Commit Graph

  • 891edf95ff Accepting request 1176713 from Base:System factory Ana Guerrero 2024-05-27 09:41:09 +0000
  • da71558db1 - Update to version 1699_20240522: * man pages: minor corrections (bsc#1224822) Matthias Gerstner 2024-05-24 10:38:44 +0000
  • fb7238f878 Accepting request 1175459 from Base:System Ana Guerrero 2024-05-23 13:34:04 +0000
  • 63717dcae1 Accepting request 1175458 from home:fbonazzi:branches:Base:System Filippo Bonazzi 2024-05-21 07:46:05 +0000
  • 1defe2272d Accepting request 1173700 from Base:System Ana Guerrero 2024-05-17 18:03:42 +0000
  • 8b3ec7e312 * chkstat: has been renamed to permctl to better reflect its purpose. A symlink for backward compatibility will remain in place. Matthias Gerstner 2024-05-13 14:45:19 +0000
  • cf1c0de839 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=344 Matthias Gerstner 2024-05-13 14:20:12 +0000
  • 85ab41c2ff - add BuildRequires for acl programs for tests to succeed. Still keep %check disabled, because the new ACL test fails without /etc/subuid, /etc/subgid setup. Matthias Gerstner 2024-05-13 13:11:24 +0000
  • 802bfc3149 - re-enable %check section and add BuildRequires for acl programs for tests to succeed. Matthias Gerstner 2024-05-13 12:00:18 +0000
  • e31dc58aa7 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=341 Matthias Gerstner 2024-05-13 11:59:51 +0000
  • 95652b1f73 - rename chkstat package to permctl to match the new binary names. Establish Provides/Obsoletes to keep dependencies and old package cleanup in working order, see: https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package Matthias Gerstner 2024-05-13 11:37:11 +0000
  • 2cc579008f OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=339 Matthias Gerstner 2024-05-13 11:34:14 +0000
  • 1b60e6b25b - Update to version 1699_20240513: * chkstat: has been renamed to permctl * documentation: updated man pages * ACL support: permctl (formerly chkstat) now supports an additional +acl syntax to support assigning ACLs to files similar to the already existing support for file based capabilities. Matthias Gerstner 2024-05-13 10:50:52 +0000
  • 6c79338a7d Accepting request 1156935 from Base:System Ana Guerrero 2024-03-13 21:15:58 +0000
  • 9be1bb5d47 Accepting request 1156932 from home:mgerstner:branches:Base:System Wolfgang Frisch 2024-03-11 13:01:23 +0000
  • ae3e55887a Accepting request 1155258 from Base:System Dominique Leuenberger 2024-03-07 17:28:27 +0000
  • 05ac334898 Accepting request 1155257 from home:fbonazzi:branches:Base:System Filippo Bonazzi 2024-03-05 14:50:11 +0000
  • cf2725dbc4 Accepting request 1152267 from home:fbonazzi:branches:Base:System Filippo Bonazzi 2024-02-27 12:47:01 +0000
  • a253158e66 Accepting request 1144679 from Base:System Ana Guerrero 2024-02-08 18:02:00 +0000
  • b34329e230 Accepting request 1144678 from home:wfrisch:branches:Base:System Wolfgang Frisch 2024-02-06 16:44:50 +0000
  • 8ac48615f1 Accepting request 1144612 from home:wfrisch:branches:Base:System Wolfgang Frisch 2024-02-06 13:24:14 +0000
  • d424ff5880 Accepting request 1144540 from home:pperego:branches:Base:System Wolfgang Frisch 2024-02-06 13:05:31 +0000
  • ae8ad81df6 Accepting request 1142785 from Base:System Ana Guerrero 2024-01-31 22:53:14 +0000
  • c0b4598e87 Accepting request 1142770 from home:dimstar:Factory Wolfgang Frisch 2024-01-30 12:51:55 +0000
  • fd9a15fe83 Accepting request 1129969 from Base:System Ana Guerrero 2023-12-06 22:46:56 +0000
  • c9d24eb083 Accepting request 1129913 from home:dgarcia:branches:Base:System Wolfgang Frisch 2023-11-30 10:49:23 +0000
  • b511ff832e Accepting request 1090495 from Base:System Dominique Leuenberger 2023-06-06 17:54:51 +0000
  • da6259c057 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=323 Matthias Gerstner 2023-06-02 10:37:53 +0000
