From 951cd24f6596e2ceb0e112da51a759dddff7a0b8b3316d49f6c50db317a4f1da Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= <adrian@suse.de>
Date: Fri, 6 Sep 2024 15:25:30 +0200
Subject: [PATCH] Sync from SUSE:SLFO:Main aaa_base revision
 625e721b2b469f04942cdf6e1cc47150

---
 _servicedata                                  |   2 +-
 ... => aaa_base-84.87+git20240906.742565b.tar | Bin 348160 -> 348160 bytes
 aaa_base.changes                              |   8 ++++++++
 aaa_base.spec                                 |  18 +++++++++++++++++-
 4 files changed, 26 insertions(+), 2 deletions(-)
 rename aaa_base-84.87+git20240821.fbabe1d.tar => aaa_base-84.87+git20240906.742565b.tar (91%)

diff --git a/_servicedata b/_servicedata
index bcc12e3..4e16731 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,5 +1,5 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/openSUSE/aaa_base.git</param>
-              <param name="changesrevision">fbabe1d9dfff899e79fccf92703bbbbc20890e36</param></service>
+              <param name="changesrevision">742565b964545a2618f0809a3219cf0cdf185cd3</param></service>
 </servicedata>
\ No newline at end of file
diff --git a/aaa_base-84.87+git20240821.fbabe1d.tar b/aaa_base-84.87+git20240906.742565b.tar
similarity index 91%
rename from aaa_base-84.87+git20240821.fbabe1d.tar
rename to aaa_base-84.87+git20240906.742565b.tar
index f1ba0c026098dd01ec1798d2f7c24a330386f7ed5f47f3531432bd8870273923..705e4832982b52fb3e02d1d93b528e9458d5e09bb29e22785e6b5259fce64337 100644
GIT binary patch
delta 8079
zcmbW6Z)_9i9mf;jCC$=6fCw&xjy^FF14iQee;wHnZh(fZO&Ck0uI&nE``p}ce4g(d
z6vmo_QC3Y8B6#IkRaFR8XhQ27I$fn{+KXu~qH5Z@sV}ApAyiG%v`N!8?FB*`+wbgz
zJdb_$FXT;-u>E<yzdz6S`Q3B#*SF4J-+Ebi@(ZFqWT>*HYbjs4$t#P8x)(EhHtU)y
z>x$7LN~)r(EkrAuT&An!dS<aj6pN1IElN+7_qLL<_`MIW#Dq;0Co$xt++|oN3)5s-
z!(p_ja-9F>sv21oMWuy^&D7j(7h*lMoRRV4Uq3eX9Q@{hpBdtw?o(t<ZIM)6UyTyN
zH85_cFv^7af_d8V#if{9K4fkvPo3B))KYa(hTJt(du8IkA3U6hapnKD_HLn7pE!~{
z{K63sJzUPbNEbwtRSALKeo2V2NqnUyiBN^6vTnaxOE|?66toN}A-0_k$TZE9Dbuxv
z+=7*cxKuy06eHVpO{}SfZs;N=FZ)UFT)}ZYGHXtogI3;5<*dPiS2WXB=Pr_-veKuC
zovnOIY?qj6&z`Y5;eTExgISU&6rFU!oplqZtzzEFB|=J~`ty@++9_D%8^gq#vhtmT
