Changelog for permissions-debuginfo-2015.09.28.1626-12.1.x86_64.rpm :

* Sun Aug 07 2016 meissnerAATTsuse.com- permissions-suexec2-is-symlink.patch: suexec2 is just a symlink
* Tue Aug 02 2016 meissnerAATTsuse.com- permissions-shadow-bsc979282.patch:
* list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282)
* root:shadow 0755 for newuidmap/newgidmap
* Tue Aug 02 2016 krahmerAATTsuse.com- permissions-qemu-bridge-helper-988279.patch: adding qemu-bridge-helper mode 04750 (bsc#988279)
* Tue Jul 26 2016 meissnerAATTsuse.com- bsc975352-make-chage-sgid.patch: chage only needs read rights for /etc/shadow, so setgid shadow instead of setuid root. (bsc#975352)
* Wed Mar 30 2016 meissnerAATTsuse.com- permissions-gst-ptp-helper-960173.patch: permissions: adding gstreamer ptp file caps (bsc#960173)
* Fri Jan 15 2016 meissnerAATTsuse.com- permissions-suexec-bsc962060.patch: the apache folks renamed suexec2 to suexec with symlink. adjust both (bsc#962060)
* Tue Jan 12 2016 meissnerAATTsuse.com- pinger needs to be squid:root, not root:squid (there is no squid group) bsc#961363
* Thu Oct 29 2015 meissnerAATTsuse.com- permissions-suexec-bsc951765.patch: add suexec with 0755 to all standard profiles. this can and should be overridden in permissions.local if you need it setuid root. bsc#951765 bsc#263789
* Mon Sep 28 2015 meissnerAATTsuse.com- adjusted radosgw to root:www mode 0750 (bsc#943471)
* Mon Sep 28 2015 meissnerAATTsuse.com- radosgw can get capability cap_bind_net_service (bsc#943471)
* Mon Jun 08 2015 meissnerAATTsuse.com- remove /usr/bin/get_printing_ticket; (bnc#906336)
* Wed Dec 03 2014 krahmerAATTsuse.com- Added iouyap capabilities (bnc#904060)
* Wed Nov 05 2014 meissnerAATTsuse.com- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)- permissions: incorporating squid changes from bnc#891268- hint that chkstat --system --set needs to be run after editing bnc#895647
* Tue Aug 26 2014 meissnerAATTsuse.com- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)- do not mention SuSEconfig anymore, long dead (bnc#843083)
* Fri Aug 01 2014 meissnerAATTsuse.com- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151
* Wed Jul 23 2014 meissnerAATTsuse.com- make innbind mode 4550 (bnc#876287)- permissions: Adding systemd-journal directory (bnc#888151)
* Mon Jul 21 2014 krahmerAATTsuse.com- permissions: Adding new kdesud path for KDE5 (bnc#872276)
* Tue Jul 01 2014 meissnerAATTsuse.com- vlock_main lost its permission checking, so remove from here.
* Mon Jun 16 2014 meissnerAATTsuse.com- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)
* Thu Jun 05 2014 meissnerAATTsuse.com- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)
* Tue Apr 15 2014 meissnerAATTsuse.com- duplicate /var/run entries to /run (bnc#873708)
* Mon Mar 24 2014 krahmerAATTsuse.com- permissions: incorporating capability for mtr, removing +s from ping (bnc#865351)
* Mon Oct 28 2013 meissnerAATTsuse.com- GIT repo moved to GITHUB.- removed the setuid bit from \"eject\" (bnc#824406)
* Thu Aug 22 2013 meissnerAATTsuse.com- do not use magic constants for strlen (bnc#834790
* Wed Aug 21 2013 meissnerAATTsuse.com- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)
* Fri Aug 16 2013 meissnerAATTsuse.com- use PERMISSION_FSCAPS
* Fri Aug 16 2013 meissnerAATTsuse.com- it is PERMISSIONS_FSCAPS (bnc#834790)- qemu-bridge-helper has no special privileges currently (bnc#765948)
* Wed Jun 12 2013 meissnerAATTsuse.com- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)
* Mon Jun 10 2013 meissnerAATTsuse.com- cdrtools: allow some filesystem capabilities for more stable CD/DVD burning in \"easy\" mode. (bnc#550021) (cap_sys_nice, cap_sys_rawio, cap_sys_resource, cap_ipc_lock)
* Wed May 08 2013 meissnerAATTsuse.com- leave out readcd,cdda2wav,cdrecord until it is ready for the distro (bnc#550021)
* Sat May 04 2013 meissnerAATTsuse.com- cdrecord currently has no special permissions approved (bnc#550021)- append a /
* Tue Jan 29 2013 meissnerAATTsuse.com- Allow pcp to have stickybit worldwriteable directories
* Tue Nov 27 2012 meissnerAATTsuse.com- add /usr/bin/dumpcap to watchlist- make fscaps=1 the default on \"\"- added PERMISSION_FSCAPS to the sysconfig/security fillup template.- /bin/ping(6) was moved to /usr/bin/ping(6) /bin/eject was moved to /usr/bin/eject
* Wed Nov 21 2012 lnusselAATTsuse.de- apply permissions settings in %post. During initial installation some packages might be installed before the permissions package due to dependency loops so we need to make sure their settings are applied too. Also, on update of the permissions package changed permission settings may need to be applied.
