commit scap-workbench for openSUSE:Factory

2020-03-26 Thread root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2020-03-26 23:37:55

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new.3160 (New)


Package is "scap-workbench"

Thu Mar 26 23:37:55 2020 rev:13 rq:788638 version:1.2.1

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2019-10-11 15:21:55.211344370 +0200
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new.3160/scap-workbench.changes  
2020-03-26 23:37:59.438877223 +0100
@@ -1,0 +2,8 @@
+Wed Mar 25 14:07:11 UTC 2020 - Christophe Giboudeaux 
+
+- Update to 1.2.1. No changelog.
+- Rebase 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch
+- Drop 0002-Qt5-deprecations.patch. Merged upstream
+- Add 0001-Port-Qt5-deprecated-methods.patch
+
+---

Old:

  0002-Qt5-deprecations.patch
  scap-workbench-1.2.0.tar.bz2

New:

  0001-Port-Qt5-deprecated-methods.patch
  scap-workbench-1.2.1.tar.bz2



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.Jdv5LZ/_old  2020-03-26 23:38:00.446877587 +0100
+++ /var/tmp/diff_new_pack.Jdv5LZ/_new  2020-03-26 23:38:00.454877590 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package scap-workbench
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,15 +17,16 @@
 
 
 Name:   scap-workbench
-Version:1.2.0
+Version:1.2.1
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0-only
 Group:  Productivity/Security
-Url:https://github.com/OpenSCAP/scap-workbench
-Source: 
https://github.com/OpenSCAP/scap-workbench/releases/download/%version/scap-workbench-%version.tar.bz2
-Patch1: 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch
-Patch2: 0002-Qt5-deprecations.patch
+URL:https://github.com/OpenSCAP/scap-workbench
+Source: 
https://github.com/OpenSCAP/scap-workbench/releases/download/%{version}/scap-workbench-%{version}.tar.bz2
+Patch0: 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch
+# PATCH-FIX-UPSTREAM
+Patch1: 0001-Port-Qt5-deprecated-methods.patch
 BuildRequires:  cmake >= 2.6
 BuildRequires:  openscap-devel
 # SLE 11 SP3: libopenscap needs libxslt without requiring it
@@ -59,10 +60,8 @@
 
 %prep
 %setup -q
+%patch0 -p1
 %patch1 -p1
-%if 0%{?suse_version} > 1510
-%patch2 -p1
-%endif
 
 %build
 %if 0%{?cmake}
@@ -90,7 +89,7 @@
 popd
 
 %if 0%{?suse_version}
-%suse_update_desktop_file -i -u %name Utility DesktopUtility
+%suse_update_desktop_file -i -u %{name} Utility DesktopUtility
 %endif
 
 %files
@@ -98,12 +97,12 @@
 %doc README.md COPYING
 %{_bindir}/%{name}
 %dir %{_datadir}/appdata/
-%{_datadir}/appdata/%name.appdata.xml
-%dir %{_datadir}/%name
-%{_datadir}/%name/*.png
-%dir %{_datadir}/%name/translations
-%{_datadir}/%name/translations/README
-%{_datadir}/applications/%name.desktop
+%{_datadir}/appdata/%{name}.appdata.xml
+%dir %{_datadir}/%{name}
+%{_datadir}/%{name}/*.png
+%dir %{_datadir}/%{name}/translations
+%{_datadir}/%{name}/translations/README
+%{_datadir}/applications/%{name}.desktop
 %{_datadir}/pixmaps/%{name}*
 %dir %{_datadir}/polkit-1
 %dir %{_datadir}/polkit-1/actions

++ 0001-Port-Qt5-deprecated-methods.patch ++
>From 93441ecc2f2bd3647e005ff8293909a0540b40fd Mon Sep 17 00:00:00 2001
From: Christophe Giboudeaux 
Date: Wed, 25 Mar 2020 15:41:22 +0100
Subject: [PATCH] Port Qt5 deprecated methods

QSet::toList() is deprecated
QSet::fromList() is deprecated
---
 src/SaveAsRPMDialog.cpp | 2 +-
 src/TailoringWindow.cpp | 6 +-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/SaveAsRPMDialog.cpp b/src/SaveAsRPMDialog.cpp
index 611d15f..e8d0564 100644
--- a/src/SaveAsRPMDialog.cpp
+++ b/src/SaveAsRPMDialog.cpp
@@ -86,7 +86,7 @@ void SaveAsRPMDialog::slotFinished(int result)
 closure.remove(mScanningSession->getOpenedFilePath());
 QList closureOrdered;
 closureOrdered.append(mScanningSession->getOpenedFilePath());
-closureOrdered.append(closure.toList());
+closureOrdered.append(closure.values());
 
 const QDir cwd = ScanningSession::getCommonAncestorDirectory(closure);
 
diff --git a/src/TailoringWindow.cpp b/src/TailoringWindow.cpp
index 212416c..5a3677a 100644
--- a/src/TailoringWindow.cpp
+++ b/src/TailoringWindow.cpp
@@ -645,7 +645,11 @@ QString TailoringWindow::getQSettingsKey() const
 void

commit scap-workbench for openSUSE:Factory

2019-10-11 Thread root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2019-10-11 15:21:42

