bnc#800993
- Rebased using ccs-tools-1.8.3.
- /usr/sbin/tomoyo-queryd
Use query id rather than global PID when reading or updating target
process's domain policy.
- /usr/lib/tomoyo/init_policy
Add "socket:[family=\\$:type=\\$:protocol=\\$]" to ANY_PATHNAME group.
- /sbin/tomoyo-init
Parse statistics lines correctly.
- /usr/sbin/tomoyo-editpolicy
Print number of selected entries if any.
- /usr/lib/libtomoyotools.so
Fix IP address parsing.
- /usr/sbin/tomoyo-checkpolicy
Fix namespace prefix parsing in exception policy.
- Rename manpage for init_policy to tomoyo_init_policy
(to allow parallel installation of ccs-tools package).
OBS-URL: https://build.opensuse.org/package/show/security/tomoyo-tools?expand=0&rev=15
Verify GPG signature: Perform build-time offline GPG verification.
Please verify that included keyring matches your needs.
For manipulation with the offline keyring, please use gpg-offline tool from openSUSE:Factory, devel-tools-building or Base:System.
See the man page and/or /usr/share/doc/packages/gpg-offline/PACKAGING.HOWTO.
If you need to build your package for older products and don't want to mess spec file with ifs, please follow PACKAGING.HOWTO:
you can link or aggregate gpg-offline from
devel:tools:building or use following trick with "osc meta prjconf":
--- Cut here ----
%if 0%{?suse_version} <= 1220
Substitute: gpg-offline
%endif
Macros:
%gpg_verify(dnf) \
%if 0%{?suse_version} > 1220\
echo "WARNING: Using %%gpg_verify macro from prjconf, not from gpg-offline package."\
gpg-offline --directory="%{-d:%{-d*}}%{!-d:%{_sourcedir}}" --package="%{-n:%{-n*}}%{!-n:%{name}}""%{-f: %{-f*}}" --verify %{**}\
%else\
echo "WARNING: Dummy prjconf macro. gpg-offline is not available, skipping %{**} GPG signature verification!"\
%endif\
%nil
-----------------
OBS-URL: https://build.opensuse.org/request/show/143937
OBS-URL: https://build.opensuse.org/package/show/security/tomoyo-tools?expand=0&rev=13
