Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2024-06-28 15:46:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new.18349 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "apparmor" Fri Jun 28 15:46:45 2024 rev:213 rq:1183251 version:4.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2024-06-12 15:38:44.091036508 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new.18349/apparmor.changes 2024-06-28 15:47:53.399853481 +0200 @@ -1,0 +2,6 @@ +Tue Jun 25 19:40:41 UTC 2024 - Christian Boltz <suse-beta@cboltz.de> + +- add sampa-rpcd-witness.diff: allow samba-dcerpcd to execute + rpcd_witness (boo#1225811) + +------------------------------------------------------------------- New: ---- sampa-rpcd-witness.diff BETA DEBUG BEGIN: New: - add sampa-rpcd-witness.diff: allow samba-dcerpcd to execute rpcd_witness (boo#1225811) BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.TjvFxe/_old 2024-06-28 15:48:05.468294989 +0200 +++ /var/tmp/diff_new_pack.TjvFxe/_new 2024-06-28 15:48:05.468294989 +0200 @@ -107,6 +107,9 @@ # utils MountRule: add support for quoted paths and empty source (master merged upstream 2024-06-11, 4.0 branch submitted upstream 2024-06-11 https://gitlab.com/apparmor/apparmor/-/merge_requests/1259) Patch18: logprof-mount-empty-source.diff +# samba-dcerpcd: allow to execute rpcd_witness (submitted upstream 2024-06-08 https://gitlab.com/apparmor/apparmor/-/merge_requests/1256, packaged patch adjusted to match the packaged samba-rpcd profile) +Patch19: sampa-rpcd-witness.diff + PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: autoconf @@ -383,6 +386,7 @@ %patch -P 16 -p1 %patch -P 17 -p1 %patch -P 18 -p1 +%patch -P 19 -p1 %build export SUSE_ASNEEDED=0 ++++++ sampa-rpcd-witness.diff ++++++ From https://gitlab.com/apparmor/apparmor/-/merge_requests/1256 (adjusted to currently packaged samba-rpcd profile) From 94ccd111deac35d7deadb07e66d25e045633e221 Mon Sep 17 00:00:00 2001 From: Christian Boltz <apparmor@cboltz.de> Date: Sat, 8 Jun 2024 22:46:53 +0200 Subject: [PATCH] samba-dcerpcd: allow to execute rpcd_witness ... and extend the samba-rpcd profile to also include rpcd_witness. Patch by Noel Power <nopower@suse.com> Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1225811 --- profiles/apparmor.d/samba-dcerpcd | 2 +- profiles/apparmor.d/samba-rpcd | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) Index: apparmor-v4.0.1/profiles/apparmor.d/samba-dcerpcd =================================================================== --- apparmor-v4.0.1.orig/profiles/apparmor.d/samba-dcerpcd 2024-04-12 05:59:30.000000000 +0200 +++ apparmor-v4.0.1/profiles/apparmor.d/samba-dcerpcd 2024-06-25 21:49:49.017901846 +0200 @@ -21,7 +21,7 @@ profile samba-dcerpcd /usr/lib*/samba/{, /usr/lib*/samba/{,samba/}samba-dcerpcd mr, /usr/lib*/samba/ r, - /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} Px -> samba-rpcd, + /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg,witness} Px -> samba-rpcd, /usr/lib*/samba/{,samba/}rpcd_classic Px -> samba-rpcd-classic, /usr/lib*/samba/{,samba/}rpcd_spoolss Px -> samba-rpcd-spoolss, Index: apparmor-v4.0.1/profiles/apparmor.d/samba-rpcd =================================================================== --- apparmor-v4.0.1.orig/profiles/apparmor.d/samba-rpcd 2024-04-12 05:59:30.000000000 +0200 +++ apparmor-v4.0.1/profiles/apparmor.d/samba-rpcd 2024-06-25 21:49:49.017901846 +0200 @@ -13,9 +13,9 @@ abi <abi/4.0>, include <tunables/global> -profile samba-rpcd /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} { +profile samba-rpcd /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg,witness} { include <abstractions/samba-rpcd> - /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} mr, + /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg,witness} mr, @{run}/samba/ncalrpc/np/winreg wr,