Hello community, here is the log from the commit of package su-wrapper.1189 for openSUSE:12.2:Update checked in at 2013-01-02 09:38:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.2:Update/su-wrapper.1189 (Old) and /work/SRC/openSUSE:12.2:Update/.su-wrapper.1189.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "su-wrapper.1189", Maintainer is "" Changes: -------- New Changes file: --- /dev/null 2012-12-21 01:49:00.356010756 +0100 +++ /work/SRC/openSUSE:12.2:Update/.su-wrapper.1189.new/su-wrapper.changes 2013-01-02 09:38:40.000000000 +0100 @@ -0,0 +1,47 @@ +------------------------------------------------------------------- +Wed Dec 19 10:48:37 UTC 2012 - [email protected] + +- Add su-wrapper-1.2.0-term.dif (bnc#795063) + +------------------------------------------------------------------- +Fri May 25 15:00:21 UTC 2012 - [email protected] + +- Job creation scheme (bnc#764105) + +------------------------------------------------------------------- +Mon Jan 23 14:23:24 UTC 2012 - [email protected] + +- Build with -fpie and full RELRO + +------------------------------------------------------------------- +Wed Oct 8 12:26:24 CEST 2008 - [email protected] + +- Avoid ordered comparison of pointer with zero (bnc#433373) + +------------------------------------------------------------------- +Wed May 17 11:48:52 CEST 2006 - [email protected] + +- Don't strip binaries. +- Don't build as root. + +------------------------------------------------------------------- +Wed Jan 25 21:41:51 CET 2006 - [email protected] + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Fri Nov 12 14:39:28 CET 2004 - [email protected] + +- correct permissions handling for su-wrapper + +------------------------------------------------------------------- +Wed Sep 18 01:37:23 CEST 2002 - [email protected] + +- removed bogus self-provides + +----------------------------------------------------------------- +Wed Dec 19 17:18:24 CET 2001 - [email protected] + +- Initial new package: su-wrapper, Version 1.2.0, a simple + su wrapper + New: ---- su-wrapper-1.2.0-term.dif su-wrapper-1.2.0.dif su-wrapper-1.2.0.tar.bz2 su-wrapper.changes su-wrapper.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ su-wrapper.spec ++++++ # # spec file for package su-wrapper # # Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: su-wrapper Version: 1.2.0 Release: 0 Summary: The su-wrapper Runs Programs as Another User and Group License: GPL-2.0+ Group: System/Base PreReq: permissions Source0: su-wrapper-1.2.0.tar.bz2 Patch: su-wrapper-1.2.0.dif # PATCH-FIX-OPENSUSE su-wrapper-1.2.0-term.dif -- bnc#795063 - su-wrapper segfault if TERM variabile is not in environment Patch1: su-wrapper-1.2.0-term.dif BuildRoot: %{_tmppath}/%{name}-%{version}-build %description su-wrapper is a little utility that allows special users to execute processes under another uid and gid. It uses a table (/etc/su-wrapper.conf) to decide whatto do in certain situation. Therefore it walks through the table and tries to match the current situation (the later entries have precedence). For more information, read /usr/share/doc/packages/su-wrapper/README. Authors: -------- Enrico Weigelt <[email protected]> Werner Fink <[email protected]> %prep %setup %patch -p0 %patch1 -p0 %build pushd src make popd %install pushd src mkdir -p ${RPM_BUILD_ROOT}/usr/sbin make install DESTDIR=${RPM_BUILD_ROOT} popd mkdir -p ${RPM_BUILD_ROOT}/etc install -m 0640 su-wrapper.conf.dist ${RPM_BUILD_ROOT}/etc/su-wrapper.conf %if %{defined verify_permissions} %verifyscript %verify_permissions -e /usr/sbin/su-wrapper %endif %if %{defined set_permissions} %post %set_permissions /usr/sbin/su-wrapper %endif %files %defattr(-, root, root) %doc doc/COPYING doc/README doc/TODO doc/VERSION %config /etc/su-wrapper.conf %verify(not mode) /usr/sbin/su-wrapper %changelog ++++++ su-wrapper-1.2.0-term.dif ++++++ --- src/su-wrapper.c +++ src/su-wrapper.c 2012-12-19 10:44:55.961952136 +0000 @@ -483,7 +483,7 @@ int main (int argc, char * argv[]) xputenv("PATH", "/usr/local/bin:/bin:/usr/bin:/usr/bin/X11"); if (errno) error("putenv() failed: %s\n", strerror(errno)); - if (xputenv("TERM", term)) + if (xputenv("TERM", term ? term : "dumb")) error("putenv() failed: %s\n", strerror(errno)); do_su (entry); ++++++ su-wrapper-1.2.0.dif ++++++ --- su-wrapper.conf.dist.orig +++ su-wrapper.conf.dist @@ -30,13 +30,13 @@ # is significant. so if you wann deny some special things, # you have to put them under those lines which would allow them. -* * lpd * root root /usr/sbin/lpd.real -* * uucp-poll * root root /usr/bin/autopoll -* * inet-up * root root /usr/bin/autonet on -* * inet-down * root root /usr/bin/autonet off -* * inet-poll * root root /usr/bin/autonet poll -* * XServer * root root /usr/X11R6/bin/X -marduk * rootshell * root root /bin/sh +#* * lpd * root root /usr/sbin/lpd.real +#* * uucp-poll * root root /usr/bin/autopoll +#* * inet-up * root root /usr/bin/autonet on +#* * inet-down * root root /usr/bin/autonet off +#* * inet-poll * root root /usr/bin/autonet poll +#* * XServer * root root /usr/X11R6/bin/X +#marduk * rootshell * root root /bin/sh # deny nobody everything, each call from nobody ends up in an empty command nobody - * * - - - --- src/Makefile.orig +++ src/Makefile @@ -1,7 +1,7 @@ CC = gcc -CFLAGS = -D_GNU_SOURCE -O2 -pipe -Wall +CFLAGS = -fpie -fPIE -D_GNU_SOURCE $(RPM_OPT_FLAGS) -pipe -Wall #CFLAGS = -D_GNU_SOURCE -O -g -DDEBUG -Wall -LDFLAGS = -Wl,-warn-common +LDFLAGS = -pie -Wl,-warn-common -Wl,-z,relro,-z,now all: su-wrapper @@ -9,11 +9,11 @@ su-wrapper: su-wrapper.o $(CC) $(LDFLAGS) su-wrapper.o -o su-wrapper install: su-wrapper - install -s -o root -g root -m 4711 su-wrapper /usr/sbin/ + install su-wrapper $(DESTDIR)/usr/sbin/ clean: rm -f su-wrapper su-wrapper.o uninstall: - rm -f /usr/sbin/su-wrapper - mv /etc/su-wrapper.conf /etc/su-wrapper.conf.--- + rm -f $(DESTDIR)/usr/sbin/su-wrapper + mv $(DESTDIR)/etc/su-wrapper.conf $(DESTDIR)/etc/su-wrapper.conf.--- --- src/su-wrapper.c.orig +++ src/su-wrapper.c @@ -134,7 +134,7 @@ static int cmdline_match (char * const m while ((oslot = strsep(&l, ",:"))) { if (!*oslot) /* empty slot means no slot */ continue; - for (n = 0; n < max && argv[n]; n++) { + for (n = 0; n < (int)max && argv[n]; n++) { if (!strcmp(oslot, argv[n])) o[n]++; } @@ -142,7 +142,7 @@ static int cmdline_match (char * const m /* -lf is not -fl and not -l -f or -f -l */ ret = 1; - for (n = 0; n < max && argv[n]; n++) + for (n = 0; n < (int)max && argv[n]; n++) if (!o[n]) ret = 0; } @@ -255,10 +255,10 @@ static void do_su (entry_t * entry) if ((new_gid = lookup_gid(entry->run_group)) < 0) error("no such group \"%s\"\n", entry->run_group); - if ((new_pwd = lookup_pwd(entry->run_user)) < 0) + if ((new_pwd = lookup_pwd(entry->run_user)) == (char*)0) error("no such user \"%s\"\n", entry->run_user); - if ((new_shell = lookup_shell(entry->run_user)) < 0) + if ((new_shell = lookup_shell(entry->run_user)) == (char*)0) error("no such user \"%s\"\n", entry->run_user); if (verbose) @@ -402,7 +402,7 @@ err: size_t max = _POSIX_ARG_MAX - argc; int n; - for (n = 0; n < max && cmdline[n] ; n++) + for (n = 0; n < (int)max && cmdline[n] ; n++) e->params[argc++] = cmdline[n]; } e->params[argc] = NULL; /* last argument */ -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
