Accepting request 997350 from GNOME:Next

- Update to version 1.0.1+git.20220816:
  * Drop call to appstreamcli refresh
  * Added hardening to systemd service (bsc#1181400)
  * Typo fix for command help
- Drop harden_appstream-sync-cache.service.patch: fixed upstream.
- Drop Appstream recommends: no longer needed, as we no longer call
  appstreamcli.

OBS-URL: https://build.opensuse.org/request/show/997350
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/libzypp-plugin-appdata?expand=0&rev=56
This commit is contained in:
Dominique Leuenberger 2022-08-16 14:26:16 +00:00 committed by Git OBS Bridge
parent 0750c065b5
commit 105fbd9ef7
6 changed files with 19 additions and 36 deletions

View File

@ -1,4 +1,4 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/DimStar77/openSUSE-appstream.git</param>
<param name="changesrevision">8708ff5b3330e28eefb228a78d719871ff5bd6da</param></service></servicedata>
<param name="changesrevision">39008e0c9df9f404666d7979e4b166840be6c436</param></service></servicedata>

View File

@ -1,24 +0,0 @@
Index: openSUSE-appstream-1.0.1+git.20180426/appstream-sync-cache.service
===================================================================
--- openSUSE-appstream-1.0.1+git.20180426.orig/appstream-sync-cache.service
+++ openSUSE-appstream-1.0.1+git.20180426/appstream-sync-cache.service
@@ -4,6 +4,19 @@ After=local-fs.target
ConditionDirectoryNotEmpty=!/var/cache/app-info/xmls
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
ExecStart=/usr/bin/zypper appstream-cache

View File

@ -1,3 +1,14 @@
-------------------------------------------------------------------
Tue Aug 16 12:19:30 UTC 2022 - dimstar@opensuse.org
- Update to version 1.0.1+git.20220816:
* Drop call to appstreamcli refresh
* Added hardening to systemd service (bsc#1181400)
* Typo fix for command help
- Drop harden_appstream-sync-cache.service.patch: fixed upstream.
- Drop Appstream recommends: no longer needed, as we no longer call
appstreamcli.
-------------------------------------------------------------------
Tue Oct 5 09:12:00 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

View File

@ -1,7 +1,7 @@
#
# spec file for package libzypp-plugin-appdata
#
# Copyright (c) 2020 SUSE LLC
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -17,17 +17,14 @@
Name: libzypp-plugin-appdata
Version: 1.0.1+git.20180426
Version: 1.0.1+git.20220816
Release: 0
Summary: libzypp extension to handle AppStream metadata
License: MIT AND CC0-1.0
License: CC0-1.0 AND MIT
Group: System/Libraries
URL: https://wiki.gnome.org/Design/Apps/Software
Source0: openSUSE-appstream-%{version}.tar.xz
Source99: libzypp-plugin-appdata-rpmlintrc
Patch0: harden_appstream-sync-cache.service.patch
# appstreamcli is provided by the AppStream package. Let's pull it in when available, but ignore its absence
Recommends: AppStream
# appstream-glib >= 0.3.6 is the first to correctly to appstream-util uninstall in /var/cache
Requires: appstream-glib >= 0.3.6
# appdata hook was introduced in libzypp 14.29.4
@ -59,8 +56,7 @@ Group: Metapackages
This package contains extra appstream metadata to be used by appstream-builder
%prep
%setup -q -n openSUSE-appstream-%{version}
%patch0 -p1
%autosetup -n openSUSE-appstream-%{version}
%build

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:5bbd929af050d0106d1cb6ba6e26050573d7d198721afdc087a0c47f587352ed
size 91312

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e31e8cea0f3f592bfe150dfa52d80ac2ef4af7d369df4c0416889c08c0bf6b1c
size 91504