SHA256
1
0
forked from pool/permissions
Commit Graph

260 Commits

Author SHA256 Message Date
Dominique Leuenberger
bd8a1c90b7 Accepting request 631726 from Base:System
- Update to version 20180827:
  * setuid whitelisting: add firejail binary (bsc#1059013)

- Update to version 20180810:
  * setuid whitelisting: add lxc-user-nic (bsc#988348)

OBS-URL: https://build.opensuse.org/request/show/631726
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=118
2018-08-28 07:19:50 +00:00
84943e9c36 forgot to remove old archive
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=204
2018-08-27 09:36:48 +00:00
f4d7d3598d - Update to version 20180827:
* setuid whitelisting: add firejail binary (bsc#1059013)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=203
2018-08-27 09:16:16 +00:00
d7a67f7831 - Update to version 20180810:
* setuid whitelisting: add lxc-user-nic (bsc#988348)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=202
2018-08-10 09:23:22 +00:00
Dominique Leuenberger
783b739d28 Accepting request 627117 from Base:System
- Update to version 20180802:
  * whitelisting: added smc-tools LD_PRELOAD library (bsc#1102956)

OBS-URL: https://build.opensuse.org/request/show/627117
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=117
2018-08-06 09:52:45 +00:00
11a9977c9e - Update to version 20180802:
* whitelisting: added smc-tools LD_PRELOAD library (bsc#1102956)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=200
2018-08-02 16:24:20 +00:00
Dominique Leuenberger
3204d0271c Accepting request 625020 from Base:System
- Update to version 20180724:
  * Fix wrong file path in help string
  * whitelisting: add spice-gtk usb helper setuid binary (bnc#1101420) (forwarded request 624972 from mgerstner)

OBS-URL: https://build.opensuse.org/request/show/625020
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=116
2018-08-02 12:47:34 +00:00
255dbfc84f Accepting request 624972 from home:mgerstner:branches:Base:System
- Update to version 20180724:
  * Fix wrong file path in help string
  * whitelisting: add spice-gtk usb helper setuid binary (bnc#1101420)

OBS-URL: https://build.opensuse.org/request/show/624972
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=198
2018-07-24 11:46:06 +00:00
Dominique Leuenberger
c799b54185 Accepting request 605257 from Base:System
- Update to version 20180508:
  * Capabilities for usage of Wireshark for non-root (bsc#957624)

OBS-URL: https://build.opensuse.org/request/show/605257
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=115
2018-05-13 13:53:15 +00:00
7f5ecc7a2a OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=196 2018-05-08 06:12:39 +00:00
9ebc9d2aa6 - Update to version 20180508:
* Capabilities for usage of Wireshark for non-root (bsc#957624)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=195
2018-05-08 06:12:16 +00:00
Dominique Leuenberger
84a9224b67 Accepting request 569510 from Base:System
- Update to version 20180125:
  * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
  * make btmp root:utmp (bsc#1050467)

- Update to version 20180115:
  * - polkit-default-privs: usbauth (bsc#1066877)

OBS-URL: https://build.opensuse.org/request/show/569510
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=114
2018-01-26 12:35:31 +00:00
6cb0226aaa * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=193
2018-01-25 13:17:25 +00:00
ee933ba6a8 - Update to version 20180125:
* make btmp root:utmp (bsc#1050467)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=192
2018-01-25 12:54:05 +00:00
ac7a7aecfc - Update to version 20180115:
* - polkit-default-privs: usbauth (bsc#1066877)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=191
2018-01-15 09:57:27 +00:00
Dominique Leuenberger
1585b5a9db Accepting request 548532 from Base:System
- fillup is required for post, not pre installation (forwarded request 548215 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/548532
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=113
2017-12-06 07:48:11 +00:00
0433ec9d56 Accepting request 548215 from home:kukuk:branches:Base:System
- fillup is required for post, not pre installation

OBS-URL: https://build.opensuse.org/request/show/548215
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=189
2017-12-05 07:10:12 +00:00
d85ec2cc61 Accepting request 546606 from home:pluskalm:branches:Base:System
- Cleanup spec file with spec-cleaner
- Drop conditions/definitions related to old distros

