Changelog for
permissions-config-1699_20240522-1.1.noarch.rpm :
* Fri May 24 2024 matthias.gerstnerAATTsuse.com- Update to version 1699_20240522:
* man pages: minor corrections (bsc#1224822)
* Tue May 21 2024 filippo.bonazziAATTsuse.com- Update to version 1699_20240521:
* permctl: return special exit code in --warn mode if entries need fixing
* Mon May 13 2024 Matthias Gerstner
- rename chkstat package to permctl to match the new binary names. Establish Provides/Obsoletes to keep dependencies and old package cleanup in working order, see: https://en.opensuse.org/openSUSE:Package_dependencies#Renaming_a_package- add BuildRequires for acl programs for tests to succeed. Still keep %check disabled, because the new ACL test fails without /etc/subuid, /etc/subgid setup.
* Mon May 13 2024 matthias.gerstnerAATTsuse.com- Update to version 1699_20240513:
* chkstat: has been renamed to permctl to better reflect its purpose. A symlink for backward compatibility will remain in place.
* documentation: updated man pages
* ACL support: permctl (formerly chkstat) now supports an additional `+acl` syntax to support assigning ACLs to files similar to the already existing support for file based capabilities.
* Mon Mar 11 2024 matthias.gerstnerAATTsuse.com- Update to version 1699_20240307:
* build system: migrate from Makefile to Meson- adjust spec file to meson build
* Tue Mar 05 2024 filippo.bonazziAATTsuse.com- Update to version 1699_20240305:
* chkstat: EntryProcessor: make error handling in safeOpen() clearer
* chkstat regtests: catch bad error reporting for non-existent files
* chkstat: EntryProcessor: don\'t report errors for non-existent files
* Tue Feb 27 2024 filippo.bonazziAATTsuse.com- Update to version 1699_20240223:
* chkstat: replace ProcMountState enum by simple bool member
* chkstat: minor style, spelling and documentation fixes
* chkstat: drop types.h header
* chkstat: make ProcMountState a private type of ChkStat
* chkstat: EntryProcessor: rename some member variables for improved readability
* chkstat: get rid of EntryContext and incorporate it into EntryProcessor
* chkstat: split-off EntryProcessor from Chkstat main class
* chkstat: define _GNU_SOURCE via Makefile
* chkstat: processEntries(): make loop variables const
* chkstat: split up checkHaveProc()
* chkstat: ProfileParser: fix a bug when applying capabilities in custom root
* chkstat: ProfileParser: make adding the root to paths transparent
* chkstat: ProfileParser: refactor the now reduced codebase
* chkstat: split off separate ProfileParser
* chkstat: ProfileEntry: mark dropXID() const to support const ProfileEntry use
* chkstat: parseProfile(): improve badProfileLine() calls
* chkstat: drop deprecated capability check
* chkstat: also move expandProfilePaths() into new VariableExpansions class
* chkstat: split off variable expansion logic into separate class
* chkstat: loadVariableExpansions(): a bit of refactoring
* chkstat: parseSysconfig(): bit of refactoring
* chkstat: remove deprecated CHECK_PERMISSIONS logic
* chkstat: move assorted types into dedicated header
* chkstat: replace #include guards by #pragma once
* chkstat: split off command line arguments from Chkstat main class
* chkstat: drop SaneValueArg wrapper
* chkstat: document new packages.d directory
* chkstat: drop TODO regarding ProfileEntry being changed on-the-fly
* chkstat: harmonize FileCapabilities API
* chkstat: support /usr/share/permissions/package.d for per-package drop-ins
* chkstat: minor coding style fixes
* chkstat: improve readability for rstrip() to strip trailing slashes
* chkstat: remove trailing slashes from paths found on the command line
* chkstat: add warning messages for rare error situations
* chkstat: open profiles right away without racy `access()` check.- Remove fix_version.sh, handle version with services
* Tue Feb 06 2024 Wolfgang Frisch - Drop superfluous mkdir /usr/share/permissions/permissions.d This is now created by the Makefile. See also commit 5900bc1ffe6275298ded3c96dee03a5c98e4db1c
* Tue Feb 06 2024 paolo.peregoAATTsuse.com- Update to version 20240206:
* Whitelisting libgtop_server2 (bsc#1218921)
* Removing bogus whitespaces
* chkstat: harmonize and transform to a more compact coding and doc style
* gitignore: also ignore hidden ctags
* build: Create /usr/share/permissions/permissions.d for packagers
* profiles: drop /usr/sbin/lockdev which is no longer packaged in Factory
* profiles: drop /etc/ftpusers which is no longer shipped in netcfg
* Tue Jan 30 2024 Dominique Leuenberger - Create directory /usr/share/permissions/permissions.d for packages to place their drop-ins.
