Commit Graph

515 Commits

Author SHA256 Message Date
Johannes Segitz
a3b9cd1f6d Accepting request 849108 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
This is necessary for permissions sr#847756 to continue.

- Update to version master:
  * Permissions: be robust against variables.conf not existing
  * CheckSUIDPermissions: enhance parser to support new permissions variables

OBS-URL: https://build.opensuse.org/request/show/849108
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=759
2020-11-23 08:22:27 +00:00
Malte Kraus
7f8b2a055c Accepting request 846039 from home:mkraus:branches:devel:openSUSE:Factory:rpmlint
- allow pam_faillock.so PAM module (bsc#1171562)

OBS-URL: https://build.opensuse.org/request/show/846039
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=757
2020-11-04 16:37:02 +00:00
Malte Kraus
9411865887 Accepting request 845033 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist malcontent PAM module (bsc#1177974)

OBS-URL: https://build.opensuse.org/request/show/845033
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=756
2020-11-04 16:29:25 +00:00
79b310f3f6 Accepting request 842500 from home:13ilya:branches:devel:openSUSE:Factory:rpmlint
- Add user "fluidsynth" for FluidSynth General Midi daemon.

OBS-URL: https://build.opensuse.org/request/show/842500
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=754
2020-10-19 17:41:56 +00:00
3a9a72cc20 Accepting request 841162 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist plasma5-disks smartmon helper (bsc#1176742)

OBS-URL: https://build.opensuse.org/request/show/841162
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=752
2020-10-13 19:06:59 +00:00
1c67a9bbbe Accepting request 838983 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist D-Bus files for powerdevil chargethreshold (bsc#1176474)

OBS-URL: https://build.opensuse.org/request/show/838983
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=750
2020-10-01 21:12:25 +00:00
7825840ab7 Accepting request 838926 from home:polslinux:branches:devel:openSUSE:Factory:rpmlint
- Add 'gerbera' as standard user and group

OBS-URL: https://build.opensuse.org/request/show/838926
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=749
2020-10-01 11:45:29 +00:00
698ac127ed Accepting request 833828 from home:szotsaki:branches:devel:openSUSE:Factory:rpmlint
In two different commits:
- Alphabetise StandardGroups and StandardUsers
- Add 'radicale' as a standard user and group

OBS-URL: https://build.opensuse.org/request/show/833828
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=748
2020-09-30 13:37:09 +00:00
39dd7f4e55 Accepting request 826612 from home:mstrigl:branches:devel:openSUSE:Factory:rpmlint
- add user "jvb", "jibri", "jicofo" and group "jitsi" for Jitsi
  videomeeting service

OBS-URL: https://build.opensuse.org/request/show/826612
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=746
2020-08-16 02:14:05 +00:00
Johannes Segitz
d8994ce7f2 Accepting request 823721 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- Update of rpmlint-tests to version 84.87+git20200724.ef05f7e:
  * use /usr/bin/su instead of /bin/su since the latter is no longer allowed

- Update of rpmlint-checks to version master:
  * Introduce new metadata whitelist type and related checks. Device files and
    world-writeable files will now be covered by new whitelists from
    rpmlint-security-whitelistings.
- config: Enable new CheckWorldWritable and CheckDeviceFiles

OBS-URL: https://build.opensuse.org/request/show/823721
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=743
2020-07-31 11:30:01 +00:00
Malte Kraus
b9aba72033 Accepting request 822591 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist kanidm PAM module (bsc#1173387)

OBS-URL: https://build.opensuse.org/request/show/822591
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=741
2020-07-24 09:11:23 +00:00
d1c25abc7d Accepting request 819518 from home:13ilya:branches:devel:openSUSE:Factory:rpmlint
- Add user and group "ptokax" for PtokaX DC++ hub.

OBS-URL: https://build.opensuse.org/request/show/819518
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=739
2020-07-15 11:40:29 +00:00
Johannes Segitz
d940dd7a53 Accepting request 821044 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist D-Bus files for libvirt-dbus (bsc#1173093)

OBS-URL: https://build.opensuse.org/request/show/821044
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=738
2020-07-15 08:12:23 +00:00
71dc6baf16 Accepting request 815937 from home:eeich:branches:devel:openSUSE:Factory:rpmlint
- Add user/group 'conman' and 'munge' and group 'warewulf'.

