Dominique Leuenberger
8b3ce617f3
Accepting request 1066365 from Base:System
...
- Update to version 20230217:
* shadow: newgidmap,newuidmap: use capabilities (bsc#1208309)
* profiles: whitelist kismet capabilities (bsc#1200954) (#171 )
OBS-URL: https://build.opensuse.org/request/show/1066365
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=155
2023-02-19 17:18:40 +00:00
Matthias Gerstner
a12c51b734
- Update to version 20230217:
...
* shadow: newgidmap,newuidmap: use capabilities (bsc#1208309)
* profiles: whitelist kismet capabilities (bsc#1200954) (#171 )
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=316
2023-02-17 11:13:40 +00:00
Dominique Leuenberger
a937513fef
Accepting request 1043915 from Base:System
...
- Update to version 20221220:
* profiles: remove outdated kdesud, apptainer entries
OBS-URL: https://build.opensuse.org/request/show/1043915
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=154
2022-12-25 14:14:13 +00:00
Matthias Gerstner
d6aae1d6e5
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=314
2022-12-20 13:08:47 +00:00
Matthias Gerstner
1a72d7beea
address and suppress some rpmlint warnings
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=313
2022-12-20 10:43:28 +00:00
Matthias Gerstner
8237e54dc6
- Update to version 20221220:
...
* profiles: remove outdated kdesud, apptainer entries
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=312
2022-12-20 10:05:07 +00:00
Dominique Leuenberger
7857dcdcf7
Accepting request 1006712 from Base:System
...
Automatic submission by obs-autosubmit
OBS-URL: https://build.opensuse.org/request/show/1006712
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=153
2022-10-03 11:44:40 +00:00
Matthias Gerstner
92c47597ad
Accepting request 1005229 from home:dirkmueller:Factory
...
- skip tests on qemu user builds
OBS-URL: https://build.opensuse.org/request/show/1005229
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=310
2022-09-22 08:44:48 +00:00
Dominique Leuenberger
2b86c48f1a
Accepting request 1003262 from Base:System
...
- Update to version 20220912:
* chkstat: also consider group controlled paths (bsc#1203018,
CVE-2022-31252)
OBS-URL: https://build.opensuse.org/request/show/1003262
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=152
2022-09-16 11:31:50 +00:00
Matthias Gerstner
9c5f7b2461
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=308
2022-09-13 08:45:51 +00:00
Matthias Gerstner
fb9861a55a
- Update to version 20220912:
...
* chkstat: also consider group controlled paths (bsc#1203018,
CVE-2022-31252)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=307
2022-09-13 08:40:04 +00:00
Dominique Leuenberger
aba2402a27
Accepting request 993693 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/993693
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=151
2022-08-10 15:13:11 +00:00
8e9d7d11f8
Accepting request 993671 from home:dimstar:Factory
...
- Fix dependency from permissions-zypp-plugin to permissions.
OBS-URL: https://build.opensuse.org/request/show/993671
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=305
2022-08-08 07:50:18 +00:00
Matthias Gerstner
129b813965
Accepting request 991795 from home:coolo:factory:ring0
...
- Avoid different Versions for subpackages to fix build-compare
seeing the src rpm as equal. It replaces VERSION-RELEASE but
that will fail if subpackages use a different Version
OBS-URL: https://build.opensuse.org/request/show/991795
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=304
2022-08-02 08:12:13 +00:00
Matthias Gerstner
6d3f59fe3d
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=303
2022-07-13 13:53:56 +00:00
Matthias Gerstner
1410009b24
- Update to version 20220713:
...
* postfix: add postlog setgid for maildrop binary (bsc#1201385)
* libexec migration: KDE utilities now properly place their helpers
* pccardctl: installation path has finally changed to /usr/sbin
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=302
2022-07-13 13:53:20 +00:00
Dominique Leuenberger
002599bece
Accepting request 961063 from Base:System
...
- Update to version 20220309:
* apptainer whitelisting (bsc#1196145)
- Update to version 20220202:
* mount.nfs: switch from migration mode to fixed path in /usr/sbin
* changed gendered pronouns
* mgetty: faxq-helper now finally reside in /usr/libexec
OBS-URL: https://build.opensuse.org/request/show/961063
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=150
2022-03-14 18:33:57 +00:00
Matthias Gerstner
75eab2a589
- Update to version 20220309:
...