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new.2352 (New)


Package is "scap-workbench"

Fri Oct 11 15:21:42 2019 rev:12 rq:737391 version:1.2.0

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2019-05-02 19:19:36.333663932 +0200
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new.2352/scap-workbench.changes  
2019-10-11 15:21:55.211344370 +0200
@@ -1,0 +2,6 @@
+Fri Oct 11 07:42:16 UTC 2019 - Klaus Kämpf 
+
+- fix Qt5 deprecation warnings
+  0002-Qt5-deprecations.patch
+
+---

New:

  0002-Qt5-deprecations.patch



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.epL9HP/_old  2019-10-11 15:21:56.855339851 +0200
+++ /var/tmp/diff_new_pack.epL9HP/_new  2019-10-11 15:21:56.859339840 +0200
@@ -24,7 +24,8 @@
 Group:  Productivity/Security
 Url:https://github.com/OpenSCAP/scap-workbench
 Source: 
https://github.com/OpenSCAP/scap-workbench/releases/download/%version/scap-workbench-%version.tar.bz2
-Patch0: 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch
+Patch1: 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch
+Patch2: 0002-Qt5-deprecations.patch
 BuildRequires:  cmake >= 2.6
 BuildRequires:  openscap-devel
 # SLE 11 SP3: libopenscap needs libxslt without requiring it
@@ -58,7 +59,10 @@
 
 %prep
 %setup -q
-%patch0 -p1
+%patch1 -p1
+%if 0%{?suse_version} > 1510
+%patch2 -p1
+%endif
 
 %build
 %if 0%{?cmake}

++ 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch ++
--- /var/tmp/diff_new_pack.epL9HP/_old  2019-10-11 15:21:56.871339807 +0200
+++ /var/tmp/diff_new_pack.epL9HP/_new  2019-10-11 15:21:56.871339807 +0200
@@ -1,7 +1,7 @@
-From 2dff0925c5435d3bdb35186c015a89613ce4e3ad Mon Sep 17 00:00:00 2001
+From d0afef48545bd88687023e25c62d948354406597 Mon Sep 17 00:00:00 2001
 From: Matthias Gerstner 
 Date: Thu, 19 Jul 2018 12:27:46 +0200
-Subject: [PATCH] pkexec: avoid potential local root exploit by using
+Subject: [PATCH 1/2] pkexec: avoid potential local root exploit by using
  PKEXEC_UID and sudo
 
 If an admin relaxes the required polkit authentication for running
@@ -31,7 +31,7 @@
  2 files changed, 26 insertions(+), 13 deletions(-)
 
 diff --git a/scap-workbench-oscap.sh b/scap-workbench-oscap.sh
-index 216376f..6f720de 100755
+index 216376f2b987..6f720ded54a8 100755
 --- a/scap-workbench-oscap.sh
 +++ b/scap-workbench-oscap.sh
 @@ -25,14 +25,15 @@ trap "" SIGHUP SIGINT
@@ -94,7 +94,7 @@
  chown_copy "$TEMP_DIR/results-arf.xml" "$TARGET_RESULTS_ARF"
  chown_copy "$TEMP_DIR/report.html" "$TARGET_REPORT"
 diff --git a/scap-workbench-pkexec-oscap.sh b/scap-workbench-pkexec-oscap.sh
-index 1ae8329..a8d9b2b 100755
+index 1ae83296b83b..a8d9b2bd84cb 100755
 --- a/scap-workbench-pkexec-oscap.sh
 +++ b/scap-workbench-pkexec-oscap.sh
 @@ -18,9 +18,6 @@
@@ -126,5 +126,5 @@
  fi
  
 -- 
-2.16.4
+2.23.0
 

++ 0002-Qt5-deprecations.patch ++
>From e276a8e5c277a106b0923ace4743962e4393a040 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Klaus=20K=C3=A4mpf?= 
Date: Fri, 11 Oct 2019 08:38:16 +0200
Subject: [PATCH 2/2] Qt5 deprecations