OBS-URL: https://build.opensuse.org/request/show/815937
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=736
2020-06-23 11:59:11 +00:00
1ad8a5ea28 Accepting request 814190 from home:cunix:branches:devel:openSUSE:Factory:rpmlint
Add 'dnscrypt' to StandardGroups and StandardUsers for package dnscrypt-proxy
from project server:dns for Factory submission.

OBS-URL: https://build.opensuse.org/request/show/814190
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=734
2020-06-15 16:49:29 +00:00
48547f82ca Accepting request 811259 from home:mnhauke:branches:devel:openSUSE:Factory:rpmlint
- Add '_gns3' to StandardGroups and StandardUsers

OBS-URL: https://build.opensuse.org/request/show/811259
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=731
2020-06-05 11:00:20 +00:00
Johannes Segitz
7e3a24b025 Accepting request 811361 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist pam_setquota (bsc#1171563)

OBS-URL: https://build.opensuse.org/request/show/811361
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=730
2020-06-04 10:51:30 +00:00
Johannes Segitz
6830adfb18 Accepting request 808695 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist pam_usertype (bsc#1171564)

OBS-URL: https://build.opensuse.org/request/show/808695
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=728
2020-05-25 10:03:55 +00:00
Johannes Segitz
87a2ef4370 Accepting request 807747 from home:jsegitz:branches:devel:openSUSE:Factory:rpmlint
- whitelist cockpit PAM modules (bsc#1169614)
  * pam_cockpit_cert
  * pam_ssh_add

OBS-URL: https://build.opensuse.org/request/show/807747
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=727
2020-05-20 14:44:46 +00:00
adf9efa693 Accepting request 807493 from home:adrianSuSE:branches:devel:openSUSE:Factory:rpmlint
- Add daapd user and group for new forked-daapd package

OBS-URL: https://build.opensuse.org/request/show/807493
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=726
2020-05-20 09:45:39 +00:00
86ed0bb082 Accepting request 807131 from home:trenn:branches:devel:openSUSE:Factory:rpmlint
- Add '_cscreen' to StandardGroups and StandardUsers

OBS-URL: https://build.opensuse.org/request/show/807131
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=725
2020-05-20 07:50:48 +00:00
Johannes Segitz
d929abd66e Accepting request 802960 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
Cleanup of deprecated DBUSServices.WhiteList entries:
- ca.desrt.dconf.service: this service was changed by upstream from a
  system-wide service to a session based service. The latter doesn't require a
  whitelisting any more.
- wicked services (network-nanny.conf, wicked-dhcp4.conf, wicked-dhcp6.conf,
  wicked-autoip4.conf, wicked.conf): these have been renamed in August 2013
  to org.opensuse.Network.*.conf. The old names probably never got released.
- nfs-ganesha.service: A D-Bus file of that name probably never existed,
  there's just a regular systemd unit of that name.
- org.drbd.drbdmanaged.conf, org.drbd.drbdmanaged.service: drbdmanage was just
  recently removed from Factory via sr#798685, because it is Python2 only and
  unmaintained.
- org.freedesktop.NetworkManager.service: was removed in 2012, Factory
  revision 118, `Remove dbus system-service for NetworkManager, to prevent
  warnings about it not being running (bnc#738596)`.
- org.kde.auth.conf: was from kdelibs4, removed from Factory in late 2019 via
  sr#738276 with the rest of kde4.
- org.kde.kcontrol.kcmkdm.conf, org.kde.kcontrol.kcmkdm.service: was part of
  kdebase4-workspace, got deleted from Factory with the rest of kde4.
- org.kde.kcontrol.kcmkwallet.conf, org.kde.kcontrol.kcmkwallet.service: they
  got renamed to kcmkwallet5.
- org.opensuse.openqa.conf: upstream replaced a D-Bus interface with HTTP.
- org.opensuse.zoneswitcher.service, org.opensuse.zoneswitcher.conf: the fwzs
  package got removed together with SuSEfirewall2 via sr#713580.
- org.selinux.service: isn't included any more in our packaging of
  policycoreutils.
- thunderbolt.conf, thunderbolt.service: this service never went live in
  Factory.
- yum-updatesd.conf: yum was removed from Factory via sr#749200
- openattic.conf, openattic.service: was part of SES3 but seems to have

OBS-URL: https://build.opensuse.org/request/show/802960
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=723
2020-05-12 12:33:51 +00:00
Malte Kraus
d5eff3e6a1 Accepting request 802653 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist oddjob D-Bus services and PAM module (bsc#1169494)