* Mon Oct 15 2012 lnusselAATTsuse.de- temporarily add su.core. workaround for the migration of su from coreutils to util-linux needs to be reverted as soon as util-linux is also in
* Tue Sep 25 2012 meissnerAATTsuse.com- no longer install SuSEconfig.permissions, SuSEconfig is gone.
* Fri Jul 06 2012 meissnerAATTsuse.com- enable ecryptfs-utils setuid root mount wrapper (bnc#740110) in .easy
* Mon Jun 04 2012 lnusselAATTsuse.de- remove /var/run/vi.recover (bnc#765288)
* Fri Jun 01 2012 lnusselAATTsuse.de- remove /var/cache/fonts (bnc#764885)- remove /var/lib/xemacs/lock/ (bnc#764887)
* Thu May 31 2012 lnusselAATTsuse.de- Revert \"Use credentials from within the root file system\" breaks use of --root option in brp-05-permissions
* Tue May 15 2012 lnusselAATTsuse.de- print warning when requested to check not listed files- Use credentials from within the root file system
* Wed Feb 08 2012 lnusselAATTsuse.de- add duplicate entries for / and /usr (bnc#745622)
* Tue Feb 07 2012 lnusselAATTsuse.de- add scripts for automatic package sumission- drop zypp-refresh-wrapper (bnc#738677)
* Mon Nov 07 2011 lnusselAATTsuse.de- disable run time fscaps detection (bnc#728312)
* Fri Sep 23 2011 lnusselAATTsuse.de- set permission by default in SuSEconfig mode as permissions are only set when called explicitly anyways (bnc#720010).
* Wed Sep 21 2011 lnusselAATTsuse.de- fix typo in path
* Tue Sep 20 2011 lnusselAATTsuse.de- remove world writable /var/crash again (bnc#438041)- remove world writable permissions from /usr/src/packages (bnc#719217)
* Tue Sep 20 2011 lnusselAATTsuse.de- add chromium browser sandbox helper (bnc#718016)- don\'t offer PERMISSION_SECURITY in config anymore- remove setgid games bits (bnc#429882)
* Tue Jun 28 2011 lnusselAATTsuse.de- remove setuid bit from opiesu (bnc#698772)
* Fri Jun 17 2011 lnusselAATTsuse.de- disable fscaps by default as factory kernel still doesn\'t have the required patch for auto detection
* Thu May 26 2011 lnusselAATTsuse.de- read /sys/kernel/fscaps for fscaps settings
* Thu May 12 2011 lnusselAATTsuse.de- change path to gnome-pty-helper (bnc#690202)
* Mon Mar 07 2011 lnusselAATTsuse.de- setuid bit on VBoxNetDHCP (bnc#669055)
* Mon Feb 14 2011 lnusselAATTsuse.de- fix hawk permissions (bnc#665045)
* Wed Feb 09 2011 lnusselAATTsuse.de- add hawk (bnc#665045)
* Thu Dec 02 2010 lnusselAATTsuse.de- remove Xorg setuid bit (bnc#632737)
* Thu Nov 18 2010 lnusselAATTsuse.de- update permissions of lastlog, faillog, wtmp, utmp and btmp
* Wed Nov 17 2010 lnusselAATTsuse.de- remove permissions handling for /etc/inittab, /etc/inetd.conf and /etc/mtab- revert previous commit, done in coreutils instead
* Tue Nov 16 2010 lnusselAATTsuse.de- change fillup deps to requires to avoid coreutils loop
* Tue Nov 16 2010 lnusselAATTsuse.de- change utempter from group tty to group utmp (bnc#652877)
* Tue Nov 09 2010 lnusselAATTsuse.de- add permissions man page- update docu- add --level option- set perms for setuid files always if owner changes- strip root dir when printing file names
