Hello community,
here is the log from the commit of package yast2-security
checked in at Mon Nov 3 14:39:21 CET 2008.
--------
--- yast2-security/yast2-security.changes 2008-10-13 12:06:33.000000000 +0200
+++ /mounts/work_src_done/STABLE/yast2-security/yast2-security.changes 2008-10-30 16:24:27.728814000 +0100
@@ -1,0 +2,17 @@
+Thu Oct 30 15:39:10 CET 2008 - lslezak@suse.cz
+
+- better check enabled mail services (bnc#437363)
+- do not check "consolekit" service, it's started automatically
+ (bnc#436797), added "boot.clock" as an optional service
+- fixed location of "DISABLE_RESTART_ON_UPDATE" and
+ "DISABLE_STOP_ON_REMOVAL" variables - they are in
+ /etc/sysconfig/services now
+- 2.17.7
+
+-------------------------------------------------------------------
+Fri Oct 24 09:45:10 CEST 2008 - lslezak@suse.cz
+
+- Disable "Change Status" button when the current value is
+ "Unknown" (bnc#436796)
+
+-------------------------------------------------------------------
calling whatdependson for head-i586
Old:
----
yast2-security-2.17.6.tar.bz2
New:
----
yast2-security-2.17.7.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ yast2-security.spec ++++++
--- /var/tmp/diff_new_pack.Zq8710/_old 2008-11-03 14:38:52.000000000 +0100
+++ /var/tmp/diff_new_pack.Zq8710/_new 2008-11-03 14:38:52.000000000 +0100
@@ -1,5 +1,5 @@
#
-# spec file for package yast2-security (Version 2.17.6)
+# spec file for package yast2-security (Version 2.17.7)
#
# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
@@ -19,12 +19,12 @@
Name: yast2-security
-Version: 2.17.6
+Version: 2.17.7
Release: 1
License: GPL v2 or later
Group: System/YaST
BuildRoot: %{_tmppath}/%{name}-%{version}-build
-Source0: yast2-security-2.17.6.tar.bz2
+Source0: yast2-security-2.17.7.tar.bz2
Prefix: /usr
BuildRequires: doxygen perl-XML-Writer pkg-config update-desktop-files yast2-devtools yast2-pam yast2-testsuite
# new Pam.ycp API
@@ -49,7 +49,7 @@
Jiri Suchomel missing = Security::MissingMandatoryServices(runlevel);
if (missing != nil && missing != [])
{
- string srvs = mergestring(missing, "<BR>");
- help = help + sformat(_("<P>These basic system services are not running:<BR><B>%1</B></P>"), srvs);
+ string srvs = "";
+
+ foreach(list<string> l, missing,
+ {
+ // this is a separator between service names
+ // e.g.: "postfix" + " or " + "sendmail"
+ string group = mergestring(l , _(" or "));
+
+ srvs = srvs + group + "<BR>";
+ }
+ );
+
+ // richtext message: %1 = runlevel ("3" or "5"), %2 = list of services
+ help = help + sformat(_("<P>These basic system services are not enabled in runlevel %1:<BR><B>%2</B></P>"), runlevel, srvs);
}
else
{
@@ -292,13 +306,13 @@
}
else if (help_id == "RUNLEVEL3_EXTRA_SERVICES" || help_id == "RUNLEVEL5_EXTRA_SERVICES")
{
- list<string> extra = (help_id == "RUNLEVEL3_EXTRA_SERVICES") ? Security::ExtraServices(3)
- : Security::ExtraServices(5);
+ integer runlevel = (help_id == "RUNLEVEL3_EXTRA_SERVICES") ? 3 : 5;
+ list<string> extra = Security::ExtraServices(runlevel);
if (extra != nil && extra != [])
{
string srvs = mergestring(extra, "<BR>");
- help = help + sformat(_("<P>These extra services are running:<BR><B>%1</B></P>"), srvs);
+ help = help + sformat(_("<P>These extra services are enabled in runlevel %1:<BR><B>%2</B></P>"), runlevel, srvs);
help = help + _("<P>Check the list of services and disable all unused services.</P>");
}
else
@@ -323,7 +337,7 @@
// table header
term tabheader = `header(_("Security Setting"), _("Status"), `Center(_("Security Status")));
term contents = no_richtext ?
