Hello community,
here is the log from the commit of package brp-check-suse
checked in at Wed Oct 22 15:31:14 CEST 2008.
--------
--- brp-check-suse/brp-check-suse.changes 2008-10-15 03:07:05.000000000 +0200
+++ /mounts/work_src_done/STABLE/brp-check-suse/brp-check-suse.changes 2008-10-16 14:49:37.000000000 +0200
@@ -1,0 +2,7 @@
+Thu Oct 16 14:48:33 CEST 2008 - thomas@suse.de
+
+- added script to detect yet unknown dbus autostart system-service
+ files, the set of known files can be updated using a whitelist
+ (generated for all archs of 11.0)
+
+-------------------------------------------------------------------
calling whatdependson for head-i586
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ brp-check-suse.spec ++++++
--- /var/tmp/diff_new_pack.ccX463/_old 2008-10-22 15:30:53.000000000 +0200
+++ /var/tmp/diff_new_pack.ccX463/_new 2008-10-22 15:30:53.000000000 +0200
@@ -24,7 +24,7 @@
AutoReqProv: on
Summary: build root policy check scripts
Version: 1.0
-Release: 11
+Release: 12
Source0: %{name}-%{version}.tar.bz2
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
@@ -56,6 +56,10 @@
/usr/lib/rpm/*
%changelog
+* Thu Oct 16 2008 thomas@suse.de
+- added script to detect yet unknown dbus autostart system-service
+ files, the set of known files can be updated using a whitelist
+ (generated for all archs of 11.0)
* Wed Oct 15 2008 ro@suse.de
- Add more legal Categories to desktop-data-openSUSE and brp-check
(bnc#430979)
++++++ brp-check-suse-1.0.tar.bz2 ++++++
diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/brp-check-suse-1.0/brp-dbus-autostart new/brp-check-suse-1.0/brp-dbus-autostart
--- old/brp-check-suse-1.0/brp-dbus-autostart 1970-01-01 01:00:00.000000000 +0100
+++ new/brp-check-suse-1.0/brp-dbus-autostart 2008-10-16 14:48:08.000000000 +0200
@@ -0,0 +1,53 @@
+#!/bin/sh
+# author: Thomas Biege
+# last update: 2008-09-22
+#
+# purpose: detect packages that want to install an unknown dbus
+# autostart service
+# note: edit macros.brp to include this script
+# see: http://techbase.kde.org/Development/Tutorials/D-Bus/Autostart_Services
+
+if [ -f /usr/lib/rpm/brp-dbus-autostart.data/whitelist ]
+then
+ WHITELIST=$(cat /usr/lib/rpm/brp-dbus-autostart.data/whitelist)
+else
+ echo "Warning: dbus autostart system-services whitelist file is missing."
+ exit 0
+fi
+
+# if using normal root, avoid changing anything.
+if [ -z "$RPM_BUILD_ROOT" -o "$RPM_BUILD_ROOT" = "/" ]; then
+ exit 0
+fi
+
+E=$(ls -1 $RPM_BUILD_ROOT/usr/share/dbus-*/system-services/*.service $RPM_BUILD_ROOT/etc/dbus-*/system.d/*.conf 2>/dev/null)
+if ! [ -z "$E" ]
+then
+ if [ -z "$WHITELIST" ] # we do not have a whitelist
+ then
+ echo "Warning: This package installs an unknown D-BUS autostart system-service. Please contact security-team@suse.de"
+ exit 1 # do stop build process
+ fi
+
+ for i in $E
+ do
+ DF=$(basename $i)
+
+ FOUND=0
+ for j in $WHITELIST
+ do
+ if [ "$DF" == "$j" ]
+ then
+ FOUND=1
+ fi
+ done
+ if [ $FOUND -eq 0 ]
+ then
+ echo "Warning: This package installs an unknown D-BUS autostart system-service. Please contact security-team@suse.de: $DF"
+ exit 1 # do stop build process
+ fi
+ done
+fi
+
+exit 0
+
diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist new/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist
--- old/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist 1970-01-01 01:00:00.000000000 +0100
+++ new/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist 2008-10-16 14:47:01.000000000 +0200
@@ -0,0 +1,49 @@
+avahi-dbus.conf
+backup-manager.conf
+bluetooth.conf
+com.google.code.BackupManager.service
+com.novell.Pkcs11Monitor.conf
+ConsoleKit.conf
+cups.conf
+fi.epitest.hostap.WPASupplicant.service
+galago-daemon.conf
+gdm.conf
+hal.conf
+kerneloops.dbus
+knetworkmanager.conf
+NetworkManager.conf
+newprinternotification.conf
+nm-applet.conf
+nm-avahi-autoipd.conf
+nm-dhcp-client.conf
+nm-dispatcher.conf
+nm-novellvpn-service.conf
+nm-openvpn-service.conf
+nm-pptp-service.conf
+nm-system-settings.conf
+nm-vpnc-service.conf
+org.bluez.service
+org.freedesktop.ConsoleKit.service
+org.freedesktop.ModemManager.conf
+org.freedesktop.ModemManager.service
+org.freedesktop.NetworkManagerSystemSettings.service
+org.freedesktop.nm_dispatcher.service
+org.freedesktop.PackageKit.conf
+org.freedesktop.PackageKit.service
+org.freedesktop.PolicyKit.conf
+org.freedesktop.PolicyKit.service
+org.gnome.ClockApplet.Mechanism.conf
+org.gnome.ClockApplet.Mechanism.service
+org.gnome.GConf.Defaults.conf
+org.gnome.GConf.Defaults.service
+org.opensuse.CupsPkHelper.Mechanism.conf
+org.opensuse.CupsPkHelper.Mechanism.service
+org.opensuse.yast.SCR.conf
+org.opensuse.yast.SCR.service
+pommed.conf
+powersave.conf
+system.d
+upsd.conf
+wpa_supplicant.conf
+xorg-server.conf
+yum-updatesd.conf
diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/brp-check-suse-1.0/macros.brp new/brp-check-suse-1.0/macros.brp
--- old/brp-check-suse-1.0/macros.brp 2008-08-11 15:38:42.000000000 +0200
+++ new/brp-check-suse-1.0/macros.brp 2008-10-16 13:29:23.000000000 +0200
@@ -13,5 +13,6 @@
/usr/lib/rpm/brp-check-bytecode-version \
/usr/lib/rpm/brp-boot-scripts \
/usr/lib/rpm/brp-hook \
+ /usr/lib/rpm/brp-dbus-autostart \
%{nil}
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Remember to have fun...
--
To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-commit+help@opensuse.org