* Tue Nov 09 2010 lnusselAATTsuse.de- add option to explicitly warn only
* Fri Nov 05 2010 lnusselAATTsuse.de- reimplement the core features in chkstat itself instead of SuSEconfig.permissions
* Thu Nov 04 2010 lnusselAATTsuse.de- don\'t make changes if not called explicitly
* Wed Nov 03 2010 lnusselAATTsuse.de- add support for file system capabilities
* Mon Oct 18 2010 lnusselAATTsuse.de- remove vlock (bnc#629236#c13)
* Tue Oct 05 2010 lnusselAATTsuse.de- update path to gnome-pty-helper (bnc#634199)
* Wed Sep 22 2010 lnusselAATTsuse.de- vlock -> vlock-main (bnc#629236)
* Mon Jun 28 2010 jengelhAATTmedozas.de- use %_smp_mflags
* Fri Apr 23 2010 lnusselAATTsuse.de- add lockdev (bnc#588325)
* Wed Apr 07 2010 lnusselAATTsuse.de- update for innd update (bnc#594393)- remove lppasswd (bnc#574336)
* Tue Dec 08 2009 jengelhAATTmedozas.de- enable parallel building
* Wed Oct 07 2009 lnusselAATTsuse.de- add /usr/lib/virtualbox/VBoxNetAdpCtl (bnc#533550)
* Thu Aug 27 2009 lnusselAATTsuse.de- add /usr/src/packages/BUILDROOT/ for rpm 4.7
* Wed Aug 26 2009 lnusselAATTsuse.de- add more arm directories to /usr/src/packages/RPMS/
* Mon Aug 24 2009 lnusselAATTsuse.de- remove permissions handling for traceroute6 and cdrecord which are symlinks nowadays
* Thu Aug 20 2009 lnusselAATTsuse.de- fix weird sendfax permissions (bnc#525954)
* Wed Aug 19 2009 lnusselAATTsuse.de- permissions now maintained at gitorious so use tarball instead of individual files
* Wed Aug 12 2009 meissnerAATTsuse.de- added polkit setuid root helpers after review (bnc#523377)
* Fri Aug 07 2009 meissnerAATTsuse.de- also added KDE4 start_kdeinit (same source as kde3 start_kdeinit), bnc#523833
* Thu Aug 06 2009 meissnerAATTsuse.de- open-vm-tools gets setuid root:root in mode easy (bnc#474285)
* Tue Jul 28 2009 lnusselAATTsuse.de- hylafax directory permissions are handled by the package - change group of amanda binaries (bnc#523006)
* Mon Mar 02 2009 lnusselAATTsuse.de- add some missing slashes to directories and remove entries for at and cron (bnc#480855)
* Tue Nov 25 2008 lnusselAATTsuse.de- add VirtualBox (bnc#429725)
* Fri Nov 07 2008 lnusselAATTsuse.de- add newrole from policycoreutils (bnc#440596)
* Thu Oct 23 2008 lnusselAATTsuse.de- add udev device files (bnc#438039)- add system crash dump directory (bnc#438041)- add bind chroot devices (bnc#438045)
* Mon Oct 20 2008 lnusselAATTsuse.de- dbus-daemon-launch-helper neeeds to be setuid in level secure (bnc#435776)
* Thu Sep 25 2008 lnusselAATTsuse.de- change /var/games to 755 to prevent ill-considered maneuvers there (bnc#429882)
* Thu Sep 11 2008 lnusselAATTsuse.de- remove static smpppd config file permissions- fix permissions of polkit-set-default-helper- grant permissions to PolicyKit helpers also in level secure
* Tue Jul 15 2008 lnusselAATTsuse.de- ensure correct permissions on ssh files to avoid sshd refusing logins (bnc#398250)
* Thu Jul 03 2008 lnusselAATTsuse.de- adapt permissions of lppasswd for current cups setup (bnc#406058)
