Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package monitoring-plugins-zypper for openSUSE:Factory checked in at 2023-08-23 14:58:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/monitoring-plugins-zypper (Old) and /work/SRC/openSUSE:Factory/.monitoring-plugins-zypper.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "monitoring-plugins-zypper" Wed Aug 23 14:58:41 2023 rev:22 rq:1105442 version:1.98.11 Changes: -------- --- /work/SRC/openSUSE:Factory/monitoring-plugins-zypper/monitoring-plugins-zypper.changes 2023-07-18 22:07:40.846840207 +0200 +++ /work/SRC/openSUSE:Factory/.monitoring-plugins-zypper.new.1766/monitoring-plugins-zypper.changes 2023-08-23 14:59:51.118230179 +0200 @@ -1,0 +2,6 @@ +Wed Aug 16 08:05:02 UTC 2023 - Lars Vogdt <l...@linux-schulserver.de> + +- update to 1.98.11 + + Update AppArmor profile to work with Tumbleweed + +------------------------------------------------------------------- Old: ---- monitoring-plugins-zypper-1.98.10.tar.xz New: ---- monitoring-plugins-zypper-1.98.11.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ monitoring-plugins-zypper.spec ++++++ --- /var/tmp/diff_new_pack.mGD6Vn/_old 2023-08-23 14:59:51.710231237 +0200 +++ /var/tmp/diff_new_pack.mGD6Vn/_new 2023-08-23 14:59:51.714231244 +0200 @@ -26,7 +26,7 @@ Summary: Check for software updates via zypper License: BSD-3-Clause Group: System/Monitoring -Version: 1.98.10 +Version: 1.98.11 Release: 0 URL: https://github.com/lrupp/monitoring-plugins-zypper Source0: %{name}-%{version}.tar.xz ++++++ _service ++++++ --- /var/tmp/diff_new_pack.mGD6Vn/_old 2023-08-23 14:59:51.766231337 +0200 +++ /var/tmp/diff_new_pack.mGD6Vn/_new 2023-08-23 14:59:51.770231344 +0200 @@ -1,7 +1,7 @@ <services> <service name="tar_scm" mode="localonly"> - <param name="revision">v1.98.10</param> - <param name="version">1.98.10</param> + <param name="revision">V1.98.11</param> + <param name="version">1.98.11</param> <param name="scm">git</param> <param name="url">https://github.com/lrupp/monitoring-plugins-zypper.git</param> <param name="filename">monitoring-plugins-zypper</param> ++++++ monitoring-plugins-zypper-1.98.10.tar.xz -> monitoring-plugins-zypper-1.98.11.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/monitoring-plugins-zypper-1.98.10/usr.lib.nagios.plugins.check_zypper new/monitoring-plugins-zypper-1.98.11/usr.lib.nagios.plugins.check_zypper --- old/monitoring-plugins-zypper-1.98.10/usr.lib.nagios.plugins.check_zypper 2023-07-10 12:15:41.000000000 +0200 +++ new/monitoring-plugins-zypper-1.98.11/usr.lib.nagios.plugins.check_zypper 2023-08-16 08:09:30.000000000 +0200 @@ -1,4 +1,3 @@ -# Last Modified: Wed Jun 23 14:48:41 2014 #include <tunables/global> /usr/lib/nagios/plugins/check_zypper { @@ -102,13 +101,35 @@ #include <local/usr.lib.nagios.plugins.check_zypper.zypp_refresh> capability ipc_lock, /usr/bin/gpg2 rmix, + /usr/bin/gpg-agent mrix, + /usr/bin/gpgconf mr, + /usr/bin/gpgsm mr, + /usr/bin/scdaemon px -> /usr/lib/nagios/plugins/check_zypper//scdaemon, + + # maybe abstractions/crypto? (available since AppArmor 3.0) + owner /etc/gcrypt/hwf.deny r, /proc/sys/crypto/fips_enabled r, + + owner /proc/@{pid}/fd/ r, /var/tmp/TmpFile.* rwk, /var/tmp/TmpDir.*/* rwlk, /var/tmp/zypp.*/* rwlk, /var/tmp/zypp.*/*/* rwlk, + /var/tmp/zypp.*/zypp-trusted-kr*/ r, + /var/tmp/zypp.*/zypp-trusted-kr*/private-keys-v1.d/ w, /var/cache/zypp/** r, } + profile scdaemon { + #include <abstractions/base> + + # maybe abstractions/crypto? (available since AppArmor 3.0) + /etc/gcrypt/hwf.deny r, + /proc/sys/crypto/fips_enabled r, + + owner /proc/@{pid}/task/*/comm rw, + /usr/bin/scdaemon r, + owner /var/tmp/zypp.*/zypp-trusted-kr*/S.scdaemon w, + } profile zypper { #include <abstractions/base> #include <abstractions/bash> @@ -122,11 +143,17 @@ /{,usr/}bin/bash rix, /usr/bin/rpmdb2solv rix, /usr/bin/zypper rmix, + /usr/lib/sysimage/rpm/Index.db rwlk, /usr/share/zypper/ r, /usr/share/zypper/** r, /usr/bin/gpg2 px -> /usr/lib/nagios/plugins/check_zypper//gpg, + /usr/bin/gpgconf px -> /usr/lib/nagios/plugins/check_zypper//gpg, + /usr/bin/gpgsm px -> /usr/lib/nagios/plugins/check_zypper//gpg, /usr/bin/uuidgen px -> /usr/lib/nagios/plugins/check_zypper//uuidgen, /usr/lib*/libproxy-*/modules/config_gnome3.so mr, + /run/zypp-rpm.pid rwk, + /run/zypp.pid rwk, + /var/log/zypp/history r, /var/log/zypper.log w, /proc/sys/kernel/random/uuid r, }