Qt::escape is deprecated
QChar::fromAscii is deprecated
QString::Null != is deprecated
...
---
 src/APIHelpers.cpp| 2 +-
 src/DiagnosticsDialog.cpp | 2 +-
 src/MainWindow.cpp| 5 +++--
 src/OscapScannerBase.cpp  | 4 ++--
 src/TailoringWindow.cpp   | 5 +++--
 5 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/src/APIHelpers.cpp b/src/APIHelpers.cpp
index 71548c939144..b901fad4b058 100644
--- a/src/APIHelpers.cpp
+++ b/src/APIHelpers.cpp
@@ -44,7 +44,7 @@ QString oscapItemGetReadableTitle(struct xccdf_item* item, 
struct xccdf_policy*
 oscap_text_iterator_free(title_it);
 if (!unresolved)
 return "";
-char* resolved = 
xccdf_policy_substitute(Qt::escape(QString::fromUtf8(unresolved)).toUtf8().constData(),
 policy);
+char* resolved = 
xccdf_policy_substitute(QString::fromUtf8(unresolved).toHtmlEscaped().toUtf8().constData(),
 policy);
 free(unresolved);
 const QString ret = QString::fromUtf8(resolved);
 free(resolved);
diff --git a/src/DiagnosticsDialog.cpp b/src/DiagnosticsDialog.cpp
index 39d3a255e07b..7b1aa7ee2a78 100644
--- a/src/DiagnosticsDialog.cpp
+++ b/src/DiagnosticsDialog.cpp
@@ -142,7 +142,7 @@ void DiagnosticsDialog::pushMessage(MessageSeverity 
severity, const QString& ful
 QString outputMessage = fullMessage;
 if (format & MF_XML)
 {
-

commit scap-workbench for openSUSE:Factory

2019-05-02 Thread root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2019-05-02 19:19:34

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new.5148 (New)


Package is "scap-workbench"

Thu May  2 19:19:34 2019 rev:11 rq:699826 version:1.2.0

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2018-07-31 16:04:29.540066170 +0200
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new.5148/scap-workbench.changes  
2019-05-02 19:19:36.333663932 +0200
@@ -1,0 +2,12 @@
+Sat Apr 13 21:12:02 UTC 2019 - Christophe Giboudeaux 
+
+- Update to 1.2.0. Changes since 1.1.5:
+  * ported from Qt4 to Qt5
+  * UX improvements
+  * Generate bash and Ansible remediation roles from profiles
+  * Generate bash and Ansible remediation roles from results after
+scanning
+  * Fixed a short integer overflow when using ssh port numbers
+higher than 32k
+
+---

Old:

  scap-workbench-1.1.5.tar.bz2

New:

  scap-workbench-1.2.0.tar.bz2



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.ga1H8E/_old  2019-05-02 19:19:36.965665089 +0200
+++ /var/tmp/diff_new_pack.ga1H8E/_new  2019-05-02 19:19:36.969665096 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package scap-workbench
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -12,12 +12,12 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
 Name:   scap-workbench
-Version:1.1.5
+Version:1.2.0
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0-only
@@ -28,15 +28,15 @@
 BuildRequires:  cmake >= 2.6
 BuildRequires:  openscap-devel
 # SLE 11 SP3: libopenscap needs libxslt without requiring it
-# libxslt nees pcre
+# libxslt needs pcre
 %if 0%{?suse_version} < 1140
 BuildRequires:  libxslt-devel
 BuildRequires:  pcre-devel
 %endif
 BuildRequires:  pkg-config
-# QXmlQuery is in 4.8 and later
-BuildRequires:  libqt4-devel >= 4.8
 BuildRequires:  update-desktop-files
+BuildRequires:  cmake(Qt5Widgets)
+BuildRequires:  cmake(Qt5XmlPatterns)
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 
 %description

++ scap-workbench-1.1.5.tar.bz2 -> scap-workbench-1.2.0.tar.bz2 ++
 3250 lines of diff (skipped)

commit scap-workbench for openSUSE:Factory

2018-07-31 Thread root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2018-07-31 16:04:19

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is "scap-workbench"

Tue Jul 31 16:04:19 2018 rev:10 rq:626684 version:1.1.5

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2018-01-03 13:39:32.371231584 +0100
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2018-07-31 16:04:29.540066170 +0200
@@ -1,0 +2,6 @@
+Thu Jul 26 09:11:29 UTC 2018 - matthias.gerst...@suse.com
+
+- 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch:
+  harden and sanitize the pkexec wrapper (bsc#1084706).
+
+---

New:

  0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.1hVxZt/_old  2018-07-31 16:04:30.276067425 +0200
+++ /var/tmp/diff_new_pack.1hVxZt/_new  2018-07-31 16:04:30.276067425 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package scap-workbench
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,10 +20,11 @@
 Version:1.1.5
 Release:0
 Summary:A SCAP scanner and SCAP content editor
-License:GPL-3.0
+License:GPL-3.0-only
 Group:  Productivity/Security
 Url:https://github.com/OpenSCAP/scap-workbench
 Source: 
https://github.com/OpenSCAP/scap-workbench/releases/download/%version/scap-workbench-%version.tar.bz2
+Patch0: 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch
 BuildRequires:  cmake >= 2.6
 BuildRequires:  openscap-devel
 # SLE 11 SP3: libopenscap needs libxslt without requiring it
@@ -57,6 +58,7 @@
 
 %prep
 %setup -q
+%patch0 -p1
 
 %build
 %if 0%{?cmake}

++ 0001-pkexec-avoid-potential-local-root-exploit-by-using-P.patch ++
>From 2dff0925c5435d3bdb35186c015a89613ce4e3ad Mon Sep 17 00:00:00 2001
From: Matthias Gerstner 
Date: Thu, 19 Jul 2018 12:27:46 +0200
Subject: [PATCH] pkexec: avoid potential local root exploit by using
 PKEXEC_UID and sudo

If an admin relaxes the required polkit authentication for running
scap-workbench-oscap.sh from auth_admin to auth_self or yes, then the
current implementation of the wrapper script allows for a local root
exploit.

