- Update of rpmlint-tests to version 84.87+git20200724.ef05f7e:
* use /usr/bin/su instead of /bin/su since the latter is no longer allowed
- Update of rpmlint-checks to version master:
* Introduce new metadata whitelist type and related checks. Device files and
world-writeable files will now be covered by new whitelists from
rpmlint-security-whitelistings.
- config: Enable new CheckWorldWritable and CheckDeviceFiles
OBS-URL: https://build.opensuse.org/request/show/823721
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=743
Cleanup of deprecated DBUSServices.WhiteList entries:
- ca.desrt.dconf.service: this service was changed by upstream from a
system-wide service to a session based service. The latter doesn't require a
whitelisting any more.
- wicked services (network-nanny.conf, wicked-dhcp4.conf, wicked-dhcp6.conf,
wicked-autoip4.conf, wicked.conf): these have been renamed in August 2013
to org.opensuse.Network.*.conf. The old names probably never got released.
- nfs-ganesha.service: A D-Bus file of that name probably never existed,
there's just a regular systemd unit of that name.
- org.drbd.drbdmanaged.conf, org.drbd.drbdmanaged.service: drbdmanage was just
recently removed from Factory via sr#798685, because it is Python2 only and
unmaintained.
- org.freedesktop.NetworkManager.service: was removed in 2012, Factory
revision 118, `Remove dbus system-service for NetworkManager, to prevent
warnings about it not being running (bnc#738596)`.
- org.kde.auth.conf: was from kdelibs4, removed from Factory in late 2019 via
sr#738276 with the rest of kde4.
- org.kde.kcontrol.kcmkdm.conf, org.kde.kcontrol.kcmkdm.service: was part of
kdebase4-workspace, got deleted from Factory with the rest of kde4.
- org.kde.kcontrol.kcmkwallet.conf, org.kde.kcontrol.kcmkwallet.service: they
got renamed to kcmkwallet5.
- org.opensuse.openqa.conf: upstream replaced a D-Bus interface with HTTP.
- org.opensuse.zoneswitcher.service, org.opensuse.zoneswitcher.conf: the fwzs
package got removed together with SuSEfirewall2 via sr#713580.
- org.selinux.service: isn't included any more in our packaging of
policycoreutils.
- thunderbolt.conf, thunderbolt.service: this service never went live in
Factory.
- yum-updatesd.conf: yum was removed from Factory via sr#749200
- openattic.conf, openattic.service: was part of SES3 but seems to have
OBS-URL: https://build.opensuse.org/request/show/802960
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=723
- Update to version master:
* CheckSUIDPermissions.py: fix permissions.d checks
* add a lint to catch insecure mixed file/directory ownership similar to CVE-2019-3689
- Update to version 84.87+git20200206.7e2b64f:
* permissions2: test that allowed permissions.d drop-ins work
* test for new file-parent-ownership-mismatch lint
- Update to version master:
* CheckSUIDPermissions.py: fix permissions.d checks
* add a lint to catch insecure mixed file/directory ownership similar to CVE-2019-3689
- Update to version 84.87+git20200206.7e2b64f:
* permissions2: test that allowed permissions.d drop-ins work
* test for new file-parent-ownership-mismatch lint
OBS-URL: https://build.opensuse.org/request/show/770508
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=710
You need to stage rpmlint-mini with this, so that it rebuilds. Otherwise
one of the tests in rpmlint-tests will fail. Or you just sent it through,
will self heal once rpmlint-mini is rebuild
- Update to version 84.87+git20200130.c0de5f4:
* libzork4.spec: removed define for 'basename' in libzork4.spec.
This causes build errors because 'basename' is a builtin and it's
not used
- Update to version 84.87+git20200115.9339533:
* use uname -m instead of uname -i as the latter is not portable
* remove rpm directory upon make clean
* Support for different output based on architecture. For that create a
<NAME>.<ARCH>.ref file instead of <NAME>.ref E.g. debug.i386.ref
* verify that new permissions paths need whitelisting
- Whitelist a batch of PAM modules that have been forgotted to be whitelisted
in the past, or have never been requested to be reviewed before
(bsc#1150178).
Since we want to add badness to the PAM warning in rpmlint we need to add
those entries to avoid build errors of existing packages in Factory.
- config: add 'sanlock' to StandardGroups and StandardUsers
- config: add 'libvirt' to StandardGroups
- Update to version master:
* CheckCronJobs: correct cronjob-unauthorized-file explanation
* Use named constants to check file modes
* CheckSUIDPermissions.py: check new permission paths
OBS-URL: https://build.opensuse.org/request/show/769026
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rpmlint?expand=0&rev=328
- Update to version 84.87+git20200130.c0de5f4:
* libzork4.spec: removed define for 'basename' in libzork4.spec.
This causes build errors because 'basename' is a builtin and it's
not used
- Update to version 84.87+git20200115.9339533:
* use uname -m instead of uname -i as the latter is not portable
* remove rpm directory upon make clean
* Support for different output based on architecture. For that create a
<NAME>.<ARCH>.ref file instead of <NAME>.ref E.g. debug.i386.ref
* verify that new permissions paths need whitelisting
- Update to version master:
* CheckCronJobs: correct cronjob-unauthorized-file explanation
* Use named constants to check file modes
* CheckSUIDPermissions.py: check new permission paths
OBS-URL: https://build.opensuse.org/request/show/768785
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=706
