pool/permissions
SHA256
2
0
Fork 2
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
282 Commits 1 Branch 0 Tags 1,023 KiB
63717dcae1
Commit Graph

282 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Marcus Meissner
987b4c1e61 Accepting request 263879 from home:msmeissn:branches:Base:System 
- Added iouyap capabilities (bnc#904060)

OBS-URL: https://build.opensuse.org/request/show/263879
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=133
 2014-12-04 07:34:28 +00:00
Marcus Meissner
55fdaea9a3 Accepting request 259902 from home:msmeissn:branches:Base:System 
- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647

OBS-URL: https://build.opensuse.org/request/show/259902
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=131
 2014-11-05 17:23:09 +00:00
Marcus Meissner
2b1381f5ed Accepting request 246515 from home:msmeissn:branches:Base:System 
- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)

OBS-URL: https://build.opensuse.org/request/show/246515
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=129
 2014-08-26 13:05:22 +00:00
Marcus Meissner
1febc609ea Accepting request 243379 from home:msmeissn:branches:Base:System 
- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151

OBS-URL: https://build.opensuse.org/request/show/243379
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=127
 2014-08-01 11:42:04 +00:00
Marcus Meissner
dba36f4d8f Accepting request 242029 from home:msmeissn:branches:Base:System 
- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)

OBS-URL: https://build.opensuse.org/request/show/242029
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=125
 2014-07-23 15:21:41 +00:00
Marcus Meissner
111602a6c6 Accepting request 241753 from home:msmeissn:branches:Base:System 
- permissions: Adding new kdesud path for KDE5 (bnc#872276)

OBS-URL: https://build.opensuse.org/request/show/241753
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=124
 2014-07-21 14:12:53 +00:00
Marcus Meissner
d1796cf746 Accepting request 239152 from home:msmeissn:branches:Base:System 
- vlock_main lost its permission checking, so remove from here.

OBS-URL: https://build.opensuse.org/request/show/239152
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=122
 2014-07-01 11:47:17 +00:00
Marcus Meissner
18b3eed942 Accepting request 237512 from home:msmeissn:branches:Base:System 
- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)

OBS-URL: https://build.opensuse.org/request/show/237512
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=120
 2014-06-16 11:52:40 +00:00
Marcus Meissner
087979a9c5 Accepting request 236354 from home:msmeissn:branches:Base:System 
- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)

OBS-URL: https://build.opensuse.org/request/show/236354
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=119
 2014-06-05 08:16:53 +00:00
Marcus Meissner
d83696ead0 Accepting request 230216 from home:msmeissn:branches:Base:System 
- duplicate /var/run entries to /run (bnc#873708)

OBS-URL: https://build.opensuse.org/request/show/230216
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=117
 2014-04-15 14:41:18 +00:00
Marcus Meissner
9ff01a3be5 Accepting request 227299 from home:msmeissn:branches:Base:System 
- permissions: incorporating capability for mtr, removing +s from ping
  (bnc#865351)

OBS-URL: https://build.opensuse.org/request/show/227299
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=115
 2014-03-24 11:46:57 +00:00
Marcus Meissner
1f41a98c1b Accepting request 205002 from home:msmeissn:branches:Base:System 
- GIT repo moved to GITHUB.

OBS-URL: https://build.opensuse.org/request/show/205002
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=113
 2013-10-28 12:14:20 +00:00
Marcus Meissner
564e2045ec Accepting request 204986 from home:msmeissn:branches:Base:System 
- removed the setuid bit from "eject" (bnc#824406)

OBS-URL: https://build.opensuse.org/request/show/204986
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=112
 2013-10-28 10:49:53 +00:00
Marcus Meissner
2e919d23e6 Accepting request 195995 from home:msmeissn:branches:Base:System 
- do not use magic constants for strlen (bnc#834790

OBS-URL: https://build.opensuse.org/request/show/195995
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=110
 2013-08-22 12:29:38 +00:00
Marcus Meissner
88e93f4949 Accepting request 195810 from home:msmeissn:branches:Base:System 
- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)

