Hello community,
here is the log from the commit of package rpmlint for openSUSE:Factory checked
in at 2018-07-13 10:17:48
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/rpmlint (Old)
and /work/SRC/openSUSE:Factory/.rpmlint.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rpmlint"
Fri Jul 13 10:17:48 2018 rev:298 rq:622045 version:1.10
Changes:
--------
--- /work/SRC/openSUSE:Factory/rpmlint/rpmlint.changes 2018-07-04
23:55:19.975878752 +0200
+++ /work/SRC/openSUSE:Factory/.rpmlint.new/rpmlint.changes 2018-07-13
10:17:51.374205552 +0200
@@ -1,0 +2,17 @@
+Wed Jul 11 09:06:31 UTC 2018 - dmuel...@suse.com
+
+- add suse-rpmlint-all-pie.patch: refresh to handle the pie-executable
+ case (rename from rpmlint-all-pie.patch)
+
+-------------------------------------------------------------------
+Mon Jul 9 19:37:57 UTC 2018 - dmuel...@suse.com
+
+- drop obsolete suse-no-run-ldconfig.diff,
+ suse-manpages-for-rc-scripts.diff
+
+-------------------------------------------------------------------
+Thu Jul 5 16:48:30 UTC 2018 - matthias.gerst...@suse.com
+
+- whitelist pam_oath PAM module after audit (bsc#1089114)
+
+-------------------------------------------------------------------
Old:
----
rpmlint-all-pie.patch
suse-manpages-for-rc-scripts.diff
suse-no-run-ldconfig.diff
New:
----
suse-rpmlint-all-pie.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ rpmlint.spec ++++++
--- /var/tmp/diff_new_pack.Cv7QNO/_old 2018-07-13 10:17:52.458206838 +0200
+++ /var/tmp/diff_new_pack.Cv7QNO/_new 2018-07-13 10:17:52.458206838 +0200
@@ -55,7 +55,6 @@
Patch33: libtool-wrapper-check.diff
Patch34: suse-check-optional-dependencies.diff
Patch35: noarch-lib64.diff
-Patch36: suse-no-run-ldconfig.diff
Patch37: description-check.diff
Patch38: 0001-Tighten-wrong-script-interpreter-check-to-lower-fals.patch
Patch39: selfconflicts-provide.diff
@@ -69,7 +68,6 @@
Patch50: compressed-backup-regex.diff
Patch51: suse-speccheck-utf8.diff
Patch52: 0001-Accept-python-abi-as-a-valid-versioned-python-depend.patch
-Patch53: suse-manpages-for-rc-scripts.diff
Patch54: suse-ignore-specfile-errors.diff
Patch55: invalid-filerequires.diff
Patch57: check-for-self-provides.diff
@@ -85,13 +83,13 @@
Patch67: omit_BUILDROOT_from_pyo_files.patch
Patch68: 0001-Avoid-false-positives-on-is_elf-check.patch
Patch69: 0007-Validate-Appdata-also-when-appstream-util-is-unavail.patch
-Patch70: rpmlint-all-pie.patch
Patch71: 0001-Avoid-calling-close-on-undefined-fd-variable.patch
Patch72: rpmlint-slpp-NUM-NUM.patch
Patch73: 0001-Binariescheck-Check-for-chroot-chdir-on-ARM-PPC.patch
Patch74: 0001-Always-import-XDG-desktop-files-as-utf8.patch
Patch75: 0001-Fix-compatibility-with-file-5.33.patch
Patch76: update-magic-values-python-37.patch
+Patch77: suse-rpmlint-all-pie.patch
BuildRequires: obs-service-format_spec_file
BuildRequires: python3-flake8
BuildRequires: python3-pytest
++++++ 0001-Fix-compatibility-with-file-5.33.patch ++++++
--- /var/tmp/diff_new_pack.Cv7QNO/_old 2018-07-13 10:17:52.510206900 +0200
+++ /var/tmp/diff_new_pack.Cv7QNO/_new 2018-07-13 10:17:52.510206900 +0200
@@ -39,4 +39,4 @@
+ pie_exec_re and pie_exec_re.search(fname)):
printError(pkg, 'non-position-independent-executable',
fname)
- if not is_shobj:
+
++++++ config ++++++
--- /var/tmp/diff_new_pack.Cv7QNO/_old 2018-07-13 10:17:52.570206971 +0200
+++ /var/tmp/diff_new_pack.Cv7QNO/_new 2018-07-13 10:17:52.574206976 +0200
@@ -1179,10 +1179,12 @@
"pam_gdm.so",
# pam_slurm (bsc#1007053)
"pam_slurm.so",
- # pam_script(bsc#1039848)
+ # pam_script (bsc#1039848)
"pam_script.so",
- # pam_yubico(bsc#1087060)
- "pam_yubico.so"
+ # pam_yubico (bsc#1087060)
+ "pam_yubico.so",
+ # pam_oath (bsc#1089114)
+ "pam_oath.so"
))
# Output filters
++++++ suse-rpmlint-all-pie.patch ++++++
Index: rpmlint-rpmlint-1.10/BinariesCheck.py
===================================================================
--- rpmlint-rpmlint-1.10.orig/BinariesCheck.py
+++ rpmlint-rpmlint-1.10/BinariesCheck.py
@@ -543,10 +543,14 @@ class BinariesCheck(AbstractCheck.Abstra
if ocaml_mixed_regex.search(bin_info.tail):
printWarning(pkg, 'ocaml-mixed-executable', fname)
- if ((not is_shobj and not is_pie_exec) and
- pie_exec_re and pie_exec_re.search(fname)):
- printError(pkg, 'non-position-independent-executable',
- fname)
+ if (not is_shobj and not is_pie_exec):
+ if pie_exec_re and pie_exec_re.search(fname):
+ printError(
+ pkg, 'non-position-independent-executable', fname)
+ else:
+ printWarning(
+ pkg, 'position-independent-executable-suggested',
+ fname)
if bin_info.readelf_error:
continue
@@ -798,6 +802,10 @@ stripping process.''',
'''This executable must be position independent. Check that it is built with
-fPIE/-fpie in compiler flags and -pie in linker flags.''',
+'position-independent-executable-suggested',
+'''This executable should be position independent (all binaries should). Check
+that it is built with -fPIE/-fpie in compiler flags and -pie in linker
flags.''',
+
'missing-call-to-setgroups-before-setuid',
'''This executable is calling setuid and setgid without setgroups or
initgroups. There is a high probability this means it didn't relinquish all
