Hello community,

here is the log from the commit of package texlive-filesystem for 
openSUSE:Leap:15.2 checked in at 2020-03-02 17:21:29
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2/texlive-filesystem (Old)
 and      /work/SRC/openSUSE:Leap:15.2/.texlive-filesystem.new.26092 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "texlive-filesystem"

Mon Mar  2 17:21:29 2020 rev:37 rq:780155 version:unknown

Changes:
--------
--- /work/SRC/openSUSE:Leap:15.2/texlive-filesystem/texlive-filesystem.changes  
2020-01-15 16:06:57.128037769 +0100
+++ 
/work/SRC/openSUSE:Leap:15.2/.texlive-filesystem.new.26092/texlive-filesystem.changes
       2020-03-02 17:21:31.394083709 +0100
@@ -1,0 +2,54 @@
+Tue Feb  4 12:20:03 UTC 2020 - Dr. Werner Fink <[email protected]>
+
+- Use setpriv but now switch to every single owner for clearing
+  the files of this owner (boo#1159740)
+
+-------------------------------------------------------------------
+Wed Jan 22 08:55:38 UTC 2020 - Dr. Werner Fink <[email protected]>
+
+- Overwrite not wanted sysmbolic links on ls-R files 
+
+-------------------------------------------------------------------
+Thu Jan 16 12:02:43 UTC 2020 - Dr. Werner Fink <[email protected]>
+
+- Be sure that owner of ls-R files are corrected even on update
+  of already existing texlive filesystem
+
+-------------------------------------------------------------------
+Fri Jan 10 12:35:50 UTC 2020 - Dr. Werner Fink <[email protected]>
+
+- Set default user for ls-R files and font cache directories
+  to user nobody (bsc#1159740) 
+- Use setpriv to switch to nobody:mktex before clearing
+  font cache directories (bsc#1158910)
+
+-------------------------------------------------------------------
+Thu Dec 19 08:04:39 UTC 2019 - Dr. Werner Fink <[email protected]>
+
+- Harden ls-R file generation at installation (bsc#1158910) 
+
+-------------------------------------------------------------------
+Fri Dec 13 14:12:29 UTC 2019 - Dr. Werner Fink <[email protected]>
+
+- Simply use rm(1) for the cron job of texlive as all files below
+  /var/cache/texmf/ belong to texlive and only root can write and
+  remove those files (bsc#1158910). All other users do create their
+  own files below ~/.cache/texmf/
+
+-------------------------------------------------------------------
+Mon Nov 18 12:59:58 UTC 2019 - Dr. Werner Fink <[email protected]>
+
+- Make cron script even more failsafe
+
+-------------------------------------------------------------------
+Fri Nov 15 12:23:34 UTC 2019 - Dr. Werner Fink <[email protected]>
+
+- Make cron script more failsafe (boo#1150556)
+- Refresh font map files as well on update (boo#1155381) 
+
+-------------------------------------------------------------------
+Tue Aug 20 11:23:25 CEST 2019 - [email protected]
+
+- BuildRequire cron, too, as it contains now the cron directories
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ texlive-filesystem.spec ++++++
--- /var/tmp/diff_new_pack.q3nJgr/_old  2020-03-02 17:21:32.782086384 +0100
+++ /var/tmp/diff_new_pack.q3nJgr/_new  2020-03-02 17:21:32.806086430 +0100
@@ -46,6 +46,8 @@
 Requires(pre):  /usr/sbin/groupadd
 Requires(post): %fillup_prereq
 Requires(post): permissions
+Requires(post): /usr/bin/mktemp
+Requires(post): /usr/bin/mv
 Requires(pre):  /usr/bin/perl
 Requires(pre):  /usr/bin/clear
 Requires(pre):  /usr/bin/dialog
@@ -56,6 +58,7 @@
 Requires(pre):  sed
 Requires(verify): permissions
 Obsoletes:      tetex
+BuildRequires:  cron
 BuildRequires:  ed
 BuildRequires:  fontconfig
 #BuildConflicts: texinfo
@@ -148,6 +151,7 @@
 %define _appdefdir     %{_x11data}/app-defaults
 #
 %define texgrp          mktex
+%define nobody          nobody
 #define texgid          505
 #
 %description
@@ -13811,6 +13815,7 @@
     do
        echo '%% ls-R -- filename database for kpathsea; do not change this 
line.' > \
        %{buildroot}${dir}/ls-R
+       chmod 0664 %{buildroot}${dir}/ls-R
     done
     ln -sf %{_texmfvardir}/dist/ls-R %{buildroot}%{_texmfdistdir}/
     ln -sf %{_texmfvardir}/main/ls-R %{buildroot}%{_texmfmaindir}/
@@ -13838,10 +13843,10 @@
        %{_texmfvardir}/fonts/dvips/    root:root       1755
        %{_texmfvardir}/fonts/pdftex/   root:root       1755
        %{_texmfcache}/                 root:root       1755
-       %{_fontcache}/                  root:%{texgrp}  1775
-       %{_fontcache}/pk/               root:%{texgrp}  1775
-       %{_fontcache}/source/           root:%{texgrp}  1775
-       %{_fontcache}/tfm/              root:%{texgrp}  1775
+       %{_fontcache}/             %{nobody}:%{texgrp}  1775
+       %{_fontcache}/pk/          %{nobody}:%{texgrp}  1775
+       %{_fontcache}/source/      %{nobody}:%{texgrp}  1775
+       %{_fontcache}/tfm/         %{nobody}:%{texgrp}  1775
        EOF
     (cat > %{buildroot}%{_sysconfdir}/permissions.d/texlive) <<-EOF
        %{_libexecdir}/mktex/public     root:%{texgrp}  0755
@@ -13858,10 +13863,10 @@
        %{_texmfvardir}/fonts/dvips/    root:root       1755
        %{_texmfvardir}/fonts/pdftex/   root:root       1755
        %{_texmfcache}/                 root:root       1755
-       %{_fontcache}/                  root:%{texgrp}  1775
-       %{_fontcache}/pk/               root:%{texgrp}  1775
-       %{_fontcache}/source/           root:%{texgrp}  1775
-       %{_fontcache}/tfm/              root:%{texgrp}  1775
+       %{_fontcache}/             %{nobody}:%{texgrp}  1775
+       %{_fontcache}/pk/          %{nobody}:%{texgrp}  1775
+       %{_fontcache}/source/      %{nobody}:%{texgrp}  1775
+       %{_fontcache}/tfm/         %{nobody}:%{texgrp}  1775
        EOF
 
