Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cockpit for openSUSE:Factory checked in at 2021-08-16 10:08:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cockpit (Old) and /work/SRC/openSUSE:Factory/.cockpit.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cockpit" Mon Aug 16 10:08:27 2021 rev:15 rq:911219 version:250 Changes: -------- --- /work/SRC/openSUSE:Factory/cockpit/cockpit.changes 2021-06-01 10:34:40.948529138 +0200 +++ /work/SRC/openSUSE:Factory/.cockpit.new.1899/cockpit.changes 2021-08-16 10:12:48.899011984 +0200 @@ -1,0 +2,7 @@ +Tue Aug 3 14:46:16 UTC 2021 - Ludwig Nussel <lnus...@suse.de> + +- new version 250 + https://cockpit-project.org/blog/cockpit-250.html +- fix pam_motd selinux denial (0001-selinux-allow-login-to-read-motd-file.patch) + +------------------------------------------------------------------- @@ -4 +11 @@ -- new version 255 +- new version 245 Old: ---- cockpit-245.obscpio New: ---- 0001-selinux-allow-login-to-read-motd-file.patch cockpit-250.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cockpit.spec ++++++ --- /var/tmp/diff_new_pack.2vm2ir/_old 2021-08-16 10:12:52.503007757 +0200 +++ /var/tmp/diff_new_pack.2vm2ir/_new 2021-08-16 10:12:52.507007752 +0200 @@ -17,7 +17,7 @@ # # This file is maintained at the following location: -# https://github.com/cockpit-project/cockpit/blob/master/tools/cockpit.spec +# https://github.com/cockpit-project/cockpit/blob/main/tools/cockpit.spec # # If you are editing this file in another location, changes will likely # be clobbered the next time an automated release is done. @@ -54,7 +54,7 @@ License: LGPL-2.1-or-later URL: https://cockpit-project.org/ -Version: 245 +Version: 250 Release: 0 Source0: cockpit-%{version}.tar Source1: cockpit.pam @@ -64,6 +64,7 @@ Source97: node_modules.spec.inc %include %{_sourcedir}/node_modules.spec.inc Patch0: cockpit-redhatfont.diff +Patch1: 0001-selinux-allow-login-to-read-motd-file.patch # in RHEL 8 the source package is duplicated: cockpit (building basic packages like cockpit-{bridge,system}) # and cockpit-appstream (building optional packages like cockpit-{pcp}) @@ -124,6 +125,8 @@ BuildRequires: openssh BuildRequires: distribution-logos BuildRequires: wallpaper-branding +# needed for /var/lib/pcp directory ownership +BuildRequires: pcp %else BuildRequires: pcp-libs-devel BuildRequires: openssh-clients @@ -467,7 +470,6 @@ %endif # NPM modules which are also available as packages Provides: bundled(js-jquery) = 3.5.1 -Provides: bundled(js-moment) = 2.29.1 Provides: bundled(xstatic-bootstrap-datepicker-common) = 1.9.0 Provides: bundled(xstatic-patternfly-common) = 3.59.5 @@ -506,7 +508,6 @@ %doc %{_mandir}/man8/cockpit-ws.8.gz %doc %{_mandir}/man8/cockpit-tls.8.gz %doc %{_mandir}/man8/remotectl.8.gz -%doc %{_mandir}/man8/pam_cockpit_cert.8.gz %doc %{_mandir}/man8/pam_ssh_add.8.gz %dir %{_sysconfdir}/cockpit %config(noreplace) %{_sysconfdir}/cockpit/ws-certs.d @@ -587,6 +588,14 @@ # firewalld only partially picks up changes to its services files without this test -f %{_bindir}/firewall-cmd && firewall-cmd --reload --quiet || true +# check for deprecated PAM config +if grep --color=auto pam_cockpit_cert %{_sysconfdir}/pam.d/cockpit; then + echo '**** WARNING:' + echo '**** WARNING: pam_cockpit_cert is a no-op and will be removed in a' + echo '**** WARNING: future release; remove it from your /etc/pam.d/cockpit.' + echo '**** WARNING:' +fi + %preun ws %systemd_preun cockpit.socket cockpit.service @@ -737,7 +746,7 @@ %package -n cockpit-pcp Summary: Cockpit PCP integration Requires: cockpit-bridge >= 238.1.1 -Requires(post): pcp +Requires: pcp %description -n cockpit-pcp Cockpit support for reading PCP metrics and loading PCP archives. @@ -755,6 +764,8 @@ Requires: cockpit-bridge >= 186 Requires: PackageKit Recommends: python3-tracer +# HACK: https://bugzilla.redhat.com/show_bug.cgi?id=1800468 +Requires: polkit %description -n cockpit-packagekit The Cockpit components for installing OS updates and Cockpit add-ons, ++++++ 0001-selinux-allow-login-to-read-motd-file.patch ++++++ >From 7884908e248a5954380cdfdb97f168e9f988fa54 Mon Sep 17 00:00:00 2001 From: Ludwig Nussel <ludwig.nus...