public inbox for ipfire-scm@lists.ipfire.org
 help / color / mirror / Atom feed
* [git.ipfire.org] IPFire 3.x development tree branch, master, updated. a8a8fc6638fa4a2a4a6810821fcc3d6c843d2861
@ 2023-03-21 18:34 Michael Tremer
  0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2023-03-21 18:34 UTC (permalink / raw)
  To: ipfire-scm

[-- Attachment #1: Type: text/plain, Size: 101736 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 3.x development tree".

The branch, master has been updated
       via  a8a8fc6638fa4a2a4a6810821fcc3d6c843d2861 (commit)
       via  636e102cc400e16aae2a2db990cad7c5c57fd9a1 (commit)
       via  87829961505bf57d0dcaff7638e895c066144ec8 (commit)
       via  6b93b933546d24ab0f8b7ad3646df628789f2b1b (commit)
       via  31bc0a598805a8c3ec29535f52fcc92c4d221895 (commit)
       via  27a002f43ae4cdd20d54cfc50abc0151bdce746d (commit)
       via  85964a3c4b77aa08ab783e13ac14fed52179cee8 (commit)
       via  ebb66ccf61c6b1fc6259bdc36afe60a631e159d6 (commit)
       via  3f76c300c0badcebfb9cd735a185461ed68606b5 (commit)
       via  39c24e2b7f896989723efe81c7ea42563aa36a80 (commit)
       via  c27b32b6dc1201d435c39c10939dad79629df2af (commit)
       via  c0ca282ac7cae4b874b70cdb095409a50d6a794c (commit)
       via  1ba42494349e382881a4aa03ceff2aa3044d5644 (commit)
       via  6704e6147eeb46311b14e922deb4ad070354adcf (commit)
       via  fb4b78cd72f13a1dae4b78bfc68163273585f9d9 (commit)
       via  b4df42b998ff6a4e2db22c4bd7552b6550615885 (commit)
       via  8bb9c712f43795119d912832666a25ba8ba78d73 (commit)
       via  f2ea1686f659217d0e6330f158191de52a66a5c3 (commit)
       via  03a80d8e0861758cbc20d9e517d8aaef81d7eac6 (commit)
       via  fd82b10b794cc93213c41602ccafda58172dbb34 (commit)
       via  219c8795d3b44996f45ebfb0af26634c4e5cc1d8 (commit)
       via  43d20aa03ec4132c7b1387ed75a4404d5b53c29d (commit)
       via  5b701f740e34558995744019135dd85a7fcab476 (commit)
       via  b07c8a3a156af9c9cbeb2faa6ea83cfe7dc3e67b (commit)
       via  6259d545737f7bf71f030cb585f08de53b6fb6a8 (commit)
       via  26038bccc895d929819ed2419cbc7dc750d5f1ad (commit)
       via  064c414364ebbe58ba76d12f55f1764277b04e39 (commit)
       via  bae1ac3c3d868deece6a3140baee3de55a0eb21e (commit)
       via  043812ee2fc5d6b8d9598aafec9def9aa44f8049 (commit)
       via  8a161868d7dab959dde48b1b6ec0c3cc08636ba5 (commit)
       via  b3a7567879d5ef40548cbb74178786c3ec66889f (commit)
       via  2ed3fd1396f49d9fbaebfa9805ce5a1b0b85dbff (commit)
       via  bbfccb7592622bfc3be98625494ef78dabe677aa (commit)
       via  028bb2d0a498d671239d1b6acaf8608cf8285415 (commit)
       via  399ad458ce891ebaf2ad386ddd4b0557173cc30e (commit)
       via  783346bcbbf28f8402cbc725be4114611928e2cb (commit)
       via  5b1e664f59de03230b175d04427a03e0476fbe95 (commit)
       via  0cea553154a1fe259579c9909694aa5af8d2646d (commit)
       via  512b34071cf0e1ef04a7c950c5b95af3880d9760 (commit)
       via  28127228921c3ad1729961a8e4eec1219209476a (commit)
       via  8c7451543bdd415b7812eff7445f43f5320ec93e (commit)
       via  a581c88cbffb0a34fdf90c4855bfbc119276d737 (commit)
       via  88452aab8647da88cbc99421003f58fb59da4356 (commit)
       via  ff56eb248a00073214c661111e0e4f62c6487474 (commit)
       via  3e98b4628285764c471ad8b27efdf12e9ab83d59 (commit)
       via  21987bed02991f46bbb50e105f525f0f73b31d00 (commit)
       via  d5df5d8de232760173aaa83e067f94b20934a7d2 (commit)
       via  6de61f743416634c44ec395f138660c40ef80d95 (commit)
       via  1e431bbd6e69976965f36ef9463d91e41ae9e67d (commit)
       via  c29b2a4d1705d1c03c5012d843f8048ec9f6601f (commit)
       via  78e327905aeb400c030f4b9b960630517c1e306d (commit)
       via  fe5c2860c0ec96070172d0d12dc000afcb70a61d (commit)
       via  cf038b7b5ef8968dda47384db96163fda7ac37de (commit)
       via  3b750b7cb29d8b02bc85200a6d0c5a98317cad8d (commit)
       via  6ef843bce621401c0d2367da753e7b464f5fbf1f (commit)
       via  2fec7288a775dec5a20b8ec2bb927a380cd49dc2 (commit)
       via  281c7352ce6fd8a070decfe6a310406ff4b77097 (commit)
       via  fd400b7617f89689c29edd33dc0ae9c5ea7bf5f7 (commit)
       via  ce79e5ec81d988764262afb53a61c9a696b64ed0 (commit)
       via  6049dfdecf39c00046d45d3c47c43cb94ff43f0d (commit)
       via  ea3d83fd8bdb0adb8bc89d5b532748a84c624662 (commit)
       via  438f71de4b1fa7f012cb540524f4c07dab7e64f5 (commit)
       via  5b2a8058cf187c93e4374a04841e4ec329169314 (commit)
       via  2af13801f93e742041ebcfdf48042f5af82466e7 (commit)
       via  01d132b2557ddfc8d2098fec5091ceeb3bdace5f (commit)
       via  4a394d6269b369e34f3eb617991031795686f3b2 (commit)
       via  76e876d2599eac895f9475f54824b348b264636a (commit)
       via  daf193ba4c9eb11454e33a618ee6e427599f887d (commit)
       via  bab10c261dc238c10f12445c20e9079dac74b26e (commit)
       via  410af549636529928133ece25a7ae6b209059027 (commit)
       via  a1993fb58e2c13317d64259875a19079c676891c (commit)
       via  a7c62c012bc7eecf4a66e0662b0ad9186199acb2 (commit)
       via  c64008121bb22325c37973b9e53b2ca8bc997562 (commit)
       via  c903105ea033c0a10b4acc54bcbb3c0e2f00f117 (commit)
       via  24613fea5239a637a5ec7f3d33ae221f51e44031 (commit)
       via  4bf81562d7735a0fc66311182da44731f8a911cf (commit)
       via  50292f2c7858f96f67d906c1cefc59f28ac043e6 (commit)
       via  68a22b2996b3f1a46da0e01be458cdda0ae0ce20 (commit)
       via  85965730acc503789058df27b61d2fc9f8e42112 (commit)
       via  6e7857b2412e59cfc3becdf3d34ee83e6737b056 (commit)
       via  39c6a57b958d81ead59117593f806645b0a76d79 (commit)
       via  2f36f464cae8770929e90b3e8f27b976f4544f79 (commit)
       via  26b098c6dd2920d993931ee8458d79e92f8d7773 (commit)
       via  5e6ef4c802cdcbd61b857de495cb579f8a227c62 (commit)
      from  bf86a0e10d65377dea53319d98f75e06b368a093 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit a8a8fc6638fa4a2a4a6810821fcc3d6c843d2861
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 18:47:48 2023 +0100

    filesystem: Make filesystem structure FHS compliant
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

commit 636e102cc400e16aae2a2db990cad7c5c57fd9a1
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Tue Mar 21 11:20:16 2023 +0100

    kernel: Proper build the helper binaries with our C and LDFLAGS
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 87829961505bf57d0dcaff7638e895c066144ec8
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 12:41:11 2023 +0100

    liboping: Re-enable setting capabilities
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 6b93b933546d24ab0f8b7ad3646df628789f2b1b
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 12:40:19 2023 +0100

    iputils: Re-enable setting capabilities
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 31bc0a598805a8c3ec29535f52fcc92c4d221895
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 12:39:16 2023 +0100

    util-linux: Re-enable setting capabilities
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 27a002f43ae4cdd20d54cfc50abc0151bdce746d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 12:35:52 2023 +0100

    nfs-utils: mount.nfs - Use capabilities instead of suid bit
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 85964a3c4b77aa08ab783e13ac14fed52179cee8
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 12:04:14 2023 +0100

    shadow-utils: Use capabilites and remove more unused binaries
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit ebb66ccf61c6b1fc6259bdc36afe60a631e159d6
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 12:01:37 2023 +0100

    unbound: Use /run instead of /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 3f76c300c0badcebfb9cd735a185461ed68606b5
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 11:43:42 2023 +0100

    screen: Make screen FHS compliant
    
    * Explicit use pam.
    * Change socket dir to /run and add tmpfiles file.
    * Only ship a simple screen binary without version
      fragments
    * Remove SUID bit from binary
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 39c24e2b7f896989723efe81c7ea42563aa36a80
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 11:31:49 2023 +0100

    sudo: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit c27b32b6dc1201d435c39c10939dad79629df2af
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 16:02:04 2023 +0100

    network: Add patch to fix logdir
    
    Add upstream patch to proper set the location
    to the logdir.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit c0ca282ac7cae4b874b70cdb095409a50d6a794c
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 15:49:00 2023 +0100

    openssh: Change privsep directory to /var/lib/sshd
    
    The old one /var/empty/sshd violated our FHS
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 1ba42494349e382881a4aa03ceff2aa3044d5644
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 15:48:19 2023 +0100

    samba: Drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 6704e6147eeb46311b14e922deb4ad070354adcf
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 15:19:41 2023 +0100

    unbound: Do not create /var/run
    
    This violates our FHS specs.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit fb4b78cd72f13a1dae4b78bfc68163273585f9d9
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 15:13:54 2023 +0100

    tcl: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit b4df42b998ff6a4e2db22c4bd7552b6550615885
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 15:01:44 2023 +0100

    sssd: Use /var/lib/sss and drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 8bb9c712f43795119d912832666a25ba8ba78d73
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 14:39:26 2023 +0100

    squid: Drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit f2ea1686f659217d0e6330f158191de52a66a5c3
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 12:07:16 2023 +0100

    snort: Set correct permissions of helper script
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 03a80d8e0861758cbc20d9e517d8aaef81d7eac6
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:43:19 2023 +0100

    spectre-meltdown-checker: Install binary with correct permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit fd82b10b794cc93213c41602ccafda58172dbb34
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:36:03 2023 +0100

    python3-pygobject3: Fix header file permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 219c8795d3b44996f45ebfb0af26634c4e5cc1d8
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:26:55 2023 +0100

    python3-cairo: Fix header permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 43d20aa03ec4132c7b1387ed75a4404d5b53c29d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:25:03 2023 +0100

    ppp: Fix binary permissions and drop deprecated dirs in /var
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 5b701f740e34558995744019135dd85a7fcab476
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:16:49 2023 +0100

    plymouth: Drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit b07c8a3a156af9c9cbeb2faa6ea83cfe7dc3e67b
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:09:57 2023 +0100

    perl-WWW-Curl: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 6259d545737f7bf71f030cb585f08de53b6fb6a8
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:09:24 2023 +0100

    perl-WWW-Curl: Enable testsuite
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 26038bccc895d929819ed2419cbc7dc750d5f1ad
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:07:39 2023 +0100

    perl-XML-Parser: Fix library permissions
    
    * Also enable the testsuite
    * Drop old fragment from QA
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 064c414364ebbe58ba76d12f55f1764277b04e39
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 11:06:31 2023 +0100

    perl-XML-Parser: Set correct perl dependencies
    
    Do not longer use perl-core/perl-devel as build
    dependencies.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit bae1ac3c3d868deece6a3140baee3de55a0eb21e
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:53:45 2023 +0100

    perl-TermReadkey: Enable testsuite
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 043812ee2fc5d6b8d9598aafec9def9aa44f8049
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:53:08 2023 +0100

    perl-TermReadkey: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 8a161868d7dab959dde48b1b6ec0c3cc08636ba5
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:47:48 2023 +0100

    perl-SGMLSpm: Drop unneccessary perl script
    
    We do not need this and it violates our FHS specs.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit b3a7567879d5ef40548cbb74178786c3ec66889f
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:37:25 2023 +0100

    perl-Parse-Yapp: Fix library and binary permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 2ed3fd1396f49d9fbaebfa9805ce5a1b0b85dbff
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:32:49 2023 +0100

    perl-Net-SSLeay: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit bbfccb7592622bfc3be98625494ef78dabe677aa
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:31:06 2023 +0100

    perl-libintl-perl: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 028bb2d0a498d671239d1b6acaf8608cf8285415
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:29:11 2023 +0100

    perl-IO-AIO: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 399ad458ce891ebaf2ad386ddd4b0557173cc30e
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:26:38 2023 +0100

    perl-HTML-Tagset: Add proper perl build dependencies
    
    Do not longer depend on perl-core or perl-devel.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 783346bcbbf28f8402cbc725be4114611928e2cb
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:24:07 2023 +0100

    perl-HTML-Parser: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 5b1e664f59de03230b175d04427a03e0476fbe95
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:22:25 2023 +0100

    perl-GSSAPI: Fix library permissions
    
    * Also enable the testsuite
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 0cea553154a1fe259579c9909694aa5af8d2646d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:20:34 2023 +0100

