January 2018 - openSUSE Commits - openSUSE Mailing Lists

commit libssh for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package libssh for openSUSE:Factory checked in at 2018-01-01 22:09:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libssh (Old) and /work/SRC/openSUSE:Factory/.libssh.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libssh" Mon Jan 1 22:09:11 2018 rev:46 rq:560272 version:0.7.5 Changes: -------- --- /work/SRC/openSUSE:Factory/libssh/libssh.changes 2017-10-02 16:50:56.681837014 +0200 +++ /work/SRC/openSUSE:Factory/.libssh.new/libssh.changes 2018-01-01 22:09:13.800836532 +0100 @@ -1,0 +2,6 @@ +Sun Dec 24 14:41:46 UTC 2017 - fabian(a)ritter-vogt.de + +- Add patch to fix parsing of config files (boo#1067782): + * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch + +------------------------------------------------------------------- New: ---- 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libssh.spec ++++++ --- /var/tmp/diff_new_pack.3rV0Ex/_old 2018-01-01 22:09:19.514928836 +0100 +++ /var/tmp/diff_new_pack.3rV0Ex/_new 2018-01-01 22:09:19.518927501 +0100 @@ -38,6 +38,8 @@ Patch6: 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch Patch7: 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch # END of OpenSSL 1.1 support patches +# PATCH-FIX-UPSTREAM Fix parsing of config files (boo#1067782) +Patch10: 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch BuildRequires: cmake BuildRequires: doxygen BuildRequires: gcc-c++ @@ -98,6 +100,7 @@ %patch5 -p1 %patch6 -p1 %patch7 -p1 +%patch10 -p1 %build %cmake \ ++++++ 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch ++++++ >From 5333be5988c3789e7011598995f4df90d50d84d0 Mon Sep 17 00:00:00 2001 From: "Artyom V. Poptsov" <poptsov.artyom(a)gmail.com> Date: Sun, 4 Jun 2017 11:54:55 +0300 Subject: config: Bugfix: Don't skip unseen opcodes libssh fails to read the configuration from a config file due to a wrong check in 'ssh_config_parse_line' procedure in 'config.c'; it's effectively skipping every opcode (and therefore every option) from the file. The change fixes that behaviour. Signed-off-by: Artyom V. Poptsov <poptsov.artyom(a)gmail.com> Reviewed-by: Andreas Schneider <asn(a)cryptomilk.org> --- src/config.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/config.c b/src/config.c index 6478fc5f..519926e7 100644 --- a/src/config.c +++ b/src/config.c @@ -219,7 +219,7 @@ static int ssh_config_parse_line(ssh_session session, const char *line, opcode = ssh_config_get_opcode(keyword); if (*parsing == 1 && opcode != SOC_HOST) { - if (seen[opcode] == 0) { + if (seen[opcode] != 0) { return 0; } seen[opcode] = 1; -- cgit v1.1

1 0

commit libuv for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package libuv for openSUSE:Factory checked in at 2018-01-01 22:08:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libuv (Old) and /work/SRC/openSUSE:Factory/.libuv.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libuv" Mon Jan 1 22:08:51 2018 rev:11 rq:560261 version:1.18.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libuv/libuv.changes 2017-11-11 14:17:12.276480963 +0100 +++ /work/SRC/openSUSE:Factory/.libuv.new/libuv.changes 2018-01-01 22:09:05.495609299 +0100 @@ -1,0 +2,49 @@ +Sun Dec 24 22:24:45 UTC 2017 - avindra(a)opensuse.org + +- Update to version 1.18.0 + * unix,win: add uv_os_getpid() + * unix: remove incorrect assertion in uv_shutdown() + * aix: fix -Wmaybe-uninitialized warning + * win,doc: remove note about SIGWINCH on Windows + * doc: fix IRC URL in CONTRIBUTING.md +- 1.17.0 + * ibmi: add support for new platform + * unix: keep track of bound sockets sent via spawn + * unix: avoid malloc() call in uv_spawn() + * zos: add strnlen() implementation + * test: add threadpool init/teardown test + * test: avoid malloc() in threadpool test + * test: lower number of tasks in threadpool test + * test: fix test-spawn compilation + * doc: clarify the description of uv_loop_alive() + * win: issue memory barrier in uv_thread_join() + * win: map UV_FS_O_EXLOCK to a share mode of 0 + * win: fix build on case-sensitive file systems + * win: fix test runner build with mingw64 + * win: remove unused variable in test/test-fs.c +- 1.16.1 + * unix: move net/if.h include + * win: fix undeclared NDIS_IF_MAX_STRING_SIZE +- 1.16.0 + * unix,win: add fs open flags, map O_DIRECT|O_DSYNC + * win, fs: fix non-symlink reparse points + * test: fix -Wstrict-prototypes warnings + * unix, windows: map ENOTTY errno + * unix: fall back to fsync() if F_FULLFSYNC fails + * unix: do not close invalid kqueue fd after fork + * zos: reset epoll data after fork + * zos: skip fork_threadpool_queue_work_simple + * test: keep platform_output as first test + * unix,win: add uv_os_getppid() + * test: fix const qualification compiler warning + * doc: mark uv_default_loop() as not thread safe + * win, pipe: null-initialize stream->shutdown_req + * tty, win: get SetWinEventHook pointer at startup + * test: no extra new line in skipped test output + * pipe: allow access from other users + * unix,win: add uv_if_{indextoname,indextoiid} + * win: fix non-English dlopen error message + * win: change st_blksize from `2048` to `4096` +- Small spec file cleanup + +------------------------------------------------------------------- Old: ---- libuv-1.15.0.tar.gz New: ---- libuv-1.18.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libuv.spec ++++++ --- /var/tmp/diff_new_pack.yXhgmZ/_old 2018-01-01 22:09:06.931130039 +0100 +++ /var/tmp/diff_new_pack.yXhgmZ/_new 2018-01-01 22:09:06.935128704 +0100 @@ -18,7 +18,7 @@ %define somajor 1 Name: libuv -Version: 1.15.0 +Version: 1.18.0 Release: 0 Summary: Asychronous I/O support library License: MIT @@ -62,7 +62,7 @@ Mozilla's Rust language, Luvit, Julia, pyuv, and others. %prep -%setup -q -n %{name}-%{version} +%setup -q %build ./autogen.sh ++++++ libuv-1.15.0.tar.gz -> libuv-1.18.0.tar.gz ++++++ ++++ 3359 lines of diff (skipped)

