1. 15 Sep, 2010 1 commit
  2. 10 Sep, 2010 3 commits
  3. 26 Aug, 2010 1 commit
  4. 20 Aug, 2010 7 commits
  5. 18 Aug, 2010 1 commit
    • David Zeuthen's avatar
      Fix ConsoleKit interaction bug · 22363658
      David Zeuthen authored
      First of all, there was a glaring bug where we forgot to load the
      GKeyFile for /var/run/ConsoleKit/database resulting in criticals like
      this:
      
       (lt-polkitd:17984): GLib-CRITICAL **: g_key_file_get_boolean: assertion `key_file != NULL' failed
       (lt-polkitd:17984): GLib-CRITICAL **: g_key_file_get_boolean: assertion `key_file != NULL' failed
      
      Furthermore, this resulted in the Authority returning "not authorized"
      for subjects that should have been authorized. For an example, see
      
       https://bugzilla.redhat.com/show_bug.cgi?id=624125
      
      Fix this bug by calling ensure_database() to make sure the GKeyFile
      contains information from /var/run/ConsoleKit/database. Also, since
      there is a race (theoretical at least, but see
      https://bugzilla.gnome.org/show_bug.cgi?id=627285
      
       ) with file
      monitoring, also ensure that we are using the latest and greatest
      version of /var/run/ConsoleKit/database.
      Signed-off-by: default avatarDavid Zeuthen <davidz@redhat.com>
      22363658
  6. 12 Aug, 2010 2 commits
    • David Zeuthen's avatar
      Add textual authentication agent and use it in pkexec(1) · 42177383
      David Zeuthen authored
      
      
      This makes pkexec(1) work when e.g. logging in via ssh(1) or the linux
      console but also when using `su -'. Example:
      
       [davidz@x61 ~]$ su - bateman
       Password:
       [bateman@x61 ~]$ pkexec bash
       ==== AUTHENTICATING FOR org.freedesktop.policykit.exec ===
       Authentication is needed to run `/bin/bash' as the super user
       Authenticating as: root
       Password:
       ==== AUTHENTICATION COMPLETE ===
       [root@x61 ~]#
      
      Summary of changes
      
       - Added a PolkitAgentTextListener class
      
       - Add new polkit_agent_listener_register() (and _unregister()) API
      
       - Deprecate polkit_agent_register_listener API
      
       - Allow registering authentication agents for PolkitUnixProcess subjects
         and prefer such agents to ones governing the session
      
       - Make PolkitAgentSession use the thread-default GMainContext - otherwise
         it won't work in spawned threads
      
       - (finally) use PolkitAgentTextListener in pkexec(1) if authorization
         via authentication is possible but no authentication agent was
         found
      Signed-off-by: default avatarDavid Zeuthen <davidz@redhat.com>
      42177383
    • David Zeuthen's avatar
      Fix scanning of unix-process subjects · 17f06005
      David Zeuthen authored
      
      
      In particular accept both "unix-process:<pid>,<starttime>" and
      "unix-process:<pid>". For the latter, return an error if we cannot
      lookup the starttime (for example if the given pid references a
      non-existing process).
      Signed-off-by: default avatarDavid Zeuthen <davidz@redhat.com>
      17f06005
  7. 10 Aug, 2010 1 commit
  8. 09 Aug, 2010 10 commits
  9. 07 Aug, 2010 1 commit
  10. 06 Aug, 2010 2 commits
  11. 03 Aug, 2010 2 commits
  12. 02 Aug, 2010 1 commit
  13. 30 Jul, 2010 2 commits
  14. 29 Jul, 2010 3 commits
  15. 28 Jul, 2010 2 commits
  16. 15 Jul, 2010 1 commit