    perl-FCGI: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 512b34071cf0e1ef04a7c950c5b95af3880d9760
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:17:20 2023 +0100

    perl-DBI: Fix library and binary permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 28127228921c3ad1729961a8e4eec1219209476a
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:16:43 2023 +0100

    perl-Digest-SHA1: Enable testsuite
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 8c7451543bdd415b7812eff7445f43f5320ec93e
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:16:07 2023 +0100

    perl-Digest-SHA1: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit a581c88cbffb0a34fdf90c4855bfbc119276d737
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:06:18 2023 +0100

    perl-Crypt-OpenSSL-X509: Enable testsuite
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 88452aab8647da88cbc99421003f58fb59da4356
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 10:01:19 2023 +0100

    perl-Crypt-OpenSSL-X509: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit ff56eb248a00073214c661111e0e4f62c6487474
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 09:59:31 2023 +0100

    perl-Coro: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 3e98b4628285764c471ad8b27efdf12e9ab83d59
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun Mar 19 09:57:44 2023 +0100

    perl-BDB: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 21987bed02991f46bbb50e105f525f0f73b31d00
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 23:00:19 2023 +0100

    libvirt: Fix binary permissions and drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit d5df5d8de232760173aaa83e067f94b20934a7d2
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 22:58:22 2023 +0100

    pciutils: Install header files with correct permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 6de61f743416634c44ec395f138660c40ef80d95
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 22:15:52 2023 +0100

    bash: Set correct permissions for /root and binaries
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 1e431bbd6e69976965f36ef9463d91e41ae9e67d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:45:09 2023 +0100

    openssh: Fix permissions for sshd-keygen
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit c29b2a4d1705d1c03c5012d843f8048ec9f6601f
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:35:23 2023 +0100

    openldap: Do not ship /run/openldap anymore
    
    This violetes our FHS specs
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 78e327905aeb400c030f4b9b960630517c1e306d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:34:06 2023 +0100

    nettle: Fix library permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit fe5c2860c0ec96070172d0d12dc000afcb70a61d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:30:41 2023 +0100

    net-snmp: Do not create /var/run anymore
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit cf038b7b5ef8968dda47384db96163fda7ac37de
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:24:11 2023 +0100

    netpbm: Drop unneeded pkgconfig_template file
    
    Anyway it was located at an invalid place.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 3b750b7cb29d8b02bc85200a6d0c5a98317cad8d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:21:21 2023 +0100

    mdadm: Use systemd tmpfile
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 6ef843bce621401c0d2367da753e7b464f5fbf1f
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:15:26 2023 +0100

    lvm2: Do not ship /run and it's content
    
    This violetes our FHS specs
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 2fec7288a775dec5a20b8ec2bb927a380cd49dc2
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 21:07:19 2023 +0100

    lm-sensors: Proper use compiler and linker flags during build time
    
    Those flags are required during build time and not during installation.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 281c7352ce6fd8a070decfe6a310406ff4b77097
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 20:49:10 2023 +0100

    lldpd: Do not create /run/lldpd
    
    This violates our FHS specs.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit fd400b7617f89689c29edd33dc0ae9c5ea7bf5f7
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 20:47:24 2023 +0100

    kea: Drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit ce79e5ec81d988764262afb53a61c9a696b64ed0
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 20:32:35 2023 +0100

    krb5: Change /var/kerberos to /var/lib/kerberos
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 6049dfdecf39c00046d45d3c47c43cb94ff43f0d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 20:29:58 2023 +0100

    libdb: Fix binary and header file permissions
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit ea3d83fd8bdb0adb8bc89d5b532748a84c624662
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 19:52:37 2023 +0100

    iptraf-ng: Proper use our compiler and linker flags
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 438f71de4b1fa7f012cb540524f4c07dab7e64f5
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 19:47:36 2023 +0100

    iptraf-ng: Do not longer create /var/lock
    
    This folder violetes our FHS specs.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 5b2a8058cf187c93e4374a04841e4ec329169314
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 19:44:06 2023 +0100

    intel-microcode: Set correct permissions for dirs and files
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 2af13801f93e742041ebcfdf48042f5af82466e7
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 17:17:25 2023 +0100

    gettext: The config.rpath script needs to be executeable
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 01d132b2557ddfc8d2098fec5091ceeb3bdace5f
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 17:12:51 2023 +0100

    dma: Update to 0.13
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 4a394d6269b369e34f3eb617991031795686f3b2
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 16:58:42 2023 +0100

    chrpath: Install documentation to the correct place
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 76e876d2599eac895f9475f54824b348b264636a
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 16:48:23 2023 +0100

    dhcpcd: Fix permissions of dhcpcd binary
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit daf193ba4c9eb11454e33a618ee6e427599f887d
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 16:35:35 2023 +0100

    cyrus-sasl: Use /run instead of /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit bab10c261dc238c10f12445c20e9079dac74b26e
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 16:33:13 2023 +0100

    cups: Fix file permissions in /usr/include and drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 410af549636529928133ece25a7ae6b209059027
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 16:05:26 2023 +0100

    sudo: Use systemd tmpfiles mechanism
    
    Use the tmpfiles mechanism from systemd to proper
    recreate the /run/sudo directory.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit a1993fb58e2c13317d64259875a19079c676891c
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 15:37:20 2023 +0100

    bird: Drop /var/run
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit a7c62c012bc7eecf4a66e0662b0ad9186199acb2
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 15:05:20 2023 +0100

    git: Hook examples should not be executeable
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit c64008121bb22325c37973b9e53b2ca8bc997562
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 14:19:01 2023 +0100

    gettext: Drop unneccessary stuff
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit c903105ea033c0a10b4acc54bcbb3c0e2f00f117
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 10:02:50 2023 +0100

    sgml-common: Drop HTML documentation
    
    We do not need this on our systems - anyway it
    has been installed in a wrong directory.
    
    Also replaced all hardcoded path values.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 24613fea5239a637a5ec7f3d33ae221f51e44031
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 09:52:40 2023 +0100

    docbook-xsl: Fix file and directory permissions
    
    The violated our FHS standards.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 4bf81562d7735a0fc66311182da44731f8a911cf
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 09:50:57 2023 +0100

    docbook-utils: Drop HTML documentation
    
    We do not need this on our systems - Anyway it has been
    installed to a wrong place by default.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 50292f2c7858f96f67d906c1cefc59f28ac043e6
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sat Mar 18 09:49:50 2023 +0100

    docbook-dtds: Install files not executeable
    
    This is not required and vilates our FSH standards.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 68a22b2996b3f1a46da0e01be458cdda0ae0ce20
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Fri Mar 17 19:41:42 2023 +0100

    qemu: Drop unused firmware files and /var/run
    
    * Drop firmware files for platforms we do not support.
    * Drop /var/run directory which violetes the FSH.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 85965730acc503789058df27b61d2fc9f8e42112
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Fri Mar 17 18:30:32 2023 +0100

    perl: Fix library permissions
    
    They did not fit the FSH and our own specs.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 6e7857b2412e59cfc3becdf3d34ee83e6737b056
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Fri Mar 17 16:08:23 2023 +0100

    util-linux: Do no create /run/uuidd
    
    The folder will be created by systemd and violates the FSH.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 39c6a57b958d81ead59117593f806645b0a76d79
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Fri Mar 17 15:56:08 2023 +0100

    systemd: Do not create /run/log/journal
    
    This will be done by the corresponding tmpfiles configuration
    and violetes the FHS.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 2f36f464cae8770929e90b3e8f27b976f4544f79
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Fri Mar 17 15:48:36 2023 +0100

    setup: Do not create /run/motd.d folder
    
    This folder will be created from systemd by the corresponding
    tmpfiles script and fails our FHS checks.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>

commit 26b098c6dd2920d993931ee8458d79e92f8d7773
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 20:06:43 2023 +0100

    dwz: New package
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

commit 5e6ef4c802cdcbd61b857de495cb579f8a227c62
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Mon Mar 20 20:06:24 2023 +0100

    xxhash: New package
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 bash/bash.nm                                       |  7 ++-
 bird/bird.nm                                       |  7 ++-
 chrpath/chrpath.nm                                 | 16 +++++-
 cups/cups.nm                                       | 14 ++++-
 cyrus-sasl/cyrus-sasl.nm                           |  6 +-
 dhcpcd/dhcpcd.nm                                   |  5 +-
 dma/dma.nm                                         |  9 ++-
 docbook-dtds/docbook-dtds.nm                       | 10 ++--
 docbook-utils/docbook-utils.nm                     |  9 ++-
 docbook-xsl/docbook-xsl.nm                         |  8 ++-
 dwz/dwz.nm                                         | 66 ++++++++++++++++++++++
 filesystem/filesystem.nm                           | 26 +++------
 gettext/gettext.nm                                 | 12 +++-
 git/git.nm                                         |  6 +-
 intel-microcode/intel-microcode.nm                 |  6 +-
 iptraf-ng/iptraf-ng.nm                             | 11 +++-
 iputils/iputils.nm                                 |  8 +--
 kea/kea.nm                                         |  5 +-
 kernel/kernel.nm                                   |  9 ++-
 krb5/kdc.conf                                      |  4 +-
 krb5/krb5.nm                                       | 10 ++--
 krb5/systemd/kadmin.service                        |  2 +-
 krb5/systemd/kprop.service                         |  2 +-
 libdb/libdb.nm                                     | 10 +++-
 liboping/liboping.nm                               |  7 ++-
 libvirt/libvirt.nm                                 |  8 ++-
 lldpd/lldpd.nm                                     |  8 +--
 lm-sensors/lm-sensors.nm                           | 13 +++--
 lvm2/lvm2.nm                                       |  5 +-
 mdadm/mdadm.nm                                     |  7 +--
 mdadm/mdadm.tmpfiles                               |  1 +
 net-snmp/net-snmp.nm                               |  6 +-
 netpbm/netpbm.nm                                   |  4 +-
 nettle/nettle.nm                                   |  7 ++-
 network/network.nm                                 |  2 +-
 network/patches/network-fix-logdir-path.patch      | 23 ++++++++
 nfs-utils/nfs-utils.nm                             |  7 ++-
 openldap/openldap.nm                               |  4 +-
 openssh/openssh.nm                                 | 10 ++--
 pciutils/pciutils.nm                               | 10 ++--
 perl-BDB/perl-BDB.nm                               |  9 ++-
 perl-Coro/perl-Coro.nm                             |  8 ++-
 perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm | 16 +++++-
 perl-DBI/perl-DBI.nm                               | 12 +++-
 perl-Digest-SHA1/perl-Digest-SHA1.nm               | 14 ++++-
 perl-FCGI/perl-FCGI.nm                             | 10 +++-
 perl-GSSAPI/perl-GSSAPI.nm                         | 14 ++++-
 perl-HTML-Parser/perl-HTML-Parser.nm               |  9 ++-
 perl-HTML-Tagset/perl-HTML-Tagset.nm               |  6 +-
 perl-IO-AIO/perl-IO-AIO.nm                         |  6 +-
 perl-Net-SSLeay/perl-Net-SSLeay.nm                 | 10 +++-
 perl-Parse-Yapp/perl-Parse-Yapp.nm                 | 12 +++-
 perl-SGMLSpm/perl-SGMLSpm.nm                       |  8 ++-
 perl-TermReadKey/perl-TermReadKey.nm               | 13 ++++-
 perl-WWW-Curl/perl-WWW-Curl.nm                     | 33 +++++++++--
 perl-XML-Parser/perl-XML-Parser.nm                 | 21 ++++---
 perl-libintl-perl/perl-libintl-perl.nm             |  9 ++-
 perl/perl.nm                                       |  5 +-
 plymouth/plymouth.nm                               |  5 +-
 ppp/ppp.nm                                         |  7 ++-
 python3-cairo/python3-cairo.nm                     |  6 +-
 python3-gobject3/python3-gobject3.nm               |  6 +-
 qemu/qemu.nm                                       | 15 ++++-
 samba/samba.nm                                     | 10 +---
 screen/screen.nm                                   | 17 ++++--
 screen/screen.tmpfiles                             |  1 +
 setup/setup.nm                                     |  3 +-
 sgml-common/sgml-common.nm                         | 47 +++++++--------
 shadow-utils/shadow-utils.nm                       | 10 ++--
 snort/snort.nm                                     |  7 ++-
 .../spectre-meltdown-checker.nm                    |  4 +-
 squid/squid.nm                                     |  5 +-
 sssd/sssd.nm                                       | 13 +++--
 sudo/sudo.nm                                       | 13 ++++-
 systemd/systemd.nm                                 |  6 +-
 tcl/tcl.nm                                         | 10 +++-
 unbound/unbound.nm                                 |  8 +--
 unbound/unbound.tmpfiles                           |  2 +-
 util-linux/util-linux.nm                           | 10 ++--
 xxhash/xxhash.nm                                   | 60 ++++++++++++++++++++
 80 files changed, 644 insertions(+), 226 deletions(-)
 create mode 100644 dwz/dwz.nm
 create mode 100644 mdadm/mdadm.tmpfiles
 create mode 100644 network/patches/network-fix-logdir-path.patch
 create mode 100644 screen/screen.tmpfiles
 create mode 100644 xxhash/xxhash.nm

Difference in files:
diff --git a/bash/bash.nm b/bash/bash.nm
index cbe78a422..845eca8da 100644
--- a/bash/bash.nm
+++ b/bash/bash.nm
@@ -5,7 +5,7 @@
 
 name       = bash
 version    = 5.2.9
-release    = 1
+release    = 2
 
 groups     = System/Tools
 url        = http://www.gnu.org/software/bash/
@@ -67,7 +67,7 @@ build
 
 	install_cmds
 		mkdir -pv %{BUILDROOT}%{sysconfdir}/{profile.d,skel}
-		mkdir -pv %{BUILDROOT}/root
+		install -v -m 700 -d %{BUILDROOT}/root
 
