rpm/openscap
SHA256
1
0
Fork 0
forked from pool/openscap
Code Pull Requests Activity

Accepting request 1094327 from security

Browse Source 
openscap 1.3.8 (forwarded request 1094324 from rfrohl)

OBS-URL: https://build.opensuse.org/request/show/1094327
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openscap?expand=0&rev=83
This commit is contained in:
Dominique Leuenberger 2023-06-21 20:40:15 +00:00 committed by Git OBS Bridge
commit 13e1b83126
4 changed files with 22 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
openscap-1.3.7.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d31527afa2a315ceba02e2ca7e2d5dbd07c4113febaed60752affef4c79f7233
size 14023080

3
openscap-1.3.8.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:67d2e8ad8309b596b342613cf07635439836f764c42c5226413af6c51ad3a77c
size 14026613

14
openscap.changes
View File

@ -1,3 +1,17 @@
-------------------------------------------------------------------
Wed Jun 21 07:32:35 UTC 2023 - Robert Frohl <rfrohl@suse.com>
- openscap 1.3.8
* New features
- The boot-time remediation service for systemd's Offline Update mode is now disabled by default
- Add offline capabilities to the shadow OVAL probe
- Add offline capabilities to the sysctl OVAL probe
- Add 'auristorfs' to list of network fileystems
- Add new experimental linux-bound fwupdsecattr probe for system firmware security attributes (fwupd-based)
* Maintenance, bug fix
- Use ListUnitFiles D-Bus method to fetch all units in systemd OVAL probe
- Fix minor resource leaks
-------------------------------------------------------------------
Wed Mar 29 15:22:55 UTC 2023 - Marcus Meissner <meissner@suse.com>

8
openscap.spec
View File

@ -23,7 +23,7 @@
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: openscap
Version: 1.3.7
Version: 1.3.8
Release: 0
Summary: A Set of Libraries for Integration with SCAP
License: LGPL-2.1-or-later
@ -185,9 +185,9 @@ This package contains the Script Checking Engine Library (SCE) for OpenSCAP.
%build
%if 0%{?with_bindings}
%cmake -DENABLE_DOCS=TRUE -DCMAKE_SHARED_LINKER_FLAGS=""
%cmake -DENABLE_DOCS=TRUE -DCMAKE_SHARED_LINKER_FLAGS="" -DENABLE_OSCAP_REMEDIATE_SERVICE=TRUE
%else
%cmake -DENABLE_DOCS=TRUE -DENABLE_PYTHON3=FALSE -DENABLE_PERL=FALSE -DCMAKE_SHARED_LINKER_FLAGS=""
%cmake -DENABLE_DOCS=TRUE -DENABLE_PYTHON3=FALSE -DENABLE_PERL=FALSE -DCMAKE_SHARED_LINKER_FLAGS="" -DENABLE_OSCAP_REMEDIATE_SERVICE=TRUE
%endif
%if 0%{?sle_version} > 150100 || 0%{?suse_version} == 1599
%cmake_build
@ -231,6 +231,8 @@ mv %{buildroot}%{_sysconfdir}/bash_completion.d/* %{buildroot}%{_datadir}/bash-c
ln -s %{_datadir}/openscap/scap-yast2sec-oval.xml %{buildroot}/%{_datadir}/openscap/scap-oval.xml
ln -s %{_datadir}/openscap/scap-yast2sec-xccdf.xml %{buildroot}/%{_datadir}/openscap/scap-xccdf.xml
# for some reason the serivce file is put under /usr/usr/lib/systemd..
mv %{buildroot}/usr/%{_unitdir}/oscap-remediate.service %{buildroot}/%{_unitdir}
# oscap-remediate should be in /usr/libexec but this is not well supported in
# older versions of the distro
%if 0%{?suse_version} != 1599