2

PolicyKit shipped in Ubuntu 20.04 has version 0.105 from 2012. Currently Fedora 33 ships version 0.116. I know there was a change in configuration files starting from version 0.106 (they became written in Javascript) but...come on...Ubuntu is shipping an obsolete security piece of software. Anyone knows more news about why is this happenning? Is anyone aware of this? Thanks!

5

See LP#1086783.

Essentially, the new version's inclusion was initially blocked due to the dependency on mozjs, which was considered by Marc Deslauriers to be too insecure and unsupported to be supported by Canonical (as polkit is a core security component, it and its dependencies would have to be in main, to be officially supported by Canonical).

There's been some recent activity as mozjs is now in main (some versions, anyway) due to being a dependency of GNOME Shell. Robert Ancell was gathering opinions in this Ubuntu Discourse post in January 2020, so you can comment there, if you have use cases for the newer version.

  • Thanks a lot for this so well explained answer!! – Osqui Oct 30 '20 at 1:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.