Changeset b317cda

Timestamp:

08/21/2023 02:40:05 AM (9 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

12.0, 12.1, ken/TL2024, ken/tuningfonts, lazarus, plabs/newcss, python3.11, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18

Children:

9414365d

Parents:

2e397ac8

Message:

polkit: Expand and fix the command explanation for js102 sed

and demote duktape to recommended (but still keep it required internally
for jhalfs).

File:

• postlfs/security/polkit.xml (modified) (3 diffs)

postlfs/security/polkit.xml

@@ -90 +90 @@
     <bridgehead renderas="sect4">Required</bridgehead>
     <para role="required">
-      <xref linkend="glib2"/> and
-      <xref linkend="duktape"/>
+      <xref linkend="glib2"/>
     </para>
 
     <bridgehead renderas="sect4">Recommended</bridgehead>
     <para role="recommended">
+      <!-- For jhalfs just make it required to avoid over-complexity. -->
+      <xref role="required" linkend="duktape"/>,
       <xref linkend="gobject-introspection"/>,
       <xref linkend="libxslt"/>,<phrase revision="systemd"> and</phrase>
@@ -186 +187 @@
     </para>
 
-<screen><userinput remap="nodep">sed -e 's/JS_Init/JS::DisableJitBackend(); &amp;/' \
+<screen><userinput remap="nodump">sed -e 's/JS_Init/JS::DisableJitBackend(); &amp;/' \
     -i src/polkitbackend/polkitbackendjsauthority.cpp</userinput></screen>
 
@@ -250 +251 @@
 
     <para>
-      <parameter>sed -e 's/JS_Init/JS::DisableJitBackend(); &amp;/' ...
-      </parameter>: The JIT compiling of JS102 needs W+X mapping which
-      is dangerous and is not permitted by current
-      <application>systemd</application>.
+      <command>sed -e 's/JS_Init/JS::DisableJitBackend(); &amp;/' ...
+      </command>: The JIT compiling of JS102 needs W+X mapping which
+      is dangerous and is not permitted by the
+      <application>systemd</application> unit file shipped within the polkit
+      package.  This command is not strictly needed on systems based on
+      sysvinit but it still improves security.  It has no effect if building
+      polkit with the recommended <xref linkend='duktape'/> Javascript
+      engine.
     </para>