SHA256
1
0
forked from pool/rpmlint

Accepting request 185214 from devel:openSUSE:Factory:rpmlint

- allow pam_snapper after audit (bnc#815383)

- follow /usr move for the /bin/ binaries in pie.config. (forwarded request 185091 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/185214
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rpmlint?expand=0&rev=194
This commit is contained in:
Stephan Kulow 2013-08-01 14:03:23 +00:00 committed by Git OBS Bridge
commit 2cb6ce7c7d
5 changed files with 49 additions and 0 deletions

2
config
View File

@ -678,6 +678,8 @@ setOption("PAMModules.WhiteList", (
"pam_smbpass.so",
# pam_chroot
"pam_chroot.so",
# pam_snapper (bnc#815383)
"pam_snapper.so",
))
# Output filters

View File

@ -5,8 +5,11 @@ from Config import *
pie_execs = (
"/bin/ping",
"/usr/bin/ping",
"/bin/ping6",
"/usr/bin/ping6",
"/bin/su",
"/usr/bin/su",
"/usr/bin/pidgin",
"/sbin/arping",
"/sbin/clockdiff",

View File

@ -0,0 +1,25 @@
From e6c176c7d03f377e55d405ebe5d0368f688426c7 Mon Sep 17 00:00:00 2001
From: Orion Poplawski <orion@nwra.com>
Date: Thu, 11 Jul 2013 12:29:34 -0600
Subject: [PATCH] Fix setgroups error name
---
BinariesCheck.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/BinariesCheck.py b/BinariesCheck.py
index b770085..cea85b9 100644
--- a/BinariesCheck.py
+++ b/BinariesCheck.py
@@ -459,7 +459,7 @@ class BinariesCheck(AbstractCheck.AbstractCheck):
printError(pkg, 'missing-PT_GNU_STACK-section', fname)
if bin_info.setgid and bin_info.setuid and not bin_info.setgroups:
- printError(pkg, 'missing-call-to-setgroups', fname)
+ printError(pkg, 'missing-call-to-setgroups-before-setuid', fname)
if bin_info.chroot:
if not bin_info.chdir or not bin_info.chroot_near_chdir:
--
1.8.1.4

View File

@ -1,3 +1,19 @@
-------------------------------------------------------------------
Wed Jul 31 11:42:54 UTC 2013 - meissner@suse.com
- allow pam_snapper after audit (bnc#815383)
-------------------------------------------------------------------
Tue Jul 30 15:18:46 UTC 2013 - meissner@suse.com
- follow /usr move for the /bin/ binaries in pie.config.
-------------------------------------------------------------------
Tue Jul 30 13:44:07 UTC 2013 - lnussel@suse.de
- fix setgroups error name, patch from upstream git:
rpmlint-1.5-Fix-setgroups-error-name.diff
-------------------------------------------------------------------
Mon Jul 29 12:28:19 UTC 2013 - meissner@suse.com

View File

@ -120,6 +120,8 @@ Patch88: suse-speccheck-utf8.diff
Patch89: suse-python-abi-check.diff
# PATCH-FIX-OPENSUSE: saschpe@suse.de - Don't complain about missing man-pages for rc-scripts
Patch91: suse-manpages-for-rc-scripts.patch
# PATCH-FIX-UPSTREAM: lnussel@suse.de - Fix setgroups error name
Patch92: rpmlint-1.5-Fix-setgroups-error-name.diff
%py_requires
@ -195,6 +197,7 @@ source packages can be checked.
%patch88
%patch89
%patch91 -p1
%patch92 -p1
cp -p %{SOURCE2} .
# Only move top-level python files
chmod 0755 rpmlint-checks-master/*.py