A command line like this would overwrite /etc/shadow with a file owned
by the non-privileged user:

pkexec --disable-internal-agent 
/usr/lib64/scap-workbench/scap-workbench-oscap.sh 1000 100 \
xccdf eval --profile Default --oval-results --results /etc/shadow \
--results-arf /tmp/scap.results.arf --report /tmp/scap.report \
--progress /usr/share/openscap/scap-yast2sec-xccdf.xml

The copying of the target files needs to be done in the context of the
unprivileged user to prevent any symlink attacks or maliciously
specified paths. This is done by using sudo as a frontend to cp.

Also the user should not pass his own uid and gid. This would allow to
change ownership of files to arbitrary other users. Instead pkexec
offers the PKEXEC_UID environment variable which contains the uid of the
authenticated user. The gid can be derived from the uid.
---
 scap-workbench-oscap.sh| 32 
 scap-workbench-pkexec-oscap.sh |  7 ++-
 2 files changed, 26 insertions(+), 13 deletions(-)

diff --git a/scap-workbench-oscap.sh b/scap-workbench-oscap.sh
index 216376f..6f720de 100755
--- a/scap-workbench-oscap.sh
+++ b/scap-workbench-oscap.sh
@@ -25,14 +25,15 @@ trap "" SIGHUP SIGINT
 # valuable gets skipped
 echo "Dummy text" 1>&2
 
-wrapper_uid=$1
-shift
-wrapper_gid=$1
-shift
+# prevent world-readable files being created
+umask 0007
 
 real_uid=`id -u`
 real_gid=`id -g`
 
+wrapper_uid=${PKEXEC_UID:-${real_uid}}
+wrapper_gid=$(id -g ${wrapper_uid})
+
 TEMP_DIR=`mktemp -d`
 
 args=("$@")
@@ -84,19 +85,34 @@ RET=$?
 
 popd > /dev/null
 
+# only copy files with the target user's permissions via sudo if we're running
+# privileged, otherwise he can trick us into overwriting arbitrary files
+do_chown=false
+if [ $wrapper_uid -ne $real_uid ] || [ $wrapper_gid -ne $real_gid ]; then
+do_chown=true
+fi
+
 function chown_copy
 {
 local what="$1"
 local where="$2"
 
-[ ! -f "$what" ] || cp "$what" "$where"
+[ -f "$what" ] || return
 
-# chown only required if wrapper_{uid,gid} differs from

commit scap-workbench for openSUSE:Factory

2018-01-03 Thread root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2018-01-03 13:39:31

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is "scap-workbench"

Wed Jan  3 13:39:31 2018 rev:9 rq:561063 version:1.1.5

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2017-09-20 17:13:58.326734420 +0200
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2018-01-03 13:39:32.371231584 +0100
@@ -1,0 +2,5 @@
+Sat Dec 30 09:02:23 UTC 2017 - jeng...@inai.de
+
+- Fix RPM groups. Optimize unnecessary subshell calls.
+
+---



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.M3jqlp/_old  2018-01-03 13:39:32.915050504 +0100
+++ /var/tmp/diff_new_pack.M3jqlp/_new  2018-01-03 13:39:32.915050504 +0100
@@ -21,7 +21,7 @@
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0
-Group:  System/Security
+Group:  Productivity/Security
 Url:https://github.com/OpenSCAP/scap-workbench
 Source: 
https://github.com/OpenSCAP/scap-workbench/releases/download/%version/scap-workbench-%version.tar.bz2
 BuildRequires:  cmake >= 2.6
@@ -50,7 +50,7 @@
 
 %package doc
 Summary:Documentation for scap-workbench
-Group:  Documentation
+Group:  Documentation/HTML
 
 %description doc
 This package provides HTML documentation for scap-workbench.
@@ -64,19 +64,24 @@
 %else
 rm -rf build
 mkdir build
-(cd build;
+pushd build
  cmake -DCMAKE_INSTALL_PREFIX=/usr\
-DCMAKE_VERBOSE_MAKEFILE=TRUE\
-DCMAKE_SKIP_RPATH=1\
-DPACKAGE_ARCHITECTURE=`uname -m`\
-DCMAKE_INSTALL_DOCDIR=%{_docdir}/%{name}\
-DCMAKE_INSTALL_LIBEXECDIR=%{_libdir}/%{name}\
-   ..)
+   ..
+popd
 %endif
-(cd build; make %{?jobs:-j%jobs})
+pushd build
+make %{?_smp_mflags}
+popd
 
