Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at 2025-12-24 13:15:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/permissions (Old) and /work/SRC/openSUSE:Factory/.permissions.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "permissions" Wed Dec 24 13:15:55 2025 rev:170 rq:1324256 version:1699_20251217 Changes: -------- --- /work/SRC/openSUSE:Factory/permissions/permissions.changes 2025-10-03 15:42:04.977166050 +0200 +++ /work/SRC/openSUSE:Factory/.permissions.new.1928/permissions.changes 2025-12-24 13:17:05.136376675 +0100 @@ -1,0 +2,6 @@ +Wed Dec 17 09:51:34 UTC 2025 - Wolfgang Frisch <[email protected]> + +- Update to version 1699_20251217: + * profiles: drop shadow related entries (bsc#1254844) + +------------------------------------------------------------------- Old: ---- permissions-1699_20251002.tar.xz New: ---- permissions-1699_20251217.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.c9aOM2/_old 2025-12-24 13:17:06.168419310 +0100 +++ /var/tmp/diff_new_pack.c9aOM2/_new 2025-12-24 13:17:06.168419310 +0100 @@ -17,7 +17,7 @@ Name: permissions -Version: 1699_20251002 +Version: 1699_20251217 Release: 0 Summary: SUSE Linux Default Permissions # Maintained in github by the security team. ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.c9aOM2/_old 2025-12-24 13:17:06.216421294 +0100 +++ /var/tmp/diff_new_pack.c9aOM2/_new 2025-12-24 13:17:06.220421458 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/permissions.git</param> - <param name="changesrevision">6ae74b2a2194e1787c3a9aaed2d75ae2e7ed22e7</param></service></servicedata> + <param name="changesrevision">02259c90483004b7ad70dcef62f985f4b1f0655e</param></service></servicedata> (No newline at EOF) ++++++ permissions-1699_20251002.tar.xz -> permissions-1699_20251217.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-1699_20251002/profiles/permissions.easy new/permissions-1699_20251217/profiles/permissions.easy --- old/permissions-1699_20251002/profiles/permissions.easy 2025-10-02 13:52:01.000000000 +0200 +++ new/permissions-1699_20251217/profiles/permissions.easy 2025-12-17 10:50:07.000000000 +0100 @@ -35,11 +35,6 @@ /usr/bin/crontab root:trusted 4755 /usr/bin/gpasswd root:shadow 4755 /usr/bin/newgrp root:root 4755 -/usr/bin/passwd root:shadow 4755 -/usr/bin/chfn root:shadow 4755 -/usr/bin/chage root:shadow 2755 -/usr/bin/chsh root:shadow 4755 -/usr/bin/expiry root:shadow 4755 /usr/bin/sudo root:root 4755 /usr/sbin/su-wrapper root:root 4755 # #331020 @@ -221,12 +216,6 @@ # /usr/sbin/suexec root:root 0755 -# newgidmap / newuidmap (bsc#979282, bsc#1048645, bsc#1208309) -/usr/bin/newgidmap root:root 0755 - +capabilities cap_setgid=ep -/usr/bin/newuidmap root:root 0755 - +capabilities cap_setuid=ep - # kwayland (bsc#1062182) /usr/bin/kwin_wayland root:root 0755 +capabilities cap_sys_nice=ep diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-1699_20251002/profiles/permissions.paranoid new/permissions-1699_20251217/profiles/permissions.paranoid --- old/permissions-1699_20251002/profiles/permissions.paranoid 2025-10-02 13:52:01.000000000 +0200 +++ new/permissions-1699_20251217/profiles/permissions.paranoid 2025-12-17 10:50:07.000000000 +0100 @@ -53,11 +53,6 @@ /usr/bin/crontab root:trusted 0755 /usr/bin/gpasswd root:shadow 0755 /usr/bin/newgrp root:root 0755 -/usr/bin/passwd root:shadow 0755 -/usr/bin/chfn root:shadow 0755 -/usr/bin/chage root:shadow 0755 -/usr/bin/chsh root:shadow 0755 -/usr/bin/expiry root:shadow 0755 /usr/bin/sudo root:root 0755 /usr/sbin/su-wrapper root:root 0755 # #331020 @@ -233,10 +228,6 @@ # /usr/sbin/suexec root:root 0755 -# newgidmap / newuidmap (bsc#979282, bsc#1048645, bsc#1208309) -/usr/bin/newgidmap root:root 0755 -/usr/bin/newuidmap root:root 0755 - # kwayland (bsc#1062182) /usr/bin/kwin_wayland root:root 0755 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-1699_20251002/profiles/permissions.secure new/permissions-1699_20251217/profiles/permissions.secure --- old/permissions-1699_20251002/profiles/permissions.secure 2025-10-02 13:52:01.000000000 +0200 +++ new/permissions-1699_20251217/profiles/permissions.secure 2025-12-17 10:50:07.000000000 +0100 @@ -77,11 +77,6 @@ /usr/bin/crontab root:trusted 4750 /usr/bin/gpasswd root:shadow 4755 /usr/bin/newgrp root:root 4755 -/usr/bin/passwd root:shadow 4755 -/usr/bin/chfn root:shadow 4755 -/usr/bin/chage root:shadow 2755 -/usr/bin/chsh root:shadow 4755 -/usr/bin/expiry root:shadow 4755 /usr/bin/sudo root:root 4755 /usr/sbin/su-wrapper root:root 0755 # #331020 @@ -261,12 +256,6 @@ # /usr/sbin/suexec root:root 0755 -# newgidmap / newuidmap (bsc#979282, bsc#1048645, bsc#1208309) -/usr/bin/newgidmap root:root 0755 - +capabilities cap_setgid=ep -/usr/bin/newuidmap root:root 0755 - +capabilities cap_setuid=ep - # kwayland (bsc#1062182) /usr/bin/kwin_wayland root:root 0755 +capabilities cap_sys_nice=ep
