pool/permissions
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
406 Commits 1 Branch 0 Tags 1,023 KiB
factory
Commit Graph

406 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Marcus Meissner
96c844533d * root:shadow 0755 for newuidmap/newgidmap 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=150
 2016-08-02 08:53:04 +00:00
Marcus Meissner
fb322ba460 - Update to version 20160802: 
* root:shadow 0755 for newuidmap/newgidmap

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=149
 2016-08-02 08:51:37 +00:00
Marcus Meissner
8edde370cc - Update to version 20160802: 
* list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=148
 2016-08-02 08:48:45 +00:00
Marcus Meissner
aaf8e68ad8 - adding qemu-bridge-helper mode 04750 (bsc#988279) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=147
 2016-08-02 08:29:53 +00:00
Marcus Meissner
3b16bfa06f OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=146 2016-08-02 08:29:24 +00:00
Dominique Leuenberger
3f57aedd54 Accepting request 397516 from Base:System 
- Introduce _service to easier update the package. For simplicity,
  change the version from yyyy.mm.dd to yyyymmdd (which is eactly
  %cd in the _service defintion). Upgrading is no problem.

It's up to the maintainer if you prefer this method or whatever you
currently use...

the _service allows to do an update with those commands:
===
osc co Base:System permissions
cd Base:System/permissions
rm *xz
osc service dr
osc ar
osc ci -m 'Update done'
===

It will add use the commit messages from git to formulate the .changelog in the form:
+ Update to version YYYYMMDD:
  - Git commitlog 1
  - Git commitlog 1

Feel free to use or reject (forwarded request 397400 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/397516
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=105
 2016-05-26 21:52:53 +00:00
Marcus Meissner
6899251720 Accepting request 397400 from home:dimstar:branches:Base:System 
- Introduce _service to easier update the package. For simplicity,
  change the version from yyyy.mm.dd to yyyymmdd (which is eactly
  %cd in the _service defintion). Upgrading is no problem.

It's up to the maintainer if you prefer this method or whatever you
currently use...

the _service allows to do an update with those commands:
===
osc co Base:System permissions
cd Base:System/permissions
rm *xz
osc service dr
osc ar
osc ci -m 'Update done'
===

It will add use the commit messages from git to formulate the .changelog in the form:
+ Update to version YYYYMMDD:
  - Git commitlog 1
  - Git commitlog 1

Feel free to use or reject

OBS-URL: https://build.opensuse.org/request/show/397400
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=144
 2016-05-23 14:04:56 +00:00
Marcus Meissner
5b294da664 Accepting request 397396 from home:msmeissn:branches:Base:System 
- chage only needs read rights to /etc/shadow, so setgid shadow is sufficient (bsc#975352)

- permissions: adding gstreamer ptp file caps (bsc#960173)

OBS-URL: https://build.opensuse.org/request/show/397396
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=143
 2016-05-23 09:01:41 +00:00
Dominique Leuenberger
bea4036464 Accepting request 353870 from Base:System 
- the apache folks renamed suexec2 to suexec with symlink. adjust both (bsc#962060) (forwarded request 353869 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/353870
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=104
 2016-01-16 10:55:50 +00:00
Marcus Meissner
2026868fe9 Accepting request 353869 from home:msmeissn:branches:Base:System 
- the apache folks renamed suexec2 to suexec with symlink. adjust both (bsc#962060)

OBS-URL: https://build.opensuse.org/request/show/353869
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=141
 2016-01-15 14:42:31 +00:00
Marcus Meissner
b6e28807c2 Accepting request 353278 from home:msmeissn:branches:Base:System 
- pinger needs to be squid:root, not root:squid (there is no squid group) bsc#961363

- add suexec with 0755 to all standard profiles. this can and should be overridden in permissions.local if you need it setuid root. bsc#951765 bsc#263789
- added missing / to the squid specific directories (bsc#950557)

OBS-URL: https://build.opensuse.org/request/show/353278
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=140
 2016-01-12 16:30:34 +00:00
Dominique Leuenberger
0fc0001c35 Accepting request 334554 from Base:System 
- adjusted radosgw to root:www mode 0750 (bsc#943471) (forwarded request 334552 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/334554
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=103
 2015-10-06 11:23:17 +00:00
Marcus Meissner
7723b028aa Accepting request 334552 from home:msmeissn:branches:Base:System 
- adjusted radosgw to root:www mode 0750 (bsc#943471)

OBS-URL: https://build.opensuse.org/request/show/334552
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=138
 2015-09-28 14:36:36 +00:00
Marcus Meissner
e1788e4035 Accepting request 334443 from home:msmeissn:branches:Base:System 
- radosgw can get capability cap_bind_net_service (bsc#943471)

