diff --git a/directory.list b/directory.list index 34c4882..fc6245c 100644 --- a/directory.list +++ b/directory.list @@ -47,6 +47,7 @@ 0755 root root /usr/etc/skel 0755 root root /usr/etc/skel/bin 0755 root root /usr/etc/skel/.fonts +0700 root root /usr/etc/skel/.cache 0700 root root /usr/etc/skel/.config 0700 root root /usr/etc/skel/.local 0755 root root /usr/etc/xdg diff --git a/filesystem.changes b/filesystem.changes index d36f6f3..b59afff 100644 --- a/filesystem.changes +++ b/filesystem.changes @@ -1,8 +1,18 @@ +------------------------------------------------------------------- +Mon Feb 1 14:23:11 CET 2021 - ro@suse.de + +- add /usr/etc/skel/.cache with perm 0700 (boo#1181011) + +------------------------------------------------------------------- +Fri Jan 29 13:29:53 UTC 2021 - Ludwig Nussel + +- Set correct permissions when creating /proc and /sys + ------------------------------------------------------------------- Mon Nov 16 14:22:50 UTC 2020 - Ludwig Nussel - /proc and /sys should be %ghost to allow filesystem package updates in - rootless container environments (rh#1548403) + rootless container environments (rh#1548403) (boo#1146705) ------------------------------------------------------------------- Sat Oct 10 12:41:34 UTC 2020 - Callum Farmer diff --git a/filesystem.spec b/filesystem.spec index b0892c1..fed3336 100644 --- a/filesystem.spec +++ b/filesystem.spec @@ -1,7 +1,7 @@ # # spec file for package filesystem # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -238,7 +238,9 @@ if posix.stat("/var/lock.rpmsave.tmpx") then os.remove("/var/lock.rpmsave.tmpx") end posix.mkdir("/proc") +posix.chmod("/proc", 0555) posix.mkdir("/sys") +posix.chmod("/sys", 0555) %files -f filesystem.list /usr/lib/tmpfiles.d/fs-tmp.conf