| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: polkit | Distribution: openSUSE Tumbleweed |
| Version: 127 | Vendor: openSUSE |
| Release: 5.1 | Build date: Fri Mar 27 15:19:04 2026 |
| Group: System/Libraries | Build host: reproducible |
| Size: 456148 | Source RPM: polkit-127-5.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/polkit-org/polkit | |
| Summary: PolicyKit Authorization Framework | |
PolicyKit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
LGPL-2.1-or-later
* Fri Mar 27 2026 Marcus Meissner <meissner@suse.com>
- avoid reading endless amounts of memory (CVE-2026-4897 bsc#1260859)
0001-CVE-2026-4897-getline-string-overflow.patch
* Tue Jan 20 2026 Marcus Meissner <meissner@suse.com>
- change to /var/lib/polkit-1 being tmpfiles created (jsc#PED-14794)
* Thu Jan 08 2026 Marcus Meissner <meissner@suse.com>
- Updated to version 127:
- socket-activated polkit-agent-helper can now run without SETUID (Luca Boccassi)
- user id (UID) now accessible to JavaScript rules via subject.uid (Rosentti, Jan Rybar)
- INI config file support for polkitd with configurable auth expiration timer (Luca Boccassi)
- auth_keep: skip re-authentication if new process shares same UID/parent/cgroup/tty (Luca Boccassi)
- CheckAuthorization now returns 'polkit.result' in the details dict (Luca Boccassi)
- pkexec: set $SUDO_UID/$SUDO_GID for compatibility with sudo (Lennart Poettering)
- pkexec: use realpath when comparing org.freedesktop.policykit.exec.path (Walter Doekes)
- memory limits added to systemd unit to mitigate memory leaks (Alexander Meshcheryakov)
- new translations: Bulgarian (twlvnn kraftwerk), Occitan (Mejans)
- CVE-2025-7519: Fixed that a XML policy file with a large number of
nested elements may lead to crash (bsc#1246472)
- systemd-socket-activation.patch: upstream, removed
- auth_keep.patch: upstream, removed
- sudo_uid.patch: upstream, removed
- added polkitd.conf.5 manpage, added polkitd.conf
- removed 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch: upstream
* Mon Oct 13 2025 Thorsten Kukuk <kukuk@suse.com>
- Backport for NoNewPrivs support:
- systemd-socket-activation.patch: start agent via socket, no setuid
- Backport of patches for better run0 usability:
- auth_keep.patch: do not ask for reauth if new process shares same UID/parent/cgroup/tty
- sudo_uid.patch: also set $SUDO_UID/$SUDO_GID for compat with sudo
* Tue Sep 16 2025 Andreas Schwab <schwab@suse.de>
- Skip tests in qemu emulation
* Mon Sep 15 2025 Marcus Meissner <meissner@suse.com>
- change /etc/polkit-1/rules.d group ownership back to polkitd
(bsc#1249581)
* Fri Sep 12 2025 Dominique Leuenberger <dimstar@opensuse.org>
- Fix user generation: move sysusers_generate_pre to install
section and use the - by then installed - polkit.conf from the
sources.
* Tue Jul 15 2025 Marcus Meissner <meissner@suse.com>
- Updated to version 126:
+ Highlights:
- many code fixes detected either by CI or the author himself (Frantisek Sumsal)
- shellcheck and dependabot integration (Jan Macku)
- search for rules in /usr/local/share rather than /usr/local/lib (Luca Boccassi)
- Implement LogControl1 protocol for dynamic log level changes (Luca Boccassi)
- read actions also from /etc/, /run/ and /usr/local/share/ (Luca Boccassi)
- mozjs dropped in favor of duktape (Xi Ruoyao)
- many other fixes in build system and polkit code (Many thanks to all the authors.)
- Updated to version 125:
+ Highlights:
- introduction of CodeQL and a new integration test suite (Frantisek Sumsal)
- dropped mocklibc (Frantisek Sumsal)
- syslog-style log-levels introduction (Jan Rybar)
- LogControl integration (Luca Boccassi)
- pkexec: "No session for cookie" finally fixed (huxiaodong)
- resources optimizations: only instances affected by sessions-change recalculate authorizations (Jan Rybar, thanks to Michal Sekletar and Milan Crha)
- meson tweaks (Alyssa Ross, Luca Boccassi, Michael Biebl, Michael Olbrich)
- build warnings cleanup (peelz)
- Packit service configuration for the new upstream platform (Vincent Mihalkovic)
- systemd-tmpfiles.d integration (Vincent Mihalkovic)
- other fixes and changes (Gleb Popov, heather7283, Tianyu Chen, Tobias Stoeckmann)
- internationalization: Slovenian (filmsi), Hindi (Scrambled777)
- Updated to version 124:
+ Highlights:
- PIDFDs are used if available to track processes
- pidfd parameter available for CheckAuthorization()
- systemd-sysuser enabled for polkit
- polkit-actions-in-etc.patch: done upstream in commit 9958c259f82b066f613d171d2934c1bd829e31a4
- polkit-fix-implicit.patch: not needed anymore
- revert upstream change to have /etc/polkit-1/rules.d as tempdir
* Wed Aug 14 2024 Dominique Leuenberger <dimstar@opensuse.org>
- BuildRequire gettext-devel instead of gettext: Allows OBS to
shortcut throught gettext-runtime-mini.
* Fri Jul 12 2024 Martin Jambor <mjambor@suse.com>
- Add -Wno-error=implicit-function-declaration to %optflags to
work-around an issue in mocklibc (which has been meanwhile removed
by upstream) with exactly this kind of issue.
