Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at 2020-10-15 13:43:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/permissions (Old) and /work/SRC/openSUSE:Factory/.permissions.new.3486 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "permissions" Thu Oct 15 13:43:38 2020 rev:145 rq:840211 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/permissions/permissions.changes 2020-10-04 17:30:10.952238434 +0200 +++ /work/SRC/openSUSE:Factory/.permissions.new.3486/permissions.changes 2020-10-15 13:43:44.369137504 +0200 @@ -1,0 +2,7 @@ +Thu Oct 08 09:19:32 UTC 2020 - [email protected] + +- Update to version 20201008: + * cleanup now useless /usr/lib entries after move to /usr/libexec (bsc#1171164) + * drop (f)ping capabilities in favor of ICMP_PROTO sockets (bsc#1174504) + +------------------------------------------------------------------- Old: ---- permissions-20200930.tar.xz New: ---- permissions-20201008.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.Zp2ufh/_old 2020-10-15 13:43:45.077137781 +0200 +++ /var/tmp/diff_new_pack.Zp2ufh/_new 2020-10-15 13:43:45.081137782 +0200 @@ -16,7 +16,7 @@ # -%define VERSION_DATE 20200930 +%define VERSION_DATE 20201008 Name: permissions Version: %{VERSION_DATE}.%{suse_version} ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Zp2ufh/_old 2020-10-15 13:43:45.121137798 +0200 +++ /var/tmp/diff_new_pack.Zp2ufh/_new 2020-10-15 13:43:45.125137799 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/permissions.git</param> - <param name="changesrevision">95fac00b09c116dc9c3f07cbfb4f952700df59ce</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">92eac1c845a2b647cc1aeb6c862fc6c93cc50b3d</param></service></servicedata> \ No newline at end of file ++++++ permissions-20200930.tar.xz -> permissions-20201008.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20200930/etc/permissions new/permissions-20201008/etc/permissions --- old/permissions-20200930/etc/permissions 2020-09-30 10:39:10.000000000 +0200 +++ new/permissions-20201008/etc/permissions 2020-10-08 11:17:56.000000000 +0200 @@ -86,7 +86,6 @@ /etc/sysconfig/network/providers/ root:root 700 # utempter -/usr/lib/utempter/utempter root:utmp 2755 /usr/libexec/utempter/utempter root:utmp 2755 # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20200930/profiles/permissions.easy new/permissions-20201008/profiles/permissions.easy --- old/permissions-20200930/profiles/permissions.easy 2020-09-30 10:39:10.000000000 +0200 +++ new/permissions-20201008/profiles/permissions.easy 2020-10-08 11:17:56.000000000 +0200 @@ -81,7 +81,6 @@ /sbin/pccardctl root:trusted 4755 # libgnomesu (#75823, #175616) -/usr/lib/libgnomesu/gnomesu-pam-backend root:root 4755 /usr/libexec/libgnomesu/gnomesu-pam-backend root:root 4755 # @@ -89,8 +88,6 @@ # /usr/bin/clockdiff root:root 0755 +capabilities cap_net_raw=p -/usr/bin/ping root:root 0755 - +capabilities cap_net_raw=p # mtr /usr/sbin/mtr-packet root:root 0755 +capabilities cap_net_raw=ep @@ -109,7 +106,6 @@ # # setuid needed on the text console to set the terminal content on ctrl-o # #66112 -/usr/lib/mc/cons.saver root:root 4755 /usr/libexec/mc/cons.saver root:root 4755 @@ -132,21 +128,13 @@ # # amanda # -/usr/lib/amanda/calcsize root:amanda 4750 /usr/libexec/amanda/calcsize root:amanda 4750 -/usr/lib/amanda/rundump root:amanda 4750 /usr/libexec/amanda/rundump root:amanda 4750 -/usr/lib/amanda/runtar root:amanda 4750 /usr/libexec/amanda/runtar root:amanda 4750 -/usr/lib/amanda/killpgrp root:amanda 4750 /usr/libexec/amanda/killpgrp