<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2">
<package pkgid="5d155d8c94ae25f6cd3c8536630cd8809fee53420a94e65fd1cf3c3200398b6e" name="rpmlint" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="0.20260528123302100541.opensuse.1108.g2490edb3.suse.tw"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.9.0-0.20260528123302100541.opensuse.1108.g2490edb3" date="1779969600">- dbus-services: whitelist qSnapper (bsc#1261537) (Matthias Gerstner)
- zypper-plugins: added pqcverification-zypp-plugin whitelisting (bsc#1265207) (Mislav Bozicevic)
- Bump github/codeql-action from 4.35.2 to 4.36.0 (dependabot[bot])
- BuildRootAndDateCheck: Convert date errs to warning (Daniel Garcia Moreno)
- dbus-services: added wall-broadcaster whitelisting (bsc#1263701) (Mislav Bozicevic)
- permissions-whitelist: merge postfix and postfix-bdb sections (Matthias Gerstner)
- permissions-whitelist: adjust postfix paths (bsc#1264563) (Matthias Gerstner)
- permissions-whitelist: drop no longer used texlive-filesystem entry (Matthias Gerstner)
- systemd-tmpfiles whitelist: add google-guest-oslogin dirs (bsc#1261275) (Matthias Gerstner)
- dbus-services: updated kdenetwork-filesharing whitelisting (bsc#1262258) (Mislav Bozicevic)
- FileDigestCheck: some more harmonization and type annotation (Matthias Gerstner)
- test: FileDigestCheck: verify only files from the same group are allowed (Matthias Gerstner)
- FileDigestCheck: operate on digest groups, not on a global view (Matthias Gerstner)
- FileDigestCheck: refactoring (Matthias Gerstner)
- opensuse.toml: fix typo (Matthias Gerstner)
- Bump github/codeql-action from 4.35.1 to 4.35.2 (dependabot[bot])
- test: add test coverage for PermissionsParser in SUIDPermissionsCheck (Matthias Gerstner)
- pkg.py: FakePkg.add_file_with_content(): support custom file mode (Matthias Gerstner)
- PermissionsParser: fix parse error when spaces occur between package names (bsc#1262166) (Matthias Gerstner)
- dbus-services: systemd v260 (bsc#1259318) (Wolfgang Frisch)
- Update openSUSE's licenses.toml (Dominique Leuenberger)
- Update openSUSE's licenses.toml (Dominique Leuenberger)
- systemd-tmpfiles: whitelist snapd snap-private-tmp (bsc#1261739) (Matthias Gerstner)
- Fix: Add sysusers.d to usrlibbinaryexception (Ulrik Haugen)
- SpecCheck: Fix typo in the 'no-%check-section' explanation (Yunus Acar)
- cli: Allow usage of --strict option (Daniel Garcia Moreno)
- Bump github/codeql-action from 4.34.1 to 4.35.1 (dependabot[bot])
- test: Add PKG-INFO to egg-info mocks for Python 3.15 compatibility (Miro Hrončok)
- polkit-rules-whitelist: add cosmic-settings-daemon kbd layout rule (bsc#1259403) (Matthias Gerstner)
- polkit-rules-whitelist: add cosmic-settings wheel/sudoers rules (bsc#1259402) (Matthias Gerstner)
- Reorder param doc rpmlint/checks/TagsCheck.py (danigm)
- test: Add more tests for dependencies (Daniel Garcia Moreno)
- test: Add tests for SELinuxIndependentModuleCheck (Daniel Garcia Moreno)
- TagsCheck: Reorder is_devel and is_source parameters (Daniel Garcia Moreno)
- Add SELinuxIndependentModuleCheck to test_lint.py (Cathy Hu)
- Set scoring for selinux-incorrect-if-file-location (Cathy Hu)
- Add check for SELinux Independent Modules (Cathy Hu)
- SignatureCheck: Fix _check_no_signature for rpm v6 (Daniel Garcia Moreno)
- Bump github/codeql-action from 4.32.6 to 4.34.1 (dependabot[bot])
- SourceCheck: update string format pyupgrade --py38-plus (Daniel Garcia Moreno)
- SourceCheck: update string format pyupgrade --py38-plus (Daniel Garcia Moreno)
- Fix: #1478: Use regex for file(1) magic matching; add .zip and .zstd support (Коренберг Марк)
- Bump github/codeql-action from 4.32.4 to 4.32.6 (dependabot[bot])
- dbus-services: systemd v259 (bsc#1255368) (Wolfgang Frisch)
- permissions-whitelist: adjust sendmail to systemd-tmpfiles (bsc#1256160) (Matthias Gerstner)
- world-writable-whitelist: drop sendmail /var/spool/mail (bsc#bsc#1256160) (Matthias Gerstner)
- dbus-services: update rtkit D-Bus whitelisting (bsc#1258681) (Matthias Gerstner)
- Fix rpmdiff flags (Daniel Garcia Moreno)
- Bump github/codeql-action from 4.32.3 to 4.32.4 (dependabot[bot])
- dbus-services: update thermald whitelisting (bsc#1258704) (Matthias Gerstner)
- dbus-services: whitelist intel-lpmd (bsc#1255977) (Matthias Gerstner)
- dbus-services: whitelist gnome-remote-desktop version 50 (bsc#1258407) (Matthias Gerstner)
- tests: adjust expected output for missing-call-to-setgroups-before-setuid (Matthias Gerstner)
- BinariesCheck: fix logic for missing-call-to-setgroups-before-setuid (Matthias Gerstner)
- systemd-tmpfiles: whitelist postfix spool directory (bsc#1258381) (Matthias Gerstner)
- test: Add more cases for the man page check (Daniel Garcia Moreno)
- FilesCheck: fix man_base_regex (danigm)
- Bump github/codeql-action from 4.32.2 to 4.32.3 (dependabot[bot])
- FilesCheck: fix manpage regex to support numbers (Daniel Garcia Moreno)
- whitelistings: add gdm-50 D-Bus and Polkit changes (bsc#1258025) (Matthias Gerstner)
- dbus-services: remove no longer necessary gdm.conf compatibility entry (Matthias Gerstner)
- SUIDPermissionsCheck: support permissions package coupling (Matthias Gerstner)
- systemd-tmpfiles: whitelist libpulp-tools (bsc#1257865) (Matthias Gerstner)
- polkit-rules-whitelist: add run0-wrappers rules (bsc#1254446) (Matthias Gerstner)
- dbus-services: systemd v258.3 (bsc#1257388) (Wolfgang Frisch)
- scoring: Raise forbidden-controlchar-found to 10k (Daniel Garcia Moreno)
- systemd-tmpfiles: drop pcfclock whitelisting (Matthias Gerstner)
- sysctl-whitelist: drop unnecessary Kubernetes entry (Matthias Gerstner)
- sysctl-whitelist: drop libvirt userfault fd config (Matthias Gerstner)
- sudoers-whitelist: add servicetray (bsc#1257103) (Matthias Gerstner)
- sudoers-whitelist: add sudo-policy drop-in configuration files (bsc#1257092) (Matthias Gerstner)
- sudoers-whitelist: adjust aeon/kalpa whitelistings to /usr/etc (Matthias Gerstner)
- sudoers-whitelist: include /usr/etc/sudoers.d (Matthias Gerstner)
- systemd-tmpfiles: migrate texlive (bsc#1256841) (Wolfgang Frisch)
- SystemdTmpfilesCheck: handle arguments with spaces (Wolfgang Frisch)
- polkit-rules-whitelist: add InputPlumber (bsc#1249149) (Matthias Gerstner)
- dbus-services: whitelist InputPlumber (bsc#1249149) (Matthias Gerstner)
- dbus-services: whitelist tlp-pd (bsc#1254768) (Matthias Gerstner)
- dbus-services: replace nodigests entries with digests entries (bsc#1215247) (Matthias Gerstner)
- dbus-services whitelist: drop invalid paths from nodigests entries (Matthias Gerstner)
- polkit-rules-whitelist: add systemd-259 empower.rules (bsc#1255368) (Matthias Gerstner)
- dbus-services: whitelist bootkitd (bsc#1256421) (Matthias Gerstner)
- systemd-tmpfiles: whitelist sendmail spool directory (bsc#1256160) (Matthias Gerstner)
- systemd-tmpfiles: whitelist dracut /boot/dracut cleanup entry (bsc#1256380) (Matthias Gerstner)
- dbus-services: whitelist snapd (bsc#1256175) (Wolfgang Frisch)
- configs/openSUSE: whitelist Foomuuri D-Bus and sysctl files (bsc#1254385) (Matthias Gerstner)
- systemd-tmpfiles: add aaa_base /var/adm dirs (bsc#1255794) (Matthias Gerstner)
- DBusPolicyCheck: Catch unsafe wildcard allow lists in policies (bsc#1215247) (Matthias Gerstner)
- permissions-whitelist: update postfix (bsc#1254597) (Wolfgang Frisch)
- pam-modules whitelist: fix account-utils glob pattern (Matthias Gerstner)
- permissions-whitelist: add migrated shadow-pw-mgmt (bsc#1254844) (Matthias Gerstner)
- dbus-services: whitelist smb4k (bsc#1249004) (Matthias Gerstner)
- whitelists: add account-utils PAM modules and permissions.d drop-in file (bsc#1254218) (Matthias Gerstner)
- opensuse.toml: block filters for sudoers-, sysctl- whitelisting errors (Matthias Gerstner)
- Revert "sysctl-whitelist: Support old aaa_base whitelisting" (Filippo Bonazzi)
- permissions: snap-confine (bsc#1248682) (Wolfgang Frisch)
- dbus-services: whitelist lightdm-kde-greeter (bsc#1249146) (Matthias Gerstner)
- polkit-rules-whitelist: extend whitelisting to systemd-mini flavour (Matthias Gerstner)
- sysctl-whitelist: Support old aaa_base whitelisting (Filippo Bonazzi)
- Drop dir-or-file-outside-snapshot badness to zero for now (bsc#1253008) (Filippo Bonazzi)
- lint: Fix rpmlintrc option parsing (Daniel Garcia Moreno)
- sysctl-whitelist: whitelist new default hiding of dmesg (bsc#1249686) (Johannes Segitz)
- sysctl-whitelist: add health-checker panic=5 (bsc#1252778) (Matthias Gerstner)
- systemd-tmpfiles: whitelist custom Samba printer spool dir (bsc#1251267) (Matthias Gerstner)
- dbus-services: whitelist systemd-homed v258 changes (bsc#1250884) (Matthias Gerstner)
- polkit-rules-whitelist: add systemd v258 example file (bsc#1250844) (Matthias Gerstner)
- whitelistings: remove outdated GNOME entries (Matthias Gerstner)
- Synced /var/spool/mail entry with Factory filesystem package. (Mislav Bozicevic)
- whitelistings: add new GNOME49 D-Bus/Polkit digests (bsc#1248881, bsc#1249067, bsc#1248979) (Matthias Gerstner)
- scoring: raise badness for logrotate-user-writable-log-dir (bsc#1245961) (Matthias Gerstner)
- word-writable-whitelist: remove postfix-bdb /var/spool/mail no longer packaged (Matthias Gerstner)
- pam-modules: drop pam_csync no longer packaged in Factory (Matthias Gerstner)
- dbus-services: drop passim which never reached Factory (Matthias Gerstner)
- dbus-services: drop rebootmgr (is now using varlink) (Matthias Gerstner)
- dbus-services: drop no longer needed deepin whitelistings (Matthias Gerstner)
- Added the SMTP Daemon (_smtpd) and the SMTPD Queue (_smtpq) users and groups for OpenSMTPD. (Mislav Bozicevic)
- systemd-tmpfiles whitelist: additional dir for nix (bsc#124616) (Matthias Gerstner)
- polkit-rules-whitelist: add sssd realmd rules (bsc#1245697) (Matthias Gerstner)
- Fix libgpiod whitelisting package name (bsc#1244702) (Filippo Bonazzi)
- dbus-services: whitelist libgpiod (bsc#1244702) (Wolfgang Frisch)
- BinariesCheck: also consider /usr/etc (Matthias Gerstner)
- LogrotateCheck: consider configuration files in /usr/etc; add badness (Matthias Gerstner)
- sysctl-whitelist: properly document the most recent review bug (Matthias Gerstner)
- configs/openSUSE/users-groups.toml: add user opencloud-server (Johannes Kastl)
- configs/openSUSE/users-groups.toml: add group opencloud-server (Johannes Kastl)
- sysctl-whitelist: adjust 50-coredump.conf digest for systemd (bsc#1243959) (Matthias Gerstner)
- Update users-groups.toml redis (Илья Индиго)
- permissions-whitelist: add exim drop-in file (bsc#1240755) (Matthias Gerstner)
- SUIDPermissionsCheck: Check for permctl instead of chkstat (Samuel Cabrero)
- systemd-tmpfiles: add nix socket directory (bsc#1243206) (Matthias Gerstner)
- polkit-rules-whitelist: adjust systemd-network package name (bsc#1242056) (Matthias Gerstner)
- dbus-services: adjust systemd-networkd and systemd-resolved (bsc#1242056) (Matthias Gerstner)
- polkit-rules: whitelist gdm WiFi connection setup rules (bsc#1239719) (Matthias Gerstner)
- dbus-services: whitelist kio-admin (bsc#1229913) (Matthias Gerstner)
- dbus-services: whitelist systemd-sysupdated (bsc#1237106) (Matthias Gerstner)
