Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package himmelblau for openSUSE:Factory checked in at 2026-08-09 21:33:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/himmelblau (Old) and /work/SRC/openSUSE:Factory/.himmelblau.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "himmelblau" Sun Aug 9 21:33:35 2026 rev:54 rq:1370093 version:3.1.11+git0.6f728d85 Changes: -------- --- /work/SRC/openSUSE:Factory/himmelblau/himmelblau.changes 2026-07-28 18:16:23.743354762 +0200 +++ /work/SRC/openSUSE:Factory/.himmelblau.new.16738/himmelblau.changes 2026-08-09 21:35:16.886062536 +0200 @@ -1,0 +2,20 @@ +Thu Aug 6 15:26:38 UTC 2026 - David Mulder <[email protected]> + +- Add o365-url-handler-test-etxtbsy.patch to avoid intermittent + ETXTBSY failures when OBS executes a freshly-written test script. + +------------------------------------------------------------------- +Wed Aug 05 17:23:23 UTC 2026 - David Mulder <[email protected]> + +- Update to version 3.1.11+git0.6f728d85: + * security: gate the o365 URL handler on a Microsoft 365 origin allowlist + * Version 3.1.11 + * fix(pam): make account denials terminal + * debian: make the pam_allow_groups denial terminal in the account phase + * chore(deps): refresh Cargo lockfile + * security: reject RFC2307 ids in systemd's dynamic user range + * security: reject subid account names containing ':' or control characters + * security: bind PamChangeAuthToken to the connecting peer + * Add himmelblau-selinux package split and improve selinux handling w/ macros. + +------------------------------------------------------------------- Old: ---- himmelblau-3.1.10+git0.5d5bca33.tar.bz2 New: ---- himmelblau-3.1.11+git0.6f728d85.tar.bz2 o365-url-handler-test-etxtbsy.patch ----------(New B)---------- New: - Add o365-url-handler-test-etxtbsy.patch to avoid intermittent ETXTBSY failures when OBS executes a freshly-written test script. ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ himmelblau.spec ++++++ --- /var/tmp/diff_new_pack.Td8hJv/_old 2026-08-09 21:35:18.342112202 +0200 +++ /var/tmp/diff_new_pack.Td8hJv/_new 2026-08-09 21:35:18.346112338 +0200 @@ -30,7 +30,7 @@ %endif Name: himmelblau -Version: 3.1.10+git0.5d5bca33 +Version: 3.1.11+git0.6f728d85 Release: 0 Summary: Interoperability suite for Microsoft Azure Entra Id License: GPL-3.0-or-later @@ -41,6 +41,7 @@ Source2: cargo_config Patch0: python311-build.patch Patch1: conf_example.patch +Patch2: o365-url-handler-test-etxtbsy.patch BuildRequires: binutils BuildRequires: cargo BuildRequires: cargo-packaging @@ -89,11 +90,6 @@ BuildRequires: selinux-tools %endif ExclusiveArch: %{rust_tier1_arches} -%if 0%{?suse_version} >= 1600 -Requires: make -Requires: policycoreutils -Requires: selinux-policy-devel -%endif Recommends: cron Recommends: krb5 Recommends: libnss_himmelblau2 @@ -101,12 +97,32 @@ Recommends: system-user-tss Recommends: tpm2.0-tools Suggests: himmelblau-sso +%if 0%{?suse_version} >= 1600 +Requires: (%{name}-selinux if selinux-policy-targeted) +%endif %description Himmelblau is an interoperability suite for Microsoft Azure Entra Id and Intune, which allows users to sign into a Linux machine using Azure Entra Id credentials. +%if 0%{?suse_version} >= 1600 +%package -n himmelblau-selinux +Summary: Himmelblau SELinux config +Requires: %{name} = %{version} +# The `selinux_requires_min` macro doesn't exist on SLE16.0 +%if 0%{?suse_version} > 1600 +%{selinux_requires_min} +%else +Requires: policycoreutils +%endif + +%description -n himmelblau-selinux +Himmelblau is an interoperability suite for Microsoft Azure Entra Id +and Intune, which allows users to sign into a Linux machine using Azure +Entra Id credentials. +%endif + %package -n pam-himmelblau Summary: Azure Entra Id authentication PAM module Requires: %{name} = %{version} @@ -257,6 +273,15 @@ install -m 0644 man/man8/himmelblaud_tasks.8 %{buildroot}/%{_mandir}/man8/ install -m 0644 src/daemon/src/himmelblau-policies.tmpfiles.conf %{buildroot}/%{_tmpfilesdir}/himmelblau-policies.conf install -m 0644 src/daemon/src/himmelblaud.tmpfiles.conf %{buildroot}/%{_tmpfilesdir}/himmelblaud.conf +%if 0%{?suse_version} < 1600 +pushd %{buildroot}%{_sbindir} +ln -s himmelblaud rchimmelblaud +ln -s himmelblaud_tasks rchimmelblaud_tasks +ln -s broker rcbroker +popd +%endif + +# SELinux %if 0%{?suse_version} >= 1600 install -D -d -m 0755 %{buildroot}/%{_selinux_pkgdir}/himmelblaud install -D -d -m 0755 %{buildroot}/%{_selinux_docdir} @@ -264,15 +289,10 @@ install -m 0644 src/selinux/src/himmelblaud.te %{buildroot}/%{_selinux_pkgdir}/himmelblaud/himmelblaud.te install -m 0644 src/selinux/src/himmelblaud.fc %{buildroot}/%{_selinux_pkgdir}/himmelblaud/himmelblaud.fc %endif -pushd %{buildroot}%{_sbindir} -ln -s himmelblaud rchimmelblaud -ln -s himmelblaud_tasks rchimmelblaud_tasks -ln -s broker rcbroker -popd # SSHD Config install -D -d -m 0755 %{buildroot}%{_sysconfdir}/ssh/sshd_config.d -install -m 0644 platform/el/sshd_config %{buildroot}/%{_sysconfdir}/ssh/sshd_config.d/himmelblau.conf +install -m 0644 platform/el/sshd_config %{buildroot}/%{_sysconfdir}/ssh/sshd_config.d/30-himmelblau.conf # Single Sign On strip --strip-unneeded target/release/linux-entra-sso @@ -333,6 +353,7 @@ %service_del_postun himmelblaud.service himmelblaud-tasks.service %if 0%{?suse_version} >= 1600 +%postun -n himmelblau-selinux %selinux_modules_uninstall himmelblaud %endif @@ -342,8 +363,8 @@ %preun %service_del_preun himmelblaud.service himmelblaud-tasks.service -%posttrans %if 0%{?suse_version} >= 1600 +%posttrans -n himmelblau-selinux %selinux_modules_install %{_selinux_pkgdir}/himmelblaud.pp if command -v selinuxenabled >/dev/null 2>&1 && selinuxenabled && command -v restorecon >/dev/null 2>&1; then @@ -390,7 +411,18 @@ %{_mandir}/man8/himmelblaud_tasks.8* %{_tmpfilesdir}/himmelblau-policies.conf %{_tmpfilesdir}/himmelblaud.conf +%if 0%{?suse_version} < 1600 +%{_sbindir}/rchimmelblaud +%{_sbindir}/rchimmelblaud_tasks +%endif +%{_datadir}/dbus-1/services/com.microsoft.identity.broker1.service +%{_sbindir}/broker +%if 0%{?suse_version} < 1600 +%{_sbindir}/rcbroker +%endif + %if 0%{?suse_version} >= 1600 +%files -n himmelblau-selinux %dir %{_docdir}/himmelblau-selinux %dir %{_selinux_docdir} %dir %{_selinux_pkgdir} @@ -399,8 +431,6 @@ %{_selinux_pkgdir}/himmelblaud/himmelblaud.te %{_selinux_pkgdir}/himmelblaud/himmelblaud.fc %endif -%{_sbindir}/rchimmelblaud -%{_sbindir}/rchimmelblaud_tasks %files -n libnss_himmelblau2 %dir %{_tmpfilesdir} @@ -420,7 +450,7 @@ %endif %files -n himmelblau-sshd-config -%config %{_sysconfdir}/ssh/sshd_config.d/himmelblau.conf +%config %{_sysconfdir}/ssh/sshd_config.d/30-himmelblau.conf %if 0%{?sle_version} <= 150500 %dir %{_sysconfdir}/ssh/sshd_config.d %endif @@ -460,9 +490,6 @@ %{chrome_ext_dir}/jlnfnnolkbjieggibinobhkjdfbpcohn.json %{chrome_policy_dir}/himmelblau.json %{chromium_policy_dir}/himmelblau.json -%{_datadir}/dbus-1/services/com.microsoft.identity.broker1.service -%{_sbindir}/broker -%{_sbindir}/rcbroker %files -n himmelblau-qr-greeter %dir %{_datarootdir}/gnome-shell ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Td8hJv/_old 2026-08-09 21:35:18.402114248 +0200 +++ /var/tmp/diff_new_pack.Td8hJv/_new 2026-08-09 21:35:18.410114522 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/himmelblau-idm/himmelblau.git</param> - <param name="changesrevision">5d5bca33c5372d8193ecab60c572111745303fee</param></service></servicedata> + <param name="changesrevision">6f728d85f326075f20084dd9b88d6daeef1a5912</param></service></servicedata> (No newline at EOF) ++++++ himmelblau-3.1.10+git0.5d5bca33.tar.bz2 -> himmelblau-3.1.11+git0.6f728d85.tar.bz2 ++++++ ++++ 1719 lines of diff (skipped) ++++++ o365-url-handler-test-etxtbsy.patch ++++++ Index: himmelblau-3.1.11+git0.6f728d85/src/o365/tests/url_handler.rs =================================================================== --- himmelblau-3.1.11+git0.6f728d85.orig/src/o365/tests/url_handler.rs +++ himmelblau-3.1.11+git0.6f728d85/src/o365/tests/url_handler.rs @@ -77,8 +77,9 @@ impl Harness { let log = self.dir.join("calls.log"); let _ = fs::remove_file(&log); - let out = Command::new(self.dir.join("o365-url-handler")) - .args(args) + let out = Command::new("bash") + .arg(self.dir.join("o365-url-handler")) + .args(args) // The stubs shadow anything of the same name on the real PATH. .env( "PATH", ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/himmelblau/vendor.tar.zst /work/SRC/openSUSE:Factory/.himmelblau.new.16738/vendor.tar.zst differ: char 7, line 1