 		# Bash startup files
 		cp -vf %{DIR_SOURCE}/dot_bash_logout %{BUILDROOT}%{sysconfdir}/skel/.bash_logout
@@ -92,6 +92,9 @@ build
 			) > "%{BUILDROOT}/%{bindir}/${f}"
 			chmod +x "%{BUILDROOT}%{bindir}/${f}"
 		done
+
+		# Set correct permissions for binaries.
+		find %{BUILDROOT}%{bindir} -type f -executable -exec chmod 755 {} \;
 	end
 end
 
diff --git a/bird/bird.nm b/bird/bird.nm
index cee24efd5..350cd0eae 100644
--- a/bird/bird.nm
+++ b/bird/bird.nm
@@ -5,7 +5,7 @@
 
 name       = bird
 version    = 2.0.10
-release    = 1
+release    = 2
 
 groups     = Networking/Routing
 url        = https://bird.network.cz/
@@ -26,6 +26,11 @@ build
 		ncurses-devel
 		readline-devel
 	end
+
+	install_cmds
+		# Drop /var/run
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
+	end
 end
 
 packages
diff --git a/chrpath/chrpath.nm b/chrpath/chrpath.nm
index 5739082b4..6f24793cb 100644
--- a/chrpath/chrpath.nm
+++ b/chrpath/chrpath.nm
@@ -5,7 +5,7 @@
 
 name       = chrpath
 version    = 0.16
-release    = 1
+release    = 2
 
 groups     = Development/Tools
 url        = https://directory.fsf.org/wiki/Chrpath/
@@ -22,6 +22,20 @@ end
 source_dl  = https://deb.debian.org/debian/pool/main/c/chrpath/
 sources    = %{name}_%{version}.orig.tar.gz
 
+build
+	configure_options += \
+		--docdir=%{docdir}
+
+	install_cmds
+		# Chrpath ignores the docdir swith during configure.
+		# Move the documentation to the correct place.
+		mv -vf %{BUILDROOT}/usr/doc/%{name}-* %{BUILDROOT}%{docdir}
+
+		# Remove empty directory
+		rm -rvf %{BUILDROOT}/usr/doc
+	end
+end
+
 packages
 	package %{name}
 
diff --git a/cups/cups.nm b/cups/cups.nm
index d038d41c8..113819ee2 100644
--- a/cups/cups.nm
+++ b/cups/cups.nm
@@ -5,7 +5,7 @@
 
 name       = cups
 version    = 2.3.6
-release    = 2
+release    = 3
 
 groups     = Applications/Printing
 url        = https://cups.org/software.php
@@ -56,12 +56,20 @@ build
 		--enable-webif \
 		--with-xinetd=no
 
-	install
-		make install BUILDROOT=%{BUILDROOT}
+	make_install_targets += \
+		BUILDROOT=%{BUILDROOT}
 
+	install_cmds
 		# Install default config file.
 		mkdir -pv %{BUILDROOT}/etc/cups
 		cp -vf %{DIR_APP}/conf/cupsd.conf %{BUILDROOT}/etc/cups/
+
+		# Fix file permissions in /usr/include
+		find %{BUILDROOT}%{includedir} -type f -iname "*.h" \
+			-exec chmod 644 {} \;
+
+		# Drop /var/run
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
 	end
 end
 
diff --git a/cyrus-sasl/cyrus-sasl.nm b/cyrus-sasl/cyrus-sasl.nm
index 1ede85d0a..9288350dc 100644
--- a/cyrus-sasl/cyrus-sasl.nm
+++ b/cyrus-sasl/cyrus-sasl.nm
@@ -5,7 +5,7 @@
 
 name       = cyrus-sasl
 version    = 2.1.28
-release    = 3
+release    = 4
 
 groups     = System/Libraries
 url        = https://github.com/cyrusimap/cyrus-sasl
@@ -33,7 +33,7 @@ build
 		--with-configdir=%{libdir}/sasl2:/etc/sasl2 \
 		--with-plugindir=%{libdir}/sasl2 \
 		--with-dbpath=/var/lib/sasl/sasldb2 \
-		--with-saslauthd=/var/run/saslauthd
+		--with-saslauthd=/run/saslauthd
 
 	make_install_targets += sasldir=%{libdir}/sasl2
 
@@ -44,7 +44,7 @@ build
 		mkdir -pv %{BUILDROOT}%{libdir}/sasl2
 		cp -vf %{DIR_SOURCE}/smtpd.conf %{BUILDROOT}%{libdir}/sasl2/
 
-		install -v -m700 -d %{BUILDROOT}/var/lib/sasl %{BUILDROOT}/var/run/saslauthd
+		install -v -m700 -d %{BUILDROOT}/var/lib/sasl
 	end
 end
 
diff --git a/dhcpcd/dhcpcd.nm b/dhcpcd/dhcpcd.nm
index 99c244498..48c692144 100644
--- a/dhcpcd/dhcpcd.nm
+++ b/dhcpcd/dhcpcd.nm
@@ -5,7 +5,7 @@
 
 name       = dhcpcd
 version    = 9.4.1
-release    = 1
+release    = 2
 
 groups     = Network/Base
 url        = https://roy.marples.name/projects/dhcpcd/
@@ -35,6 +35,9 @@ build
 	install_cmds
 		# Assign db directory to the correct user and group.
 		chown dhcpcd:dhcpcd %{BUILDROOT}%{sharedstatedir}/dhcpcd
+
+		# Fix permission of /sbin/dhcpcd
+		chmod 755 %{BUILDROOT}%{sbindir}/dhcpcd
 	end
 end
 
diff --git a/dma/dma.nm b/dma/dma.nm
index 259421ac6..8a4533459 100644
--- a/dma/dma.nm
+++ b/dma/dma.nm
@@ -4,7 +4,7 @@
 ###############################################################################
 
 name       = dma
-version    = 0.10
+version    = 0.13
 release    = 1
 
 groups     = Mail
@@ -21,6 +21,8 @@ description
 	SMTP authentication.
 end
 
+source_dl  = https://github.com/corecode/dma/archive/v%{version}.tar.gz#/
+
 build
 	requires
 		bison
@@ -34,10 +36,13 @@ build
 	make_build_targets += LEX="flex -l"
 
 	make_install_targets += PREFIX=%{prefix} \
-		sendmail-link mailq-link install-spool-dirs install-etc
+		sendmail-link mailq-link install-etc
 
 	install_cmds
 		install -m 755 %{DIR_SOURCE}/dma-cleanup-spool %{BUILDROOT}%{sbindir}
+
+		# Set corret ownwership.
+		chown root:root %{BUILDROOT}%{sbindir}/dma
 	end
 end
 
diff --git a/docbook-dtds/docbook-dtds.nm b/docbook-dtds/docbook-dtds.nm
index eaf363c21..1ed875384 100644
--- a/docbook-dtds/docbook-dtds.nm
+++ b/docbook-dtds/docbook-dtds.nm
@@ -5,7 +5,7 @@
 
 name       = docbook-dtds
 version    = 1.0
-release    = 6
+release    = 7
 arch       = noarch
 
 groups     = Applications/Text
@@ -106,11 +106,11 @@ build
 				DESTDIR=%{BUILDROOT}/usr/share/sgml/docbook/$fmt-dtd-$ver
 			mkdir -pv $DESTDIR
 			case $fmt in
-				sgml)   mkdir -pv $DESTDIR; install -v *.dcl $DESTDIR ;;
-				xml)    mkdir -pv $DESTDIR/ent; install -v ent/* $DESTDIR/ent ;;
+				sgml)   mkdir -pv $DESTDIR; install -v -m 644 *.dcl $DESTDIR ;;
+				xml)    mkdir -pv $DESTDIR/ent; install -v -m 644 ent/* $DESTDIR/ent ;;
 			esac
-			install -v *.dtd *.mod $DESTDIR
-			install -v docbook.cat $DESTDIR/catalog
+			install -v -m 644 *.dtd *.mod $DESTDIR
+			install -v -m 644 docbook.cat $DESTDIR/catalog
 			touch %{BUILDROOT}/etc/sgml/${dir#*-}-docbook-$ver.cat
 		done
 	end
diff --git a/docbook-utils/docbook-utils.nm b/docbook-utils/docbook-utils.nm
index 9790d5ac1..b97c93ba8 100644
--- a/docbook-utils/docbook-utils.nm
+++ b/docbook-utils/docbook-utils.nm
@@ -5,7 +5,7 @@
 
 name       = docbook-utils
 version    = 0.6.14
-release    = 2
+release    = 3
 
 groups     = Applications/Text
 url        = http://sources.redhat.com/docbook-tools/
@@ -39,7 +39,12 @@ build
 
 	configure_options += \
 		--libdir=%{libdir} \
-		--mandir=/usr/share/man
+		--mandir=%{mandir}
+
+	install_cmds
+		# Drop unneeded and wrongly installed HTML documentation.
+		rm -rvf %{BUILDROOT}%{prefix}/doc
+	end
 end
 
 packages
diff --git a/docbook-xsl/docbook-xsl.nm b/docbook-xsl/docbook-xsl.nm
index c1c5caf3c..0ae968c93 100644
--- a/docbook-xsl/docbook-xsl.nm
+++ b/docbook-xsl/docbook-xsl.nm
@@ -5,7 +5,7 @@
 
 name       = docbook-xsl
 version    = 1.79.2
-release    = 2
+release    = 3
 arch       = noarch
 
 groups     = Applications/Text
@@ -48,6 +48,12 @@ build
 
 		# Remove unneeded tool for .epub formats.
 		rm -rvf %{BUILDROOT}/%{datadir}/sgml/docbook/xsl-stylesheets-%{version}/epub
+
+		# Fix directory permissions.
+		find %{BUILDROOT}%{datadir} -type d -exec chmod 755 {} \;
+
+		# Fix file permissions.
+		find %{BUILDROOT}%{datadir} -type f -exec chmod 644 {} \;
 	end
 end
 
diff --git a/dwz/dwz.nm b/dwz/dwz.nm
new file mode 100644
index 000000000..8b63a64fc
--- /dev/null
+++ b/dwz/dwz.nm
@@ -0,0 +1,66 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info(a)ipfire.org>                   #
+###############################################################################
+
+name       = dwz
+version    = 0.15
+release    = 1
+
+groups     = Development/Tools
+url        = https://sourceware.org/dwz/
+license    = GPLv2+ and GPLv3+
+summary    = DWARF optimization and duplicate removal tool
+
+description
+	The dwz package contains a program that attempts to optimize DWARF
+	debugging information contained in ELF shared libraries and ELF executables
+	for size, by replacing DWARF information representation with equivalent
+	smaller representation where possible and by reducing the amount of
+	duplication using techniques from DWARF standard appendix E - creating
+	DW_TAG_partial_unit compilation units (CUs) for duplicated information
+	and using DW_TAG_imported_unit to import it into each CU that needs it.
+end
+
+source_dl = https://sourceware.org/ftp/dwz/releases/
+sources   = %{thisapp}.tar.xz
+
+build
+	requires
+		elfutils-devel
+		xxhash-devel
+
+		# Testsuite
+		dejagnu
+		gdb
+	end
+
+	DIR_APP = %{DIR_SRC}/%{name}
+
+	make_build_targets += \
+		CFLAGS="%{CFLAGS}" \
+		LDFLAGS="%{LDFLAGS}" \
+		srcdir=%{DIR_APP} \
+		prefix=%{prefix} \
+		bindir=%{bindir} \
+		mandir=%{mandir}
+
+	test
+		# Compile the testsuite without any compiler or linker flags.
+		CFLAGS= LDFLAGS= srcdir=%{DIR_APP} make check
+	end
+
+	make_install_targets += \
+		srcdir=%{DIR_APP} \
+		prefix=%{prefix} \
+		bindir=%{bindir} \
+		mandir=%{mandir}
+end
+
+packages
+	package %{name}
+
+	package %{name}-debuginfo
+		template DEBUGINFO
+	end
+end
diff --git a/filesystem/filesystem.nm b/filesystem/filesystem.nm
index f94eedbac..f270b8616 100644
--- a/filesystem/filesystem.nm
+++ b/filesystem/filesystem.nm
@@ -5,7 +5,7 @@
 
 name       = filesystem
 version    = 002
-release    = 4
+release    = 5
 
 maintainer = Michael Tremer <michael.tremer(a)ipfire.org>
 groups     = Base Build System/Base
@@ -44,10 +44,8 @@ build
 			opt \
 			proc \
 			root \
-			run/lock \
 			srv \
 			sys \
-			tmp \
 			usr/bin \
 			usr/include \
 			usr/lib \
@@ -60,11 +58,9 @@ build
 			usr/src \
 			var/empty \
 			var/lib \
-			var/local \
 			var/log \
-			var/nis \
-			var/preserve \
-			var/spool/{mail,lpd} \
+			var/mail \
+			var/spool \
 			var/tmp \
 			var/db \
 			var/cache
@@ -74,20 +70,12 @@ build
 		ln -snf usr/lib lib
 		[ "%{lib}" = "lib" ] || ln -snf usr/%{lib} %{lib}
 