* apptainer whitelisting (bsc#1196145)
- Update to version 20220202:
* mount.nfs: switch from migration mode to fixed path in /usr/sbin
* changed gendered pronouns
* mgetty: faxq-helper now finally reside in /usr/libexec
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=300
2022-03-11 11:16:53 +00:00
Dominique Leuenberger
1485343c01
Accepting request 915438 from Base:System
...
- Update to version 20210901:
* libksysguard5: Updated path for ksgrd_network_helper
* kdesu: Updated path for kdesud
* sbin_dirs cleanup: these binaries have already been moved to /usr/sbin
* mariadb: revert auth_pam_tool to /usr/lib{,64} again
* cleanup: revert virtualbox back to plain /usr/lib
* cleanup: remove deprecated /etc/ssh/sshd_config
* hawk_invoke is not part of newer hawk2 packages anymore
* cleanup: texlive-filesystem: public now resides in libexec
* cleanup: authbind: helper now resides in libexec
* cleanup: polkit: the agent now also resides in libexec
* libexec cleanup: 'inn' news binaries now reside in libexec
OBS-URL: https://build.opensuse.org/request/show/915438
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=149
2021-09-06 13:57:50 +00:00
Matthias Gerstner
58b6579089
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=299
2021-09-01 08:07:14 +00:00
Matthias Gerstner
e5129cd8f6
- Update to version 20210901:
...
* libksysguard5: Updated path for ksgrd_network_helper
* kdesu: Updated path for kdesud
* sbin_dirs cleanup: these binaries have already been moved to /usr/sbin
* mariadb: revert auth_pam_tool to /usr/lib{,64} again
* cleanup: revert virtualbox back to plain /usr/lib
* cleanup: remove deprecated /etc/ssh/sshd_config
* hawk_invoke is not part of newer hawk2 packages anymore
* cleanup: texlive-filesystem: public now resides in libexec
* cleanup: authbind: helper now resides in libexec
* cleanup: polkit: the agent now also resides in libexec
* libexec cleanup: 'inn' news binaries now reside in libexec
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=298
2021-09-01 07:35:31 +00:00
Dominique Leuenberger
02fa63bac3
Accepting request 894035 from Base:System
...
- Update to version 20210518:
* whitelist please (bsc#1183669)
- Update to version 20210518:
* Fix enlightenment paths for 32-bit architectures
OBS-URL: https://build.opensuse.org/request/show/894035
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=148
2021-05-21 19:49:44 +00:00
Matthias Gerstner
ff0b388651
- Update to version 20210518:
...
* whitelist please (bsc#1183669)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=296
2021-05-18 11:16:38 +00:00
Matthias Gerstner
f28bbb953b
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=295
2021-05-18 09:06:14 +00:00
Matthias Gerstner
e377ed99a1
- Update to version 20210518:
...
* Fix enlightenment paths for 32-bit architectures
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=294
2021-05-18 08:03:13 +00:00
Dominique Leuenberger
419195611e
Accepting request 866579 from Base:System
...
- Update to version 20210125:
* usbauth: drop compatibility variable for libexec
* usbauth: Updated path for usbauth-npriv
* profiles: finish usage of variable for polkit-agent-helper-1
OBS-URL: https://build.opensuse.org/request/show/866579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=147
2021-02-01 12:25:09 +00:00
Matthias Gerstner
818fcee281
- Update to version 20210125:
...
* usbauth: drop compatibility variable for libexec
* usbauth: Updated path for usbauth-npriv
* profiles: finish usage of variable for polkit-agent-helper-1
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=292
2021-01-25 12:15:26 +00:00
Dominique Leuenberger
6b6f3114f7
Accepting request 853596 from Base:System
...
move man page to where the documented files are
A separate package for a single man page really is overkill.
See also discussion at
https://lists.opensuse.org/archives/list/packaging@lists.opensuse.org/message/5FSP57UVYLS7BNBDNF4EGHW5TEEZUS5D/ (forwarded request 853107 from lnussel)
OBS-URL: https://build.opensuse.org/request/show/853596
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=146
2021-01-10 18:37:58 +00:00
Matthias Gerstner
172fdb46a3
Accepting request 853107 from home:lnussel:branches:Base:System
...
move man page to where the documented files are
A separate package for a single man page really is overkill.
