Hello community,

here is the log from the commit of package nagios-plugins-zypper.1904 for 
openSUSE:12.3:Update checked in at 2013-08-07 11:55:25
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:12.3:Update/nagios-plugins-zypper.1904 (Old)
 and      /work/SRC/openSUSE:12.3:Update/.nagios-plugins-zypper.1904.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "nagios-plugins-zypper.1904"

Changes:
--------
New Changes file:

--- /dev/null   2013-07-23 23:44:04.804033756 +0200
+++ 
/work/SRC/openSUSE:12.3:Update/.nagios-plugins-zypper.1904.new/nagios-plugins-zypper.changes
        2013-08-07 11:55:26.000000000 +0200
@@ -0,0 +1,347 @@
+-------------------------------------------------------------------
+Wed Jul 31 16:27:55 UTC 2013 - l...@linux-schulserver.de
+
+- update to 1.48:
+  + handle updates of the software stack as cricital unless we 
+    get a fix for bnc#832605 
+    (workaround for bnc#830658)
+
+-------------------------------------------------------------------
+Mon Jul 22 16:53:44 CEST 2013 - r...@suse.de
+
+- change logic looking for ignored packages/patches:
+  - use exact match, not just substring
+  - check also for match of name-version in the ignorelist
+    allowing to ignore specific updates 
+
+-------------------------------------------------------------------
+Thu May 16 13:51:38 UTC 2013 - l...@linux-schulserver.de
+
+- update to 1.47:
+  + return error if zypper is already running and blocking the 
+    refresh of the repository
+
+-------------------------------------------------------------------
+Tue Apr 23 17:31:59 UTC 2013 - l...@linux-schulserver.de
+
+- do not call openSUSE 13.1 discontinued
+
+-------------------------------------------------------------------
+Tue Apr 16 01:07:10 CEST 2013 - r...@suse.de
+
+- do not call SLE11-SP3 discontinued
+
+-------------------------------------------------------------------
+Sat Feb 23 11:43:30 UTC 2013 - l...@linux-schulserver.de
+
+- fix path names to grep, awk and gawk for distributions > 12.1
+
+-------------------------------------------------------------------
+Fri Feb  1 16:18:24 UTC 2013 - l...@linux-schulserver.de
+
+- update to 1.45:
+  + use /usr/sbin/zypp-refresh if it exists 
+
+-------------------------------------------------------------------
+Thu Jan 24 11:53:47 UTC 2013 - l...@linux-schulserver.de
+
+- include abstractions for rpm and ssl
+
+-------------------------------------------------------------------
+Thu Jan 17 10:55:30 UTC 2013 - l...@linux-schulserver.de
+
+- also install abstractions/zypp until this is merged with zypper
+
+-------------------------------------------------------------------
+Tue Jan 15 19:24:16 UTC 2013 - l...@linux-schulserver.de
+
+- update to 1.44:
+  + openSUSE 11.4 are unsupported
+  + openSUSE 12.3 becomes supported
+- improved apparmor profile: thanks to Marcus Rückert
+- place apparmor profile for older distributions (using sudo) in 
+  the extras directory as we did not test it there
+
+-------------------------------------------------------------------
+Thu Jun 28 18:33:30 UTC 2012 - l...@linux-schulserver.de
+
+- update to 1.42:
+  + whitelist Vendor 'openSUSE'
+  + added Apparmor profile for check_zypper
+  => if used with '-i' option, the ignore file must be placed in 
+     /etc/nagios, otherwise the script will fail
+
+-------------------------------------------------------------------
+Sat May  5 23:38:16 UTC 2012 - l...@linux-schulserver.de
+
+- update to 1.41:
+  + openSUSE 11.2 and 11.3 are unsupported
+  + openSUSE 12.2 is supported
+
+-------------------------------------------------------------------
+Fri Oct 28 14:05:03 UTC 2011 - l...@linux-schulserver.de
+
+- update to 1.40:
+  + SLE-10-SP3 is unsupported
+  + openSUSE 12.1 and SLE-11-SP2 are supported
+
+-------------------------------------------------------------------
+Wed Mar 23 21:30:08 UTC 2011 - l...@linux-schulserver.de
+
+- update to 1.39:
+  + SLE-10-SP4 and openSUSE 11.5 are supported
+
+-------------------------------------------------------------------
+Fri Feb  4 08:14:57 UTC 2011 - l...@linux-schulserver.de
+
+- update to 1.38:
+  + openSUSE 11.1 is out of service
+  + back to old performance data output, as requested by community
+
+-------------------------------------------------------------------
+Wed Dec 15 19:37:55 UTC 2010 - l...@linux-schulserver.de
+
+- delete SLE-11-GA, as this OS is out of service
+
+-------------------------------------------------------------------
+Fri Oct 15 12:18:44 UTC 2010 - l...@linux-schulserver.de
+
+- update to 1.37:
+  + quote the supported OS releasenumbers to avoid perl from 
+    cutting off the last digit if it is a zero
+
+-------------------------------------------------------------------
+Thu Oct 14 06:26:09 UTC 2010 - l...@linux-schulserver.de
+
+- update to 1.36:
+  + fix debug output
+  + fix refresh_wrapper call on SLES10
+
+-------------------------------------------------------------------
+Tue Oct 12 19:49:23 UTC 2010 - l...@linux-schulserver.de
+
+- update to 1.35:
+  + check for discontinued OS releases and report them as critical
+    as they would not receive any further updates
+    Supported: openSUSE 11.1, 11.2, 11.3 and 11.4
+               SLE 10.3, 11.0 11.1
+  + follow perl best practices 
+- Req: gawk, grep and rpm as those commands are needed now
+
+-------------------------------------------------------------------
+Sun Oct 10 11:43:15 UTC 2010 - l...@linux-schulserver.de
+
+- update to 1.30:
+  + added check for unsupported packages. As those packages might lead
+    to a system with security holes, just the packages from the official 
+    repository are marked as valid at the moment. Admins should list 
+    their packages via 'whitelist:foo' in an ignore file to disable the 
+    warning.
+  + Performance data output is reduced to a single variable now containing 
+    security,recommended,optional,packages as values
+
+-------------------------------------------------------------------
+Fri Feb  5 16:43:52 UTC 2010 - l...@linux-schulserver.de
+
+- update to 1.26
+  + Enhanced error reporting for repository refreshing
+
+-------------------------------------------------------------------
+Mon Feb  1 22:02:29 UTC 2010 - l...@linux-schulserver.de
+
+- update to 1.25:
+  + fix typo in 11.0 options ('xml-updates')
+  + fix bnc #536475: check_zypper triggers "warning" when there 
+    are no updates available
+
+-------------------------------------------------------------------
+Wed Jan 20 17:11:06 UTC 2010 - l...@linux-schulserver.de
+
+- update to 1.24:
+  + fix bnc#557862 : Result of nagios plugin check_zypper is 
+    interpreted as critical even if OK 
+    (thanks to Matthias Pfafferodt for the patch)
+  + reformat the code using perltidy
+
+-------------------------------------------------------------------
+Sat Nov 28 13:07:27 CET 2009 - lr...@suse.de
+
+- update to 1.23:
+  + enhanced debug output
+
+-------------------------------------------------------------------
+Fri Oct 16 17:05:20 CEST 2009 - lr...@suse.de
+
+- update to 1.22:
+  + fix wrong update counting for SLE11 
+    (fixes bnc#546166 - thanks to Sven Giller)
+  + fix small typo in output
+
+-------------------------------------------------------------------
+Mon Sep 28 16:51:03 CEST 2009 - lr...@suse.de
+
+- update to 1.21:
+  + use --non-interactive everywhere
+
+-------------------------------------------------------------------
+Sat Sep 26 12:00:03 CEST 2009 - lr...@suse.de
+
+- update to 1.2:
+  + use the same zypper options for all openSUSE versions > 11.0
+    (fixes bnc#538850)
+  + handle new message type 'warning'
+
+-------------------------------------------------------------------
+Wed Sep 23 12:01:47 CEST 2009 - lr...@suse.de
+
+- update to 1.1:
++++ 150 more lines (skipped)
++++ between /dev/null
++++ and 
/work/SRC/openSUSE:12.3:Update/.nagios-plugins-zypper.1904.new/nagios-plugins-zypper.changes