z>>_5#bEZwtPMf*hEXmkzxEh(OexCr#vw-j9NvQyT>^$s}TrON5R`9IpOsF95cvaSn
zY3IV<50Oc?Q~_4MMb6mpBX%jXP=EzN2XQUWv-7V30<itWn=M##WU#QZ!XV)7>?}D*
z5*ceIkuL%2+&TE-vVxV*2M1HIb*;>!;KJ}SPX2Qq{3W(WKtCig?}iC;@@8%s;1bUv
z=8R)!h?(=OB1j=~6<wa`S;WbPB0*e;TMj2>Wu2l$idMK{<)do$&yx7Sw<k^{$G(;v
znK(8+mVEx?<nhDFi6h^MQ%SF)(q^cv<U;(jZrTGic0O&vTBb+N%sHi8hNR8#<5ERn
z(fU@&hBd?L7To>h%#@v;g5+0L52dBd3;|Un?c_bv&RazQo~`O8#7a*&L=01icL(J5
zKz9Y3wc#K5leIti-Rn0xzzVzRrq9|rKY5qmwRmVpjT3_X;7+);hGn@4%S$hNYa2_{
zE53jk_2xRFzket9jDKp0i|>$iU8?agSyVK1t6vg^qPX!DuB2#2%`OKghmDVz&@Y7E
zDDLh@T-5*{Vw@bfxO@CT=!@d+t8#bsshXy<Sjo_J8I${Op_6sphm2>+2IjgKT7Mc7
zmZGH1uY@d1;R(ou4BBKYmBB|bVSpCr$NwIq)JcYlmO1!Gj6D?m_`hg|EUFTAh{FDe
z=;@MMY}C^R5V4-#R@c)BASV2wo4mf5-n%+JNQS7cfyd_QJ{u#P=|~?059;#tADST<
z8lLNiF`=E+!E;o-WD!3kgLbaw2nII-2MKfY$VF<>qd{<3x>;GBtSn8$hLfO+6SlC7
zoeV>gP-h4TgvK)B3`5j4Y_kOeb&TCL3>|a6U{4)mAInfRY)b_Dfl<Hb%bVu6`d=F2
z##h@{mQ?Vi=AIddoN%1Y%zTX^1+CEeXhq3|9)I`(_f<-fXeeuVI*5oaxv<?&UgW+)
zv1AQb_9iE^N76p)AGyRmN7HmX^OrfHBa#N%uCdw-3ElQ@H_95+@g1g)O2vkn4&cGN
zoWMtF1KJISCL1DZ|L--*8&vcbQ&Cwl(60XpCv1$=2DG2CG#Nb-f}e9jS2V3We)Wm4
zu21{s68Cw!xNr<&8{wly#qB9yUI6U15c~TYtcpFa1)nskOOHSPTdv(7xyAMSsXN?&
zP;*Sn;MpkskBxe$r+n(-27mMpcbH0pV&D#Sw;8e9|METVS(><pQR36a#P{c)^pF0D
zJ4zEpbnFTK3@1W^4tRgQ!ymcN9ixb{fj$5S4;pr8`QE~3{KFmmC`E(|0koYu`AC-r
zPXr=F-NiFeOCnn9jSY$Z@Ft#iSy@(5eOveje$i9@&Bc|r+{W*t!iI)K52xOSSbz8_
zMr37ZMh>T)O+qFtO%>6jE)F#Is2ixcEDBxX@y40m3_)5$8Tar)2dhG48EY7cWXLje
zS+Y8*<?Q8)xtd8$UBg9M#GYDsW1D~Q8Gejv14#{C4@*-d3r^hwJbmgaMmS(MKiR&>
z3!Ra)-Tv57{vf4H)m8K?8f`>_I8QKfs*;Fmn}}}r&F6vkB14n(@Cs}lS*x&KVpxg>
zkKIVtUa4#LSD7{w^|ds6MBe)+VWK$2({rYxptqqxDmw4|ll}g&96v%;QNb@PgM73x
z^iRS>QDBTgQE<~LHlcY84KBG+o0);0U^n<#HuIXYzP<SCH+ua;=lJKTT**+zb#+yR
z^*Y1S;fe+8s`=<lRcPlKnx-1)bHjxuw2KT)H}JjqW)s@?S(>7wk^Z0w?Gj6q(5s%{
zaueDWh6Zm|&?ko<HlbZ*XmH<!I^s2;vHkis)31^gKFeUv#S-3O2$~+AKFwYJ-8vQ5
zX@+D}o~SSt^?v2I{)i|3=nej$pt1L0GTc;RHhT4Ae#3{|@A3a^EkA7C&c=9?)h8>D
zouwbsgm5dP-g1i<dRY~}WEc|M$YPoPRkRcT?Yr<4dq4JUA7sU-$&{?%*pGRki<NeV
zmIgP5;Z@J$7qI;D><)kAF3*hg;0Nnx-D6m~h#S?XeB?DkMcH3inu@+~4F1YTJ`PuC
z_ZgaI7-&m80Bv;M--@>}7k?7GyhPJZ1N?Z5AxPp{CIyzjGXzD)Z~5BW*f9Kf7sCJ*
zFpaIFefC~}sdHl+J$1tSTr{nl>hx@5^oXjAI%{v6(8rAF)AqC#zKff-imzGKcbak=
Q{j%1O49xv+s%?G$2ls^0<p2Nx

