SHA256
1
0
forked from pool/fscrypt

Accepting request 1172978 from filesystems

- update to 0.3.5:
  * Upgraded various dependencies, resolving two security alerts
    from GitHub.
  * `fscrypt` now requires Go 1.18 or later to build.
  * `fscrypt` now provides a better error message when it's asked
    to operate on a locked regular file.
  * Made some improvements to the documentation.

- drop pam-specs from main package
- use pam_moduledir
    script (CVE-2022-25328, command injection).
  * Make pam_fscrypt ignore system users completely.
- refresh 346.patch with final merged state
- add 346.patch (bsc#1195623)
  * Improved the documentation.
- spec-cleaner run

OBS-URL: https://build.opensuse.org/request/show/1172978
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fscrypt?expand=0&rev=5
This commit is contained in:
Dominique Leuenberger 2024-05-10 10:05:25 +00:00 committed by Git OBS Bridge
commit 6370443371
4 changed files with 25 additions and 14 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:fe3c51ecb936226087bb3a62dddda5b7f5cd77dd3be7bf1feb270e1c55eddfa3
size 175778

3
fscrypt-0.3.5.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:368119b5e67c64bdc5f7872ffc7beed425e1401778003f4c7ae7c1062a45ebaf
size 175314

View File

@ -1,3 +1,14 @@
-------------------------------------------------------------------
Thu May 9 18:53:43 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 0.3.5:
* Upgraded various dependencies, resolving two security alerts
from GitHub.
* `fscrypt` now requires Go 1.18 or later to build.
* `fscrypt` now provides a better error message when it's asked
to operate on a locked regular file.
* Made some improvements to the documentation.
-------------------------------------------------------------------
Wed Mar 8 11:28:28 UTC 2023 - Dirk Müller <dmueller@suse.com>
@ -8,7 +19,7 @@ Wed Mar 8 11:28:28 UTC 2023 - Dirk Müller <dmueller@suse.com>
Wed Feb 15 13:58:22 UTC 2023 - Dirk Müller <dmueller@suse.com>
- add fscrypt pam configuration
- drop pam-specs from main package
- drop pam-specs from main package
-------------------------------------------------------------------
Tue Jan 31 07:27:28 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
@ -31,14 +42,14 @@ Tue Jan 31 07:27:28 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
-------------------------------------------------------------------
Tue Mar 8 21:10:23 UTC 2022 - Dirk Müller <dmueller@suse.com>
- use pam_moduledir
- use pam_moduledir
-------------------------------------------------------------------
Thu Feb 24 12:38:24 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.3.3:
* Correctly handle malicious mountpoint paths in the fscrypt bash completion
script (CVE-2022-25328, command injection).
script (CVE-2022-25328, command injection).
* Validate the size, type, and owner (for login protectors) of policy and
protector files (CVE-2022-25327, denial of service).
* Make the fscrypt metadata directories non-world-writable by default
@ -50,18 +61,18 @@ Thu Feb 24 12:38:24 UTC 2022 - Dirk Müller <dmueller@suse.com>
* Make policy and protector files mode 0600 rather than 0644.
* Make all relevant files owned by the user when root encrypts a directory
with a user's login protector, not just the the login protector itself.
* Make pam_fscrypt ignore system users completely.
* Make pam_fscrypt ignore system users completely.
- drop 346.patch: upstream
-------------------------------------------------------------------
Wed Feb 23 22:28:47 UTC 2022 - Dirk Müller <dmueller@suse.com>
- refresh 346.patch with final merged state
- refresh 346.patch with final merged state
-------------------------------------------------------------------
Tue Feb 22 15:39:10 UTC 2022 - Dirk Müller <dmueller@suse.com>
- add 346.patch (bsc#1195623)
- add 346.patch (bsc#1195623)
-------------------------------------------------------------------
Thu Feb 10 20:16:40 UTC 2022 - Dirk Müller <dmueller@suse.com>
@ -78,12 +89,12 @@ Thu Feb 10 20:16:40 UTC 2022 - Dirk Müller <dmueller@suse.com>
* Made fscrypt metadata remove-protector-from-policy work even if the protector
is no longer accessible.
* Made fscrypt stop trying to access irrelevant filesystems.
* Improved the documentation.
* Improved the documentation.
-------------------------------------------------------------------
Fri Feb 4 21:42:05 UTC 2022 - Dirk Müller <dmueller@suse.com>
- spec-cleaner run
- spec-cleaner run
-------------------------------------------------------------------
Wed Oct 20 10:18:41 UTC 2021 - Marcus Rueckert <mrueckert@suse.de>

View File

@ -1,7 +1,7 @@
#
# spec file for package fscrypt
#
# Copyright (c) 2023 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -17,7 +17,7 @@
Name: fscrypt
Version: 0.3.4
Version: 0.3.5
Release: 0
Summary: Go tool for managing Linux filesystem encryption
License: Apache-2.0
@ -31,7 +31,7 @@ BuildRequires: golang-packaging
BuildRequires: m4
BuildRequires: pam-devel
BuildRequires: pkgconfig
BuildRequires: golang(API) >= 1.16
BuildRequires: golang(API) >= 1.18
BuildRequires: pkgconfig(bash-completion)
Requires: pam-fscrypt = %{version}