pool/gvfs
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 547575 from home:dimstar:Factory

Browse Source 
- Re-enabele caps(cap_net_bind_service=+ep)for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.

OBS-URL: https://build.opensuse.org/request/show/547575
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gvfs?expand=0&rev=294
This commit is contained in:
Dominique Leuenberger 2017-12-02 17:37:09 +00:00 committed by Git OBS Bridge
parent c9206dd815
commit caf7fda6f9
2 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
gvfs.changes
View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Sat Dec 2 16:53:11 UTC 2017 - dimstar@opensuse.org
- Re-enabele caps(cap_net_bind_service=+ep)for gvfsd-nfs: the
permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
defined in the permissions package.
-------------------------------------------------------------------
Wed Nov 22 11:01:59 UTC 2017 - dimstar@opensuse.org

11
gvfs.spec
View File

@ -207,6 +207,12 @@ find %{buildroot}%{_libdir} -type f -name '*.la' -delete -print
%post fuse
%tmpfiles_create %{_libexecdir}/tmpfiles.d/gvfsd-fuse-tmpfiles.conf
%post backends
%set_permissions %{_libexecdir}/%{name}/gvfsd-nfs
%verifyscript backends
%verify_permissions -e %{_libexecdir}/%{name}/gvfsd-nfs
%postun
%glib2_gio_module_postun
@ -328,9 +334,8 @@ find %{buildroot}%{_libdir} -type f -name '*.la' -delete -print
%{_libexecdir}/%{name}/gvfsd-network
%{_datadir}/%{name}/mounts/network.mount
%if 0%{?is_opensuse}
# allow priv ports for mounting nfs . Otherwise the nfs-service requires insecure, not approved by sec, see boo#1065864
# %caps(cap_net_bind_service=+ep) %{_libexecdir}/%{name}/gvfsd-nfs
%{_libexecdir}/%{name}/gvfsd-nfs
# allow priv ports for mounting nfs . Otherwise the nfs-service requires insecure (boo#1065864)
%verify(not mode caps) %caps(cap_net_bind_service=+ep) %{_libexecdir}/%{name}/gvfsd-nfs
%{_datadir}/%{name}/mounts/nfs.mount
%endif
%if !0%{?is_opensuse}