Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at 2014-11-10 22:15:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/permissions (Old) and /work/SRC/openSUSE:Factory/.permissions.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "permissions" Changes: -------- --- /work/SRC/openSUSE:Factory/permissions/permissions.changes 2014-08-29 17:42:28.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.permissions.new/permissions.changes 2014-11-10 22:15:20.000000000 +0100 @@ -1,0 +2,7 @@ +Wed Nov 5 16:07:01 UTC 2014 - [email protected] + +- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093) +- permissions: incorporating squid changes from bnc#891268 +- hint that chkstat --system --set needs to be run after editing bnc#895647 + +------------------------------------------------------------------- Old: ---- permissions-2014.08.26.1452.tar.bz2 New: ---- permissions-2014.11.05.1706.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.nZIeXs/_old 2014-11-10 22:15:21.000000000 +0100 +++ /var/tmp/diff_new_pack.nZIeXs/_new 2014-11-10 22:15:21.000000000 +0100 @@ -20,7 +20,7 @@ BuildRequires: libcap-devel Name: permissions -Version: 2014.08.26.1452 +Version: 2014.11.05.1706 Release: 0 Provides: aaa_base:/etc/permissions PreReq: %fillup_prereq ++++++ permissions-2014.08.26.1452.tar.bz2 -> permissions-2014.11.05.1706.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2014.08.26.1452/permissions.easy new/permissions-2014.11.05.1706/permissions.easy --- old/permissions-2014.08.26.1452/permissions.easy 2014-08-26 14:52:59.000000000 +0200 +++ new/permissions-2014.11.05.1706/permissions.easy 2014-11-05 17:06:34.000000000 +0100 @@ -76,6 +76,14 @@ # from the squid package /usr/sbin/pam_auth root:shadow 4755 +# squid changes from bnc#891268 +/var/cache/squid squid:root 0750 +/var/log/squid squid:root 0750 +/usr/sbin/pinger root:squid 0750 + +capabilities cap_net_raw=ep +/usr/sbin/basic_pam_auth root:shadow 2750 + + # still to be converted to utempter /usr/lib/gnome-pty-helper root:utmp 2755 @@ -137,9 +145,9 @@ /usr/sbin/change-passwd root:root 4755 # -# smb printing with kerberos authentication (#177114) +# smb printing with kerberos authentication (bnc#177114) (bnc#685093) # -/usr/bin/get_printing_ticket root:lp 4750 +/usr/bin/get_printing_ticket root:lp 0700 # # networking (need root for the privileged socket) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2014.08.26.1452/permissions.local new/permissions-2014.11.05.1706/permissions.local --- old/permissions-2014.08.26.1452/permissions.local 2014-08-26 14:52:59.000000000 +0200 +++ new/permissions-2014.11.05.1706/permissions.local 2014-11-05 17:06:34.000000000 +0100 @@ -1,6 +1,10 @@ # # /etc/permissions.local # +# After editing this file run +# chkstat --system --set +# to apply the changes. +# # This file is used by chkstat (and indirectly by various RPM package scripts) # to check or set the modes and ownerships of files and directories in # the installation. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2014.08.26.1452/permissions.paranoid new/permissions-2014.11.05.1706/permissions.paranoid --- old/permissions-2014.08.26.1452/permissions.paranoid 2014-08-26 14:52:59.000000000 +0200 +++ new/permissions-2014.11.05.1706/permissions.paranoid 2014-11-05 17:06:34.000000000 +0100 @@ -91,6 +91,13 @@ # from the squid package /usr/sbin/pam_auth root:shadow 0755 +# squid changes from bnc#891268 +/var/cache/squid squid:root 0750 +/var/log/squid squid:root 0750 +/usr/sbin/pinger root:squid 0750 +/usr/sbin/basic_pam_auth root:shadow 0750 + + # still to be converted to utempter /usr/lib/gnome-pty-helper root:utmp 0755 @@ -153,9 +160,9 @@ /usr/sbin/change-passwd root:root 0755 # -# smb printing with kerberos authentication (#177114) +# smb printing with kerberos authentication (bnc#177114) (bnc#685093) # -/usr/bin/get_printing_ticket root:lp 0755 +/usr/bin/get_printing_ticket root:lp 0700 # # networking (need root for the privileged socket) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2014.08.26.1452/permissions.secure new/permissions-2014.11.05.1706/permissions.secure --- old/permissions-2014.08.26.1452/permissions.secure 2014-08-26 14:52:59.000000000 +0200 +++ new/permissions-2014.11.05.1706/permissions.secure 2014-11-05 17:06:34.000000000 +0100 @@ -114,6 +114,14 @@ # from the squid package /usr/sbin/pam_auth root:shadow 4755 +# squid changes from bnc#891268 +/var/cache/squid squid:root 0750 +/var/log/squid squid:root 0750 +/usr/sbin/pinger root:squid 0750 + +capabilities cap_net_raw=ep +/usr/sbin/basic_pam_auth root:shadow 2750 + + # still to be converted to utempter /usr/lib/gnome-pty-helper root:utmp 2755 @@ -175,9 +183,9 @@ /usr/sbin/change-passwd root:root 4755 # -# smb printing with kerberos authentication (#177114) +# smb printing with kerberos authentication (bnc#177114)(bnc#685093) # -/usr/bin/get_printing_ticket root:lp 4750 +/usr/bin/get_printing_ticket root:lp 0700 # # networking (need root for the privileged socket) -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
