- mainloop: Fixes use after free in process monitor code

- lrmd: Cancel recurring operations before stop action is executed
- lrmd: Merge duplicate recurring monitor operations
- services: Do not allow duplicate recurring op entries
- crmd: Ack pending operations that were cancelled due to rsc deletion
- crm_mon: Add failures to --as-xml output
- cib: Check if on-disk cib is corrupt in the separate on_disk_cib_corrupt() rather than in validate_on_disk_cib() (bnc#866618)
- crmd: Do not start timers for already completed operations
- acl: Read access must be explicitly granted
- xml: Better move detection logic for xml nodes
- cib: Do not disable cib disk writes if on-disk cib is corrupt (bnc#866618)
- xml: Correctly calculate the adjusted offset of xml elements
- crm_diff: Mirror how the cib operates for better testing
- cib: Ingore patch failures if we already have their contents
- cib: Prevent use-after-free when cleaning up after query operations
- xml: Mark the parents of a partial replace as dirty
- xml: Correctly enforce ACLs after a replace operation
- cib: Do not try to use an empty value for CIB_shadow
- crm_resource: Gracefully handle -EACCESS when querying the cib
- xml: Correctly observe ACLs when creating filtered copies of xml documents
- xml: Only test write permissions for attributes that are being changed
- xml: Always allow new scaffolding - node with no attributes or only an id field
- cib: Memory leaks caused by ACLs returning filtered copies
- xml: Set flags to indicate when updates were rejected by an ACL
- cib: Respect the CIB_user environment variable for ACLs
- xml: Unpack and apply ACLs when tracking changes
- cib: Implement CIB_file-mode ACLs for testing
- remote: Enable migration support for baremetal connection resources by default
- cibadmin: Allow priviliged clients to perform tasks as unpriviliged users
- cibadmin: Remove dangerous commands that exposed unnecessary implementation internal details

OBS-URL: https://build.opensuse.org/package/show/network:ha-clustering:Factory/pacemaker?expand=0&rev=115

_service

@@ -11,7 +11,7 @@
     <param name="version">1.1.11</param>
 -->
     <param name="versionformat">1.1.11+git%cd.%h</param>
-    <param name="revision">ca8234daf2bbb2d0fd2fb47cdbb6667f892081bb</param>
+    <param name="revision">38c5972cd284ea6627b3309b619dad4d27442ab0</param>
   </service>
 
   <service name="recompress" mode="disabled">

pacemaker-1.1.11+git20140303.ca8234d.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:236dbbd84ac635a1339439f65f4e92c38762c9fb6b66f26c9a4569208ba8e790
-size 9256516

pacemaker-1.1.11+git20140312.38c5972.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fa8acee4eb22ba5ca6a8159284f89634c09db83c38d4fb6d296a58c6c1e59214
+size 9271047

pacemaker.changes

@@ -1,3 +1,50 @@
+-------------------------------------------------------------------
+Thu Mar 13 09:38:46 UTC 2014 - ygao@suse.com
+
+- mainloop: Fixes use after free in process monitor code
+- lrmd: Cancel recurring operations before stop action is executed
+- lrmd: Merge duplicate recurring monitor operations
+- services: Do not allow duplicate recurring op entries
+- crmd: Ack pending operations that were cancelled due to rsc deletion
+- crm_mon: Add failures to --as-xml output
+- cib: Check if on-disk cib is corrupt in the separate on_disk_cib_corrupt() rather than in validate_on_disk_cib() (bnc#866618)
+- crmd: Do not start timers for already completed operations
+- acl: Read access must be explicitly granted
+- xml: Better move detection logic for xml nodes
+- cib: Do not disable cib disk writes if on-disk cib is corrupt (bnc#866618)
+- xml: Correctly calculate the adjusted offset of xml elements
+- crm_diff: Mirror how the cib operates for better testing
+- cib: Ingore patch failures if we already have their contents
+- cib: Prevent use-after-free when cleaning up after query operations
+- xml: Mark the parents of a partial replace as dirty
+- xml: Correctly enforce ACLs after a replace operation
+- cib: Do not try to use an empty value for CIB_shadow
+- crm_resource: Gracefully handle -EACCESS when querying the cib
+- xml: Correctly observe ACLs when creating filtered copies of xml documents
+- xml: Only test write permissions for attributes that are being changed
+- xml: Always allow new scaffolding - node with no attributes or only an id field
+- cib: Memory leaks caused by ACLs returning filtered copies
+- xml: Set flags to indicate when updates were rejected by an ACL
+- cib: Respect the CIB_user environment variable for ACLs
+- xml: Unpack and apply ACLs when tracking changes
+- cib: Implement CIB_file-mode ACLs for testing
+- remote: Enable migration support for baremetal connection resources by default
+- cibadmin: Allow priviliged clients to perform tasks as unpriviliged users
+- cibadmin: Remove dangerous commands that exposed unnecessary implementation internal details
+- cibadmin: Purge legacy command options deprecated since 2008 to make the short-forms available for new options
+- cib: Include a request with file-mode cib actions for the acl code to interrogate
+- cib: Switch over completely to the new ACL code
+- xml: Allow new objects to be created provided they subseqently match a configured ACL
+- cib: Use the new acl filtering functionality
+- xml: Support the creation of filtered copies based on ACLs
+- xml: Convert all ACLs to xpaths during unpack
+- xml: Add ACL flags for xpath selectors when tracking is enabled
+- cib: ACL improvements
+- cib: Simplify ACL handling for read-only cib queries
+- cib: Check ACLs prior to making the update instead of parsing the diff afterwards
+- cib: Default ACL support to on
+- Upstream version cs: 38c5972cd284ea6627b3309b619dad4d27442ab0
+
 -------------------------------------------------------------------
 Mon Mar  3 11:42:04 UTC 2014 - ygao@suse.com
 

pacemaker.spec

@@ -95,7 +95,7 @@ Name:           pacemaker
 Summary:        Scalable High-Availability cluster resource manager
 License:        GPL-2.0+ and LGPL-2.1+
 Group:          Productivity/Clustering/HA
-Version:        1.1.11+git20140303.ca8234d
+Version:        1.1.11+git20140312.38c5972
 Release:        0
 #Release:        %{pcmk_release}%{?dist}
 Url:            http://www.clusterlabs.org