Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package qclib for openSUSE:Factory checked in at 2023-10-26 17:12:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/qclib (Old) and /work/SRC/openSUSE:Factory/.qclib.new.24901 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "qclib" Thu Oct 26 17:12:03 2023 rev:16 rq:1120172 version:2.4.0 Changes: -------- --- /work/SRC/openSUSE:Factory/qclib/qclib.changes 2023-10-19 22:49:19.694803501 +0200 +++ /work/SRC/openSUSE:Factory/.qclib.new.24901/qclib.changes 2023-10-26 17:12:20.615695528 +0200 @@ -1,0 +2,6 @@ +Wed Oct 25 06:16:21 UTC 2023 - Nikolay Gueorguiev <[email protected]> + +- Applied a patch(bsc#1216212,bsc#1214466) + * qclib-sys-kernel-security-lockdown-enabled.patch + +------------------------------------------------------------------- New: ---- qclib-sys-kernel-security-lockdown-enabled.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ qclib.spec ++++++ --- /var/tmp/diff_new_pack.RY5lNR/_old 2023-10-26 17:12:21.175716096 +0200 +++ /var/tmp/diff_new_pack.RY5lNR/_new 2023-10-26 17:12:21.175716096 +0200 @@ -36,6 +36,9 @@ BuildRequires: glibc-devel %endif +# +Patch001: qclib-sys-kernel-security-lockdown-enabled.patch + %description qclib provides a C API for extraction of system information for Linux on z Systems. ++++++ qclib-sys-kernel-security-lockdown-enabled.patch ++++++ commit 73f9792009be42fe652ae897d390852f18bf445a Author: Stefan Raspl <[email protected]> Date: Thu Sep 7 22:47:16 2023 +0200 Handle systems with /sys/kernel/security/lockdown enabled Hypfs becomes inaccessible when /sys/kernel/security/lockdown is enabled, as is the case with e.g. secure booted systems. To reproduce, run echo integrity > /sys/kernel/security/lockdown Since qclib conceptually only requires access to /proc/sysinfo at a minimum, we simply skip hypfs in this case. Signed-off-by: Stefan Raspl <[email protected]> diff --git a/query_capacity_hypfs.c b/query_capacity_hypfs.c index 9845e88b..3907c269 100644 --- a/query_capacity_hypfs.c +++ b/query_capacity_hypfs.c @@ -617,7 +617,7 @@ static int qc_read_diag_file(struct qc_handle *hdl, const char *dbgfs, struct hy out_fail: free(priv->data); priv->data = NULL; - rc = -1; + rc = 1; out: free(fpath); @@ -942,14 +942,18 @@ static int qc_hypfs_open(struct qc_handle *hdl, char **buf) { /* if z/VM diag file exists, the LPAR diag file's content isn't valid, so we're done after handling the z/VM file */ priv->diag = QC_HYPFS_ZVM; - if ((rc = qc_read_diag_file(hdl, dbgfs, priv)) != 0) + if ((rc = qc_read_diag_file(hdl, dbgfs, priv)) != 0) { + rc = 0; // not a fatal error - we just skip this source goto out; + } priv->avail = HYPFS_AVAIL_BIN_ZVM; } else { qc_debug(hdl, "No z/VM diag file found, must be an LPAR\n"); priv->diag = QC_HYPFS_LPAR; - if ((rc = qc_read_diag_file(hdl, dbgfs, priv)) != 0) + if ((rc = qc_read_diag_file(hdl, dbgfs, priv)) != 0) { + rc = 0; // not a fatal error - we just skip this source goto out; + } priv->avail = HYPFS_AVAIL_BIN_LPAR; } } else {
