Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package permissions for openSUSE:Factory checked in at 2026-09-19 22:19:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/permissions (Old) and /work/SRC/openSUSE:Factory/.permissions.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "permissions" Sat Sep 19 22:19:22 2026 rev:180 rq:1378650 version:1699_20260917 Changes: -------- --- /work/SRC/openSUSE:Factory/permissions/permissions.changes 2026-08-11 17:08:57.653265849 +0200 +++ /work/SRC/openSUSE:Factory/.permissions.new.383539/permissions.changes 2026-09-19 22:19:23.778247083 +0200 @@ -1,0 +2,7 @@ +Thu Sep 17 15:46:07 UTC 2026 - Mislav Bozicevic <[email protected]> + +- Update to version 1699_20260917: + * profiles: added CAP_PERFMON for ksystemstats_xe_helper (bsc#1280113) + * profiles: document nvidia-modprobe's special case + +------------------------------------------------------------------- Old: ---- permissions-1699_20260806.tar.xz New: ---- permissions-1699_20260917.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.Hl0mAq/_old 2026-09-19 22:19:24.545278817 +0200 +++ /var/tmp/diff_new_pack.Hl0mAq/_new 2026-09-19 22:19:24.546278858 +0200 @@ -18,7 +18,7 @@ Name: permissions # NOTE: the version prefix is synced with %%suse_version currently -Version: 1699_20260806 +Version: 1699_20260917 Release: 0 Summary: SUSE Linux Default Permissions # Maintained in github by the security team. ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Hl0mAq/_old 2026-09-19 22:19:24.592280762 +0200 +++ /var/tmp/diff_new_pack.Hl0mAq/_new 2026-09-19 22:19:24.595280886 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/permissions.git</param> - <param name="changesrevision">2c61d6c18cc873ba0ec21236cdbd3f194f33584a</param></service></servicedata> + <param name="changesrevision">e6895fbe4891b996615b37a59b526c5c39a5d544</param></service></servicedata> (No newline at EOF) ++++++ permissions-1699_20260806.tar.xz -> permissions-1699_20260917.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-1699_20260806/profiles/permissions.easy new/permissions-1699_20260917/profiles/permissions.easy --- old/permissions-1699_20260806/profiles/permissions.easy 2026-08-06 17:18:40.000000000 +0200 +++ new/permissions-1699_20260917/profiles/permissions.easy 2026-09-17 17:38:07.000000000 +0200 @@ -272,6 +272,13 @@ :package: libgtop # bsc#1218921 /usr/libexec/libgtop_server2 root:root 4755 +# nvidia-modprobe is a special case that should be kept whitelisted even though +# the binary is not shipped in Factory anymore. The typical use case is to use +# Nvidia's official openSUSE repositories, provided by a package that +# **is** in Factory: `openSUSE-repos-Tumbleweed-NVIDIA`. +# See also: +# - https://en.opensuse.org/SDB:NVIDIA_drivers +# - https://build.opensuse.org/request/show/1374974 :package: nvidia-modprobe # bsc#1230950 /usr/bin/nvidia-modprobe root:root 4755 @@ -279,9 +286,11 @@ /usr/libexec/opensmtpd/lockspool root:root 4755 /usr/sbin/smtpctl root:_smtpq 2755 -:package: ksystemstats6 # bsc#1262779 +:package: ksystemstats6 # bsc#1262779, bsc#1280113 /usr/libexec/ksystemstats_intel_helper root:root 0755 +capabilities cap_perfmon=ep +/usr/libexec/ksystemstats_xe_helper root:root 0755 + +capabilities cap_perfmon=ep :package: ttl # bsc#1270714 /usr/bin/ttl root:root 0755 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-1699_20260806/profiles/permissions.paranoid new/permissions-1699_20260917/profiles/permissions.paranoid --- old/permissions-1699_20260806/profiles/permissions.paranoid 2026-08-06 17:18:40.000000000 +0200 +++ new/permissions-1699_20260917/profiles/permissions.paranoid 2026-09-17 17:38:07.000000000 +0200 @@ -269,6 +269,13 @@ :package: libgtop # bsc#1218921 /usr/libexec/libgtop_server2 root:root 0755 +# nvidia-modprobe is a special case that should be kept whitelisted even though +# the binary is not shipped in Factory anymore. The typical use case is to use +# Nvidia's official openSUSE repositories, provided by a package that +# **is** in Factory: `openSUSE-repos-Tumbleweed-NVIDIA`. +# See also: +# - https://en.opensuse.org/SDB:NVIDIA_drivers +# - https://build.opensuse.org/request/show/1374974 :package: nvidia-modprobe # bsc#1230950 /usr/bin/nvidia-modprobe root:root 0755 @@ -276,8 +283,9 @@ /usr/libexec/opensmtpd/lockspool root:root 0755 /usr/sbin/smtpctl root:_smtpq 0555 -:package: ksystemstats6 # bsc#1262779 +:package: ksystemstats6 # bsc#1262779, bsc#1280113 /usr/libexec/ksystemstats_intel_helper root:root 0755 +/usr/libexec/ksystemstats_xe_helper root:root 0755 :package: ttl # bsc#1270714 /usr/bin/ttl root:root 0755 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/permissions-1699_20260806/profiles/permissions.secure new/permissions-1699_20260917/profiles/permissions.secure --- old/permissions-1699_20260806/profiles/permissions.secure 2026-08-06 17:18:40.000000000 +0200 +++ new/permissions-1699_20260917/profiles/permissions.secure 2026-09-17 17:38:07.000000000 +0200 @@ -266,6 +266,13 @@ :package: libgtop # bsc#1218921 /usr/libexec/libgtop_server2 root:root 4755 +# nvidia-modprobe is a special case that should be kept whitelisted even though +# the binary is not shipped in Factory anymore. The typical use case is to use +# Nvidia's official openSUSE repositories, provided by a package that +# **is** in Factory: `openSUSE-repos-Tumbleweed-NVIDIA`. +# See also: +# - https://en.opensuse.org/SDB:NVIDIA_drivers +# - https://build.opensuse.org/request/show/1374974 :package: nvidia-modprobe # bsc#1230950 /usr/bin/nvidia-modprobe root:root 4755 @@ -273,9 +280,11 @@ /usr/libexec/opensmtpd/lockspool root:root 4755 /usr/sbin/smtpctl root:_smtpq 2755 -:package: ksystemstats6 # bsc#1262779 +:package: ksystemstats6 # bsc#1262779, bsc#1280113 /usr/libexec/ksystemstats_intel_helper root:root 0755 +capabilities cap_perfmon=ep +/usr/libexec/ksystemstats_xe_helper root:root 0755 + +capabilities cap_perfmon=ep :package: ttl # bsc#1270714 /usr/bin/ttl root:root 0755
