August 2021 - openSUSE Commits - openSUSE Mailing Lists

commit selinux-policy for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2021-08-02 12:04:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "selinux-policy" Mon Aug 2 12:04:33 2021 rev:15 rq:909370 version:20210716 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2021-07-12 01:24:55.789280564 +0200 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.1899/selinux-policy.changes 2021-08-02 12:04:46.097659882 +0200 @@ -1,0 +2,17 @@ +Fri Jul 16 07:11:57 UTC 2021 - Johannes Segitz <jsegitz(a)suse.com> + +- Update to version 20210716 +- Remove interfaces for container module before building the package + (bsc#1188184) +- Updated + * fix_init.patch + * fix_systemd_watch.patch + to adapt to upstream changes + +------------------------------------------------------------------- +Thu Jul 15 15:45:57 UTC 2021 - Callum Farmer <gmbr3(a)opensuse.org> + +- Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing + here + +------------------------------------------------------------------- @@ -6,0 +24,24 @@ + +------------------------------------------------------------------- +Mon Jun 28 08:11:25 UTC 2021 - Johannes Segitz <jsegitz(a)suse.com> + +- Update to version 20210419 +- Dropped fix_gift.patch, module was removed +- Updated wicked.te to removed dropped interface +- Refreshed: + * fix_cockpit.patch + * fix_hadoop.patch + * fix_init.patch + * fix_logging.patch + * fix_logrotate.patch + * fix_networkmanager.patch + * fix_nscd.patch + * fix_rpm.patch + * fix_selinuxutil.patch + * fix_systemd.patch + * fix_systemd_watch.patch + * fix_thunderbird.patch + * fix_unconfined.patch + * fix_unconfineduser.patch + * fix_unprivuser.patch + * fix_xserver.patch Old: ---- fedora-policy-20210419.tar.bz2 fix_gift.patch tabrmd.fc tabrmd.if tabrmd.te New: ---- fedora-policy-20210716.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:47.441659595 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:47.445659595 +0200 @@ -33,7 +33,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20210419 +Version: 20210716 Release: 0 Source: fedora-policy-%{version}.tar.bz2 Source1: selinux-policy-rpmlintrc @@ -81,13 +81,9 @@ Source126: wicked.te Source127: wicked.if Source128: wicked.fc -Source129: tabrmd.te -Source130: tabrmd.if -Source131: tabrmd.fc Patch001: fix_djbdns.patch Patch002: fix_dbus.patch -Patch003: fix_gift.patch Patch004: fix_java.patch Patch005: fix_hadoop.patch Patch006: fix_thunderbird.patch @@ -424,7 +420,7 @@ cp $i selinux_config done -for i in %{SOURCE120} %{SOURCE121} %{SOURCE122} %{SOURCE123} %{SOURCE124} %{SOURCE125} %{SOURCE126} %{SOURCE127} %{SOURCE128} %{SOURCE129} %{SOURCE130} %{SOURCE131}; do +for i in %{SOURCE120} %{SOURCE121} %{SOURCE122} %{SOURCE123} %{SOURCE124} %{SOURCE125} %{SOURCE126} %{SOURCE127} %{SOURCE128}; do cp $i policy/modules/contrib done @@ -475,6 +471,8 @@ mkdir %{buildroot}%{_datadir}/selinux/devel/html mv %{buildroot}%{_datadir}/man/man8/*.html %{buildroot}%{_datadir}/selinux/devel/html mv %{buildroot}%{_datadir}/man/man8/style.css %{buildroot}%{_datadir}/selinux/devel/html +rm %{buildroot}%{_mandir}/man8/container_selinux.8* +rm %{buildroot}%{_datadir}/selinux/devel/include/services/container.if %post if [ ! -s %{_sysconfdir}/selinux/config ]; then ++++++ fedora-policy-20210419.tar.bz2 -> fedora-policy-20210716.tar.bz2 ++++++ ++++ 13781 lines of diff (skipped) ++++++ fix_cockpit.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.293659414 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.297659414 +0200 @@ -9,11 +9,11 @@ policy/modules/contrib/cockpit.te | 2 ++ 1 file changed, 2 insertions(+) -diff --git a/policy/modules/contrib/cockpit.te b/policy/modules/contrib/cockpit.te -index a160ca6b6..5984711fa 100644 ---- a/policy/modules/contrib/cockpit.te -+++ b/policy/modules/contrib/cockpit.te -@@ -52,7 +52,9 @@ can_exec(cockpit_ws_t,cockpit_session_exec_t) +Index: fedora-policy-20210628/policy/modules/contrib/cockpit.te +=================================================================== +--- fedora-policy-20210628.orig/policy/modules/contrib/cockpit.te ++++ fedora-policy-20210628/policy/modules/contrib/cockpit.te +@@ -51,7 +51,9 @@ can_exec(cockpit_ws_t,cockpit_session_ex dev_read_urand(cockpit_ws_t) # for authkey dev_read_rand(cockpit_ws_t) # for libssh @@ -23,6 +23,3 @@ # cockpit-ws can connect to other hosts via ssh corenet_tcp_connect_ssh_port(cockpit_ws_t) --- -2.26.2 - ++++++ fix_hadoop.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.325659408 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.325659408 +0200 @@ -1,8 +1,8 @@ -Index: fedora-policy-20210419/policy/modules/roles/sysadm.te +Index: fedora-policy-20210628/policy/modules/roles/sysadm.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/roles/sysadm.te -+++ fedora-policy-20210419/policy/modules/roles/sysadm.te -@@ -298,10 +298,6 @@ optional_policy(` +--- fedora-policy-20210628.orig/policy/modules/roles/sysadm.te ++++ fedora-policy-20210628/policy/modules/roles/sysadm.te +@@ -295,10 +295,6 @@ optional_policy(` ') optional_policy(` @@ -13,11 +13,11 @@ iotop_run(sysadm_t, sysadm_r) ') -Index: fedora-policy-20210419/policy/modules/roles/unprivuser.te +Index: fedora-policy-20210628/policy/modules/roles/unprivuser.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/roles/unprivuser.te -+++ fedora-policy-20210419/policy/modules/roles/unprivuser.te -@@ -209,10 +209,6 @@ ifndef(`distro_redhat',` +--- fedora-policy-20210628.orig/policy/modules/roles/unprivuser.te ++++ fedora-policy-20210628/policy/modules/roles/unprivuser.te +@@ -205,10 +205,6 @@ ifndef(`distro_redhat',` ') optional_policy(` ++++++ fix_init.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.333659406 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.333659406 +0200 @@ -1,8 +1,8 @@ -Index: fedora-policy-20210419/policy/modules/system/init.if +Index: fedora-policy-20210716/policy/modules/system/init.if =================================================================== ---- fedora-policy-20210419.orig/policy/modules/system/init.if -+++ fedora-policy-20210419/policy/modules/system/init.if -@@ -3242,6 +3242,7 @@ interface(`init_filetrans_named_content' +--- fedora-policy-20210716.orig/policy/modules/system/init.if ++++ fedora-policy-20210716/policy/modules/system/init.if +@@ -3296,6 +3296,7 @@ interface(`init_filetrans_named_content' files_etc_filetrans($1, machineid_t, file, "machine-id" ) files_pid_filetrans($1, initctl_t, fifo_file, "fifo" ) init_pid_filetrans($1, systemd_unit_file_t, dir, "generator") @@ -10,11 +10,11 @@ init_pid_filetrans($1, systemd_unit_file_t, dir, "system") ') -Index: fedora-policy-20210419/policy/modules/system/init.te +Index: fedora-policy-20210716/policy/modules/system/init.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/system/init.te -+++ fedora-policy-20210419/policy/modules/system/init.te -@@ -269,6 +269,8 @@ corecmd_exec_bin(init_t) +--- fedora-policy-20210716.orig/policy/modules/system/init.te ++++ fedora-policy-20210716/policy/modules/system/init.te +@@ -267,6 +267,8 @@ corecmd_exec_bin(init_t) corenet_all_recvfrom_netlabel(init_t) corenet_tcp_bind_all_ports(init_t) corenet_udp_bind_all_ports(init_t) @@ -23,7 +23,7 @@ dev_create_all_files(init_t) dev_create_all_chr_files(init_t) -@@ -397,6 +399,7 @@ logging_manage_audit_config(init_t) +@@ -391,6 +393,7 @@ logging_manage_audit_config(init_t) logging_create_syslog_netlink_audit_socket(init_t) logging_write_var_log_dirs(init_t) logging_manage_var_log_symlinks(init_t) @@ -31,14 +31,13 @@ seutil_read_config(init_t) seutil_read_login_config(init_t) -@@ -446,11 +449,16 @@ ifdef(`distro_redhat',` +@@ -441,10 +444,15 @@ ifdef(`distro_redhat',` corecmd_shell_domtrans(init_t, initrc_t) storage_raw_rw_fixed_disk(init_t) +storage_raw_read_removable_device(init_t) sysnet_read_dhcpc_state(init_t) - sysnet_watch_config(init_t) optional_policy(` + networkmanager_initrc_read_lnk_files(init_t) @@ -48,7 +47,7 @@ bootloader_domtrans(init_t) ') -@@ -568,10 +576,10 @@ tunable_policy(`init_audit_control',` +@@ -562,10 +570,10 @@ tunable_policy(`init_audit_control',` allow init_t self:system all_system_perms; allow init_t self:system module_load; allow init_t self:unix_dgram_socket { create_socket_perms sendto }; @@ -61,7 +60,7 @@ allow init_t self:netlink_selinux_socket create_socket_perms; allow init_t self:unix_dgram_socket lock; # Until systemd is fixed -@@ -629,6 +637,7 @@ files_delete_all_spool_sockets(init_t) +@@ -623,6 +631,7 @@ files_delete_all_spool_sockets(init_t) files_create_var_lib_dirs(init_t) files_create_var_lib_symlinks(init_t) files_read_var_lib_symlinks(init_t) @@ -69,7 +68,7 @@ files_manage_urandom_seed(init_t) files_list_locks(init_t) files_list_spool(init_t) -@@ -665,7 +674,7 @@ fs_list_all(init_t) +@@ -659,7 +668,7 @@ fs_list_all(init_t) fs_list_auto_mountpoints(init_t) fs_register_binary_executable_type(init_t) fs_relabel_tmpfs_sock_file(init_t) @@ -78,7 +77,7 @@ fs_relabel_cgroup_dirs(init_t) fs_search_cgroup_dirs(init_t) # for network namespaces -@@ -721,6 +730,7 @@ systemd_write_inherited_logind_sessions_ +@@ -715,6 +724,7 @@ systemd_write_inherited_logind_sessions_ create_sock_files_pattern(init_t, init_sock_file_type, init_sock_file_type) create_dirs_pattern(init_t, var_log_t, var_log_t) @@ -86,7 +85,7 @@ auth_use_nsswitch(init_t) auth_rw_login_records(init_t) -@@ -1574,6 +1584,8 @@ optional_policy(` +@@ -1556,6 +1566,8 @@ optional_policy(` optional_policy(` postfix_list_spool(initrc_t) ++++++ fix_logging.