Commit Graph

54 Commits

Author SHA256 Message Date
Martin Pluskal
bba6f7b831 Accepting request 834167 from home:elimat:branches:network:time
- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367)

OBS-URL: https://build.opensuse.org/request/show/834167
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=89
2020-09-14 07:24:37 +00:00
Martin Pluskal
694ca9de6c Accepting request 824482 from home:gmbr3:libexecdir
- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

OBS-URL: https://build.opensuse.org/request/show/824482
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=87
2020-08-10 06:14:10 +00:00
Reinhard Max
606c5dd576 - Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=85
2020-06-04 15:25:07 +00:00
Martin Pluskal
99216d1f98 Accepting request 799317 from home:dimstar:Factory
- Use _systemdutildir instead of _libexecdir/systemd: systemd does
  not actually live below libexecdir.

OBS-URL: https://build.opensuse.org/request/show/799317
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=83
2020-05-01 08:38:23 +00:00
Martin Pluskal
fd8ad00186 Accepting request 774157 from home:marxin:branches:network:time
- Add chrony-test-update-processing-of-packet-log.patch in order
  to fix test-suite failure.

OBS-URL: https://build.opensuse.org/request/show/774157
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=81
2020-02-13 12:49:51 +00:00
Martin Pluskal
965d6fca99 Accepting request 774112 from home:marxin:branches:network:time
- Backport test-fix-util-unit-test-for-NTP-era-split.patch.

OBS-URL: https://build.opensuse.org/request/show/774112
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=79
2020-02-13 09:38:25 +00:00
Martin Pluskal
c3aae44af0 Accepting request 773642 from home:marxin:branches:network:time
- Update clknetsim to version 79ffe44 (fixes boo#1162964).

OBS-URL: https://build.opensuse.org/request/show/773642
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=77
2020-02-12 10:03:46 +00:00
Martin Pluskal
efe9a8a5f6 Accepting request 743099 from home:adkorte
- Change to BuildRequires: rubygem(asciidoctor) and remove conditional
  (is available in SLE12-SP4 and SLE15* as well)
- Fix typo in %install

OBS-URL: https://build.opensuse.org/request/show/743099
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=75
2019-11-04 12:38:19 +00:00
Martin Pluskal
5562449e9f Accepting request 741936 from home:adkorte:branches:openSUSE:Factory
- Fix asciidoc in Tumbleweed
- Revert clknetsim to version 58c5e8b
- Fix incorrect download link for package signature

OBS-URL: https://build.opensuse.org/request/show/741936
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=73
2019-10-23 07:34:11 +00:00
Martin Pluskal
ecbff49e0a - Temporarily disable signature usage as its expired
- Update clknetsim to version ac3c832

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=72
2019-10-21 08:17:13 +00:00
Martin Pluskal
1a07c1babb Accepting request 741213 from home:lemmy04:branches:network:time
- fix chrony-service-helper.patch
- Update to 3.5:
  + Add support for more accurate reading of PHC on Linux 5.0
  + Add support for hardware timestamping on interfaces with read-only timestamping configuration
  + Add support for memory locking and real-time priority on FreeBSD, NetBSD, Solaris
  + Update seccomp filter to work on more architectures
  + Validate refclock driver options
  + Fix bindaddress directive on FreeBSD
  + Fix transposition of hardware RX timestamp on Linux 4.13 and later
  + Fix building on non-glibc systems

OBS-URL: https://build.opensuse.org/request/show/741213
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=71
2019-10-20 18:01:21 +00:00
Reinhard Max
e1a383cdd4 - Fix ordering and dependencies of chronyd.service, so that it is
not being started before the network (bsc#1129730).
- Add chrony-service-ordering.patch

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=67
2019-03-19 15:55:11 +00:00
Martin Pluskal
d0dc0eea07 - Update testsuite to version 58c5e8b
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=65
2019-03-06 14:49:27 +00:00
Reinhard Max
ab0c0bf492 - Read runtime servers from /var/run/netconfig/chrony.servers to
fix bsc#1099272.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=62
2018-12-20 17:43:50 +00:00
Martin Pluskal
7da09593f3 - Make sure to generate correct sysconfig file (boo#1117147)
- Update clknetsim to revision 8b48422

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=61
2018-12-14 10:02:44 +00:00
Martin Pluskal
84bd393726 OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=59 2018-12-06 07:43:49 +00:00
Martin Pluskal
9391fe4476 - Remove discrepancies between spec file and chrony-tmpfiles (boo#1115529)
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=58
2018-11-22 09:39:42 +00:00
Ismail Dönmez
02eeb94e00 - Update the keyring and uncomment it in the spec file
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=56
2018-10-18 10:14:29 +00:00
Martin Pluskal
2546c1b260 - Comment out bad signature
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=54
2018-10-18 08:06:23 +00:00
Martin Pluskal
ea91575fb2 Accepting request 638376 from home:stroeder:branches:network:time
- Added %{_tmpfilesdir}/%{name}.conf
- Updated clknetsim
- Update to version 3.4

OBS-URL: https://build.opensuse.org/request/show/638376
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=52
2018-09-26 11:51:43 +00:00
Martin Pluskal
c022e41858 - Update clknetsim to revision 42b693b
* Drop not needed chrony-fix-open.patch
- Build tests with optflags as well
- Do not run tests on i586
- Enable signd

