Hello community, here is the log from the commit of package uid_wrapper for openSUSE:Factory checked in at 2016-04-01 13:01:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/uid_wrapper (Old) and /work/SRC/openSUSE:Factory/.uid_wrapper.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "uid_wrapper" Changes: -------- --- /work/SRC/openSUSE:Factory/uid_wrapper/uid_wrapper.changes 2016-02-17 12:25:52.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.uid_wrapper.new/uid_wrapper.changes 2016-04-01 13:01:52.000000000 +0200 @@ -1,0 +2,7 @@ +Mon Mar 21 18:17:52 UTC 2016 - a...@cryptomilk.org + +- Update to version 1.2.1 + * Documented missing options. + * Fixed a comipilation issue with -O3. + +------------------------------------------------------------------- Old: ---- uid_wrapper-1.2.0.tar.gz New: ---- uid_wrapper-1.2.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ uid_wrapper.spec ++++++ --- /var/tmp/diff_new_pack.19L6km/_old 2016-04-01 13:01:53.000000000 +0200 +++ /var/tmp/diff_new_pack.19L6km/_new 2016-04-01 13:01:53.000000000 +0200 @@ -24,7 +24,7 @@ ############################# NOTE ################################## Name: uid_wrapper -Version: 1.2.0 +Version: 1.2.1 Release: 0 Summary: A wrapper for privilege seperation ++++++ uid_wrapper-1.2.0.tar.gz -> uid_wrapper-1.2.1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/uid_wrapper-1.2.0/CMakeLists.txt new/uid_wrapper-1.2.1/CMakeLists.txt --- old/uid_wrapper-1.2.0/CMakeLists.txt 2015-10-29 08:21:16.000000000 +0100 +++ new/uid_wrapper-1.2.1/CMakeLists.txt 2016-03-16 14:53:33.000000000 +0100 @@ -8,7 +8,7 @@ set(APPLICATION_VERSION_MAJOR "1") set(APPLICATION_VERSION_MINOR "2") -set(APPLICATION_VERSION_PATCH "0") +set(APPLICATION_VERSION_PATCH "1") set(APPLICATION_VERSION "${APPLICATION_VERSION_MAJOR}.${APPLICATION_VERSION_MINOR}.${APPLICATION_VERSION_PATCH}") @@ -19,7 +19,7 @@ # Increment AGE. Set REVISION to 0 # If the source code was changed, but there were no interface changes: # Increment REVISION. -set(LIBRARY_VERSION "0.0.5") +set(LIBRARY_VERSION "0.0.6") set(LIBRARY_SOVERSION "0") # where to look first for cmake modules, before ${CMAKE_ROOT}/Modules/ is checked diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/uid_wrapper-1.2.0/ChangeLog new/uid_wrapper-1.2.1/ChangeLog --- old/uid_wrapper-1.2.0/ChangeLog 2015-10-29 08:20:51.000000000 +0100 +++ new/uid_wrapper-1.2.1/ChangeLog 2016-03-16 14:53:22.000000000 +0100 @@ -1,6 +1,10 @@ ChangeLog ========== +version 1.2.1 (released 2016-03-16) + * Documented missing options. + * Fixed a comipilation issue with -O3. + version 1.2.0 (released 2015-10-29) * Added privilege checks for all set*uid and set*gid functions. * Added a lot more and accurate tests which work as root. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/uid_wrapper-1.2.0/doc/uid_wrapper.1 new/uid_wrapper-1.2.1/doc/uid_wrapper.1 --- old/uid_wrapper-1.2.0/doc/uid_wrapper.1 2015-09-17 20:15:04.000000000 +0200 +++ new/uid_wrapper-1.2.1/doc/uid_wrapper.1 2015-11-03 12:17:22.000000000 +0100 @@ -2,12 +2,12 @@ .\" Title: uid_wrapper .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> -.\" Date: 2014-07-11 +.\" Date: 2015-11-03 .\" Manual: \ \& .\" Source: \ \& .\" Language: English .