Commit graph

96 commits

Author SHA1 Message Date
Alyssa Ross 97d4b225da
polkit: move test-only deps to nativeCheckInputs
(cherry picked from commit 1d9429faa0)
2023-03-20 16:29:56 +01:00
Alyssa Ross 52a479d024
polkit: re-disable introspection if no emulator
e.g. when cross compiling from Linux to FreeBSD.

Fixes: 1bd8727a4c ("various: enable gobject-introspection when cross-compiling")
2023-03-02 14:42:08 +00:00
Alyssa Ross c4dc6ca635
polkit: remove obsolete gobject-introspection build input
Since b2f9cd34e7 ("gobject-introspection: use wrapper.nix for the
native package too so we can propagate the dev output"),
gobject-introspection doesn't need to be included in buildInputs when
it's in nativeBuildInputs, as it's propagated from the setup hook.

Removing the build input fixes evaluation in buildPackages when
cross-compiling to platforms that gobject-introspection is unsupported
on, like ghcjs.

Tested building natively on x86_64-linux, in
pkgsCross.aarch64-multiplatform, and in pkgsCross.ghcjs.buildPackages.
2023-02-04 18:45:28 +00:00
Adam Joseph 42815b4a0c treewide: systemdSupport: use lib.meta.availableOn
Many packages have some kind of flag indicating whether or not to build with
systemd support.  Most of these default to `stdenv.isLinux`, but systemd does
not build on (and is marked `broken` for) `isStatic`.  Only a few packages have
the needed `&& !isStatic` in the default value for their parameter.

This commit moves the logic for the default value of these flags into
`systemd.meta.{platforms,badPlatforms}` and evaluates those conditions using
`lib.meta.availableOn`.

This provides three benefits:

1. The default values are set correctly (i.e. including `&& isStatic`)

2. The default values are set consistently

3. The way is paved for any future non-Linux systemd platforms (FreeBSD is
   reported to have experimental systemd support)
2023-01-22 00:27:19 -08:00
Guillaume Girol 33afbf39f6 treewide: switch to nativeCheckInputs
checkInputs used to be added to nativeBuildInputs. Now we have
nativeCheckInputs to do that instead. Doing this treewide change allows
to keep hashes identical to before the introduction of
nativeCheckInputs.
2023-01-21 12:00:00 +00:00
github-actions[bot] 9e23ec4f1c
Merge staging-next into staging 2022-12-15 00:03:02 +00:00
github-actions[bot] 58a71457f7
Merge master into staging-next 2022-12-15 00:02:26 +00:00
Ricardo M. Correia 897fa059a1 polkit: only fix mocklibc when doing tests
I got this error when setting doCheck=false:

chmod: cannot access 'subprojects/mocklibc-1.0/bin/mocklibc': No such file or directory

The chmod only happens when not building under pkgsMusl, but it doesn't
seem to be related to musl. Instead, it seems that mocklibc only gets
unpacked when -Dtests=true?

This would explain why under musl the same error would happen (since under
musl, tests are disabled).
2022-12-14 13:36:18 +00:00
Artturin 238a6053c4 stdenv: support opt-in __structuredAttrs
Co-authored-by: Robin Gloster <mail@glob.in>

stdenv: print message if structuredAttrs is enabled

stdenv: add _append

reduces the chance of a user doing it wrong

fix nix develop issue

output hooks don't work yet in nix develop though

making $outputs be the same on non-structuredAttrs and structuredAttrs
is too much trouble.

lets instead make a function that gets the output names

reading environment file '/nix/store/2x7m69a2sm2kh0r6v0q5s9z1dh41m4xf-xz-5.2.5-env-bin'
nix: src/nix/develop.cc:299: std::string Common::makeRcScript(nix::ref<nix::Store>, const BuildEnvironment&, const Path&): Assertion `outputs != buildEnvironment.vars.end()' failed.

