Accepting request 1173700 from Base:System
- rename chkstat package to permctl to match the new binary names. Establish Provides/Obsoletes to keep dependencies and old package cleanup in working order, see: https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package - add BuildRequires for acl programs for tests to succeed. Still keep %check disabled, because the new ACL test fails without /etc/subuid, /etc/subgid setup. - Update to version 1699_20240513: * chkstat: has been renamed to permctl to better reflect its purpose. A symlink for backward compatibility will remain in place. * documentation: updated man pages * ACL support: permctl (formerly chkstat) now supports an additional `+acl` syntax to support assigning ACLs to files similar to the already existing support for file based capabilities. OBS-URL: https://build.opensuse.org/request/show/1173700 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=164
This commit is contained in:
commit
1defe2272d
@ -1,4 +1,4 @@
|
|||||||
<servicedata>
|
<servicedata>
|
||||||
<service name="tar_scm">
|
<service name="tar_scm">
|
||||||
<param name="url">https://github.com/openSUSE/permissions.git</param>
|
<param name="url">https://github.com/openSUSE/permissions.git</param>
|
||||||
<param name="changesrevision">ceaf1aa2a54de49f590ef80fd6a5fa68a16448a0</param></service></servicedata>
|
<param name="changesrevision">dcb85225fd8a677959a623e7b6c1a9639e62e336</param></service></servicedata>
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:b6085c6cf441ca8d8b402ed2e0ee9e5324d4131bf71bb93a5d2a355765860e47
|
|
||||||
size 47532
|
|
3
permissions-1699_20240513.tar.xz
Normal file
3
permissions-1699_20240513.tar.xz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:0b6aee7029ed1ba22026a149cc785a73e35bbaf3868e580c9dc77502f4a8d06c
|
||||||
|
size 55556
|
@ -1,3 +1,27 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon May 13 11:36:17 UTC 2024 - Matthias Gerstner <matthias.gerstner@suse.com>
|
||||||
|
|
||||||
|
- rename chkstat package to permctl to match the new binary names. Establish
|
||||||
|
Provides/Obsoletes to keep dependencies and old package cleanup in working
|
||||||
|
order, see:
|
||||||
|
|
||||||
|
https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
|
||||||
|
|
||||||
|
- add BuildRequires for acl programs for tests to succeed. Still keep %check
|
||||||
|
disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
|
||||||
|
setup.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon May 13 10:44:44 UTC 2024 - matthias.gerstner@suse.com
|
||||||
|
|
||||||
|
- Update to version 1699_20240513:
|
||||||
|
* chkstat: has been renamed to permctl to better reflect its purpose. A
|
||||||
|
symlink for backward compatibility will remain in place.
|
||||||
|
* documentation: updated man pages
|
||||||
|
* ACL support: permctl (formerly chkstat) now supports an additional `+acl`
|
||||||
|
syntax to support assigning ACLs to files similar to the already existing
|
||||||
|
support for file based capabilities.
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Mon Mar 11 12:14:10 UTC 2024 - matthias.gerstner@suse.com
|
Mon Mar 11 12:14:10 UTC 2024 - matthias.gerstner@suse.com
|
||||||
|
|
||||||
|
@ -17,7 +17,7 @@
|
|||||||
|
|
||||||
|
|
||||||
Name: permissions
|
Name: permissions
|
||||||
Version: 1699_20240307
|
Version: 1699_20240513
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: SUSE Linux Default Permissions
