pool/gvfs
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is

Browse Source 
not acceptable from a security PoV, see boo#1065864#c6).

OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gvfs?expand=0&rev=292
This commit is contained in:
Dominique Leuenberger 2017-11-22 11:03:03 +00:00 committed by Git OBS Bridge
parent 4370ea0b21
commit c9206dd815
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
gvfs.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Nov 22 11:01:59 UTC 2017 - dimstar@opensuse.org
- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
not acceptable from a security PoV, see boo#1065864#c6).
-------------------------------------------------------------------
Mon Nov 20 19:41:56 UTC 2017 - mgorse@suse.com

5
gvfs.spec
View File

@ -328,8 +328,9 @@ find %{buildroot}%{_libdir} -type f -name '*.la' -delete -print
%{_libexecdir}/%{name}/gvfsd-network
%{_datadir}/%{name}/mounts/network.mount
%if 0%{?is_opensuse}
# allow priv ports for mounting nfs . Otherwise the nfs-service requires insecure
%caps(cap_net_bind_service=+ep) %{_libexecdir}/%{name}/gvfsd-nfs
# allow priv ports for mounting nfs . Otherwise the nfs-service requires insecure, not approved by sec, see boo#1065864
# %caps(cap_net_bind_service=+ep) %{_libexecdir}/%{name}/gvfsd-nfs
%{_libexecdir}/%{name}/gvfsd-nfs
%{_datadir}/%{name}/mounts/nfs.mount
%endif
%if !0%{?is_opensuse}