import gdm-40.0-3.el8

SOURCES/0001-data-Disable-network-configuration-on-login-screen.patch

@@ -0,0 +1,49 @@
+From b840bedd919eb321f2cefd8b9620af5bc28a28b6 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Florian=20M=C3=BCllner?= <fmuellner@gnome.org>
+Date: Tue, 8 Jun 2021 20:45:00 +0200
+Subject: [PATCH] data: Disable network configuration on login screen
+
+---
+ data/meson.build            | 10 ++++++++++
+ data/org.gnome.gdm.rules.in |  8 ++++++++
+ 2 files changed, 18 insertions(+)
+ create mode 100644 data/org.gnome.gdm.rules.in
+
+diff --git a/data/meson.build b/data/meson.build
+index 7c5222ea..20d39a36 100644
+--- a/data/meson.build
++++ b/data/meson.build
+@@ -157,6 +157,16 @@ gdm_rules = configure_file(
+   install_dir: udev_dir,
+ )
+ 
++# Polkit rules
++polkit_rules = configure_file(
++  input: 'org.gnome.gdm.rules.in',
++  output: '@BASENAME@',
++  configuration: {
++    'GDM_USERNAME': get_option('user'),
++  },
++  install_dir: get_option('datadir') / 'polkit-1' / 'rules.d',
++)
++
+ # DBus service files
+ service_config = configuration_data()
+ service_config.set('sbindir', gdm_prefix / get_option('sbindir'))
+diff --git a/data/org.gnome.gdm.rules.in b/data/org.gnome.gdm.rules.in
+new file mode 100644
+index 00000000..09544f11
+--- /dev/null
++++ b/data/org.gnome.gdm.rules.in
+@@ -0,0 +1,8 @@
++polkit.addRule(function(action, subject) {
++    if (action.id == "org.freedesktop.NetworkManager.network-control" &&
++        subject.user == "@GDM_USERNAME@") {
++            return polkit.Result.NO;
++    }
++
++    return polkit.Result.NOT_HANDLED;
++});
+-- 
+2.31.1
+

SPECS/gdm.spec

@@ -12,7 +12,7 @@
 Name: gdm
 Epoch: 1
 Version: 40.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: The GNOME Display Manager
 
 License: GPLv2+
@@ -47,6 +47,8 @@ Patch99920003: 0003-daemon-save-os-release-in-accountsservice.patch
 Patch99920004: 0004-daemon-handle-upgrades-from-RHEL-7.patch
 Patch99920005: 0005-daemon-fix-wayland-detection-when-deciding-to-bypass.patch
 
+Patch99920006: 0001-data-Disable-network-configuration-on-login-screen.patch
+
 Patch99930001: 0001-data-add-system-dconf-databases-to-gdm-profile.patch
 
 Patch99940001: 0001-data-disable-wayland-on-certain-hardware.patch
@@ -325,6 +327,7 @@ fi
 %{_datadir}/gdm/locale.alias
 %{_datadir}/gdm/gdb-cmd
 %{_datadir}/gnome-session/sessions/gnome-login.session
+%{_datadir}/polkit-1/rules.d/org.gnome.gdm.rules
 %{_libdir}/girepository-1.0/Gdm-1.0.typelib
 %{_libdir}/security/pam_gdm.so
 %{_libdir}/libgdm*.so*
@@ -354,6 +357,10 @@ fi
 %{_libdir}/pkgconfig/gdm-pam-extensions.pc
 
 %changelog
+* Tue Jun 08 2021 Florian Müllner <fmuellner@redhat.com> - 40.0-3
+- Disable network items on login screen
+  Resolves: #1935261
+
 * Wed May 19 2021 Ray Strode <rstrode@redhat.com> - 40.0-2
 - Fix workaround for systemd bug that's breaking X11 fallback
   Resolves: #1962049