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.369659398 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.369659398 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy-20210309/policy/modules/system/logging.fc +Index: fedora-policy-20210628/policy/modules/system/logging.fc =================================================================== ---- fedora-policy-20210309.orig/policy/modules/system/logging.fc -+++ fedora-policy-20210309/policy/modules/system/logging.fc +--- fedora-policy-20210628.orig/policy/modules/system/logging.fc ++++ fedora-policy-20210628/policy/modules/system/logging.fc @@ -3,6 +3,8 @@ /etc/rsyslog.conf gen_context(system_u:object_r:syslog_conf_t,s0) /etc/syslog.conf gen_context(system_u:object_r:syslog_conf_t,s0) @@ -19,11 +19,11 @@ /var/run/systemd/journal/syslog -s gen_context(system_u:object_r:devlog_t,mls_systemhigh) /var/spool/audit(/.*)? gen_context(system_u:object_r:audit_spool_t,mls_systemhigh) -Index: fedora-policy-20210309/policy/modules/system/logging.if +Index: fedora-policy-20210628/policy/modules/system/logging.if =================================================================== ---- fedora-policy-20210309.orig/policy/modules/system/logging.if -+++ fedora-policy-20210309/policy/modules/system/logging.if -@@ -1722,3 +1722,22 @@ interface(`logging_dgram_send',` +--- fedora-policy-20210628.orig/policy/modules/system/logging.if ++++ fedora-policy-20210628/policy/modules/system/logging.if +@@ -1782,3 +1782,22 @@ interface(`logging_dgram_send',` allow $1 syslogd_t:unix_dgram_socket sendto; ') ++++++ fix_logrotate.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.377659397 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.377659397 +0200 @@ -1,8 +1,8 @@ -Index: fedora-policy/policy/modules/contrib/logrotate.te +Index: fedora-policy-20210628/policy/modules/contrib/logrotate.te =================================================================== ---- fedora-policy.orig/policy/modules/contrib/logrotate.te -+++ fedora-policy/policy/modules/contrib/logrotate.te -@@ -107,6 +107,7 @@ files_var_lib_filetrans(logrotate_t, log +--- fedora-policy-20210628.orig/policy/modules/contrib/logrotate.te ++++ fedora-policy-20210628/policy/modules/contrib/logrotate.te +@@ -104,6 +104,7 @@ files_var_lib_filetrans(logrotate_t, log kernel_read_system_state(logrotate_t) kernel_read_kernel_sysctls(logrotate_t) ++++++ fix_networkmanager.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.393659393 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.397659392 +0200 @@ -1,16 +1,8 @@ -Index: fedora-policy-20210419/policy/modules/contrib/networkmanager.te +Index: fedora-policy-20210628/policy/modules/contrib/networkmanager.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/contrib/networkmanager.te -+++ fedora-policy-20210419/policy/modules/contrib/networkmanager.te -@@ -97,6 +97,7 @@ read_files_pattern(NetworkManager_t, Net - read_lnk_files_pattern(NetworkManager_t, NetworkManager_initrc_exec_t, NetworkManager_initrc_exec_t) - - list_dirs_pattern(NetworkManager_t, NetworkManager_etc_t, NetworkManager_etc_t) -+watch_dirs_pattern(NetworkManager_t, NetworkManager_etc_t, NetworkManager_etc_t) - read_files_pattern(NetworkManager_t, NetworkManager_etc_t, NetworkManager_etc_t) - read_lnk_files_pattern(NetworkManager_t, NetworkManager_etc_t, NetworkManager_etc_t) - -@@ -241,6 +242,9 @@ userdom_read_home_certs(NetworkManager_t +--- fedora-policy-20210628.orig/policy/modules/contrib/networkmanager.te ++++ fedora-policy-20210628/policy/modules/contrib/networkmanager.te +@@ -243,6 +243,9 @@ userdom_read_home_certs(NetworkManager_t userdom_read_user_home_content_files(NetworkManager_t) userdom_dgram_send(NetworkManager_t) @@ -20,7 +12,7 @@ tunable_policy(`use_nfs_home_dirs',` fs_read_nfs_files(NetworkManager_t) ') -@@ -258,6 +262,14 @@ optional_policy(` +@@ -260,6 +263,14 @@ optional_policy(` ') optional_policy(` @@ -35,10 +27,10 @@ bind_domtrans(NetworkManager_t) bind_manage_cache(NetworkManager_t) bind_kill(NetworkManager_t) -Index: fedora-policy-20210419/policy/modules/contrib/networkmanager.if +Index: fedora-policy-20210628/policy/modules/contrib/networkmanager.if =================================================================== ---- fedora-policy-20210419.orig/policy/modules/contrib/networkmanager.if -+++ fedora-policy-20210419/policy/modules/contrib/networkmanager.if +--- fedora-policy-20210628.orig/policy/modules/contrib/networkmanager.if ++++ fedora-policy-20210628/policy/modules/contrib/networkmanager.if @@ -114,6 +114,24 @@ interface(`networkmanager_initrc_domtran init_labeled_script_domtrans($1, NetworkManager_initrc_exec_t) ') ++++++ fix_nscd.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.405659390 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.405659390 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy-20210309/policy/modules/contrib/nscd.fc +Index: fedora-policy-20210628/policy/modules/contrib/nscd.fc =================================================================== ---- fedora-policy-20210309.orig/policy/modules/contrib/nscd.fc -+++ fedora-policy-20210309/policy/modules/contrib/nscd.fc +--- fedora-policy-20210628.orig/policy/modules/contrib/nscd.fc ++++ fedora-policy-20210628/policy/modules/contrib/nscd.fc @@ -8,8 +8,10 @@ /var/log/nscd\.log.* -- gen_context(system_u:object_r:nscd_log_t,s0) @@ -14,11 +14,11 @@ /usr/lib/systemd/system/nscd\.service -- gen_context(system_u:object_r:nscd_unit_file_t,s0) + -Index: fedora-policy-20210309/policy/modules/contrib/nscd.te +Index: fedora-policy-20210628/policy/modules/contrib/nscd.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/contrib/nscd.te -+++ fedora-policy-20210309/policy/modules/contrib/nscd.te -@@ -131,6 +131,14 @@ userdom_dontaudit_use_unpriv_user_fds(ns +--- fedora-policy-20210628.orig/policy/modules/contrib/nscd.te ++++ fedora-policy-20210628/policy/modules/contrib/nscd.te +@@ -130,6 +130,14 @@ userdom_dontaudit_use_unpriv_user_fds(ns userdom_dontaudit_search_user_home_dirs(nscd_t) optional_policy(` ++++++ fix_rpm.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.425659386 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.425659386 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy-20210309/policy/modules/contrib/rpm.fc +Index: fedora-policy-20210628/policy/modules/contrib/rpm.fc =================================================================== ---- fedora-policy-20210309.orig/policy/modules/contrib/rpm.fc -+++ fedora-policy-20210309/policy/modules/contrib/rpm.fc +--- fedora-policy-20210628.orig/policy/modules/contrib/rpm.fc ++++ fedora-policy-20210628/policy/modules/contrib/rpm.fc @@ -18,6 +18,10 @@ /usr/bin/repoquery -- gen_context(system_u:object_r:rpm_exec_t,s0) /usr/bin/zif -- gen_context(system_u:object_r:rpm_exec_t,s0) @@ -22,11 +22,11 @@ /var/lib/alternatives(/.*)? gen_context(system_u:object_r:rpm_var_lib_t,s0) /var/lib/PackageKit(/.*)? gen_context(system_u:object_r:rpm_var_lib_t,s0) /var/lib/rpm(/.*)? gen_context(system_u:object_r:rpm_var_lib_t,s0) -Index: fedora-policy-20210309/policy/modules/contrib/rpm.if +Index: fedora-policy-20210628/policy/modules/contrib/rpm.if =================================================================== ---- fedora-policy-20210309.orig/policy/modules/contrib/rpm.if -+++ fedora-policy-20210309/policy/modules/contrib/rpm.if -@@ -476,8 +476,10 @@ interface(`rpm_named_filetrans',` +--- fedora-policy-20210628.orig/policy/modules/contrib/rpm.if ++++ fedora-policy-20210628/policy/modules/contrib/rpm.if +@@ -479,8 +479,10 @@ interface(`rpm_named_filetrans',` logging_log_named_filetrans($1, rpm_log_t, file, "yum.log") logging_log_named_filetrans($1, rpm_log_t, file, "hawkey.log") logging_log_named_filetrans($1, rpm_log_t, file, "up2date") @@ -37,10 +37,10 @@ files_var_lib_filetrans($1, rpm_var_lib_t, dir, "dnf") files_var_lib_filetrans($1, rpm_var_lib_t, dir, "yum") files_var_lib_filetrans($1, rpm_var_lib_t, dir, "rpm") -Index: fedora-policy-20210309/policy/modules/kernel/files.fc +Index: fedora-policy-20210628/policy/modules/kernel/files.fc =================================================================== ---- fedora-policy-20210309.orig/policy/modules/kernel/files.fc -+++ fedora-policy-20210309/policy/modules/kernel/files.fc +--- fedora-policy-20210628.orig/policy/modules/kernel/files.fc ++++ fedora-policy-20210628/policy/modules/kernel/files.fc @@ -67,6 +67,7 @@ ifdef(`distro_suse',` /etc/sysconfig/ipvsadm.* -- gen_context(system_u:object_r:system_conf_t,s0) /etc/sysconfig/system-config-firewall.* -- gen_context(system_u:object_r:system_conf_t,s0) ++++++ fix_selinuxutil.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.437659384 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.437659384 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy-20210309/policy/modules/system/selinuxutil.te +Index: fedora-policy-20210628/policy/modules/system/selinuxutil.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/system/selinuxutil.te -+++ fedora-policy-20210309/policy/modules/system/selinuxutil.te +--- fedora-policy-20210628.orig/policy/modules/system/selinuxutil.te ++++ fedora-policy-20210628/policy/modules/system/selinuxutil.te @@ -238,6 +238,10 @@ ifdef(`hide_broken_symptoms',` ') @@ -13,7 +13,7 @@ portage_dontaudit_use_fds(load_policy_t) ') -@@ -619,6 +623,10 @@ logging_send_audit_msgs(setfiles_t) +@@ -618,6 +622,10 @@ logging_send_audit_msgs(setfiles_t) logging_send_syslog_msg(setfiles_t) optional_policy(` @@ -24,11 +24,11 @@ cloudform_dontaudit_write_cloud_log(setfiles_t) ') -Index: fedora-policy-20210309/policy/modules/system/selinuxutil.if +Index: fedora-policy-20210628/policy/modules/system/selinuxutil.if =================================================================== ---- fedora-policy-20210309.orig/policy/modules/system/selinuxutil.if -+++ fedora-policy-20210309/policy/modules/system/selinuxutil.if -@@ -777,6 +777,8 @@ interface(`seutil_dontaudit_read_config' +--- fedora-policy-20210628.orig/policy/modules/system/selinuxutil.if ++++ fedora-policy-20210628/policy/modules/system/selinuxutil.if +@@ -795,6 +795,8 @@ interface(`seutil_dontaudit_read_config' dontaudit $1 selinux_config_t:dir search_dir_perms; dontaudit $1 selinux_config_t:file read_file_perms; ++++++ fix_systemd.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.457659380 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.457659380 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy-20210309/policy/modules/system/systemd.te +Index: fedora-policy-20210628/policy/modules/system/systemd.te =================================================================== ---- fedora-policy-20210309.orig/policy/modules/system/systemd.te -+++ fedora-policy-20210309/policy/modules/system/systemd.te +--- fedora-policy-20210628.orig/policy/modules/system/systemd.te ++++ fedora-policy-20210628/policy/modules/system/systemd.te @@ -347,6 +347,10 @@ userdom_manage_user_tmp_chr_files(system xserver_dbus_chat(systemd_logind_t) @@ -13,7 +13,7 @@ apache_read_tmp_files(systemd_logind_t) ') -@@ -853,6 +857,10 @@ optional_policy(` +@@ -854,6 +858,10 @@ optional_policy(` udev_read_pid_files(systemd_hostnamed_t) ') ++++++ fix_systemd_watch.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.465659378 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.465659378 +0200 @@ -1,38 +1,17 @@ -Index: fedora-policy-20210419/policy/modules/system/systemd.te +Index: fedora-policy-20210716/policy/modules/system/systemd.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/system/systemd.te -+++ fedora-policy-20210419/policy/modules/system/systemd.te -@@ -1357,3 +1357,10 @@ fstools_rw_swap_files(systemd_sleep_t) - +--- fedora-policy-20210716.orig/policy/modules/system/systemd.te ++++ fedora-policy-20210716/policy/modules/system/systemd.te +@@ -1396,6 +1396,12 @@ fstools_rw_swap_files(systemd_sleep_t) # systemd-sleep needs to getattr swap partitions storage_getattr_fixed_disk_dev(systemd_sleep_t) -+ -+ + +####################################### +# +# Allow systemd to watch certificate dir for ca-certificates +# +watch_dirs_pattern(init_t,cert_t,cert_t) -Index: fedora-policy-20210419/policy/modules/system/init.te -=================================================================== ---- fedora-policy-20210419.orig/policy/modules/system/init.te -+++ fedora-policy-20210419/policy/modules/system/init.te -@@ -317,7 +317,10 @@ files_etc_filetrans_etc_runtime(init_t, - # Run /etc/X11/prefdm: - files_exec_etc_files(init_t) - files_watch_etc_dirs(init_t) -+files_watch_etc_files(init_t) - files_read_usr_files(init_t) -+files_watch_usr_dirs(init_t) -+files_watch_usr_files(init_t) - files_watch_root_dirs(init_t) - files_write_root_dirs(init_t) - files_watch_var_dirs(init_t) -@@ -334,6 +337,7 @@ files_remount_rootfs(init_t) - files_create_var_dirs(init_t) - files_watch_home(init_t) - files_watch_all_pid(init_t) -+watch_dirs_pattern(init_t,lib_t,lib_t) - - fs_list_inotifyfs(init_t) - # cjp: this may be related to /dev/log ++ + optional_policy(` + sysstat_domtrans(systemd_sleep_t) + ') ++++++ fix_thunderbird.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.477659375 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.477659375 +0200 @@ -1,8 +1,8 @@ -Index: fedora-policy/policy/modules/contrib/thunderbird.te +Index: fedora-policy-20210628/policy/modules/contrib/thunderbird.te =================================================================== ---- fedora-policy.orig/policy/modules/contrib/thunderbird.te -+++ fedora-policy/policy/modules/contrib/thunderbird.te -@@ -139,7 +139,6 @@ optional_policy(` +--- fedora-policy-20210628.orig/policy/modules/contrib/thunderbird.te ++++ fedora-policy-20210628/policy/modules/contrib/thunderbird.te +@@ -138,7 +138,6 @@ optional_policy(` optional_policy(` gnome_stream_connect_gconf(thunderbird_t) gnome_domtrans_gconfd(thunderbird_t) ++++++ fix_unconfined.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.485659374 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.489659373 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy/policy/modules/system/unconfined.te +Index: fedora-policy-20210628/policy/modules/system/unconfined.te =================================================================== ---- fedora-policy.orig/policy/modules/system/unconfined.te -+++ fedora-policy/policy/modules/system/unconfined.te +--- fedora-policy-20210628.orig/policy/modules/system/unconfined.te ++++ fedora-policy-20210628/policy/modules/system/unconfined.te @@ -1,5 +1,10 @@ policy_module(unconfined, 3.5.0) @@ -13,7 +13,7 @@ ######################################## # # Declarations -@@ -39,3 +44,6 @@ optional_policy(` +@@ -41,3 +46,6 @@ optional_policy(` optional_policy(` container_runtime_domtrans(unconfined_service_t) ') ++++++ fix_unconfineduser.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.497659371 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.497659371 +0200 @@ -1,8 +1,8 @@ -Index: fedora-policy-20210419/policy/modules/roles/unconfineduser.te +Index: fedora-policy-20210628/policy/modules/roles/unconfineduser.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/roles/unconfineduser.te -+++ fedora-policy-20210419/policy/modules/roles/unconfineduser.te -@@ -124,6 +124,11 @@ tunable_policy(`unconfined_dyntrans_all' +--- fedora-policy-20210628.orig/policy/modules/roles/unconfineduser.te ++++ fedora-policy-20210628/policy/modules/roles/unconfineduser.te +@@ -126,6 +126,11 @@ tunable_policy(`unconfined_dyntrans_all' domain_dyntrans(unconfined_t) ') @@ -14,7 +14,7 @@ optional_policy(` gen_require(` type unconfined_t; -@@ -214,6 +219,10 @@ optional_policy(` +@@ -212,6 +217,10 @@ optional_policy(` ') optional_policy(` @@ -25,7 +25,7 @@ chrome_role_notrans(unconfined_r, unconfined_t) tunable_policy(`unconfined_chrome_sandbox_transition',` -@@ -248,6 +257,18 @@ optional_policy(` +@@ -246,6 +255,18 @@ optional_policy(` dbus_stub(unconfined_t) optional_policy(` @@ -44,7 +44,7 @@ bluetooth_dbus_chat(unconfined_t) ') -@@ -311,6 +332,10 @@ optional_policy(` +@@ -309,6 +330,10 @@ optional_policy(` ') optional_policy(` ++++++ fix_unprivuser.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.509659369 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.509659369 +0200 @@ -1,8 +1,8 @@ -Index: fedora-policy-20210419/policy/modules/roles/unprivuser.te +Index: fedora-policy-20210628/policy/modules/roles/unprivuser.te =================================================================== ---- fedora-policy-20210419.orig/policy/modules/roles/unprivuser.te -+++ fedora-policy-20210419/policy/modules/roles/unprivuser.te -@@ -291,6 +291,13 @@ ifndef(`distro_redhat',` +--- fedora-policy-20210628.orig/policy/modules/roles/unprivuser.te ++++ fedora-policy-20210628/policy/modules/roles/unprivuser.te +@@ -287,6 +287,13 @@ ifndef(`distro_redhat',` ') optional_policy(` ++++++ fix_xserver.patch ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.521659366 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.521659366 +0200 @@ -1,7 +1,7 @@ -Index: fedora-policy/policy/modules/services/xserver.fc +Index: fedora-policy-20210628/policy/modules/services/xserver.fc =================================================================== ---- fedora-policy.orig/policy/modules/services/xserver.fc -+++ fedora-policy/policy/modules/services/xserver.fc +--- fedora-policy-20210628.orig/policy/modules/services/xserver.fc ++++ fedora-policy-20210628/policy/modules/services/xserver.fc @@ -71,6 +71,7 @@ HOME_DIR/\.dmrc.* -- gen_context(system_ /etc/X11/[wxg]dm/Xsession -- gen_context(system_u:object_r:xsession_exec_t,s0) /etc/X11/wdm(/.*)? gen_context(system_u:object_r:xdm_rw_etc_t,s0) @@ -18,7 +18,7 @@ /usr/bin/gpe-dm -- gen_context(system_u:object_r:xdm_exec_t,s0) /usr/bin/iceauth -- gen_context(system_u:object_r:iceauth_exec_t,s0) /usr/bin/razor-lightdm-.* -- gen_context(system_u:object_r:xdm_exec_t,s0) -@@ -135,6 +137,7 @@ HOME_DIR/\.dmrc.* -- gen_context(system_ +@@ -136,6 +138,7 @@ HOME_DIR/\.dmrc.* -- gen_context(system_ /usr/X11R6/lib/X11/xkb -d gen_context(system_u:object_r:xkb_var_lib_t,s0) /usr/X11R6/lib/X11/xkb/.* -- gen_context(system_u:object_r:xkb_var_lib_t,s0) @@ -26,11 +26,11 @@ ifndef(`distro_debian',` /usr/var/[xgkw]dm(/.*)? gen_context(system_u:object_r:xserver_log_t,s0) ') -Index: fedora-policy/policy/modules/services/xserver.te +Index: fedora-policy-20210628/policy/modules/services/xserver.te =================================================================== ---- fedora-policy.orig/policy/modules/services/xserver.te -+++ fedora-policy/policy/modules/services/xserver.te -@@ -477,6 +477,10 @@ userdom_delete_user_home_content_files(x +--- fedora-policy-20210628.orig/policy/modules/services/xserver.te ++++ fedora-policy-20210628/policy/modules/services/xserver.te +@@ -473,6 +473,10 @@ userdom_delete_user_home_content_files(x userdom_signull_unpriv_users(xdm_t) userdom_dontaudit_read_admin_home_lnk_files(xdm_t) ++++++ modules-targeted-base.conf ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.633659342 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.633659342 +0200 @@ -412,10 +412,3 @@ # Policy for wicked # wicked = module - -# Layer: contrib -# Module: tabrmd -# -# Policy for tabrmd -# -tabrmd = module ++++++ update.sh ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.817659303 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.821659302 +0200 @@ -11,7 +11,7 @@ mv selinux-policy fedora-policy-$date rm -rf fedora-policy-$date/.git* -mv container-selinux/container.* fedora-policy-$date/policy/modules/contrib/ +mv container-selinux/container.* fedora-policy-$date/policy/modules/services/ rm -f fedora-policy?$date.tar* tar cf fedora-policy-$date.tar fedora-policy-$date ++++++ wicked.te ++++++ --- /var/tmp/diff_new_pack.2vnCnv/_old 2021-08-02 12:04:48.893659287 +0200 +++ /var/tmp/diff_new_pack.2vnCnv/_new 2021-08-02 12:04:48.893659287 +0200 @@ -327,10 +327,6 @@ ') optional_policy(` - hal_write_log(wicked_t) -') - -optional_policy(` howl_signal(wicked_t) ')

1 0

commit powerpc-utils for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package powerpc-utils for openSUSE:Factory checked in at 2021-08-02 12:04:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/powerpc-utils (Old) and /work/SRC/openSUSE:Factory/.powerpc-utils.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "powerpc-utils" Mon Aug 2 12:04:32 2021 rev:116 rq:909365 version:1.3.9 Changes: -------- --- /work/SRC/openSUSE:Factory/powerpc-utils/powerpc-utils.changes 2021-07-02 13:27:19.428827288 +0200 +++ /work/SRC/openSUSE:Factory/.powerpc-utils.new.1899/powerpc-utils.changes 2021-08-02 12:04:44.813660154 +0200 @@ -1,0 +2,24 @@ +Fri Jul 30 07:39:59 UTC 2021 - Michal Suchanek <msuchanek(a)suse.de> + +- Update to version 1.3.9 (jsc#SLE-18645). + - Remove upstreamed patches + - 0001-HNV-fixes-for-qrydev-and-remove-lsdevinfo.patch + - 0002-Disable-vnic-as-backup-vdevice-for-migratable-SR_IOV.patch + - 0003-Clean-up-dead-network-config-interface-after-inactiv.patch + - powerpc-utils-sys_ident-Skip-length-field-from-search.patch + - 0001-hcnmgr-Avoid-cleanup-of-bond-interface-at-boot-time-.patch + - 0002-hcnmgr-Wait-for-sysfs-device-ready-when-looking-up-d.patch + - 0003-hcnmgr-Avoid-using-ifcfg-file-for-checking-bonding-i.patch + - 0004-hcnmgr-Avoid-using-xargs-to-process-NM-show-connecti.patch + - powerpc-utils-hcn-init-NM.patch + - ofpathname-Use-NVMe-controller-physical-nsid.patch + - powerpc-utils-Fix-ofpathname-race-with-udev-rename.patch + - powerpc-utils-Update-ppc64-cpu-usage.patch + - 0001-drmgr-don-t-open-sysfs-file-for-each-command.patch + - 0002-drmgr-read-the-CPU-NUMA-topology.patch + - 0003-drmgr-introduce-NUMA-based-LMB-removal.patch + - drmgr-fix-remove-by-index-operation.patch + - 0005-hcnmgr-When-trying-to-detect-HNV-bond-list-all-conne.patch + - 0006-hcnmgr-Set-autoconnect-slaves-on-HNV-connections.patch + +------------------------------------------------------------------- Old: ---- 0001-HNV-fixes-for-qrydev-and-remove-lsdevinfo.patch 0001-drmgr-don-t-open-sysfs-file-for-each-command.patch 0001-hcnmgr-Avoid-cleanup-of-bond-interface-at-boot-time-.patch 0002-Disable-vnic-as-backup-vdevice-for-migratable-SR_IOV.patch 0002-drmgr-read-the-CPU-NUMA-topology.patch 0002-hcnmgr-Wait-for-sysfs-device-ready-when-looking-up-d.patch 0003-Clean-up-dead-network-config-interface-after-inactiv.patch 0003-drmgr-introduce-NUMA-based-LMB-removal.patch 0003-hcnmgr-Avoid-using-ifcfg-file-for-checking-bonding-i.patch 0004-hcnmgr-Avoid-using-xargs-to-process-NM-show-connecti.patch 0005-hcnmgr-When-trying-to-detect-HNV-bond-list-all-conne.patch 0006-hcnmgr-Set-autoconnect-slaves-on-HNV-connections.patch drmgr-fix-remove-by-index-operation.patch ofpathname-Use-NVMe-controller-physical-nsid.patch powerpc-utils-1.3.8.tar.gz powerpc-utils-Fix-ofpathname-race-with-udev-rename.patch powerpc-utils-Update-ppc64-cpu-usage.patch powerpc-utils-hcn-init-NM.patch powerpc-utils-sys_ident-Skip-length-field-from-search.patch New: ---- powerpc-utils-1.3.9.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ powerpc-utils.spec ++++++ --- /var/tmp/diff_new_pack.X6mytV/_old 2021-08-02 12:04:45.457660018 +0200 +++ /var/tmp/diff_new_pack.X6mytV/_new 2021-08-02 12:04:45.457660018 +0200 @@ -17,7 +17,7 @@ Name: powerpc-utils -Version: 1.3.8 +Version: 1.3.9 Release: 0 Summary: Utilities for PowerPC Hardware License: GPL-2.0-or-later @@ -28,25 +28,7 @@ Patch1: powerpc-utils-lsprop.patch Patch2: ofpathname_powernv.patch Patch4: libvirt-service-dep.patch -Patch5: 0001-HNV-fixes-for-qrydev-and-remove-lsdevinfo.patch -Patch6: 0002-Disable-vnic-as-backup-vdevice-for-migratable-SR_IOV.patch -Patch7: 0003-Clean-up-dead-network-config-interface-after-inactiv.patch -Patch8: powerpc-utils-sys_ident-Skip-length-field-from-search.patch -Patch9: 0001-hcnmgr-Avoid-cleanup-of-bond-interface-at-boot-time-.patch -Patch10: 0002-hcnmgr-Wait-for-sysfs-device-ready-when-looking-up-d.patch -Patch11: 0003-hcnmgr-Avoid-using-ifcfg-file-for-checking-bonding-i.patch -Patch12: 0004-hcnmgr-Avoid-using-xargs-to-process-NM-show-connecti.patch -Patch13: powerpc-utils-hcn-init-NM.patch Patch14: fix_kexec_service_name_for_suse.patch -Patch15: ofpathname-Use-NVMe-controller-physical-nsid.patch -Patch16: powerpc-utils-Fix-ofpathname-race-with-udev-rename.patch -Patch17: powerpc-utils-Update-ppc64-cpu-usage.patch -Patch18: 0001-drmgr-don-t-open-sysfs-file-for-each-command.patch -Patch19: 0002-drmgr-read-the-CPU-NUMA-topology.patch -Patch20: 0003-drmgr-introduce-NUMA-based-LMB-removal.patch -Patch21: drmgr-fix-remove-by-index-operation.patch -Patch22: 0005-hcnmgr-When-trying-to-detect-HNV-bond-list-all-conne.patch -Patch23: 0006-hcnmgr-Set-autoconnect-slaves-on-HNV-connections.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: libnuma-devel @@ -63,10 +45,6 @@ Requires: systemd-sysvinit Requires: udev Requires: util-linux -%if !0%{?sle_version} || 0%{?sle_version} >= 150000 -# hcnmgr uses xxd from vim -Requires: (vim if NetworkManager) -%endif Recommends: powerpc-utils-python ExclusiveArch: ppc ppc64 ppc64le %{?systemd_requires} ++++++ powerpc-utils-1.3.8.tar.gz -> powerpc-utils-1.3.9.tar.gz ++++++ ++++ 3371 lines of diff (skipped)

