Bug ID 1208955
Summary sysctl.d entry for ocserv
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter dimstar@opensuse.org
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

Recently, rpmlnit was changed to block sysctl.d snippets in packages.

ocserv seems to be one that has not been handled/reviewed before this was
enforced in Factory, which results in the package currently failing to build:

https://build.opensuse.org/package/live_build_log/openSUSE:Factory/ocserv/standard/x86_64

[   48s] ocserv.x86_64: E: sysctl-file-unauthorized (Badness: 10000)
/etc/sysctl.d/60-ocserv.conf (sha256 file digest default
filter:153ef04bf08fb4d9a74b94982a2f01994ad5716c99f5d51dece40fd39666da23 shell
filter:153ef04bf08fb4d9a74b94982a2f01994ad5716c99f5d51dece40fd39666da23 xml
filter:<failed-to-calculate>)
[   48s] Packaging sysctl.d drop-in configuration files requires a review and
[   48s] whitelisting by the SUSE security team. If the package is intended for
[   48s] inclusion in any SUSE product please open a bug report to request
review of
[   48s] the package by the security team. Please refer to
[   48s]
https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[   48s] more information.


You are receiving this mail because: