Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at Tue Apr 20 02:27:08 CEST 2010. -------- --- permissions/permissions.changes 2009-12-08 10:18:38.000000000 +0100 +++ /mounts/work_src_done/STABLE/permissions/permissions.changes 2010-04-07 16:46:52.000000000 +0200 @@ -1,0 +2,6 @@ +Wed Apr 7 14:45:28 UTC 2010 - lnussel@suse.de + +- update for innd update (bnc#594393) +- remove lppasswd (bnc#574336) + +------------------------------------------------------------------- calling whatdependson for head-i586 Old: ---- permissions-2009.10.07.1653.tar.bz2 New: ---- permissions-2010.04.07.1644.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.VLMHlC/_old 2010-04-20 02:26:43.000000000 +0200 +++ /var/tmp/diff_new_pack.VLMHlC/_new 2010-04-20 02:26:43.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package permissions (Version 2009.10.07.1653) +# spec file for package permissions (Version 2010.04.07.1644) # # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -23,8 +23,8 @@ License: GPLv2+ Group: Productivity/Security AutoReqProv: on -Version: 2009.10.07.1653 -Release: 2 +Version: 2010.04.07.1644 +Release: 1 Provides: aaa_base:/etc/permissions Requires: /sbin/SuSEconfig PreReq: %fillup_prereq ++++++ permissions-2009.10.07.1653.tar.bz2 -> permissions-2010.04.07.1644.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2009.10.07.1653/permissions.easy new/permissions-2010.04.07.1644/permissions.easy --- old/permissions-2009.10.07.1653/permissions.easy 2009-10-07 16:53:49.000000000 +0200 +++ new/permissions-2010.04.07.1644/permissions.easy 2010-04-07 16:44:35.000000000 +0200 @@ -190,11 +190,6 @@ /usr/sbin/change-passwd root:root 4755 # -# cups (#66305,#406058) -# -/usr/bin/lppasswd lp:lp 2755 - -# # smb printing with kerberos authentication (#177114) # /usr/bin/get_printing_ticket root:lp 4750 @@ -300,16 +295,14 @@ # # news (inn) # -# the inn start script changes it's uid to news:news. Later innstart and -# innfeed are called by this user. Those programs do not need to be called by -# anyone else, therefore the strange permissions 4554 are required for -# operation. (#67032) +# the inn start script changes it's uid to news:news. Later innbind +# is called by this user. Those programs do not need to be called by +# anyone else, therefore the strange permissions 4554 are required +# for operation. (#67032, #594393) # /usr/lib/news/bin/rnews news:uucp 4550 -/usr/lib/news/bin/startinnfeed root:news 4554 -/usr/lib/news/bin/inndstart root:news 4554 /usr/lib/news/bin/inews news:news 2555 - +/usr/lib/news/bin/innbind root:news 4554 # # sendfax diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2009.10.07.1653/permissions.local new/permissions-2010.04.07.1644/permissions.local --- old/permissions-2009.10.07.1653/permissions.local 2009-10-07 16:53:49.000000000 +0200 +++ new/permissions-2010.04.07.1644/permissions.local 2010-04-07 16:44:35.000000000 +0200 @@ -29,4 +29,14 @@ # This file needs to end with a newline. # # example: -#/usr/bin/sperl5.8.8 root:root 4755 +#/usr/bin/sperl5.10.8 root:root 4755 +# + +# +# suexec is only secure if the document root doesn't contain files +# writeable by wwwrun. Make sure you have a safe server setup +# before setting the setuid bit! See also +# https://bugzilla.novell.com/show_bug.cgi?id=263789 +# http://httpd.apache.org/docs/trunk/suexec.html +# +#/usr/sbin/suexec2 root:root 4755 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2009.10.07.1653/permissions.paranoid new/permissions-2010.04.07.1644/permissions.paranoid --- old/permissions-2009.10.07.1653/permissions.paranoid 2009-10-07 16:53:49.000000000 +0200 +++ new/permissions-2010.04.07.1644/permissions.paranoid 2010-04-07 16:44:35.000000000 +0200 @@ -206,11 +206,6 @@ /usr/sbin/change-passwd root:root 0755 # -# cups (#66305,#406058) -# -/usr/bin/lppasswd lp:lp 0755 - -# # smb printing with kerberos authentication (#177114) # /usr/bin/get_printing_ticket root:lp 0755 @@ -313,16 +308,14 @@ # # news (inn) # -# the inn start script changes it's uid to news:news. Later innstart and -# innfeed are called by this user. Those programs do not need to be called by -# anyone else, therefore the strange permissions 4554 are required for -# operation. (#67032) +# the inn start script changes it's uid to news:news. Later innbind +# is called by this user. Those programs do not need to be called by +# anyone else, therefore the strange permissions 4554 are required +# for operation. (#67032, #594393) # /usr/lib/news/bin/rnews news:uucp 0555 -/usr/lib/news/bin/startinnfeed root:news 0555 -/usr/lib/news/bin/inndstart root:news 0555 /usr/lib/news/bin/inews news:news 0555 - +/usr/lib/news/bin/innbind root:news 0555 # # sendfax diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-2009.10.07.1653/permissions.secure new/permissions-2010.04.07.1644/permissions.secure --- old/permissions-2009.10.07.1653/permissions.secure 2009-10-07 16:53:49.000000000 +0200 +++ new/permissions-2010.04.07.1644/permissions.secure 2010-04-07 16:44:35.000000000 +0200 @@ -228,11 +228,6 @@ /usr/sbin/change-passwd root:root 4755 # -# cups (#66305,#406058) -# -/usr/bin/lppasswd lp:lp 2755 - -# # smb printing with kerberos authentication (#177114) # /usr/bin/get_printing_ticket root:lp 4750 @@ -337,16 +332,14 @@ # # news (inn) # -# the inn start script changes it's uid to news:news. Later innstart and -# innfeed are called by this user. Those programs do not need to be called by -# anyone else, therefore the strange permissions 4554 are required for -# operation. (#67032) +# the inn start script changes it's uid to news:news. Later innbind +# is called by this user. Those programs do not need to be called by +# anyone else, therefore the strange permissions 4554 are required +# for operation. (#67032, #594393) # /usr/lib/news/bin/rnews news:uucp 4550 -/usr/lib/news/bin/startinnfeed root:news 4554 -/usr/lib/news/bin/inndstart root:news 4554 /usr/lib/news/bin/inews news:news 2555 - +/usr/lib/news/bin/innbind root:news 4554 # # sendfax ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org