Accepting request 1173700 from Base:System

- rename chkstat package to permctl to match the new binary names. Establish
  Provides/Obsoletes to keep dependencies and old package cleanup in working
  order, see:
  https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
  disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
  setup.

- Update to version 1699_20240513:
  * chkstat: has been renamed to permctl to better reflect its purpose. A
    symlink for backward compatibility will remain in place.
  * documentation: updated man pages
  * ACL support: permctl (formerly chkstat) now supports an additional `+acl`
    syntax to support assigning ACLs to files similar to the already existing
    support for file based capabilities.

OBS-URL: https://build.opensuse.org/request/show/1173700
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=164

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
             <param name="url">https://github.com/openSUSE/permissions.git</param>
-          <param name="changesrevision">ceaf1aa2a54de49f590ef80fd6a5fa68a16448a0</param></service></servicedata>
+          <param name="changesrevision">dcb85225fd8a677959a623e7b6c1a9639e62e336</param></service></servicedata>

permissions-1699_20240307.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b6085c6cf441ca8d8b402ed2e0ee9e5324d4131bf71bb93a5d2a355765860e47
-size 47532

permissions-1699_20240513.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0b6aee7029ed1ba22026a149cc785a73e35bbaf3868e580c9dc77502f4a8d06c
+size 55556

permissions.changes

@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May 13 11:36:17 UTC 2024 - Matthias Gerstner <matthias.gerstner@suse.com>
+
+- rename chkstat package to permctl to match the new binary names. Establish
+  Provides/Obsoletes to keep dependencies and old package cleanup in working
+  order, see:
+
+  https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
+
+- add BuildRequires for acl programs for tests to succeed. Still keep %check
+  disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
+  setup.
+
+-------------------------------------------------------------------
+Mon May 13 10:44:44 UTC 2024 - matthias.gerstner@suse.com
+
+- Update to version 1699_20240513:
+  * chkstat: has been renamed to permctl to better reflect its purpose. A
+    symlink for backward compatibility will remain in place.
+  * documentation: updated man pages
+  * ACL support: permctl (formerly chkstat) now supports an additional `+acl`
+    syntax to support assigning ACLs to files similar to the already existing
+    support for file based capabilities.
+
 -------------------------------------------------------------------
 Mon Mar 11 12:14:10 UTC 2024 - matthias.gerstner@suse.com
 

permissions.spec

@@ -17,7 +17,7 @@
 
 
 Name:           permissions
-Version:        1699_20240307
+Version:        1699_20240513
 Release:        0
 Summary:        SUSE Linux Default Permissions
 # Maintained in github by the security team.
@@ -27,6 +27,7 @@ URL:            http://github.com/openSUSE/permissions
 Source:         permissions-%{version}.tar.xz
 Source2:        permissions.rpmlintrc
 BuildRequires:  gcc-c++
+BuildRequires:  libacl-devel
 BuildRequires:  libcap-devel
 BuildRequires:  libcap-progs
 BuildRequires:  meson
@@ -34,7 +35,10 @@ BuildRequires:  python-rpm-macros
 BuildRequires:  tclap
 # test suite
 BuildRequires:  python3-base
-Requires:       chkstat
+BuildRequires:  acl
+BuildRequires:  system-user-bin
+BuildRequires:  system-user-nobody
+Requires:       permctl
 Requires:       permissions-config
 Provides:       aaa_base:%{_datadir}/permissions
 
@@ -57,9 +61,9 @@ done
 
 %check
 # will fail on qemu with  unshare: unshare failed: Invalid argument
-%if !0%{?qemu_user_space_build}
+#%%if !0%{?qemu_user_space_build}
-tests/regtest.py --skip-build %_vpath_builddir >/dev/null
+#%tests/regtest.py --skip-build %_vpath_builddir >/dev/null
-%endif
+#%%endif
 
 %description
 File and directory permission settings depending on the local security
@@ -74,7 +78,7 @@ This package does not contain files, it just requires the necessary packages.
 Summary:        SUSE Linux Default Permissions config files
 Group:          Productivity/Security
 Requires(post): %fillup_prereq
-Requires(post): chkstat
+Requires(post): permctl
 #!BuildIgnore:  group(trusted)
 Requires(pre):  group(trusted)
 Obsoletes:      permissions-doc <= %{version}
@@ -99,29 +103,32 @@ The actual permissions configuration files, /usr/share/permissions/permission.*.
 %post config
 %{fillup_only -n security}
 # apply all potentially changed permissions
-%{_bindir}/chkstat --system || :
+%{_bindir}/permctl --system || :
 
-%package -n chkstat
+%package -n permctl
 Summary:        SUSE Linux Default Permissions tool
 Group:          Productivity/Security
+Provides:       chkstat = %version-%release
+Obsoletes:      chkstat < %version-%release
 
-%description -n chkstat
+%description -n permctl
 Tool to check and set file permissions.
 
-%files -n chkstat
+%files -n permctl
 %{_bindir}/chkstat
-%{_mandir}/man8/chkstat.8%{ext_man}
+%{_bindir}/permctl
+%{_mandir}/man8/permctl.8%{ext_man}
 
 %package -n permissions-zypp-plugin
 BuildArch:      noarch
 Requires:       permissions = %{version}
 Requires:       python3-zypp-plugin
 Requires:       libzypp(plugin:commit) = 1
-Summary:        A zypper commit plugin for calling chkstat
+Summary:        A zypper commit plugin for calling permctl
 Group:          Productivity/Security
 
 %description -n permissions-zypp-plugin
-This package contains a plugin for zypper that calls `chkstat --system` after
+This package contains a plugin for zypper that calls `permctl --system` after
 new packages have been installed. This is helpful for maintaining custom
 entries in /etc/permissions.local.