-		ln -snf ../var/tmp usr/tmp
-		ln -snf spool/mail var/mail
-		ln -snf ../run var/run
-		ln -snf ../run/lock var/lock
-
 		# Setting correct permissions.
-		chmod 1777 %{BUILDROOT}/{,var/}tmp
-		chown root:mail %{BUILDROOT}/var/spool/mail
-		chmod 775 %{BUILDROOT}/var/spool/mail
+		chmod -v 755 %{BUILDROOT}/var/tmp
+		chown -v root:mail %{BUILDROOT}/var/mail
+		chmod -v 755 %{BUILDROOT}/var/mail
+		chmod -v 700 %{BUILDROOT}/root
 	end
-
-	# XXX not implemented at the moment
-	export QUALITY_AGENT_NO_DIRECTORY_CHECK = yes
-	export QUALITY_AGENT_NO_DIRECTORY_PRUNE = yes
 end
 
 packages
diff --git a/gettext/gettext.nm b/gettext/gettext.nm
index 1e2af67f7..000db01b2 100644
--- a/gettext/gettext.nm
+++ b/gettext/gettext.nm
@@ -5,7 +5,7 @@
 
 name       = gettext
 version    = 0.21.1
-release    = 3
+release    = 5
 
 groups     = System/Base
 url        = https://www.gnu.org/software/gettext/
@@ -65,6 +65,16 @@ build
 
 		# Fix library permissions.
 		chmod 755 %{BUILDROOT}%{libdir}/preloadable_libintl.so
+
+		# Remove examples.
+		rm -rvf %{BUILDROOT}%{docdir}/%{name}/examples
+
+		# Gettext provides only a HTML documentation, so we
+		# safely can drop the remaining doc directory.
+		rm -rvf %{BUILDROOT}%{docdir}
+
+		# Drop trigger and team-address files for GNOME, KDE and TP projects
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/projects
 	end
 end
 
diff --git a/git/git.nm b/git/git.nm
index b3b5f789b..adb785081 100644
--- a/git/git.nm
+++ b/git/git.nm
@@ -5,7 +5,7 @@
 
 name       = git
 version    = 2.38.1
-release    = 3
+release    = 4
 
 groups     = Development/Tools
 url        = http://git-scm.com/
@@ -96,6 +96,10 @@ build
 		rm -rvf %{BUILDROOT}/usr/lib/git-core/*p4*
 		rm -rvf %{BUILDROOT}/usr/lib/git-core/mergetools/p4*
 		rm -rvf %{BUILDROOT}%{mandir}/man1/*p4*
+
+		# Fix file permissions of the hook examples.
+		find %{BUILDROOT}%{datadir}/git-core/ -type f -iname "*.sample" \
+			-exec chmod 644 {} \;
 	end
 end
 
diff --git a/intel-microcode/intel-microcode.nm b/intel-microcode/intel-microcode.nm
index ca1881a2c..b29557baf 100644
--- a/intel-microcode/intel-microcode.nm
+++ b/intel-microcode/intel-microcode.nm
@@ -5,7 +5,7 @@
 
 name       = intel-microcode
 version    = 20221108
-release    = 1
+release    = 2
 arch       = noarch
 thisapp    = microcode-%{version}
 
@@ -32,6 +32,10 @@ build
 	install
 		mkdir -pv %{BUILDROOT}%{prefix}/lib/firmware
 		cp -prv intel-ucode %{BUILDROOT}%{prefix}/lib/firmware
+
+		# Set correct permissions for directories and firmware files.
+		find %{BUILDROOT}%{prefix}/lib/firmware -type d -exec chmod 755 {} \;
+		find %{BUILDROOT}%{prefix}/lib/firmware -type f -exec chmod 644 {} \;
 	end
 end
 
diff --git a/iptraf-ng/iptraf-ng.nm b/iptraf-ng/iptraf-ng.nm
index f7b4eb5c3..4e7fea29e 100644
--- a/iptraf-ng/iptraf-ng.nm
+++ b/iptraf-ng/iptraf-ng.nm
@@ -5,7 +5,7 @@
 
 name       = iptraf-ng
 version    = 1.2.1
-release    = 1
+release    = 3
 
 groups     = Networking/Tools
 url        = https://github.com/iptraf-ng/iptraf-ng
@@ -38,10 +38,15 @@ build
 		ncurses-devel
 	end
 
-	make_install_targets += prefix=%{prefix}
+	make_build_targets += \
+		CFLAGS="%{CFLAGS}" \
+		LDFLAGS="%{LDFLAGS}"
+
+	make_install_targets += \
+		prefix=%{prefix}
 
 	install_cmds
-		mkdir -pv %{BUILDROOT}%{localstatedir}/{lock,log,lib}/iptraf-ng
+		mkdir -pv %{BUILDROOT}%{localstatedir}/{log,lib}/iptraf-ng
 	end
 end
 
diff --git a/iputils/iputils.nm b/iputils/iputils.nm
index 5bcab41e9..d94645446 100644
--- a/iputils/iputils.nm
+++ b/iputils/iputils.nm
@@ -5,7 +5,7 @@
 
 name       = iputils
 version    = 20221126
-release    = 1
+release    = 2
 
 groups     = Networking/Tools
 url        = https://www.skbuff.net/iputils
@@ -49,9 +49,9 @@ build
 		ln -svf tracepath %{BUILDROOT}%{bindir}/tracepath6
 		ln -svf tracepath.8 %{BUILDROOT}%{mandir}/man8/tracepath6.8
 
-		# This currently does not work in pakfire
-		#setcap cap_net_admin=ep %{BUILDROOT}%{bindir}/ping
-		#setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/arping
+		# Set capabilities
+		setcap cap_net_admin=ep %{BUILDROOT}%{bindir}/ping
+		setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/arping
 	end
 end
 
diff --git a/kea/kea.nm b/kea/kea.nm
index c4e23a23f..a0dab0262 100644
--- a/kea/kea.nm
+++ b/kea/kea.nm
@@ -5,7 +5,7 @@
 
 name       = kea
 version    = 2.3.5
-release    = 1
+release    = 2
 
 groups     = System/Daemons
 url        = http://kea.isc.org
@@ -49,6 +49,9 @@ build
 		mkdir -pv %{BUILDROOT}%{sharedstatedir}/kea/
 		touch %{BUILDROOT}%{sharedstatedir}/kea/kea-leases4.csv
 		touch %{BUILDROOT}%{sharedstatedir}/kea/kea-leases6.csv
+
+		# Drop /var/run
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
 	end
 end
 
diff --git a/kernel/kernel.nm b/kernel/kernel.nm
index 9b340f8b3..cf6b1c620 100644
--- a/kernel/kernel.nm
+++ b/kernel/kernel.nm
@@ -5,7 +5,7 @@
 
 name       = kernel
 version    = 6.2
-release    = 2
+release    = 3
 thisapp    = linux-%{version}
 
 maintainer = Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org>
@@ -131,9 +131,12 @@ build
 			cat .config
 
 			# Run the build.
-			make ARCH=%{kernel_arch} olddefconfig >/dev/null
+			make ARCH=%{kernel_arch} HOSTCFLAGS="%{CFLAGS}" \
+				HOSTLDFLAGS="%{LDFLAGS}" olddefconfig >/dev/null
+
 			make ARCH=%{kernel_arch} %{kernel_target} modules \
-				KERNELRELEASE=${fullversion} %{PARALLELISMFLAGS}
+				KERNELRELEASE=${fullversion} HOSTCFLAGS="%{CFLAGS}" \
+				HOSTLDFLAGS="%{LDFLAGS}" %{PARALLELISMFLAGS}
 
 			# Compile Flattened Device Tree database
 			case "${DISTRO_ARCH}" in
diff --git a/krb5/kdc.conf b/krb5/kdc.conf
index a4f590150..ef9974454 100644
--- a/krb5/kdc.conf
+++ b/krb5/kdc.conf
@@ -5,8 +5,8 @@
 [realms]
  EXAMPLE.COM = {
   #master_key_type = aes256-cts
-  acl_file = /var/kerberos/krb5kdc/kadm5.acl
+  acl_file = /var/lib/kerberos/krb5kdc/kadm5.acl
   dict_file = /usr/share/dict/words
-  admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
+  admin_keytab = /var/lib/kerberos/krb5kdc/kadm5.keytab
   supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
  }
diff --git a/krb5/krb5.nm b/krb5/krb5.nm
index 9113a4a55..075019d3c 100644
--- a/krb5/krb5.nm
+++ b/krb5/krb5.nm
@@ -7,7 +7,7 @@ name       = krb5
 version    = %{ver_maj}.%{ver_min}
 ver_maj    = 1.20
 ver_min    = 1
-release    = 3
+release    = 4
 
 groups     = System/Libraries
 url        = https://web.mit.edu/kerberos/www/
@@ -47,7 +47,7 @@ build
 	configure_options += \
 		--enable-shared \
 		--disable-rpath \
-		--localstatedir=/var/kerberos \
+		--localstatedir=%{sharedstatedir}/kerberos \
 		--with-system-et \
 		--with-system-ss \
 		--with-netlib=-lresolv \
@@ -70,9 +70,9 @@ build
 
 	install_cmds
 		# Sample KDC config files (bundled kdc.conf and kadm5.acl).
-		mkdir -pv %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc
-		install -pm 600 %{DIR_SOURCE}/kdc.conf %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc/
-		install -pm 600 %{DIR_SOURCE}/kadm5.acl %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc/
+		mkdir -pv %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc
+		install -pm 600 %{DIR_SOURCE}/kdc.conf %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc/
+		install -pm 600 %{DIR_SOURCE}/kadm5.acl %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc/
 
 		# Default configuration file for everything.
 		mkdir -pv %{BUILDROOT}/etc
diff --git a/krb5/systemd/kadmin.service b/krb5/systemd/kadmin.service
index 7775ea74c..4d8bbbf57 100644
--- a/krb5/systemd/kadmin.service
+++ b/krb5/systemd/kadmin.service
@@ -1,7 +1,7 @@
 [Unit]
 Description=Kerberos 5 Password-changing and Administration
 After=syslog.target network.target
-ConditionPathExists=!/var/kerberos/krb5kdc/kpropd.acl
+ConditionPathExists=!/var/lib/kerberos/krb5kdc/kpropd.acl
 
 [Service]
 Type=forking
diff --git a/krb5/systemd/kprop.service b/krb5/systemd/kprop.service
index 99ba12976..3f5816535 100644
--- a/krb5/systemd/kprop.service
+++ b/krb5/systemd/kprop.service
@@ -1,7 +1,7 @@
 [Unit]
 Description=Kerberos 5 Propagation
 After=syslog.target network.target
-ConditionPathExists=/var/kerberos/krb5kdc/kpropd.acl
+ConditionPathExists=/var/lib/kerberos/krb5kdc/kpropd.acl
 
 [Service]
 Type=forking
diff --git a/libdb/libdb.nm b/libdb/libdb.nm
index ed20767cd..08d60a401 100644
--- a/libdb/libdb.nm
+++ b/libdb/libdb.nm
@@ -8,7 +8,7 @@ version_major = 6
 version_minor = 1
 version_patch = 26
 version    = %{version_major}.%{version_minor}.%{version_patch}
-release    = 3
+release    = 4
 thisapp    = db-%{version}
 
 soversion  = %{version_major}.%{version_minor}
@@ -85,6 +85,14 @@ build
 		for i in db.h db_cxx.h db_185.h; do
 			ln -svf %{name}/${i} %{BUILDROOT}/%{includedir}
 		done
+
+		# Fix binary permissions.
+		find %{BUILDROOT}%{bindir} -type f -executable \
+			 -exec chmod 755 {} \;
+
+		# Fix header permissions.
+		find %{BUILDROOT}%{includedir} -type f -iname "*.h" \
+			-exec chmod 644 {} \;
 	end
 end
 
diff --git a/liboping/liboping.nm b/liboping/liboping.nm
index 8f2296e7f..480ccf014 100644
--- a/liboping/liboping.nm
+++ b/liboping/liboping.nm
@@ -5,7 +5,7 @@
 
 name       = liboping
 version    = 1.10.0
-release    = 4
+release    = 5
 
 groups     = Development/Tools
 url        = https://noping.cc/
@@ -32,8 +32,9 @@ build
 		--without-perl-bindings
 
 	install_cmds
-		#setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/oping
-		#setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/noping
+		# Set capabilities
+		setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/oping
+		setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/noping
 	end
 end
 
diff --git a/libvirt/libvirt.nm b/libvirt/libvirt.nm
index 0014ab38f..9c0b0a91b 100644
--- a/libvirt/libvirt.nm
+++ b/libvirt/libvirt.nm
@@ -5,7 +5,7 @@
 
 name       = libvirt
 version    = 8.10.0
-release    = 4
+release    = 5
 
 maintainer = Jonatan Schlag <jonatan.schlag(a)ipfire.org>
 groups     = Applications/Virtualization
@@ -134,6 +134,12 @@ build
 
 	install
 		%{meson_install}
+
+		# Fix binary permissions.
+		find %{BUILDROOT}%{bindir} -type f -executable -exec chmod 755 {} \;
+
+		# Drop /var/run
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
 	end
 end
 
diff --git a/lldpd/lldpd.nm b/lldpd/lldpd.nm
index 54f00168d..0736fe310 100644
--- a/lldpd/lldpd.nm
+++ b/lldpd/lldpd.nm
@@ -5,7 +5,7 @@
 
 name       = lldpd
 version    = 1.0.16
-release    = 1.1
+release    = 2
 
 groups     = Networking/Tools
 url        = https://lldpd.github.io
@@ -47,12 +47,6 @@ build
 	prepare_cmds
 		%{create_user}
 	end
-
-	install_cmds
-		# Create tmp directory.
-		mkdir -pv -m 700 %{BUILDROOT}/run/lldpd
-		chown -v lldpd.lldpd %{BUILDROOT}/run/lldpd
-	end
 end
 
 create_user
diff --git a/lm-sensors/lm-sensors.nm b/lm-sensors/lm-sensors.nm
index b49b296e0..464ed1a5c 100644
--- a/lm-sensors/lm-sensors.nm
+++ b/lm-sensors/lm-sensors.nm
@@ -5,7 +5,7 @@
 
 name       = lm-sensors
 version    = 3.6.0
-release    = 1
+release    = 2
 thisapp    = %{name}-3-6-0
 
 groups     = Applications/Statistics
@@ -27,14 +27,19 @@ build
 		rrdtool-devel
 	end
 
