Sync from SUSE:SLFO:Main rpcbind revision 281cc1f2bad1d3f5a9f907788fd9438e

This commit is contained in:
Adrian Schröter 2024-05-04 00:07:48 +02:00
commit ce1408666c
10 changed files with 897 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

View File

@ -0,0 +1,25 @@
From 4d32e143124fa47466bbc91f54067674f212c3e3 Mon Sep 17 00:00:00 2001
From: Thomas Blume <thomas.blume@suse.com>
Date: Wed, 12 Jun 2019 10:09:01 +0200
Subject: [PATCH] change lockingdir to /run
---
src/rpcbind.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/rpcbind.c b/src/rpcbind.c
index cc848b1..65054ff 100644
--- a/src/rpcbind.c
+++ b/src/rpcbind.c
@@ -105,7 +105,7 @@ char *nss_modules = "files";
/* who to suid to if -s is given */
#define RUN_AS "daemon"
-#define RPCBINDDLOCK "/var/run/rpcbind.lock"
+#define RPCBINDDLOCK "/run/rpcbind.lock"
int runasdaemon = 0;
int insecure = 0;
--
2.16.4

View File

@ -0,0 +1,27 @@
From 9c5efb3a0973d57b79e4fc7a96debe0e6ce2d000 Mon Sep 17 00:00:00 2001
From: Thomas Blume <thomas.blume@suse.com>
Date: Thu, 25 Oct 2018 11:14:32 +0200
Subject: [PATCH] systemd unit files
Add EnvironmentFile=-/etc/sysconfig/rpcbind to rpcbind.service
---
systemd/rpcbind.service.in | 1 +
1 file changed, 1 insertion(+)
Index: rpcbind-1.2.5/systemd/rpcbind.service.in
===================================================================
--- rpcbind-1.2.5.orig/systemd/rpcbind.service.in
+++ rpcbind-1.2.5/systemd/rpcbind.service.in
@@ -8,10 +8,12 @@ RequiresMountsFor=@statedir@
# rpcbind.socket, no matter how this unit is started.
Requires=rpcbind.socket
Wants=rpcbind.target
+After=sysinit.target
[Service]
Type=notify
# distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
+EnvironmentFile=-/etc/sysconfig/rpcbind
ExecStart=@_sbindir@/rpcbind $RPCBIND_OPTIONS -w -f
[Install]

5
_service Normal file
View File

@ -0,0 +1,5 @@
<services>
<service name="download_files" mode="localonly">
<param name="enforceupstream">yes</param>
</service>
</services>

View File

@ -0,0 +1,24 @@
Index: rpcbind-1.2.6/systemd/rpcbind.service.in
===================================================================
--- rpcbind-1.2.6.orig/systemd/rpcbind.service.in
+++ rpcbind-1.2.6/systemd/rpcbind.service.in
@@ -11,6 +11,19 @@ Wants=rpcbind.target
After=sysinit.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=notify
# distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
EnvironmentFile=-/etc/sysconfig/rpcbind

2
rpc-user.conf Normal file
View File

@ -0,0 +1,2 @@
# Type Name ID GECOS [HOME]
u rpc - "User for rpcbind" /var/lib/empty

BIN
rpcbind-1.2.6.tar.bz2 (Stored with Git LFS) Normal file

Binary file not shown.

