- Delete /usr/sbin/rc* symlink & specfile housekeeping
- Make atftpd.socket listen on AF_INET6 as well - Deactivate FORTIFY_SOURCE for the time being due to a glibc bug OBS-URL: https://build.opensuse.org/package/show/network/atftp?expand=0&rev=58
This commit is contained in:
Git OBS Bridge
commit
2d593c9f75
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
||||
## Default LFS
|
||||
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||
*.png filter=lfs diff=lfs merge=lfs -text
|
||||
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||
*.zst filter=lfs diff=lfs merge=lfs -text
|
||||
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
||||
.osc
|
||||
13
atftp-0.7-default_dir_man.patch
Normal file
13
atftp-0.7-default_dir_man.patch
Normal file
@ -0,0 +1,13 @@
|
||||
Index: atftp-0.7.5/atftpd.8
|
||||
===================================================================
|
||||
--- atftp-0.7.5.orig/atftpd.8
|
||||
+++ atftp-0.7.5/atftpd.8
|
||||
@@ -211,7 +211,7 @@ Show summary of options.
|
||||
.B path
|
||||
This is the root directory used by the TFTP server. All requested
|
||||
files from a TFTP client must reside in this directory. If not
|
||||
-specified, the directory defaults to /tftpboot. Since
|
||||
+specified, the directory defaults to /srv/tftpboot. Since
|
||||
atftpd run as the tftp user, the permission of the directory
|
||||
must be set properly to allow file reading and writing.
|
||||
|
||||
37
atftp-0.7-default_user_man.patch
Normal file
37
atftp-0.7-default_user_man.patch
Normal file
@ -0,0 +1,37 @@
|
||||
Index: atftp-0.7.5/atftpd.8
|
||||
===================================================================
|
||||
--- atftp-0.7.5.orig/atftpd.8
|
||||
+++ atftp-0.7.5/atftpd.8
|
||||
@@ -80,10 +80,10 @@ acknowledging the 'multicast' request by
|
||||
|
||||
.TP
|
||||
.B \-\-logfile <logfile>
|
||||
-Log to a specific file instead of only syslog. 'nobody' (or any user
|
||||
+Log to a specific file instead of only syslog. 'tftp' (or any user
|
||||
used to run the server) must have permissions on the given
|
||||
file. Assuming the file is /var/log/atftpd.log, simply run: "touch
|
||||
-/var/log/atftpd.log" and then "chown nobody.nogroup
|
||||
+/var/log/atftpd.log" and then "chown tftp.tftp
|
||||
/var/log/atftpd.log". When the server is run in daemon mode,
|
||||
/dev/stdout or /dev/stderr can be used. Specifying a single dash as
|
||||
the filename will send logs to stdout (file descriptor 1).
|
||||
@@ -106,8 +106,8 @@ specialized usage.
|
||||
|
||||
.TP
|
||||
.B \-\-user <user[.group]>
|
||||
-By default, the server change identity to the user nobody and group
|
||||
-nogroup. Specify an alternate user.group with this option.
|
||||
+By default, the server change identity to the user tftp and group
|
||||
+tftp. Specify an alternate user.group with this option.
|
||||
|
||||
.TP
|
||||
.B \-\-group <group>
|
||||
@@ -212,7 +212,7 @@ Show summary of options.
|
||||
This is the root directory used by the TFTP server. All requested
|
||||
files from a TFTP client must reside in this directory. If not
|
||||
specified, the directory defaults to /tftpboot. Since
|
||||
-atftpd run as the nobody user, the permission of the directory
|
||||
+atftpd run as the tftp user, the permission of the directory
|
||||
must be set properly to allow file reading and writing.
|
||||
|
||||
.SH STATS
|
||||
3
atftp-0.8.0.tar.gz
Normal file
3
atftp-0.8.0.tar.gz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:df2aa089c7670f9eab40e5598e5d2cb6a582dc5182926ea50b4d690e4e37f316
|
||||
size 133417
|
||||
24
atftp-drop_privileges_non-daemon.patch
Normal file
24
atftp-drop_privileges_non-daemon.patch
Normal file
@ -0,0 +1,24 @@
|
||||
Index: atftp-0.7.5/tftpd.c
|
||||
===================================================================
|
||||
--- atftp-0.7.5.orig/tftpd.c
|
||||
+++ atftp-0.7.5/tftpd.c
|
||||
@@ -99,8 +99,8 @@ int deny_severity = LOG_NOTICE;
|
||||
#endif
|
||||
|
||||
/* user ID and group ID when running as a daemon */
|
||||
-char user_name[MAXLEN] = "nobody";
|
||||
-char group_name[MAXLEN] = "nogroup";
|
||||
+char user_name[MAXLEN] = "tftp";
|
||||
+char group_name[MAXLEN] = "tftp";
|
||||
|
||||
/* For special uses, disable source port checking */
|
||||
int source_port_checking = 1;
|
||||
@@ -298,7 +298,7 @@ int main(int argc, char **argv)
|
||||
dup2(sockfd, 0);
|
||||
close(sockfd);
|
||||
|
||||
- /* release priviliedge */
|
||||
+ /* release priviledge */
|
||||
|
||||
/* first see if we are or can somehow become root, if so prepare
|
||||
* for drop even if not requested on command line */
|
||||
581
atftp.changes
Normal file
581
atftp.changes
Normal file
@ -0,0 +1,581 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 24 18:33:26 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
|
||||
|
||||
- Delete /usr/sbin/rc* symlink & specfile housekeeping
|
||||
- Make atftpd.socket listen on AF_INET6 as well
|
||||
- Deactivate FORTIFY_SOURCE for the time being due to a glibc bug
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 14 11:02:03 UTC 2022 - David Anes <david.anes@suse.com>
|
||||
|
||||
- Update to version 0.8.0
|
||||
* test.sh: add MTFTP tests
|
||||
* Fix MTFTP support for atftp
|
||||
* Fix multicast download.