+	make_build_targets += \
+		CFLAGS="%{CFLAGS}" \
+		LDFLAGS="%{LDFLAGS}" \
+		EXLDFLAGS="%{LDFLAGS}" \
+		BUILD_STATIC_LIB=0 \
+		PROG_EXTRA=sensord
+
 	make_install_targets += \
 		PREFIX=%{prefix} \
 		LIBDIR=%{libdir} \
 		MANDIR=%{mandir} \
-		PROG_EXTRA=sensord \
 		BUILD_STATIC_LIB=0 \
-		CFLAGS="%{CFLAGS}" \
-		EXLDFLAGS="%{LDFLAGS}" 
+		PROG_EXTRA=sensord
 end
 
 packages
diff --git a/lvm2/lvm2.nm b/lvm2/lvm2.nm
index abcdd1bd9..4acd10799 100644
--- a/lvm2/lvm2.nm
+++ b/lvm2/lvm2.nm
@@ -5,7 +5,7 @@
 
 name       = lvm2
 version    = 2.03.16
-release    = 1
+release    = 2
 thisapp    = LVM2.%{version}
 
 groups     = System/Base
@@ -72,6 +72,9 @@ build
 		make install_systemd_units DESTDIR=%{BUILDROOT}
 		make install_systemd_generators DESTDIR=%{BUILDROOT}
 		make install_tmpfiles_configuration DESTDIR=%{BUILDROOT}
+
+		# Remove /run and it's content.
+		rm -rvf %{BUILDROOT}/run
 	end
 end
 
diff --git a/mdadm/mdadm.nm b/mdadm/mdadm.nm
index d4a25fdee..d40dfe51a 100644
--- a/mdadm/mdadm.nm
+++ b/mdadm/mdadm.nm
@@ -5,7 +5,7 @@
 
 name       = mdadm
 version    = 4.2
-release    = 1
+release    = 2
 
 groups     = System/Base
 url        = http://www.kernel.org/pub/linux/utils/raid/mdadm/
@@ -48,11 +48,6 @@ build
 		BINDIR=%{sbindir} \
 		UDEVDIR=%{prefix}/%{lib}/udev \
 		SYSTEMD_DIR="%{unitdir}"
-
-	install_cmds
-		mkdir -pv %{BUILDROOT}/var/run/mdadm
-		chmod 700 %{BUILDROOT}/var/run/mdadm
-	end
 end
 
 packages
diff --git a/mdadm/mdadm.tmpfiles b/mdadm/mdadm.tmpfiles
new file mode 100644
index 000000000..e163ef8f9
--- /dev/null
+++ b/mdadm/mdadm.tmpfiles
@@ -0,0 +1 @@
+d /run/mdadm 0700 root root -
diff --git a/net-snmp/net-snmp.nm b/net-snmp/net-snmp.nm
index 1bcc538ac..26e905313 100644
--- a/net-snmp/net-snmp.nm
+++ b/net-snmp/net-snmp.nm
@@ -5,7 +5,7 @@
 
 name       = net-snmp
 version    = 5.9.3
-release    = 2
+release    = 3
 
 groups     = Networking/Daemons
 url        = http://net-snmp.sourceforge.net
@@ -93,8 +93,8 @@ build
 		install -v -m644 %{DIR_SOURCE}/snmptrapd.conf \
 			%{BUILDROOT}%{sysconfdir}/snmp/snmptrapd.conf
 
-		# Prepare runtime directories.
-		mkdir -pv %{BUILDROOT}%{localstatedir}/{lib,run}/net-snmp
+		# Prepare runtime directory
+		mkdir -pv %{BUILDROOT}%{sharedstatedir}/net-snmp
 
 		# Remove scripts in /bin which requires the SNMP
 		# perl bindings.
diff --git a/netpbm/netpbm.nm b/netpbm/netpbm.nm
index cbafb517c..bca23a696 100644
--- a/netpbm/netpbm.nm
+++ b/netpbm/netpbm.nm
@@ -5,7 +5,7 @@
 
 name       = netpbm
 version    = 10.73.42
-release    = 2
+release    = 3
 
 groups     = System/Libraries
 url        = https://netpbm.sourceforge.net/
@@ -86,7 +86,7 @@ build
 		fi
 		ln -svf libnetpbm.so.11 %{BUILDROOT}%{libdir}/libnetpbm.so
 
-		rm -rvf %{BUILDROOT}%{prefix}/{README,VERSION,link,misc,man,pkginfo,config_template}
+		rm -rvf %{BUILDROOT}%{prefix}/{README,VERSION,link,misc,man,pkginfo,config_template,pkgconfig_template}
 		rm -rvf %{BUILDROOT}%{bindir}/doc.url
 	end
 end
diff --git a/nettle/nettle.nm b/nettle/nettle.nm
index 253119d03..b6a0657b8 100644
--- a/nettle/nettle.nm
+++ b/nettle/nettle.nm
@@ -5,7 +5,7 @@
 
 name       = nettle
 version    = 3.8.1
-release    = 1
+release    = 2
 
 groups     = System/Libraries
 url        = http://www.lysator.liu.se/~nisse/nettle/
@@ -34,6 +34,11 @@ build
 	test
 		make check
 	end
+
+	install_cmds
+		# Fix library permissions.
+		find %{BUILDROOT}%{libdir} -type f -exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/network/network.nm b/network/network.nm
index 4879f71f9..85a9d15b3 100644
--- a/network/network.nm
+++ b/network/network.nm
@@ -5,7 +5,7 @@
 
 name       = network
 version    = 010
-release    = 4.2
+release    = 5
 
 maintainer = Michael Tremer <michael.tremer(a)ipfire.org>
 groups     = Base Networking/Tools
diff --git a/network/patches/network-fix-logdir-path.patch b/network/patches/network-fix-logdir-path.patch
new file mode 100644
index 000000000..f708c030a
--- /dev/null
+++ b/network/patches/network-fix-logdir-path.patch
@@ -0,0 +1,23 @@
+commit 88e5f32944b8dc1c4b1c74028c7d46c37b2aad34
+Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
+Date:   Sun Mar 19 15:58:11 2023 +0100
+
+    Makefile.am: Fix typo defining the logdir
+    
+    The correct value name should be "localstatedir"
+    
+    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
+
+diff --git a/Makefile.am b/Makefile.am
+index 893f1b8..5dc4629 100644
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -51,7 +51,7 @@ hooks_zonesdir   = $(hooksdir)/zones
+ 
+ triggersdir      = $(networkdir)/triggers
+ 
+-logdir           = $(localestatedir)/log/network
++logdir           = $(localstatedir)/log/network
+ utildir          = $(networkdir)
+ 
+ CLEANFILES =
diff --git a/nfs-utils/nfs-utils.nm b/nfs-utils/nfs-utils.nm
index 771c47636..9cc6740bb 100644
--- a/nfs-utils/nfs-utils.nm
+++ b/nfs-utils/nfs-utils.nm
@@ -5,7 +5,7 @@
 
 name       = nfs-utils
 version    = 2.6.2
-release    = 4
+release    = 5
 
 groups     = Networking/Tools
 url        = http://nfs.sourceforge.net/
@@ -51,6 +51,7 @@ build
 		--enable-mountconfig \
 		--enable-ipv6 \
 		--enable-gss \
+		--enable-caps \
 		--with-statedir=/var/lib/nfs \
 		--with-statdpath=/var/lib/nfs/statd \
 		--with-start-statd=/usr/bin/start-statd \
@@ -82,6 +83,10 @@ build
 
 		mkdir -pv %{BUILDROOT}/var/lib/nfs/statd/sm{,.bak}
 		chown rpcuser:rpcuser -Rv %{BUILDROOT}/var/lib/nfs/statd
+
+		# Set capabilities
+		chmod -v 0755 %{BUILDROOT}%{bindir}/mount.nfs
+		setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/mount.nfs
 	end
 end
 
diff --git a/openldap/openldap.nm b/openldap/openldap.nm
index afda58701..2fef95225 100644
--- a/openldap/openldap.nm
+++ b/openldap/openldap.nm
@@ -5,7 +5,7 @@
 
 name       = openldap
 version    = 2.6.4
-release    = 2
+release    = 3
 
 groups     = System/Daemons
 url        = https://www.openldap.org/
@@ -92,12 +92,10 @@ build
 		# Create directoires.
 		mkdir -pv %{BUILDROOT}%{sysconfdir}/%{name}/slapd.d
 		mkdir -pv %{BUILDROOT}%{sysconfdir}/%{name}/certs
-		mkdir -pv %{BUILDROOT}/run/%{name}
 		mkdir -pv %{BUILDROOT}%{sharedstatedir}/ldap
 
 		# Fix permissions and ownerships.
 		chown -Rv ldap:ldap %{BUILDROOT}%{sysconfdir}/%{name}
-		chown ldap:ldap %{BUILDROOT}/run/%{name}
 		chown ldap:ldap %{BUILDROOT}%{sharedstatedir}/ldap
 		chmod 700 -Rv %{BUILDROOT}%{sharedstatedir}/ldap
 	end
diff --git a/openssh/openssh.nm b/openssh/openssh.nm
index 9ae7bf738..2d90ee6ba 100644
--- a/openssh/openssh.nm
+++ b/openssh/openssh.nm
@@ -5,7 +5,7 @@
 
 name       = openssh
 version    = 9.1p1
-release    = 2
+release    = 4
 
 groups     = Application/Internet
 url        = https://www.openssh.com/portable.html
@@ -41,7 +41,7 @@ build
 		--libexecdir=%{libdir}/openssh \
 		--with-default-path=/usr/local/bin:/bin:/usr/bin \
 		--with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin \
-		--with-privsep-path=/var/empty/sshd \
+		--with-privsep-path=%{sharedstatedir}/sshd \
 		--enable-vendor-patchlevel="%{DISTRO_NAME} %{thisver}" \
 		--disable-strip \
 		--with-ssl-engine \
@@ -68,7 +68,7 @@ build
 
 		# Install scriptfile for key generation
 		mkdir -pv %{BUILDROOT}%{sbindir}
-		install -m 754 %{DIR_SOURCE}/sshd-keygen %{BUILDROOT}%{sbindir}
+		install -m 755 %{DIR_SOURCE}/sshd-keygen %{BUILDROOT}%{sbindir}
 
 		# Install ssh-copy-id.
 		install -m755 contrib/ssh-copy-id %{BUILDROOT}%{bindir}
@@ -147,7 +147,7 @@ packages
 			%{mandir}/man5/moduli.5*
 			%{mandir}/man8/sshd.8*
 			%{mandir}/man8/sftp-server.8*
-			/var/empty/sshd
+			%{sharedstatedir}/sshd
 		end
 
 		configfiles
@@ -164,7 +164,7 @@ packages
 			getent group sshd >/dev/null || groupadd -r sshd
 			getent passwd sshd >/dev/null || useradd -r -g sshd \
 				-c "Privilege-separated SSH" \
-				-d /var/empty/sshd -s /sbin/nologin sshd
+				-d /var/lib/sshd -s /sbin/nologin sshd
 		end
 
 		script postin
diff --git a/pciutils/pciutils.nm b/pciutils/pciutils.nm
index 976bcc48c..8a819fbc8 100644
--- a/pciutils/pciutils.nm
+++ b/pciutils/pciutils.nm
@@ -5,7 +5,7 @@
 
 name       = pciutils
 version    = 3.9.0
-release    = 1
+release    = 2
 
 groups     = System/Base
 url        = https://mj.ucw.cz/sw/pciutils/
@@ -46,10 +46,10 @@ build
 
 		# Install headers.
 		mkdir -pv %{BUILDROOT}%{includedir}/pci
-		install -p lib/pci.h %{BUILDROOT}%{includedir}/pci
-		install -p lib/header.h %{BUILDROOT}%{includedir}/pci
-		install -p lib/config.h %{BUILDROOT}%{includedir}/pci
-		install -p lib/types.h %{BUILDROOT}%{includedir}/pci
+		install -p -m 644 lib/pci.h %{BUILDROOT}%{includedir}/pci
+		install -p -m 644 lib/header.h %{BUILDROOT}%{includedir}/pci
+		install -p -m 644 lib/config.h %{BUILDROOT}%{includedir}/pci
+		install -p -m 644 lib/types.h %{BUILDROOT}%{includedir}/pci
 
