| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: permissions | Distribution: openSUSE:Factory:zSystems |
| Version: 1699_20240522 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri May 24 12:37:10 2024 |
| Group: Productivity/Security | Build host: reproducible |
| Size: 0 | Source RPM: permissions-1699_20240522-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: http://github.com/openSUSE/permissions | |
| Summary: SUSE Linux Default Permissions | |
File and directory permission settings depending on the local security
settings. The local security setting ("easy", "secure", or "paranoid") can be
configured in /etc/sysconfig/security.
This package does not contain files, it just requires the necessary packages.
GPL-2.0-or-later
* Fri May 24 2024 matthias.gerstner@suse.com
- Update to version 1699_20240522:
* man pages: minor corrections (bsc#1224822)
* Tue May 21 2024 filippo.bonazzi@suse.com
- Update to version 1699_20240521:
* permctl: return special exit code in --warn mode if entries need fixing
* Mon May 13 2024 Matthias Gerstner <matthias.gerstner@suse.com>
- rename chkstat package to permctl to match the new binary names. Establish
Provides/Obsoletes to keep dependencies and old package cleanup in working
order, see:
https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package
- add BuildRequires for acl programs for tests to succeed. Still keep %check
disabled, because the new ACL test fails without /etc/subuid, /etc/subgid
setup.
* Mon May 13 2024 matthias.gerstner@suse.com
- Update to version 1699_20240513:
* chkstat: has been renamed to permctl to better reflect its purpose. A
symlink for backward compatibility will remain in place.
* documentation: updated man pages
* ACL support: permctl (formerly chkstat) now supports an additional `+acl`
syntax to support assigning ACLs to files similar to the already existing
support for file based capabilities.
* Mon Mar 11 2024 matthias.gerstner@suse.com
- Update to version 1699_20240307:
* build system: migrate from Makefile to Meson
- adjust spec file to meson build
* Tue Mar 05 2024 filippo.bonazzi@suse.com
- Update to version 1699_20240305:
* chkstat: EntryProcessor: make error handling in safeOpen() clearer
* chkstat regtests: catch bad error reporting for non-existent files
* chkstat: EntryProcessor: don't report errors for non-existent files
* Tue Feb 27 2024 filippo.bonazzi@suse.com
- Update to version 1699_20240223:
* chkstat: replace ProcMountState enum by simple bool member
* chkstat: minor style, spelling and documentation fixes
* chkstat: drop types.h header
* chkstat: make ProcMountState a private type of ChkStat
* chkstat: EntryProcessor: rename some member variables for improved readability
* chkstat: get rid of EntryContext and incorporate it into EntryProcessor
* chkstat: split-off EntryProcessor from Chkstat main class
* chkstat: define _GNU_SOURCE via Makefile
* chkstat: processEntries(): make loop variables const
* chkstat: split up checkHaveProc()
* chkstat: ProfileParser: fix a bug when applying capabilities in custom root
* chkstat: ProfileParser: make adding the root to paths transparent
* chkstat: ProfileParser: refactor the now reduced codebase
* chkstat: split off separate ProfileParser
* chkstat: ProfileEntry: mark dropXID() const to support const ProfileEntry use
* chkstat: parseProfile(): improve badProfileLine() calls
* chkstat: drop deprecated capability check
* chkstat: also move expandProfilePaths() into new VariableExpansions class
* chkstat: split off variable expansion logic into separate class
* chkstat: loadVariableExpansions(): a bit of refactoring
* chkstat: parseSysconfig(): bit of refactoring
* chkstat: remove deprecated CHECK_PERMISSIONS logic
* chkstat: move assorted types into dedicated header
* chkstat: replace #include guards by #pragma once
* chkstat: split off command line arguments from Chkstat main class
* chkstat: drop SaneValueArg wrapper
* chkstat: document new packages.d directory
* chkstat: drop TODO regarding ProfileEntry being changed on-the-fly
* chkstat: harmonize FileCapabilities API
* chkstat: support /usr/share/permissions/package.d for per-package drop-ins
* chkstat: minor coding style fixes
* chkstat: improve readability for rstrip() to strip trailing slashes
* chkstat: remove trailing slashes from paths found on the command line
* chkstat: add warning messages for rare error situations
* chkstat: open profiles right away without racy `access()` check.