|
||||
* Fix algorithm in case of packet loss in the last window.
|
||||
* Improve the robustness of the atftp-client in case of package loss or duplication
|
||||
* Implement PCRE tests.
|
||||
* Improve upstream test script. Include tests for windowsize option.
|
||||
* Fix/update minor issues in upstream
|
||||
* Fix the 'windowsize' option for write requests
|
||||
* FAQ INSTALL README.CVS README.PCRE: cosmetic and spelling fixes
|
||||
* *.h: cosmetic and spelling fixes
|
||||
* configure.ac: more fixes, also for libpcre2 detection
|
||||
* Port to maintained PCRE2 API
|
||||
* Changelog: update the recent changes
|
||||
* autoconf: modify autogen.sh
|
||||
* atftp.1: add more examples for options
|
||||
* Add a simple congestion control
|
||||
* Do some cosmetic changes
|
||||
* Add windowsize option as described in RFC7440
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 1 06:13:32 UTC 2022 - Stefan Schubert <schubi@suse.com>
|
||||
|
||||
- Migration to /usr/etc: Saving user changed configuration files
|
||||
in /etc and restoring them while an RPM update.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jun 28 14:08:19 UTC 2022 - Stefan Schubert <schubi@intern>
|
||||
|
||||
- Moved logrotate files from user specific directory /etc/logrotate.d
|
||||
to vendor specific directory /usr/etc/logrotate.d.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 15 13:17:41 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
|
||||
|
||||
- Update to version 0.7.5 [bsc#1190522, CVE-2021-41054]
|
||||
* text files: mark/convert all textfiles to UTF-8
|
||||
* fix some compiler warnings
|
||||
* fix buffer overflow in atftpd (CVE-2021-41054)
|
||||
* test.sh: check for root no longer necessary
|
||||
* tftpd.c: Only drop privs if requested or running as root + check for failure
|
||||
* fix invalid read of 1 byte in tftp_send_request.
|
||||
* Check return value of fseek(), abort if != 0
|
||||
* options.c: Proper fix for the read-past-end-of-array
|
||||
* configure.ac: Add -std=gnu89 if gcc/clang is detected
|
||||
* tftpd.c: Fix memleak if thread spawning fails
|
||||
* atftp: Check return value of fgets, buffer might be uninitialized on NULL
|
||||
* Fix check for argz support (HAVE_ARGZ -> HAVE_ARGZ_H)
|
||||
* replace LICENSE with current version
|
||||
* Remove patches fixed upstream:
|
||||
- atftp-0.7-sorcerers_apprentice.patch
|
||||
- atftp-0.7-server_receive_race.patch
|
||||
- atftp-0.7-ack_heuristic.patch
|
||||
* Rebase patches:
|
||||
- atftp-drop_privileges_non-daemon.patch
|
||||
- atftp-0.7-default_dir_man.patch
|
||||
- atftp-0.7-default_user_man.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 14 09:57:25 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
||||
|
||||
- Added hardening to systemd service(s) (bsc#1181400). Modified:
|
||||
* atftpd.service
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 25 23:26:52 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
|
||||
|
||||
- Update to version 0.7.4
|
||||
* fix compile, missing include
|
||||
* fix compile, add missing defines
|
||||
* link against libpthread for atftp
|
||||
* fixed atftp fails to write to /proc/self/fd/1
|
||||
* Fix for DoS issue CVE-2020-6097
|
||||
* remove inline keyword from definitions
|
||||
* remove extern inlines
|
||||
* sys/cdefs usage
|
||||
- Drop fixed atftp-CVE-2020-6097.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 21 08:30:09 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
|
||||
|
||||
- Use system wide tftp user/group, don't create them again
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 21 18:19:51 UTC 2020 - Pedro Monreal <pmonreal@suse.com>
|
||||
|
||||
- Security fix: [bsc#1176437, CVE-2020-6097]
|
||||
* A specially crafted sequence of RRQ-Multicast requests can
|
||||
trigger an assert() call resulting denial-of-service.