1 0

commit NetworkManager-applet for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package NetworkManager-applet for openSUSE:Factory checked in at 2018-01-01 22:08:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/NetworkManager-applet (Old) and /work/SRC/openSUSE:Factory/.NetworkManager-applet.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "NetworkManager-applet" Mon Jan 1 22:08:33 2018 rev:12 rq:560180 version:1.8.6 Changes: -------- --- /work/SRC/openSUSE:Factory/NetworkManager-applet/NetworkManager-applet.changes 2017-12-21 11:26:20.656324012 +0100 +++ /work/SRC/openSUSE:Factory/.NetworkManager-applet.new/NetworkManager-applet.changes 2018-01-01 22:08:43.546937037 +0100 @@ -1,0 +2,10 @@ +Wed Dec 27 15:59:35 UTC 2017 - dimstar(a)opensuse.org + +- Allow for easy switch between meson and autoconf, using + bcond_with (default to autoconf for now): Switch back to autoconf + build system: meson is not ready and breaks nm-connection-editor + (incompletely linked resources, boo#1072789). + + In case of autoconf, add libtool BuildRequires, call autoreconf + and use configure/make/mak_install. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ NetworkManager-applet.spec ++++++ --- /var/tmp/diff_new_pack.6x4eTr/_old 2018-01-01 22:08:45.274360324 +0100 +++ /var/tmp/diff_new_pack.6x4eTr/_new 2018-01-01 22:08:45.286356319 +0100 @@ -22,6 +22,8 @@ %bcond_with appindicator %endif +%bcond_with meson + %define with_cacert_patch 0 %define sover 0 %define _name network-manager-applet @@ -43,7 +45,11 @@ Patch3: 0001-build-meson-fix-typo-in-generation-of-libnm-gtk.pc.patch BuildRequires: gtk-doc BuildRequires: intltool +%if %{with meson} BuildRequires: meson +%else +BuildRequires: libtool +%endif BuildRequires: pkgconfig # Needed by Patch0. BuildRequires: polkit-devel @@ -181,15 +187,28 @@ %patch3 -p1 %build +%if %{with meson} %meson \ %if %{with appindicator} -Denable-appindicator=true \ %endif -Denable-selinux=false %meson_build +%else +autoreconf -fiv +%configure \ + --disable-static \ + --without-selinux +%make_build +%endif %install +%if %{with meson} %meson_install +%else +%make_install +find %{buildroot} -type f -name '*.la' -delete -print +%endif %suse_update_desktop_file -r nm-connection-editor GTK GNOME System X-SuSE-ServiceConfiguration %find_lang nm-applet %{?no_lang_C}

1 0

commit gstreamer-plugins-good for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package gstreamer-plugins-good for openSUSE:Factory checked in at 2018-01-01 22:06:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gstreamer-plugins-good (Old) and /work/SRC/openSUSE:Factory/.gstreamer-plugins-good.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gstreamer-plugins-good" Mon Jan 1 22:06:49 2018 rev:51 rq:560097 version:1.12.4 Changes: -------- --- /work/SRC/openSUSE:Factory/gstreamer-plugins-good/gstreamer-plugins-good.changes 2017-12-14 10:52:47.929182995 +0100 +++ /work/SRC/openSUSE:Factory/.gstreamer-plugins-good.new/gstreamer-plugins-good.changes 2018-01-01 22:06:57.706275923 +0100 @@ -1,0 +2,9 @@ +Sat Dec 23 01:30:08 UTC 2017 - zaitor(a)opensuse.org + +- Add + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch: + equalizer: Fix -Wincompatible-pointer-types warning (bgo#791494). +- Clean up spec with spec-cleaner. +- Toggle ENABLE_AALIB, no longer build aasink support. + +------------------------------------------------------------------- New: ---- gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gstreamer-plugins-good.spec ++++++ --- /var/tmp/diff_new_pack.7blVGB/_old 2018-01-01 22:06:58.881883070 +0100 +++ /var/tmp/diff_new_pack.7blVGB/_new 2018-01-01 22:06:58.881883070 +0100 @@ -17,14 +17,14 @@ # aasink is just a toy. Once in future, we may want to disable aalib -# support completely: -%define ENABLE_AALIB 1 +# support completely: Disabled 25/12/17 +%define ENABLE_AALIB 0 +%define _name gst-plugins-good +%define gst_branch 1.0 Name: gstreamer-plugins-good -%define _name gst-plugins-good Version: 1.12.4 Release: 0 -%define gst_branch 1.0 Summary: GStreamer Streaming-Media Framework Plug-Ins License: LGPL-2.1+ Group: Productivity/Multimedia/Other @@ -32,9 +32,10 @@ Source0: https://gstreamer.freedesktop.org/src/gst-plugins-good/%{_name}-%{version}.… Source1: gstreamer-plugins-good.appdata.xml Source99: baselibs.conf -%if 0%{?ENABLE_AALIB} -BuildRequires: aalib-devel -%endif + +# PATCH-FIX-UPSTREAM gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch bgo#791494 zaitor(a)opensuse.org -- equalizer: Fix -Wincompatible-pointer-types warning +Patch0: gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch + BuildRequires: gcc-c++ BuildRequires: gtk-doc >= 1.12 BuildRequires: libICE-devel @@ -45,11 +46,9 @@ BuildRequires: libbz2-devel BuildRequires: libjpeg-devel BuildRequires: orc >= 0.4.16 +BuildRequires: pkgconfig BuildRequires: python3-base BuildRequires: python3-xml -%if !0%{?is_opensuse} -BuildRequires: translation-update-upstream -%endif BuildRequires: zlib-devel BuildRequires: pkgconfig(caca) BuildRequires: pkgconfig(cairo) >= 1.10.0 @@ -89,7 +88,12 @@ Enhances: gstreamer # Generic name, never used in SuSE: I wish it had been used I would have used it then I wouldn't have to keep copy pasting and actually type it. Provides: gst-plugins-good = %{version} -BuildRoot: %{_tmppath}/%{name}-%{version}-build +%if 0%{?ENABLE_AALIB} +BuildRequires: aalib-devel +%endif +%if !0%{?is_opensuse} +BuildRequires: translation-update-upstream +%endif %description GStreamer is a streaming media framework based on graphs of filters @@ -117,14 +121,15 @@ gstreamer-plugins-good. %lang_package + %prep -%setup -q -n %{_name}-%{version} +%autosetup -n %{_name}-%{version} -p1 %if !0%{?is_opensuse} translation-update-upstream po gst-plugins-good-%{gst_branch} %endif %build -export PYTHON=/usr/bin/python3 +export PYTHON=%{_bindir}/python3 %configure\ --with-package-name='openSUSE GStreamer-plugins-good package'\ --with-package-origin='http://download.opensuse.org'\ @@ -134,22 +139,21 @@ --enable-gtk-doc\ --enable-v4l2-probe\ --enable-experimental -make %{?jobs:-j%jobs} +make %{?_smp_mflags} %install -%makeinstall +%make_install %find_lang %{_name}-%{gst_branch} if [ -f %{buildroot}%{_datadir}/appdata/gstreamer-plugins-good.appdata.xml ]; then echo "Please remove the added gstreamer-plugins-good.appdata.xml file from the sources - the tarball installs it" false else mkdir -p %{buildroot}%{_datadir}/appdata - cp %{S:1} %{buildroot}%{_datadir}/appdata/ + cp %{SOURCE1} %{buildroot}%{_datadir}/appdata/ fi -rm $RPM_BUILD_ROOT%{_libdir}/gstreamer-%{gst_branch}/*.*a +rm %{buildroot}%{_libdir}/gstreamer-%{gst_branch}/*.*a %files -%defattr(-, root, root) %doc AUTHORS COPYING NEWS README RELEASE REQUIREMENTS %dir %{_datadir}/appdata %{_datadir}/appdata/gstreamer-plugins-good.appdata.xml @@ -221,11 +225,9 @@ %files lang -f %{_name}-%{gst_branch}.lang %files doc -%defattr(-, root, root) %{_datadir}/gtk-doc/html/gst-plugins-good-plugins-%{gst_branch} %files extra -%defattr(-, root, root) %{_libdir}/gstreamer-%{gst_branch}/libgst1394.so %if 0%{?ENABLE_AALIB} %{_libdir}/gstreamer-%{gst_branch}/libgstaasink.so ++++++ gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch ++++++ >From 2cc3d98d5cb0f6068f36b429ebf575e188112345 Mon Sep 17 00:00:00 2001 From: Michael Catanzaro <mcatanzaro(a)igalia.com> Date: Mon, 11 Dec 2017 15:27:08 -0600 Subject: equalizer: Fix -Wincompatible-pointer-types warning This is caused by the new type propagation for g_object_ref. https://bugzilla.gnome.org/show_bug.cgi?id=791494 --- gst/equalizer/gstiirequalizer.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gst/equalizer/gstiirequalizer.c b/gst/equalizer/gstiirequalizer.c index eb23d21..210296b 100644 --- a/gst/equalizer/gstiirequalizer.c +++ b/gst/equalizer/gstiirequalizer.c @@ -323,7 +323,7 @@ gst_iir_equalizer_child_proxy_get_child_by_index (GstChildProxy * child_proxy, g_return_val_if_fail (index < equ->freq_band_count, NULL); } - ret = g_object_ref (equ->bands[index]); + ret = g_object_ref (G_OBJECT (equ->bands[index])); BANDS_UNLOCK (equ); GST_LOG_OBJECT (equ, "return child[%d] %" GST_PTR_FORMAT, index, ret); -- cgit v1.1

