Hello community, here is the log from the commit of package NetworkManager for openSUSE:Factory checked in at 2019-06-24 21:48:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/NetworkManager (Old) and /work/SRC/openSUSE:Factory/.NetworkManager.new.4615 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "NetworkManager" Mon Jun 24 21:48:10 2019 rev:199 rq:709084 version:1.16.2 Changes: -------- --- /work/SRC/openSUSE:Factory/NetworkManager/NetworkManager.changes 2019-06-02 15:14:33.730125552 +0200 +++ /work/SRC/openSUSE:Factory/.NetworkManager.new.4615/NetworkManager.changes 2019-06-24 21:48:11.535865556 +0200 @@ -1,0 +2,6 @@ +Tue Jun 11 02:58:57 UTC 2019 - Jonathan Kang <sck...@suse.com> + +- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN + which netconfig needs to call setdomainname (bsc#1129587). + +------------------------------------------------------------------- New: ---- nm-add-CAP_SYS_ADMIN-permission.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ NetworkManager.spec ++++++ --- /var/tmp/diff_new_pack.nQFqiC/_old 2019-06-24 21:48:13.511867083 +0200 +++ /var/tmp/diff_new_pack.nQFqiC/_new 2019-06-24 21:48:13.531867099 +0200 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # @@ -50,6 +50,8 @@ Patch6: 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch # PATCH-FIX-UPSTREAM 0001-Update-connectivity-value-on-device-removal.patch boo#1103678 Patch7: 0001-Update-connectivity-value-on-device-removal.patch +# PATCH-FIX-OPENSUSE nm-add-CAP_SYS_ADMIN-permission.patch bsc#1129587 sck...@suse.com -- Add CAP_SYS_ADMIN which netconfig needs to call setdomainname +Patch8: nm-add-CAP_SYS_ADMIN-permission.patch BuildRequires: dnsmasq BuildRequires: fdupes @@ -241,6 +243,7 @@ %patch5 -p1 %patch6 -p1 %patch7 -p1 +%patch8 -p1 %build NOCONFIGURE=1 ./autogen.sh ++++++ nm-add-CAP_SYS_ADMIN-permission.patch ++++++ Index: NetworkManager-1.16.2/data/NetworkManager.service.in =================================================================== --- NetworkManager-1.16.2.orig/data/NetworkManager.service.in +++ NetworkManager-1.16.2/data/NetworkManager.service.in @@ -17,7 +17,8 @@ KillMode=process CapabilityBoundingSet=CAP_NET_ADMIN CAP_DAC_OVERRIDE CAP_NET_RAW CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_MODULE CAP_AUDIT_WRITE CAP_KILL CAP_SYS_CHROOT # ibft settings plugin calls iscsiadm which needs CAP_SYS_ADMIN -#CapabilityBoundingSet=CAP_SYS_ADMIN +# netconfig calls setdomainname which needs CAP_SYS_ADMIN +CapabilityBoundingSet=CAP_SYS_ADMIN ProtectSystem=true ProtectHome=read-only
