开源软件构建与测试

_service:tar_scm:polkit.spec Changed

@@ -1,22 +1,34 @@
 Name:             polkit
-Version:          123
+Version:          125
 Release:          1
 Summary:          Define and Handle authorizations tool
-License:          LGPLv2+
-URL:              http://www.freedesktop.org/wiki/Software/polkit
-Source0:          https://gitlab.freedesktop.org/polkit/polkit/-/archive/%{version}/%{name}-%{version}.tar.gz
+License:          LGPL-2.0-or-later
+URL:              https://polkit.pages.freedesktop.org/polkit/
+Source0:          https://github.com/polkit-org/polkit/archive/refs/tags/%{version}.tar.gz
 
 Patch0:           modify-admin-authorization-from-wheel-group-to-root.patch
 
-BuildRequires:    gcc-c++ glib2-devel >= 2.30.0 expat-devel pam-devel gtk-doc gettext-devel
-BuildRequires:    gobject-introspection-devel systemd systemd-devel dbus-devel
-BuildRequires:    pkgconfig(duktape) >= 2.2.0 meson git
+BuildRequires: meson >= 0.63.0
+BuildRequires: pkgconfig(dbus-1)
+BuildRequires: pkgconfig(duktape) >= 2.2.0
+BuildRequires: pkgconfig(expat)
+BuildRequires: pkgconfig(gio-2.0) >= 2.30.0
+BuildRequires: pkgconfig(gio-unix-2.0) >= 2.30.0
+BuildRequires: pkgconfig(glib-2.0) >= 2.30.0
+BuildRequires: pkgconfig(gobject-2.0) >= 2.30.0
+BuildRequires: pkgconfig(gobject-introspection-1.0) >= 0.6.2
+BuildRequires: pkgconfig(libsystemd)
+BuildRequires: pkgconfig(systemd)
+BuildRequires: pam-devel
+BuildRequires: gettext
+BuildRequires: gtk-doc
+
 Requires:         dbus polkit-pkla-compat
 Requires:         %{name}-libs%{?_isa} = %{version}-%{release}
 Requires(pre):    shadow-utils
-Requires(post):   /sbin/ldconfig, systemd
+Requires(post):   systemd
 Requires(preun):  systemd
-Requires(postun): /sbin/ldconfig, systemd
+Requires(postun): systemd
 
 Obsoletes:        PolicyKit <= 0.10 polkit-desktop-policy < 0.103 polkit-js-engine < 0.120-5 polkit < 0.113-3
 Provides:         PolicyKit = 0.11 polkit-desktop-policy = 0.103 polkit-js-engine = %{version}-%{release}
@@ -36,7 +48,6 @@
 Summary:          Development files for %{name}
 Requires:         %{name}-libs%{?_isa} = %{version}-%{release}
 Requires:         %{name}-help = %{version}-%{release}
-Requires:         glib2-devel
 Obsoletes:        PolicyKit-devel <= 0.10 PolicyKit-docs <= 0.10
 Provides:         PolicyKit-devel = 0.11 PolicyKit-docs = 0.11 polkit-docs
 
@@ -52,7 +63,8 @@
 %meson -D gtk_doc=true \
        -D introspection=true \
        -D man=true \
-       -D session_tracking=libsystemd-login \
+       -D session_tracking=logind \
+       -D os_type='redhat' \
        -D examples=false \
        -D tests=false \
        -D js_engine=duktape
@@ -62,8 +74,6 @@
 %install
 %meson_install
 
-%delete_la
-
 %find_lang polkit-1
 
 %pre
@@ -90,20 +100,21 @@
 %attr(0700,polkitd,root) %dir %{_datadir}/polkit-1/rules.d
 %{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy
 %{_datadir}/polkit-1/policyconfig-1.dtd
-%dir %{_sysconfdir}/polkit-1
 %{_datadir}/polkit-1/rules.d/50-default.rules
 %attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d
-%{_sysconfdir}/pam.d/polkit-1
 %{_bindir}/pkaction
 %{_bindir}/pkcheck
 %{_bindir}/pkttyagent
 %dir %{_prefix}/lib/polkit-1
 %{_prefix}/lib/polkit-1/polkitd
+%dir %{_prefix}/lib/pam.d
+%{_prefix}/lib/pam.d/polkit-1
+%dir %{_prefix}/lib/sysusers.d
+%{_prefix}/lib/sysusers.d/polkit.conf
+%{_tmpfilesdir}/polkit-tmpfiles.conf
 %attr(4755,root,root) %{_bindir}/pkexec
 %attr(4755,root,root) %{_prefix}/lib/polkit-1/polkit-agent-helper-1
 
-%post libs -p /sbin/ldconfig
-%postun libs -p /sbin/ldconfig
 %files libs
 %{_libdir}/lib*.so.*
 %{_libdir}/girepository-1.0/*.typelib
@@ -115,13 +126,19 @@
 %{_datadir}/gir-1.0/*.gir
 %{_datadir}/gettext/its/polkit.its
 %{_datadir}/gettext/its/polkit.loc
-%{_datadir}/gtk-doc
+%{_datadir}/gtk-doc/*
 
 %files help
-%{_datadir}/man/man1/*
-%{_datadir}/man/man8/*
+%{_mandir}/man?/*
 
 %changelog
+* Wed Aug 21 2024 Funda Wang <fundawang@yeah.net> - 125-1
+- update to 125
+
+* Thu Aug 15 2024 dillon chen <dillon.chen@gmail.com> - 124-1
+- update to 124
+  - duktape:prevent wrongful termination of runway thread
+
 * Tue Jan 30 2024 wangyu <wangqingsan@huawei.com> - 123-1
 - update to 123
   - duktape:prevent wrongful termination of runway thread

_service:tar_scm:125.tar.gz/.editorconfig Added

_service:tar_scm:125.tar.gz/.github Added

_service:tar_scm:125.tar.gz/.github/ISSUE_TEMPLATE Added

_service:tar_scm:125.tar.gz/.github/ISSUE_TEMPLATE/bug_report.md Added

_service:tar_scm:125.tar.gz/.github/ISSUE_TEMPLATE/feature_request.md Added

_service:tar_scm:125.tar.gz/.github/pull_request_template.md Changed

_service:tar_scm:125.tar.gz/.github/workflows Added

_service:tar_scm:125.tar.gz/.github/workflows/ci.sh Added

@@ -0,0 +1,87 @@
+#!/bin/bash
+set -eux
+set -o pipefail
+
+# TODO
+#   - enable --werror
+#       - currently there's a lot of warnings which need to be taken care of first
+#   - re-enable test-polkitbackendjsauthority
+#       - mocklibc overrides LD_PRELOAD, causing ASan to report false positives
+#         (with asan_verify_no_link=0)
+#   - re-enable unit tests built with ASan + sanitizers
+#       - currently polkit fails to build with clang >= 17 completely, and
+#         with older clang it needs to be built with -shared-libasan, which
+#         requires another set of tweaks to the environment
+
+PHASE="${1:?}"
+JS_ENGINE="${2:?}"
+COMMON_BUILD_OPTS=(
+    -Dauthfw=pam
+    -Dexamples=true
+    -Dgtk_doc=true
+    -Dintrospection=true
+    -Dsession_tracking=logind
+    -Dtests=true
+    -Djs_engine="$JS_ENGINE"
+)
+
+if  "$PHASE" =~ ^CLANG_ ; then
+    export CC=clang
+    export CXX=clang++
+fi
+
+case "$PHASE" in
+    BUILD_GCC|BUILD_CLANG)
+        # Build test with various levels of optimization and other flags affecting the build
+
+        BUILD_TEST_FLAGS=(
+            --optimization=0
+            --optimization=3
+            --optimization=s
+            -Db_ndebug=true
+        )
+
+        for opt in "${BUILD_TEST_FLAGS@}"; do
+            meson setup build \
+                -Dman=true \
+                -Dcpp_args="-D_FORTIFY_SOURCE=2" \
+                "${COMMON_BUILD_OPTS@}" \
+                "$opt"
+            meson compile -C build -v
+            rm -rf build
+         done
+         ;;
+
+    GCC|CLANG)
+        # Build + unit tests
+
+        meson setup build \
+            -Dman=true \
+            -Dcpp_args="-D_FORTIFY_SOURCE=2" \
+            "${COMMON_BUILD_OPTS@}"
+
+        meson compile -C build -v
+        meson test -C build --print-errorlogs
+        DESTDIR="$PWD/install-test" meson install -C build
+        ;;
+
+    GCC_ASAN_UBSAN|CLANG_ASAN_UBSAN)
+        # Build + unit tests with ASan and UBSan
+
+        meson setup build \
+            -Dman=false \
+            -Db_sanitize=address,undefined \
+            --optimization=1 \
+            -Db_lundef=false \
+            "${COMMON_BUILD_OPTS@}"
+
+        export ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1
+        export UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1
+
+        meson compile -C build -v
+        meson test -C build --print-errorlogs
+        ;;
+    *)
+        echo >&2 "Unknown phase '$PHASE'"
+        exit 1
+esac

_service:tar_scm:125.tar.gz/.github/workflows/ci.yml Added

@@ -0,0 +1,40 @@
+---
+# vi: ts=2 sw=2 et:
+
+name: Build & test
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: registry.fedoraproject.org/fedora:latest
+      options: "--privileged"
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.phase }}-${{ matrix.js_engine }}
+      cancel-in-progress: true
+    strategy:
+      fail-fast: false
+      matrix:
+        phase: BUILD_GCC, GCC, GCC_ASAN_UBSAN, BUILD_CLANG, CLANG
+        js_engine: mozjs, duktape
+    steps:
+      - name: Repository checkout
+        uses: actions/checkout@v4
+
+      - name: Install build & test dependencies
+        run: |
+          sudo dnf install -y dnf-plugins-core python3-dbusmock clang compiler-rt libasan libubsan mozjs115-devel
+          sudo dnf builddep -y polkit
+
+      - name: Build & test
+        run: sudo --preserve-env=GITHUB_ACTIONS,CI .github/workflows/ci.sh ${{ matrix.phase }} ${{ matrix.js_engine }}

_service:tar_scm:125.tar.gz/.github/workflows/codeql.yml Added

@@ -0,0 +1,52 @@
+---
+# vi: ts=2 sw=2 et:
+name: "CodeQL"
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-24.04
+    permissions:
+      security-events: write
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.language }}
+      cancel-in-progress: true
+    strategy:
+      fail-fast: false
+      matrix:
+        language: 'c-cpp', 'javascript-typescript', 'python'
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        queries: +security-extended,security-and-quality
+
+    - name: Install dependencies
+      if: ${{ matrix.language == 'c-cpp' }}
+      run: |
+        sudo sed -i 's/^Types: deb/Types: deb deb-src/g' /etc/apt/sources.list.d/*.sources
+        sudo apt update
+        sudo apt build-dep -y policykit-1
+        # polkit in Ubuntu Jammy (ATTOW) doesn't have the latest build dependencies yet
+        sudo apt install -y duktape-dev meson
+
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v3
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"

_service:tar_scm:125.tar.gz/.packit Added

_service:tar_scm:polkit-123.tar.gz/.packit.yaml -> _service:tar_scm:125.tar.gz/.packit.yaml Changed

@@ -1,29 +1,32 @@
 # See the documentation for more information:
 # https://packit.dev/docs/configuration/
 
-specfile_path: polkit.spec
+specfile_path: .packit/polkit.spec
 
 # add or remove files that should be synced
 files_to_sync:
-    - polkit.spec
-    - .packit.yaml
+    - .packit/polkit.spec
+    - .packit/polkit.sysusers
+    - packit.yaml
 
 # name in upstream package repository or registry (e.g. in PyPI)
 upstream_package_name: polkit
 # downstream (Fedora) RPM package name
 downstream_package_name: polkit
 
-srpm_build_deps:
-  - wget
-  - sed
-
-actions:
-  post-upstream-clone:
-    - "wget https://src.fedoraproject.org/rpms/polkit/raw/rawhide/f/polkit.spec -O polkit.spec"
-    - "sed -ri '/^Patch0-9+/d' polkit.spec"
-
 jobs:
 - job: copr_build
   trigger: pull_request
   targets:
-  - fedora-all
+  - fedora-all-aarch64
+  - fedora-all-ppc64le
+  - fedora-all-s390x
+  - fedora-all-x86_64
+
+- job: tests
+  trigger: pull_request
+  fmf_path: test/integration/
+  tmt_plan: upstream-ci
+  targets:
+  - fedora-all-aarch64
+  - fedora-all-x86_64

_service:tar_scm:125.tar.gz/.packit/polkit.spec Added

@@ -0,0 +1,689 @@
+# Only enable if using patches that touches configure.ac,
+# Makefile.am or other build system related files
+#
+Summary: An authorization framework
+Name: polkit
+Version: 125
+Release: 1%{?dist}
+License: LGPL-2.0-or-later
+URL: https://github.com/polkit-org/polkit
+Source0: https://github.com/polkit-org/polkit/archive/refs/tags/%{version}.tar.gz
+Source1: polkit.sysusers
+
+
+BuildRequires: gcc-c++
+BuildRequires: glib2-devel >= 2.30.0
+BuildRequires: expat-devel
+BuildRequires: pam-devel
+BuildRequires: gtk-doc
+BuildRequires: gettext-devel
+BuildRequires: gobject-introspection-devel
+BuildRequires: systemd, systemd-devel, systemd-rpm-macros
+BuildRequires: dbus-devel
+BuildRequires: pkgconfig(duktape)
+BuildRequires: meson
+BuildRequires: git
+BuildRequires: python3-dbus
+BuildRequires: python3-dbusmock
+
+Requires: dbus, polkit-pkla-compat
+Requires: %{name}-libs%{?_isa} = %{version}-%{release}
+%{?systemd_requires}
+%{?sysusers_requires_compat}
+
+Obsoletes: PolicyKit <= 0.10
+Provides: PolicyKit = 0.11
+
+# polkit saw some API/ABI changes from 0.96 to 0.97 so require a
+# sufficiently new polkit-gnome package
+Conflicts: polkit-gnome < 0.97
+
+Obsoletes: polkit-desktop-policy < 0.103
+Provides: polkit-desktop-policy = 0.103
+
+Obsoletes: polkit-js-engine < 0.120-5
+Provides: polkit-js-engine = %{version}-%{release}
+
+# when -libs was split out, handle multilib upgrade path -- rex
+Obsoletes: polkit < 0.113-3
+
+%description
+polkit is a toolkit for defining and handling authorizations.  It is
+used for allowing unprivileged processes to speak to privileged
+processes.
+
+%package devel
+Summary: Development files for polkit
+Requires: %{name}-libs%{?_isa} = %{version}-%{release}
+Requires: %name-docs = %{version}-%{release}
+Requires: glib2-devel
+Obsoletes: PolicyKit-devel <= 0.10
+Provides: PolicyKit-devel = 0.11
+
+%description devel
+Development files for polkit.
+
+%package docs
+Summary: Development documentation for polkit
+Requires: %name-devel = %{version}-%{release}
+Obsoletes: PolicyKit-docs <= 0.10
+Provides: PolicyKit-docs = 0.11
+BuildArch: noarch
+
+%description docs
+Development documentation for polkit.
+
+%package libs
+Summary: Libraries for polkit
+
+%description libs
+Libraries files for polkit.
+
+
+%prep
+%autosetup -S git
+
+%build
+%meson -D authfw=pam \
+       -D examples=false \
+       -D gtk_doc=true \
+       -D introspection=true \
+       -D man=true \
+       -D session_tracking=logind \
+       -D tests=true
+
+%meson_build
+%meson_test
+
+%install
+%meson_install
+install -Dpm 0644 %{SOURCE1} %{buildroot}%{_sysusersdir}/polkit.conf
+
+rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
+
+%find_lang polkit-1
+
+%pre
+%sysusers_create_compat %{SOURCE1}
+
+%post
+# The implied (systemctl preset) will fail and complain, but the macro hides
+# and ignores the fact.  This is in fact what we want, polkit.service does not
+# have an Install section and it is always started on demand.
+%systemd_post polkit.service
+
+%preun
+%systemd_preun polkit.service
+
+%postun
+%systemd_postun_with_restart polkit.service
+
+%files -f polkit-1.lang
+%doc COPYING NEWS.md README.md
+%{_datadir}/man/man1/*
+%{_datadir}/man/man8/*
+%{_datadir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
+%{_datadir}/dbus-1/system-services/*
+%{_unitdir}/polkit.service
+%dir %{_datadir}/polkit-1/
+%dir %{_datadir}/polkit-1/actions
+%attr(0750,root,polkitd) %dir %{_datadir}/polkit-1/rules.d
+%{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy
+%{_datadir}/polkit-1/policyconfig-1.dtd
+%dir %{_sysconfdir}/polkit-1
+%{_datadir}/polkit-1/rules.d/50-default.rules
+%attr(0750,root,polkitd) %dir %{_sysconfdir}/polkit-1/rules.d
+%{_sysusersdir}/polkit.conf
+%{_prefix}/lib/pam.d/polkit-1
+%{_bindir}/pkaction
+%{_bindir}/pkcheck
+%{_bindir}/pkttyagent
+%dir %{_prefix}/lib/polkit-1
+%{_prefix}/lib/polkit-1/polkitd
+%{_tmpfilesdir}/polkit-tmpfiles.conf
+
+# see upstream docs for why these permissions are necessary
+%attr(4755,root,root) %{_bindir}/pkexec
+%attr(4755,root,root) %{_prefix}/lib/polkit-1/polkit-agent-helper-1
+
+%files devel
+%{_libdir}/lib*.so
+%{_libdir}/pkgconfig/*.pc
+%{_datadir}/gir-1.0/*.gir
+%{_includedir}/*
+%{_datadir}/gettext/its/polkit.its
+%{_datadir}/gettext/its/polkit.loc
+
+%files docs
+%{_datadir}/gtk-doc
+
+%ldconfig_scriptlets libs
+
+%files libs
+%{_libdir}/lib*.so.*
+%{_libdir}/girepository-1.0/*.typelib
+
+%changelog
+* Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 124-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Mon Jan 22 2024 Jan Rybar <jrybar@redhat.com> - 124-1
+- rebase to polkit-124
+
+* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 123-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Wed Dec 06 2023 Jan Rybar <jrybar@redhat.com> - 123-4
+- align sysusers implementation with Fedora guidelines, fixes upstream CI
+
+* Mon Nov 20 2023 Jan Rybar <jrybar@redhat.com> - 123-3
+- backport of removal of IPAddressDeny sandboxing option
+- Resolves: bz#2248838
+
+* Thu Sep 21 2023 Christian Glombek <cglombek@redhat.com> - 123-2
+- Provide a sysusers.d file to get user() and group() provides
+  (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).
+
+* Tue Aug 01 2023 Jan Rybar <jrybar@redhat.com> - 123-1
+- Rebase to version 123
+
+* Fri Jul 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 122-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
+
+* Tue Apr 11 2023 Lukáš Zaoral <lzaoral@redhat.com> - 122-6
+- migrate to SPDX license format
+
+* Thu Mar 30 2023 Jan Rybar <jrybar@redhat.com> - 122-5
+- config file permission change to increase security of polkitd
+- Resolves: bz#2182784
+

_service:tar_scm:125.tar.gz/.packit/polkit.sysusers Added

_service:tar_scm:polkit-123.tar.gz/NEWS.md -> _service:tar_scm:125.tar.gz/NEWS.md Changed

@@ -1,3 +1,90 @@
+## polkit 125
+
+### Highlights:
+- introduction of CodeQL and a new integration test suite (Frantisek Sumsal)
+- dropped mocklibc (Frantisek Sumsal)
+- syslog-style log-levels introduction (Jan Rybar)
+- LogControl integration (Luca Boccassi)
+- pkexec: "No session for cookie" finally fixed (huxiaodong)
+- resources optimizations: only instances affected by sessions-change recalculate authorizations (Jan Rybar, thanks to Michal Sekletar and Milan Crha)
+- meson tweaks (Alyssa Ross, Luca Boccassi, Michael Biebl, Michael Olbrich)
+- build warnings cleanup (peelz)
+- Packit service configuration for the new upstream platform (Vincent Mihalkovic)
+- systemd-tmpfiles.d integration (Vincent Mihalkovic)
+- other fixes and changes (Gleb Popov, heather7283, Tianyu Chen, Tobias Stoeckmann)
+- internationalization: Slovenian (filmsi), Hindi (Scrambled777)
+
+### Build requirements
+- glib, gobject, gio >= 2.32
+- mozjs-115 OR duktape
+- gobject-introspection >= 0.6.2 (optional)
+- pam (optional)
+- ConsoleKit OR systemd-logind OR elogind
+- gettext
+- meson
+
+### People who made this version possible:
+Alyssa Ross
+filmsi
+Frantisek Sumsal
+Gleb Popov
+heather7283
+huxiaodong
+Jan Rybar
+Luca Boccassi
+Michael Biebl
+Michael Olbrich
+peelz
+Scrambled777
+Tianyu Chen
+Tobias Stoeckmann
+Vincent Mihalkovic
+
+**Many thanks to the people involved, the contributors and enthusiasts!**
+
+The polkit team & polkit community  
+Aug 8, 2024
+
+## polkit 124
+
+### Highlights:
+- PIDFDs are used if available to track processes
+- pidfd parameter available for CheckAuthorization()
+- systemd-sysuser enabled for polkit
+
+### Build requirements
+- glib, gobject, gio >= 2.32
+- mozjs-115 OR duktape
+- gobject-introspection >= 0.6.2 (optional)
+- pam (optional)
+- ConsoleKit OR systemd
+- gettext
+- meson
+
+### Changes since polkit 123:
+
+* Luca Boccassi
+    * PIDFD implementation and fixes/extensions around it
+    * new systemd_unit and no_new_privileges subject attributes 
+* Ray Strode, Sam James
+    * general and/or buildsystem fixes
+* Vincent Mihalkovic
+    * uninitialized pointer warning fix
+* Xi Ruoyao
+    * mozjs 115 dependency upgrade and fixes
+* Jan Rybar
+    * general fixes
+* Zbigniew Jędrzejewski-Szmek
+    * systemd-sysuser implementation
+* Aleksandr Melman, Anders Jonsson, AsciiWolf, Christian K, NorwayFun, Sabri Unal
+    * localization
+
+
+**Many thanks to the people involved, the contributors and enthusiasts!**
+
+The polkit team & polkit community  
+Jan 17, 2024
+
 ## polkit 123
 
 ### Highlights:

_service:tar_scm:polkit-123.tar.gz/README.md -> _service:tar_scm:125.tar.gz/README.md Changed

@@ -9,26 +9,23 @@
 DOCUMENTATION
 =============
 
-Latest documentation, reference manual and API description of polkit can be found  
-on project's Gitlab Pages  
- https://polkit.pages.freedesktop.org/polkit
+Latest documentation, reference manual and API description of polkit can be still found  
+on project's previous instance of Gitlab Pages  
+https://polkit.pages.freedesktop.org/polkit
 
 
-Old reference can be found at  
+Older reference can be found at  
  https://www.freedesktop.org/software/polkit/docs/latest/
 
 
 RELEASES
 ========
 
-Latest releases are available at polkit's Gitlab Releases page:  
- https://gitlab.freedesktop.org/polkit/polkit/-/releases
-
+Latest releases are available at the Release page(https://github.com/polkit-org/polkit/releases).
 
 Older releases are still available as tarballs at  
  https://www.freedesktop.org/software/polkit/releases/
 
