Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package net-snmp for openSUSE:Factory checked in at 2021-10-29 22:33:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/net-snmp (Old) and /work/SRC/openSUSE:Factory/.net-snmp.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "net-snmp" Fri Oct 29 22:33:05 2021 rev:98 rq:927777 version:5.9.1 Changes: -------- --- /work/SRC/openSUSE:Factory/net-snmp/net-snmp.changes 2021-09-25 00:35:32.331138428 +0200 +++ /work/SRC/openSUSE:Factory/.net-snmp.new.1890/net-snmp.changes 2021-10-29 22:33:13.707659349 +0200 @@ -1,0 +2,34 @@ +Sat Oct 23 11:32:10 UTC 2021 - Andreas Stieger <andreas.stie...@gmx.de> + +- fix shlib-policy-name-error for SLPP boo#1191774 + +------------------------------------------------------------------- +Mon Oct 18 06:31:40 UTC 2021 - Alexander Bergmann <abergm...@suse.com> + +- update to 5.9.1: + - General: Many bug fixes +- Change to use systemd service files directly from net-snmp package. + Patch clean-up and renaming. + Add: + * net-snmp-5.9.1-suse-systemd-service-files.patch + * net-snmp-5.9.1-harden_snmpd.service.patch + * net-snmp-5.9.1-harden_snmptrapd.service.patch + * net-snmp-5.9.1-add-lustre-fs-support.patch + Remove: + * snmpd.service + * snmptrapd.service + * harden_snmpd.service.patch + * harden_snmptrapd.service.patch + * net-snmp-5.8-add-lustre-fs-support.patch + +------------------------------------------------------------------- +Fri Oct 15 07:26:28 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): + * harden_snmpd.service.patch + * harden_snmptrapd.service.patch + Modified: + * snmpd.service + * snmptrapd.service + +------------------------------------------------------------------- Old: ---- net-snmp-5.8-add-lustre-fs-support.patch net-snmp-5.9.tar.gz net-snmp-5.9.tar.gz.asc snmpd.service snmptrapd.service New: ---- net-snmp-5.9.1-add-lustre-fs-support.patch net-snmp-5.9.1-harden_snmpd.service.patch net-snmp-5.9.1-harden_snmptrapd.service.patch net-snmp-5.9.1-suse-systemd-service-files.patch net-snmp-5.9.1.tar.gz net-snmp-5.9.1.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ net-snmp.spec ++++++ --- /var/tmp/diff_new_pack.H1WR45/_old 2021-10-29 22:33:14.595659685 +0200 +++ /var/tmp/diff_new_pack.H1WR45/_new 2021-10-29 22:33:14.595659685 +0200 @@ -27,22 +27,20 @@ %ifnarch s390 s390x %define netsnmp_with_sensors 1 %endif -%define libname libsnmp30 +%define libname libsnmp40 %bcond_without python2 Name: net-snmp -Version: 5.9 +Version: 5.9.1 Release: 0 Summary: SNMP Daemon License: BSD-3-Clause AND MIT Group: Productivity/Networking/Other URL: https://sourceforge.net/projects/net-snmp Source: https://sourceforge.net/projects/net-snmp/files/net-snmp/%{version}/%{name}-%{version}.tar.gz -Source1: snmpd.service -Source2: snmpd.conf -Source3: README.SUSE -Source4: snmptrapd.service -Source5: net-snmp.logrotate -Source6: test_installed +Source1: snmpd.conf +Source2: README.SUSE +Source3: net-snmp.logrotate +Source4: test_installed Source7: https://sourceforge.net/projects/net-snmp/files/net-snmp/%{version}/%{name}-%{version}.tar.gz.asc Source8: http://www.net-snmp.org/net-snmp-admin.asc#/%{name}.keyring Source10: snmpd.sysconfig @@ -56,10 +54,13 @@ Patch4: net-snmp-5.8-net-snmp-config-headercheck.patch Patch5: net-snmp-5.8-perl-tk-warning.patch Patch6: net-snmp-5.8-velocity-mib.patch -Patch8: net-snmp-5.8-snmpstatus-suppress-output.patch -Patch9: net-snmp-5.8-fix-Makefile.PL.patch -Patch10: net-snmp-5.8-modern-rpm-api.patch -Patch12: net-snmp-5.8-add-lustre-fs-support.patch +Patch7: net-snmp-5.8-snmpstatus-suppress-output.patch +Patch8: net-snmp-5.8-fix-Makefile.PL.patch +Patch9: net-snmp-5.8-modern-rpm-api.patch +Patch10: net-snmp-5.9.1-add-lustre-fs-support.patch +Patch11: net-snmp-5.9.1-harden_snmpd.service.patch +Patch12: net-snmp-5.9.1-harden_snmptrapd.service.patch +Patch13: net-snmp-5.9.1-suse-systemd-service-files.patch BuildRequires: %{python_module devel} BuildRequires: %{python_module setuptools} BuildRequires: autoconf @@ -278,13 +279,12 @@ %install %make_install INSTALL_PREFIX=%{buildroot} install -Dd %{buildroot}%{_localstatedir}/log %{buildroot}%{_localstatedir}/lib/net-snmp %{buildroot}%{_libexecdir}/net-snmp/agents %{buildroot}%{netsnmp_agentx_socket_dir_fhs} -install -D -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/snmpd.service -install -D -m 0644 %{SOURCE4} %{buildroot}%{_unitdir}/snmptrapd.service -install -D -m 0600 %{SOURCE2} %{buildroot}%{_sysconfdir}/snmp/snmpd.conf -install -m 0644 %{SOURCE3} . -install -m 0644 %{SOURCE4} . -install -D -m 0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/logrotate.d/net-snmp -install -m 0744 %{SOURCE6} testing/ +install -D -m 0644 dist/snmpd.service %{buildroot}%{_unitdir}/snmpd.service +install -D -m 0644 dist/snmptrapd.service %{buildroot}%{_unitdir}/snmptrapd.service +install -D -m 0600 %{SOURCE1} %{buildroot}%{_sysconfdir}/snmp/snmpd.conf +install -m 0644 %{SOURCE2} . +install -D -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/net-snmp +install -m 0744 %{SOURCE4} testing/ ln -sf service %{buildroot}%{_sbindir}/rcsnmpd ln -sf service %{buildroot}%{_sbindir}/rcsnmptrapd install -m 0644 /dev/null %{buildroot}%{netsnmp_logfile} ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.H1WR45/_old 2021-10-29 22:33:14.639659701 +0200 +++ /var/tmp/diff_new_pack.H1WR45/_new 2021-10-29 22:33:14.639659701 +0200 @@ -1,4 +1,4 @@ -libsnmp30 +libsnmp40 net-snmp-devel requires -net-snmp-<targettype> - requires "libsnmp30-<targettype> = <version>" + requires "libsnmp40-<targettype> = <version>" ++++++ net-snmp-5.8-add-lustre-fs-support.patch -> net-snmp-5.9.1-add-lustre-fs-support.patch ++++++ --- /work/SRC/openSUSE:Factory/net-snmp/net-snmp-5.8-add-lustre-fs-support.patch 2019-08-05 11:17:37.806529497 +0200 +++ /work/SRC/openSUSE:Factory/.net-snmp.new.1890/net-snmp-5.9.1-add-lustre-fs-support.patch 2021-10-29 22:33:13.391659230 +0200 @@ -1,24 +1,11 @@ -diff -Nurp net-snmp-5.8-orig/agent/mibgroup/hardware/fsys/fsys_mntent.c net-snmp-5.8/agent/mibgroup/hardware/fsys/fsys_mntent.c ---- net-snmp-5.8-orig/agent/mibgroup/hardware/fsys/fsys_mntent.c 2018-07-16 16:33:40.000000000 +0200 -+++ net-snmp-5.8/agent/mibgroup/hardware/fsys/fsys_mntent.c 2019-07-04 10:03:38.611004672 +0200 -@@ -144,6 +144,7 @@ _fsys_type( char *typename ) - !strcmp(typename, MNTTYPE_CVFS) || - !strcmp(typename, MNTTYPE_SIMFS) || - !strcmp(typename, MNTTYPE_BTRFS) || -+ !strcmp(typename, MNTTYPE_LUSTRE) || - !strcmp(typename, MNTTYPE_ZFS) || - !strcmp(typename, MNTTYPE_NVMFS) || - !strcmp(typename, MNTTYPE_ACFS) || -diff -Nurp net-snmp-5.8-orig/agent/mibgroup/hardware/fsys/mnttypes.h net-snmp-5.8/agent/mibgroup/hardware/fsys/mnttypes.h ---- net-snmp-5.8-orig/agent/mibgroup/hardware/fsys/mnttypes.h 2018-07-16 