pool/munge
SHA256
17
0
Fork 1
Code Issues Pull Requests Activity

Compare commits

base: pool:leap-16.0
Branches Tags
pool:factory pool:leap-16.0 pool:leap-16.1
..
compare: pool:factory
Branches Tags
pool:factory pool:leap-16.0 pool:leap-16.1

4 Commits
leap-16.0 ... factory

Author SHA256 Message Date
Ana Guerrero
d2b441cb4a Accepting request 1302706 from network:cluster 
- Improved match (forwarded request 1302322 from eeich)

OBS-URL: https://build.opensuse.org/request/show/1302706
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/munge?expand=0&rev=22
 2025-09-04 15:59:42 +00:00
Egbert Eich
4c001e0643 - Improved match 
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=55
 2025-09-04 09:35:33 +00:00
Egbert Eich
debb55d311 Accepting request 1302263 from home:eeich:branches:network:cluster 
- Improved test in %post

OBS-URL: https://build.opensuse.org/request/show/1302263
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=54
 2025-09-01 21:14:20 +00:00
Egbert Eich
65f72ee650 Accepting request 1302253 from home:eeich:branches:network:cluster 
- Make logrotate work on munge log as user munge. This prevents
  a local privilege escalation (bsc#1246088).

OBS-URL: https://build.opensuse.org/request/show/1302253
OBS-URL: https://build.opensuse.org/package/show/network:cluster/munge?expand=0&rev=53
 2025-09-01 19:07:46 +00:00
2 changed files with 11 additions and 1 deletions
Expand all files Collapse all files

6
munge.changes
View File

@@ -1,3 +1,9 @@
-------------------------------------------------------------------
Fri Aug 29 15:27:03 UTC 2025 - Egbert Eich <eich@suse.com>
- Make logrotate work on munge log as user munge. This prevents
a local privilege escalation (bsc#1246088).
-------------------------------------------------------------------
Sun May 26 11:03:40 UTC 2024 - jun wang <jgwang@suse.com>

6
munge.spec
View File

@@ -1,7 +1,7 @@
#
# spec file for package munge
#
# Copyright (c) 2025 SUSE LLC
# Copyright (c) 2025 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -134,6 +134,7 @@ rm -f %{buildroot}%{_libdir}/*.a
mkdir -p %{buildroot}%{_datarootdir}/licenses
install -m 0755 -d %{buildroot}%{_fillupdir}
sed -i -e "/missingok/a\ \ \ \ su munge munge" %{buildroot}/%{_sysconfdir}/logrotate.d/munge
# We don't want systemd file on SLE 11
%if 0%{!?have_systemd:1}
test -d %{buildroot}%{_prefix}/lib/systemd && \
@@ -215,6 +216,9 @@ then
%{fixperm %{_localstatedir}/log/munge/munged.log}
%{fixperm %munge_run}
fi
# This matches ' su foo bar' as well as ' su=foo bar
grep -qE "^ *su" %{_sysconfdir}/logrotate.d/munge || \
sed -i -e "/missingok/a\ \ \ \ su munge munge" %{_sysconfdir}/logrotate.d/munge
unset tmpfile
tmpdir=$(mktemp -d /tmp/tmpdir-XXXXXXXXX)
if [ -e %{_sysconfdir}/munge/munge.key ]; then