Sync from SUSE:SLFO:Main memcached revision b4eb8cbe4c5f0f381a4c07fae0bcf242

.gitattributes

@@ -0,0 +1,23 @@
+## Default LFS
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.bsp filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.gem filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.jar filter=lfs diff=lfs merge=lfs -text
+*.lz filter=lfs diff=lfs merge=lfs -text
+*.lzma filter=lfs diff=lfs merge=lfs -text
+*.obscpio filter=lfs diff=lfs merge=lfs -text
+*.oxt filter=lfs diff=lfs merge=lfs -text
+*.pdf filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.rpm filter=lfs diff=lfs merge=lfs -text
+*.tbz filter=lfs diff=lfs merge=lfs -text
+*.tbz2 filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.ttf filter=lfs diff=lfs merge=lfs -text
+*.txz filter=lfs diff=lfs merge=lfs -text
+*.whl filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text

harden_memcached.service.patch

@@ -0,0 +1,18 @@
+Index: memcached-1.6.9/scripts/memcached.service
+===================================================================
+--- memcached-1.6.9.orig/scripts/memcached.service
++++ memcached-1.6.9/scripts/memcached.service
+@@ -41,6 +41,13 @@ CapabilityBoundingSet=CAP_SETGID CAP_SET
+ # Restricts the set of socket address families accessible to the processes
+ # of this unit. Protects against vulnerabilities such as CVE-2016-8655
+ RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
++# added automatically, for details please see
++# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
++ProtectHome=true
++ProtectHostname=true
++ProtectClock=true
++ProtectKernelLogs=true
++# end of automatic additions 
+ 
+ 
+ # Some security features are not in the older versions of systemd used by

memcached-rpmlintrc

@@ -0,0 +1 @@
+addFilter("incoherent-init-script-name")

memcached.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=memcached daemon
+After=network.target
+
+[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
+EnvironmentFile=/etc/sysconfig/memcached
+ExecStart=/usr/bin/memcached -u $MEMCACHED_USER $MEMCACHED_PARAMS
+
+[Install]
+WantedBy=multi-user.target

