osc copypac from project:systemsmanagement:saltstack:bundle:testing package:venv-salt-minion revision:1

• Files Changed
• Browse Source

- Fix multiple security issues (bsc#1197417)
- * Sign authentication replies to prevent MiTM (CVE-2022-22935)
- * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
- * Prevent job and fileserver replays (CVE-2022-22936)
- * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch

• Files Changed
• Browse Source

- Clear network interfaces cache on grains request (bsc#1196050)
- Remove duplicated method definitions in salt.netapi
- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Remove not required binaries from virtual environment
- Added:
  * clear-network-interface-cache-when-grains-are-reques.patch
  * remove-duplicated-method-definitions-in-salt.netapi-.patch
  * add-salt-ssh-support-with-venv-salt-minion-3002.2-47.patch
- Updated:
  * remove-file

• Files Changed
• Browse Source

- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Added:
  * fix-state.orchestrate_single-to-not-pass-pillar-none.patch

• Files Changed
• Browse Source

- Refactor venv-exec.py wrapper and the way of calling it
  with PYTHONSTARTUP environment variable
- Updated:
  * venv-exec.py.src

• Files Changed
• Browse Source

- Fix inspector module export function (bsc#1097531)
- Add all ssh kwargs to sanitize_kwargs method
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Move the logic of cleaning PYTHONHOME environment variable
  and fixing sys.executable value to venv-exec.py wrapper
  from venv executor module to prevent some side effects found
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * add-all-ssh-kwargs-to-sanitize_kwargs-method-3002.2-.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-480.patch
  * vendor-stateresult.patch
- Updated:
  * venv-exec.py.src
  * venv.py.src

• Files Changed
• Browse Source

Fix the path to venv-exec.py

• Files Changed
• Browse Source

- Add venv-exec.py wrapper to prevent errors on using cmdmod module
- Added:
  * venv-exec.py.src

• Files Changed
• Browse Source

- Fix condition to identify correct python sitelib for dnfnotify

- Remove some specific binary library dependencies

- Handle transactional_update executor for the relevant systems
- Add policycoreutils and policycoreutils-python-utils to post
  install requirements for CentOS 8+ and Fedora 22+ packages

- Set sys.executable pointing to the wrapper script instead
  of real python executable with venv executor module

• Files Changed
• Browse Source

We add this dependency for deb systems, so salt can import keys on Debian. Otherwise `pkg.add_repo_key` calls `apt-key` directly, but on minimal systems that doesn't work, because `apt-key` exits with the error `E: gnupg, gnupg2 and gnupg1 do not seem to be installed, but one of them is required for this operation`.

• Files Changed
• Browse Source

Add saltbundlepy-setuptools dependency back as required for kiwi

• Files Changed
• Browse Source

Add docker python module and the modules required for it

• Files Changed
• Browse Source

Add kiwi and libvirt dependencies for SUSE based and call full strip

• Files Changed
• Browse Source

Disable python bytecompile with brp for all distros and use %_sysconfdir

• Files Changed
• Browse Source

Use platform-python to compile dnfplugin on CentOS 8 and similar

• Files Changed
• Browse Source

Fix the debug package build for CentOS7 the right way

• Files Changed
• Browse Source

Pass format_spec_file

• Files Changed
• Browse Source

Disable debug package

• Files Changed
• Browse Source

Revert setting debug for RH based distros

• Files Changed
• Browse Source

Disable debuginfo for RH based distros

• Files Changed
• Browse Source