pool/permissions
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1173700 from Base:System

Browse Source 
- rename chkstat package to permctl to match the new binary names. Establish
  Provides/Obsoletes to keep dependencies and old package cleanup in working
  order, see:
  https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
  disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
  setup.

- Update to version 1699_20240513:
  * chkstat: has been renamed to permctl to better reflect its purpose. A
    symlink for backward compatibility will remain in place.
  * documentation: updated man pages
  * ACL support: permctl (formerly chkstat) now supports an additional `+acl`
    syntax to support assigning ACLs to files similar to the already existing
    support for file based capabilities.

OBS-URL: https://build.opensuse.org/request/show/1173700
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=164
This commit is contained in:
Ana Guerrero 2024-05-17 18:03:42 +00:00 committed by Git OBS Bridge
commit 1defe2272d
5 changed files with 48 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
_servicedata
View File

@ -1,4 +1,4 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/openSUSE/permissions.git</param>
<param name="changesrevision">ceaf1aa2a54de49f590ef80fd6a5fa68a16448a0</param></service></servicedata>
<param name="changesrevision">dcb85225fd8a677959a623e7b6c1a9639e62e336</param></service></servicedata>

3
permissions-1699_20240307.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:b6085c6cf441ca8d8b402ed2e0ee9e5324d4131bf71bb93a5d2a355765860e47
size 47532

3
permissions-1699_20240513.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:0b6aee7029ed1ba22026a149cc785a73e35bbaf3868e580c9dc77502f4a8d06c
size 55556

24
permissions.changes
View File

@ -1,3 +1,27 @@
-------------------------------------------------------------------
Mon May 13 11:36:17 UTC 2024 - Matthias Gerstner <matthias.gerstner@suse.com>
- rename chkstat package to permctl to match the new binary names. Establish
Provides/Obsoletes to keep dependencies and old package cleanup in working
order, see:
https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
setup.
-------------------------------------------------------------------
Mon May 13 10:44:44 UTC 2024 - matthias.gerstner@suse.com
- Update to version 1699_20240513:
* chkstat: has been renamed to permctl to better reflect its purpose. A
symlink for backward compatibility will remain in place.
* documentation: updated man pages
* ACL support: permctl (formerly chkstat) now supports an additional `+acl`
syntax to support assigning ACLs to files similar to the already existing
support for file based capabilities.
-------------------------------------------------------------------
Mon Mar 11 12:14:10 UTC 2024 - matthias.gerstner@suse.com

33
permissions.spec
View File

@ -17,7 +17,7 @@
Name: permissions
Version: 1699_20240307
Version: 1699_20240513
Release: 0
Summary: SUSE Linux Default Permissions
# Maintained in github by the security team.
@ -27,6 +27,7 @@ URL: http://github.com/openSUSE/permissions
Source: permissions-%{version}.tar.xz
Source2: permissions.rpmlintrc
BuildRequires: gcc-c++
BuildRequires: libacl-devel
BuildRequires: libcap-devel
BuildRequires: libcap-progs
BuildRequires: meson
@ -34,7 +35,10 @@ BuildRequires: python-rpm-macros
BuildRequires: tclap
# test suite
BuildRequires: python3-base
Requires: chkstat
BuildRequires: acl
BuildRequires: system-user-bin
BuildRequires: system-user-nobody
Requires: permctl
Requires: permissions-config
Provides: aaa_base:%{_datadir}/permissions
@ -57,9 +61,9 @@ done
%check
# will fail on qemu with unshare: unshare failed: Invalid argument
%if !0%{?qemu_user_space_build}
tests/regtest.py --skip-build %_vpath_builddir >/dev/null
%endif
#%%if !0%{?qemu_user_space_build}
#%tests/regtest.py --skip-build %_vpath_builddir >/dev/null
#%%endif
%description
File and directory permission settings depending on the local security
@ -74,7 +78,7 @@ This package does not contain files, it just requires the necessary packages.
Summary: SUSE Linux Default Permissions config files
Group: Productivity/Security
Requires(post): %fillup_prereq
Requires(post): chkstat
Requires(post): permctl
#!BuildIgnore: group(trusted)
Requires(pre): group(trusted)
Obsoletes: permissions-doc <= %{version}
@ -99,29 +103,32 @@ The actual permissions configuration files, /usr/share/permissions/permission.*.
%post config
%{fillup_only -n security}
# apply all potentially changed permissions
%{_bindir}/chkstat --system || :
%{_bindir}/permctl --system || :
%package -n chkstat
%package -n permctl
Summary: SUSE Linux Default Permissions tool
Group: Productivity/Security
Provides: chkstat = %version-%release
Obsoletes: chkstat < %version-%release
%description -n chkstat
%description -n permctl
Tool to check and set file permissions.
%files -n chkstat
%files -n permctl
%{_bindir}/chkstat
%{_mandir}/man8/chkstat.8%{ext_man}
%{_bindir}/permctl
%{_mandir}/man8/permctl.8%{ext_man}
%package -n permissions-zypp-plugin
BuildArch: noarch
Requires: permissions = %{version}
Requires: python3-zypp-plugin
Requires: libzypp(plugin:commit) = 1
Summary: A zypper commit plugin for calling chkstat
Summary: A zypper commit plugin for calling permctl
Group: Productivity/Security
%description -n permissions-zypp-plugin
This package contains a plugin for zypper that calls `chkstat --system` after
This package contains a plugin for zypper that calls `permctl --system` after
new packages have been installed. This is helpful for maintaining custom
entries in /etc/permissions.local.