-
 To verify the authenticity of the compressed tarball, use this command
 
 ``` bash
@@ -45,9 +42,8 @@
 BUGS and DEVELOPMENT
 ====================
 
-Please report non-security bugs via the polkit's freedesktop.org GitLab at
-
- https://gitlab.freedesktop.org/polkit/polkit/issues
+Please report non-security bugs via the polkit's GitHub issues at
+https://github.com/polkit-org/polkit/issues
 
 The other way, in case of **non**-security issues, is to contact developers via official polkit's FreeDesktop.org mailing list at
 
@@ -57,9 +53,8 @@
 ===============
 
 Please report any security issues not yet known to public
-by creating new issue and checking the ***This issue is confidential*** checkbox.
-
- https://gitlab.freedesktop.org/polkit/polkit/issues
+by sending mail to polkit-security@redhat.com.  
+Thank you.
 
 
 BUILD INSTRUCTIONS
@@ -78,8 +73,6 @@
 
 I WANT TO CONTRIBUTE
 ====================
-Your merge requests and patch suggestions are welcome! If you want to contribute, a merge request on this Gitlab instance is a preferred way, yet not the only one. Please consult other options with this upsteam's maintainers.
-
-Should you already have a freedesktop.org Gitlab account, please file your merge request. In this case, please **don't force-push any further changes** into the merge request and add a new commit into the MR instead.
+Your pull requests and patch suggestions are welcome! If you want to contribute, a pull request on this GitHub project is a preferred way, yet not the only one. Please consult other options with this upsteam's maintainers.
 
 Thank you in advance.

_service:tar_scm:polkit-123.tar.gz/data/meson.build -> _service:tar_scm:125.tar.gz/data/meson.build Changed

@@ -1,4 +1,8 @@
-service_conf = {'libprivdir': pk_prefix / pk_libprivdir, 'polkitd_user': polkitd_user}
+service_conf = {
+  'libprivdir': pk_prefix / pk_libprivdir,
+  'polkitd_user': polkitd_user,
+  'polkitd_uid': polkitd_uid,
+}
 
 configure_file(
   input: 'org.freedesktop.PolicyKit1.service.in',
@@ -26,17 +30,28 @@
   )
 endif
 
-if session_tracking == 'libsystemd-login'
-  configure_file(
-    input: 'polkit.service.in',
-    output: '@BASENAME@',
-    configuration: service_conf,
-    install: true,
-    install_dir: systemd_systemdsystemunitdir,
-  )
-endif
+configure_file(
+  input: 'polkit.service.in',
+  output: '@BASENAME@',
+  configuration: service_conf,
+  install: true,
+  install_dir: systemdsystemunitdir,
+)
+
+configure_file(
+  input: 'polkit.conf.in',
+  output: '@BASENAME@',
+  configuration: service_conf,
+  install: true,
+  install_dir: sysusers_dir,
+)
 
 install_data(
   'policyconfig-1.dtd',
   install_dir: pk_datadir / 'polkit-1'
 )
+
+install_data(
+  'polkit-tmpfiles.conf',
+  install_dir: tmpfiles_dir
+)

_service:tar_scm:polkit-123.tar.gz/data/org.freedesktop.PolicyKit1.Authority.xml -> _service:tar_scm:125.tar.gz/data/org.freedesktop.PolicyKit1.Authority.xml Changed

@@ -12,7 +12,7 @@
     <annotation name="org.gtk.EggDBus.DeclareStruct" value="Subject">
       <annotation name="org.gtk.EggDBus.DocString.Summary" value="Subjects"/>
       <annotation name="org.gtk.EggDBus.DocString" value="<para>This struct describes subjects such as UNIX processes. It is typically used to check if a given process is authorized for an action.</para><para>The following kinds of subjects are known:</para>
-                  <formalpara><title>Unix Process</title><para><literal>subject_kind</literal> should be set to <literal>unix-process</literal> with keys <literal>pid</literal> (of type <literal>uint32</literal>) and <literal>start-time</literal> (of type <literal>uint64</literal>).</para></formalpara>
+                  <formalpara><title>Unix Process</title><para><literal>subject_kind</literal> should be set to <literal>unix-process</literal> with keys <literal>pidfd</literal> (of type <literal>int32</literal>) and <literal>uid</literal> (of type <literal>int32</literal>) (if the operating system supports ProcessID File Descriptors), or alternatively with keys <literal>pid</literal> (of type <literal>uint32</literal>), <literal>uid</literal> (of type <literal>int32</literal>) and <literal>start-time</literal> (of type <literal>uint64</literal>).</para></formalpara>
                   <formalpara><title>Unix Session</title><para><literal>subject_kind</literal> should be set to <literal>unix-session</literal> with the key <literal>session-id</literal> (of type <literal>string</literal>).</para></formalpara>
                   <formalpara><title>System Bus Name</title><para><literal>subject_kind</literal> should be set to <literal>system-bus-name</literal> with the key <literal>name</literal> (of type <literal>string</literal>).</para></formalpara>"/>
 
@@ -111,6 +111,9 @@
       <annotation name="org.gtk.EggDBus.Flags.Member" value="AllowUserInteraction">
         <annotation name="org.gtk.EggDBus.DocString" value="If the #Subject can obtain the authorization through authentication, and an authentication agent is available, then attempt to do so. Note, this means that the org.freedesktop.PolicyKit1.Authority.CheckAuthorization() method will block while the user is being asked to authenticate."/>
       </annotation>
+      <annotation name="org.gtk.EggDBus.Flags.Member" value="AlwaysCheck">
+        <annotation name="org.gtk.EggDBus.DocString" value="Check access against policy even if the #Subject is the root user."/>
+      </annotation>
     </annotation>
 
     
@@ -431,7 +434,7 @@
     
 
     <signal name="Changed">
-      <annotation name="org.gtk.EggDBus.DocString" value="This signal is emitted when actions and/or authorizations change"/>
+      <annotation name="org.gtk.EggDBus.DocString" value="This signal is emitted when actions, sessions and/or authorizations change, carrying information about the change."/>
     </signal>
 
   </interface>

_service:tar_scm:polkit-123.tar.gz/data/polkit-gobject-1.pc.in -> _service:tar_scm:125.tar.gz/data/polkit-gobject-1.pc.in Changed

_service:tar_scm:125.tar.gz/data/polkit-tmpfiles.conf Added

_service:tar_scm:125.tar.gz/data/polkit.conf.in Added

_service:tar_scm:polkit-123.tar.gz/data/polkit.service.in -> _service:tar_scm:125.tar.gz/data/polkit.service.in Changed

_service:tar_scm:polkit-123.tar.gz/docs/man/pkexec.xml -> _service:tar_scm:125.tar.gz/docs/man/pkexec.xml Changed

_service:tar_scm:polkit-123.tar.gz/docs/man/polkit.xml -> _service:tar_scm:125.tar.gz/docs/man/polkit.xml Changed

@@ -798,6 +798,19 @@
         </varlistentry>
 
         <varlistentry>
+          <term><type>string</type> system_unit</term>
+          <listitem>
+            <para>
+              The systemd unit that the subject's process is part of (if any). Note that
+              this can only match on system units, as user units can be created with any
+              name without privileges (unlike system units which require root to create).
+              A process running in a user unit will return the user session unit in this
+              attribute (e.g.: <literal>user-1000.service</literal>).
+            </para>
+          </listitem>
+        </varlistentry>
+
+        <varlistentry>
           <term><type>boolean</type> local</term>
           <listitem>
             <para>
@@ -807,6 +820,19 @@
         </varlistentry>
 
         <varlistentry>
+          <term><type>boolean</type> no_new_privileges</term>
+          <listitem>
+            <para>
+              Set only if <parameter>system_unit</parameter> is not empty, and set to
+              <constant>true</constant> only if the referenced systemd service unit
+              has the <parameter>NoNewPrivileges=</parameter> setting enabled. This
+              ensures that the process cannot gain any new privileges via executing
+              setuid binaries.
+            </para>
+          </listitem>
+        </varlistentry>
+
+        <varlistentry>
           <term><type>boolean</type> active</term>
           <listitem>
             <para>
@@ -946,6 +972,21 @@
     }
 });
 ></programlisting>
+
+      <para>
+        Allow all processes running as part of the <literal>admin.service</literal>
+        systemd system unit to perform user administration, as long as they cannot
+        gain new privileges:
+      </para>
+      <programlisting><!CDATA
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.accounts.user-administration" &&
+        subject.system_unit == "admin.service" &&
+        subject.no_new_privileges) {
+        return polkit.Result.YES;
+    }
+});
+></programlisting>
     </refsect2>
   </refsect1>

_service:tar_scm:polkit-123.tar.gz/docs/polkit/docbook-interface-org.freedesktop.PolicyKit1.Authority.xml -> _service:tar_scm:125.tar.gz/docs/polkit/docbook-interface-org.freedesktop.PolicyKit1.Authority.xml Changed

@@ -78,7 +78,8 @@
           <programlisting>
 {
   None                 = 0x00000000,
-  AllowUserInteraction = 0x00000001
+  AllowUserInteraction = 0x00000001,
+  AlwaysCheck          = 0x00000002
 }
           </programlisting>
           <para>
@@ -101,6 +102,14 @@
       </para>
     </listitem>
   </varlistentry>
+  <varlistentry id="eggdbus-constant-CheckAuthorizationFlags.AlwaysCheck" role="constant">
+    <term><literal>AlwaysCheck</literal></term>
+    <listitem>
+      <para>
+Check access against policy even if the <link linkend="eggdbus-struct-Subject">Subject</link> is the root user.
+      </para>
+    </listitem>
+  </varlistentry>
           </variablelist>
         </para>
     </refsect2>
@@ -275,7 +284,7 @@
 }
           </programlisting>
           <para>
-<para>This struct describes subjects such as UNIX processes. It is typically used to check if a given process is authorized for an action.</para><para>The following kinds of subjects are known:</para>                   <formalpara><title>Unix Process</title><para><literal>subject_kind</literal> should be set to <literal>unix-process</literal> with keys <literal>pid</literal> (of type <literal>uint32</literal>) and <literal>start-time</literal> (of type <literal>uint64</literal>).</para></formalpara>                   <formalpara><title>Unix Session</title><para><literal>subject_kind</literal> should be set to <literal>unix-session</literal> with the key <literal>session-id</literal> (of type <literal>string</literal>).</para></formalpara>                   <formalpara><title>System Bus Name</title><para><literal>subject_kind</literal> should be set to <literal>system-bus-name</literal> with the key <literal>name</literal> (of type <literal>string</literal>).</para></formalpara>
+<para>This struct describes subjects such as UNIX processes. It is typically used to check if a given process is authorized for an action.</para><para>The following kinds of subjects are known:</para>                   <formalpara><title>Unix Process</title><para><literal>subject_kind</literal> should be set to <literal>unix-process</literal> with keys <literal>pidfd</literal> (of type <literal>int32</literal>) and <literal>uid</literal> (of type <literal>int32</literal>) (if the operating system supports ProcessID File Descriptors), or alternatively with keys <literal>pid</literal> (of type <literal>uint32</literal>), <literal>uid</literal> (of type <literal>int32</literal>) and <literal>start-time</literal> (of type <literal>uint64</literal>).</para></formalpara>                   <formalpara><title>Unix Session</title><para><literal>subject_kind</literal> should be set to <literal>unix-session</literal> with the key <literal>session-id</literal> (of type <literal>string</literal>).</para></formalpara>                   <formalpara><title>System Bus Name</title><para><literal>subject_kind</literal> should be set to <literal>system-bus-name</literal> with the key <literal>name</literal> (of type <literal>string</literal>).</para></formalpara>
           </para>
           <variablelist role="struct">
   <varlistentry>

_service:tar_scm:polkit-123.tar.gz/meson.build -> _service:tar_scm:125.tar.gz/meson.build Changed

@@ -1,13 +1,14 @@
 project(
   'polkit', 'c',
-  version: '123',
+  version: '125',
   license: 'LGPL2+',
   default_options: 
     'buildtype=debugoptimized',
     'prefix=/usr',
+    'c_std=c99',
     'cpp_std=c++17',
   ,
-  meson_version: '>= 0.50.0',
+  meson_version: '>= 0.63.0',
 )
 
 pk_version = meson.project_version()
@@ -64,7 +65,7 @@
 
 cc = meson.get_compiler('c')
 
-config_h = configuration_data()
+config_data = configuration_data()
 
 # defines
 set_defines = 
@@ -79,11 +80,11 @@
 
 
 foreach define: set_defines
-  config_h.set_quoted(define0, define1)
+  config_data.set_quoted(define0, define1)
 endforeach
 
 # Globally define_GNU_SOURCE and therefore enable the GNU extensions
-config_h.set('_GNU_SOURCE', true)
+config_data.set('_GNU_SOURCE', true)
 
 # functions
 check_functions = 
@@ -93,19 +94,12 @@
 
 
 foreach func: check_functions
-  config_h.set('HAVE_' + func.to_upper(), cc.has_function(func))
+  config_data.set('HAVE_' + func.to_upper(), cc.has_function(func))
 endforeach
 
-# compiler flags
-common_c_flags = 
-  # FIXME: this should go as 'c_std=c99' in project's default_options.
-  #        https://github.com/mesonbuild/meson/issues/1889
-  #        https://github.com/mesonbuild/meson/pull/6729
-  '-std=c99',
-  '-DHAVE_CONFIG_H',
-
-compiler_flags = 
+compiler_common_flags = 
 compiler_c_flags = 
+compiler_cpp_flags = 
 
 if get_option('buildtype').contains('debug')
   compiler_c_flags += cc.get_supported_arguments(
@@ -121,8 +115,6 @@
   )
 endif
 
-add_project_arguments(common_c_flags + compiler_c_flags, language: 'c')
-
 glib_req_version = '>= 2.30.0'
 
 gio_dep = dependency('gio-2.0', version: glib_req_version)
@@ -130,16 +122,16 @@
 glib_dep = dependency('glib-2.0', version: glib_req_version)
 gobject_dep = dependency('gobject-2.0', version: glib_req_version)
 
-expat_dep = dependency('expat')
-assert(cc.has_header('expat.h', dependencies: expat_dep), 'Can\'t find expat.h. Please install expat.')
-assert(cc.has_function('XML_ParserCreate', dependencies: expat_dep), 'Can\'t find expat library. Please install expat.')
-
 duktape_req_version = '>= 2.2.0'
 
 js_engine = get_option('js_engine')
 libs_only = get_option('libs-only')
 if libs_only
   js_engine = ''
+else
+  expat_dep = dependency('expat')
+  assert(cc.has_header('expat.h', dependencies: expat_dep), 'Can\'t find expat.h. Please install expat.')
+  assert(cc.has_function('XML_ParserCreate', dependencies: expat_dep), 'Can\'t find expat library. Please install expat.')
 endif
 
 if js_engine == 'duktape'
@@ -151,20 +143,20 @@
   libm_dep = cc.find_library('m')
   thread_dep = dependency('threads')
   func = 'pthread_condattr_setclock'
-  config_h.set('HAVE_' + func.to_upper(), cc.has_function(func, prefix : '#include <pthread.h>'))
+  config_data.set('HAVE_' + func.to_upper(), cc.has_function(func, prefix : '#include <pthread.h>'))
 elif js_engine == 'mozjs'
-  js_dep = dependency('mozjs-102')
+  js_dep = dependency('mozjs-115')
 
   _system = host_machine.system().to_lower()
   if _system.contains('freebsd')
-    config_h.set('__BSD_VISIBLE', 1)
+    config_data.set('__BSD_VISIBLE', 1)
   endif
 endif
 
 dbus_dep = dependency('dbus-1', required: false)
 dbus_policydir = pk_prefix / pk_datadir / 'dbus-1/system.d'
 if dbus_dep.found()
-  dbus_system_bus_services_dir = dbus_dep.get_pkgconfig_variable('system_bus_services_dir', define_variable: 'datadir', pk_prefix / pk_datadir)
+  dbus_system_bus_services_dir = dbus_dep.get_variable(pkgconfig: 'system_bus_services_dir', pkgconfig_define: 'datadir', pk_prefix / pk_datadir)
 else
   # libdbus development files not installed, assume a standard layout
   dbus_system_bus_services_dir = pk_prefix / pk_datadir / 'dbus-1' / 'system-services'
@@ -172,54 +164,70 @@
 
 # check OS
 host_system = host_machine.system()
-config_h.set('HAVE_' + host_system.to_upper(), true)
+config_data.set('HAVE_' + host_system.to_upper(), true)
 
 # Check whether setnetgrent has a return value
-config_h.set('HAVE_NETGROUP_H', cc.has_header('netgroup.h'))
-
-setnetgrent_return_src = '''
-  #include <stddef.h>
-  #ifdef HAVE_NETGROUP_H
-  #include <netgroup.h>
-  #else
-  #include <netdb.h>
-  #endif
-  int main() {
-      int r = setnetgrent (NULL);
-  };
-'''
+config_data.set('HAVE_NETGROUP_H', cc.has_header('netgroup.h'))
+
+if config_data.get('HAVE_SETNETGRENT', false)
+  setnetgrent_return_src = '''
+    #include <stddef.h>
+    #ifdef HAVE_NETGROUP_H
+    #include <netgroup.h>
+    #else
+    #include <netdb.h>
+    #endif
+    int main() {
+        int r = setnetgrent (NULL);
+    };
+  '''
 
-config_h.set('HAVE_SETNETGRENT_RETURN', cc.compiles(setnetgrent_return_src, name: 'setnetgrent return support'))
+  config_data.set('HAVE_SETNETGRENT_RETURN', cc.compiles(setnetgrent_return_src, name: 'setnetgrent return support'))
+endif
 
-# Select wether to use libsystemd-login, libelogind or ConsoleKit for session tracking
+# Select wether to use logind, elogind or ConsoleKit for session tracking
 session_tracking = get_option('session_tracking')
 enable_logind = (session_tracking != 'ConsoleKit')
 if enable_logind
-  if session_tracking == 'libsystemd-login'
-    logind_dep = dependency('libsystemd', required: false)
-    if not logind_dep.found()
-      logind_dep = dependency('libsystemd-login', not_found_message: 'libsystemd support requested but libsystemd or libsystemd-login library not found')
-    endif
+  if session_tracking == 'logind'
+    logind_dep = dependency('libsystemd', not_found_message: 'logind support requested but libsystemd library not found')
   else
-    logind_dep = dependency('libelogind', not_found_message: 'libelogind support requested but libelogind library not found')
+    logind_dep = dependency('libelogind', not_found_message: 'elogind support requested but libelogind library not found')
   endif
 
   func = 'sd_uid_get_display'
-  config_h.set10('HAVE_' + func.to_upper(), cc.has_function(func, dependencies: logind_dep))
+  config_data.set10('HAVE_' + func.to_upper(), cc.has_function(func, dependencies: logind_dep))
+  func = 'sd_pidfd_get_session'
+  config_data.set10('HAVE_' + func.to_upper(), cc.has_function(func, dependencies: logind_dep))
+endif
+config_data.set('HAVE_LIBSYSTEMD', enable_logind)
 
-  # systemd unit / service files
-  systemd_systemdsystemunitdir = get_option('systemdsystemunitdir')
-  if systemd_systemdsystemunitdir == '' and session_tracking == 'libsystemd-login'
-    systemd_dep = dependency('systemd', not_found_message: 'systemd required but not found, please provide a valid systemd user unit dir or disable it')
+config_data.set('HAVE_PIDFD_OPEN', cc.get_define('SYS_pidfd_open', prefix: '#include <sys/syscall.h>') != '')
+
+# systemd unit / sysuser / tmpfiles.d file installation directories
+systemdsystemunitdir = get_option('systemdsystemunitdir')
+systemd_dep = dependency('systemd', required : false)
+if systemd_dep.found()
+  if systemdsystemunitdir == ''
     # FIXME: systemd.pc file does not use variables with relative paths, so `define_variable` cannot be used
-    systemd_systemdsystemunitdir = systemd_dep.get_pkgconfig_variable('systemdsystemunitdir')
+    systemdsystemunitdir = systemd_dep.get_variable(pkgconfig : 'systemdsystemunitdir')
+  endif
+  sysusers_dir = systemd_dep.get_variable(pkgconfig : 'sysusers_dir')
+  tmpfiles_dir = systemd_dep.get_variable(pkgconfig : 'tmpfiles_dir')

_service:tar_scm:polkit-123.tar.gz/meson_options.txt -> _service:tar_scm:125.tar.gz/meson_options.txt Changed

@@ -1,8 +1,9 @@
-option('session_tracking', type: 'combo', choices: 'libsystemd-login', 'libelogind', 'ConsoleKit', value: 'ConsoleKit', description: 'session tracking (libsystemd-login/libelogind/ConsoleKit)')
+option('session_tracking', type: 'combo', choices: 'logind', 'elogind', 'ConsoleKit', value: 'logind', description: 'session tracking (logind/elogind/ConsoleKit)')
 option('systemdsystemunitdir', type: 'string', value: '', description: 'custom directory for systemd system units')
 
 option('libs-only', type: 'boolean', value: false, description: 'Only build libraries (skips building polkitd)')
 option('polkitd_user', type: 'string', value: 'polkitd', description: 'User for running polkitd (polkitd)')
+option('polkitd_uid', type: 'string', value: '-', description: 'Fixed UID for user running polkitd (polkitd)')
 
 option('authfw', type: 'combo', choices: 'pam', 'shadow', 'bsdauth', value: 'pam', description: 'Authentication framework (pam/shadow)')
 option('os_type', type: 'combo', choices: 'redhat', 'suse', 'gentoo', 'pardus', 'solaris', 'netbsd', 'lfs', '', value: '', description: 'distribution or OS')

_service:tar_scm:polkit-123.tar.gz/po/LINGUAS -> _service:tar_scm:125.tar.gz/po/LINGUAS Changed

_service:tar_scm:polkit-123.tar.gz/po/cs.po -> _service:tar_scm:125.tar.gz/po/cs.po Changed

@@ -8,31 +8,31 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: polkit\n"
-"Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-09-25 16:18+0200\n"
-"PO-Revision-Date: 2018-09-25 16:34+0200\n"
-"Last-Translator: Marek Černocký <marek@manet.cz>\n"
+"Report-Msgid-Bugs-To: https://gitlab.freedesktop.org/polkit/polkit/issues\n"
+"POT-Creation-Date: 2023-06-20 15:27+0000\n"
+"PO-Revision-Date: 2023-08-26 00:16+0200\n"
+"Last-Translator: Daniel Rusek <mail@asciiwolf.com>\n"
 "Language-Team: čeština <gnome-cs-list@gnome.org>\n"
 "Language: cs\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
-"X-Generator: Gtranslator 2.91.7\n"
+"X-Generator: Poedit 3.3.2\n"
 
-#: ../actions/org.freedesktop.policykit.policy.in.h:1
+#: actions/org.freedesktop.policykit.policy.in:12
 msgid "Run a program as another user"
 msgstr "Spustit program jako jiný uživatel"
 
-#: ../actions/org.freedesktop.policykit.policy.in.h:2
+#: actions/org.freedesktop.policykit.policy.in:13
 msgid "Authentication is required to run a program as another user"
 msgstr "Pro spuštění programu pod jiným uživatelem je vyžadováno ověření"
 
-#: ../src/examples/org.freedesktop.policykit.examples.pkexec.policy.in.h:1
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:10
 msgid "Run the polkit example program Frobnicate"
 msgstr "Spustit ukázkový program polkit Frobnicate"
 
-#: ../src/examples/org.freedesktop.policykit.examples.pkexec.policy.in.h:2
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:11
 msgid ""
 "Authentication is required to run the polkit example program Frobnicate "
 "(user=$(user), user.gecos=$(user.gecos), user.display=$(user.display), "
@@ -42,27 +42,27 @@
 "(user=$(user), user.gecos=$(user.gecos), user.display=$(user.display), "
 "program=$(program), command_line=$(command_line))"
 
-#: ../src/programs/pkaction.c:101
+#: src/programs/pkaction.c:101
 msgid "Only output information about ACTION"
 msgstr "Pouze vypsat informace o ČINNOSTI"
 
-#: ../src/programs/pkaction.c:101
+#: src/programs/pkaction.c:101
 msgid "ACTION"
 msgstr "ČINNOST"
 
-#: ../src/programs/pkaction.c:105
+#: src/programs/pkaction.c:105
 msgid "Output detailed action information"
 msgstr "Vypsat podrobné informace o činnosti"
 
-#: ../src/programs/pkaction.c:109 ../src/programs/pkttyagent.c:62
+#: src/programs/pkaction.c:109 src/programs/pkttyagent.c:104
 msgid "Show version"
 msgstr "Vypsat verzi"
 
-#: ../src/programs/pkaction.c:132
+#: src/programs/pkaction.c:132
 msgid "--action-id ACTION"
 msgstr "--action-id ČINNOST"
 
-#: ../src/programs/pkaction.c:133 ../src/programs/pkttyagent.c:83
+#: src/programs/pkaction.c:133 src/programs/pkttyagent.c:127
 #, c-format
 msgid ""
 "Report bugs to: %s\n"
@@ -71,13 +71,13 @@
 "Chyby hlaste na: %s\n"
 "%s domovská stránka: <%s>"
 
-#: ../src/programs/pkaction.c:147 ../src/programs/pkcheck.c:493
-#: ../src/programs/pkttyagent.c:97
+#: src/programs/pkaction.c:147 src/programs/pkcheck.c:498
+#: src/programs/pkttyagent.c:141
 #, c-format
 msgid "%s: Unexpected argument `%s'\n"
 msgstr "%s: neočekávaný argument „%s“\n"
 
-#: ../src/programs/pkcheck.c:36
+#: src/programs/pkcheck.c:36
 #, c-format
 msgid ""
 "Usage:\n"
@@ -135,23 +135,23 @@
 "Chyby hlaste na: %s\n"
 "%s domovská stránka: <%s>\n"
 
-#: ../src/programs/pkcheck.c:393 ../src/programs/pkcheck.c:426
-#: ../src/programs/pkcheck.c:438
+#: src/programs/pkcheck.c:398 src/programs/pkcheck.c:431
+#: src/programs/pkcheck.c:443
 #, c-format
 msgid "%s: Argument expected after `%s'\n"
 msgstr "%s: po „%s“ je očekáván argument\n"
 
-#: ../src/programs/pkcheck.c:416
+#: src/programs/pkcheck.c:421
 #, c-format
 msgid "%s: Invalid --process value `%s'\n"
 msgstr "%s: neplatná hodnota „%s“ pro „--process“\n"
 
-#: ../src/programs/pkcheck.c:453 ../src/programs/pkcheck.c:462
+#: src/programs/pkcheck.c:458 src/programs/pkcheck.c:467
 #, c-format
-msgid "%s: Two arguments expected after `--detail'\n"
-msgstr "%s: po „--detail“ jsou očekávány dva argumenty\n"
+msgid "%s: Two arguments expected after `--detail, -d'\n"
+msgstr "%s: po „--detail, -d“ jsou očekávány dva argumenty\n"
 
-#: ../src/programs/pkcheck.c:523
+#: src/programs/pkcheck.c:528
 #, c-format
 msgid "%s: Subject not specified\n"
 msgstr "%s: není určen předmět\n"
@@ -160,50 +160,57 @@
 #. * translate the $(program) fragment - it will be expanded to the path
 #. * of the program e.g.  /bin/bash.
 #.
-#: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
-msgstr "Pro spuštění „$(program)“ pod účtem správce je vyžadováno ověření"
+#: src/programs/pkexec.c:821
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr ""
+"Pro spuštění „$(cmdline_short)“ pod účtem správce je vyžadováno ověření"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
 #. * be expanded to the path of the program e.g. "/bin/bash" and the latter
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
-#: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+#: src/programs/pkexec.c:831
+msgid ""
+"Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Pro spuštění „$(program)“ pod uživatelem $(user.display) je vyžadováno "
+"Pro spuštění „$(cmdline_short)“ pod uživatelem $(user.display) je vyžadováno "
 "ověření"
 
-#: ../src/programs/pkttyagent.c:45
+#: src/programs/pkttyagent.c:87
 msgid "Don't replace existing agent if any"
 msgstr "Nenahrazovat již bežícího agenta"
 
-#: ../src/programs/pkttyagent.c:49
+#: src/programs/pkttyagent.c:91
 msgid "Close FD when the agent is registered"
 msgstr "Uzavřít FD při registraci agenta"
 
-#: ../src/programs/pkttyagent.c:49
+#: src/programs/pkttyagent.c:91
 msgid "FD"
 msgstr "FD"
 
-#: ../src/programs/pkttyagent.c:53
+#: src/programs/pkttyagent.c:95
 msgid "Register the agent for the specified process"
 msgstr "Registrovat agenta pro určený proces"
 
-#: ../src/programs/pkttyagent.c:54
+#: src/programs/pkttyagent.c:96
 msgid "PID,START_TIME"
 msgstr "PID,ČAS_SPUŠTĚNÍ"
 
-#: ../src/programs/pkttyagent.c:58
+#: src/programs/pkttyagent.c:100
 msgid "Register the agent for the owner of BUS_NAME"
 msgstr "Registrovat agenta pro vlastníka sběrnice NÁZEV_SBĚRNICE"
 
-#: ../src/programs/pkttyagent.c:58
+#: src/programs/pkttyagent.c:100
 msgid "BUS_NAME"
 msgstr "NÁZEV_SBĚRNICE"
 
-#: ../src/programs/pkttyagent.c:129
+#: src/programs/pkttyagent.c:155
+#, c-format
+msgid "%s: Options --process and --system-bus-name are mutually exclusive\n"
+msgstr "%s: Volby --process a --system-bus-name se vzájemně vylučují\n"
+
+#: src/programs/pkttyagent.c:179
 #, c-format
 msgid "%s: Invalid process specifier `%s'\n"
-msgstr "%s: neplatný identifikátor procesu „%s“\n"
\ No newline at end of file
+msgstr "%s: neplatný identifikátor procesu „%s“\n"

_service:tar_scm:polkit-123.tar.gz/po/da.po -> _service:tar_scm:125.tar.gz/po/da.po Changed

@@ -156,8 +156,8 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
-msgstr "Der kræves autentifikation for at køre `$(program)' som superbrugeren"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr "Der kræves autentifikation for at køre `$(cmdline_short)' som superbrugeren"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -165,9 +165,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Der kræves autentifikation for at køre `$(program)' som brugeren "
+"Der kræves autentifikation for at køre `$(cmdline_short)' som brugeren "
 "$(user.display)"
 
 #: ../src/programs/pkttyagent.c:45

