------------------------------------------------------------------- Thu Feb 29 12:12:02 UTC 2024 - Jiri Srain - add bcond for building without AppArmor support (for ALP code base) ------------------------------------------------------------------- Thu Jan 25 07:40:47 UTC 2024 - Peter Simons - Remove the post-install scriptlet introduced earlier. It turns out that "chmod" call opened a security vulnerability that allowed users with write access to /var/lib/mlocate to obtain read/write access to arbitrary files on the system, possibly facilitating privilege escalation to root. [bsc#1218896, CVE-2023-32190] ------------------------------------------------------------------- Mon Jan 8 11:10:30 UTC 2024 - Frederic Crozat - Drop url from source, fedorahosted.org is no longer running. ------------------------------------------------------------------- Wed Dec 13 17:16:03 UTC 2023 - Jean Delvare - Add a post-install scriptlet to fix incorrect database permissions (bsc#1188933). Modified: * mlocate.spec ------------------------------------------------------------------- Fri Mar 17 11:14:00 UTC 2023 - Arjen de Korte - Set umask 0022 before running /usr/bin/updatedb (boo#1209409) ------------------------------------------------------------------- Fri Feb 3 15:35:01 UTC 2023 - Johannes Segitz - Remove ProtectKernelModules from systemd unit as it makes files inaccessible that are then not visible for locate (bsc#1207884) ------------------------------------------------------------------- Wed Sep 14 13:16:44 UTC 2022 - Peter Simons - Pass "--shell=/bin/sh" to "su" when running the "updatedb" command so that we don't depend on the "${RUN_UPDATEDB_AS}" user's login shell. Since that user is "nobody" by default, the login shell will oftentimes be "/bin/false". [jsc#PED-1717] ------------------------------------------------------------------- Wed Oct 6 14:16:25 UTC 2021 - Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Modified: * mlocate.service ------------------------------------------------------------------- Fri Sep 11 16:14:56 UTC 2020 - Hans-Peter Jansen - Require apparmor-abstractions, because apparmor.service fails with "Could not open 'tunables/global'" error otherwise. [bsc#1195144] ------------------------------------------------------------------- Tue Dec 4 11:11:51 UTC 2018 - Jan Engelhardt - Reduce amount of emitted %service_* boilerplate. ------------------------------------------------------------------- Fri Nov 30 06:27:56 UTC 2018 - erictorres4@protonmail.com - Add systemd service and timer units [boo#1115408] - Add rc symlinks for backwards compatibility - Add BuildRequires for systemd-rpm-macros - Minor correction to summary, change 'an' to 'a' - Add commands for registering systemd unit files in install scripts - Update files list to include systemd units - Remove dependency on cron - Move logic from cron script to systemd service unit - Remove all variables except RUN_UPDATEDB_AS from sysconfig.locate ------------------------------------------------------------------- Fri Sep 7 13:16:39 UTC 2018 - suse-beta@cboltz.de - add capability rules to updatedb AppArmor profile to allow running it as root (boo#1089594#c4) ------------------------------------------------------------------- Thu May 10 09:13:26 UTC 2018 - tchvatal@suse.com - Add apparmor profile bsc#1089594 ------------------------------------------------------------------- Thu Nov 23 13:52:07 UTC 2017 - rbrown@suse.com - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) ------------------------------------------------------------------- Fri Aug 25 08:20:29 UTC 2017 - tchvatal@suse.com - Require user nobody wrt bsc#1055634 ------------------------------------------------------------------- Mon Jul 10 08:45:24 UTC 2017 - tchvatal@suse.com - We moved locks to /run thus do not rely on symlinks ------------------------------------------------------------------- Thu Feb 16 09:53:52 UTC 2017 - tchvatal@suse.com - Update the umask also in su section where it could be nulled wrt bsc#1019440 ------------------------------------------------------------------- Mon Aug 29 12:50:37 UTC 2016 - tchvatal@suse.com - Reduce dependencies a bit - Update updatedb.conf wrt bnc#994663 ------------------------------------------------------------------- Wed Jan 20 10:58:56 UTC 2016 - tchvatal@suse.com - Cron file updates: - Remove the ac/battery detection that does not work - Exit with 1 when the updatedb is not executable ------------------------------------------------------------------- Wed Jan 20 10:53:55 UTC 2016 - tchvatal@suse.com - Add more mounts to exclude in updatedb.conf ------------------------------------------------------------------- Fri Aug 21 07:23:52 UTC 2015 - tchvatal@suse.com - Specify umask to allow user redefine the value in login.defs bnc#941296 ------------------------------------------------------------------- Sat Oct 25 17:09:31 UTC 2014 - tchvatal@suse.com - Remove mention of the locate group that was obsoleted. fixes bnc#902588 ------------------------------------------------------------------- Wed Jun 11 11:09:08 UTC 2014 - tchvatal@suse.com - Enable testsuite. ------------------------------------------------------------------- Mon May 5 08:04:23 UTC 2014 - tchvatal@suse.com - Remove some duped fs from PRUNEFS variable. ------------------------------------------------------------------- Tue Apr 15 09:52:00 UTC 2014 - tchvatal@suse.com - Update once more to always hit the same code and to avoid regressions that are hit only under some setup scenarios. ------------------------------------------------------------------- Thu Apr 3 11:29:08 UTC 2014 - tchvatal@suse.com - Fix a bug where empty RUN_UPDATEDB_AS="" caused cron fail with unknown arguments if the compat values were empty. ------------------------------------------------------------------- Wed Mar 19 09:09:44 UTC 2014 - tchvatal@suse.com - Also respect the UPDATEDB_ when not running as root in the cron job. ------------------------------------------------------------------- Mon Mar 17 08:44:54 UTC 2014 - tchvatal@suse.com - Move the UPDATEDB_ variables parsing to cron service to have it working there as the upstream bash config is not exactly shell interpreted. bnc#861955. - Sadly this way if user runs updatedb by hand it gets not properly populated, but at least the cron works with backcompat way. ------------------------------------------------------------------- Fri Mar 14 08:24:29 UTC 2014 - tchvatal@suse.com - Include findutils-locate variables in updatedb.conf if user still have them specified. bnc#861955 * This ensures we can still load the variables user can specified in the /etc/sysconfig/locate namely UPDATEDB_PRUNEPATHS and UPDATEDB_PRUNEFS ------------------------------------------------------------------- Fri Mar 14 08:18:22 UTC 2014 - tchvatal@suse.com - Cleanup with spec-cleaner. ------------------------------------------------------------------- Fri Mar 14 08:17:01 UTC 2014 - tchvatal@suse.com - Update comments in sysconfig.locate a bit to reflect reality. ------------------------------------------------------------------- Tue Oct 29 13:10:50 UTC 2013 - tchvatal@suse.com - As discussed run updatedb as nobody and do not use the locate group at all. Wrt bnc#847801. ------------------------------------------------------------------- Mon Sep 9 18:32:41 UTC 2013 - tchvatal@suse.com - Recommend the language package. ------------------------------------------------------------------- Wed Jun 12 13:40:30 UTC 2013 - tchvatal@suse.com - Add missing space to description of package. ------------------------------------------------------------------- Mon Jun 3 12:09:09 UTC 2013 - tchvatal@suse.com - Add COPYING to %docs macro as reported by cfarrell. ------------------------------------------------------------------- Mon Jun 3 11:41:23 UTC 2013 - cfarrell@suse.com - license update: GPL-2.0 Multiple instances of (c) Red Hat GPL-2.0 licensing ------------------------------------------------------------------- Thu May 30 11:29:26 UTC 2013 - tchvatal@suse.com - Fixup provide/obsolete to really work + cleanup spec ------------------------------------------------------------------- Thu May 30 10:49:45 UTC 2013 - tchvatal@suse.com - More work wrt previous change. Provide/obsolete findutils-locate. ------------------------------------------------------------------- Thu May 30 09:26:59 UTC 2013 - tchvatal@suse.com - Do not use sgid but require user to be in group locate in order to be able to search. ------------------------------------------------------------------- Sun Dec 2 11:04:25 UTC 2012 - tchvatal@suse.com - Whitespace / format the spec a bit. ------------------------------------------------------------------- Tue Nov 20 20:54:44 UTC 2012 - tchvatal@suse.com - Try to shutup the suid error. ------------------------------------------------------------------- Tue Nov 20 20:51:58 UTC 2012 - tchvatal@suse.com - Run the perm stuff only on new enough suse. ------------------------------------------------------------------- Tue Nov 20 20:45:46 UTC 2012 - tchvatal@suse.com - Update the verify to adhere specs. ------------------------------------------------------------------- Tue Nov 20 20:42:25 UTC 2012 - tchvatal@suse.com - Adhere to specs to exit 0 on pre. ------------------------------------------------------------------- Tue Nov 20 20:39:51 UTC 2012 - tchvatal@suse.com - Add buildroot definition to have it on sle ------------------------------------------------------------------- Tue Nov 20 20:33:41 UTC 2012 - tchvatal@suse.com - require pwdutils for pre phase ------------------------------------------------------------------- Mon Nov 12 14:29:49 UTC 2012 - tchvatal@suse.com - silence error about PIE, thanks to darix for suggestions on irc. ------------------------------------------------------------------- Mon Nov 12 13:45:07 UTC 2012 - tchvatal@suse.com - version bump to latest ------------------------------------------------------------------- Mon Oct 31 14:56:45 UTC 2011 - prusnak@opensuse.org - spec cleanup ------------------------------------------------------------------- Fri Aug 5 07:57:11 UTC 2011 - tchvatal@novell.com - Update the docs list ------------------------------------------------------------------- Thu Aug 4 20:03:44 UTC 2011 - tchvatal@novell.com - Punt useless clean section ------------------------------------------------------------------- Thu Aug 4 14:37:22 UTC 2011 - tchvatal@novell.com - Initial version 0.24 of mlocate package