 		# Install pkg-config files.
 		mkdir -pv %{BUILDROOT}%{libdir}/pkgconfig
diff --git a/perl-BDB/perl-BDB.nm b/perl-BDB/perl-BDB.nm
index 326ee37cb..3ad22acf0 100644
--- a/perl-BDB/perl-BDB.nm
+++ b/perl-BDB/perl-BDB.nm
@@ -5,7 +5,7 @@
 
 name       = perl-BDB
 version    = 1.91
-release    = 1.1
+release    = 2
 thisapp    = BDB-%{version}
 
 groups     = Development/Libraries
@@ -25,7 +25,6 @@ build
 		perl(ExtUtils::MakeMaker)
 		perl(ExtUtils::ParseXS)
 		libdb-devel
-		pakfire >= 0.9.26-3.1
 	end
 
 	build
@@ -39,6 +38,12 @@ build
 
 	make_install_targets = \
 		pure_install DESTDIR=%{BUILDROOT}
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-Coro/perl-Coro.nm b/perl-Coro/perl-Coro.nm
index 7a87e13d1..c5b8e22ef 100644
--- a/perl-Coro/perl-Coro.nm
+++ b/perl-Coro/perl-Coro.nm
@@ -5,7 +5,7 @@
 
 name       = perl-Coro
 version    = 6.57
-release    = 1
+release    = 2
 thisapp    = Coro-%{version}
 
 groups     = Development/Libraries
@@ -45,6 +45,12 @@ build
 
 	make_install_targets = \
 		pure_install DESTDIR=%{BUILDROOT}
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm b/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm
index 9ab4b1fbe..1a09bce7c 100644
--- a/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm
+++ b/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm
@@ -5,7 +5,7 @@
 
 name       = perl-Crypt-OpenSSL-X509
 version    = 1.914
-release    = 1
+release    = 3
 thisapp    = Crypt-OpenSSL-X509-%{version}
 
 groups     = Development/Libraries
@@ -21,9 +21,11 @@ source_dl  = https://cpan.metacpan.org/authors/id/J/JO/JONASBN/
 
 build
 	requires
+		openssl-devel
 		perl(Crypt::OpenSSL::Guess)
+		perl(Convert::ASN1)
 		perl(ExtUtils::MakeMaker)
-		openssl-devel
+		perl(Test::More)
 	end
 
 	build
@@ -33,6 +35,16 @@ build
 
 	make_install_targets = \
 		pure_install
+
+	test
+		make test
+	end
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-DBI/perl-DBI.nm b/perl-DBI/perl-DBI.nm
index 3d1d668d4..e7c581687 100644
--- a/perl-DBI/perl-DBI.nm
+++ b/perl-DBI/perl-DBI.nm
@@ -5,7 +5,7 @@
 
 name       = perl-DBI
 version    = 1.643
-release    = 1.1
+release    = 2
 thisapp    = DBI-%{version}
 
 groups     = Development/Libraries
@@ -67,6 +67,16 @@ build
 
 	make_install_targets = \
 		pure_install DESTDIR=%{BUILDROOT}
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+
+		# Set correct binary permissions.
+		find %{BUILDROOT}%{bindir} -type f -executable \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-Digest-SHA1/perl-Digest-SHA1.nm b/perl-Digest-SHA1/perl-Digest-SHA1.nm
index ac3aaa4ea..b9b607e2d 100644
--- a/perl-Digest-SHA1/perl-Digest-SHA1.nm
+++ b/perl-Digest-SHA1/perl-Digest-SHA1.nm
@@ -5,7 +5,7 @@
 
 name       = perl-Digest-SHA1
 version    = 2.13
-release    = 4.1
+release    = 6
 thisapp    = Digest-SHA1-%{version}
 
 groups     = Development/Libraries
@@ -33,7 +33,7 @@ build
 	requires
 		perl(ExtUtils::MakeMaker)
 		perl(ExtUtils::ParseXS)
-		pakfire >= 0.9.26-3.1
+		perl(Test::More)
 	end
 
 	build
@@ -41,8 +41,18 @@ build
 		make %{PARALLELISMFLAGS}
 	end
 
+	test
+		make test
+	end
+
 	make_install_targets = \
 		pure_install
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-FCGI/perl-FCGI.nm b/perl-FCGI/perl-FCGI.nm
index c2f3a3b8e..73ac9047e 100644
--- a/perl-FCGI/perl-FCGI.nm
+++ b/perl-FCGI/perl-FCGI.nm
@@ -5,7 +5,7 @@
 
 name       = perl-FCGI
 version    = 0.77
-release    = 1.1
+release    = 2
 thisapp    = FCGI-%{version}
 
 groups     = Development/Libraries
@@ -23,7 +23,7 @@ build
 	requires
 		perl(ExtUtils::MakeMaker)
 		perl(ExtUtils::ParseXS)
-		pakfire >= 0.9.26-3.1
+		perl(Test::More)
 	end
 
 	build
@@ -37,6 +37,12 @@ build
 
 	make_install_targets = \
 		pure_install DESTDIR=%{BUILDROOT}
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-GSSAPI/perl-GSSAPI.nm b/perl-GSSAPI/perl-GSSAPI.nm
index ca2e5dec7..18ed8f2c0 100644
--- a/perl-GSSAPI/perl-GSSAPI.nm
+++ b/perl-GSSAPI/perl-GSSAPI.nm
@@ -5,7 +5,7 @@
 
 name       = perl-GSSAPI
 version    = 0.28
-release    = 1
+release    = 2
 thisapp    = GSSAPI-%{version}
 
 groups     = Development/Libraries
@@ -25,7 +25,7 @@ build
 	requires
 		krb5-devel
 		perl(ExtUtils::MakeMaker)
-		perl(Test::More) >= 0.47
+		perl(Test::More)
 	end
 
 	build
@@ -33,6 +33,16 @@ build
 			INSTALLDIRS=vendor OPTIMIZE="%{CFLAGS}"
 		make %{PARALLELISMFLAGS}
 	end
+
+	test
+		make test
+	end
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+		-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-HTML-Parser/perl-HTML-Parser.nm b/perl-HTML-Parser/perl-HTML-Parser.nm
index 02d8b3c9a..f5cb7b857 100644
--- a/perl-HTML-Parser/perl-HTML-Parser.nm
+++ b/perl-HTML-Parser/perl-HTML-Parser.nm
@@ -5,7 +5,7 @@
 
 name       = perl-HTML-Parser
 version    = 3.71
-release    = 1.1
+release    = 2
 
 groups     = Development/Libratries
 url        = http://search.cpan.org/dist/HTML-Parser/
@@ -28,7 +28,6 @@ build
 		perl-devel
 		perl(HTML::Tagset)
 		perl(Test::More)
-		pakfire >= 0.9.26-3.1
 	end
 
 	build
@@ -39,6 +38,12 @@ build
 	test
 		make test
 	end
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-HTML-Tagset/perl-HTML-Tagset.nm b/perl-HTML-Tagset/perl-HTML-Tagset.nm
index 9a1d342c0..cb6f21ac6 100644
--- a/perl-HTML-Tagset/perl-HTML-Tagset.nm
+++ b/perl-HTML-Tagset/perl-HTML-Tagset.nm
@@ -5,7 +5,7 @@
 
 name       = perl-HTML-Tagset
 version    = 3.20
-release    = 1
+release    = 2
 arch       = noarch
 thisapp    = HTML-Tagset-%{version}
 
@@ -23,8 +23,8 @@ source_dl  = http://search.cpan.org/CPAN/authors/id/P/PE/PETDANCE/
 
 build
 	requires
-		perl-core
-		perl-devel
+		perl(ExtUtils::MakeMaker)
+		perl(Test::More)
 	end
 
 	build
diff --git a/perl-IO-AIO/perl-IO-AIO.nm b/perl-IO-AIO/perl-IO-AIO.nm
index dd29ef244..0149ca8b1 100644
--- a/perl-IO-AIO/perl-IO-AIO.nm
+++ b/perl-IO-AIO/perl-IO-AIO.nm
@@ -5,7 +5,7 @@
 
 name       = perl-IO-AIO
 version    = 4.32
-release    = 1.2
+release    = 2
 thisapp    = IO-AIO-%{version}
 
 groups     = Development/Libraries
@@ -45,6 +45,10 @@ build
 	install_cmds
 		# Remove script we don't want packaged
 		rm -rvf %{BUILDROOT}%{bindir}/treescan
+
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
 	end
 end
 
diff --git a/perl-Net-SSLeay/perl-Net-SSLeay.nm b/perl-Net-SSLeay/perl-Net-SSLeay.nm
index 3083b1eac..f4774caf3 100644
--- a/perl-Net-SSLeay/perl-Net-SSLeay.nm
+++ b/perl-Net-SSLeay/perl-Net-SSLeay.nm
@@ -5,7 +5,7 @@
 
 name       = perl-Net-SSLeay
 version    = 1.85
-release    = 1
+release    = 2
 thisapp    = Net-SSLeay-%{version}
 
 groups     = Development/Libraries
@@ -26,7 +26,7 @@ build
 		perl(FindBin)
 		perl(ExtUtils::MakeMaker)
 		perl(Module::Install)
-		perl(Test::More) >= 0.47
+		perl(Test::More)
 		zlib-devel
 	end
 
@@ -40,6 +40,12 @@ build
 	#test
 	#	make test
 	#end
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-Parse-Yapp/perl-Parse-Yapp.nm b/perl-Parse-Yapp/perl-Parse-Yapp.nm
index 4ceb6441b..663b48b89 100644
--- a/perl-Parse-Yapp/perl-Parse-Yapp.nm
+++ b/perl-Parse-Yapp/perl-Parse-Yapp.nm
@@ -5,7 +5,7 @@
 
 name       = perl-Parse-Yapp
 version    = 1.21
-release    = 1
+release    = 2
 thisapp    = Parse-Yapp-%{version}
 
 groups     = Development/Libratries
@@ -35,6 +35,16 @@ build
 	test
 		make test
 	end
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+
+		# Set correct binary permissions.
+		find %{BUILDROOT}%{bindir} -type f -executable \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-SGMLSpm/perl-SGMLSpm.nm b/perl-SGMLSpm/perl-SGMLSpm.nm
index bc03dd3e8..a408ae7c5 100644
--- a/perl-SGMLSpm/perl-SGMLSpm.nm
+++ b/perl-SGMLSpm/perl-SGMLSpm.nm
@@ -5,7 +5,7 @@
 
 name       = perl-SGMLSpm
 version    = 1.1
-release    = 1
+release    = 2
 thisapp    = SGMLSpm-%{version}
 arch       = noarch
 
@@ -24,6 +24,7 @@ source_dl  = https://cpan.metacpan.org/authors/id/R/RA/RAAB/
 build
 	requires
 		perl(ExtUtils::MakeMaker)
+		perl(Test::More)
 	end
 
 	build
@@ -34,6 +35,11 @@ build
 	test
 		make test
 	end
+
+	install_cmds
+		# Drop unwanted script
+		rm -rvf %{BUILDROOT}%{bindir}/sgmlspl.pl
+	end
 end
 
 packages
diff --git a/perl-TermReadKey/perl-TermReadKey.nm b/perl-TermReadKey/perl-TermReadKey.nm
index e3822cc2d..5c21cc897 100644
--- a/perl-TermReadKey/perl-TermReadKey.nm
+++ b/perl-TermReadKey/perl-TermReadKey.nm
@@ -5,7 +5,7 @@
 
 name       = perl-TermReadKey
 version    = 2.38
-release    = 1
+release    = 3
 thisapp    = TermReadKey-%{version}
 
 groups     = Development/Libraries
@@ -31,6 +31,7 @@ build
 		perl(Carp)
 		perl(Exporter)
 		perl(ExtUtils::MakeMaker)
+		perl(Test::More)
 	end
 
 	build
@@ -38,8 +39,18 @@ build
 		make %{PARALLELISMFLAGS}
 	end
 
+	test
+		make test
+	end
+
 	make_install_targets = \
 		pure_install
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-WWW-Curl/perl-WWW-Curl.nm b/perl-WWW-Curl/perl-WWW-Curl.nm
index 20619266a..c7b69426e 100644
--- a/perl-WWW-Curl/perl-WWW-Curl.nm
+++ b/perl-WWW-Curl/perl-WWW-Curl.nm
@@ -5,7 +5,7 @@
 
 name       = perl-WWW-Curl
 version    = 4.17
-release    = 1.2
+release    = 3
 thisapp    = WWW-Curl-%{version}
 
 groups     = Development/Libraries
@@ -21,12 +21,12 @@ source_dl  = http://search.cpan.org/CPAN/authors/id/S/SZ/SZBALINT/
 
 build
 	requires
+		libcurl-devel
 		perl(FindBin)
 		perl(ExtUtils::MakeMaker)
 		perl(ExtUtils::ParseXS)
 		perl(Module::Install)
-		libcurl-devel
-		pakfire >= 0.9.26-3.1
+		perl(Test::More)
 	end
 
 	build
@@ -34,7 +34,32 @@ build
 		make %{PARALLELISMFLAGS}
 	end
 
-	make_install_targets = pure_install
+	test
+		# The following tests requires network connectivity
+		# Remove them
+		rm t/01basic.t
+		rm t/02callbacks.t
+		rm t/04abort-test.t
+		rm t/05progress.t
+		rm t/08ssl.t
+		rm t/09times.t
+		rm t/14duphandle.t
+		rm t/15duphandle-callback.t
+		rm t/18twinhandles.t
+		rm t/19multi.t
+		rm t/21write-to-scalar.t
+
+		make test
+	end
+
+	make_install_targets = \
+		pure_install
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl-XML-Parser/perl-XML-Parser.nm b/perl-XML-Parser/perl-XML-Parser.nm
index eae88d709..d1d2e540d 100644
--- a/perl-XML-Parser/perl-XML-Parser.nm
+++ b/perl-XML-Parser/perl-XML-Parser.nm
@@ -5,7 +5,7 @@
 
 name       = perl-XML-Parser
 version    = 2.44
-release    = 2
+release    = 4
 thisapp    = XML-Parser-%{version}
 
 groups     = Development/Libraries
@@ -24,20 +24,25 @@ source_dl  = http://search.cpan.org/CPAN/authors/id/T/TO/TODDR/
 build
 	requires
 		expat-devel
-		pakfire >= 0.9.26-3.1
-		perl-core
-		perl-devel
+		perl(English)
+		perl(ExtUtils::MakeMaker)
+		perl(FileHandle)
+		perl(Test::More)
 	end
 
 	build
 		perl Makefile.PL INSTALLDIRS=vendor
 		make %{PARALLELISMFLAGS}
 	end
-end
 