_service:tar_scm:polkit-123.tar.gz/po/de.po -> _service:tar_scm:125.tar.gz/po/de.po Changed

@@ -9,8 +9,8 @@
 msgstr ""
 "Project-Id-Version: polkit master\n"
 "Report-Msgid-Bugs-To: https://gitlab.freedesktop.org/polkit/polkit/issues\n"
-"POT-Creation-Date: 2023-01-28 03:27+0000\n"
-"PO-Revision-Date: 2023-01-28 14:37+0100\n"
+"POT-Creation-Date: 2023-09-12 15:27+0000\n"
+"PO-Revision-Date: 2023-09-12 19:52+0200\n"
 "Last-Translator: Jürgen Benvenuti <gastornis@posteo.org>\n"
 "Language-Team: German <gnome-de@gnome.org>\n"
 "Language: de\n"
@@ -18,7 +18,7 @@
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
-"X-Generator: Poedit 3.1.1\n"
+"X-Generator: Poedit 3.3.1\n"
 
 #: actions/org.freedesktop.policykit.policy.in:12
 msgid "Run a program as another user"
@@ -149,8 +149,8 @@
 
 #: src/programs/pkcheck.c:458 src/programs/pkcheck.c:467
 #, c-format
-msgid "%s: Two arguments expected after `--detail'\n"
-msgstr "%s: Es werden zwei Argumente nach »--detail« erwartet\n"
+msgid "%s: Two arguments expected after `--detail, -d'\n"
+msgstr "%s: Es werden zwei Argumente nach »--detail, -d« erwartet\n"
 
 #: src/programs/pkcheck.c:528
 #, c-format
@@ -161,21 +161,23 @@
 #. * translate the $(program) fragment - it will be expanded to the path
 #. * of the program e.g.  /bin/bash.
 #.
-#: src/programs/pkexec.c:813
-msgid "Authentication is needed to run `$(program)' as the super user"
+#: src/programs/pkexec.c:822
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"Legitimierung ist erforderlich, um »$(program)« als Superuser auszuführen"
+"Legitimierung ist erforderlich, um »$(cmdline_short)« als Superuser "
+"auszuführen"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
 #. * be expanded to the path of the program e.g. "/bin/bash" and the latter
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
-#: src/programs/pkexec.c:823
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+#: src/programs/pkexec.c:832
+msgid ""
+"Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Legitimierung ist erforderlich, um »$(program)« als Benutzer $(user.display) "
-"auszuführen"
+"Legitimierung ist erforderlich, um »$(cmdline_short)« als Benutzer $(user."
+"display) auszuführen"
 
 #: src/programs/pkttyagent.c:87
 msgid "Don't replace existing agent if any"

_service:tar_scm:125.tar.gz/po/hi.po Added

@@ -0,0 +1,215 @@
+# Hindi translation for polkit.
+# Copyright (C) 2024 polkit's COPYRIGHT HOLDER
+# This file is distributed under the same license as the polkit package.
+# Scrambled 777 <weblate.scrambled777@simplelogin.com>, 2024.
+# Scrambled777 <weblate.scrambled777@simplelogin.com>, 2024.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: polkit main\n"
+"Report-Msgid-Bugs-To: https://github.com/polkit-org/polkit/issues\n"
+"POT-Creation-Date: 2024-05-19 03:27+0000\n"
+"PO-Revision-Date: 2024-05-19 15:12+0530\n"
+"Last-Translator: Scrambled777 <weblate.scrambled777@simplelogin.com>\n"
+"Language-Team: Hindi <indlinux-hindi@lists.sourceforge.net>\n"
+"Language: hi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+"X-Generator: Gtranslator 46.1\n"
+
+#: actions/org.freedesktop.policykit.policy.in:12
+msgid "Run a program as another user"
+msgstr "किसी प्रोग्राम को दूसरे उपयोक्ता के रूप में चलाएं"
+
+#: actions/org.freedesktop.policykit.policy.in:13
+msgid "Authentication is required to run a program as another user"
+msgstr ""
+"किसी प्रोग्राम को किसी अन्य उपयोक्ता के रूप में चलाने के लिए प्रमाणीकरण की आवश्यकता होती "
+"है"
+
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:10
+msgid "Run the polkit example program Frobnicate"
+msgstr "polkit उदाहरण प्रोग्राम Frobnicate चलाएं"
+
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:11
+msgid ""
+"Authentication is required to run the polkit example program Frobnicate "
+"(user=$(user), user.gecos=$(user.gecos), user.display=$(user.display), "
+"program=$(program), command_line=$(command_line))"
+msgstr ""
+"polkit उदाहरण प्रोग्राम Frobnicate को चलाने के लिए प्रमाणीकरण आवश्यक है "
+"(user=$(user), user.gecos=$(user.gecos), user.display=$(user.display), "
+"program=$(program), command_line=$(command_line))"
+
+#: src/programs/pkaction.c:101
+msgid "Only output information about ACTION"
+msgstr "केवल कार्रवाई के बारे में जानकारी आउटपुट करें"
+
+#: src/programs/pkaction.c:101
+msgid "ACTION"
+msgstr "कार्रवाई"
+
+#: src/programs/pkaction.c:105
+msgid "Output detailed action information"
+msgstr "विस्तृत कार्रवाई की जानकारी आउटपुट करें"
+
+#: src/programs/pkaction.c:109 src/programs/pkttyagent.c:104
+msgid "Show version"
+msgstr "संस्करण दिखाएं"
+
+#: src/programs/pkaction.c:132
+msgid "--action-id ACTION"
+msgstr "--action-id कार्रवाई"
+
+#: src/programs/pkaction.c:133 src/programs/pkttyagent.c:127
+#, c-format
+msgid ""
+"Report bugs to: %s\n"
+"%s home page: <%s>"
+msgstr ""
+"बग यहां रिपोर्ट करें: %s\n"
+"%s मुखपृष्ठ: <%s>"
+
+#: src/programs/pkaction.c:147 src/programs/pkcheck.c:498
+#: src/programs/pkttyagent.c:141
+#, c-format
+msgid "%s: Unexpected argument `%s'\n"
+msgstr "%s: अप्रत्याशित तर्क `%s'\n"
+
+#: src/programs/pkcheck.c:36
+#, c-format
+msgid ""
+"Usage:\n"
+"  pkcheck OPTION...\n"
+"\n"
+"Help Options:\n"
+"  -h, --help                         Show help options\n"
+"\n"
+"Application Options:\n"
+"  -a, --action-id=ACTION             Check authorization to perform ACTION\n"
+"  -u, --allow-user-interaction       Interact with the user if necessary\n"
+"  -d, --details=KEY VALUE            Add (KEY, VALUE) to information about "
+"the action\n"
+"  --enable-internal-agent            Use an internal authentication agent if "
+"necessary\n"
+"  --list-temp                        List temporary authorizations for "
+"current session\n"
+"  -p, --process=PID,START_TIME,UID Check authorization of specified "
+"process\n"
+"  --revoke-temp                      Revoke all temporary authorizations for "
+"current session\n"
+"  -s, --system-bus-name=BUS_NAME     Check authorization of owner of "
+"BUS_NAME\n"
+"  --version                          Show version\n"
+"\n"
+"Report bugs to: %s\n"
+"%s home page: <%s>\n"
+msgstr ""
+"उपयोग:\n"
+"  pkcheck विकल्प...\n"
+"\n"
+"सहायता विकल्प:\n"
+"  -h, --help                         सहायता विकल्प दिखाएं\n"
+"\n"
+"अनुप्रयोग विकल्प:\n"
+"  -a, --action-id=कार्रवाई                                   कार्रवाई करने के "
+"लिए प्राधिकरण की जांच करें\n"
+"  -u, --allow-user-interaction       यदि आवश्यक हो तो उपयोक्ता के साथ बातचीत "
+"करें\n"
+"  -d, --details=मौलिक मान                                  कार्रवाई के बारे में "
+"जानकारी में (मौलिक, मान) जोड़ें\n"
+"  --enable-internal-agent            यदि आवश्यक हो तो आंतरिक प्रमाणीकरण एजेंट का "
+"उपयोग करें\n"
+"  --list-temp                        वर्तमान सत्र के लिए अस्थायी प्राधिकरणों की "
+"सूची बनाएं\n"
+"  -p, --process=PID,शुरू_समय,UID     निर्दिष्ट प्रक्रिया के प्राधिकरण की जांच करें\n"
+"  --revoke-temp                      वर्तमान सत्र के लिए सभी अस्थायी प्राधिकरण "
+"रद्द करें\n"
+"  -s, --system-bus-name=बस_नाम                   बस_नाम के मालिक का प्राधिकरण "
+"जाँचें\n"
+"  --version                          संस्करण दिखाएं\n"
+"\n"
+"बग यहां रिपोर्ट करें: %s\n"
+"%s मुखपृष्ठ: <%s>\n"
+
+#: src/programs/pkcheck.c:398 src/programs/pkcheck.c:431
+#: src/programs/pkcheck.c:443
+#, c-format
+msgid "%s: Argument expected after `%s'\n"
+msgstr "%s: `%s' के बाद तर्क अपेक्षित\n"
+
+#: src/programs/pkcheck.c:421
+#, c-format
+msgid "%s: Invalid --process value `%s'\n"
+msgstr "%s: अमान्य --process मान `%s'\n"
+
+#: src/programs/pkcheck.c:458 src/programs/pkcheck.c:467
+#, c-format
+msgid "%s: Two arguments expected after `--detail, -d'\n"
+msgstr "%s: `--detail, -d' के बाद दो तर्क अपेक्षित हैं\n"
+
+#: src/programs/pkcheck.c:528
+#, c-format
+msgid "%s: Subject not specified\n"
+msgstr "%s: विषय निर्दिष्ट नहीं\n"
+
+#. Translators: message shown when trying to run a program as root. Do not
+#. * translate the $(program) fragment - it will be expanded to the path
+#. * of the program e.g.  /bin/bash.
+#.
+#: src/programs/pkexec.c:822
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr ""
+"`$(cmdline_short)' को सुपर उपयोक्ता के रूप में चलाने के लिए प्रमाणीकरण की आवश्यकता है"
+
+#. Translators: message shown when trying to run a program as another user.
+#. * Do not translate the $(program) or $(user) fragments - the former will
+#. * be expanded to the path of the program e.g. "/bin/bash" and the latter
+#. * to the user e.g. "John Doe (johndoe)" or "johndoe".
+#.
+#: src/programs/pkexec.c:832
+msgid ""
+"Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
+msgstr ""
+"`$(cmdline_short)' को उपयोक्ता $(user.display) के रूप में चलाने के लिए प्रमाणीकरण की "
+"आवश्यकता है"
+
+#: src/programs/pkttyagent.c:87
+msgid "Don't replace existing agent if any"
+msgstr "यदि कोई मौजूदा एजेंट है तो उसे न बदलें"
+
+#: src/programs/pkttyagent.c:91
+msgid "Close FD when the agent is registered"
+msgstr "एजेंट पंजीकृत होने पर FD बंद कर दें"
+
+#: src/programs/pkttyagent.c:91
+msgid "FD"
+msgstr "FD"
+
+#: src/programs/pkttyagent.c:95
+msgid "Register the agent for the specified process"
+msgstr "निर्दिष्ट प्रक्रिया के लिए एजेंट को पंजीकृत करें"
+
+#: src/programs/pkttyagent.c:96
+msgid "PID,START_TIME"
+msgstr "PID,शुरू_समय"
+
+#: src/programs/pkttyagent.c:100

_service:tar_scm:polkit-123.tar.gz/po/hr.po -> _service:tar_scm:125.tar.gz/po/hr.po Changed

@@ -157,8 +157,8 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:797
-msgid "Authentication is needed to run `$(program)' as the super user"
-msgstr "Potrebna je ovjera za pokretanje `$(program)' kao super korisnika"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr "Potrebna je ovjera za pokretanje `$(cmdline_short)' kao super korisnika"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -166,9 +166,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:807
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Potrebna je ovjera za pokretanje `$(program)' kao korisnika $(user.display)"
+"Potrebna je ovjera za pokretanje `$(cmdline_short)' kao korisnika $(user.display)"
 
 #: ../src/programs/pkttyagent.c:45
 msgid "Don't replace existing agent if any"

_service:tar_scm:polkit-123.tar.gz/po/hu.po -> _service:tar_scm:125.tar.gz/po/hu.po Changed

@@ -166,8 +166,8 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
-msgstr "Hitelesítés szükséges a(z) „$(program)” futtatásához rendszergazdaként"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr "Hitelesítés szükséges a(z) „$(cmdline_short)” futtatásához rendszergazdaként"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -175,9 +175,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Hitelesítés szükséges a(z) „$(program)” futtatásához $(user.display) "
+"Hitelesítés szükséges a(z) „$(cmdline_short)” futtatásához $(user.display) "
 "felhasználóként"
 
 #: ../src/programs/pkttyagent.c:78

_service:tar_scm:polkit-123.tar.gz/po/id.po -> _service:tar_scm:125.tar.gz/po/id.po Changed

@@ -155,9 +155,9 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"Otentikasi dibutuhkan untuk menjalankan `$(program)' sebagai super user"
+"Otentikasi dibutuhkan untuk menjalankan `$(cmdline_short)' sebagai super user"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -165,9 +165,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Otentikasi dibutuhkan untuk menjalankan `$(program)' sebagai pengguna $(user."
+"Otentikasi dibutuhkan untuk menjalankan `$(cmdline_short)' sebagai pengguna $(user."
 "display)"
 
 #: ../src/programs/pkttyagent.c:78

_service:tar_scm:polkit-123.tar.gz/po/it.po -> _service:tar_scm:125.tar.gz/po/it.po Changed

@@ -164,8 +164,8 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
-msgstr "È richiesto autenticarsi per lanciare «$(program)» come super utente"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr "È richiesto autenticarsi per lanciare «$(cmdline_short)» come super utente"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -173,9 +173,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"È richiesto autenticarsi per lanciare «$(program)» come l'utente $(user."
+"È richiesto autenticarsi per lanciare «$(cmdline_short)» come l'utente $(user."
 "display)"
 
 #: ../src/programs/pkttyagent.c:45

_service:tar_scm:polkit-123.tar.gz/po/ka.po -> _service:tar_scm:125.tar.gz/po/ka.po Changed

@@ -1,22 +1,22 @@
-# Georgian translation for polkit.
-# Copyright (C) 2022 polkit's COPYRIGHT HOLDER
+# Georgian translation of polkit
+# Copyright (C) 2023 Polkit's authors
 # This file is distributed under the same license as the polkit package.
-# Temuri Doghonadze <temuri.doghonadze@gmail.com>, 2022.
+# Temuri Doghonadze <temuri.doghonadze@gmail.com>, 2023.
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: polkit master\n"
-"Report-Msgid-Bugs-To: https://gitlab.freedesktop.org/polkit/polkit/issues\n"
-"POT-Creation-Date: 2022-03-27 15:28+0000\n"
-"PO-Revision-Date: 2022-09-14 09:24+0200\n"
+"Project-Id-Version: polkit\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2023-08-07 21:51+0200\n"
+"PO-Revision-Date: 2023-08-07 21:55+0200\n"
 "Last-Translator: Temuri Doghonadze <temuri.doghonadze@gmail.com>\n"
-"Language-Team: Georgian (<nothing>)\n"
+"Language-Team: Georgian <(nothing)>\n"
 "Language: ka\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
-"X-Generator: Poedit 3.1.1\n"
+"X-Generator: Poedit 3.3.2\n"
 
 #: actions/org.freedesktop.policykit.policy.in:12
 msgid "Run a program as another user"
@@ -52,7 +52,7 @@
 msgid "Output detailed action information"
 msgstr "ქმედების დეტალური ინფორმაციის გამოტანა"
 
-#: src/programs/pkaction.c:109 src/programs/pkttyagent.c:95
+#: src/programs/pkaction.c:109 src/programs/pkttyagent.c:104
 msgid "Show version"
 msgstr "ვერსიის ჩვენება"
 
@@ -60,7 +60,7 @@
 msgid "--action-id ACTION"
 msgstr "--action-id ACTION"
 
-#: src/programs/pkaction.c:133 src/programs/pkttyagent.c:118
+#: src/programs/pkaction.c:133 src/programs/pkttyagent.c:127
 #, c-format
 msgid ""
 "Report bugs to: %s\n"
@@ -70,7 +70,7 @@
 "%s ვებგვერდი: <%s>"
 
 #: src/programs/pkaction.c:147 src/programs/pkcheck.c:498
-#: src/programs/pkttyagent.c:132
+#: src/programs/pkttyagent.c:141
 #, c-format
 msgid "%s: Unexpected argument `%s'\n"
 msgstr "%s: მოულოდნელი არგუმენტი `%s'\n"
@@ -142,8 +142,8 @@
 
 #: src/programs/pkcheck.c:458 src/programs/pkcheck.c:467
 #, c-format
-msgid "%s: Two arguments expected after `--detail'\n"
-msgstr "%s: `--detail'-ის შემდეგ საჭიროა ორი არგუმენტის მითთება\n"
+msgid "%s: Two arguments expected after `--detail, -d'\n"
+msgstr "%s: `--detail'-ის და '-d-ის შემდეგ საჭიროა ორი არგუმენტის მითითება\n"
 
 #: src/programs/pkcheck.c:528
 #, c-format
@@ -154,48 +154,56 @@
 #. * translate the $(program) fragment - it will be expanded to the path
 #. * of the program e.g.  /bin/bash.
 #.
-#: src/programs/pkexec.c:807
-msgid "Authentication is needed to run `$(program)' as the super user"
-msgstr "`$(program)'-ის სხვა სახელით გაშვებას ავთენტიკაცია სჭირდება"
+#: src/programs/pkexec.c:821
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr "'$(cmdlne_short)'-ის ზემომხმარებლით გაშვებას ავთენტიკაცია სჭირდება"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
 #. * be expanded to the path of the program e.g. "/bin/bash" and the latter
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
-#: src/programs/pkexec.c:817
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
-msgstr "`$(program)'-ის $(user.display)-ით გაშვებას ავთენტიკაცია სჭირდება"
+#: src/programs/pkexec.c:831
+msgid ""
+"Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
+msgstr ""
+"'$(cmdlne_short)'-ის მომხმარებლით '$(user.display)' გაშვებას ავთენტიკაცია "
+"სჭირდება"
 
-#: src/programs/pkttyagent.c:78
+#: src/programs/pkttyagent.c:87
 msgid "Don't replace existing agent if any"
 msgstr "თუ აგენტი არსებობს, ის არ ჩანაცვლდება"
 
-#: src/programs/pkttyagent.c:82
+#: src/programs/pkttyagent.c:91
 msgid "Close FD when the agent is registered"
 msgstr "FD-ის დახურვა აგენტის რეგისტრაციის შემდეგ"
 
-#: src/programs/pkttyagent.c:82
+#: src/programs/pkttyagent.c:91
 msgid "FD"
 msgstr "FD"
 
-#: src/programs/pkttyagent.c:86
+#: src/programs/pkttyagent.c:95
 msgid "Register the agent for the specified process"
 msgstr "აგენტის რეგისტრაცია მითითებული პროცესისთვის"
 
-#: src/programs/pkttyagent.c:87
+#: src/programs/pkttyagent.c:96
 msgid "PID,START_TIME"
 msgstr "PID,START_TIME"
 
-#: src/programs/pkttyagent.c:91
+#: src/programs/pkttyagent.c:100
 msgid "Register the agent for the owner of BUS_NAME"
 msgstr "აგენტის რეგისტრაცია BUS_NAME-ის მფლობელისთვის"
 
-#: src/programs/pkttyagent.c:91
+#: src/programs/pkttyagent.c:100
 msgid "BUS_NAME"
 msgstr "BUS_NAME"
 
-#: src/programs/pkttyagent.c:164
+#: src/programs/pkttyagent.c:155
+#, c-format
+msgid "%s: Options --process and --system-bus-name are mutually exclusive\n"
+msgstr "%s: პარამეტრები --process და --system-bus-name ურთიერთგამომრიცხავია\n"
+
+#: src/programs/pkttyagent.c:179
 #, c-format
 msgid "%s: Invalid process specifier `%s'\n"
 msgstr "%s: პროცესის არასწორი მიმთითებელი: %s\n"

_service:tar_scm:polkit-123.tar.gz/po/nl.po -> _service:tar_scm:125.tar.gz/po/nl.po Changed

@@ -160,9 +160,9 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: src/programs/pkexec.c:807
-msgid "Authentication is needed to run `$(program)' as the super user"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"Authenticatie is vereist om `$(program)' uit te voeren als de rootgebruiker"
+"Authenticatie is vereist om `$(cmdline_short)' uit te voeren als de rootgebruiker"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -170,9 +170,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: src/programs/pkexec.c:817
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Authenticatie is vereist om `$(program)' uit te voeren als gebruiker $(user."
+"Authenticatie is vereist om `$(cmdline_short)' uit te voeren als gebruiker $(user."
 "display)"
 
 #: src/programs/pkttyagent.c:78

_service:tar_scm:polkit-123.tar.gz/po/nn.po -> _service:tar_scm:125.tar.gz/po/nn.po Changed

@@ -158,8 +158,8 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
-msgstr "Krev autentisering for å køyra «$(program)» som rotbrukar"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr "Krev autentisering for å køyra «$(cmdline_short)» som rotbrukar"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -167,9 +167,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Krev autentisering for å køyra «$(program)» som brukaren $(user.display)"
+"Krev autentisering for å køyra «$(cmdline_short)» som brukaren $(user.display)"
 
 # skip-rule: eksistera
 #: ../src/programs/pkttyagent.c:78

_service:tar_scm:polkit-123.tar.gz/po/pt.po -> _service:tar_scm:125.tar.gz/po/pt.po Changed

@@ -160,9 +160,9 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"A autenticação é necessária para executar `$(program)' como o superutilizador"
+"A autenticação é necessária para executar `$(cmdline_short)' como o superutilizador"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -170,9 +170,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"A autenticação é necessária para executar `$(program)' como o utilizador "
+"A autenticação é necessária para executar `$(cmdline_short)' como o utilizador "
 "$(user.display)"
 
 #: ../src/programs/pkttyagent.c:45

_service:tar_scm:polkit-123.tar.gz/po/pt_BR.po -> _service:tar_scm:125.tar.gz/po/pt_BR.po Changed

@@ -157,9 +157,9 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"A autenticação é necessária para executar `$(program)' como o superusuário"
+"A autenticação é necessária para executar `$(cmdline_short)' como o superusuário"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -167,9 +167,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"A autenticação é necessária para executar `$(program)' como o usuário  "
+"A autenticação é necessária para executar `$(cmdline_short)' como o usuário  "
 "$(user.display)"
 
 #: ../src/programs/pkttyagent.c:45

_service:tar_scm:polkit-123.tar.gz/po/ro.po -> _service:tar_scm:125.tar.gz/po/ro.po Changed

@@ -162,9 +162,9 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"Este necesară autentificarea pentru a rula „$(program)” ca administrator"
+"Este necesară autentificarea pentru a rula „$(cmdline_short)” ca administrator"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -172,9 +172,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Este necesară autentificarea pentru a rula „$(program)” ca utilizatorul"
+"Este necesară autentificarea pentru a rula „$(cmdline_short)” ca utilizatorul"
 " $(user.display)"
 
 #: ../src/programs/pkttyagent.c:78

_service:tar_scm:polkit-123.tar.gz/po/ru.po -> _service:tar_scm:125.tar.gz/po/ru.po Changed

@@ -7,8 +7,8 @@
 msgstr ""
 "Project-Id-Version: polkit master\n"
 "Report-Msgid-Bugs-To: https://gitlab.freedesktop.org/polkit/polkit/issues\n"
-"POT-Creation-Date: 2023-04-06 03:28+0000\n"
-"PO-Revision-Date: 2023-04-06 15:06+0300\n"
+"POT-Creation-Date: 2023-11-28 03:27+0000\n"
+"PO-Revision-Date: 2023-11-28 14:40+0300\n"
 "Last-Translator: Aleksandr Melman <Alexmelman88@gmail.com>\n"
 "Language-Team: Russian <ru@li.org>\n"
 "Language: ru\n"
@@ -17,7 +17,7 @@
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && "
 "n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
-"X-Generator: Poedit 3.2.2\n"
+"X-Generator: Poedit 3.4.1\n"
 
 #: actions/org.freedesktop.policykit.policy.in:12
 msgid "Run a program as another user"
@@ -147,8 +147,8 @@
 
 #: src/programs/pkcheck.c:458 src/programs/pkcheck.c:467
 #, c-format
-msgid "%s: Two arguments expected after `--detail'\n"
-msgstr "%s: Ожидается два аргумента после `--detail'\n"
+msgid "%s: Two arguments expected after `--detail, -d'\n"
+msgstr "%s: Ожидается два аргумента после `--detail, -d'\n"
 
 #: src/programs/pkcheck.c:528
 #, c-format
@@ -159,7 +159,7 @@
 #. * translate the $(program) fragment - it will be expanded to the path
 #. * of the program e.g.  /bin/bash.
 #.
-#: src/programs/pkexec.c:821
+#: src/programs/pkexec.c:822
 msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
 "Необходима аутентификация для запуска `$(cmdline_short)' от имени "
@@ -170,7 +170,7 @@
 #. * be expanded to the path of the program e.g. "/bin/bash" and the latter
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
-#: src/programs/pkexec.c:831
+#: src/programs/pkexec.c:832
 msgid ""
 "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""

_service:tar_scm:polkit-123.tar.gz/po/sk.po -> _service:tar_scm:125.tar.gz/po/sk.po Changed

@@ -160,9 +160,9 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:797
-msgid "Authentication is needed to run `$(program)' as the super user"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"Na spustenie programu „$(program)“ ako superpoužívateľ sa vyžaduje overenie "
+"Na spustenie programu „$(cmdline_short)“ ako superpoužívateľ sa vyžaduje overenie "
 "totožnosti"
 
 #. Translators: message shown when trying to run a program as another user.
@@ -171,9 +171,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:807
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Na spustenie programu „$(program)“ ako používateľ $(user.display) sa "
+"Na spustenie programu „$(cmdline_short)“ ako používateľ $(user.display) sa "
 "vyžaduje overenie totožnosti"
 
 #: ../src/programs/pkttyagent.c:45

_service:tar_scm:125.tar.gz/po/sl.po Added

@@ -0,0 +1,218 @@
+# Slovenian translation for polkit.
+# Copyright (C) 2024 polkit's COPYRIGHT HOLDER
+# This file is distributed under the same license as the polkit package.
+#
+# Martin <miles@filmsi.net>,  2024.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: polkit main\n"
+"Report-Msgid-Bugs-To: https://github.com/polkit-org/polkit/issues\n"
+"POT-Creation-Date: 2024-07-26 15:27+0000\n"
+"PO-Revision-Date: 2024-07-26 18:40+0200\n"
+"Language-Team: Slovenian GNOME Translation Team <gnome-si@googlegroups.com>\n"
+"Language: sl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=4; plural=(n%100==1 ? 1 : n%100==2 ? 2 : n%100==3 || n"
+"%100==4 ? 3 : 0);\n"
+"Last-Translator: Martin Srebotnjak <miles@filmsi.net>\n"
+"X-Generator: Poedit 2.2.1\n"
+
+#: actions/org.freedesktop.policykit.policy.in:12
+msgid "Run a program as another user"
+msgstr "Zaženite program kot drug uporabnik"
+
+#: actions/org.freedesktop.policykit.policy.in:13
+msgid "Authentication is required to run a program as another user"
+msgstr ""
+"Preverjanje pristnosti je potrebno, da bi lahko zagnali program kot drug "
+"uporabnik"
+
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:10
+msgid "Run the polkit example program Frobnicate"
+msgstr "Zaženite primer programa polkit, Frobnicate"
+
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:11
+msgid ""
+"Authentication is required to run the polkit example program Frobnicate "
+"(user=$(user), user.gecos=$(user.gecos), user.display=$(user.display), "
+"program=$(program), command_line=$(command_line))"
+msgstr ""
+"Preverjanje pristnosti je potrebno za zagon primera programa polkit "
+"Frobnicate (user=$(user), user.gecos=$(user.gecos), user.display=$(user."
+"display), program=$(program), command_line=$(command_line))"
+
+#: src/programs/pkaction.c:97
+msgid "Only output information about ACTION"
+msgstr "Samo izhodne informacije o funkciji DEJANJE"
+
+#: src/programs/pkaction.c:97
+msgid "ACTION"
+msgstr "DEJANJE"
+
+#: src/programs/pkaction.c:101
+msgid "Output detailed action information"
+msgstr "Izpiši podrobne informacije o dejanjih"
+
+#: src/programs/pkaction.c:105 src/programs/pkttyagent.c:100
+msgid "Show version"
+msgstr "Prikaži različico"
+
+#: src/programs/pkaction.c:128
+msgid "--action-id ACTION"
+msgstr "--action-id DEJANJE"
+
+#: src/programs/pkaction.c:129 src/programs/pkttyagent.c:123
+#, c-format
+msgid ""
+"Report bugs to: %s\n"
+"%s home page: <%s>"
+msgstr ""
+"Prijavite napake na: %s\n"
+"domačo stran %s: <%s>"
+
+#: src/programs/pkaction.c:143 src/programs/pkcheck.c:494
+#: src/programs/pkttyagent.c:137
+#, c-format
+msgid "%s: Unexpected argument `%s'\n"
+msgstr "%s: nepričakovan argument »%s«\n"
+
+#: src/programs/pkcheck.c:32
+#, c-format
+msgid ""
+"Usage:\n"
+"  pkcheck OPTION...\n"
+"\n"
+"Help Options:\n"
+"  -h, --help                         Show help options\n"
+"\n"
+"Application Options:\n"
+"  -a, --action-id=ACTION             Check authorization to perform ACTION\n"
+"  -u, --allow-user-interaction       Interact with the user if necessary\n"
+"  -d, --details=KEY VALUE            Add (KEY, VALUE) to information about "
+"the action\n"
+"  --enable-internal-agent            Use an internal authentication agent if "
+"necessary\n"
+"  --list-temp                        List temporary authorizations for "
+"current session\n"
+"  -p, --process=PID,START_TIME,UID Check authorization of specified "
+"process\n"
+"  --revoke-temp                      Revoke all temporary authorizations for "
+"current session\n"
+"  -s, --system-bus-name=BUS_NAME     Check authorization of owner of "
+"BUS_NAME\n"
+"  --version                          Show version\n"
+"\n"
+"Report bugs to: %s\n"
+"%s home page: <%s>\n"
+msgstr ""
+"Navada:\n"
+"  pkcheck MOŽNOST ...\n"
+"\n"
+"Možnosti pomoči:\n"
+"  -h, --help                         Pokaži možnosti pomoči\n"
+"\n"
+"Možnosti programa:\n"
+"  -a, --action-id=DEJANJE             Preveri pooblastilo za izvedbo "
+"DEJANJA\n"
+"  -u, --allow-user-interaction       Po potrebi komuniciraj z uporabnikom\n"
+"  -d, --details=KLJUČ VREDNOST            Dodaj (KLJUČ, VREDNOST) "
+"informacijam o dejanju\n"
+"  --enable-internal-agent            Po potrebi uporabite notranjega agenta "
+"za preverjanje pristnosti\n"
+"  --list-temp                        Izpiši seznam začasnih pooblastil za "
+"trenutno sejo\n"
+"  -p, --process=PID,ČAS_ZAČETKA,UID Preveri avtorizacijo določenega "
+"procesa\n"
+"  --revoke-temp                      Prekliči vsa začasna pooblastila za "
+"trenutno sejo\n"
+"  -s, --system-bus-name=IME_VODILA     Preveri pooblastilo lastnika "
+"IME_VODILA\n"
+"  --version                          Pokaži različico\n"
+"\n"
+"Prijavite napake na: %s\n"
+"domačo stran %s: <%s>\n"
+
+#: src/programs/pkcheck.c:394 src/programs/pkcheck.c:427
+#: src/programs/pkcheck.c:439
+#, c-format
