Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package skelcd-control-openSUSE for openSUSE:Factory checked in at 2021-03-30 20:51:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/skelcd-control-openSUSE (Old) and /work/SRC/openSUSE:Factory/.skelcd-control-openSUSE.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "skelcd-control-openSUSE" Tue Mar 30 20:51:17 2021 rev:222 rq:881845 version:20210329 Changes: -------- --- /work/SRC/openSUSE:Factory/skelcd-control-openSUSE/skelcd-control-openSUSE-promo.changes 2020-11-13 18:57:34.358013246 +0100 +++ /work/SRC/openSUSE:Factory/.skelcd-control-openSUSE.new.2401/skelcd-control-openSUSE-promo.changes 2021-03-30 20:51:34.288127879 +0200 @@ -1,0 +2,19 @@ +Mon Mar 29 09:07:18 UTC 2021 - Josef Reidinger <jreidin...@suse.com> + +- Respect additional software needed by security proposal + (bsc#1183804) +- 20210329 + +------------------------------------------------------------------- +Tue Mar 16 15:51:39 UTC 2021 - Josef Reidinger <jreidin...@suse.com> + +- Set SELinux disabled by default (bsc#1183583) +- 20210316 + +------------------------------------------------------------------- +Wed Feb 24 09:18:25 UTC 2021 - David Diaz <dgonza...@suse.com> + +- Set SELinux permissive mode by default (related to jsc#SLE-17307) +- 20210224 + +------------------------------------------------------------------- skelcd-control-openSUSE.changes: same change Old: ---- skelcd-control-openSUSE-20201110.tar.bz2 New: ---- skelcd-control-openSUSE-20210329.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ skelcd-control-openSUSE-promo.spec ++++++ --- /var/tmp/diff_new_pack.eelVLG/_old 2021-03-30 20:51:35.276128987 +0200 +++ /var/tmp/diff_new_pack.eelVLG/_new 2021-03-30 20:51:35.280128991 +0200 @@ -1,7 +1,7 @@ # # spec file for package skelcd-control-openSUSE-promo # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -27,7 +27,7 @@ # ###################################################################### Name: skelcd-control-openSUSE-promo -Version: 20201110 +Version: 20210329 Release: 0 Summary: The openSUSE Installation Control file License: MIT skelcd-control-openSUSE.spec: same change ++++++ skelcd-control-openSUSE-20201110.tar.bz2 -> skelcd-control-openSUSE-20210329.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/.ci.sh new/skelcd-control-openSUSE-20210329/.ci.sh --- old/skelcd-control-openSUSE-20201110/.ci.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/.ci.sh 2021-03-29 13:17:40.000000000 +0200 @@ -0,0 +1,15 @@ +#! /bin/bash + +set -e -x + +make -C control check + +# the "yast-travis-ruby" script is included in the base yastdevel/ruby image +# see https://github.com/yast/docker-yast-ruby/blob/master/yast-travis-ruby +yast-travis-ruby + +# explicitly check the changelog sequence, the source_validator is fine if at least one +# *.changes file is OK, but here we need to be sure that both are correct +/usr/lib/obs/service/source_validators/helpers/convert_changes_to_rpm_changelog --check < package/skelcd-control-openSUSE.changes +/usr/lib/obs/service/source_validators/helpers/convert_changes_to_rpm_changelog --check < package/skelcd-control-openSUSE-promo.changes + diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/.github/workflows/ci.yml new/skelcd-control-openSUSE-20210329/.github/workflows/ci.yml --- old/skelcd-control-openSUSE-20201110/.github/workflows/ci.yml 1970-01-01 01:00:00.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/.github/workflows/ci.yml 2021-03-29 13:17:40.000000000 +0200 @@ -0,0 +1,24 @@ + +# See https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions + +name: CI + +on: [push, pull_request] + +jobs: + # downloading the Docker image takes some time so bundling several fast + # checks into one job avoids that overhead + Checks: + runs-on: ubuntu-latest + container: registry.opensuse.org/yast/head/containers/yast-ruby:latest + + steps: + + - name: Git Checkout + uses: actions/checkout@v2 + + - name: POT Check + run: rake check:pot + + - name: CI checks + run: sh .ci.sh diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/.travis.sh new/skelcd-control-openSUSE-20210329/.travis.sh --- old/skelcd-control-openSUSE-20201110/.travis.sh 2020-11-13 14:02:38.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/.travis.sh 1970-01-01 01:00:00.000000000 +0100 @@ -1,15 +0,0 @@ -#! /bin/bash - -set -e -x - -make -C control check - -# the "yast-travis-ruby" script is included in the base yastdevel/ruby image -# see https://github.com/yast/docker-yast-ruby/blob/master/yast-travis-ruby -yast-travis-ruby - -# explicitly check the changelog sequence, the source_validator is fine if at least one -# *.changes file is OK, but here we need to be sure that both are correct -/usr/lib/obs/service/source_validators/helpers/convert_changes_to_rpm_changelog --check < package/skelcd-control-openSUSE.changes -/usr/lib/obs/service/source_validators/helpers/convert_changes_to_rpm_changelog --check < package/skelcd-control-openSUSE-promo.changes - diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/.travis.yml new/skelcd-control-openSUSE-20210329/.travis.yml --- old/skelcd-control-openSUSE-20201110/.travis.yml 2020-11-13 14:02:38.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/.travis.yml 1970-01-01 01:00:00.000000000 +0100 @@ -1,9 +0,0 @@ -sudo: required -language: bash -services: - - docker - -before_install: - - docker build -t yast-skelcd-control-opensuse-image . -script: - - docker run -it -e TRAVIS=1 -e TRAVIS_JOB_ID="$TRAVIS_JOB_ID" yast-skelcd-control-opensuse-image ./.travis.sh diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/Dockerfile new/skelcd-control-openSUSE-20210329/Dockerfile --- old/skelcd-control-openSUSE-20201110/Dockerfile 2020-11-13 14:02:38.