Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tor for openSUSE:Factory checked in at 2026-07-24 22:06:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tor (Old) and /work/SRC/openSUSE:Factory/.tor.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tor" Fri Jul 24 22:06:18 2026 rev:135 rq:1367614 version:0.4.9.9 Changes: -------- --- /work/SRC/openSUSE:Factory/tor/tor.changes 2026-06-02 16:10:28.242175318 +0200 +++ /work/SRC/openSUSE:Factory/.tor.new.2004/tor.changes 2026-07-24 22:06:43.280597908 +0200 @@ -1,0 +2,16 @@ +Thu Jul 16 21:43:44 UTC 2026 - Bernhard Wiedemann <[email protected]> + +- Create the tor user and group via sysusers.d (new source: + system-user-tor.conf) instead of useradd in %pre, which lacked an + install-time dependency on shadow +- Drop fillup usage: no sysconfig fillup template is shipped +- Use %tmpfiles_create instead of calling systemd-tmpfiles directly +- Own /run/tor as %ghost (fixes rpmlint tmpfile-not-in-filelist) +- Simplify tarball checksum verification in %prep +- Drop creation of the unpackaged /var/tmp/tor directory +- tor.service: drop obsolete syslog.target ordering, drop the + deprecated no-op PermissionsStartOnly, drop ReadOnlyDirectories=/ + (redundant with ProtectSystem=strict) and rename + ReadWriteDirectories to ReadWritePaths + +------------------------------------------------------------------- New: ---- system-user-tor.conf ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tor.spec ++++++ --- /var/tmp/diff_new_pack.RqHj3d/_old 2026-07-24 22:06:46.096696250 +0200 +++ /var/tmp/diff_new_pack.RqHj3d/_new 2026-07-24 22:06:46.096696250 +0200 @@ -19,7 +19,6 @@ %define toruser %{name} %define torgroup %{name} -%define home_dir %{_localstatedir}/lib/empty Name: tor Version: 0.4.9.9 Release: 0 @@ -33,6 +32,7 @@ Source4: tor.tmpfiles Source5: defaults-torrc Source6: tor-master.service +Source7: system-user-tor.conf Source100: https://www.torproject.org/dist/%{name}-%{version}.tar.gz.sha256sum Source101: https://www.torproject.org/dist/%{name}-%{version}.tar.gz.sha256sum.asc Patch0: tor-0.2.5.x-logrotate.patch @@ -40,8 +40,8 @@ BuildRequires: libscrypt-devel BuildRequires: openssl-devel >= 1.0.1 BuildRequires: pkgconfig >= 0.9.0 -BuildRequires: pwdutils BuildRequires: python3-base +BuildRequires: sysuser-tools BuildRequires: pkgconfig(libcap) BuildRequires: pkgconfig(libevent) >= 2.0.10 BuildRequires: pkgconfig(liblzma) @@ -51,10 +51,8 @@ BuildRequires: pkgconfig(systemd) BuildRequires: pkgconfig(zlib) Requires: logrotate -Requires(post): %fillup_prereq Recommends: torsocks -Provides: group(%{torgroup}) -Provides: user(%{toruser}) +%sysusers_requires %systemd_ordering %description @@ -81,7 +79,7 @@ for high-stakes anonymity. %prep -( cd $(dirname %{SOURCE0}) && echo "$(cat %{SOURCE100} | cut -d' ' -f1) tor-%{version}.tar.gz" | sha256sum --check ) +( cd $(dirname %{SOURCE0}) && sha256sum --check %{SOURCE100} ) %autosetup -p1 %build @@ -96,14 +94,13 @@ --enable-gcc-warnings-advisory \ --docdir=%{_docdir}/%{name} %make_build +%sysusers_generate_pre %{SOURCE7} %{name} system-user-%{name}.conf %install %make_install # missing dirs -install -d -m 700 \ - %{buildroot}%{_localstatedir}/lib/%{name} \ - %{buildroot}%{_localstatedir}/tmp/%{name} +install -d -m 700 %{buildroot}%{_localstatedir}/lib/%{name} install -d -m 755 \ %{buildroot}%{_localstatedir}/log/%{name} \ @@ -112,8 +109,8 @@ install -m 644 -D %{SOURCE3} %{buildroot}/%{_unitdir}/%{name}.service install -m 644 -D %{SOURCE6} %{buildroot}/%{_unitdir}/%{name}-master.service install -m 644 %{SOURCE5} %{buildroot}%{_datadir}/tor/defaults-torrc -install -d -m 0755 %{buildroot}%{_tmpfilesdir}/ -install -m 0644 %{SOURCE4} %{buildroot}%{_tmpfilesdir}/%{name}.conf +install -m 0644 -D %{SOURCE4} %{buildroot}%{_tmpfilesdir}/%{name}.conf +install -m 0644 -D %{SOURCE7} %{buildroot}%{_sysusersdir}/system-user-%{name}.conf ln -s -f service %{buildroot}%{_sbindir}/rc%{name} ln -s -f service %{buildroot}%{_sbindir}/rc%{name}-master @@ -133,15 +130,12 @@ ) %endif -%pre -getent group %{torgroup} >/dev/null || groupadd -r %{torgroup} -getent passwd %{toruser} >/dev/null || useradd -r -g %{torgroup} -d %{home_dir} -s /sbin/nologin -c "User for %{name}" %{toruser} +%pre -f %{name}.pre %service_add_pre tor.service tor-master.service %post -%fillup_only %service_add_post tor.service tor-master.service -systemd-tmpfiles --create %{_tmpfilesdir}/tor.conf || : +%tmpfiles_create %{_tmpfilesdir}/%{name}.conf %preun %service_del_preun tor.service tor-master.service @@ -161,11 +155,13 @@ %dir %attr(0755,root,%{torgroup}) %{_sysconfdir}/%{name} %config(noreplace) %attr(0644,root,%{torgroup}) %{_sysconfdir}/%{name}/torrc %config %attr(0644,root,%{torgroup}) %{_sysconfdir}/%{name}/torrc.* +%ghost %dir %attr(0755,%{toruser},%{torgroup}) /run/%{name} %attr(0700,%{toruser},%{torgroup}) %dir %{_localstatedir}/lib/%{name} %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/log/%{name} %{_unitdir}/%{name}.service %{_unitdir}/%{name}-master.service %{_tmpfilesdir}/%{name}.conf +%{_sysusersdir}/system-user-%{name}.conf %{_sbindir}/rc%{name} %{_sbindir}/rc%{name}-master ++++++ system-user-tor.conf ++++++ # Type Name ID GECOS Home directory Shell u tor - "User for tor" /var/lib/empty - ++++++ tor.service ++++++ --- /var/tmp/diff_new_pack.RqHj3d/_old 2026-07-24 22:06:46.312703794 +0200 +++ /var/tmp/diff_new_pack.RqHj3d/_new 2026-07-24 22:06:46.320704073 +0200 @@ -1,6 +1,6 @@ [Unit] Description=Anonymizing overlay network for TCP -After=syslog.target network.target nss-lookup.target +After=network.target nss-lookup.target PartOf=tor-master.service ReloadPropagatedFrom=tor-master.service @@ -23,7 +23,6 @@ LockPersonality=yes MemoryDenyWriteExecute=yes NoNewPrivileges=yes -PermissionsStartOnly=yes PrivateDevices=yes PrivateNetwork=no PrivateUsers=no @@ -36,10 +35,9 @@ ProtectKernelTunables=yes ProtectSystem=strict ProtectHostname=yes -ReadOnlyDirectories=/ -ReadWriteDirectories=/run/tor -ReadWriteDirectories=/var/lib/tor -ReadWriteDirectories=/var/log/tor +ReadWritePaths=/run/tor +ReadWritePaths=/var/lib/tor +ReadWritePaths=/var/log/tor RemoveIPC=yes RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 RestrictNamespaces=yes
