GitLab

Update Ukrainian translation

See merge request !50

Updated Indonesian translation

See merge request !56

Add Norwegian Nynorsk translation

See merge request !55

Port JavaScript authority to mozjs-68

Closes #118

See merge request !48

ci: Add a CI and run tests

See merge request !46

Just compiles and installs polkit

Restoring terminal setting erases unread input

See merge request !40

Freeing uninitialized memory

See merge request !44

jsauthority: Fix two minor memory leaks

See merge request !42

Merge branch 'libreajans/polkit-patch-1'

See merge request !41

Update Swedish translation

See merge request !39

pkttyagent: process stopped by SIGTTOU if run in background job

See merge request !34

Update Danish translation (da.po)

See merge request !23

Release 0.116 release notes

See merge request !32

README update reflecting transition to Gitlab

See merge request !31

Js encode string to utf8

See merge request !29

When strings handled by the jsbackendauthority contain non-ASCII, the
code will fail.  For example, on a system having a user with a
non-ASCII name, the following message will appear when a USB stick is
plugged in.

mar 04 21:47:31 mimmi polkitd[17163]: Error evaluating authorization rules

The user will not be allowed to do the mount.

The problem is that strings were variously encoded back to C strings
with JS_EncodeString and JS_EncodeStringToUTF8.  According to the
documentation
(https://developer.mozilla.org/en-US/docs/Mozilla/Projects/SpiderMonkey/JSAPI_reference/JS_EncodeString#Description)
the former will simply drop the high byte from each character.  If
that happens to a username, it will no longer be found as a valid user
name on the system.  Explicitly encoding to UTF-8 will at least work
in UTF-8 locales, which is the increasingly dominant encoding.

Code polish and removal of unused var reported by lint

See merge request !27

pkttyagent: PolkitAgentTextListener leaves echo tty disabled if SIGINT/SIGTERM

See merge request !24

If no password is typed into terminal during authentication raised by PolkitAgentTextListener, pkttyagent sends kill (it receives from systemctl/hostnamectl e.g.) without chance to restore echoing back on. This cannot be done in on_request() since it's run in a thread without guarantee the signal is distributed there.

Port JavaScript authority to mozjs-60

See merge request !4

API changes in mozjs that need to be reflected in the JS authority:

 - the JS::CompileOptions constructor and the JS::CompartmentOptions
   do not allow setting a JS version any more

 - do not use NULL comparisons for C++ objects

 - the resize() method for a vector has a return value that needs
   to be handled

 - JSClassOps has different fields

This is the new ESR version of the Mozilla JS engine, superceding
mozjs-52.

Allow uid of -1 for a PolkitUnixProcess

See merge request !17

Commit 2cb40c4d changed PolkitUnixUser, PolkitUnixGroup, and
PolkitUnixProcess to allow negative values for their uid/gid properties,
since these are values above INT_MAX which wrap around but are still
valid, with the exception of -1 which is not valid. However,
PolkitUnixProcess allows a uid of -1 to be passed to
polkit_unix_process_new_for_owner() which means polkit is expected to
figure out the uid on its own (this happens in the _constructed
function). So this commit removes the check in
polkit_unix_process_set_property() so that new_for_owner() can be used
as documented without producing a critical error message.

This does not affect the protection against CVE-2018-19788 which is
based on creating a user with a UID up to but not including 4294967295
(-1).

backend: Compare PolkitUnixProcess uids for temporary authorizations

Closes #75

See merge request !19