Attachment 102279 Details for Bug 80921 – 0001-Don-t-prohibit-applications-from-including-authoriza.patch

[patch] 0001-Don-t-prohibit-applications-from-including-authoriza.patch

0001-Don-t-prohibit-applications-from-including-authoriza.patch (text/plain), 2.66 KB, created by Miloslav Trmac on 2014-07-04 17:45:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Miloslav Trmac

Created: 2014-07-04 17:45:47 UTC

Size: 2.66 KB

patch

obsolete

>From fdb6778c429e8f0ff00007dda9d86ba711a54c86 Mon Sep 17 00:00:00 2001
>From: =?UTF-8?q?Miloslav=20Trma=C4=8D?= <mitr@redhat.com>
>Date: Fri, 4 Jul 2014 19:43:37 +0200
>Subject: [PATCH] =?UTF-8?q?Don=E2=80=99t=20prohibit=20applications=20from?=
> =?UTF-8?q?=20including=20authorization=20rules?=
>MIME-Version: 1.0
>Content-Type: text/plain; charset=UTF-8
>Content-Transfer-Encoding: 8bit
>
>Itâs become clear that the .action mechanism is not sufficient for
>expressing various real-world situations (look in
>/usr/share/polkit-1/rules.d/ ; e.g. gnome-initial-setup and lightdm
>needs extra access for their special-purpose users, or allowing access
>to âwheelâ members without a password,).
>
>Extending the .action mechanism, or inventing yet another one, purely to
>keep some abstract separation between usersâ and programmersâ policy, is
>not reasonable; so just remove the documentation discouraging
>applications from adding their own .rules.
>
>https://bugs.freedesktop.org/show_bug.cgi?id=80921
>---
> docs/man/polkit.xml      | 13 -------------
> docs/polkit/overview.xml | 10 ----------
> 2 files changed, 23 deletions(-)
>
>diff --git a/docs/man/polkit.xml b/docs/man/polkit.xml
>index d30ee52..e0d70d7 100644
>--- a/docs/man/polkit.xml
>+++ b/docs/man/polkit.xml
>@@ -507,19 +507,6 @@ System Context         |                        |
>       (in other words, the JavaScript interpreter used may change in future versions of polkit).
>     </para>
> 
>-    <para>
>-      Authorization rules are intended for two specific audiences
>-    </para>
>-    <itemizedlist mark='opencircle' spacing='compact'>
>-      <listitem><para>System Administrators</para></listitem>
>-      <listitem><para>Special-purpose Operating Systems / Environments</para></listitem>
>-    </itemizedlist>
>-    <para>
>-      and those audiences only. In particular, applications,
>-      mechanisms and general-purpose operating systems must never
>-      include any authorization rules.
>-    </para>
>-
>     <refsect2 id="polkit-rules-polkit">
>       <title>The <type>Polkit</type> type</title>
> 
>diff --git a/docs/polkit/overview.xml b/docs/polkit/overview.xml
>index 150a7bc..434af98 100644
>--- a/docs/polkit/overview.xml
>+++ b/docs/polkit/overview.xml
>@@ -214,16 +214,6 @@
>           </para>
>         </listitem>
> 
>-        <listitem>
>-          <para>
>-            <emphasis role='bold'>DON'T</emphasis> include any
>-            authorization rules with your application as this is only
>-            intended for administrators and special-purpose operating
>-            systems / environments. See <xref linkend="polkit-rules"/>
>-            for more information.
>-          </para>
>-        </listitem>
>-
>       </itemizedlist>
>     </simplesect>
> 
>-- 
>1.8.3.1
>

Actions: View | Splinter Review

Attachments on bug 80921: 102279

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.