|
||||
- Add atftp-CVE-2020-6097.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Apr 25 13:16:41 UTC 2020 - chris@computersalat.de
|
||||
|
||||
- fix logrotate
|
||||
* change command to '/sbin/service atftpd restart' since there is no
|
||||
init script and we are using systemd
|
||||
- fix service file
|
||||
* atftpd does not create logfile when there is none, hence we create
|
||||
in ExecStartPre
|
||||
- Update sysconfig file
|
||||
* add ATFTPD_LOGFILE if we want to use our own logfile
|
||||
* add comment to ATFTPD_BIND_ADDRESSES that it is obsolete since
|
||||
systemd (binds to 0.0.0.0)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Jul 5 11:45:37 UTC 2019 - matthias.gerstner@suse.com
|
||||
|
||||
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
|
||||
firewalld, see [1].
|
||||
|
||||
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Apr 26 09:37:19 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
||||
|
||||
- Removed old initscript conditionals and atftpd.init file
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Apr 24 14:57:32 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
||||
|
||||
- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
|
||||
* atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
|
||||
* Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
|
||||
* Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
|
||||
* Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
|
||||
* Fix Debian Bug deb#575831 atftp: error return value when tftp put file
|
||||
* Fix missing default port from Ubuntu bug lp#972834
|
||||
* Merged patches to improve debugging and warning messages
|
||||
* Merged patch from Gentoo distribution:
|
||||
add support for proprietary password extension necessary for
|
||||
transferring files to linksys routers (atftp client)
|
||||
* Added patch from Gentoo bug #322601: client fails for filenames containing spaces
|
||||
* Listening Address configuration fixed
|
||||
* Added Patch "Blksize option can be smaller than SEGSIZE"
|
||||
* Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
|
||||
* Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
|
||||
* Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
|
||||
Add AC_GNU_SOURCE to configure.ac to address FTBFS.
|
||||
* Fix Debian Bug deb#536295 Updated config.sub .guess.
|
||||
* Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
|
||||
* Fix Debian Bug deb#514521 Crash fix
|
||||
* Fix Debian Bug deb#484739 Added support for logging to stdout.
|
||||
* Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
|
||||
* Fix Debian Bug deb#436310 Fixed the FTBFS.
|
||||
* Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
|
||||
* Fix Debian Bug deb#271816 Random segfaults fixed
|
||||
* Fix Debian Bug deb#291829 Segfault fixed on AMD64.
|
||||
* Fix Debian Bug deb#290062 Copyright fixed.
|
||||
* Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
|
||||
* New Project home: https://sourceforge.net/projects/atftp/
|
||||
- Removed patches fixed upstream:
|
||||
* atftp-0.7.dif
|
||||
* atftp-CLK_TCK.diff
|
||||
* atftp-0.7_compiler_warnings.patch
|
||||
* atftp-0.7_thread_crash.patch
|
||||
* atftp-0.7_sol_ip.patch
|
||||
* atftp-0.7_bug-213384_OPT_NUMBER.patch
|
||||
* atftpd-0.7_unprotected_assignments_crash.patch
|
||||
* atftpd-0.7_circumvent_tftp_size_restrictions.patch
|
||||
- Rebased patches:
|
||||
* atftp-0.7-ack_heuristic.patch
|
||||
* atftp-0.7-default_user_man.patch
|
||||
* atftp-0.7-server_receive_race.patch
|
||||
* atftp-0.7-sorcerers_apprentice.patch
|
||||
* atftp-drop_privileges_non-daemon.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Nov 23 13:38:03 UTC 2017 - rbrown@suse.com
|
||||
|
||||
- Replace references to /var/adm/fillup-templates with new
|
||||
%_fillupdir macro (boo#1069468)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 8 13:01:24 UTC 2017 - pmonrealgonzalez@suse.com
|
||||
|
||||
- Changed permissions of /srv/tftpboot to be readable [bsc#940608]
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Dec 6 12:39:32 UTC 2016 - vcizek@suse.com
|
||||
|
||||
- honor --user and --group options in non-daemon mode (bsc#1013565)
|
||||
* add atftp-drop_privileges_non-daemon.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jun 15 13:19:22 UTC 2015 - mpluskal@suse.com
|
||||
|
||||
- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
|
||||
- Move autoreconf back to %buils as it causes issues with quilt
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jun 8 07:39:43 UTC 2015 - schwab@suse.de
|
||||
|
||||