New:
----
  apparmor-abstractions-rpm
  apparmor-abstractions-ssl
  apparmor-abstractions-zypp
  check_zypper.pl
  nagios-plugins-zypper.changes
  nagios-plugins-zypper.spec
  usr.lib.nagios.plugins.check_zypper

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ nagios-plugins-zypper.spec ++++++
#
# spec file for package nagios-plugins-zypper
#
# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#


Name:           nagios-plugins-zypper
Summary:        Nagios plugin for checking software updates
License:        BSD-4-Clause
Group:          System/Monitoring
Version:        1.48
Release:        0
Url:            http://en.opensuse.org/Nagios-plugins-zypper
Source0:        check_zypper.pl
Source1:        usr.lib.nagios.plugins.check_zypper 
Source2:        apparmor-abstractions-zypp
Source3:        apparmor-abstractions-ssl
Source4:        apparmor-abstractions-rpm
Requires:       gawk
Requires:       grep
Requires:       rpm
%if 0%{?suse_version} > 1010
# nagios can execute the script with embedded perl
Recommends:     perl 
Recommends:     apparmor-parser
%endif
Requires:       zypper
BuildArch:      noarch
BuildRequires:  nagios-rpm-macros
BuildRoot:      %{_tmppath}/%{name}-%{version}-build

%description
This plugin checks for software updates on systems that use package
management systems based on the zypper command found in openSUSE.

