Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at 2020-09-08 22:55:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/permissions (Old) and /work/SRC/openSUSE:Factory/.permissions.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "permissions" Tue Sep 8 22:55:18 2020 rev:142 rq:832056 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/permissions/permissions.changes 2020-08-31 16:47:25.108272046 +0200 +++ /work/SRC/openSUSE:Factory/.permissions.new.3399/permissions.changes 2020-09-08 22:55:21.647754496 +0200 @@ -1,0 +2,7 @@ +Fri Sep 04 10:57:51 UTC 2020 - [email protected] + +- Update to version 20200904: + * Add /usr/libexec for cockpit-session as new path + * physlock: whitelist with tight restrictions (bsc#1175720) + +------------------------------------------------------------------- Old: ---- permissions-20200826.tar.xz New: ---- permissions-20200904.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.ussFb6/_old 2020-09-08 22:55:22.479754912 +0200 +++ /var/tmp/diff_new_pack.ussFb6/_new 2020-09-08 22:55:22.483754915 +0200 @@ -16,7 +16,7 @@ # -%define VERSION_DATE 20200826 +%define VERSION_DATE 20200904 Name: permissions Version: %{VERSION_DATE}.%{suse_version} ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.ussFb6/_old 2020-09-08 22:55:22.535754940 +0200 +++ /var/tmp/diff_new_pack.ussFb6/_new 2020-09-08 22:55:22.539754942 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/permissions.git</param> - <param name="changesrevision">4d0b7f3f806b4a5f39c61a90fa36de6c6bb6ed9a</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">8a15e29e48acae7266010212096761ba54065fba</param></service></servicedata> \ No newline at end of file ++++++ permissions-20200826.tar.xz -> permissions-20200904.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20200826/profiles/permissions.easy new/permissions-20200904/profiles/permissions.easy --- old/permissions-20200826/profiles/permissions.easy 2020-08-26 14:32:45.000000000 +0200 +++ new/permissions-20200904/profiles/permissions.easy 2020-09-04 12:48:56.000000000 +0200 @@ -362,6 +362,7 @@ # setuid bit for cockpit (bsc#1169614) /usr/lib/cockpit-session root:cockpit-wsinstance 4750 +/usr/libexec/cockpit-session root:cockpit-wsinstance 4750 # binary that launches texlive tools with group "mktex" (bsc#1171686) /usr/lib/mktex/public root:mktex 2755 @@ -369,3 +370,6 @@ # enlightenment privileged desktop operations (bsc#1169238) /usr/lib64/enlightenment/utils/enlightenment_system root:root 4755 + +# physlock (bsc#1175720, not suited for world access) +/usr/bin/physlock root:trusted 04750 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20200826/profiles/permissions.paranoid new/permissions-20200904/profiles/permissions.paranoid --- old/permissions-20200826/profiles/permissions.paranoid 2020-08-26 14:32:45.000000000 +0200 +++ new/permissions-20200904/profiles/permissions.paranoid 2020-09-04 12:48:56.000000000 +0200 @@ -364,6 +364,7 @@ # setuid bit for cockpit (bsc#1169614) /usr/lib/cockpit-session root:cockpit-wsinstance 0750 +/usr/libexec/cockpit-session root:cockpit-wsinstance 0750 # binary that launches texlive tools with group "mktex" (bsc#1171686) /usr/lib/mktex/public root:mktex 0755 @@ -371,3 +372,6 @@ # enlightenment privileged desktop operations (bsc#1169238) /usr/lib64/enlightenment/utils/enlightenment_system root:root 0755 + +# physlock (bsc#1175720, not suited for world access) +/usr/bin/physlock root:root 0755 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20200826/profiles/permissions.secure new/permissions-20200904/profiles/permissions.secure --- old/permissions-20200826/profiles/permissions.secure 2020-08-26 14:32:45.000000000 +0200 +++ new/permissions-20200904/profiles/permissions.secure 2020-09-04 12:48:56.000000000 +0200 @@ -399,6 +399,7 @@ # setuid bit for cockpit (bsc#1169614) /usr/lib/cockpit-session root:cockpit-wsinstance 4750 +/usr/libexec/cockpit-session root:cockpit-wsinstance 4750 # binary that launches texlive tools with group "mktex" (bsc#1171686) /usr/lib/mktex/public root:mktex 2755 @@ -406,3 +407,6 @@ # enlightenment privileged desktop operations (bsc#1169238) /usr/lib64/enlightenment/utils/enlightenment_system root:root 4755 + +# physlock (bsc#1175720, not suited for world access) +/usr/bin/physlock root:root 0755