* Mon Jun 02 2008 lnusselAATTsuse.de- add mount.nfs due to an ever increasing number of users hit by the regression (bnc#331020, bnc#304318)
* Wed May 07 2008 lnusselAATTsuse.de- zypp-checkpatches-wrapper -> zypp-refresh-wrapper (bnc#385207)
* Mon Apr 21 2008 lnusselAATTsuse.de- /dev/full should be 0666 (bnc#379545)
* Thu Apr 17 2008 lnusselAATTsuse.de- update chkstat manpage and support \'--\' argument for chkstat (bnc#57438)
* Wed Mar 12 2008 lnusselAATTsuse.de- new PolicyKit permissions (bnc#295341)- remove obsolete entries for scmxx and zapping
* Mon Jan 07 2008 lnusselAATTsuse.de- remove setuid bits on man (#351988)
* Mon Dec 03 2007 lnusselAATTsuse.de- add dbus-daemon-launch-helper (#333361)
* Fri Nov 02 2007 dmuellerAATTsuse.de- kcheckpass/kdesud moved to %_libdir/kde4/libexec
* Wed Oct 17 2007 lnusselAATTsuse.de- remove bing (#306626)
* Fri Oct 12 2007 lnusselAATTsuse.de- remove suexec2 (#263789)
* Fri Aug 10 2007 ajAATTsuse.de- Readd nscd socket permissions, otherwise glibc build will fail.
* Fri Aug 10 2007 lnusselAATTsuse.de- add PolicyKit helpers (#295341)
* Wed Aug 08 2007 lnusselAATTsuse.de- remove nscd socket permission handling as chkstat refuses to touch that file anyways (#298334).
* Tue Jun 12 2007 schwabAATTsuse.de- permissions.local: Fix comment to use uid:gid instead of uid.gid.
* Fri Jun 01 2007 lnusselAATTsuse.de- package /etc/permissions.local
* Wed May 30 2007 lnusselAATTsuse.de- add /usr/bin/kcheckpass and /usr/bin/kdesud (#276502)
* Wed Apr 18 2007 dmuellerAATTsuse.de- create debuginfo package (#265667)
* Thu Feb 22 2007 lnusselAATTsuse.de- prefer package specific permissions files over central ones (#246252)
* Thu Feb 22 2007 lnusselAATTsuse.de- add /opt/kde3/bin/start_kdeinit (#203535)- remove entries for dropped packages OpenPBS and xtetris
* Wed Jan 17 2007 lnusselAATTsuse.de- make pam authentication helpers unix_chkpwd, unix2_chkpwd and pam_auth setuid root instead of setgid shadow (#216816)
* Wed Jan 10 2007 sbrabecAATTsuse.cz- Prefix of /opt/gnome binaries changed to /usr.- Removed gnome-stones.
* Mon Nov 13 2006 lnusselAATTsuse.de- remove khc_indexbuilder (#188192)
* Mon Oct 16 2006 lnusselAATTsuse.de- add zypp patch checking helper (#211286)
* Wed Aug 23 2006 lnusselAATTsuse.de- /usr/X11R6 -> /usr- remove obsolete entries for xmris,pcmcia-cardinfo,geki2,vmware,nicimud
* Thu Aug 17 2006 cthielAATTsuse.de- change paths for v4l-conf from /usr/X11R6/bin to /usr/bin
* Thu Jul 20 2006 sndirschAATTsuse.de- Xorg moved from /usr/X11R6/bin to /usr/bin; fixes build of xorg-x11-server package
* Tue Jun 27 2006 lnusselAATTsuse.de- remove setuid bit on gpg (#137562)
* Fri May 19 2006 lnusselAATTsuse.de- add get_printing_ticket in order to enable smb printing with kerberos authentication (#177114)
* Wed May 17 2006 lnusselAATTsuse.de- add setuid bit to gnomesu-pam-backend in level secure (#175616)
* Thu Feb 23 2006 schwabAATTsuse.de- /usr/lib/ia32el/suid_libia32x.so renamed to suid_ia32x_loader.