-quality-agent
-	whitelist_rpath
-		/lib
+	test
+		make test
+	end
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
 	end
 end
 
diff --git a/perl-libintl-perl/perl-libintl-perl.nm b/perl-libintl-perl/perl-libintl-perl.nm
index f7cd25eec..588bb633f 100644
--- a/perl-libintl-perl/perl-libintl-perl.nm
+++ b/perl-libintl-perl/perl-libintl-perl.nm
@@ -5,7 +5,7 @@
 
 name       = perl-libintl-perl
 version    = 1.33
-release    = 1
+release    = 2
 thisapp    = libintl-perl-%{version}
 
 groups     = Development/Libraries
@@ -27,7 +27,6 @@ build
 		perl(locale)
 		perl(ExtUtils::MakeMaker)
 		perl(Test::More)
-		pakfire >= 0.9.26-3.1
 	end
 
 	build
@@ -41,6 +40,12 @@ build
 
 	make_install_targets = \
 		pure_install DESTDIR=%{BUILDROOT}
+
+	install_cmds
+		# Set correct library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod 755 {} \;
+	end
 end
 
 packages
diff --git a/perl/perl.nm b/perl/perl.nm
index 3a7bad525..a19be3dcc 100644
--- a/perl/perl.nm
+++ b/perl/perl.nm
@@ -10,7 +10,7 @@ ver_plevel = 0
 version    = %{ver_major}.%{ver_minor}.%{ver_plevel}
 
 # Never reset release in this package, just increase.
-release    = 3
+release    = 4
 
 thisver    = %{version}-%{_release}
 
@@ -143,6 +143,9 @@ build
 	install_cmds
 		# Remove precreated directories
 		rm -rfv %{BUILDROOT}/usr/local
+
+		# Fix filer permissions of the so files.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" -exec chmod 755 {} \;
 	end
 end
 
diff --git a/plymouth/plymouth.nm b/plymouth/plymouth.nm
index 429551896..57b878dab 100644
--- a/plymouth/plymouth.nm
+++ b/plymouth/plymouth.nm
@@ -5,7 +5,7 @@
 
 name       = plymouth
 version    = 22.02.122
-release    = 4
+release    = 5
 
 groups     = System/Base
 url        = https://www.freedesktop.org/wiki/Software/Plymouth
@@ -58,6 +58,9 @@ build
 		rm -vf %{BUILDROOT}%{datadir}/plymouth/themes/spinfinity/header-image.png
 		cp -vf %{datadir}/pixmaps/system-logo-white.png \
 			%{BUILDROOT}%{datadir}/plymouth/themes/spinfinity/header-image.png
+
+		# Drop /var/run directory
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
 	end
 end
 
diff --git a/ppp/ppp.nm b/ppp/ppp.nm
index dc57a1b45..8013c4818 100644
--- a/ppp/ppp.nm
+++ b/ppp/ppp.nm
@@ -5,7 +5,7 @@
 
 name       = ppp
 version    = 2.4.9
-release    = 3.1
+release    = 4
 
 groups     = System/Daemons
 url        = https://ppp.samba.org/
@@ -58,8 +58,9 @@ build
 		ln -svf secrets %{BUILDROOT}/etc/ppp/pap-secrets
 		ln -svf secrets %{BUILDROOT}/etc/ppp/chap-secrets
 
-		mkdir -pv %{BUILDROOT}%{localstatedir}/lock/ppp
-		mkdir -pv %{BUILDROOT}/run/ppp
+		# Fix binary permissions.
+		find %{BUILDROOT}%{sbindir} -type f -executable \
+			-exec chmod 755 {} \;
 	end
 end
 
diff --git a/python3-cairo/python3-cairo.nm b/python3-cairo/python3-cairo.nm
index 88fa587ea..29a2187f2 100644
--- a/python3-cairo/python3-cairo.nm
+++ b/python3-cairo/python3-cairo.nm
@@ -5,7 +5,7 @@
 
 name       = python3-cairo
 version    = 1.23.0
-release    = 1
+release    = 2
 thisapp    = pycairo-%{version}
 
 groups     = Development/Tools
@@ -33,6 +33,10 @@ build
 
 	install
 		%{python3} setup.py install --skip-build --root="%{BUILDROOT}"
+
+		# Fix header permissions.
+		find %{BUILDROOT}%{includedir} -type f -iname "*.h" \
+			-exec chmod -v 644 {} \;
 	end
 end
 
diff --git a/python3-gobject3/python3-gobject3.nm b/python3-gobject3/python3-gobject3.nm
index f98cd5769..50518fea5 100644
--- a/python3-gobject3/python3-gobject3.nm
+++ b/python3-gobject3/python3-gobject3.nm
@@ -7,7 +7,7 @@ name       = python3-gobject3
 version    = %{ver_major}.%{ver_minor}
 ver_major  = 3.42
 ver_minor  = 2
-release    = 1
+release    = 2
 thisapp    = pygobject-%{version}
 
 groups     = Development/Tools
@@ -41,6 +41,10 @@ build
 
 	install
 		%{python3} setup.py install --skip-build --root=%{BUILDROOT}
+
+		# Set correct header file permissions.
+		find %{BUILDROOT}%{includedir} -type f -iname "*.h" \
+			-exec chmod -v 644 {} \;
 	end	
 end
 
diff --git a/qemu/qemu.nm b/qemu/qemu.nm
index 84a9f8d4d..f0ca0b84f 100644
--- a/qemu/qemu.nm
+++ b/qemu/qemu.nm
@@ -5,7 +5,7 @@
 
 name       = qemu
 version    = 7.2.0
-release    = 2
+release    = 3
 
 groups     = Applications/Virtualization
 url        = https://www.qemu.org
@@ -92,6 +92,19 @@ build
 		# Remove ivshm stuff
 		rm -vf %{BUILDROOT}%{bindir}/ivshmem* %{BUILDROOT}%{mandir}/ivshmem*
 
+		# Remove deprecated run directory.
+		rm -rvf %{BUILDROOT}/var/run
+
+		# Remove firmware files for non supported platforms.
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/hppa-firmware.img
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-ppc
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-sparc32
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-sparc64
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/palcode-clipper
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/s390-ccw.img
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/s390-netboot.img
+		rm -rvf %{BUILDROOT}%{datadir}/%{name}/u-boot.e500
+
 		# Make firmware non-executable
 		find %{BUILDROOT}%{datadir}/%{name} -type f -executable | xargs chmod -v a-x
 	end
diff --git a/samba/samba.nm b/samba/samba.nm
index e407f4988..2500967d7 100644
--- a/samba/samba.nm
+++ b/samba/samba.nm
@@ -5,7 +5,7 @@
 
 name       = samba
 version    = 4.17.5
-release    = 1.1
+release    = 2
 
 groups     = Networking/Daemons
 url        = http://www.samba.org/
@@ -100,13 +100,9 @@ build
 		mkdir -pv %{BUILDROOT}%{sysconfdir}/samba
 		echo "127.0.0.1 localhost" > %{BUILDROOT}%{sysconfdir}/samba/lmhosts
 		cp -vf %{DIR_SOURCE}/smb.conf %{BUILDROOT}/%{sysconfdir}/%{name}
-	end
-end
 
-quality-agent
-	whitelist_rpath
-		%{libdir}/samba
-		%{libdir}/tdb
+		# Drop /var/run
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
 	end
 end
 
diff --git a/screen/screen.nm b/screen/screen.nm
index eb8add2c0..4fe960b05 100644
--- a/screen/screen.nm
+++ b/screen/screen.nm
@@ -5,7 +5,7 @@
 
 name       = screen
 version    = 4.9.0
-release    = 1.1
+release    = 2
 
 groups     = Application/System
 url        = https://www.gnu.org/software/screen
@@ -32,8 +32,9 @@ build
 	end
 
 	configure_options += \
-		--with-socket-dir=/var/run/screen \
-		--with-sys-screenrc=/etc/screenrc
+		--enable-pam \
+		--with-socket-dir=/run/screen \
+		--with-sys-screenrc=%{sysconfdir}/screenrc
 
 	prepare_cmds
 		./autogen.sh
@@ -41,8 +42,14 @@ build
 
 	install_cmds
 		# Install screenrc
-		mkdir -pv %{BUILDROOT}/etc
-		cp -vf %{DIR_SOURCE}/screenrc %{BUILDROOT}/etc/screenrc
+		mkdir -pv %{BUILDROOT}%{sysconfdir}
+		cp -vf %{DIR_SOURCE}/screenrc %{BUILDROOT}%{sysconfdir}/screenrc
+
+		# Rename versioned screen binary into simple screen
+		mv -vf %{BUILDROOT}%{bindir}/screen{-%{version},}
+
+		# Remove suid bit from binary.
+		chmod -v -s %{BUILDROOT}%{bindir}/screen
 	end
 end
 
diff --git a/screen/screen.tmpfiles b/screen/screen.tmpfiles
new file mode 100644
index 000000000..9e4da5690
--- /dev/null
+++ b/screen/screen.tmpfiles
@@ -0,0 +1 @@
+d /run/screen 0775 root root
diff --git a/setup/setup.nm b/setup/setup.nm
index 3b41b2d3f..cee66fab4 100644
--- a/setup/setup.nm
+++ b/setup/setup.nm
@@ -5,7 +5,7 @@
 
 name       = setup
 version    = 3.0
-release    = 17
+release    = 18
 arch       = noarch
 
 groups     = Base Build System/Base
@@ -60,7 +60,6 @@ build
 
 		# Create MOTD (message of the day) folder layout.	
 		mkdir -p %{BUILDROOT}/etc/motd.d
-		mkdir -p %{BUILDROOT}/run/motd.d
 		mkdir -p %{BUILDROOT}/usr/lib/motd.d
 		touch %{BUILDROOT}/usr/lib/motd
 	
diff --git a/sgml-common/sgml-common.nm b/sgml-common/sgml-common.nm
index e1e3f13f3..5a3a72483 100644
--- a/sgml-common/sgml-common.nm
+++ b/sgml-common/sgml-common.nm
@@ -5,7 +5,7 @@
 
 name       = sgml-common
 version    = 0.6.3
-release    = 2
+release    = 3
 arch       = noarch
 
 groups     = Applications/Text
@@ -31,60 +31,63 @@ build
 	end
 
 	configure_options += \
-		--mandir=/usr/share/man \
-		--sysconfdir=/etc
+		--mandir=%{mandir} \
+		--sysconfdir=%{sysconfdir}
 
 	prepare_cmds
 		for i in COPYING INSTALL install-sh missing mkinstalldirs; do \
 			rm -f ${i}; \
-			cp -pvf /usr/share/automake*/${i} .; \
+			cp -pvf %{datadir}/automake*/${i} .; \
 		done
 	end
 
 	install_cmds
-		mkdir -pv %{BUILDROOT}/etc/{sg,x}ml/docbook
-		mkdir -pv %{BUILDROOT}/usr/share/sgml/docbook
+		mkdir -pv %{BUILDROOT}%{sysconfdir}/{sg,x}ml/docbook
+		mkdir -pv %{BUILDROOT}%{datadir}/sgml/docbook
 
 		# Touch SGML catalog
-		touch %{BUILDROOT}/etc/sgml/catalog
+		touch %{BUILDROOT}%{sysconfdir}/sgml/catalog
 
 		# Create an empty XML catalog.
-		xmlcatalog --noout --create %{BUILDROOT}/etc/xml/catalog
+		xmlcatalog --noout --create %{BUILDROOT}%{sysconfdir}/xml/catalog
 
 		# Now put the common DocBook entries in it
 		xmlcatalog --noout --add "delegatePublic" \
 			"-//OASIS//ENTITIES DocBook XML" \
-			"file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog
+			"file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
 
 		xmlcatalog --noout --add "delegatePublic" \
 			"-//OASIS//DTD DocBook XML" \
-			"file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog
+			"file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
 
 		xmlcatalog --noout --add "delegatePublic" \
 			"ISO 8879:1986" \
-			"file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog
+			"file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
 
 		xmlcatalog --noout --add "delegateSystem" \
 			"http://www.oasis-open.org/docbook/" \
-			"file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog
+			"file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
 
 		xmlcatalog --noout --add "delegateURI" \
 			"http://www.oasis-open.org/docbook/" \
-			"file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog
+			"file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
 
 		# Also create the common DocBook catalog
 		xmlcatalog --noout --create \
-			%{BUILDROOT}/etc/sgml/docbook/xmlcatalog
+			%{BUILDROOT}%{sysconfdir}/sgml/docbook/xmlcatalog
 
-		ln -svf ../../../../etc/sgml/docbook/xmlcatalog \
-			%{BUILDROOT}/usr/share/sgml/docbook/xmlcatalog
+		ln -svf ../../../..%{sysconfdir}/sgml/docbook/xmlcatalog \
+			%{BUILDROOT}%{datadir}/sgml/docbook/xmlcatalog
 
-		rm -f %{BUILDROOT}/usr/share/sgml/xml.dcl
+		rm -rvf %{BUILDROOT}%{datadir}/sgml/xml.dcl
 
 		install -p -m0644 %{DIR_SOURCE}/*.dcl %{DIR_SOURCE}/*.soc \
-			%{BUILDROOT}/usr/share/sgml
+			%{BUILDROOT}%{datadir}/sgml
 
-		rm -rf %{BUILDROOT}/usr/share/xml/*
+		rm -rvf %{BUILDROOT}%{datadir}/xml/*
+
+		# Remove unused and wrongly installed HTML documentation.
+		rm -rvf %{BUILDROOT}%{prefix}/doc
 	end
 end
 
