Accepting request 892136 from home:dirkmueller:Factory

- temporarily mark appdata and applications 0755 again until fallout is fixed (bsc#1184786)

- make restricteddir and datadir readonly (bsc#1184786)

- also make includedir, mandir, licensedir readonly (bsc#1184786)

- also fix /var/lib/empty to be readonly (bsc#1184786)
  runpath-to-writeable-directory warning (bsc#1184786)

OBS-URL: https://build.opensuse.org/request/show/892136
OBS-URL: https://build.opensuse.org/package/show/Base:System/filesystem?expand=0&rev=201

directory.list

@@ -47,16 +47,16 @@
 0700 root root /usr/etc/skel/.local
 0755 root root /usr/etc/xdg
 0755 root root /usr/etc/xdg/autostart
-0755 root root /usr/include
+0555 root root /usr/include
 0755 root root /usr/include/X11
 0555 root root /usr/lib
 0755 root root /usr/libexec
 0755 root root /usr/lib/X11
 0755 root root /usr/lib/modprobe.d
-0755 root root /usr/lib/pkgconfig
+0555 root root /usr/lib/pkgconfig
 0755 root root /usr/lib/browser-plugins
-0755 root root /usr/lib/restricted
+0555 root root /usr/lib/restricted
-0755 root root /usr/lib/restricted/bin
+0555 root root /usr/lib/restricted/bin
 0755 root root /usr/lib/sysctl.d
 0755 root root /usr/lib/systemd
 0755 root root /usr/lib/systemd/system
@@ -87,48 +87,51 @@
 0755 root root /usr/local/share
 0755 root root /usr/local/src
 0555 root root /usr/sbin
-0755 root root /usr/share
+0555 root root /usr/share
+# TODO make 0555
 0755 root root /usr/share/appdata
+# TODO make 0555
 0755 root root /usr/share/applications
-0755 root root /usr/share/dict
+0555 root root /usr/share/dict
-0755 root root /usr/share/doc
+0555 root root /usr/share/doc
-0755 root root /usr/share/doc/packages
+0555 root root /usr/share/doc/packages
-0755 root root /usr/share/fillup-templates
+0555 root root /usr/share/fillup-templates
-0755 root root /usr/share/help
+0555 root root /usr/share/help
-0755 root root /usr/share/help/C
+0555 root root /usr/share/help/C
-0755 root root /usr/share/locale
+0555 root root /usr/share/locale
-0755 root root /usr/share/licenses
+0555 root root /usr/share/licenses
-0755 root root /usr/share/man
+0555 root root /usr/share/man
-0755 root root /usr/share/man/man1
+0555 root root /usr/share/man/man1
-0755 root root /usr/share/man/man2
+0555 root root /usr/share/man/man2
-0755 root root /usr/share/man/man3
+0555 root root /usr/share/man/man3
-0755 root root /usr/share/man/man4
+0555 root root /usr/share/man/man4
-0755 root root /usr/share/man/man5
+0555 root root /usr/share/man/man5
-0755 root root /usr/share/man/man6
+0555 root root /usr/share/man/man6
-0755 root root /usr/share/man/man7
+0555 root root /usr/share/man/man7
-0755 root root /usr/share/man/man8
+0555 root root /usr/share/man/man8
-0755 root root /usr/share/man/man9
+0555 root root /usr/share/man/man9
-0755 root root /usr/share/man/mann
+0555 root root /usr/share/man/mann
+# TODO make 0555
 0755 root root /usr/share/metainfo
-0755 root root /usr/share/mime
+0555 root root /usr/share/mime
-0755 root root /usr/share/mime/packages
+0555 root root /usr/share/mime/packages
-0755 root root /usr/share/misc
+0555 root root /usr/share/misc
-0755 root root /usr/share/icons
+0555 root root /usr/share/icons
-0755 root root /usr/share/info
+0555 root root /usr/share/info
-0755 root root /usr/share/java
+0555 root root /usr/share/java
-0755 root root /usr/share/fonts
+0555 root root /usr/share/fonts
-0755 root root /usr/share/games
+0555 root root /usr/share/games
-0755 root root /usr/share/pixmaps
+0555 root root /usr/share/pixmaps
-0755 root root /usr/share/pkgconfig
+0555 root root /usr/share/pkgconfig
-0755 root root /usr/share/sgml
+0555 root root /usr/share/sgml
-0755 root root /usr/share/sgml/docbook
+0555 root root /usr/share/sgml/docbook
-0755 root root /usr/share/sounds
+0555 root root /usr/share/sounds
-0755 root root /usr/share/omc
+0555 root root /usr/share/omc
-0755 root root /usr/share/omc/svcinfo.d
+0555 root root /usr/share/omc/svcinfo.d
-0755 root root /usr/share/themes
+0555 root root /usr/share/themes
-0755 root root /usr/share/xml
+0555 root root /usr/share/xml
-0755 root root /usr/share/xml/docbook
+0555 root root /usr/share/xml/docbook
-0755 root root /usr/share/xsessions
+0555 root root /usr/share/xsessions
 0755 root root /usr/src
 0755 root root /usr/src/packages
 0755 root root /var

directory.list64

@@ -1,4 +1,4 @@
 0555 root root /usr/lib64
-0755 root root /usr/lib64/pkgconfig
+0555 root root /usr/lib64/pkgconfig
 0755 root root /usr/lib64/browser-plugins
 0755 root root /usr/local/lib64

filesystem.changes

@@ -1,13 +1,28 @@
+-------------------------------------------------------------------
+Mon May 10 13:47:46 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- temporarily mark appdata and applications 0755 again until fallout is fixed (bsc#1184786)
+
+-------------------------------------------------------------------
+Fri Apr 16 09:03:40 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- make restricteddir and datadir readonly (bsc#1184786)
+
+-------------------------------------------------------------------
+Mon Mar 29 21:02:04 UTC 2021 - Dirk Müller <dmueller@suse.com>
+
+- also make includedir, mandir, licensedir readonly (bsc#1184786)
+
 -------------------------------------------------------------------
 Fri Mar 26 11:32:25 UTC 2021 - Dirk Müller <dmueller@suse.com>
 
-- also fix /var/lib/empty to be readonly 
+- also fix /var/lib/empty to be readonly (bsc#1184786)
 
 -------------------------------------------------------------------
 Thu Mar 25 19:56:45 UTC 2021 - Dirk Müller <dmueller@suse.com>
 
 - make bindir/ _lib and _libdir readonly (mode 0555) to avoid
-  runpath-to-writeable-directory warning
+  runpath-to-writeable-directory warning (bsc#1184786)
 
 -------------------------------------------------------------------
 Wed Feb 10 18:34:25 UTC 2021 - Antoine Belvire <antoine.belvire@opensuse.org>