Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openCryptoki for openSUSE:Factory checked in at 2026-07-14 13:46:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openCryptoki (Old) and /work/SRC/openSUSE:Factory/.openCryptoki.new.1991 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openCryptoki" Tue Jul 14 13:46:59 2026 rev:97 rq:1365392 version:3.27.0 Changes: -------- --- /work/SRC/openSUSE:Factory/openCryptoki/openCryptoki.changes 2026-06-22 18:24:21.552893967 +0200 +++ /work/SRC/openSUSE:Factory/.openCryptoki.new.1991/openCryptoki.changes 2026-07-14 13:47:26.225882318 +0200 @@ -1,0 +2,8 @@ +Mon Jul 13 07:05:04 UTC 2026 - Nikolay Gueorguiev <[email protected]> + +- Ammended the .spec file (bsc#1268745) +- Fixed pkcsslotd directory creation failures on immutable/transactional systems: + * Added systemd service drop-in to allow dynamic token slot path creation + (e.g., icatok_X) via ReadWritePaths. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openCryptoki.spec ++++++ --- /var/tmp/diff_new_pack.noH52V/_old 2026-07-14 13:47:27.245917067 +0200 +++ /var/tmp/diff_new_pack.noH52V/_new 2026-07-14 13:47:27.249917202 +0200 @@ -234,6 +234,12 @@ d /var/log/opencryptoki 0770 root pkcs11 - - L+ /etc/pkcs11 - - - - /var/lib/opencryptoki EOF +# Install a systemd service drop-in to open up sandboxed write paths for immutable mode +mkdir -p %{buildroot}%{_unitdir}/pkcsslotd.service.d +cat > %{buildroot}%{_unitdir}/pkcsslotd.service.d/10-immutable-paths.conf <<EOF +[Service] +ReadWritePaths=/var/lib/opencryptoki/ /var/lock/opencryptoki/ +EOF # Remove manual directory creation in %%install that belongs in /var rm -rf %{buildroot}%{_localstatedir}/lib/opencryptoki @@ -333,6 +339,8 @@ %endif %{_sbindir}/p11sak %{_unitdir}/pkcsslotd.service +%dir %{_unitdir}/pkcsslotd.service.d +%{_unitdir}/pkcsslotd.service.d/10-immutable-paths.conf %{_tmpfilesdir}/opencryptoki.conf %{_sbindir}/rcpkcsslotd # utilities
