Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2020-09-09 17:47:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Wed Sep 9 17:47:09 2020 rev:141 rq:832593 version:2.13.4 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2020-08-17 11:59:40.462503472 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new.3399/apparmor.changes 2020-09-09 17:48:04.310481651 +0200 @@ -1,0 +2,6 @@ +Thu Sep 3 19:40:32 UTC 2020 - James Fehlig <jfeh...@suse.com> + +- libvirt-leaseshelper.patch: add /usr/libexec as a path to the + libvirt leaseshelper script (jsc#SLE-14253) + +------------------------------------------------------------------- New: ---- libvirt-leaseshelper.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.tvvILz/_old 2020-09-09 17:48:05.270482432 +0200 +++ /var/tmp/diff_new_pack.tvvILz/_new 2020-09-09 17:48:05.274482434 +0200 @@ -77,6 +77,10 @@ # add CAP_BPF and CAP_PERFMON to severity.db (merged upstream 2020-08-07 https://gitlab.com/apparmor/apparmor/-/merge_requests/589 (2.11..master)) Patch12: sevdb-caps-mr589.diff +# add /usr/libexec as a path for libvirt_leaseshelper script, jsc#SLE-14253 +# needs to go upstream +Patch13: libvirt-leaseshelper.patch + PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build %define apparmor_bin_prefix /lib/apparmor @@ -374,6 +378,7 @@ %patch11 -p1 %patch12 -p1 +%patch13 -p1 %build %define _lto_cflags %{nil} ++++++ libvirt-leaseshelper.patch ++++++ profiles: Add /usr/libexec as a path to the libvirt leaseshelper script openSUSE recently joined most distros in defining libexecdir as /usr/libexec. The SUSE libvirt package, which for a long time has set libexecdir to /usr/lib64/libvirt, needs to adopt. Jira SLE-14253 requests libvirt to use /usr/libexec. libvirt 6.7.0 will be hitting Factory soon with libexecdir set to /usr/libexec. Add it as a path for the libvirt_leaseshelper script. Signed-off-by: Jim Fehlig <jfeh...@suse.com> Index: apparmor-2.13.4/profiles/apparmor.d/usr.sbin.dnsmasq =================================================================== --- apparmor-2.13.4.orig/profiles/apparmor.d/usr.sbin.dnsmasq +++ apparmor-2.13.4/profiles/apparmor.d/usr.sbin.dnsmasq @@ -88,7 +88,7 @@ profile /usr/sbin/dnsmasq /usr/{bin,sbin /{,var/}run/libvirt/network/*.pid rw, # libvirt lease helper - /usr/lib{,64}/libvirt/libvirt_leaseshelper Cx -> libvirt_leaseshelper, + /usr/{lib/libvirt,lib64/libvirt,libexec}/libvirt_leaseshelper Cx -> libvirt_leaseshelper, # lxc-net pid and lease files /{,var/}run/lxc/dnsmasq.pid rw, @@ -115,7 +115,7 @@ profile /usr/sbin/dnsmasq /usr/{bin,sbin /etc/libnl-3/classid r, - /usr/lib{,64}/libvirt/libvirt_leaseshelper m, + /usr/{lib/libvirt,lib64/libvirt,libexec}/libvirt_leaseshelper m, owner @{PROC}/@{pid}/net/psched r, owner @{PROC}/@{pid}/status r,