+msgid "%s: Argument expected after `%s'\n"
+msgstr "%s: pričakovan je argument po »%s«\n"
+
+#: src/programs/pkcheck.c:417
+#, c-format
+msgid "%s: Invalid --process value `%s'\n"
+msgstr "%s: neveljavna vrednost --process »%s«\n"
+
+#: src/programs/pkcheck.c:454 src/programs/pkcheck.c:463
+#, c-format
+msgid "%s: Two arguments expected after `--detail, -d'\n"
+msgstr "%s: dva argumenta sta pričakovana po »--detail, -d«\n"
+
+#: src/programs/pkcheck.c:524
+#, c-format
+msgid "%s: Subject not specified\n"
+msgstr "%s: zadeva ni navedena\n"
+
+#. Translators: message shown when trying to run a program as root. Do not
+#. * translate the $(program) fragment - it will be expanded to the path
+#. * of the program e.g.  /bin/bash.
+#.
+#: src/programs/pkexec.c:830
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
+msgstr ""
+"Preverjanje pristnosti je potrebno za zagon `$(cmdline_short)` kot super "
+"uporabnik"
+
+#. Translators: message shown when trying to run a program as another user.
+#. * Do not translate the $(program) or $(user) fragments - the former will
+#. * be expanded to the path of the program e.g. "/bin/bash" and the latter
+#. * to the user e.g. "John Doe (johndoe)" or "johndoe".
+#.
+#: src/programs/pkexec.c:840
+msgid ""
+"Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
+msgstr ""
+"Preverjanje pristnosti je potrebno za zagon `$(cmdline_short)` kot uporabnik "
+"$(user.display)"
+
+#: src/programs/pkttyagent.c:83
+msgid "Don't replace existing agent if any"
+msgstr "Ne zamenjaj obstoječega agenta, če obstaja"
+
+#: src/programs/pkttyagent.c:87
+msgid "Close FD when the agent is registered"
+msgstr "Zapri FD, ko je agent registriran"
+
+#: src/programs/pkttyagent.c:87
+msgid "FD"
+msgstr "FD"
+
+#: src/programs/pkttyagent.c:91
+msgid "Register the agent for the specified process"
+msgstr "Registriraj agenta za določen postopek"
+
+#: src/programs/pkttyagent.c:92
+msgid "PID,START_TIME"
+msgstr "PID,ČAS_ZAČETKA"

_service:tar_scm:polkit-123.tar.gz/po/sv.po -> _service:tar_scm:125.tar.gz/po/sv.po Changed

_service:tar_scm:polkit-123.tar.gz/po/tr.po -> _service:tar_scm:125.tar.gz/po/tr.po Changed

@@ -1,40 +1,40 @@
 # Turkish translation for polkit.
-# Copyright (C) 2016-2019 polkit's COPYRIGHT HOLDER
+# Copyright (C) 2016-2023 polkit's COPYRIGHT HOLDER
 # This file is distributed under the same license as the polkit package.
 #
 # Muhammet Kara <muhammetk@gmail.com>, 2016.
-# Sabri Ünal <libreajans@gmail.com>, 2019.
+# Sabri Ünal <libreajans@gmail.com>, 2019, 2023.
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: polkit master\n"
 "Report-Msgid-Bugs-To: https://gitlab.freedesktop.org/polkit/polkit/issues\n"
-"POT-Creation-Date: 2019-09-07 15:28+0000\n"
-"PO-Revision-Date: 2023-02-15 16:09+0300\n"
+"POT-Creation-Date: 2023-08-06 15:27+0000\n"
+"PO-Revision-Date: 2023-08-07 03:24+0300\n"
 "Last-Translator: Sabri Ünal <libreajans@gmail.com>\n"
-"Language-Team: Türkçe <gnome-turk@gnome.org>\n"
+"Language-Team: Türkçe <takim@gnome.org.tr>\n"
 "Language: tr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
-"X-Generator: Poedit 3.1.1\n"
+"X-Generator: Poedit 3.2.2\n"
 
-#: ../actions/org.freedesktop.policykit.policy.in.h:1
+#: actions/org.freedesktop.policykit.policy.in:12
 msgid "Run a program as another user"
 msgstr "Bir programı başka bir kullanıcı olarak çalıştırın"
 
-#: ../actions/org.freedesktop.policykit.policy.in.h:2
+#: actions/org.freedesktop.policykit.policy.in:13
 msgid "Authentication is required to run a program as another user"
 msgstr ""
 "Bir programı başka bir kullanıcı olarak çalıştırmak için kimlik doğrulama "
 "gerekir"
 
-#: ../src/examples/org.freedesktop.policykit.examples.pkexec.policy.in.h:1
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:10
 msgid "Run the polkit example program Frobnicate"
 msgstr "polkit örnek programı Frobnicate'i çalıştırın"
 
-#: ../src/examples/org.freedesktop.policykit.examples.pkexec.policy.in.h:2
+#: src/examples/org.freedesktop.policykit.examples.pkexec.policy.in:11
 msgid ""
 "Authentication is required to run the polkit example program Frobnicate "
 "(user=$(user), user.gecos=$(user.gecos), user.display=$(user.display), "
@@ -44,27 +44,27 @@
 "(user=$(user), user.gecos=$(user.gecos), user.display=$(user.display), "
 "program=$(program), command_line=$(command_line))"
 
-#: ../src/programs/pkaction.c:101
+#: src/programs/pkaction.c:101
 msgid "Only output information about ACTION"
 msgstr "Sadece EYLEM hakkındaki bilgileri çıktı verin"
 
-#: ../src/programs/pkaction.c:101
+#: src/programs/pkaction.c:101
 msgid "ACTION"
 msgstr "EYLEM"
 
-#: ../src/programs/pkaction.c:105
+#: src/programs/pkaction.c:105
 msgid "Output detailed action information"
 msgstr "Ayrıntılı eylem bilgilerini çıktı verin"
 
-#: ../src/programs/pkaction.c:109 ../src/programs/pkttyagent.c:95
+#: src/programs/pkaction.c:109 src/programs/pkttyagent.c:104
 msgid "Show version"
 msgstr "Sürümü göster"
 
-#: ../src/programs/pkaction.c:132
+#: src/programs/pkaction.c:132
 msgid "--action-id ACTION"
 msgstr "--action-id EYLEM"
 
-#: ../src/programs/pkaction.c:133 ../src/programs/pkttyagent.c:118
+#: src/programs/pkaction.c:133 src/programs/pkttyagent.c:127
 #, c-format
 msgid ""
 "Report bugs to: %s\n"
@@ -73,13 +73,13 @@
 "Hataları şuraya bildirin: %s\n"
 "%s ev sayfası: <%s>"
 
-#: ../src/programs/pkaction.c:147 ../src/programs/pkcheck.c:493
-#: ../src/programs/pkttyagent.c:132
+#: src/programs/pkaction.c:147 src/programs/pkcheck.c:498
+#: src/programs/pkttyagent.c:141
 #, c-format
 msgid "%s: Unexpected argument `%s'\n"
 msgstr "%s: Beklenmeyen değişken `%s'\n"
 
-#: ../src/programs/pkcheck.c:36
+#: src/programs/pkcheck.c:36
 #, c-format
 msgid ""
 "Usage:\n"
@@ -136,23 +136,23 @@
 "Hataları şuraya bildirin: %s\n"
 "%s ev sayfası: <%s>\n"
 
-#: ../src/programs/pkcheck.c:393 ../src/programs/pkcheck.c:426
-#: ../src/programs/pkcheck.c:438
+#: src/programs/pkcheck.c:398 src/programs/pkcheck.c:431
+#: src/programs/pkcheck.c:443
 #, c-format
 msgid "%s: Argument expected after `%s'\n"
 msgstr "%s: `%s'den sonra değişken bekleniyor\n"
 
-#: ../src/programs/pkcheck.c:416
+#: src/programs/pkcheck.c:421
 #, c-format
 msgid "%s: Invalid --process value `%s'\n"
 msgstr "%s: Geçersiz --process değeri `%s'\n"
 
-#: ../src/programs/pkcheck.c:453 ../src/programs/pkcheck.c:462
+#: src/programs/pkcheck.c:458 src/programs/pkcheck.c:467
 #, c-format
-msgid "%s: Two arguments expected after `--detail'\n"
-msgstr "%s: `--detail'den sonra iki değişken bekleniyor\n"
+msgid "%s: Two arguments expected after `--detail, -d'\n"
+msgstr "%s: `--detail, -d'den sonra iki değişken bekleniyor\n"
 
-#: ../src/programs/pkcheck.c:523
+#: src/programs/pkcheck.c:528
 #, c-format
 msgid "%s: Subject not specified\n"
 msgstr "%s: Konu belirtilmedi\n"
@@ -161,52 +161,58 @@
 #. * translate the $(program) fragment - it will be expanded to the path
 #. * of the program e.g.  /bin/bash.
 #.
-#: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
+#: src/programs/pkexec.c:821
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"`$(program)' programını süper kullanıcı olarak çalıştırmak için kimlik "
-"doğrulama gerekiyor"
+"`$(cmdline_short)' programını süper kullanıcı olarak çalıştırmak için kimlik "
+"doğrulama gerekir"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
 #. * be expanded to the path of the program e.g. "/bin/bash" and the latter
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
-#: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+#: src/programs/pkexec.c:831
+msgid ""
+"Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"`$(program)' programını $(user.display) kullanıcısı olarak çalıştırmak için "
-"kimlik doğrulama gerekir"
+"`$(cmdline_short)' programını $(user.display) kullanıcısı olarak çalıştırmak "
+"için kimlik doğrulama gerekir"
 
-#: ../src/programs/pkttyagent.c:78
+#: src/programs/pkttyagent.c:87
 msgid "Don't replace existing agent if any"
 msgstr "Eğer varsa, mevcut vekili değiştirme"
 
-#: ../src/programs/pkttyagent.c:82
+#: src/programs/pkttyagent.c:91
 msgid "Close FD when the agent is registered"
 msgstr "Vekil kaydedildiğinde FD'yi kapat"
 
-#: ../src/programs/pkttyagent.c:82
+#: src/programs/pkttyagent.c:91
 msgid "FD"
 msgstr "FD"
 
-#: ../src/programs/pkttyagent.c:86
+#: src/programs/pkttyagent.c:95
 msgid "Register the agent for the specified process"
 msgstr "Belirtilen süreç için vekili kaydet"
 
-#: ../src/programs/pkttyagent.c:87
+#: src/programs/pkttyagent.c:96
 msgid "PID,START_TIME"
 msgstr "PID,BAŞLANGIÇ_ZAMANI"
 
-#: ../src/programs/pkttyagent.c:91
+#: src/programs/pkttyagent.c:100
 msgid "Register the agent for the owner of BUS_NAME"
 msgstr "Vekili, VERİYOLU_ADI sahibi için kaydet"
 
-#: ../src/programs/pkttyagent.c:91
+#: src/programs/pkttyagent.c:100
 msgid "BUS_NAME"
 msgstr "VERİYOLU_ADI"
 
-#: ../src/programs/pkttyagent.c:164
+#: src/programs/pkttyagent.c:155

_service:tar_scm:polkit-123.tar.gz/po/uk.po -> _service:tar_scm:125.tar.gz/po/uk.po Changed

@@ -160,9 +160,9 @@
 #. * of the program e.g.  /bin/bash.
 #.
 #: ../src/programs/pkexec.c:790
-msgid "Authentication is needed to run `$(program)' as the super user"
+msgid "Authentication is needed to run `$(cmdline_short)' as the super user"
 msgstr ""
-"Для запуску «$(program)» від імені суперкористувача слід пройти розпізнавання"
+"Для запуску «$(cmdline_short)» від імені суперкористувача слід пройти розпізнавання"
 
 #. Translators: message shown when trying to run a program as another user.
 #. * Do not translate the $(program) or $(user) fragments - the former will
@@ -170,9 +170,9 @@
 #. * to the user e.g. "John Doe (johndoe)" or "johndoe".
 #.
 #: ../src/programs/pkexec.c:800
-msgid "Authentication is needed to run `$(program)' as user $(user.display)"
+msgid "Authentication is needed to run `$(cmdline_short)' as user $(user.display)"
 msgstr ""
-"Для запуску «$(program)» від імені користувача $(user.display) слід пройти "
+"Для запуску «$(cmdline_short)» від імені користувача $(user.display) слід пройти "
 "розпізнавання"
 
 #: ../src/programs/pkttyagent.c:78

_service:tar_scm:polkit-123.tar.gz/po/zh_CN.po -> _service:tar_scm:125.tar.gz/po/zh_CN.po Changed

_service:tar_scm:polkit-123.tar.gz/po/zh_TW.po -> _service:tar_scm:125.tar.gz/po/zh_TW.po Changed

_service:tar_scm:polkit-123.tar.gz/src/examples/cancel.c -> _service:tar_scm:125.tar.gz/src/examples/cancel.c Changed

_service:tar_scm:polkit-123.tar.gz/src/examples/frobnicate.c -> _service:tar_scm:125.tar.gz/src/examples/frobnicate.c Changed

_service:tar_scm:polkit-123.tar.gz/src/meson.build -> _service:tar_scm:125.tar.gz/src/meson.build Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/meson.build -> _service:tar_scm:125.tar.gz/src/polkit/meson.build Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitactiondescription.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitactiondescription.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitauthority.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitauthority.c Changed

@@ -19,10 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#ifdef HAVE_CONFIG_H
-#  include "config.h"
-#endif
-
 #include "polkitauthorizationresult.h"
 #include "polkitcheckauthorizationflags.h"
 #include "polkitauthority.h"
@@ -84,6 +80,7 @@
 enum
 {
   CHANGED_SIGNAL,
+  SESSIONS_CHANGED_SIGNAL,
   LAST_SIGNAL,
 };
 
@@ -113,9 +110,23 @@
                  gpointer      user_data)
 {
   PolkitAuthority *authority = POLKIT_AUTHORITY (user_data);
+  guint16 msg_mask;
+
   if (g_strcmp0 (signal_name, "Changed") == 0)
     {
-      g_signal_emit_by_name (authority, "changed");
+      if ((parameters != NULL) && g_variant_check_format_string(parameters, "(q)", FALSE))
+      {
+        g_variant_get(parameters, "(q)", &msg_mask);
+        if (msg_mask >= LAST_SIGNAL)
+        {
+          msg_mask = CHANGED_SIGNAL;  /* If signal not valid, we send generic "changed". */
+        }
+        g_signal_emit (authority, signalsmsg_mask, 0);
+      }
+      else
+      {
+        g_signal_emit_by_name (authority, "changed");
+      }
     }
 }
 
@@ -287,6 +298,21 @@
                                           g_cclosure_marshal_VOID__VOID,
                                           G_TYPE_NONE,
                                           0);
+  /**
+   * PolkitAuthority::sessions-changed:
+   * @authority: A #PolkitAuthority.
+   *
+   * Emitted when sessions change
+   */
+  signalsSESSIONS_CHANGED_SIGNAL = g_signal_new ("sessions-changed",
+                                                   POLKIT_TYPE_AUTHORITY,
+                                                   G_SIGNAL_RUN_LAST,
+                                                   0,                      /* class offset     */
+                                                   NULL,                   /* accumulator      */
+                                                   NULL,                   /* accumulator data */
+                                                   g_cclosure_marshal_VOID__VOID,
+                                                   G_TYPE_NONE,
+                                                   0);
 }
 
 /* ---------------------------------------------------------------------------------------------------- */

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitauthorityfeatures.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitauthorityfeatures.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitauthorizationresult.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitauthorizationresult.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitcheckauthorizationflags.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitcheckauthorizationflags.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitcheckauthorizationflags.h -> _service:tar_scm:125.tar.gz/src/polkit/polkitcheckauthorizationflags.h Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitdetails.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitdetails.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkiterror.c -> _service:tar_scm:125.tar.gz/src/polkit/polkiterror.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitidentity.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitidentity.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitimplicitauthorization.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitimplicitauthorization.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitpermission.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitpermission.c Changed

@@ -20,8 +20,8 @@
  *         David Zeuthen <davidz@redhat.com>
  */
 
-#ifdef HAVE_CONFIG_H
-#  include "config.h"
+#ifdef HAVE_LIBSYSTEMD
+#  include <systemd/sd-login.h>
 #endif
 
 #include <sys/types.h>
@@ -60,6 +60,8 @@
 
   gchar *action_id;
 
+  gchar *session_state;
+
   /* non-NULL exactly when authorized with a temporary authorization */
   gchar *tmp_authz_id;
 };
@@ -74,9 +76,14 @@
 static void process_result (PolkitPermission          *permission,
                             PolkitAuthorizationResult *result);
 
+static char *get_session_state();
+
 static void on_authority_changed (PolkitAuthority *authority,
                                   gpointer         user_data);
 
+static void on_sessions_changed (PolkitAuthority *authority,
+                                  gpointer         user_data);
+
 static gboolean acquire        (GPermission          *permission,
                                 GCancellable         *cancellable,
                                 GError              **error);
@@ -126,6 +133,8 @@
 
   if (G_OBJECT_CLASS (polkit_permission_parent_class)->constructed != NULL)
     G_OBJECT_CLASS (polkit_permission_parent_class)->constructed (object);
+
+  permission->session_state = get_session_state();
 }
 
 static void
@@ -135,6 +144,7 @@
 
   g_free (permission->action_id);
   g_free (permission->tmp_authz_id);
+  g_free (permission->session_state);
   g_object_unref (permission->subject);
 
   if (permission->authority != NULL)
@@ -142,6 +152,9 @@
       g_signal_handlers_disconnect_by_func (permission->authority,
                                             on_authority_changed,
                                             permission);
+      g_signal_handlers_disconnect_by_func (permission->authority,
+                                            on_sessions_changed,
+                                            permission);
       g_object_unref (permission->authority);
     }
 
@@ -420,6 +433,11 @@
                     G_CALLBACK (on_authority_changed),
                     permission);
 
+  g_signal_connect (permission->authority,
+                    "sessions-changed",
+                    G_CALLBACK (on_sessions_changed),
+                    permission);
+
   result = polkit_authority_check_authorization_sync (permission->authority,
                                                       permission->subject,
                                                       permission->action_id,
@@ -472,6 +490,37 @@
   g_object_unref (permission);
 }
 
+static char *get_session_state()
+{
+#ifdef HAVE_LIBSYSTEMD
+  char *session = NULL;
+  char *state = NULL;
+  uid_t uid;
+
+  if ( sd_pid_get_session(getpid(), &session) < 0 )
+    {
+      if ( sd_pid_get_owner_uid(getpid(), &uid) < 0)
+        {
+          goto out;
+        }
+      if (sd_uid_get_display(uid, &session) < 0)
+        {
+          goto out;
+        }
+    }
+
+  if (session != NULL)
+    {
+      sd_session_get_state(session, &state);
+    }
+out:
+  g_free(session);
+  return state;
+#else
+  return NULL;
+#endif
+}
+
 static void
 on_authority_changed (PolkitAuthority *authority,
                       gpointer         user_data)
@@ -488,6 +537,40 @@
                                         g_object_ref (permission));
 }
 
+
+static void on_sessions_changed (PolkitAuthority *authority,
+                      gpointer         user_data)
+{
+#ifdef HAVE_LIBSYSTEMD
+  char *new_session_state = NULL;
+  char *last_state = NULL;
+
+  PolkitPermission *permission = POLKIT_PERMISSION (user_data);
+
+  new_session_state = get_session_state();
+
+  /* if we cannot tell the session state, we should do CheckAuthorization anyway */
+  if ((new_session_state == NULL) || ( g_strcmp0(new_session_state, permission->session_state) != 0 ))
+    {
+      last_state = permission->session_state;
+      permission->session_state = new_session_state;
+      g_free(last_state);
+
+      polkit_authority_check_authorization (permission->authority,
+                                            permission->subject,
+                                            permission->action_id,
+                                            NULL, /* PolkitDetails */
+                                            POLKIT_CHECK_AUTHORIZATION_FLAGS_NONE,
+                                            NULL /* cancellable */,
+                                            changed_check_cb,
+                                            g_object_ref (permission));
+    }
+#else
+  on_authority_changed(authority, user_data);  /* TODO: resolve the "too many session signals" issue for non-systemd systems later */
+#endif
+}
+
+
 static void
 process_result (PolkitPermission          *permission,
                 PolkitAuthorizationResult *result)

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitprivate.h -> _service:tar_scm:125.tar.gz/src/polkit/polkitprivate.h Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitsubject.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitsubject.c Changed

@@ -19,10 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#ifdef HAVE_CONFIG_H
-#  include "config.h"
-#endif
-
 #include <string.h>
 #include <stdio.h>
 
@@ -243,7 +239,14 @@
       gint scanned_pid;
       guint64 scanned_starttime;
       gint scanned_uid;
-      if (sscanf (str, "unix-process:%d:%" G_GUINT64_FORMAT ":%d", &scanned_pid, &scanned_starttime, &scanned_uid) == 3)
+      gint scanned_pidfd;
+      if (sscanf (str, "unix-process:%d:%" G_GUINT64_FORMAT ":%d:%d", &scanned_pid, &scanned_starttime, &scanned_uid, &scanned_pidfd) == 4)
+        {
+          subject = polkit_unix_process_new_pidfd (scanned_pidfd, scanned_uid, NULL);
+          if (subject)
+            polkit_unix_process_set_start_time (POLKIT_UNIX_PROCESS (subject), scanned_starttime);
+        }
+      else if (sscanf (str, "unix-process:%d:%" G_GUINT64_FORMAT ":%d", &scanned_pid, &scanned_starttime, &scanned_uid) == 3)
         {
           subject = polkit_unix_process_new_for_owner (scanned_pid, scanned_starttime, scanned_uid);
         }
@@ -312,6 +315,9 @@
                              g_variant_new_uint64 (polkit_unix_process_get_start_time (POLKIT_UNIX_PROCESS (subject))));
       g_variant_builder_add (&builder, "{sv}", "uid",
                              g_variant_new_int32 (polkit_unix_process_get_uid (POLKIT_UNIX_PROCESS (subject))));
+      if (polkit_unix_process_get_pidfd_is_safe(POLKIT_UNIX_PROCESS (subject)))
+        g_variant_builder_add (&builder, "{sv}", "pidfd",
+                               g_variant_new_handle (polkit_unix_process_get_pidfd (POLKIT_UNIX_PROCESS (subject))));
     }
   else if (POLKIT_IS_UNIX_SESSION (subject))
     {
@@ -391,8 +397,9 @@
 }
 
 PolkitSubject *
-polkit_subject_new_for_gvariant (GVariant  *variant,
-                                 GError    **error)
+polkit_subject_new_for_gvariant_invocation (GVariant              *variant,
+                                            GDBusMethodInvocation *invocation,
+                                            GError                **error)
 {
   PolkitSubject *ret;
   const gchar *kind;
@@ -407,29 +414,13 @@
 
   if (g_strcmp0 (kind, "unix-process") == 0)
     {
+      GUnixFDList *fd_list;
       GVariant *v;
+      gint index, pidfd;
       guint32 pid;
       guint64 start_time;
       gint32 uid;
 
-      v = lookup_asv (details_gvariant, "pid", G_VARIANT_TYPE_UINT32, error);
-      if (v == NULL)
-        {
-          g_prefix_error (error, "Error parsing unix-process subject: ");
-          goto out;
-        }
-      pid = g_variant_get_uint32 (v);
-      g_variant_unref (v);
-
-      v = lookup_asv (details_gvariant, "start-time", G_VARIANT_TYPE_UINT64, error);
-      if (v == NULL)
-        {
-          g_prefix_error (error, "Error parsing unix-process subject: ");
-          goto out;
-        }
-      start_time = g_variant_get_uint64 (v);
-      g_variant_unref (v);
-
       v = lookup_asv (details_gvariant, "uid", G_VARIANT_TYPE_INT32, NULL);
       if (v != NULL)
         {
@@ -441,7 +432,51 @@
           uid = -1;
         }
 
-      ret = polkit_unix_process_new_for_owner (pid, start_time, uid);
+      fd_list = g_dbus_message_get_unix_fd_list (g_dbus_method_invocation_get_message (invocation));
+      if (fd_list)
+        {
+          v = lookup_asv (details_gvariant, "pidfd", G_VARIANT_TYPE_HANDLE, NULL);
+          if (v != NULL)
+            {
+              if (uid == -1)
+                {
+                  g_set_error (error,
+                               POLKIT_ERROR,
+                               POLKIT_ERROR_FAILED,
+                               "Error parsing unix-process subject: 'pidfd' specified withtout 'uid'");
+                  goto out;
+                }
+
+              index = g_variant_get_handle (v);
+              pidfd = g_unix_fd_list_get (fd_list, index, NULL);
+              g_variant_unref (v);
+
+              ret = polkit_unix_process_new_pidfd (pidfd, uid, NULL);
+            }
+        }
+
+      if (!ret)
+        {
+          v = lookup_asv (details_gvariant, "pid", G_VARIANT_TYPE_UINT32, error);
+          if (v == NULL)
+            {
+              g_prefix_error (error, "Error parsing unix-process subject: ");
+              goto out;
+            }
+          pid = g_variant_get_uint32 (v);
+          g_variant_unref (v);
+
+          v = lookup_asv (details_gvariant, "start-time", G_VARIANT_TYPE_UINT64, error);
+          if (v == NULL)
+            {
+              g_prefix_error (error, "Error parsing unix-process subject: ");
+              goto out;
+            }
+          start_time = g_variant_get_uint64 (v);
+          g_variant_unref (v);
+
+          ret = polkit_unix_process_new_for_owner (pid, start_time, uid);
+        }
     }
   else if (g_strcmp0 (kind, "unix-session") == 0)
     {
@@ -495,3 +530,10 @@
   g_variant_unref (details_gvariant);
   return ret;
 }
+
+PolkitSubject *
+polkit_subject_new_for_gvariant (GVariant  *variant,
+                                 GError    **error)
+{
+  return polkit_subject_new_for_gvariant_invocation (variant, NULL, error);
+}

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitsystembusname.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitsystembusname.c Changed

@@ -19,11 +19,8 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#ifdef HAVE_CONFIG_H
-#  include "config.h"
-#endif
-
 #include <string.h>
+#include <gio/gunixfdlist.h>
 #include "polkitsystembusname.h"
 #include "polkitunixuser.h"
 #include "polkitsubject.h"
@@ -390,26 +387,19 @@
 }
 
 static gboolean
-polkit_system_bus_name_get_creds_sync (PolkitSystemBusName           *system_bus_name,
+polkit_system_bus_name_get_creds_fallback (PolkitSystemBusName           *system_bus_name,
 				       guint32                       *out_uid,
 				       guint32                       *out_pid,
 				       GCancellable                  *cancellable,
+				       GDBusConnection               *connection,
+				       GMainContext                  *tmp_context,
 				       GError                       **error)
 {
   gboolean ret = FALSE;
-  AsyncGetBusNameCredsData data = { 0, };
-  GDBusConnection *connection = NULL;
-  GMainContext *tmp_context = NULL;
-
-  connection = g_bus_get_sync (G_BUS_TYPE_SYSTEM, cancellable, error);
-  if (connection == NULL)
-    goto out;
+  AsyncGetBusNameCredsData data = { };
 
   data.error = error;
 
-  tmp_context = g_main_context_new ();
-  g_main_context_push_thread_default (tmp_context);
-
   dbus_call_respond_fails = 0;
 
   /* Do two async calls as it's basically as fast as one sync call.
@@ -481,6 +471,132 @@
     }
   if (connection != NULL)
     g_object_unref (connection);
+
+  return ret;
+}
+
+static gboolean
+polkit_system_bus_name_get_creds_sync (PolkitSystemBusName           *system_bus_name,
+				       guint32                       *out_uid,
+				       GArray                       **out_gids,
+				       guint32                       *out_pid,
+				       gint                          *out_pidfd,
+				       GCancellable                  *cancellable,
+				       GError                       **error)
+{
+  gboolean ret = FALSE;
+  GDBusConnection *connection = NULL;
+  GMainContext *tmp_context = NULL;
+  GVariantIter *iter;
+  GVariant *result, *value;
+  GUnixFDList *fd_list = NULL;
+  GError *dbus_error = NULL;
+  const gchar *key;
+  guint32 uid = G_MAXUINT32, pid = 0;
+  gint pidfd = -1;
+  GArray *gids = NULL;
+
+  connection = g_bus_get_sync (G_BUS_TYPE_SYSTEM, cancellable, error);
+  if (connection == NULL)
+    goto out;
+
+  tmp_context = g_main_context_new ();
+  g_main_context_push_thread_default (tmp_context);
+
+  /* If the new unified API is available (since dbus-daemon 1.10.4) use it,
+   * or fallback to the old separate calls.
+   * Since dbus-daemon 1.15.7 and dbus-broker 34, the new API will return
+   * a ProcessFD that we can use to pin the caller against PID reuse.
+   */
+  result = g_dbus_connection_call_with_unix_fd_list_sync (connection,
+			  "org.freedesktop.DBus",       /* name */
+			  "/org/freedesktop/DBus",      /* object path */
+			  "org.freedesktop.DBus",       /* interface name */
+			  "GetConnectionCredentials",   /* method */
+			  g_variant_new ("(s)", system_bus_name->name),
+			  G_VARIANT_TYPE ("(a{sv})"),
+			  G_DBUS_CALL_FLAGS_NONE,
+			  -1,
+			  NULL,
+			  &fd_list,
+			  cancellable,
+			  &dbus_error);
+
+  if (result == NULL)
+  {
+    if (g_error_matches (dbus_error, G_DBUS_ERROR, G_DBUS_ERROR_UNKNOWN_METHOD))
+      {
+        g_error_free (dbus_error);
+        return polkit_system_bus_name_get_creds_fallback(system_bus_name,
