Changelog for permissions-debugsource-2015.09.28.1626-12.1.x86_64.rpm :

* Sun Aug 07 2016 meissnerAATTsuse.com- permissions-suexec2-is-symlink.patch: suexec2 is just a symlink
* Tue Aug 02 2016 meissnerAATTsuse.com- permissions-shadow-bsc979282.patch:
* list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282)
* root:shadow 0755 for newuidmap/newgidmap
* Tue Aug 02 2016 krahmerAATTsuse.com- permissions-qemu-bridge-helper-988279.patch: adding qemu-bridge-helper mode 04750 (bsc#988279)
* Tue Jul 26 2016 meissnerAATTsuse.com- bsc975352-make-chage-sgid.patch: chage only needs read rights for /etc/shadow, so setgid shadow instead of setuid root. (bsc#975352)
* Wed Mar 30 2016 meissnerAATTsuse.com- permissions-gst-ptp-helper-960173.patch: permissions: adding gstreamer ptp file caps (bsc#960173)
* Fri Jan 15 2016 meissnerAATTsuse.com- permissions-suexec-bsc962060.patch: the apache folks renamed suexec2 to suexec with symlink. adjust both (bsc#962060)
* Tue Jan 12 2016 meissnerAATTsuse.com- pinger needs to be squid:root, not root:squid (there is no squid group) bsc#961363
* Thu Oct 29 2015 meissnerAATTsuse.com- permissions-suexec-bsc951765.patch: add suexec with 0755 to all standard profiles. this can and should be overridden in permissions.local if you need it setuid root. bsc#951765 bsc#263789
* Mon Sep 28 2015 meissnerAATTsuse.com- adjusted radosgw to root:www mode 0750 (bsc#943471)
* Mon Sep 28 2015 meissnerAATTsuse.com- radosgw can get capability cap_bind_net_service (bsc#943471)
* Mon Jun 08 2015 meissnerAATTsuse.com- remove /usr/bin/get_printing_ticket; (bnc#906336)
* Wed Dec 03 2014 krahmerAATTsuse.com- Added iouyap capabilities (bnc#904060)
* Wed Nov 05 2014 meissnerAATTsuse.com- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)- permissions: incorporating squid changes from bnc#891268- hint that chkstat --system --set needs to be run after editing bnc#895647
* Tue Aug 26 2014 meissnerAATTsuse.com- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)- do not mention SuSEconfig anymore, long dead (bnc#843083)
* Fri Aug 01 2014 meissnerAATTsuse.com- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151
* Wed Jul 23 2014 meissnerAATTsuse.com- make innbind mode 4550 (bnc#876287)- permissions: Adding systemd-journal directory (bnc#888151)
* Mon Jul 21 2014 krahmerAATTsuse.com- permissions: Adding new kdesud path for KDE5 (bnc#872276)
* Tue Jul 01 2014 meissnerAATTsuse.com- vlock_main lost its permission checking, so remove from here.
