Accepting request 823552 from GNOME:Factory

- Call xargs -r0 instead of just xargs -r: guard against file names
  with whitespaces.

- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).

OBS-URL: https://build.opensuse.org/request/show/823552
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=133
This commit is contained in:
Dominique Leuenberger 2020-07-31 13:53:57 +00:00 committed by Git OBS Bridge
commit 3023e727c1
4 changed files with 16 additions and 3 deletions

View File

@ -650,7 +650,7 @@ getent passwd avahi-autoipd >/dev/null || \
%post autoipd
%{fillup_only -ns avahi autoipd}
# Change ownership of /var/lib/avahi-autoipd after upgrade from openSUSE <= 12.3 and SLE <= 11.
chown -R avahi-autoipd:avahi-autoipd %{_localstatedir}/lib/avahi-autoipd
find %{_localstatedir}/lib/avahi-autoipd -user avahi |xargs -r0 chown avahi-autoipd:avahi-autoipd
%post -n libavahi-client3 -p /sbin/ldconfig
%postun -n libavahi-client3 -p /sbin/ldconfig

View File

@ -650,7 +650,7 @@ getent passwd avahi-autoipd >/dev/null || \
%post autoipd
%{fillup_only -ns avahi autoipd}
# Change ownership of /var/lib/avahi-autoipd after upgrade from openSUSE <= 12.3 and SLE <= 11.
chown -R avahi-autoipd:avahi-autoipd %{_localstatedir}/lib/avahi-autoipd
find %{_localstatedir}/lib/avahi-autoipd -user avahi |xargs -r0 chown avahi-autoipd:avahi-autoipd
%post -n libavahi-client3 -p /sbin/ldconfig
%postun -n libavahi-client3 -p /sbin/ldconfig

View File

@ -1,3 +1,16 @@
-------------------------------------------------------------------
Thu Jul 30 10:06:28 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
- Call xargs -r0 instead of just xargs -r: guard against file names
with whitespaces.
-------------------------------------------------------------------
Tue Jul 21 21:39:05 UTC 2020 - Michael Gorse <mgorse@suse.com>
- When changing ownership of /var/lib/autoipd, only change
ownership of files owned by avahi, to mitigate against
possible exploits (bsc#1154063).
-------------------------------------------------------------------
Wed Apr 8 11:51:58 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>

View File

@ -645,7 +645,7 @@ getent passwd avahi-autoipd >/dev/null || \
%post autoipd
%{fillup_only -ns avahi autoipd}
# Change ownership of /var/lib/avahi-autoipd after upgrade from openSUSE <= 12.3 and SLE <= 11.
chown -R avahi-autoipd:avahi-autoipd %{_localstatedir}/lib/avahi-autoipd
find %{_localstatedir}/lib/avahi-autoipd -user avahi |xargs -r0 chown avahi-autoipd:avahi-autoipd
%post -n libavahi-client3 -p /sbin/ldconfig
%postun -n libavahi-client3 -p /sbin/ldconfig