-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 02 Aug 2023 12:49:21 +0100 Source: policykit-1 Architecture: source Version: 123-1 Distribution: unstable Urgency: medium Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 855083 Changes: policykit-1 (123-1) unstable; urgency=medium . * New upstream release * Update directory permissions to match upstream hardening - /etc/polkit-1/rules.d: was 0700 polkitd:root, now 0750 root:polkitd so polkitd cannot modify it - /var/lib/polkit-1: same as /etc/polkit-1/rules.d - /usr/share/polkit-1/rules.d: was 0700 polkitd:root, now 0755 root:root since everything in that directory comes from a package anyway * d/polkitd.postinst: Clean up /var/lib/polkit-1/.cache on upgrades, now that polkitd will not re-create it (Closes: #855083) * d/tests: Depend on polkitd instead of policykit-1 * d/tests: Rename cli test to polkitd * d/tests: Add a test for pkexec * d/p/debian/Don-t-use-PrivateNetwork-yes-for-the-systemd-unit.patch: Disable PrivateNetwork=yes for now. This would be good to have, but it causes autopkgtest failures under lxc. (Mitigates: #1042880) * d/control: Stop recommending polkitd-pkla in policykit-1. This is a step towards removing the policykit-1 transitional package entirely: it was included in Debian 12 and Ubuntu 22.04, so it has served its purpose and should be removed soon. Checksums-Sha1: 3e15afd5fa13e132e88715b36d441be2b4bb8e96 3480 policykit-1_123-1.dsc ed3e979be6e5224a470e12b28d0a0b67127d39fd 377045 policykit-1_123.orig-polkit-pkla-compat.tar.bz2 5d74e2bad4ae18ad75a3eb7246e73d3d0bb777db 707480 policykit-1_123.orig.tar.bz2 9f30dc9b95175c295898e8c4be314fb6b6b61f78 46228 policykit-1_123-1.debian.tar.xz 95cbddf9b118a489561ffe81c8bb671cf9f0f683 8885 policykit-1_123-1_source.buildinfo Checksums-Sha256: 1da4c8fff5b87261149bd269a9374aca881170eb5e6768f920690ff3a7013262 3480 policykit-1_123-1.dsc 28ec66928327031c9a4155a1c901fdf223d2fb7030c58fc584a96e43af9d2783 377045 policykit-1_123.orig-polkit-pkla-compat.tar.bz2 72d9119b0aa35da871fd0660601d812c7a3d6af7e4e53e237840b71bb43d0c63 707480 policykit-1_123.orig.tar.bz2 0290df89879cf5e8363a17001556f0597f5b5f6736251e9dd2dea23c8af1c086 46228 policykit-1_123-1.debian.tar.xz bc679e07fd127dffb8c92b59468f9876a962e14395d3c4e22689ef6bde82fad8 8885 policykit-1_123-1_source.buildinfo Files: 4798b2ba606aed30b2d393c79be7db50 3480 admin optional policykit-1_123-1.dsc 12a19cbed789ab8fbf60441b369e9cca 377045 admin optional policykit-1_123.orig-polkit-pkla-compat.tar.bz2 5e8c9fe7464776c73aa7116335d701a2 707480 admin optional policykit-1_123.orig.tar.bz2 233414123bbb568a65912b7f28a4c87b 46228 admin optional policykit-1_123-1.debian.tar.xz 51dcb1345ac17240e40e810da53f72aa 8885 admin optional policykit-1_123-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAmTKcVMACgkQ4FrhR4+B TE9xTQ/+I7q0JbPYRH1vsR1wliDGaRe5quWTNB+R1dR1/ZYxNobyoX4ybJKCwPOJ G8+im8tPXorAuUzG/KLD5IsxzOqqWEom7aw9tMljOktNhbTejGG53G4kxvkrdAs5 sOlv0uITaTNNPKS2+HLahzrbNWeySMPOQJY0vN0Qziahz2iRHg5oPM5YJgH9P9TO 95amADeCw2feGFuKgUXHnvfX2iRZDbTE7RBCy4/qV+qMPpNY377d0Wsp0ua+/i/H ceTto46cSIBW4FaAlSnkMRXIq/BA/HoXJRbGwG0VuPixrvc/68Wj/vPne8X1Bysy s0Vt/cBy0/7dxnXDsvW+y8fPeZgCDpVUjb8SaaZBUCTiTido3IUi+B3GAOWKK7lQ 4F5X8afDIOmJZSOVjwFaeYCUejZcUDLLHsV/AKNhgQDY3pxXO6UCArbAfE07xGOz 9pf097HvmQwADGtsuLKFKlwIWDhFKgT1NWbPEmJlgQzg93aZMe2LcOQ0M4GJHyv8 wleKr0AJJwO6tMor6SQsnJ3Jmj7NSPzpIZkipyG8qS1oB+ilYXBdYy2e7mkQe7eu L6jMj3nXbVURKYAc9XUmrkg16o50JYiW+jJv9jlaeK2unvptqD+IOLgfNtiamHz/ Cm9NW4WpwxuP/yvj0dNuJTPzzrZNIjkWoFNE+iMtGq5LgedH3zM= =VkH1 -----END PGP SIGNATURE-----