653
rpcbind.changes Normal file
View File

@ -0,0 +1,653 @@
-------------------------------------------------------------------
Wed Jan 25 14:53:11 UTC 2023 - Thorsten Kukuk <kukuk@suse.com>
- Remove unused libnsl build requires
-------------------------------------------------------------------
Tue Dec 27 13:16:20 UTC 2022 - Ludwig Nussel <lnussel@suse.com>
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
-------------------------------------------------------------------
Tue Nov 16 07:39:53 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_rpcbind.service.patch
-------------------------------------------------------------------
Mon Jun 21 15:44:17 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
- Add now working CONFIG parameter to sysusers generator
- UsrMerge changes
-------------------------------------------------------------------
Mon May 17 07:06:12 UTC 2021 - Petr Vorel <pvorel@suse.cz>
- Update to rpcbind 1.2.6
- Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee)
- Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for
openSUSE 11.
- Refresh 0001-change-lockingdir-to-run.patch
- Replace %setup with %autosetup
-------------------------------------------------------------------
Tue Apr 13 08:40:08 UTC 2021 - Fabian Vogt <fvogt@suse.com>
- Specify the appropriate set of local nss modules (boo#1177461)
-------------------------------------------------------------------
Fri Jun 5 05:49:51 UTC 2020 - Petr Vorel <pvorel@suse.cz>
- Enable debug (--enable-debug, needed for getting messages with -d)
-------------------------------------------------------------------
Mon Mar 9 08:54:14 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- rpc-user.conf: use sysusers method to create rpc user
- Minimize dependencies for container usage
-------------------------------------------------------------------
Wed Jun 12 08:11:40 UTC 2019 - Thomas Blume <Thomas.Blume@suse.com>
- change rpcbind locking path from /var/run/rpcbind.lock to
/run/rpcbind.lock (bsc#1134659)
add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
avoid an error from rpcbind.socket when rpcbind is running
during package update
-------------------------------------------------------------------
Wed Dec 12 07:41:26 UTC 2018 - Thomas.Blume@suse.com
- add ordering dependency to rpcbind.service (bsc#1117217)
* modify 0001-systemd-unit-files.patch
-------------------------------------------------------------------
Fri Oct 26 06:04:23 UTC 2018 - Thomas.Blume@suse.com
- update to current upstream version 1.2.5 (bsc#1113002)
* move procinfo from /sbin to /bin and create a symlink in /sbin
* remove obsolete svc-freeargs.patch (included in the sources now)
-------------------------------------------------------------------
Mon Jun 4 19:42:29 UTC 2018 - tchvatal@suse.com
- Drop all commented out patches (4 years now):
* 0008-First-part-of-init_transport-refactoring.patch
* 0009-init_transport-move-the-registration-code-into-a-sep.patch
* 0010-Fix-the-behavior-when-specifying-the-h-option.patch
* 0011-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
* 0014-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
* 0030-systemd-fix-rmtcall.patch
-------------------------------------------------------------------
Mon Jun 4 19:34:14 UTC 2018 - tchvatal@suse.com
- Say goodbye to omc files fate#301838
- Format with spec-cleaner
-------------------------------------------------------------------
Tue Apr 3 12:06:36 UTC 2018 - dimstar@opensuse.org
- Correctly rebase 0001-systemd-unit-files.patch: Since upstream
now ships systemd service files, we must no longer create full
unit files, but only correct the existing ones (adding
EnvironmentFile statement).
-------------------------------------------------------------------
Mon Mar 26 17:11:19 CEST 2018 - kukuk@suse.de
- Use %license instead of %doc [bsc#1082318]
-------------------------------------------------------------------
Sun Feb 18 19:48:56 UTC 2018 - avindra@opensuse.org
- Update to 0.2.4:
+ Memory corruption fix
+ Moved the default state directory to /var/run
+ Systemd unit files were added.
