Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package tomcat for openSUSE:Factory checked
in at 2025-05-22 16:59:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/tomcat (Old)
and /work/SRC/openSUSE:Factory/.tomcat.new.2732 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tomcat"
Thu May 22 16:59:32 2025 rev:118 rq:1279298 version:9.0.104
Changes:
--------
--- /work/SRC/openSUSE:Factory/tomcat/tomcat.changes 2025-05-03
20:58:34.412616615 +0200
+++ /work/SRC/openSUSE:Factory/.tomcat.new.2732/tomcat.changes 2025-05-22
16:59:33.112691687 +0200
@@ -1,0 +2,5 @@
+Wed May 7 09:32:52 UTC 2025 - Michele Bussolotto <michele.bussolo...@suse.com>
+
+- Hardening permissions (bsc#1242722)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ tomcat.spec ++++++
--- /var/tmp/diff_new_pack.fPOR3O/_old 2025-05-22 16:59:33.944726821 +0200
+++ /var/tmp/diff_new_pack.fPOR3O/_new 2025-05-22 16:59:33.944726821 +0200
@@ -719,22 +719,22 @@
%files
%doc {LICENSE,NOTICE,RELEASE*}
-%attr(0755,root,root) %{_bindir}/%{name}-digest
-%attr(0755,root,root) %{_bindir}/%{name}-tool-wrapper
-%attr(0755,root,root) %{_sbindir}/%{name}
-%attr(0644,root,root) %{_unitdir}/%{name}.service
+%{_bindir}/%{name}-digest
+%{_bindir}/%{name}-tool-wrapper
+%{_sbindir}/%{name}
+%{_unitdir}/%{name}.service
%{_sbindir}/rc%{name}
-%attr(0644,root,root) %{_unitdir}/%{name}@.service
-%attr(0755,root,root) %dir %{_libexecdir}/%{name}
-%attr(0755,root,root) %dir %{_localstatedir}/lib/tomcats
-%attr(0755,root,root) %{_libexecdir}/%{name}/functions
-%attr(0755,root,root) %{_libexecdir}/%{name}/preamble
-%attr(0755,root,root) %{_libexecdir}/%{name}/server
+%{_unitdir}/%{name}@.service
+%dir %{_libexecdir}/%{name}
+%dir %{_localstatedir}/lib/tomcats
+%{_libexecdir}/%{name}/functions
+%{_libexecdir}/%{name}/preamble
+%{_libexecdir}/%{name}/server
#bnc#565901
%{bindir}/catalina.sh
-%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
-%attr(0755,root,tomcat) %dir %{basedir}
-%attr(0755,root,tomcat) %dir %{confdir}
+%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
+%dir %{basedir}
+%dir %{confdir}
%attr(0775,root,tomcat) %dir %{appdir}
%attr(0770,tomcat,tomcat) %dir %{logdir}
%attr(0660,tomcat,tomcat) %{logdir}/catalina.out
@@ -747,29 +747,29 @@
%attr(0775,root,tomcat) %dir %{tomcatappdir}
%{confdir}/Catalina
-%attr(0755,root,tomcat) %dir %{confdir}/conf.d
-%attr(0644,root,tomcat) %{confdir}/conf.d/README
-%attr(0644,root,tomcat) %config(noreplace) %{confdir}/%{name}.conf
-%attr(0644,root,tomcat) %config(noreplace) %{confdir}/*.policy
-%attr(0644,root,tomcat) %config(noreplace) %{confdir}/*.properties
-%attr(0644,root,tomcat) %config(noreplace) %{confdir}/context.xml
-%attr(0644,root,tomcat) %config(noreplace) %{confdir}/server.xml
+%dir %{confdir}/conf.d
+%{confdir}/conf.d/README
+%config(noreplace) %{confdir}/%{name}.conf
+%config(noreplace) %{confdir}/*.policy
+%config(noreplace) %{confdir}/*.properties
+%config(noreplace) %{confdir}/context.xml
+%config(noreplace) %{confdir}/server.xml
# keep tomcat-users.xml readable only by root and tomcat group
%attr(0640,root,tomcat) %config(noreplace) %{confdir}/tomcat-users.xml
-%attr(0644,root,tomcat) %config(noreplace) %{confdir}/web.xml
-%attr(0644,root,tomcat) %config(noreplace) %{confdir}/jaspic-providers.xml
-%attr(0755,root,tomcat) %dir %{homedir}
-%attr(0644,root,tomcat) %{bindir}/bootstrap.jar
-%attr(0644,root,tomcat) %{bindir}/catalina-tasks.xml
+%config(noreplace) %{confdir}/web.xml
+%config(noreplace) %{confdir}/jaspic-providers.xml
+%dir %{homedir}
+%{bindir}/bootstrap.jar
+%{bindir}/catalina-tasks.xml
%{homedir}/lib
%{homedir}/temp
%{homedir}/work
%{homedir}/webapps
%{homedir}/logs
%{homedir}/conf
-%attr(0644,root,tomcat) %{_fillupdir}/sysconfig.%{name}
-%attr(0644,root,tomcat) %{confdir}/allowLinking.xslt
-%attr(0644,root,tomcat) %{confdir}/valve.xslt
+%{_fillupdir}/sysconfig.%{name}
+%{confdir}/allowLinking.xslt
+%{confdir}/valve.xslt
%files admin-webapps
%defattr(0644,root,tomcat,0755)
@@ -830,6 +830,6 @@
%files jsvc
%defattr(755,root,root,0755)
-%attr(0644,root,root) %{_unitdir}/%{name}-jsvc.service
+%{_unitdir}/%{name}-jsvc.service
%{_sbindir}/rc%{name}-jsvc
