import polkit-0.115-15.el8

SOURCES/polkit-0.115-tty-flags-restore-if-changed.patch

@@ -0,0 +1,77 @@
+diff -up ./src/polkitagent/polkitagenttextlistener.c.ori ./src/polkitagent/polkitagenttextlistener.c
+--- ./src/polkitagent/polkitagenttextlistener.c.ori	2018-05-31 13:52:23.000000000 +0200
++++ ./src/polkitagent/polkitagenttextlistener.c	2022-10-21 17:21:11.227665209 +0200
+@@ -121,6 +121,12 @@ polkit_agent_text_listener_class_init (P
+   listener_class = POLKIT_AGENT_LISTENER_CLASS (klass);
+   listener_class->initiate_authentication        = polkit_agent_text_listener_initiate_authentication;
+   listener_class->initiate_authentication_finish = polkit_agent_text_listener_initiate_authentication_finish;
++
++  g_signal_new("tty_attrs_changed",
++               G_TYPE_FROM_CLASS(gobject_class),
++               G_SIGNAL_RUN_LAST | G_SIGNAL_NO_RECURSE | G_SIGNAL_NO_HOOKS,
++               0, NULL, NULL, NULL,
++               G_TYPE_NONE, 1, G_TYPE_BOOLEAN);
+ }
+ 
+ /**
+@@ -268,6 +274,7 @@ on_request (PolkitAgentSession *session,
+    *       the problem.
+    */
+ 
++  g_signal_emit_by_name(listener, "tty_attrs_changed", TRUE);
+   tcgetattr (fileno (listener->tty), &ts);
+   ots = ts;
+   ts.c_lflag &= ~(ECHO | ECHOE | ECHOK | ECHONL);
+@@ -296,6 +303,7 @@ on_request (PolkitAgentSession *session,
+         }
+     }
+   tcsetattr (fileno (listener->tty), TCSAFLUSH, &ots);
++  g_signal_emit_by_name(listener, "tty_attrs_changed", FALSE);
+   putc ('\n', listener->tty);
+ 
+   polkit_agent_session_response (session, str->str);
+diff -up ./src/programs/pkttyagent.c.ori ./src/programs/pkttyagent.c
+--- ./src/programs/pkttyagent.c.ori	2020-01-28 14:16:32.000000000 +0100
++++ ./src/programs/pkttyagent.c	2022-10-21 16:56:12.449760361 +0200
+@@ -34,6 +34,7 @@
+ 
+ 
+ static volatile sig_atomic_t tty_flags_saved;
++static volatile sig_atomic_t tty_flags_changed;
+ struct termios ts;
+ FILE *tty = NULL;
+ struct sigaction savesigterm, savesigint, savesigtstp;
+@@ -54,7 +55,7 @@ static void tty_handler(int signal)
+       break;
+   }
+ 
+-  if (tty_flags_saved)
++  if (tty_flags_saved && tty_flags_changed)
+   {
+     tcsetattr (fileno (tty), TCSADRAIN, &ts);
+   }
+@@ -63,6 +64,14 @@ static void tty_handler(int signal)
+ }
+ 
+ 
++static void tty_attrs_changed(PolkitAgentListener *listener G_GNUC_UNUSED,
++                              gboolean changed,
++                              gpointer user_data G_GNUC_UNUSED)
++{
++  tty_flags_changed = changed;
++}
++
++
+ int
+ main (int argc, char *argv[])
+ {
+@@ -221,6 +230,9 @@ main (int argc, char *argv[])
+       ret = 127;
+       goto out;
+     }
++  g_signal_connect(G_OBJECT(listener), "tty_attrs_changed",
++                   G_CALLBACK(tty_attrs_changed), NULL);
++
+   local_agent_handle = polkit_agent_listener_register_with_options (listener,
+                                                                     POLKIT_AGENT_REGISTER_FLAGS_RUN_IN_THREAD,
+                                                                     subject,

SPECS/polkit.spec

@@ -6,7 +6,7 @@
 Summary: An authorization framework
 Name: polkit
 Version: 0.115
-Release: 13%{?dist}.2
+Release: 15%{?dist}
 License: LGPLv2+
 URL: http://www.freedesktop.org/wiki/Software/polkit
 Source0: http://www.freedesktop.org/software/polkit/releases/%{name}-%{version}.tar.gz
@@ -28,6 +28,7 @@ Patch11: polkit-0.115-pkttyagent-tcsaflush-batch-erase.patch
 Patch12: polkit-0.115-CVE-2021-3560.patch
 Patch13: polkit-0.115-CVE-2021-4034.patch
 Patch14: polkit-0.115-CVE-2021-4115.patch
+Patch15: polkit-0.115-tty-flags-restore-if-changed.patch
 
 
 BuildRequires: gcc-c++
@@ -193,15 +194,15 @@ exit 0
 %{_libdir}/girepository-1.0/*.typelib
 
 %changelog
-* Tue Feb 16 2022 Jan Rybar <jrybar@redhat.com> - 0.115-13.el8_5.2
+* Tue Nov 08 2022 Jan Rybar <jrybar@redhat.com> - 0.115-15
-- necessary version bump due to build versioning
+- pkttyagent gets stopped if killed in the background
-- Resolves: CVE-2021-4115
+- Resolves: rhbz#2128989
 
-* Tue Feb 15 2022 Jan Rybar <jrybar@redhat.com> - 0.115-12.el8_5.2
+* Tue Feb 15 2022 Jan Rybar <jrybar@redhat.com> - 0.115-14
 - file descriptor exhaustion (GHSL-2021-077)
 - Resolves: CVE-2021-4115
 
-* Fri Dec 03 2021 Jan Rybar <jrybar@redhat.com> - 0.115-12.el8_5.1
+* Fri Dec 03 2021 Jan Rybar <jrybar@redhat.com> - 0.115-13
 - pkexec: argv overflow results in local privilege esc.
 - Resolves: CVE-2021-4034