root:amanda 4750 -/usr/lib/amanda/ambind root:amanda 4750 /usr/libexec/amanda/ambind root:amanda 4750 -/usr/lib/amanda/application/ambsdtar root:amanda 4750 /usr/libexec/amanda/application/ambsdtar root:amanda 4750 -/usr/lib/amanda/application/amgtar root:amanda 4750 /usr/libexec/amanda/application/amgtar root:amanda 4750 -/usr/lib/amanda/application/amstar root:amanda 4750 /usr/libexec/amanda/application/amstar root:amanda 4750 @@ -181,9 +169,7 @@ /usr/bin/uuname uucp:uucp 6555 /usr/bin/uustat uucp:uucp 6555 /usr/bin/uux uucp:uucp 6555 -/usr/lib/uucp/uucico uucp:uucp 6555 /usr/libexec/uucp/uucico uucp:uucp 6555 -/usr/lib/uucp/uuxqt uucp:uucp 6555 /usr/libexec/uucp/uuxqt uucp:uucp 6555 # polkit new (bnc#523377) @@ -192,7 +178,6 @@ /usr/bin/pkexec root:root 4755 # dbus-1 (#333361, #1056764, bsc#1171164) -/usr/lib/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 /usr/libexec/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 # policycoreutils (#440596) @@ -233,7 +218,6 @@ +capabilities cap_net_raw,cap_net_admin=ep # singularity version 3 (bsc#1128598) -/usr/lib/singularity/bin/starter-suid root:singularity 4750 /usr/libexec/singularity/bin/starter-suid root:singularity 4750 /usr/bin/su root:root 4755 @@ -250,18 +234,13 @@ /usr/bin/cdda2wav root:root 755 # qemu-bridge-helper (bnc#765948, bsc#988279) -/usr/lib/qemu-bridge-helper root:kvm 04750 /usr/libexec/qemu-bridge-helper root:kvm 04750 #iouyap (bnc#904060) -/usr/lib/iouyap root:iouyap 0750 - +capabilities cap_net_raw,cap_net_admin=ep /usr/libexec/iouyap root:iouyap 0750 +capabilities cap_net_raw,cap_net_admin=ep # gstreamer ptp (bsc#960173) -/usr/lib/gstreamer-1.0/gst-ptp-helper root:root 0755 - +capabilities cap_net_bind_service=ep /usr/libexec/gstreamer-1.0/gst-ptp-helper root:root 0755 +capabilities cap_net_bind_service=ep @@ -285,18 +264,12 @@ +capabilities cap_sys_nice=ep # gvfs (bsc#1065864) -/usr/lib/gvfs/gvfsd-nfs root:root 0755 - +capabilities cap_net_bind_service=ep /usr/libexec/gvfs/gvfsd-nfs root:root 0755 +capabilities cap_net_bind_service=ep # icinga2 (bsc#1069410) /run/icinga2/cmd/ icinga:icingacmd 2750 -# fping (bsc#1047921) -/usr/sbin/fping root:root 0755 - +capabilities cap_net_raw=ep - # usbauth (bsc#1066877) /usr/bin/usbauth-npriv root:usbauth 04750 /usr/lib/usbauth-notifier/ root:usbauth-notifier 0750 @@ -313,7 +286,6 @@ /usr/lib64/libsmc-preload.so root:root 04755 # lxc (bsc#988348) -/usr/lib/lxc/lxc-user-nic root:kvm 04750 /usr/libexec/lxc/lxc-user-nic root:kvm 04750 # firejail (bsc#1059013) @@ -354,7 +326,6 @@ /var/log/ts-shell/ root:ts-shell 2770 # setuid bit for cockpit (bsc#1169614) -/usr/lib/cockpit-session root:cockpit-wsinstance 4750 /usr/libexec/cockpit-session root:cockpit-wsinstance 4750 # binary that launches texlive tools with group "mktex" (bsc#1171686) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20200930/profiles/permissions.paranoid new/permissions-20201008/profiles/permissions.paranoid --- old/permissions-20200930/profiles/permissions.paranoid 2020-09-30 10:39:10.000000000 +0200 +++ new/permissions-20201008/profiles/permissions.paranoid 2020-10-08 11:17:56.000000000 +0200 @@ -98,14 +98,12 @@ /sbin/pccardctl root:trusted 0755 # libgnomesu (#75823, #175616) -/usr/lib/libgnomesu/gnomesu-pam-backend root:root 0755 /usr/libexec/libgnomesu/gnomesu-pam-backend root:root 0755 # # networking (need root for the privileged socket) # /usr/bin/clockdiff root:root 0755 -/usr/bin/ping root:root 0755 # mtr /usr/sbin/mtr-packet root:root 0755 @@ -123,7 +121,6 @@ # # setuid needed on the text console to set the terminal content on ctrl-o # #66112 -/usr/lib/mc/cons.saver root:root 0755 /usr/libexec/mc/cons.saver root:root 0755 @@ -145,21 +142,13 @@ # # amanda # -/usr/lib/amanda/calcsize root:amanda 0750 /usr/libexec/amanda/calcsize root:amanda 0750 -/usr/lib/amanda/rundump root:amanda 0750 /usr/libexec/amanda/rundump root:amanda 0750 -/usr/lib/amanda/runtar root:amanda 0750 /usr/libexec/amanda/runtar root:amanda 0750 -/usr/lib/amanda/killpgrp root:amanda 0750 /usr/libexec/amanda/killpgrp root:amanda 0750 -/usr/lib/amanda/ambind root:amanda 0750 /usr/libexec/amanda/ambind root:amanda 0750 -/usr/lib/amanda/application/ambsdtar root:amanda 0750 /usr/libexec/amanda/application/ambsdtar root:amanda 0750 -/usr/lib/amanda/application/amgtar root:amanda 0750 /usr/libexec/amanda/application/amgtar root:amanda 0750 -/usr/lib/amanda/application/amstar root:amanda 0750 /usr/libexec/amanda/application/amstar root:amanda 0750 @@ -194,9 +183,7 @@ /usr/bin/uuname uucp:uucp 0555 /usr/bin/uustat uucp:uucp 0555 /usr/bin/uux uucp:uucp 0555 -/usr/lib/uucp/uucico uucp:uucp 0555 /usr/libexec/uucp/uucico uucp:uucp 0555 -/usr/lib/uucp/uuxqt uucp:uucp 0555 /usr/libexec/uucp/uuxqt uucp:uucp 0555 # polkit new (bnc#523377) @@ -205,7 +192,6 @@ /usr/bin/pkexec root:root 0755 # dbus-1 (#333361, #1056764, bsc#1171164) -/usr/lib/dbus-1/dbus-daemon-launch-helper root:messagebus 0750 /usr/libexec/dbus-1/dbus-daemon-launch-helper root:messagebus 0750 # policycoreutils (#440596) @@ -246,7 +232,6 @@ /usr/bin/dumpcap root:root 0755 # singularity version 3 (bsc#1128598) -/usr/lib/singularity/bin/starter-suid root:singularity 0750 /usr/libexec/singularity/bin/starter-suid root:singularity 0750 /usr/bin/su root:root 0755 @@ -261,16 +246,12 @@ /usr/bin/cdda2wav root:root 755 # qemu-bridge-helper has no special privileges currently (bnc#765948) -/usr/lib/qemu-bridge-helper root:root 755 /usr/libexec/qemu-bridge-helper root:root 755 #iouyap (bnc#904060) -/usr/lib/iouyap root:iouyap 0750 /usr/libexec/iouyap root:iouyap 0750 # gstreamer ptp (bsc#960173) -/usr/lib/gstreamer-1.0/gst-ptp-helper root:root 0755 - +capabilities cap_net_bind_service=ep /usr/libexec/gstreamer-1.0/gst-ptp-helper root:root 0755 +capabilities cap_net_bind_service=ep @@ -294,15 +275,11 @@ /usr/bin/kwin_wayland root:root 0755 # gvfs (bsc#1065864) -/usr/lib/gvfs/gvfsd-nfs root:root 0755 /usr/libexec/gvfs/gvfsd-nfs root:root 0755 # icinga2 (bsc#1069410) /run/icinga2/cmd/ icinga:icingacmd 0750 -# fping (bsc#1047921) -/usr/sbin/fping root:root 0755 - # usbauth (bsc#1066877) /usr/bin/usbauth-npriv root:usbauth 0750 /usr/lib/usbauth-notifier/ root:usbauth-notifier 0750 @@ -319,7 +296,6 @@ /usr/lib64/libsmc-preload.so root:root 0755 # lxc (bsc#988348) -/usr/lib/lxc/lxc-user-nic root:kvm 0750 /usr/libexec/lxc/lxc-user-nic root:kvm 0750 # firejail (bsc#1059013) @@ -356,7 +332,6 @@ /var/log/ts-shell/ root:ts-shell 0770 # setuid bit for cockpit (bsc#1169614) -/usr/lib/cockpit-session root:cockpit-wsinstance 0750 /usr/libexec/cockpit-session root:cockpit-wsinstance 0750 # binary that launches texlive tools with group "mktex" (bsc#1171686) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-20200930/profiles/permissions.secure new/permissions-20201008/profiles/permissions.secure --- old/permissions-20200930/profiles/permissions.secure 2020-09-30 10:39:10.000000000 +0200 +++ new/permissions-20201008/profiles/permissions.secure 2020-10-08 11:17:56.000000000 +0200 @@ -123,7 +123,6 @@ /sbin/pccardctl