- Declare a BuildConflict instead of a build-dependency.
- Don't BuildRequire rpmlint, but rpmlint-mini, otherwise we re-introduce
the build cycles that rpmlint-mini is supposed to break.
- BuildRequire a recent enough rpmlint to avoid rpmlint choking on the new
📦 coupling syntax.
- Update to version 1699_20260217:
* tests: catch errors in parsing package lines with space after comma
* ProfileParser: increase robustness in package line parsing
* TestBase: _checkForASANErrors: drop extra errors increment
* profiles: introduce package coupling for existing entries
* profiles: drop "disable set*id bits" entries
* profiles: remove useless /etc/crontab entry
* etc/permissions: add 📦 coupling
* tests: add coverage for package coupling syntax
* TestBase: fix some typos
* EntryProcessor::matchingPkg(): catch "not owned by any package" case
* EntryProcessor::matchingPkg(): take multi-ownership into account
* tests: drop m_ prefix on member variables
* tests: fix flake8 findings
* man pages: document new 📦 syntax; general improvements
* meson: switch to `install_emptydir()` for permissions.d directory
* EntryProcessor: enforce package ownership limitation
* ProfileParser: support parsing of 📦 list specifications
* profiles: remove extensive documentation from files in favor of man page
* profiles: harmonize, simplify and update copyright statement
- Add Provides permissions-doc to config sub-package as is suggested by
rpmlint.
- properly escape % in comments in %check section
OBS-URL: https://build.opensuse.org/request/show/1334645
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=172
📦 coupling syntax.
- Update to version 1699_20260217:
* tests: catch errors in parsing package lines with space after comma
* ProfileParser: increase robustness in package line parsing
* TestBase: _checkForASANErrors: drop extra errors increment
* profiles: introduce package coupling for existing entries
* profiles: drop "disable set*id bits" entries
* profiles: remove useless /etc/crontab entry
* etc/permissions: add 📦 coupling
* tests: add coverage for package coupling syntax
* TestBase: fix some typos
* EntryProcessor::matchingPkg(): catch "not owned by any package" case
* EntryProcessor::matchingPkg(): take multi-ownership into account
* tests: drop m_ prefix on member variables
* tests: fix flake8 findings
* man pages: document new 📦 syntax; general improvements
* meson: switch to `install_emptydir()` for permissions.d directory
* EntryProcessor: enforce package ownership limitation
* ProfileParser: support parsing of 📦 list specifications
* profiles: remove extensive documentation from files in favor of man page
* profiles: harmonize, simplify and update copyright statement
- Add Provides permissions-doc to config sub-package as is suggested by
rpmlint.
- properly escape % in comments in %check section
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=361
- rename chkstat package to permctl to match the new binary names. Establish
Provides/Obsoletes to keep dependencies and old package cleanup in working
order, see:
https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
setup.
- Update to version 1699_20240513:
* chkstat: has been renamed to permctl to better reflect its purpose. A
symlink for backward compatibility will remain in place.
* documentation: updated man pages
* ACL support: permctl (formerly chkstat) now supports an additional `+acl`
syntax to support assigning ACLs to files similar to the already existing
support for file based capabilities.
OBS-URL: https://build.opensuse.org/request/show/1173700
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=164
* chkstat: has been renamed to permctl
* documentation: updated man pages
* ACL support: permctl (formerly chkstat) now supports an additional `+acl`
syntax to support assigning ACLs to files similar to the already existing
support for file based capabilities.
- Update to version 1699_20240307:
* build system: migrate from Makefile to Meson
- adjust spec file to meson build
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=338
- Update to version 1699_20240305:
* chkstat: EntryProcessor: make error handling in safeOpen() clearer
* chkstat regtests: catch bad error reporting for non-existent files
* chkstat: EntryProcessor: don't report errors for non-existent files
- Update to version 1699_20240223:
* chkstat: replace ProcMountState enum by simple bool member
* chkstat: minor style, spelling and documentation fixes
* chkstat: drop types.h header
* chkstat: make ProcMountState a private type of ChkStat
* chkstat: EntryProcessor: rename some member variables for improved readability
* chkstat: get rid of EntryContext and incorporate it into EntryProcessor
* chkstat: split-off EntryProcessor from Chkstat main class
* chkstat: define _GNU_SOURCE via Makefile
* chkstat: processEntries(): make loop variables const
* chkstat: split up checkHaveProc()
* chkstat: ProfileParser: fix a bug when applying capabilities in custom root
* chkstat: ProfileParser: make adding the root to paths transparent
* chkstat: ProfileParser: refactor the now reduced codebase
* chkstat: split off separate ProfileParser
* chkstat: ProfileEntry: mark dropXID() const to support const ProfileEntry use
* chkstat: parseProfile(): improve badProfileLine() calls
* chkstat: drop deprecated capability check
* chkstat: also move expandProfilePaths() into new VariableExpansions class
* chkstat: split off variable expansion logic into separate class
* chkstat: loadVariableExpansions(): a bit of refactoring
* chkstat: parseSysconfig(): bit of refactoring
* chkstat: remove deprecated CHECK_PERMISSIONS logic
* chkstat: move assorted types into dedicated header
* chkstat: replace #include guards by #pragma once
* chkstat: split off command line arguments from Chkstat main class
* chkstat: drop SaneValueArg wrapper
* chkstat: document new packages.d directory
* chkstat: drop TODO regarding ProfileEntry being changed on-the-fly
* chkstat: harmonize FileCapabilities API
* chkstat: support /usr/share/permissions/package.d for per-package drop-ins
* chkstat: minor coding style fixes
* chkstat: improve readability for rstrip() to strip trailing slashes
* chkstat: remove trailing slashes from paths found on the command line
* chkstat: add warning messages for rare error situations
* chkstat: open profiles right away without racy `access()` check.