+                                                         out_uid,
+                                                         out_pid,
+                                                         cancellable,
+                                                         connection,
+                                                         tmp_context,
+                                                         error);
+      }
+    else
+      goto out;
+  }
+
+  g_variant_get (result, "(a{sv})", &iter);
+
+  while (g_variant_iter_loop (iter, "{&sv}", &key, &value))
+    {
+      if (g_strcmp0 (key, "ProcessID") == 0)
+        pid = g_variant_get_uint32 (value);
+      else if (g_strcmp0 (key, "UnixUserID") == 0)
+        uid = g_variant_get_uint32 (value);
+      else if (g_strcmp0 (key, "UnixGroupIDs") == 0)
+        {
+          GVariantIter *group_iter;
+          gid_t gid;
+
+          gids = g_array_new (FALSE, FALSE, sizeof (gid_t));
+          g_variant_get (value, "au", &group_iter);
+          while (g_variant_iter_loop (group_iter, "u", &gid))
+            g_array_append_val (gids, gid);
+          g_variant_iter_free (group_iter);
+        }
+      else if (g_strcmp0 (key, "ProcessFD") == 0)
+        {
+          gint32 index = g_variant_get_handle (value);
+          pidfd = g_unix_fd_list_get (fd_list, index, error);
+        }
+    }
+
+  g_variant_unref (result);
+
+  if (out_uid)
+    *out_uid = uid;
+  if (out_gids && gids)
+    *out_gids = g_array_ref(gids);
+  if (out_pid)
+    *out_pid = pid;
+  if (out_pidfd)
+    *out_pidfd = pidfd;
+  else if (pidfd >= 0)
+    close (pidfd);
+  ret = TRUE;
+ out:
+  if (tmp_context)
+    {
+      g_main_context_pop_thread_default (tmp_context);
+      g_main_context_unref (tmp_context);
+    }
+  if (connection != NULL)
+    g_object_unref (connection);
+  if (!ret && pidfd >= 0)
+    close (pidfd);
+  if (dbus_error && error)
+    g_propagate_error (error, dbus_error);
+  else if (dbus_error)
+    g_error_free (dbus_error);
+  if (gids)
+    g_array_unref (gids);
+  if (fd_list != NULL)
+    g_object_unref (fd_list);
+
   return ret;
 }
 
@@ -501,20 +617,29 @@
                                          GError              **error)
 {
   PolkitSubject *ret = NULL;
+  gint pidfd = -1;
   guint32 pid;
   guint32 uid;
+  GArray *gids = NULL;
 
   g_return_val_if_fail (POLKIT_IS_SYSTEM_BUS_NAME (system_bus_name), NULL);
   g_return_val_if_fail (cancellable == NULL || G_IS_CANCELLABLE (cancellable), NULL);
   g_return_val_if_fail (error == NULL || *error == NULL, NULL);
 
-  if (!polkit_system_bus_name_get_creds_sync (system_bus_name, &uid, &pid,
+  if (!polkit_system_bus_name_get_creds_sync (system_bus_name, &uid, &gids, &pid, &pidfd,
 					      cancellable, error))
     goto out;
 
-  ret = polkit_unix_process_new_for_owner (pid, 0, uid);
+  if (pidfd >= 0)
+    ret = polkit_unix_process_new_pidfd (pidfd, uid, gids);
+  else
+    ret = polkit_unix_process_new_for_owner (pid, 0, uid);

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkittemporaryauthorization.c -> _service:tar_scm:125.tar.gz/src/polkit/polkittemporaryauthorization.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitunixgroup.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitunixgroup.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitunixnetgroup.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitunixnetgroup.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitunixprocess.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitunixprocess.c Changed

@@ -19,10 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#ifdef HAVE_CONFIG_H
-#  include "config.h"
-#endif
-
 #include <sys/types.h>
 #ifdef HAVE_FREEBSD
 #include <sys/param.h>
@@ -36,6 +32,9 @@
 #ifdef HAVE_OPENBSD
 #include <sys/sysctl.h>
 #endif
+#ifdef HAVE_PIDFD_OPEN
+#include <sys/syscall.h>
+#endif /* HAVE_PIDFD_OPEN */
 #include <stdlib.h>
 #include <string.h>
 #include <errno.h>
@@ -51,9 +50,15 @@
  * @title: PolkitUnixProcess
  * @short_description: Unix processs
  *
- * An object for representing a UNIX process.  NOTE: This object as
- * designed is now known broken; a mechanism to exploit a delay in
- * start time in the Linux kernel was identified.  Avoid
+ * An object for representing a UNIX process. In order to be reliable and
+ * race-free, this requires support for PID File Descriptors in the kernel,
+ * dbus-daemon/broker and systemd. With this functionality, we can reliably
+ * track processes without risking PID reuse and race conditions, and compare
+ * them.
+ *
+ * NOTE: If PID FDs are not available, this object will fall back to using
+ * PIDs, and this designed is now known broken; a mechanism to exploit a delay
+ * in start time in the Linux kernel was identified.  Avoid
  * calling polkit_subject_equal() to compare two processes.
  *
  * To uniquely identify processes, both the process id and the start
@@ -147,6 +152,9 @@
   gint pid;
   guint64 start_time;
   gint uid;
+  gint pidfd;
+  gboolean pidfd_is_safe;
+  GArray *gids;
 };
 
 struct _PolkitUnixProcessClass
@@ -159,7 +167,10 @@
   PROP_0,
   PROP_PID,
   PROP_START_TIME,
-  PROP_UID
+  PROP_UID,
+  PROP_PIDFD,
+  PROP_PIDFD_IS_SAFE,
+  PROP_GIDS,
 };
 
 static void subject_iface_init (PolkitSubjectIface *subject_iface);
@@ -184,6 +195,7 @@
 polkit_unix_process_init (PolkitUnixProcess *unix_process)
 {
   unix_process->uid = -1;
+  unix_process->pidfd = -1;
 }
 
 static void
@@ -197,13 +209,25 @@
   switch (prop_id)
     {
     case PROP_PID:
-      g_value_set_int (value, unix_process->pid);
+      g_value_set_int (value, polkit_unix_process_get_pid (unix_process));
       break;
 
     case PROP_UID:
       g_value_set_int (value, unix_process->uid);
       break;
 
+    case PROP_GIDS:
+      g_value_set_boxed (value, unix_process->gids);
+      break;
+
+    case PROP_PIDFD:
+      g_value_set_int (value, unix_process->pidfd);
+      break;
+
+    case PROP_PIDFD_IS_SAFE:
+      g_value_set_boolean (value, unix_process->pidfd_is_safe);
+      break;
+
     case PROP_START_TIME:
       g_value_set_uint64 (value, unix_process->start_time);
       break;
@@ -232,6 +256,14 @@
       polkit_unix_process_set_uid (unix_process, g_value_get_int (value));
       break;
 
+    case PROP_GIDS:
+      polkit_unix_process_set_gids (unix_process, g_value_get_boxed (value));
+      break;
+
+    case PROP_PIDFD:
+      polkit_unix_process_set_pidfd (unix_process, g_value_get_int (value));
+      break;
+
     case PROP_START_TIME:
       polkit_unix_process_set_start_time (unix_process, g_value_get_uint64 (value));
       break;
@@ -242,15 +274,87 @@
     }
 }
 
+static gint
+polkit_unix_process_get_pid_from_pidfd (PolkitUnixProcess  *process,
+                                        GError            **error)
+{
+  gint result;
+  gchar *contents;
+  gchar **lines;
+  gchar filename64;
+  guint n;
+
+  g_return_val_if_fail (POLKIT_IS_UNIX_PROCESS (process), -1);
+  g_return_val_if_fail (error == NULL || *error == NULL, -1);
+  g_return_val_if_fail (process->pidfd >= 0, -1);
+
+  result = -1;
+  lines = NULL;
+  contents = NULL;
+
+  g_snprintf (filename, sizeof filename, "/proc/self/fdinfo/%d", process->pidfd);
+  if (!g_file_get_contents (filename,
+                            &contents,
+                            NULL,
+                            error))
+    goto out;
+
+  lines = g_strsplit (contents, "\n", -1);
+  for (n = 0; lines != NULL && linesn != NULL; n++)
+    {
+      gint pid;
+      if (!g_str_has_prefix (linesn, "Pid:"))
+        continue;
+      if (sscanf (linesn + 4, "%d", &pid) != 1)
+        g_set_error (error,
+                      POLKIT_ERROR,
+                      POLKIT_ERROR_FAILED,
+                      "Unexpected line `%s' in file %s",
+                      linesn,
+                      filename);
+      else
+        result = pid;
+      goto out;
+    }
+
+  g_set_error (error,
+               POLKIT_ERROR,
+               POLKIT_ERROR_FAILED,
+               "Didn't find any line starting with `Pid:' in file %s",
+               filename);
+
+out:
+  g_strfreev (lines);
+  g_free (contents);
+  return result;
+}
+
 static void
 polkit_unix_process_constructed (GObject *object)
 {
   PolkitUnixProcess *process = POLKIT_UNIX_PROCESS (object);
 
-  /* sets start_time and uid in case they are unset */
+  /* sets pidfd, start_time and uid in case they are unset */
+
+  /* We didn't open it ourselves here, so we must have got it
+   * from D-Bus, mark it as safe to use */
+  if (process->pidfd >= 0)
+    process->pidfd_is_safe = TRUE;
+
+#ifdef HAVE_PIDFD_OPEN
+  if (process->pid > 0 && process->pidfd < 0)
+    {
+      gint pidfd = (int) syscall (SYS_pidfd_open, process->pid, 0);
+      if (pidfd >= 0)
+        {
+          process->pidfd = pidfd;
+          process->pid = 0;
+        }
+    }
+#endif /* HAVE_PIDFD_OPEN */
 
   if (process->start_time == 0)
-    process->start_time = get_start_time_for_pid (process->pid, NULL);
+    process->start_time = get_start_time_for_pid (polkit_unix_process_get_pid (process), NULL);

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitunixprocess.h -> _service:tar_scm:125.tar.gz/src/polkit/polkitunixprocess.h Changed

@@ -55,9 +55,15 @@
 PolkitSubject  *polkit_unix_process_new_for_owner  (gint               pid,
                                                     guint64            start_time,
                                                     gint               uid);
+PolkitSubject  *polkit_unix_process_new_pidfd      (gint               pidfd,
+                                                    gint               uid,
+                                                    GArray            *gids);
+GArray         *polkit_unix_process_get_gids       (PolkitUnixProcess *process);
 gint            polkit_unix_process_get_pid        (PolkitUnixProcess *process);
 guint64         polkit_unix_process_get_start_time (PolkitUnixProcess *process);
 gint            polkit_unix_process_get_uid        (PolkitUnixProcess *process);
+void            polkit_unix_process_set_gids       (PolkitUnixProcess *process,
+                                                    GArray            *gids);
 void            polkit_unix_process_set_pid        (PolkitUnixProcess *process,
                                                     gint               pid);
 void            polkit_unix_process_set_uid        (PolkitUnixProcess *process,
@@ -67,6 +73,10 @@
 
 gint            polkit_unix_process_get_owner      (PolkitUnixProcess  *process,
                                                     GError            **error) G_GNUC_DEPRECATED_FOR (polkit_unix_process_get_uid);
+gint            polkit_unix_process_get_pidfd      (PolkitUnixProcess  *process);
+void            polkit_unix_process_set_pidfd      (PolkitUnixProcess  *process,
+                                                    gint                pidfd);
+gboolean        polkit_unix_process_get_pidfd_is_safe (PolkitUnixProcess *process);
 
 G_END_DECLS

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitunixsession-systemd.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitunixsession-systemd.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitunixsession.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitunixsession.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkit/polkitunixuser.c -> _service:tar_scm:125.tar.gz/src/polkit/polkitunixuser.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/meson.build -> _service:tar_scm:125.tar.gz/src/polkitagent/meson.build Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/polkitagenthelper-bsdauth.c -> _service:tar_scm:125.tar.gz/src/polkitagent/polkitagenthelper-bsdauth.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/polkitagenthelper-pam.c -> _service:tar_scm:125.tar.gz/src/polkitagent/polkitagenthelper-pam.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/polkitagenthelper-shadow.c -> _service:tar_scm:125.tar.gz/src/polkitagent/polkitagenthelper-shadow.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/polkitagenthelperprivate.c -> _service:tar_scm:125.tar.gz/src/polkitagent/polkitagenthelperprivate.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/polkitagentlistener.c -> _service:tar_scm:125.tar.gz/src/polkitagent/polkitagentlistener.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/polkitagentsession.c -> _service:tar_scm:125.tar.gz/src/polkitagent/polkitagentsession.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitagent/polkitagenttextlistener.c -> _service:tar_scm:125.tar.gz/src/polkitagent/polkitagenttextlistener.c Changed

@@ -19,8 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#include "config.h"
-
 #include <errno.h>
 #include <string.h>
 #include <stdio.h>
@@ -330,6 +328,7 @@
   PolkitAgentTextListener *listener = POLKIT_AGENT_TEXT_LISTENER (user_data);
   struct termios ts, ots;
   GString *str;
+  gint c;
 
   fprintf (listener->tty, "%s", request);
   fflush (listener->tty);
@@ -374,7 +373,6 @@
   str = g_string_new (NULL);
   while (TRUE)
     {
-      gint c;
       c = getc (listener->tty);
       if (c == '\n')
         {
@@ -384,8 +382,7 @@
       else if (c == EOF)
         {
           tcsetattr (fileno (listener->tty), TCSAFLUSH, &ots);
-          g_error ("Got unexpected EOF while reading from controlling terminal.");
-          abort ();
+          g_warning ("Got unexpected EOF while reading from controlling terminal.");
           break;
         }
       else
@@ -397,7 +394,15 @@
   g_signal_emit_by_name(listener, "tty_attrs_changed", FALSE);
   putc ('\n', listener->tty);
 
-  polkit_agent_session_response (session, str->str);
+  if (c == EOF)
+    {
+      polkit_agent_session_cancel (listener->active_session);
+    }
+  else
+    {
+      polkit_agent_session_response (session, str->str);
+    }
+
   memset (str->str, '\0', str->len);
   g_string_free (str, TRUE);
 }
@@ -512,9 +517,9 @@
         }
       else if (c == EOF)
         {
-          g_error ("Got unexpected EOF while reading from controlling terminal.");
-          abort ();
-          break;
+          g_warning ("Got unexpected EOF while reading from controlling terminal.");
+          ret = NULL;   /* let' be defensive */
+          goto out;
         }
       else
         {

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendactionlookup.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendactionlookup.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendactionpool.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendactionpool.c Changed

@@ -19,7 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#include "config.h"
 #include <errno.h>
 #include <pwd.h>
 #include <string.h>
@@ -111,8 +110,6 @@
   PROP_DIRECTORY,
 };
 
-#define POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE(o) (G_TYPE_INSTANCE_GET_PRIVATE ((o), POLKIT_BACKEND_TYPE_ACTION_POOL, PolkitBackendActionPoolPrivate))
-
 enum
 {
   CHANGED_SIGNAL,
@@ -121,14 +118,14 @@
 
 static guint signalsLAST_SIGNAL = {0};
 
-G_DEFINE_TYPE (PolkitBackendActionPool, polkit_backend_action_pool, G_TYPE_OBJECT);
+G_DEFINE_TYPE_WITH_PRIVATE (PolkitBackendActionPool, polkit_backend_action_pool, G_TYPE_OBJECT);
 
 static void
 polkit_backend_action_pool_init (PolkitBackendActionPool *pool)
 {
   PolkitBackendActionPoolPrivate *priv;
 
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   priv->parsed_actions = g_hash_table_new_full (g_str_hash,
                                                 g_str_equal,
@@ -148,7 +145,7 @@
   PolkitBackendActionPoolPrivate *priv;
 
   pool = POLKIT_BACKEND_ACTION_POOL (object);
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   if (priv->directory != NULL)
     g_object_unref (priv->directory);
@@ -175,7 +172,7 @@
   PolkitBackendActionPoolPrivate *priv;
 
   pool = POLKIT_BACKEND_ACTION_POOL (object);
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   switch (prop_id)
     {
@@ -200,7 +197,7 @@
   PolkitBackendActionPoolPrivate *priv;
 
   pool = POLKIT_BACKEND_ACTION_POOL (user_data);
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   /* TODO: maybe rate-limit so storms of events are collapsed into one with a 500ms resolution?
    *       Because when editing a file with emacs we get 4-8 events..
@@ -248,7 +245,7 @@
   GError *error;
 
   pool = POLKIT_BACKEND_ACTION_POOL (object);
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   switch (prop_id)
     {
@@ -289,8 +286,6 @@
   gobject_class->set_property = polkit_backend_action_pool_set_property;
   gobject_class->finalize     = polkit_backend_action_pool_finalize;
 
-  g_type_class_add_private (klass, sizeof (PolkitBackendActionPoolPrivate));
-
   /**
    * PolkitBackendActionPool:directory:
    *
@@ -369,7 +364,7 @@
 
   g_return_val_if_fail (POLKIT_BACKEND_IS_ACTION_POOL (pool), NULL);
 
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   /* TODO: just compute the name of the expected file and ensure it's parsed */
   ensure_all_files (pool);
@@ -427,7 +422,7 @@
 
   g_return_val_if_fail (POLKIT_BACKEND_IS_ACTION_POOL (pool), NULL);
 
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   ensure_all_files (pool);
 
@@ -462,7 +457,7 @@
   GError *error;
   gchar *uri;
 
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   uri = g_file_get_uri (file);
 
@@ -508,7 +503,7 @@
   GFileInfo *file_info;
   GError *error;
 
-  priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pool);
+  priv = polkit_backend_action_pool_get_instance_private (pool);
 
   e = NULL;
 
@@ -971,7 +966,7 @@
         ParsedAction *action;
         PolkitBackendActionPoolPrivate *priv;
 
-        priv = POLKIT_BACKEND_ACTION_POOL_GET_PRIVATE (pd->pool);
+        priv = polkit_backend_action_pool_get_instance_private (pd->pool);
 
         vendor = pd->vendor;
         if (vendor == NULL)

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendauthority.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendauthority.c Changed

@@ -19,7 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#include "config.h"
 #include <errno.h>
 #include <pwd.h>
 #include <string.h>
@@ -48,10 +47,12 @@
 enum
 {
   CHANGED_SIGNAL,
+  SESSIONS_CHANGED_SIGNAL,
   LAST_SIGNAL,
 };
 
 static guint signalsLAST_SIGNAL = {0};
+static guint polkit_authority_log_level = LOG_LEVEL_ERROR;
 
 G_DEFINE_ABSTRACT_TYPE (PolkitBackendAuthority, polkit_backend_authority, G_TYPE_OBJECT);
 
@@ -78,6 +79,15 @@
                                           g_cclosure_marshal_VOID__VOID,
                                           G_TYPE_NONE,
                                           0);
+  signalsSESSIONS_CHANGED_SIGNAL = g_signal_new ("sessions-changed",
+                                                   POLKIT_BACKEND_TYPE_AUTHORITY,
+                                                   G_SIGNAL_RUN_LAST,
+                                                   G_STRUCT_OFFSET (PolkitBackendAuthorityClass, changed),
+                                                   NULL,                   /* accumulator      */
+                                                   NULL,                   /* accumulator data */
+                                                   g_cclosure_marshal_VOID__VOID,
+                                                   G_TYPE_NONE,
+                                                   0);
 }
 
 /**
@@ -492,6 +502,7 @@
 typedef struct
 {
   guint authority_registration_id;
+  guint log_control_registration_id;
 
   GDBusNodeInfo *introspection_info;
 
@@ -501,6 +512,8 @@
 
   gulong authority_changed_id;
 
+  gulong authority_session_monitor_signaller;
+
   gchar *object_path;
 
   GHashTable *cancellation_id_to_check_auth_data;
@@ -514,6 +527,9 @@
   if (server->authority_registration_id > 0)
     g_dbus_connection_unregister_object (server->connection, server->authority_registration_id);
 
+  if (server->log_control_registration_id > 0)
+    g_dbus_connection_unregister_object (server->connection, server->log_control_registration_id);
+
   if (server->connection != NULL)
     g_object_unref (server->connection);
 
@@ -523,6 +539,9 @@
   if (server->authority != NULL && server->authority_changed_id > 0)
     g_signal_handler_disconnect (server->authority, server->authority_changed_id);
 
+  if (server->authority != NULL && server->authority_session_monitor_signaller > 0)
+    g_signal_handler_disconnect (server->authority, server->authority_session_monitor_signaller);
+
   if (server->cancellation_id_to_check_auth_data != NULL)
     g_hash_table_unref (server->cancellation_id_to_check_auth_data);
 
@@ -531,20 +550,23 @@
   g_free (server);
 }
 
-static void
-on_authority_changed (PolkitBackendAuthority *authority,
-                      gpointer                user_data)
+static void changed_dbus_call_handler(PolkitBackendAuthority *authority,
+                                      gpointer                user_data,
+                                      guint16                 msg_mask)
 {
   Server *server = user_data;
   GError *error;
+  GVariant *parameters;
 
   error = NULL;
+
+  parameters = g_variant_new("(q)", msg_mask);
   if (!g_dbus_connection_emit_signal (server->connection,
                                       NULL, /* destination bus name */
                                       server->object_path,
                                       "org.freedesktop.PolicyKit1.Authority",
                                       "Changed",
-                                      NULL,
+                                      parameters,
                                       &error))
     {
       g_warning ("Error emitting Changed() signal: %s", error->message);
@@ -552,6 +574,29 @@
     }
 }
 
+
+static void
+on_authority_changed (PolkitBackendAuthority *authority,
+                      gpointer                user_data)
+{
+  guint16 msg_mask;
+
+  msg_mask = (guint16) CHANGED_SIGNAL;
+  changed_dbus_call_handler(authority, user_data, msg_mask);
+}
+
+
+static void
+on_sessions_changed (PolkitBackendAuthority *authority,
+                      gpointer                user_data)
+{
+  guint16 msg_mask;
+
+  msg_mask = (guint16) SESSIONS_CHANGED_SIGNAL;
+  changed_dbus_call_handler(authority, user_data, msg_mask);
+}
+
+
 static const gchar *server_introspection_data =
   "<node>"
   "  <interface name='org.freedesktop.PolicyKit1.Authority'>"
@@ -609,6 +654,17 @@
   "    <property type='s' name='BackendVersion' access='read'/>"
   "    <property type='u' name='BackendFeatures' access='read'/>"
   "  </interface>"
+  "  <interface name='org.freedesktop.LogControl1'>"
+  "    <property type='s' name='LogLevel' access='readwrite'>"
+  "      <annotation name='org.freedesktop.DBus.Property.EmitsChangedSignal' value='false'/>"
+  "    </property>"
+  "    <property type='s' name='LogTarget' access='readwrite'>"
+  "      <annotation name='org.freedesktop.DBus.Property.EmitsChangedSignal' value='false'/>"
+  "    </property>"
+  "    <property type='s' name='SyslogIdentifier' access='read'>"
+  "      <annotation name='org.freedesktop.DBus.Property.EmitsChangedSignal' value='false'/>"
+  "    </property>"
+  "  </interface>"
   "</node>";
 
 /* ---------------------------------------------------------------------------------------------------- */
@@ -742,7 +798,7 @@
                  &cancellation_id);
 
   error = NULL;
-  subject = polkit_subject_new_for_gvariant (subject_gvariant, &error);
+  subject = polkit_subject_new_for_gvariant_invocation (subject_gvariant, invocation, &error);
   if (subject == NULL)
     {
       g_prefix_error (&error, "Error getting subject: ");
@@ -1308,22 +1364,95 @@
 
   result = NULL;
 
-  if (g_strcmp0 (property_name, "BackendName") == 0)
+  if (g_strcmp0 (interface_name, "org.freedesktop.PolicyKit1.Authority") == 0)
     {
-      result = g_variant_new_string (polkit_backend_authority_get_name (server->authority));
+      if (g_strcmp0 (property_name, "BackendName") == 0)
+        {
+          result = g_variant_new_string (polkit_backend_authority_get_name (server->authority));
+        }
+      else if (g_strcmp0 (property_name, "BackendVersion") == 0)
+        {
+          result = g_variant_new_string (polkit_backend_authority_get_version (server->authority));
+        }
+      else if (g_strcmp0 (property_name, "BackendFeatures") == 0)
+        {
+          result = g_variant_new_uint32 (polkit_backend_authority_get_features (server->authority));
+        }
+      else
+        g_assert_not_reached ();
     }
-  else if (g_strcmp0 (property_name, "BackendVersion") == 0)
+  else if (g_strcmp0 (interface_name, "org.freedesktop.LogControl1") == 0)
     {
-      result = g_variant_new_string (polkit_backend_authority_get_version (server->authority));
+      if (g_strcmp0 (property_name, "LogLevel") == 0)
+        {
+          switch (polkit_authority_log_level)
+            {
+            case LOG_LEVEL_EMERG:
+              result = g_variant_new_string ("emerg");
+              break;
+            case LOG_LEVEL_ALERT:
+              result = g_variant_new_string ("alert");
+              break;
+            case LOG_LEVEL_CRIT:
+              result = g_variant_new_string ("crit");
+              break;
+            case LOG_LEVEL_ERROR:

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendauthority.h -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendauthority.h Changed

@@ -53,6 +53,21 @@
 };
 
 /**
+ * Log levels aligned with those used in syslog and LogControl
+ */
+enum
+{
+	LOG_LEVEL_EMERG,
+	LOG_LEVEL_ALERT,
+	LOG_LEVEL_CRIT,
+	LOG_LEVEL_ERROR,
+	LOG_LEVEL_WARNING,
+	LOG_LEVEL_NOTICE,
+	LOG_LEVEL_INFO,
+	LOG_LEVEL_DEBUG
+};
+
+/**
  * PolkitBackendAuthorityClass:
  * @parent_class: The parent class.
  * @get_name: Function pointer for the polkit_backend_authority_get_name() function.
@@ -212,9 +227,13 @@
 PolkitAuthorityFeatures  polkit_backend_authority_get_features (PolkitBackendAuthority *authority);
 
 void     polkit_backend_authority_log (PolkitBackendAuthority *authority,
+                                       const guint message_log_level,
                                        const gchar *format,
                                        ...);
 
+void
+polkit_backend_authority_set_log_level (const gchar *level);
+
 GList   *polkit_backend_authority_enumerate_actions         (PolkitBackendAuthority    *authority,
                                                              PolkitSubject             *caller,
                                                              const gchar               *locale,

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendcommon.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendcommon.c Changed

@@ -172,13 +172,14 @@
   if (g_io_channel_read_to_end (data->child_stdout_channel, &buf, &buf_size, NULL) == G_IO_STATUS_NORMAL)
     {
       g_string_append_len (data->child_stdout, buf, buf_size);
-      g_free (buf);
     }
+  g_free (buf);
+
   if (g_io_channel_read_to_end (data->child_stderr_channel, &buf, &buf_size, NULL) == G_IO_STATUS_NORMAL)
     {
       g_string_append_len (data->child_stderr, buf, buf_size);
-      g_free (buf);
     }
+  g_free (buf);
 
   data->exit_status = status;
 
@@ -348,6 +349,7 @@
            event_type == G_FILE_MONITOR_EVENT_CHANGES_DONE_HINT))
         {
           polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                        LOG_LEVEL_NOTICE,
                                         "Reloading rules");
           polkit_backend_common_reload_scripts (authority);
         }
@@ -528,3 +530,134 @@
   data->res = (GAsyncResult*)g_object_ref (res);
   g_main_loop_quit (data->loop);
 }
+
+void
+polkit_backend_common_pidfd_to_systemd_unit (gint      pidfd,
+                                             gchar   **ret_unit,
+                                             gboolean *ret_no_new_privs)
+{
+  static int cached_has_pidfd_support = -1;
+  GError *error = NULL;
+  GDBusConnection *connection = NULL;
+  GMainContext *tmp_context = NULL;
+  GVariant *result = NULL, *no_new_privs_result = NULL, *no_new_privis_value;
+  GUnixFDList *fd_list = NULL;