OBS-URL: https://build.opensuse.org/request/show/334443
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=137
 2015-09-28 13:36:03 +00:00
Dominique Leuenberger
aafc3bb2e4 Accepting request 311172 from Base:System 
- remove /usr/bin/get_printing_ticket; (bnc#906336) (forwarded request 311171 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/311172
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=102
 2015-06-11 06:20:20 +00:00
Marcus Meissner
caaf70201f Accepting request 311171 from home:msmeissn:branches:Base:System 
- remove /usr/bin/get_printing_ticket; (bnc#906336)

OBS-URL: https://build.opensuse.org/request/show/311171
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=135
 2015-06-08 16:26:06 +00:00
Dominique Leuenberger
558c462ec0 Accepting request 263938 from Base:System 
- Added iouyap capabilities (bnc#904060) (forwarded request 263879 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/263938
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=101
 2014-12-10 22:43:44 +00:00
Marcus Meissner
987b4c1e61 Accepting request 263879 from home:msmeissn:branches:Base:System 
- Added iouyap capabilities (bnc#904060)

OBS-URL: https://build.opensuse.org/request/show/263879
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=133
 2014-12-04 07:34:28 +00:00
Dominique Leuenberger
68ff9f30a3 Accepting request 259903 from Base:System 
- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647 (forwarded request 259902 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/259903
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=100
 2014-11-10 21:15:19 +00:00
Marcus Meissner
55fdaea9a3 Accepting request 259902 from home:msmeissn:branches:Base:System 
- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647

OBS-URL: https://build.opensuse.org/request/show/259902
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=131
 2014-11-05 17:23:09 +00:00
Stephan Kulow
6d14e84201 Accepting request 246519 from Base:System 
- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083) (forwarded request 246515 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/246519
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=99
 2014-08-29 15:42:18 +00:00
Marcus Meissner
2b1381f5ed Accepting request 246515 from home:msmeissn:branches:Base:System 
- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)

OBS-URL: https://build.opensuse.org/request/show/246515
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=129
 2014-08-26 13:05:22 +00:00
Stephan Kulow
e2ea7c1956 Accepting request 243380 from Base:System 
- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151 (forwarded request 243379 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/243380
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=97
 2014-08-03 13:35:35 +00:00
Marcus Meissner
1febc609ea Accepting request 243379 from home:msmeissn:branches:Base:System 
- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151

OBS-URL: https://build.opensuse.org/request/show/243379
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=127
 2014-08-01 11:42:04 +00:00
Stephan Kulow
4b3a7f5c61 Accepting request 242030 from Base:System 
- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)

- permissions: Adding new kdesud path for KDE5 (bnc#872276)

OBS-URL: https://build.opensuse.org/request/show/242030
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=96
 2014-07-25 07:08:51 +00:00
Marcus Meissner
dba36f4d8f Accepting request 242029 from home:msmeissn:branches:Base:System 
- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)

OBS-URL: https://build.opensuse.org/request/show/242029
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=125
 2014-07-23 15:21:41 +00:00
Marcus Meissner
111602a6c6 Accepting request 241753 from home:msmeissn:branches:Base:System 
- permissions: Adding new kdesud path for KDE5 (bnc#872276)

OBS-URL: https://build.opensuse.org/request/show/241753
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=124
 2014-07-21 14:12:53 +00:00
Stephan Kulow
b5a0b69c30 Accepting request 239153 from Base:System 
- vlock_main lost its permission checking, so remove from here. (forwarded request 239152 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/239153
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=95
 2014-07-02 13:18:20 +00:00
Marcus Meissner
d1796cf746 Accepting request 239152 from home:msmeissn:branches:Base:System 
- vlock_main lost its permission checking, so remove from here.

OBS-URL: https://build.opensuse.org/request/show/239152
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=122
 2014-07-01 11:47:17 +00:00
Stephan Kulow
7da48020e1 Accepting request 237513 from Base:System 
- opiesu,wodim,vlock-main have no setuid root. (bnc#882035) (forwarded request 237512 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/237513
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=94
 2014-06-18 20:04:25 +00:00
Marcus Meissner
18b3eed942 Accepting request 237512 from home:msmeissn:branches:Base:System 
- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)

OBS-URL: https://build.opensuse.org/request/show/237512
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=120
 2014-06-16 11:52:40 +00:00
Marcus Meissner
087979a9c5 Accepting request 236354 from home:msmeissn:branches:Base:System 
- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)

OBS-URL: https://build.opensuse.org/request/show/236354
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=119
 2014-06-05 08:16:53 +00:00
Stephan Kulow
b6ef8c3c8e Accepting request 230217 from Base:System 
- duplicate /var/run entries to /run (bnc#873708) (forwarded request 230216 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/230217
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=93
 2014-04-16 05:25:04 +00:00
Marcus Meissner
d83696ead0 Accepting request 230216 from home:msmeissn:branches:Base:System 
- duplicate /var/run entries to /run (bnc#873708)