- dbus-services: whitelist timekpr-next (bsc#1234134) (Wolfgang Frisch)
- dbus-services: adjust iio-sensor-proxy digest (bsc#1236290) (Matthias Gerstner)
- dbus-services: drop no longer needed temporary sssd-dbus entry (Matthias Gerstner)
- dbus-services: adjust sssd-dbus hash (bsc#1235724) (Matthias Gerstner)
- dbus-services: drop RemoteDesktop.service which is no longer packages. (Matthias Gerstner)
- dbus-services: drop no longer packaged kcm_sddm service (Matthias Gerstner)
- dbus-services: drop no longer packages scmon Pkcs11Monitor.conf (Matthias Gerstner)
- dbus-services: tuned-ppd: add new org.freedesktop.UPower names (Matthias Gerstner)
- whitelistings: add sssd permissions drop-in file for helper caps (bsc#1233131) (Matthias Gerstner)
- dbus-services: fix mistake in sddm-kalpa whitelisting (bsc#1232647) (Matthias Gerstner)
- dbus-services: whitelist tuned-ppd (bsc#1232412) (Matthias Gerstner)
- dbus-services: whitelist supergfxctl (bsc#1232776) (Matthias Gerstner)
- polkit-rules-whitelist: adjust package name for sssd (bsc#1230051) (Matthias Gerstner)
- SUIDPermissionsCheck: Escape path for regular expression (Daniel Garcia Moreno)
- dbus-services: whitelist sddm-kalpa (bsc#1232647) (Matthias Gerstner)
- dbus-services: replace generic comment for sddm (Matthias Gerstner)
- false positive: systemd-service-without-service_del_postun (Daniel Garcia Moreno)
- SUIDPermissionsCheck: chkstat to permctl rename (Daniel Garcia Moreno)
- whitelistings: add libcgroup PAM module and setgid binary (bsc#1231381) (Matthias Gerstner)
- dbus-services: deepin-system-monitor (bsc#1230018) (Wolfgang Frisch)
- dbus-services: adjust gnome-remote-desktop to version 47 (bsc#1230406) (Matthias Gerstner)
- opensuse: explain pull requests more precisely (Wolfgang Frisch)
- Fix pam-module test binary package (Daniel Garcia Moreno)
- Fix tests with new rpm2cpio command (Daniel Garcia Moreno)
- dbus-services: gdm: temporarily whitelist old version (bsc#1230466) (Wolfgang Frisch)
- dbus-services: sssd: temporarily whitelist old version (bsc#1230051) (Wolfgang Frisch)
- sysctl-whitelist: traefik: increase socket buffers (bsc#1230555) (Wolfgang Frisch)
- dbus-services: gdm update (bsc#1230466) (Wolfgang Frisch)
- pam-modules: pam_limits.so moved from `pam` to `pam-extra` (bsc#1230447) (Wolfgang Frisch)
- polkit-rules: add whitelisting for sssd smartcard access (bsc#1230051) (Matthias Gerstner)
- dbus-services: adjust digests for sssd (bsc#1230051) (Matthias Gerstner)
- configs/openSUSE/users-groups.toml: add nqptp (boo#1213060) (Wolfgang Frisch)
- dbus-services: systemd: remove outdated hashes (bsc#1225317) (Wolfgang Frisch)
- sysctl-whitelist: kernel.pid_max entry moved (bsc#1228731) (Wolfgang Frisch)
- Update openSUSE's licenses.toml (Dominique Leuenberger)
- sysctl-whitelist: move 50-coredump.conf to systemd main package (bsc#1226865) (Matthias Gerstner)
- sysctl-whitelist: aaa_base: new sub-package to disable YAMA (bsc#1226460) (Matthias Gerstner)
- sysctl-whitelist: aaa_base: adjust 50-default.conf digest (bsc#1226464) (Matthias Gerstner)
- dbus-services: systemd: keep the old whitelisting temporarily (bsc#1225317) (Wolfgang Frisch)
- dbus-services: whitelist kdeplasma6-addons kameleonhelper (bsc#1226306) (Matthias Gerstner)
- dbus-services: adjust backintime whitelisting to etc-&gt;usr move (bsc#1226446) (Matthias Gerstner)
- whitelistings: systemd v256 (bsc#1225317) (Wolfgang Frisch)
- whitelist valkey (bsc#1226083) (Wolfgang Frisch)
- whitelistings: add gnome-remote-desktop Polkit and D-Bus components (bsc#1222159) (Matthias Gerstner)
- zypper-plugins: adjust permissions-zypp-plugin to new permctl name (Matthias Gerstner)
- dbus-services: remove deepin-api entry until packaging issues are resolved (Matthias Gerstner)
- whitelistings: drop no longer needed KDE5 whitelistings (Matthias Gerstner)
- dbus-services: drop no longer present nfs-ganesha entry (Matthias Gerstner)
- whitelistings: drop no longer needed pam_dbus entries (Matthias Gerstner)
- pam-modules: whitelist pam_oslogin_admin.so (bsc#1222457) (Matthias Gerstner)
- Revert "pam-modules: whitelist pam_lastlog2 now moved to util-linux (bsc#1222329)" (Matthias Gerstner)
- dbus-services: whitelist dnf5daemon-server (bsc#1218327) (Matthias Gerstner)
- pam-modules: whitelist pam_lastlog2 now moved to util-linux (bsc#1222329) (Matthias Gerstner)
- dbus-services: power-profiles-daemon: reinstate legacy D-Bus whitelisting (bsc#1219957) (Matthias Gerstner)
- Revert "dbus-services: Still provide old GDM whitelisting (bsc#1218922)" (Filippo Bonazzi)
- dbus-services: power-profiles-daemon (bsc#1219956) (#1197) (Wolfgang Frisch)
- Bump upper bound of suse_version to include ALP &amp; current Factory (Dan Čermák)
- dbus-services: Still provide old GDM whitelisting (bsc#1218922) (Filippo Bonazzi)
- dbus-services: whitelist sddm-kcm6 (bsc#1217188) (Matthias Gerstner)
- whitelistings: merge redundant systemd vs. systemd-mini entries (Matthias Gerstner)
- pam-modules: also whitelisted pam_system_loadkey for systemd-mini (bsc#1220249) (Matthias Gerstner)
- dbus-services: adjust gdm whitelisting (bsc#1218922) (Matthias Gerstner)
- dbus-services: whitelist drkonqi KDE6 update (bsc#1220190) (Matthias Gerstner)
- pam-modules: whitelist pam_systemd_loadkey.so (bsc#1220249) (Matthias Gerstner)
- dbus-services: whitelist kde-inotify-survey with KDE6 changes (bsc#1217191) (Matthias Gerstner)
- dbus-services whitelist: adjust kde6 digests after fix in kauth6 (bsc#1220215) (Matthias Gerstner)
- dbus-services: update systemd-homed (DeactivateAllHomes method, bsc#1219916) (Matthias Gerstner)
- dbus-services: whitelist plasma6-workspace fontinst service (bsc#1217186) (Matthias Gerstner)
- dbus-services: whitelist powerdevil6 (bsc#1217187) (Matthias Gerstner)
- dbus-services: whitelist plasma6-disks (bsc#1217185) (Matthias Gerstner)
- dbus-services: whitelist plasma6-desktop kcmclock (bsc#1217184) (Matthias Gerstner)
- pam-modules: whitelist pam_kwallet6 (bsc#1217183) (Matthias Gerstner)
- dbus-services: whitelist libksysguard6-plugins (bsc#1217182) (Matthias Gerstner)
- zypper-plugins: adjust libzypp-plugin-appdata to new content (bsc#1219873) (Matthias Gerstner)
- dbus-services: whitelist kinfocenter6 (bsc#1217179) (Matthias Gerstner)
- dbus-services: whitelist kf6-kauth (bsc#1217178) (Matthias Gerstner)
- SUIDPermissionsCheck: support new /usr/share/permissions/packages.d dir (Matthias Gerstner)
- SystemIstallCheck: Allow %service_del_postun_without_restart macro usage (Daniel Garcia Moreno)
- sysctl-whitelist: update YAMA config (bsc#1219656) (Wolfgang Frisch)
- users-groups: add groups for usbauth-notifier (Wolfgang Frisch)
- cron-whitelist: patch2mail now uses systemd-timers (Wolfgang Frisch)
- Register greeter user and group (Filippo Bonazzi)
- pam-modules: whitelist pam_canonicalize_user (bsc#1219358) (Matthias Gerstner)
- sendmail: permissions moved from /etc to /usr/share/permissions (bsc#1219339) (Wolfgang Frisch)
- sendmail: permissions moved from /etc to /usr/share/permissions (bsc#1219339) (Wolfgang Frisch)
- test_file_digest: cover new glob features in package and path names (Matthias Gerstner)
- sysctl-whitelist: use new package glob pattern (Matthias Gerstner)
- FileDigestCheck: support glob patterns in package names (Matthias Gerstner)
- FileDigestCheck: make glob patterns in filenames explicit (Matthias Gerstner)
- sysctl-whitelist: add another package name for kubernetes1.29 (bsc#1219168) (Matthias Gerstner)
- check: Implement reset method in checks (Daniel Garcia Moreno)
- Fix digester for cronie whitelisting (bsc#1218756) (Filippo Bonazzi)
- cron-whitelist: adjust cronie-anacron again (bsc#1218756) (Matthias Gerstner)
- systemd-tmpfiles whitelist: adjust package name for libtss-fapi (Callum Farmer)
- dbus-services: certmonger: .conf renamed (bsc#1218616) (Wolfgang Frisch)
- pam-modules: separate standard PAM module that have been already reviewed (Matthias Gerstner)
- cron-whitelist: update cronie-anacron digest (bsc#1218107) (Matthias Gerstner)
- SUIDPermissionsCheck: fix broken warnings and harmonize code (Matthias Gerstner)
- Fix Aeon/Kalpa whitelisting distinct filenames (bsc#1217706, bsc#1217707) (Filippo Bonazzi)
- polkit rules whitelisting: add gamemode rules (bsc#1217915) (Matthias Gerstner)
- polkit-rules, sudoers: add plasma-branding-Kalpa for special wheel group handling (bsc#1217707, bsc#1217706) (Matthias Gerstner)
- cron-whitelist: remove obsolete opa-ff entries (Wolfgang Frisch)
- cron-whitelist: remove obsolete logdigest entries (Wolfgang Frisch)
- FileDigestCheck: Filter minor versions in shebangs. (Wolfgang Frisch)
- polkit-rules-whitelist: self auth as admin (bsc#1215652) (Wolfgang Frisch)
- polkit-rules-whitelist: self auth as admin (bsc#1215652) (Wolfgang Frisch)
- pam-modules: remove no longer packaged pam_oslogin_admin.so (Matthias Gerstner)
- cron-whitelist: remove tmpwatch which migrated to systemd timers (bsc#1115458) (Matthias Gerstner)
- cron-whitelist: drop sarg which as been replaced by systemd timers (Matthias Gerstner)
- pam-modules: whitelist pam-himmelblau (bsc#1215355) (Matthias Gerstner)
- dbus-services: whitelist passim service (bsc#1216434) (Matthias Gerstner)
- CI: Add systemd-rpm-macros package (Daniel Garcia Moreno)
- zypper-plugins: whitelist zypp-boot-plugin (bsc#1215988) (Matthias Gerstner)
- dbus-services: adjust to etc -&gt; usr move in thermald (bsc#1215873) (Matthias Gerstner)
- dbus-services: remove obsolete entry for sysprof (Wolfgang Frisch)
- Whitelist dbus service and configuration for policycoreutils-dbus (bsc#1213435) (Filippo Bonazzi)
- polkit-rules-whitelist: add fudo rules (bsc#1215948) (Matthias Gerstner)
- Add whitelisting for 90-kubeadm.conf (bsc#1215542) (Filippo Bonazzi)
- sysctl-whitelist: remove old microos-tools entry (Wolfgang Frisch)
- dbus-services: sddm-qt6 whitelisting (bsc#1215441) (Wolfgang Frisch)
- dbus-services: update tukitd (bsc#1215216) (Wolfgang Frisch)
- polkit, sudoers whitelist: add gnome-branding-Aeon (bsc#1215276) (Matthias Gerstner)
- FileDigestCheck: do not use hash as variable name (Daniel Garcia Moreno)
- FileDigestCheck: Adapt fstrings to python3.12 check (Daniel Garcia Moreno)
- dbus-services: keep old deepin names around until rename is complete (bsc#1214101) (Matthias Gerstner)
- whitelists: adjust package for systemd-homed components (bsc#1213692) (Matthias Gerstner)
- Add missing dependency to rpmlint spec (Dan Čermák)
- Update search regexes for %service_* macros (Dan Čermák)
- Don't skip systemd scriptlet test on Fedora (Dan Čermák)
- Improve systemd scriptlet test name (Dan Čermák)
- bsc#1213292: adjust timesync1 dbus whitelisting (Filippo Bonazzi)
- dbus-services: drop whitelisting that was never put into production (Matthias Gerstner)
- cron-whitelist: drop dead suse-texlive entry (Matthias Gerstner)
- pam-modules: drop dead pam_opie entry (sr#1065964) (Matthias Gerstner)
- dbus-services: drop no longer needed dinstaller services (bsc#1208394) (Matthias Gerstner)
- dbus-services: remove no longer packaged mumble-server (bsc#1209338) (Matthias Gerstner)
- dbus-services: rename com.deepin.api to org.deepin.dde (bsc#1211376) (Matthias Gerstner)
