permissions-2013.01.29.1841-1.1.1>t 4 DpQ :/=„}7X}kml ㎈zV5(+Y EcTT"j H͊?/yus,[C-g3~TC(XoBb*,c>~p_oY>&pn2{Ơ$L|ܾӱM5rV{Z Va,-2 V+E70̹YL13kl_-KNnN @Z-d(5Խ-aI}Y=CG y8ɿ oQ :/=„QO*_]6D=صhU7>. "8& `84@ :;&nVd<yY/qͱne^Ѱ ({q ܈{L&橚.;c^f7 !mOL'HzmZaT1Ȓ469/")k˘f:=sN8էUSCBǔj26d1d8cb9d803ea82d8ec084fa55b0904009890af>< ? d $ Cdhpt        $  M  X |   $t(849 4: 4>iFqG H I XY\, ]P ^b5cde flu$ vHw p x y z Cpermissions2013.01.29.18411.1.1SUSE Linux Default PermissionsPermission settings of files and directories depending on the local security settings. The local security setting (easy, secure, or paranoid) can be configured in /etc/sysconfig/security. Authors: -------- Werner Fink Roman Drahtmüller Michael Schröder Ludwig NusselQ :build19aUopenSUSE 12.3openSUSEGPL-2.0+http://bugs.opensuse.orgProductivity/Securityhttp://gitorious.org/opensuse/permissionslinuxx86_64 PNAME=security SUBPNAME= TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # apply all potentially changed permissions /usr/bin/chkstat --system. >}oBICZ?<9큤Q :Q :Q :Q :Q :Q :Q :Q :Q :d00d9bc7a3909aab7b77fefdda845d5205da203458b481c4d93a912353cc2326551c76827a25da626635ce246e71cd1ab94ce2625edc636f6b41f42255c7e5ac89a3bf7ea70795a322750b85d1d9fc4310390c0f482e79a56bec5e3f6eefa87e51d22b54d368056a59f951cebccfa5faa5cd5c3f099b7102c06ea5b580e112a7393eff1cdef020bd23c98e04879eb92frootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpermissions-2013.01.29.1841-1.1.1.src.rpmaaa_base:/etc/permissionsconfig(permissions)permissionspermissions(x86-64) @@@@@   /bin/shconfig(permissions)coreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcap.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsLzma)2013.01.29.1841-1.1.13.0.4-14.0-14.4.6-14.10.2QP@P@P{PaO@Ọ@OȮO]@OE@O2cO1@N@N|tNyNx@Nx@N @MAM@MMtMY@MRL@L@LLr@Lr@L7L7LLҠ@LNL6L@LL(KыKsK?ĴJu@J#JJ:J@JJ|@JzJn@I@meissner@suse.commeissner@suse.comlnussel@suse.delnussel@suse.demeissner@suse.commeissner@suse.comlnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.dejengelh@medozas.delnussel@suse.delnussel@suse.dejengelh@medozas.