Hello community, here is the log from the commit of package dracut for openSUSE:Factory checked in at 2012-09-29 15:26:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dracut (Old) and /work/SRC/openSUSE:Factory/.dracut.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dracut", Maintainer is "" Changes: -------- --- /work/SRC/openSUSE:Factory/dracut/dracut.changes 2012-08-07 21:49:31.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.dracut.new/dracut.changes 2012-09-29 15:26:02.000000000 +0200 @@ -1,0 +2,6 @@ +Fri Sep 28 12:10:20 UTC 2012 - fcro...@suse.com + +- Add initramfs-non-world-readable.patch: fix CVE-2012-4453 + (bnc#782734). + +------------------------------------------------------------------- New: ---- initramfs-non-world-readable.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dracut.spec ++++++ --- /var/tmp/diff_new_pack.DsHZO5/_old 2012-09-29 15:26:03.000000000 +0200 +++ /var/tmp/diff_new_pack.DsHZO5/_new 2012-09-29 15:26:03.000000000 +0200 @@ -35,6 +35,8 @@ # (not to be upstreamed) Source1: module-setup-initrd.sh Source2: parse-suse-initrd.sh +# PATCH-FIX-UPSTREAM initramfs-non-world-readable.patch fcro...@suse.com -- fix CVE-2012-4453 bnc#782734 +Patch0: initramfs-non-world-readable.patch BuildRequires: bash BuildRequires: dash @@ -104,6 +106,7 @@ %prep %setup -q +%patch0 -p1 %build make all -e CFLAGS="%{optflags}" ++++++ initramfs-non-world-readable.patch ++++++ >From e1b48995c26c4f06d1a718539cb1bd5b0179af91 Mon Sep 17 00:00:00 2001 From: Harald Hoyer <har...@redhat.com> Date: Thu, 27 Sep 2012 10:18:29 +0200 Subject: [PATCH] dracut.sh: create the initramfs non-world readable --- dracut.sh | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/dracut.sh b/dracut.sh index 7148d0f..96faa06 100755 --- a/dracut.sh +++ b/dracut.sh @@ -1033,8 +1033,9 @@ if [[ $do_hardlink = yes ]] ; then } fi +rm -f "$outfile" dinfo "*** Creating image file ***" -if ! ( cd "$initdir"; find . |cpio -R 0:0 -H newc -o --quiet| \ +if ! ( umask 077; cd "$initdir"; find . |cpio -R 0:0 -H newc -o --quiet| \ $compress > "$outfile"; ); then dfatal "dracut: creation of $outfile failed" exit 1 -- 1.7.7.6 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org