- Remove fix_version.sh, handle version with services
OBS-URL: https://build.opensuse.org/request/show/1155258
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=162
- Update to version 1699_20240223:
* chkstat: replace ProcMountState enum by simple bool member
* chkstat: minor style, spelling and documentation fixes
* chkstat: drop types.h header
* chkstat: make ProcMountState a private type of ChkStat
* chkstat: EntryProcessor: rename some member variables for improved readability
* chkstat: get rid of EntryContext and incorporate it into EntryProcessor
* chkstat: split-off EntryProcessor from Chkstat main class
* chkstat: define _GNU_SOURCE via Makefile
* chkstat: processEntries(): make loop variables const
* chkstat: split up checkHaveProc()
* chkstat: ProfileParser: fix a bug when applying capabilities in custom root
* chkstat: ProfileParser: make adding the root to paths transparent
* chkstat: ProfileParser: refactor the now reduced codebase
* chkstat: split off separate ProfileParser
* chkstat: ProfileEntry: mark dropXID() const to support const ProfileEntry use
* chkstat: parseProfile(): improve badProfileLine() calls
* chkstat: drop deprecated capability check
* chkstat: also move expandProfilePaths() into new VariableExpansions class
* chkstat: split off variable expansion logic into separate class
* chkstat: loadVariableExpansions(): a bit of refactoring
* chkstat: parseSysconfig(): bit of refactoring
* chkstat: remove deprecated CHECK_PERMISSIONS logic
* chkstat: move assorted types into dedicated header
* chkstat: replace #include guards by #pragma once
* chkstat: split off command line arguments from Chkstat main class
* chkstat: drop SaneValueArg wrapper
* chkstat: document new packages.d directory
* chkstat: drop TODO regarding ProfileEntry being changed on-the-fly
* chkstat: harmonize FileCapabilities API
* chkstat: support /usr/share/permissions/package.d for per-package drop-ins
* chkstat: minor coding style fixes
* chkstat: improve readability for rstrip() to strip trailing slashes
* chkstat: remove trailing slashes from paths found on the command line
* chkstat: add warning messages for rare error situations
* chkstat: open profiles right away without racy `access()` check.
- Remove fix_version.sh, handle version with services
OBS-URL: https://build.opensuse.org/request/show/1152267
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=333
- Drop superfluous mkdir /usr/share/permissions/permissions.d
This is now created by the Makefile. See also
commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c
- Update to version 20240206:
* Whitelisting libgtop_server2 (bsc#1218921)
* Removing bogus whitespaces
* chkstat: harmonize and transform to a more compact coding and doc style
* gitignore: also ignore hidden ctags
* build: Create /usr/share/permissions/permissions.d for packagers
* profiles: drop /usr/sbin/lockdev which is no longer packaged in Factory
* profiles: drop /etc/ftpusers which is no longer shipped in netcfg
OBS-URL: https://build.opensuse.org/request/show/1144679
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=161
- Created new subpackages -config, -doc and standalone package chkstat
where we can start a better versioning scheme and require it from the
- Replace references to /var/adm/fillup-templates with new
- kcheckpass/kdesud moved to %_libdir/kde4/libexec
- Xorg moved from /usr/X11R6/bin to /usr/bin; fixes build of
- don't build as root
- added /opt/gnome/sbin/change-passwd
- fpexec decrease go rights to 11
- inn scripts: u-w (not needed)
- require /sbin/SuSEconfig
adapted manpage
- chkstat: don't try to chown if not root
for i in permissions permissions.easy permissions.secure
awk '/^(#|$)/ { print $0; next; }
{ if(NF > 3) {printf("error: %s\n",$0);exit};
- fix group for isdnctrl uucp --> dialout (#28997)
- /var/mtrack -> /var/lib/mtrack
- zapping_setup_fb moved to /opt/gnome/sbin
- added hppa to rpm subsystem in permissions files to be able to
finish autobuild
- two more nethack flavors with sgid games in easy
- added prereq (#17956)
- modifications: -s for pppd, world-writeable directories for
- created package as split off from aaa_base
OBS-URL: https://build.opensuse.org/request/show/1144612
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=330
- Update to version 20240206:
* Whitelisting libgtop_server2 (bsc#1218921)
* Removing bogus whitespaces
* chkstat: harmonize and transform to a more compact coding and doc style
* gitignore: also ignore hidden ctags
* build: Create /usr/share/permissions/permissions.d for packagers
* profiles: drop /usr/sbin/lockdev which is no longer packaged in Factory
* profiles: drop /etc/ftpusers which is no longer shipped in netcfg
OBS-URL: https://build.opensuse.org/request/show/1144540
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=329