  • 9723322b7f - Update to version 20230602: * profiles: remove dropped pppoe-wrapper Matthias Gerstner 2023-06-02 10:36:58 +0000
  • 11a3cea60a Accepting request 1087401 from Base:System Dominique Leuenberger 2023-05-20 15:23:23 +0000
  • 8d90668e27 - Update to version 20230516: * common permissions: add icingaweb2 setgid directory (bsc#1211314) Matthias Gerstner 2023-05-16 11:06:11 +0000
  • 301138147c Accepting request 1083983 from Base:System Dominique Leuenberger 2023-05-04 15:08:59 +0000
  • 10c1a30f69 Accepting request 1082527 from home:wfrisch:branches:Base:System Marcus Meissner 2023-05-02 09:29:26 +0000
  • 8b3ce617f3 Accepting request 1066365 from Base:System Dominique Leuenberger 2023-02-19 17:18:40 +0000
  • a12c51b734 - Update to version 20230217: * shadow: newgidmap,newuidmap: use capabilities (bsc#1208309) * profiles: whitelist kismet capabilities (bsc#1200954) (#171) Matthias Gerstner 2023-02-17 11:13:40 +0000
  • a937513fef Accepting request 1043915 from Base:System Dominique Leuenberger 2022-12-25 14:14:13 +0000
  • d6aae1d6e5 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=314 Matthias Gerstner 2022-12-20 13:08:47 +0000
  • 1a72d7beea address and suppress some rpmlint warnings Matthias Gerstner 2022-12-20 10:43:28 +0000
  • 8237e54dc6 - Update to version 20221220: * profiles: remove outdated kdesud, apptainer entries Matthias Gerstner 2022-12-20 10:05:07 +0000
  • 7857dcdcf7 Accepting request 1006712 from Base:System Dominique Leuenberger 2022-10-03 11:44:40 +0000
  • 92c47597ad Accepting request 1005229 from home:dirkmueller:Factory Matthias Gerstner 2022-09-22 08:44:48 +0000
  • 2b86c48f1a Accepting request 1003262 from Base:System Dominique Leuenberger 2022-09-16 11:31:50 +0000
  • 9c5f7b2461 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=308 Matthias Gerstner 2022-09-13 08:45:51 +0000
  • fb9861a55a - Update to version 20220912: * chkstat: also consider group controlled paths (bsc#1203018, CVE-2022-31252) Matthias Gerstner 2022-09-13 08:40:04 +0000
  • aba2402a27 Accepting request 993693 from Base:System Dominique Leuenberger 2022-08-10 15:13:11 +0000
  • 8e9d7d11f8 Accepting request 993671 from home:dimstar:Factory Dirk Mueller 2022-08-08 07:50:18 +0000
  • 129b813965 Accepting request 991795 from home:coolo:factory:ring0 Matthias Gerstner 2022-08-02 08:12:13 +0000
  • 6d3f59fe3d OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=303 Matthias Gerstner 2022-07-13 13:53:56 +0000
  • 1410009b24 - Update to version 20220713: * postfix: add postlog setgid for maildrop binary (bsc#1201385) * libexec migration: KDE utilities now properly place their helpers * pccardctl: installation path has finally changed to /usr/sbin Matthias Gerstner 2022-07-13 13:53:20 +0000
  • 002599bece Accepting request 961063 from Base:System Dominique Leuenberger 2022-03-14 18:33:57 +0000
  • 75eab2a589 - Update to version 20220309: * apptainer whitelisting (bsc#1196145) Matthias Gerstner 2022-03-11 11:16:53 +0000
  • 1485343c01 Accepting request 915438 from Base:System Dominique Leuenberger 2021-09-06 13:57:50 +0000
  • 58b6579089 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=299 Matthias Gerstner 2021-09-01 08:07:14 +0000
  • e5129cd8f6 - Update to version 20210901: * libksysguard5: Updated path for ksgrd_network_helper * kdesu: Updated path for kdesud * sbin_dirs cleanup: these binaries have already been moved to /usr/sbin * mariadb: revert auth_pam_tool to /usr/lib{,64} again * cleanup: revert virtualbox back to plain /usr/lib * cleanup: remove deprecated /etc/ssh/sshd_config * hawk_invoke is not part of newer hawk2 packages anymore * cleanup: texlive-filesystem: public now resides in libexec * cleanup: authbind: helper now resides in libexec * cleanup: polkit: the agent now also resides in libexec * libexec cleanup: 'inn' news binaries now reside in libexec Matthias Gerstner 2021-09-01 07:35:31 +0000
