commit monitoring-plugins-zypper for openSUSE:Factory

3 Mar 2015

Hello community,

here is the log from the commit of package monitoring-plugins-zypper for openSUSE:Factory checked in at 2015-03-03 11:14:36
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/monitoring-plugins-zypper (Old)
 and      /work/SRC/openSUSE:Factory/.monitoring-plugins-zypper.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "monitoring-plugins-zypper"

Changes:
--------
New Changes file:

--- /dev/null	2015-02-28 12:43:00.252025756 +0100
+++ /work/SRC/openSUSE:Factory/.monitoring-plugins-zypper.new/monitoring-plugins-zypper.changes	2015-03-03 11:14:37.000000000 +0100
@@ -0,0 +1,434 @@
+-------------------------------------------------------------------
+Sun Mar  1 10:23:04 UTC 2015 - lars@linux-schulserver.de
+
+- use BSD-3-Clause as license
+
+-------------------------------------------------------------------
+Sat Dec 13 19:44:44 UTC 2014 - lars@linux-schulserver.de
+
+- allow DNS resolution for abstraction RPM and kernel random usage 
+  for zypp abstraction (apparmor) - based on 13.1
+- include local/usr.lib.nagios.plugins.check_zypper in apparmor
+  profile to allow users to override default settings
+
+-------------------------------------------------------------------
+Sat Dec 13 19:32:41 UTC 2014 - lars@linux-schulserver.de
+
+- allow check_zypper to open any file below /etc/monitoring-plugins/
+  in apparmor profile
+
+-------------------------------------------------------------------
+Mon Dec  1 15:16:09 UTC 2014 - lars@linux-schulserver.de
+
+- allow zypper to open config_gnome3.so (bnc #857122#c8 )
+
+-------------------------------------------------------------------
+Fri Nov  7 21:02:20 UTC 2014 - lars@linux-schulserver.de
+
+- update to 1.82:
+  + try refresh_wrapper first before using zypper ref
+  + adapt apparmor profile to be more generic for binary moves 
+    between /usr/bin and /bin
+  + allow execution of sudo (again) in apparmor profile
+  + add next generation distributions as supported
+
+-------------------------------------------------------------------
+Tue Oct 21 14:20:10 CEST 2014 - ro@suse.de
+
+- update apparmor profile again, add abstrations/nameservice
+  for zypper and rpm subprofiles 
+
+-------------------------------------------------------------------
+Wed Jul 30 19:24:36 UTC 2014 - lars@linux-schulserver.de
+
+- Renamed package to monitoring-plugins-zypper
+
+-------------------------------------------------------------------
+Wed Jul 23 13:54:29 UTC 2014 - lars@linux-schulserver.de
+
+- update to 1.81:
+  + adapt apparmor profiles according to bnc #857122
+  + add hint to allow local repos in 
+    /etc/apparmor.d/usr.lib.nagios.plugins.check_zypper
+
+-------------------------------------------------------------------
+Thu Jun 26 15:09:33 UTC 2014 - lars@linux-schulserver.de
+
+- update to 1.80:
+  + invent new option for the local package check: -l, --check-local
+    otherwise packages from OBS repos will become local after each 
+    rebuild as zypper just checks for packages with same version-
+    release in repos
+
+-------------------------------------------------------------------
+Fri Jun 13 09:34:00 UTC 2014 - lars@linux-schulserver.de
+
+- update to 1.76:
+  + SLE 12 packages belong to "SUSE LLC https://www.suse.com/"
+
+-------------------------------------------------------------------
+Fri Jun  6 17:41:09 UTC 2014 - lars@linux-schulserver.de
+
+- update to 1.75:
+  + check for local packages (installed not from a repository)
+
+-------------------------------------------------------------------
+Mon Oct  7 09:37:25 UTC 2013 - lars@linux-schulserver.de
+
+Update to 1.50:
++ also handle "out-of-date" for outdated repositories (bnc#839839)
++ SLE-11-SP1 is not supported any more
+
+-------------------------------------------------------------------
+Fri Aug 30 13:52:41 UTC 2013 - lars@linux-schulserver.de
+
+- also use the keyword "Softwarestack" as indication for an update 
+  of the software stack as such ( bnc#830658 )
+
+-------------------------------------------------------------------
+Wed Jul 31 16:27:55 UTC 2013 - lars@linux-schulserver.de
+
+- update to 1.48:
+  + handle updates of the software stack as cricital unless we 
+    get a fix for bnc#832605 
+    (workaround for bnc#830658)
+
+-------------------------------------------------------------------
+Mon Jul 22 16:53:44 CEST 2013 - ro@suse.de
+
+- change logic looking for ignored packages/patches:
+  - use exact match, not just substring
+  - check also for match of name-version in the ignorelist
+    allowing to ignore specific updates 
+
+-------------------------------------------------------------------
+Thu May 16 13:51:38 UTC 2013 - lars@linux-schulserver.de
+
+- update to 1.47:
+  + return error if zypper is already running and blocking the 
+    refresh of the repository
+
+-------------------------------------------------------------------
+Tue Apr 23 17:31:59 UTC 2013 - lars@linux-schulserver.de
+
+- do not call openSUSE 13.1 discontinued
+
+-------------------------------------------------------------------
+Tue Apr 16 01:07:10 CEST 2013 - ro@suse.de
+
+- do not call SLE11-SP3 discontinued
+
+-------------------------------------------------------------------
+Sat Feb 23 11:43:30 UTC 2013 - lars@linux-schulserver.de
+
+- fix path names to grep, awk and gawk for distributions > 12.1
+
+-------------------------------------------------------------------
+Fri Feb  1 16:18:24 UTC 2013 - lars@linux-schulserver.de
+
+- update to 1.45:
+  + use /usr/sbin/zypp-refresh if it exists 
+
+-------------------------------------------------------------------
+Thu Jan 24 11:53:47 UTC 2013 - lars@linux-schulserver.de
+
+- include abstractions for rpm and ssl
+
+-------------------------------------------------------------------
+Thu Jan 17 10:55:30 UTC 2013 - lars@linux-schulserver.de
+
+- also install abstractions/zypp until this is merged with zypper
+
+-------------------------------------------------------------------
+Tue Jan 15 19:24:16 UTC 2013 - lars@linux-schulserver.de
+
+- update to 1.44:
+  + openSUSE 11.4 are unsupported
+  + openSUSE 12.3 becomes supported
+- improved apparmor profile: thanks to Marcus Rückert
+- place apparmor profile for older distributions (using sudo) in 
+  the extras directory as we did not test it there
+
+-------------------------------------------------------------------
+Thu Jun 28 18:33:30 UTC 2012 - lars@linux-schulserver.de
+
+- update to 1.42:
+  + whitelist Vendor 'openSUSE'
+  + added Apparmor profile for check_zypper
+  => if used with '-i' option, the ignore file must be placed in 
+     /etc/nagios, otherwise the script will fail
+
+-------------------------------------------------------------------
+Sat May  5 23:38:16 UTC 2012 - lars@linux-schulserver.de
+
+- update to 1.41:
+  + openSUSE 11.2 and 11.3 are unsupported
+  + openSUSE 12.2 is supported
+
+-------------------------------------------------------------------
+Fri Oct 28 14:05:03 UTC 2011 - lars@linux-schulserver.de
+
+- update to 1.40:
+  + SLE-10-SP3 is unsupported
+  + openSUSE 12.1 and SLE-11-SP2 are supported
+
+-------------------------------------------------------------------
+Wed Mar 23 21:30:08 UTC 2011 - lars@linux-schulserver.de
+
+- update to 1.39:
+  + SLE-10-SP4 and openSUSE 11.5 are supported
+
+-------------------------------------------------------------------
+Fri Feb  4 08:14:57 UTC 2011 - lars@linux-schulserver.de
+
+- update to 1.38:
+  + openSUSE 11.1 is out of service
+  + back to old performance data output, as requested by community
+
+-------------------------------------------------------------------
+Wed Dec 15 19:37:55 UTC 2010 - lars@linux-schulserver.de
+
+- delete SLE-11-GA, as this OS is out of service
+
+-------------------------------------------------------------------
+Fri Oct 15 12:18:44 UTC 2010 - lars@linux-schulserver.de
+
+- update to 1.37:
+  + quote the supported OS releasenumbers to avoid perl from 
++++ 237 more lines (skipped)
++++ between /dev/null
++++ and /work/SRC/openSUSE:Factory/.monitoring-plugins-zypper.new/monitoring-plugins-zypper.changes