+  const char *unit_path, *unit;
+  int fd_id;
+
+  /* Try to lookup using a PIDFD, so that we do not have issues with PIDs being
+   * recycled under our nose. For that we need both a kernel that supports the
+   * PIDFD syscalls (no wrapper from glibc, so need to call it directly) and a
+   * version of systemd with the new GetUnitByPIDFD method. If either are not
+   * available, then return nothing, as we don't want to be open to PID recycle
+   * attacks.
+   */
+
+  g_assert (ret_unit != NULL);
+  g_assert (ret_no_new_privs != NULL);
+
+  if (pidfd < 0 || cached_has_pidfd_support == 0)
+    return;
+
+  connection = g_bus_get_sync (G_BUS_TYPE_SYSTEM, NULL, &error);
+  if (connection == NULL)
+    {
+      g_warning ("Error getting system bus: %s", error->message);
+      goto out;
+    }
+
+  tmp_context = g_main_context_new ();
+  g_main_context_push_thread_default (tmp_context);
+
+  fd_list = g_unix_fd_list_new ();
+  if (fd_list == NULL)
+    goto out;
+
+  fd_id = g_unix_fd_list_append (fd_list, pidfd, &error);
+  if (fd_id < 0)
+    {
+      g_warning ("Error appending PID FD to fd list: %s", error->message);
+      goto out;
+    }
+
+  result = g_dbus_connection_call_with_unix_fd_list_sync (connection,
+        "org.freedesktop.systemd1",         /* name */
+        "/org/freedesktop/systemd1",        /* object path */
+        "org.freedesktop.systemd1.Manager", /* interface name */
+        "GetUnitByPIDFD",                   /* method */
+        g_variant_new ("(h)", fd_id),
+        G_VARIANT_TYPE ("(osay)"),
+        G_DBUS_CALL_FLAGS_NONE,
+        -1,
+        fd_list,
+        NULL,
+        NULL,
+        &error);
+
+  if (result == NULL)
+    {
+      if (g_error_matches (error, G_DBUS_ERROR, G_DBUS_ERROR_UNKNOWN_METHOD))
+        cached_has_pidfd_support = 0;
+
+      g_warning ("Error calling GetUnitByPIDFD: %s", error->message);
+      goto out;
+    }
+
+  g_variant_get (result, "(&o&say)", &unit_path, &unit, NULL);
+  if (unit == NULL)
+    goto out;
+
+  /* Check for NoNewPrivileges property being set on the unit via D-Bus, and
+   * return if it is not. This protects against PID changes, as if unset the
+   * unit could use a setuid binary. */
+  no_new_privs_result = g_dbus_connection_call_sync (connection,
+        "org.freedesktop.systemd1",         /* name */
+        unit_path,                          /* object path */
+        "org.freedesktop.DBus.Properties",  /* interface name */
+        "Get",                              /* method */
+        g_variant_new ("(ss)", "org.freedesktop.systemd1.Service", "NoNewPrivileges"),
+        G_VARIANT_TYPE ("(v)"),
+        G_DBUS_CALL_FLAGS_NONE,
+        -1,
+        NULL,
+        &error);
+
+  if (no_new_privs_result == NULL)
+    {
+      g_warning ("Error calling Get on NoNewPrivileges property for unit %s: %s", unit, error->message);
+      goto out;
+    }
+
+  g_variant_get (no_new_privs_result, "(v)", &no_new_privis_value);
+  if (no_new_privis_value == NULL)
+    {
+      g_warning ("Error getting value for NoNewPrivileges property for unit %s", unit);
+      goto out;
+    }
+
+  *ret_unit = strdup (unit);
+  if (!*ret_unit)
+    {
+      g_warning ("Failed to allocate memory for systemd unit ID");
+      goto out;
+    }
+
+  *ret_no_new_privs = g_variant_get_boolean (no_new_privis_value);
+
+ out:
+  if (tmp_context)
+    {
+      g_main_context_pop_thread_default (tmp_context);
+      g_main_context_unref (tmp_context);
+    }
+  if (connection != NULL)
+    g_object_unref (connection);
+  if (result != NULL)
+    g_variant_unref (result);
+  if (no_new_privs_result != NULL)
+    g_variant_unref (no_new_privs_result);
+  if (fd_list != NULL)
+    g_object_unref (fd_list);
+  if (error)
+    g_error_free (error);
+}

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendcommon.h -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendcommon.h Changed

@@ -26,7 +26,6 @@
 #ifndef __POLKIT_BACKEND_COMMON_H
 #define __POLKIT_BACKEND_COMMON_H
 
-#include "config.h"
 #include <sys/wait.h>
 #include <errno.h>
 #include <pwd.h>
@@ -37,6 +36,7 @@
 #include <netdb.h>
 #endif
 #include <string.h>
+#include <gio/gunixfdlist.h>
 #include <glib/gstdio.h>
 #include <locale.h>
 #include <glib/gi18n-lib.h> //here, all things glib via glib.h (including -> gspawn.h)
@@ -150,6 +150,9 @@
                                                                                          const gchar                       *action_id,
                                                                                          PolkitDetails                     *details,
                                                                                          PolkitImplicitAuthorization        implicit);
+void polkit_backend_common_pidfd_to_systemd_unit (gint      pid,
+                                                  gchar   **ret_unit,
+                                                  gboolean *ret_no_new_privs);
 #ifdef __cplusplus
 }
 #endif

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendduktapeauthority.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendduktapeauthority.c Changed

@@ -65,7 +65,7 @@
 
 /* ---------------------------------------------------------------------------------------------------- */
 
-G_DEFINE_TYPE (PolkitBackendJsAuthority, polkit_backend_js_authority, POLKIT_BACKEND_TYPE_INTERACTIVE_AUTHORITY);
+G_DEFINE_TYPE_WITH_PRIVATE (PolkitBackendJsAuthority, polkit_backend_js_authority, POLKIT_BACKEND_TYPE_INTERACTIVE_AUTHORITY);
 
 /* ---------------------------------------------------------------------------------------------------- */
 
@@ -86,6 +86,7 @@
 {
     PolkitBackendJsAuthority *authority = udata;
     polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                  LOG_LEVEL_ERROR,
                                   "fatal Duktape JS backend error: %s",
                                   (msg ? msg : "no message"));
 }
@@ -93,9 +94,7 @@
 static void
 polkit_backend_js_authority_init (PolkitBackendJsAuthority *authority)
 {
-  authority->priv = G_TYPE_INSTANCE_GET_PRIVATE (authority,
-                                                 POLKIT_BACKEND_TYPE_JS_AUTHORITY,
-                                                 PolkitBackendJsAuthorityPrivate);
+  authority->priv = polkit_backend_js_authority_get_instance_private (authority);
 }
 
 static void
@@ -115,6 +114,7 @@
       GDir *dir = NULL;
 
       polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                    LOG_LEVEL_NOTICE,
                                     "Loading rules from directory %s",
                                     dir_name);
 
@@ -124,6 +124,7 @@
       if (dir == NULL)
         {
           polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                        LOG_LEVEL_ERROR,
                                         "Error opening rules directory: %s (%s, %d)",
                                         error->message, g_quark_to_string (error->domain), error->code);
           g_clear_error (&error);
@@ -149,9 +150,14 @@
       if (!execute_script_with_runaway_killer(authority, filename))
           continue;
       num_scripts++;
+      polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                      LOG_LEVEL_DEBUG,
+                                      "Loaded and executed script in file %s",
+                                      filename);
     }
 
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_NOTICE,
                                 "Finished loading, compiling and executing %d rules",
                                 num_scripts);
   g_list_free_full (files, g_free);
@@ -165,6 +171,7 @@
   duk_set_top (cx, 0);
   if (!duk_get_global_string (cx, "polkit")) {
       polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                    LOG_LEVEL_ERROR,
                                     "Error deleting old rules, not loading new ones");
       return;
   }
@@ -173,6 +180,7 @@
   duk_call_prop (cx, 0, 0);
 
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_NOTICE,
                                 "Collecting garbage unconditionally...");
 
   load_scripts (authority);
@@ -308,7 +316,6 @@
 polkit_backend_js_authority_class_init (PolkitBackendJsAuthorityClass *klass)
 {
   polkit_backend_common_js_authority_class_init_common (klass);
-  g_type_class_add_private (klass, sizeof (PolkitBackendJsAuthorityPrivate));
 }
 
 /* ---------------------------------------------------------------------------------------------------- */
@@ -366,13 +373,18 @@
               GError                   **error)
 {
   gboolean ret = FALSE;
-  pid_t pid;
+  gboolean no_new_privs = FALSE;
+  gint pidfd = -1;
+  pid_t pid_early, pid_late;
   uid_t uid;
+  PolkitSubject *process = NULL;
   gchar *user_name = NULL;
   GPtrArray *groups = NULL;
+  GArray *gids_from_dbus = NULL;
   struct passwd *passwd;
   char *seat_str = NULL;
   char *session_str = NULL;
+  char *system_unit = NULL;
 
   if (!duk_get_global_string (cx, "Subject")) {
     return FALSE;
@@ -382,92 +394,160 @@
 
   if (POLKIT_IS_UNIX_PROCESS (subject))
     {
-      pid = polkit_unix_process_get_pid (POLKIT_UNIX_PROCESS (subject));
+      process = subject;
     }
   else if (POLKIT_IS_SYSTEM_BUS_NAME (subject))
     {
-      PolkitSubject *process;
       process = polkit_system_bus_name_get_process_sync (POLKIT_SYSTEM_BUS_NAME (subject), NULL, error);
       if (process == NULL)
         goto out;
-      pid = polkit_unix_process_get_pid (POLKIT_UNIX_PROCESS (process));
-      g_object_unref (process);
     }
   else
     {
       g_assert_not_reached ();
     }
 
+  pid_early = polkit_unix_process_get_pid (POLKIT_UNIX_PROCESS (process));
+  pidfd = polkit_unix_process_get_pidfd (POLKIT_UNIX_PROCESS (process));
+
 #ifdef HAVE_LIBSYSTEMD
-  if (sd_pid_get_session (pid, &session_str) == 0)
-    {
-      if (sd_session_get_seat (session_str, &seat_str) == 0)
-        {
-          /* do nothing */
-        }
-    }
+#if HAVE_SD_PIDFD_GET_SESSION
+  if (pidfd >= 0)
+    sd_pidfd_get_session (pidfd, &session_str);
+  else
+#endif /* HAVE_SD_PIDFD_GET_SESSION */
+    sd_pid_get_session (pid_early, &session_str);
+  if (session_str)
+    sd_session_get_seat (session_str, &seat_str);
 #endif /* HAVE_LIBSYSTEMD */
 
   g_assert (POLKIT_IS_UNIX_USER (user_for_subject));
   uid = polkit_unix_user_get_uid (POLKIT_UNIX_USER (user_for_subject));
 
   groups = g_ptr_array_new_with_free_func (g_free);
+  gids_from_dbus = polkit_unix_process_get_gids (POLKIT_UNIX_PROCESS (process));
+
+passwd = getpwuid (uid);
+if (passwd == NULL)
+  {
+    user_name = g_strdup_printf ("%d", (gint) uid);
+    g_warning ("Error looking up info for uid %d: %m", (gint) uid);
+  }
+else
+  {
+    user_name = g_strdup (passwd->pw_name);
+  }
 
-  passwd = getpwuid (uid);
-  if (passwd == NULL)
+  /* D-Bus will give us supplementary groups too, so prefer that to looking up
+   * the group from the uid. */
+  if (gids_from_dbus && gids_from_dbus->len > 0)
     {
-      user_name = g_strdup_printf ("%d", (gint) uid);
-      g_warning ("Error looking up info for uid %d: %m", (gint) uid);
+      gint n;
+      for (n = 0; n < gids_from_dbus->len; n++)
+        {
+          struct group *group;
+          group = getgrgid (g_array_index (gids_from_dbus, gid_t, n));
+          if (group == NULL)
+            {
+              g_ptr_array_add (groups, g_strdup_printf ("%d", (gint) g_array_index (gids_from_dbus, gid_t, n)));
+            }
+          else
+            {
+              g_ptr_array_add (groups, g_strdup (group->gr_name));
+            }
+        }
     }
   else
     {
-      gid_t gids512;
-      int num_gids = 512;
-
-      user_name = g_strdup (passwd->pw_name);
-
-      if (getgrouplist (passwd->pw_name,
-                        passwd->pw_gid,
-                        gids,
-                        &num_gids) < 0)
+      if (passwd != NULL)
         {
-          g_warning ("Error looking up groups for uid %d: %m", (gint) uid);
-        }

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendinteractiveauthority.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendinteractiveauthority.c Changed

@@ -19,7 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#include "config.h"
 #include <errno.h>
 #include <pwd.h>
 #include <grp.h>
@@ -225,11 +224,9 @@
 
 /* ---------------------------------------------------------------------------------------------------- */
 
-G_DEFINE_TYPE (PolkitBackendInteractiveAuthority,
-               polkit_backend_interactive_authority,
-               POLKIT_BACKEND_TYPE_AUTHORITY);
-
-#define POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE(o) (G_TYPE_INSTANCE_GET_PRIVATE ((o), POLKIT_BACKEND_TYPE_INTERACTIVE_AUTHORITY, PolkitBackendInteractiveAuthorityPrivate))
+G_DEFINE_TYPE_WITH_PRIVATE (PolkitBackendInteractiveAuthority,
+                            polkit_backend_interactive_authority,
+                            POLKIT_BACKEND_TYPE_AUTHORITY);
 
 static gboolean
 identity_is_root_user (PolkitIdentity *user)
@@ -284,7 +281,7 @@
                             gpointer                     user_data)
 {
   PolkitBackendInteractiveAuthority *authority = POLKIT_BACKEND_INTERACTIVE_AUTHORITY (user_data);
-  g_signal_emit_by_name (authority, "changed");
+  g_signal_emit_by_name (authority, "sessions-changed");
 }
 
 static void
@@ -297,7 +294,7 @@
   /* Force registering error domain */
   (void)POLKIT_ERROR;
 
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (authority);
 
   directory = g_file_new_for_path (PACKAGE_DATA_DIR "/polkit-1/actions");
   priv->action_pool = polkit_backend_action_pool_new (directory);
@@ -351,7 +348,7 @@
   PolkitBackendInteractiveAuthorityPrivate *priv;
 
   interactive_authority = POLKIT_BACKEND_INTERACTIVE_AUTHORITY (object);
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (interactive_authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (interactive_authority);
 
   if (priv->name_owner_changed_signal_id > 0)
     g_dbus_connection_signal_unsubscribe (priv->system_bus_connection, priv->name_owner_changed_signal_id);
@@ -413,10 +410,6 @@
   authority_class->enumerate_temporary_authorizations = polkit_backend_interactive_authority_enumerate_temporary_authorizations;
   authority_class->revoke_temporary_authorizations = polkit_backend_interactive_authority_revoke_temporary_authorizations;
   authority_class->revoke_temporary_authorization_by_id = polkit_backend_interactive_authority_revoke_temporary_authorization_by_id;
-
-
-
-  g_type_class_add_private (klass, sizeof (PolkitBackendInteractiveAuthorityPrivate));
 }
 
 /* ---------------------------------------------------------------------------------------------------- */
@@ -432,7 +425,7 @@
   GList *actions;
 
   interactive_authority = POLKIT_BACKEND_INTERACTIVE_AUTHORITY (authority);
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (interactive_authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (interactive_authority);
 
   actions = polkit_backend_action_pool_get_all_actions (priv->action_pool, interactivee);
 
@@ -513,6 +506,11 @@
     }
 
   pid = polkit_unix_process_get_pid (POLKIT_UNIX_PROCESS (process));
+  if (pid <= 0)
+    {
+      g_debug ("Process is no longer active, cannot fetch cmdline.");
+      goto out;
+    }
 
   filename = g_strdup_printf ("/proc/%d/cmdline", pid);
 
@@ -569,7 +567,7 @@
   gchar *subject_cmdline;
   gchar *caller_cmdline;
 
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (authority);
 
   log_result_str = "DENYING";
   if (polkit_authorization_result_get_is_authorized (result))
@@ -594,6 +592,7 @@
     caller_cmdline = g_strdup ("<unknown>");
 
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_NOTICE,
                                 "%s action %s for %s %s owned by %s (check requested by %s %s)",
                                 log_result_str,
                                 action_id,
@@ -636,7 +635,7 @@
   gchar *subject_cmdline;
   gboolean is_temp;
 
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (authority);
 
   result = NULL;
 
@@ -702,6 +701,7 @@
       if (is_temp)
         {
           polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                        LOG_LEVEL_NOTICE,
                                         "Operator of %s successfully authenticated as %s to gain "
                                         "TEMPORARY authorization for action %s for %s %s (owned by %s)",
                                         scope_str,
@@ -714,6 +714,7 @@
       else
         {
           polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                        LOG_LEVEL_NOTICE,
                                         "Operator of %s successfully authenticated as %s to gain "
                                         "ONE-SHOT authorization for action %s for %s %s (owned by %s)",
                                         scope_str,
@@ -727,6 +728,7 @@
   else
     {
       polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                    LOG_LEVEL_NOTICE,
                                     "Operator of %s FAILED to authenticate to gain "
                                     "authorization for action %s for %s %s (owned by %s)",
                                     scope_str,
@@ -779,7 +781,7 @@
                                   const gchar                         *action_id,
                                   PolkitIdentity                      *identity)
 {
-  PolkitBackendInteractiveAuthorityPrivate *priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (interactive_authority);
+  PolkitBackendInteractiveAuthorityPrivate *priv = polkit_backend_interactive_authority_get_instance_private (interactive_authority);
   gboolean ret = FALSE;
   PolkitActionDescription *action_desc = NULL;
   const gchar *owners = NULL;
@@ -858,7 +860,7 @@
   gchar **detail_keys;
 
   interactive_authority = POLKIT_BACKEND_INTERACTIVE_AUTHORITY (authority);
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (interactive_authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (interactive_authority);
 
   error = NULL;
   caller_str = NULL;
@@ -1082,7 +1084,7 @@
   GList *l;
 
   interactive_authority = POLKIT_BACKEND_INTERACTIVE_AUTHORITY (authority);
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (interactive_authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (interactive_authority);
 
   result = NULL;
 
@@ -1125,7 +1127,7 @@
       goto out;
 
   /* special case: uid 0, root, is _always_ authorized for anything */
-  if (identity_is_root_user (user_of_subject))
+  if (!(flags & POLKIT_CHECK_AUTHORIZATION_FLAGS_ALWAYS_CHECK) && identity_is_root_user (user_of_subject))
     {
       result = polkit_authorization_result_new (TRUE, FALSE, NULL);
       goto out;
@@ -1483,10 +1485,10 @@
   GString *buf = g_string_new ("");
 
   g_string_append (buf, agent->cookie_prefix);
-  
+
   g_string_append_c (buf, '-');
   agent->cookie_serial++;
-  g_string_append_printf (buf, "%" G_GUINT64_FORMAT, 
+  g_string_append_printf (buf, "%" G_GUINT64_FORMAT,
                           agent->cookie_serial);
   g_string_append_c (buf, '-');
   append_rand_u128_str (buf, agent->cookie_pool);
@@ -1680,7 +1682,7 @@
     g_rand_free (agent_private_rand);
 
     agent->cookie_prefix = g_string_free (cookie_prefix, FALSE);
-    
+
     /* And a newly seeded pool for per-session cookies */
     agent->cookie_pool = g_rand_new ();
   }
@@ -1698,7 +1700,7 @@
   AuthenticationAgent *agent_fallback = NULL;
   gboolean fallback = FALSE;
 
-  priv = POLKIT_BACKEND_INTERACTIVE_AUTHORITY_GET_PRIVATE (authority);
+  priv = polkit_backend_interactive_authority_get_instance_private (authority);
 
   agent = g_hash_table_lookup (priv->hash_scope_to_authentication_agent, subject);
 
@@ -1771,7 +1773,7 @@

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendjsauthority.cpp -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendjsauthority.cpp Changed

@@ -56,7 +56,16 @@
 static class JsInitHelperType
 {
 public:
-	JsInitHelperType() { JS_Init(); }
+	JsInitHelperType()
+	{
+	  /* Disable JIT because it needs W/X mapping, which is not allowed by
+	   * our systemd hardening setting.
+	   */
+	  JS::DisableJitBackend();
+
+	  JS_Init();
+	}
+
 	~JsInitHelperType() { JS_ShutDown(); }
 } JsInitHelper;
 
@@ -90,7 +99,9 @@
 static gpointer runaway_killer_thread_func (gpointer user_data);
 static void runaway_killer_terminate (PolkitBackendJsAuthority *authority);
 
-G_DEFINE_TYPE (PolkitBackendJsAuthority, polkit_backend_js_authority, POLKIT_BACKEND_TYPE_INTERACTIVE_AUTHORITY);
+G_DEFINE_TYPE_WITH_PRIVATE (PolkitBackendJsAuthority,
+                            polkit_backend_js_authority,
+                            POLKIT_BACKEND_TYPE_INTERACTIVE_AUTHORITY);
 
 /* ---------------------------------------------------------------------------------------------------- */
 
@@ -152,6 +163,7 @@
 {
   PolkitBackendJsAuthority *authority = POLKIT_BACKEND_JS_AUTHORITY (JS_GetContextPrivate (cx));
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_ERROR,
                                 "%s:%u: %s",
                                 report->filename ? report->filename : "<no filename>",
                                 (unsigned int) report->lineno,
@@ -161,9 +173,7 @@
 static void
 polkit_backend_js_authority_init (PolkitBackendJsAuthority *authority)
 {
-  authority->priv = G_TYPE_INSTANCE_GET_PRIVATE (authority,
-                                                 POLKIT_BACKEND_TYPE_JS_AUTHORITY,
-                                                 PolkitBackendJsAuthorityPrivate);
+  authority->priv = (PolkitBackendJsAuthorityPrivate*) polkit_backend_js_authority_get_instance_private (authority);
 }
 
 /* authority->priv->cx must be within a request */
@@ -184,6 +194,7 @@
       GDir *dir = NULL;
 
       polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                    LOG_LEVEL_NOTICE,
                                     "Loading rules from directory %s",
                                     dir_name);
 
@@ -193,6 +204,7 @@
       if (dir == NULL)
         {
           polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                        LOG_LEVEL_ERROR,
                                         "Error opening rules directory: %s (%s, %d)",
                                         error->message, g_quark_to_string (error->domain), error->code);
           g_clear_error (&error);
@@ -222,6 +234,7 @@
       if (!script)
         {
           polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                        LOG_LEVEL_ERROR,
                                         "Error compiling script %s",
                                         filename);
           continue;
@@ -234,6 +247,7 @@
                                                &rval))
         {
           polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                        LOG_LEVEL_ERROR,
                                         "Error executing script %s",
                                         filename);
           continue;
@@ -245,6 +259,7 @@
     }
 
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_NOTICE,
                                 "Finished loading, compiling and executing %d rules",
                                 num_scripts);
   g_list_free_full (files, g_free);
@@ -266,11 +281,13 @@
                            &rval))
     {
       polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                    LOG_LEVEL_ERROR,
                                     "Error deleting old rules, not loading new ones");
       return;
     }
 
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_NOTICE,
                                 "Collecting garbage unconditionally...");
   JS_GC (authority->priv->cx);
 
@@ -467,8 +484,6 @@
 polkit_backend_js_authority_class_init (PolkitBackendJsAuthorityClass *klass)
 {
   polkit_backend_common_js_authority_class_init_common (klass);
-
-  g_type_class_add_private (klass, sizeof (PolkitBackendJsAuthorityPrivate));
 }
 
 /* ---------------------------------------------------------------------------------------------------- */
@@ -562,16 +577,21 @@
                   GError                   **error)
 {
   gboolean ret = FALSE;
+  gboolean no_new_privs = FALSE;
   JS::CompileOptions options(authority->priv->cx);
   const char *src;
   JS::RootedObject obj(authority->priv->cx);
-  pid_t pid;
+  gint pidfd = -1;
+  pid_t pid_early, pid_late;
   uid_t uid;
+  PolkitSubject *process = NULL;
   gchar *user_name = NULL;
   GPtrArray *groups = NULL;
+  GArray *gids_from_dbus = NULL;
   struct passwd *passwd;
   char *seat_str = NULL;
   char *session_str = NULL;
+  char *system_unit = NULL;
   JS::RootedObject global(authority->priv->cx, authority->priv->js_global->get ());
 
   src = "new Subject();";
@@ -593,36 +613,38 @@
 
   if (POLKIT_IS_UNIX_PROCESS (subject))
     {
-      pid = polkit_unix_process_get_pid (POLKIT_UNIX_PROCESS (subject));
+      process = subject;
     }
   else if (POLKIT_IS_SYSTEM_BUS_NAME (subject))
     {
-      PolkitSubject *process;
       process = polkit_system_bus_name_get_process_sync (POLKIT_SYSTEM_BUS_NAME (subject), NULL, error);
       if (process == NULL)
         goto out;
-      pid = polkit_unix_process_get_pid (POLKIT_UNIX_PROCESS (process));
-      g_object_unref (process);
     }
   else
     {
       g_assert_not_reached ();
     }
 
+  pid_early = polkit_unix_process_get_pid (POLKIT_UNIX_PROCESS (process));
+  pidfd = polkit_unix_process_get_pidfd (POLKIT_UNIX_PROCESS (process));
+
 #ifdef HAVE_LIBSYSTEMD
-  if (sd_pid_get_session (pid, &session_str) == 0)
-    {
-      if (sd_session_get_seat (session_str, &seat_str) == 0)
-        {
-          /* do nothing */
-        }
-    }
+#if HAVE_SD_PIDFD_GET_SESSION
+  if (pidfd >= 0)
+    sd_pidfd_get_session (pidfd, &session_str);
+  else
+#endif /* HAVE_SD_PIDFD_GET_SESSION */
+    sd_pid_get_session (pid_early, &session_str);
+  if (session_str)
+    sd_session_get_seat (session_str, &seat_str);
 #endif /* HAVE_LIBSYSTEMD */
 
   g_assert (POLKIT_IS_UNIX_USER (user_for_subject));
   uid = polkit_unix_user_get_uid (POLKIT_UNIX_USER (user_for_subject));
 
   groups = g_ptr_array_new_with_free_func (g_free);
+  gids_from_dbus = polkit_unix_process_get_gids (POLKIT_UNIX_PROCESS (process));
 
   passwd = getpwuid (uid);
   if (passwd == NULL)
@@ -632,53 +654,104 @@
     }
   else
     {
-      gid_t gids512;
-      int num_gids = 512;
-
       user_name = g_strdup (passwd->pw_name);
+    }
 
-      if (getgrouplist (passwd->pw_name,
-                        passwd->pw_gid,
-                        gids,
-                        &num_gids) < 0)
+  /* D-Bus will give us supplementary groups too, so prefer that to looking up
+   * the group from the uid. */

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendsessionmonitor-systemd.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendsessionmonitor-systemd.c Changed

@@ -19,7 +19,6 @@
  * Author: Matthias Clasen
  */
 
-#include "config.h"
 #include <errno.h>
 #include <pwd.h>
 #include <grp.h>
@@ -106,9 +105,9 @@
   source = g_source_new (&sd_source_funcs, sizeof (SdSource));
   sd_source = (SdSource *)source;
 
-  if ((ret = sd_login_monitor_new (NULL, &sd_source->monitor)) < 0)
+  if ((ret = sd_login_monitor_new ("session", &sd_source->monitor)) < 0)
     {
-      g_printerr ("Error getting login monitor: %d", ret);
+      g_printerr ("Error getting login monitor: %d\n", ret);
     }
   else
     {
@@ -351,6 +350,9 @@
 #if HAVE_SD_UID_GET_DISPLAY
   uid_t uid;
 #endif
+#if HAVE_SD_PIDFD_GET_SESSION
+  int pidfd;
+#endif
 
   if (POLKIT_IS_UNIX_PROCESS (subject))
     process = POLKIT_UNIX_PROCESS (subject); /* We already have a process */
@@ -371,6 +373,19 @@
                    g_type_name (G_TYPE_FROM_INSTANCE (subject)));
     }
 
+#if HAVE_SD_PIDFD_GET_SESSION
+  /* First try to get the session from the pidfd (systemd version 253) */
+  pidfd = polkit_unix_process_get_pidfd (process);
+  if (pidfd >= 0)
+    {
+      if (sd_pidfd_get_session (pidfd, &session_id) >= 0)
+        {
+          session = polkit_unix_session_new (session_id);
