Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package slurm for openSUSE:Factory checked
in at 2022-08-02 22:09:54
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/slurm (Old)
and /work/SRC/openSUSE:Factory/.slurm.new.1533 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "slurm"
Tue Aug 2 22:09:54 2022 rev:76 rq:992362 version:22.05.2
Changes:
--------
--- /work/SRC/openSUSE:Factory/slurm/slurm.changes 2022-07-22
19:21:45.124709689 +0200
+++ /work/SRC/openSUSE:Factory/.slurm.new.1533/slurm.changes 2022-08-02
22:10:39.978027505 +0200
@@ -1,0 +2,11 @@
+Tue Aug 2 12:43:39 UTC 2022 - Egbert Eich <e...@suse.com>
+
+- Fix a potential security vulnerability in the test package
+ (bsc#1201674, CVE-2022-31251).
+
+-------------------------------------------------------------------
+Thu Jul 21 19:20:42 UTC 2022 - Bernhard Wiedemann <bwiedem...@suse.com>
+
+- make slurmtest.tar reproducible
+
+-------------------------------------------------------------------
@@ -6,2 +17 @@
-- Fix a typo which prevented the nproc limit for slurmd to be
- up-ed for the test suite.
+- Patch NOFILE Limit in the slurmd.service copy for the testsuite.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ slurm.spec ++++++
--- /var/tmp/diff_new_pack.VVoo9G/_old 2022-08-02 22:10:40.626029373 +0200
+++ /var/tmp/diff_new_pack.VVoo9G/_new 2022-08-02 22:10:40.634029396 +0200
@@ -873,11 +873,18 @@
mkdir -p %{buildroot}/srv/slurm-testsuite/shared
mkdir -p %{buildroot}%_localstatedir/lib/slurm/shared
cd %{buildroot}/srv/slurm-testsuite
-tar --group=%slurm_g --owner=%slurm_u -cjf /tmp/slurmtest.tar.bz2 *
+find -type f -name "*.[ao]" -print | while read f; do
+ # drop non-deterministic lto bits from .o files
+ strip -p --discard-locals -R .gnu.lto_* -R .gnu.debuglto_* -N __gnu_lto_v1 $f
+done
+tar --group=%slurm_g --owner=%slurm_u \
+ --sort=name --mtime="@${SOURCE_DATE_EPOCH:-`date +%%s`}"
--pax-option=exthdr.name=%d/PaxHeaders/%f,delete=atime,delete=ctime \
+ -cjf /tmp/slurmtest.tar.bz2 *
cd -
rm -rf %{buildroot}/srv/slurm-testsuite
mkdir -p %{buildroot}/srv/slurm-testsuite
-mv /tmp/slurmtest.tar.bz2 %{buildroot}/srv/slurm-testsuite
+mkdir -p %{buildroot}/%{_datadir}/%{name}
+mv /tmp/slurmtest.tar.bz2 %{buildroot}/%{_datadir}/%{name}
mkdir -p %{buildroot}/etc/sudoers.d
echo "slurm ALL=(auser) NOPASSWD:ALL" > %{buildroot}/etc/sudoers.d/slurm
@@ -889,7 +896,12 @@
if grep -qE "^LimitNPROC" $SLURMD_SERVICE; then
sed -i -e '/LimitNPROC/s@=.*@=infinity@' $SLURMD_SERVICE
else
- sed -i -e '/LimitNPROC/aLimitNPROC=infinity' $SLURMD_SERVICE
+ sed -i -e '/LimitSTACK/aLimitNPROC=infinity' $SLURMD_SERVICE
+fi
+if grep -qE "^LimitNOFILE" $SLURMD_SERVICE; then
+ sed -i -e '/LimitNOFILE/s@=.*@=131072:infinity@' $SLURMD_SERVICE
+else
+ sed -i -e '/LimitSTACK/aLimitNOFILE=131072:infinity' $SLURMD_SERVICE
fi
sed -i -e '/ExecStart/aExecStartPre=/bin/bash -c "for i in 0 1 2 3; do test -e
/dev/nvidia$i || mknod /dev/nvidia$i c 10 $((i+2)); done"' $SLURMD_SERVICE
@@ -1031,7 +1043,7 @@
%post testsuite
rm -rf /srv/slurm-testsuite/src /srv/slurm-testsuite/testsuite
/srv/slurm-testsuite/config.h
-tar --same-owner -C /srv/slurm-testsuite -xjf
/srv/slurm-testsuite/slurmtest.tar.bz2
+sudo -u %slurm_u /usr/bin/tar --same-owner -C /srv/slurm-testsuite -xjf
%{_datadir}/%{name}/slurmtest.tar.bz2
%preun testsuite
rm -rf /srv/slurm-testsuite/src /srv/slurm-testsuite/testsuite
/srv/slurm-testsuite/config.h
@@ -1467,6 +1479,7 @@
%files testsuite
%defattr(-, %slurm_u, %slurm_u, -)
%dir %attr(-, %slurm_u, %slurm_u) /srv/slurm-testsuite
+%attr(-, root, root) %{_datadir}/%{name}
%if 0%{?sle_version} == 120200
%dir %{_pam_secconfdir}/limits.d
%endif