@suse.de> Date: Fri, 6 Aug 2021 15:11:23 +0200 Subject: [PATCH] selinux: allow login to read motd file --- selinux/cockpit.te | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/selinux/cockpit.te b/selinux/cockpit.te index b9910165c..52fc5fe63 100644 --- a/selinux/cockpit.te +++ b/selinux/cockpit.te @@ -180,3 +180,11 @@ optional_policy(` optional_policy(` unconfined_domtrans(cockpit_session_t) ') + +# login may read motd file through pam +optional_policy(` + gen_require(` + type local_login_t; + ') + cockpit_read_pid_files(local_login_t) +') -- 2.26.2 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.2vm2ir/_old 2021-08-16 10:12:52.567007681 +0200 +++ /var/tmp/diff_new_pack.2vm2ir/_new 2021-08-16 10:12:52.571007677 +0200 @@ -3,7 +3,8 @@ <param name="versionformat">@PARENT_TAG@</param> <param name="url">http://github.com/cockpit-project/cockpit.git</param> <param name="scm">git</param> - <param name="revision">245</param> + <param name="revision">250</param> + <param name="submodules">disable</param> </service> <service name="node_modules" mode="manual"> <param name="cpio">node_modules.obscpio</param> ++++++ cockpit-245.obscpio -> cockpit-250.obscpio ++++++ /work/SRC/openSUSE:Factory/cockpit/cockpit-245.obscpio /work/SRC/openSUSE:Factory/.cockpit.new.1899/cockpit-250.obscpio differ: char 27, line 1 ++++++ cockpit-redhatfont.diff ++++++ --- /var/tmp/diff_new_pack.2vm2ir/_old 2021-08-16 10:12:52.615007625 +0200 +++ /var/tmp/diff_new_pack.2vm2ir/_new 2021-08-16 10:12:52.615007625 +0200 @@ -1,6 +1,6 @@ -From a911add6a66d376e0b9cef306f88a1c8289b4eb6 Mon Sep 17 00:00:00 2001 +From 37ca23741f6f0a2a05b31f75014076cbf64174ee Mon Sep 17 00:00:00 2001 From: Ludwig Nussel <ludwig.nus...@suse.de> -Date: Fri, 30 Apr 2021 15:10:59 +0200 +Date: Wed, 4 Aug 2021 09:50:25 +0200 Subject: [PATCH] Need local reference for redhat font --- @@ -8,13 +8,13 @@ 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json -index 92c13f112..3f65d2087 100644 +index ed3eb085e..f68f93d2e 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,7 @@ - "@patternfly/react-core": "4.106.2", - "@patternfly/react-styles": "4.9.4", - "@patternfly/react-table": "4.24.1", + "@patternfly/react-core": "4.144.0", + "@patternfly/react-styles": "4.11.7", + "@patternfly/react-table": "4.29.33", - "@redhat/redhat-font": "git+https://github.com/RedHatOfficial/RedHatFont.git#2.2.0", + "@redhat/redhat-font": "2.2.0", "bootstrap": "3.4.1", ++++++ cockpit.obsinfo ++++++ --- /var/tmp/diff_new_pack.2vm2ir/_old 2021-08-16 10:12:52.647007587 +0200 +++ /var/tmp/diff_new_pack.2vm2ir/_new 2021-08-16 10:12:52.651007583 +0200 @@ -1,5 +1,5 @@ name: cockpit -version: 245 -mtime: 1622038378 -commit: c7909bce3ef754fffe080beb399da97b91ffd268 +version: 250 +mtime: 1628060214 +commit: 84d4d62e95d521eced08ba506197ec86383ae53d ++++++ node_modules.obscpio ++++++ /work/SRC/openSUSE:Factory/cockpit/node_modules.obscpio /work/SRC/openSUSE:Factory/.cockpit.new.1899/node_modules.obscpio differ: char 27, line 1 ++++++ node_modules.spec.inc ++++++ ++++ 2312 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/cockpit/node_modules.spec.inc ++++ and /work/SRC/openSUSE:Factory/.cockpit.new.1899/node_modules.spec.inc ++++++ package-lock.json ++++++ ++++ 36623 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/cockpit/package-lock.json ++++ and /work/SRC/openSUSE:Factory/.cockpit.new.1899/package-lock.json