use a function to get all output names instead of using $outputs

copy env functionality from https://github.com/NixOS/nixpkgs/pull/76732/commits
2022-12-08 06:13:19 +02:00
Jan Tojnar 7d04a75620
Merge pull request #197975 from jtojnar/polkit
polkit: 121 → 122
2022-12-03 23:44:36 +01:00
Jan Tojnar 84394f885d polkit: 121 → 122
https://gitlab.freedesktop.org/polkit/polkit/-/compare/121...122

Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
2022-10-26 23:31:24 +02:00
rnhmjoj 56aaee0ad9
polkit: mark as linux-only
While polkit is supposedly cross-platform, the test suite requires
a Linux-specific package (to test the D-Bus functionality). Since the
build fails when disabling the test, this effectively limits the
platform to just Linux.
2022-10-21 13:06:40 +02:00
Yureka f95d9a668e pkgsMusl.polkit: fix build 2022-08-14 11:40:02 +02:00
bootstrap-prime 56d0dd7fc4
polkit: use systemdMinimal to avoid dep cycle 2022-07-23 20:37:03 -04:00
Jan Tojnar 15cdfd5e31 polkit: 0.120 → 121
Adds supports for mozjs-91 and switches the default JS engine to Duktape.

https://gitlab.freedesktop.org/polkit/polkit/-/compare/0.120...121
2022-07-13 23:50:40 +02:00
Artturin 20642e2ab0 various: readd gobject-introspection to buildInputs
see eb829035c9
2022-07-12 15:18:44 +03:00
Artturin 1bd8727a4c various: enable gobject-introspection when cross-compiling
and fix cross in some
2022-07-08 03:56:47 +03:00
Nick Cao 479329611e
polkit: fix build with meson 0.61 2022-03-13 12:16:17 +08:00
Martin Weinelt 08a80b7b00
polkit: Patch unauthenticated file descriptor leak
https://gitlab.freedesktop.org/polkit/polkit/-/issues/170
https://www.openwall.com/lists/oss-security/2022/02/18/1

Fixes: CVE-2021-4115
2022-02-18 19:49:52 +01:00
Martin Weinelt bd3256cf4f polkit: fix local priviledge escalation in pkexec
> We discovered a Local Privilege Escalation (from any user to root) in
> polkit's pkexec, a SUID-root program that is installed by default on
> every major Linux distribution

https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt

Fixes: CVE-2021-4034
2022-01-25 11:55:05 -08:00
Joerie de Gram 649a7d75b4 polkit: disable gtkdoc when cross compiling 2022-01-16 23:57:01 +01:00
Jan Tojnar 3b916a6b78 polkit: fix hash 2021-11-01 14:53:13 +01:00
Jan Tojnar 595c25f105 polkit: Fix regression in paths in pkg-config file
resulting from discrepancy between Meson and Autotools build systems.
2021-11-01 14:51:57 +01:00
Jan Tojnar 527b98a125 polkit: port to Meson
Autotools build will be removed in the next release.

Examples are no longer installed.

Musl patch does not work.
2021-10-31 05:05:16 +01:00
Jan Tojnar 54417ca863 polkit: 0.119 → 0.120
https://lists.freedesktop.org/archives/polkit-devel/2021-October/000608.html
2021-10-31 03:45:42 +01:00
Jan Tojnar e6b0796129 polkit: format the expression
Use lib.optionals instead of lib.optional, move phases to the bottom, have one input per line.
2021-10-31 03:45:42 +01:00
Yureka d4c85edba9 polkit: fix musl build
Update patches and make them unconditional to prevent rot.
Also do not make systemd support dependent on musl.
2021-10-20 12:57:34 +02:00
Rahul Rameshbabu 5aecb4202d polkit: 0.118 -> 0.119
The 0.119 release of polkit integrates the following changes, so the
patches implemented to incorporate these changes are no longer needed.

