From 5407b8efc657b654da7c66d5c69c35448eb43061 Mon Sep 17 00:00:00 2001
From: Alexander Larsson <alexl@redhat.com>
Date: Thu, 12 May 2016 21:23:36 +0200
Subject: system-helper: Support uninstall

---
 system-helper/flatpak-system-helper.c           | 67 ++++++++++++++++++++++++-
 system-helper/org.freedesktop.Flatpak.policy.in | 22 ++++++++
 2 files changed, 88 insertions(+), 1 deletion(-)

(limited to 'system-helper')

diff --git a/system-helper/flatpak-system-helper.c b/system-helper/flatpak-system-helper.c
index f527499..905909b 100644
--- a/system-helper/flatpak-system-helper.c
+++ b/system-helper/flatpak-system-helper.c
@@ -295,6 +295,41 @@ handle_deploy_appstream (FlatpakSystemHelper   *object,
   return TRUE;
 }
 
+static gboolean
+handle_uninstall (FlatpakSystemHelper *object,
+                  GDBusMethodInvocation *invocation,
+                  guint arg_flags,
+                  const gchar *arg_ref)
+{
+  g_autoptr(FlatpakDir) system = flatpak_dir_get_system ();
+  g_autoptr(GError) error = NULL;
+  g_autoptr(GMainContext) main_context = NULL;
+
+  g_debug ("Uninstall %u %s", arg_flags, arg_ref);
+
+  if ((arg_flags & ~FLATPAK_HELPER_UNINSTALL_FLAGS_ALL) != 0)
+    {
+      g_dbus_method_invocation_return_error (invocation, G_DBUS_ERROR, G_DBUS_ERROR_INVALID_ARGS,
+                                             "Unsupported flags enabled: 0x%x", (arg_flags & ~FLATPAK_HELPER_UNINSTALL_FLAGS_ALL));
+      return TRUE;
+    }
+
+  if (!flatpak_dir_ensure_repo (system, NULL, &error))
+    {
+      g_dbus_method_invocation_return_gerror  (invocation, error);
+      return TRUE;
+    }
+
+  if (!flatpak_dir_uninstall (system, arg_ref, arg_flags, NULL, &error))
+    {
+      g_dbus_method_invocation_return_gerror  (invocation, error);
+      return TRUE;
+    }
+
+  flatpak_system_helper_complete_uninstall (object, invocation);
+  return TRUE;
+}
+
 static gboolean
 flatpak_authorize_method_handler (GDBusInterfaceSkeleton *interface,
                                   GDBusMethodInvocation  *invocation,
@@ -368,7 +403,7 @@ flatpak_authorize_method_handler (GDBusInterfaceSkeleton *interface,
 
       authorized = polkit_authorization_result_get_is_authorized (result);
     }
-  else   if (g_strcmp0 (method_name, "DeployAppstream") == 0)
+  else if (g_strcmp0 (method_name, "DeployAppstream") == 0)
     {
       const char *arch, *origin;
 
@@ -381,6 +416,35 @@ flatpak_authorize_method_handler (GDBusInterfaceSkeleton *interface,
       polkit_details_insert (details, "origin", origin);
       polkit_details_insert (details, "arch", arch);
 
+      result = polkit_authority_check_authorization_sync (authority, subject,
+                                                          action, details,
+                                                          POLKIT_CHECK_AUTHORIZATION_FLAGS_ALLOW_USER_INTERACTION,
+                                                          NULL, &error);
+      if (result == NULL)
+        {
+          g_dbus_method_invocation_return_error (invocation, G_DBUS_ERROR, G_DBUS_ERROR_FAILED,
+                                                 "Authorization error: %s", error->message);
+          return FALSE;
+        }
+
+      authorized = polkit_authorization_result_get_is_authorized (result);
+    }
+  else if (g_strcmp0 (method_name, "Uninstall") == 0)
+    {
+      const char *ref;
+      gboolean is_app;
+
+      g_variant_get_child (parameters, 1, "&s", &ref);
+
+      is_app = g_str_has_prefix (ref, "app/");
+      if (is_app)
+        action = "org.freedesktop.Flatpak.app-uninstall";
+      else
+        action = "org.freedesktop.Flatpak.runtime-uninstall";
+
+      details = polkit_details_new ();
+      polkit_details_insert (details, "ref", ref);
+
       result = polkit_authority_check_authorization_sync (authority, subject,
                                                           action, details,
                                                           POLKIT_CHECK_AUTHORIZATION_FLAGS_ALLOW_USER_INTERACTION,
@@ -424,6 +488,7 @@ on_bus_acquired (GDBusConnection *connection,
 
   g_signal_connect (helper, "handle-deploy", G_CALLBACK (handle_deploy), NULL);
   g_signal_connect (helper, "handle-deploy-appstream", G_CALLBACK (handle_deploy_appstream), NULL);
+  g_signal_connect (helper, "handle-uninstall", G_CALLBACK (handle_uninstall), NULL);
 
   g_signal_connect (helper, "g-authorize-method",
                     G_CALLBACK (flatpak_authorize_method_handler),
diff --git a/system-helper/org.freedesktop.Flatpak.policy.in b/system-helper/org.freedesktop.Flatpak.policy.in
index a0a1bcc..15f8220 100644
--- a/system-helper/org.freedesktop.Flatpak.policy.in
+++ b/system-helper/org.freedesktop.Flatpak.policy.in
@@ -83,6 +83,28 @@
     </defaults>
   </action>
 
+  <action id="org.freedesktop.Flatpak.runtime-uninstall">
+    <_description>Uninstall runtime</_description>
+    <_message>Authentication is required to uninstall software</_message>
+    <icon_name>package-x-generic</icon_name>
+    <defaults>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
+      <allow_active>auth_admin_keep</allow_active>
+    </defaults>
+  </action>
+
+  <action id="org.freedesktop.Flatpak.app-uninstall">
+    <_description>Uninstall app</_description>
+    <_message>Authentication is required to uninstall software</_message>
+    <icon_name>package-x-generic</icon_name>
+    <defaults>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
+      <allow_active>auth_admin_keep</allow_active>
+    </defaults>
+  </action>
+
   <action id="org.freedesktop.Flatpak.appstream-update">
     <!-- SECURITY:
           - Normal users do not require admin authentication to update
-- 
cgit v1.2.1