* Mon Jun 16 2014 meissnerAATTsuse.com- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)
* Thu Jun 05 2014 meissnerAATTsuse.com- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)
* Tue Apr 15 2014 meissnerAATTsuse.com- duplicate /var/run entries to /run (bnc#873708)
* Mon Mar 24 2014 krahmerAATTsuse.com- permissions: incorporating capability for mtr, removing +s from ping (bnc#865351)
* Mon Oct 28 2013 meissnerAATTsuse.com- GIT repo moved to GITHUB.- removed the setuid bit from \"eject\" (bnc#824406)
* Thu Aug 22 2013 meissnerAATTsuse.com- do not use magic constants for strlen (bnc#834790
* Wed Aug 21 2013 meissnerAATTsuse.com- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)
* Fri Aug 16 2013 meissnerAATTsuse.com- use PERMISSION_FSCAPS
* Fri Aug 16 2013 meissnerAATTsuse.com- it is PERMISSIONS_FSCAPS (bnc#834790)- qemu-bridge-helper has no special privileges currently (bnc#765948)
* Wed Jun 12 2013 meissnerAATTsuse.com- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)
* Mon Jun 10 2013 meissnerAATTsuse.com- cdrtools: allow some filesystem capabilities for more stable CD/DVD burning in \"easy\" mode. (bnc#550021) (cap_sys_nice, cap_sys_rawio, cap_sys_resource, cap_ipc_lock)
* Wed May 08 2013 meissnerAATTsuse.com- leave out readcd,cdda2wav,cdrecord until it is ready for the distro (bnc#550021)
* Sat May 04 2013 meissnerAATTsuse.com- cdrecord currently has no special permissions approved (bnc#550021)- append a /
* Tue Jan 29 2013 meissnerAATTsuse.com- Allow pcp to have stickybit worldwriteable directories
* Tue Nov 27 2012 meissnerAATTsuse.com- add /usr/bin/dumpcap to watchlist- make fscaps=1 the default on \"\"- added PERMISSION_FSCAPS to the sysconfig/security fillup template.- /bin/ping(6) was moved to /usr/bin/ping(6) /bin/eject was moved to /usr/bin/eject
* Wed Nov 21 2012 lnusselAATTsuse.de- apply permissions settings in %post. During initial installation some packages might be installed before the permissions package due to dependency loops so we need to make sure their settings are applied too. Also, on update of the permissions package changed permission settings may need to be applied.
* Mon Oct 15 2012 lnusselAATTsuse.de- temporarily add su.core. workaround for the migration of su from coreutils to util-linux needs to be reverted as soon as util-linux is also in
* Tue Sep 25 2012 meissnerAATTsuse.com- no longer install SuSEconfig.permissions, SuSEconfig is gone.
* Fri Jul 06 2012 meissnerAATTsuse.com- enable ecryptfs-utils setuid root mount wrapper (bnc#740110) in .easy
* Mon Jun 04 2012 lnusselAATTsuse.de- remove /var/run/vi.recover (bnc#765288)
* Fri Jun 01 2012 lnusselAATTsuse.de- remove /var/cache/fonts (bnc#764885)- remove /var/lib/xemacs/lock/ (bnc#764887)
* Thu May 31 2012 lnusselAATTsuse.de- Revert \"Use credentials from within the root file system\" breaks use of --root option in brp-05-permissions
* Tue May 15 2012 lnusselAATTsuse.de- print warning when requested to check not listed files- Use credentials from within the root file system
* Wed Feb 08 2012 lnusselAATTsuse.de- add duplicate entries for / and /usr (bnc#745622)
* Tue Feb 07 2012 lnusselAATTsuse.de- add scripts for automatic package sumission- drop zypp-refresh-wrapper (bnc#738677)
* Mon Nov 07 2011 lnusselAATTsuse.de- disable run time fscaps detection (bnc#728312)
* Fri Sep 23 2011 lnusselAATTsuse.de- set permission by default in SuSEconfig mode as permissions are only set when called explicitly anyways (bnc#720010).