It checks for security, recommended and optional patches and also for
optional package updates.

You can define the status by patch category. Use a commata to list more
than one category to a state.

If you like to know the names of available patches and packages, use
the "-v" option.


%prep

%build

%install
install -D -m755 %{SOURCE0} %buildroot/%{nagios_plugindir}/check_zypper
%if 0%{?suse_version} > 01100
install -D -m644 %{SOURCE1} 
%{buildroot}%{_sysconfdir}/apparmor.d/usr.lib.nagios.plugins.check_zypper
install -D -m644 %{SOURCE4} 
%{buildroot}%{_sysconfdir}/apparmor.d/abstractions/rpm
install -D -m644 %{SOURCE3} 
%{buildroot}%{_sysconfdir}/apparmor.d/abstractions/ssl
install -D -m644 %{SOURCE2} 
%{buildroot}%{_sysconfdir}/apparmor.d/abstractions/zypp
%else
install -D -m644 %{SOURCE1} 
%{buildroot}%{_sysconfdir}/apparmor/profiles/extras/usr.lib.nagios.plugins.check_zypper
%endif
echo 0%{?suse_version}
%if 0%{?suse_version} > 01210
sed -i "s|/bin/grep|%{_bindir}/grep|g; \
                s|/bin/gawk|%{_bindir}/gawk|g; \
                s|/bin/awk|%{_bindir}/awk|g;" 
%buildroot/%{nagios_plugindir}/check_zypper 
%{buildroot}%{_sysconfdir}/apparmor.d/usr.lib.nagios.plugins.check_zypper
%endif

%clean
rm -rf %buildroot

%files 
%defattr(-,root,root)
# avoid build dependecy of nagios - own the dirs
%dir %{nagios_libdir}
%dir %{nagios_plugindir}
%dir %{_sysconfdir}/apparmor.d
%dir %{_sysconfdir}/apparmor.d/abstractions
%config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/rpm
%config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/ssl
%config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/zypp
%if 0%{?suse_version} > 01100
%config(noreplace) %{_sysconfdir}/apparmor.d/usr.lib.nagios.plugins.check_zypper
%else
%dir %{_sysconfdir}/apparmor
%dir %{_sysconfdir}/apparmor/profiles
%dir %{_sysconfdir}/apparmor/profiles/extras
%config(noreplace) 
%{_sysconfdir}/apparmor/profiles/extras/usr.lib.nagios.plugins.check_zypper
%endif
%{nagios_plugindir}/check_zypper

%changelog
++++++ apparmor-abstractions-rpm ++++++
    /proc/filesystems r,
    /etc/rpm/ r,
    /etc/rpm/macros* r,
    /var/lib/rpm/** rlk,

++++++ apparmor-abstractions-ssl ++++++
    /etc/ssl/openssl.cnf r,
    /etc/ssl/certs/ r,
    /etc/ssl/certs/* r,
    /proc/sys/crypto/fips_enabled r,

++++++ apparmor-abstractions-zypp ++++++
    #include <abstractions/rpm>
    #include <abstractions/ssl>
    #include <abstractions/nameservice>

    network inet,
    network inet6,

    /etc/sysconfig/proxy r,
    /etc/sysconfig/storage r,
    /proc/filesystems r,
    /var/run/zypp.pid rwlk,
    /etc/zypp/** r,
    /etc/zypp/repos.d/ r,
    /etc/zypp/repos.d/*.repo r,
    /etc/zypp/services.d/ r,
    /etc/zypp/services.d/*.repo r,
    /etc/products.d/ r,
    /etc/products.d/** r,
    /var/adm/mount/ rw,
    /var/adm/mount/** rwlk,
    # /var/cache/zypp/raw/ r,
    /var/cache/zypp/** rwlk,
    /var/tmp/TmpDir.*/ r,
    /var/tmp/TmpDir.*/** r,
    /var/tmp/zypp.*/ rw,
    /var/tmp/zypp.*/** rwlk,
    /var/tmp/TmpFile.* rwlk,
    /var/tmp/TmpDir.*/ rw,
    /var/tmp/TmpDir.*/** rwlk,
    /var/tmp/ r,
    /var/tmp/AP_*/ rwlk,
    /var/tmp/AP_*/** rwlk,
    /sys/** r,
    /sys/ r,
    /var/lib/zypp/** rwlk,
++++++ check_zypper.pl ++++++
++++ 688 lines (skipped)

