[ubuntu/kinetic-proposed] nova 3:25.0.1+git2022091213.11cb31258f-0ubuntu1 (Accepted)

[Corey Bryant]

nova (3:25.0.1+git2022091213.11cb31258f-0ubuntu1) kinetic; urgency=medium

  * Enable functionality on hardened systems, specifically dealing
    with limited access in /var/lib/nova (LP: #1967956).
    - d/nova-compute-libvirt.postinst, d/nova-compute-kvm.postinst:
      Add libvirt-qemu user to nova group, and add nova user to kvm group.
      This allows the libvirt-qemu user to access /var/lib/nova/ files
      owned by the nova group, and it allows the nova user to access
      /var/lib/nova/ files owned by the kvm group.
    - d/p/change-tempdir-perms-for-libvirt-qemu.patch: Added to allow
      libvirt-qemu user to access tempdir based on nova group membership.
    - d/nova-common.postinst: Set permissions for /var/lib/nova/ files
      to 0640 and directories to 0750, with the exception of
      /var/lib/nova/.ssh/ files, of which we do not want to change
      permissions.
  * New upstream snapshot for OpenStack Zed.
  * d/control: Align (Build-)Depends with upstream.

Date: Mon, 12 Sep 2022 13:27:40 -0400
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/nova/3:25.0.1+git2022091213.11cb31258f-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 12 Sep 2022 13:27:40 -0400
Source: nova
Built-For-Profiles: noudeb
Architecture: source
Version: 3:25.0.1+git2022091213.11cb31258f-0ubuntu1
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Launchpad-Bugs-Fixed: 1967956
Changes:
 nova (3:25.0.1+git2022091213.11cb31258f-0ubuntu1) kinetic; urgency=medium
 .
   * Enable functionality on hardened systems, specifically dealing
     with limited access in /var/lib/nova (LP: #1967956).
     - d/nova-compute-libvirt.postinst, d/nova-compute-kvm.postinst:
       Add libvirt-qemu user to nova group, and add nova user to kvm group.
       This allows the libvirt-qemu user to access /var/lib/nova/ files
       owned by the nova group, and it allows the nova user to access
       /var/lib/nova/ files owned by the kvm group.
     - d/p/change-tempdir-perms-for-libvirt-qemu.patch: Added to allow
       libvirt-qemu user to access tempdir based on nova group membership.
     - d/nova-common.postinst: Set permissions for /var/lib/nova/ files
       to 0640 and directories to 0750, with the exception of
       /var/lib/nova/.ssh/ files, of which we do not want to change
       permissions.
   * New upstream snapshot for OpenStack Zed.
   * d/control: Align (Build-)Depends with upstream.
Checksums-Sha1:
 ac877b5782c6fcceb53e23102fe7b64916e7475e 7029 nova_25.0.1+git2022091213.11cb31258f-0ubuntu1.dsc
 b0a784b8b488323f1c7934e71ca30361da330438 9439299 nova_25.0.1+git2022091213.11cb31258f.orig.tar.gz
 a0e6f1444bf5e3902fabc715dfc66387f7f96bd6 40100 nova_25.0.1+git2022091213.11cb31258f-0ubuntu1.debian.tar.xz
 7f394240deca172ac32fbe8c82d90508c49a10ed 9929 nova_25.0.1+git2022091213.11cb31258f-0ubuntu1_source.buildinfo
Checksums-Sha256:
 26bc3ddc798b32d3e2ca53d3803eacd1a1d43f6f45fd1772b8983a6ae24ab837 7029 nova_25.0.1+git2022091213.11cb31258f-0ubuntu1.dsc
 2be3e5ede33af5b5794523d8547a426c8669cbcd635b52cfa8ad0e1f3fbdde3f 9439299 nova_25.0.1+git2022091213.11cb31258f.orig.tar.gz
 df298e0b46763aa66ab53435f0b18a1e60954ab20a082834bbce757a213c063a 40100 nova_25.0.1+git2022091213.11cb31258f-0ubuntu1.debian.tar.xz
 d646877d8b353d0f59b7277c40d3dcda71574af2c439ce77e231426a60c4aab1 9929 nova_25.0.1+git2022091213.11cb31258f-0ubuntu1_source.buildinfo
Files:
 c4e08d92e95be12dca56c9cf95f0ab9f 7029 net extra nova_25.0.1+git2022091213.11cb31258f-0ubuntu1.dsc
 3261ed0bb4bf3274b2ab58ec9f38c6b4 9439299 net extra nova_25.0.1+git2022091213.11cb31258f.orig.tar.gz
 6b7ff3e459e9609fcac1998271438cd0 40100 net extra nova_25.0.1+git2022091213.11cb31258f-0ubuntu1.debian.tar.xz
 7e0df1be2797309c2668be0c05ccd18f 9929 net extra nova_25.0.1+git2022091213.11cb31258f-0ubuntu1_source.buildinfo
Original-Maintainer: Openstack Maintainers <openstack at lists.launchpad.net>