GitLab

 Privilege -> Action
 PrivilegeFile -> PolicyFile
 PrivilegeFileEntry -> PolicyFileEntry
 PrivilegeCache -> PolicyCache

Hopefully it makes a bit more sense now.

Am happy to report that 'make distcheck' now works!

This paves the way for writing

 1. A module that tracks temporary (look in /var/run) and permanent (look
    in /var/lib) privilege grants
 2. A D-Bus service to authenticate a client to obtain to a privilege
    grant and then writing the grant in temporary or permanent storage

Also, this feature lets people very easily lock down the system; just
edit /etc/PolicyKit/PolicyKit.conf; add pam-module-deny-all / -allow-all
stanzas with various privilege=<regexp> and user=<username> options.

Also avoid dumping all privilege file entries to debug whenever we
populate our privilege cache.

Inspired by recent patches to both HAL and ConsoleKit from Michael
Biebl <mbiebl@gmail.com>.

Now I only need to implement it...

Some of the code, e.g. the daemon, will be brought back in other forms.

A quick (and dirty) fix to get 'make distcheck' complete running and
to fix polkitd-test

This little patch fixes configure to stop and print a error message if
pam/pam-devel is missing while run configure for PolicyKit

	* pam-polkit-console/pam-polkit-console.c: (pam_sm_open_session),
	(pam_sm_close_session): fixed usage of pam_get_item() to respect
	strict-aliasing rules

        * polkitd/polkit-manager.c: (polkit_manager_get_caller_info):
	added ifdef around currently unused calling_selinux_context

        * tools/polkit-grant-privilege.c: (grant_complete_cb): replaced
	libpolkit_free_context() with correct libpolkit_grant_free_context()

disted tarballs.

    available.

    being installed and prevents them from being written out of its target
    directory. This means HAL now prevents jhautobuild[1] to complete since
    pam-polkit-console hardcodes /lib/security. Attached is a patch with a
    configure option (--with-pam-module-dir) so it is possible to set an
    other directory. [1] http://jhbuild.bxlug.be

    http://jhbuild.bxlug.be/builds/2006-06-06-0000/logs/PolicyKit/#build
    shows a error when building newest PolicyKit with Debian PAM libraries.
Attached patch adds new configure checks; pam-polkit-console.c may need
    alternate behaviour if pam_vsyslog is missing (using straight
    vsyslog?).
configure.in,

Update to new D-BUS API
Update to new D-BUS API (main): --do--
New file
Add build rules for polkit-revoke-privilege
Fix up prototypes
Update to new D-BUS API
    (polkit_manager_get_allowed_resources_for_privilege): --do--
    (polkit_manager_revoke_temporary_privilege): New function
    (polkit_manager_remove_temporary_privilege): Fix up resource handling
    (polkit_manager_add_temporary_privilege): --do--
Update to new D-BUS API and export libpolkit_revoke_temporary_privilege()
Update to new D-BUS API
    (libpolkit_get_allowed_resources_for_privilege_for_uid): --do--
    (libpolkit_revoke_temporary_privilege): New function
Rename InitiatePrivilegeGrant() to InitiateTemporaryPrivilegeGrant(). Add
    new function RevokeTemporaryPrivilege(). Make IsUserPrivileged() output
    a boolean is_temporary. GetAllowedResourcesForPrivilege() now also
    outputs an integer num_non_temp.