 %install
-(cd build; %make_install)
+pushd build
+%make_install
+popd
 
 %if 0%{?suse_version}
 %suse_update_desktop_file -i -u %name Utility DesktopUtility

commit scap-workbench for openSUSE:Factory

2017-09-20 Thread root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2017-09-20 17:13:55

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is "scap-workbench"

Wed Sep 20 17:13:55 2017 rev:8 rq:527481 version:1.1.5

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2017-01-23 11:36:45.363271183 +0100
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2017-09-20 17:13:58.326734420 +0200
@@ -1,0 +2,18 @@
+Wed Sep 20 06:24:10 UTC 2017 - zai...@opensuse.org
+
+- Update to version 1.1.5:
+  + Highlights: Tri-state checkboxes in Tailoring Window.
+  + Bugfixes:
+- Fixed remote host and port being cleared when scan starts
+- Fixed formating of Profile html description in Tailoring Window
+- Fixed oscap message "Downloading ... ok" appearing as an error
+  + Other improvements:
+- Fixed tab order of widgets in main window.
+- Load Content as the default button of the SSG integration
+  dialog.
+- New validation of the customization file name.
+- Drop obsolete and unused conditional libwebkitgtk-devel and
+  libwebkit-devel BuildRequires, this dependency was dropped in
+  version 0.0.8 upstream.
+
+---

Old:

  scap-workbench-1.1.4.tar.bz2

New:

  scap-workbench-1.1.5.tar.bz2



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.lVZaOC/_old  2017-09-20 17:13:58.994640400 +0200
+++ /var/tmp/diff_new_pack.lVZaOC/_new  2017-09-20 17:13:58.994640400 +0200
@@ -17,14 +17,14 @@
 
 
 Name:   scap-workbench
-Version:1.1.4
+Version:1.1.5
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0
 Group:  System/Security
 Url:https://github.com/OpenSCAP/scap-workbench
 Source: 
https://github.com/OpenSCAP/scap-workbench/releases/download/%version/scap-workbench-%version.tar.bz2
-BuildRequires:  cmake
+BuildRequires:  cmake >= 2.6
 BuildRequires:  openscap-devel
 # SLE 11 SP3: libopenscap needs libxslt without requiring it
 # libxslt nees pcre
@@ -36,11 +36,6 @@
 # QXmlQuery is in 4.8 and later
 BuildRequires:  libqt4-devel >= 4.8
 BuildRequires:  update-desktop-files
-%if 0%{?suse_version} >= 1140
-BuildRequires:  libwebkitgtk-devel
-%else
-BuildRequires:  libwebkit-devel
-%endif
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 
 %description

++ scap-workbench-1.1.4.tar.bz2 -> scap-workbench-1.1.5.tar.bz2 ++
 6497 lines of diff (skipped)

commit scap-workbench for openSUSE:Factory

2017-01-23 Thread root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2017-01-23 11:36:43

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is "scap-workbench"

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2015-10-28 17:30:21.0 +0100
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2017-01-23 11:36:45.363271183 +0100
@@ -1,0 +2,37 @@
+Mon Jan 16 13:19:42 UTC 2017 - meiss...@suse.com
+
+- Update to 1.1.4
+  - Highlights
+Fix --fetch-remote-resources warning with older openscap
+  - Bugfixes
+Check capabilities of oscap with propper arguments
+  - Other improvements
+Show number of selected rules in profile listing
+Enable High DPI mode in MacOSX builds
+Remove fixed sizes of checkboxes and Port label
+Improve UX of recent remote machine history list
+  - See https://github.com/OpenSCAP/scap-workbench/issues?q=milestone%3A1.1.4 
for more details
+- Update to 1.1.3
+  - Highlights
+UX improvements
+Improved error message when scanning a remote machine in which 
openscap-scanner is not installed
+  - Bugfixes
+Fixed search on disabled item
+Fixed multi benchmark tailoring use case
+Fixed a bug that caused tailored profiles to have titles duplicated
+Fixed path of tailoring file in dry run output
+Fixed fetch remote resources warning
+  - Other improvements
+Added a helper script that builds SCAP Workbench for OSX
+Now Workbench doesn't allow edit of values with prohibitedChanges attribute
+Added --version and --help command line options
+Improved workflow of dry run execution
+  - See https://github.com/OpenSCAP/scap-workbench/issues?q=milestone%3A1.1.3 
for more details
+- Update to 1.1.2:
+  - New feature: "dry-run" - see which oscap arguments you have to use to do 
the same evaluation as SCAP Workbench as it is currently set.
+  - Minor bugfixes:
+fixed checklist combobox when a datastream with multiple benchmarks is 
opened
+fixed minor licensing issues
+  - See https://github.com/OpenSCAP/scap-workbench/issues?q=milestone%3A1.1.2 
for more
+
+---