+          goto out;
+        }
+    }
+#endif
+
   /* Now do process -> pid -> same session */
   g_assert (process != NULL);
   pid = polkit_unix_process_get_pid (process);
@@ -381,6 +396,22 @@
       goto out;
     }
 
+#if HAVE_SD_PIDFD_GET_SESSION
+  /* Now do process fd -> uid -> graphical session (systemd version 253) */
+  pidfd = polkit_unix_process_get_pidfd (process);
+  if (pidfd >= 0)
+    {
+      if (sd_pidfd_get_owner_uid (pidfd, &uid) < 0)
+        goto out;
+
+      if (sd_uid_get_display (uid, &session_id) >= 0)
+        {
+          session = polkit_unix_session_new (session_id);
+          goto out;
+        }
+    }
+#endif
+
 #if HAVE_SD_UID_GET_DISPLAY
   /* Now do process -> uid -> graphical session (systemd version 213)*/
   if (sd_pid_get_owner_uid (pid, &uid) < 0)

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitbackendsessionmonitor.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitbackendsessionmonitor.c Changed

_service:tar_scm:polkit-123.tar.gz/src/polkitbackend/polkitd.c -> _service:tar_scm:125.tar.gz/src/polkitbackend/polkitd.c Changed

@@ -19,8 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#include "config.h"
-
 #include <signal.h>
 #include <stdlib.h>
 
@@ -40,9 +38,12 @@
 static gint                    exit_status = EXIT_FAILURE;
 static gboolean                opt_replace = FALSE;
 static gboolean                opt_no_debug = FALSE;
+static gchar                  *opt_log_level = "err";
 static GOptionEntry            opt_entries = {
   {"replace", 'r', 0, G_OPTION_ARG_NONE, &opt_replace, "Replace existing daemon", NULL},
-  {"no-debug", 'n', 0, G_OPTION_ARG_NONE, &opt_no_debug, "Don't print debug information", NULL},
+  {"no-debug", 'n', 0, G_OPTION_ARG_NONE, &opt_no_debug, "Don't print debug information to stderr and stdout", NULL},
+  {"log-level", 'l', 0, G_OPTION_ARG_STRING, &opt_log_level, "Set a level of logging (syslog style). Defaults to 'err'.",
+          "emerg|alert|crit|err|warning|notice|info|debug"},
   {NULL }
 };
 
@@ -76,6 +77,7 @@
               gpointer         user_data)
 {
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_WARNING,
                                 "Lost the name org.freedesktop.PolicyKit1 - exiting");
   g_main_loop_quit (loop);
 }
@@ -88,6 +90,7 @@
   exit_status = EXIT_SUCCESS;
 
   polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
+                                LOG_LEVEL_NOTICE,
                                 "Acquired the name org.freedesktop.PolicyKit1 on the system bus");
 }
 
@@ -224,6 +227,8 @@
   if (g_getenv ("PATH") == NULL)
     g_setenv ("PATH", "/usr/bin:/bin:/usr/sbin:/sbin", TRUE);
 
+  polkit_backend_authority_set_log_level (opt_log_level);
+
   authority = polkit_backend_authority_get ();
 
   loop = g_main_loop_new (NULL, FALSE);

_service:tar_scm:polkit-123.tar.gz/src/programs/pkaction.c -> _service:tar_scm:125.tar.gz/src/programs/pkaction.c Changed

_service:tar_scm:polkit-123.tar.gz/src/programs/pkcheck.c -> _service:tar_scm:125.tar.gz/src/programs/pkcheck.c Changed

_service:tar_scm:polkit-123.tar.gz/src/programs/pkexec.c -> _service:tar_scm:125.tar.gz/src/programs/pkexec.c Changed

@@ -19,10 +19,6 @@
  * Author: David Zeuthen <davidz@redhat.com>
  */
 
-#ifdef HAVE_CONFIG_H
-#  include "config.h"
-#endif
-
 #include <string.h>
 #include <stdlib.h>
 #include <sys/types.h>
@@ -37,6 +33,11 @@
 #include <sys/prctl.h>
 #endif
 
+#ifdef __FreeBSD__
+#include <signal.h>
+#include <sys/procctl.h>
+#endif
+
 #include <glib/gi18n.h>
 
 #ifdef POLKIT_AUTHFW_PAM
@@ -53,6 +54,7 @@
 static gchar *original_user_name = NULL;
 static gchar *original_cwd;
 static gchar *command_line = NULL;
+static gchar *cmdline_short = NULL;
 static struct passwd *pw;
 
 #ifndef HAVE_CLEARENV
@@ -200,7 +202,7 @@
       for (n = 0; envlistn; n++)
 	{
 	  const char *envitem = envlistn;
-	  
+
 	  if (g_str_has_prefix (envitem, "XDG_RUNTIME_DIR="))
 	    {
 	      const char *eq = strchr (envitem, '=');
@@ -366,7 +368,7 @@
   shells = g_strsplit (contents, "\n", 0);
   for (n = 0; shells != NULL && shellsn != NULL; n++)
     {
-      if (g_strcmp0 (shell, shellsn) == 0)
+      if (shellsn0 == '/' && g_strcmp0 (shell, shellsn) == 0)
         {
           ret = TRUE;
           goto out;
@@ -508,6 +510,7 @@
   path = NULL;
   exec_argv = NULL;
   command_line = NULL;
+  cmdline_short = NULL;
   opt_user = NULL;
   local_agent_handle = NULL;
 
@@ -515,7 +518,7 @@
   setenv ("GIO_USE_VFS", "local", 1);
 
   /* First process options and find the command-line to invoke. Avoid using fancy library routines
-   * that depend on environtment variables since we haven't cleared the environment just yet.
+   * that depend on environment variables since we haven't cleared the environment just yet.
    */
   opt_show_help = FALSE;
   opt_show_version = FALSE;
@@ -729,12 +732,19 @@
     }
 
   /* make sure we are nuked if the parent process dies */
-#ifdef __linux__
+#if defined(__linux__)
   if (prctl (PR_SET_PDEATHSIG, SIGTERM) != 0)
     {
       g_printerr ("prctl(PR_SET_PDEATHSIG, SIGTERM) failed: %s\n", g_strerror (errno));
       goto out;
     }
+#elif defined(__FreeBSD__)
+  int _sig = SIGTERM;
+  if (procctl (P_PID, 0, PROC_PDEATHSIG_CTL, &_sig) != 0)
+    {
+      g_printerr ("procctl(2) failed: %s\n", g_strerror (errno));
+      goto out;
+    }
 #else
 #warning "Please add OS specific code to catch when the parent dies"
 #endif
@@ -802,7 +812,6 @@
   polkit_details_insert (details, "program", path);
   polkit_details_insert (details, "command_line", command_line);
 
-  gchar *cmdline_short = NULL;
   cmdline_short = g_strdup(command_line);
   if (strlen(command_line) > 80)
       g_stpcpy(g_stpcpy( cmdline_short + 38, " ... " ),
@@ -951,7 +960,7 @@
   /* set close_on_exec on all file descriptors except stdin, stdout, stderr */
   if (!fdwalk (set_close_on_exec, GINT_TO_POINTER (3)))
     {
-      g_printerr ("Error setting close-on-exec for file desriptors\n");
+      g_printerr ("Error setting close-on-exec for file descriptors\n");
       goto out;
     }
 
@@ -1022,7 +1031,7 @@
 
   /* change to home directory */
   if (!opt_keep_cwd)
-    {  
+    {
       if (chdir (pw->pw_dir) != 0)
         {
           g_printerr ("Error changing to home directory %s: %s\n", pw->pw_dir, g_strerror (errno));

_service:tar_scm:polkit-123.tar.gz/src/programs/pkttyagent.c -> _service:tar_scm:125.tar.gz/src/programs/pkttyagent.c Changed

_service:tar_scm:125.tar.gz/test/integration Added

_service:tar_scm:125.tar.gz/test/integration/.fmf Added

_service:tar_scm:125.tar.gz/test/integration/.fmf/version Added

_service:tar_scm:125.tar.gz/test/integration/README Added

@@ -0,0 +1,54 @@
+# polkit integration test suite
+
+polkit's integration test suite uses TMT (Test Management Tool 0) to organize and run tests. Since TMT
+offers a _lot_ of features, this document pinpoints the most _interesting_ ones to get stuff up and running
+quickly.
+
+## How to contribute
+
+Creating a new test case is pretty simple:
+
+```
+$ cd test/integration
+$ tmt test create --template=shell test/name
+Test directory '/home/.../polkit/test/integration/test/name' created.
+Test metadata '/home/.../polkit/test/integration/test/name/main.fmf' created.
+Test script '/home/.../polkit/test/integration/test/name/test.sh' created.
+```
+
+The newly created `test.sh` will be the actual test case, and `main.fmf` contains the test metadata, including
+test summary & description, test dependencies, runtime, and so on. See 1 for more details.
+
+After tweaking the test metadata it's usually a good idea to run `tmt lint test/name` to make sure that the
+configuration is still valid:
+
+```
+$ tmt lint test/name
+/test/name
+pass C000 fmf node passes schema validation
+pass C001 summary key is set and is reasonably long
+...
+```
+
+To check if the test itself works as expected you can use `tmt run`:
+
+```
+$ cd test/name
+$ tmt run -vvv --all provision --how local tests --name .
+...
+total: 1 test passed
+```
+
+The `tmt run` command is _very_ customizable (as is the rest of `tmt`). In this particular example we tell it
+to run all steps (`--all`) and override the `provision` and `tests` steps to run just one particular test on
+the local machine. As in previous cases, check the `tmt` documentation 0 and examples 2 for more details.
+
+## Links
+
+0 https://tmt.readthedocs.io/en/stable/overview.html
+
+1 https://tmt.readthedocs.io/en/stable/spec/tests.html
+
+2 https://tmt.readthedocs.io/en/stable/examples.html#run
+
+

_service:tar_scm:125.tar.gz/test/integration/main.fmf Added

_service:tar_scm:125.tar.gz/test/integration/plans Added

_service:tar_scm:125.tar.gz/test/integration/plans/upstream-ci.fmf Added

_service:tar_scm:125.tar.gz/test/integration/systemd Added

_service:tar_scm:125.tar.gz/test/integration/systemd/main.fmf Added

_service:tar_scm:125.tar.gz/test/integration/systemd/rules Added

_service:tar_scm:125.tar.gz/test/integration/systemd/rules/start-restart-stop-unit.rules Added

_service:tar_scm:125.tar.gz/test/integration/systemd/test.sh Added

@@ -0,0 +1,46 @@
+#!/bin/bash
+
+set -eux
+set -o pipefail
+
+TEST_RULES="$PWD/rules"
+TEST_USER="polkit-testuser"
+
+at_exit() {
+    set +e
+
+    : "Cleanup"
+    userdel -rf "$TEST_USER"
+    rm -f /etc/polkit-1/rules.d/99-test.rules
+    systemctl restart polkit
+}
+
+trap at_exit EXIT
+
+: "Setup"
+mkdir -p /run/systemd/system/
+useradd "$TEST_USER"
+# Close stdin, so we get an instant error (Interactive authentication required) instead of having to deal
+# with an interactive authentication prompt
+exec 0<&-
+
+: "Allow $TEST_USER to start/restart/stop a simple systemd unit"
+# Use `systemctl edit --full ...` in the future
+cat >/run/systemd/system/start-restart-stop.service <<EOF
+Service
+Type=oneshot
+ExecStart=true
+EOF
+systemctl daemon-reload
+# Copy the test polkit rule in place
+cp -fv "$TEST_RULES/start-restart-stop-unit.rules" /etc/polkit-1/rules.d/99-test.rules
+systemctl restart polkit
+# Following systemctl invocations should not trigger polkit's authentication prompt
+sudo -u "$TEST_USER" systemctl start start-restart-stop.service
+sudo -u "$TEST_USER" systemctl restart start-restart-stop.service
+sudo -u "$TEST_USER" systemctl stop start-restart-stop.service
+# But these ones should
+(! sudo -u "$TEST_USER" systemctl mask start-restart-stop.service)
+(! sudo -u "$TEST_USER" systemctl restart systemd-journald.service)
+# Cleanup
+rm -f /etc/polkit-1/rules.d/99-test.rules

_service:tar_scm:polkit-123.tar.gz/test/meson.build -> _service:tar_scm:125.tar.gz/test/meson.build Changed

_service:tar_scm:polkit-123.tar.gz/test/polkit/meson.build -> _service:tar_scm:125.tar.gz/test/polkit/meson.build Changed

_service:tar_scm:polkit-123.tar.gz/test/polkit/polkitidentitytest.c -> _service:tar_scm:125.tar.gz/test/polkit/polkitidentitytest.c Changed

_service:tar_scm:polkit-123.tar.gz/test/polkitbackend/meson.build -> _service:tar_scm:125.tar.gz/test/polkitbackend/meson.build Changed

_service:tar_scm:polkit-123.tar.gz/test/polkitbackend/test-polkitbackendjsauthority.c -> _service:tar_scm:125.tar.gz/test/polkitbackend/test-polkitbackendjsauthority.c Changed

_service:tar_scm:125.tar.gz/test/wrapper.py Added

@@ -0,0 +1,52 @@
+#!/usr/bin/env python3
+
+import argparse
+import atexit
+import os
+import subprocess
+import sys
+
+import dbus
+import dbus.mainloop.glib
+import dbusmock
+
+
+def setup_test_namespace(data_dir):
+    print(f"Test data dir: {data_dir}")
+
+    # Setup a new mount & user namespace, so we can use mount() unprivileged (see user_namespaces(7))
+    euid = os.geteuid()
+    egid = os.getegid()
+    os.unshare(os.CLONE_NEWNS|os.CLONE_NEWUSER)
+    # Map root to the original EUID and EGID, so we can actually call mount() inside our namespace
+    with open("/proc/self/uid_map", "w") as f:
+        f.write(f"0 {euid} 1")
+    with open("/proc/self/setgroups", "w") as f:
+        f.write("deny")
+    with open("/proc/self/gid_map", "w") as f:
+        f.write(f"0 {egid} 1")
+
+    # Overmount /etc with our own version
+    subprocess.check_call("mount", "--bind", os.path.join(data_dir, "etc"), "/etc")
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser()
+    parser.add_argument("test_executable",
+                        help="test executable to run in our own test namespace")
+    parser.add_argument("--data-dir", type=str, required=True,
+                        help="path to test data directory (with our own /etc/{passwd,group,...} files)")
+    parser.add_argument("--mock-dbus", action="store_true",
+                        help="set up a mock system D-Bus using dbusmock")
+    args = parser.parse_args()
+
+    setup_test_namespace(args.data_dir)
+
+    if args.mock_dbus:
+        dbus.mainloop.glib.DBusGMainLoop(set_as_default=True)
+        dbusmock.DBusTestCase.start_system_bus()
+        atexit.register(dbusmock.DBusTestCase.stop_dbus, dbusmock.DBusTestCase.system_bus_pid)
+
+    print(f"Executing '{args.test_executable}'")
+    sys.stdout.flush()
+    os.environ"POLKIT_TEST_DATA" = args.data_dir
+    subprocess.check_call(args.test_executable, shell=True)

_service:tar_scm:polkit-123.tar.gz/.gitlab Deleted

_service:tar_scm:polkit-123.tar.gz/.gitlab-ci.yml Deleted

@@ -1,77 +0,0 @@
-image: fedora:latest
-
-variables:
-  DEPENDENCIES: gcc
-                gcc-c++
-                libtool
-                autoconf
-                automake
-                gettext
-                gettext-devel
-                gtk-doc
-                gobject-introspection-devel
-                make
-                libxslt
-                pkgconfig(gio-2.0)
-                pkgconfig(mozjs-91)
-                pkgconfig(duktape)
-                expat-devel
-                pkgconfig(libsystemd)
-                pkgconfig(systemd)
-                pam-devel
-                python3-dbusmock
-                meson
-                git
-                dbus-devel
-
-before_script:
-  - dnf upgrade -y --nogpgcheck fedora-release fedora-repos*
-  - dnf update -y && dnf install -y $DEPENDENCIES
-
-
-build_stable:
-  stage: test
-  script:
-    - meson setup
-      -D authfw=pam
-      -D examples=true
-      -D gtk_doc=true
-      -D introspection=true
-      -D man=true
-      -D session_tracking=libsystemd-login
-      -D tests=true
-      -D cpp_args="-D_FORTIFY_SOURCE=2"
-      builddir
-    - meson compile -C builddir
-    - meson test    -C builddir
-    - meson install -C builddir
-    - DESTDIR=$(pwd)/DESTDIR meson install -C builddir
-  artifacts:
-    name: 'test logs'
-    when: 'always'
-    paths:
-      - 'builddir/meson-logs/*.txt'
-
-
-pages:
-  stage: deploy
-  script:
-    - meson setup
-      -D gtk_doc=true
-      -D man=true
-      builddir
-    - meson compile -C builddir polkit-1-doc:custom
-    - rm -rf public && mkdir public
-    - cp -r builddir/docs/polkit/html/* public
-  artifacts:
-    paths:
-      - public
-  rules:
-    - if: $CI_COMMIT_TAG
-
-
-workflow:
-  rules:
-    - if: $CI_PIPELINE_SOURCE == 'merge_request_event'
-    - if: $CI_PIPELINE_SOURCE == 'push'
-

_service:tar_scm:polkit-123.tar.gz/.gitlab/issue_templates Deleted

_service:tar_scm:polkit-123.tar.gz/.gitlab/issue_templates/Default.md Deleted

_service:tar_scm:polkit-123.tar.gz/.gitlab/merge_request_templates Deleted

_service:tar_scm:polkit-123.tar.gz/subprojects Deleted

_service:tar_scm:polkit-123.tar.gz/subprojects/mocklibc.wrap Deleted

_service:tar_scm:polkit-123.tar.gz/subprojects/packagecache Deleted

_service:tar_scm:polkit-123.tar.gz/subprojects/packagecache/mocklibc-1.0-2-wrap.zip Deleted

_service:tar_scm:polkit-123.tar.gz/subprojects/packagecache/mocklibc-1.0.tar.gz Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/AUTHORS Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/COPYING Deleted

@@ -1,202 +0,0 @@
-
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets ""
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright yyyy name of copyright owner
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/ChangeLog Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/INSTALL Deleted

@@ -1,365 +0,0 @@
-Installation Instructions
-*************************
-
-Copyright (C) 1994, 1995, 1996, 1999, 2000, 2001, 2002, 2004, 2005,
-2006, 2007, 2008, 2009 Free Software Foundation, Inc.
-
-   Copying and distribution of this file, with or without modification,
-are permitted in any medium without royalty provided the copyright
-notice and this notice are preserved.  This file is offered as-is,
-without warranty of any kind.
-
-Basic Installation
-==================
-
-   Briefly, the shell commands `./configure; make; make install' should
-configure, build, and install this package.  The following
-more-detailed instructions are generic; see the `README' file for
-instructions specific to this package.  Some packages provide this
-`INSTALL' file but do not implement all of the features documented
-below.  The lack of an optional feature in a given package is not
-necessarily a bug.  More recommendations for GNU packages can be found
-in *note Makefile Conventions: (standards)Makefile Conventions.
-
-   The `configure' shell script attempts to guess correct values for
-various system-dependent variables used during compilation.  It uses
-those values to create a `Makefile' in each directory of the package.
-It may also create one or more `.h' files containing system-dependent
-definitions.  Finally, it creates a shell script `config.status' that
-you can run in the future to recreate the current configuration, and a
-file `config.log' containing compiler output (useful mainly for
-debugging `configure').
-
-   It can also use an optional file (typically called `config.cache'
-and enabled with `--cache-file=config.cache' or simply `-C') that saves
-the results of its tests to speed up reconfiguring.  Caching is
-disabled by default to prevent problems with accidental use of stale
-cache files.
-
-   If you need to do unusual things to compile the package, please try
-to figure out how `configure' could check whether to do them, and mail
-diffs or instructions to the address given in the `README' so they can
-be considered for the next release.  If you are using the cache, and at
-some point `config.cache' contains results you don't want to keep, you
-may remove or edit it.
-
-   The file `configure.ac' (or `configure.in') is used to create
-`configure' by a program called `autoconf'.  You need `configure.ac' if
-you want to change it or regenerate `configure' using a newer version
-of `autoconf'.
-
-   The simplest way to compile this package is:
-
-  1. `cd' to the directory containing the package's source code and type
-     `./configure' to configure the package for your system.
-
-     Running `configure' might take a while.  While running, it prints
-     some messages telling which features it is checking for.
-
-  2. Type `make' to compile the package.
-
-  3. Optionally, type `make check' to run any self-tests that come with
-     the package, generally using the just-built uninstalled binaries.
-
-  4. Type `make install' to install the programs and any data files and
-     documentation.  When installing into a prefix owned by root, it is
-     recommended that the package be configured and built as a regular
-     user, and only the `make install' phase executed with root
-     privileges.
-
-  5. Optionally, type `make installcheck' to repeat any self-tests, but
-     this time using the binaries in their final installed location.
-     This target does not install anything.  Running this target as a
-     regular user, particularly if the prior `make install' required
-     root privileges, verifies that the installation completed
-     correctly.
-
-  6. You can remove the program binaries and object files from the
-     source code directory by typing `make clean'.  To also remove the
-     files that `configure' created (so you can compile the package for
-     a different kind of computer), type `make distclean'.  There is
-     also a `make maintainer-clean' target, but that is intended mainly
-     for the package's developers.  If you use it, you may have to get
-     all sorts of other programs in order to regenerate files that came
-     with the distribution.
-
-  7. Often, you can also type `make uninstall' to remove the installed
-     files again.  In practice, not all packages have tested that
-     uninstallation works correctly, even though it is required by the
-     GNU Coding Standards.
-
-  8. Some packages, particularly those that use Automake, provide `make
-     distcheck', which can by used by developers to test that all other
-     targets like `make install' and `make uninstall' work correctly.
-     This target is generally not run by end users.
-
-Compilers and Options
-=====================
-
-   Some systems require unusual options for compilation or linking that
-the `configure' script does not know about.  Run `./configure --help'
-for details on some of the pertinent environment variables.
-
-   You can give `configure' initial values for configuration parameters
-by setting variables in the command line or in the environment.  Here
-is an example:
-
-     ./configure CC=c99 CFLAGS=-g LIBS=-lposix
-
-   *Note Defining Variables::, for more details.
-
-Compiling For Multiple Architectures
-====================================
-
-   You can compile the package for more than one kind of computer at the
-same time, by placing the object files for each architecture in their
-own directory.  To do this, you can use GNU `make'.  `cd' to the
-directory where you want the object files and executables to go and run
-the `configure' script.  `configure' automatically checks for the
-source code in the directory that `configure' is in and in `..'.  This
-is known as a "VPATH" build.
-
-   With a non-GNU `make', it is safer to compile the package for one
-architecture at a time in the source code directory.  After you have
-installed the package for one architecture, use `make distclean' before
-reconfiguring for another architecture.
-
-   On MacOS X 10.5 and later systems, you can create libraries and
-executables that work on multiple system types--known as "fat" or
-"universal" binaries--by specifying multiple `-arch' options to the
-compiler but only a single `-arch' option to the preprocessor.  Like
-this:
-
-     ./configure CC="gcc -arch i386 -arch x86_64 -arch ppc -arch ppc64" \
-                 CXX="g++ -arch i386 -arch x86_64 -arch ppc -arch ppc64" \
-                 CPP="gcc -E" CXXCPP="g++ -E"
-
-   This is not guaranteed to produce working output in all cases, you
-may have to build one architecture at a time and combine the results
-using the `lipo' tool if you have problems.
-
-Installation Names
-==================
-
-   By default, `make install' installs the package's commands under
-`/usr/local/bin', include files under `/usr/local/include', etc.  You
-can specify an installation prefix other than `/usr/local' by giving
-`configure' the option `--prefix=PREFIX', where PREFIX must be an
-absolute file name.
-
-   You can specify separate installation prefixes for
-architecture-specific files and architecture-independent files.  If you
-pass the option `--exec-prefix=PREFIX' to `configure', the package uses
-PREFIX as the prefix for installing programs and libraries.
-Documentation and other data files still use the regular prefix.
-
-   In addition, if you use an unusual directory layout you can give
-options like `--bindir=DIR' to specify different values for particular
-kinds of files.  Run `configure --help' for a list of the directories
-you can set and what kinds of files go in them.  In general, the
-default for these options is expressed in terms of `${prefix}', so that
-specifying just `--prefix' will affect all of the other directory
-specifications that were not explicitly provided.
-
-   The most portable way to affect installation locations is to pass the
-correct locations to `configure'; however, many packages provide one or
-both of the following shortcuts of passing variable assignments to the
-`make install' command line to change installation locations without
-having to reconfigure or recompile.
-
-   The first method involves providing an override variable for each
-affected directory.  For example, `make install
-prefix=/alternate/directory' will choose an alternate location for all
-directory configuration variables that were expressed in terms of
-`${prefix}'.  Any directories that were specified during `configure',
-but not in terms of `${prefix}', must each be overridden at install
-time for the entire installation to be relocated.  The approach of
-makefile variable overrides for each directory variable is required by
-the GNU Coding Standards, and ideally causes no recompilation.
-However, some platforms have known limitations with the semantics of
-shared libraries that end up requiring recompilation when using this
-method, particularly noticeable in packages that use GNU Libtool.
-
-   The second method involves providing the `DESTDIR' variable.  For
-example, `make install DESTDIR=/alternate/directory' will prepend
-`/alternate/directory' before all installation names.  The approach of
-`DESTDIR' overrides is not required by the GNU Coding Standards, and
-does not work on platforms that have drive letters.  On the other hand,
-it does better at avoiding recompilation issues, and works well even
-when some directory options were not specified in terms of `${prefix}'
-at `configure' time.
-
-Optional Features
-=================
-
-   If the package supports it, you can cause programs to be installed
-with an extra prefix or suffix on their names by giving `configure' the
-option `--program-prefix=PREFIX' or `--program-suffix=SUFFIX'.
-
-   Some packages pay attention to `--enable-FEATURE' options to

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/Makefile.am Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/NEWS Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/README Deleted

@@ -1,121 +0,0 @@
-= MockLibc 1.1 =
-
-Mocks of common libc functions who have global state. Version 1.1 focuses on
-NSS related methods (user, group, and netgroup queries).
-
-This library is a re-implementation of specific libc methods, not a tool for
-creating mock functions. Use MockLibc to create a consistent environment for
-your unit tests, when they need to query system information.
-
-
-== Requirements ==
-
-* Tests require the 'id' and 'innetgr' commands in the PATH
-
-
-== Build ==
-
-$ cd mocklibc-1.1
-$ ./configure
-$ make
-$ make check
-
-
-== Install ==
-
-$ make install
-
-
-== Example Usage ==
-
-$ id foo
-id: foo: No such user
-$ export MOCK_PASSWD=./testdata/passwd
-$ export MOCK_GROUP=./testdata/group
-$ mkdir ./testdata
-$ echo “foo:x:9000:9000::/home/foo:/bin/bash” > “$MOCK_PASSWD”
-$ echo “mockusers:x:9001:foo” > “$MOCK_GROUP”
-$ mocklibc id foo
-uid=9000(foo) gid=9000(foo) groups=9000(foo),9001(mockusers)
-
-
-== Use without install ==
-
-mocklibc can be used directly from the bin directory, without being installed:
-$ cd mocklibc-1.1
-$ ./configure
-$ make
-$ bin/mocklibc id foo
-
-
-== Hacking ==
-
-If using a git checkout instead of a source tarball, always run
-'autogen --install' before './configure'. Whenever a Makefile.am or
-configure.ac is modified, run 'autogen' again without --install.
-
-
-== Mocked Functions ==
-
-NSS Methods completely disregard /etc/nsswitch.conf, similar to using just
-"files", but with modified paths. DNS is not modified and no *_r methods will
-be implemented in this version.
-
-* pwd.h (NSS users, configured with MOCK_PASSWD)
-  * setpwent
-  * getpwent
-  * endpwent
-  * getpwnam
-  * getpwuid
-* grp.h (NSS groups, configured with MOCK_GROUP)
-  * setpwent
-  * getpwent
-  * endpwent
-  * getpwnam
-  * getpwuid
-* netdb.h (NSS netgroups, no DNS, configured with MOCK_NETGROUP)
-  * setnetgrent
-  * getnetgrent
-  * endnetgrent
-  * innetgr
-
-
-== Configuration ==
-
-All configuration is handled through environment variables, though specific
-mocklibc_* methods may be added in the future for things like time and random
