Hello community,
here is the log from the commit of package ghostscript for openSUSE:Factory
checked in at 2019-05-14 13:28:57
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ghostscript (Old)
and /work/SRC/openSUSE:Factory/.ghostscript.new.5148 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghostscript"
Tue May 14 13:28:57 2019 rev:40 rq:701738 version:9.27
Changes:
--------
--- /work/SRC/openSUSE:Factory/ghostscript/ghostscript.changes 2019-05-07
23:11:42.692014494 +0200
+++ /work/SRC/openSUSE:Factory/.ghostscript.new.5148/ghostscript.changes
2019-05-14 13:29:01.751130120 +0200
@@ -1,0 +2,5 @@
+Wed May 8 08:46:43 UTC 2019 - jseg...@suse.com
+
+- Set AA profile to complain and added fixes for ps2epsi (boo#1134327)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ ghostscript-mini.spec ++++++
--- /var/tmp/diff_new_pack.7ONNbO/_old 2019-05-14 13:29:04.523137344 +0200
+++ /var/tmp/diff_new_pack.7ONNbO/_new 2019-05-14 13:29:04.547137407 +0200
@@ -1,7 +1,7 @@
#
# spec file for package ghostscript-mini
#
-# Copyright (c) 2019 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
++++++ ghostscript.spec ++++++
--- /var/tmp/diff_new_pack.7ONNbO/_old 2019-05-14 13:29:04.851138199 +0200
+++ /var/tmp/diff_new_pack.7ONNbO/_new 2019-05-14 13:29:04.891138304 +0200
@@ -1,7 +1,7 @@
#
# spec file for package ghostscript
#
-# Copyright (c) 2019 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -218,7 +218,6 @@
%package x11
Summary: X11 library for Ghostscript
-Group: Productivity/Publishing/PS
# Require the exact matching version-release of the ghostscript main-package
because
# a non-matching ghostscript main-package may let it fail or even crash (e.g.
segfault)
# because all Ghostscript software is built from one same Ghostscript source
tar ball
@@ -226,6 +225,7 @@
# The exact matching version-release of the ghostscript main-package is
available
# on the same package repository where the ghostscript-x11 sub-package is
because
# all are built simulaneously from the same Ghostscript source package:
+Group: Productivity/Publishing/PS
Requires: ghostscript = %{version}-%{release}
# Unfortunately ghostscript-library.spec and ghostscript-mini.spec have
# an unversioned "Provides: ghostscript" and for RPM this means that both
++++++ apparmor_ghostscript ++++++
--- /var/tmp/diff_new_pack.7ONNbO/_old 2019-05-14 13:29:05.279139315 +0200
+++ /var/tmp/diff_new_pack.7ONNbO/_new 2019-05-14 13:29:05.299139367 +0200
@@ -2,8 +2,10 @@
# this profile is mainly intended to prevent easy exploitation of
# issues in ghostscript. This is mainly intended as a hardening
-# measure and doesn't alleviate the need for regular updates
-profile ghostscript
/usr/bin/{dvipdf,eps2eps,gs,gsbj,gsdj,gsdj500,gslj,gslp,gsnd,ps2ascii,ps2epsi,ps2pdf,ps2pdf12,ps2pdf13,ps2pdf14,ps2pdfwr,ps2ps,ps2ps2}
{
+# measure and doesn't alleviate the need for regular updates.
+# Currently this profile is in complain mode since it caused regressions
+# for tumbleweed users
+profile ghostscript
/usr/bin/{dvipdf,eps2eps,gs,gsbj,gsdj,gsdj500,gslj,gslp,gsnd,ps2ascii,ps2epsi,ps2pdf,ps2pdf12,ps2pdf13,ps2pdf14,ps2pdfwr,ps2ps,ps2ps2}
flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
@@ -45,4 +47,15 @@
#include <abstractions/base>
/usr/bin/dirname mr,
}
+
+ # for gsbj
+ /usr/bin/date mrix,
+ # for ps2epsi
+ /usr/bin/{gawk,cat,ls,sed,which} mrix,
+ /usr/bin/{mktemp,rm} Cx -> tempdir,
+ profile tempdir {
+ #include <abstractions/base>
+ /usr/bin/{mktemp,rm} mr,
+ owner /tmp/ps2epsi.* rw,
+ }
}