- cleanup with spec-cleaner
- don't ship NEWS or ChangeLog, these are not maintained
- rebase 0001-systemd-unit-files.patch
- remove upstreamed patches
* drop 0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
* drop 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
* drop 0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
* drop 0005-security.c-removed-warning.patch
* drop 0006-don-t-use-svc_fdset.patch
* drop 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
-------------------------------------------------------------------
Thu Nov 23 13:38:46 UTC 2017 - rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
-------------------------------------------------------------------
Wed Aug 16 10:34:13 CEST 2017 - kukuk@suse.de
- Add BuildRequires libnsl-devel (needed for obsoleting nsl in
glibc)
-------------------------------------------------------------------
Wed May 17 09:14:15 UTC 2017 - schwab@suse.de
- svc-freeargs.patch: always call svc_freeargs, even if svc_getargs
failed (bsc#1037559, CVE-2017-8779)
-------------------------------------------------------------------
Tue May 2 13:58:57 CEST 2017 - kukuk@suse.de
- Adjust for new system user/group RPMs
-------------------------------------------------------------------
Tue Nov 22 08:27:10 CET 2016 - kukuk@suse.de
- Add 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
from upstream, replacing systemd tmpfile solution.
-------------------------------------------------------------------
Sat Nov 12 21:19:10 CET 2016 - kukuk@suse.de
- Move /var/lib/rpcbind to /run/rpcbind, data should not survive
reboot and this makes read-only root filesystem easier.
-------------------------------------------------------------------
Tue Jun 7 17:04:12 UTC 2016 - fbui@suse.com
- Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167)
systemd.pc is part of systemd main package now. Instead of
build-requiring systemd, import systemd-rpm-macros which has the
%{_unitdir} definition and much less dependencies than systemd and
use it when configuring rpcbind so it won't try to find the unit dir
by using pkg-config.
Also replace BR libsystemd-daemon by libsystemd since the former is
obsolete and is replaced by the later.
-------------------------------------------------------------------
Mon Mar 14 14:48:36 CET 2016 - kukuk@suse.de
- pmap_set: use tirpc header files and link against libtirpc
-------------------------------------------------------------------
Fri Feb 19 16:00:46 CET 2016 - kukuk@suse.de
- Add 0006-don-t-use-svc_fdset.patch: don't use the svc_fdset
interface for libtirpc, which is limited to 1024 connections.
-------------------------------------------------------------------
Fri Feb 12 16:18:30 CET 2016 - kukuk@suse.de
- Sync with current git:
- Replace 0002-revert-auth.patch with
0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
- Add 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
to fix problems with activation via sockets by systemd
- Replace 0032-CVE-2015-7236.patch with
0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
- Add 0005-security.c-removed-warning.patch to fix compiler warnings
- Temporary remove 099-poll.patch
-------------------------------------------------------------------
Wed Jan 27 15:08:00 CET 2016 - kukuk@suse.de
- Disable 0030-systemd-fix-rmtcall.patch, needs the other disabled
patches.
- Submit for SLE12SP2 [FATE#320393]
-------------------------------------------------------------------
Tue Nov 17 14:20:28 CET 2015 - kukuk@suse.de
- Add 0002-revert-auth.patch: revert old patch no longer working
with libtirpc 1.0.1
(http://sourceforge.net/p/libtirpc/mailman/message/34585439/)
-------------------------------------------------------------------
Mon Sep 21 13:51:41 UTC 2015 - okir@suse.com
- Add patch 0032-CVE-2015-7236.patch to fix a segfault on certain
remote scans [CVE-2015-7236, bsc#940191, bsc#946204]
-------------------------------------------------------------------
Mon Jul 27 08:27:14 UTC 2015 - okir@suse.com
- Document how to restrict addresses that rpcbind will listen on
[bsc#935102]
Added 0031-rpcbind-manpage.patch