See also discussion at
https://lists.opensuse.org/archives/list/packaging@lists.opensuse.org/message/5FSP57UVYLS7BNBDNF4EGHW5TEEZUS5D/
OBS-URL: https://build.opensuse.org/request/show/853107
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=290
2020-12-07 13:52:52 +00:00
Johannes Segitz
c6c0f68644
Accepting request 847754 from home:mgerstner:branches:Base:System
...
- Update to version 20201111:
* squid: remove basic_pam_auth which doesn't need special perms (bsc#1171569)
* mgetty: remove long dead (or never existing) locks directory (bsc#1171882)
* adjust squid pinger path (bsc#1171569)
* profiles: remove now superfluous squid pinger paths (bsc#1171569)
* ksgrd_network_helper: remove obviously wrong path
* etc/permissions: remove unnecessary, duplicate, outdated entries
* chkstat: implement support for variables in profile paths in new
variables.conf
* man pages: add documentation about variables, update copyrights
* profiles: use new variables feature to remove redundant entries
* profiles: prepare /usr/sbin versions of profile entries (bsc#1029961)
* Makefile: support CXXFLAGS and LDFLAGS override / extension via make/env variables (bsc#1178475)
* Makefile: compile with LFO support to fix 32-bit emulation on 64-bit hosts (bsc#1178476)
* README: added information about know limitations of this approach
- adjusted spec file:
- package new variables.conf
- apply %{optflags} correctly via CXXFLAGS variable
- drop FSCAPS_DEFAULT_ENABLED which isn't recognized anymore by the
refactored chkstat sources. This is now the default.
OBS-URL: https://build.opensuse.org/request/show/847754
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=289
2020-11-11 10:46:39 +00:00
Dominique Leuenberger
c95a42da17
Accepting request 840211 from Base:System
...
- Update to version 20201008:
* cleanup now useless /usr/lib entries after move to /usr/libexec (bsc#1171164)
* drop (f)ping capabilities in favor of ICMP_PROTO sockets (bsc#1174504)
OBS-URL: https://build.opensuse.org/request/show/840211
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=145
2020-10-15 11:43:38 +00:00
Matthias Gerstner
5d5b938d79
- Update to version 20201008:
...
* cleanup now useless /usr/lib entries after move to /usr/libexec (bsc#1171164)
* drop (f)ping capabilities in favor of ICMP_PROTO sockets (bsc#1174504)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=287
2020-10-08 09:20:05 +00:00
Dominique Leuenberger
3baec52155
Accepting request 838733 from Base:System
...
- Update to version 20200930:
* whitelist Xorg setuid-root wrapper (bsc#1175867)
OBS-URL: https://build.opensuse.org/request/show/838733
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=144
2020-10-04 15:30:04 +00:00
Matthias Gerstner
802df35b01
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=285
2020-09-30 09:56:48 +00:00
Matthias Gerstner
8f56b3bee2
- Update to version 20200930:
...
* whitelist Xorg setuid-root wrapper (bsc#1175867)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=284
2020-09-30 09:28:18 +00:00
Dominique Leuenberger
bbf0dfcc04
Accepting request 833221 from Base:System
...
- Update to version 20200909:
* screen: remove /run/uscreens covered by systemd-tmpfiles (bsc#1171879)
OBS-URL: https://build.opensuse.org/request/show/833221
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=143
2020-09-14 10:02:03 +00:00
Matthias Gerstner
6b2d70fbf8
- Update to version 20200909:
...
* screen: remove /run/uscreens covered by systemd-tmpfiles (bsc#1171879)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=282
2020-09-09 10:01:23 +00:00
Dominique Leuenberger
994bbe18e7
Accepting request 832056 from Base:System
...
- Update to version 20200904:
* Add /usr/libexec for cockpit-session as new path
* physlock: whitelist with tight restrictions (bsc#1175720)
OBS-URL: https://build.opensuse.org/request/show/832056
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=142
2020-09-08 20:55:18 +00:00
Matthias Gerstner
9d0d5227c9
- Update to version 20200904:
...
* Add /usr/libexec for cockpit-session as new path
* physlock: whitelist with tight restrictions (bsc#1175720)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=280
2020-09-04 10:58:24 +00:00
Dominique Leuenberger
8f6334b1fd
Accepting request 829800 from Base:System
...
