summaryrefslogtreecommitdiff
path: root/policy
AgeCommit message (Collapse)AuthorFilesLines
2020-09-04Actually merge in the PolicyKit translationsRichard Hughes1-17/+6
Fixes https://github.com/hughsie/PackageKit/issues/428
2020-01-10Port to the meson build systemCorentin Noël3-56/+57
With much help from Martin Blanchard <tchaik@gmx.com> too, thanks to all. https://wiki.gnome.org/Initiatives/GnomeGoals/MesonPorting
2018-02-19Rename "Software Sources" to "Software Repositories"Kalev Lember1-5/+5
This renames a few strings to match gnome-software terminology change in https://gitlab.gnome.org/GNOME/gnome-software/commit/3bbf72c079ba6f4b864b7cd223e0cc5592380e2a
2016-05-25Require admin authorisation to trigger a distro upgradeRichard Hughes1-0/+16
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1335458
2015-10-28By popular demand, reintroduce the UpgradeSystem methodRichard Hughes1-0/+16
2014-11-07Reinstallation and downgrade require authorizationMichal Minar1-0/+37
Added new policy actions: * org.freedesktop.packagekit.package-reinstall * org.freedesktop.packagekit.package-downgrade The first does not depend or require any other actions to be authorized except for org.freedesktop.packagekit.package-install-untrusted in case of reinstallation of not trusted package. The same applies to second one plus it implies org.freedesktop.packagekit.package-install action (if the user is authorized to downgrade, he's authorized to install as well). Now the authorization can spawn up to 3 asynchronous calls to polkit for single package because each transaction flag (allow-downgrade, allow-reinstall) the client supplies needs to be checked separately.
2014-09-11Remove the pkexec systemd helpersRichard Hughes1-2/+0
THe only user, gnome-shell, has ported to the D-Bus interface.
2014-05-06policy: Make the polkit policy not be desktop-centricStef Walter1-28/+28
The polkit policy should allow admin users logged in via ssh or Cockpit (for example on a server) to perform the actions in question. The <allow_any> applies non local sessions. Signed-off-by: Richard Hughes <richard@hughsie.com>
2014-03-19Do not refer to packages in the PolicyKit dialog messagesRichard Hughes1-8/+8
2013-12-04Remove the UpgradeSystem methodRichard Hughes1-16/+0
The only backend that implemented this was zif, and that no longer exists.
2013-11-28Explicitly mark PolicyKit as a hard depRichard Hughes1-8/+2
PackageKit has next-to-no testing done with the dummy backend, and allowing users to compile and use dummy as an alternative to PolicyKit is like handing them a loaded gun with no safety.
2013-05-28Allow local active users in the wheel group to install signed packages ↵Richard Hughes3-1/+13
without a password
2013-04-25Allow local active users to install signed software without prompting for ↵Richard Hughes1-2/+2
authentication If distros want to change this, they can patch this file, but this is what I want to ship upstream.
2013-04-25trivial: Remove some unused policyRichard Hughes1-17/+0
2012-06-06Add pkexec executable pk-clear-offline-update to be able to clear the ↵Richard Hughes1-0/+16
offline-update message
2012-06-03Remove the Transaction.Rollback method, nothing uses itRichard Hughes1-16/+0
2012-06-01Add an optional pkexec binary to create the system-update symlinkRichard Hughes1-0/+16
2012-04-26policy: clarify message for org.freedesktop.packagekit.package-installNils Philippsen1-1/+1
2012-02-20Imply the install trusted polkit auth when we get the remove authRichard Hughes1-0/+1
2012-02-20Imply the install trusted polkit auth when we get the untrusted authRichard Hughes1-0/+1
2011-12-23Fix typo in the repair system policySebastian Heinlein1-1/+1
2011-12-15Add a new repair-system policy and use it by the correspondingSebastian Heinlein1-0/+16
RepairSystem method
2011-06-13Autogenerate the .gitignore files using git.mkRichard Hughes2-8/+2
2010-11-12Correct the description of org.freedesktop.packagekit.upgrade-systemSveinung Kvilhaugsvik1-1/+1
Signed-off-by: Richard Hughes <richard@hughsie.com>
2010-11-03Use PolicyKit to restrict the UpgradeSystem method to administratorsRichard Hughes1-0/+16
2010-04-28Allow clients to request a relocatable root, but only with admin authorityRichard Hughes1-0/+17
2009-11-19Switch the signed install permission to require the root passwordRichard Hughes1-1/+1
Switch the signed package install required authentication to be auth_admin_keep by default, other distributions with different useability tradeoffs can override this with pkla files where required.
2009-08-20Add the device rebinding functionality required for the session to install ↵Richard Hughes1-0/+19
drivers
2009-08-08fix: do not care about policy file if not using polkitMounir Lamouri (volkmar)1-0/+2
2009-07-15Add some rationalle to the chosen PolicyKit policy decisionsRichard Hughes1-0/+63
2009-06-19Use generic icons for the PolicyKit policy actionsRichard Hughes1-11/+11
2009-06-16Port to polkit1, and remove a lot of the complexity from the old PolicyKit codeRichard Hughes3-14/+20
2009-01-16bugfix: remove the obsolete specific vendor_url for each metho and rely on ↵Richard Hughes1-11/+0
the packagekit homepage. Fixes novell#450349
2008-11-24feature: add a PolicyKit rule so other users can cancel tasks from other usersRichard Hughes1-2/+12
2008-08-04Fixed a typo in policy file (system"S")Daniel Nicoletti1-1/+1
2008-07-19rename some of the PolicyKit actions on advice of David ZeuthenRichard Hughes1-41/+20
2008-05-16add a system method SetProxy() for setting the proxy from the session securelyRichard Hughes1-0/+12
2008-04-23keep the old version of the wording to not upset the translatorsRichard Hughes1-2/+2
2008-04-22correct a couple of PolicyKit role descriptionsRichard Hughes1-3/+3
2008-04-22seporate the PolicyKit roles into trusted and untrused for local file installsRichard Hughes1-2/+13
2008-04-18fix a metric ton of translation issuesRichard Hughes1-13/+13
2008-04-17add in a PolicyKit action for accept-eulaRichard Hughes1-0/+11
2008-04-15don't allow org.freedesktop.packagekit.install-file to be retainedRichard Hughes1-1/+1
2008-04-14don't allow org.freedesktop.packagekit.install-signature to be retainedRichard Hughes1-1/+1
2008-04-07add the new PolicyKit method for InstallSignature, and correct the url's for ↵Richard Hughes1-8/+19
the others
2008-03-28rip PackageKit from the external API, but leave it in place internallyRichard Hughes1-12/+1
2008-03-19Merge branch 'master' of ↵Robin Norwood1-16/+0
git+ssh://rnorwood@git.packagekit.org/srv/git/PackageKit
2008-03-18remove the waf build system. It's just oo unstable and unusable and is very ↵Richard Hughes1-16/+0
bitrotted
2008-03-13Fix for rhbz#437332 - authentication requirements for update-package and ↵Robin Norwood1-1/+1
update-system are inconsistant.
2008-02-27make the PackageKit actions localised, and generally enable gettextRichard Hughes3-25/+30