-------------------------------------------------------------------
Tue Jul 14 16:52:03 CEST 2015 - kukuk@suse.de
- Add 099-poll.patch: use libtirpc with poll() implementation
-------------------------------------------------------------------
Wed May 27 08:38:26 UTC 2015 - okir@suse.com
- Add patch 0030-systemd-fix-rmtcall.patch to fix rmtcall
forwarding (bnc#932423)
-------------------------------------------------------------------
Thu Apr 30 09:36:21 CEST 2015 - kukuk@suse.de
- Update to rpcbind 0.2.3
- Following patches were accepted upstream:
- 0005-Remove-obsolete-function-in6_fillscopeid.patch
- 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
- 0007-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
- 0019-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
- 0020-rpcinfo-introduce-new-helper-function-ip_getclient.patch
- 0021-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
- 0022-rpcinfo-remove-obsolete-function-clnt_com_create.patch
- 0023-Make-rpcinfo-p-support-IPv6-addresses-too.patch
- 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Thu Dec 18 13:56:59 CET 2014 - kukuk@suse.de
- Update to current git, which contains the following patches:
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
- 0003-systemd-no-dualmode.patch
- 0004-systemd-sd_notify.patch
- 0018-configure-check-for-nss.h.patch
-------------------------------------------------------------------
Fri Dec 12 17:01:44 UTC 2014 - jeffm@suse.com
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch: fix
merge issue causing segfaults on missing file (bnc#909619).
-------------------------------------------------------------------
Thu Dec 11 13:07:09 CET 2014 - kukuk@suse.de
- Split off 0003-systemd-no-dualmode.patch from
0001-systemd-enhancements.patch for easier upstream submission.
- Split off 0004-systemd-sd_notify.patch from
0001-systemd-enhancements.patch for easier upstream submission.
- Rename 0001-systemd-enhancements.patch to 0001-systemd-unit-files.patch
-------------------------------------------------------------------
Tue Dec 9 15:52:01 CET 2014 - kukuk@suse.de
- Update to latest rpcbind 0.2.2 upstream release.
- Following patches are upstream:
- 0001-Fix-building-one-systems-w-out-nss.h.patch
- 0002-Rename-configure.in-to-configure.ac.patch
- 0003-rpcbind-rpcuser-not-being-set-in-Makefile.am.patch
- 0004-Silence-a-warning-about-setgroups-being-implicitly-d.patch
- Adjust following patches:
- 0005-Remove-obsolete-function-in6_fillscopeid.patch
- 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
- 0018-configure-check-for-nss.h.patch
- Obsolete patches:
- 0015-When-using-systemd-activation-make-rpcbind-notify-sy.patch
- 0016-Notify-systemd-unconditionally.patch
- 0012-Support-systemd-activation.patch
- 0013-socket-activation-Fix-rpcbind.service-to-use-separat.patch
- 0017-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
- 0025-rpcinfo-warmstat_no-warning-about-missing-file.patch
- 0026-systemd-no-default-dep
- 0027-socket-before-service.patch
- 0028-rpcbind-after-var-run.patch
- 0029-rpcbind-sd-notify-stupid-errmsg.patch
- New patches:
- 0001-systemd-enhancements.patch
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
- Disabled patches:
- 0008-First-part-of-init_transport-refactoring.patch
- 0009-init_transport-move-the-registration-code-into-a-sep.patch
- 0010-Fix-the-behavior-when-specifying-the-h-option.patch
- 0011-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
- 0014-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
- 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Wed Nov 12 15:05:00 CET 2014 - kukuk@suse.de
- Disable debug code, which else would fill up the log files
[bnc#905042]
-------------------------------------------------------------------
Tue Jun 10 10:41:15 UTC 2014 - okir@suse.com
- 0029-rpcbind-sd-notify-stupid-errmsg.patch: Remove a useless
error/debug message (bnc#881663)
-------------------------------------------------------------------
Thu Jun 5 12:55:45 UTC 2014 - werner@suse.de
- Add patch 0028-rpcbind-after-var-run.patch as rpcbind service