- sudoers-whitelist: adjust monitoring-plugins-smart (bsc#1211003) (Matthias Gerstner)
- sysctl-whitelist: add kubernetes1.27 (bsc#1210951) (Wolfgang Frisch)
- port to get_tested_path instead of testpath (Martin Liska)
- pam-modules: whitelist pam_wtmpdb (bsc#1209963) (Matthias Gerstner)
- pam-modules: Move pam_timestamp, pam_issue and pam-userdb (bsc#1210371) (Johannes Segitz)
- flake8: fix C419 Unnecessary list comprehension passed to any() prevents short-circuiting (Martin Liska)
- dbus-services: add libproxy whitelisting (bsc#1209376) (Matthias Gerstner)
- pytest: use tmp_path mock instead of tmpdir (Martin Liska)
- pam-module whitelist: add lastlog2 (bsc#1209238) (Wolfgang Frisch)
- Fix TW CI due to the new flake8 release. (Martin Liska)
- sysctl-whitelist: add further kubernetes versions (bsc#1209363) (Matthias Gerstner)
- SpecCheck: allow more %suse_version value comparisons (Jan Engelhardt)
- d-bus services: add kde-inotify-survey (bsc#1208689) (Wolfgang Frisch)
- Add missing newline at the end of TOML files. (Martin Liska)
- polkit-rules-whitelist: adjust libvirt-daemon rule to new sub-package (bsc#1208876) (Matthias Gerstner)
- DbusPolicyCheck: use existing dbus-policy-missing-allow (Matthias Gerstner)
- openSUSE/users-groups: kismet (bsc#1207654) (Wolfgang Frisch)
- dbus-service: adjust sssd-dbus infopipe whitelisting to /usr (bsc#1207586) (Matthias Gerstner)
- d-bus services: adjust NetworkManager-fortisslvpn from /etc to /usr (Wolfgang Frisch)
- dbus-services: adjust pulseaudio to new /usr path (bsc#1207584) (Matthias Gerstner)
- SymlinkExceptions: also exclude systemd-mini (Matthias Gerstner)
- FileDigestCheck: allow multiple package names in ghost/symlink exceptions (Matthias Gerstner)
- FileDigestCheck: support exceptions to symlink restrictions (Matthias Gerstner)
- Revert "temporarily drop badness for sysctl-file-* errors" (Matthias Gerstner)
- temporarily drop badness for sysctl-file-* errors (Martin Liska)
- openSUSE: new whitelisting restriction for sysctl drop-in files (bsc#1174722) (Matthias Gerstner)
- zypper-plugins whitelist: adjust libzypp-plugin-appdata (bsc#1206836) (Matthias Gerstner)
- Update D-Bus whitelisting for NetworkManager-libreswan (bsc#1206757) (Wolfgang Frisch)
- zypper-plugins: complement test whitelisting by a mismatching entry (Matthias Gerstner)
- Update openSUSE's licenses.toml (Pi-Cla)
- Franklin Street address is ok (Benson Muite)
- openSUSE: new whitelisting restriction for zypper plugins (bsc#1204314) (Matthias Gerstner)
- Update D-Bus whitelisting for NetworkManager-iodine (bsc#1206756) (Wolfgang Frisch)
- Files in /etc/pam.d/ should be moved to /usr (Stefan Schubert)
- pam-modules: pam_unix: adjust package name to pam (bsc#1206485) (Matthias Gerstner)
- dbus-services: sddm: adjust to configuration file moved from /etc to /usr/share (Matthias Gerstner)
- dbus-services: whitelist transaction-update-notifier (bsc#1206163) (Matthias Gerstner)
- dbus-services: /etc -&gt; /usr move for lightdm whitelisting (bsc#1205939) (Matthias Gerstner)
- pam-modules whitelist: add pam_saslauthd (bsc#1205459) (Matthias Gerstner)
- dbus-services: whitelist experimental YaST installer D-Bus backend (bsc#1202059) (Matthias Gerstner)
- Remove Python entries from Filelist checks. (Daniel Garcia Moreno)
- SpecCheck: Add python_sitelib glob check (Martin Liska)
- dbus-service whitelist: move NetworkManager-openconnect to /usr (bsc#1204795) (Matthias Gerstner)
- Whitelist /var/spool/mail in postfix-bdb (bsc#1179574) (Peter Varkoly)
- dbus-services: document recent follow-up review of cups helpers (Matthias Gerstner)
- FileDigestCheck: print digest hint for all possible filter types (Matthias Gerstner)
- geoclue2: move dbus system.d file to /usr (bsc#1204054) (Filippo Bonazzi)
- iio-sensor-proxy: move dbus system.d file to /usr (bsc#1204055) (Filippo Bonazzi)
- gdm: move dbus system.d file to /usr (bsc#1204052) (Filippo Bonazzi)
- sendmail: whitelisting for new systemd-tmpfiles entries for /run, /run/sendmail (bsc#1203340) (Paolo Perego)
- Fix flake8 issue. (Martin Liska)
- Fix test. (Martin Liska)
- dbus-services: adjust tuned entry to path move to /usr (bsc#1202339) (Matthias Gerstner)
- dbus-services: autofs: file digests (bsc#1203362) (Wolfgang Frisch)
- fix bugzilla url as novell.com is dead (Martin Liska)
- dbus-services: autofs: move from /etc to /usr (Wolfgang Frisch)
- Whitelist /var/spool/mail in postfix, sendmail and exim (bsc#1179574) (Ludwig Nussel)
- dbus-services: adjust/extend kdiskmark whitelisting (bsc#1202725) (Matthias Gerstner)
- Increase badness for missing-hash-section check. (Martin Liska)
- dbus-services: whitelist systemd-experimental: systemd-oomd (bsc#1202454) (Matthias Gerstner)
- dbus-services: adjust to system-config-printer /etc -&gt; /usr move (bsc#1202340) (Matthias Gerstner)
- dbus-services: adjust to cups-pk-helper /etc -&gt; /usr move (bsc#1202338) (Matthias Gerstner)
- Whitelist gromox (bsc#1200165) (Filippo Bonazzi)
- resolve some flake8 simplify issues (Martin Liska)
- Port 2 usages of toml library to tomli. (Martin Liska)
- Port TOML configs to tomli library (Martin Liska)
- dbus-services: really adjust location from etc -&gt; usr (Matthias Gerstner)
- Revert "Add temporary workaround for systemd package." (Martin Liska)
- Add skipping capability for openSUSE rpmlint package. (Martin Liska)
- digest whitelists: remove now redundant sha256 algorithm specification (Matthias Gerstner)
- FileDigestCheck: use sha256 digest algorithm by default (Matthias Gerstner)
- dbus-services: adjust to PackageKit etc -&gt; usr config file move (bsc#1201347) (Matthias Gerstner)
- dbus-services: adjust to cups etc -&gt; usr config file move (bsc#1201346) (Matthias Gerstner)
- dbus-services: adjust to avahi etc -&gt; usr config file move (bsc#1201345) (Matthias Gerstner)
- whitelistings: fill in some missing metadata (Matthias Gerstner)
- Improve syntax validation for digests. (Martin Liska)
- systemd-tmpfiles: drop version from libtss2-fapi1 filename (Matthias Gerstner)
- Add temporary workaround for systemd package. (Martin Liska)
- Fix dbus-services config file. (Martin Liska)
- dbus-services: adjust power-profiles-daemon to new path (bsc#1201125) (Matthias Gerstner)
- systemd-tmpfiles whitelisting: also ignore -mini variants of systemd and udev (Matthias Gerstner)
- dbus-services: move wpa_supplicant.conf to /usr (Wolfgang Frisch)
- dbus-services: move dnsmasq.conf to /usr (Wolfgang Frisch)
- systemd-tmpfiles check: raise badness to 10000 for strict config (Matthias Gerstner)
- systemd-tmpfiles: whitelist currenty set of affected packages (Matthias Gerstner)
- SystemdTmpfilesCheck: compare normalized lines for whitelistings (Matthias Gerstner)
- polkit-rules: whitelist geoclue (bsc#1199767) (Matthias Gerstner)
- Report binary in shlib-policy-name-error error (Martin Liska)
- Remove extra prints from tests. (Martin Liska)
- dbus-services: whitelist kinfocenter5 (bsc#1199735) (Wolfgang Frisch)
- SystemdTmpfilesCheck: add additional unit test for parsing logic (Matthias Gerstner)
- SystemdTmpfilesCheck: fix invalid member accesses (Matthias Gerstner)
- tests: add coverage for new SystemdTmpfilesCheck (Matthias Gerstner)
- pkg.py: FakePkg: support addition of ghost files (Matthias Gerstner)
- SystemdTmpfilesCheck: new check to restrict systemd-tmpfiles configuration (Matthias Gerstner)
- dbus-services: adjust bluez whitelisting to /usr (bsc#1199207) (Matthias Gerstner)
- Fix wrong git merge conflict resolution. (Martin Liska)
- dbus-services: update tukitd config hash to latest reviewed version (bsc#1196149 bsc#1197810 (Wolfgang Frisch)
- dbus-services: remove dead gypsy whitelisting (Matthias Gerstner)
- dbus-services.toml: adjust whitelisting for switcheroo-control (bsc#1199065) (Matthias Gerstner)
- Remove empty line after loop. (Martin Liska)
- dbus-services: remove gconf-polkit entry which is no longer shipped in Factory (Matthias Gerstner)
- sudoers-whitelist: add another integration test whitelisting entry (Matthias Gerstner)
- sudoers whitelist: add preliminary ceph whitelisting (bsc#1196141) (Matthias Gerstner)
- Port opensuse checks. (Martin Liska)
- sudoers whitelist: add test entry for rpmlint-integration-test OBS package (Matthias Gerstner)
- new whitelist restriction for /etc/sudoers.d (bsc#1172785) (Matthias Gerstner)
- dbus-services: whitelist usbguard (bsc#1196621) (Matthias Gerstner)
- dbus-services: add missing config whitelist for tukitd (bsc#1196149) (Johannes Segitz)
- dbus services: adjust to accountsservice path move (bsc#1197354) (Matthias Gerstner)
- dbus services: NetworkManager-vpnc config locations (bsc#1197053) (Matthias Gerstner)
- dbus services: adjust NetworkManager-pptp config locations (bsc#1197054) (Matthias Gerstner)
- test_whitelist_syntax: extend the check to cover also digest entry structure (Matthias Gerstner)
- dbus whitelist: fix nodigests whitelisting, should contain the path (Matthias Gerstner)
- D-Bus whitelistings: kpmcore: don't couple service file to digest (Matthias Gerstner)
- D-Bus services whitelist: add kpmcore (bsc#1178848) (Matthias Gerstner)
- dbus-services whitelist: add test whitelisting to cover dbus-file-parse-error (Matthias Gerstner)
- tests: add test that verifies security whitelisting syntax (Matthias Gerstner)
- security whitelistings: harmonize bug list syntax (Matthias Gerstner)
- FileDigestCheck: configure digest filter type per whitelisting entry (Matthias Gerstner)
- FileDigestCheck: also assert that a path key is present (Matthias Gerstner)
- dbus-services: adjust nm-priv-helper path (bsc#1194799) (Matthias Gerstner)
- pam-modules: whitelist pam-fscrypt (bsc#1195623) (Matthias Gerstner)
- dbus-services: whitelist nvme-stas (bsc#1195236) (Matthias Gerstner)
- FileDigestCheck: enable XML filtered digests for D-Bus services (Matthias Gerstner)
- FileDigestCheck: emit special {group}-file-parse-error if XML is bad (Matthias Gerstner)
- dbus-services: whitelist tukitd (bsc#1196149) (Wolfgang Frisch)
- dbus-services: whitelist kcron helper (Thomas Leroy)
- dbus-services: adjust ModemManager path (bsc#1196170) (Matthias Gerstner)
- dbus-services: fix wrongly named note field (Matthias Gerstner)
- Speed up FileDigestCheck. (Martin Liska)
- Revert "Speed up FileDigestCheck." (Martin Liška)
- Speed up FileDigestCheck. (Martin Liska)
- FileDigestCheck: implement support for file digest filtering (Matthias Gerstner)
- tests: add test case for FileDigestGroup with multiple package names (Matthias Gerstner)
- FileDigestCheck: support additional `packages = ["pkg1", "pkg2"]` syntax (Matthias Gerstner)
- FileDigestCheck: refactor digest group parsing and normalization (Matthias Gerstner)
- FileMetadataCheck: support additional `packages = ["pkg1", "pkg2"]` syntax (Matthias Gerstner)
- whitelists: replace accidentally added tabs by spaces (Matthias Gerstner)
- pam-modules: remove now outdated entry for modules that moved into pam_unix (Matthias Gerstner)
- dbus-services: whitelist NetworkManager nm-priv-helper (bsc#1194799) (Matthias Gerstner)
- pam module whitelist: adjust package name for pam_winbind (bsc#1194573) (Matthias Gerstner)
