* gnu/packages/patches/polkit-CVE-2018-19788.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/polkit.scm (polkit)[source]: Use it.
* gnu/packages/xorg.scm:
* gnu/packages/xdisorg.scm:
* gnu/packages/video.scm:
* gnu/packages/tls.scm:
* gnu/packages/python.scm:
* gnu/packages/pulseaudio.scm:
* gnu/packages/polkit.scm:
* gnu/packages/pdf.scm:
* gnu/packages/libcanberra.scm:
* gnu/packages/gtk.scm:
* gnu/packages/gstreamer.scm:
* gnu/packages/gnome.scm:
* gnu/packages/glib.scm:
* gnu/packages/ghostscript.scm:
* gnu/packages/freedesktop.scm:
* gnu/packages/fontutils.scm: Update all sources hosted on freedesktop
to fetch tarballs via https. freedesktop.org appears to have updated
recently to redirect all http to https. As an exception, we leave
pkg-config like it is, because pkg-config is needed to build gnutls,
and without gnutls we can't download https URLs.
* gnu/packages/polkit.scm (polkit)[source]: Adjust snippet so that rules
and actions are looked for under /etc/polkit-1.
* gnu/services/desktop.scm (<polkit-configuration>): New record type.
(polkit-directory, polkit-etc-files, polkit-setuid-programs): New
procedures.
(polkit-service-type)[compose, extend]: New fields.
(polkit-service): Refine docstring.
(colord-service-type): Extend POLKIT-SERVICE-TYPE.
(elogind-configuration-file): Extend POLKIT-SERVICE-TYPE.
* doc/guix.texi (Desktop Services): Update 'polkit-service'
documentation.
* gnu/packages/polkit.scm (polkit): Configure to look for actions and
rules in the system profile. Arrange to look for the setuid helper in
/run/setuid-programs. Fix introspection installation.
Based on a patch by Mark H Weaver <mhw@netris.org>.
Ricardo Wurmus