Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at 2023-02-19 18:18:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/permissions (Old) and /work/SRC/openSUSE:Factory/.permissions.new.22824 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "permissions" Sun Feb 19 18:18:40 2023 rev:155 rq:1066365 version:1599_20230217 Changes: -------- --- /work/SRC/openSUSE:Factory/permissions/permissions.changes 2022-12-25 15:14:14.645166314 +0100 +++ /work/SRC/openSUSE:Factory/.permissions.new.22824/permissions.changes 2023-02-19 18:18:42.869386685 +0100 @@ -1,0 +2,7 @@ +Fri Feb 17 11:12:44 UTC 2023 - [email protected] + +- Update to version 20230217: + * shadow: newgidmap,newuidmap: use capabilities (bsc#1208309) + * profiles: whitelist kismet capabilities (bsc#1200954) (#171) + +------------------------------------------------------------------- Old: ---- permissions-20221220.tar.xz New: ---- permissions-20230217.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.Tx8ORr/_old 2023-02-19 18:18:43.501390701 +0100 +++ /var/tmp/diff_new_pack.Tx8ORr/_new 2023-02-19 18:18:43.509390751 +0100 @@ -1,7 +1,7 @@ # # spec file for package permissions # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,7 +16,7 @@ # -%define VERSION_DATE 20221220 +%define VERSION_DATE 20230217 Name: permissions Version: %{suse_version}_%{VERSION_DATE} ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Tx8ORr/_old 2023-02-19 18:18:43.565391107 +0100 +++ /var/tmp/diff_new_pack.Tx8ORr/_new 2023-02-19 18:18:43.569391133 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/permissions.git</param> - <param name="changesrevision">a19300c9a239ea0e232a7010aeba95fab389c552</param></service></servicedata> + <param name="changesrevision">dd301b149e0adc4ee05ff206d4f85953c43440ba</param></service></servicedata> (No newline at EOF) ++++++ permissions-20221220.tar.xz -> permissions-20230217.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20221220/profiles/permissions.easy new/permissions-20230217/profiles/permissions.easy --- old/permissions-20221220/profiles/permissions.easy 2022-12-20 10:40:15.000000000 +0100 +++ new/permissions-20230217/profiles/permissions.easy 2023-02-17 12:10:18.000000000 +0100 @@ -237,9 +237,11 @@ # /usr/sbin/suexec root:root 0755 -# newgidmap / newuidmap (bsc#979282, bsc#1048645) -/usr/bin/newgidmap root:shadow 4755 -/usr/bin/newuidmap root:shadow 4755 +# newgidmap / newuidmap (bsc#979282, bsc#1048645, bsc#1208309) +/usr/bin/newgidmap root:root 0755 + +capabilities cap_setgid=ep +/usr/bin/newuidmap root:root 0755 + +capabilities cap_setuid=ep # kwayland (bsc#1062182) /usr/bin/kwin_wayland root:root 0755 @@ -316,3 +318,10 @@ # postfix (bsc#1201385) /usr/sbin/postlog root:maildrop 2755 + +# kismet (bsc#1200954, bsc#1207654) +/usr/bin/kismet_cap_linux_bluetooth root:kismet 0750 + +capabilities cap_net_raw,cap_net_admin=ep + +/usr/bin/kismet_cap_linux_wifi root:kismet 0750 + +capabilities cap_net_raw,cap_net_admin=ep diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20221220/profiles/permissions.paranoid new/permissions-20230217/profiles/permissions.paranoid --- old/permissions-20221220/profiles/permissions.paranoid 2022-12-20 10:40:15.000000000 +0100 +++ new/permissions-20230217/profiles/permissions.paranoid 2023-02-17 12:10:18.000000000 +0100 @@ -249,9 +249,9 @@ # /usr/sbin/suexec root:root 0755 -# newgidmap / newuidmap (bsc#979282, bsc#1048645) -/usr/bin/newgidmap root:shadow 0755 -/usr/bin/newuidmap root:shadow 0755 +# newgidmap / newuidmap (bsc#979282, bsc#1048645, bsc#1208309) +/usr/bin/newgidmap root:root 0755 +/usr/bin/newuidmap root:root 0755 # kwayland (bsc#1062182) /usr/bin/kwin_wayland root:root 0755 @@ -324,3 +324,8 @@ # postfix (bsc#1201385) /usr/sbin/postlog root:maildrop 0755 + +# kismet (bsc#1200954, bsc#1207654) +/usr/bin/kismet_cap_linux_bluetooth root:kismet 0750 + +/usr/bin/kismet_cap_linux_wifi root:kismet 0750 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20221220/profiles/permissions.secure new/permissions-20230217/profiles/permissions.secure --- old/permissions-20221220/profiles/permissions.secure 2022-12-20 10:40:15.000000000 +0100 +++ new/permissions-20230217/profiles/permissions.secure 2023-02-17 12:10:18.000000000 +0100 @@ -277,9 +277,11 @@ # /usr/sbin/suexec root:root 0755 -# newgidmap / newuidmap (bsc#979282, bsc#1048645) -/usr/bin/newgidmap root:shadow 4755 -/usr/bin/newuidmap root:shadow 4755 +# newgidmap / newuidmap (bsc#979282, bsc#1048645, bsc#1208309) +/usr/bin/newgidmap root:root 0755 + +capabilities cap_setgid=ep +/usr/bin/newuidmap root:root 0755 + +capabilities cap_setuid=ep # kwayland (bsc#1062182) /usr/bin/kwin_wayland root:root 0755 @@ -355,3 +357,10 @@ # postfix (bsc#1201385) /usr/sbin/postlog root:maildrop 2755 + +# kismet (bsc#1200954, bsc#1207654) +/usr/bin/kismet_cap_linux_bluetooth root:kismet 0750 + +capabilities cap_net_raw,cap_net_admin=ep + +/usr/bin/kismet_cap_linux_wifi root:kismet 0750 + +capabilities cap_net_raw,cap_net_admin=ep