OBS-URL: https://build.opensuse.org/request/show/546606
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=188
2017-11-30 10:35:19 +00:00
f434538bbd - Update to version 20171129:
* permissions: adding gvfs (bsc#1065864)
  * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410
  * Allow fping cap_net_raw (bsc#1047921)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=187
2017-11-29 17:02:48 +00:00
24ce7041d6 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=186 2017-11-24 16:26:13 +00:00
2688fa191a Accepting request 544692 from home:RBrownSUSE:branches:Base:System
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544692
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=185
2017-11-23 14:58:07 +00:00
914f17f6d2 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=184 2017-11-21 16:14:45 +00:00
27f74ef413 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=183 2017-11-21 14:07:59 +00:00
a7962163fe - Update to version 20171121:
* - permissions: adding kwayland (bsc#1062182)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=182
2017-11-21 14:07:42 +00:00
Dominique Leuenberger
ed73e3c618 Accepting request 539346 from Base:System
- Update to version 20171106:
  * Allow setuid root for singularity (group only) bsc#1028304

OBS-URL: https://build.opensuse.org/request/show/539346
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=112
2017-11-11 13:14:50 +00:00
b680cbc36d - Update to version 20171106:
* Allow setuid root for singularity (group only) bsc#1028304

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=180
2017-11-06 15:58:58 +00:00
Dominique Leuenberger
af6e07f0b5 Accepting request 536588 from Base:System
- Update to version 20171025:
  * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)

OBS-URL: https://build.opensuse.org/request/show/536588
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=111
2017-10-29 19:23:30 +00:00
0fff6162a7 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=178 2017-10-25 15:52:10 +00:00
fb770d791f - Update to version 20171025:
* Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=177
2017-10-25 15:51:58 +00:00
Dominique Leuenberger
f69fa029f3 Accepting request 529130 from Base:System
- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738

- Update to version 20170927:
  * fix typos in manpages

OBS-URL: https://build.opensuse.org/request/show/529130
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=110
2017-10-01 14:59:17 +00:00
9ffd01c276 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=175 2017-09-28 10:49:02 +00:00
8b1949dd93 - Update to version 20170928:
* Fix invalid syntax bsc#1048645 bsc#1060738

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=174
2017-09-28 10:48:52 +00:00
ae2fcfcc83 - Update to version 20170927:
* fix typos in manpages

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=173
2017-09-27 14:50:43 +00:00
Dominique Leuenberger
0f309573a3 Accepting request 528303 from Base:System
- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304

OBS-URL: https://build.opensuse.org/request/show/528303
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=109
2017-09-25 11:50:36 +00:00
88add7774f - Update to version 20170922:
* Allow setuid root for singularity (group only) bsc#1028304

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=171
2017-09-22 14:01:01 +00:00
Dominique Leuenberger
4f34dc5041 Accepting request 526050 from Base:System
- Update to version 20170913:
  * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)

- Update to version 20170906:
  * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
  * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)

OBS-URL: https://build.opensuse.org/request/show/526050
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=108
2017-09-15 19:02:55 +00:00
d1bec6bd05 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=169 2017-09-13 16:54:14 +00:00
79244e6f3c - Update to version 20170913:
* Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=168
2017-09-13 16:53:54 +00:00
7155d612b4 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=167 2017-09-06 09:50:43 +00:00
0bd1dfb4e3 * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
* permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=166
2017-09-06 09:44:41 +00:00
f811efeca2 - Update to version 20170906:
*

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=165
2017-09-06 09:44:09 +00:00
f9313caa62 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=164 2017-09-06 09:43:42 +00:00
c8a528761f OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=163 2017-09-06 09:43:17 +00:00
88cf747ec1 OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=162 2017-09-06 09:42:16 +00:00
Dominique Leuenberger
b4418484eb Accepting request 501683 from Base:System
- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it. (forwarded request 501680 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/501683
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/permissions?expand=0&rev=107
2017-06-23 07:13:16 +00:00
0ca1d5fbf3 Accepting request 501680 from home:dimstar:Factory
- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it.

OBS-URL: https://build.opensuse.org/request/show/501680
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=159
2017-06-07 11:15:04 +00:00
310cebf5b3 binaries and it is no longer default. (bsc#1041159 for fuse, also cronie, etc)
OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=158
2017-06-03 07:23:37 +00:00
c7d23f34dd - Require: group(trusted), as we are handing it out to some unsuspecting
binaries and it is no longer default.

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=157
2017-06-03 07:22:19 +00:00
f06adee271 - Update to version 20170602:
* make /etc/ppp owned by root:root. The group dialout usage is no longer used

OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=156
2017-06-02 10:55:29 +00:00
80e970fabb OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=155 2017-06-02 10:54:25 +00:00