New:
----
  apparmor-abstractions-rpm
  apparmor-abstractions-ssl
  apparmor-abstractions-zypp
  check_zypper.pl
  monitoring-plugins-zypper.changes
  monitoring-plugins-zypper.spec
  usr.lib.nagios.plugins.check_zypper

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ monitoring-plugins-zypper.spec ++++++
#
# spec file for package monitoring-plugins-zypper
#
# Copyright (c) 2012-2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#


Name:           monitoring-plugins-zypper
Summary:        Check for software updates via zypper
License:        BSD-3-Clause
Group:          System/Monitoring
Version:        1.82
Release:        100
Url:            http://en.opensuse.org/Monitoring-plugins-zypper
Source0:        check_zypper.pl
Source1:        usr.lib.nagios.plugins.check_zypper 
Source2:        apparmor-abstractions-zypp
Source3:        apparmor-abstractions-ssl
Source4:        apparmor-abstractions-rpm
Requires:       gawk
Requires:       grep
Requires:       rpm
%if 0%{?suse_version} > 1010
# nagios can execute the script with embedded perl
Recommends:     perl 
Recommends:     apparmor-parser
%endif
Requires:       zypper
BuildArch:      noarch
BuildRequires:  nagios-rpm-macros
Provides:       nagios-plugins-zypper = %{version}-%{release}
Obsoletes:      nagios-plugins-zypper < %{version}-%{release}
BuildRoot:      %{_tmppath}/%{name}-%{version}-build

%description
This plugin checks for software updates on systems that use package
management systems based on the zypper command found in (open)SUSE.