OBS-URL: https://build.opensuse.org/request/show/802653
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=722
2020-05-11 10:52:05 +00:00
Johannes Segitz
fb19205908 Accepting request 793283 from home:weberho:branches:devel:openSUSE:Factory:rpmlint
Added 'coturn' to StandardGroups and StandardUsers

OBS-URL: https://build.opensuse.org/request/show/793283
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=720
2020-04-16 14:09:56 +00:00
Malte Kraus
f45585e94c Accepting request 790149 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- Update to version master:
  * Whitelisting: avoid duplicate checks / error messages for the same files
  * Whitelisting: fix whitelisting checks when files are symbolic links
  * Mention upstream repo in README

OBS-URL: https://build.opensuse.org/request/show/790149
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=718
2020-03-31 12:36:07 +00:00
36eb156f9b Accepting request 789355 from home:DocB:branches:devel:openSUSE:Factory:rpmlint
boo#1167431

OBS-URL: https://build.opensuse.org/request/show/789355
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=717
2020-03-31 08:07:49 +00:00
Malte Kraus
597fb37170 - config: enable MixedFileOwnerships lint
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=714
2020-02-20 14:09:20 +00:00
Malte Kraus
8bf0f5333a Accepting request 777641 from home:WernerFink:branches:devel:openSUSE:Factory:rpmlint
- config: add 'mktex' to StandardUsers (boo#1159740)

OBS-URL: https://build.opensuse.org/request/show/777641
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=713
2020-02-20 14:03:29 +00:00
Johannes Segitz
52b593a69e Accepting request 774885 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- whitelist new mariadb pam module "pam_user_map.so" (bsc#1163362)

OBS-URL: https://build.opensuse.org/request/show/774885
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=712
2020-02-17 17:06:04 +00:00
Malte Kraus
525bafdf5d Accepting request 770508 from Base:System
- Update to version master:
  * CheckSUIDPermissions.py: fix permissions.d checks
  * add a lint to catch insecure mixed file/directory ownership similar to CVE-2019-3689

- Update to version 84.87+git20200206.7e2b64f:
  * permissions2: test that allowed permissions.d drop-ins work
  * test for new file-parent-ownership-mismatch lint

- Update to version master:
  * CheckSUIDPermissions.py: fix permissions.d checks
  * add a lint to catch insecure mixed file/directory ownership similar to CVE-2019-3689

- Update to version 84.87+git20200206.7e2b64f:
  * permissions2: test that allowed permissions.d drop-ins work
  * test for new file-parent-ownership-mismatch lint

OBS-URL: https://build.opensuse.org/request/show/770508
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=710
2020-02-07 08:54:41 +00:00
Johannes Segitz
138345eba6 Accepting request 769018 from home:mgerstner:branches:devel:openSUSE:Factory:rpmlint
- Whitelist a batch of PAM modules that have been forgotted to be whitelisted
  in the past, or have never been requested to be reviewed before
  (bsc#1150178).
  Since we want to add badness to the PAM warning in rpmlint we need to add
  those entries to avoid build errors of existing packages in Factory.

OBS-URL: https://build.opensuse.org/request/show/769018
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=708
2020-01-31 10:41:05 +00:00
24897f77ef Accepting request 768836 from home:jfehlig:branches:devel:openSUSE:Factory:rpmlint
Add 'sanlock' and 'libvirt' to config. The sanlock package adds
the 'sanlock' user and group. The libvirt package adds the 'libvirt'
group and makes use of the 'sanlock' group. These changes are needed
to squelch rpmlint warnings in the sanlock and libvirt packages.

- config: add 'sanlock' to StandardGroups and StandardUsers
- config: add 'libvirt' to StandardGroups

OBS-URL: https://build.opensuse.org/request/show/768836
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=707
2020-01-31 09:24:06 +00:00
Johannes Segitz
32adcd543d Accepting request 768785 from home:jsegitz:branches:devel:openSUSE:Factory:rpmlint
- Update to version 84.87+git20200130.c0de5f4:
  * libzork4.spec: removed define for 'basename' in libzork4.spec. 
    This causes build errors because 'basename' is a builtin and it's 
    not used

- Update to version 84.87+git20200115.9339533:
  * use uname -m instead of uname -i as the latter is not portable
  * remove rpm directory upon make clean
  * Support for different output based on architecture. For that create a
    <NAME>.<ARCH>.ref file instead of <NAME>.ref E.g. debug.i386.ref
  * verify that new permissions paths need whitelisting