* Wed Jan 25 2006 mlsAATTsuse.de- converted neededforbuild to BuildRequires
* Mon Jan 16 2006 meissnerAATTsuse.de- removed pmount, pumount.- moved pmpost to /usr/lib/pcp/pmpost.
* Thu Dec 15 2005 lnusselAATTsuse.de- /opt/kde3/bin/fileshareset -> /usr/bin/fileshareset
* Fri Dec 09 2005 meissnerAATTsuse.de- temporary only setuid bit for pmount and pumount. #135792
* Wed Nov 23 2005 lnusselAATTsuse.de- add /usr/bin/fusermount (#133657)
* Mon Nov 21 2005 lnusselAATTsuse.de- remove Xwrapper, it\'s a symlink nowadays (#134611)
* Wed Nov 02 2005 dmuellerAATTsuse.de- don\'t build as root
* Thu Oct 13 2005 meissnerAATTsuse.de- nici moved to /var/opt/novell/...
* Tue Oct 11 2005 meissnerAATTsuse.de- Temporary added setuid binary from \"nici\" (Novell I? Crypto Interface), bug #127545.
* Fri Sep 30 2005 lnusselAATTsuse.de- add slashes to several directories (#103186)- change /var/games to games:games 775 again (#103186)
* Tue Aug 30 2005 lnusselAATTsuse.de- remove kpopup helper (#100132)
* Thu Aug 25 2005 lnusselAATTsuse.de- add /opt/gnome/sbin/change-passwd (#104993)
* Thu Aug 11 2005 lnusselAATTsuse.de- remove xmcd (#104040)- add suexec2 from apache2 (#66304)- add exim (#66306)
* Thu Aug 11 2005 lnusselAATTsuse.de- remove /opt/gnome/bin/iagno (#103844)
* Wed Aug 10 2005 lnusselAATTsuse.de- remove xbl (#103762)- clean up bsd games list (#103785)- remove score files as they are the same in all levels anyways
* Wed Aug 10 2005 lnusselAATTsuse.de- change /var/games{,/xsok} to root:root (#103186)
* Fri Aug 05 2005 lnusselAATTsuse.de- /usr/sbin/isdnctrl -> /sbin/isdnctrl (#100750)
* Tue Aug 02 2005 lnusselAATTsuse.de- remove kde games again. Turned out they don\'t work as intended.
* Tue Aug 02 2005 lnusselAATTsuse.de- cardctl -> pccardctl (#100120)
* Fri Jul 22 2005 lnusselAATTsuse.de- add setgid games to some kde games
* Wed Jun 08 2005 lnusselAATTsuse.de- use correct gnomesu-pam-backend path
* Tue Jun 07 2005 lnusselAATTsuse.de- add gnomesu-pam-backend (#75823)- add lppasswd (#66305)- make ntping 4750 root:trusted also in easy (#66211)- add cl_status from heartbeat (#66310)- remove unused /opt/gnome/sbin/change-passwd
* Mon May 16 2005 roAATTsuse.de- added /opt/gnome/sbin/change-passwd
* Mon Apr 25 2005 lnusselAATTsuse.de- add OpenPBS permissions (#66320)
* Tue Mar 01 2005 lnusselAATTsuse.de- fix inn permissions (#67032)- remove setuid bit from ziptool (#66191)
* Wed Feb 23 2005 lnusselAATTsuse.de- remove no longer existing files- remove setuid plpnfsd (#66207)- remove setuid bit from dga program- change vmware permissions- add /opt/kde3/bin/receivepopup (#66313)- add /opt/kde3/bin/fileshareset (#66312)- add /usr/bin/scmxx (#66309)- add some missing mailman files (#66315)- include perl script to perform some basic consistency checks
* Mon Jan 31 2005 meissnerAATTsuse.de- backported security fix from SLES 9 branch. #43035
* Sat Jan 15 2005 schwabAATTsuse.de- Comment fixes.
