Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package yast2-installation for openSUSE:Factory checked in at 2021-03-03 18:33:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/yast2-installation (Old) and /work/SRC/openSUSE:Factory/.yast2-installation.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "yast2-installation" Wed Mar 3 18:33:16 2021 rev:462 rq:876260 version:4.3.30 Changes: -------- --- /work/SRC/openSUSE:Factory/yast2-installation/yast2-installation.changes 2021-03-01 12:48:53.446367789 +0100 +++ /work/SRC/openSUSE:Factory/.yast2-installation.new.2378/yast2-installation.changes 2021-03-03 18:33:36.215322305 +0100 @@ -1,0 +2,7 @@ +Tue Mar 2 11:09:17 UTC 2021 - Josef Reidinger <jreidin...@suse.com> + +- Do not write selinux and polkit default rules during upgrade + (bsc#1182894) +- 4.3.30 + +------------------------------------------------------------------- Old: ---- yast2-installation-4.3.29.tar.bz2 New: ---- yast2-installation-4.3.30.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-installation.spec ++++++ --- /var/tmp/diff_new_pack.dT8ZKS/_old 2021-03-03 18:33:36.911322810 +0100 +++ /var/tmp/diff_new_pack.dT8ZKS/_new 2021-03-03 18:33:36.911322810 +0100 @@ -17,7 +17,7 @@ Name: yast2-installation -Version: 4.3.29 +Version: 4.3.30 Release: 0 Summary: YaST2 - Installation Parts License: GPL-2.0-only ++++++ yast2-installation-4.3.29.tar.bz2 -> yast2-installation-4.3.30.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-installation-4.3.29/package/yast2-installation.changes new/yast2-installation-4.3.30/package/yast2-installation.changes --- old/yast2-installation-4.3.29/package/yast2-installation.changes 2021-03-01 12:31:29.000000000 +0100 +++ new/yast2-installation-4.3.30/package/yast2-installation.changes 2021-03-02 16:14:12.000000000 +0100 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Tue Mar 2 11:09:17 UTC 2021 - Josef Reidinger <jreidin...@suse.com> + +- Do not write selinux and polkit default rules during upgrade + (bsc#1182894) +- 4.3.30 + +------------------------------------------------------------------- Mon Mar 1 10:41:52 UTC 2021 - Josef Reidinger <jreidin...@suse.com> - move properly security finish client (bsc#1182821) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-installation-4.3.29/package/yast2-installation.spec new/yast2-installation-4.3.30/package/yast2-installation.spec --- old/yast2-installation-4.3.29/package/yast2-installation.spec 2021-03-01 12:31:29.000000000 +0100 +++ new/yast2-installation-4.3.30/package/yast2-installation.spec 2021-03-02 16:14:12.000000000 +0100 @@ -16,7 +16,7 @@ # Name: yast2-installation -Version: 4.3.29 +Version: 4.3.30 Release: 0 Group: System/YaST License: GPL-2.0-only diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-installation-4.3.29/src/lib/installation/clients/security_finish.rb new/yast2-installation-4.3.30/src/lib/installation/clients/security_finish.rb --- old/yast2-installation-4.3.29/src/lib/installation/clients/security_finish.rb 2021-03-01 12:31:29.000000000 +0100 +++ new/yast2-installation-4.3.30/src/lib/installation/clients/security_finish.rb 2021-03-02 16:14:12.000000000 +0100 @@ -62,11 +62,17 @@ Yast::SignatureCheckDialogs.CheckSignatures ) + # in autoinstallation write security profile here + Yast::Security.Write if Yast::Mode.autoinst + # ensure we have correct ca certificates if Yast::Mode.update res = Yast::SCR.Execute(Yast::Path.new(".target.bash_output"), "/usr/sbin/update-ca-certificates") log.info("updating ca certificates result: #{res}") + + # Finish here as during upgrade we do not want to modify security settings + return true end write_polkit @@ -78,9 +84,6 @@ "/usr/bin/chkstat --system --set") log.info("updating capabilities: #{res}") - # in autoinstallation write security profile here - Yast::Security.Write if Yast::Mode.autoinst - # Write down selinux configuration settings.selinux_config.save diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-installation-4.3.29/test/lib/clients/security_finish_test.rb new/yast2-installation-4.3.30/test/lib/clients/security_finish_test.rb --- old/yast2-installation-4.3.29/test/lib/clients/security_finish_test.rb 2021-03-01 12:31:29.000000000 +0100 +++ new/yast2-installation-4.3.30/test/lib/clients/security_finish_test.rb 2021-03-02 16:14:12.000000000 +0100 @@ -111,6 +111,12 @@ allow(proposal_settings).to receive(:polkit_default_privs).and_return("easy") expect(Yast::SCR).to_not receive(:Write).with(path(".sysconfig.security.POLKIT_DEFAULT_PRIVS"), anything) end + + it "skips writting selinux" do + expect(proposal_settings.selinux_config).to_not receive(:save) + + subject.write + end end context "when policy kit default priviges is defined" do