Old:

  scap-workbench-1.1.1.tar.bz2

New:

  scap-workbench-1.1.4.tar.bz2



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.JVB6wr/_old  2017-01-23 11:36:45.895195746 +0100
+++ /var/tmp/diff_new_pack.JVB6wr/_new  2017-01-23 11:36:45.895195746 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package scap-workbench
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,13 +17,13 @@
 
 
 Name:   scap-workbench
-Version:1.1.1
+Version:1.1.4
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0
 Group:  System/Security
-Url:https://fedorahosted.org/scap-workbench/
-Source: 
https://fedorahosted.org/released/scap-workbench/%{name}-%{version}.tar.bz2
+Url:https://github.com/OpenSCAP/scap-workbench
+Source: 
https://github.com/OpenSCAP/scap-workbench/releases/download/%version/scap-workbench-%version.tar.bz2
 BuildRequires:  cmake
 BuildRequires:  openscap-devel
 # SLE 11 SP3: libopenscap needs libxslt without requiring it

++ scap-workbench-1.1.1.tar.bz2 -> scap-workbench-1.1.4.tar.bz2 ++
 9537 lines of diff (skipped)

commit scap-workbench for openSUSE:Factory

2015-10-28 Thread h_root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2015-10-28 17:30:16

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is "scap-workbench"

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2015-04-03 14:34:51.0 +0200
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2015-10-28 17:30:21.0 +0100
@@ -1,0 +2,11 @@
+Mon Oct 12 10:38:16 UTC 2015 - kkae...@suse.com
+
+- Update to 1.1.1
+  Bugfix release
+
+---
+Mon Oct 12 10:35:43 UTC 2015 - kkae...@suse.com
+
+- take ownership of /usr/share/polkit-1*
+
+---

Old:

  scap-workbench-1.1.0.tar.bz2

New:

  scap-workbench-1.1.1.tar.bz2



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.HFeywh/_old  2015-10-28 17:30:22.0 +0100
+++ /var/tmp/diff_new_pack.HFeywh/_new  2015-10-28 17:30:22.0 +0100
@@ -17,7 +17,7 @@
 
 
 Name:   scap-workbench
-Version:1.1.0
+Version:1.1.1
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0
@@ -99,6 +99,8 @@
 %{_datadir}/%name/translations/README
 %{_datadir}/applications/%name.desktop
 %{_datadir}/pixmaps/%{name}*
+%dir %{_datadir}/polkit-1
+%dir %{_datadir}/polkit-1/actions
 %{_datadir}/polkit-1/actions/%{name}*
 %{_mandir}/man8/%{name}*
 %dir %{_libdir}/%{name}

++ scap-workbench-1.1.0.tar.bz2 -> scap-workbench-1.1.1.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/scap-workbench-1.1.0/CMakeLists.txt 
new/scap-workbench-1.1.1/CMakeLists.txt
--- old/scap-workbench-1.1.0/CMakeLists.txt 2015-03-23 21:08:32.0 
+0100
+++ new/scap-workbench-1.1.1/CMakeLists.txt 2015-09-22 16:41:44.0 
+0200
@@ -3,7 +3,7 @@
 project("scap-workbench")
 set(SCAP_WORKBENCH_VERSION_MAJOR "1")
 set(SCAP_WORKBENCH_VERSION_MINOR "1")
-set(SCAP_WORKBENCH_VERSION_PATCH "0")
+set(SCAP_WORKBENCH_VERSION_PATCH "1")
 set(SCAP_WORKBENCH_VERSION 
"${SCAP_WORKBENCH_VERSION_MAJOR}.${SCAP_WORKBENCH_VERSION_MINOR}.${SCAP_WORKBENCH_VERSION_PATCH}")
 set(CMAKE_MODULE_PATH ${CMAKE_MODULE_PATH} "${CMAKE_SOURCE_DIR}/cmake/")
 
@@ -35,6 +35,16 @@
 find_program(SETSID_EXECUTABLE NAMES setsid) # optional for remote scan, makes 
sure ssh always spawns GUI dialog
 if (SETSID_EXECUTABLE)
 set(SCAP_WORKBENCH_LOCAL_SETSID_FOUND 1)
+execute_process(
+COMMAND ${SETSID_EXECUTABLE} --wait ${CMAKE_COMMAND} -E sleep 0
+ERROR_QUIET # suppress help message of setsid in case it doesn't 
support --wait
+RESULT_VARIABLE SETSID_EXECUTABLE_WAIT_EC
+)
+if (${SETSID_EXECUTABLE_WAIT_EC} EQUAL 0)
+set(SCAP_WORKBENCH_LOCAL_SETSID_SUPPORTS_WAIT 1)
+else()
+set(SCAP_WORKBENCH_LOCAL_SETSID_SUPPORTS_WAIT 0)
+endif()
 endif()
 
