Dominique Leuenberger
0fc0001c35
Accepting request 334554 from Base:System
...
- adjusted radosgw to root:www mode 0750 (bsc#943471) (forwarded request 334552 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/334554
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=103
2015-10-06 11:23:17 +00:00
7723b028aa
Accepting request 334552 from home:msmeissn:branches:Base:System
...
- adjusted radosgw to root:www mode 0750 (bsc#943471)
OBS-URL: https://build.opensuse.org/request/show/334552
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=138
2015-09-28 14:36:36 +00:00
e1788e4035
Accepting request 334443 from home:msmeissn:branches:Base:System
...
- radosgw can get capability cap_bind_net_service (bsc#943471)
OBS-URL: https://build.opensuse.org/request/show/334443
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=137
2015-09-28 13:36:03 +00:00
Dominique Leuenberger
aafc3bb2e4
Accepting request 311172 from Base:System
...
- remove /usr/bin/get_printing_ticket; (bnc#906336) (forwarded request 311171 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/311172
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=102
2015-06-11 06:20:20 +00:00
caaf70201f
Accepting request 311171 from home:msmeissn:branches:Base:System
...
- remove /usr/bin/get_printing_ticket; (bnc#906336)
OBS-URL: https://build.opensuse.org/request/show/311171
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=135
2015-06-08 16:26:06 +00:00
Dominique Leuenberger
558c462ec0
Accepting request 263938 from Base:System
...
- Added iouyap capabilities (bnc#904060) (forwarded request 263879 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/263938
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=101
2014-12-10 22:43:44 +00:00
987b4c1e61
Accepting request 263879 from home:msmeissn:branches:Base:System
...
- Added iouyap capabilities (bnc#904060)
OBS-URL: https://build.opensuse.org/request/show/263879
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=133
2014-12-04 07:34:28 +00:00
Dominique Leuenberger
68ff9f30a3
Accepting request 259903 from Base:System
...
- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647 (forwarded request 259902 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/259903
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=100
2014-11-10 21:15:19 +00:00
55fdaea9a3
Accepting request 259902 from home:msmeissn:branches:Base:System
...
- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647
OBS-URL: https://build.opensuse.org/request/show/259902
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=131
2014-11-05 17:23:09 +00:00
Stephan Kulow
6d14e84201
Accepting request 246519 from Base:System
...
- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083) (forwarded request 246515 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/246519
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=99
2014-08-29 15:42:18 +00:00
2b1381f5ed
Accepting request 246515 from home:msmeissn:branches:Base:System
...
- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)
OBS-URL: https://build.opensuse.org/request/show/246515
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=129
2014-08-26 13:05:22 +00:00
Stephan Kulow
e2ea7c1956
Accepting request 243380 from Base:System
...
- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151 (forwarded request 243379 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/243380
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=97
2014-08-03 13:35:35 +00:00
1febc609ea
Accepting request 243379 from home:msmeissn:branches:Base:System
...
- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151
OBS-URL: https://build.opensuse.org/request/show/243379
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=127
2014-08-01 11:42:04 +00:00
Stephan Kulow
4b3a7f5c61
Accepting request 242030 from Base:System
...
- make innbind mode 4550 (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)
- permissions: Adding new kdesud path for KDE5 (bnc#872276)
OBS-URL: https://build.opensuse.org/request/show/242030
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=96
2014-07-25 07:08:51 +00:00
dba36f4d8f
Accepting request 242029 from home:msmeissn:branches:Base:System
...
- make innbind mode 4550 (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)
OBS-URL: https://build.opensuse.org/request/show/242029
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=125
2014-07-23 15:21:41 +00:00
111602a6c6
Accepting request 241753 from home:msmeissn:branches:Base:System
...
- permissions: Adding new kdesud path for KDE5 (bnc#872276)
OBS-URL: https://build.opensuse.org/request/show/241753
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=124
2014-07-21 14:12:53 +00:00
Stephan Kulow
b5a0b69c30
Accepting request 239153 from Base:System
...
- vlock_main lost its permission checking, so remove from here. (forwarded request 239152 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/239153
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=95
2014-07-02 13:18:20 +00:00
d1796cf746
Accepting request 239152 from home:msmeissn:branches:Base:System
...
- vlock_main lost its permission checking, so remove from here.