delta 8902
zcmb`Ne`r-@7{|AJ-u-Z{Ik)DSS8dnpkZH1=_kGU~aWyx#>CEPqXq1V0@9s4$*JPWL
zP@!%NCl%XH`HIOJAu>WDHIDy8^hZR9e^f|+M2Lt)M1Mp?!I;r|=dbrU=iK1AbN>v+
z_&m@1eSW>?Ip^q9)zPV{F@52BM(g(_6Uj792|7*qc=Mw1RNZ3ADQ6DPGpJ1|&5Kzs
z)l#L01_l%Tu~=SzU*F(3UGA>Qk1aCp{^Z^JE&p$NBBGZo+=lwT<iI_6i4X2r3=dbG
zcH`vLhu$)3aU(BgV7$Fls7ESQcU!x<U)-{7vt(=#DMPD?a%P!%)U@q~syI~s32CQ9
z?*OuNCSFSm<7&hlZ(iW0w#RkLZ^X)|gF4K_jyw5>FW=b_(PR)R)KhJ5Z)xjnmxpR}
zQ!ju3JGPCqa%q<yfkD{q3j)^fOMCppy^v_5!<y71OH~09iNwpv#6Y@!;9$B(>R`I5
zR87<{Ift?{!!kHlkbT#yFDH(DRO~iu?@HwtsfPFMKOkCel2zl)%V739j7me;(yH>Y
z(*q6Z!Jd2dRp7HQ7h9}_#Q_UqT})dq_MX$?%a|+!Uo|jB4Rm<M^!hM6wfF5%ZaIc8
zGSqS`Y-GODtHbQnJ+NasfefIwfwuFL9u2dz?yj9xQPZ+)|8Y#i!5-&ty+p0N590Z1
zoiKx8D{mx{??oc|w_(m7zb{fI!2U9!+{B9HU5n_os{11TM@03XGISz&e@0;I5b?hN
zlTj1fs$~U-RN0|{{?ICuJ~L?nTV+cERn{OaG>H0XVvqN%QHGjfIXUp5&NEOGIoy$%
z=gkIm{ueMQN5}4SO)rFQ7HVobFbiFWUa{uu`?CGY7MYRuL7VieE49Ez54v3n-DV6s
zQN1!vuYk-LWZLM~=f$NIkXZ|vrh)Ai-s%9e&c~$KQQ)l&FxNpQGq4rx)k|iurMZ1G
zRpMzw>r$$VGxWIkn5K6_WsgITsciPRo0~Tr?(xN;O3^r?J*RlgOgo1wd59Vphn9=B
z6IzGDHW}XYld_CM=}Se+n6_1=oA^jhXnJur`WYXcqr2MKY^uvVnFM)a&UInbZQPsE
zbQ0>jq@ROyDLgh~&S%rT(ybXP5X~2~XI1UxaK&2qRMX2s{m)n^60H}sm7?bhO&wO;
zL62MSOHD7$Vy5eKk!T;&YDD6y_M~ze?r^kT*Ro|&rMqHSnmLm(bKPggk)?(U`j6Ry
zUMaf1*9z~dmb{_W>i#Pgw;9^n&)E{V(k&k?7h7*=EsAWGg>TO{|Ifl>qT`m<rdr71
zT6jCF1=08mXnm%QzTkSl%F!C0U7~RY(&aNgHrlh<OQd&rfoLlspuIZyF<weSN0}T9
zZtw6yv8jw~QuH@%j?SU->=v3w@0WQ6fn{!^>+f-rr5jed&7(wYtR|hxL1ZzYr+zfM
zg~=gV3{McX7;KK8{ITp(O%7Fv&N$hqoI!4ku&V^GR$72}i`D)WmsEa!_tiQ;WI3eF
zTA~+2FBxF+9PYrTj9zv4Q_+F_<0~z&+mLG-N8VnsIs_YmIChdO5ltJ&HYISJX8Qi4
zfv*tlPm#?E+%hxIbGV_>MD&ty-&c!m9i&OY+gvVAkoae^;-xe@fHaoP(cV8FUYC=@
zlD-SjInQkR<}bWE$KDOt7BkVUaZjKc_kuiUJaZ3u1pdZ$$~$3_s81&H=@+eZDm0L8
zZ0Aa`<#p1kq=|{&`+5fhYV-p&EQ;^hgW(<Zt<fjMro(WwaU0!D-;kLH`_!AjW7(#1
z=pvB#HXzCbmX`=@MnK|GKy)mQeoj9gh}1A-GK#+Hj0Bh`R3?|ZbacL+3^3n;OiIyb
ze=oosQ<=<h(0f;JBEWnfGP#3(_B<6}o>rNh8tAtk-kAXNtjd(>o_R)|Uv^FcqQf(D
z7&pzP0$zR$nAFV0%aHk){~?Kqj&r0*cYMotODchM`_yctD3VNEDLPO7$(K7~ShLgM
z1cqbHTjx&zk#Q62uy=ukz5Q?-M&#W68q7v+X1W$Gir>gt12y;#cx=i9#xj2(dMRYy
z08H5qa_FwX%y3^ivP`tzBwN&pXwpYB%jej)0Nb(g{q{Bq-K)*fe^cq)kjr<h(!Z0?
z-Oe0+Mx`_Pk{+FTv(k4M$4G&?+NX|@!vz}>2_P~nmzx+Q76PIiyXgEaF7Thb3^3)V
z1ad~sum6?<qM7+l16jEh0WYfoQ+`K*&ZlUB9tAJld-wOI2ag;~_on+_NoQWTi<DWQ
ae0jhOhhk^udAlHbr8};DmM`D5cmD?r<=0vO