 # Save as RPM tools, optional but required for saving content as RPM
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/scap-workbench-1.1.0/README.md 
new/scap-workbench-1.1.1/README.md
--- old/scap-workbench-1.1.0/README.md  2015-03-17 17:14:00.0 +0100
+++ new/scap-workbench-1.1.1/README.md  2015-09-22 16:41:27.0 +0200
@@ -18,56 +18,56 @@
 1) Make sure you have installed all prerequisites
 
 required dependencies:
-```bash
-yum install cmake gcc-c++ openssh-clients util-linux openscap-devel qt-devel
+```console
+# yum install cmake gcc-c++ openssh-clients util-linux openscap-devel qt-devel
 ```
 
 required dependencies (only for the git repo, not required for released 
tarballs):
-```bash
-yum install rubygem-asciidoctor
+```console
+# yum install rubygem-asciidoctor
 ```
 
 optional dependencies:
-```bash
-yum install polkit
+```console
+# yum install polkit
 ```
 
 2) Build SCAP Workbench:
-```bash
-mkdir build; cd build
-cmake ../
-make
+```console
+$ mkdir build; cd build
+$ cmake ../
+$ make
 ```
 
 3) Install SCAP Workbench: (optional)
 
 (inside the build folder):
-```bash
-make install
+```console
+# make install
 ```
 
 4a) Run SCAP Workbench: (if it was installed)
 
 spawning open file dialog:
-```bash
-scap-workbench
+```console
+$ scap-workbench
 ```
 
 with an XCCDF file to load:
-```bash
-scap-workbench /path/to/xccdf-file.xml
+```console
+$ scap-workbench /path/to/xccdf-file.xml
 ```
 
 with a source datastream (SDS) to load:
-```bash
-scap-workbench /path/to/sds-file
+```console
+$ scap-workbench /path/to/sds-file
 ```
 
 4b) Run SCAP Workbench:

commit scap-workbench for openSUSE:Factory

2015-04-03 Thread h_root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2015-04-03 14:34:50

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is scap-workbench

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2015-02-14 13:56:00.0 +0100
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2015-04-03 14:34:51.0 +0200
@@ -1,0 +2,9 @@
+Thu Mar 26 06:31:08 UTC 2015 - meiss...@suse.com
+
+- updated to 1.1.0
+  Shiny new major release of SCAP Workbench. A lot of UX improvements
+  and many new exciting features including a much better SCAP Security
+  Guide integration. Downstreams are now encouraged to depend on
+  scap-security-guide.
+
+---

Old:

  scap-workbench-1.0.3.tar.bz2

New:

  scap-workbench-1.1.0.tar.bz2



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.uxClrK/_old  2015-04-03 14:34:51.0 +0200
+++ /var/tmp/diff_new_pack.uxClrK/_new  2015-04-03 14:34:51.0 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package scap-workbench
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:   scap-workbench
-Version:1.0.3
+Version:1.1.0
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0
@@ -89,7 +89,7 @@
 
 %files
 %defattr(-,root,root,0755)
-%doc README COPYING
+%doc README.md COPYING
 %{_bindir}/%{name}
 %dir %{_datadir}/appdata/
 %{_datadir}/appdata/%name.appdata.xml

++ scap-workbench-1.0.3.tar.bz2 - scap-workbench-1.1.0.tar.bz2 ++
 8153 lines of diff (skipped)

commit scap-workbench for openSUSE:Factory

2015-02-14 Thread h_root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2015-02-14 13:55:59

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is scap-workbench

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2015-01-14 11:45:06.0 +0100
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2015-02-14 13:56:00.0 +0100
@@ -1,0 +2,5 @@
+Thu Feb  5 08:52:56 UTC 2015 - kkae...@suse.com
+
+- Require libqt4-devel = 4.8
+
+---



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.bkERoY/_old  2015-02-14 13:56:01.0 +0100
+++ /var/tmp/diff_new_pack.bkERoY/_new  2015-02-14 13:56:01.0 +0100
@@ -26,8 +26,15 @@
 Source: 
https://fedorahosted.org/released/scap-workbench/%{name}-%{version}.tar.bz2
 BuildRequires:  cmake
 BuildRequires:  openscap-devel
+# SLE 11 SP3: libopenscap needs libxslt without requiring it
+# libxslt nees pcre
+%if 0%{?suse_version}  1140
+BuildRequires:  libxslt-devel
+BuildRequires:  pcre-devel
+%endif
 BuildRequires:  pkg-config
-BuildRequires:  qt-devel
+# QXmlQuery is in 4.8 and later
+BuildRequires:  libqt4-devel = 4.8
 BuildRequires:  update-desktop-files
 %if 0%{?suse_version} = 1140
 BuildRequires:  libwebkitgtk-devel
@@ -57,9 +64,21 @@
 %setup -q
 
