From 71abb9f0aa934bc9657496d2ac53cc33bc456bcc Mon Sep 17 00:00:00 2001
From: Vincent Zhang <zz8011@gmail.com>
Date: Fri, 25 Sep 2026 21:08:13 +0800
Subject: [PATCH] supergfxctl: drop nonexistent sudo group from D-Bus policy

Arch has no sudo group, so dbus-broker rejects that policy block by name on
every bus reload: "Invalid group-name in org.supergfxctl.Daemon.conf +9:
group=\"sudo\"". The block grants nothing here; the wheel policy in the same
file is what authorises an unprivileged user.

Remove the dead block with a checked-in patch and bump pkgrel.
---
 pkgbuilds/supergfxctl/PKGBUILD                   | 16 +++++++++++++---
 .../drop-nonexistent-sudo-group.patch            | 13 +++++++++++++
 2 files changed, 26 insertions(+), 3 deletions(-)
 create mode 100644 pkgbuilds/supergfxctl/drop-nonexistent-sudo-group.patch

diff --git a/pkgbuilds/supergfxctl/PKGBUILD b/pkgbuilds/supergfxctl/PKGBUILD
index 7767218..46e46f2 100644
--- a/pkgbuilds/supergfxctl/PKGBUILD
+++ b/pkgbuilds/supergfxctl/PKGBUILD
@@ -3,7 +3,7 @@
 
 pkgname=supergfxctl
 pkgver=5.2.7
-pkgrel=2
+pkgrel=3
 pkgdesc="A utility for Linux graphics switching on Intel/AMD iGPU + nVidia dGPU laptops"
 arch=('x86_64')
 url="https://gitlab.com/asus-linux/supergfxctl"
@@ -13,11 +13,21 @@ makedepends=('rust')
 provides=('supergfxctl')
 conflicts=('supergfxctl-git'
 	'optimus-manager')
-source=("https://gitlab.com/asus-linux/supergfxctl/-/archive/$pkgver/supergfxctl-$pkgver.tar.gz")
-sha512sums=('bd94646d289c9f3398e1bf2a189554ac60d4db2d4d2cefddc0b342e8a128d4682e20268e0b1f9b168441136ada0b6fadb097a5a35d1023a77528dbf0540de3af')
+source=("https://gitlab.com/asus-linux/supergfxctl/-/archive/$pkgver/supergfxctl-$pkgver.tar.gz"
+	"drop-nonexistent-sudo-group.patch")
+sha512sums=('bd94646d289c9f3398e1bf2a189554ac60d4db2d4d2cefddc0b342e8a128d4682e20268e0b1f9b168441136ada0b6fadb097a5a35d1023a77528dbf0540de3af'
+	'c24de0e6a632fd98052eb3b265000cf15bf00ff46f7e52120e462715937df8135297d9f12725d1c303691c0db55b23d2b29671f020bd64e98a993b1ad9b8551e')
 options=(!debug)
 _gitdir=${pkgname%"-git"}
 
+prepare() {
+	cd "$pkgname-$pkgver"
+	# Arch has no "sudo" group, so dbus-broker rejects that policy block by name on
+	# every bus reload ("Invalid group-name ... group=\"sudo\""). The block grants
+	# nothing here; the wheel policy in the same file is the one that applies.
+	patch -p1 -i "$srcdir/drop-nonexistent-sudo-group.patch"
+}
+
 build() {
 	cd "$pkgname-$pkgver"
 	make build
diff --git a/pkgbuilds/supergfxctl/drop-nonexistent-sudo-group.patch b/pkgbuilds/supergfxctl/drop-nonexistent-sudo-group.patch
new file mode 100644
index 0000000..7c91edd
--- /dev/null
+++ b/pkgbuilds/supergfxctl/drop-nonexistent-sudo-group.patch
@@ -0,0 +1,13 @@
+--- a/data/org.supergfxctl.Daemon.conf
++++ b/data/org.supergfxctl.Daemon.conf
+@@ -6,10 +6,6 @@
+         <allow send_destination="org.supergfxctl.Daemon"/>
+         <allow receive_sender="org.supergfxctl.Daemon"/>
+     </policy>
+-    <policy group="sudo">
+-        <allow send_destination="org.supergfxctl.Daemon"/>
+-        <allow receive_sender="org.supergfxctl.Daemon"/>
+-    </policy>
+     <policy group="users">
+         <allow send_destination="org.supergfxctl.Daemon"/>
+         <allow receive_sender="org.supergfxctl.Daemon"/>