root:trusted 4750 # libgnomesu (#75823, #175616) -/usr/lib/libgnomesu/gnomesu-pam-backend root:root 4755 /usr/libexec/libgnomesu/gnomesu-pam-backend root:root 4755 # @@ -131,8 +130,6 @@ # /usr/bin/clockdiff root:root 0755 +capabilities cap_net_raw=p -/usr/bin/ping root:root 0755 - +capabilities cap_net_raw=p # mtr /usr/sbin/mtr-packet root:root 0755 @@ -150,7 +147,6 @@ # # setuid needed on the text console to set the terminal content on ctrl-o # #66112 -/usr/lib/mc/cons.saver root:root 0755 /usr/libexec/mc/cons.saver root:root 0755 @@ -173,21 +169,13 @@ # # amanda # -/usr/lib/amanda/calcsize root:amanda 0750 /usr/libexec/amanda/calcsize root:amanda 0750 -/usr/lib/amanda/rundump root:amanda 0750 /usr/libexec/amanda/rundump root:amanda 0750 -/usr/lib/amanda/runtar root:amanda 0750 /usr/libexec/amanda/runtar root:amanda 0750 -/usr/lib/amanda/killpgrp root:amanda 0750 /usr/libexec/amanda/killpgrp root:amanda 0750 -/usr/lib/amanda/ambind root:amanda 0750 /usr/libexec/amanda/ambind root:amanda 0750 -/usr/lib/amanda/application/ambsdtar root:amanda 0750 /usr/libexec/amanda/application/ambsdtar root:amanda 0750 -/usr/lib/amanda/application/amgtar root:amanda 0750 /usr/libexec/amanda/application/amgtar root:amanda 0750 -/usr/lib/amanda/application/amstar root:amanda 0750 /usr/libexec/amanda/application/amstar root:amanda 0750 @@ -222,9 +210,7 @@ /usr/bin/uuname uucp:uucp 6555 /usr/bin/uustat uucp:uucp 6555 /usr/bin/uux uucp:uucp 6555 -/usr/lib/uucp/uucico uucp:uucp 6555 /usr/libexec/uucp/uucico uucp:uucp 6555 -/usr/lib/uucp/uuxqt uucp:uucp 6555 /usr/libexec/uucp/uuxqt uucp:uucp 6555 @@ -234,7 +220,6 @@ /usr/bin/pkexec root:root 4755 # dbus-1 (#333361 #1056764, bsc#1171164) -/usr/lib/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 /usr/libexec/dbus-1/dbus-daemon-launch-helper root:messagebus 4750 # policycoreutils (#440596) @@ -276,7 +261,6 @@ +capabilities cap_net_raw,cap_net_admin=ep # singularity version 3 (bsc#1128598) -/usr/lib/singularity/bin/starter-suid root:singularity 4750 /usr/libexec/singularity/bin/starter-suid root:singularity 4750 /usr/bin/su root:root 4755 @@ -291,16 +275,12 @@ /usr/bin/cdda2wav root:root 755 # qemu-bridge-helper (bnc#765948, bsc#988279) -/usr/lib/qemu-bridge-helper root:kvm 04750 /usr/libexec/qemu-bridge-helper root:kvm 04750 #iouyap (bnc#904060) -/usr/lib/iouyap root:iouyap 0750 /usr/libexec/iouyap root:iouyap 0750 # gstreamer ptp (bsc#960173) -/usr/lib/gstreamer-1.0/gst-ptp-helper root:root 0755 - +capabilities cap_net_bind_service=ep /usr/libexec/gstreamer-1.0/gst-ptp-helper root:root 0755 +capabilities cap_net_bind_service=ep @@ -325,16 +305,11 @@ +capabilities cap_sys_nice=ep # gvfs (bsc#1065864) -/usr/lib/gvfs/gvfsd-nfs root:root 0755 /usr/libexec/gvfs/gvfsd-nfs root:root 0755 # icinga2 (bsc#1069410) /run/icinga2/cmd/ icinga:icingacmd 2750 -# fping (bsc#1047921) -/usr/sbin/fping root:root 0755 - +capabilities cap_net_raw=ep - # usbauth (bsc#1066877) /usr/bin/usbauth-npriv root:usbauth 04750 /usr/lib/usbauth-notifier/ root:usbauth-notifier 0750 @@ -351,7 +326,6 @@ /usr/lib64/libsmc-preload.so root:root 04755 # lxc (bsc#988348) -/usr/lib/lxc/lxc-user-nic root:kvm 04750 /usr/libexec/lxc/lxc-user-nic root:kvm 04750 # firejail (bsc#1059013) @@ -392,7 +366,6 @@ /var/log/ts-shell/ root:ts-shell 2770 # setuid bit for cockpit (bsc#1169614) -/usr/lib/cockpit-session root:cockpit-wsinstance 4750 /usr/libexec/cockpit-session root:cockpit-wsinstance 4750 # binary that launches texlive tools with group "mktex" (bsc#1171686)