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.delnussel@suse.demeissner@suse.demeissner@suse.demeissner@suse.delnussel@suse.delnussel@suse.de- Allow pcp to have stickybit worldwriteable directories- add /usr/bin/dumpcap to watchlist - make fscaps=1 the default on "" - added PERMISSION_FSCAPS to the sysconfig/security fillup template. - /bin/ping(6) was moved to /usr/bin/ping(6) /bin/eject was moved to /usr/bin/eject- apply permissions settings in %post. During initial installation some packages might be installed before the permissions package due to dependency loops so we need to make sure their settings are applied too. Also, on update of the permissions package changed permission settings may need to be applied.- temporarily add su.core. workaround for the migration of su from coreutils to util-linux needs to be reverted as soon as util-linux is also in- no longer install SuSEconfig.permissions, SuSEconfig is gone.- enable ecryptfs-utils setuid root mount wrapper (bnc#740110) in .easy- remove /var/run/vi.recover (bnc#765288)- remove /var/cache/fonts (bnc#764885) - remove /var/lib/xemacs/lock/ (bnc#764887)- Revert "Use credentials from within the root file system" breaks use of --root option in brp-05-permissions- print warning when requested to check not listed files - Use credentials from within the root file system- add duplicate entries for / and /usr (bnc#745622)- add scripts for automatic package sumission - drop zypp-refresh-wrapper (bnc#738677)- disable run time fscaps detection (bnc#728312)- set permission by default in SuSEconfig mode as permissions are only set when called explicitly anyways (bnc#720010).- fix typo in path- remove world writable /var/crash again (bnc#438041) - remove world writable permissions from /usr/src/packages (bnc#719217)- add chromium browser sandbox helper (bnc#718016) - don't offer PERMISSION_SECURITY in config anymore - remove setgid games bits (bnc#429882)- remove setuid bit from opiesu (bnc#698772)- disable fscaps by default as factory kernel still doesn't have the required patch for auto detection- read /sys/kernel/fscaps for fscaps settings- change path to gnome-pty-helper (bnc#690202)- setuid bit on VBoxNetDHCP (bnc#669055)- fix hawk permissions (bnc#665045)- add hawk (bnc#665045)- remove Xorg setuid bit (bnc#632737)- update permissions of lastlog, faillog, wtmp, utmp and btmp- remove permissions handling for /etc/inittab, /etc/inetd.conf and /etc/mtab - revert previous commit, done in coreutils instead- change fillup deps to requires to avoid coreutils loop- change utempter from group tty to group utmp (bnc#652877)- add permissions man page - update docu - add --level option - set perms for setuid files always if owner changes - strip root dir when printing file names- add option to explicitly warn only- reimplement the core features in chkstat itself instead of SuSEconfig.permissions- don't make changes if not called explicitly- add support for file system capabilities- remove vlock (bnc#629236#c13)- update path to gnome-pty-helper (bnc#634199)- vlock -> vlock-main (bnc#629236)- use %_smp_mflags- add lockdev (bnc#588325)- update for innd update (bnc#594393) - remove lppasswd (bnc#574336)- enable parallel building- add /usr/lib/virtualbox/VBoxNetAdpCtl (bnc#533550)- add /usr/src/packages/BUILDROOT/ for rpm 4.7- add more arm directories to /usr/src/packages/RPMS/- remove permissions handling for traceroute6 and cdrecord which are symlinks nowadays- fix weird sendfax permissions (bnc#525954)- permissions now maintained at gitorious so use tarball instead of individual files- added polkit setuid root helpers after review (bnc#523377)- also added KDE4 start_kdeinit (same source as kde3 start_kdeinit), bnc#523833- open-vm-tools gets setuid root:root in mode easy (bnc#474285)- hylafax directory permissions are handled by the package - change group of amanda binaries (bnc#523006)- add some missing slashes to directories and remove entries for at and cron (bnc#480855)/bin/shbuild19 1359624859 2013.01.29.1841-1.1.12013.01.29.1841-1.1.12013.01.29.1841-1.1.1permissionspermissions.easypermissions.localpermissions.paranoidpermissions.securechkstatpermissions.5.gzchkstat.8.gzsysconfig.security/etc//usr/bin//usr/share/man/man5//usr/share/man/man8//var/adm/fillup-templates/-fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:12.3/standard/48196ec5ae6e285f2e4ce51777e3f2c1-permissionscpiolzma5x86_64-suse-linuxASCII textELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=0x8925ace5413bb804d5348482f9e3982ebfef8be2, strippeddirectorytroff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression)RRRR R 2tGU?imv?OFU?@] crv(vX044mzU /2cp PRC o>HS*iy>t{{lKro[G ~ Bl,PuN+>6c2Nn&?Z,9b4$BsB)$@@8V퍴1ՇFH`MD d~ZUxX0ȗrA,y+rbXQ$Lrct{e$$ ׍P ;wșBE{G] Ą$`D-T]<亄9T ~?q\k[FO]ugYgRXN3q;lڀ0:tvN n,}nbs<Ou0a-6IoT$:MF;@!y_%rZ\Df^}rea{ kEjNz<-nAf@;9jtudMvF UdO/t4ܝ4+^7oJz Q@Fbӕ\,+Q:\kIg ʓ5|zȐ㢌dpoNgࢲT-}a)~)A,͊%6=4A; Gx9 J1CA@E,y~Dx0xbL* oܣ,^J+u>M&%u*0vKxDBwq3㭆n)sѶpv7,dR.>8h<1܈-_L)zE)q.4Z^8+Ȝrp1_\ʜeyТ5EfZwD$%5d㵱^,FCNB.XjAX~M@lK$ts^QhPqL*$ޖ+vlVPz0֠CVAc# /&^՟'m KΚ!"eN;pxeh^Hb@q5=kZ?a~|ߘ, |At'^%IQغC<6d2,gu{v")C/ɢiroY1d;j2*jW _]B=Nmn2-Bk֍V{MpEZS7C5p8tx?Y]at^Vu͢nly=10CBԦ eG{QI{hbI.