Split off package emacs-games as well as use trusted members of group "games"

OBS-URL: https://build.opensuse.org/package/show/editors/emacs?expand=0&rev=405

emacs.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Jul 25 12:23:48 UTC 2024 - Dr. Werner Fink <werner@suse.de>
+
+- Use simple trusted members of the group games (boo#1228058) 
+
 -------------------------------------------------------------------
 Wed Jul 17 09:11:18 UTC 2024 - Dr. Werner Fink <werner@suse.de>
 

emacs.spec

@@ -30,6 +30,12 @@
 %bcond_with     tex4pdf
 %bcond_with     memmmap
 %bcond_with     checks
+#
+# Compare with AUDIT bug boo#1228058
+# With this setup only members of the group "games" can use
+# already existing score files below /var/games/emacs/
+#
+#
 %bcond_without  games
 %define gattr   00755
 
@@ -3526,8 +3532,8 @@ fi
 
 %if %{with games}
 %files games
-%attr(%{gattr},games,games) %{_libexecdir}/emacs/%{version}/%{_target_cpu}-suse-linux/update-game-score
 %if "%{gattr}" == "02755"
+%attr(%{gattr},root,games) %{_libexecdir}/emacs/%{version}/%{_target_cpu}-suse-linux/update-game-score
 %if 0%{?suse_version} >= 1699
 %attr(0755,root,root) %{_datadir}/permissions/permissions.d/
 %attr(0644,root,root) %{_datadir}/permissions/permissions.d/emacs-games
@@ -3536,10 +3542,12 @@ fi
 %config %attr(0644,root,root) %{_sysconfdir}/permissions.d/emacs-games
 %config %attr(0644,root,root) %{_sysconfdir}/permissions.d/emacs-games.paranoid
 %endif
+%else
+%attr(%{gattr},root,root) %{_libexecdir}/emacs/%{version}/%{_target_cpu}-suse-linux/update-game-score
 %endif
-%dir %attr(775,games,games) %{_localstatedir}/games/emacs
+%dir %attr(0750,root,games) %{_localstatedir}/games/emacs
-%attr(660,games,games) %{_localstatedir}/games/emacs/snake-scores
+%attr(0660,root,games) %{_localstatedir}/games/emacs/snake-scores
-%attr(660,games,games) %{_localstatedir}/games/emacs/tetris-scores
+%attr(0660,root,games) %{_localstatedir}/games/emacs/tetris-scores
 %endif
 
 %files       -n emacs-nox