baserev update by copy to link target

• Files Changed
• Browse Source

- Add pesign-bsc1221694-fix-reversed-calloc-arguments.patch to
  fix the parameters for calloc() (bsc#1221694)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

  (jsc#PED-7256)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

  (PED-7256)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add the Provides tag for the files moved to pesign-systemd

• Files Changed
• Browse Source

- Move rcpesign and %{_tmpfilesdir}/pesign.conf to pesign-systemd

• Files Changed
• Browse Source

Move rcpesign to pesign-systemd

• Files Changed
• Browse Source

Create pesign-systemd subpackage to remove systemd dependency

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Update to 116

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add pesign-bsc1202933-Use-normal-file-permissions-instead-of-ACLs.patch
  to use the normal file permissions in pesign-authorize to avoid
  the potential security issue (bsc#1202933, CVE-2022-3560)
- Set the libexecdir path for "make" to fix the path to
  pesign-authorize in pesign.service (bsc#1202933)
- Add pesign-bsc1202933-Make-etc-pki-pesign-writeable.patch to make
  the default NSS datebase writeable (bsc#1202933)

• Files Changed
• Browse Source

Revert the testing 115 change

• Files Changed
• Browse Source

- Update to 115
  + macros: drop %{_pesign_args}
  + Fix two bugs from package building
  + Fix bad free of cms data (DoS only)
  + Send pesign stdout/err to systemd journal
  + Add missing Install section
  + Add default packages for pkg-config
  + Short delay to ensure /run/pesign/socket exists
  + Resolve crash when signature that is removed is not the end of
    the list
  + Enhance error diagnostics about version mismatch
  + Upstream all Fedora changes
  + Add some hardening options to build
  + Add code of conduct
  + Fix build on gcc 12 and non-Fedora
- Refresh patches
  + harden_pesign.service.patch
  + pesign-boo1143063-remove-var-tracking.patch
  + pesign-boo1185663-set-rpmmacrodir.patch
  + pesign-fix-authvar-write-loop.patch
  + pesign-suse-build.patch
- Remove upstreamed/unnecessary patches
  + pesign-boo1158197-fix-pesigncheck-gcc10.patch
  + pesign-efikeygen-Fix-the-build-with-nss-3.44.patch
  + pesign-privkey_unneeded.diff
  + pesign-run.patch
  + Fix wrong oid offsets (bsc#1205323)

• Files Changed
• Browse Source

- Enable build on riscv64

• Files Changed
• Browse Source

- Change to systemd-sysusers

• Files Changed
• Browse Source

Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

• Files Changed
• Browse Source