- Force gnu89 inline semantics
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 26 08:19:21 UTC 2015 - mpluskal@suse.com
|
||||
|
||||
- Move autoreconf to %prep section as it better fits there
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun May 24 21:24:18 UTC 2015 - mpluskal@suse.com
|
||||
|
||||
- Fix atftpd.socket (boo#932161)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Mar 18 15:23:17 UTC 2015 - mpluskal@suse.com
|
||||
|
||||
- Do not install service and socket file as executable
|
||||
* change to 0644
|
||||
- Cleanup spec file with spec-cleaner
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Feb 16 13:06:57 UTC 2015 - p.drouand@gmail.com
|
||||
|
||||
- Add systemd support for openSUSE >= 12.1
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Nov 12 20:41:45 UTC 2013 - chris@computersalat.de
|
||||
|
||||
- rebase patches (p0)
|
||||
- rename atftpd.init.d to atftpd.init
|
||||
- fix spec
|
||||
* remove ghost /var/run/atftp (created by init)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Feb 7 13:05:52 UTC 2013 - vcizek@suse.com
|
||||
|
||||
- create capabilites provided by both tftp and atftp
|
||||
(bnc#801481 or bnc#725378)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 3 13:28:02 UTC 2013 - vcizek@suse.com
|
||||
|
||||
- change ownership of /srv/tftpboot, because atftpd running as
|
||||
tftp:tftp can't write to that directory
|
||||
- create pid directory on service start
|
||||
- manpage changes:
|
||||
* substitute /tftpboot with /srv/tftpboot
|
||||
* default user is now tftp:tftp
|
||||
* added patches:
|
||||
atftp-0.7-default_user_man.patch
|
||||
atftp-0.7-default_dir_man.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Oct 8 08:49:53 UTC 2012 - vcizek@suse.com
|
||||
|
||||
- use Vladimir Nadvornik's heuristic for packet retransmission
|
||||
by default (see bnc#774376)
|
||||
The RFC1350 compliant behaviour stays optional.
|
||||
(added atftp-0.7-ack_heuristic.patch)
|
||||
- merged the two sorcerer's apprentice syndrome patches to one
|
||||
(removed atftp-0.7-prevent-sas.patch)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 11 13:01:20 UTC 2012 - vcizek@suse.com
|
||||
|
||||
- added rules for SuSEfirewall2 (bnc#729793)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 11 12:47:04 UTC 2012 - vcizek@suse.com
|
||||
|
||||
- use the "su" logrotate directive (bnc#677335)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 5 14:10:03 UTC 2012 - vcizek@suse.com
|
||||
|
||||
- prevent the sorcerer's apprentice syndrome situation only when
|
||||
explicitly specified by the user (bnc#774376)
|
||||
(added a new command line option --prevent-sas to turn it on)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jan 11 15:27:36 UTC 2012 - vcizek@suse.com
|
||||
|
||||
- fix a race condition where two server threads pick up a single
|
||||
client, which causes the transported file being overwritten
|
||||
(bnc#599856)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jan 2 17:28:19 UTC 2012 - vcizek@suse.cz
|
||||
|
||||
- added autoconf as BuildRequires
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Dec 1 11:20:12 UTC 2011 - coolo@suse.com
|
||||
|
||||
- add automake as buildrequire to avoid implicit dependency
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Nov 9 15:13:18 UTC 2011 - vcizek@suse.com
|
||||
|
||||
- licence in spdx format
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Nov 3 16:56:46 UTC 2011 - vcizek@suse.com
|
||||
|
||||
- fixed the "Sorcerer's Apprentice Syndrome" bug
|
||||
(bnc#727843)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Sep 17 13:28:52 UTC 2011 - jengelh@medozas.de
|
||||
|
||||
- Remove redundant tags/sections from specfile
|
||||
- Use %_smp_mflags for parallel build
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 6 11:55:01 UTC 2011 - vcizek@suse.com
|
||||
|
||||
- added missing PreReq: pwdutils (bnc#683140)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Oct 29 23:18:57 UTC 2010 - chris@computersalat.de
|
||||
|
||||
- cleanup spec
|
||||
o RPM_BUILD_ROOT vs buildroot
|
||||
- fix pre
|
||||
o no check before addding group/user (darix)
|
||||
- fix files
|
||||
o provide /srv/tftpboot
|
||||
- modify sysconfig
|
||||
o provide defaults (darix)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 13 21:28:56 UTC 2010 - chris@computersalat.de
|
||||
|
||||
- modified init/sysconfig file
|
||||
o set defaults in init file
|
||||
- added default group/user tftp:tftp (bnc#472282)
|
||||
- added /srv/tftpboot as default ATFTPD_DIRECTORY (bnc#248008,507011)
|
||||
