Hello community,
here is the log from the commit of package flatpak for openSUSE:Leap:15.2
checked in at 2020-05-26 18:32:31
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2/flatpak (Old)
and /work/SRC/openSUSE:Leap:15.2/.flatpak.new.2738 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "flatpak"
Tue May 26 18:32:31 2020 rev:42 rq:808212 version:1.6.3
Changes:
--------
--- /work/SRC/openSUSE:Leap:15.2/flatpak/flatpak.changes 2020-04-14
14:19:49.417222653 +0200
+++ /work/SRC/openSUSE:Leap:15.2/.flatpak.new.2738/flatpak.changes
2020-05-26 18:32:45.853626102 +0200
@@ -1,0 +2,19 @@
+Mon May 18 08:53:10 UTC 2020 - Yifan Jiang <yfji...@suse.com>
+
+- When SLE uses GNOME desktop environment, GNOME Software is
+ automatically started to provide key update features. During the
+ startup, it setups flatpak repository so that related features
+ can function properly. In a system environment of no flatpak
+ repository has ever been setup before, this triggers
+ "org.freedesktop.Flatpak.modify-repo" polkit action.
+
+ Therefore in systems which use a restrictive security policy
+ (eg. SLES) for the aforementioned policy action, a polkit
+ authentication dialog will pop up without any user interaction
+ for the first time login. This is not user friendly.
+
+ This submission creates /var/lib/flatpak/repo at package
+ installation to avoid such a confusing authentication pop-up, at
+ nearly 0 cost of security compromise (bsc#1169619, bsc#1170416).
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ flatpak.spec ++++++
--- /var/tmp/diff_new_pack.khR2iW/_old 2020-05-26 18:32:46.281627036 +0200
+++ /var/tmp/diff_new_pack.khR2iW/_new 2020-05-26 18:32:46.285627046 +0200
@@ -179,6 +179,7 @@
%endif
mkdir -p %{buildroot}%{_sysconfdir}/flatpak/remotes.d
+mkdir -p %{buildroot}%{_localstatedir}/lib/flatpak/repo
%find_lang %{name}
@@ -239,7 +240,8 @@
%{_sbindir}/rcflatpak-system-helper
%{_userunitdir}/flatpak-session-helper.service
%{_userunitdir}/flatpak-portal.service
-%ghost %dir %{_localstatedir}/lib/flatpak
+%dir %{_localstatedir}/lib/flatpak
+%dir %{_localstatedir}/lib/flatpak/repo
%if %{support_environment_generators}
%dir %{_libexecdir}/systemd/user-environment-generators
%{_libexecdir}/systemd/user-environment-generators/60-flatpak