- Update to version master:
  * CheckCronJobs: correct cronjob-unauthorized-file explanation
  * Use named constants to check file modes
  * CheckSUIDPermissions.py: check new permission paths

OBS-URL: https://build.opensuse.org/request/show/768785
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=706
2020-01-30 15:50:27 +00:00
8db6ea5999 - finally enable the new CheckCronJobs, the check is now available and should
work in rpmlint-mini (bsc#1150175)

OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=703
2019-12-18 11:42:10 +00:00
76fb2069bd Accepting request 757371 from home:smithfarm:branches:devel:openSUSE:Factory:rpmlint
prepare rpmlint for ceph SR

OBS-URL: https://build.opensuse.org/request/show/757371
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=702
2019-12-16 15:48:04 +00:00
22e9ba8cf6 - whitelist pam_cgfs PAM module (bsc#1150519)
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=701
2019-12-16 13:26:51 +00:00
f3e36798eb - whitelist pam_pwquality PAM module (bsc#1150520)
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=700
2019-12-16 13:24:51 +00:00
b4df9f88b0 - whitelist pam_cifscreds PAM module (bsc#1150527)
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=699
2019-12-16 12:51:23 +00:00
fb793effa8 - Update to version master:
* new common whitelisting code for CheckPolkitPrivs and CheckCronJobs

OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=697
2019-12-10 14:48:51 +00:00
Malte Kraus
e91e194417 - whitelist sssd infopipe (bsc#1157663)
- whitelist sysprof3 D-Bus services (bsc#1151418)

OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=696
2019-11-28 12:04:28 +00:00
192888ea35 Accepting request 738852 from Base:System
OBS-URL: https://build.opensuse.org/request/show/738852
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=694
2019-10-17 13:46:28 +00:00
8634d90845 Accepting request 738659 from home:lnussel:branches:Base:System
- filter install-info warnings. Handled by file triggers now (boo#1152169)

OBS-URL: https://build.opensuse.org/request/show/738659
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=693
2019-10-16 07:25:50 +00:00
8a570a7618 Accepting request 734012 from home:mimi_vx:branches:devel:openSUSE:Factory:rpmlint
-  update add-check-for-a-non-zero-.text-segment-in-.a-archive.patch
 * fix condition for path

OBS-URL: https://build.opensuse.org/request/show/734012
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=691
2019-10-03 08:13:15 +00:00
0b4213f78a Accepting request 732196 from home:mimi_vx:branches:devel:openSUSE:Factory:rpmlint
- Update to version 84.87+git20190920.e27d431:
  * Fix tests with disabled 'group' checks

- update add-check-for-a-non-zero-.text-segment-in-.a-archive.patch
  * dont check empty .text section on GHC libraries

OBS-URL: https://build.opensuse.org/request/show/732196
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=689
2019-09-20 17:01:55 +00:00
Malte Kraus
56e0c71f5a - whitelist pam_envoy (bsc#1150525)
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=688
2019-09-20 16:06:46 +00:00
e95bf7fc29 - Update rpmlint-checks to version master:
* CheckFilelist: Add /usr/libexec to set of good prefixes

OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=687
2019-09-17 12:36:10 +00:00
ae2420d5d2 is not really mandatory (fate#326485)
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=685
2019-08-30 12:33:28 +00:00
9cac9e4457 Accepting request 726708 from home:scarabeus_iv:branches:devel:openSUSE:Factory:rpmlint
- Update to version 84.87+git20190828.2c92180:
  * Revert "added LTO errors as expected for debug tests"

- Update to version 84.87+git20190828.8fa8ac5:
  * Do not use -flto for debug tests.

- Update to version 84.87+git20190828.2c92180:
  * Revert "added LTO errors as expected for debug tests"

- Update to version 84.87+git20190828.8fa8ac5:
  * Do not use -flto for debug tests.

- Do not validate rpm groups to avoid rpmlint warning as the group
  is not really mandatory

OBS-URL: https://build.opensuse.org/request/show/726708
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=684
2019-08-30 12:32:56 +00:00
82d48ca783 - whitelist systemd-portabled dbus files (boo#1145639)
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=683
2019-08-22 08:59:27 +00:00
87182c5b55 Accepting request 724712 from home:kukuk:etc
- Update to version master:
  * Allow /usr/etc as discussed on opensuse-factory and opensuse-packaging

- Update to version master:
  * Allow /usr/etc as discussed on opensuse-factory and opensuse-packaging

OBS-URL: https://build.opensuse.org/request/show/724712
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=682
2019-08-20 09:34:28 +00:00