|
|
|
|
@@ -1,3 +1,180 @@
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 23 10:14:41 UTC 2026 - Wolfgang Frisch <wolfgang.frisch@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20260122.948835f5:
|
|
|
|
|
* systemd-tmpfiles: drop pcfclock whitelisting
|
|
|
|
|
* sysctl-whitelist: drop unnecessary Kubernetes entry
|
|
|
|
|
* sysctl-whitelist: drop libvirt userfault fd config
|
|
|
|
|
* sudoers-whitelist: add servicetray (bsc#1257103)
|
|
|
|
|
* sudoers-whitelist: add sudo-policy drop-in configuration files (bsc#1257092)
|
|
|
|
|
* sudoers-whitelist: adjust aeon/kalpa whitelistings to /usr/etc
|
|
|
|
|
* sudoers-whitelist: include /usr/etc/sudoers.d
|
|
|
|
|
* systemd-tmpfiles: migrate texlive (bsc#1256841)
|
|
|
|
|
* SystemdTmpfilesCheck: handle arguments with spaces
|
|
|
|
|
* polkit-rules-whitelist: add InputPlumber (bsc#1249149)
|
|
|
|
|
* dbus-services: whitelist InputPlumber (bsc#1249149)
|
|
|
|
|
* dbus-services: whitelist tlp-pd (bsc#1254768)
|
|
|
|
|
* dbus-services: replace nodigests entries with digests entries (bsc#1215247)
|
|
|
|
|
* dbus-services whitelist: drop invalid paths from nodigests entries
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 13 12:46:27 UTC 2026 - Wolfgang Frisch <wolfgang.frisch@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20260113.b6544793:
|
|
|
|
|
* polkit-rules-whitelist: add systemd-259 empower.rules (bsc#1255368)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 13 12:04:21 UTC 2026 - Wolfgang Frisch <wolfgang.frisch@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20260113.b7794751:
|
|
|
|
|
* dbus-services: whitelist bootkitd (bsc#1256421)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 12 15:02:56 UTC 2026 - Wolfgang Frisch <wolfgang.frisch@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20260112.61bffa2a:
|
|
|
|
|
* systemd-tmpfiles: whitelist sendmail spool directory (bsc#1256160)
|
|
|
|
|
* dbus-services: whitelist snapd (bsc#1256175)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 09 17:21:54 UTC 2026 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20260109.9de011f4:
|
|
|
|
|
* systemd-tmpfiles: whitelist dracut /boot/dracut cleanup entry (bsc#1256380)
|
|
|
|
|
* configs/openSUSE: whitelist Foomuuri D-Bus and sysctl files (bsc#1254385)
|
|
|
|
|
* systemd-tmpfiles: add aaa_base /var/adm dirs (bsc#1255794)
|
|
|
|
|
* DBusPolicyCheck: Catch unsafe wildcard allow lists in policies (bsc#1215247)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 07 13:52:34 UTC 2026 - Wolfgang Frisch <wolfgang.frisch@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20260107.d0f65b36:
|
|
|
|
|
* permissions-whitelist: update postfix (bsc#1254597)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 19 11:41:46 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251215.35efabff:
|
|
|
|
|
* Fix lint
|
|
|
|
|
* MenuXDGCheck: Fix error string
|
|
|
|
|
* Remove post-without-tmpfile-creation warning
|
|
|
|
|
* Format and modify test/spec/bogus-date.spec
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 12 14:53:51 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251212.031b8a08:
|
|
|
|
|
* pam-modules whitelist: fix account-utils glob pattern
|
|
|
|
|
* permissions-whitelist: add migrated shadow-pw-mgmt (bsc#1254844)
|
|
|
|
|
* dbus-services: whitelist smb4k (bsc#1249004)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 02 11:41:39 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251202.24cc5a2f:
|
|
|
|
|
* whitelists: add account-utils PAM modules and permissions.d drop-in file (bsc#1254218)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 28 11:42:48 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251125.b54a5e0f:
|
|
|
|
|
* opensuse.toml: block filters for sudoers-, sysctl- whitelisting errors
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 21 15:14:04 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251120.ec01a0fd:
|
|
|
|
|
* Revert "sysctl-whitelist: Support old aaa_base whitelisting"
|
|
|
|
|
* permissions: snap-confine (bsc#1248682)
|
|
|
|
|