* Tue Jun 04 2024 Marcus Meissner <meissner@suse.com>
- polkit-fix-implicit.patch: fixed implicit to make it build with gcc14.
* Fri Dec 08 2023 Tobias Klausmann <tobias.klausmann@freenet.de>
- Add 'dbus-service' as Requires instead of /usr/bin/dbus-daemon
This allow to use other dbus implementations such as dbus-broker with this
package again. (bsc#1217863)
* Fri Sep 29 2023 Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 123:
+ Highlights:
- better safety with deeper restriction of the configuration
files
- better safety with restricting the daemon's owner under
systemd
- better safety with the systemd unit sandboxing
- less thread races during upload of the configuration
- Changes from version 122:
+ Highlights:
- new Georgian translation
- port to mozjs-102
- daemon-less build (support for e.g. flatpak deps)
- re-enable of (API) documentation build
- See more detailed changes in the included NEWS.md file.
- Change URL and Source to new home, and drop polkit.keyring and
tar.gz.sign tarball signature, no longer available.
- Drop polkit-fix-pam-prefix.patch: Fixed upstream.
- Add /usr/bin/dbus-daemon BuildRequires, needed for tests. Replace
the dbus-1 with /usr/bin/dbus-daemon Requires.
* Tue Sep 19 2023 Ludwig Nussel <lnussel@suse.com>
- change /usr/share/polkit-1/rules.d to 555,root:root. /usr content
isn't secret anyway so this avoids non-root owned files in /usr
(boo#1215482)
- update 50-default.rules to allow adding more admin rules
(jsc#PED-260, drop polkit-no-wheel-group.patch)
* Wed Mar 29 2023 Johannes Segitz <jsegitz@suse.com>
- Change permissions for rules folders (bsc#1209282)
/etc/polkit-1 /etc/polkit-1/actions /etc/polkit-1/rules.d /usr/bin/pkaction /usr/bin/pkcheck /usr/bin/pkttyagent /usr/lib/pam.d/polkit-1 /usr/lib/systemd/system/polkit-agent-helper.socket /usr/lib/systemd/system/polkit-agent-helper@.service /usr/lib/systemd/system/polkit.service /usr/lib/sysusers.d/polkit.conf /usr/lib/tmpfiles.d/polkit-tmpfiles.conf /usr/libexec/polkit-1 /usr/libexec/polkit-1/polkit-agent-helper-1 /usr/libexec/polkit-1/polkitd /usr/share/dbus-1 /usr/share/dbus-1/system-services /usr/share/dbus-1/system-services/org.freedesktop.PolicyKit1.service /usr/share/dbus-1/system.d /usr/share/dbus-1/system.d/org.freedesktop.PolicyKit1.conf /usr/share/doc/packages/polkit /usr/share/doc/packages/polkit/NEWS.md /usr/share/doc/packages/polkit/README.md /usr/share/licenses/polkit /usr/share/licenses/polkit/COPYING /usr/share/locale/bg/LC_MESSAGES/polkit-1.mo /usr/share/locale/cs/LC_MESSAGES/polkit-1.mo /usr/share/locale/da/LC_MESSAGES/polkit-1.mo /usr/share/locale/de/LC_MESSAGES/polkit-1.mo /usr/share/locale/hi/LC_MESSAGES/polkit-1.mo /usr/share/locale/hr/LC_MESSAGES/polkit-1.mo /usr/share/locale/hu/LC_MESSAGES/polkit-1.mo /usr/share/locale/id/LC_MESSAGES/polkit-1.mo /usr/share/locale/it/LC_MESSAGES/polkit-1.mo /usr/share/locale/ka/LC_MESSAGES/polkit-1.mo /usr/share/locale/nl/LC_MESSAGES/polkit-1.mo /usr/share/locale/nn/LC_MESSAGES/polkit-1.mo /usr/share/locale/oc/LC_MESSAGES/polkit-1.mo /usr/share/locale/pl/LC_MESSAGES/polkit-1.mo /usr/share/locale/pt/LC_MESSAGES/polkit-1.mo /usr/share/locale/pt_BR/LC_MESSAGES/polkit-1.mo /usr/share/locale/ro/LC_MESSAGES/polkit-1.mo /usr/share/locale/ru/LC_MESSAGES/polkit-1.mo /usr/share/locale/sk/LC_MESSAGES/polkit-1.mo /usr/share/locale/sl/LC_MESSAGES/polkit-1.mo /usr/share/locale/sv/LC_MESSAGES/polkit-1.mo /usr/share/locale/tr/LC_MESSAGES/polkit-1.mo /usr/share/locale/uk/LC_MESSAGES/polkit-1.mo /usr/share/locale/zh_CN/LC_MESSAGES/polkit-1.mo /usr/share/locale/zh_TW/LC_MESSAGES/polkit-1.mo /usr/share/man/man1/pkaction.1.gz /usr/share/man/man1/pkcheck.1.gz /usr/share/man/man1/pkttyagent.1.gz /usr/share/man/man5/polkitd.conf.5.gz /usr/share/man/man8/polkit.8.gz /usr/share/man/man8/polkitd.8.gz /usr/share/polkit-1 /usr/share/polkit-1/actions /usr/share/polkit-1/actions/org.freedesktop.policykit.policy /usr/share/polkit-1/policyconfig-1.dtd /usr/share/polkit-1/polkitd.conf /usr/share/polkit-1/rules.d /usr/share/polkit-1/rules.d/50-default.rules
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Jul 24 15:27:28 2026