    * 273357a395
    * https://gitlab.freedesktop.org/polkit/polkit/-/blob/0.119/src/polkit/polkitsystembusname.c#L438-440

Fixes: CVE-2021-3560 without a patch
2021-06-28 07:46:34 -07:00
Martin Weinelt 26ac1d5db9
polkit: Fix local privilege escalation vulnerability
Fixes a local privilege escalation using polkit_system_bus_name_get_creds_sync()

Fixes: CVE-2021-3560
2021-06-03 21:31:57 +02:00
Jan Tojnar 0420282780
treewide maintainers: add teams.{freedesktop,gnome} 2021-05-07 15:36:40 +02:00
Vladimír Čunát 9f054b5e1a
treewide: remove worldofpeace from meta.maintainers
(It was requested by them.)
I left one case due to fetching from their personal repo:
pkgs/desktops/pantheon/desktop/extra-elementary-contracts/default.nix
2021-05-07 15:36:40 +02:00
Ben Siraphob 66e44425c6 pkgs/development/libraries: stdenv.lib -> lib 2021-01-21 19:11:02 -08:00
Jonathan Ringer 9bb3fccb5b treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix
continuation of #109595

pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.

python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
2021-01-19 01:16:25 -08:00
Florian Klink 4f087a608e polkit: don't build with gobject-introspection when cross-compiling
gobject-introspection doesn't currently cross-compile (see
https://github.com/NixOS/nixpkgs/pull/88222), but polkit is somewhat
essential for many system components.

By disabling gobject-introspection when cross-compiling, we get it to
build.
2021-01-01 23:11:53 +01:00
Arnout Engelen 025af7c4f5
polkit: 0.116 -> 0.118 (#103998) 2020-11-17 11:15:30 +01:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Jan Tojnar 4cb7f43d3a
polkit: rename misleading flag
gobject-introspection has nothing to do with graphical systems or GNOME, it is needed for language bindings like Python.
2019-12-01 02:18:00 +01:00
Niklas Hambüchen 504199e48a polkit: Don't build elogind on non-Linux.
In #72057 I added support for elogind when systemd is not supported,
but it occurred to me that it probably doens't make sense to have
either of systemd or elogind on Darwin.
2019-11-20 23:23:46 +01:00
Jan Tojnar 70c0c48970
Merge branch 'staging-next' into staging 2019-11-01 02:58:40 +01:00
Niklas Hambüchen 62fbcea807
Merge pull request #72057 from nh2/polkit-musl-elogind
musl support for polkit, add elogind
2019-10-31 17:05:42 +01:00
Niklas Hambüchen 1ca49b80cb polkit: Disable systemd support on musl, it needs elogind there 2019-10-31 16:47:00 +01:00
Niklas Hambüchen 6b7f343121
Merge pull request #72301 from nh2/polkit-stable-patch-url
polkit: Fix unstable patch URL
2019-10-30 16:27:10 +01:00
Niklas Hambüchen 0e10ad926d polkit: Fix unstable patch URL.
Unmerged upstream merge requests can change when iterated on!
2019-10-30 14:53:09 +01:00
worldofpeace 81220cff1e polkit: add worldofpeace to maintainers 2019-10-28 20:41:36 -04:00
worldofpeace e570377f52 polkit: drop obsolete comments, whitespace 2019-10-05 07:10:11 -04:00
worldofpeace 670c000eb9 polkit: drop -Wno-deprecated-declarations
appears to be uneeded.
2019-10-05 07:09:36 -04:00
worldofpeace a61db21b36 polkit: propagate glib
polkit-gobject-1.pc has glib in Requires, and polkit-agent-1.pc
requires polkit-gobject-1.
2019-10-05 07:08:51 -04:00
worldofpeace 9d0e05233f polkit: Move D-Bus conf file to share/dbus-1/system.d
Since D-Bus 1.9.18 configuration files installed by third-party should
go in share/dbus-1/system.d. The old location is for sysadmin overrides.
2019-09-16 13:59:09 -04:00
volth f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Will Dietz eeff4eda14 polkit: 0.115 -> 0.116
* now uses mozjs60
* drop CVE patches included in release

* pname-ify
* use flag arrays and placeholder
2019-04-27 07:02:36 +02:00