Hello community,
here is the log from the commit of package gvfs for openSUSE:Factory checked in
at 2017-12-06 08:47:56
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/gvfs (Old)
and /work/SRC/openSUSE:Factory/.gvfs.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gvfs"
Wed Dec 6 08:47:56 2017 rev:143 rq:547577 version:1.34.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/gvfs/gvfs.changes 2017-11-30
16:31:35.470784570 +0100
+++ /work/SRC/openSUSE:Factory/.gvfs.new/gvfs.changes 2017-12-06
08:47:58.100313673 +0100
@@ -1,0 +2,8 @@
+Sat Dec 2 16:53:11 UTC 2017 - dims...@opensuse.org
+
+- Re-enabele caps(cap_net_bind_service=+ep)for gvfsd-nfs: the
+ permissions package was updated to reflect this change.
+- Add appropriate post/verifyscripts to set the capabilities as
+ defined in the permissions package.
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ gvfs.spec ++++++
--- /var/tmp/diff_new_pack.EZtXAT/_old 2017-12-06 08:47:59.080277794 +0100
+++ /var/tmp/diff_new_pack.EZtXAT/_new 2017-12-06 08:47:59.084277647 +0100
@@ -207,6 +207,12 @@
%post fuse
%tmpfiles_create %{_libexecdir}/tmpfiles.d/gvfsd-fuse-tmpfiles.conf
+%post backends
+%set_permissions %{_libexecdir}/%{name}/gvfsd-nfs
+
+%verifyscript backends
+%verify_permissions -e %{_libexecdir}/%{name}/gvfsd-nfs
+
%postun
%glib2_gio_module_postun
@@ -328,9 +334,8 @@
%{_libexecdir}/%{name}/gvfsd-network
%{_datadir}/%{name}/mounts/network.mount
%if 0%{?is_opensuse}
-# allow priv ports for mounting nfs . Otherwise the nfs-service requires
insecure, not approved by sec, see boo#1065864
-# %caps(cap_net_bind_service=+ep) %{_libexecdir}/%{name}/gvfsd-nfs
-%{_libexecdir}/%{name}/gvfsd-nfs
+# allow priv ports for mounting nfs . Otherwise the nfs-service requires
insecure (boo#1065864)
+%verify(not mode caps) %caps(cap_net_bind_service=+ep)
%{_libexecdir}/%{name}/gvfsd-nfs
%{_datadir}/%{name}/mounts/nfs.mount
%endif
%if !0%{?is_opensuse}