- fix connman-nmcompat whitelisting (bsc#1192827) - resides in a sub-package (Matthias Gerstner)
- Make missing-call-to-setgroups-before-setuid only warning. (Martin Liska)
- dbus-services whitelist: add connman nm compatibility interface (bsc#1192827) (Matthias Gerstner)
- Sort input .rpm files so that the output is stable. (Martin Liska)
- dbus-services: fix package name for setroubleshoot entries (Matthias Gerstner)
- duplicate postfix entry for postfix-bdb, whitelistings are tied to pacakges in rpmlint2 and need to be there for every package (Johannes Segitz)
- polkit-rules-whitelist: follow-up whitelisting for gnome-initial-setup (bsc#1192542) (Matthias Gerstner)
- dbus-services: add setroubleshoot whitelisting (bsc#1186344) (Matthias Gerstner)
- permissions-whitelist: update texlive-filesystem digests (Matthias Gerstner)
- permissions-whitelist: update sendmail digests (Matthias Gerstner)
- dbus-services: adjust wicked whitelisting to new paths (bsc#1192033) (Matthias Gerstner)
- security whitelistings: test whitelistings for file-digest-mismatch errors (Matthias Gerstner)
- scoring.toml: fix alphabetical order of permissions-file errors (Matthias Gerstner)
- security whitelistings: add badness for file-digest-mismatch errors (Matthias Gerstner)
- Fix -r argument. (Martin Liska)
- opensuse.toml: add permissions-parse-error to BlockedFilters (Matthias Gerstner)
- dbus-services: adjust digest for test whitelisting (need a different file there) (Matthias Gerstner)
- polkit-rules-whitelist: fix package name for test whitelisting (Matthias Gerstner)
- Whitelisting pam_u2f module (bsc#1190790) (Paolo Perego)
- Drop badness of shlib-policy-name-error for now. (Martin Liska)
- Adding whitelisting for pam_ssh_agent_auth. bsc#1190983 (Paolo Perego)
- Enable shlib-policy-name-error error. (Martin Liska)
- dbus-services whitelisting: add power-profiles-daemon (bsc#1189900) (Matthias Gerstner)
- security whitelistings: add whitelistings for OBS integration test package (Matthias Gerstner)
- PolkitCheck: be robust against dead symlinks in actions directory (Matthias Gerstner)
- SUIDPermissionsCheck: remove unused permissions-ghostfile error (Matthias Gerstner)
- *-file-ghost descriptions: fix texts that are for some reason incomplete (Matthias Gerstner)
- SUIDPermissionsCheck: be robust against dead symlinks in permissions.d (Matthias Gerstner)
- dbus-services: add oddjob-mkhomedir which got lost during migration (Matthias Gerstner)
- Remove deprecated pam-deprecated entry (Cathy Hu)
- Revert "Skip lto-no-text-in-archive for 2 archives in gcc." (Martin Liska)
- skip %ghost files in SUIDPermissionsCheck. This allows packages to %ghost files that are managed by e.g. tmpfiles.d and rpm -v to work properly (Johannes Segitz)
- Copied additional systemd whitelistings to match systemd-mini (Johannes Segitz)
- systemd-mini also ships pam_systemd.so. Now with the whitelist tied to binary packages it needs its own entry (Johannes Segitz)
- reference correct binary rpm for pam_systemd_home (Johannes Segitz)
- Update pam-modules.toml (Paolo Perego)
- whitelist pam_systemd_home.so for systemd-experimental. This was not audited (Johannes Segitz)
- Remove deprecated entries for filesystem package in world-writable whitelist (Cathy Hu)
- Update opensuse.toml (Paolo Perego)
- Create FileDigestCheck.py (Paolo Perego)
- Update opensuse.toml (Paolo Perego)
- Update FileDigestCheck.py (Paolo Perego)
- Remove malcontent whitelisting for polkit (Cathy Hu)
- Remove storeBackup entry from cron-whitelist.toml (Cathy Hu)
- Rename fprintd to wicked in dbus config (Cathy Hu)
- Sync and fix dbus whitelisting entries (Cathy Hu)
- Add mechanism to whitelist %ghost'ed files that are present in whitelists. This is a rare case and should only be necesary for special packages like polkit-default-privs (Johannes Segitz)
- dbus-services: whitelisting for low-memory-monitor (bsc#1189899) (Matthias Gerstner)
- whitelistings: harmonize bug number prefixes by changing bnc# to bsc# (Matthias Gerstner)
- Skip lto-no-text-in-archive for 2 archives in gcc. (Martin Liska)
- dbus-services whitelist: use correct camel-case package names (Matthias Gerstner)
- pam-modules.toml: remove unnecessary empty bug fields (Matthias Gerstner)
- pam-modules.toml: replace "legacy: not audited" comments where inappropriate (Matthias Gerstner)
- pam-modules whitelist: synchronize from last state in rpmlint 1 (Matthias Gerstner)
- polkit-rules-whitelist: sync with latest state in polkit-default-privs (Matthias Gerstner)
- dbus-services: replace "not audited" comment by more suitable "import" comment (Matthias Gerstner)
- dbus-services whitelist: synchronize with the last state of rpmlint1 (Matthias Gerstner)
- cron-whitelist: cronie: add incremental whitelist for minor change (bsc#1190521) (Matthias Gerstner)
- FileDigestCheck: remove -digest- from error names where unnecessary (Matthias Gerstner)
- FileDigestCheck: remove _check_filetypes only doing one pass over files (Matthias Gerstner)
- scoring-strict: downgrade permissions-missing-postin badness (Matthias Gerstner)
- SUIDPermissionsCheck: ignore static permission entries (Matthias Gerstner)
- FileDigestCheck: print out the encountered digest on unauthorized files (Matthias Gerstner)
- FileDigestCheck: refactor _is_valid_digest() (Matthias Gerstner)
- permissions-suseconfig-obsolete: this was from SLE-11 times, drop remains (Matthias Gerstner)
- openSUSE config: complete BlockedFilters for all mandatory whitelistings (Matthias Gerstner)
- FileDigestCheck: don't follow symlinks where this is not necessary (Matthias Gerstner)
- cleanup: remove suse-dbus-unauthorized-service error / check (Matthias Gerstner)
- errors: remove permissions-unauthorized-file (Matthias Gerstner)
- descriptions: add some missing and improve existing whitelisting errors (Matthias Gerstner)
- scoring: add badness (especially in strict case) for missing whitelistings (Matthias Gerstner)
- Whitelisting checks: make all missing whitelistings errors (Matthias Gerstner)
- PolkitCheck: use new path in /usr/etc by default (Matthias Gerstner)
- Fix coding style of a config file. (Martin Liska)
- KMP policy: support legacy 'packageand' directive in Supplements. (Martin Liska)
- Replace description variable recursively. (Martin Liska)
- Add missing [Scoring] section in TOML file. (Martin Liska)
- Come up with --mini-mode option. (Martin Liska)
- Add tests for globbing (Cathy Hu)
- Rename /usr/lib*/ and /lib* to * (Cathy Hu)
- Migrate pam-modules.toml to FileDigestCheck (Cathy Hu)
- Add globbing for paths used in FileDigestCheck config (Cathy Hu)
- Add tests for nodigests option in FileDigestCheck (Cathy Hu)
- Remove DBusServicesCheck (Cathy Hu)
- Port dbus-service.toml to FileDigestCheck config (Cathy Hu)
- Add compact format for skip algorithm in FileDigestCheck (Cathy Hu)
- Rename scoring-strict.toml using .override. (Martin Liska)
- Add scoring-strict openSUSE config. (Martin Liska)
- Add BlockedFilters. (Martin Liska)
- Update scoring for openSUSE. (Martin Liska)
- Add test for permissions.d whitelisted packages (Cathy Hu)
- Readd permissions.d whitelisting (Cathy Hu)
- Add test for file-digest-mismatch error (Cathy Hu)
- Replace error variable with resetting error_digests (Cathy Hu)
- Rewrite parts of FileDigestCheck (Cathy Hu)
- Remove not needed assert from a test. (Martin Liska)
- Remove deprecated entries in device-files-whitelist.toml (Cathy Hu)
- Remove deprecated bind-chrootenv entry (Cathy Hu)
- Remove entries for deprecated cacti and atop-daemon (Cathy Hu)
- Remove config number check (Cathy Hu)
- Fix opensuse config (Cathy Hu)
- Move opensuse specific checks into opensuse.toml (Cathy Hu)
- Remove found_no feature (Cathy Hu)
- Remove polkit-cant-acquire-privilege add_info (Cathy Hu)
- Remove polkit-cant-acquire-privilege description (Cathy Hu)
- Improve wording in PolkitCheck description (Cathy Hu)
- Rename polkit-unauthorized-privilege to polkit-user-privilege (Cathy Hu)
- Replace found_undef with found_no (Cathy Hu)
- Add comments to PolkitCheck.py (Cathy Hu)
- Fix style issues (Cathy Hu)
- Remove custom package polkit privs check feature (Cathy Hu)
- Change undefined action setting from '??' to 'no' (Cathy Hu)
- Fix descriptions (Cathy Hu)
- Enable PolkitCheck (Cathy Hu)
- Remove descriptions for PolkitCheck that are covered by FileDigestCheck (Cathy Hu)
- Add PolkitCheck descriptions (Cathy Hu)
- Fix style issues (Cathy Hu)
- Fix style issues (Cathy Hu)
- Add Polkit tests (Cathy Hu)
- Fix bugs in PolkitCheck.py (Cathy Hu)
- Fix bug (Cathy Hu)
- Add PolkitCheck (Cathy Hu)
- Adjust cli test (Cathy Hu)
- Add polkit rules whitelist (Cathy Hu)
- Enhance PermissionsEntry constructor (Cathy Hu)
- Move descriptions to Variable.toml (Cathy Hu)
- Fix style issues (Cathy Hu)
- Fix style issues (Cathy Hu)
- Transform strings to fstrings (Cathy Hu)
- Remove parantesis around asserts (Cathy Hu)
- Fix style issues (Cathy Hu)
- Adjust number of suse configs in test (Cathy Hu)
- Remove unused variable (Cathy Hu)
- Refactor SUIDPermissionsCheck (Cathy Hu)
- Add tests for SUIDPermissionsCheck (Cathy Hu)
- Add SUIDPermissionsCheck (Cathy Hu)
- Adjust permissions.py to flake8 styleguide (Cathy Hu)
- Add reusable code for permissions check (Cathy Hu)
- Add permissions.d whitelist (Cathy Hu)
- Add error descriptions for SUIDPermissionsCheck (Cathy Hu)
- Move AUDIT_BUG_URL into seperate description file (Cathy Hu)
- Small fixes (Cathy Hu)
- Add dbus error description in test/test_filter.py (Cathy Hu)
- Add suse- prefix to DBusServicesCheck errors (Cathy Hu)
- Add check for ghosts in PAMModulesCheck (Cathy Hu)
- Add DBusServicesCheck (Cathy Hu)
- Adjust suse config test config count (Cathy Hu)
- Port world writable whitelist (Cathy Hu)
- Port device files whitelistings (Cathy Hu)
- Port cron whitelists (Cathy Hu)
- Revert "Add rc* compat simlink checking wrt #227" (Martin Liska)
- test_file_digest: adjust test to new description message (Matthias Gerstner)
- descriptions: add descriptions for new FileDigest and FileMetadata based checks (Matthias Gerstner)
- Correct filter in WorldWritableCheck. (Martin Liska)
- Add 2 FileMetadataCheck checks. (Martin Liska)
- tests: add tests with better coverage of FileDigestsCheck (Matthias Gerstner)
- Add --permissive by default for now. (Martin Liska)
- Automatically load rpmlintrc files. (Martin Liska)
- Add one test_file_digest test that uses FakePkg. (Martin Liska)
- Skip test_systemd_install.py on Fedora distro. (Martin Liska)
- Replace assert with an exception in FileDigestCheck. (Martin Liska)
- Add FileDigestCheck. (Martin Liska)
- Ignore obs:// prefix in invalid-url check (#557). (Martin Liska)
- Never print rpm2cpio stderr. (Martin Liska)
- Add SUSE-specific checks to scoring. (Martin Liska)
- Enable opensuse branch checks. (Martin Liska)
- Branding policy check #371 (Tomáš Chvátal)
- KMP Check #371 (Tomáš Chvátal)
- Add rc* compat simlink checking wrt #227 (Tomáš Chvátal)
- Add FilelistCheck from openSUSE/rpmlint-checks (#227). (Martin Liska)
- Add SystemdInstallCheck from openSUSE/rpmlint-checks (#227). (Martin Liska)
- Add SUSE version checks in spec files (#292). (Martin Liska)</changelog>