memcached.spec

@@ -0,0 +1,167 @@
+#
+# spec file for package memcached
+#
+# Copyright (c) 2024 SUSE LLC
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+#
+
+
+#Compat macro for new _fillupdir macro introduced in Nov 2017
+%if ! %{defined _fillupdir}
+  %define _fillupdir %{_localstatedir}/adm/fillup-templates
+%endif
+%if 0%{?suse_version} > 1500
+%bcond_without tls
+%else
+%bcond_with    tls
+%endif
+Name:           memcached
+Version:        1.6.23
+Release:        0
+Summary:        A high-performance, distributed memory object caching system
+License:        BSD-3-Clause
+Group:          Productivity/Networking/Other
+URL:            https://memcached.org/
+Source:         https://www.memcached.org/files/%{name}-%{version}.tar.gz
+Source2:        %{name}.sysconfig
+Source3:        memcached-rpmlintrc
+Source4:        memcached.service
+Source5:        system-user-memcached.conf
+Patch0:         harden_memcached.service.patch
+BuildRequires:  autoconf
+BuildRequires:  automake
+BuildRequires:  cyrus-sasl-devel
+BuildRequires:  libevent-devel >= 2.0
+BuildRequires:  libtool
+BuildRequires:  pkgconfig
+Requires(pre):  %fillup_prereq
+Conflicts:      memcached-unstable
+%if %{with tls}
+BuildRequires:  openssl-devel >= 1.1.0
+BuildRequires:  perl
+BuildRequires:  perl-IO-Socket-SSL
+BuildRequires:  perl-Net-SSLeay
+%endif
+%if 0%{?suse_version} >= 1500
+BuildRequires:  sysuser-tools
+%sysusers_requires
+%else
+Requires(pre):  %{_sbindir}/groupadd
+Requires(pre):  %{_sbindir}/useradd
+%endif
+%if 0%{?suse_version} > 1210
+BuildRequires:  systemd-rpm-macros
+%{?systemd_ordering}
+%else
+Requires(pre):  %insserv_prereq
+%endif
+
+%description
+Memcached is a high-performance, distributed memory object caching
+system, generic in nature, but intended for use in speeding up dynamic
+web applications by alleviating database load.
+
+%package devel
+Summary:        Files needed for development using memcached protocol
+Group:          Development/Libraries/C and C++
+Requires:       %{name} = %{version}
+
+%description devel
+Memcached is a high-performance, distributed memory object caching
+system, generic in nature, but intended for use in speeding up dynamic
+web applications by alleviating database load.
+
+This package contains development files
+
+%prep
+%setup -q
+%patch0 -p1
+
+%build
+autoreconf -fi
+%configure \
+%if %{with tls}
+  --enable-tls \
+%endif
+  --enable-sasl \
+  --enable-sasl-pwdb \
+  --enable-seccomp \
+  --disable-coverage \
+  %ifarch s390 s390x ppc ppc64
+  --disable-extstore
+  %endif
+
+%make_build
+%if 0%{?suse_version} >= 1500
+%sysusers_generate_pre %{SOURCE5} memcached system-user-memcached.conf
+%endif
+
+%install
+%make_install
+install -D  -m 0755 scripts/memcached-tool %{buildroot}%{_bindir}/memcached-tool
+install -Dd -m 0751 %{buildroot}%{_localstatedir}/lib/%{name}
+install -D  -m 0644 %{SOURCE2} %{buildroot}%{_fillupdir}/sysconfig.%{name}
+install -d -m 755 %{buildroot}%{_sbindir}
+ln -s  	%{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
+install -D  -m 0644 %{SOURCE4} %{buildroot}%{_unitdir}/%{name}.service
+%if 0%{?suse_version} >= 1500
+mkdir -p %{buildroot}%{_sysusersdir}
+install -m 0644 %{SOURCE5} %{buildroot}%{_sysusersdir}/
+%endif
+
+%check
+%make_build test
+
+%if 0%{?suse_version} >= 1500
+%pre -f memcached.pre
+%else
+
+%pre
+getent group %{name} >/dev/null || \
+	%{_sbindir}/groupadd -r %{name}
+getent passwd %{name} >/dev/null || \
+	%{_sbindir}/useradd -g %{name} -s /bin/false -r \
+	-c "user for %{name}" -d %{_localstatedir}/lib/%{name} %{name}
+%endif
+%service_add_pre %{name}.service
+
+%post
+%service_add_post %{name}.service
+%fillup_only %{name}
+
+%preun
+%service_del_preun %{name}.service
+
+%postun
+%service_del_postun %{name}.service
+
+%files
+%doc AUTHORS ChangeLog NEWS
+%license COPYING
+%{_bindir}/%{name}
+%{_bindir}/memcached-tool
+%{_sbindir}/rc%{name}
+%{_mandir}/man1/%{name}.*
+%{_unitdir}/%{name}.service
+%{_fillupdir}/sysconfig.%{name}
+%dir %attr(751,root,root) %{_localstatedir}/lib/%{name}
+%if 0%{?suse_version} >= 1500
+%{_sysusersdir}/system-user-memcached.conf
+%endif
+
+%files devel
+%doc AUTHORS ChangeLog NEWS doc/*.txt
+%license COPYING
+%{_includedir}/%{name}
+
+%changelog

memcached.sysconfig

@@ -0,0 +1,31 @@
+## Path:        Network/WWW/Memcached
+## Description: start parameters for memcached.
+## Type:        string
+## Default:     "-l 127.0.0.1"
+## Config:      memcached
+#
+# start parameters for memcached.
+#
+# see man 1 memcached for more
+#
+MEMCACHED_PARAMS="-l 127.0.0.1"
+
+## Path:        Network/WWW/Memcached
+## Description: username memcached should run as
+## Type:        string
+## Default:     "memcached"
+## Config:      memcached
+#
+# username memcached should run as
+#
+MEMCACHED_USER="memcached"
+
+## Path:        Network/WWW/Memcached
+## Description: group memcached should be run as
+## Type:        string
+## Default:     "memcached"
+## Config:      memcached
+#
+# group memcached should be run as
+#
+MEMCACHED_GROUP="memcached"

system-user-memcached.conf

@@ -0,0 +1,2 @@
+#Type Name        ID    GECOS                Home directory      Shell
+u     memcached   -     "user for memcached" /var/lib/memcached  -