Hello community, here is the log from the commit of package amanda for openSUSE:Factory checked in at 2019-12-09 21:34:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/amanda (Old) and /work/SRC/openSUSE:Factory/.amanda.new.4691 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "amanda" Mon Dec 9 21:34:15 2019 rev:2 rq:755218 version:3.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/amanda/amanda.changes 2019-02-24 17:12:38.544480029 +0100 +++ /work/SRC/openSUSE:Factory/.amanda.new.4691/amanda.changes 2019-12-09 21:34:21.778118483 +0100 @@ -1,0 +2,22 @@ +Thu Nov 28 15:25:56 UTC 2019 - Kristyna Streitova <[email protected]> + +- change %{_libexecdir}/amanda/application/ owner to root otherwise + chkstat refuses to set correct permissions there +- add missing BuildRequires + +------------------------------------------------------------------- +Thu Oct 17 13:05:45 UTC 2019 - Richard Brown <[email protected]> + +- Remove obsolete Groups tag (fate#326485) + +------------------------------------------------------------------- +Fri May 17 14:48:10 UTC 2019 - Kristýna Streitová <[email protected]> + +- update the list of suid binaries [bsc#1110797] + * added: ambind, ambsdtar, amgtar, amstar + * removed: amcheck, planner, dumper +- update README.SUSE and add a note about setuid binaries and the + fact that user amanda and members of the group amanda should be + considered privileged users + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ amanda.spec ++++++ --- /var/tmp/diff_new_pack.s9qt1v/_old 2019-12-09 21:34:23.214117917 +0100 +++ /var/tmp/diff_new_pack.s9qt1v/_new 2019-12-09 21:34:23.230117911 +0100 @@ -1,7 +1,7 @@ # # spec file for package amanda # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -22,8 +22,7 @@ Release: 0 Summary: Network Disk Archiver License: GPL-3.0-or-later -Group: Productivity/Archiving/Backup -Url: http://www.amanda.org/ +URL: http://www.amanda.org/ Source: http://downloads.sourceforge.net/amanda/amanda-%{version}.tar.gz #amanda-SUSE.tar.bz2 contains init scripts, config examples Source1: amanda-SUSE.tar.bz2 @@ -35,10 +34,14 @@ Patch5: amanda-timestamp.patch Patch6: amanda-3.5-no_return_in_nonvoid_fnc.patch Patch7: amanda-libnsl.patch +BuildRequires: autoconf BuildRequires: automake +BuildRequires: bison BuildRequires: cups-client BuildRequires: dump +BuildRequires: flex BuildRequires: gawk +BuildRequires: gcc BuildRequires: glib2-devel BuildRequires: gnuplot BuildRequires: krb5-devel @@ -47,6 +50,7 @@ BuildRequires: mailx BuildRequires: mtx BuildRequires: openssh +BuildRequires: openssl-devel BuildRequires: perl-base BuildRequires: pkgconfig BuildRequires: popt-devel @@ -54,15 +58,19 @@ BuildRequires: readline-devel BuildRequires: samba-client BuildRequires: sendmail +BuildRequires: perl(ExtUtils::Embed) +BuildRequires: perl(Test::Simple) BuildRequires: pkgconfig(libcrypto) BuildRequires: pkgconfig(libcurl) BuildRequires: pkgconfig(libtirpc) BuildRequires: pkgconfig(smbclient) Requires: %{_bindir}/smbclient Requires: dump +Requires: grep Requires: perl = %{perl_version} +Requires: tar Requires(post): permissions -Requires(pre): pwdutils +Requires(pre): shadow %description AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup @@ -82,6 +90,7 @@ %patch5 -p1 %patch6 -p1 %patch7 -p1 + %build ./autogen @@ -144,13 +153,14 @@ # create a list of binaries to be checked externally cat << EOF > %{buildroot}%{_libexecdir}/amanda/suidlist -%{_sbindir}/amcheck +%{_libexecdir}/amanda/ambind +%{_libexecdir}/amanda/application/ambsdtar +%{_libexecdir}/amanda/application/amgtar +%{_libexecdir}/amanda/application/amstar %{_libexecdir}/amanda/calcsize +%{_libexecdir}/amanda/killpgrp %{_libexecdir}/amanda/rundump -%{_libexecdir}/amanda/planner %{_libexecdir}/amanda/runtar -%{_libexecdir}/amanda/dumper -%{_libexecdir}/amanda/killpgrp EOF # create a symlink for amoldrecover manpage @@ -174,7 +184,7 @@ %post %if 0%{?set_permissions:1} -%set_permissions %{_sbindir}/amcheck %{_libexecdir}/amanda/calcsize %{_libexecdir}/amanda/rundump %{_libexecdir}/amanda/planner %{_libexecdir}/amanda/runtar %{_libexecdir}/amanda/dumper %{_libexecdir}/amanda/killpgrp +%set_permissions %{_libexecdir}/amanda/ambind %{_libexecdir}/amanda/application/ambsdtar %{_libexecdir}/amanda/application/amgtar %{_libexecdir}/amanda/application/amstar %{_libexecdir}/amanda/calcsize %{_libexecdir}/amanda/killpgrp %{_libexecdir}/amanda/rundump %{_libexecdir}/amanda/runtar %else %run_permissions %endif @@ -205,8 +215,8 @@ # bnc#412636 file permissions of .amandahosts should be 600 %config %attr(600,amanda,%{amanda_group}) %{_localstatedir}/lib/amanda/.amandahosts %config %attr(644,amanda,%{amanda_group}) %{_sysconfdir}/amanda/example/amanda.conf -# amanda-security.conf must be installed at %{_sysconfdir} and only root must be able to write it -# an example file should be installed at %{_sysconfdir}/amanda/ +# amanda-security.conf must be installed at %%{_sysconfdir} and only root must be able to write it +# an example file should be installed at %%{_sysconfdir}/amanda/ %config(noreplace) %attr(644, root, root) %{_sysconfdir}/amanda-security.conf %{_sysconfdir}/amanda/amanda-security.conf %config %attr(644,amanda,%{amanda_group}) %{_sysconfdir}/amanda/example/disklist @@ -270,7 +280,7 @@ %{_sbindir}/amlabel %{_sbindir}/amoverview %{_sbindir}/amplot -%verify(not mode) %attr(0750,root,%{amanda_group}) %{_sbindir}/amcheck +%{_sbindir}/amcheck %attr(0750,amanda,%{amanda_group}) %{_sbindir}/amrecover %{_sbindir}/amreport %{_sbindir}/amrestore @@ -303,7 +313,6 @@ %{_libexecdir}/amanda/amplot.g %{_libexecdir}/amanda/amplot.gp %defattr(755,amanda,%{amanda_group}) -%{_libexecdir}/amanda/ambind %{_libexecdir}/amanda/amandad %{_libexecdir}/amanda/amdumpd %{_libexecdir}/amanda/amidxtaped @@ -330,14 +339,27 @@ %{_libexecdir}/amanda/teecount %{_libexecdir}/amanda/restore %{_libexecdir}/amanda/senddiscover +%{_libexecdir}/amanda/dumper +%{_libexecdir}/amanda/planner +%attr(0755 root root) %dir %{_libexecdir}/amanda/application/ +%{_libexecdir}/amanda/application/amlog-script +%{_libexecdir}/amanda/application/ampgsql +%{_libexecdir}/amanda/application/amrandom +%{_libexecdir}/amanda/application/amraw +%{_libexecdir}/amanda/application/amsamba +%{_libexecdir}/amanda/application/amsuntar +%{_libexecdir}/amanda/application/amzfs-sendrecv +%{_libexecdir}/amanda/application/amzfs-snapshot +%{_libexecdir}/amanda/application/script-email +%{_libexecdir}/amanda/application/script-fail +%verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/ambind +%verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/application/ambsdtar +%verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/application/amgtar +%verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/application/amstar %verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/calcsize -%verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/dumper %verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/killpgrp -%verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/planner %verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/rundump %verify(not mode) %attr(0750,root,%{amanda_group})%{_libexecdir}/amanda/runtar -%dir %{_libexecdir}/amanda/application/ -%{_libexecdir}/amanda/application/* # include shared libs %dir %{_libdir}/amanda/ %{_libdir}/amanda/lib* ++++++ amanda-SUSE.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/README.SUSE new/README.SUSE --- old/README.SUSE 2001-11-23 12:12:48.000000000 +0100 +++ new/README.SUSE 2019-05-17 16:54:27.572201643 +0200 @@ -1,3 +1,15 @@ +README.SUSE for amanda + +IMPORTANT +--------- +We currently limit the execution of the binaries in this package to the +group amanda. Some of the binaries are setuid root. As the implementation +of these binaries is partially problematic, the user amanda and members +of the group amanda should be considered privileged users with equivalent +permissions to the root user. + +Templates +--------- Templates for the tape label printouts can be found in directory /var/lib/amanda/lbl-templ. Add a line to your amanda.conf (located in a subdirectory under /etc/amanda) in order to be able to use the