ޅ[[EnBiLpUɛ[ O,]G%}9+;2M kKD.6yaD: Y0ԑb=rךR#YGϏyҧikġ@O|]90%Ɍ=m>l`qPݪ-ormVp2Z;zI/м]A8e?5Rj ǭ33=!Vif lttujw?S,pW;NمnwW/(dڢJ}5ef[>n."Јi ~9aZ&RFIfPC`_ XVJcLx/BD+54:|7uq\t,GNHj=8ɑO쟀4N(fBL7z-Wprd k$ t#TⷶWaaj58eXW_3 •?VꌺgfT"S?xic !b'V?#7K_VDw5k5Ћo Ng&(;<'ekNO]a^cG.~PB9H~R=t 1|3/#Ze`7ɀ$H&qrg/k(evY7>ٵ&.#Gwm+d\e#!h5?aT<3U`˙. 5˧Sz>\ Zygrwg2̄x~l9,K3y _Gt@ d4(q6dNXx]߽n˧'ҟ&X~ Ը'Ҭ*Y$-\pGuUzRDWHʉa,P֙5XW7LԾg)7)zfs9:R9)[jkar/BhD`{/;fzͩI62r)t<9ur>vyJ3ĵpx Mƣ &RCt/YȪ.0h0eOyߘ^e|*!p NLj"9Z_^<J3c(A?zNC/ΗiGAy$Ɠ Qwٯ] a晊R_H#' t/E,SQ,$:\JE!q\&w5u$a7 7#3:y5|^g:(,L_dMZ" 1N8f6 FrntVmD> .~sfktgHՈKeV=\1aW:(]zk Yڮ {j<'КJُ_H(̄қ`*͸17FqGKYl+}*U91mQ6Ѩ!](, 0 Z qH^hbeFX=OCӨK$Pa&] Sn$L"RxiUJ\J{;-!Zna:C+v}Bʞt+M<[+,z4؃BWK1Cc~ ΜxA%gS(pŕ1DMőuL}z9RSp޷PQUMfs{_M l$fldrmCDlܷ(%GV LٯF\ ـ2W=҆5Ug޽w`Ysnkݪrx&}dxuxzM\^,\=(_Qˡ+!3 "6G!A={ZE-80t/ mQ()rJq*ꔲ[: hE:f; $n7`t ;Z qAa!"2-)Ec*6Tm E}8>}֦`* i9ߘl:$Su2X _˫"j&Gq̅>͒]1DOu|a  C;KlA&;^ˆ>@溜u};H_zk.LBQK2+c{IJ0Q~ܪ9sسOwI< ?+pF~&JMXzkɭF!X0J^n `!?u4arj䒙Ć~ ł!Dl]%&CфC;81lkWDVP1"K(lR<5uI`tya(\P_W' @)ګ;f jpwcళ -k,~Tp "u` ;0Q"64it!7ncW( 9㬄Oϸs/ wP&` eZ/;?^k ЉK3 WS]dpfYwe>K&Н-1_(Vp`ɗsw:}ah#= Pu ײ ﲈv%73u۶/h'ٸa/x1^2yl4Zmc%tQ68X)ù:."$sݍb1,s;ߝ6%{P^(Bʭ?2+s(q3Mt{y&aͤg_,V:hY(0|$I0'ST]}Cq12@ܐ#)xpE_Ns\2@|SI2pL8OIt8ļgpI<o֋kpWbޕg粝0r SokދrƉ8 翤N(tbU{n4f39p v:,g-9ݘ؀l})ƒv?E=gL0\ X}-O0L Uk:uLhD(t^zq >H(1k=YT a݇P0AV&)zlUH_A[|9$\%Ty>oeP7GhJ7Gܚяqћ3i`sw(.K"!.䇛u}؄Tń_&&~FrѨ柢3ih%Uݫʒ\zMsditE!a#s)@N;mIGvKEn3h=}- eW͘m]7`G!(mrig{ 6*2Q}m~(ay<Y5[j?)Ed_ᴶND D%5π̣C!j;ְs tx#{?Zn8keHKà6G3ӥ[I_) qltx=+:lg ma: oN :$dwOx;[i3Xyn9UhQ}ό},͚*k@5^H$rq}lWf})ӝ$mʑ,n_`S Ԟ"Nqf 8f[`Aw^BnZt~[k%&OnZ G/ 5%Oqrɔ&ЧבRSx7ֱ큂ߵA=*z*jvAfxZæ6ߌF(_aVsqLV+aހ$-(\VtPm7O{sC9VeVI0jK ${I 7MIɼq6E) 􉯽 Ub&bR*A&=+5]^Ug_Ɖ!* oԡ>pBB/Lq̇UGtDf'%'_@AQcc|+Op)3KVh(%Cko0̩* nD~ܓrqeqŔTX( ڇg0@$k,I]<l3N~iLn|ũ9)FYmn%Zwjx(I&'.LL6?](H= X ZV'AK7("#*کM+"O%mDbcb9qGUְ ZGQJjcý!b٩ $ntBcELj {]X/@484 սF73F{Sq} Ҧ>\6~Y I θ+Ҽm)+ucGDl PV8dmT^?ݍsMX;i]jw[Wް,崸.<q>cp߃2#,s{F)rM-%JcI뷓KJw.//'_y\&zGH`p=ˆܫ%2c]z% @Ig簕D:cph $Vr"|M]x,2ЊMsSd03i|-ZpW^c86g=)bɈkT<bvR^[~¡Hm!ZDਨ'kn'Cw NJx,-9jUH7MfS:~%u]3ø8i*SgxJE4QpN5] ok%j= /\U#(L/{C}ďncټ֋J/PWVyW[UeHՈcEρhфBlR:~m}9-/i /ڮ+r, U'ݕ?[ýxz9Z!d$%6;^q1܅3h=pmșwpBa֞!e[{ H7g|gԓ8"lGWcQ!/} N3L^!M}D'ry9Eh'%*.ޮTYќjC"`E;9g?F{K ]~S[r]l3sޝE`J䆔ŗ_ a__qu}-߽4tG&\Y {yp^-lRYDt%kRȥ?7: ϯT$4wQ,Rx3 y.8LV@#UǤ!lg9cyA,d>}Z|T6qz gRʲX!Mǵ̹6m9oTGuw|62~3Zq[50Xs(EE3h}&1l=O?5 [*pޯ !U"7O(93J.|SX8<(ޛ> j䁸M]򚧾>RJְf}?d*̶1P1#D56wo&bvr&v'J޼%6m+Zhޥ_niшZSs{MƢH/`G] 5~2[yЬL哐0q? Q %PƬ-[[4^Tx2vQ#!ڔL=jY("0Lx&42ѿ Gz5w #eHLHhS ,Oe;d W=q83鬴 4oY k:hLH )Fz'5pT}-ʝϽs)#S?tFQȁ ye2\%@Њm>a\-&lE\6067jjzKw[qQҗy8s'96#" V{)~*Crv#Or][QXޑ>%6o30w<5"A]Fٚ@DFy 6 BWt3DeN]Y=f?WeLzDs DU`9MP i#3m~6rjPGK$Yq* ,h3}ߓ,Ӻ=H9dvx` O/Ttv06ۆ%GQ9zqpIa,>u"x)L\™ݒ.l*4g*_O^cx A48DUR٬CU`ٿ:tj۽3=E;.&s_vv2dT/Awc٭! 9f5VЉy\U"r)s9H='M2TtP$Iv)_ppw&8#X4!1YGU8l]0Ѱ%~b%+tƴ]+Eo9" l:7iX,G. SS6}_25UE*|#6߈RUG๊[8w>Lj8H :U1oX6`i{bQA,6͝3c ot-H3pyNb6MFN#<379%5`eFCTעwT+ C2WP 'Ш>/qLU_MqYNxsaeӹR>u|̕!]KD&Ooahwp( '@UG}pA`ÐpCp*2p$()&`C^3Zyg3ߙGGzxH᭺+~o(o\Kɽ+ 'u;}|LZz}s*1RPλ |W4Ƨ}!X b2ꮤ.BL* d,)_}3s[t5]m/@:ىI| \_v:LLG 1p 1'jl4&@Ɩٶ l4yB[\ mD"^xECB=ńvdCg2ٔ"bFQ JIMzdA:QĠְ"$+iDԷ+Ggſe/T(-q𻒔gjhD6=Gם8CWJE5JwJly08n0r2PےDOVOaD1 KZtsgW2GB]O3/0QxM΅`M0"DȦ"9>KXF_/L^,,DQc ܞ1㲴% ۰gi>yF"JT[ܐxBb#xWgRN޺{pP J5!Ia :u/`~C"u\ap;ء:LBj s^&6`jC%vy=paS"bujW^ y+*K*6/\ ^S WH ƮnDꇸ&`#8\aCkՁA8vۋsl w#F{K9TA !HU/[.sA@Ᏺ)`,%˸|$O9ƥK@ #(>7st[R-z[qavYwg.oԜ6?QHŞJZq]9<l+;g96!'iTh͞b|9G y b곹/|;4TM"K'^γi5A KУ^༏؂ۯ̴oT\'L%XO[|AbEuwb억1`}tȺLa9a@u NZ}J,`4@px*tΈ"ՠz4f罘Zʅ@WWBq&c8TqI0 (U:Hk/(/KOl 姝kI7*ct9je&L>9neq45]1j@[aguvԹݠL s$riXaq &ڊj|ljޗS*L 7 N)hU4~e1#>Eᤌ*zhcu ]⅏tc4u',ȌFRkM[~9})lbopcPri]~-\՚ g@>j8T=)@'њ!N\=t[ `un85\u&ٞ K]]k?pNpK`P>O%-zd,kΤ0~X,1L8gIyFh HFV#֪!HtNs(mcU@u.CbXZ>q5ɷ/>"%q?7y^ G\@_/oFN?w@kVPrX)-uG\>M1m,`zvHo< `]OAc{SBf]zmV+lLoj6#٢,m BU,`rƒ{"J*J#ş< 1A{/leB@l`4XгwQf`MjCV@ʴFLָ*Oz2k*9~o*!apY+|u BRc&D~/岾 옄*>g}j␩Aw Ydasfeuvr$D *-|rD~5RہC g+a@,xJdv alO_:\S)1˶)K2$\-V^pds5aeD0q|? i#[_ vŜ8Lf׾ 07/Wģ, .Mj:YIp%(XJ8(xak6fe;ڃw2x.[߼sF'છip@+ եyjRyuŅ/]/jm]{ NeM<#c9SJ1 Dsw[Ko Mjz m+jR8/)"<?d%|$L7{BoY`khc o J#G^Ux}" )ϰ 8-2ח&74T:IfOyljؓDv\Jqҗ`iczX秄9au>34+xͽuÎ"t{2X9#wX2Dor!nj, t5 K~nIMDWM t}td;;r#@ᬂV-:ts-Vm:K-P8 ͻɛeX6A˄ "S2;\ VyʆRNvhIe]<$?  ?Ꝣ|T9~ĸ]f)ka X#(D`x ok3w00lDC7jpYD 75C6EBeL({dEl ̩gC4c /ԼJ}65ԗiUn'MipiA=E5Q De^! w[|ml[Wh(+"VSK":Z(!rw=y\3>Q((zk1^S%4NQ~0 uKxR&:5qZs3dpI>@ܰ\}ț"ǥe*qNUH(:IX"x=KGzNab&K@V3};'ܝ}FDtaBF$~'BLQ;in<2PTDfPORř(yCUjO/”= ;Oˋr'_[_oesdšW:G\^jÂ]rUR)`n``"dy:ӮT>ʚp[LܸL5&~,5N*Zj&y DHN?ui۝1^ىˤ_h@")F.Tլ󥓭k񏊭ѵ # '/ۮ N9IYbD75ޚg )&WN9:p G!LB*XLQEοl#\ \$9]uS$1P[`>88)GK_bYY&f]ת ,7S"gOrHJx iDQm+v9P?"I;e2ȑ%*l?qWϦ$t+ʲ_fB}J7?- auJʱe=|=[3/V>r5t.%/ $7 j#7{Sa$è<0`ˎT`.Zn=ZH|e?' ' v7L>зmTW%ix x:[DըބW\2SL9+(*6,V|#mӗdp2ʅW8՜JֵBRqDm~UI89㴓0аQ-ݢOC4xQbm/ FfFxԤ, ;m` O );&}˹t&JHA2ɅyKI<2Z[4'݀.N߈dKN|i4mmY[T-Oc7ըX%| ST"h7ژ ؛}ٕ`0EݡxAb*AǣK:=M]G*oS64D2]4LW4^%.28=xNwubpx2O;-?\.Kzg A3Ŝt]Bˀ