Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package sysextmgr for openSUSE:Factory 
checked in at 2025-07-30 11:43:05
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/sysextmgr (Old)
 and      /work/SRC/openSUSE:Factory/.sysextmgr.new.13279 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "sysextmgr"

Wed Jul 30 11:43:05 2025 rev:3 rq:1296167 version:0.0+git20250728.f544090

Changes:
--------
--- /work/SRC/openSUSE:Factory/sysextmgr/sysextmgr.changes      2025-07-26 
13:41:46.342333321 +0200
+++ /work/SRC/openSUSE:Factory/.sysextmgr.new.13279/sysextmgr.changes   
2025-07-30 11:44:28.896496096 +0200
@@ -1,0 +2,7 @@
+Mon Jul 28 14:25:34 UTC 2025 - Thorsten Kukuk <ku...@suse.com>
+
+- Update to version 0.0+git20250728.f544090:
+  * Make sure struct config is always initialized
+  * sysextmgrd check: only root can specify prefix
+
+-------------------------------------------------------------------

Old:
----
  sysextmgr-0.0+git20250725.602e873.tar.xz

New:
----
  sysextmgr-0.0+git20250728.f544090.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ sysextmgr.spec ++++++
--- /var/tmp/diff_new_pack.XkRWdD/_old  2025-07-30 11:44:29.784532893 +0200
+++ /var/tmp/diff_new_pack.XkRWdD/_new  2025-07-30 11:44:29.788533059 +0200
@@ -17,7 +17,7 @@
 
 
 Name:           sysextmgr
-Version:        0.0+git20250725.602e873
+Version:        0.0+git20250728.f544090
 Release:        0
 Summary:        Tools to manage sysext-images on MicroOS
 License:        GPL-2.0-or-later

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.XkRWdD/_old  2025-07-30 11:44:29.840535213 +0200
+++ /var/tmp/diff_new_pack.XkRWdD/_new  2025-07-30 11:44:29.868536374 +0200
@@ -1,6 +1,6 @@
 <servicedata>
 <service name="tar_scm">
                 <param 
name="url">https://github.com/thkukuk/sysextmgr.git</param>
-<param 
name="changesrevision">602e87375b43e1be3dda8221e9a55f5f44923f77</param></service></servicedata>
+<param 
name="changesrevision">f5440901a923fe40f6a586c33b99b2c576bd9923</param></service></servicedata>
 (No newline at EOF)
 

++++++ sysextmgr-0.0+git20250725.602e873.tar.xz -> 
sysextmgr-0.0+git20250728.f544090.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/sysextmgr-0.0+git20250725.602e873/src/config.c 
new/sysextmgr-0.0+git20250728.f544090/src/config.c
--- old/sysextmgr-0.0+git20250725.602e873/src/config.c  2025-07-25 
15:14:10.000000000 +0200
+++ new/sysextmgr-0.0+git20250728.f544090/src/config.c  2025-07-28 
15:18:10.000000000 +0200
@@ -10,7 +10,13 @@
 #include "sysextmgr.h"
 #include "log_msg.h"
 
-struct config config;
+struct config config = {
+  .verbose = false,
+  .verify_signature = true,
+  .url = NULL,
+  .sysext_store_dir = SYSEXT_STORE_DIR,
+  .extensions_dir = EXTENSIONS_DIR
+};
 
 static econf_err
 open_config_file(econf_file **key_file)
@@ -94,21 +100,22 @@
     {
       int r;
 
-      r = getBoolValueDef(key_file, defgroup, "verbose", &config.verbose, 
false);
+      r = getBoolValueDef(key_file, defgroup, "verbose", &config.verbose, 
config.verbose);
       if (r < 0)
        return r;
-      r = getBoolValueDef(key_file, defgroup, "verify_signature", 
&config.verify_signature, true);
+      r = getBoolValueDef(key_file, defgroup, "verify_signature", 
&config.verify_signature, config.verify_signature);
       if (r < 0)
        return r;
-      r = getStringValueDef(key_file, defgroup, "url", &config.url, NULL);
+      r = getStringValueDef(key_file, defgroup, "url", &config.url, 
config.url);
       if (r < 0)
        return r;
-      r = getStringValueDef(key_file, defgroup, "sysext_store_dir", 
&config.sysext_store_dir, SYSEXT_STORE_DIR);
+      r = getStringValueDef(key_file, defgroup, "sysext_store_dir", 
&config.sysext_store_dir, config.sysext_store_dir);
       if (r < 0)
        return r;
-      r = getStringValueDef(key_file, defgroup, "extensions_dir", 
&config.extensions_dir, EXTENSIONS_DIR);
+      r = getStringValueDef(key_file, defgroup, "extensions_dir", 
&config.extensions_dir, config.extensions_dir);
       if (r < 0)
        return r;
     }
+
   return 0;
 }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/sysextmgr-0.0+git20250725.602e873/src/sysextmgrd.c 
new/sysextmgr-0.0+git20250728.f544090/src/sysextmgrd.c
--- old/sysextmgr-0.0+git20250725.602e873/src/sysextmgrd.c      2025-07-25 
15:14:10.000000000 +0200
+++ new/sysextmgr-0.0+git20250728.f544090/src/sysextmgrd.c      2025-07-28 
15:18:10.000000000 +0200
@@ -478,8 +478,8 @@
       return r;
     }
 
-  /* Only allow URL or verbose argument if called by root */
-  if (p.url || p.verbose != config.verbose)
+  /* Only allow URL, prefix or verbose argument if called by root */
+  if (p.url || p.prefix || p.verbose != config.verbose)
     {
       uid_t peer_uid;
       r = sd_varlink_get_peer_uid(link, &peer_uid);
@@ -490,7 +490,7 @@
         }
       if (peer_uid != 0)
         {
-         if (p.url)
+         if (p.url || p.prefix)
            {
              log_msg(LOG_WARNING, "Check: peer UID %i denied with additional 
options", peer_uid);
              return sd_varlink_error(link, SD_VARLINK_ERROR_PERMISSION_DENIED, 
parameters);

Reply via email to