- added logrotate script
|
||||
o --logfile /var/log/atftpd/atftp.log
|
||||
- added missing README.MCAST, README.PCRE
|
||||
- some rpmlint stuff
|
||||
o fixed missing-dependency-to-logrotate
|
||||
o fixed init non-remote_fs-dependency
|
||||
o fixed init no-reload-entry
|
||||
o fixed non-conffile-in-etc
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 22 06:39:40 UTC 2010 - cristian.rodriguez@opensuse.org
|
||||
|
||||
- add missing pcre-devel to build Requires (bnc#537425)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 12 16:27:04 CEST 2008 - mrueckert@suse.de
|
||||
|
||||
- add atftpd-0.7_circumvent_tftp_size_restrictions.patch:
|
||||
allow block counts higher than 65536 (Fate#303031)
|
||||
- replace network with remote_fs in the init script dependencies
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Aug 22 15:14:00 CEST 2008 - ro@suse.de
|
||||
|
||||
- change fillup_and_insserv to fillup_only (not active by default)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Apr 3 15:57:09 CEST 2008 - mrueckert@suse.de
|
||||
|
||||
- added atftpd-0.7_unprotected_assignments_crash.patch: (bnc#291884)
|
||||
under high load atftpd dies as data access wasnt always protected
|
||||
with a mutex.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jun 21 15:37:53 CEST 2007 - adrian@suse.de
|
||||
|
||||
- fix changelog entry order
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jan 22 18:33:44 CET 2007 - mrueckert@suse.de
|
||||
|
||||
- added atftp-0.7_bug-213384_OPT_NUMBER.patch:
|
||||
"atftpd incorrectly sends OACK (option acknowledge) packets"
|
||||
(#213384,#80441)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jul 31 16:16:43 CEST 2006 - mrueckert@suse.de
|
||||
|
||||
- added /var/run/atftpd/ (0755,nobody,nogroup):
|
||||
at ftp can finally create pid files
|
||||
the default pid file for a single instance will be
|
||||
/var/run/atftpd/pid
|
||||
- added support to run multiple instances of atftpd bound to specific
|
||||
IP addresses:
|
||||
* new sysconfig variable ATFTPD_BIND_ADDRESSES: whitespace
|
||||
seperated list of ip addresses.
|
||||
* each instance has its own pid file /var/run/atftpd/$ip.pid
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Jul 1 04:54:51 CEST 2006 - mrueckert@suse.de
|
||||
|
||||
- bump the version number to 0.7.0:
|
||||
This fix is needed because 0.7 < 0.7cvs. Replaced %{version}
|
||||
with %{pkg_version} everywhere. %{pkg_version} holds the original
|
||||
value of 0.7.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Mar 30 18:32:19 CEST 2006 - mrueckert@suse.de
|
||||
|
||||
- added atftp-0.7_compiler_warnings.patch:
|
||||
o missing include of pthread.h
|
||||
o make the the 1st parameter of tftp_mtftp_missed_packet
|
||||
unsigned int to fix a differ in signedness warning
|
||||
o configure overwrote the CFLAGS from the environment.
|
||||
o fixed logging of threadids
|
||||
- added atftp-0.7_thread_crash.patch:
|
||||
fixes http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=271816
|
||||
- added atftp-0.7_sol_ip.patch:
|
||||
only use the SOL_IP if it is defined
|
||||
- updated atftp-0.7.dif:
|
||||
o really always run through the whole bitmap to find old holes.
|
||||
(bug #148779, #65660)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jan 25 21:34:30 CET 2006 - mls@suse.de
|
||||
|
||||
- converted neededforbuild to BuildRequires
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Dec 20 11:56:43 CET 2005 - ro@suse.de
|
||||
|
||||
- define CLK_TCK if not already done
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Mar 3 19:12:15 CET 2005 - nashif@suse.de
|
||||
|
||||
- Applied patch from #65660: transfer breaks down if packets get
|
||||
dropped
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Mar 3 19:06:48 CET 2005 - nashif@suse.de
|
||||
|
||||
- According to #65660 memory allocation issue not present anymore
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Feb 13 21:46:53 CET 2005 - nashif@suse.de
|
||||
|
||||
- fixed segfault on x86_64
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Nov 16 06:44:58 CET 2004 - ro@suse.de
|
||||
|
||||
- merge old changelog entries (after checking all fixes are here)
|
||||
- removed also destdir.patch (included upstream)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Nov 12 19:17:31 CET 2004 - jhargado@suse.de
|
||||
|
||||
- Added a patch to fix a problem where if a client requests a file
|
||||
that doesn't exist, sometimes the daemon would exit without warning.
|
||||
The .7 version of atftp is needed in SLRS to allow HA functionality.