* Mon Nov 22 2004 sndirschAATTsuse.de- permissions.secure: set Xorg to 0711 (4711 before)
* Wed Nov 10 2004 roAATTsuse.de- /var/cache/fonts to 1777 (as in tetex perms before)
* Mon Nov 08 2004 kukukAATTsuse.de- Add nscd socket to permissions file
* Tue Sep 14 2004 roAATTsuse.de- do not use rpm in SuSEconfig.permissions (#45252)
* Tue Sep 14 2004 roAATTsuse.de- dropped check for perl in SuSEconfig.permissions (#45252)
* Wed May 26 2004 drahtAATTsuse.de- /usr/lib/ia32el/suid_libia32x.so set to (6755,0755,0755) (#40234) source code audit in progress (#40234) (thomas)
* Fri May 14 2004 roAATTsuse.de- /usr/lib/ia32el/suid_libia32x.so added to easy,secure,paranoid (0755,0755,0755) (#40234)
* Thu Apr 15 2004 sndirschAATTsuse.de- XFree86 --> Xorg in permissions files
* Tue Apr 06 2004 mlsAATTsuse.de- added --root option for buildroot operation
* Mon Apr 05 2004 mlsAATTsuse.de- chkstat: fixed relative symlink chasing- /usr/src/packages/RPMS back to 1777 in easy, as chkstat can now handle it
* Sun Apr 04 2004 mlsAATTsuse.de- chkstat: added missing link count check and safepath() function- chkstat: refuse to give away s-bits on insecure paths- chkstat: bugfix: stat file again after chown, as modes may have changed
* Fri Apr 02 2004 mlsAATTsuse.de- chkstat: re-implemented it in C to make it more secure
* Thu Apr 01 2004 kukukAATTsuse.de- Remove /var/lock/subsys [#37759]- Add sticky bit to /var/lock [#37759]
* Wed Mar 24 2004 drahtAATTsuse.de- make /usr/bin/gpg setuid root in easy+secure, 0755 in paranoid. [#33570].
* Tue Mar 23 2004 drahtAATTsuse.de- #36741: /usr/src/packages/RPMS 1777->0755 in easy.
* Mon Mar 22 2004 kukukAATTsuse.de- Fix syntax error in permission.easy- /usr/bin/ssh should be always 0755
* Fri Feb 13 2004 drahtAATTsuse.de- /var/run/uscreens (root:root 1777) added
* Thu Feb 12 2004 kukukAATTsuse.de- Don\'t modify group of crontab and at useless
* Fri Jan 09 2004 kukukAATTsuse.de- Add RPM directory for hppa2.0
* Fri Nov 21 2003 roAATTsuse.de- fpexec decrease go rights to 11
* Tue Nov 04 2003 roAATTsuse.de- inn scripts: u-w (not needed)
* Mon Nov 03 2003 schwabAATTsuse.de- chkstat: fix option parsing.
* Wed Oct 29 2003 kukukAATTsuse.de- Sync permissions for shadow package
* Tue Oct 28 2003 roAATTsuse.de- require /sbin/SuSEconfig
* Tue Oct 28 2003 roAATTsuse.de- chkstat: added some new extensions: allow specifying singular files or a filelist to be checked output previous/current mode of a failed file adapted manpage
* Tue Oct 21 2003 drahtAATTsuse.de- permissions.secure: /etc/ftpusers 0640 root.root -> 0644
* Mon Oct 20 2003 roAATTsuse.de- permissions.
*: use \":\" and not \".\" to separate user/group- chkstat: output also which of (permissions/owner) is wrong- chkstat: don\'t try to chown if not root
* Tue Oct 14 2003 drahtAATTsuse.de- reformatting of all 4 permissions files. xkobo, rocksndiamonds, xlogical, lbreakout2 and ltris path adoptions. for future reference: :-) for i in permissions permissions.easy permissions.secure permissions.paranoid; do cat $i | \\ awk \'/^(#|$)/ { print $0; next; } { if(NF > 3) {printf(\"error: %s\
\",$0);exit}; printf(\"%-55s %-17s %4s\
\",$1,$2,$3)}\' \\ > $i.. && mv $i.. $i; done
* Thu Sep 18 2003 kukukAATTsuse.de- Fix group of straps, popauth and ntping- Remove some GNOME games which do not need special rights anymore
* Tue Sep 16 2003 kukukAATTsuse.de- permissions.easy: change group of bing, vboxbeep, plpnfsd to trusted, majordomo/wrapper to daemon
* Tue Sep 16 2003 kukukAATTsuse.de- permissions.easy: change group of gpasswd and ziptool to trusted
* Tue Sep 02 2003 kkeilAATTsuse.de- fix user fax for hylafax specific files
* Tue Sep 02 2003 kukukAATTsuse.de- fix path to cons.saver, remove setuid bit in paranoid (#25907)- remove screen- remove smail (dropped years ago)
* Mon Sep 01 2003 kkeilAATTsuse.de- fix group for isdnctrl uucp --> dialout (#28997)
* Mon Sep 01 2003 drahtAATTsuse.de- feedbackAATTsuse.de -> http://www.suse.de/feedback in all files of the package. #29635.
* Sat Aug 23 2003 sndirschAATTsuse.de- added martian entries of package pachi
* Tue Aug 19 2003 mmjAATTsuse.de- Add sysconfig metadata [#28937]
* Tue Jul 29 2003 drahtAATTsuse.de- fax changes from Tomas Crhak: faxq-helper and spool directories.
* Tue Jul 29 2003 roAATTsuse.de- gnome games moved back to /opt/gnome
* Mon Jul 28 2003 kukukAATTsuse.de- Remove /var/run from permissions file list [Bug #28289]
* Mon Jul 28 2003 kukukAATTsuse.de- /var/lib/gdm: Removed to solve [Bug #28257] for future products.
* Fri Jul 25 2003 drahtAATTsuse.de- /usr/lib/vte/gnome-pty-helper -> /opt/gnome/lib/vte/gnome-pty-helper The same with /opt/gnome/lib64/.
* Fri Jun 13 2003 kukukAATTsuse.de- /usr/lib/mgetty+sendfax/faxq-helper added 4711 in easy and secure
* Fri May 02 2003 sndirschAATTsuse.de- added /usr/games/pachi and /var/games/pachi.scores
* Mon Mar 10 2003 sndirschAATTsuse.de- added /usr/games/falconseye.bin- removed /usr/games/falconseye
* Mon Mar 10 2003 kukukAATTsuse.de- added /usr/lib64/vte/gnome-pty-helper until ported to utempter
* Sun Mar 09 2003 sndirschAATTsuse.de- added /usr/games/falconseye- removed old falconseye entries
* Thu Mar 06 2003 roAATTsuse.de- added /usr/lib/vte/gnome-pty-helper until ported to utempter
* Thu Feb 20 2003 mmjAATTsuse.de- Add sysconfig metadata [#22686]
* Tue Feb 18 2003 kssingvoAATTsuse.de- removed squid entries. They will be added and corrected to squids own permission file /etc/permissions.d/squid (bugzilla#23752): /var/squid /var/squid/cache /var/squid/logs
* Tue Feb 18 2003 drahtAATTsuse.de- /usr/games/trackballs added 2755 games.games in easy.
* Sun Feb 16 2003 adrianAATTsuse.de- allow khc_indexbuilder to write into /var/cache/susehelp in easy mode- remove old entries (kreatecd and kscd)
* Mon Feb 10 2003 drahtAATTsuse.de- additions/changes (from #17012, Tobias Burnus):
* read all files from the commandline at once and override entries given multiple times by the last entry
* enable option --set in addition to -set
* manpage adoptions
* call chkstat only once from SuSEconfig.permissions
* Thu Feb 06 2003 roAATTsuse.de- /var/mtrack -> /var/lib/mtrack
* Tue Nov 19 2002 roAATTsuse.de- zapping_setup_fb moved to /opt/gnome/sbin
* Thu Nov 14 2002 bgAATTsuse.de- added hppa to rpm subsystem in permissions files to be able to finish autobuild
* Thu Oct 24 2002 roAATTsuse.de- two more nethack flavors with sgid games in easy
* Tue Sep 10 2002 drahtAATTsuse.de- cda entries below /usr/X11R6/lib/X11/xmcd removed. index.html under /var/lib/xmcd/discog directories added world-writeable. This is not satisfactory. New user xmcd will be added in next release.
* Thu Sep 05 2002 drahtAATTsuse.de- /usr/X11R6/lib/X11/xmcd/bin-Linux-ia64/{cda,xmcd} added.
