of the code still needs
  442. some security review. Use at your own risk.
  443. Build requirements
  444. glib, gobject, gio >= 2.14
  445. eggdbus-1 >= 0.4
  446. pam
  447. Changes since PolicyKit 0.91:
  448. David Zeuthen (36):
  449. post-release version bump to 0.92
  450. install gtkdoc HTML in the proper location
  451. Fix D-Bus policy to work with non-permissive D-Bus
  452. Only allow privileged apps to check authz and add ActionLookup interface
  453. Change the PolkitAuthorizationResult enumeration into an object
  454. Port examples and command-line tools to new API
  455. Move docs to proper location
  456. Add a pkexec(1) command
  457. Mention /usr/bin/pkexec in the configure blurb
  458. Fix a bug where details were not shown for normal pkexec usage
  459. Use an object, not a GHashTable when passing details around
  460. Forgot to add source for PolkitDetails
  461. Change the defaults for .run-frobnicate to auth_self_keep
  462. Require eggdbus-1 >= 0.4
  463. Only free hash table if it's not NULL
  464. Avoid returning an error if no authentication agent is available
  465. Clarify docs for is_challenge member of the AuthorizationResult struct
  466. Add pkcheck(1) command to check for authorizations
  467. nullbackend: Catch up with latest API changes
  468. Return the icon name instead of a GIcon in PolkitActionDescription
  469. Add pkaction(1) and nuke polkit-1(1) commands
  470. Update SEE ALSO sections in man pages
  471. Add a man page for polkit-1(8)
  472. First cut at some high-level docs
  473. Improve pkexec(1) man page by adding screenshots of authentication dialogs
  474. Add some more API docs
  475. Add a "PolicyKit Overview" section to the docs
  476. Consolidate all gtk-doc stuff in docs/polkit
  477. Expand on the D-Bus docs
  478. Use .../extensions instead of ../backends for loading extensions
  479. Minor doc fixes
  480. Move the doc chapters around a bit
  481. Change GNOME to freedesktop.org in the docs
  482. Fix make distcheck
  483. Update NEWS
  484. Also dist polkitd-1.xml
  485. Richard Hughes (2):
  486. fix up gtk-doc API markup for a couple of functions
  487. add a draft version of the porting guide -- WIP
  488. David Zeuthen,
  489. June 8, 2009