- Update to version 20200826:
* mtr-packet: stop requiring dialout group
* etc/permissions: fix mtr permission
* list_permissions: improve output format
* list_permissions: support globbing in --path argument
* list_permissions: implement simplifications suggested in PR#92
* list_permissions: new tool for better path configuration overview
OBS-URL: https://build.opensuse.org/request/show/829800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=141
2020-08-31 14:47:18 +00:00
Malte Kraus
ddf46a06b6
- Update to version 20200826:
...
* mtr-packet: stop requiring dialout group
* etc/permissions: fix mtr permission
* list_permissions: improve output format
* list_permissions: support globbing in --path argument
* list_permissions: implement simplifications suggested in PR#92
* list_permissions: new tool for better path configuration overview
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=278
2020-08-26 15:38:36 +00:00
Dominique Leuenberger
8854dfa5fb
Accepting request 825923 from Base:System
...
- Update to version 20200811:
* regtest: support new getcap output format in libcap-2.42
* regtest: print individual test case errors to stderr
OBS-URL: https://build.opensuse.org/request/show/825923
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=140
2020-08-17 09:59:54 +00:00
Matthias Gerstner
1226549810
- Update to version 20200811:
...
* regtest: support new getcap output format in libcap-2.42
* regtest: print individual test case errors to stderr
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=276
2020-08-11 12:07:22 +00:00
Dominique Leuenberger
488a572e21
Accepting request 822971 from Base:System
...
- Update to version 20200727:
* etc/permissions: remove static /var/spool/* dirs
* etc/permissions: remove outdated entries
* etc/permissions: remove unnecessary static dirs and devices
* screen: remove now unused /var/run/uscreens
OBS-URL: https://build.opensuse.org/request/show/822971
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=139
2020-07-30 07:55:40 +00:00
Matthias Gerstner
8d415c2c98
- Update to version 20200727:
...
* etc/permissions: remove static /var/spool/* dirs
* etc/permissions: remove outdated entries
* etc/permissions: remove unnecessary static dirs and devices
* screen: remove now unused /var/run/uscreens
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=274
2020-07-27 12:19:56 +00:00
Dominique Leuenberger
744575cb77
Accepting request 819968 from Base:System
...
- Update to version 20200710:
* Revert "etc/permissions: remove entries for bind-chrootenv". This
currently conflicts with the way the CheckSUIDPermissions rpmlint-check is
implemented.
- Removed dbus-libexec.patch: contained in upstream
- Update to version 20200624:
* rework permissions.local text (boo#1173221)
* dbus-1: adjust to new libexec dir location (bsc#1171164)
* permission profiles: reinstate kdesud for kde5
* etc/permissions: remove entries for bind-chrootenv
* etc/permissions: remove traceroute entry
* VirtualBox: remove outdated entry which is only a symlink any more
* /bin/su: remove path refering to symlink
* etc/permissions: remove legacy RPM directory entries
* /etc/permissions: remove outdated sudo directories
* singularity: remove outdated setuid-binary entries
* chromium: remove now unneeded chrome_sandbox entry (bsc#1163588)
* dbus-1: remove deprecated alternative paths
* PolicyKit: remove outdated entries last used in SLE-11
* pcp: remove no longer needed / conflicting entries
* gnats: remove entries for package removed from Factory
* kdelibs4: remove entries for package removed from Factory
* v4l-base: remove entries for package removed from Factory
* mailman: remove entries for package deleted from Factory
* gnome-pty-helper: remove dead entry no longer part of the vte package
* gnokii: remove entries for package no longer in Factory
* xawtv (v4l-conf): correct group ownership in easy profile
* systemd-journal: remove unnecessary profile entries
OBS-URL: https://build.opensuse.org/request/show/819968
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=138
2020-07-15 09:12:57 +00:00
Matthias Gerstner
1490c88424
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=272
2020-07-10 09:53:12 +00:00
Matthias Gerstner
79548e974d
- Update to version 20200710:
...
* Revert "etc/permissions: remove entries for bind-chrootenv". This
currently conflicts with the way the CheckSUIDPermissions rpmlint-check is
implemented.
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=271
2020-07-10 09:51:12 +00:00
Matthias Gerstner
128acfff3a
Accepting request 819264 from home:gmbr3:Active
...
- Removed dbus-libexec.patch: contained in upstream
OBS-URL: https://build.opensuse.org/request/show/819264
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=270
2020-07-08 07:50:44 +00:00
Matthias Gerstner
71f7833b2a
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=269
2020-07-07 14:32:39 +00:00