- use PERMISSION_FSCAPS

- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948)

OBS-URL: https://build.opensuse.org/request/show/195810
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=108
 2013-08-21 13:06:40 +00:00
Marcus Meissner
f7167a7542 Accepting request 178641 from home:msmeissn:branches:Base:System 
- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)

OBS-URL: https://build.opensuse.org/request/show/178641
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=106
 2013-06-12 12:36:35 +00:00
Marcus Meissner
13ae92871b Accepting request 178510 from home:msmeissn:branches:Base:System 
- cdrtools: allow some filesystem capabilities for more stable CD/DVD
  burning in "easy" mode. (bnc#550021) (cap_sys_nice, cap_sys_rawio,
  cap_sys_resource, cap_ipc_lock)

OBS-URL: https://build.opensuse.org/request/show/178510
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=105
 2013-06-11 09:35:05 +00:00
Marcus Meissner
e63c733ea5 Accepting request 174833 from home:msmeissn:branches:Base:System 
- leave out readcd,cdda2wav,cdrecord until it is ready for the distro (bnc#550021)

OBS-URL: https://build.opensuse.org/request/show/174833
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=103
 2013-05-08 14:33:37 +00:00
Marcus Meissner
d81cf5b7b7 Accepting request 174491 from home:msmeissn:branches:Base:System 
- cdrecord currently has no special permissions approved (bnc#550021)
- append a /

OBS-URL: https://build.opensuse.org/request/show/174491
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=101
 2013-05-04 14:49:12 +00:00
Dr. Werner Fink
3c85079215 Accepting request 150329 from home:msmeissn:branches:Base:System 
- Allow pcp to have stickybit worldwriteable directories

OBS-URL: https://build.opensuse.org/request/show/150329
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=99
 2013-01-30 13:37:31 +00:00
Marcus Meissner
a8e8840bc1 Accepting request 143274 from home:msmeissn:branches:Base:System 
- add /usr/bin/dumpcap to watchlist
- make fscaps=1 the default on ""
- added PERMISSION_FSCAPS to the sysconfig/security fillup template.
- /bin/ping(6) was moved to /usr/bin/ping(6) /bin/eject was moved to /usr/bin/eject

OBS-URL: https://build.opensuse.org/request/show/143274
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=97
 2012-11-30 13:21:16 +00:00
Ludwig Nussel
8449923ee4 - apply permissions settings in %post. During initial installation 
some packages might be installed before the permissions package
  due to dependency loops so we need to make sure their settings
  are applied too. Also, on update of the permissions package
  changed permission settings may need to be applied.

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=95
 2012-11-21 14:01:07 +00:00
Ludwig Nussel
2708dcae9f update changelog 
coreutils to util-linux needs to be reverted as soon as util-linux
  is also in

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=93
 2012-10-15 11:50:02 +00:00
Ludwig Nussel
b526458851 - temporarily add su.core 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=92
 2012-10-15 11:49:16 +00:00
Cristian Rodríguez
3fc393435b Accepting request 135933 from home:msmeissn:branches:Base:System 
- no longer install SuSEconfig.permissions, SuSEconfig is gone.

OBS-URL: https://build.opensuse.org/request/show/135933
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=90
 2012-09-25 19:26:09 +00:00
Marcus Meissner
95c9a0c2fa Accepting request 127268 from home:msmeissn:branches:Base:System 
- enable ecryptfs-utils setuid root mount wrapper (bnc#740110) in .easy

OBS-URL: https://build.opensuse.org/request/show/127268
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=88
 2012-07-06 14:11:34 +00:00
Ludwig Nussel
417c0cbeb9 - remove /var/run/vi.recover (bnc#765288) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=87
 2012-06-04 11:37:35 +00:00
Ludwig Nussel
0f185db51d - remove /var/cache/fonts (bnc#764885) 
- remove /var/lib/xemacs/lock/ (bnc#764887)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=85
 2012-06-01 07:24:00 +00:00
Ludwig Nussel
c97f777982 fix undefined reference 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=83
 2012-05-31 11:07:43 +00:00
Ludwig Nussel
8f10cf6afd - Revert "Use credentials from within the root file system" 
breaks use of --root option in brp-05-permissions