It checks for security, recommended and optional patches and also for
optional package updates.

You can define the status by patch category. Use a commata to list more
than one category to a state.

If you like to know the names of available patches and packages, use
the "-v" option.


%prep

%build

%install
install -D -m755 %{SOURCE0} %buildroot/%{nagios_plugindir}/check_zypper
%if 0%{?suse_version} > 01100
install -D -m644 %{SOURCE1} %{buildroot}%{_sysconfdir}/apparmor.d/usr.lib.nagios.plugins.check_zypper
install -D -m644 %{SOURCE4} %{buildroot}%{_sysconfdir}/apparmor.d/abstractions/rpm
install -D -m644 %{SOURCE3} %{buildroot}%{_sysconfdir}/apparmor.d/abstractions/ssl
install -D -m644 %{SOURCE2} %{buildroot}%{_sysconfdir}/apparmor.d/abstractions/zypp
mkdir -p %{buildroot}%{_sysconfdir}/apparmor.d/local
cat > %{buildroot}%{_sysconfdir}/apparmor.d/local/usr.lib.nagios.plugins.check_zypper << EOF
# Site-specific additions and overrides for usr.lib.nagios.plugins.check_zypper
# See /etc/apparmor.d/local/README for details.
EOF
%else
install -D -m644 %{SOURCE1} %{buildroot}%{_sysconfdir}/apparmor/profiles/extras/usr.lib.nagios.plugins.check_zypper
%endif

%clean
rm -rf %buildroot

%files 
%defattr(-,root,root)
# avoid build dependecy of nagios - own the dirs
%dir %{nagios_libdir}
%dir %{nagios_plugindir}
%if 0%{?suse_version} > 01100
%dir %{_sysconfdir}/apparmor.d
%dir %{_sysconfdir}/apparmor.d/abstractions
%config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/rpm
%config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/ssl
%config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/zypp
%dir %{_sysconfdir}/apparmor.d/local
%config %{_sysconfdir}/apparmor.d/usr.lib.nagios.plugins.check_zypper
%config(noreplace) %{_sysconfdir}/apparmor.d/local/usr.lib.nagios.plugins.check_zypper
%else
%dir %{_sysconfdir}/apparmor
%dir %{_sysconfdir}/apparmor/profiles
%dir %{_sysconfdir}/apparmor/profiles/extras
%config(noreplace) %{_sysconfdir}/apparmor/profiles/extras/usr.lib.nagios.plugins.check_zypper
%endif
%{nagios_plugindir}/check_zypper

%changelog
++++++ apparmor-abstractions-rpm ++++++
    network inet dgram,
    network inet6 dgram,

    /proc/filesystems r,
    /etc/resolv.conf r,
    /etc/nsswitch.conf r,
    /etc/host.conf r,
    /etc/hosts r,
    /etc/rpm/ r,
    /etc/rpm/macros* r,
    /var/lib/rpm/** rlk,

++++++ apparmor-abstractions-ssl ++++++
    #include 
    #include 
    /proc/sys/crypto/fips_enabled r,

++++++ apparmor-abstractions-zypp ++++++
    #include 
    #include 
    #include 

    network inet,
    network inet6,

    /etc/sysconfig/proxy r,
    /etc/sysconfig/storage r,
    /proc/filesystems r,
    /var/run/zypp.pid rwlk,
    /etc/zypp/** r,
    /etc/products.d/ r,
    /etc/products.d/** r,
    /proc/sys/kernel/random/uuid r,
    /var/adm/mount/ rw,
    /var/adm/mount/** rwlk,
    # /var/cache/zypp/raw/ r,
    /var/cache/zypp/** rwlk,
    /var/tmp/TmpDir.*/ r,
    /var/tmp/TmpDir.*/** r,
    /var/tmp/zypp.*/ rw,
    /var/tmp/zypp.*/** rwlk,
    /var/tmp/TmpFile.* rwlk,
    /var/tmp/TmpDir.*/ rw,
    /var/tmp/TmpDir.*/** rwlk,
    /var/tmp/ r,
    /var/tmp/AP_*/ rwlk,
    /var/tmp/AP_*/** rwlk,
    /sys/** r,
    /sys/ r,
    /var/lib/zypp/** rwlk,
++++++ check_zypper.pl ++++++
++++ 754 lines (skipped)