OBS-URL: https://build.opensuse.org/request/show/230216
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=117
 2014-04-15 14:41:18 +00:00
Stephan Kulow
2fb77bc615 Accepting request 227300 from Base:System 
- permissions: incorporating capability for mtr, removing +s from ping
  (bnc#865351) (forwarded request 227299 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/227300
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=92
 2014-03-27 05:15:19 +00:00
Marcus Meissner
9ff01a3be5 Accepting request 227299 from home:msmeissn:branches:Base:System 
- permissions: incorporating capability for mtr, removing +s from ping
  (bnc#865351)

OBS-URL: https://build.opensuse.org/request/show/227299
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=115
 2014-03-24 11:46:57 +00:00
Stephan Kulow
5b3269cdb0 Accepting request 205003 from Base:System 
- GIT repo moved to GITHUB. (forwarded request 205002 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/205003
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=91
 2013-10-29 08:33:31 +00:00
Marcus Meissner
1f41a98c1b Accepting request 205002 from home:msmeissn:branches:Base:System 
- GIT repo moved to GITHUB.

OBS-URL: https://build.opensuse.org/request/show/205002
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=113
 2013-10-28 12:14:20 +00:00
Marcus Meissner
564e2045ec Accepting request 204986 from home:msmeissn:branches:Base:System 
- removed the setuid bit from "eject" (bnc#824406)

OBS-URL: https://build.opensuse.org/request/show/204986
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=112
 2013-10-28 10:49:53 +00:00
Tomáš Chvátal
cdf923ee16 Accepting request 195997 from Base:System 
- do not use magic constants for strlen (bnc#834790 (forwarded request 195995 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/195997
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=89
 2013-08-23 09:05:47 +00:00
Marcus Meissner
2e919d23e6 Accepting request 195995 from home:msmeissn:branches:Base:System 
- do not use magic constants for strlen (bnc#834790

OBS-URL: https://build.opensuse.org/request/show/195995
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=110
 2013-08-22 12:29:38 +00:00
Tomáš Chvátal
8233d581ab Accepting request 195811 from Base:System 
- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)

- use PERMISSION_FSCAPS

- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948) (forwarded request 195810 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/195811
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=88
 2013-08-21 14:47:17 +00:00
Marcus Meissner
88e93f4949 Accepting request 195810 from home:msmeissn:branches:Base:System 
- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)

- use PERMISSION_FSCAPS

- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948)

OBS-URL: https://build.opensuse.org/request/show/195810
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=108
 2013-08-21 13:06:40 +00:00
Stephan Kulow
b67727a3c9 Accepting request 178642 from Base:System 
- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302) (forwarded request 178641 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/178642
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=87
 2013-06-13 18:27:16 +00:00
Marcus Meissner
f7167a7542 Accepting request 178641 from home:msmeissn:branches:Base:System 
- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)

OBS-URL: https://build.opensuse.org/request/show/178641
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=106
 2013-06-12 12:36:35 +00:00
Marcus Meissner
13ae92871b Accepting request 178510 from home:msmeissn:branches:Base:System 
- cdrtools: allow some filesystem capabilities for more stable CD/DVD
  burning in "easy" mode. (bnc#550021) (cap_sys_nice, cap_sys_rawio,
  cap_sys_resource, cap_ipc_lock)

OBS-URL: https://build.opensuse.org/request/show/178510
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=105
 2013-06-11 09:35:05 +00:00
Stephan Kulow
f1b40a0a55 Accepting request 174835 from Base:System 
- leave out readcd,cdda2wav,cdrecord until it is ready for the distro (bnc#550021) (forwarded request 174833 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/174835
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=86
 2013-05-13 13:12:04 +00:00
Marcus Meissner
e63c733ea5 Accepting request 174833 from home:msmeissn:branches:Base:System 
- leave out readcd,cdda2wav,cdrecord until it is ready for the distro (bnc#550021)

OBS-URL: https://build.opensuse.org/request/show/174833
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=103
 2013-05-08 14:33:37 +00:00
Stephan Kulow
2da9b5cd16 Accepting request 174492 from Base:System 
- cdrecord currently has no special permissions approved (bnc#550021)
- append a / (forwarded request 174491 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/174492
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=85
 2013-05-06 08:11:14 +00:00
Marcus Meissner
d81cf5b7b7 Accepting request 174491 from home:msmeissn:branches:Base:System 
- cdrecord currently has no special permissions approved (bnc#550021)
- append a /

OBS-URL: https://build.opensuse.org/request/show/174491
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=101
 2013-05-04 14:49:12 +00:00