wants /var/run mounted before started (bnc#881518)
-------------------------------------------------------------------
Wed May 21 13:56:14 UTC 2014 - werner@suse.de
- Require the systemd libraries for build to allow the move
of systemd.pc back to systemd
-------------------------------------------------------------------
Mon Mar 31 10:38:40 UTC 2014 - werner@suse.de
- Add 0027-socket-before-service.patch to make sure that always
the socket is up before the service. This will make sure that
rpcbind.target will not only cause the socket but also the
rpcbind.service (bnc#860246)
- Beside this ingnore exit state 2 in case of shutdown (bnc#860246)
-------------------------------------------------------------------
Wed Mar 26 21:52:19 UTC 2014 - nfbrown@suse.com
- 0026-systemd-no-default-dep
No default dependencies for rpcbind. This allows it to start
early when it might be needed.
(bnc#860246)
-------------------------------------------------------------------
Tue Mar 4 17:55:01 UTC 2014 - coolo@suse.com
- fix typo in useradd call's user home dir
-------------------------------------------------------------------
Tue Mar 4 06:39:39 UTC 2014 - coolo@suse.com
- prereq useradd - called from %pre
-------------------------------------------------------------------
Wed Feb 26 16:10:49 CET 2014 - kukuk@suse.de
- Fix ownership of /var/lib/rpcbind, else rpcbind cannot write
warmstart files
-------------------------------------------------------------------
Wed Feb 26 15:27:45 CET 2014 - kukuk@suse.de
- Don't print error message about missing files in warmstart code
if we do a coldstart [bnc#865807]
(0025-rpcinfo-warmstat_no-warning-about-missing-file.patch)
-------------------------------------------------------------------
Fri Feb 14 15:10:19 CET 2014 - kukuk@suse.de
- Re-add rcrpcbind symlink
-------------------------------------------------------------------
Thu Jan 23 16:58:25 UTC 2014 - okir@suse.com
- Fixed rpc broadcast handling (bnc#857324)
Upgraded to upstream 0.2.1-rc4 as part of this, and rebased the
patch set.
Added:
0001-Fix-building-one-systems-w-out-nss.h.patch
0002-Rename-configure.in-to-configure.ac.patch
0003-rpcbind-rpcuser-not-being-set-in-Makefile.am.patch
Deleted (already upstream):
0003-configure-fix-the-case-when-with-rpcuser-is-not-give.patch
Renumbered (previous numbering shown below):
0001-Silence-a-warning-about-setgroups-being-implicitly-d.patch
0002-Remove-obsolete-function-in6_fillscopeid.patch
0004-In-init_transport-move-creation-of-COTS-sockets-clos.patch
0005-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
0006-First-part-of-init_transport-refactoring.patch
0007-init_transport-move-the-registration-code-into-a-sep.patch
0008-Fix-the-behavior-when-specifying-the-h-option.patch
0009-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
0010-Support-systemd-activation.patch
0011-socket-activation-Fix-rpcbind.service-to-use-separat.patch
0012-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
0013-When-using-systemd-activation-make-rpcbind-notify-sy.patch
0014-Notify-systemd-unconditionally.patch
0015-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
0016-configure-check-for-nss.h.patch
0018-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
0019-rpcinfo-introduce-new-helper-function-ip_getclient.patch
0020-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
0021-rpcinfo-remove-obsolete-function-clnt_com_create.patch
0022-Make-rpcinfo-p-support-IPv6-addresses-too.patch
0023-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Mon Jan 20 12:20:02 UTC 2014 - okir@suse.com
- Make rpcinfo -p/-u/-t options support IPv6 (bnc# 859448)
Added:
0018-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
0019-rpcinfo-introduce-new-helper-function-ip_getclient.patch
0020-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
0021-rpcinfo-remove-obsolete-function-clnt_com_create.patch
0022-Make-rpcinfo-p-support-IPv6-addresses-too.patch
0023-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Tue Jan 14 16:18:49 UTC 2014 - okir@suse.com
- Recognize RPCBIND_OPTIONS from /etc/sysconfig/rpcbind (bnc#824621)
Added:
0015-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
- Make rpcbind run as user "rpc" by default (bnc#714735)
- Avoid NIS lookups of host names and service names (bnc#858700)
Added:
0016-configure-check-for-nss.h.patch
-------------------------------------------------------------------
Fri Jan 10 10:58:47 UTC 2014 - okir@suse.com
- Notify systemd unconditionally. This prevented
"systemctl start rpcbind.service" from succeeding
Added:
0014-Notify-systemd-unconditionally.patch
-------------------------------------------------------------------
Tue Aug 20 18:34:19 UTC 2013 - okir@suse.com
- Update rpcbind to latest upstream, and rewrote patches for systemd
integration.
Removed:
0001-systemd-add-support-for-system-bus-activation.patch
socket-activation-don-t-unlink-socket-we-didn-t-create
socket-activation-fix-rpcbind-service-to-use-separate-sockets
rpcbind-journal.patch
move-lock-file-to-run-fs.patch
rpcbind-systemd-notify.patch
Added:
0001-Silence-a-warning-about-setgroups-being-implicitly-d.patch
0002-Remove-obsolete-function-in6_fillscopeid.patch
0003-configure-fix-the-case-when-with-rpcuser-is-not-give.patch
0004-In-init_transport-move-creation-of-COTS-sockets-clos.patch
0005-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
0006-First-part-of-init_transport-refactoring.patch
0007-init_transport-move-the-registration-code-into-a-sep.patch
0008-Fix-the-behavior-when-specifying-the-h-option.patch
0009-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
0010-Support-systemd-activation.patch
0011-socket-activation-Fix-rpcbind.service-to-use-separat.patch
0012-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
0013-When-using-systemd-activation-make-rpcbind-notify-sy.patch
-------------------------------------------------------------------
Thu Jun 27 21:36:52 UTC 2013 - crrodriguez@opensuse.org
- rpcbind-systemd-notify.patch make systemd service type
"notify" this is almost the same as the default but
with the difference that the daemon now is able to
to notify systemd when it finished startup hence
avoiding a race condition in where startup is faster than
the process finishing its own internal setup routines.
-------------------------------------------------------------------
Mon May 6 12:20:44 UTC 2013 - cfarrell@suse.com
- license update: BSD-4-Clause
Look at src/util.c
-------------------------------------------------------------------
Thu Apr 4 00:32:00 UTC 2013 - crrodriguez@opensuse.org
- remove sysvinit support (read opensuse-packaging for details)
- remove "portmap" migration, according to the time machine
it went away in openSUSE 11.2 and the oldest supported version
is now 12.1
-------------------------------------------------------------------
Wed Nov 28 14:44:15 UTC 2012 - rmilasan@suse.com
- Move rpcbind.sock and rpcbind.lock to /run to not interfere with
systemd.
-------------------------------------------------------------------
Thu Oct 25 21:29:15 UTC 2012 - crrodriguez@opensuse.org
- Instead of using syslog, log to the journal
-------------------------------------------------------------------
Wed Oct 24 15:56:17 UTC 2012 - crrodriguez@opensuse.org
- There should be no Requires on syslog as it is no longer
required for anything since the introduction of the journal.
-------------------------------------------------------------------
Wed Apr 18 23:46:52 CEST 2012 - jeffm@suse.de
- socket-activation: Fix rpcbind.service to use separate
sockets (bnc#757909).
-------------------------------------------------------------------
Wed Apr 18 05:47:20 CEST 2012 - jeffm@suse.de
- socket-activation: don't unlink socket we didn't create (bnc#757667).
-------------------------------------------------------------------
Mon Dec 19 22:54:46 UTC 2011 - crrodriguez@opensuse.org
- Update systemd patches
-------------------------------------------------------------------
Wed Dec 7 13:50:49 UTC 2011 - crrodriguez@opensuse.org
- Add systemd socket activation patch, based on
http://www.spinics.net/lists/linux-nfs/msg14371.html
but does not bundle sd-daemon.[c|h] it uses libsystemd-daemon
instead.
