219 lines
7.7 KiB
TOML
219 lines
7.7 KiB
TOML
[[FileDigestGroup]]
|
|
package = "rpmlint-integration-test"
|
|
type = "polkit"
|
|
note = "valid test whitelisting entry for the OBS integration test package"
|
|
bug = "bsc#1188704"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/00-rpmlint.rules"
|
|
hash = "74a2881794c1762fd07cc7a4c55633fe00aec552a788b2bee4dc362a27b438e8"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "rpmlint-integration-test"
|
|
type = "polkit"
|
|
note = "mismatching test whitelisting entry for the OBS integration test package"
|
|
bug = "bsc#1188704"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/00-mismatch.rules"
|
|
hash = "4a5e8e9ca514c73f1dbee55e88c4d75a235473c1d5cef4751d84016833961fdf"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "polkit-default-privs"
|
|
type = "polkit"
|
|
note = "rules dynamically generated by our own polkit profile tooling"
|
|
bug = "bsc#1125314"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/etc/polkit-1/rules.d/90-default-privs.rules"
|
|
algorithm = "skip"
|
|
hash = ""
|
|
|
|
[[FileDigestGroup]]
|
|
package = "polkit"
|
|
type = "polkit"
|
|
note = "default rule shipped by polkit, allows uid 0 to do everything"
|
|
bugs = ["bsc#1125314", "bsc#1215652"]
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/50-default.rules"
|
|
hash = "3b5781af8a450c5184c7a2d5408f4af7d3c65f23548ee0962ad0eabb70072c32"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "sudo-policy-sudo-auth-self"
|
|
type = "polkit"
|
|
note = "self auth as admin"
|
|
bug = "bsc#1215652"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/51-sudo.rules"
|
|
hash = "f771f054dff80233218bb658419bed786dfc30ca35ea0d3cd1ed4855be8ae4fd"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "sudo-policy-wheel-auth-self"
|
|
type = "polkit"
|
|
note = "self auth as admin"
|
|
bug = "bsc#1215652"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/51-wheel.rules"
|
|
hash = "6fa951c8cb81606a10bd82e6ef8e260e98cc84e68e9a49310a8a670889e31b4d"
|
|
|
|
|
|
[[FileDigestGroup]]
|
|
package = "systemd"
|
|
type = "polkit"
|
|
note = "allows systemd-networkd to set hostname and timezone from DHCP information"
|
|
bug = "bsc#1125438"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/60-systemd-networkd.rules"
|
|
hash = "bf10f0b71878f90516b89d205a7fb2f8363cec6614ec717da88c2acf49c276a5"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "systemd-network"
|
|
type = "polkit"
|
|
note = "allows systemd-networkd to set hostname and timezone from DHCP information"
|
|
bug = "bsc#1125438"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/60-systemd-networkd.rules"
|
|
hash = "bf10f0b71878f90516b89d205a7fb2f8363cec6614ec717da88c2acf49c276a5"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "systemd-network"
|
|
type = "polkit"
|
|
note = "minor non-functional incremental change"
|
|
bug = "bsc#1185469"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/60-systemd-networkd.rules"
|
|
hash = "f199e386a9297858331b00df07ed0b0ee5fcf4bea67f6c0bccc8a92b7e310bbd"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "flatpak"
|
|
type = "polkit"
|
|
note = "allows the wheel group to operate in a passwordless fashion. this is an exception at the moment since normally we don't follow the special meaning of 'wheel'"
|
|
bug = "bsc#984817"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/60-org.freedesktop.Flatpak.rules"
|
|
hash = "a439399ec33c8909e935e68d2daf3a76dff411d94ade3a8e15243a7da68a7005"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "flatpak"
|
|
type = "polkit"
|
|
note = "flatpak 1.6 changes the rule file to add override-parental-controls. Requires AUTH_ADMIN"
|
|
bug = "bsc#1161091"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/60-org.freedesktop.Flatpak.rules"
|
|
hash = "89e33e299ddf829a6302e855c005931a1f703c64696b86c423fb2851e225fbaf"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "libvirt-daemon-common"
|
|
type = "polkit"
|
|
note = "allows members of the group libvirt to manage libvirt without password"
|
|
bugs = ["bsc#1161091", "bsc#1208876"]
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/50-libvirt.rules"
|
|
hash = "18ecc523dec42f91c679143043c9b28ef82eac68d1729a21d371c18eb93f2a18"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "gnome-initial-setup"