OBS-URL: https://build.opensuse.org/request/show/239152
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=122
2014-07-01 11:47:17 +00:00
Stephan Kulow
7da48020e1
Accepting request 237513 from Base:System
...
- opiesu,wodim,vlock-main have no setuid root. (bnc#882035) (forwarded request 237512 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/237513
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=94
2014-06-18 20:04:25 +00:00
18b3eed942
Accepting request 237512 from home:msmeissn:branches:Base:System
...
- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)
OBS-URL: https://build.opensuse.org/request/show/237512
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=120
2014-06-16 11:52:40 +00:00
087979a9c5
Accepting request 236354 from home:msmeissn:branches:Base:System
...
- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)
OBS-URL: https://build.opensuse.org/request/show/236354
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=119
2014-06-05 08:16:53 +00:00
Stephan Kulow
b6ef8c3c8e
Accepting request 230217 from Base:System
...
- duplicate /var/run entries to /run (bnc#873708) (forwarded request 230216 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/230217
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=93
2014-04-16 05:25:04 +00:00
d83696ead0
Accepting request 230216 from home:msmeissn:branches:Base:System
...
- duplicate /var/run entries to /run (bnc#873708)
OBS-URL: https://build.opensuse.org/request/show/230216
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=117
2014-04-15 14:41:18 +00:00
Stephan Kulow
2fb77bc615
Accepting request 227300 from Base:System
...
- permissions: incorporating capability for mtr, removing +s from ping
(bnc#865351) (forwarded request 227299 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/227300
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=92
2014-03-27 05:15:19 +00:00
9ff01a3be5
Accepting request 227299 from home:msmeissn:branches:Base:System
...
- permissions: incorporating capability for mtr, removing +s from ping
(bnc#865351)
OBS-URL: https://build.opensuse.org/request/show/227299
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=115
2014-03-24 11:46:57 +00:00
Stephan Kulow
5b3269cdb0
Accepting request 205003 from Base:System
...
- GIT repo moved to GITHUB. (forwarded request 205002 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/205003
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=91
2013-10-29 08:33:31 +00:00
1f41a98c1b
Accepting request 205002 from home:msmeissn:branches:Base:System
...
- GIT repo moved to GITHUB.
OBS-URL: https://build.opensuse.org/request/show/205002
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=113
2013-10-28 12:14:20 +00:00
564e2045ec
Accepting request 204986 from home:msmeissn:branches:Base:System
...
- removed the setuid bit from "eject" (bnc#824406)
OBS-URL: https://build.opensuse.org/request/show/204986
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=112
2013-10-28 10:49:53 +00:00
Tomáš Chvátal
cdf923ee16
Accepting request 195997 from Base:System
...
- do not use magic constants for strlen (bnc#834790 (forwarded request 195995 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/195997
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=89
2013-08-23 09:05:47 +00:00
2e919d23e6
Accepting request 195995 from home:msmeissn:branches:Base:System
...
- do not use magic constants for strlen (bnc#834790
OBS-URL: https://build.opensuse.org/request/show/195995
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=110
2013-08-22 12:29:38 +00:00
Tomáš Chvátal
8233d581ab
Accepting request 195811 from Base:System
...
- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)
- use PERMISSION_FSCAPS
- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948) (forwarded request 195810 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/195811
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=88
2013-08-21 14:47:17 +00:00
88e93f4949
Accepting request 195810 from home:msmeissn:branches:Base:System
...
- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)
- use PERMISSION_FSCAPS
- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948)
OBS-URL: https://build.opensuse.org/request/show/195810
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=108
2013-08-21 13:06:40 +00:00
Stephan Kulow
b67727a3c9
Accepting request 178642 from Base:System
...
- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302) (forwarded request 178641 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/178642
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=87
2013-06-13 18:27:16 +00:00
f7167a7542
Accepting request 178641 from home:msmeissn:branches:Base:System
...
- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)
OBS-URL: https://build.opensuse.org/request/show/178641
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=106
2013-06-12 12:36:35 +00:00
13ae92871b
Accepting request 178510 from home:msmeissn:branches:Base:System
...
- cdrtools: allow some filesystem capabilities for more stable CD/DVD
burning in "easy" mode. (bnc#550021) (cap_sys_nice, cap_sys_rawio,
cap_sys_resource, cap_ipc_lock)
OBS-URL: https://build.opensuse.org/request/show/178510
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=105
2013-06-11 09:35:05 +00:00
Stephan Kulow
f1b40a0a55
Accepting request 174835 from Base:System
...