|
Summary: SUSE Linux Default Permissions
|
||||||
# Maintained in github by the security team.
|
# Maintained in github by the security team.
|
||||||
@ -27,6 +27,7 @@ URL: http://github.com/openSUSE/permissions
|
|||||||
Source: permissions-%{version}.tar.xz
|
Source: permissions-%{version}.tar.xz
|
||||||
Source2: permissions.rpmlintrc
|
Source2: permissions.rpmlintrc
|
||||||
BuildRequires: gcc-c++
|
BuildRequires: gcc-c++
|
||||||
|
BuildRequires: libacl-devel
|
||||||
BuildRequires: libcap-devel
|
BuildRequires: libcap-devel
|
||||||
BuildRequires: libcap-progs
|
BuildRequires: libcap-progs
|
||||||
BuildRequires: meson
|
BuildRequires: meson
|
||||||
@ -34,7 +35,10 @@ BuildRequires: python-rpm-macros
|
|||||||
BuildRequires: tclap
|
BuildRequires: tclap
|
||||||
# test suite
|
# test suite
|
||||||
BuildRequires: python3-base
|
BuildRequires: python3-base
|
||||||
Requires: chkstat
|
BuildRequires: acl
|
||||||
|
BuildRequires: system-user-bin
|
||||||
|
BuildRequires: system-user-nobody
|
||||||
|
Requires: permctl
|
||||||
Requires: permissions-config
|
Requires: permissions-config
|
||||||
Provides: aaa_base:%{_datadir}/permissions
|
Provides: aaa_base:%{_datadir}/permissions
|
||||||
|
|
||||||
@ -57,9 +61,9 @@ done
|
|||||||
|
|
||||||
%check
|
%check
|
||||||
# will fail on qemu with unshare: unshare failed: Invalid argument
|
# will fail on qemu with unshare: unshare failed: Invalid argument
|
||||||
%if !0%{?qemu_user_space_build}
|
#%%if !0%{?qemu_user_space_build}
|
||||||
tests/regtest.py --skip-build %_vpath_builddir >/dev/null
|
#%tests/regtest.py --skip-build %_vpath_builddir >/dev/null
|
||||||
%endif
|
#%%endif
|
||||||
|
|
||||||
%description
|
%description
|
||||||
File and directory permission settings depending on the local security
|
File and directory permission settings depending on the local security
|
||||||
@ -74,7 +78,7 @@ This package does not contain files, it just requires the necessary packages.
|
|||||||
Summary: SUSE Linux Default Permissions config files
|
Summary: SUSE Linux Default Permissions config files
|
||||||
Group: Productivity/Security
|
Group: Productivity/Security
|
||||||
Requires(post): %fillup_prereq
|
Requires(post): %fillup_prereq
|
||||||
Requires(post): chkstat
|
Requires(post): permctl
|
||||||
#!BuildIgnore: group(trusted)
|
#!BuildIgnore: group(trusted)
|
||||||
Requires(pre): group(trusted)
|
Requires(pre): group(trusted)
|
||||||
Obsoletes: permissions-doc <= %{version}
|
Obsoletes: permissions-doc <= %{version}
|
||||||
@ -99,29 +103,32 @@ The actual permissions configuration files, /usr/share/permissions/permission.*.
|
|||||||
%post config
|
%post config
|
||||||
%{fillup_only -n security}
|
%{fillup_only -n security}
|
||||||
# apply all potentially changed permissions
|
# apply all potentially changed permissions
|
||||||
%{_bindir}/chkstat --system || :
|
%{_bindir}/permctl --system || :
|
||||||
|
|
||||||
%package -n chkstat
|
%package -n permctl
|
||||||
Summary: SUSE Linux Default Permissions tool
|
Summary: SUSE Linux Default Permissions tool
|
||||||
Group: Productivity/Security
|
Group: Productivity/Security
|
||||||
|
Provides: chkstat = %version-%release
|
||||||
|
Obsoletes: chkstat < %version-%release
|
||||||
|
|
||||||
%description -n chkstat
|
%description -n permctl
|
||||||
Tool to check and set file permissions.
|
Tool to check and set file permissions.
|
||||||
|
|
||||||
%files -n chkstat
|
%files -n permctl
|
||||||
%{_bindir}/chkstat
|
%{_bindir}/chkstat
|
||||||
%{_mandir}/man8/chkstat.8%{ext_man}
|
%{_bindir}/permctl
|
||||||
|
%{_mandir}/man8/permctl.8%{ext_man}
|
||||||
|
|
||||||
%package -n permissions-zypp-plugin
|
%package -n permissions-zypp-plugin
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
Requires: permissions = %{version}
|
Requires: permissions = %{version}
|
||||||
Requires: python3-zypp-plugin
|
Requires: python3-zypp-plugin
|
||||||
Requires: libzypp(plugin:commit) = 1
|
Requires: libzypp(plugin:commit) = 1
|
||||||
Summary: A zypper commit plugin for calling chkstat
|
Summary: A zypper commit plugin for calling permctl
|
||||||
Group: Productivity/Security
|
Group: Productivity/Security
|
||||||
|
|
||||||
%description -n permissions-zypp-plugin
|
%description -n permissions-zypp-plugin
|
||||||
This package contains a plugin for zypper that calls `chkstat --system` after
|
This package contains a plugin for zypper that calls `permctl --system` after
|
||||||
new packages have been installed. This is helpful for maintaining custom
|
new packages have been installed. This is helpful for maintaining custom
|
||||||
entries in /etc/permissions.local.
|
entries in /etc/permissions.local.
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user