Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at Mon May 16 15:17:23 CEST 2011.
-------- --- permissions/permissions.changes 2011-03-07 16:24:01.000000000 +0100 +++ /mounts/work_src_done/STABLE/permissions/permissions.changes 2011-05-12 13:48:45.000000000 +0200 @@ -1,0 +2,5 @@ +Thu May 12 11:48:36 UTC 2011 - [email protected] + +- change path to gnome-pty-helper (bnc#690202) + +------------------------------------------------------------------- calling whatdependson for head-i586 Old: ---- permissions-2011.03.07.1608.tar.bz2 New: ---- permissions-2011.05.12.1347.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.nexhr7/_old 2011-05-16 15:13:51.000000000 +0200 +++ /var/tmp/diff_new_pack.nexhr7/_new 2011-05-16 15:13:51.000000000 +0200 @@ -24,7 +24,7 @@ License: GPLv2+ Group: Productivity/Security AutoReqProv: on -Version: 2011.03.07.1608 +Version: 2011.05.12.1347 Release: 1 Provides: aaa_base:/etc/permissions PreReq: %fillup_prereq ++++++ permissions-2011.03.07.1608.tar.bz2 -> permissions-2011.05.12.1347.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2011.03.07.1608/Makefile new/permissions-2011.05.12.1347/Makefile --- old/permissions-2011.03.07.1608/Makefile 2011-03-07 16:08:04.000000000 +0100 +++ new/permissions-2011.05.12.1347/Makefile 2011-05-12 13:47:52.000000000 +0200 @@ -12,6 +12,9 @@ man8dir=$(mandir)/man8 man5dir=$(mandir)/man5 +FSCAPS_DEFAULT_ENABLED = 1 +CPPFLAGS += -DFSCAPS_DEFAULT_ENABLED=$(FSCAPS_DEFAULT_ENABLED) + all: chkstat install: all diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2011.03.07.1608/chkstat.c new/permissions-2011.05.12.1347/chkstat.c --- old/permissions-2011.03.07.1608/chkstat.c 2011-03-07 16:08:04.000000000 +0100 +++ new/permissions-2011.05.12.1347/chkstat.c 2011-05-12 13:47:52.000000000 +0200 @@ -515,23 +515,29 @@ { FILE* fp; char line[4096]; + int have_fscaps = FSCAPS_DEFAULT_ENABLED; if ((fp = fopen("/proc/cmdline", "r")) == 0) { - return 0; + goto out; } if (readline(fp, line, sizeof(line))) { char* p; if ((p = strstr(line, "file_caps"))) { - if (p - line < 3 || strncmp("no_", p, 3)) + if (p - line == 3 && !strncmp("no_", p, 3)) { - return 1; + have_fscaps = 0; + } + else + { + have_fscaps = 1; } } } fclose(fp); - return 0; +out: + return have_fscaps; } int diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2011.03.07.1608/permissions new/permissions-2011.05.12.1347/permissions --- old/permissions-2011.03.07.1608/permissions 2011-03-07 16:08:04.000000000 +0100 +++ new/permissions-2011.05.12.1347/permissions 2011-05-12 13:47:52.000000000 +0200 @@ -1,6 +1,7 @@ # /etc/permissions # -# Copyright (c) 2001 SuSE GmbH Nuernberg, Germany. All rights reserved. +# Copyright (c) 2001 SuSE GmbH Nuernberg, Germany. +# Copyright (c) 2011 SUSE Linux Products GmbH Nuernberg, Germany. # # Author: Roman Drahtmueller <[email protected]>, 2001 # @@ -20,35 +21,18 @@ # <file> <owner>:<group> <permission> # # How it works: -# Change the entries as you like, then call -# 'chkstat -set /etc/permissions' or /etc/permissions.{easy,secure,paranoid} -# respectively, or call 'SuSEconfig' as yast do after they think -# that files have been modified in the system. -# -# SuSEconfig will use the files /etc/permissions and the ones ending -# in what the variable PERMISSION_SECURITY from -# /etc/sysconfig/security contains. By default, these are the files -# /etc/permissions, /etc/permissions.easy and /etc/permissions.local -# for local changes by the admin. In addition, the directory +# To change an entry copy the line to permissions.local, modify it +# to suit your needs and call "chkstat --system" +# +# chkstat uses the variable PERMISSION_SECURITY from +# /etc/sysconfig/security to determine which security level to +# apply. +# In addition to the central files listed above the directory # /etc/permissions.d/ can contain permission files that belong to # the packages they modify file modes for. These permission files # are to switch between conflicting file modes of the same file # paths in different packages (popular example: sendmail and # postfix, path /usr/sbin/sendmail). -# -# SuSEconfig's usage of the chkstat program can be turned off completely -# by setting CHECK_PERMISSIONS to "warn" in /etc/sysconfig/security. -# -# /etc/permissions is kept to the bare minimum. File modes that differ -# from the settings in this file should be considered broken. -# -# Please see the headers of the files -# /etc/permissions.easy -# /etc/permissions.secure -# /etc/permissions.paranoid -# as well as -# /etc/permissions.local -# for more information about their particular meaning and their setup. # # root directories: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2011.03.07.1608/permissions.easy new/permissions-2011.05.12.1347/permissions.easy --- old/permissions-2011.03.07.1608/permissions.easy 2011-03-07 16:08:04.000000000 +0100 +++ new/permissions-2011.05.12.1347/permissions.easy 2011-05-12 13:47:52.000000000 +0200 @@ -83,7 +83,7 @@ /usr/sbin/pam_auth root:shadow 4755 # still to be converted to utempter -/usr/lib/libvte9/gnome-pty-helper root:utmp 2755 +/usr/lib/gnome-pty-helper root:utmp 2755 # # mixed section: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2011.03.07.1608/permissions.local new/permissions-2011.05.12.1347/permissions.local --- old/permissions-2011.03.07.1608/permissions.local 2011-03-07 16:08:04.000000000 +0100 +++ new/permissions-2011.05.12.1347/permissions.local 2011-05-12 13:47:52.000000000 +0200 @@ -5,7 +5,7 @@ # and ownerships of files and directories in the installation. # # In particular, this file will not be touched during an upgrade of the -# SuSE Linux installation. It is designed to be a placeholder for local +# installation. It is designed to be a placeholder for local # additions by the administrator of the system to reflect filemodes # of locally installed packages or to override file permissions as # shipped with the distribution. @@ -15,18 +15,11 @@ # # Please see the file /etc/permissions for general usage hints of the # /etc/permissions* files. -# Keep in mind that this file (/etc/permissions.local) is being used by -# default by SuSEconfig, the shell script that is used by yast and yast2 -# after package installation and configuration changes to make the changes -# effective for the respective packages (eg generating the "real" -# configuration files). -# Always check if there are no conflicts between your "local" changes here -# and the settings in the other permissions files by calling -# "SuSEconfig" as root! # Please remember that logfiles might be modified by the logfile # rotation facilities (e.g. logrotate) so settings entered here might -# be overridden. -# This file needs to end with a newline. +# be overridden. Also devices files (/dev/*) are not static but +# managed via udev so this file can't be used to modify device +# permissions either. # # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2011.03.07.1608/permissions.paranoid new/permissions-2011.05.12.1347/permissions.paranoid --- old/permissions-2011.03.07.1608/permissions.paranoid 2011-03-07 16:08:04.000000000 +0100 +++ new/permissions-2011.05.12.1347/permissions.paranoid 2011-05-12 13:47:52.000000000 +0200 @@ -98,7 +98,7 @@ /usr/sbin/pam_auth root:shadow 0755 # still to be converted to utempter -/usr/lib/libvte9/gnome-pty-helper root:utmp 0755 +/usr/lib/gnome-pty-helper root:utmp 0755 # # mixed section: most of it is disabled in this permissions.secure: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2011.03.07.1608/permissions.secure new/permissions-2011.05.12.1347/permissions.secure --- old/permissions-2011.03.07.1608/permissions.secure 2011-03-07 16:08:04.000000000 +0100 +++ new/permissions-2011.05.12.1347/permissions.secure 2011-05-12 13:47:52.000000000 +0200 @@ -121,7 +121,7 @@ /usr/sbin/pam_auth root:shadow 4755 # still to be converted to utempter -/usr/lib/libvte9/gnome-pty-helper root:utmp 2755 +/usr/lib/gnome-pty-helper root:utmp 2755 # # mixed section: most of it is disabled in this permissions.secure: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