-number generation.
-
-Environment Variables:
-* MOCK_PASSWD - Path to /etc/passwd replacement
-* MOCK_GROUP - Path to /etc/group replacement
-* MOCK_NETGROUP - Path to /etc/netgroup replacement
-
-
-== F.A.Q. ==
-
-* Why not use a chroot? Chroot requires root, and forcing unit tests to run as
-  root is not desirable.
-* Is there something that already does this? There are mock frameworks for C,
-  but this library is an implementation of specific common mocks C developers
-  need. A mock of set/get/endgrent still requires some basic code for iterating
-  group objects. This library provides that.
-
-
-== TODO ==
-
-* Add functions to free unused memory in 'netdb_netgroup.c'. It leaks a ton of
-  memory every call. See TODO comments in code.
-
-
-== Future ==
-
-The following may be supported in the future, and I'm taking requests for other
-functionality at 'vonhollen@gmail.com'.
-
-Features:
-* Redirect syslog messages to file at $MOCK_SYSLOG
-* '*_r' methods in pwd.h, grp.h, and netdb.h
-* netdb.h: gethostbyname, gethostbyaddr, getaddrinfo, get/freeaddrinfo
-* Whitelist apps with $MOCK_ONLY (includes list of argv0 names)
-

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/bin Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/bin/Makefile.am Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/bin/mocklibc-test.in Deleted

@@ -1,136 +0,0 @@
-#!/bin/bash
-
-#  Copyright 2011 Google Inc. All Rights Reserved.
-#
-#  Licensed under the Apache License, Version 2.0 (the "License");
-#  you may not use this file except in compliance with the License.
-#  You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-#  Unless required by applicable law or agreed to in writing, software
-#  distributed under the License is distributed on an "AS IS" BASIS,
-#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-#  See the License for the specific language governing permissions and
-#  limitations under the License.
-#
-#  Author: Nikki VonHollen <vonhollen@gmail.com>
-
-
-# Figure out where everything is
-
-MOCKLIBC="@top_builddir@/bin/mocklibc"
-ETCDIR="@top_srcdir@/example"
-
-
-# Setup the mock environment
-
-export MOCK_PASSWD="${ETCDIR}/passwd"
-export MOCK_GROUP="${ETCDIR}/group"
-export MOCK_NETGROUP="${ETCDIR}/netgroup"
-
-
-# Test helper definitions
-
-TESTCOUNT=0
-FAILCOUNT=0
-
-fail () {
-  echo "Test Failed:"
-  echo $@ >&2
-  echo
-  FAILCOUNT=$((FAILCOUNT+1))
-}
-
-finish () {
-  if  $FAILCOUNT -gt 0 
-  then
-    echo "Failed $FAILCOUNT of $TESTCOUNT tests."
-    exit 1
-  else
-    echo "Passed $TESTCOUNT tests."
-    exit 0
-  fi
-}
-
-assert_true () {
-  $MOCKLIBC $@ || fail "assert true: $@"
-  TESTCOUNT=$((TESTCOUNT+1))
-}
-
-assert_false () {
-  $MOCKLIBC $@ && fail "assert false: $@"
-  TESTCOUNT=$((TESTCOUNT+1))
-}
-
-assert_grep () {
-  $MOCKLIBC ${@:2} | grep -q "^${1}\$" || fail "'$1' doesn't match output of: ${@:2}"
-  TESTCOUNT=$((TESTCOUNT+1))
-}
-
-
-# Test implementations
-
-test_passwd () {
-  # Test user ids
-  assert_grep "0" id -u root
-  assert_grep "500" id -u john
-  assert_grep "501" id -u jane
-
-  # Test primary groups
-  assert_grep "root" id -gn root
-  assert_grep "john" id -gn john
-  assert_grep "jane" id -gn jane
-}
-
-test_group () {
-  # Test group lists for users
-  assert_grep "root" id -Gn root
-  assert_grep "john users" id -Gn john
-  assert_grep "jane users" id -Gn jane
-}
-
-test_netgroup () {
-  # Test whether each user is each netgroup
-  assert_true innetgr foo -u john
-  assert_false innetgr foo -u jane
-
-  assert_true innetgr bar -u jane
-  assert_false innetgr bar -u john
-
-  assert_true innetgr baz -u john
-  assert_true innetgr baz -u jane
-  assert_false innetgr baz -u henry
-
-  assert_true innetgr all -u john
-  assert_true innetgr all -u jane
-  assert_true innetgr all -u henry
-
-  assert_false innetgr none -u john
-  assert_false innetgr none -u jane
-  assert_false innetgr none -u henry
-
-  assert_false innetgr fake -u john
-}
-
-
-# Run the tests and print a report
-
-if (which id >/dev/null 2>&1)
-then
-  test_passwd
-  test_group
-else
-  echo "No 'id' command found, skipping passwd and group tests." >&2
-fi
-
-if (which innetgr >/dev/null 2>&1)
-then
-  test_netgroup
-else
-  echo "No 'innetgr' command found, skipping netgroup tests." >&2
-fi
-
-
-finish
-

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/bin/mocklibc.in Deleted

@@ -1,34 +0,0 @@
-#!/bin/bash
-
-#  Copyright 2011 Google Inc. All Rights Reserved.
-#
-#  Licensed under the Apache License, Version 2.0 (the "License");
-#  you may not use this file except in compliance with the License.
-#  You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-#  Unless required by applicable law or agreed to in writing, software
-#  distributed under the License is distributed on an "AS IS" BASIS,
-#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-#  See the License for the specific language governing permissions and
-#  limitations under the License.
-#
-#  Author: Nikki VonHollen <vonhollen@gmail.com>
-
-
-BASEDIR=`dirname $0`
-LIBDIR="${BASEDIR}/../src/.libs"
-LIBPATH="${LIBDIR}/@libname@"
-
-if  -f "$LIBPATH" 
-then
-  # Include Mocklibc's project build dir if we can find it
-  export LD_LIBRARY_PATH="${LIBDIR}:${LD_LIBRARY_PATH}"
-else
-  # Use the system version instead, w/o requiring ldconfig
-  export LD_LIBRARY_PATH="@libdir@:${LD_LIBRARY_PATH}"
-fi
-
-# Exec the requested app, replacing this one
-LD_PRELOAD="@libname@" exec $@

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/configure.ac Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/example Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/example/group Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/example/netgroup Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/example/passwd Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/Makefile.am Deleted

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/grp.c Deleted

@@ -1,156 +0,0 @@
-/**
- * Copyright 2011 Google Inc. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- * Author: Nikki VonHollen <vonhollen@gmail.com>
- */
-
-#include <grp.h>
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/types.h>
-
-#define GROUP_CONFIG_KEY "MOCK_GROUP"
-
-static FILE *global_stream = NULL;
-
-void setgrent(void) {
-  if (global_stream)
-    endgrent();
-
-  const char *path = getenv(GROUP_CONFIG_KEY);
-  if (!path)
-    return;
-
-  global_stream = fopen(path, "r");
-}
-
-struct group *getgrent(void) {
-  if (!global_stream)
-    setgrent();
-
-  if (!global_stream)
-    return NULL;
-
-  return fgetgrent(global_stream);
-}
-
-void endgrent(void) {
-  if (!global_stream)
-    return;
-
-  fclose(global_stream);
-  global_stream = NULL;
-}
-
-struct group *getgrnam(const char *name) {
-  const char *path = getenv(GROUP_CONFIG_KEY);
-  if (!path)
-    return NULL;
-
-  FILE *stream = fopen(path, "r");
-  if (!stream)
-    return NULL;
-
-  struct group *entry;
-  while ((entry = fgetgrent(stream))) {
-    if (strcmp(entry->gr_name, name) == 0) {
-      fclose(stream);
-      return entry;
-    }
-  }
-
-  fclose(stream);
-  return NULL;
-}
-
-struct group *getgrgid(gid_t gid) {
-  const char *path = getenv(GROUP_CONFIG_KEY);
-  if (!path)
-    return NULL;
-
-  FILE *stream = fopen(path, "r");
-  if (!stream)
-    return NULL;
-
-  struct group *entry;
-  while ((entry = fgetgrent(stream))) {
-    if (entry->gr_gid == gid) {
-      fclose(stream);
-      return entry;
-    }
-  }
-
-  fclose(stream);
-  return NULL;
-}
-
-int getgrouplist(const char *user, gid_t group, gid_t *groups, int *ngroups) {
-  const char *path = getenv(GROUP_CONFIG_KEY);
-  if (!path) {
-    *ngroups = 0;
-    return -1;
-  }
-
-  FILE *stream = fopen(path, "r");
-  if (!stream) {
-    *ngroups = 0;
-    return -1;
-  }
-
-  int default_group_found = 0;
-  int groups_found = 0;
-
-  // Loop through all groups
-  struct group *entry;
-  while ((entry = fgetgrent(stream))) {
-    // Loop through all users in group
-    char **cur_user;
-    for (cur_user = entry->gr_mem; *cur_user; cur_user++) {
-      // Skip users who don't match arg 'user'
-      if (strcmp(*cur_user, user))
-        continue;
-
-      // Is this the default group? if so, flag it
-      if (entry->gr_gid == group)
-        default_group_found = 1;
-
-      // Only insert new entries if we have room
-      if (groups_found < *ngroups) {
-        groupsgroups_found = entry->gr_gid;
-      }
-
-      groups_found++;
-    }
-  }
-
-  // Include the default group if it wasn't found
-  if (!default_group_found) {
-    if (groups_found < *ngroups) {
-      groupsgroups_found = group;
-    }
-    groups_found++;
-  }
-
-  // Did we have to leave out some groups? If not, tell how many we found.
-  int retval = (groups_found > *ngroups) ? -1 : groups_found;
-
-  // Always tell the user how many groups we found via *ngroups
-  *ngroups = groups_found;
-
-  fclose(stream);
-  return retval;
-}

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/netdb.c Deleted

@@ -1,100 +0,0 @@
-/**
- * Copyright 2011 Google Inc. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- * Author: Nikki VonHollen <vonhollen@gmail.com>
- */
-
-#include "netgroup.h"
-
-#include <netdb.h>
-
-#include <ctype.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/types.h>
-
-#define INNETGR_CHECK(match, value) if (match && value && strcmp(match, value)) continue;
-
-/** Private static data. */
-
-static struct netgroup *global_netgroup_head = NULL;
-static struct netgroup_iter global_iter;
-
-/** Public methods */
-
-// REMEMBER: 1 means success, 0 means failure for netgroup methods
-
-int setnetgrent(const char *netgroup) {
-  if (!global_netgroup_head)
-    global_netgroup_head = netgroup_parse_all();
-
-  struct netgroup *group = netgroup_find(global_netgroup_head, netgroup);
-  if (!group) {
-     netgroup_free_all(global_netgroup_head);
-    global_netgroup_head = NULL;
-    return 0;
-  }
-
-  netgroup_iter_init(&global_iter, group);
-  return 1;
-}
-
-void endnetgrent(void) {
-  netgroup_free_all(global_netgroup_head);
-  global_netgroup_head = NULL;
-}
-
-int getnetgrent(char **host, char **user, char **domain) {
-  if (!global_netgroup_head)
-    return 0;
-
-  struct entry *result = netgroup_iter_next(&global_iter);
-  if (!result)
-    return 0;
-
-  *host = result->data.triple.hostname;
-  *user = result->data.triple.username;
-  *domain = result->data.triple.domainname;
-  return 1;
-}
-
-int innetgr(const char *netgroup, const char *host, const char *user,
-    const char *domain) {
-  int retval = 0;
-  struct netgroup *head = netgroup_parse_all();
-  struct netgroup *group = netgroup_find(head, netgroup);
-  if (!group) {
-    // Can't find group
-    netgroup_free_all(head);
-    return 0;
-  }
-
-  struct netgroup_iter iter;
-  netgroup_iter_init(&iter, group);
-
-  struct entry *cur;
-  while ((cur = netgroup_iter_next(&iter))) {
-    INNETGR_CHECK(host, cur->data.triple.hostname);
-    INNETGR_CHECK(user, cur->data.triple.username);
-    INNETGR_CHECK(domain, cur->data.triple.domainname);
-
-    // No INNETGR_CHECK failed, so we matched!
-    retval = 1;
-    break;
-  }
-
-  netgroup_free_all(head);
-  return retval;
-}

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/netgroup-debug.c Deleted

@@ -1,84 +0,0 @@
-/**
- * Copyright 2011 Google Inc. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- * Author: Nikki VonHollen <vonhollen@gmail.com>
- */
-
-#include "netgroup-debug.h"
-
-#include <stdio.h>
-#include <stdlib.h>
-
-void netgroup_debug_print_entry(struct entry *entry, FILE *stream, unsigned int indent) {
-  print_indent(stream, indent);
-
-  if (entry->type == TRIPLE_ENTRY) {
-    fprintf(stream, "triple (%s,%s,%s)\n",
-        entry->data.triple.hostname,
-        entry->data.triple.username,
-        entry->data.triple.domainname);
-  } else if (entry->type == CHILD_ENTRY) {
-    fprintf(stream, "child '%s'\n", entry->data.child.name);
-    struct entry *child;
-    for (child = entry->data.child.head; child; child = child->next) {
-      netgroup_debug_print_entry(child, stream, indent + 1);
-    }
-  } else {
-    fprintf(stream, "UNKNOWN_TYPE");
-  }
-}
-
-void netgroup_debug_print_group(struct netgroup *group, FILE *stream, unsigned int indent) {
-  print_indent(stream, indent);
-  fprintf(stream, "%s\n", group->name);
-  struct entry *entry;
-  for (entry = group->head; entry; entry = entry->next) {
-    netgroup_debug_print_entry(entry, stream, indent + 1);
-  }
-}
-
-void netgroup_debug_print_group_unrolled(struct netgroup *group, FILE *stream, unsigned int indent) {
-  print_indent(stream, indent);
-  fprintf(stream, "%s\n", group->name);
-
-  struct netgroup_iter iter;
-  netgroup_iter_init(&iter, group);
-
-  struct entry *entry;
-  while ((entry = netgroup_iter_next(&iter))) {
-    netgroup_debug_print_entry(entry, stream, indent + 1);
-  }
-}
-
-void netgroup_debug_print_all(struct netgroup *head, FILE *stream, unsigned int indent) {
-  struct netgroup *group;
-  for (group = head; group; group = group->next) {
-    netgroup_debug_print_group(group, stream, indent);
-  }
-}
-
-int main(int argc, char **argv) {
-  struct netgroup *groups = netgroup_parse_all();
-  if (argc == 1)
-    netgroup_debug_print_all(groups, stdout, 0);
-  else if (argc == 2) {
-    struct netgroup *group = netgroup_find(groups, argv1);
-    if (!group)
-      return 1;
-    netgroup_debug_print_group_unrolled(group, stdout, 0);
-  }
-
-  return 0;
-}

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/netgroup-debug.h Deleted

@@ -1,58 +0,0 @@
-/**
- * Copyright 2011 Google Inc. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- * Author: Nikki VonHollen <vonhollen@gmail.com>
- */
-
-#ifndef NETGROUP_DEBUG_H_
-#define NETGROUP_DEBUG_H_
-
-#include "netgroup.h"
-
-#include <stdio.h>
-
-/**
- * Print entry and it's children to the given stream.
- * @param entry Netgroup entry to print
- * @param stream Stream to print to
- * @param indent Number of indents to use
- */
-void netgroup_debug_print_entry(struct entry *entry, FILE *stream, unsigned int indent);
-
-/**
- * Print a single netgroup to the given stream.
- * @param group Netgroup to print
- * @param stream Stream to print to
- * @param indent Number of indents to use
- */
-void netgroup_debug_print_group(struct netgroup *group, FILE *stream, unsigned int indent);
-
-/**
- * Print a single netgroup with all triples included recursively.
- * @param group Netgroup to print
- * @param stream Stream to print to
- * @param indent Number of indents to use
- */
-void netgroup_debug_print_group_unrolled(struct netgroup *group, FILE *stream, unsigned int indent);
-
-/**
- * Print all netgroups to the given stream.
- * @param head Head of list of netgroups
- * @param stream Stream to print to
- * @param indent Number of indents to use
- */
-void netgroup_debug_print_all(struct netgroup *head, FILE *stream, unsigned int indent);
-
-#endif

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/netgroup.c Deleted

@@ -1,345 +0,0 @@
-/**
- * Copyright 2011 Google Inc. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- * Author: Nikki VonHollen <vonhollen@gmail.com>
- */
-
-#include "netgroup.h"
-
-#include <ctype.h>
-#include <regex.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/types.h>
-
-#define NETGROUP_CONFIG_KEY "MOCK_NETGROUP"
-#define NETGROUP_TRIPLE_REGEX "\$(^,*),(^,*),(^\$*)\\)"
-#define FREE_IF_NOT_NULL(ptr) if (ptr) free(ptr)
-
-/** Private methods. */
-
-/**
- * Move the given pointer past any whitespace.
- * @param cur Pointer to string (char *) to advance
- */
-static void parser_skip_whitespace(char **cur) {
-  for (; isspace(**cur); (*cur)++) {}
-}
-
-/**
- * Copy the next group of non-space characters and move the pointer past
- * consumed characters.
- * @param cur Pointer to string (char *) to search/advance
- * @return Copy of chars consumed. Must be free'd by user.
- */
-static char *parser_copy_word(char **cur) {
-  char *value = *cur;
-  size_t i;
-
-  // Find the next non-null non-space character
-  for (i = 0; !isspace(valuei) && valuei != '\0'; i++) {}
-
-  // Don't allocate zero-length strings, just die
-  if (i == 0) {
-    return NULL;
-  }
-
-  // Allocate the new string, with room for a null terminator
-  char *result = malloc(i + 1);
-  if (!result) {
-    return NULL;
-  }
-
-  // Set the current pointer past the parsed region
-  *cur += i;
-
-  memcpy(result, value, i);
-  resulti = '\0';
-  return result;
-}
-
-/**
- * Print a varaible indentation to the stream.
- * @param stream Stream to print to
- * @param indent Number of indents to use
- */
-void print_indent(FILE *stream, unsigned int indent) {
-  int i;
-  for (i = 0; i < indent; i++)
-    fprintf(stream, "  ");
-}
-
-/**
- * Connect entries with 'child' type to their child entries.
- * @param headentry Head of list of entries that need to be connected
- * @param headgroup Head of list of netgroups to connect child entries to
- */
-static void netgroup_connect_children(struct entry *headentry, struct netgroup *headgroup) {
-  struct entry *curentry;
-  for (curentry = headentry; curentry; curentry = curentry->next) {
-    // Skip entries that don't have children
-    if (curentry->type != CHILD_ENTRY)
-      continue;
-
-    // Set the entry's children to the head of the netgroup with the same name
-    struct netgroup *group = netgroup_find(headgroup, curentry->data.child.name);
-    if (group)
-      curentry->data.child.head = group->head;
-  }
-}
-
-
-/* Public methods. */
-
-struct netgroup *netgroup_parse_all() {
-  const char *path = getenv(NETGROUP_CONFIG_KEY);
-  if (!path)
-    return NULL;
-
-  FILE *stream = fopen(path, "r");
-  if (!stream)
-    return NULL;
-
-  struct netgroup *headgroup = NULL;
-  struct netgroup *lastgroup = NULL;
-
-  // Parse netgroups but don't fill in child entry pointers
-  for (;;) {
-    size_t line_alloc = 0;
-    char * line = NULL;
-    ssize_t line_size = getline(&line, &line_alloc, stream);
-    if (line_size == -1)
-      {
-	free(line);
-	break;
-      }
-
-    struct netgroup *nextgroup = netgroup_parse_line(line);
-    free(line);
-    if (!nextgroup)
-      continue;
-
-    if (!headgroup) {
-      headgroup = nextgroup;
-      lastgroup = nextgroup;
-    } else {
-      lastgroup->next = nextgroup;
-      lastgroup = nextgroup;
-    }
-  }
-
-  fclose(stream);
-
-  // Fill in child entry pointers
-  struct netgroup *curgroup;
-  for (curgroup = headgroup; curgroup; curgroup = curgroup->next) {
-    netgroup_connect_children(curgroup->head, headgroup);
-  }
-
-  return headgroup;
-}
-
-void netgroup_free_all(struct netgroup *head) {
-  struct netgroup *group = head;
-  struct netgroup *nextgroup;
-  while (group) {
-    nextgroup = group->next;
-    netgroup_free(group);
-    group = nextgroup;
-  }
-}
-
-struct netgroup *netgroup_parse_line(char *line) {
-  char *cur = line;
-
-  // Get the netgroup's name
-  parser_skip_whitespace(&cur);
-  char *group_name = parser_copy_word(&cur);
-  if (!group_name)
-    return NULL;
-
-  // Create new netgroup object
-  struct netgroup *result = malloc(sizeof(struct netgroup));
-  if (!result)
-    return NULL;
-  result->next = NULL;
-  result->name = group_name;
-  result->head = NULL;
-
-  // Fill in netgroup entries
-  struct entry* lastentry = NULL;
-  for (;;) {
-    // Get the next word (anything non-space and non-null)
-    parser_skip_whitespace(&cur);
-    char *word = parser_copy_word(&cur);
-    if (!word)
-      break;
-
-    // Parse the entry
-    struct entry *entry = netgroup_parse_entry(word);
-    free(word);
-    if (!entry)
-      continue;
-
-    // Connect the entries together in a singly-linked list
-    if (lastentry) {
-      lastentry->next = entry;

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/netgroup.h Deleted

@@ -1,144 +0,0 @@
-/**
- * Copyright 2011 Google Inc. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- * Author: Nikki VonHollen <vonhollen@gmail.com>
- */
-
-#ifndef NETGROUP_H_
-#define NETGROUP_H_
-
-#define NETGROUP_MAX_DEPTH 32
-
-/**
- * Netgroup with a name and list of entries.
- */
-struct netgroup;
-
-/**
- * Entry in a netgroup, either a triple or sub-group (child).
- */
-struct entry;
-
-struct netgroup {
-  /* Next netgroup in list. */
-  struct netgroup *next; // Next netgroup in list
-
-  /* Netgroup name. */
-  char *name;
-
-  /* First entry in list of entries. */
-  struct entry *head;
-};
-
-struct entry {
-  /* Next entry in list of entries for the parent netgroup. */
-  struct entry *next;
-
-  /* Entry type is triple (host,user,domain) or child (netgroup name). */
-  enum {CHILD_ENTRY, TRIPLE_ENTRY} type;
-
-  union {
-    /* Child data if entry is a netgroup name. */
-    struct {
-      /* Child netgroup name. */
-      char *name;
-
-      /* Pointer to first entry in child netgroup. */
-      struct entry *head;
-    } child;
-
-    /* Triple data if entry type is triple. */
-    struct {
-      char *hostname;
-      char *username;
-      char *domainname;
-    } triple;
-  } data;
-};
-
-/* Recursive netgroup entry iterator. */
-struct netgroup_iter {
-  struct entry *stack NETGROUP_MAX_DEPTH;
-  int depth;
-};
-
-
-/**
- * Load full netgroup database into memory.
- * @return Head netgroup
- */
-struct netgroup *netgroup_parse_all();
-
-/**
- * Free a list of netgroups.
- * @param head Head of list of netgroups
- */
-void netgroup_free_all(struct netgroup *head);
-
-/**
- * Parse a single netgroup.
- * @param line Line for netgroup definition
- * @return Single netgroup with list of netgroup entries
- */
-struct netgroup *netgroup_parse_line(char *line);
-
-/**
- * Free single netgroup.
- * @param group Netgroup to free
- */
-void netgroup_free(struct netgroup *group);
-
-/**
- * Parse a single netgroup entry.
- * @param value Entry triple or name as string
- * @return Single netgroup entry
- */
-struct entry *netgroup_parse_entry(const char *value);
-
-/**
- * Free a list of netgroup entries.
- * @param head Head of list of entries
- */
-void netgroup_entry_free_all(struct entry *head);
-
-/**
- * Free a single netgroup entry.
- * @param entry Netgroup entry to free
- */
-void netgroup_entry_free(struct entry *entry);
-
-/**
- * Find netgroup with given name.
- * @param head Head of list of netgroups
- * @param name Name to find
- * @return Netgroup with name or NULL if not found
- */
-struct netgroup *netgroup_find(struct netgroup *head, const char *name);
-
-/**
- * Create recursive iterator over all entries in a netgroup.
- * @param iter Pointer to iterator struct
- * @param group Group to iterate over
- */
-void netgroup_iter_init(struct netgroup_iter *iter, struct netgroup *group);
-
-/**
- * Get the next entry in the netgroup iterator.
- * @param iter Pointer to iterator struct
- * @return Netgroup entry of type triple, or NULL if done iterating
- */
-struct entry *netgroup_iter_next(struct netgroup_iter *iter);
-
-#endif

_service:tar_scm:polkit-123.tar.gz/test/mocklibc/src/pwd.c Deleted

@@ -1,99 +0,0 @@
-/**
- * Copyright 2011 Google Inc. All Rights Reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- * Author: Nikki VonHollen <vonhollen@gmail.com>
- */
-
-#include <pwd.h>
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/types.h>
-
-#define PASSWD_CONFIG_KEY "MOCK_PASSWD"
-
-static FILE *global_stream = NULL;
-
-void setpwent(void) {
-  if (global_stream)
-    endpwent();
-
-  const char *path = getenv(PASSWD_CONFIG_KEY);
-  if (!path)
-    return;
-
-  global_stream = fopen(path, "r");
-}
-
-struct passwd *getpwent(void) {
-  if (!global_stream)
-    setpwent();
-
-  if (!global_stream)
-    return NULL;
-
-  return fgetpwent(global_stream);
-}
-
-void endpwent(void) {
-  if (!global_stream)
-    return;
-
-  fclose(global_stream);
-  global_stream = NULL;
-}
-
-struct passwd *getpwnam(const char *name) {
-  const char *path = getenv(PASSWD_CONFIG_KEY);
-  if (!path)
-    return NULL;
-
-  FILE *stream = fopen(path, "r");
-  if (!stream)
-    return NULL;
-
-  struct passwd *entry;
-  while ((entry = fgetpwent(stream))) {
-    if (strcmp(entry->pw_name, name) == 0) {
-      fclose(stream);
-      return entry;
-    }
-  }
-
-  fclose(stream);
-  return NULL;
-}
-
-struct passwd *getpwuid(uid_t uid) {
-  const char *path = getenv(PASSWD_CONFIG_KEY);
-  if (!path)
-    return NULL;
-
-  FILE *stream = fopen(path, "r");
-  if (!stream)
-    return NULL;
-
-  struct passwd *entry;
-  while ((entry = fgetpwent(stream))) {
-    if (entry->pw_uid == uid) {
-      fclose(stream);
-      return entry;
-    }
-  }
-
-  fclose(stream);
-  return NULL;
-}

_service:tar_scm:polkit-123.tar.gz/test/polkitbackend/polkitbackendjsauthoritytest-wrapper.py Deleted

@@ -1,80 +0,0 @@
-#!/usr/bin/python3
-
-# This program is free software; you can redistribute it and/or modify it under
-# the terms of the GNU Lesser General Public License as published by the Free
-# Software Foundation; either version 3 of the License, or (at your option) any
-# later version.  See http://www.gnu.org/copyleft/lgpl.html for the full text
-# of the license.
-
-__author__ = 'Bastien Nocera'
-__email__ = 'hadess@hadess.net'
-__copyright__ = '(c) 2020 Red Hat Inc.'
-__license__ = 'LGPL 3+'
-
-import unittest
-import sys
-import subprocess
-import dbus
-import dbus.mainloop.glib
-import dbusmock
-import os
-import time
-
-dbus.mainloop.glib.DBusGMainLoop(set_as_default=True)
-
-class TestPolkitBackendJsAuthority(dbusmock.DBusTestCase):
-    '''Test polkitbackendjsauthoritytest'''
-
-    @classmethod
-    def setUpClass(klass):
-        klass.start_system_bus()
-        klass.mocklibc_path = None
-
-        if 'TOP_BUILD_DIR' in os.environ:
-            klass.top_build_dir = os.environ'TOP_BUILD_DIR'
-            klass.mocklibc_path = klass.top_build_dir  + '/subprojects/mocklibc-1.0/bin/mocklibc'
-
-        # suppose autotools over meson
-        if not os.path.exists(klass.mocklibc_path):
-            klass.top_build_dir = '../../'
-            klass.mocklibc_path = klass.top_build_dir + '/test/mocklibc/bin/mocklibc'
-        print ('Top build dir: %s' % klass.top_build_dir)
-        print ('mocklibc path: %s' % klass.mocklibc_path)
-        assert(os.path.exists(klass.mocklibc_path))
-
-        # WORKAROUND - unzipped mocklibc does not preserve file permissions
-        os.chmod(klass.mocklibc_path, 0o755)
-
-        klass.top_src_dir = os.path.dirname(os.path.realpath(__file__)) + '/../../'
-        if 'TOP_SRC_DIR' in os.environ:
-            klass.top_src_dir = os.environ'TOP_SRC_DIR'
-        print ('Top source dir: %s' % klass.top_src_dir)
-
-        os.environ'POLKIT_TEST_DATA' = klass.top_src_dir + '/test/data'
-        print ('Polkit test data dir: %s' % os.environ'POLKIT_TEST_DATA')
-
-        os.environ'MOCK_PASSWD' = klass.top_src_dir + '/test/data/etc/passwd'
-        print ('Mock password file: %s' % os.environ'MOCK_PASSWD')
-        os.environ'MOCK_GROUP' = klass.top_src_dir + '/test/data/etc/group'
-        print ('Mock group file: %s' % os.environ'MOCK_GROUP')
-        os.environ'MOCK_NETGROUP' = klass.top_src_dir + '/test/data/etc/netgroup'
-        print ('Mock netgroup file: %s' % os.environ'MOCK_NETGROUP')
-
-    def test_polkitbackendjsauthoritytest(self):
-        # Add '; exit 0' at the end of the cmd line if launching fails and you
-        # want to capture the error output
-        test_path = self.top_build_dir + '/test/polkitbackend/test-polkitbackendjsauthority'
-
-        if not os.path.exists(test_path):
-            print('\n %s... not found' % test_path)
-            test_path = self.top_build_dir + '/test/polkitbackend/polkitbackendjsauthoritytest'
-
-        out = subprocess.check_output(self.mocklibc_path + ' ' + test_path,
-                                      stderr=subprocess.STDOUT,
-                                      shell=True,
-                                      universal_newlines=True)
-        print(out)
-
-if __name__ == '__main__':
-    # avoid writing to stderr
-    unittest.main(testRunner=unittest.TextTestRunner(stream=sys.stdout, verbosity=2))

Changes of Revision 3