1 0

commit clutter-gst for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package clutter-gst for openSUSE:Factory checked in at 2018-01-01 22:06:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/clutter-gst (Old) and /work/SRC/openSUSE:Factory/.clutter-gst.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "clutter-gst" Mon Jan 1 22:06:38 2018 rev:56 rq:560082 version:3.0.24 Changes: -------- --- /work/SRC/openSUSE:Factory/clutter-gst/clutter-gst.changes 2017-04-29 10:47:52.656090904 +0200 +++ /work/SRC/openSUSE:Factory/.clutter-gst.new/clutter-gst.changes 2018-01-01 22:06:46.741939885 +0100 @@ -1,0 +2,7 @@ +Sat Dec 23 12:40:01 UTC 2017 - zaitor(a)opensuse.org + +- Add clutter-gst-video-sink-fix-compilation-error.patch: + video-sink: Fix compilation error. +- Clean up spec with spec-cleaner, use modern macros. + +------------------------------------------------------------------- New: ---- clutter-gst-video-sink-fix-compilation-error.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ clutter-gst.spec ++++++ --- /var/tmp/diff_new_pack.8Z4pS6/_old 2018-01-01 22:06:48.329409399 +0100 +++ /var/tmp/diff_new_pack.8Z4pS6/_new 2018-01-01 22:06:48.333408062 +0100 @@ -25,6 +25,10 @@ Group: Development/Libraries/C and C++ Source0: http://download.gnome.org/sources/clutter-gst/3.0/%{name}-%{version}.tar.xz Source99: baselibs.conf +# PATCH-FIX-UPSTREAM clutter-gst-video-sink-fix-compilation-error.patch zaitor(a)opensuse.org -- video-sink: Fix compilation error +Patch0: clutter-gst-video-sink-fix-compilation-error.patch + +BuildRequires: pkgconfig BuildRequires: pkgconfig(clutter-1.0) >= 1.20.0 BuildRequires: pkgconfig(cogl-2.0-experimental) >= 2.0.0 BuildRequires: pkgconfig(gobject-introspection-1.0) @@ -35,7 +39,6 @@ BuildRequires: pkgconfig(gstreamer-tag-1.0) BuildRequires: pkgconfig(gstreamer-video-1.0) BuildRequires: pkgconfig(gudev-1.0) -BuildRoot: %{_tmppath}/%{name}-%{version}-build %define debug_package_requires libclutter-gst-3_0-0 = %{version}-%{release} %description @@ -95,38 +98,35 @@ Clutter GStreamer enables the use of GStreamer with Clutter. %prep -%setup -q +%autosetup -p1 %build -%configure --disable-static -make %{?_smp_mflags} +%configure \ + --disable-static \ + %{nil} +%make_build %install -%makeinstall -find %{buildroot}%{_libdir} -name '*.la' -delete -print +%make_install +find %{buildroot}%{_libdir} -type f -name "*.la" -delete -print %check make %{?_smp_mflags} check %post -n libclutter-gst-3_0-0 -p /sbin/ldconfig - %postun -n libclutter-gst-3_0-0 -p /sbin/ldconfig %files -n libclutter-gst-3_0-0 -%defattr(-,root,root) %doc README COPYING %{_libdir}/*.so.* %files -n typelib-1_0-ClutterGst-3_0 -%defattr(-,root,root) %{_libdir}/girepository-1.0/ClutterGst-3.0.typelib %files -n gstreamer-plugin-gstclutter-3_0 -%defattr(-,root,root) %{_libdir}/gstreamer-1.0/libgstclutter-3.0.so %files devel -%defattr(-,root,root) %{_libdir}/*.so %{_includedir}/clutter-gst-3.0/ %{_libdir}/pkgconfig/*.pc ++++++ clutter-gst-video-sink-fix-compilation-error.patch ++++++ >From 3b3c5d4927968f1bd823c4869425897dd2c57768 Mon Sep 17 00:00:00 2001 From: Bastien Nocera <hadess(a)hadess.net> Date: Thu, 13 Apr 2017 10:40:17 +0200 Subject: video-sink: Fix compilation error MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit clutter-gst-video-sink.c: In function ‘clutter_gst_video_sink_setup_balance’: clutter-gst-video-sink.c:831:44: error: format not a string literal, argument types not checked [-Werror=format-nonliteral] priv->custom_start + 2); ^~~~ https://bugzilla.gnome.org/show_bug.cgi?id=781264 --- clutter-gst/clutter-gst-video-sink.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/clutter-gst/clutter-gst-video-sink.c b/clutter-gst/clutter-gst-video-sink.c index f325a09..2cbabe6 100644 --- a/clutter-gst/clutter-gst-video-sink.c +++ b/clutter-gst/clutter-gst-video-sink.c @@ -796,6 +796,9 @@ static const gchar *color_balance_shader = " return clutter_gst_yuv_to_rgb (corrected_yuv);\n" "}\n"; +#pragma GCC diagnostic push +#pragma GCC diagnostic ignored "-Wformat-nonliteral" + static void clutter_gst_video_sink_setup_balance (ClutterGstVideoSink *sink, CoglPipeline *pipeline) @@ -890,6 +893,8 @@ clutter_gst_video_sink_setup_balance (ClutterGstVideoSink *sink, } } +#pragma GCC diagnostic pop + /* YUV <-> RGB conversions */ static const gchar *no_color_conversions_shader = -- cgit v0.12