++++++ usr.lib.nagios.plugins.check_zypper ++++++
# Last Modified: Sun Jul 17 14:48:41 2011
#include <tunables/global>

/usr/lib/nagios/plugins/check_zypper {
  #include <abstractions/base>
  #include <abstractions/perl>
  #include <abstractions/consoles>
  # include <abstractions/wutmp>

  /etc/SuSE-release r,

  /bin/grep rix,
  /bin/awk rix,
  /bin/gawk rix,
  /bin/rpm px -> /usr/lib/nagios/plugins/check_zypper//rpm,
  /bin/bash rix,
#  /usr/bin/sudo rix,

  # as we do not know how people name the ignore file, we 
  # allow read access to everything below /etc/nagios here
  # feel free to limit this to exactly the file you need
  /etc/nagios/** r,

  /usr/sbin/zypp-refresh-wrapper px -> 
/usr/lib/nagios/plugins/check_zypper//zypp-refresh-wrapper,
  /usr/bin/zypper px -> /usr/lib/nagios/plugins/check_zypper//zypper,

  profile zypp-refresh-wrapper {
    #include <abstractions/base>
    #include <abstractions/nameservice>
    capability setuid,
    capability setgid,
    /usr/sbin/zypp-refresh-wrapper rmix,
    /usr/sbin/zypp-refresh px -> 
/usr/lib/nagios/plugins/check_zypper//zypp-refresh,
  }
  profile zypp-refresh {
    #include <abstractions/base>
    #include <abstractions/bash>
    #include <abstractions/consoles>
    #include <abstractions/user-tmp>
    #include <abstractions/zypp>

    /var/log/zypp-refresh.log w,
    /usr/sbin/zypp-refresh rmix,

    /bin/cp rix,
    /bin/bash rix,
    /usr/bin/rpmdb2solv         rix,
    /usr/bin/zypper px -> /usr/lib/nagios/plugins/check_zypper//zypper,
    /usr/bin/gpg2 px -> /usr/lib/nagios/plugins/check_zypper//gpg,
    /usr/bin/uuidgen px -> /usr/lib/nagios/plugins/check_zypper//uuidgen,
    /usr/bin/repo2solv.sh px -> 
/usr/lib/nagios/plugins/check_zypper//repo2solv, 
  }
  profile repo2solv {
    #include <abstractions/base>
    #include <abstractions/consoles>
    #include <abstractions/user-tmp>
    #include <abstractions/nameservice>

    /usr/bin/repo2solv.sh      rmix,
    /usr/bin/repomdxml2solv     rix,
    /usr/bin/rpmmd2solv         rix,
    /usr/bin/susetags2solv      rix,
    /usr/bin/updateinfoxml2solv rix,
    /usr/bin/deltainfoxml2solv  rix,
    /usr/bin/mergesolv          rix,

    /usr/bin/find               rix,
    /bin/bash                   rix,
    /bin/rm                     rix,
    /bin/cat                    rix,
    /bin/sed                    rix,
    /bin/gzip                   rix,
    /bin/grep                   rix,
    /usr/bin/gzip               rix,
    /usr/bin/bzip2              rix,
    /usr/bin/lzma               rix,
    /usr/bin/xz                 rix,
    /bin/mktemp                 rix,

    /var/cache/zypp/** rw,
  }
  profile uuidgen {
    #include <abstractions/base>
    /usr/bin/uuidgen rmix,
  }
  profile gpg {
    #include <abstractions/base>
    capability ipc_lock,
    /usr/bin/gpg2 rmix,
    /proc/sys/crypto/fips_enabled r,
    /var/tmp/TmpFile.*  rwk,
    /var/tmp/TmpDir.*/* rwlk,
    /var/tmp/zypp.*/*   rwlk,
    /var/tmp/zypp.*/*/* rwlk,
    /var/cache/zypp/** r,
  }
  profile zypper {
    #include <abstractions/base>
    #include <abstractions/bash>
    #include <abstractions/zypp>
    #include <abstractions/consoles>

    /bin/bash rix,
    /usr/bin/rpmdb2solv         rix,
    /usr/bin/zypper rmix,
    /usr/share/zypper/ r,
    /usr/share/zypper/** r,
    /usr/bin/gpg2 px -> /usr/lib/nagios/plugins/check_zypper//gpg,
    /usr/bin/uuidgen px -> /usr/lib/nagios/plugins/check_zypper//uuidgen,
    /var/log/zypper.log w,
  }
  profile rpm {
    #include <abstractions/base>
    #include <abstractions/rpm>
    /bin/rpm rmix,
  }
}
-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

Reply via email to