File 0002-singularity-starter-suid.patch of Package permissions.13182

From 3d256dd8fccda014eb485ac508a4ad943a8195a3 Mon Sep 17 00:00:00 2001
From: Egbert Eich <eich@suse.com>
Date: Wed, 12 Jun 2019 00:47:23 +0200
Subject: [PATCH] singluarity: Add starter-suid for version 3.2.0

Singularity 3 has received a security review (bsc#1128598).

Signed-off-by: Egbert Eich <eich@suse.com>
---
 permissions.easy     | 2 ++
 permissions.paranoid | 2 ++
 permissions.secure   | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/permissions.easy b/permissions.easy
index 78657df..d7e9757 100644
--- a/permissions.easy
+++ b/permissions.easy
@@ -346,6 +346,8 @@
 /usr/lib/singularity/bin/action-suid			root:singularity  4750
 /usr/lib/singularity/bin/export-suid			root:singularity  4750
 /usr/lib/singularity/bin/import-suid			root:singularity  4750
+# singularity version 3 (bsc#1128598)
+/usr/lib/singularity/bin/starter-suid                   root:singularity  4750
 
 #
 # XXX: / -> /usr merge and sbin -> bin merge
diff --git a/permissions.paranoid b/permissions.paranoid
index eab1c43..fe26017 100644
--- a/permissions.paranoid
+++ b/permissions.paranoid
@@ -356,6 +356,8 @@
 /usr/lib/singularity/bin/action-suid			root:singularity  0750
 /usr/lib/singularity/bin/export-suid			root:singularity  0750
 /usr/lib/singularity/bin/import-suid			root:singularity  0750
+# singularity version 3 (bsc#1128598)
+/usr/lib/singularity/bin/starter-suid                   root:singularity  0750
 
 #
 # XXX: / -> /usr merge and sbin -> bin merge
diff --git a/permissions.secure b/permissions.secure
index 340d491..b3c5897 100644
--- a/permissions.secure
+++ b/permissions.secure
@@ -384,6 +384,8 @@
 /usr/lib/singularity/bin/action-suid			root:singularity  4750
 /usr/lib/singularity/bin/export-suid			root:singularity  4750
 /usr/lib/singularity/bin/import-suid			root:singularity  4750
+# singularity version 3 (bsc#1128598)
+/usr/lib/singularity/bin/starter-suid                   root:singularity  4750
 
 #
 # XXX: / -> /usr merge and sbin -> bin merge
-- 
2.21.0

openSUSE Build Service is sponsored by