From af3b1d9d0af23b2a88f1d9b7d1851fd53db98db94a32eb1eb4d96ef7aa4b0b61 Mon Sep 17 00:00:00 2001 From: Matthias Gerstner Date: Tue, 7 Jul 2020 14:19:17 +0000 Subject: [PATCH 1/5] - Update to version 20200624: * rework permissions.local text (boo#1173221) * dbus-1: adjust to new libexec dir location (bsc#1171164) * permission profiles: reinstate kdesud for kde5 * etc/permissions: remove entries for bind-chrootenv * etc/permissions: remove traceroute entry * VirtualBox: remove outdated entry which is only a symlink any more * /bin/su: remove path refering to symlink * etc/permissions: remove legacy RPM directory entries * /etc/permissions: remove outdated sudo directories * singularity: remove outdated setuid-binary entries * chromium: remove now unneeded chrome_sandbox entry (bsc#1163588) * dbus-1: remove deprecated alternative paths * PolicyKit: remove outdated entries last used in SLE-11 * pcp: remove no longer needed / conflicting entries * gnats: remove entries for package removed from Factory * kdelibs4: remove entries for package removed from Factory * v4l-base: remove entries for package removed from Factory * mailman: remove entries for package deleted from Factory * gnome-pty-helper: remove dead entry no longer part of the vte package * gnokii: remove entries for package no longer in Factory * xawtv (v4l-conf): correct group ownership in easy profile * systemd-journal: remove unnecessary profile entries * thttp: make makeweb entry usable in the secure profile (bsc#1171580) OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=268 --- _servicedata | 2 +- permissions-20200526.tar.xz | 3 --- permissions-20200624.tar.xz | 3 +++ permissions.changes | 28 ++++++++++++++++++++++++++++ permissions.spec | 2 +- 5 files changed, 33 insertions(+), 5 deletions(-) delete mode 100644 permissions-20200526.tar.xz create mode 100644 permissions-20200624.tar.xz diff --git a/_servicedata b/_servicedata index 8b32c81..f25093e 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/openSUSE/permissions.git - 19a5eb449122601ea1f4053b575028d1895fedbb \ No newline at end of file + 3702d0cf9678d123b0a28d14047bb0fbd9e17cbc \ No newline at end of file diff --git a/permissions-20200526.tar.xz b/permissions-20200526.tar.xz deleted file mode 100644 index db77be9..0000000 --- a/permissions-20200526.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:bd36e46e902a84ebd1e5f5f2ab9f3f52744c1f0f66674fbd638262ca94f964c0 -size 44788 diff --git a/permissions-20200624.tar.xz b/permissions-20200624.tar.xz new file mode 100644 index 0000000..20fcd28 --- /dev/null +++ b/permissions-20200624.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:4b2026c3bd7bf7b0cec43b12f4a6b79e62008e504e75fe569c49000d127c1cd4 +size 43556 diff --git a/permissions.changes b/permissions.changes index f467562..c7a2bfa 100644 --- a/permissions.changes +++ b/permissions.changes @@ -1,3 +1,31 @@ +------------------------------------------------------------------- +Tue Jul 07 13:25:40 UTC 2020 - matthias.gerstner@suse.com + +- Update to version 20200624: + * rework permissions.local text (boo#1173221) + * dbus-1: adjust to new libexec dir location (bsc#1171164) + * permission profiles: reinstate kdesud for kde5 + * etc/permissions: remove entries for bind-chrootenv + * etc/permissions: remove traceroute entry + * VirtualBox: remove outdated entry which is only a symlink any more + * /bin/su: remove path refering to symlink + * etc/permissions: remove legacy RPM directory entries + * /etc/permissions: remove outdated sudo directories + * singularity: remove outdated setuid-binary entries + * chromium: remove now unneeded chrome_sandbox entry (bsc#1163588) + * dbus-1: remove deprecated alternative paths + * PolicyKit: remove outdated entries last used in SLE-11 + * pcp: remove no longer needed / conflicting entries + * gnats: remove entries for package