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/Dockerfile 1970-01-01 01:00:00.000000000 +0100 @@ -1,3 +0,0 @@ -FROM registry.opensuse.org/yast/head/containers/yast-ruby:latest -COPY . /usr/src/app - diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/control/control.openSUSE.xml new/skelcd-control-openSUSE-20210329/control/control.openSUSE.xml --- old/skelcd-control-openSUSE-20201110/control/control.openSUSE.xml 2020-11-13 14:02:38.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/control/control.openSUSE.xml 2021-03-29 13:17:40.000000000 +0200 @@ -70,6 +70,13 @@ <!-- FATE: #303893, #305588: Default to enabled kdump --> <enable_kdump config:type="boolean">true</enable_kdump> + <!-- Set SELinux permissive mode by default, https://github.com/yast/yast-installation/pull/906#issuecomment-784238549 --> + <selinux> + <mode>disabled</mode> + <configurable config:type="boolean">true</configurable> + <patterns>selinux</patterns> + </selinux> + <!-- to debug deploying, set to 'true' --> <debug_deploying config:type="boolean">false</debug_deploying> </globals> @@ -641,6 +648,12 @@ <name>hwinfo</name> <presentation_order>80</presentation_order> </proposal_module> + <!-- security proposal including firewall, cpu mitigation, selinux and polkit --> + <!-- It adds to software proposal, so it needs to above of it and it needs to be below bootloader to modify it --> + <proposal_module> + <name>security</name> + <presentation_order>95</presentation_order> + </proposal_module> <!-- software proposal should be computed almost at the end --> <proposal_module> <name>software</name> @@ -651,11 +664,6 @@ <name>default_target</name> <presentation_order>70</presentation_order> </proposal_module> - <!-- FaTE #303859 - simple network (in fact firewall) cfg in 1st stage --> - <proposal_module> - <name>firewall</name> - <presentation_order>95</presentation_order> - </proposal_module> <!-- Fate #319624 - proposal and dialog for existing SSH host keys --> <proposal_module> <name>ssh_import</name> @@ -702,6 +710,10 @@ <name>kdump</name> <presentation_order>60</presentation_order> </proposal_module> + <proposal_module> + <name>security</name> + <presentation_order>50</presentation_order> + </proposal_module> <!-- software proposal should be computed almost at the end --> <proposal_module> <name>software</name> @@ -713,10 +725,6 @@ <presentation_order>75</presentation_order> </proposal_module> <proposal_module> - <name>firewall</name> - <presentation_order>50</presentation_order> - </proposal_module> - <proposal_module> <name>network</name> <presentation_order>55</presentation_order> </proposal_module> @@ -756,6 +764,10 @@ <name>hwinfo</name> <presentation_order>80</presentation_order> </proposal_module> + <proposal_module> + <name>security</name> + <presentation_order>99</presentation_order> + </proposal_module> <!-- software proposal should be computed almost at the end --> <proposal_module> <name>software</name> @@ -766,11 +778,6 @@ <name>default_target</name> <presentation_order>70</presentation_order> </proposal_module> - <!-- FaTE #303859 - simple network (in fact firewall) cfg in 1st stage --> - <proposal_module> - <name>firewall</name> - <presentation_order>99</presentation_order> - </proposal_module> <!-- Fate #319624 - proposal and dialog for existing SSH host keys --> <proposal_module> <name>ssh_import</name> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/package/skelcd-control-openSUSE.changes new/skelcd-control-openSUSE-20210329/package/skelcd-control-openSUSE.changes --- old/skelcd-control-openSUSE-20201110/package/skelcd-control-openSUSE.changes 2020-11-13 14:02:38.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/package/skelcd-control-openSUSE.changes 2021-03-29 13:17:40.000000000 +0200 @@ -1,4 +1,23 @@ ------------------------------------------------------------------- +Mon Mar 29 09:07:18 UTC 2021 - Josef Reidinger <jreidin...@suse.com> + +- Respect additional software needed by security proposal + (bsc#1183804) +- 20210329 + +------------------------------------------------------------------- +Tue Mar 16 15:51:39 UTC 2021 - Josef Reidinger <jreidin...@suse.com> + +- Set SELinux disabled by default (bsc#1183583) +- 20210316 + +------------------------------------------------------------------- +Wed Feb 24 09:18:25 UTC 2021 - David Diaz <dgonza...@suse.com> + +- Set SELinux permissive mode by default (related to jsc#SLE-17307) +- 20210224 + +------------------------------------------------------------------- Tue Nov 10 04:59:22 UTC 2020 - Simon Lees <sfl...@suse.de> - Server Role should install the new yast2_server pattern diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/skelcd-control-openSUSE-20201110/package/skelcd-control-openSUSE.spec new/skelcd-control-openSUSE-20210329/package/skelcd-control-openSUSE.spec --- old/skelcd-control-openSUSE-20201110/package/skelcd-control-openSUSE.spec 2020-11-13 14:02:38.000000000 +0100 +++ new/skelcd-control-openSUSE-20210329/package/skelcd-control-openSUSE.spec 2021-03-29 13:17:40.000000000 +0200 @@ -27,7 +27,7 @@ # ###################################################################### Name: skelcd-control-openSUSE -Version: 20201110 +Version: 20210329 Release: 0 Summary: The openSUSE Installation Control file License: MIT