-------------------------------------------------------------------
Sun Dec 4 17:14:37 UTC 2011 - crrodriguez@opensuse.org
- Update to version 0.2.0_git201103171419
- Fix rpm source tags to not be conditional.
-------------------------------------------------------------------
Tue Nov 29 20:27:38 UTC 2011 - crrodriguez@opensuse.org
- Add systemd units
-------------------------------------------------------------------
Fri Nov 25 10:43:48 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to avoid implicit dependency
-------------------------------------------------------------------
Tue Jun 14 19:00:51 UTC 2011 - aj@suse.de
- Install rpcinfo man page since glibc does not install its man
page anymore.
-------------------------------------------------------------------
Wed Jan 12 14:39:35 UTC 2011 - lnussel@suse.de
- don't enable rpcbind init script by default
-------------------------------------------------------------------
Tue Dec 7 12:01:55 UTC 2010 - coolo@novell.com
- add some provides and requires for sysvinit scripts to please insserv
-------------------------------------------------------------------
Sun Nov 14 14:00:49 UTC 2010 - cristian.rodriguez@opensuse.org
- Use full RELRO here
-------------------------------------------------------------------
Tue Oct 26 15:20:07 UTC 2010 - cristian.rodriguez@opensuse.org
- Update to a newer GIT snapshot
* nd: set SO_REUSEADDR on NC_TPI_COTS listening sockets
* rpcbind: add no-fork mode
-------------------------------------------------------------------
Thu Dec 4 11:02:25 CET 2008 - coolo@suse.de
- fix "checkproc: command not found" during installation
-------------------------------------------------------------------
Tue Dec 2 00:29:16 CET 2008 - ro@suse.de
- rename installed pmap_set to pmap_set2 to avoid conflict
with portmap
-------------------------------------------------------------------
Mon Dec 1 12:29:50 CET 2008 - mkoenig@suse.de
- if upgrading from portmap:
* we need to stop portmap and start rpcbind in %post since the
restart on upgrade mechanism does not work here
* dump portmap tables and set them again in rpcbind [bnc#446388]
- add pmap_set.c which is needed to set the old portmap tables
in rpcbind
-------------------------------------------------------------------
Wed Nov 26 14:18:06 CET 2008 - mkoenig@suse.de
- specify runlevel in chkconfig check [bnc#444663]
-------------------------------------------------------------------
Wed Nov 5 14:44:56 CET 2008 - mkoenig@suse.de
- fix version comparison in Obsoletes [bnc#440313]
- disable portmap service in pre script to avoid problems when
upgrading from portmap
-------------------------------------------------------------------
Wed Oct 15 19:07:48 CEST 2008 - mkoenig@suse.de
- update to 0.1.6 with additional patches from git
* Fixed an ipv6 related segfault on startup
* rpcbind needs to also downgrade its gid to a non-priviledgied group
* Removed the documentation about the non-existent '-L' flag
* Introduce helpers for ipprot/netid mapping
* Change how we decide on the netids to use for portmap
* Simplify port live check in pmap_svc.c
* Support portmap on AF_LOCAL, too
* Fix for warm start
* Properly identify local root user over ipv4/v6
- fixes [bnc#435637]
- remove patch
rpcbind-0.1.4-iff_up.patch
rpcbind-0.1.4-localaddr.patch
-------------------------------------------------------------------
Mon Aug 18 17:41:18 CEST 2008 - mkoenig@suse.de
- use version in Provides/Obsoletes
-------------------------------------------------------------------
Fri Jul 18 15:54:26 CEST 2008 - mkoenig@suse.de
- update to version 0.1.5
- license change to BSD-3
- patches merged
rpcbind-0.1.4-compile.patch
rpcbind-0.1.4-debug.patch
rpcbind-0.1.4-libwrap.patch
rpcbind-0.1.4-recvfrom-fix.patch
rpcbind-0.1.4-rpcuser.patch
rpcbind-0.1.4-warmstarts-cleanup.patch
rpcbind-0.1.4-warmstarts.patch
-------------------------------------------------------------------
Wed Apr 2 14:21:49 CEST 2008 - mkoenig@suse.de
- initial packaging, version 0.1.4 [fate#300607]
- add patches from Steve Dickson, including fixes and
support for debug and warmstart
- build as PIE

126
rpcbind.spec Normal file
View File

@ -0,0 +1,126 @@
#
# spec file for package rpcbind
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
#Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir}
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: rpcbind
Version: 1.2.6
Release: 0
Summary: Transport independent RPC portmapper
# Git-Web: http://git.linux-nfs.org/?p=steved/rpcbind.git;a=summary
License: BSD-4-Clause
Group: Productivity/Networking/System
URL: http://rpcbind.sourceforge.net
Source: https://downloads.sourceforge.net/sourceforge/%{name}/%{name}-%{version}.tar.bz2
Source2: sysconfig.rpcbind
Source5: rpc-user.conf
Patch1: 0001-systemd-unit-files.patch
Patch2: 0001-change-lockingdir-to-run.patch
Patch3: harden_rpcbind.service.patch
BuildRequires: libtirpc-devel >= 1.0.1
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: sysuser-shadow
BuildRequires: sysuser-tools
BuildRequires: tcpd-devel
BuildRequires: pkgconfig(libsystemd)
Requires(post): %fillup_prereq
Provides: portmap
%{?systemd_ordering}
%sysusers_requires
%description
Rpcbind is a replacement for portmap. Whereas portmap supports only UDP
and TCP transports over INET (IPv4), rpcbind can be configured to work
on various transports supported by the TI-RPC. This includes TCP and
UDP over IPv6. Moreover, rpcbind provides additional functions in
regards to portmap.
%prep
%autosetup -p1
%build
autoreconf -fiv
export CFLAGS="%{optflags} -fpie"
export LDFLAGS="-pie -Wl,-z,relro,-z,now"
%configure \
--enable-libwrap \
--enable-warmstarts \
--enable-debug \
--with-statedir=%{_rundir}/%{name} \
--with-rpcuser=rpc \
--with-systemdsystemunitdir=%{_unitdir} \
--with-nss-modules="files usrfiles"
make %{?_smp_mflags}
%sysusers_generate_pre %{SOURCE5} rpc rpc-user.conf
%install
%make_install
# fillup template
mkdir -p %{buildroot}%{_fillupdir}
install -m 644 %{SOURCE2} %{buildroot}%{_fillupdir}/
# sysusers.d config
mkdir -p %{buildroot}%{_sysusersdir}
install -m 644 %{SOURCE5} %{buildroot}%{_sysusersdir}/
# create symlink for rcrpcbind
mkdir -p %{buildroot}/%{_sbindir}
ln -s service %{buildroot}%{_sbindir}/rc%{name}
ln -s %{_bindir}/rpcinfo %{buildroot}%{_sbindir}/rpcinfo
%if 0%{?suse_version} < 1550
mkdir %{buildroot}/sbin
mkdir %{buildroot}/bin
ln -s %{_bindir}/rpcinfo %{buildroot}/sbin/rpcinfo
ln -s %{_bindir}/rpcinfo %{buildroot}/bin/rpcinfo
ln -s %{_sbindir}/%{name} %{buildroot}/sbin/%{name}
%endif
%pre -f rpc.pre
%service_add_pre %{name}.service %{name}.socket
%preun
%service_del_preun %{name}.service %{name}.socket
%post
%{fillup_only -n rpcbind}
%service_add_post %{name}.socket %{name}.service
%postun
%service_del_postun %{name}.socket %{name}.service
%files
%license COPYING
%doc AUTHORS README
%if 0%{?suse_version} < 1550
/sbin/%{name}
/bin/rpcinfo
/sbin/rpcinfo
%endif
%{_sbindir}/%{name}
%{_bindir}/rpcinfo
%{_sbindir}/rpcinfo
%{_sbindir}/rc%{name}
%{_mandir}/*/*
%{_fillupdir}/sysconfig.%{name}
%{_sysusersdir}/rpc-user.conf
%{_unitdir}/%{name}.service
%{_unitdir}/%{name}.socket
%changelog

9
sysconfig.rpcbind Normal file
View File

@ -0,0 +1,9 @@
## Path: Network/RPC/Rpcbind
## Description: Rpcbind startup options
## Type: string
## Default: ""
#
# Startup options for rpcbind
#
RPCBIND_OPTIONS=""