|
||||
This package is only included in the SLRS distribution.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Sep 11 17:21:40 CEST 2004 - kukuk@suse.de
|
||||
- Adjust to new glibc __THROW define
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Apr 12 03:05:46 CEST 2004 - nashif@suse.de
|
||||
|
||||
- update to 0.7 final
|
||||
- when called in batch mode, return right exit code if
|
||||
operation fails.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Mar 9 15:23:01 CET 2004 - ms@suse.de
|
||||
|
||||
- include timeout patch:
|
||||
We finally got a network trace with
|
||||
the ACKs included. When the client fails the checksum, it stops acking
|
||||
the server. This was occurring anywhere from the middle to the end of the
|
||||
730MB download. It boils down to slower systems are taking to long to
|
||||
write the network data to the disk and in the meanwhile the tftp timeout
|
||||
value is incrementing and when it reaches 5 tftp timeouts, the clients
|
||||
gives up!! Dan added code to reset the timeout counter when the client
|
||||
received another good packet. With this fix, the clients, even slow
|
||||
clients never failed. We think adding more memory to the slower clients
|
||||
made the problem worse because it took longer to write the memory cache
|
||||
out to the disk and caused more timeouts. While trying to cause more
|
||||
timeouts on the clients (we paused the client in the middle of the
|
||||
download), we noticed the server code has the same timeout scheme so Dan
|
||||
also added this code to reset the timeout counter when good packets were
|
||||
received. These fixes look solid, even under error conditions.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Mar 1 05:33:58 CET 2004 - nashif@suse.de
|
||||
|
||||
- Update to 0.7 cvs
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Feb 19 10:50:20 CET 2004 - kukuk@suse.de
|
||||
|
||||
- Cleanup neededforbuild
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Feb 4 17:54:51 CET 2004 - ms@suse.de
|
||||
|
||||
- according to Anas Nashif <nashif@suse.de> the current version
|
||||
0.6.2 includes the fix for bug (#27341). buffer overflow when a long
|
||||
filename is sent to the server
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Feb 4 15:26:43 CET 2004 - ms@suse.de
|
||||
|
||||
- include version 0.6.2 to SLES8 includes important multicast
|
||||
fixes related to project Point-of-Sale (#34074)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Jan 10 21:11:12 CET 2004 - adrian@suse.de
|
||||
|
||||
- build as user
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Aug 29 04:38:45 CEST 2003 - nashif@suse.de
|
||||
|
||||
- Provide default tftp directory
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Aug 1 05:46:44 CEST 2003 - nashif@suse.de
|
||||
|
||||
- update to 0.6.2
|
||||
- Fixes bug #27341
|
||||
- Readded conflict to tftp
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed May 28 16:41:41 CEST 2003 - nashif@suse.de
|
||||
|
||||
- Removed conflict to tftp
|
||||
- added manpages as doc files
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon May 26 13:05:04 CEST 2003 - lmuelle@suse.de
|
||||
|
||||
- Remove set -e from init script; exit with rc 5 if binary is not installed
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jan 1 17:21:33 CET 2003 - nashif@suse.de
|
||||
|
||||
- Fixed bug #22614: missing metadata in sysconfig template
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Sep 14 06:23:15 CEST 2002 - nashif@suse.de
|
||||
|
||||
- Added missing restart to init script
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Aug 30 17:04:36 CEST 2002 - nashif@suse.de
|
||||
|
||||
- Fixed bug #18661: Removed ; from sysconfig file
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Aug 17 18:31:00 CEST 2002 - nashif@suse.de
|
||||
|
||||
- Fixed bug #17793: Added PreReq
|
||||
- Fixed init script output
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Jun 9 06:45:05 CEST 2002 - nashif@suse.de
|
||||
|
||||
- Update to version 0.6.1.1
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Apr 13 18:00:14 CEST 2002 - nashif@suse.de
|
||||
|
||||
- Use tftp_LDADD for libraries instead of LDFLAGS
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Mar 23 04:38:43 CET 2002 - nashif@suse.de
|
||||
|
||||
- Initial release (0.50)
|
||||
|
||||
140
atftp.spec
Normal file
140
atftp.spec
Normal file
@ -0,0 +1,140 @@
|
||||
#
|
||||
# spec file for package atftp
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
# upon. The license for this file, and modifications and additions to the
|
||||
# file, is the same license as for the pristine package itself (unless the
|
||||
# license for the pristine package is not an Open Source License, in which
|
||||
# case the license is the MIT License). An "Open Source License" is a
|
||||
# license that conforms to the Open Source Definition (Version 1.9)
|
||||
# published by the Open Source Initiative.
|
||||
|
||||
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||
#
|
||||
|
||||
|
||||
#
|
||||
#Compat macro for new _fillupdir macro introduced in Nov 2017
|
||||
%if ! %{defined _fillupdir}
|
||||
%define _fillupdir /var/adm/fillup-templates
|
||||
%endif
|
||||
|
||||
Name: atftp
|
||||
Version: 0.8.0
|
||||
Release: 0
|
||||
Summary: Advanced TFTP Server and Client
|
||||
License: GPL-2.0-or-later
|
||||
Group: System/Daemons
|
||||
URL: https://sourceforge.net/projects/atftp/
|
||||
Source: https://sourceforge.net/projects/atftp/files/%{name}-%{version}.tar.gz
|
||||
Source2: atftpd.sysconfig
|
||||
Source3: atftpd.logrotate
|
||||
Source5: atftpd.service
|
||||
Source6: atftpd.socket
|
||||
Patch1: atftp-0.7-default_user_man.patch
|
||||
# PATCH-FIX-SUSE update default directory in man (bnc#507011)
|
||||
Patch2: atftp-0.7-default_dir_man.patch
|
||||
Patch3: atftp-drop_privileges_non-daemon.patch
|
||||
BuildRequires: autoconf
|
||||
BuildRequires: automake
|
||||
BuildRequires: pcre-devel
|
||||
BuildRequires: readline-devel
|
||||
BuildRequires: tcpd-devel
|
||||
Requires(pre): %fillup_prereq
|
||||
Requires(pre): user(tftp) group(tftp)
|
||||
Recommends: logrotate
|
||||
Conflicts: tftp
|
||||
Provides: tftp(client)
|
||||
Provides: tftp(server)
|
||||
BuildRequires: systemd-rpm-macros
|
||||
|
||||
%description
|
||||
atftp stands for Advanced Trivial File Transfer Protocol. It is called
|
||||
"advanced", in contrast to others TFTP servers, for two reasons. First,
|
||||
it is intended to be fully compliant with all related RFCs. This
|
||||
includes RFC1350, RFC2090, RFC2347, RFC2348, and RFC2349. Second, atftp
|
||||
is intended for serving boot files to large clusters. It is
|
||||
multithreaded and will eventually support multicast, allowing faster
|
||||
boot of hundreds of machines simultaneously.
|
||||
|
||||
%prep
|
||||
%autosetup -p1
|
||||
|
||||
%build
|
||||
autoreconf -fi
|
||||
# https://sourceware.org/bugzilla/show_bug.cgi?id=32206
|
||||
CFLAGS="%optflags -fgnu89-inline -U_FORTIFY_SOURCE"
|
||||
%configure
|
||||
%make_build
|
||||
|
||||
%install
|
||||
%make_install
|
||||
install -D -m 0644 %{SOURCE5} %{buildroot}/%{_unitdir}/atftpd.service
|
||||
install -D -m 0644 %{SOURCE6} %{buildroot}/%{_unitdir}/atftpd.socket
|
||||
install -D -m 0644 %{SOURCE2} %{buildroot}%{_fillupdir}/sysconfig.atftpd
|
||||
%if 0%{?suse_version} > 1500
|
||||
mkdir -p %{buildroot}%{_distconfdir}/logrotate.d
|
||||
install -D -m 0644 %{SOURCE3} %{buildroot}%{_distconfdir}/logrotate.d/%{name}
|
||||
%else
|
||||
install -D -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
|
||||
%endif
|
||||
install -d -m 0755 %{buildroot}/srv/tftpboot
|
||||
install -d -m 0750 %{buildroot}%{_localstatedir}/log/atftpd
|
||||
|
||||
%pre
|
||||
# fix sysconfig to get new defaults on Update
|
||||
if [ -f %{_sysconfdir}/sysconfig/atftpd ]; then
|
||||
sed -i -e "s@^\(ATFTPD_OPTIONS=\"--daemon \"\)@#\1@" %{_sysconfdir}/sysconfig/atftpd
|
||||
sed -i -e "s@^\(ATFTPD_DIRECTORY=\"/tftpboot\"\)@#\1@" %{_sysconfdir}/sysconfig/atftpd
|
||||
fi
|
||||
%service_add_pre atftpd.service atftpd.socket
|
||||
%if 0%{?suse_version} > 1500
|
||||
# Prepare for migration to /usr/etc; save any old .rpmsave
|
||||
for i in logrotate.d/%{name} ; do
|
||||
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i}.rpmsave.old ||:
|
||||
done
|
||||
%endif
|
||||
|
||||
%preun
|
||||
%service_del_preun atftpd.service atftpd.socket
|
||||
|
||||
%post
|
||||
%service_add_post atftpd.service atftpd.socket
|
||||
%{fillup_only -n atftpd}
|
||||
|
||||
%postun
|
||||
%service_del_postun atftpd.service atftpd.socket
|
||||
|
||||
%if 0%{?suse_version} > 1500
|
||||
%posttrans
|
||||
# Migration to /usr/etc, restore just created .rpmsave
|
||||
for i in logrotate.d/%{name} ; do
|
||||
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i} ||:
|
||||
done
|
||||
%endif
|
||||
|
||||
%files
|
||||
%license LICENSE
|
||||
%doc BUGS FAQ README README.MCAST README.PCRE TODO
|
||||
%{_bindir}/atftp
|
||||
%{_sbindir}/atftpd
|
||||
%{_sbindir}/in.tftpd
|
||||
%{_unitdir}/atftpd.service
|
||||
%{_unitdir}/atftpd.socket
|
||||
%if 0%{?suse_version} > 1500
|
||||
%{_distconfdir}/logrotate.d/%{name}
|
||||
%else
|
||||
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
|
||||
%endif
|
||||
%{_fillupdir}/sysconfig.atftpd
|
||||
%{_mandir}/man1/atftp.1.gz
|
||||
%{_mandir}/man8/atftpd.8.gz
|
||||
%{_mandir}/man8/in.tftpd.8.gz
|
||||
|
||||
%dir %attr(0755,tftp,tftp) /srv/tftpboot
|
||||
%dir %attr(0750,tftp,tftp) %{_localstatedir}/log/atftpd/
|
||||
|
||||
%changelog
|
||||
14
atftpd.logrotate
Normal file
14
atftpd.logrotate
Normal file
@ -0,0 +1,14 @@
|
||||
/var/log/atftpd/atftp.log {
|
||||
su tftp tftp
|
||||
compress
|
||||
dateext
|
||||
maxage 365
|
||||
rotate 99
|
||||
size=+4096k
|
||||
notifempty
|
||||
missingok
|
||||
create 640 tftp tftp
|
||||
postrotate
|
||||
/sbin/service atftpd restart
|
||||
endscript
|
||||
}
|
||||
22
atftpd.service
