Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package monitoring-plugins-zypper for 
openSUSE:Factory checked in at 2023-08-23 14:58:41
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/monitoring-plugins-zypper (Old)
 and      /work/SRC/openSUSE:Factory/.monitoring-plugins-zypper.new.1766 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "monitoring-plugins-zypper"

Wed Aug 23 14:58:41 2023 rev:22 rq:1105442 version:1.98.11

Changes:
--------
--- 
/work/SRC/openSUSE:Factory/monitoring-plugins-zypper/monitoring-plugins-zypper.changes
      2023-07-18 22:07:40.846840207 +0200
+++ 
/work/SRC/openSUSE:Factory/.monitoring-plugins-zypper.new.1766/monitoring-plugins-zypper.changes
    2023-08-23 14:59:51.118230179 +0200
@@ -1,0 +2,6 @@
+Wed Aug 16 08:05:02 UTC 2023 - Lars Vogdt <l...@linux-schulserver.de>
+
+- update to 1.98.11
+  + Update AppArmor profile to work with Tumbleweed
+
+-------------------------------------------------------------------

Old:
----
  monitoring-plugins-zypper-1.98.10.tar.xz

New:
----
  monitoring-plugins-zypper-1.98.11.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ monitoring-plugins-zypper.spec ++++++
--- /var/tmp/diff_new_pack.mGD6Vn/_old  2023-08-23 14:59:51.710231237 +0200
+++ /var/tmp/diff_new_pack.mGD6Vn/_new  2023-08-23 14:59:51.714231244 +0200
@@ -26,7 +26,7 @@
 Summary:        Check for software updates via zypper
 License:        BSD-3-Clause
 Group:          System/Monitoring
-Version:        1.98.10
+Version:        1.98.11
 Release:        0
 URL:            https://github.com/lrupp/monitoring-plugins-zypper
 Source0:        %{name}-%{version}.tar.xz

++++++ _service ++++++
--- /var/tmp/diff_new_pack.mGD6Vn/_old  2023-08-23 14:59:51.766231337 +0200
+++ /var/tmp/diff_new_pack.mGD6Vn/_new  2023-08-23 14:59:51.770231344 +0200
@@ -1,7 +1,7 @@
 <services>
    <service name="tar_scm" mode="localonly">
-     <param name="revision">v1.98.10</param>
-     <param name="version">1.98.10</param>
+     <param name="revision">V1.98.11</param>
+     <param name="version">1.98.11</param>
      <param name="scm">git</param>
      <param 
name="url">https://github.com/lrupp/monitoring-plugins-zypper.git</param>
      <param name="filename">monitoring-plugins-zypper</param>

++++++ monitoring-plugins-zypper-1.98.10.tar.xz -> 
monitoring-plugins-zypper-1.98.11.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/monitoring-plugins-zypper-1.98.10/usr.lib.nagios.plugins.check_zypper 
new/monitoring-plugins-zypper-1.98.11/usr.lib.nagios.plugins.check_zypper
--- old/monitoring-plugins-zypper-1.98.10/usr.lib.nagios.plugins.check_zypper   
2023-07-10 12:15:41.000000000 +0200
+++ new/monitoring-plugins-zypper-1.98.11/usr.lib.nagios.plugins.check_zypper   
2023-08-16 08:09:30.000000000 +0200
@@ -1,4 +1,3 @@
-# Last Modified: Wed Jun 23 14:48:41 2014
 #include <tunables/global>
 
 /usr/lib/nagios/plugins/check_zypper {
@@ -102,13 +101,35 @@
     #include <local/usr.lib.nagios.plugins.check_zypper.zypp_refresh>
     capability ipc_lock,
     /usr/bin/gpg2 rmix,
+    /usr/bin/gpg-agent mrix,
+    /usr/bin/gpgconf mr,
+    /usr/bin/gpgsm mr,
+    /usr/bin/scdaemon px -> /usr/lib/nagios/plugins/check_zypper//scdaemon,
+
+    # maybe abstractions/crypto? (available since AppArmor 3.0)
+    owner /etc/gcrypt/hwf.deny r,
     /proc/sys/crypto/fips_enabled r,
+
+    owner /proc/@{pid}/fd/ r,
     /var/tmp/TmpFile.*  rwk,
     /var/tmp/TmpDir.*/* rwlk,
     /var/tmp/zypp.*/*   rwlk,
     /var/tmp/zypp.*/*/* rwlk,
+    /var/tmp/zypp.*/zypp-trusted-kr*/ r,
+    /var/tmp/zypp.*/zypp-trusted-kr*/private-keys-v1.d/ w,
     /var/cache/zypp/** r,
   }
+  profile scdaemon {
+    #include <abstractions/base>
+
+    # maybe abstractions/crypto? (available since AppArmor 3.0)
+    /etc/gcrypt/hwf.deny r,
+    /proc/sys/crypto/fips_enabled r,
+
+    owner /proc/@{pid}/task/*/comm rw,
+    /usr/bin/scdaemon r,
+    owner /var/tmp/zypp.*/zypp-trusted-kr*/S.scdaemon w,
+  }
   profile zypper {
     #include <abstractions/base>
     #include <abstractions/bash>
@@ -122,11 +143,17 @@
     /{,usr/}bin/bash rix,
     /usr/bin/rpmdb2solv         rix,
     /usr/bin/zypper rmix,
+    /usr/lib/sysimage/rpm/Index.db rwlk,
     /usr/share/zypper/ r,
     /usr/share/zypper/** r,
     /usr/bin/gpg2 px -> /usr/lib/nagios/plugins/check_zypper//gpg,
+    /usr/bin/gpgconf px -> /usr/lib/nagios/plugins/check_zypper//gpg,
+    /usr/bin/gpgsm px -> /usr/lib/nagios/plugins/check_zypper//gpg,
     /usr/bin/uuidgen px -> /usr/lib/nagios/plugins/check_zypper//uuidgen,
     /usr/lib*/libproxy-*/modules/config_gnome3.so mr,
+    /run/zypp-rpm.pid rwk,
+    /run/zypp.pid rwk,
+    /var/log/zypp/history r,
     /var/log/zypper.log w,
     /proc/sys/kernel/random/uuid r,
   }

Reply via email to