1 0

commit firewalld for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package firewalld for openSUSE:Factory checked in at 2018-01-01 22:06:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/firewalld (Old) and /work/SRC/openSUSE:Factory/.firewalld.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "firewalld" Mon Jan 1 22:06:22 2018 rev:24 rq:560080 version:0.4.4.6 Changes: -------- --- /work/SRC/openSUSE:Factory/firewalld/firewalld.changes 2017-12-03 10:09:30.731516473 +0100 +++ /work/SRC/openSUSE:Factory/.firewalld.new/firewalld.changes 2018-01-01 22:06:31.994867938 +0100 @@ -1,0 +2,7 @@ +Thu Dec 21 13:03:11 UTC 2017 - mchandras(a)suse.de + +- Introduce new python3-firewall and firewall-macros subpackages. + The first one contains the firewalld python3 bindings and the second + one contains the RPM macros for firewalld. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ firewalld.spec ++++++ --- /var/tmp/diff_new_pack.E2cWyh/_old 2018-01-01 22:06:33.662310726 +0100 +++ /var/tmp/diff_new_pack.E2cWyh/_new 2018-01-01 22:06:33.662310726 +0100 @@ -36,6 +36,7 @@ BuildRequires: automake BuildRequires: desktop-file-utils BuildRequires: docbook-xsl-stylesheets +BuildRequires: fdupes # Adding tools to BuildRequires as well so they can be autodetected # even though it is probably unlikely for paths to change in the future BuildRequires: ebtables @@ -49,13 +50,10 @@ BuildRequires: libxslt-tools BuildRequires: python3-devel BuildRequires: systemd-rpm-macros -Requires: dbus-1-python3 Requires: ebtables Requires: ipset Requires: iptables -Requires: python3-decorator -Requires: python3-gobject -Requires: python3-slip-dbus +Requires: python3-firewall = %{version} Requires: sysconfig Requires(post): %fillup_prereq Recommends: %{name}-lang @@ -67,6 +65,25 @@ firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. +%package -n python3-firewall +Summary: Python3 bindings for FirewallD +Group: Productivity/Networking/Security +Requires: dbus-1-python3 +Requires: python3-decorator +Requires: python3-gobject +Requires: python3-slip-dbus + +%description -n python3-firewall +The python3 bindings for firewalld. + +%package -n firewall-macros +Summary: FirewallD RPM macros +Group: Productivity/Networking/Security + +%description -n firewall-macros +This package provides the firewalld RPM macros file needed by packages +which provide their own firewalld service files. + %package -n firewall-applet Summary: Firewall panel applet Group: Productivity/Networking/Security @@ -116,6 +133,9 @@ %py3_compile %{buildroot} +# remove files that shouldn't exist in the final rpms +rm -r %{buildroot}%{_datadir}/%{name}/__pycache__ + desktop-file-install --delete-original \ --dir %{buildroot}%{_sysconfdir}/xdg/autostart \ %{buildroot}%{_sysconfdir}/xdg/autostart/firewall-applet.desktop @@ -134,6 +154,8 @@ rm %{buildroot}%{_rpmconfigdir}/macros.d/macros.firewalld install -D -m644 config/macros.firewalld %{buildroot}%{_sysconfdir}/rpm/macros.firewalld +%fdupes %{buildroot}%{python3_sitelib} + %find_lang %{name} --all-name %pre @@ -191,9 +213,21 @@ %{_bindir}/firewallctl %dir %{_datadir}/bash-completion/completions %{_datadir}/bash-completion/completions/firewall-cmd -%{_libexecdir}/firewalld +%dir %{_libexecdir}/firewalld +%dir %{_libexecdir}/firewalld/icmptypes +%dir %{_libexecdir}/firewalld/ipsets +%dir %{_libexecdir}/firewalld/services +%dir %{_libexecdir}/firewalld/zones +%dir %{_libexecdir}/firewalld/helpers +%dir %{_libexecdir}/firewalld/xmlschema +%{_libexecdir}/firewalld/icmptypes/*.xml +%{_libexecdir}/firewalld/ipsets/README +%{_libexecdir}/firewalld/services/*.xml +%{_libexecdir}/firewalld/zones/*.xml +%{_libexecdir}/firewalld/helpers/*.xml +%{_libexecdir}/firewalld/xmlschema/check.sh +%{_libexecdir}/firewalld/xmlschema/*.xsd %{_datadir}/polkit-1 -%config %{_sysconfdir}/rpm/macros.firewalld %dir %{_sysconfdir}/dbus-1 %dir %{_sysconfdir}/dbus-1/system.d %dir %{_sysconfdir}/modprobe.d @@ -211,14 +245,36 @@ %{_unitdir}/firewalld.service %{_fillupdir}/sysconfig.%{name} %config(noreplace) %{_sysconfdir}/dbus-1/system.d/FirewallD.conf -%attr(0755,root,root) %dir %{python3_sitelib}/firewall -%{_datadir}/firewalld/__pycache__ -%{python3_sitelib}/firewall/* %{_mandir}/man1/firewall*cmd*.1* %{_mandir}/man1/firewalld*.1* %{_mandir}/man1/firewallctl*.1* %{_mandir}/man5/firewall*.5* +%files -n python3-firewall +%attr(0755,root,root) %dir %{python3_sitelib}/firewall +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/__pycache__ +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/config +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/config/__pycache__ +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core/__pycache__ +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core/io +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core/io/__pycache__ +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/server +%attr(0755,root,root) %dir %{python3_sitelib}/firewall/server/__pycache__ +%{python3_sitelib}/firewall/__pycache__/*.py* +%{python3_sitelib}/firewall/*.py* +%{python3_sitelib}/firewall/config/*.py* +%{python3_sitelib}/firewall/config/__pycache__/*.py* +%{python3_sitelib}/firewall/core/*.py* +%{python3_sitelib}/firewall/core/__pycache__/*.py* +%{python3_sitelib}/firewall/core/io/*.py* +%{python3_sitelib}/firewall/core/io/__pycache__/*.py* +%{python3_sitelib}/firewall/server/*.py* +%{python3_sitelib}/firewall/server/__pycache__/*.py* + +%files -n firewall-macros +%config %{_sysconfdir}/rpm/macros.firewalld + %files -n firewall-applet %attr(0755,root,root) %{_bindir}/firewall-applet %dir %{_sysconfdir}/firewall

