SHA256
1
0
forked from pool/rpmlint

Accepting request 78107 from devel:openSUSE:Factory:rpmlint

- add org.kde.kalarmrtcwake to dbus whitelist (bnc#707723)

- only consider executable ELF files for
  non-position-independent-executable check
- add more users and groups from Factory

OBS-URL: https://build.opensuse.org/request/show/78107
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rpmlint?expand=0&rev=135
This commit is contained in:
Sascha Peilicke 2011-08-07 17:00:24 +00:00 committed by Git OBS Bridge
commit 457f14f5ce
3 changed files with 46 additions and 2 deletions

View File

@ -135,8 +135,9 @@ class SUIDCheck(AbstractCheck.AbstractCheck):
else: else:
f += '/' f += '/'
if type == 010: if type == 010 and mode&0111:
if not 'shared object' in pkgfile.magic: # pie binaries have 'shared object' here
if 'ELF' in pkgfile.magic and not 'shared object' in pkgfile.magic:
printError(pkg, 'non-position-independent-executable', f) printError(pkg, 'non-position-independent-executable', f)
m = self.perms[f]['mode'] m = self.perms[f]['mode']

31
config
View File

@ -88,16 +88,20 @@ setOption('StandardGroups', (
'dovecot', 'dovecot',
'festival', 'festival',
'ffums', 'ffums',
'firebird',
'floppy', 'floppy',
'ftp', 'ftp',
'games', 'games',
'geronimo', 'geronimo',
'haclient', 'haclient',
'haldaemon', 'haldaemon',
'hsqldb',
'icecast',
'icecream', 'icecream',
'ifdrwww', 'ifdrwww',
'intermezzo', 'intermezzo',
'jboss', 'jboss',
'jetty5',
'jonas', 'jonas',
'kmem', 'kmem',
'kvm', 'kvm',
@ -115,15 +119,18 @@ setOption('StandardGroups', (
'memcached', 'memcached',
'messagebus', 'messagebus',
'modem', 'modem',
'mumble-server',
'nagcmd', 'nagcmd',
'nagios', 'nagios',
'named', 'named',
'news', 'news',
'nginx',
'nobody', 'nobody',
'nogroup', 'nogroup',
'novell_nogroup', 'novell_nogroup',
'novlxtier', 'novlxtier',
'ntadmin', 'ntadmin',
'ntop',
'ntp', 'ntp',
'oinstall', 'oinstall',
'otrs', 'otrs',
@ -140,7 +147,9 @@ setOption('StandardGroups', (
'pulse', 'pulse',
'pulse-access', 'pulse-access',
'pulse-rt', 'pulse-rt',
'qemu',
'quagga', 'quagga',
'quasselcore',
'radiusd', 'radiusd',
'root', 'root',
'sabayon-admin', 'sabayon-admin',
@ -150,6 +159,7 @@ setOption('StandardGroups', (
'sshd', 'sshd',
'suse-ncc', 'suse-ncc',
'sys', 'sys',
'tftp',
'tomcat', 'tomcat',
'tomcat4', 'tomcat4',
'trusted', 'trusted',
@ -159,11 +169,13 @@ setOption('StandardGroups', (
'utmp', 'utmp',
'uucp', 'uucp',
'uuidd', 'uuidd',
'varnish',
'video', 'video',
'vscan', 'vscan',
'wheel', 'wheel',
'www', 'www',
'xok', 'xok',
'zeroinst',
'zope', 'zope',
)) ))
@ -180,6 +192,7 @@ setOption('StandardUsers', (
'casaatsd', 'casaatsd',
'casaatvd', 'casaatvd',
'casaauth', 'casaauth',
'cntlm',
'cop', 'cop',
'cyrus', 'cyrus',
'daemon', 'daemon',
@ -192,6 +205,7 @@ setOption('StandardUsers', (
'festival', 'festival',
'fetchmail', 'fetchmail',
'ffums', 'ffums',
'firebird',
'ftp', 'ftp',
'games', 'games',
'gdm', 'gdm',
@ -200,11 +214,14 @@ setOption('StandardUsers', (
'gnump3d', 'gnump3d',
'hacluster', 'hacluster',
'haldaemon', 'haldaemon',
'hsqldb',
'icecast',
'icecream', 'icecream',
'intermezzo', 'intermezzo',
'irc', 'irc',
'jabber', 'jabber',
'jboss', 'jboss',
'jetty5',
'jonas', 'jonas',
'ldap', 'ldap',
'lightdm', 'lightdm',
@ -218,14 +235,17 @@ setOption('StandardUsers', (
'mdom', 'mdom',
'memcached', 'memcached',
'messagebus', 'messagebus',
'mumble-server',
'mysql', 'mysql',
'nagios', 'nagios',
'named', 'named',
'news', 'news',
'nginx',
'novell_nobody', 'novell_nobody',
'novlifdr', 'novlifdr',
'novlxregd', 'novlxregd',
'novlxsrvd', 'novlxsrvd',
'ntop',
'ntp', 'ntp',
'oracle', 'oracle',
'otrs', 'otrs',
@ -236,10 +256,13 @@ setOption('StandardUsers', (
'pop', 'pop',
'postfix', 'postfix',
'postgres', 'postgres',
'postgrey',
'pound', 'pound',
'privoxy', 'privoxy',
'pulse', 'pulse',
'qemu',
'quagga', 'quagga',
'quasselcore',
'radiusd', 'radiusd',
'radvd', 'radvd',
'root', 'root',
@ -248,18 +271,23 @@ setOption('StandardUsers', (
'snort', 'snort',
'squid', 'squid',
'sshd', 'sshd',
'statd',
'suse-ncc', 'suse-ncc',
'tftp',
'tomcat', 'tomcat',
'tomcat4', 'tomcat4',
'tss', 'tss',
'ulogd',
'upsd', 'upsd',
'uucp', 'uucp',
'uuidd', 'uuidd',
'varnish',
'vdr', 'vdr',
'vscan', 'vscan',
'wnn', 'wnn',
'wwwrun', 'wwwrun',
'yastws', 'yastws',
'zeroinst',
'zope', 'zope',
)) ))
@ -437,6 +465,9 @@ setOption("DBUSServices.WhiteList", (
"org.freedesktop.ColorManager.conf", "org.freedesktop.ColorManager.conf",
# lightdm (bnc#708205) # lightdm (bnc#708205)
"org.freedesktop.DisplayManager.conf", "org.freedesktop.DisplayManager.conf",
# kdepim4/kalarm (bnc#707723)
"org.kde.kalarmrtcwake.conf",
"org.kde.kalarmrtcwake.service",
)) ))
# Output filters # Output filters

View File

@ -1,3 +1,15 @@
-------------------------------------------------------------------
Fri Aug 5 12:16:36 UTC 2011 - lnussel@suse.de
- add org.kde.kalarmrtcwake to dbus whitelist (bnc#707723)
-------------------------------------------------------------------
Fri Aug 5 08:46:50 UTC 2011 - lnussel@suse.de
- only consider executable ELF files for
non-position-independent-executable check
- add more users and groups from Factory
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Aug 1 07:22:41 UTC 2011 - lnussel@suse.de Mon Aug 1 07:22:41 UTC 2011 - lnussel@suse.de