 %if %{with zypper_posttrans}
@@ -13921,21 +13926,42 @@
 if test "$1" = 1 && ! %{_bindir}/getent group %{texgrp} > /dev/null 2>&1 ; then
     %{_sbindir}/groupadd -r %{?texgid:-g %texgid} %{texgrp}
 fi
+# the ls-R file on update
+error=0
+for dir in     %{_texmfconfdir}        \
+               %{_fontcache}           \
+               %{_texmfvardir}         \
+               %{_texmfvardir}/dist    \
+               %{_texmfvardir}/main
+do
+    test ! -h ${dir}/ls-R || rm -vf ${dir}/ls-R
+    test -e ${dir}/ls-R || continue
+    test "$(stat --format '%U:%G' ${dir}/ls-R)" != root:%{texgrp}  || continue
+    chown root:%{texgrp} ${dir}/ls-R || error=1
+done
+test $error = 0 || exit 1
 
 %post
 %fillup_only -n texlive
 # the ls-R file (empty at package time)
+error=0
 for dir in     %{_texmfconfdir}        \
                %{_fontcache}           \
                %{_texmfvardir}         \
                %{_texmfvardir}/dist    \
                %{_texmfvardir}/main
 do
-    test ! -e ${dir}/ls-R || continue
+    test ! -e ${dir}/ls-R -o -h ${dir}/ls-R || continue
+    tmp=$(mktemp ${dir}/ls-R.XXXXXX) || error=1
+    test $error = 0 || continue
+    mv ${tmp} ${dir}/ls-R || error=1
+    test $error = 0 || continue
+    chgrp %{texgrp} ${dir}/ls-R || error=1
+    test $error = 0 || continue
+    chmod 0664 ${dir}/ls-R || error=1
+    test $error = 0 || continue
     echo '%% ls-R -- filename database for kpathsea; do not change this line.' 
> \
     ${dir}/ls-R
-    chown root:%{texgrp} ${dir}/ls-R || :
-    chmod 0664 ${dir}/ls-R || :
 done
 %if %{defined set_permissions}
 %set_permissions %{_texmfconfdir}/ls-R
@@ -13960,6 +13986,7 @@
 mkdir -p /var/run/texlive
 > /var/run/texlive/run-mktexlsr
 > /var/run/texlive/run-update
+test $error = 0 || exit 1
 
 %postun
 if test $1 = 1; then
@@ -24189,10 +24216,10 @@
 %dir %attr(1755,root,root) %{_texmfvardir}/web2c/tex
 %dir %attr(1755,root,root) %{_texmfvardir}/web2c/xetex
 %dir %attr(1755,root,root) %{_texmfcache}
-%dir %attr(1775,root,%{texgrp}) %verify(not mode) %{_fontcache}
-%dir %attr(1775,root,%{texgrp}) %verify(not mode) %{_fontcache}/pk
-%dir %attr(1775,root,%{texgrp}) %verify(not mode) %{_fontcache}/source
-%dir %attr(1775,root,%{texgrp}) %verify(not mode) %{_fontcache}/tfm
+%dir %attr(1775,%{nobody},%{texgrp}) %verify(not mode) %{_fontcache}
+%dir %attr(1775,%{nobody},%{texgrp}) %verify(not mode) %{_fontcache}/pk
+%dir %attr(1775,%{nobody},%{texgrp}) %verify(not mode) %{_fontcache}/source
+%dir %attr(1775,%{nobody},%{texgrp}) %verify(not mode) %{_fontcache}/tfm
 %dir %{_texmfvardir}/md5
 %verify(link) %{_texmfmaindir}/ls-R
 %verify(link) %{_texmfdistdir}/ls-R

++++++ texlive.cron ++++++
--- /var/tmp/diff_new_pack.q3nJgr/_old  2020-03-02 17:21:33.198087186 +0100
+++ /var/tmp/diff_new_pack.q3nJgr/_new  2020-03-02 17:21:33.198087186 +0100
@@ -7,29 +7,49 @@
 # Call texhash
 #
 
+type -f -p kpsewhich >& /dev/null || exit 0
+type -f -p mktexlsr  >& /dev/null || exit 0
+type -f -p find      >& /dev/null || exit 0
+type -f -p xargs     >& /dev/null || exit 0
+type -f -p setpriv   >& /dev/null || exit 0
+type -f -p sort      >& /dev/null || exit 0
+type -f -p rm        >& /dev/null || exit 0
 test -r /etc/sysconfig/texlive && . /etc/sysconfig/texlive
 
 OLDIFS=$IFS; IFS=':;'
 VARTEXFONTS="$(kpsewhich --expand-var '$VARTEXFONTS' 2> /dev/null)"
 IFS=$OLDIFS
 
-if test "$CLEAR_TEXMF_FONTS" = "yes" -a -n "$VARTEXFONTS" -a -x 
/usr/bin/safe-rm ; then
-    for p in $VARTEXFONTS ; do
-       test -d $p/pk/      && find $p/pk/      -type f -and -atime +20 -print0
-       test -d $p/tfm/     && find $p/tfm/     -type f -and -atime +60 -print0
-       test -d $p/source/  && find $p/source/  -type f -and -atime +60 -print0
-    done > >(exec -a xargs xargs -r -L100 -0 -- /usr/bin/safe-rm)
+uids=$(find $VARTEXFONTS/ \( -not -type d \) -printf '%U\n' | sort -u)
+
+if test "$CLEAR_TEXMF_FONTS" = "yes" -a -n "$VARTEXFONTS"
+then
+    for uid in ${uids[@]}
+    do
+       for p in $VARTEXFONTS
+       do
+           test -d $p/pk/      && find $p/pk/     \( -not -type d -and -atime 
+20 -and -uid $uid \) -print0
+           test -d $p/tfm/     && find $p/tfm/    \( -not -type d -and -atime 
+60 -and -uid $uid \) -print0
+           test -d $p/source/  && find $p/source/ \( -not -type d -and -atime 
+60 -and -uid $uid \) -print0
+       done > >(exec -a xargs xargs -r -L100 -0 -- setpriv --reuid $uid 
--regid mktex --init-groups rm -f)
+    done
 fi
-if test -n "$VARTEXFONTS" -a -x /usr/bin/safe-rmdir ; then
-    for p in $VARTEXFONTS ; do
-       test -d $p/pk/      && find $p/pk/      -type f -and -not -name '*.*pk'
-       test -d $p/tfm/     && find $p/tfm/     -type f -and -not -name '*.tfm'
-       test -d $p/source/  && find $p/source/  -type f -and -not -name '*.mf'
-       test -d $p/         && find $p/         -type f -and -path 
'*/[^[:alnum:]]*'
-    done > >(exec -a xargs xargs -r -L100 -0 -- /usr/bin/safe-rm)
-    for p in $VARTEXFONTS ; do
-       test -d $p/ && find $p/ -depth -type d -and -path '*/[^[:alnum:]]*'
-    done > >(exec -a xargs xargs -r -L100 -0 -- /usr/bin/safe-rmdir)
+if test -n "$VARTEXFONTS"
+then
+    for uid in ${uids[@]}
+    do
+       for p in $VARTEXFONTS
+       do
+           test -d $p/pk/      && find $p/pk/     \( -not -type d -and -not 
-name '*.*pk' -uid $uid \) -print0
+           test -d $p/tfm/     && find $p/tfm/    \( -not -type d -and -not 
-name '*.tfm' -uid $uid \) -print0
+           test -d $p/source/  && find $p/source/ \( -not -type d -and -not 
-name '*.mf'  -uid $uid \) -print0
+           test -d $p/         && find $p/        \( -not -type d -and -path 
'*/[^[:alnum:]]*' -uid $uid \) -print0
+       done > >(exec -a xargs xargs -r -L100 -0 -- setpriv --reuid $uid 
--regid mktex --init-groups rm -vf)
+       for p in $VARTEXFONTS
+       do
+           test -d $p/ && find $p/ -depth \( -type d -and -path 
'*/[^[:alnum:]]*' -and -uid $uid \) -print0
+       done > >(exec -a xargs xargs -r -L100 -0 -- setpriv --reuid $uid 
--regid mktex --init-groups rm -vfr)
+    done
 fi
 
 #


Reply via email to