1 0

commit ImageMagick for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package ImageMagick for openSUSE:Factory checked in at 2018-01-01 22:06:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ImageMagick (Old) and /work/SRC/openSUSE:Factory/.ImageMagick.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "ImageMagick" Mon Jan 1 22:06:06 2018 rev:151 rq:560071 version:7.0.7.15 Changes: -------- --- /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick.changes 2017-12-23 12:16:56.831011889 +0100 +++ /work/SRC/openSUSE:Factory/.ImageMagick.new/ImageMagick.changes 2018-01-01 22:06:15.148497534 +0100 @@ -1,0 +2,7 @@ +Wed Dec 27 08:31:38 UTC 2017 - pgajdos(a)suse.com + +- readd ImageMagick-relax-filter.t.patch for SLE15 i586 +- enable ImageMagick-s390-disable-tests.patch also for s390, in + addition to s390x + +------------------------------------------------------------------- New: ---- ImageMagick-relax-filter.t.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ImageMagick.spec ++++++ --- /var/tmp/diff_new_pack.Rt7Vbc/_old 2018-01-01 22:06:18.059524747 +0100 +++ /var/tmp/diff_new_pack.Rt7Vbc/_new 2018-01-01 22:06:18.059524747 +0100 @@ -38,6 +38,12 @@ Source3: ImageMagick.keyring # suse specific patches Patch0: ImageMagick-disable-insecure-coders.patch +# workaround, see https://github.com/ImageMagick/ImageMagick/issues/439 +#%%ifarch i586 +#%%if %{?suse_version} == 1500 +Patch1: ImageMagick-relax-filter.t.patch +#%%endif +#%%endif Patch2: ImageMagick-library-installable-in-parallel.patch #%%ifarch s390x Patch3: ImageMagick-s390-disable-tests.patch @@ -275,8 +281,13 @@ %prep %setup -q -n ImageMagick-%{source_version} %patch0 -p1 +%ifarch i586 +%if %{?suse_version} == 1500 +%patch1 -p1 +%endif +%endif %patch2 -p1 -%ifarch s390x +%ifarch s390x s390 %patch3 -p1 %endif ++++++ ImageMagick-relax-filter.t.patch ++++++ diff -urN ImageMagick-7.0.6-0.orig/PerlMagick/t/filter.t ImageMagick-7.0.6-0/PerlMagick/t/filter.t --- ImageMagick-7.0.6-0.orig/PerlMagick/t/filter.t 2017-06-11 13:39:49.000000000 +0200 +++ ImageMagick-7.0.6-0/PerlMagick/t/filter.t 2017-08-10 02:24:02.823623000 +0200 @@ -57,7 +57,7 @@ testFilterCompare('input.miff', "fuzz=>$fuzz", 'reference/filter/Colorize.miff', 'Colorize', q/fill=>"red", blend=>"50%"/, 0.0, 0.0 ); ++$test; -testFilterCompare('input.miff', q//, 'reference/filter/Contrast.miff', 'Contrast', q//, 0.0, 0.0); +testFilterCompare('input.miff', q//, 'reference/filter/Contrast.miff', 'Contrast', q//, 0.001, 0.4); ++$test; testFilterCompare('input.miff', q//, 'reference/filter/Convolve.miff', 'Convolve', q/[0.0625, 0.0625, 0.0625, 0.0625, 0.5, 0.0625, 0.0625, 0.0625, 0.0625]/, 0.1, 0.7); @@ -138,7 +138,7 @@ testFilterCompare('input.miff', q//, 'reference/filter/OilPaint.miff', 'OilPaint', q//, 0.03, 1.0); ++$test; -testFilterCompare('input.miff', "fuzz=>$fuzz", 'reference/filter/Opaque.miff', 'Opaque', q/color=>"#e23834", fill=>"green"/, 0.0, 0.0); +testFilterCompare('input.miff', "fuzz=>$fuzz", 'reference/filter/Opaque.miff', 'Opaque', q/color=>"#e23834", fill=>"green"/, 0.05, 0.5); ++$test; testFilterCompare('input.miff', q//, 'reference/filter/Quantize.miff', 'Quantize', q//, 0.2, 0.7);

1 0

commit osinfo-db for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package osinfo-db for openSUSE:Factory checked in at 2018-01-01 22:05:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/osinfo-db (Old) and /work/SRC/openSUSE:Factory/.osinfo-db.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "osinfo-db" Mon Jan 1 22:05:56 2018 rev:8 rq:560044 version:20170813 Changes: -------- --- /work/SRC/openSUSE:Factory/osinfo-db/osinfo-db.changes 2017-09-22 21:32:01.684582229 +0200 +++ /work/SRC/openSUSE:Factory/.osinfo-db.new/osinfo-db.changes 2018-01-01 22:06:04.368100056 +0100 @@ -1,0 +2,6 @@ +Tue Dec 19 15:24:35 MST 2017 - carnold(a)suse.com + +- Fix version string for leap 15 (bsc#1054986) + add-opensuse-leap-15-support.patch + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ add-caasp-support.patch ++++++ --- /var/tmp/diff_new_pack.UbCpIo/_old 2018-01-01 22:06:04.999888929 +0100 +++ /var/tmp/diff_new_pack.UbCpIo/_new 2018-01-01 22:06:04.999888929 +0100 @@ -59,7 +59,7 @@ + <distro>caasp</distro> + <derives-from id="http://suse.com/caasp/1.0"/> + -+ <release-date>2017-00-00</release-date> ++ <release-date>2017-10-26</release-date> + + <media arch="x86_64"> + <iso> ++++++ add-opensuse-leap-15-support.patch ++++++ --- /var/tmp/diff_new_pack.UbCpIo/_old 2018-01-01 22:06:05.027879575 +0100 +++ /var/tmp/diff_new_pack.UbCpIo/_new 2018-01-01 22:06:05.031878239 +0100 @@ -5,9 +5,9 @@ @@ -0,0 +1,40 @@ +<libosinfo version="0.0.1"> + <os id="http://opensuse.org/opensuse/15"> -+ <short-id>opensuse15</short-id> -+ <name>openSUSE Leap 15</name> -+ <version>15</version> ++ <short-id>opensuse15.0</short-id> ++ <name>openSUSE Leap 15.0</name> ++ <version>15.0</version> + <vendor>openSUSE</vendor> + <family>linux</family> + <distro>opensuse</distro>