diff --git a/aaa_base.changes b/aaa_base.changes
index 32173c9..1be402e 100644
--- a/aaa_base.changes
+++ b/aaa_base.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri Sep 06 09:04:40 UTC 2024 - dmueller@suse.com
+
+- Update to version 84.87+git20240906.742565b:
+  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
+  * Avoid unnecessary /bin/bash dependency
+  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)
+
 -------------------------------------------------------------------
 Wed Aug 21 08:51:24 UTC 2024 - kukuk@suse.com
 
diff --git a/aaa_base.spec b/aaa_base.spec
index 4cc34fc..edb68b2 100644
--- a/aaa_base.spec
+++ b/aaa_base.spec
@@ -33,7 +33,7 @@ BuildRequires:  git-core
 %endif
 
 Name:           aaa_base
-Version:        84.87+git20240821.fbabe1d%{git_version}
+Version:        84.87+git20240906.742565b%{git_version}
 Release:        0
 Summary:        openSUSE Base Package
 License:        GPL-2.0-or-later
@@ -193,6 +193,22 @@ fi
 %postun extras
 %service_del_postun backup-rpmdb.service backup-rpmdb.timer backup-sysconfig.service backup-sysconfig.timer check-battery.service check-battery.timer
 
+%post yama-enable-ptrace
+# check if yama is active
+if [ -f /proc/sys/kernel/yama/ptrace_scope ]; then
+  # automatically disable ptrace protection upon install if systemd is not
+  # available. Usually system will automatically apply the setting
+  if ! type -p systemd-notify > /dev/null || ! systemd-notify --booted; then
+    # don't do it on transactional systems to avoid altering the state of the
+    # system before reboot
+    if [ -z "${TRANSACTIONAL_UPDATE}" ]; then
+      # can't use sysctl since that would cause us to require procps, which is
+      # bad for container size
+      echo 0 > /proc/sys/kernel/yama/ptrace_scope || :
+    fi
+  fi
+fi
+
 %files
 %license COPYING
 %ghost %config(noreplace) /etc/sysctl.conf