1 0

commit tpm2.0-tools for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tpm2.0-tools for openSUSE:Factory checked in at 2021-08-02 12:04:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tpm2.0-tools (Old) and /work/SRC/openSUSE:Factory/.tpm2.0-tools.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "tpm2.0-tools" Mon Aug 2 12:04:31 2021 rev:31 rq:909338 version:5.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/tpm2.0-tools/tpm2.0-tools.changes 2021-07-18 23:44:48.267112852 +0200 +++ /work/SRC/openSUSE:Factory/.tpm2.0-tools.new.1899/tpm2.0-tools.changes 2021-08-02 12:04:42.657660613 +0200 @@ -1,0 +2,6 @@ +Thu Jul 29 14:15:11 UTC 2021 - Alberto Planas Dominguez <aplanas(a)suse.com> + +- Add 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch to +fix the offset of the read buffer + +------------------------------------------------------------------- New: ---- 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tpm2.0-tools.spec ++++++ --- /var/tmp/diff_new_pack.Xysgsy/_old 2021-08-02 12:04:44.601660200 +0200 +++ /var/tmp/diff_new_pack.Xysgsy/_new 2021-08-02 12:04:44.601660200 +0200 @@ -30,6 +30,7 @@ Patch0: fix_bogus_warning.patch Patch2: 0001-tpm2_checkquote-fix-uninitialized-variable.patch Patch3: 0001-tpm2_eventlog-read-eventlog-file-in-chunks.patch +Patch4: 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch BuildRequires: gcc-c++ BuildRequires: libcurl-devel BuildRequires: libopenssl-devel ++++++ 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch ++++++ From 24e193412eac3985baea5e83e3245a4315c86ebe Mon Sep 17 00:00:00 2001 From: Alberto Planas <aplanas(a)suse.com> Date: Thu, 29 Jul 2021 16:02:50 +0200 Subject: [PATCH 1/1] tpm2_eventlog: fix buffer offset when reading the event log The event log is read in chunks of CHUNK_SIZE blocks (16KB), always checking when the EOF is reached, so it is compatible with virtual files that lives in securityfs and we do not know the full size. The current code is not taking care of adjusting the offset when the next chunk is read. This patch add "size" to the base buffer where the event log is stored in memory. Fix #2778 Signed-off-by: Alberto Planas <aplanas(a)suse.com> --- tools/misc/tpm2_eventlog.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Index: tpm2-tools-5.1.1/tools/misc/tpm2_eventlog.c =================================================================== --- tpm2-tools-5.1.1.orig/tools/misc/tpm2_eventlog.c +++ tpm2-tools-5.1.1/tools/misc/tpm2_eventlog.c @@ -90,7 +90,7 @@ static tool_rc tpm2_tool_onrun(ESYS_CONT } unsigned long size = 0; - while (files_read_bytes_chunk(fileptr, eventlog, CHUNK_SIZE, &size)) { + while (files_read_bytes_chunk(fileptr, eventlog + size, CHUNK_SIZE, &size)) { UINT8 *eventlog_tmp = realloc(eventlog, size + CHUNK_SIZE); if (eventlog_tmp == NULL){ LOG_ERR("failed to allocate %lu bytes: %s", size + CHUNK_SIZE, strerror(errno));

1 0

commit perl-DBD-SQLite for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package perl-DBD-SQLite for openSUSE:Factory checked in at 2021-08-02 12:04:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-DBD-SQLite (Old) and /work/SRC/openSUSE:Factory/.perl-DBD-SQLite.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "perl-DBD-SQLite" Mon Aug 2 12:04:30 2021 rev:46 rq:909336 version:1.68 Changes: -------- --- /work/SRC/openSUSE:Factory/perl-DBD-SQLite/perl-DBD-SQLite.changes 2021-07-29 21:31:25.448810952 +0200 +++ /work/SRC/openSUSE:Factory/.perl-DBD-SQLite.new.1899/perl-DBD-SQLite.changes 2021-08-02 12:04:41.133660937 +0200 @@ -1,0 +2,6 @@ +Fri Jul 30 07:51:14 UTC 2021 - Tina M��ller <tina.mueller(a)suse.com> + +- Add patch silence_sqlite_unicode_deprecation_warning.patch + See https://github.com/DBD-SQLite/DBD-SQLite/issues/87 + +------------------------------------------------------------------- New: ---- silence_sqlite_unicode_deprecation_warning.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-DBD-SQLite.spec ++++++ --- /var/tmp/diff_new_pack.p95XqQ/_old 2021-08-02 12:04:42.441660659 +0200 +++ /var/tmp/diff_new_pack.p95XqQ/_new 2021-08-02 12:04:42.441660659 +0200 @@ -25,6 +25,7 @@ URL: https://metacpan.org/release/%{cpan_name} Source0: https://cpan.metacpan.org/authors/id/I/IS/ISHIGAKI/%{cpan_name}-%{version}.… Source1: cpanspec.yml +Patch0: silence_sqlite_unicode_deprecation_warning.patch BuildRequires: perl BuildRequires: perl-macros BuildRequires: perl(DBI) >= 1.57 @@ -70,7 +71,7 @@ the typeless nature of the SQLite database. %prep -%autosetup -n %{cpan_name}-%{version} +%autosetup -n %{cpan_name}-%{version} -p1 %build perl Makefile.PL INSTALLDIRS=vendor OPTIMIZE="%{optflags}" ++++++ cpanspec.yml ++++++ --- /var/tmp/diff_new_pack.p95XqQ/_old 2021-08-02 12:04:42.481660651 +0200 +++ /var/tmp/diff_new_pack.p95XqQ/_new 2021-08-02 12:04:42.481660651 +0200 @@ -4,8 +4,8 @@ #sources: # - source1 # - source2 -#patches: -# foo.patch: -p1 +patches: + silence_sqlite_unicode_deprecation_warning.patch: -p1 # bar.patch: #preamble: |- # BuildRequires: gcc-c++ ++++++ silence_sqlite_unicode_deprecation_warning.patch ++++++ diff --git a/dbdimp.c b/dbdimp.c index a8361ac..6dbff60 100644 --- a/dbdimp.c +++ b/dbdimp.c @@ -857,7 +857,10 @@ sqlite_db_STORE_attrib(SV *dbh, imp_dbh_t *imp_dbh, SV *keysv, SV *valuesv) } if (strEQ(key, "sqlite_unicode") || strEQ(key, "unicode")) { - _warn_deprecated_if_possible(key, "sqlite_string_mode"); + if (strEQ(key, "unicode")) { + /* it's too early to warn the deprecation of sqlite_unicode as it's widely used */ + _warn_deprecated_if_possible(key, "sqlite_string_mode"); + } #if PERL_UNICODE_DOES_NOT_WORK_WELL sqlite_trace(dbh, imp_dbh, 3, form("Unicode support is disabled for this version of perl.")); imp_dbh->string_mode = DBD_SQLITE_STRING_MODE_PV;

1 0

commit yast2-network for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package yast2-network for openSUSE:Factory checked in at 2021-08-02 12:04:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/yast2-network (Old) and /work/SRC/openSUSE:Factory/.yast2-network.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "yast2-network" Mon Aug 2 12:04:30 2021 rev:460 rq:909331 version:4.4.22 Changes: -------- --- /work/SRC/openSUSE:Factory/yast2-network/yast2-network.changes 2021-07-22 22:43:13.571210303 +0200 +++ /work/SRC/openSUSE:Factory/.yast2-network.new.1899/yast2-network.changes 2021-08-02 12:04:39.909661198 +0200 @@ -1,0 +2,6 @@ +Fri Jul 30 08:07:09 UTC 2021 - Knut Anderssen <kanderssen(a)suse.com> + +- Fix write of device routes. (bsc#1188908) +- 4.4.22 + +------------------------------------------------------------------- Old: ---- yast2-network-4.4.21.tar.bz2 New: ---- yast2-network-4.4.22.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-network.spec ++++++ --- /var/tmp/diff_new_pack.IDmnij/_old 2021-08-02 12:04:40.581661055 +0200 +++ /var/tmp/diff_new_pack.IDmnij/_new 2021-08-02 12:04:40.581661055 +0200 @@ -17,7 +17,7 @@ Name: yast2-network -Version: 4.4.21 +Version: 4.4.22 Release: 0 Summary: YaST2 - Network Configuration License: GPL-2.0-only ++++++ yast2-network-4.4.21.tar.bz2 -> yast2-network-4.4.22.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/package/yast2-network.changes new/yast2-network-4.4.22/package/yast2-network.changes --- old/yast2-network-4.4.21/package/yast2-network.changes 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/package/yast2-network.changes 2021-07-30 09:45:46.000000000 +0200 @@ -1,4 +1,10 @@ ------------------------------------------------------------------- +Fri Jul 30 08:07:09 UTC 2021 - Knut Anderssen <kanderssen(a)suse.com> + +- Fix write of device routes. (bsc#1188908) +- 4.4.22 + +------------------------------------------------------------------- Tue Jul 20 08:47:30 UTC 2021 - Knut Anderssen <kanderssen(a)suse.com> - Do not crash when the aliases defined in the AutoYaST profile diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/package/yast2-network.spec new/yast2-network-4.4.22/package/yast2-network.spec --- old/yast2-network-4.4.21/package/yast2-network.spec 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/package/yast2-network.spec 2021-07-30 09:45:46.000000000 +0200 @@ -17,7 +17,7 @@ Name: yast2-network -Version: 4.4.21 +Version: 4.4.22 Release: 0 Summary: YaST2 - Network Configuration License: GPL-2.0-only diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/src/include/network/routines.rb new/yast2-network-4.4.22/src/include/network/routines.rb --- old/yast2-network-4.4.21/src/include/network/routines.rb 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/src/include/network/routines.rb 2021-07-30 09:45:46.000000000 +0200 @@ -159,27 +159,6 @@ TypeRepository.IsEmpty(value) end - # For s390 hwinfo gives us a multitude of types but some are handled - # the same, mostly acording to the driver which is used. So let's group - # them under the name Driver Type. - # @param [String] type a type, as in Lan::type - # @return driver type, like formerly type2 for s390 - def DriverType(type) - drvtype = type - # handle HSI like qeth, S#40692#c15 - case type - when "hsi" - drvtype = "qeth" - # Should eth occur on s390? - when "tr", "eth" - drvtype = "lcs" - # N#82891 - when "escon", "ficon" - drvtype = "ctc" - end - drvtype - end - def DistinguishedName(name, hwdevice) hwdevice = deep_copy(hwdevice) if Ops.get_string(hwdevice, "sysfs_bus_id", "") != "" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/src/include/network/services/dns.rb new/yast2-network-4.4.22/src/include/network/services/dns.rb --- old/yast2-network-4.4.21/src/include/network/services/dns.rb 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/src/include/network/services/dns.rb 2021-07-30 09:45:46.000000000 +0200 @@ -645,10 +645,6 @@ nil end - def ReallyAbortInst - Popup.ConfirmAbort(:incomplete) - end - # Standalone dialog only - embedded one is handled separately # via CWMTab def DNSMainDialog(_standalone) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/src/lib/network/network_autoyast.rb new/yast2-network-4.4.22/src/lib/network/network_autoyast.rb --- old/yast2-network-4.4.21/src/lib/network/network_autoyast.rb 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/src/lib/network/network_autoyast.rb 2021-07-30 09:45:46.000000000 +0200 @@ -41,12 +41,8 @@ def initialize # import has to be done here, there are some collisions otherwise - Yast.import "Arch" Yast.import "Lan" - Yast.import "Linuxrc" Yast.import "Host" - Yast.import "AutoInstall" - Yast.import "Stage" end # Merges existing config from system into given configuration map diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/src/lib/y2network/interface.rb new/yast2-network-4.4.22/src/lib/y2network/interface.rb --- old/yast2-network-4.4.21/src/lib/y2network/interface.rb 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/src/lib/y2network/interface.rb 2021-07-30 09:45:46.000000000 +0200 @@ -20,7 +20,6 @@ require "yast" require "y2network/interface_type" require "y2network/udev_rule" -require "yast2/equatable" module Y2Network # Network interface. @@ -38,7 +37,6 @@ class Interface extend Forwardable include Yast::Logger - include Yast2::Equatable # @return [String] Device name ('eth0', 'wlan0', etc.) attr_accessor :name @@ -83,7 +81,27 @@ @renaming_mechanism = :none end - eql_attr :name + # Determines whether two interfaces are equal + # + # @note although it is preferable to use Yast2::Equatable it uses the class + # hash for comparing objects and it will fail when comparing with + # subclasses objects (bsc#1188908) + # @param other [Interface] Interface to compare with + # @return [Boolean] + def ==(other) + return false unless other.is_a?(Interface) + + name == other.name + end + + # eql? (hash key equality) should alias ==, see also + # https://ruby-doc.org/core-2.3.3/Object.html#method-i-eql-3F + alias_method :eql?, :== + + # Used by Array or Hash in order to compare equality of elements (bsc#1186082) + def hash + name.hash + end # Complete configuration of the interface # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/src/modules/Lan.rb new/yast2-network-4.4.22/src/modules/Lan.rb --- old/yast2-network-4.4.21/src/modules/Lan.rb 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/src/modules/Lan.rb 2021-07-30 09:45:46.000000000 +0200 @@ -692,6 +692,7 @@ # # @note parsing dhcp ntp servers when NetworkManager is in use is not # supported yet (bsc#798886) + # @note called from installer # # @return [Array<String>] list of ntp servers obtained byg DHCP def dhcp_ntp_servers diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-network-4.4.21/test/y2network/route_test.rb new/yast2-network-4.4.22/test/y2network/route_test.rb --- old/yast2-network-4.4.21/test/y2network/route_test.rb 2021-07-20 17:55:51.000000000 +0200 +++ new/yast2-network-4.4.22/test/y2network/route_test.rb 2021-07-30 09:45:46.000000000 +0200 @@ -48,7 +48,7 @@ describe "==" do let(:other_to) { IPAddr.new("192.168.122.0/24") } - let(:other_interface) { Y2Network::Interface.new("eth0") } + let(:other_interface) { Y2Network::PhysicalInterface.new("eth0") } let(:other_gateway) { nil } let(:other_options) { "" }

1 0

commit bctoolbox for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package bctoolbox for openSUSE:Factory checked in at 2021-08-02 12:04:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bctoolbox (Old) and /work/SRC/openSUSE:Factory/.bctoolbox.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "bctoolbox" Mon Aug 2 12:04:21 2021 rev:24 rq:909328 version:5.0.3 Changes: -------- --- /work/SRC/openSUSE:Factory/bctoolbox/bctoolbox.changes 2021-07-18 23:45:06.830970039 +0200 +++ /work/SRC/openSUSE:Factory/.bctoolbox.new.1899/bctoolbox.changes 2021-08-02 12:04:38.965661398 +0200 @@ -1,0 +2,6 @@ +Fri Jul 30 07:37:01 UTC 2021 - Paolo Stivanin <info(a)paolostivanin.com> + +- Update to 5.0.3: + * no changelog + +------------------------------------------------------------------- Old: ---- bctoolbox-5.0.0.tar.gz New: ---- bctoolbox-5.0.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bctoolbox.spec ++++++ --- /var/tmp/diff_new_pack.wQoqbo/_old 2021-08-02 12:04:39.493661286 +0200 +++ /var/tmp/diff_new_pack.wQoqbo/_new 2021-08-02 12:04:39.497661285 +0200 @@ -18,7 +18,7 @@ %define sover 1 Name: bctoolbox -Version: 5.0.0 +Version: 5.0.3 Release: 0 Summary: Utility library for software from Belledonne Communications License: GPL-2.0-or-later ++++++ bctoolbox-5.0.0.tar.gz -> bctoolbox-5.0.3.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/bctoolbox-5.0.0/CHANGELOG.md new/bctoolbox-5.0.3/CHANGELOG.md --- old/bctoolbox-5.0.0/CHANGELOG.md 2021-07-07 13:05:29.000000000 +0200 +++ new/bctoolbox-5.0.3/CHANGELOG.md 2021-07-29 14:06:35.000000000 +0200 @@ -7,6 +7,14 @@ ## [Unreleased] +## [5.0.0] - 2021-07-08 + +### Added +- Tester API: add API to set maximum number of failed tests. + +### Fixed +- Few bugfixes (see git log) + ## [4.5.0] - 2021-03-29 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/bctoolbox-5.0.0/include/bctoolbox/crypto.hh new/bctoolbox-5.0.3/include/bctoolbox/crypto.hh --- old/bctoolbox-5.0.0/include/bctoolbox/crypto.hh 2021-07-07 13:05:29.000000000 +0200 +++ new/bctoolbox-5.0.3/include/bctoolbox/crypto.hh 2021-07-29 14:06:35.000000000 +0200 @@ -22,6 +22,7 @@ #include <vector> #include <memory> +#include <string> namespace bctoolbox { /** diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/bctoolbox-5.0.0/src/logging/logging.c new/bctoolbox-5.0.3/src/logging/logging.c --- old/bctoolbox-5.0.0/src/logging/logging.c 2021-07-07 13:05:29.000000000 +0200 +++ new/bctoolbox-5.0.3/src/logging/logging.c 2021-07-29 14:06:35.000000000 +0200 @@ -451,7 +451,7 @@ return ret; } -#if defined(_WIN32) || defined(_WIN32_WCE) +#if !defined(BCTBX_WINDOWS_UWP) && (defined(_WIN32) || defined(_WIN32_WCE)) #define ENDLINE "\r\n" #else #define ENDLINE "\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/bctoolbox-5.0.0/src/tester.c new/bctoolbox-5.0.3/src/tester.c --- old/bctoolbox-5.0.0/src/tester.c 2021-07-07 13:05:29.000000000 +0200 +++ new/bctoolbox-5.0.3/src/tester.c 2021-07-29 14:06:35.000000000 +0200 @@ -982,7 +982,7 @@ CU_set_suite_init_failure_handler(suite_init_failure_message_handler); CU_set_suite_cleanup_failure_handler(suite_cleanup_failure_message_handler); - if (xml_enabled == 1) { + if (xml_enabled == 1 && !test_name) { char *xml_file_name;//, *xml_file_name_tmp; CU_automated_enable_junit_xml(TRUE); /* this requires 3.0.1 because previous versions crash automated.c */

1 0

commit rust-cbindgen for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rust-cbindgen for openSUSE:Factory checked in at 2021-08-02 12:04:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rust-cbindgen (Old) and /work/SRC/openSUSE:Factory/.rust-cbindgen.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "rust-cbindgen" Mon Aug 2 12:04:19 2021 rev:17 rq:909327 version:0.20.0+git0 Changes: -------- --- /work/SRC/openSUSE:Factory/rust-cbindgen/rust-cbindgen.changes 2021-07-07 18:29:44.975334700 +0200 +++ /work/SRC/openSUSE:Factory/.rust-cbindgen.new.1899/rust-cbindgen.changes 2021-08-02 12:04:33.765662504 +0200 @@ -1,0 +2,15 @@ +Fri Jul 30 02:55:28 UTC 2021 - william.brown(a)suse.com + +- Update to version 0.20.0+git0: + * v0.20.0 + * Don't use `check` profile when expanding code on a release build + * Update --pretty=expanded to -Zunpretty=expanded + * Fix some clippy lints. + * Simplify Pin<T> to T + * add `Builder::with_using_namespaces` + * Ignore PhantomPinned + * Move the target-guessing code from #676 to its own function. + * Only fetch dependencies for current platform by default (#676) + * v0.19.0 + +------------------------------------------------------------------- Old: ---- cbindgen-0.19.0+git0.tar.xz New: ---- cbindgen-0.20.0+git0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rust-cbindgen.spec ++++++ --- /var/tmp/diff_new_pack.Aa1nMh/_old 2021-08-02 12:04:34.405662368 +0200 +++ /var/tmp/diff_new_pack.Aa1nMh/_new 2021-08-02 12:04:34.409662367 +0200 @@ -20,7 +20,7 @@ %global crate_name cbindgen %global rustflags -Clink-arg=-Wl,-z,relro,-z,now Name: rust-%{crate_name} -Version: 0.19.0+git0 +Version: 0.20.0+git0 Release: 0 Summary: A tool for generating C bindings from Rust code License: MPL-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Aa1nMh/_old 2021-08-02 12:04:34.445662360 +0200 +++ /var/tmp/diff_new_pack.Aa1nMh/_new 2021-08-02 12:04:34.445662360 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/eqrion/cbindgen.git</param> <param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@</param> <param name="scm">git</param> - <param name="revision">v0.19.0</param> + <param name="revision">v0.20.0</param> <param name="match-tag">*</param> <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)</param> <param name="versionrewrite-replacement">\1</param> @@ -19,6 +19,7 @@ <service name="cargo_vendor" mode="disabled"> <param name="srcdir">cbindgen</param> <param name="compression">xz</param> + <param name="update">true</param> </service> <service name="cargo_audit" mode="disabled"> <param name="srcdir">cbindgen</param> ++++++ cbindgen-0.19.0+git0.tar.xz -> cbindgen-0.20.0+git0.tar.xz ++++++ ++++ 523688 lines of diff (skipped) ++++++ vendor.tar.xz ++++++ ++++ 2555 lines of diff (skipped)

