2 Commits

Author	SHA256	Message	Date
Matthias Gerstner	c1a2fada58	Accepting request 780264 from home:mkraus:branches:Base:System ... - Update to version 20200228: * chkstat: fix readline() on platforms with unsigned char - Update to version 20200227: * remove capability whitelisting for radosgw * whitelist ceph log directory (bsc#1150366) * adjust testsuite to post CVE-2020-8013 link handling * testsuite: add option to not mount /proc * do not follow symlinks that are the final path element: CVE-2020-8013 * add a test for symlinked directories * fix relative symlink handling * include cpp compat headers, not C headers * Move permissions and permissions.* except .local to /usr/share/permissions * regtest: fix the static PATH list which was missing /usr/bin * regtest: also unshare the PID namespace to support /proc mounting * regtest: bindMount(): explicitly reject read-only recursive mounts * Makefile: force remove upon clean target to prevent bogus errors * regtest: by default automatically (re)build chkstat before testing * regtest: add test for symlink targets * regtest: make capability setting tests optional * regtest: fix capability assertion helper logic * regtests: add another test case that catches set*id or caps in world-writable sub-trees * regtest: add another test that catches when privilege bits are set for special files * regtest: add test case for user owned symlinks * regtest: employ subuid and subgid feature in user namespace * regtest: add another test case that covers unknown user/group config * regtest: add another test that checks rejection of insecure mixed-owner paths * regtest: add test that checks for rejection of world-writable paths * regtest: add test for detection of unexpected parent directory ownership * regtest: add further helper functions, allow access to main instance OBS-URL: https://build.opensuse.org/request/show/780264 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=252	2020-03-02 13:50:40 +00:00
Marcus Meissner	9bbb7deff7	Accepting request 700150 from home:jsegitz:branches:Base:System ... - Fixed versions. Removed set_version from _service file, doesn't work with the new packaging. Call fix_version.sh to set current date as version instead - Fixed requires for -config and -zypp-plugin OBS-URL: https://build.opensuse.org/request/show/700150 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=218	2019-05-02 13:24:27 +00:00