1 0

commit btrfsprogs for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package btrfsprogs for openSUSE:Factory checked in at 2018-01-01 22:05:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/btrfsprogs (Old) and /work/SRC/openSUSE:Factory/.btrfsprogs.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "btrfsprogs" Mon Jan 1 22:05:45 2018 rev:90 rq:560042 version:4.13.3 Changes: -------- --- /work/SRC/openSUSE:Factory/btrfsprogs/btrfsprogs.changes 2017-12-10 18:14:25.007848770 +0100 +++ /work/SRC/openSUSE:Factory/.btrfsprogs.new/btrfsprogs.changes 2018-01-01 22:05:52.624024622 +0100 @@ -1,0 +2,6 @@ +Tue Dec 19 11:31:07 UTC 2017 - wqu(a)suse.de + +- Fix rollback regression which can lead to data corruption + Added patches: rollback-regression-fix.patch (bsc#1069478) + +------------------------------------------------------------------- New: ---- rollback-regression-fix.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ btrfsprogs.spec ++++++ --- /var/tmp/diff_new_pack.S5d4qo/_old 2018-01-01 22:05:55.183169422 +0100 +++ /var/tmp/diff_new_pack.S5d4qo/_new 2018-01-01 22:05:55.183169422 +0100 @@ -43,6 +43,7 @@ Source5: sles11-defaults.h Patch1: mkfs-default-features.patch +Patch2: rollback-regression-fix.patch BuildRequires: asciidoc BuildRequires: autoconf @@ -137,6 +138,7 @@ %prep %setup -q -n btrfs-progs-v%{version} %patch1 -p1 +%patch2 -p1 %build ./autogen.sh ++++++ rollback-regression-fix.patch ++++++ From: Qu Wenruo <wqu(a)suse.com> Subject: [PATCH] btrfs-progs: convert: Fix a bug in rollback check which overwrite return value Path-mainline: Will land in v4.14.1. Commit 1170ac307900 ("btrfs-progs: convert: Introduce function to check if convert image is able to be rolled back") reworked rollback check condition, by checking 1:1 mapping of each file extent. The idea itself has nothing wrong, but error handler is not implemented correctly, which over writes the return value and always try to rollback the fs even it fails to pass the check. Fix it by correctly return the error before rollback the fs. Fixes: 1170ac307900 ("btrfs-progs: convert: Introduce function to check if convert image is able to be rolled back") Reported-by: Jeff Mahoney <jeffm(a)suse.com> Signed-off-by: Qu Wenruo <wqu(a)suse.com> Signed-off-by: David Sterba <dsterba(a)suse.com> --- convert/main.c | 2 ++ 1 file changed, 2 insertions(+) Index: btrfs-progs-v4.13.3/convert/main.c =================================================================== --- btrfs-progs-v4.13.3.orig/convert/main.c +++ btrfs-progs-v4.13.3/convert/main.c @@ -1443,6 +1443,8 @@ next: } } btrfs_release_path(&path); + if (ret) + return ret; /* * For HOLES mode (without NO_HOLES), we must ensure file extents * cover the whole range of the image