removed from Factory + * kdelibs4: remove entries for package removed from Factory + * v4l-base: remove entries for package removed from Factory + * mailman: remove entries for package deleted from Factory + * gnome-pty-helper: remove dead entry no longer part of the vte package + * gnokii: remove entries for package no longer in Factory + * xawtv (v4l-conf): correct group ownership in easy profile + * systemd-journal: remove unnecessary profile entries + * thttp: make makeweb entry usable in the secure profile (bsc#1171580) + ------------------------------------------------------------------- Tue Jun 16 13:23:23 UTC 2020 - malte.kraus@suse.com diff --git a/permissions.spec b/permissions.spec index 5ddf44e..8660425 100644 --- a/permissions.spec +++ b/permissions.spec @@ -16,7 +16,7 @@ # -%define VERSION_DATE 20200526 +%define VERSION_DATE 20200707 Name: permissions Version: %{VERSION_DATE}.%{suse_version} From 71f7833b2af60a84c7cc150f2dfec9e9dd506329e20850c8551048457882e5c4 Mon Sep 17 00:00:00 2001 From: Matthias Gerstner Date: Tue, 7 Jul 2020 14:32:39 +0000 Subject: [PATCH 2/5] OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=269 --- permissions.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/permissions.spec b/permissions.spec index 8660425..3669789 100644 --- a/permissions.spec +++ b/permissions.spec @@ -16,7 +16,7 @@ # -%define VERSION_DATE 20200707 +%define VERSION_DATE 20200624 Name: permissions Version: %{VERSION_DATE}.%{suse_version} From 128acfff3acce5561399e5cca2e31aa856bb511ad783fe70260e755de273e71f Mon Sep 17 00:00:00 2001 From: Matthias Gerstner Date: Wed, 8 Jul 2020 07:50:44 +0000 Subject: [PATCH 3/5] Accepting request 819264 from home:gmbr3:Active - Removed dbus-libexec.patch: contained in upstream OBS-URL: https://build.opensuse.org/request/show/819264 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=270 --- dbus-libexec.patch | 36 ------------------------------------ permissions.changes | 5 +++++ permissions.spec | 3 +-- 3 files changed, 6 insertions(+), 38 deletions(-) delete mode 100644 dbus-libexec.patch diff --git a/dbus-libexec.patch b/dbus-libexec.patch deleted file mode 100644 index e5bebee..0000000 --- a/dbus-libexec.patch +++ /dev/null @@ -1,36 +0,0 @@ -Index: permissions-20200526/profiles/permissions.easy -=================================================================== ---- permissions-20200526.orig/profiles/permissions.easy -+++ permissions-20200526/profiles/permissions.easy -@@ -267,6 +267,7 @@ - /lib64/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 - # dbus-1 in /usr #1056764) - /usr/lib/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 -+/usr/libexec/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 - /usr/lib64/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 - - # policycoreutils (#440596) -Index: permissions-20200526/profiles/permissions.paranoid -=================================================================== ---- permissions-20200526.orig/profiles/permissions.paranoid -+++ permissions-20200526/profiles/permissions.paranoid -@@ -278,6 +278,7 @@ - /lib64/dbus-1/dbus-daemon-launch-helper root:messagebus 0750 - # dbus-1 in /usr #1056764) - /usr/lib/dbus-1/dbus-daemon-launch-helper root:messagebus 0750 -+/usr/libexec/dbus-1/dbus-daemon-launch-helper root:messagebus 0750 - /usr/lib64/dbus-1/dbus-daemon-launch-helper root:messagebus 0750 - - # policycoreutils (#440596) -Index: permissions-20200526/profiles/permissions.secure -=================================================================== ---- permissions-20200526.orig/profiles/permissions.secure -+++ permissions-20200526/profiles/permissions.secure -@@ -308,6 +308,7 @@ - /lib64/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 - # dbus-1 in /usr #1056764) - /usr/lib/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 -+/usr/libexec/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 - /usr/lib64/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 - - # policycoreutils (#440596) diff --git a/permissions.changes b/permissions.changes index c7a2bfa..8e0ba3d 100644 --- a/permissions.changes +++ b/permissions.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Tue Jul 7 15:56:02 UTC 2020 - Callum Farmer + +- Removed dbus-libexec.patch: contained in upstream + ------------------------------------------------------------------- Tue Jul 07 13:25:40 UTC 2020 - matthias.gerstner@suse.com diff --git a/permissions.spec b/permissions.spec index 3669789..ec5b389 100644 --- a/permissions.spec +++ b/permissions.spec @@ -28,7 +28,6 @@ Group: Productivity/Security URL: http://github.com/openSUSE/permissions Source: permissions-%{VERSION_DATE}.tar.xz Source1: fix_version.sh -Patch0: dbus-libexec.patch BuildRequires: gcc-c++ BuildRequires: libcap-devel BuildRequires: libcap-progs @@ -41,7 +40,7 @@ Recommends: permissions-doc Provides: aaa_base:%{_datadir}/permissions %prep -%autosetup -p1 -n permissions-%{VERSION_DATE} +%autosetup -n permissions-%{VERSION_DATE} %build make %{?_smp_mflags} CFLAGS="-W -Wall %{optflags}" FSCAPS_DEFAULT_ENABLED=0 From 79548e974de93cc2ad5edc470d0c97b2760fd2d5ca707bdb134375ed88d44518 Mon Sep 17 00:00:00 2001 From: Matthias Gerstner Date: Fri, 10 Jul 2020 09:51:12 +0000 Subject: [PATCH 4/5] - Update to version 20200710: * Revert "etc/permissions: remove entries for bind-chrootenv". This currently conflicts with the way the CheckSUIDPermissions rpmlint-check is implemented. OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=271 --- _servicedata | 2 +- permissions.changes | 8 ++++++++ permissions.spec | 2 +- 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/_servicedata b/_servicedata index f25093e..f26999f 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/openSUSE/permissions.git - 3702d0cf9678d123b0a28d14047bb0fbd9e17cbc \ No newline at end of file + 8c1d3398d1f446ac3f27b293ab9d69ad73aaea6d \ No newline at end of file diff --git a/permissions.changes b/permissions.changes index 8e0ba3d..0464d5c 100644 --- a/permissions.changes +++ b/permissions.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Fri Jul 10 09:50:04 UTC 2020 - matthias.gerstner@suse.com + +- Update to version 20200710: + * Revert "etc/permissions: remove entries for bind-chrootenv". This + currently conflicts with the way the CheckSUIDPermissions rpmlint-check is + implemented. + ------------------------------------------------------------------- Tue Jul 7 15:56:02 UTC 2020 - Callum Farmer diff --git a/permissions.spec b/permissions.spec index ec5b389..6ae54d9 100644 --- a/permissions.spec +++ b/permissions.spec @@ -16,7 +16,7 @@ # -%define VERSION_DATE 20200624 +%define VERSION_DATE 20200710 Name: permissions Version: %{VERSION_DATE}.%{suse_version} From 1490c8842472cc9ed53d40d0be7dd312453e4e34de9988697ce12203c500e8f3 Mon Sep 17 00:00:00 2001 From: Matthias Gerstner Date: Fri, 10 Jul 2020 09:53:12 +0000 Subject: [PATCH 5/5] OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=272 --- permissions-20200624.tar.xz | 3 --- permissions-20200710.tar.xz | 3 +++ 2 files changed, 3 insertions(+), 3 deletions(-) delete mode 100644 permissions-20200624.tar.xz create mode 100644 permissions-20200710.tar.xz diff --git a/permissions-20200624.tar.xz b/permissions-20200624.tar.xz deleted file mode 100644 index 20fcd28..0000000 --- a/permissions-20200624.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:4b2026c3bd7bf7b0cec43b12f4a6b79e62008e504e75fe569c49000d127c1cd4 -size 43556 diff --git a/permissions-20200710.tar.xz b/permissions-20200710.tar.xz new file mode 100644 index 0000000..f70ee73 --- /dev/null +++ b/permissions-20200710.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5b5592990f7133bb10198d143862ad216f3638381e8a34691252fed27dd1c7a7 +size 43696