</package>
<package pkgid="d1ebf148fc30e3d866b53c52b1fe4c90576b1312b50888423ca9681d4e459abd" name="rpmlint" arch="src">
  <version epoch="0" ver="2.9.0" rel="0.20260528123302100541.opensuse.1108.g2490edb3.suse.tw"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.9.0-0.20260528123302100541.opensuse.1108.g2490edb3" date="1779969600">- dbus-services: whitelist qSnapper (bsc#1261537) (Matthias Gerstner)
- zypper-plugins: added pqcverification-zypp-plugin whitelisting (bsc#1265207) (Mislav Bozicevic)
- Bump github/codeql-action from 4.35.2 to 4.36.0 (dependabot[bot])
- BuildRootAndDateCheck: Convert date errs to warning (Daniel Garcia Moreno)
- dbus-services: added wall-broadcaster whitelisting (bsc#1263701) (Mislav Bozicevic)
- permissions-whitelist: merge postfix and postfix-bdb sections (Matthias Gerstner)
- permissions-whitelist: adjust postfix paths (bsc#1264563) (Matthias Gerstner)
- permissions-whitelist: drop no longer used texlive-filesystem entry (Matthias Gerstner)
- systemd-tmpfiles whitelist: add google-guest-oslogin dirs (bsc#1261275) (Matthias Gerstner)
- dbus-services: updated kdenetwork-filesharing whitelisting (bsc#1262258) (Mislav Bozicevic)
- FileDigestCheck: some more harmonization and type annotation (Matthias Gerstner)
- test: FileDigestCheck: verify only files from the same group are allowed (Matthias Gerstner)
- FileDigestCheck: operate on digest groups, not on a global view (Matthias Gerstner)
- FileDigestCheck: refactoring (Matthias Gerstner)
- opensuse.toml: fix typo (Matthias Gerstner)
- Bump github/codeql-action from 4.35.1 to 4.35.2 (dependabot[bot])
- test: add test coverage for PermissionsParser in SUIDPermissionsCheck (Matthias Gerstner)
- pkg.py: FakePkg.add_file_with_content(): support custom file mode (Matthias Gerstner)
- PermissionsParser: fix parse error when spaces occur between package names (bsc#1262166) (Matthias Gerstner)
- dbus-services: systemd v260 (bsc#1259318) (Wolfgang Frisch)
- Update openSUSE's licenses.toml (Dominique Leuenberger)
- Update openSUSE's licenses.toml (Dominique Leuenberger)
- systemd-tmpfiles: whitelist snapd snap-private-tmp (bsc#1261739) (Matthias Gerstner)
- Fix: Add sysusers.d to usrlibbinaryexception (Ulrik Haugen)
- SpecCheck: Fix typo in the 'no-%check-section' explanation (Yunus Acar)
- cli: Allow usage of --strict option (Daniel Garcia Moreno)
- Bump github/codeql-action from 4.34.1 to 4.35.1 (dependabot[bot])
- test: Add PKG-INFO to egg-info mocks for Python 3.15 compatibility (Miro Hrončok)
- polkit-rules-whitelist: add cosmic-settings-daemon kbd layout rule (bsc#1259403) (Matthias Gerstner)
- polkit-rules-whitelist: add cosmic-settings wheel/sudoers rules (bsc#1259402) (Matthias Gerstner)
- Reorder param doc rpmlint/checks/TagsCheck.py (danigm)
- test: Add more tests for dependencies (Daniel Garcia Moreno)
- test: Add tests for SELinuxIndependentModuleCheck (Daniel Garcia Moreno)
- TagsCheck: Reorder is_devel and is_source parameters (Daniel Garcia Moreno)
- Add SELinuxIndependentModuleCheck to test_lint.py (Cathy Hu)
- Set scoring for selinux-incorrect-if-file-location (Cathy Hu)
- Add check for SELinux Independent Modules (Cathy Hu)
- SignatureCheck: Fix _check_no_signature for rpm v6 (Daniel Garcia Moreno)
- Bump github/codeql-action from 4.32.6 to 4.34.1 (dependabot[bot])
- SourceCheck: update string format pyupgrade --py38-plus (Daniel Garcia Moreno)
- SourceCheck: update string format pyupgrade --py38-plus (Daniel Garcia Moreno)
- Fix: #1478: Use regex for file(1) magic matching; add .zip and .zstd support (Коренберг Марк)
- Bump github/codeql-action from 4.32.4 to 4.32.6 (dependabot[bot])
- dbus-services: systemd v259 (bsc#1255368) (Wolfgang Frisch)
- permissions-whitelist: adjust sendmail to systemd-tmpfiles (bsc#1256160) (Matthias Gerstner)
- world-writable-whitelist: drop sendmail /var/spool/mail (bsc#bsc#1256160) (Matthias Gerstner)
- dbus-services: update rtkit D-Bus whitelisting (bsc#1258681) (Matthias Gerstner)
- Fix rpmdiff flags (Daniel Garcia Moreno)
- Bump github/codeql-action from 4.32.3 to 4.32.4 (dependabot[bot])
- dbus-services: update thermald whitelisting (bsc#1258704) (Matthias Gerstner)
- dbus-services: whitelist intel-lpmd (bsc#1255977) (Matthias Gerstner)
- dbus-services: whitelist gnome-remote-desktop version 50 (bsc#1258407) (Matthias Gerstner)
- tests: adjust expected output for missing-call-to-setgroups-before-setuid (Matthias Gerstner)
- BinariesCheck: fix logic for missing-call-to-setgroups-before-setuid (Matthias Gerstner)
- systemd-tmpfiles: whitelist postfix spool directory (bsc#1258381) (Matthias Gerstner)
- test: Add more cases for the man page check (Daniel Garcia Moreno)
- FilesCheck: fix man_base_regex (danigm)
- Bump github/codeql-action from 4.32.2 to 4.32.3 (dependabot[bot])
- FilesCheck: fix manpage regex to support numbers (Daniel Garcia Moreno)
- whitelistings: add gdm-50 D-Bus and Polkit changes (bsc#1258025) (Matthias Gerstner)
- dbus-services: remove no longer necessary gdm.conf compatibility entry (Matthias Gerstner)
- SUIDPermissionsCheck: support permissions package coupling (Matthias Gerstner)
- systemd-tmpfiles: whitelist libpulp-tools (bsc#1257865) (Matthias Gerstner)
- polkit-rules-whitelist: add run0-wrappers rules (bsc#1254446) (Matthias Gerstner)
- dbus-services: systemd v258.3 (bsc#1257388) (Wolfgang Frisch)
- scoring: Raise forbidden-controlchar-found to 10k (Daniel Garcia Moreno)
- systemd-tmpfiles: drop pcfclock whitelisting (Matthias Gerstner)
- sysctl-whitelist: drop unnecessary Kubernetes entry (Matthias Gerstner)
- sysctl-whitelist: drop libvirt userfault fd config (Matthias Gerstner)
- sudoers-whitelist: add servicetray (bsc#1257103) (Matthias Gerstner)
- sudoers-whitelist: add sudo-policy drop-in configuration files (bsc#1257092) (Matthias Gerstner)
- sudoers-whitelist: adjust aeon/kalpa whitelistings to /usr/etc (Matthias Gerstner)
- sudoers-whitelist: include /usr/etc/sudoers.d (Matthias Gerstner)
- systemd-tmpfiles: migrate texlive (bsc#1256841) (Wolfgang Frisch)
- SystemdTmpfilesCheck: handle arguments with spaces (Wolfgang Frisch)
- polkit-rules-whitelist: add InputPlumber (bsc#1249149) (Matthias Gerstner)
- dbus-services: whitelist InputPlumber (bsc#1249149) (Matthias Gerstner)
- dbus-services: whitelist tlp-pd (bsc#1254768) (Matthias Gerstner)
- dbus-services: replace nodigests entries with digests entries (bsc#1215247) (Matthias Gerstner)
- dbus-services whitelist: drop invalid paths from nodigests entries (Matthias Gerstner)
- polkit-rules-whitelist: add systemd-259 empower.rules (bsc#1255368) (Matthias Gerstner)
- dbus-services: whitelist bootkitd (bsc#1256421) (Matthias Gerstner)
- systemd-tmpfiles: whitelist sendmail spool directory (bsc#1256160) (Matthias Gerstner)
- systemd-tmpfiles: whitelist dracut /boot/dracut cleanup entry (bsc#1256380) (Matthias Gerstner)
- dbus-services: whitelist snapd (bsc#1256175) (Wolfgang Frisch)
- configs/openSUSE: whitelist Foomuuri D-Bus and sysctl files (bsc#1254385) (Matthias Gerstner)
- systemd-tmpfiles: add aaa_base /var/adm dirs (bsc#1255794) (Matthias Gerstner)
- DBusPolicyCheck: Catch unsafe wildcard allow lists in policies (bsc#1215247) (Matthias Gerstner)
- permissions-whitelist: update postfix (bsc#1254597) (Wolfgang Frisch)
- pam-modules whitelist: fix account-utils glob pattern (Matthias Gerstner)
- permissions-whitelist: add migrated shadow-pw-mgmt (bsc#1254844) (Matthias Gerstner)
- dbus-services: whitelist smb4k (bsc#1249004) (Matthias Gerstner)
- whitelists: add account-utils PAM modules and permissions.d drop-in file (bsc#1254218) (Matthias Gerstner)
- opensuse.toml: block filters for sudoers-, sysctl- whitelisting errors (Matthias Gerstner)
- Revert "sysctl-whitelist: Support old aaa_base whitelisting" (Filippo Bonazzi)
- permissions: snap-confine (bsc#1248682) (Wolfgang Frisch)
- dbus-services: whitelist lightdm-kde-greeter (bsc#1249146) (Matthias Gerstner)
- polkit-rules-whitelist: extend whitelisting to systemd-mini flavour (Matthias Gerstner)
- sysctl-whitelist: Support old aaa_base whitelisting (Filippo Bonazzi)
- Drop dir-or-file-outside-snapshot badness to zero for now (bsc#1253008) (Filippo Bonazzi)
- lint: Fix rpmlintrc option parsing (Daniel Garcia Moreno)
- sysctl-whitelist: whitelist new default hiding of dmesg (bsc#1249686) (Johannes Segitz)
- sysctl-whitelist: add health-checker panic=5 (bsc#1252778) (Matthias Gerstner)
- systemd-tmpfiles: whitelist custom Samba printer spool dir (bsc#1251267) (Matthias Gerstner)
- dbus-services: whitelist systemd-homed v258 changes (bsc#1250884) (Matthias Gerstner)
- polkit-rules-whitelist: add systemd v258 example file (bsc#1250844) (Matthias Gerstner)
- whitelistings: remove outdated GNOME entries (Matthias Gerstner)
- Synced /var/spool/mail entry with Factory filesystem package. (Mislav Bozicevic)
- whitelistings: add new GNOME49 D-Bus/Polkit digests (bsc#1248881, bsc#1249067, bsc#1248979) (Matthias Gerstner)
- scoring: raise badness for logrotate-user-writable-log-dir (bsc#1245961) (Matthias Gerstner)
- word-writable-whitelist: remove postfix-bdb /var/spool/mail no longer packaged (Matthias Gerstner)
- pam-modules: drop pam_csync no longer packaged in Factory (Matthias Gerstner)
- dbus-services: drop passim which never reached Factory (Matthias Gerstner)
- dbus-services: drop rebootmgr (is now using varlink) (Matthias Gerstner)
- dbus-services: drop no longer needed deepin whitelistings (Matthias Gerstner)
- Added the SMTP Daemon (_smtpd) and the SMTPD Queue (_smtpq) users and groups for OpenSMTPD. (Mislav Bozicevic)
- systemd-tmpfiles whitelist: additional dir for nix (bsc#124616) (Matthias Gerstner)
- polkit-rules-whitelist: add sssd realmd rules (bsc#1245697) (Matthias Gerstner)
- Fix libgpiod whitelisting package name (bsc#1244702) (Filippo Bonazzi)
- dbus-services: whitelist libgpiod (bsc#1244702) (Wolfgang Frisch)
- BinariesCheck: also consider /usr/etc (Matthias Gerstner)
- LogrotateCheck: consider configuration files in /usr/etc; add badness (Matthias Gerstner)
- sysctl-whitelist: properly document the most recent review bug (Matthias Gerstner)
- configs/openSUSE/users-groups.toml: add user opencloud-server (Johannes Kastl)
- configs/openSUSE/users-groups.toml: add group opencloud-server (Johannes Kastl)
- sysctl-whitelist: adjust 50-coredump.conf digest for systemd (bsc#1243959) (Matthias Gerstner)
- Update users-groups.toml redis (Илья Индиго)
- permissions-whitelist: add exim drop-in file (bsc#1240755) (Matthias Gerstner)
- SUIDPermissionsCheck: Check for permctl instead of chkstat (Samuel Cabrero)
- systemd-tmpfiles: add nix socket directory (bsc#1243206) (Matthias Gerstner)
- polkit-rules-whitelist: adjust systemd-network package name (bsc#1242056) (Matthias Gerstner)
- dbus-services: adjust systemd-networkd and systemd-resolved (bsc#1242056) (Matthias Gerstner)
- polkit-rules: whitelist gdm WiFi connection setup rules (bsc#1239719) (Matthias Gerstner)
- dbus-services: whitelist kio-admin (bsc#1229913) (Matthias Gerstner)
- dbus-services: whitelist systemd-sysupdated (bsc#1237106) (Matthias Gerstner)
- dbus-services: whitelist timekpr-next (bsc#1234134) (Wolfgang Frisch)
- dbus-services: adjust iio-sensor-proxy digest (bsc#1236290) (Matthias Gerstner)
- dbus-services: drop no longer needed temporary sssd-dbus entry (Matthias Gerstner)
- dbus-services: adjust sssd-dbus hash (bsc#1235724) (Matthias Gerstner)
- dbus-services: drop RemoteDesktop.service which is no longer packages. (Matthias Gerstner)
- dbus-services: drop no longer packaged kcm_sddm service (Matthias Gerstner)
- dbus-services: drop no longer packages scmon Pkcs11Monitor.conf (Matthias Gerstner)
- dbus-services: tuned-ppd: add new org.freedesktop.UPower names (Matthias Gerstner)
- whitelistings: add sssd permissions drop-in file for helper caps (bsc#1233131) (Matthias Gerstner)
- dbus-services: fix mistake in sddm-kalpa whitelisting (bsc#1232647) (Matthias Gerstner)
- dbus-services: whitelist tuned-ppd (bsc#1232412) (Matthias Gerstner)
- dbus-services: whitelist supergfxctl (bsc#1232776) (Matthias Gerstner)
- polkit-rules-whitelist: adjust package name for sssd (bsc#1230051) (Matthias Gerstner)
- SUIDPermissionsCheck: Escape path for regular expression (Daniel Garcia Moreno)
- dbus-services: whitelist sddm-kalpa (bsc#1232647) (Matthias Gerstner)
- dbus-services: replace generic comment for sddm (Matthias Gerstner)
- false positive: systemd-service-without-service_del_postun (Daniel Garcia Moreno)
- SUIDPermissionsCheck: chkstat to permctl rename (Daniel Garcia Moreno)
- whitelistings: add libcgroup PAM module and setgid binary (bsc#1231381) (Matthias Gerstner)
- dbus-services: deepin-system-monitor (bsc#1230018) (Wolfgang Frisch)
- dbus-services: adjust gnome-remote-desktop to version 47 (bsc#1230406) (Matthias Gerstner)
- opensuse: explain pull requests more precisely (Wolfgang Frisch)
- Fix pam-module test binary package (Daniel Garcia Moreno)
- Fix tests with new rpm2cpio command (Daniel Garcia Moreno)
- dbus-services: gdm: temporarily whitelist old version (bsc#1230466) (Wolfgang Frisch)
- dbus-services: sssd: temporarily whitelist old version (bsc#1230051) (Wolfgang Frisch)
- sysctl-whitelist: traefik: increase socket buffers (bsc#1230555) (Wolfgang Frisch)
- dbus-services: gdm update (bsc#1230466) (Wolfgang Frisch)
- pam-modules: pam_limits.so moved from `pam` to `pam-extra` (bsc#1230447) (Wolfgang Frisch)
- polkit-rules: add whitelisting for sssd smartcard access (bsc#1230051) (Matthias Gerstner)
- dbus-services: adjust digests for sssd (bsc#1230051) (Matthias Gerstner)
- configs/openSUSE/users-groups.toml: add nqptp (boo#1213060) (Wolfgang Frisch)
- dbus-services: systemd: remove outdated hashes (bsc#1225317) (Wolfgang Frisch)
- sysctl-whitelist: kernel.pid_max entry moved (bsc#1228731) (Wolfgang Frisch)
- Update openSUSE's licenses.toml (Dominique Leuenberger)
- sysctl-whitelist: move 50-coredump.conf to systemd main package (bsc#1226865) (Matthias Gerstner)
- sysctl-whitelist: aaa_base: new sub-package to disable YAMA (bsc#1226460) (Matthias Gerstner)
- sysctl-whitelist: aaa_base: adjust 50-default.conf digest (bsc#1226464) (Matthias Gerstner)
- dbus-services: systemd: keep the old whitelisting temporarily (bsc#1225317) (Wolfgang Frisch)
- dbus-services: whitelist kdeplasma6-addons kameleonhelper (bsc#1226306) (Matthias Gerstner)
- dbus-services: adjust backintime whitelisting to etc-&gt;usr move (bsc#1226446) (Matthias Gerstner)
- whitelistings: systemd v256 (bsc#1225317) (Wolfgang Frisch)
- whitelist valkey (bsc#1226083) (Wolfgang Frisch)
- whitelistings: add gnome-remote-desktop Polkit and D-Bus components (bsc#1222159) (Matthias Gerstner)
- zypper-plugins: adjust permissions-zypp-plugin to new permctl name (Matthias Gerstner)
- dbus-services: remove deepin-api entry until packaging issues are resolved (Matthias Gerstner)
- whitelistings: drop no longer needed KDE5 whitelistings (Matthias Gerstner)
- dbus-services: drop no longer present nfs-ganesha entry (Matthias Gerstner)
- whitelistings: drop no longer needed pam_dbus entries (Matthias Gerstner)
- pam-modules: whitelist pam_oslogin_admin.so (bsc#1222457) (Matthias Gerstner)
- Revert "pam-modules: whitelist pam_lastlog2 now moved to util-linux (bsc#1222329)" (Matthias Gerstner)
- dbus-services: whitelist dnf5daemon-server (bsc#1218327) (Matthias Gerstner)
- pam-modules: whitelist pam_lastlog2 now moved to util-linux (bsc#1222329) (Matthias Gerstner)
- dbus-services: power-profiles-daemon: reinstate legacy D-Bus whitelisting (bsc#1219957) (Matthias Gerstner)
- Revert "dbus-services: Still provide old GDM whitelisting (bsc#1218922)" (Filippo Bonazzi)
- dbus-services: power-profiles-daemon (bsc#1219956) (#1197) (Wolfgang Frisch)
- Bump upper bound of suse_version to include ALP &amp; current Factory (Dan Čermák)
- dbus-services: Still provide old GDM whitelisting (bsc#1218922) (Filippo Bonazzi)
- dbus-services: whitelist sddm-kcm6 (bsc#1217188) (Matthias Gerstner)
- whitelistings: merge redundant systemd vs. systemd-mini entries (Matthias Gerstner)
- pam-modules: also whitelisted pam_system_loadkey for systemd-mini (bsc#1220249) (Matthias Gerstner)
- dbus-services: adjust gdm whitelisting (bsc#1218922) (Matthias Gerstner)
- dbus-services: whitelist drkonqi KDE6 update (bsc#1220190) (Matthias Gerstner)
- pam-modules: whitelist pam_systemd_loadkey.so (bsc#1220249) (Matthias Gerstner)
- dbus-services: whitelist kde-inotify-survey with KDE6 changes (bsc#1217191) (Matthias Gerstner)
- dbus-services whitelist: adjust kde6 digests after fix in kauth6 (bsc#1220215) (Matthias Gerstner)
- dbus-services: update systemd-homed (DeactivateAllHomes method, bsc#1219916) (Matthias Gerstner)
- dbus-services: whitelist plasma6-workspace fontinst service (bsc#1217186) (Matthias Gerstner)
- dbus-services: whitelist powerdevil6 (bsc#1217187) (Matthias Gerstner)
- dbus-services: whitelist plasma6-disks (bsc#1217185) (Matthias Gerstner)
- dbus-services: whitelist plasma6-desktop kcmclock (bsc#1217184) (Matthias Gerstner)
- pam-modules: whitelist pam_kwallet6 (bsc#1217183) (Matthias Gerstner)
- dbus-services: whitelist libksysguard6-plugins (bsc#1217182) (Matthias Gerstner)
- zypper-plugins: adjust libzypp-plugin-appdata to new content (bsc#1219873) (Matthias Gerstner)
- dbus-services: whitelist kinfocenter6 (bsc#1217179) (Matthias Gerstner)
- dbus-services: whitelist kf6-kauth (bsc#1217178) (Matthias Gerstner)
- SUIDPermissionsCheck: support new /usr/share/permissions/packages.d dir (Matthias Gerstner)
- SystemIstallCheck: Allow %service_del_postun_without_restart macro usage (Daniel Garcia Moreno)
- sysctl-whitelist: update YAMA config (bsc#1219656) (Wolfgang Frisch)
- users-groups: add groups for usbauth-notifier (Wolfgang Frisch)
- cron-whitelist: patch2mail now uses systemd-timers (Wolfgang Frisch)
- Register greeter user and group (Filippo Bonazzi)
- pam-modules: whitelist pam_canonicalize_user (bsc#1219358) (Matthias Gerstner)
- sendmail: permissions moved from /etc to /usr/share/permissions (bsc#1219339) (Wolfgang Frisch)
- sendmail: permissions moved from /etc to /usr/share/permissions (bsc#1219339) (Wolfgang Frisch)
- test_file_digest: cover new glob features in package and path names (Matthias Gerstner)
- sysctl-whitelist: use new package glob pattern (Matthias Gerstner)
- FileDigestCheck: support glob patterns in package names (Matthias Gerstner)
- FileDigestCheck: make glob patterns in filenames explicit (Matthias Gerstner)
- sysctl-whitelist: add another package name for kubernetes1.29 (bsc#1219168) (Matthias Gerstner)
- check: Implement reset method in checks (Daniel Garcia Moreno)
- Fix digester for cronie whitelisting (bsc#1218756) (Filippo Bonazzi)
- cron-whitelist: adjust cronie-anacron again (bsc#1218756) (Matthias Gerstner)
- systemd-tmpfiles whitelist: adjust package name for libtss-fapi (Callum Farmer)
- dbus-services: certmonger: .conf renamed (bsc#1218616) (Wolfgang Frisch)
- pam-modules: separate standard PAM module that have been already reviewed (Matthias Gerstner)
- cron-whitelist: update cronie-anacron digest (bsc#1218107) (Matthias Gerstner)
- SUIDPermissionsCheck: fix broken warnings and harmonize code (Matthias Gerstner)
- Fix Aeon/Kalpa whitelisting distinct filenames (bsc#1217706, bsc#1217707) (Filippo Bonazzi)
- polkit rules whitelisting: add gamemode rules (bsc#1217915) (Matthias Gerstner)
- polkit-rules, sudoers: add plasma-branding-Kalpa for special wheel group handling (bsc#1217707, bsc#1217706) (Matthias Gerstner)
- cron-whitelist: remove obsolete opa-ff entries (Wolfgang Frisch)
- cron-whitelist: remove obsolete logdigest entries (Wolfgang Frisch)
- FileDigestCheck: Filter minor versions in shebangs. (Wolfgang Frisch)
- polkit-rules-whitelist: self auth as admin (bsc#1215652) (Wolfgang Frisch)
- polkit-rules-whitelist: self auth as admin (bsc#1215652) (Wolfgang Frisch)
- pam-modules: remove no longer packaged pam_oslogin_admin.so (Matthias Gerstner)
- cron-whitelist: remove tmpwatch which migrated to systemd timers (bsc#1115458) (Matthias Gerstner)
- cron-whitelist: drop sarg which as been replaced by systemd timers (Matthias Gerstner)
- pam-modules: whitelist pam-himmelblau (bsc#1215355) (Matthias Gerstner)
- dbus-services: whitelist passim service (bsc#1216434) (Matthias Gerstner)
- CI: Add systemd-rpm-macros package (Daniel Garcia Moreno)
- zypper-plugins: whitelist zypp-boot-plugin (bsc#1215988) (Matthias Gerstner)
- dbus-services: adjust to etc -&gt; usr move in thermald (bsc#1215873) (Matthias Gerstner)
- dbus-services: remove obsolete entry for sysprof (Wolfgang Frisch)
- Whitelist dbus service and configuration for policycoreutils-dbus (bsc#1213435) (Filippo Bonazzi)
- polkit-rules-whitelist: add fudo rules (bsc#1215948) (Matthias Gerstner)
- Add whitelisting for 90-kubeadm.conf (bsc#1215542) (Filippo Bonazzi)
- sysctl-whitelist: remove old microos-tools entry (Wolfgang Frisch)
- dbus-services: sddm-qt6 whitelisting (bsc#1215441) (Wolfgang Frisch)
- dbus-services: update tukitd (bsc#1215216) (Wolfgang Frisch)
- polkit, sudoers whitelist: add gnome-branding-Aeon (bsc#1215276) (Matthias Gerstner)
- FileDigestCheck: do not use hash as variable name (Daniel Garcia Moreno)
- FileDigestCheck: Adapt fstrings to python3.12 check (Daniel Garcia Moreno)
- dbus-services: keep old deepin names around until rename is complete (bsc#1214101) (Matthias Gerstner)
- whitelists: adjust package for systemd-homed components (bsc#1213692) (Matthias Gerstner)
- Add missing dependency to rpmlint spec (Dan Čermák)
- Update search regexes for %service_* macros (Dan Čermák)
- Don't skip systemd scriptlet test on Fedora (Dan Čermák)
- Improve systemd scriptlet test name (Dan Čermák)
- bsc#1213292: adjust timesync1 dbus whitelisting (Filippo Bonazzi)
- dbus-services: drop whitelisting that was never put into production (Matthias Gerstner)
- cron-whitelist: drop dead suse-texlive entry (Matthias Gerstner)
- pam-modules: drop dead pam_opie entry (sr#1065964) (Matthias Gerstner)
- dbus-services: drop no longer needed dinstaller services (bsc#1208394) (Matthias Gerstner)
- dbus-services: remove no longer packaged mumble-server (bsc#1209338) (Matthias Gerstner)
- dbus-services: rename com.deepin.api to org.deepin.dde (bsc#1211376) (Matthias Gerstner)
- sudoers-whitelist: adjust monitoring-plugins-smart (bsc#1211003) (Matthias Gerstner)
- sysctl-whitelist: add kubernetes1.27 (bsc#1210951) (Wolfgang Frisch)
- port to get_tested_path instead of testpath (Martin Liska)
- pam-modules: whitelist pam_wtmpdb (bsc#1209963) (Matthias Gerstner)
- pam-modules: Move pam_timestamp, pam_issue and pam-userdb (bsc#1210371) (Johannes Segitz)
- flake8: fix C419 Unnecessary list comprehension passed to any() prevents short-circuiting (Martin Liska)
- dbus-services: add libproxy whitelisting (bsc#1209376) (Matthias Gerstner)
- pytest: use tmp_path mock instead of tmpdir (Martin Liska)
- pam-module whitelist: add lastlog2 (bsc#1209238) (Wolfgang Frisch)
- Fix TW CI due to the new flake8 release. (Martin Liska)
- sysctl-whitelist: add further kubernetes versions (bsc#1209363) (Matthias Gerstner)
- SpecCheck: allow more %suse_version value comparisons (Jan Engelhardt)
- d-bus services: add kde-inotify-survey (bsc#1208689) (Wolfgang Frisch)
- Add missing newline at the end of TOML files. (Martin Liska)
- polkit-rules-whitelist: adjust libvirt-daemon rule to new sub-package (bsc#1208876) (Matthias Gerstner)
- DbusPolicyCheck: use existing dbus-policy-missing-allow (Matthias Gerstner)
- openSUSE/users-groups: kismet (bsc#1207654) (Wolfgang Frisch)
- dbus-service: adjust sssd-dbus infopipe whitelisting to /usr (bsc#1207586) (Matthias Gerstner)
- d-bus services: adjust NetworkManager-fortisslvpn from /etc to /usr (Wolfgang Frisch)
- dbus-services: adjust pulseaudio to new /usr path (bsc#1207584) (Matthias Gerstner)
- SymlinkExceptions: also exclude systemd-mini (Matthias Gerstner)
- FileDigestCheck: allow multiple package names in ghost/symlink exceptions (Matthias Gerstner)
- FileDigestCheck: support exceptions to symlink restrictions (Matthias Gerstner)
- Revert "temporarily drop badness for sysctl-file-* errors" (Matthias Gerstner)
- temporarily drop badness for sysctl-file-* errors (Martin Liska)
- openSUSE: new whitelisting restriction for sysctl drop-in files (bsc#1174722) (Matthias Gerstner)
- zypper-plugins whitelist: adjust libzypp-plugin-appdata (bsc#1206836) (Matthias Gerstner)
- Update D-Bus whitelisting for NetworkManager-libreswan (bsc#1206757) (Wolfgang Frisch)
- zypper-plugins: complement test whitelisting by a mismatching entry (Matthias Gerstner)
- Update openSUSE's licenses.toml (Pi-Cla)
- Franklin Street address is ok (Benson Muite)
- openSUSE: new whitelisting restriction for zypper plugins (bsc#1204314) (Matthias Gerstner)
- Update D-Bus whitelisting for NetworkManager-iodine (bsc#1206756) (Wolfgang Frisch)
- Files in /etc/pam.d/ should be moved to /usr (Stefan Schubert)
- pam-modules: pam_unix: adjust package name to pam (bsc#1206485) (Matthias Gerstner)
- dbus-services: sddm: adjust to configuration file moved from /etc to /usr/share (Matthias Gerstner)
- dbus-services: whitelist transaction-update-notifier (bsc#1206163) (Matthias Gerstner)
- dbus-services: /etc -&gt; /usr move for lightdm whitelisting (bsc#1205939) (Matthias Gerstner)
- pam-modules whitelist: add pam_saslauthd (bsc#1205459) (Matthias Gerstner)
- dbus-services: whitelist experimental YaST installer D-Bus backend (bsc#1202059) (Matthias Gerstner)
- Remove Python entries from Filelist checks. (Daniel Garcia Moreno)
- SpecCheck: Add python_sitelib glob check (Martin Liska)
- dbus-service whitelist: move NetworkManager-openconnect to /usr (bsc#1204795) (Matthias Gerstner)
- Whitelist /var/spool/mail in postfix-bdb (bsc#1179574) (Peter Varkoly)
- dbus-services: document recent follow-up review of cups helpers (Matthias Gerstner)
- FileDigestCheck: print digest hint for all possible filter types (Matthias Gerstner)
- geoclue2: move dbus system.d file to /usr (bsc#1204054) (Filippo Bonazzi)
- iio-sensor-proxy: move dbus system.d file to /usr (bsc#1204055) (Filippo Bonazzi)
- gdm: move dbus system.d file to /usr (bsc#1204052) (Filippo Bonazzi)
- sendmail: whitelisting for new systemd-tmpfiles entries for /run, /run/sendmail (bsc#1203340) (Paolo Perego)
- Fix flake8 issue. (Martin Liska)
- Fix test. (Martin Liska)
- dbus-services: adjust tuned entry to path move to /usr (bsc#1202339) (Matthias Gerstner)
- dbus-services: autofs: file digests (bsc#1203362) (Wolfgang Frisch)
- fix bugzilla url as novell.com is dead (Martin Liska)
- dbus-services: autofs: move from /etc to /usr (Wolfgang Frisch)
- Whitelist /var/spool/mail in postfix, sendmail and exim (bsc#1179574) (Ludwig Nussel)
- dbus-services: adjust/extend kdiskmark whitelisting (bsc#1202725) (Matthias Gerstner)
- Increase badness for missing-hash-section check. (Martin Liska)
- dbus-services: whitelist systemd-experimental: systemd-oomd (bsc#1202454) (Matthias Gerstner)
- dbus-services: adjust to system-config-printer /etc -&gt; /usr move (bsc#1202340) (Matthias Gerstner)
- dbus-services: adjust to cups-pk-helper /etc -&gt; /usr move (bsc#1202338) (Matthias Gerstner)
- Whitelist gromox (bsc#1200165) (Filippo Bonazzi)
- resolve some flake8 simplify issues (Martin Liska)
- Port 2 usages of toml library to tomli. (Martin Liska)
- Port TOML configs to tomli library (Martin Liska)
- dbus-services: really adjust location from etc -&gt; usr (Matthias Gerstner)
- Revert "Add temporary workaround for systemd package." (Martin Liska)
- Add skipping capability for openSUSE rpmlint package. (Martin Liska)
- digest whitelists: remove now redundant sha256 algorithm specification (Matthias Gerstner)
- FileDigestCheck: use sha256 digest algorithm by default (Matthias Gerstner)
- dbus-services: adjust to PackageKit etc -&gt; usr config file move (bsc#1201347) (Matthias Gerstner)
- dbus-services: adjust to cups etc -&gt; usr config file move (bsc#1201346) (Matthias Gerstner)
- dbus-services: adjust to avahi etc -&gt; usr config file move (bsc#1201345) (Matthias Gerstner)
- whitelistings: fill in some missing metadata (Matthias Gerstner)
- Improve syntax validation for digests. (Martin Liska)
- systemd-tmpfiles: drop version from libtss2-fapi1 filename (Matthias Gerstner)
- Add temporary workaround for systemd package. (Martin Liska)
- Fix dbus-services config file. (Martin Liska)
- dbus-services: adjust power-profiles-daemon to new path (bsc#1201125) (Matthias Gerstner)
- systemd-tmpfiles whitelisting: also ignore -mini variants of systemd and udev (Matthias Gerstner)
- dbus-services: move wpa_supplicant.conf to /usr (Wolfgang Frisch)
- dbus-services: move dnsmasq.conf to /usr (Wolfgang Frisch)
- systemd-tmpfiles check: raise badness to 10000 for strict config (Matthias Gerstner)
- systemd-tmpfiles: whitelist currenty set of affected packages (Matthias Gerstner)
- SystemdTmpfilesCheck: compare normalized lines for whitelistings (Matthias Gerstner)
- polkit-rules: whitelist geoclue (bsc#1199767) (Matthias Gerstner)
- Report binary in shlib-policy-name-error error (Martin Liska)
- Remove extra prints from tests. (Martin Liska)
- dbus-services: whitelist kinfocenter5 (bsc#1199735) (Wolfgang Frisch)
- SystemdTmpfilesCheck: add additional unit test for parsing logic (Matthias Gerstner)
- SystemdTmpfilesCheck: fix invalid member accesses (Matthias Gerstner)
- tests: add coverage for new SystemdTmpfilesCheck (Matthias Gerstner)
- pkg.py: FakePkg: support addition of ghost files (Matthias Gerstner)
- SystemdTmpfilesCheck: new check to restrict systemd-tmpfiles configuration (Matthias Gerstner)
- dbus-services: adjust bluez whitelisting to /usr (bsc#1199207) (Matthias Gerstner)
- Fix wrong git merge conflict resolution. (Martin Liska)
- dbus-services: update tukitd config hash to latest reviewed version (bsc#1196149 bsc#1197810 (Wolfgang Frisch)
- dbus-services: remove dead gypsy whitelisting (Matthias Gerstner)
- dbus-services.toml: adjust whitelisting for switcheroo-control (bsc#1199065) (Matthias Gerstner)
- Remove empty line after loop. (Martin Liska)
- dbus-services: remove gconf-polkit entry which is no longer shipped in Factory (Matthias Gerstner)
- sudoers-whitelist: add another integration test whitelisting entry (Matthias Gerstner)
- sudoers whitelist: add preliminary ceph whitelisting (bsc#1196141) (Matthias Gerstner)
- Port opensuse checks. (Martin Liska)
- sudoers whitelist: add test entry for rpmlint-integration-test OBS package (Matthias Gerstner)
- new whitelist restriction for /etc/sudoers.d (bsc#1172785) (Matthias Gerstner)
- dbus-services: whitelist usbguard (bsc#1196621) (Matthias Gerstner)
- dbus-services: add missing config whitelist for tukitd (bsc#1196149) (Johannes Segitz)
- dbus services: adjust to accountsservice path move (bsc#1197354) (Matthias Gerstner)
- dbus services: NetworkManager-vpnc config locations (bsc#1197053) (Matthias Gerstner)
- dbus services: adjust NetworkManager-pptp config locations (bsc#1197054) (Matthias Gerstner)
- test_whitelist_syntax: extend the check to cover also digest entry structure (Matthias Gerstner)
- dbus whitelist: fix nodigests whitelisting, should contain the path (Matthias Gerstner)
- D-Bus whitelistings: kpmcore: don't couple service file to digest (Matthias Gerstner)
- D-Bus services whitelist: add kpmcore (bsc#1178848) (Matthias Gerstner)
- dbus-services whitelist: add test whitelisting to cover dbus-file-parse-error (Matthias Gerstner)
- tests: add test that verifies security whitelisting syntax (Matthias Gerstner)
- security whitelistings: harmonize bug list syntax (Matthias Gerstner)
- FileDigestCheck: configure digest filter type per whitelisting entry (Matthias Gerstner)
- FileDigestCheck: also assert that a path key is present (Matthias Gerstner)
- dbus-services: adjust nm-priv-helper path (bsc#1194799) (Matthias Gerstner)
- pam-modules: whitelist pam-fscrypt (bsc#1195623) (Matthias Gerstner)
- dbus-services: whitelist nvme-stas (bsc#1195236) (Matthias Gerstner)
- FileDigestCheck: enable XML filtered digests for D-Bus services (Matthias Gerstner)
- FileDigestCheck: emit special {group}-file-parse-error if XML is bad (Matthias Gerstner)
- dbus-services: whitelist tukitd (bsc#1196149) (Wolfgang Frisch)
- dbus-services: whitelist kcron helper (Thomas Leroy)
- dbus-services: adjust ModemManager path (bsc#1196170) (Matthias Gerstner)
- dbus-services: fix wrongly named note field (Matthias Gerstner)
- Speed up FileDigestCheck. (Martin Liska)
- Revert "Speed up FileDigestCheck." (Martin Liška)
- Speed up FileDigestCheck. (Martin Liska)
- FileDigestCheck: implement support for file digest filtering (Matthias Gerstner)
- tests: add test case for FileDigestGroup with multiple package names (Matthias Gerstner)
- FileDigestCheck: support additional `packages = ["pkg1", "pkg2"]` syntax (Matthias Gerstner)
- FileDigestCheck: refactor digest group parsing and normalization (Matthias Gerstner)
- FileMetadataCheck: support additional `packages = ["pkg1", "pkg2"]` syntax (Matthias Gerstner)
- whitelists: replace accidentally added tabs by spaces (Matthias Gerstner)
- pam-modules: remove now outdated entry for modules that moved into pam_unix (Matthias Gerstner)
- dbus-services: whitelist NetworkManager nm-priv-helper (bsc#1194799) (Matthias Gerstner)
- pam module whitelist: adjust package name for pam_winbind (bsc#1194573) (Matthias Gerstner)
- fix connman-nmcompat whitelisting (bsc#1192827) - resides in a sub-package (Matthias Gerstner)
- Make missing-call-to-setgroups-before-setuid only warning. (Martin Liska)
- dbus-services whitelist: add connman nm compatibility interface (bsc#1192827) (Matthias Gerstner)
- Sort input .rpm files so that the output is stable. (Martin Liska)
- dbus-services: fix package name for setroubleshoot entries (Matthias Gerstner)
- duplicate postfix entry for postfix-bdb, whitelistings are tied to pacakges in rpmlint2 and need to be there for every package (Johannes Segitz)
- polkit-rules-whitelist: follow-up whitelisting for gnome-initial-setup (bsc#1192542) (Matthias Gerstner)
- dbus-services: add setroubleshoot whitelisting (bsc#1186344) (Matthias Gerstner)
- permissions-whitelist: update texlive-filesystem digests (Matthias Gerstner)
- permissions-whitelist: update sendmail digests (Matthias Gerstner)
- dbus-services: adjust wicked whitelisting to new paths (bsc#1192033) (Matthias Gerstner)
- security whitelistings: test whitelistings for file-digest-mismatch errors (Matthias Gerstner)
- scoring.toml: fix alphabetical order of permissions-file errors (Matthias Gerstner)
- security whitelistings: add badness for file-digest-mismatch errors (Matthias Gerstner)
- Fix -r argument. (Martin Liska)
- opensuse.toml: add permissions-parse-error to BlockedFilters (Matthias Gerstner)
- dbus-services: adjust digest for test whitelisting (need a different file there) (Matthias Gerstner)
- polkit-rules-whitelist: fix package name for test whitelisting (Matthias Gerstner)
- Whitelisting pam_u2f module (bsc#1190790) (Paolo Perego)
- Drop badness of shlib-policy-name-error for now. (Martin Liska)
- Adding whitelisting for pam_ssh_agent_auth. bsc#1190983 (Paolo Perego)
- Enable shlib-policy-name-error error. (Martin Liska)
- dbus-services whitelisting: add power-profiles-daemon (bsc#1189900) (Matthias Gerstner)
- security whitelistings: add whitelistings for OBS integration test package (Matthias Gerstner)
- PolkitCheck: be robust against dead symlinks in actions directory (Matthias Gerstner)
- SUIDPermissionsCheck: remove unused permissions-ghostfile error (Matthias Gerstner)
- *-file-ghost descriptions: fix texts that are for some reason incomplete (Matthias Gerstner)
- SUIDPermissionsCheck: be robust against dead symlinks in permissions.d (Matthias Gerstner)
- dbus-services: add oddjob-mkhomedir which got lost during migration (Matthias Gerstner)
- Remove deprecated pam-deprecated entry (Cathy Hu)
- Revert "Skip lto-no-text-in-archive for 2 archives in gcc." (Martin Liska)
- skip %ghost files in SUIDPermissionsCheck. This allows packages to %ghost files that are managed by e.g. tmpfiles.d and rpm -v to work properly (Johannes Segitz)
- Copied additional systemd whitelistings to match systemd-mini (Johannes Segitz)
- systemd-mini also ships pam_systemd.so. Now with the whitelist tied to binary packages it needs its own entry (Johannes Segitz)
- reference correct binary rpm for pam_systemd_home (Johannes Segitz)
- Update pam-modules.toml (Paolo Perego)
- whitelist pam_systemd_home.so for systemd-experimental. This was not audited (Johannes Segitz)
- Remove deprecated entries for filesystem package in world-writable whitelist (Cathy Hu)
- Update opensuse.toml (Paolo Perego)
- Create FileDigestCheck.py (Paolo Perego)
- Update opensuse.toml (Paolo Perego)
- Update FileDigestCheck.py (Paolo Perego)
- Remove malcontent whitelisting for polkit (Cathy Hu)
- Remove storeBackup entry from cron-whitelist.toml (Cathy Hu)
- Rename fprintd to wicked in dbus config (Cathy Hu)
- Sync and fix dbus whitelisting entries (Cathy Hu)
- Add mechanism to whitelist %ghost'ed files that are present in whitelists. This is a rare case and should only be necesary for special packages like polkit-default-privs (Johannes Segitz)
- dbus-services: whitelisting for low-memory-monitor (bsc#1189899) (Matthias Gerstner)
- whitelistings: harmonize bug number prefixes by changing bnc# to bsc# (Matthias Gerstner)
- Skip lto-no-text-in-archive for 2 archives in gcc. (Martin Liska)
- dbus-services whitelist: use correct camel-case package names (Matthias Gerstner)
- pam-modules.toml: remove unnecessary empty bug fields (Matthias Gerstner)
- pam-modules.toml: replace "legacy: not audited" comments where inappropriate (Matthias Gerstner)
- pam-modules whitelist: synchronize from last state in rpmlint 1 (Matthias Gerstner)
- polkit-rules-whitelist: sync with latest state in polkit-default-privs (Matthias Gerstner)
- dbus-services: replace "not audited" comment by more suitable "import" comment (Matthias Gerstner)
- dbus-services whitelist: synchronize with the last state of rpmlint1 (Matthias Gerstner)
- cron-whitelist: cronie: add incremental whitelist for minor change (bsc#1190521) (Matthias Gerstner)
- FileDigestCheck: remove -digest- from error names where unnecessary (Matthias Gerstner)
- FileDigestCheck: remove _check_filetypes only doing one pass over files (Matthias Gerstner)
- scoring-strict: downgrade permissions-missing-postin badness (Matthias Gerstner)
- SUIDPermissionsCheck: ignore static permission entries (Matthias Gerstner)
- FileDigestCheck: print out the encountered digest on unauthorized files (Matthias Gerstner)
- FileDigestCheck: refactor _is_valid_digest() (Matthias Gerstner)
- permissions-suseconfig-obsolete: this was from SLE-11 times, drop remains (Matthias Gerstner)
- openSUSE config: complete BlockedFilters for all mandatory whitelistings (Matthias Gerstner)
- FileDigestCheck: don't follow symlinks where this is not necessary (Matthias Gerstner)
- cleanup: remove suse-dbus-unauthorized-service error / check (Matthias Gerstner)
- errors: remove permissions-unauthorized-file (Matthias Gerstner)
- descriptions: add some missing and improve existing whitelisting errors (Matthias Gerstner)
- scoring: add badness (especially in strict case) for missing whitelistings (Matthias Gerstner)
- Whitelisting checks: make all missing whitelistings errors (Matthias Gerstner)
- PolkitCheck: use new path in /usr/etc by default (Matthias Gerstner)
- Fix coding style of a config file. (Martin Liska)
- KMP policy: support legacy 'packageand' directive in Supplements. (Martin Liska)
- Replace description variable recursively. (Martin Liska)
- Add missing [Scoring] section in TOML file. (Martin Liska)
- Come up with --mini-mode option. (Martin Liska)
- Add tests for globbing (Cathy Hu)
- Rename /usr/lib*/ and /lib* to * (Cathy Hu)
- Migrate pam-modules.toml to FileDigestCheck (Cathy Hu)
- Add globbing for paths used in FileDigestCheck config (Cathy Hu)
- Add tests for nodigests option in FileDigestCheck (Cathy Hu)
- Remove DBusServicesCheck (Cathy Hu)
- Port dbus-service.toml to FileDigestCheck config (Cathy Hu)
- Add compact format for skip algorithm in FileDigestCheck (Cathy Hu)
- Rename scoring-strict.toml using .override. (Martin Liska)
- Add scoring-strict openSUSE config. (Martin Liska)
- Add BlockedFilters. (Martin Liska)
- Update scoring for openSUSE. (Martin Liska)
- Add test for permissions.d whitelisted packages (Cathy Hu)
- Readd permissions.d whitelisting (Cathy Hu)
- Add test for file-digest-mismatch error (Cathy Hu)
- Replace error variable with resetting error_digests (Cathy Hu)
- Rewrite parts of FileDigestCheck (Cathy Hu)
- Remove not needed assert from a test. (Martin Liska)
- Remove deprecated entries in device-files-whitelist.toml (Cathy Hu)
- Remove deprecated bind-chrootenv entry (Cathy Hu)
- Remove entries for deprecated cacti and atop-daemon (Cathy Hu)
- Remove config number check (Cathy Hu)
- Fix opensuse config (Cathy Hu)
- Move opensuse specific checks into opensuse.toml (Cathy Hu)
- Remove found_no feature (Cathy Hu)
- Remove polkit-cant-acquire-privilege add_info (Cathy Hu)
- Remove polkit-cant-acquire-privilege description (Cathy Hu)
- Improve wording in PolkitCheck description (Cathy Hu)
- Rename polkit-unauthorized-privilege to polkit-user-privilege (Cathy Hu)
- Replace found_undef with found_no (Cathy Hu)
- Add comments to PolkitCheck.py (Cathy Hu)
- Fix style issues (Cathy Hu)
- Remove custom package polkit privs check feature (Cathy Hu)
- Change undefined action setting from '??' to 'no' (Cathy Hu)
- Fix descriptions (Cathy Hu)
- Enable PolkitCheck (Cathy Hu)
- Remove descriptions for PolkitCheck that are covered by FileDigestCheck (Cathy Hu)
- Add PolkitCheck descriptions (Cathy Hu)
- Fix style issues (Cathy Hu)
- Fix style issues (Cathy Hu)
- Add Polkit tests (Cathy Hu)
- Fix bugs in PolkitCheck.py (Cathy Hu)
- Fix bug (Cathy Hu)
- Add PolkitCheck (Cathy Hu)
- Adjust cli test (Cathy Hu)
- Add polkit rules whitelist (Cathy Hu)
- Enhance PermissionsEntry constructor (Cathy Hu)
- Move descriptions to Variable.toml (Cathy Hu)
- Fix style issues (Cathy Hu)
- Fix style issues (Cathy Hu)
- Transform strings to fstrings (Cathy Hu)
- Remove parantesis around asserts (Cathy Hu)
- Fix style issues (Cathy Hu)
- Adjust number of suse configs in test (Cathy Hu)
- Remove unused variable (Cathy Hu)
- Refactor SUIDPermissionsCheck (Cathy Hu)
- Add tests for SUIDPermissionsCheck (Cathy Hu)
- Add SUIDPermissionsCheck (Cathy Hu)
- Adjust permissions.py to flake8 styleguide (Cathy Hu)
- Add reusable code for permissions check (Cathy Hu)
- Add permissions.d whitelist (Cathy Hu)
- Add error descriptions for SUIDPermissionsCheck (Cathy Hu)
- Move AUDIT_BUG_URL into seperate description file (Cathy Hu)
- Small fixes (Cathy Hu)
- Add dbus error description in test/test_filter.py (Cathy Hu)
- Add suse- prefix to DBusServicesCheck errors (Cathy Hu)
- Add check for ghosts in PAMModulesCheck (Cathy Hu)
- Add DBusServicesCheck (Cathy Hu)
- Adjust suse config test config count (Cathy Hu)
- Port world writable whitelist (Cathy Hu)
- Port device files whitelistings (Cathy Hu)
- Port cron whitelists (Cathy Hu)
- Revert "Add rc* compat simlink checking wrt #227" (Martin Liska)
- test_file_digest: adjust test to new description message (Matthias Gerstner)
- descriptions: add descriptions for new FileDigest and FileMetadata based checks (Matthias Gerstner)
- Correct filter in WorldWritableCheck. (Martin Liska)
- Add 2 FileMetadataCheck checks. (Martin Liska)
- tests: add tests with better coverage of FileDigestsCheck (Matthias Gerstner)
- Add --permissive by default for now. (Martin Liska)
- Automatically load rpmlintrc files. (Martin Liska)
- Add one test_file_digest test that uses FakePkg. (Martin Liska)
- Skip test_systemd_install.py on Fedora distro. (Martin Liska)
- Replace assert with an exception in FileDigestCheck. (Martin Liska)
- Add FileDigestCheck. (Martin Liska)
- Ignore obs:// prefix in invalid-url check (#557). (Martin Liska)
- Never print rpm2cpio stderr. (Martin Liska)
- Add SUSE-specific checks to scoring. (Martin Liska)
- Enable opensuse branch checks. (Martin Liska)
- Branding policy check #371 (Tomáš Chvátal)
- KMP Check #371 (Tomáš Chvátal)
- Add rc* compat simlink checking wrt #227 (Tomáš Chvátal)
- Add FilelistCheck from openSUSE/rpmlint-checks (#227). (Martin Liska)
- Add SystemdInstallCheck from openSUSE/rpmlint-checks (#227). (Martin Liska)
- Add SUSE version checks in spec files (#292). (Martin Liska)</changelog>
</package>
</otherdata>