Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at 2017-09-25 13:50:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/permissions (Old) and /work/SRC/openSUSE:Factory/.permissions.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "permissions" Mon Sep 25 13:50:36 2017 rev:109 rq:528303 version:20170922 Changes: -------- --- /work/SRC/openSUSE:Factory/permissions/permissions.changes 2017-09-15 21:02:58.173921411 +0200 +++ /work/SRC/openSUSE:Factory/.permissions.new/permissions.changes 2017-09-25 13:50:38.516907440 +0200 @@ -1,0 +2,6 @@ +Fri Sep 22 14:00:15 UTC 2017 - [email protected] + +- Update to version 20170922: + * Allow setuid root for singularity (group only) bsc#1028304 + +------------------------------------------------------------------- Old: ---- permissions-20170913.tar.xz New: ---- permissions-20170922.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.8sExxs/_old 2017-09-25 13:50:39.388784768 +0200 +++ /var/tmp/diff_new_pack.8sExxs/_new 2017-09-25 13:50:39.392784205 +0200 @@ -20,7 +20,7 @@ BuildRequires: libcap-devel Name: permissions -Version: 20170913 +Version: 20170922 Release: 0 Provides: aaa_base:/etc/permissions PreReq: %fillup_prereq ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.8sExxs/_old 2017-09-25 13:50:39.428779141 +0200 +++ /var/tmp/diff_new_pack.8sExxs/_new 2017-09-25 13:50:39.428779141 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/permissions.git</param> - <param name="changesrevision">0826e4862f152b8169d87f0e0e4593fb35ab8529</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">15ece10fa35f4b3677bcbd7aed9ccf525ffe0a67</param></service></servicedata> \ No newline at end of file ++++++ permissions-20170913.tar.xz -> permissions-20170922.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20170913/permissions.easy new/permissions-20170922/permissions.easy --- old/permissions-20170913/permissions.easy 2017-09-13 18:52:57.000000000 +0200 +++ new/permissions-20170922/permissions.easy 2017-09-22 15:53:38.000000000 +0200 @@ -339,6 +339,14 @@ # wireshark (not yet) /usr/bin/dumpcap root:root 0755 +# singularity (bsc#1028304) +/usr/lib/singularity/bin/expand-suid root:singularity 4750 +/usr/lib/singularity/bin/mount-suid root:singularity 4750 +/usr/lib/singularity/bin/create-suid root:singularity 4750 +/usr/lib/singularity/bin/action-suid root:singularity 4750 +/usr/lib/singularity/bin/export-suid root:singularity 4750 +/usr/lib/singularity/bin/import-suid root:singularity 4750 + # # XXX: / -> /usr merge and sbin -> bin merge # XXX: duplicated entries need to be cleaned up before 12.2 @@ -387,7 +395,6 @@ /usr/lib/gstreamer-1.0/gst-ptp-helper root:root 0755 +capabilities cap_net_bind_service=ep - # # suexec is only secure if the document root doesn't contain files # writeable by wwwrun. Make sure you have a safe server setup diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20170913/permissions.paranoid new/permissions-20170922/permissions.paranoid --- old/permissions-20170913/permissions.paranoid 2017-09-13 18:52:57.000000000 +0200 +++ new/permissions-20170922/permissions.paranoid 2017-09-22 15:53:38.000000000 +0200 @@ -350,6 +350,14 @@ # wireshark (not yet) /usr/bin/dumpcap root:root 0755 +# singularity (bsc#1028304) +/usr/lib/singularity/bin/expand-suid root:singularity 0750 +/usr/lib/singularity/bin/mount-suid root:singularity 0750 +/usr/lib/singularity/bin/create-suid root:singularity 0750 +/usr/lib/singularity/bin/action-suid root:singularity 0750 +/usr/lib/singularity/bin/export-suid root:singularity 0750 +/usr/lib/singularity/bin/import-suid root:singularity 0750 + # # XXX: / -> /usr merge and sbin -> bin merge # XXX: duplicated entries need to be cleaned up before 12.2 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20170913/permissions.secure new/permissions-20170922/permissions.secure --- old/permissions-20170913/permissions.secure 2017-09-13 18:52:57.000000000 +0200 +++ new/permissions-20170922/permissions.secure 2017-09-22 15:53:38.000000000 +0200 @@ -378,6 +378,14 @@ # wireshark (not yet) /usr/bin/dumpcap root:root 0755 +# singularity (bsc#1028304) +/usr/lib/singularity/bin/expand-suid root:singularity 4750 +/usr/lib/singularity/bin/mount-suid root:singularity 4750 +/usr/lib/singularity/bin/create-suid root:singularity 4750 +/usr/lib/singularity/bin/action-suid root:singularity 4750 +/usr/lib/singularity/bin/export-suid root:singularity 4750 +/usr/lib/singularity/bin/import-suid root:singularity 4750 + # # XXX: / -> /usr merge and sbin -> bin merge # XXX: duplicated entries need to be cleaned up before 12.2