|
|
type = "polkit"
|
|
note = "Allows gnome-initial-session to configure the system after input is collected from the user"
|
|
bug = "bsc#1125432"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/20-gnome-initial-setup.rules"
|
|
hash = "6daefe0a835dc1b34513302f393e98089c137602823f41fd0c3dd984c40902d8"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "gnome-initial-setup"
|
|
type = "polkit"
|
|
note = "Follow-up whitelisting, upstream added org.fedoraproject.thirdparty.* to the rules"
|
|
bug = "bsc#1192542"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/20-gnome-initial-setup.rules"
|
|
hash = "e8d930c2f4ef56727ab4e64ebe21c98e3ab7aaf3a4079d15ddc6acf324a5a412"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "libvirt-dbus"
|
|
type = "polkit"
|
|
note = "Allows the libvirt-dbus daemon to run unprivileged but still control libvirt"
|
|
bug = "bsc#1125432"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/libvirt-dbus.rules"
|
|
hash = "1ae3b094d372d0108f34b58f577d133fdf0c9527bd5b72edf1d22a13daa74f6e"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "brltty"
|
|
type = "polkit"
|
|
note = "Allows members of 'brltty' to implicitly get polkit authorization"
|
|
bug = "bsc#1180593"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/org.a11y.brlapi.rules"
|
|
hash = "f8f1dc555dfc72fd95263e107cd87f44b3d1ce899dbdc0f11b7dfbccaa92a434"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "geoclue2"
|
|
type = "polkit"
|
|
note = "allows the srvGeoClue user to invoke ModemManager location methods"
|
|
bug = "bsc#1199767"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/50-org.freedesktop.GeoClue2.rules"
|
|
hash = "685e010654c36f5fbb97fe78a1b7c681ea56df87395bcad2630264267ab884d1"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "gnome-branding-Aeon"
|
|
type = "polkit"
|
|
note = "gives members of the wheel group admin privileges"
|
|
bug = "bsc#1215276"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/49-aeon.rules"
|
|
hash = "d26cd444235c36d2270a4950b24e2aefbb772d5654232338289a4f2775aebb5d"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "plasma-branding-Kalpa"
|
|
type = "polkit"
|
|
note = "gives members of the wheel group admin privileges"
|
|
bug = "bsc#1217707"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/49-kalpa.rules"
|
|
hash = "d26cd444235c36d2270a4950b24e2aefbb772d5654232338289a4f2775aebb5d"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "fudo"
|
|
type = "polkit"
|
|
note = "allows members of a configurable group to pass the machinectl authentication"
|
|
bug = "bsc#1215948"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/30-fudo-machinectl-shell.rules"
|
|
hash = "c1be55f0eba968d13b88d5d8894917241a508118cdc782cda5855da835f74851"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "fudo-policy-selfauth-wheel"
|
|
type = "polkit"
|
|
note = "allows members of the wheel group to authenticate machinectl by entering their own password"
|
|
bug = "bsc#1215948"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/31-fudo-machinectl-shell-selfauth-wheel.rules"
|
|
hash = "fe0b6c4f13620426740496c941bef82158d016b00c782f0ada8fa02f93ef9cff"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "fudo-policy-noauth-wheel"
|
|
type = "polkit"
|
|
note = "allows members of the wheel group to authenticate machinectl without entering a password"
|
|
bug = "bsc#1215948"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/31-fudo-machinectl-shell-noauth-wheel.rules"
|
|
hash = "14da7473389b5567b12a324ac291bd42cdd538186530152ce48d6c0f9877c718"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "gamemoded"
|
|
type = "polkit"
|
|
note = "allows members of the gamemode group to pkexec some helper programs"
|
|
bug = "bsc#1217915"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/40-gamemode.rules"
|
|
hash = "9e12a279a21d11c92a41ccd818edcb9b7c89a162984a6e1ca5609b9bbcbbf989"
|
|
|
|
[[FileDigestGroup]]
|
|
package = "gnome-remote-desktop"
|
|
note = "allows the g-r-d system user to enable/disable itself"
|
|
bug = "bsc#1222159"
|
|
type = "polkit"
|
|
[[FileDigestGroup.digests]]
|
|
path = "/usr/share/polkit-1/rules.d/20-gnome-remote-desktop.rules"
|
|
digester = "default"
|
|
hash = "559f983aa50bbea8f4927fa96dc06a4e0f781617495339155b2bd4d077ec4607"
|