1 0

commit apparmor for openSUSE:Factory
by root＠hilbert.suse.de 01 Jan '18

01 Jan '18

Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2018-01-01 22:05:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "apparmor" Mon Jan 1 22:05:36 2018 rev:109 rq:560031 version:2.12 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2017-12-06 08:52:58.429318465 +0100 +++ /work/SRC/openSUSE:Factory/.apparmor.new/apparmor.changes 2018-01-01 22:05:43.902938989 +0100 @@ -1,0 +2,44 @@ +Mon Dec 25 15:27:03 UTC 2017 - suse-beta(a)cboltz.de + +- update to AppArmor 2.12 + - add support for 'owner' rules in aa-logprof and aa-genprof + - add support for includes with absolute path in aa-logprof etc. (lp#1733700) + - update aa-decode to also decode PROCTITLE (lp#1736841) + - several profile and abstraction updates, including boo#1069470 + - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 + for the detailed upstream changelog +- drop upstreamed patches: + - read_inactive_profile-exactly-once.patch + - utils-fix-sorted-save_profiles-regression.diff +- lessopen profile: change all 'rix' rules to 'mrix' +- add 32-bit-no-uid.diff to fix handling of log events without ouid on + 32 bit systems + +------------------------------------------------------------------- +Tue Nov 30 10:30:33 UTC 2017 - suse-beta(a)cboltz.de + +- update to AppArmor 2.11.95 aka 2.12 beta1 + - add JSON interface to aa-logprof and aa-genprof (used by YaST) + - drop old YaST interface code + - update audio, base and nameservice abstractions + - allow @{pid} to match 7-digit pids + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 + for the detailed upstream changelog +- drop upstreamed patches + - apparmor-yast-cleanup.patch + - apparmor-json-support.patch + - nameservice-libtirpc.diff +- drop obsolete perl modules (YaST no longer needs them) +- drop patches that were only needed by the obsolete perl modules: + - apparmor-utils-string-split + - apparmor-abstractions-no-multiline.diff +- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in + apparmor_parser +- refresh utils-fix-sorted-save_profiles-regression.diff +- add aa-teardown (new script to unload all profiles) +- make ExecStop in apparmor.service a no-op (workaround for a systemd + restriction, see boo#996520 and boo#853019 for details) +- lessopen profile: allow capability dac_read_search and dac_override, + allow groff to execute several helpers (boo#1065388) + +------------------------------------------------------------------- --- /work/SRC/openSUSE:Factory/apparmor/libapparmor.changes 2017-10-27 13:47:54.953893850 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new/libapparmor.changes 2018-01-01 22:05:43.934928299 +0100 @@ -1,0 +2,17 @@ +Mon Dec 25 15:32:35 UTC 2017 - suse-beta(a)cboltz.de + +- update to AppArmor 2.12 + - preserve errno across aa_*_unref() functions + - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12 + for the detailed upstream changelog +- no longer package static libapparmor.a + +------------------------------------------------------------------- +Tue Oct 31 10:41:55 UTC 2017 - suse-beta(a)cboltz.de + +- update to AppArmor 2.11.95 aka 2.12 beta1 + - no changes in libapparmor + - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95 + for the detailed upstream changelog + +------------------------------------------------------------------- Old: ---- apparmor-2.11.1.tar.gz apparmor-2.11.1.tar.gz.asc apparmor-abstractions-no-multiline.diff apparmor-json-support.patch apparmor-utils-string-split apparmor-yast-cleanup.patch nameservice-libtirpc.diff profiles-sockets-temporary-fix.patch read_inactive_profile-exactly-once.patch utils-fix-sorted-save_profiles-regression.diff New: ---- 32-bit-no-uid.diff aa-teardown apparmor-2.12.tar.gz apparmor-2.12.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.BdJeh3/_old 2018-01-01 22:05:44.922598245 +0100 +++ /var/tmp/diff_new_pack.BdJeh3/_new 2018-01-01 22:05:44.922598245 +0100 @@ -35,7 +35,7 @@ %define apache_module_path %(/usr/sbin/apxs2 -q LIBEXECDIR) Name: apparmor -Version: 2.11.1 +Version: 2.12 Release: 0 Summary: AppArmor userlevel parser utility License: GPL-2.0+ @@ -50,6 +50,7 @@ Source7: apparmor-rpmlintrc Source8: apparmor.service Source9: apparmor.systemd +Source10: aa-teardown # enable caching of profiles (= massive performance speedup when loading profiles) Patch1: apparmor-enable-profile-cache.diff @@ -57,35 +58,14 @@ # include autogenerated profile sniplet for samba shares (bnc#688040) Patch2: apparmor-samba-include-permissions-for-shares.diff -# split a long string in AppArmor.pm. Not accepted upstream because they want a solution without hardcoded width. -Patch3: apparmor-utils-string-split - # Ruby 2.0 mkmf prefixes everything with $(DESTDIR), bnc#822277, kkaempf(a)suse.de Patch5: ruby-2_0-mkmf-destdir.patch -# change multiline rules in abstractions to one line - needed because YaST still uses the perl module, which doesn't support multiline rules -# (bnc#900013, not for upstream) -Patch6: apparmor-abstractions-no-multiline.diff - # bug 906858 - confine lessopen.sh (submitted upstream 2014-12-21) Patch7: apparmor-lessopen-profile.patch -# add JSON support to aa-logprof and aa-genprof (will be in upstream 2.12) -Patch12: apparmor-yast-cleanup.patch -Patch13: apparmor-json-support.patch - -# temporary solution for unix dgram and unix stream - boo#1061195 (sent for upstream review, but will probably stay openSUSE only) -# TODO: replace with proper unix rules when Kernel 4.15 arrives -Patch15: profiles-sockets-temporary-fix.patch - -# fix NIS/YP logins - libtirpc needs to read /etc/netconfig - commited upstream 2017-10-20 (trunk r3716, 2.11 r3682, 2.10 r3408, 2.9 r3069) -Patch16: nameservice-libtirpc.diff - -# Fix sorted() regression in save_profiles() - submitted upstream 2017-10-22 -Patch17: utils-fix-sorted-save_profiles-regression.diff - -# bsc#1069346 -Patch18: read_inactive_profile-exactly-once.patch +# logparser.py: ignore ouid if it's 2^32 - 1 which means no ouid given in a log event on 32 bit systems (submitted upstream 2017-12-26) +Patch8: 32-bit-no-uid.diff PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -193,18 +173,12 @@ Group: Development/Libraries/Perl Requires: libapparmor1 = %{version} Requires: perl = %{perl_version} -Requires: perl(DBD::SQLite) -Requires: perl(Locale::gettext) -Requires: perl(RPC::XML) -Requires: perl(RPC::XML) -Requires: perl(Term::ReadKey) -Requires: perl(Term::ReadKey) Provides: perl-libapparmor = %{version} Obsoletes: perl-libapparmor < 2.5 %description -n perl-apparmor This package provides the perl interface to AppArmor. It is used for perl -applications interfacing with AppArmor, including the AppArmor utilities. +applications interfacing with AppArmor. %endif @@ -378,19 +352,9 @@ %setup -q %patch1 -p1 %patch2 -%patch3 -p1 %patch5 -p1 -%patch6 -%patch7 -p1 -%patch12 -p1 -%patch13 -p1 -%patch15 -p1 -%patch16 -%patch17 -%patch18 -p1 - -# search for left-over multiline rules -test -z "$(grep -r '^\s*$unix\|dbus$[^,]$([^)]*)$*[^,]*$' profiles/apparmor.d/)" +%patch7 +%patch8 -p1 %build export SUSE_ASNEEDED=0 @@ -426,11 +390,6 @@ # binutils make -C binutils -# deprecated/utils (perl modules still needed by YaST) -%if %{with perl} -make -C deprecated/utils -%endif - # parser: make -C parser V=1 @@ -485,11 +444,6 @@ %makeinstall -C binutils ( cd %{buildroot}/%{_sbindir} && ln -s %{_bindir}/aa-exec exec ) -# deprecated/utils (perl modules still needed by