* Wed Sep 21 2011 lnusselAATTsuse.de- fix typo in path
* Tue Sep 20 2011 lnusselAATTsuse.de- remove world writable /var/crash again (bnc#438041)- remove world writable permissions from /usr/src/packages (bnc#719217)
* Tue Sep 20 2011 lnusselAATTsuse.de- add chromium browser sandbox helper (bnc#718016)- don\'t offer PERMISSION_SECURITY in config anymore- remove setgid games bits (bnc#429882)
* Tue Jun 28 2011 lnusselAATTsuse.de- remove setuid bit from opiesu (bnc#698772)
* Fri Jun 17 2011 lnusselAATTsuse.de- disable fscaps by default as factory kernel still doesn\'t have the required patch for auto detection
* Thu May 26 2011 lnusselAATTsuse.de- read /sys/kernel/fscaps for fscaps settings
* Thu May 12 2011 lnusselAATTsuse.de- change path to gnome-pty-helper (bnc#690202)
* Mon Mar 07 2011 lnusselAATTsuse.de- setuid bit on VBoxNetDHCP (bnc#669055)
* Mon Feb 14 2011 lnusselAATTsuse.de- fix hawk permissions (bnc#665045)
* Wed Feb 09 2011 lnusselAATTsuse.de- add hawk (bnc#665045)
* Thu Dec 02 2010 lnusselAATTsuse.de- remove Xorg setuid bit (bnc#632737)
* Thu Nov 18 2010 lnusselAATTsuse.de- update permissions of lastlog, faillog, wtmp, utmp and btmp
* Wed Nov 17 2010 lnusselAATTsuse.de- remove permissions handling for /etc/inittab, /etc/inetd.conf and /etc/mtab- revert previous commit, done in coreutils instead
* Tue Nov 16 2010 lnusselAATTsuse.de- change fillup deps to requires to avoid coreutils loop
* Tue Nov 16 2010 lnusselAATTsuse.de- change utempter from group tty to group utmp (bnc#652877)
* Tue Nov 09 2010 lnusselAATTsuse.de- add permissions man page- update docu- add --level option- set perms for setuid files always if owner changes- strip root dir when printing file names
* Tue Nov 09 2010 lnusselAATTsuse.de- add option to explicitly warn only
* Fri Nov 05 2010 lnusselAATTsuse.de- reimplement the core features in chkstat itself instead of SuSEconfig.permissions
* Thu Nov 04 2010 lnusselAATTsuse.de- don\'t make changes if not called explicitly
* Wed Nov 03 2010 lnusselAATTsuse.de- add support for file system capabilities
* Mon Oct 18 2010 lnusselAATTsuse.de- remove vlock (bnc#629236#c13)
* Tue Oct 05 2010 lnusselAATTsuse.de- update path to gnome-pty-helper (bnc#634199)
* Wed Sep 22 2010 lnusselAATTsuse.de- vlock -> vlock-main (bnc#629236)
* Mon Jun 28 2010 jengelhAATTmedozas.de- use %_smp_mflags
* Fri Apr 23 2010 lnusselAATTsuse.de- add lockdev (bnc#588325)
* Wed Apr 07 2010 lnusselAATTsuse.de- update for innd update (bnc#594393)- remove lppasswd (bnc#574336)
* Tue Dec 08 2009 jengelhAATTmedozas.de- enable parallel building
* Wed Oct 07 2009 lnusselAATTsuse.de- add /usr/lib/virtualbox/VBoxNetAdpCtl (bnc#533550)
* Thu Aug 27 2009 lnusselAATTsuse.de- add /usr/src/packages/BUILDROOT/ for rpm 4.7
* Wed Aug 26 2009 lnusselAATTsuse.de- add more arm directories to /usr/src/packages/RPMS/
* Mon Aug 24 2009 lnusselAATTsuse.de- remove permissions handling for traceroute6 and cdrecord which are symlinks nowadays
* Thu Aug 20 2009 lnusselAATTsuse.de- fix weird sendfax permissions (bnc#525954)
* Wed Aug 19 2009 lnusselAATTsuse.de- permissions now maintained at gitorious so use tarball instead of individual files
* Wed Aug 12 2009 meissnerAATTsuse.de- added polkit setuid root helpers after review (bnc#523377)
* Fri Aug 07 2009 meissnerAATTsuse.de- also added KDE4 start_kdeinit (same source as kde3 start_kdeinit), bnc#523833
* Thu Aug 06 2009 meissnerAATTsuse.de- open-vm-tools gets setuid root:root in mode easy (bnc#474285)
* Tue Jul 28 2009 lnusselAATTsuse.de- hylafax directory permissions are handled by the package - change group of amanda binaries (bnc#523006)
* Mon Mar 02 2009 lnusselAATTsuse.de- add some missing slashes to directories and remove entries for at and cron (bnc#480855)