Normal file
22
atftpd.service
Normal file
@ -0,0 +1,22 @@
|
||||
[Unit]
|
||||
Description=Advanced TFTP Server
|
||||
|
||||
[Service]
|
||||
# added automatically, for details please see
|
||||
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
PrivateDevices=true
|
||||
ProtectHostname=true
|
||||
ProtectClock=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelLogs=true
|
||||
ProtectControlGroups=true
|
||||
RestrictRealtime=true
|
||||
# end of automatic additions
|
||||
EnvironmentFile=/etc/sysconfig/atftpd
|
||||
# atftpd does not create logfile when there is none
|
||||
ExecStartPre=-/usr/bin/su -c "/usr/bin/touch $ATFTPD_LOGFILE" -s /bin/bash $ATFTPD_USER
|
||||
ExecStart=/usr/sbin/atftpd --user $ATFTPD_USER --group $ATFTPD_GROUP $ATFTPD_OPTIONS $ATFTPD_DIRECTORY
|
||||
StandardInput=socket
|
||||
8
atftpd.socket
Normal file
8
atftpd.socket
Normal file
@ -0,0 +1,8 @@
|
||||
[Unit]
|
||||
Description=Advanced tftp Server Activation Socket
|
||||
|
||||
[Socket]
|
||||
ListenDatagram=69
|
||||
|
||||
[Install]
|
||||
WantedBy=sockets.target
|
||||
69
atftpd.sysconfig
Normal file
69
atftpd.sysconfig
Normal file
@ -0,0 +1,69 @@
|
||||
## Path: Network/FTP/Atftpd
|
||||
## Description: ATFTP Configuration
|
||||
## Type: string
|
||||
## Default: "tftp"
|
||||
#
|
||||
# daemon user (tftp)
|
||||
#
|
||||
ATFTPD_USER="tftp"
|
||||
|
||||
## Type: string
|
||||
## Default: "tftp"
|
||||
#
|
||||
# daemon user (tftp)
|
||||
#
|
||||
ATFTPD_GROUP="tftp"
|
||||
|
||||
## Type: string
|
||||
## Default: ""
|
||||
##
|
||||
## INFO:
|
||||
## logging to file, if enabled, defaults to: "/var/log/atftpd/atftp.log"
|
||||
#
|
||||
# atftpd logfile
|
||||
#
|
||||
ATFTPD_LOGFILE="/var/log/atftpd/atftp.log"
|
||||
|
||||
## Type: string
|
||||
## Default: ""
|
||||
##
|
||||
## INFO:
|
||||
## "--daemon is obsolete since systemd"
|
||||
## "--user, --group" can not be removed/replaced here as
|
||||
## atftpd is started with them as default opts: "--user $ATFTPD_USER --group $ATFTPD_GROUP"
|
||||
## and
|
||||
## logging is set to syslog as default if not enabled:
|
||||
## use the following to enable logging to own logfile
|
||||
## "--logfile $ATFTPD_LOGFILE"
|
||||
#
|
||||
# atftpd options
|
||||
#
|
||||
ATFTPD_OPTIONS=""
|
||||
|
||||
## Type: yesno
|
||||
## Default: no
|
||||
#
|
||||
# Use inetd instead of daemon
|
||||
#
|
||||
ATFTPD_USE_INETD="no"
|
||||
|
||||
## Type: string
|
||||
## Default: "/srv/tftpboot"
|
||||
## was "/tftpboot" but
|
||||
## "/tftpboot" is not allowed anymore in FHS 2.2.
|
||||
#
|
||||
# TFTP directory must be a world readable/writable directory.
|
||||
# By default /srv/tftpboot is assumed.
|
||||
#
|
||||
ATFTPD_DIRECTORY="/srv/tftpboot"
|
||||
|
||||
## Type: string
|
||||
## Default: ""
|
||||
#
|
||||
# Whitespace seperated list of IP addresses which ATFTPD binds to.
|
||||
# One instance of the service is started on each IP address.
|
||||
# By default atftpd will listen on all available IP addresses/interfaces.
|
||||
#
|
||||
# obsolete since systemd socket binds to 0.0.0.0
|
||||
#
|
||||
ATFTPD_BIND_ADDRESSES=""
|
||||
Loading…
Reference in New Issue
Block a user