YaST) -%if %{with perl} -%makeinstall -C deprecated/utils -%endif - %makeinstall -C profiles %makeinstall -C parser @@ -541,8 +495,12 @@ rm -fv %{buildroot}%{_libdir}/libapparmor.la # Adjust for systemd +test ! -f %{buildroot}%{_unitdir}/apparmor.service install -D -m0644 %{S:8} %{buildroot}%{_unitdir}/apparmor.service +test ! -f %{buildroot}%{apparmor_bin_prefix}/apparmor.systemd install -m0755 %{S:9} %{buildroot}%{apparmor_bin_prefix} +test ! -f %{buildroot}%{_sbindir}/aa-teardown +install -m0755 %{S:10} %{buildroot}%{_sbindir} rm %{buildroot}%{_sysconfdir}/init.d/boot.apparmor rm %{buildroot}/sbin/rcsubdomain ln -sf service %{buildroot}/sbin/rcapparmor @@ -569,6 +527,7 @@ /sbin/apparmor_parser %{_bindir}/aa-enabled %{_bindir}/aa-exec +%{_sbindir}/aa-teardown %dir %attr(-, root, root) %{_sysconfdir}/apparmor %dir %{_sysconfdir}/apparmor.d %{_sysconfdir}/apparmor.d/cache @@ -625,7 +584,20 @@ %config(noreplace) %{_sysconfdir}/apparmor/logprof.conf %config(noreplace) %{_sysconfdir}/apparmor/notify.conf %config(noreplace) %{_sysconfdir}/apparmor/severity.db -%{_sbindir}/aa-* +%{_sbindir}/aa-audit +%{_sbindir}/aa-autodep +%{_sbindir}/aa-cleanprof +%{_sbindir}/aa-complain +%{_sbindir}/aa-decode +%{_sbindir}/aa-disable +%{_sbindir}/aa-enforce +%{_sbindir}/aa-genprof +%{_sbindir}/aa-logprof +%{_sbindir}/aa-mergeprof +%{_sbindir}/aa-notify +%{_sbindir}/aa-remove-unknown +%{_sbindir}/aa-status +%{_sbindir}/aa-unconfined %{_sbindir}/apparmor_status %{_sbindir}/audit %{_sbindir}/autodep @@ -645,7 +617,22 @@ %dir %{_localstatedir}/log/apparmor %doc %{_mandir}/man5/logprof.conf.5.gz %doc %{_mandir}/man8/apparmor_notify.8.gz -%doc %{_mandir}/man8/aa-*.gz +%doc %{_mandir}/man8/aa-audit.8.gz +%doc %{_mandir}/man8/aa-autodep.8.gz +%doc %{_mandir}/man8/aa-cleanprof.8.gz +%doc %{_mandir}/man8/aa-complain.8.gz +%doc %{_mandir}/man8/aa-decode.8.gz +%doc %{_mandir}/man8/aa-disable.8.gz +%doc %{_mandir}/man8/aa-easyprof.8.gz +%doc %{_mandir}/man8/aa-enforce.8.gz +%doc %{_mandir}/man8/aa-genprof.8.gz +%doc %{_mandir}/man8/aa-logprof.8.gz +%doc %{_mandir}/man8/aa-mergeprof.8.gz +%doc %{_mandir}/man8/aa-notify.8.gz +%doc %{_mandir}/man8/aa-remove-unknown.8.gz +%doc %{_mandir}/man8/aa-status.8.gz +%doc %{_mandir}/man8/aa-unconfined.8.gz + %doc %{_mandir}/man8/apparmor_status.8.gz %doc %{_mandir}/man8/audit.8.gz %doc %{_mandir}/man8/autodep.8.gz @@ -664,7 +651,6 @@ %if %{with perl} %files -n perl-apparmor %defattr(-,root,root) -%{perl_vendorlib}/Immunix %{perl_vendorarch}/auto/LibAppArmor/ %{perl_vendorarch}/LibAppArmor.pm %endif ++++++ libapparmor.spec ++++++ --- /var/tmp/diff_new_pack.BdJeh3/_old 2018-01-01 22:05:44.950588890 +0100 +++ /var/tmp/diff_new_pack.BdJeh3/_new 2018-01-01 22:05:44.954587554 +0100 @@ -18,7 +18,7 @@ Name: libapparmor -Version: 2.11.1 +Version: 2.12 Release: 0 Summary: Utility library for AppArmor License: LGPL-2.1+ @@ -87,8 +87,9 @@ # create symlink for old change_hat(2) manpage ( cd %{buildroot}/%{_mandir}/man2/ && ln -s aa_change_hat.2 change_hat.2 ) -# remove *.la files +# remove *.la and *.a files rm -fv %{buildroot}%{_libdir}/libapparmor.la +rm -fv %{buildroot}%{_libdir}/libapparmor.a %post -n libapparmor1 -p /sbin/ldconfig @@ -100,7 +101,6 @@ %files -n libapparmor-devel %defattr(-,root,root) -%{_libdir}/libapparmor.a %{_libdir}/libapparmor.so %{_libdir}/pkgconfig/libapparmor.pc %doc %{_mandir}/man2/aa_change_hat.2.gz ++++++ 32-bit-no-uid.diff ++++++ diff --git a/utils/apparmor/logparser.py b/utils/apparmor/logparser.py index 0e74c3f5..5738bb10 100644 --- a/utils/apparmor/logparser.py +++ b/utils/apparmor/logparser.py @@ -118,7 +118,7 @@ class ReadLog: ev['protocol'] = event.net_protocol ev['sock_type'] = event.net_sock_type - if event.ouid != 18446744073709551615: # 2^64 - 1 + if event.ouid != 18446744073709551615 and event.ouid != 4294967295: # 2^64 - 1 and 2^32 - 1 ev['fsuid'] = event.fsuid ev['ouid'] = event.ouid ++++++ aa-teardown ++++++ #!/bin/bash test $# = 0 || { echo "Usage: $0" echo echo "Unloads all AppArmor profiles" exit 1 } /lib/apparmor/apparmor.systemd stop ++++++ apparmor-2.11.1.tar.gz -> apparmor-2.12.tar.gz ++++++ /work/SRC/openSUSE:Factory/apparmor/apparmor-2.11.1.tar.gz /work/SRC/openSUSE:Factory/.apparmor.new/apparmor-2.12.tar.gz differ: char 5, line 1 ++++++ apparmor-lessopen-profile.patch ++++++ --- /var/tmp/diff_new_pack.BdJeh3/_old 2018-01-01 22:05:45.022564838 +0100 +++ /var/tmp/diff_new_pack.BdJeh3/_new 2018-01-01 22:05:45.022564838 +0100 @@ -1,9 +1,9 @@ -Index: apparmor-2.9.0/profiles/apparmor.d/usr.bin.lessopen +Index: profiles/apparmor.d/usr.bin.lessopen.sh =================================================================== ---- /dev/null -+++ apparmor-2.9.0/profiles/apparmor.d/usr.bin.lessopen.sh -@@ -0,0 +1,40 @@ -+# Last Modified: Fri Nov 28 08:01:09 2014 +--- /dev/null 1970-01-01 00:00:00.000000000 +0000 ++++ profiles/apparmor.d/usr.bin.lessopen.sh 2017-10-28 14:15:12.624358664 +0200 +@@ -0,0 +1,49 @@ ++# vim: ft=apparmor +#include <tunables/global> + +/usr/bin/lessopen.sh { @@ -12,34 +12,43 @@ + #include <abstractions/consoles> + #include <abstractions/perl> + ++ capability dac_override, ++ capability dac_read_search, ++ + /** rk, -+ /bin/bash ix, -+ /bin/rpm rix, -+ /bin/tar rix, ++ /bin/bash mrix, ++ /bin/rpm mrix, ++ /bin/tar mrix, + /tmp/less.* rw, -+ /usr/bin/bzip2 rix, -+ /usr/bin/cabextract rix, -+ /usr/bin/cat rix, -+ /usr/bin/colordiff rix, -+ /usr/bin/dvi2tty rix, -+ /usr/bin/file rix, -+ /usr/bin/grep rix, -+ /usr/bin/groff rix, -+ /usr/bin/gzip rix, -+ /usr/bin/head rix, -+ /usr/bin/lynx rix, -+ /usr/bin/mktemp rix, -+ /usr/bin/nm rix, -+ /usr/bin/pdftotext rix, -+ /usr/bin/ps2ascii rix, -+ /usr/bin/rm rix, -+ /usr/bin/seq rix, -+ /usr/bin/tar rix, -+ /usr/bin/unzip rix, -+ /usr/bin/unzip-plain rix, -+ /usr/bin/w3m rix, -+ /usr/bin/which rix, -+ /usr/bin/xz rix, ++ /usr/bin/bzip2 mrix, ++ /usr/bin/cabextract mrix, ++ /usr/bin/cat mrix, ++ /usr/bin/colordiff mrix, ++ /usr/bin/dvi2tty mrix, ++ /usr/bin/eqn mrix, ++ /usr/bin/file mrix, ++ /usr/bin/grep mrix, ++ /usr/bin/groff mrix, ++ /usr/bin/grotty mrix, ++ /usr/bin/gzip mrix, ++ /usr/bin/head mrix, ++ /usr/bin/lynx mrix, ++ /usr/bin/mktemp mrix, ++ /usr/bin/nm mrix, ++ /usr/bin/pic mrix, ++ /usr/bin/pdftotext mrix, ++ /usr/bin/ps2ascii mrix, ++ /usr/bin/rm mrix, ++ /usr/bin/seq mrix, ++ /usr/bin/soelim mrix, ++ /usr/bin/tar mrix, ++ /usr/bin/tbl mrix, ++ /usr/bin/troff mrix, ++ /usr/bin/unzip mrix, ++ /usr/bin/unzip-plain mrix, ++ /usr/bin/w3m mrix, ++ /usr/bin/which mrix, ++ /usr/bin/xz mrix, + + #include <local/usr.bin.lessopen.sh> +} ++++++ apparmor.service ++++++ --- /var/tmp/diff_new_pack.BdJeh3/_old 2018-01-01 22:05:45.062551475 +0100 +++ /var/tmp/diff_new_pack.BdJeh3/_new 2018-01-01 22:05:45.062551475 +0100 @@ -8,9 +8,17 @@ [Service] Type=oneshot -ExecStart=/lib/apparmor/apparmor.systemd start +ExecStart=/lib/apparmor/apparmor.systemd reload ExecReload=/lib/apparmor/apparmor.systemd reload -ExecStop=/lib/apparmor/apparmor.systemd stop + +# systemd maps 'restart' to 'stop; start' which means removing AppArmor confinement +# from running processes (and not being able to re-apply it later). +# Upstream systemd developers refused to implement an option that allows overriding +# this behaviour, therefore we have to make ExecStop a no-op to error out on the +# safe side. +# +# If you really want to unload all AppArmor profiles, run aa-teardown +ExecStop=/bin/true RemainAfterExit=yes [Install]

1 0