Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2012-11-12 07:06:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "samba", Maintainer is "samba-maintainers@SuSE.de" Changes: -------- --- /work/SRC/openSUSE:Factory/samba/samba.changes 2012-10-07 20:05:46.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.samba.new/samba.changes 2012-11-12 07:06:39.000000000 +0100 @@ -1,0 +2,73 @@ +Wed Oct 31 16:48:12 UTC 2012 - lmuelle@suse.com + +- Only execute the run_permissions macro on pre-12.3 systems. + +------------------------------------------------------------------- +Mon Oct 29 19:48:51 UTC 2012 - lmuelle@suse.com + +- Ensure adding the winbind group never can fail. + +------------------------------------------------------------------- +Mon Oct 29 16:59:09 UTC 2012 - lmuelle@suse.com + +- Create ntadmin group only if it doesn't yet exist. + +------------------------------------------------------------------- +Mon Oct 29 12:10:41 UTC 2012 - lmuelle@suse.com + +- Update to 3.6.9. + + When setting a non-default ACL, don't forget to apply masks to + SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). + + Winbind can't fetch user or group info from AD via LDAP; (bso#9147). + + Fix segfault in smbd if user specified ports out for range; (bso#9218). + +------------------------------------------------------------------- +Mon Oct 29 12:03:21 UTC 2012 - lmuelle@suse.com + +- quota: Don't force the block size to 512; (bso#3272). +- Fix poll replacement to become a msleep replacement; (bso#8107). +- Fix wrong test == syntax in configure; (bso#8146). +- Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). +- Fix builtin forms order to match Windows again; (bso#8632). +- Fix RAW printing for normal users; (bso#8769). +- Initialise ticket to ensure we do not invalid memory; (bso#8788). +- Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). +- Fix crash on null pam change pw response; (bso#9013). +- Connection to outbound trusted domain goes offline; (bso#9016). +- Increase debug level for info that the db is empty; (bso#9112). +- 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). +- Winbind can't fetch user or group info from AD via LDAP; (bso#9147). +- Open printers with the right access mask; (bso#9154). +- Fix makerpms.sh on RHEL; (bso#9165). +- Remove non-existent option '-Y' from winbindd manpage; (bso#9171). +- Add quota support for gfs2; (bso#9172). +- Make SMB2 compound request create/delete_on_close/close work as Windows; + (bso#9173). +- Empty SPNEGO packet can cause smbd to crash; (bso#9174). +- pam_winbind: Match more return codes when wbcGetPwnam has failed; + (bso#9177). +- Fix crash bug in idmap_hash; (bso#9188). +- SMB2 Create doesn't return correct MAX ACCESS access mask in blob; + (bso#9189). +- Fix service control for non-internal services; (bso#9192). +- Don't take 'state->te' as indication for "was_deferred"; (bso#9196). +- Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). +- Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). +- Fix segfault in smbd if user specified ports out for range; (bso#9218). +- Signing cannot be disabled for SMB2 by design, so fix the documentation + instead; (bso#9222). +- Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; + (bso#9231). +- When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER + and SMB_ACL_GROUP entries; (bso#9236). +- lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). +- Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; + (bso#9268). +- Add support for reloading systemd services; (bso#9280). + +------------------------------------------------------------------- +Fri Oct 26 17:40:15 UTC 2012 - lmuelle@suse.com + +- Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719). + +------------------------------------------------------------------- Old: ---- samba-3.6.8.tar.bz2 New: ---- samba-3.6.9.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ samba-doc.spec ++++++ --- /var/tmp/diff_new_pack.dBJfoN/_old 2012-11-12 07:06:42.000000000 +0100 +++ /var/tmp/diff_new_pack.dBJfoN/_new 2012-11-12 07:06:42.000000000 +0100 @@ -93,7 +93,7 @@ BuildRequires: libtdb-devel BuildRequires: libtevent-devel %endif -%define samba_ver 3.6.8 +%define samba_ver 3.6.9 %define samba_ver_suffix %nil %define samba_ver_full %{samba_ver}%{samba_ver_suffix} %if 0%{?suse_version} && 0%{?suse_version} < 1111 @@ -117,7 +117,7 @@ %else %define build_make_smp_mflags %{?jobs:-j%jobs} %endif -Version: 3.6.8 +Version: 3.6.9 Release: 1 %define ldapsmb_ver 1.34b Url: http://www.samba.org/ @@ -267,7 +267,7 @@ product_suffix="${product_suffix}-%{_build_arch}" # Set SAMBA_VERSION_VENDOR_SUFFIX in the VERSION file mv VERSION VERSION.orig -sed -e s/^SAMBA_VERSION_VENDOR_SUFFIX=$/SAMBA_VERSION_VENDOR_SUFFIX=\"${vendor_tag}%{VENDOR}${product_suffix}\"/ VERSION.orig >VERSION +sed -e "s/^SAMBA_VERSION_VENDOR_SUFFIX=$/SAMBA_VERSION_VENDOR_SUFFIX=\"${vendor_tag}%{VENDOR}${product_suffix}\"/" VERSION.orig >VERSION %endif %build samba-%{samba_ver_full} @@ -462,7 +462,7 @@ the man pages. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %changelog ++++++ samba.spec ++++++ --- /var/tmp/diff_new_pack.dBJfoN/_old 2012-11-12 07:06:42.000000000 +0100 +++ /var/tmp/diff_new_pack.dBJfoN/_new 2012-11-12 07:06:42.000000000 +0100 @@ -93,7 +93,7 @@ BuildRequires: libtdb-devel BuildRequires: libtevent-devel %endif -%define samba_ver 3.6.8 +%define samba_ver 3.6.9 %define samba_ver_suffix %nil %define samba_ver_full %{samba_ver}%{samba_ver_suffix} %if 0%{?suse_version} && 0%{?suse_version} < 1111 @@ -117,7 +117,7 @@ %else %define build_make_smp_mflags %{?jobs:-j%jobs} %endif -Version: 3.6.8 +Version: 3.6.9 Release: 1 %define ldapsmb_ver 1.34b License: GPL-3.0+ @@ -224,8 +224,8 @@ how to. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package client License: GPL-3.0+ @@ -265,8 +265,8 @@ how to. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %if 0%{?suse_version} == 0 || 0%{?suse_version} > 1020 @@ -285,8 +285,8 @@ develop programs which make use of Samba. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %endif %if 0%{?suse_version} && 0%{?suse_version} < 1001 || 0%{?suse_version} > 1110 @@ -310,8 +310,8 @@ the man pages. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %endif @@ -331,8 +331,8 @@ A wrapper binary to run smbspool with the original calling UID. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %if %{make_utils} @@ -347,8 +347,8 @@ Some of the debug-tools for developpers. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %endif @@ -380,8 +380,8 @@ This is the winbind-daemon and the wbinfo-tool. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %if 0%{?suse_version} && 0%{?suse_version} < 1031 @@ -406,15 +406,15 @@ %description -n libsmbclient -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %else %description -n libsmbclient0 -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %endif This package includes the libsmbclient library. @@ -452,8 +452,8 @@ develop programs which make use of the smbclient programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libnetapi0 License: GPL-3.0+ @@ -465,8 +465,8 @@ This package includes the netapi library. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libnetapi-devel License: GPL-3.0+ @@ -484,8 +484,8 @@ develop programs which make use of the netapi programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %if 0%{?suse_version} && 0%{?suse_version} < 1031 @@ -505,15 +505,15 @@ %description -n libsmbsharemodes -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %else %description -n libsmbsharemodes0 -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %endif This package includes the smbsharemodes library. @@ -538,8 +538,8 @@ develop programs which make use of the smbsharemodes programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libwbclient0 License: LGPL-3.0+ @@ -551,8 +551,8 @@ This package includes the wbclient library. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libwbclient-devel License: LGPL-3.0+ @@ -570,8 +570,8 @@ develop programs which make use of the wbclient programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %if 0%{?suse_version} && 0%{?suse_version} < 1211 @@ -587,8 +587,8 @@ This package includes the talloc library. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libtalloc-devel Version: %{libtalloc_ver} @@ -608,8 +608,8 @@ develop programs which make use of the talloc programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libtdb1 Version: %{libtdb_ver} @@ -623,8 +623,8 @@ This package includes the tdb library. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libtdb-devel Version: %{libtdb_ver} @@ -640,8 +640,8 @@ develop programs which make use of the tdb programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libtevent0 Version: %{libtevent_ver} @@ -655,8 +655,8 @@ This package includes the tevent library. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libtevent-devel Version: %{libtevent_ver} @@ -677,8 +677,8 @@ develop programs which make use of the tevent programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libldb1 Version: %{libldb_ver} @@ -693,8 +693,8 @@ This package includes the ldb library. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %package -n libldb-devel Version: %{libldb_ver} @@ -714,8 +714,8 @@ This package contains the static libraries and header files needed to develop programs which make use of the tevent programming interface. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %endif @@ -734,8 +734,8 @@ Controller that uses the ldapsam passdb backend. -Source Timestamp: 2843 -Branch : 3.6.8 +Source Timestamp: 2851 +Branch : 3.6.9 %endif @@ -815,7 +815,7 @@ product_suffix="${product_suffix}-%{_build_arch}" # Set SAMBA_VERSION_VENDOR_SUFFIX in the VERSION file mv VERSION VERSION.orig -sed -e s/^SAMBA_VERSION_VENDOR_SUFFIX=$/SAMBA_VERSION_VENDOR_SUFFIX=\"${vendor_tag}%{VENDOR}${product_suffix}\"/ VERSION.orig >VERSION +sed -e "s/^SAMBA_VERSION_VENDOR_SUFFIX=$/SAMBA_VERSION_VENDOR_SUFFIX=\"${vendor_tag}%{VENDOR}${product_suffix}\"/" VERSION.orig >VERSION %build %if 0%{?suse_version} && 0%{?suse_version} < 911 @@ -1264,7 +1264,7 @@ %endif %pre -/usr/sbin/groupadd -g 71 -o -r ntadmin 2>/dev/null || : +getent group ntadmin >/dev/null || groupadd -g 71 -o -r ntadmin || : %preun %{?stop_on_removal:%{stop_on_removal smb nmb}} @@ -1379,7 +1379,9 @@ if test ${1:-0} -eq 1 -a -d %{cups_lib_dir}/backend; then ln -fs %{_bindir}/get_printing_ticket %{cups_lib_dir}/backend/smb fi +%if 0%{?suse_version} > 0 && 0%{?suse_version} < 1221 %{?run_permissions:%{run_permissions}} +%endif %postun krb-printing if test ${1:-0} -eq 0 -a -e %{_bindir}/smbspool -a -d %{cups_lib_dir}/backend; then @@ -1393,8 +1395,7 @@ %pre winbind # we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged -%{_bindir}/getent group winbind >/dev/null || \ - %{_sbindir}/groupadd -r winbind +getent group winbind >/dev/null || groupadd -r winbind || : %post winbind /sbin/ldconfig ++++++ build-source-timestamp ++++++ --- /var/tmp/diff_new_pack.dBJfoN/_old 2012-11-12 07:06:42.000000000 +0100 +++ /var/tmp/diff_new_pack.dBJfoN/_new 2012-11-12 07:06:42.000000000 +0100 @@ -1,2 +1,2 @@ -2843 -Branch : 3.6.8 +2851 +Branch : 3.6.9 ++++++ patches.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches/suse/fix-pam_sm_authenticate-segv.diff new/patches/suse/fix-pam_sm_authenticate-segv.diff --- old/patches/suse/fix-pam_sm_authenticate-segv.diff 2012-09-17 12:40:35.000000000 +0200 +++ new/patches/suse/fix-pam_sm_authenticate-segv.diff 2012-10-29 13:43:57.000000000 +0100 @@ -15,7 +15,7 @@ =================================================================== --- nsswitch/pam_winbind.c.orig +++ nsswitch/pam_winbind.c -@@ -2732,9 +2732,10 @@ out: +@@ -2735,9 +2735,10 @@ out: _pam_free_data_info3(pamh); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches/suse/missing-pkgconfig.diff new/patches/suse/missing-pkgconfig.diff --- old/patches/suse/missing-pkgconfig.diff 2012-09-17 12:40:35.000000000 +0200 +++ new/patches/suse/missing-pkgconfig.diff 2012-10-29 13:43:57.000000000 +0100 @@ -26,7 +26,7 @@ =================================================================== --- source3/configure.in.orig +++ source3/configure.in -@@ -7144,6 +7144,7 @@ AC_OUTPUT(Makefile +@@ -7164,6 +7164,7 @@ AC_OUTPUT(Makefile pkgconfig/wbclient.pc pkgconfig/netapi.pc pkgconfig/smbsharemodes.pc diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches/suse/net-kdc-lookup.diff new/patches/suse/net-kdc-lookup.diff --- old/patches/suse/net-kdc-lookup.diff 2012-09-17 12:40:35.000000000 +0200 +++ new/patches/suse/net-kdc-lookup.diff 2012-10-29 13:43:56.000000000 +0100 @@ -96,7 +96,7 @@ static int net_lookup_kdc(struct net_context *c, int argc, const char **argv) { #ifdef HAVE_KRB5 -@@ -445,6 +528,7 @@ int net_lookup(struct net_context *c, in +@@ -449,6 +532,7 @@ int net_lookup(struct net_context *c, in {"DC", net_lookup_dc}, {"PDC", net_lookup_pdc}, {"MASTER", net_lookup_master}, ++++++ samba-3.6.8.tar.bz2 -> samba-3.6.9.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/samba/samba-3.6.8.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new/samba-3.6.9.tar.bz2 differ: char 11, line 1 ++++++ vendor-files.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor-files/tools/package-data new/vendor-files/tools/package-data --- old/vendor-files/tools/package-data 2012-09-26 20:18:17.000000000 +0200 +++ new/vendor-files/tools/package-data 2012-10-31 18:00:31.000000000 +0100 @@ -1,2 +1,2 @@ # This is an autogenrated file. -SAMBA_PACKAGE_SVN_VERSION="2843" +SAMBA_PACKAGE_SVN_VERSION="2851" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor-files/tools/update-apparmor-samba-profile new/vendor-files/tools/update-apparmor-samba-profile --- old/vendor-files/tools/update-apparmor-samba-profile 2012-09-17 12:40:15.000000000 +0200 +++ new/vendor-files/tools/update-apparmor-samba-profile 2012-10-26 20:05:22.000000000 +0200 @@ -2,10 +2,10 @@ # update apparmor profile sniplet based on samba configuration # -# This script creates and updates a profile sniplet with permissions for all +# This script creates and updates a profile sniplet with permissions for all # samba shares, except # - paths with variables (anything containing a % sign) -# - "/" - if someone is insane enough to share his complete filesystem, he'll have +# - "/" - if someone is insane enough to share his complete filesystem, he'll have # to modify the apparmor profile himself # (c) Christian Boltz 2011 @@ -43,6 +43,12 @@ test -r "$loadedprofiles" || verboseexit "no read permissions for $loadedprofiles - not running as root?" grep -q '^/usr/sbin/smbd (' /sys/kernel/security/apparmor/profiles || silentexit "smbd profile not loaded" +widelinks=$(testparm -s --parameter-name "wide links" 2>/dev/null) +test "$widelinks" == "Yes" && { + echo "[$(date '+%Y/%m/%d %T')] $(basename $0)" + echo ' WARNING: "wide links" enabled. You might need to modify the smbd apparmor profile manually.' +} >> /var/log/samba/log.smbd + grep -q "$versionstring" "$profilesniplet" && { test "$smbconf" -nt "$profilesniplet" || silentexit "smb.conf is older than the AppArmor profile sniplet" } @@ -61,7 +67,7 @@ echo "Updating AppArmor profile for Samba..." -mv -f "$tmp_profilesniplet" "$profilesniplet" +mv -f "$tmp_profilesniplet" "$profilesniplet" # reload profile "$aaparser" -r "$smbd_profile" -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org