Hello community,

here is the log from the commit of package inn for openSUSE:Factory checked in 
at 2020-01-27 00:22:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/inn (Old)
 and      /work/SRC/openSUSE:Factory/.inn.new.26092 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "inn"

Mon Jan 27 00:22:32 2020 rev:37 rq:766962 version:2.6.2

Changes:
--------
--- /work/SRC/openSUSE:Factory/inn/inn.changes  2019-09-13 14:58:55.781278790 
+0200
+++ /work/SRC/openSUSE:Factory/.inn.new.26092/inn.changes       2020-01-27 
00:22:52.469509344 +0100
@@ -1,0 +2,6 @@
+Fri Jan 24 16:56:14 CET 2020 - [email protected]
+
+- change user to news before touching files in /var/log/news
+  [bnc#1154302] [CVE-2019-3692]
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ inn.spec ++++++
--- /var/tmp/diff_new_pack.WMzj0j/_old  2020-01-27 00:22:55.045510557 +0100
+++ /var/tmp/diff_new_pack.WMzj0j/_new  2020-01-27 00:22:55.045510557 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package inn
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -12,7 +12,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via https://bugs.opensuse.org/
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
 
@@ -257,14 +257,13 @@
 exit 0
 
 %post
-mkdir -p var/log/news
-touch var/log/news/news.notice
-touch var/log/news/news.err
-touch var/log/news/news.crit
-touch var/log/news/news
-touch var/log/news/inn.status
-touch var/log/news/innfeed.status
-chown news:news var/log/news/news.notice var/log/news/news.err 
var/log/news/news.crit var/log/news/news var/log/news/inn.status 
var/log/news/innfeed.status
+runuser -u news -g news touch \
+    var/log/news/news.notice \
+    var/log/news/news.err \
+    var/log/news/news.crit \
+    var/log/news/news \
+    var/log/news/inn.status \
+    var/log/news/innfeed.status
 if test -e usr/lib/news/bin/control/version -o -e usr/lib/news/bin/inndstart ; 
then
     rm -f etc/news/inn.conf.OLD
     rm -f etc/news/newsfeeds.OLD




Reply via email to