- `Table(`id(`table), tabheader, OverviewText(`table)) :
+ `Table(`id(`table), `opt(`immediate), tabheader, OverviewText(`table)) :
`RichText(`id(`rtext), OverviewText(`richtext));
if (no_richtext)
@@ -469,6 +483,14 @@
UI::SetFocus(`id(`table));
}
}
+ else if (ret == `table)
+ {
+ // disable "Change Status" button if the action is unknown
+ string current_item = (string)UI::QueryWidget(`id(`table), `CurrentItem);
+ string status = SecurityStatus(current_item, true /* plaintext */);
+
+ UI::ChangeWidget(`id(`change), `Enabled, status != UNKNOWN_STATUS);
+ }
else {
y2error("Unexpected return code: %1", ret);
continue;
diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-security-2.17.6/src/Security.ycp new/yast2-security-2.17.7/src/Security.ycp
--- old/yast2-security-2.17.6/src/Security.ycp 2008-09-16 18:27:10.000000000 +0200
+++ new/yast2-security-2.17.7/src/Security.ycp 2008-10-30 16:20:42.000000000 +0100
@@ -4,7 +4,7 @@
* Summary: Data for the security configuration
* Authors: Michal Svec
mandatory_services = [["ntp"], ["syslog"], ["auditd"], ["random"], ["kbd"], ["cron"], ["postfix", "sendmail"]];
// sevices to check - these can be ignored (if they are running it's OK)
global const list<string> optional_services = [
- "acpid", "dbus", "ealysyslog", "fbset", "framebufferset", "isdn", "microcode.ctl", "random",
+ "acpid", "boot.clock", "dbus", "ealysyslog", "fbset", "framebufferset", "isdn", "microcode.ctl", "random",
"consolekit", "haldaemon", "network", "syslog", "auditd", "splash_early", "alsasound",
"irq_balancer", "kbd", "powersaved", "splash", "sshd", "earlyxdm", "hotkey-setup", "atd", "nscd",
"smpppd", "xend", "autofs", "libvirtd", "sendmail", "postfix", "xendomains", "cron", "ddclient",
@@ -34,42 +35,39 @@
// return list of missing mandatory services in a runlevel
-global list<string> MissingMandatoryServices(integer runlevel)
+global list
MissingMandatoryServices(integer runlevel)
{
y2milestone("Checking mandatory services in runlevel %1", runlevel);
- list<string> ret = [];
+ list
ret = [];
list<string> enabled_services = Service::EnabledServices(runlevel);
+ y2milestone("enabled_services: %1", enabled_services);
+
if (enabled_services == nil)
{
return nil;
}
- foreach(string service, mandatory_services,
+ foreach(list<string> services, mandatory_services,
{
- boolean enabled = contains(enabled_services, service);
- y2milestone("Mandatory service %1 is enabled: %2", service, enabled);
+ boolean enabled = false;
+
+ foreach(string service, services,
+ {
+ enabled = enabled || contains(enabled_services, service);
+ }
+ );
+
+ y2milestone("Mandatory services %1 are enabled: %2", services, enabled);
if (!enabled)
{
- ret = add(ret, service);
+ ret = add(ret, services);
}
}
);
- // handle postfix and sendmail specifically - only one of them can be installed in a system
- boolean mailer_enabled = contains(enabled_services, "postfix")
- || contains(enabled_services, "sendmail");
-
- y2milestone("A mailer daemon is enabled: %1", mailer_enabled);
-
- if (!mailer_enabled)
- {
- ret = add(ret, "postfix");
- ret = add(ret, "sendmail");
- }
-
y2milestone("Missing mandatory services in runlevel %1: %2", runlevel, ret);
return ret;
@@ -90,7 +88,7 @@
foreach(string service, enabled_services,
{
// the extra service is not mandatory and it's not optional
- boolean extra = !contains(mandatory_services, service) && !contains(optional_services, service);
+ boolean extra = !contains(flatten(mandatory_services), service) && !contains(optional_services, service);
if (extra)
{
@@ -193,6 +191,8 @@
],
".sysconfig.security" : [
"PERMISSION_SECURITY",
+ ],
+ ".sysconfig.services" : [
"DISABLE_RESTART_ON_UPDATE",
"DISABLE_STOP_ON_REMOVAL",
],
diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-security-2.17.6/VERSION new/yast2-security-2.17.7/VERSION
--- old/yast2-security-2.17.6/VERSION 2008-10-13 12:01:47.000000000 +0200
+++ new/yast2-security-2.17.7/VERSION 2008-10-30 15:52:19.000000000 +0100
@@ -1 +1 @@
-2.17.6
+2.17.7
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Remember to have fun...
--
To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-commit+help@opensuse.org