 %build
+%if 0%{?cmake}
 %cmake -DCMAKE_INSTALL_DOCDIR=%{_docdir}/%{name} 
-DCMAKE_INSTALL_LIBEXECDIR=%{_libdir}/%{name}
-
-make %{?jobs:-j%jobs}
+%else
+rm -rf build
+mkdir build
+(cd build;
+ cmake -DCMAKE_INSTALL_PREFIX=/usr\
+   -DCMAKE_VERBOSE_MAKEFILE=TRUE\
+   -DCMAKE_SKIP_RPATH=1\
+   -DPACKAGE_ARCHITECTURE=`uname -m`\
+   -DCMAKE_INSTALL_DOCDIR=%{_docdir}/%{name}\
+   -DCMAKE_INSTALL_LIBEXECDIR=%{_libdir}/%{name}\
+   ..)
+%endif
+(cd build; make %{?jobs:-j%jobs})
 
 %install
 (cd build; %make_install)

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit scap-workbench for openSUSE:Factory

2015-01-14 Thread h_root 
Hello community,

here is the log from the commit of package scap-workbench for openSUSE:Factory 
checked in at 2015-01-14 11:44:49

Comparing /work/SRC/openSUSE:Factory/scap-workbench (Old)
 and  /work/SRC/openSUSE:Factory/.scap-workbench.new (New)


Package is scap-workbench

Changes:

--- /work/SRC/openSUSE:Factory/scap-workbench/scap-workbench.changes
2014-02-12 07:10:50.0 +0100
+++ /work/SRC/openSUSE:Factory/.scap-workbench.new/scap-workbench.changes   
2015-01-14 11:45:06.0 +0100
@@ -1,0 +2,11 @@
+Fri Jan  9 14:51:06 UTC 2015 - meiss...@suse.com
+
+- version 1.0.3
+  This is a maintenance release with many bugfixes, usability improvements
+  and documentation fixes. All users are recommended to update.
+  See 
https://fedorahosted.org/scap-workbench/query?group=statusmilestone=1.0.3
+  for full list of changes.
+
+- scap-workbench-0.8.6.patch: upstream
+
+---

Old:

  scap-workbench-0.8.6.patch
  scap-workbench-0.8.6.tar.bz2

New:

  scap-workbench-1.0.3.tar.bz2



Other differences:
--
++ scap-workbench.spec ++
--- /var/tmp/diff_new_pack.ISwPcU/_old  2015-01-14 11:45:06.0 +0100
+++ /var/tmp/diff_new_pack.ISwPcU/_new  2015-01-14 11:45:06.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package scap-workbench
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,15 +17,13 @@
 
 
 Name:   scap-workbench
-Version:0.8.6
+Version:1.0.3
 Release:0
 Summary:A SCAP scanner and SCAP content editor
 License:GPL-3.0
 Group:  System/Security
 Url:https://fedorahosted.org/scap-workbench/
 Source: 
https://fedorahosted.org/released/scap-workbench/%{name}-%{version}.tar.bz2
-# bash is not in /usr/bin, kkae...@suse.de
-Patch:  scap-workbench-0.8.6.patch
 BuildRequires:  cmake
 BuildRequires:  openscap-devel
 BuildRequires:  pkg-config
@@ -46,7 +44,7 @@
 to scan a few machines and users with huge amount of machines to scan
 will just use scap-workbench to test or hand-tune their content before
 deploying it with more advanced (and harder to use) tools like
-​spacewalk.
+spacewalk.
 
 %package doc
 Summary:Documentation for scap-workbench
@@ -56,8 +54,7 @@
 This package provides HTML documentation for scap-workbench.
 
 %prep
-%setup
-%patch -p1
+%setup -q
 
 %build
 %cmake -DCMAKE_INSTALL_DOCDIR=%{_docdir}/%{name} 
-DCMAKE_INSTALL_LIBEXECDIR=%{_libdir}/%{name}
@@ -71,13 +68,16 @@
 %suse_update_desktop_file -i -u %name Utility DesktopUtility
 %endif
 
-%clean
-rm -rf $RPM_BUILD_ROOT
-
 %files
 %defattr(-,root,root,0755)
 %doc README COPYING
 %{_bindir}/%{name}
+%dir %{_datadir}/appdata/
+%{_datadir}/appdata/%name.appdata.xml
+%dir %{_datadir}/%name
+%{_datadir}/%name/*.png
+%dir %{_datadir}/%name/translations
+%{_datadir}/%name/translations/README
 %{_datadir}/applications/%name.desktop
 %{_datadir}/pixmaps/%{name}*
 %{_datadir}/polkit-1/actions/%{name}*

++ scap-workbench-0.8.6.tar.bz2 - scap-workbench-1.0.3.tar.bz2 ++
 9397 lines of diff (skipped)

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org