\" -.TH "UID_WRAPPER" "1" "2014\-07\-11" "\ \&" "\ \&" +.TH "UID_WRAPPER" "1" "2015\-11\-03" "\ \&" "\ \&" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -139,6 +139,25 @@ 3 = TRACE .RE .RE +.PP +\fBUID_WRAPPER_MYUID\fR +.RS 4 +This environment variable can be used to tell uid_wrapper to let geteuid() return the real (instead of the faked) UID of the user who started the process with uid_wrapper\&. +.RE +.sp +.if n \{\ +.RS 4 +.\} +.nf +uid_t uid; + +setenv("UID_WRAPPER_MYUID", "1", 1); +uid = geteuid(); +unsetenv("UID_WRAPPER_MYUID"); +.fi +.if n \{\ +.RE +.\} .SH "EXAMPLE" .sp .if n \{\ @@ -146,8 +165,26 @@ .\} .nf $ LD_PRELOAD=libuid_wrapper\&.so UID_WRAPPER=1 UID_WRAPPER_ROOT=1 id -uid=0(root) gid=0(root) groups=100(users),0(root) +uid=0(root) gid=0(root) 0(root) .fi .if n \{\ .RE .\} +.SH "WORKAROUNDS" +.sp +If you need to write code that behaves differently depending on whether uid_wrapper is enabled or not, for example in cases where you have to file permissions, you can predefine the uid_wrapper_enabled() function in your project as follows: +.sp +.if n \{\ +.RS 4 +.\} +.nf +bool uid_wrapper_enabled(void) +{ + return false; +} +.fi +.if n \{\ +.RE +.\} +.sp +Since uid_wrapper overloads this function if enabled, you can use it in your code to detect uid_wrapper\&. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/uid_wrapper-1.2.0/doc/uid_wrapper.1.txt new/uid_wrapper-1.2.1/doc/uid_wrapper.1.txt --- old/uid_wrapper-1.2.0/doc/uid_wrapper.1.txt 2015-09-17 20:15:05.000000000 +0200 +++ new/uid_wrapper-1.2.1/doc/uid_wrapper.1.txt 2015-11-03 12:14:17.000000000 +0100 @@ -1,6 +1,6 @@ uid_wrapper(1) ============== -:revdate: 2014-07-11 +:revdate: 2015-11-03 NAME ---- @@ -50,8 +50,40 @@ - 2 = DEBUG - 3 = TRACE +*UID_WRAPPER_MYUID*:: + +This environment variable can be used to tell uid_wrapper to let geteuid() +return the real (instead of the faked) UID of the user who started the process +with uid_wrapper. + +-------------------------------------- +uid_t uid; + +setenv("UID_WRAPPER_MYUID", "1", 1); +uid = geteuid(); +unsetenv("UID_WRAPPER_MYUID"); +-------------------------------------- + EXAMPLE ------- $ LD_PRELOAD=libuid_wrapper.so UID_WRAPPER=1 UID_WRAPPER_ROOT=1 id - uid=0(root) gid=0(root) groups=100(users),0(root) + uid=0(root) gid=0(root) 0(root) + +WORKAROUNDS +----------- + +If you need to write code that behaves differently depending on whether +uid_wrapper is enabled or not, for example in cases where you have to file +permissions, you can predefine the uid_wrapper_enabled() function in your +project as follows: + +-------------------------------------- +bool uid_wrapper_enabled(void) +{ + return false; +} +-------------------------------------- + +Since uid_wrapper overloads this function if enabled, you can use it in your +code to detect uid_wrapper. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/uid_wrapper-1.2.0/src/uid_wrapper.c new/uid_wrapper-1.2.1/src/uid_wrapper.c --- old/uid_wrapper-1.2.0/src/uid_wrapper.c 2015-10-28 10:25:53.000000000 +0100 +++ new/uid_wrapper-1.2.1/src/uid_wrapper.c 2016-02-17 17:15:13.000000000 +0100 @@ -156,7 +156,7 @@ va_end(va); if (lvl >= dbglvl) { - const char *prefix; + const char *prefix = "UWRAP"; switch (dbglvl) { case UWRAP_LOG_ERROR: prefix = "UWRAP_ERROR";