diff --git a/_servicedata b/_servicedata index e0b975c..cb0d2ba 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/openSUSE/permissions.git - ceaf1aa2a54de49f590ef80fd6a5fa68a16448a0 \ No newline at end of file + dcb85225fd8a677959a623e7b6c1a9639e62e336 \ No newline at end of file diff --git a/permissions-1699_20240307.tar.xz b/permissions-1699_20240307.tar.xz deleted file mode 100644 index 26c9a09..0000000 --- a/permissions-1699_20240307.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b6085c6cf441ca8d8b402ed2e0ee9e5324d4131bf71bb93a5d2a355765860e47 -size 47532 diff --git a/permissions-1699_20240513.tar.xz b/permissions-1699_20240513.tar.xz new file mode 100644 index 0000000..5673dc4 --- /dev/null +++ b/permissions-1699_20240513.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0b6aee7029ed1ba22026a149cc785a73e35bbaf3868e580c9dc77502f4a8d06c +size 55556 diff --git a/permissions.changes b/permissions.changes index 8371318..8a15ea4 100644 --- a/permissions.changes +++ b/permissions.changes @@ -1,3 +1,27 @@ +------------------------------------------------------------------- +Mon May 13 11:36:17 UTC 2024 - Matthias Gerstner + +- rename chkstat package to permctl to match the new binary names. Establish + Provides/Obsoletes to keep dependencies and old package cleanup in working + order, see: + + https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package + +- add BuildRequires for acl programs for tests to succeed. Still keep %check + disabled, because the new ACL test fails without /etc/subuid, /etc/subgid + setup. + +------------------------------------------------------------------- +Mon May 13 10:44:44 UTC 2024 - matthias.gerstner@suse.com + +- Update to version 1699_20240513: + * chkstat: has been renamed to permctl to better reflect its purpose. A + symlink for backward compatibility will remain in place. + * documentation: updated man pages + * ACL support: permctl (formerly chkstat) now supports an additional `+acl` + syntax to support assigning ACLs to files similar to the already existing + support for file based capabilities. + ------------------------------------------------------------------- Mon Mar 11 12:14:10 UTC 2024 - matthias.gerstner@suse.com diff --git a/permissions.spec b/permissions.spec index 23d6754..bf3a197 100644 --- a/permissions.spec +++ b/permissions.spec @@ -17,7 +17,7 @@ Name: permissions -Version: 1699_20240307 +Version: 1699_20240513 Release: 0 Summary: SUSE Linux Default Permissions # Maintained in github by the security team. @@ -27,6 +27,7 @@ URL: http://github.com/openSUSE/permissions Source: permissions-%{version}.tar.xz Source2: permissions.rpmlintrc BuildRequires: gcc-c++ +BuildRequires: libacl-devel BuildRequires: libcap-devel BuildRequires: libcap-progs BuildRequires: meson @@ -34,7 +35,10 @@ BuildRequires: python-rpm-macros BuildRequires: tclap # test suite BuildRequires: python3-base -Requires: chkstat +BuildRequires: acl +BuildRequires: system-user-bin +BuildRequires: system-user-nobody +Requires: permctl Requires: permissions-config Provides: aaa_base:%{_datadir}/permissions @@ -57,9 +61,9 @@ done %check # will fail on qemu with unshare: unshare failed: Invalid argument -%if !0%{?qemu_user_space_build} -tests/regtest.py --skip-build %_vpath_builddir >/dev/null -%endif +#%%if !0%{?qemu_user_space_build} +#%tests/regtest.py --skip-build %_vpath_builddir >/dev/null +#%%endif %description File and directory permission settings depending on the local security @@ -74,7 +78,7 @@ This package does not contain files, it just requires the necessary packages. Summary: SUSE Linux Default Permissions config files Group: Productivity/Security Requires(post): %fillup_prereq -Requires(post): chkstat +Requires(post): permctl #!BuildIgnore: group(trusted) Requires(pre): group(trusted) Obsoletes: permissions-doc <= %{version} @@ -99,29 +103,32 @@ The actual permissions configuration files, /usr/share/permissions/permission.*. %post config %{fillup_only -n security} # apply all potentially changed permissions -%{_bindir}/chkstat --system || : +%{_bindir}/permctl --system || : -%package -n chkstat +%package -n permctl Summary: SUSE Linux Default Permissions tool Group: Productivity/Security +Provides: chkstat = %version-%release +Obsoletes: chkstat < %version-%release -%description -n chkstat +%description -n permctl Tool to check and set file permissions. -%files -n chkstat +%files -n permctl %{_bindir}/chkstat -%{_mandir}/man8/chkstat.8%{ext_man} +%{_bindir}/permctl +%{_mandir}/man8/permctl.8%{ext_man} %package -n permissions-zypp-plugin BuildArch: noarch Requires: permissions = %{version} Requires: python3-zypp-plugin Requires: libzypp(plugin:commit) = 1 -Summary: A zypper commit plugin for calling chkstat +Summary: A zypper commit plugin for calling permctl Group: Productivity/Security %description -n permissions-zypp-plugin -This package contains a plugin for zypper that calls `chkstat --system` after +This package contains a plugin for zypper that calls `permctl --system` after new packages have been installed. This is helpful for maintaining custom entries in /etc/permissions.local.