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=82
 2012-05-31 11:04:08 +00:00
Ludwig Nussel
baca6eda5a update 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=80
 2012-05-15 14:46:37 +00:00
Ludwig Nussel
3f296a86bb - print warning when requested to check not listed files 
- Use credentials from within the root file system

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=79
 2012-05-15 14:02:56 +00:00
Ludwig Nussel
d9d5a38484 - add duplicate entries for / and /usr (bnc#745622) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=76
 2012-02-08 08:16:17 +00:00
Ludwig Nussel
d1fdc3428c - add scripts for automatic package sumission 
- drop zypp-refresh-wrapper (bnc#738677)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=75
 2012-02-07 12:50:47 +00:00
OBS User buildservice-autocommit
f3359fb5c6 Updating link to change in openSUSE:Factory/permissions revision 72.0 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=36bb8d86736c947a3fcec25ef8b9f9a5
 2011-12-06 17:50:13 +00:00
Ludwig Nussel
9686d2cccc - disable run time fscaps detection (bnc#728312) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=72
 2011-11-07 09:46:24 +00:00
Ludwig Nussel
a10a942129 update 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=69
 2011-09-23 08:58:33 +00:00
Ludwig Nussel
de7b70ab6d - set permission by default in SuSEconfig mode as permissions are 
only set when called explicitly anyways.

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=68
 2011-09-23 08:38:49 +00:00
Ludwig Nussel
d2517dd4d9 - fix typo in path 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=65
 2011-09-21 08:01:31 +00:00
Ludwig Nussel
97f3c971e0 - remove world writable /var/crash again (bnc#438041) 
- remove world writable permissions from /usr/src/packages (bnc#719217)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=64
 2011-09-20 14:53:13 +00:00
Ludwig Nussel
f9363b8806 - remove setgid games bits (bnc#429882) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=63
 2011-09-20 14:24:08 +00:00
Ludwig Nussel
864d0985f2 - add chromium browser sandbox helper (bnc#718016) 
- don't offer PERMISSION_SECURITY in config anymore

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=62
 2011-09-20 13:39:38 +00:00
OBS User buildservice-autocommit
7bd6f42622 Updating link to change in openSUSE:Factory/permissions revision 67.0 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=ca3baed4e12122d8d8566d9f36d10f8d
 2011-06-28 14:02:35 +00:00
Ludwig Nussel
a232675bfb - remove setuid bit from opiesu (bnc#698772) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=60
 2011-06-28 12:53:50 +00:00
OBS User buildservice-autocommit
0063fc676e Updating link to change in openSUSE:Factory/permissions revision 65.0 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=4f345acfacf99730f06574103fdd7ce5
 2011-06-20 09:13:21 +00:00
OBS User buildservice-autocommit
91fd256e8e Accepting request 74021 from Base:System 
baserev update by copy to link target

OBS-URL: https://build.opensuse.org/request/show/74021
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=59
 2011-06-20 09:13:12 +00:00
Ludwig Nussel
3575a0d66a - disable fscaps by default as factory kernel still doesn't have the 
required patch for auto detection

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=58
 2011-06-17 10:56:53 +00:00
Ludwig Nussel
c5b7ea375e - read /sys/kernel/fscaps for fscaps settings 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=55
 2011-05-26 15:24:27 +00:00
Ludwig Nussel
e1c622f115 - change path to gnome-pty-helper (bnc#690202) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=52
 2011-05-12 11:48:45 +00:00
Ludwig Nussel
e080c9cd41 - setuid bit on VBoxNetDHCP (bnc#669055) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=50
 2011-03-07 15:24:01 +00:00