From c134ef24a47e6fe9be80c1d9dc20893c2aeadc6c Mon Sep 17 00:00:00 2001
From: Matthias Clasen <mclasen@redhat.com>
Date: Nov 19 2012 21:40:46 +0000
Subject: More stricter policy for running gnome-system-log


Require auth_admin instead of auth_self.

---

diff --git a/gnome-system-log.spec b/gnome-system-log.spec
index 8ae2b10..6f6f173 100644
--- a/gnome-system-log.spec
+++ b/gnome-system-log.spec
@@ -1,6 +1,6 @@
 Name:           gnome-system-log
 Version:        3.6.1
-Release:        1%{?dist}
+Release:        2%{?dist}
 Epoch:          1
 Summary:        A log file viewer for GNOME
 
@@ -80,6 +80,9 @@ glib-compile-schemas %{_datadir}/glib-2.0/schemas >&/dev/null || :
 %doc %{_mandir}/man1/gnome-system-log.1.gz
 
 %changelog
+* Mon Nov 19 2012 Matthias Clasen <mclasen@redhat.com> - 1:3.6.1-2
+- Use auth_admin_keep in the polkit file (#878115)
+
 * Tue Nov 13 2012 Kalev Lember <kalevlember@gmail.com> - 1:3.6.1-1
 - Update to 3.6.1
 - Remove unused BRs
diff --git a/org.gnome.logview.policy b/org.gnome.logview.policy
index 8130e2c..428dd93 100644
--- a/org.gnome.logview.policy
+++ b/org.gnome.logview.policy
@@ -7,14 +7,14 @@
  <vendor>GNOME</vendor>
  <vendor_url>http://www.gnome.org</vendor_url>
 
- <action id="org.gnome.logview.config.date.pkexec.run">
+ <action id="org.gnome.logview.pkexec.run">
     <description>Run gnome-system-log</description>
     <message>Authentication is required to run Log Viewer</message>
     <icon_name>logview</icon_name>
     <defaults>
      <allow_any>no</allow_any>
      <allow_inactive>no</allow_inactive>
-     <allow_active>auth_self_keep</allow_active>
+     <allow_active>auth_admin_keep</allow_active>
     </defaults>
     <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/logview</annotate>
     <annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>