* Mon Aug 26 2002 drahtAATTsuse.de- removed all occurrences of kv4lsetup upon request by adrian+uli.- -s for xlock, xlock-mesa + xscreensaver (#18125), (#18132)- /usr/src/packages/RPMS/alphaev67 added.- added /sbin/unix2_chkpwd root.shadow 2755- -s /usr/sbin/papd (#18103)
* Wed Aug 21 2002 drahtAATTsuse.de- removed suid bits from heimdal\'s su and otp (#18104)
* Wed Aug 21 2002 drahtAATTsuse.de- remove setuid bit from traceroute due to new implementation by Olaf Kirch which doesn\'t need euid root. (#18101)
* Wed Aug 21 2002 drahtAATTsuse.de- removed lprng entries because of conflicts cups <-> lprng
* Wed Aug 21 2002 drahtAATTsuse.de- vboxbeep -> 0755 in secure.
* Mon Aug 19 2002 roAATTsuse.de- added prereq (#17956)
* Mon Aug 19 2002 uliAATTsuse.de- added nethack for lib64 archs
* Mon Aug 19 2002 uliAATTsuse.de- added xmcd for archs != i386
* Tue Aug 13 2002 drahtAATTsuse.de- gnome-games2 entries changed/adopted to /opt/gnome2 path.
* Tue Aug 13 2002 drahtAATTsuse.de- changed kcheckpass from 2755 root.shadow to 4755. (#17664)
* Wed Jul 31 2002 olhAATTsuse.de- ncpmount, ncpumount, nwsfind, ncplogin, ncpmap root.trusted 4750
* Sat Jul 27 2002 kukukAATTsuse.de- Rename group wwwadmin to www- Rename group game to games
* Tue Jul 23 2002 drahtAATTsuse.de- added sapdb files, not setuid root in secure,paranoid.
* Mon Jul 22 2002 drahtAATTsuse.de- added frontpage files
* Tue Jul 16 2002 drahtAATTsuse.de- changed entries for mailman: group mdom -> mailman
* Tue Jul 16 2002 drahtAATTsuse.de- mailman sgid mdom files added to easy, secure and paranoid.
* Wed Jul 10 2002 drahtAATTsuse.de- .paranoid comment fixed about at and cron (#12159)
* Mon Jul 08 2002 drahtAATTsuse.de- ppp dialup networking fixes and cleanup.
* Mon Jul 08 2002 drahtAATTsuse.de- modifications: -s for pppd, world-writeable directories for kdemultimedia3-sound, gift, mips and armv4l RPMS directory.
* Fri Jul 05 2002 kukukAATTsuse.de- Add /usr/src/packages/RPMS/sparcv9 to easy,secure,paranoid.
* Thu Jul 04 2002 drahtAATTsuse.de- /usr/lib64/pt_chown added to easy,secure,paranoid.
* Mon Jul 01 2002 drahtAATTsuse.de- entries for packages added or changed: squid geki2 d1x falconseye fdutils gewels gnome-games heimdal lbreakout lpdfilter lprng man mgetty (/var/spool/fax/outgoing/
* need discussion) mtrack (locfile+satfile -> 0644) nethack nvi-m17n (/var/preserve/vi.recover -> 1777) opie (/bin -> /usr/bin) pcp plptools qpopper rp-pppoe (/usr/sbin/pppoe-wrapper) smpppd (/usr/sbin/cinternet-wwwrun wwwrun.dialout 2750) squid (/usr/sbin/pam_auth) su-wrapper xemacs (lock directory changed again? now /var/state/xemacs and /var/lib/xemacs) xgalaga xmcd xscrabble
* Sun Jun 30 2002 roAATTsuse.de- don\'t install all sources (spec file etc.)
* Fri Jun 28 2002 drahtAATTsuse.de- minor spec file change
* Fri Jun 28 2002 drahtAATTsuse.de- entries for packages added: ftpdir gnokii kamplus geki2 aaa_dir (/tmp/.ICE-unix)
* Fri Jun 28 2002 drahtAATTsuse.de- unpack tar archive in source for convenience.
* Thu Jun 27 2002 olhAATTsuse.de- update permissions of /usr/src/packages/RPMS/
* Fri Jun 21 2002 roAATTsuse.de- created package as split off from aaa_base