  • 02fa63bac3 Accepting request 894035 from Base:System Dominique Leuenberger 2021-05-21 19:49:44 +0000
  • ff0b388651 - Update to version 20210518: * whitelist please (bsc#1183669) Matthias Gerstner 2021-05-18 11:16:38 +0000
  • f28bbb953b OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=295 Matthias Gerstner 2021-05-18 09:06:14 +0000
  • e377ed99a1 - Update to version 20210518: * Fix enlightenment paths for 32-bit architectures Matthias Gerstner 2021-05-18 08:03:13 +0000
  • 419195611e Accepting request 866579 from Base:System Dominique Leuenberger 2021-02-01 12:25:09 +0000
  • 818fcee281 - Update to version 20210125: * usbauth: drop compatibility variable for libexec * usbauth: Updated path for usbauth-npriv * profiles: finish usage of variable for polkit-agent-helper-1 Matthias Gerstner 2021-01-25 12:15:26 +0000
  • 6b6f3114f7 Accepting request 853596 from Base:System Dominique Leuenberger 2021-01-10 18:37:58 +0000
  • 172fdb46a3 Accepting request 853107 from home:lnussel:branches:Base:System Matthias Gerstner 2020-12-07 13:52:52 +0000
  • c6c0f68644 Accepting request 847754 from home:mgerstner:branches:Base:System Johannes Segitz 2020-11-11 10:46:39 +0000
  • c95a42da17 Accepting request 840211 from Base:System Dominique Leuenberger 2020-10-15 11:43:38 +0000
  • 5d5b938d79 - Update to version 20201008: * cleanup now useless /usr/lib entries after move to /usr/libexec (bsc#1171164) * drop (f)ping capabilities in favor of ICMP_PROTO sockets (bsc#1174504) Matthias Gerstner 2020-10-08 09:20:05 +0000
  • 3baec52155 Accepting request 838733 from Base:System Dominique Leuenberger 2020-10-04 15:30:04 +0000
  • 802df35b01 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=285 Matthias Gerstner 2020-09-30 09:56:48 +0000
  • 8f56b3bee2 - Update to version 20200930: * whitelist Xorg setuid-root wrapper (bsc#1175867) Matthias Gerstner 2020-09-30 09:28:18 +0000
  • bbf0dfcc04 Accepting request 833221 from Base:System Dominique Leuenberger 2020-09-14 10:02:03 +0000
  • 6b2d70fbf8 - Update to version 20200909: * screen: remove /run/uscreens covered by systemd-tmpfiles (bsc#1171879) Matthias Gerstner 2020-09-09 10:01:23 +0000
  • 994bbe18e7 Accepting request 832056 from Base:System Dominique Leuenberger 2020-09-08 20:55:18 +0000
  • 9d0d5227c9 - Update to version 20200904: * Add /usr/libexec for cockpit-session as new path * physlock: whitelist with tight restrictions (bsc#1175720) Matthias Gerstner 2020-09-04 10:58:24 +0000
  • 8f6334b1fd Accepting request 829800 from Base:System Dominique Leuenberger 2020-08-31 14:47:18 +0000
  • ddf46a06b6 - Update to version 20200826: * mtr-packet: stop requiring dialout group * etc/permissions: fix mtr permission * list_permissions: improve output format * list_permissions: support globbing in --path argument * list_permissions: implement simplifications suggested in PR#92 * list_permissions: new tool for better path configuration overview Malte Kraus 2020-08-26 15:38:36 +0000
  • 8854dfa5fb Accepting request 825923 from Base:System Dominique Leuenberger 2020-08-17 09:59:54 +0000
  • 1226549810 - Update to version 20200811: * regtest: support new getcap output format in libcap-2.42 * regtest: print individual test case errors to stderr Matthias Gerstner 2020-08-11 12:07:22 +0000
  • 488a572e21 Accepting request 822971 from Base:System Dominique Leuenberger 2020-07-30 07:55:40 +0000
  • 8d415c2c98 - Update to version 20200727: * etc/permissions: remove static /var/spool/* dirs * etc/permissions: remove outdated entries * etc/permissions: remove unnecessary static dirs and devices * screen: remove now unused /var/run/uscreens Matthias Gerstner 2020-07-27 12:19:56 +0000
  • 744575cb77 Accepting request 819968 from Base:System Dominique Leuenberger 2020-07-15 09:12:57 +0000