++++++ usr.lib.nagios.plugins.check_zypper ++++++
# Last Modified: Wed Jun 23 14:48:41 2014
#include 

/usr/lib/nagios/plugins/check_zypper {
  #include 
  #include 
  #include 
  #include 
  #include 

  /etc/SuSE-release r,

  /{,usr/}bin/grep  rix,
  /{,usr/}bin/awk   rix,
  /{,usr/}bin/gawk  rix,
  /bin/rpm px -> /usr/lib/nagios/plugins/check_zypper//rpm,
  /bin/bash rix,
  /{,usr/}bin/sudo Ux,

  # as we do not know how people name the ignore file, we 
  # allow read access to everything below /etc/nagios and /etc/monitoring-plugins/ here
  /etc/nagios/** r,
  /etc/monitoring-plugins/** r,

  /usr/sbin/zypp-refresh-wrapper px -> /usr/lib/nagios/plugins/check_zypper//zypp-refresh-wrapper,
  /usr/bin/zypper px -> /usr/lib/nagios/plugins/check_zypper//zypper,

  profile zypp-refresh-wrapper {
    #include 
    #include 
    capability setuid,
    capability setgid,
    /usr/sbin/zypp-refresh-wrapper rmix,
    /usr/sbin/zypp-refresh px -> /usr/lib/nagios/plugins/check_zypper//zypp-refresh,
  }
  profile zypp-refresh {
    #include 
    #include 
    #include 
    #include 
    #include 

    /var/log/zypp-refresh.log w,
    /usr/sbin/zypp-refresh rmix,

    # if you have a local repository mirrored, please add the path to the direcory in the file
    # /etc/apparmor.d/local/usr.lib.nagios.plugins.check_zypper

    /bin/cp rix,
    /bin/bash rix,
    /usr/bin/rpmdb2solv         rix,
    /usr/bin/zypper px -> /usr/lib/nagios/plugins/check_zypper//zypper,
    /usr/bin/gpg2 px -> /usr/lib/nagios/plugins/check_zypper//gpg,
    /usr/bin/uuidgen px -> /usr/lib/nagios/plugins/check_zypper//uuidgen,
    /usr/bin/repo2solv.sh px -> /usr/lib/nagios/plugins/check_zypper//repo2solv, 
  }
  profile repo2solv {
    #include 
    #include 
    #include 
    #include 

    /usr/bin/repo2solv.sh      rmix,
    /usr/bin/repomdxml2solv     rix,
    /usr/bin/rpmmd2solv         rix,
    /usr/bin/susetags2solv      rix,
    /usr/bin/updateinfoxml2solv rix,
    /usr/bin/deltainfoxml2solv  rix,
    /usr/bin/mergesolv          rix,

    /usr/bin/find               rix,
    /bin/bash                   rix,
    /bin/rm                     rix,
    /bin/cat                    rix,
    /bin/sed                    rix,
    /bin/gzip                   rix,
    /{,usr/}bin/grep            rix,
    /{,usr/}bin/gzip            rix,
    /{,usr/}bin/bzip2           rix,
    /{,usr/}bin/lzma            rix,
    /{,usr/}bin/xz              rix,
    /bin/mktemp                 rix,

    /var/cache/zypp/** rw,
  }
  profile uuidgen {
    #include 
    /usr/bin/uuidgen rmix,
  }
  profile gpg {
    #include 
    capability ipc_lock,
    /usr/bin/gpg2 rmix,
    /proc/sys/crypto/fips_enabled r,
    /var/tmp/TmpFile.*  rwk,
    /var/tmp/TmpDir.*/* rwlk,
    /var/tmp/zypp.*/*   rwlk,
    /var/tmp/zypp.*/*/* rwlk,
    /var/cache/zypp/** r,
  }
  profile zypper {
    #include 
    #include 
    #include 
    #include 
    #include 

    /bin/bash rix,
    /usr/bin/rpmdb2solv         rix,
    /usr/bin/zypper rmix,
    /usr/share/zypper/ r,
    /usr/share/zypper/** r,
    /usr/bin/gpg2 px -> /usr/lib/nagios/plugins/check_zypper//gpg,
    /usr/bin/uuidgen px -> /usr/lib/nagios/plugins/check_zypper//uuidgen,
    /usr/lib*/libproxy-*/modules/config_gnome3.so mr,
    /var/log/zypper.log w,
    /proc/sys/kernel/random/uuid r,
  }
  profile rpm {
    #include 
    #include 
    #include 
    /bin/rpm rmix,
  }

  # Site-specific additions and overrides. See local/README for details.
  #include 

}
-- 
To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-commit+help@opensuse.org

    

root＠hilbert.suse.de

tags

participants (1)