* dbus-services: whitelist lightdm-kde-greeter (bsc#1249146)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 07 09:47:26 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251107.a65b622f:
|
|
|
|
|
* polkit-rules-whitelist: extend whitelisting to systemd-mini flavour
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 03 13:34:34 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251103.f505f80e:
|
|
|
|
|
* sysctl-whitelist: Support old aaa_base whitelisting
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 03 10:50:55 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251103.a49f9de0:
|
|
|
|
|
* Drop dir-or-file-outside-snapshot badness to zero for now (bsc#1253008)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 31 09:45:54 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251031.69a6412f:
|
|
|
|
|
* lint: Fix rpmlintrc option parsing
|
|
|
|
|
* sysctl-whitelist: whitelist new default hiding of dmesg (bsc#1249686)
|
|
|
|
|
* test: Add some tests for AtomicUpdateCheck
|
|
|
|
|
* Add checks for atomic update compatibility
|
|
|
|
|
* sysctl-whitelist: add health-checker panic=5 (bsc#1252778)
|
|
|
|
|
* cli: Remove double check of rpmlintrc file
|
|
|
|
|
* Permit repeating --rpmlintrc
|
|
|
|
|
* Fix typo
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 28 09:32:57 UTC 2025 - Matthias Gerstner <matthias.gerstner@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251027.5075e84c:
|
|
|
|
|
* systemd-tmpfiles: whitelist custom Samba printer spool dir (bsc#1251267)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 02 13:13:07 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20251002.5cd04141:
|
|
|
|
|
* dbus-services: whitelist systemd-homed v258 changes (bsc#1250884)
|
|
|
|
|
* polkit-rules-whitelist: add systemd v258 example file (bsc#1250844)
|
|
|
|
|
* whitelistings: remove outdated GNOME entries
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 09 16:18:41 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20250909.1bb96561:
|
|
|
|
|
* Synced /var/spool/mail entry with Factory filesystem package.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 08 10:00:16 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.8.0+git20250908.1aa5d478:
|
|
|
|
|
* Resolve `superfluous-parens`
|
|
|
|
|
* Resolve `use-implicit-booleaness-not-len`
|
|
|
|
|
* Resolve `redefined-outer-name`
|
|
|
|
|
* Resolve `consider-using-in`
|
|
|
|
|
* Resolve `consider-merging-isinstance`
|
|
|
|
|
* Simplify `AbstractPkg._gather_aux` to resolve `consider-using-enumerate`
|
|
|
|
|
* Resolve `no-else-raise`
|
|
|
|
|
* Resolve `no-else-return`
|
|
|
|
|
* Use list comprehensions
|
|
|
|
|
* Resolve `consider-using-sys-exit`
|
|
|
|
|
* Simplify code by using `sorted()`
|
|
|
|
|
* Release 2.8.0
|
|
|
|
|
* AlternativesCheck: detect update-alternatives on Fedora
|
|
|
|
|
* Run only once the validate_filters per call
|
|
|
|
|
* ZipCheck: fix utf8 decoding erros in jarfile manifest
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 05 14:05:55 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to version 2.7.0+git20250905.7717a72c:
|
|
|
|
|
* whitelistings: add new GNOME49 D-Bus/Polkit digests (bsc#1248881, bsc#1249067, bsc#1248979)
|
|
|
|
|
* scoring: raise badness for logrotate-user-writable-log-dir (bsc#1245961)
|
|
|
|
|
* word-writable-whitelist: remove postfix-bdb /var/spool/mail no longer packaged
|
|
|
|
|
* pam-modules: drop pam_csync no longer packaged in Factory
|
|
|
|
|
* dbus-services: drop passim which never reached Factory
|
|
|
|
|
* dbus-services: drop rebootmgr (is now using varlink)
|
|
|
|
|
* dbus-services: drop no longer needed deepin whitelistings
|
|
|
|
|
* Added the SMTP Daemon (_smtpd) and the SMTPD Queue (_smtpq) users and groups for OpenSMTPD.
|
|
|
|
|
* configs/openSUSE/users-groups.toml: add user opencloud-server
|
|
|
|
|
* configs/openSUSE/users-groups.toml: add group opencloud-server
|
|
|
|
|
* Update users-groups.toml redis
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 10 13:28:53 UTC 2025 - Filippo Bonazzi <filippo.bonazzi@suse.com>
|
|
|
|
|
|
|
|
|
|
|