  • 1490c88424 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=272 Matthias Gerstner 2020-07-10 09:53:12 +0000
  • 79548e974d - Update to version 20200710: * Revert "etc/permissions: remove entries for bind-chrootenv". This currently conflicts with the way the CheckSUIDPermissions rpmlint-check is implemented. Matthias Gerstner 2020-07-10 09:51:12 +0000
  • 128acfff3a Accepting request 819264 from home:gmbr3:Active Matthias Gerstner 2020-07-08 07:50:44 +0000
  • 71f7833b2a OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=269 Matthias Gerstner 2020-07-07 14:32:39 +0000
  • af3b1d9d0a - Update to version 20200624: * rework permissions.local text (boo#1173221) * dbus-1: adjust to new libexec dir location (bsc#1171164) * permission profiles: reinstate kdesud for kde5 * etc/permissions: remove entries for bind-chrootenv * etc/permissions: remove traceroute entry * VirtualBox: remove outdated entry which is only a symlink any more * /bin/su: remove path refering to symlink * etc/permissions: remove legacy RPM directory entries * /etc/permissions: remove outdated sudo directories * singularity: remove outdated setuid-binary entries * chromium: remove now unneeded chrome_sandbox entry (bsc#1163588) * dbus-1: remove deprecated alternative paths * PolicyKit: remove outdated entries last used in SLE-11 * pcp: remove no longer needed / conflicting entries * gnats: remove entries for package removed from Factory * kdelibs4: remove entries for package removed from Factory * v4l-base: remove entries for package removed from Factory * mailman: remove entries for package deleted from Factory * gnome-pty-helper: remove dead entry no longer part of the vte package * gnokii: remove entries for package no longer in Factory * xawtv (v4l-conf): correct group ownership in easy profile * systemd-journal: remove unnecessary profile entries * thttp: make makeweb entry usable in the secure profile (bsc#1171580) Matthias Gerstner 2020-07-07 14:19:17 +0000
  • bf581cbf30 Accepting request 815295 from Base:System Dominique Leuenberger 2020-06-24 13:47:27 +0000
  • c23ecff997 Accepting request 815294 from home:mkraus:branches:Base:System Malte Kraus 2020-06-16 16:20:27 +0000
  • ee8dd62848 Accepting request 810755 from Base:System Dominique Leuenberger 2020-06-11 12:40:46 +0000
  • b1726c7dd0 Accepting request 807568 from Base:System Yuchen Lin 2020-05-29 19:19:46 +0000
  • 2c673b8f18 - Update to version 20200526: * profiles: add entries for enlightenment (bsc#1171686) Matthias Gerstner 2020-05-26 13:04:28 +0000
  • 3cb7f26448 Accepting request 807566 from home:mgerstner:branches:Base:System Matthias Gerstner 2020-05-20 10:22:24 +0000
  • b3c2250df9 Accepting request 807173 from home:mgerstner:branches:Base:System Malte Kraus 2020-05-19 09:32:14 +0000
  • 5ae3717c19 - Update to version 20200518: * whitelist texlive public binary (bsc#1171686) Malte Kraus 2020-05-18 12:07:18 +0000
  • 4445ad42e7 Accepting request 805788 from home:mgerstner:branches:Base:System Malte Kraus 2020-05-18 11:33:57 +0000
  • 3b5b9f159c Accepting request 801106 from Base:System Dominique Leuenberger 2020-05-12 20:25:21 +0000
  • 50981bbfa3 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=257 Malte Kraus 2020-05-07 10:01:14 +0000
  • 5e5838f434 - Update to version 20200506: * add whitelist for files in /usr/lib to be also allowed in /usr/libexec (bsc#1171164) Malte Kraus 2020-05-07 10:00:31 +0000
  • 488befb29d Accepting request 787823 from Base:System Dominique Leuenberger 2020-03-30 20:50:49 +0000
  • 7dcf78b266 Accepting request 787822 from home:jsegitz:branches:Base:System Johannes Segitz 2020-03-24 14:13:59 +0000
  • 023c747578 Accepting request 780979 from Base:System Dominique Leuenberger 2020-03-06 20:23:21 +0000
  • c1a2fada58 Accepting request 780264 from home:mkraus:branches:Base:System Matthias Gerstner 2020-03-02 13:50:40 +0000