* Mon Nov 27 2023 Daniel Garcia - Remove dependency on /usr/bin/python3, making scripts to depends on the real python3 binary, not the link. bsc#1212476
* Fri Jun 02 2023 matthias.gerstnerAATTsuse.com- Update to version 20230602:
* profiles: remove dropped pppoe-wrapper
* Tue May 16 2023 matthias.gerstnerAATTsuse.com- Update to version 20230516:
* common permissions: add icingaweb2 setgid directory (bsc#1211314)
* Mon Apr 24 2023 wolfgang.frischAATTsuse.com- Update to version 20230424:
* profiles: remove dead opiepasswd entry (opie was removed via OBS sr#1065964).
* Fri Feb 17 2023 matthias.gerstnerAATTsuse.com- Update to version 20230217:
* shadow: newgidmap,newuidmap: use capabilities (bsc#1208309)
* profiles: whitelist kismet capabilities (bsc#1200954) (#171)
* Tue Dec 20 2022 matthias.gerstnerAATTsuse.com- Update to version 20221220:
* profiles: remove outdated kdesud, apptainer entries
* Wed Sep 21 2022 Dirk Müller - skip tests on qemu user builds
* Tue Sep 13 2022 matthias.gerstnerAATTsuse.com- Update to version 20220912:
* chkstat: also consider group controlled paths (bsc#1203018, CVE-2022-31252)
* Mon Aug 08 2022 Dominique Leuenberger - Fix dependency from permissions-zypp-plugin to permissions.
* Sat Jul 30 2022 Stephan Kulow - Avoid different Versions for subpackages to fix build-compare seeing the src rpm as equal. It replaces VERSION-RELEASE but that will fail if subpackages use a different Version
* Wed Jul 13 2022 matthias.gerstnerAATTsuse.com- Update to version 20220713:
* postfix: add postlog setgid for maildrop binary (bsc#1201385)
* libexec migration: KDE utilities now properly place their helpers
* pccardctl: installation path has finally changed to /usr/sbin
* Fri Mar 11 2022 matthias.gerstnerAATTsuse.com- Update to version 20220309:
* apptainer whitelisting (bsc#1196145)
* Fri Feb 25 2022 matthias.gerstnerAATTsuse.com- Update to version 20220202:
* mount.nfs: switch from migration mode to fixed path in /usr/sbin
* changed gendered pronouns
* mgetty: faxq-helper now finally reside in /usr/libexec
* Wed Sep 01 2021 matthias.gerstnerAATTsuse.com- Update to version 20210901:
* libksysguard5: Updated path for ksgrd_network_helper
* kdesu: Updated path for kdesud
* sbin_dirs cleanup: these binaries have already been moved to /usr/sbin
* mariadb: revert auth_pam_tool to /usr/lib{,64} again
* cleanup: revert virtualbox back to plain /usr/lib
* cleanup: remove deprecated /etc/ssh/sshd_config
* hawk_invoke is not part of newer hawk2 packages anymore
* cleanup: texlive-filesystem: public now resides in libexec
* cleanup: authbind: helper now resides in libexec
* cleanup: polkit: the agent now also resides in libexec
* libexec cleanup: \'inn\' news binaries now reside in libexec
* Tue May 18 2021 matthias.gerstnerAATTsuse.com- Update to version 20210518:
* whitelist please (bsc#1183669)
* Tue May 18 2021 matthias.gerstnerAATTsuse.com- Update to version 20210518:
* Fix enlightenment paths for 32-bit architectures
* Mon Jan 25 2021 matthias.gerstnerAATTsuse.com- Update to version 20210125:
* usbauth: drop compatibility variable for libexec
* usbauth: Updated path for usbauth-npriv
* profiles: finish usage of variable for polkit-agent-helper-1