- Remove fix_version.sh, handle version with services
* Tue Feb 06 2024 Wolfgang Frisch <wolfgang.frisch@suse.com>
- Drop superfluous mkdir /usr/share/permissions/permissions.d
This is now created by the Makefile. See also
commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c
* Tue Feb 06 2024 paolo.perego@suse.com
- Update to version 20240206:
* Whitelisting libgtop_server2 (bsc#1218921)
* Removing bogus whitespaces
* chkstat: harmonize and transform to a more compact coding and doc style
* gitignore: also ignore hidden ctags
* build: Create /usr/share/permissions/permissions.d for packagers
* profiles: drop /usr/sbin/lockdev which is no longer packaged in Factory
* profiles: drop /etc/ftpusers which is no longer shipped in netcfg
* Tue Jan 30 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Create directory /usr/share/permissions/permissions.d for packages
to place their drop-ins.
* Mon Nov 27 2023 Daniel Garcia <daniel.garcia@suse.com>
- Remove dependency on /usr/bin/python3, making scripts to depends on
the real python3 binary, not the link. bsc#1212476
* Fri Jun 02 2023 matthias.gerstner@suse.com
- Update to version 20230602:
* profiles: remove dropped pppoe-wrapper
* Tue May 16 2023 matthias.gerstner@suse.com
- Update to version 20230516:
* common permissions: add icingaweb2 setgid directory (bsc#1211314)
* Mon Apr 24 2023 wolfgang.frisch@suse.com
- Update to version 20230424:
* profiles: remove dead opiepasswd entry
(opie was removed via OBS sr#1065964).
* Fri Feb 17 2023 matthias.gerstner@suse.com
- Update to version 20230217:
* shadow: newgidmap,newuidmap: use capabilities (bsc#1208309)
* profiles: whitelist kismet capabilities (bsc#1200954) (#171)
* Tue Dec 20 2022 matthias.gerstner@suse.com
- Update to version 20221220:
* profiles: remove outdated kdesud, apptainer entries
* Wed Sep 21 2022 Dirk Müller <dmueller@suse.com>
- skip tests on qemu user builds
* Tue Sep 13 2022 matthias.gerstner@suse.com
- Update to version 20220912:
* chkstat: also consider group controlled paths (bsc#1203018,
CVE-2022-31252)
* Mon Aug 08 2022 Dominique Leuenberger <dimstar@opensuse.org>
- Fix dependency from permissions-zypp-plugin to permissions.
* Sat Jul 30 2022 Stephan Kulow <coolo@suse.com>
- Avoid different Versions for subpackages to fix build-compare
seeing the src rpm as equal. It replaces VERSION-RELEASE but
that will fail if subpackages use a different Version
* Wed Jul 13 2022 matthias.gerstner@suse.com
- Update to version 20220713:
* postfix: add postlog setgid for maildrop binary (bsc#1201385)
* libexec migration: KDE utilities now properly place their helpers
* pccardctl: installation path has finally changed to /usr/sbin
* Fri Mar 11 2022 matthias.gerstner@suse.com
- Update to version 20220309:
* apptainer whitelisting (bsc#1196145)
* Fri Feb 25 2022 matthias.gerstner@suse.com
- Update to version 20220202:
* mount.nfs: switch from migration mode to fixed path in /usr/sbin
* changed gendered pronouns
* mgetty: faxq-helper now finally reside in /usr/libexec
* Wed Sep 01 2021 matthias.gerstner@suse.com
- Update to version 20210901:
* libksysguard5: Updated path for ksgrd_network_helper
* kdesu: Updated path for kdesud
* sbin_dirs cleanup: these binaries have already been moved to /usr/sbin
* mariadb: revert auth_pam_tool to /usr/lib{,64} again
* cleanup: revert virtualbox back to plain /usr/lib
* cleanup: remove deprecated /etc/ssh/sshd_config
* hawk_invoke is not part of newer hawk2 packages anymore
* cleanup: texlive-filesystem: public now resides in libexec
* cleanup: authbind: helper now resides in libexec
* cleanup: polkit: the agent now also resides in libexec
* libexec cleanup: 'inn' news binaries now reside in libexec
* Tue May 18 2021 matthias.gerstner@suse.com
- Update to version 20210518:
* whitelist please (bsc#1183669)
* Tue May 18 2021 matthias.gerstner@suse.com
- Update to version 20210518:
* Fix enlightenment paths for 32-bit architectures
* Mon Jan 25 2021 matthias.gerstner@suse.com
- Update to version 20210125:
* usbauth: drop compatibility variable for libexec
* usbauth: Updated path for usbauth-npriv
* profiles: finish usage of variable for polkit-agent-helper-1
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Nov 7 00:51:36 2024