- leave out readcd,cdda2wav,cdrecord until it is ready for the distro (bnc#550021) (forwarded request 174833 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/174835
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=86
2013-05-13 13:12:04 +00:00
e63c733ea5
Accepting request 174833 from home:msmeissn:branches:Base:System
...
- leave out readcd,cdda2wav,cdrecord until it is ready for the distro (bnc#550021)
OBS-URL: https://build.opensuse.org/request/show/174833
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=103
2013-05-08 14:33:37 +00:00
Stephan Kulow
2da9b5cd16
Accepting request 174492 from Base:System
...
- cdrecord currently has no special permissions approved (bnc#550021)
- append a / (forwarded request 174491 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/174492
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=85
2013-05-06 08:11:14 +00:00
d81cf5b7b7
Accepting request 174491 from home:msmeissn:branches:Base:System
...
- cdrecord currently has no special permissions approved (bnc#550021)
- append a /
OBS-URL: https://build.opensuse.org/request/show/174491
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=101
2013-05-04 14:49:12 +00:00
Stephan Kulow
5bb46a60a6
Accepting request 150430 from Base:System
...
- Allow pcp to have stickybit worldwriteable directories (forwarded request 150329 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/150430
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=84
2013-01-31 09:28:43 +00:00
Dr. Werner Fink
3c85079215
Accepting request 150329 from home:msmeissn:branches:Base:System
...
- Allow pcp to have stickybit worldwriteable directories
OBS-URL: https://build.opensuse.org/request/show/150329
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=99
2013-01-30 13:37:31 +00:00
Stephan Kulow
255cee13bb
Accepting request 143663 from Base:System
...
- add /usr/bin/dumpcap to watchlist
- make fscaps=1 the default on ""
- added PERMISSION_FSCAPS to the sysconfig/security fillup template.
- /bin/ping(6) was moved to /usr/bin/ping(6) /bin/eject was moved to /usr/bin/eject (forwarded request 143274 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/143663
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=82
2012-12-03 10:17:54 +00:00
a8e8840bc1
Accepting request 143274 from home:msmeissn:branches:Base:System
...
- add /usr/bin/dumpcap to watchlist
- make fscaps=1 the default on ""
- added PERMISSION_FSCAPS to the sysconfig/security fillup template.
- /bin/ping(6) was moved to /usr/bin/ping(6) /bin/eject was moved to /usr/bin/eject
OBS-URL: https://build.opensuse.org/request/show/143274
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=97
2012-11-30 13:21:16 +00:00
Stephan Kulow
63b7b739c7
Accepting request 142358 from Base:System
...
- apply permissions settings in %post. During initial installation
some packages might be installed before the permissions package
due to dependency loops so we need to make sure their settings
are applied too. Also, on update of the permissions package
changed permission settings may need to be applied.
OBS-URL: https://build.opensuse.org/request/show/142358
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=81
2012-11-22 16:02:36 +00:00
8449923ee4
- apply permissions settings in %post. During initial installation
...
some packages might be installed before the permissions package
due to dependency loops so we need to make sure their settings
are applied too. Also, on update of the permissions package
changed permission settings may need to be applied.
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=95
2012-11-21 14:01:07 +00:00
Stephan Kulow
b1317e5953
Accepting request 138189 from Base:System
...
- temporarily add su.core. workaround for the migration of su from
coreutils to util-linux needs to be reverted as soon as util-linux
is also in
OBS-URL: https://build.opensuse.org/request/show/138189
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=80
2012-10-16 05:18:34 +00:00
2708dcae9f
update changelog
...
coreutils to util-linux needs to be reverted as soon as util-linux
is also in
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=93
2012-10-15 11:50:02 +00:00
b526458851
- temporarily add su.core
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=92
2012-10-15 11:49:16 +00:00
Stephan Kulow
2c7df69ab5
Accepting request 135975 from Base:System
...
- no longer install SuSEconfig.permissions, SuSEconfig is gone. (forwarded request 135933 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/135975
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=79
2012-09-26 08:10:56 +00:00
Cristian Rodríguez
3fc393435b
Accepting request 135933 from home:msmeissn:branches:Base:System
...
- no longer install SuSEconfig.permissions, SuSEconfig is gone.
OBS-URL: https://build.opensuse.org/request/show/135933
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=90
2012-09-25 19:26:09 +00:00