@@ -104,9 +107,9 @@ packages
 		end
 
 		files
-			/etc/xml
-			/etc/sgml/docbook/xmlcatalog
-			/usr/share/sgml/docbook/xmlcatalog
+			%{sysconfdir}/xml
+			%{sysconfdir}/sgml/docbook/xmlcatalog
+			%{datadir}/sgml/docbook/xmlcatalog
 		end
 	end
 end
diff --git a/shadow-utils/shadow-utils.nm b/shadow-utils/shadow-utils.nm
index 1b3be3674..fcc4fd5fd 100644
--- a/shadow-utils/shadow-utils.nm
+++ b/shadow-utils/shadow-utils.nm
@@ -5,7 +5,7 @@
 
 name       = shadow-utils
 version    = 4.13
-release    = 1
+release    = 2
 thisapp    = shadow-%{version}
 
 groups     = System/Base
@@ -51,14 +51,12 @@ build
 		--with-yescrypt \
 		--without-audit \
 		--without-selinux \
-		--without-su
-
-	# This should be enabled, but our environment currently does not support this
-	configure_options += --without-fcaps
+		--without-su \
+		--with-fcaps
 
 	install_cmds
 		rm -vf \
-			%{BUILDROOT}/{%{bindir},%{sbindir},%{mandir}/*}/{chfn,chsh,login,logoutd,newgrp,nologin,sg,vigr,vipw}*
+			%{BUILDROOT}/{%{bindir},%{sbindir},%{mandir}/*}/{chage,chfn,chsh,expiry,login,logoutd,newgrp,nologin,sg,vigr,vipw}*
 	end
 end
 
diff --git a/snort/snort.nm b/snort/snort.nm
index 3334d5b9b..53389edf9 100644
--- a/snort/snort.nm
+++ b/snort/snort.nm
@@ -5,7 +5,7 @@
 
 name       = snort
 version    = 3.1.50.0
-release    = 1
+release    = 2
 thisapp    = snort3-%{version}
 
 groups     = Networking/Tools
@@ -45,6 +45,11 @@ build
 
 		make %{PARALLELISMFLAGS}
 	end
+
+	install_cmds
+		# Set correct permissions for helper script.
+		chmod -v 755 %{BUILDROOT}%{bindir}/appid_detector_builder.sh
+	end
 end
 
 packages
diff --git a/spectre-meltdown-checker/spectre-meltdown-checker.nm b/spectre-meltdown-checker/spectre-meltdown-checker.nm
index 11cfb1818..96f10326c 100644
--- a/spectre-meltdown-checker/spectre-meltdown-checker.nm
+++ b/spectre-meltdown-checker/spectre-meltdown-checker.nm
@@ -5,7 +5,7 @@
 
 name       = spectre-meltdown-checker
 version    = 0.45
-release    = 1
+release    = 2
 
 groups     = Development/Tools
 url        = https://github.com/speed47/spectre-meltdown-checker
@@ -26,7 +26,7 @@ build
 
 	install
 		mkdir -pv %{BUILDROOT}%{sbindir}
-		install -v -m 754 spectre-meltdown-checker.sh \
+		install -v -m 755 spectre-meltdown-checker.sh \
 			%{BUILDROOT}%{sbindir}/spectre-meltdown-checker
 	end
 end
diff --git a/squid/squid.nm b/squid/squid.nm
index eca35788f..053c05543 100644
--- a/squid/squid.nm
+++ b/squid/squid.nm
@@ -7,7 +7,7 @@ name       = squid
 major_ver  = 5
 minor_ver  = 7
 version    = %{major_ver}.%{minor_ver}
-release    = 1.2
+release    = 2
 
 groups     = Networking/Daemons
 url        = https://www.squid-cache.org/
@@ -106,6 +106,9 @@ build
 		cp -vf %{DIR_SOURCE}/cache_swap.sh %{BUILDROOT}/usr/lib/squid/
 		chmod 755 %{BUILDROOT}/usr/lib/squid/cache_swap.sh
 		chown -Rv squid:squid %{BUILDROOT}/usr/lib/squid/cache_swap.sh
+
+		# Drop /var/run
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
 	end
 end
 
diff --git a/sssd/sssd.nm b/sssd/sssd.nm
index 2a6c8aa19..90d804469 100644
--- a/sssd/sssd.nm
+++ b/sssd/sssd.nm
@@ -5,7 +5,7 @@
 
 name       = sssd
 version    = 2.8.2
-release    = 1.1
+release    = 2
 
 groups     = System/Tools
 url        = https://github.com/SSSD/sssd
@@ -63,10 +63,10 @@ build
 
 	configure_options += \
 		--with-crypto=libcrypto \
-		--with-db-path=%{localstatedir}/sss/db \
-		--with-pipe-path=%{localstatedir}/sss/pipe \
-		--with-pubconf-path=%{localstatedir}/sss/pubconf \
-		--with-mcache-path=%{localstatedir}/sss/mc \
+		--with-db-path=%{sharedstatedir}/sss/db \
+		--with-pipe-path=%{sharedstatedir}/sss/pipe \
+		--with-pubconf-path=%{sharedstatedir}/sss/pubconf \
+		--with-mcache-path=%{sharedstatedir}/sss/mc \
 		--with-krb5-rcache-dir=%{localstatedir}/cache/krb5rcache \
 		--with-default-ccache-dir=/run/user/%U \
 		--with-default-ccname-template=DIR:%d/krb5cc \
@@ -92,6 +92,9 @@ build
 
 		# Remove old sysVinit stuff.
 		rm -rvf %{BUILDROOT}%{sysconfdir}/rc.d
+
+		# Drop /var/run
+		rm -rvf %{BUILDROOT}%{localstatedir}/run
 	end
 end
 
diff --git a/sudo/sudo.nm b/sudo/sudo.nm
index 1ccd04f3c..55e4d42e1 100644
--- a/sudo/sudo.nm
+++ b/sudo/sudo.nm
@@ -5,7 +5,7 @@
 
 name       = sudo
 version    = 1.9.12p1
-release    = 1
+release    = 3
 
 groups     = Applications/System
 url        = https://www.sudo.ws/
@@ -46,7 +46,8 @@ build
 		--with-ignore-dot \
 		--with-tty-tickets \
 		--with-ldap \
-		--with-passprompt="[sudo] password for %p: "
+		--with-passprompt="[sudo] password for %p: " \
+		--enable-tmpfiles.d=%{tmpfilesdir}
 
 	prepare_cmds
 		# The tarball contains files owned by a stange uid:gid which will let
@@ -59,8 +60,16 @@ build
 	end
 
 	install_cmds
+		# Create sudoers config file.
 		mkdir -pv %{BUILDROOT}%{sysconfdir}
 		cp -vf %{DIR_SOURCE}/sudoers %{BUILDROOT}%{sysconfdir}/sudoers
+
+		# Do not ship /run.
+		rm -rvf %{BUILDROOT}/run
+
+		# Fix library permissions.
+		find %{BUILDROOT}%{libdir}/%{name} -type f -iname "*.so" -exec chmod 755 {} \;
+
 	end
 end
 
diff --git a/systemd/systemd.nm b/systemd/systemd.nm
index 9bcefa3a7..30d1e829f 100644
--- a/systemd/systemd.nm
+++ b/systemd/systemd.nm
@@ -5,7 +5,7 @@
 
 name       = systemd
 version    = 252
-release    = 2.1
+release    = 3
 
 maintainer = Stefan Schantl <stefan.schantl(a)ipfire.org>
 groups     = System/Base
@@ -193,10 +193,6 @@ build
 		# Don't let udev set up any networking
 		rm -vf %{BUILDROOT}/usr/lib/udev/rules.d/80-net-setup-link.rules
 
-		# Create journald related folders.
-		mkdir -pv %{BUILDROOT}/run/log/journal
-		chown root:systemd-journal %{BUILDROOT}/run/log/journal
-
 		mkdir -pv %{BUILDROOT}/var/log/journal
 		chown root:systemd-journal %{BUILDROOT}/var/log/journal
 
diff --git a/tcl/tcl.nm b/tcl/tcl.nm
index 76bc6eea9..19e5024d2 100644
--- a/tcl/tcl.nm
+++ b/tcl/tcl.nm
@@ -6,7 +6,7 @@
 name       = tcl
 major_ver  = 8.6
 version    = %{major_ver}.13
-release    = 1.2
+release    = 2
 thisapp    = tcl%{version}
 
 groups     = Development/Languages
@@ -15,8 +15,8 @@ license    = TCL
 summary    = Tool Command Language, pronounced tickle.
 
 description
-	The Tcl (Tool Command Language) provides a powerful platform for\
-	creating integration applications that tie together diverse \
+	The Tcl (Tool Command Language) provides a powerful platform for
+	creating integration applications that tie together diverse
 	applications, protocols, devices, and frameworks.
 end
 
@@ -64,6 +64,10 @@ build
 
 		# Fix permissions.
 		chmod 644 %{BUILDROOT}%{libdir}/libtclstub%{major_ver}.a
+
+		# Fix private shared library permissions.
+		find %{BUILDROOT}%{libdir} -type f -iname "*.so" \
+			-exec chmod -v 755 {} \;
 	end
 end
 
diff --git a/unbound/unbound.nm b/unbound/unbound.nm
index 2feaf3296..daba56558 100644
--- a/unbound/unbound.nm
+++ b/unbound/unbound.nm
@@ -5,7 +5,7 @@
 
 name       = unbound
 version    = 1.17.0
-release    = 1
+release    = 3
 
 groups     = System/Daemons
 url        = https://www.nlnetlabs.nl/unbound/
@@ -33,7 +33,7 @@ build
 
 	configure_options += \
 		--with-conf-file=%{sysconfdir}/%{name}/unbound.conf \
-		--with-pidfile=%{localstatedir}/run/%{name}/%{name}.pid \
+		--with-pidfile=/run/%{name}/%{name}.pid \
 		--with-rootkey-file=%{sharedstatedir}/unbound/root.key \
 		--without-libevent \
 		--with-pthreads \
@@ -53,10 +53,6 @@ build
 	end
 
 	install_cmds
-		# Create directories.
-		mkdir -pv %{BUILDROOT}%{localstatedir}/run/%{name}
-		mkdir -pv %{BUILDROOT}%{sharedstatedir}/%{name}
-
 		# Directory for user specified and additional config files.
 		mkdir -pv %{BUILDROOT}%{sysconfdir}/%{name}/conf.d/
 
diff --git a/unbound/unbound.tmpfiles b/unbound/unbound.tmpfiles
index d6255896c..bb88f01e2 100644
--- a/unbound/unbound.tmpfiles
+++ b/unbound/unbound.tmpfiles
@@ -1 +1 @@
-D /var/run/unbound 0755 unbound unbound -
+D /run/unbound 0755 unbound unbound -
diff --git a/util-linux/util-linux.nm b/util-linux/util-linux.nm
index 684e57b0a..fbb17f901 100644
--- a/util-linux/util-linux.nm
+++ b/util-linux/util-linux.nm
@@ -6,7 +6,7 @@
 name       = util-linux
 ver_maj    = 2.38
 version    = %{ver_maj}.1
-release    = 1
+release    = 3
 
 maintainer = Stefan Schantl <stefan.schantl(a)ipfire.org>
 groups     = System/Base
@@ -70,7 +70,6 @@ build
 			%{BUILDROOT}/var/lib/libuuid \
 			%{BUILDROOT}/var/lib/hwclock \
 			%{BUILDROOT}/usr/share/man/man8 \
-			%{BUILDROOT}/run/uuidd \
 			%{BUILDROOT}/var/log
 
 		touch %{BUILDROOT}/var/log/lastlog
@@ -84,15 +83,14 @@ build
 		rm -fv %{BUILDROOT}/usr/share/getopt/*.tcsh
 
 		# Set capabilities
-		# XXX: Setting capabilities is currently unusable due to #13010
 		chmod -v -s %{BUILDROOT}%{bindir}/mount
-		#setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/mount
+		setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/mount
 		chmod -v -s %{BUILDROOT}%{bindir}/umount
-		#setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/umount
+		setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/umount
 
 		# su (set right capabilities)
 		chmod -v u-s %{BUILDROOT}%{bindir}/su
-		#setcap cap_setgid,cap_setuid+ep %{BUILDROOT}%{bindir}/su
+		setcap cap_setgid,cap_setuid+ep %{BUILDROOT}%{bindir}/su
 	end
 end
 
diff --git a/xxhash/xxhash.nm b/xxhash/xxhash.nm
new file mode 100644
index 000000000..d551178ae
--- /dev/null
+++ b/xxhash/xxhash.nm
@@ -0,0 +1,60 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info(a)ipfire.org>                   #
+###############################################################################
+
+name       = xxhash
+version    = 0.8.1
+release    = 1
+
+groups     = System/Libraries
+url        = https://www.xxhash.com/
+license    = BSD and GPLv2+
+summary    = Extremely fast hash algorithm
+
+description
+	xxHash is an Extremely fast Hash algorithm, running at RAM speed
+	limits.
+end
+
+source_dl = https://github.com/Cyan4973/xxHash/archive/v%{version}/
+sources   = %{thisapp}.tar.gz
+
+build
+	DIR_APP = %{DIR_SRC}/xxHash-%{version}
+
+	make_build_targets += \
+		MOREFLAGS="%{CFLAGS} %{LDFLAGS}"
+
+	test
+		make check
+		make test-xxhsum-c
+	end
+
+	make_install_targets += \
+		PREFIX=%{prefix} \
+		LIBDIR=%{libdir}
+
+	install_cmds
+		# Fix broken symlinks.
+		for bit in 32 64 128; do
+			ln -svf xxhsum.1 %{BUILDROOT}%{mandir}/man1/xxh${bit}sum.1
+		done
+	end
+end
+
+packages
+	package %{name}
+
+	package %{name}-libs
+		template LIBS
+	end
+
+	package %{name}-devel
+		template DEVEL
+	end
+
+	package %{name}-debuginfo
+		template DEBUGINFO
+	end
+end


hooks/post-receive
--
IPFire 3.x development tree

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2023-03-21 18:34 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-03-21 18:34 [git.ipfire.org] IPFire 3.x development tree branch, master, updated. a8a8fc6638fa4a2a4a6810821fcc3d6c843d2861 Michael Tremer

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox