whitelistings: add libcgroup PAM module and setgid binary (bsc#1231381)

rpm-software-management · Oct 24, 2024 · de5c2e4 · de5c2e4
1 parent b725184
commit de5c2e4
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/configs/openSUSE/pam-modules.toml b/configs/openSUSE/pam-modules.toml
@@ -566,3 +566,12 @@ bug = "bsc#1215355"
 nodigests = [
     "glob:*/security/pam_himmelblau.so",
 ]
+
+[[FileDigestGroup]]
+package  = "libcgroup-pam"
+note     = "session PAM module that places the login process into a cgroup according to configuration"
+bug      = "bsc#1231381"
+type     = "pam"
+nodigests = [
+    "glob:*/security/pam_cgroup.so",
+]
diff --git a/configs/openSUSE/permissions-whitelist.toml b/configs/openSUSE/permissions-whitelist.toml
@@ -58,3 +58,11 @@ hash = "c4d3d806535c6737a07828ac84e297b87f6a406f6df67c9928c4fac71f47a17d"
 path = "/etc/permissions.d/texlive.texlive"
 hash = "c4d3d806535c6737a07828ac84e297b87f6a406f6df67c9928c4fac71f47a17d"
 
+[[FileDigestGroup]]
+package  = "libcgroup-tools"
+note     = "this is for a setgid binary 'cgexec', running with 'cgred' group privs"
+bug      = "bsc#1231381"
+type     = "permissions"
+[[FileDigestGroup.digests]]
+path     = "/usr/share/permissions/permissions.d/libcgroup"
+hash     = "6d3a669b10b2449484dcad1c6d932f5897666bcbeef2a45d9608ef63a1e43188"