Hello community, here is the log from the commit of package brp-check-suse checked in at Wed Oct 22 15:31:14 CEST 2008. -------- --- brp-check-suse/brp-check-suse.changes 2008-10-15 03:07:05.000000000 +0200 +++ /mounts/work_src_done/STABLE/brp-check-suse/brp-check-suse.changes 2008-10-16 14:49:37.000000000 +0200 @@ -1,0 +2,7 @@ +Thu Oct 16 14:48:33 CEST 2008 - thomas@suse.de + +- added script to detect yet unknown dbus autostart system-service + files, the set of known files can be updated using a whitelist + (generated for all archs of 11.0) + +------------------------------------------------------------------- calling whatdependson for head-i586 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ brp-check-suse.spec ++++++ --- /var/tmp/diff_new_pack.ccX463/_old 2008-10-22 15:30:53.000000000 +0200 +++ /var/tmp/diff_new_pack.ccX463/_new 2008-10-22 15:30:53.000000000 +0200 @@ -24,7 +24,7 @@ AutoReqProv: on Summary: build root policy check scripts Version: 1.0 -Release: 11 +Release: 12 Source0: %{name}-%{version}.tar.bz2 BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -56,6 +56,10 @@ /usr/lib/rpm/* %changelog +* Thu Oct 16 2008 thomas@suse.de +- added script to detect yet unknown dbus autostart system-service + files, the set of known files can be updated using a whitelist + (generated for all archs of 11.0) * Wed Oct 15 2008 ro@suse.de - Add more legal Categories to desktop-data-openSUSE and brp-check (bnc#430979) ++++++ brp-check-suse-1.0.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/brp-check-suse-1.0/brp-dbus-autostart new/brp-check-suse-1.0/brp-dbus-autostart --- old/brp-check-suse-1.0/brp-dbus-autostart 1970-01-01 01:00:00.000000000 +0100 +++ new/brp-check-suse-1.0/brp-dbus-autostart 2008-10-16 14:48:08.000000000 +0200 @@ -0,0 +1,53 @@ +#!/bin/sh +# author: Thomas Biege <thomas@suse.de> +# last update: 2008-09-22 +# +# purpose: detect packages that want to install an unknown dbus +# autostart service +# note: edit macros.brp to include this script +# see: http://techbase.kde.org/Development/Tutorials/D-Bus/Autostart_Services + +if [ -f /usr/lib/rpm/brp-dbus-autostart.data/whitelist ] +then + WHITELIST=$(cat /usr/lib/rpm/brp-dbus-autostart.data/whitelist) +else + echo "Warning: dbus autostart system-services whitelist file is missing." + exit 0 +fi + +# if using normal root, avoid changing anything. +if [ -z "$RPM_BUILD_ROOT" -o "$RPM_BUILD_ROOT" = "/" ]; then + exit 0 +fi + +E=$(ls -1 $RPM_BUILD_ROOT/usr/share/dbus-*/system-services/*.service $RPM_BUILD_ROOT/etc/dbus-*/system.d/*.conf 2>/dev/null) +if ! [ -z "$E" ] +then + if [ -z "$WHITELIST" ] # we do not have a whitelist + then + echo "Warning: This package installs an unknown D-BUS autostart system-service. Please contact security-team@suse.de" + exit 1 # do stop build process + fi + + for i in $E + do + DF=$(basename $i) + + FOUND=0 + for j in $WHITELIST + do + if [ "$DF" == "$j" ] + then + FOUND=1 + fi + done + if [ $FOUND -eq 0 ] + then + echo "Warning: This package installs an unknown D-BUS autostart system-service. Please contact security-team@suse.de: $DF" + exit 1 # do stop build process + fi + done +fi + +exit 0 + diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist new/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist --- old/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist 1970-01-01 01:00:00.000000000 +0100 +++ new/brp-check-suse-1.0/brp-dbus-autostart.data/whitelist 2008-10-16 14:47:01.000000000 +0200 @@ -0,0 +1,49 @@ +avahi-dbus.conf +backup-manager.conf +bluetooth.conf +com.google.code.BackupManager.service +com.novell.Pkcs11Monitor.conf +ConsoleKit.conf +cups.conf +fi.epitest.hostap.WPASupplicant.service +galago-daemon.conf +gdm.conf +hal.conf +kerneloops.dbus +knetworkmanager.conf +NetworkManager.conf +newprinternotification.conf +nm-applet.conf +nm-avahi-autoipd.conf +nm-dhcp-client.conf +nm-dispatcher.conf +nm-novellvpn-service.conf +nm-openvpn-service.conf +nm-pptp-service.conf +nm-system-settings.conf +nm-vpnc-service.conf +org.bluez.service +org.freedesktop.ConsoleKit.service +org.freedesktop.ModemManager.conf +org.freedesktop.ModemManager.service +org.freedesktop.NetworkManagerSystemSettings.service +org.freedesktop.nm_dispatcher.service +org.freedesktop.PackageKit.conf +org.freedesktop.PackageKit.service +org.freedesktop.PolicyKit.conf +org.freedesktop.PolicyKit.service +org.gnome.ClockApplet.Mechanism.conf +org.gnome.ClockApplet.Mechanism.service +org.gnome.GConf.Defaults.conf +org.gnome.GConf.Defaults.service +org.opensuse.CupsPkHelper.Mechanism.conf +org.opensuse.CupsPkHelper.Mechanism.service +org.opensuse.yast.SCR.conf +org.opensuse.yast.SCR.service +pommed.conf +powersave.conf +system.d +upsd.conf +wpa_supplicant.conf +xorg-server.conf +yum-updatesd.conf diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/brp-check-suse-1.0/macros.brp new/brp-check-suse-1.0/macros.brp --- old/brp-check-suse-1.0/macros.brp 2008-08-11 15:38:42.000000000 +0200 +++ new/brp-check-suse-1.0/macros.brp 2008-10-16 13:29:23.000000000 +0200 @@ -13,5 +13,6 @@ /usr/lib/rpm/brp-check-bytecode-version \ /usr/lib/rpm/brp-boot-scripts \ /usr/lib/rpm/brp-hook \ + /usr/lib/rpm/brp-dbus-autostart \ %{nil} ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org