1 0

commit go1.15 for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.15 for openSUSE:Factory checked in at 2021-08-02 12:04:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.15 (Old) and /work/SRC/openSUSE:Factory/.go1.15.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "go1.15" Mon Aug 2 12:04:19 2021 rev:16 rq:909324 version:1.15.14 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.15/go1.15.changes 2021-07-15 23:58:50.722250186 +0200 +++ /work/SRC/openSUSE:Factory/.go1.15.new.1899/go1.15.changes 2021-08-02 12:04:32.877662693 +0200 @@ -1,0 +2,5 @@ +Sun Jul 25 14:50:13 UTC 2021 - Hillwood Yang <hillwood(a)opensuse.org> + +- Fix go#46803 boo#1188906, add fix-crash-on-ppc64le.patch + +------------------------------------------------------------------- New: ---- fix-crash-on-ppc64le.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.15.spec ++++++ --- /var/tmp/diff_new_pack.KHTR4E/_old 2021-08-02 12:04:33.521662556 +0200 +++ /var/tmp/diff_new_pack.KHTR4E/_new 2021-08-02 12:04:33.525662555 +0200 @@ -154,6 +154,9 @@ Patch9: gcc7-go.patch # PATCH-FIX-UPSTREAM prefer /etc/hosts over DNS when /etc/nsswitch.conf not present boo#1172868 gh#golang/go#35305 Patch12: go1.x-prefer-etc-hosts-over-dns.patch +# PATCH-FIX-UPSTREAM fix-crash-on-ppc64le.patch hillwood(a)opensuse.org - runtime: fix crash during VDSO calls on PowerPC +# https://go-review.googlesource.com/c/go/+/328110/ +Patch13: fix-crash-on-ppc64le.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build # boostrap %if %{with gccgo} @@ -240,6 +243,7 @@ %setup -q -n go %patch5 -p1 %patch12 -p1 +%patch13 -p1 %if %{with gccgo} %if 0%{?gcc_go_version} == 6 %patch8 -p1 ++++++ fix-crash-on-ppc64le.patch ++++++ From 781560d5d38247f0b55dacdeace8a930cf922fa1 Mon Sep 17 00:00:00 2001 From: Derek Parker <parkerderek86(a)gmail.com> Date: Thu, 17 Jun 2021 20:22:40 +0000 Subject: [PATCH] [release-branch.go1.15] runtime: fix crash during VDSO calls on PowerPC This patch reinstates a fix for PowerPC with regard to making VDSO calls while receiving a signal, and subsequently crashing. The crash happens because certain VDSO calls can modify the r30 register, which is where g is stored. This change was reverted for PowerPC because r30 is supposed to be a non-volatile register. This is true, but that only makes a guarantee across function calls, but not "within" a function call. This patch was seemingly fine before because the Linux kernel still had hand rolled assembly VDSO function calls, however with a recent change to C function calls it seems the compiler used can generate instructions which temporarily clobber r30. This means that when we receive a signal during one of these calls the value of r30 will not be the g as the runtime expects, causing a segfault. You can see from this assembly dump how the register is clobbered during the call: (the following is from a 5.13rc2 kernel) ``` Dump of assembler code for function __cvdso_clock_gettime_data: 0x00007ffff7ff0700 <+0>: cmplwi r4,15 0x00007ffff7ff0704 <+4>: bgt 0x7ffff7ff07f0 <__cvdso_clock_gettime_data+240> 0x00007ffff7ff0708 <+8>: li r9,1 0x00007ffff7ff070c <+12>: slw r9,r9,r4 0x00007ffff7ff0710 <+16>: andi. r10,r9,2179 0x00007ffff7ff0714 <+20>: beq 0x7ffff7ff0810 <__cvdso_clock_gettime_data+272> 0x00007ffff7ff0718 <+24>: rldicr r10,r4,4,59 0x00007ffff7ff071c <+28>: lis r9,32767 0x00007ffff7ff0720 <+32>: std r30,-16(r1) 0x00007ffff7ff0724 <+36>: std r31,-8(r1) 0x00007ffff7ff0728 <+40>: add r6,r3,r10 0x00007ffff7ff072c <+44>: ori r4,r9,65535 0x00007ffff7ff0730 <+48>: lwz r8,0(r3) 0x00007ffff7ff0734 <+52>: andi. r9,r8,1 0x00007ffff7ff0738 <+56>: bne 0x7ffff7ff07d0 <__cvdso_clock_gettime_data+208> 0x00007ffff7ff073c <+60>: lwsync 0x00007ffff7ff0740 <+64>: mftb r30 <---- RIGHT HERE => 0x00007ffff7ff0744 <+68>: ld r12,40(r6) ``` What I believe is happening is that the kernel changed the PowerPC VDSO calls to use standard C calls instead of using hand rolled assembly. The hand rolled assembly calls never touched r30, so this change was safe to roll back. That does not seem to be the case anymore as on the 5.13rc2 kernel the compiler *is* generating assembly which modifies r30, making this change again unsafe and causing a crash when the program receives a signal during these calls (which will happen often due to async preempt). This change happened here: https://lwn.net/ml/linux-kernel/235e5571959cfa89ced081d7e838ed5ff38447d2.16…. I realize this was reverted due to unexplained hangs in PowerPC builders, but I think we should reinstate this change and investigate those issues separately: https://github.com/golang/go/commit/f4ca3c1e0a2066ca4f7bd6203866d282ed34acf2 Fixes #46857 Change-Id: Ib18d7bbfc80a1a9cb558f0098878d41081324b52 GitHub-Last-Rev: c3002bcfca3ef58b27485e31328e6297b7a9dfe7 GitHub-Pull-Request: golang/go#46767 Reviewed-on: https://go-review.googlesource.com/c/go/+/328110 Run-TryBot: Lynn Boger <laboger(a)linux.vnet.ibm.com> TryBot-Result: Go Bot <gobot(a)golang.org> Reviewed-by: Cherry Mui <cherryyz(a)google.com> Trust: Lynn Boger <laboger(a)linux.vnet.ibm.com> (cherry picked from commit 16e82be454cbf41299e6a055d54d489ca4612ee0) --- diff --git a/src/runtime/signal_unix.go b/src/runtime/signal_unix.go index 003c7b0..8e1eb9e 100644 --- a/src/runtime/signal_unix.go +++ b/src/runtime/signal_unix.go @@ -393,7 +393,7 @@ //go:nosplit func sigFetchG(c *sigctxt) *g { switch GOARCH { - case "arm", "arm64": + case "arm", "arm64", "ppc64", "ppc64le": if !iscgo && inVDSOPage(c.sigpc()) { // When using cgo, we save the g on TLS and load it from there // in sigtramp. Just use that. diff --git a/src/runtime/sys_linux_ppc64x.s b/src/runtime/sys_linux_ppc64x.s index fd69ee7..7be8c4c 100644 --- a/src/runtime/sys_linux_ppc64x.s +++ b/src/runtime/sys_linux_ppc64x.s @@ -215,15 +215,45 @@ MOVD (g_sched+gobuf_sp)(R7), R1 // Set SP to g0 stack noswitch: - SUB $16, R1 // Space for results - RLDICR $0, R1, $59, R1 // Align for C code + SUB $16, R1 // Space for results + RLDICR $0, R1, $59, R1 // Align for C code MOVD R12, CTR MOVD R1, R4 - BL (CTR) // Call from VDSO - MOVD $0, R0 // Restore R0 - MOVD 0(R1), R3 // sec - MOVD 8(R1), R5 // nsec - MOVD R15, R1 // Restore SP + + // Store g on gsignal's stack, so if we receive a signal + // during VDSO code we can find the g. + // If we don't have a signal stack, we won't receive signal, + // so don't bother saving g. + // When using cgo, we already saved g on TLS, also don't save + // g here. + // Also don't save g if we are already on the signal stack. + // We won't get a nested signal. + MOVBZ runtime��iscgo(SB), R22 + CMP R22, $0 + BNE nosaveg + MOVD m_gsignal(R21), R22 // g.m.gsignal + CMP R22, $0 + BEQ nosaveg + + CMP g, R22 + BEQ nosaveg + MOVD (g_stack+stack_lo)(R22), R22 // g.m.gsignal.stack.lo + MOVD g, (R22) + + BL (CTR) // Call from VDSO + + MOVD $0, (R22) // clear g slot, R22 is unchanged by C code + + JMP finish + +nosaveg: + BL (CTR) // Call from VDSO + +finish: + MOVD $0, R0 // Restore R0 + MOVD 0(R1), R3 // sec + MOVD 8(R1), R5 // nsec + MOVD R15, R1 // Restore SP // Restore vdsoPC, vdsoSP // We don't worry about being signaled between the two stores. @@ -235,7 +265,7 @@ MOVD 32(R1), R6 MOVD R6, m_vdsoPC(R21) -finish: +return: MOVD R3, sec+0(FP) MOVW R5, nsec+8(FP) RET @@ -246,7 +276,7 @@ SYSCALL $SYS_clock_gettime MOVD 32(R1), R3 MOVD 40(R1), R5 - JMP finish + JMP return TEXT runtime��nanotime1(SB),NOSPLIT,$16-8 MOVD $1, R3 // CLOCK_MONOTONIC @@ -282,7 +312,37 @@ RLDICR $0, R1, $59, R1 // Align for C code MOVD R12, CTR MOVD R1, R4 - BL (CTR) // Call from VDSO + + // Store g on gsignal's stack, so if we receive a signal + // during VDSO code we can find the g. + // If we don't have a signal stack, we won't receive signal, + // so don't bother saving g. + // When using cgo, we already saved g on TLS, also don't save + // g here. + // Also don't save g if we are already on the signal stack. + // We won't get a nested signal. + MOVBZ runtime��iscgo(SB), R22 + CMP R22, $0 + BNE nosaveg + MOVD m_gsignal(R21), R22 // g.m.gsignal + CMP R22, $0 + BEQ nosaveg + + CMP g, R22 + BEQ nosaveg + MOVD (g_stack+stack_lo)(R22), R22 // g.m.gsignal.stack.lo + MOVD g, (R22) + + BL (CTR) // Call from VDSO + + MOVD $0, (R22) // clear g slot, R22 is unchanged by C code + + JMP finish + +nosaveg: + BL (CTR) // Call from VDSO + +finish: MOVD $0, R0 // Restore R0 MOVD 0(R1), R3 // sec MOVD 8(R1), R5 // nsec @@ -298,7 +358,7 @@ MOVD 32(R1), R6 MOVD R6, m_vdsoPC(R21) -finish: +return: // sec is in R3, nsec in R5 // return nsec in R3 MOVD $1000000000, R4 @@ -313,7 +373,7 @@ SYSCALL $SYS_clock_gettime MOVD 32(R1), R3 MOVD 40(R1), R5 - JMP finish + JMP return TEXT runtime��rtsigprocmask(SB),NOSPLIT|NOFRAME,$0-28 MOVW how+0(FP), R3 @@ -366,7 +426,7 @@ // this might be called in external code context, // where g is not set. MOVBZ runtime��iscgo(SB), R6 - CMP R6, $0 + CMP R6, $0 BEQ 2(PC) BL runtime��load_g(SB)

1 0

commit gnome-session for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gnome-session for openSUSE:Factory checked in at 2021-08-02 12:04:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gnome-session (Old) and /work/SRC/openSUSE:Factory/.gnome-session.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gnome-session" Mon Aug 2 12:04:18 2021 rev:196 rq:909320 version:40.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/gnome-session/gnome-session.changes 2021-05-06 22:51:51.234940869 +0200 +++ /work/SRC/openSUSE:Factory/.gnome-session.new.1899/gnome-session.changes 2021-08-02 12:04:32.041662871 +0200 @@ -1,0 +2,7 @@ +Fri Jul 30 01:01:37 UTC 2021 - Xiaoguang Wang <xiaoguang.wang(a)suse.com> + +- Add gnome-session-exit-when-lost-name-on-bus.patch: gnome-session + exit immediately when lost name on bus + (bsc#1175622 glgo!GNOME/gnome-session!60, bsc#1188882). + +------------------------------------------------------------------- New: ---- gnome-session-exit-when-lost-name-on-bus.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gnome-session.spec ++++++ --- /var/tmp/diff_new_pack.cEslSi/_old 2021-08-02 12:04:32.681662735 +0200 +++ /var/tmp/diff_new_pack.cEslSi/_new 2021-08-02 12:04:32.685662734 +0200 @@ -28,6 +28,8 @@ Source2: gnome.desktop # PATCH-FIX-UPSTREAM gnome-session-better-handle-empty-xdg_session_type.patch bsc#1084756 bgo#794256 yfjiang(a)suse.com -- solution provided by msrb(a)suse.com using a more reasonable way to handle gpu acceleration check Patch0: gnome-session-better-handle-empty-xdg_session_type.patch +# PATCH-FIX-UPSTREAM gnome-session-exit-when-lost-name-on-bus.patch bsc#1175622 glgo!GNOME/gnome-session!60 xwang(a)suse.com -- gnome-session exit immediately when lost name on bus +Patch1: gnome-session-exit-when-lost-name-on-bus.patch BuildRequires: docbook-xsl-stylesheets BuildRequires: fdupes ++++++ gnome-session-exit-when-lost-name-on-bus.patch ++++++ diff --git a/gnome-session/gsm-manager.c b/gnome-session/gsm-manager.c index 6839a02d..67b09d8a 100644 --- a/gnome-session/gsm-manager.c +++ b/gnome-session/gsm-manager.c @@ -1802,6 +1802,14 @@ gsm_manager_set_failsafe (GsmManager *manager, manager->priv->failsafe = enabled; } +gboolean +gsm_manager_get_dbus_disconnected (GsmManager *manager) +{ + g_return_val_if_fail (GSM_IS_MANAGER (manager), FALSE); + + return manager->priv->dbus_disconnected; +} + gboolean gsm_manager_get_failsafe (GsmManager *manager) { diff --git a/gnome-session/main.c b/gnome-session/main.c index 01f56667..51ea6975 100644 --- a/gnome-session/main.c +++ b/gnome-session/main.c @@ -83,8 +83,12 @@ on_name_lost (GDBusConnection *connection, gpointer data) { if (connection == NULL) { - g_warning ("Lost name on bus: %s", name); - gsm_fail_whale_dialog_we_failed (TRUE, TRUE, NULL); + if (gsm_manager_get_dbus_disconnected (manager)) + gsm_quit (); + else { + g_warning ("Lost name on bus: %s", name); + gsm_fail_whale_dialog_we_failed (TRUE, TRUE, NULL); + } } else { g_debug ("Calling name lost callback function");

1 0

commit virtualbox for openSUSE:Factory
by Source-Sync 02 Aug '21

02 Aug '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package virtualbox for openSUSE:Factory checked in at 2021-08-02 12:04:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/virtualbox (Old) and /work/SRC/openSUSE:Factory/.virtualbox.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "virtualbox" Mon Aug 2 12:04:18 2021 rev:221 rq:909268 version:6.1.26 Changes: -------- --- /work/SRC/openSUSE:Factory/virtualbox/virtualbox.changes 2021-07-22 22:43:17.535205137 +0200 +++ /work/SRC/openSUSE:Factory/.virtualbox.new.1899/virtualbox.changes 2021-08-02 12:04:29.725663363 +0200 @@ -1,0 +2,14 @@ +Thu Jul 29 18:34:12 UTC 2021 - Larry Finger <Larry.Finger(a)gmail.com> + +- Version bump to 6.1.26 (released July 28 2021 by Oracle) + + This is a maintenance release. The following items were fixed and/or added: + + VMSVGA: fixed VM screen artifacts after restoring from saved state (bug #20067) + Storage: Fixed audio endianness for certain CUE sheet CD/DVD images. + VBoxHeadless: Running VM will save its state on host shutdown + VBoxManage: Fix OS detection for Ubuntu 20.10 ISO with unattended install + Linux Additions: Fixed mouse pointer offsetting issue for VMSVGA graphics adapter in multi-monitor VM setup (6.1.24 regression) + + File "fix_ordering_of_qt_includes.patch" added for Leap and SLR builds. +------------------------------------------------------------------- Old: ---- VirtualBox-6.1.24-patched.tar.bz2 New: ---- VirtualBox-6.1.26-patched.tar.bz2 fix_ordering_of_qt_includes.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ virtualbox.spec ++++++ ++++ 759 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/virtualbox/virtualbox.spec ++++ and /work/SRC/openSUSE:Factory/.virtualbox.new.1899/virtualbox.spec ++++++ UserManual.pdf ++++++ (binary differes) ++++++ VirtualBox-6.1.24-patched.tar.bz2 -> VirtualBox-6.1.26-patched.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/virtualbox/VirtualBox-6.1.24-patched.tar.bz2 /work/SRC/openSUSE:Factory/.virtualbox.new.1899/VirtualBox-6.1.26-patched.tar.bz2 differ: char 11, line 1 ++++++ fix_lib_search.patch ++++++ --- /var/tmp/diff_new_pack.xbApp4/_old 2021-08-02 12:04:31.357663016 +0200 +++ /var/tmp/diff_new_pack.xbApp4/_new 2021-08-02 12:04:31.357663016 +0200 @@ -1,21 +1,21 @@ -Index: VirtualBox-6.1.14/configure +Index: VirtualBox-6.1.26/configure =================================================================== ---- VirtualBox-6.1.14.orig/configure -+++ VirtualBox-6.1.14/configure -@@ -1588,14 +1588,14 @@ EOF +--- VirtualBox-6.1.26.orig/configure ++++ VirtualBox-6.1.26/configure +@@ -1586,14 +1586,14 @@ EOF INCQT5="$q/include $q/include/QtCore" FLGQT5="-DQT_SHARED" I_INCQT5=`prefix_I "$INCQT5"` -- LIBQT5="-L$q/lib -lQt5CoreVBox" -+ LIBQT5="-L$q/lib -L$q/usr/lib64 -lQt5CoreVBox" +- LIBQT5="-L$q/lib -lQt5CoreVBox -lQt5GuiVBox" ++ LIBQT5="-L$q/lib -L$q/usr/lib64 -lQt5CoreVBox -lQt5GuiVBox" TOOLQT5="$q" if test_compile "$LIBQT5 $LIBPTHREAD $I_INCQT5 $FLGQT5" qt5 qt5 nofatal && test_execute_path "`L_to_PATH "$LIBQT5"`" nofatal; then foundqt5=2 # internal break; fi -- LIBQT5="-L$q/lib -lQt5Core" -+ LIBQT5="-L$q/lib -L$q/usr/lib64 -lQt5Core" +- LIBQT5="-L$q/lib -lQt5Core -lQt5Gui" ++ LIBQT5="-L$q/lib -L$q/usr/lib64 -lQt5Core -lQt5Gui" if test_compile "$LIBQT5 $LIBPTHREAD $I_INCQT5 $FLGQT5" qt5 qt5 nofatal && test_execute_path "`L_to_PATH "$LIBQT5"`" nofatal; then foundqt5=1 # no pkg-config, Qt directory ++++++ fix_ordering_of_qt_includes.patch ++++++ Index: VirtualBox-6.1.26/configure =================================================================== --- VirtualBox-6.1.26.orig/configure +++ VirtualBox-6.1.26/configure @@ -1561,7 +1561,7 @@ EOF qt5_ver=`pkg-config Qt5Core --modversion 2>> $LOG` if [ $? -eq 0 ]; then echo "(Qt5 from pkg-config)" >> $LOG - FLGQT5=`pkg-config Qt5Core Qt5Gui --cflags` + FLGQT5=`pkg-config Qt5Core --cflags` # gcc 4.8 is able to compile with C++11 (see also VBOX_GCC_std in Config.kmk) [ $(($cc_maj * 100 + $cc_min)) -ge 408 ] && FLGQT5="$FLGQT5 -std=c++11" INCQT5=`strip_I "$FLGQT5"`

1 0