From 98fd2cebdfc0c61485e38b2d04bc8dc763c65db2 Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Tue, 23 Jun 2020 21:49:49 +0000 Subject: Tue Jun 23 21:49:49 UTC 2020 ap/man-db-2.9.3-x86_64-1.txz: Upgraded. ap/mariadb-10.4.13-x86_64-3.txz: Rebuilt. Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger. ap/squashfs-tools-4.4-x86_64-2.txz: Rebuilt. Added lz4 support. Thanks to Heinz Wiesinger. d/ccache-3.7.10-x86_64-1.txz: Upgraded. d/parallel-20200622-noarch-1.txz: Upgraded. d/subversion-1.14.0-x86_64-2.txz: Rebuilt. Use the system lz4 library. Thanks to Heinz Wiesinger. l/imagemagick-7.0.10_21-x86_64-1.txz: Upgraded. l/libarchive-3.4.3-x86_64-2.txz: Rebuilt. Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger. l/lz4-1.9.2-x86_64-1.txz: Added. This is a new dependency for dovecot, libarchive, mariadb, rsync, squashfs-tools, subversion, and zstd. Thanks to Heinz Wiesinger. l/xxHash-0.7.3-x86_64-1.txz: Added. This is a new dependency for rsync. l/zstd-1.4.5-x86_64-2.txz: Rebuilt. Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger. n/dovecot-2.3.10.1-x86_64-2.txz: Rebuilt. Recompiled to pick up lz4 support. Thanks to Heinz Wiesinger. n/libmbim-1.24.0-x86_64-1.txz: Upgraded. n/nfs-utils-2.5.1-x86_64-1.txz: Upgraded. n/ntp-4.2.8p15-x86_64-1.txz: Upgraded. This release fixes one vulnerability: Associations that use CMAC authentication between ntpd from versions 4.2.8p11/4.3.97 and 4.2.8p14/4.3.100 will leak a small amount of memory for each packet. Eventually, ntpd will run out of memory and abort. (* Security fix *) n/rsync-3.2.1-x86_64-1.txz: Upgraded. Please note that this update requires the new packages xxHash and lz4. t/texlive-2020.200608-x86_64-1.txz: Upgraded. Thanks to Johannes Schoepfer. xap/blueman-2.1.3-x86_64-2.txz: Rebuilt. As a matter of policy and since the rule already exists in /usr/share/polkit-1/rules.d/, we should not install a rules file in /etc. Note that since the file was installed as a .new, upgrading the package will not remove it and it will need to be removed manually. It's harmless if it remains, though. Thanks to Robby Workman. xap/network-manager-applet-1.18.0-x86_64-1.txz: Upgraded. --- source/xap/blueman/30-blueman-netdev-allow-access.rules | 10 ---------- source/xap/blueman/blueman.SlackBuild | 11 +++++------ .../xap/blueman/blueman.allow.access.to.netdev.group.diff | 15 +++++++++++++++ source/xap/blueman/doinst.sh | 15 --------------- .../network-manager-applet.SlackBuild | 3 ++- 5 files changed, 22 insertions(+), 32 deletions(-) delete mode 100644 source/xap/blueman/30-blueman-netdev-allow-access.rules create mode 100644 source/xap/blueman/blueman.allow.access.to.netdev.group.diff (limited to 'source/xap') diff --git a/source/xap/blueman/30-blueman-netdev-allow-access.rules b/source/xap/blueman/30-blueman-netdev-allow-access.rules deleted file mode 100644 index 9ef313c75..000000000 --- a/source/xap/blueman/30-blueman-netdev-allow-access.rules +++ /dev/null @@ -1,10 +0,0 @@ -/* Allow users in netdev group to use blueman feature requiring root without authentication */ -polkit.addRule(function(action, subject) { - if ((action.id == "org.blueman.network.setup" || - action.id == "org.blueman.dhcp.client" || - action.id == "org.blueman.rfkill.setstate" || - action.id == "org.blueman.pppd.pppconnect") && - subject.isInGroup("netdev")) { - return polkit.Result.YES; - } -}); diff --git a/source/xap/blueman/blueman.SlackBuild b/source/xap/blueman/blueman.SlackBuild index 5507fdf74..67356edc6 100755 --- a/source/xap/blueman/blueman.SlackBuild +++ b/source/xap/blueman/blueman.SlackBuild @@ -3,7 +3,7 @@ # Slackware build script for blueman # Copyright 2009, 2015 Robby Workman, Tuscaloosa, Alabama, USA -# Copyright 2010, 2015, 2018 Patrick Volkerding, Sebeka, MN, USA +# Copyright 2010, 2015, 2018, 2020 Patrick Volkerding, Sebeka, MN, USA # All rights reserved. # # Redistribution and use of this script, with or without modification, is @@ -27,7 +27,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=blueman VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z* | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-1} +BUILD=${BUILD:-2} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then @@ -90,6 +90,9 @@ done # Don't autostart blueman applet in KDE; it has its own bluetooth application zcat $CWD/dont-autostart-applet-in-kde.diff.gz | patch -p1 --verbose || exit 1 +# Patch the blueman rules to allow members of the netdev group to make changes: +zcat $CWD/blueman.allow.access.to.netdev.group.diff.gz | patch -p1 --verbose || exit 1 + CFLAGS="$SLKCFLAGS" \ CXXFLAGS="$SLKCFLAGS" \ PYTHON=/usr/bin/python3 \ @@ -120,10 +123,6 @@ sed -i "s,#!/usr/bin/env python3,#!/usr/bin/python${PYTHON3VER},g" module/_bluem make $NUMJOBS || make || exit 1 make install DESTDIR=$PKG || exit 1 -# Install default rules allowing users in the netdev group to make changes: -mkdir -p $PKG/etc/polkit-1/rules.d -zcat $CWD/30-blueman-netdev-allow-access.rules.gz > $PKG/etc/polkit-1/rules.d/30-blueman-netdev-allow-access.rules.new - # Remove the AppIndicator.py plugin (we don't have libappindicator3 # nor will we be getting it in the foreseeable future) rm ${PKG}$PYTHON3LIB/blueman/plugins/applet/AppIndicator.py diff --git a/source/xap/blueman/blueman.allow.access.to.netdev.group.diff b/source/xap/blueman/blueman.allow.access.to.netdev.group.diff new file mode 100644 index 000000000..5198a9a16 --- /dev/null +++ b/source/xap/blueman/blueman.allow.access.to.netdev.group.diff @@ -0,0 +1,15 @@ +--- ./data/configs/blueman.rules.orig 2020-04-28 03:20:19.000000000 -0500 ++++ ./data/configs/blueman.rules 2020-05-09 13:52:27.000000000 -0500 +@@ -1,10 +1,10 @@ +-/* Allow users in wheel group to use blueman feature requiring root without authentication */ ++/* Allow users in netdev group to use blueman feature requiring root without authentication */ + polkit.addRule(function(action, subject) { + if ((action.id == "org.blueman.network.setup" || + action.id == "org.blueman.dhcp.client" || + action.id == "org.blueman.rfkill.setstate" || + action.id == "org.blueman.pppd.pppconnect") && +- subject.isInGroup("wheel")) { ++ subject.isInGroup("netdev")) { + return polkit.Result.YES; + } + }); diff --git a/source/xap/blueman/doinst.sh b/source/xap/blueman/doinst.sh index 16e49ab97..0254ea06d 100644 --- a/source/xap/blueman/doinst.sh +++ b/source/xap/blueman/doinst.sh @@ -1,17 +1,3 @@ -config() { - NEW="$1" - OLD="$(dirname $NEW)/$(basename $NEW .new)" - # If there's no config file by that name, mv it over: - if [ ! -r $OLD ]; then - mv $NEW $OLD - elif [ "$(cat $OLD | md5sum)" = "$(cat $NEW | md5sum)" ]; then - # toss the redundant copy - rm $NEW - fi - # Otherwise, we leave the .new copy for the admin to consider... -} -config etc/polkit-1/rules.d/30-blueman-netdev-allow-access.rules.new - if [ -x /usr/bin/update-desktop-database ]; then /usr/bin/update-desktop-database -q usr/share/applications >/dev/null 2>&1 fi @@ -27,4 +13,3 @@ if [ -e usr/share/glib-2.0/schemas ]; then /usr/bin/glib-compile-schemas usr/share/glib-2.0/schemas >/dev/null 2>&1 fi fi - diff --git a/source/xap/network-manager-applet/network-manager-applet.SlackBuild b/source/xap/network-manager-applet/network-manager-applet.SlackBuild index f7c289f2a..1e39ed78f 100755 --- a/source/xap/network-manager-applet/network-manager-applet.SlackBuild +++ b/source/xap/network-manager-applet/network-manager-applet.SlackBuild @@ -27,7 +27,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=network-manager-applet VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z* | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-2} +BUILD=${BUILD:-1} if [ -z "$ARCH" ]; then case "$( uname -m )" in @@ -96,6 +96,7 @@ meson setup \ --buildtype=release \ -Dteam=false \ -Dselinux=false \ + -Dappindicator=no \ .. || exit 1 "${NINJA:=ninja}" $NUMJOBS || exit 1 DESTDIR=$PKG $NINJA install || exit 1 -- cgit v1.2.3