16:33:40.000000000 +0200 -+++ net-snmp-5.8/agent/mibgroup/hardware/fsys/mnttypes.h 2019-07-04 10:04:25.607004626 +0200 -@@ -148,6 +148,9 @@ - #ifndef MNTTYPE_BTRFS - #define MNTTYPE_BTRFS "btrfs" - #endif -+#ifndef MNTTYPE_LUSTRE -+#define MNTTYPE_LUSTRE "lustre" -+#endif - #ifndef MNTTYPE_ZFS - #define MNTTYPE_ZFS "zfs" - #endif +diff -Nurp net-snmp-5.9.1-orig/agent/mibgroup/hardware/fsys/fsys_mntent.c net-snmp-5.9.1/agent/mibgroup/hardware/fsys/fsys_mntent.c +--- net-snmp-5.9.1-orig/agent/mibgroup/hardware/fsys/fsys_mntent.c 2021-10-14 10:41:53.432186916 +0000 ++++ net-snmp-5.9.1/agent/mibgroup/hardware/fsys/fsys_mntent.c 2021-10-18 06:24:35.385893383 +0000 +@@ -75,6 +75,7 @@ static const char *other_fs[] = { + "jfs", + "jffs2", + "lofs", ++ "lustre", + "mvfs", + "nsspool", + "nssvol", ++++++ net-snmp-5.9.1-harden_snmpd.service.patch ++++++ Index: net-snmp-5.9/dist/snmpd.service =================================================================== --- net-snmp-5.9.orig/dist/snmpd.service +++ net-snmp-5.9/dist/snmpd.service @@ -10,6 +10,16 @@ Description=Simple Network Management Pr After=syslog.target network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions # Type=notify is also supported. It should be set when snmpd.socket is not used. Type=simple ExecStart=/usr/sbin/snmpd -f ++++++ net-snmp-5.9.1-harden_snmptrapd.service.patch ++++++ Index: net-snmp-5.9/dist/snmptrapd.service =================================================================== --- net-snmp-5.9.orig/dist/snmptrapd.service +++ net-snmp-5.9/dist/snmptrapd.service @@ -7,6 +7,16 @@ Description=Simple Network Management Pr After=syslog.target network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions # Type=notify is also supported. It should be set when snmptrapd.socket is not # used. Type=simple ++++++ net-snmp-5.9.1-suse-systemd-service-files.patch ++++++ diff -Nrup net-snmp-5.9.1-orig/dist/snmpd.service net-snmp-5.9.1/dist/snmpd.service --- net-snmp-5.9.1-orig/dist/snmpd.service 2021-10-21 15:22:42.168690298 +0000 +++ net-snmp-5.9.1/dist/snmpd.service 2021-10-21 15:23:10.579979496 +0000 @@ -21,8 +21,11 @@ ProtectControlGroups=true RestrictRealtime=true # end of automatic additions # Type=notify is also supported. It should be set when snmpd.socket is not used. -Type=simple -ExecStart=/usr/sbin/snmpd -f +Type=notify +Environment=OPTIONS="-LS0-6d" +EnvironmentFile=-/etc/sysconfig/snmpd +ExecStart=/usr/sbin/snmpd $OPTIONS -f +ExecReload=/bin/kill -HUP $MAINPID [Install] WantedBy=multi-user.target diff -Nrup net-snmp-5.9.1-orig/dist/snmptrapd.service net-snmp-5.9.1/dist/snmptrapd.service --- net-snmp-5.9.1-orig/dist/snmptrapd.service 2021-10-21 15:22:42.184689898 +0000 +++ net-snmp-5.9.1/dist/snmptrapd.service 2021-10-21 15:24:50.933468801 +0000 @@ -19,8 +19,11 @@ RestrictRealtime=true # end of automatic additions # Type=notify is also supported. It should be set when snmptrapd.socket is not # used. -Type=simple -ExecStart=/usr/sbin/snmptrapd -f +Type=notify +Environment=OPTIONS="-Lsd" +EnvironmentFile=-/etc/sysconfig/snmptrapd +ExecStart=/usr/sbin/snmptrapd $OPTIONS -f +ExecReload=/bin/kill -HUP $MAINPID [Install] WantedBy=multi-user.target ++++++ net-snmp-5.9.tar.gz -> net-snmp-5.9.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/net-snmp/net-snmp-5.9.tar.gz /work/SRC/openSUSE:Factory/.net-snmp.new.1890/net-snmp-5.9.1.tar.gz differ: char 13, line 1
