Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rpmlint for openSUSE:Factory checked in at 2025-12-04 11:21:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rpmlint (Old) and /work/SRC/openSUSE:Factory/.rpmlint.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rpmlint" Thu Dec 4 11:21:13 2025 rev:518 rq:1320834 version:2.8.0+git20251202.24cc5a2f Changes: -------- --- /work/SRC/openSUSE:Factory/rpmlint/rpmlint.changes 2025-12-01 11:12:38.092764497 +0100 +++ /work/SRC/openSUSE:Factory/.rpmlint.new.1939/rpmlint.changes 2025-12-04 11:26:38.665919135 +0100 @@ -1,0 +2,6 @@ +Tue Dec 02 11:41:39 UTC 2025 - Filippo Bonazzi <[email protected]> + +- Update to version 2.8.0+git20251202.24cc5a2f: + * whitelists: add account-utils PAM modules and permissions.d drop-in file (bsc#1254218) + +------------------------------------------------------------------- Old: ---- rpmlint-2.8.0+git20251125.b54a5e0f.tar.xz New: ---- rpmlint-2.8.0+git20251202.24cc5a2f.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rpmlint.spec ++++++ --- /var/tmp/diff_new_pack.AB1NU7/_old 2025-12-04 11:26:39.353948249 +0100 +++ /var/tmp/diff_new_pack.AB1NU7/_new 2025-12-04 11:26:39.353948249 +0100 @@ -23,7 +23,7 @@ %define name_suffix -%{flavor} %endif Name: rpmlint%{name_suffix} -Version: 2.8.0+git20251125.b54a5e0f +Version: 2.8.0+git20251202.24cc5a2f Release: 0 Summary: RPM file correctness checker License: GPL-2.0-or-later ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.AB1NU7/_old 2025-12-04 11:26:39.417950957 +0100 +++ /var/tmp/diff_new_pack.AB1NU7/_new 2025-12-04 11:26:39.421951127 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/rpm-software-management/rpmlint.git</param> - <param name="changesrevision">b54a5e0fe328401ebf6e90e247c43a65d608aeb4</param></service></servicedata> + <param name="changesrevision">24cc5a2f3d1836b078a39838609ff1a96f3f55c7</param></service></servicedata> (No newline at EOF) ++++++ rpmlint-2.8.0+git20251125.b54a5e0f.tar.xz -> rpmlint-2.8.0+git20251202.24cc5a2f.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/rpmlint-2.8.0+git20251125.b54a5e0f/configs/openSUSE/pam-modules.toml new/rpmlint-2.8.0+git20251202.24cc5a2f/configs/openSUSE/pam-modules.toml --- old/rpmlint-2.8.0+git20251125.b54a5e0f/configs/openSUSE/pam-modules.toml 2025-11-25 17:12:19.000000000 +0100 +++ new/rpmlint-2.8.0+git20251202.24cc5a2f/configs/openSUSE/pam-modules.toml 2025-12-02 12:39:46.000000000 +0100 @@ -567,3 +567,13 @@ nodigests = [ "glob:*/security/pam_cgroup.so", ] + +[[FileDigestGroup]] +package = "account-utils" +note = "pam_unix replacement for use in environments with `no_new_privs` everywhere" +bug = "bsc#1254218" +type = "pam" +nodigests = [ + "global:*/security/pam_debuginfo.so", + "global:*/security/pam_unix_ng.so" +] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/rpmlint-2.8.0+git20251125.b54a5e0f/configs/openSUSE/permissions-whitelist.toml new/rpmlint-2.8.0+git20251202.24cc5a2f/configs/openSUSE/permissions-whitelist.toml --- old/rpmlint-2.8.0+git20251125.b54a5e0f/configs/openSUSE/permissions-whitelist.toml 2025-11-25 17:12:19.000000000 +0100 +++ new/rpmlint-2.8.0+git20251202.24cc5a2f/configs/openSUSE/permissions-whitelist.toml 2025-12-02 12:39:46.000000000 +0100 @@ -100,3 +100,13 @@ path = "/etc/permissions.d/snapd.paranoid" digester = "shell" hash = "3d57053a143f2828783d2c835ddfb0af85db16cfde1a088fe2db8a161d5b053c" + +[[FileDigestGroup]] +package = "account-utils" +note = "Disables setuid bits for shadow utilities, which are replaced by this package. In the long run there should be a drop-in file for shadow instead." +bug = "bsc#1254218" +type = "permissions" +[[FileDigestGroup.digests]] +path = "/usr/share/permissions/permissions.d/account-utils" +digester = "shell" +hash = "3d993065d4bf90ae94a32959c391a656ad3a1125faeecfeacaec866c6bf046af"