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=50
2018-08-03 09:17:49 +00:00
Martin Pluskal
029648ee59 - Mention all sources as such in spec file
- Fix formatting of changelog
- Drop reference to change is not present
  * Enhancements:
    + Add burst option to server/pool directive
    + Add stratum and tai options to refclock directive
    + Add support for Nettle crypto library
    + Add workaround for missing kernel receive timestamps on Linux
    + Wait for late hardware transmit timestamps
    + Improve source selection with unreachable sources
    + Improve protection against replay attacks on symmetric mode
    + Allow PHC refclock to use socket in /var/run/chrony
    + Add shutdown command to stop chronyd
    + Simplify format of response to manual list command
    + Improve handling of unknown responses in chronyc
  * Bug fixes:
    + Respond to NTPv1 client requests with zero mode
    + Fix -x option to not require CAP_SYS_TIME under non-root user
    + Fix acquisitionport directive to work with privilege separation
    + Fix handling of socket errors on Linux to avoid high CPU usage
    + Fix chronyc to not get stuck in infinite loop after clock step

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=49
2018-08-02 07:54:01 +00:00
Martin Pluskal
41377f5dbf Accepting request 626940 from home:bmwiedemann:branches:network:time
- Update to version 3.3
ed
  + Enhancements:
    Add burst option to server/pool directive
    Add stratum and tai options to refclock directive
    Add support for Nettle crypto library
    Add workaround for missing kernel receive timestamps on Linux
    Wait for late hardware transmit timestamps
    Improve source selection with unreachable sources
    Improve protection against replay attacks on symmetric mode
    Allow PHC refclock to use socket in /var/run/chrony
    Add shutdown command to stop chronyd
    Simplify format of response to manual list command
    Improve handling of unknown responses in chronyc
  + Bug fixes:
    Respond to NTPv1 client requests with zero mode
    Fix -x option to not require CAP_SYS_TIME under non-root user
    Fix acquisitionport directive to work with privilege separation
    Fix handling of socket errors on Linux to avoid high CPU usage
    Fix chronyc to not get stuck in infinite loop after clock step
  + make package build reproducible (boo#1047218)
    via https://www.mail-archive.com/chrony-dev@chrony.tuxfamily.org/msg01685.html

OBS-URL: https://build.opensuse.org/request/show/626940
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=48
2018-08-02 07:42:46 +00:00
Martin Pluskal
1b3494a786 Accepting request 597617 from home:markkp:branches:network:time
- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"

OBS-URL: https://build.opensuse.org/request/show/597617
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=46
2018-04-18 07:10:17 +00:00
Martin Pluskal
da3cde8e63 Accepting request 591505 from home:kukuk:branches:network:time
- Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/591505
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=44
2018-03-30 09:49:35 +00:00
Martin Pluskal
1f55fc9eb9 Accepting request 587004 from home:kukuk:branches:network:time
- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.

OBS-URL: https://build.opensuse.org/request/show/587004
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=42
2018-03-14 16:40:50 +00:00
Martin Pluskal
527ed2d81e - Enable pps support
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=40
2018-02-09 10:21:23 +00:00
Martin Pluskal
2f8a4c9f68 Accepting request 544752 from home:RBrownSUSE:branches:network:time
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544752
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=38
2017-11-23 15:11:48 +00:00
Martin Pluskal
03c4ecbefc OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=36 2017-10-26 21:26:35 +00:00
Martin Pluskal
92481aa2b7 OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=35 2017-10-26 12:34:40 +00:00
Martin Pluskal
9a79f15b95 - Cleanup spec file:
* Drop pre systemd support
  * Run spec-cleaner

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=34
2017-10-26 11:15:56 +00:00
Martin Pluskal
f16919c0b4 Accepting request 536441 from home:markkp:branches:network:time
- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).

OBS-URL: https://build.opensuse.org/request/show/536441
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=33
2017-10-26 08:03:18 +00:00
Martin Pluskal
906029af44 Accepting request 528207 from home:markkp:branches:network:time
- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version

OBS-URL: https://build.opensuse.org/request/show/528207
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=29
2017-09-22 07:52:47 +00:00
Martin Pluskal
7423b231b5 OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=27 2017-02-01 11:44:40 +00:00
Martin Pluskal
fbd4c3c28d Accepting request 453663 from home:markkp:branches:network:time
Upgraded to version 3.1, along with clknetsim to match.

OBS-URL: https://build.opensuse.org/request/show/453663
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=26
2017-01-31 17:51:07 +00:00
Martin Pluskal
93ec637a44 Accepting request 450635 from home:markkp:branches:network:time
Upgraded to version 3.0, along with clknetsim to match.

OBS-URL: https://build.opensuse.org/request/show/450635
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=24
2017-01-17 08:18:54 +00:00
Martin Pluskal
eb111ceeb0 Accepting request 442726 from home:markkp:branches:network:time
Upgraded to version 2.4.1 which is a relatively small bugfix release.

OBS-URL: https://build.opensuse.org/request/show/442726
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=22
2016-11-29 17:27:19 +00:00
Martin Pluskal
c32c19f1ec Accepting request 400656 from home:darix:playground
- update to 2.4:
- update clknetsim to a5949fe for fixing a testsuite failure:
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.

OBS-URL: https://build.opensuse.org/request/show/400656
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=20
2016-06-08 13:53:28 +00:00
Martin Pluskal
e811fcfcc5 Accepting request 389663 from home:markkp:branches:network:time
Added a fix from Marcus Meissner so that nss could be enabled and still pass the "make check" processing.

OBS-URL: https://build.opensuse.org/request/show/389663
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=18
2016-04-14 07:06:33 +00:00
Martin Pluskal
83a814dde1 - Provide ntp-daemon (bsc#973981)
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=17
2016-04-13 14:24:37 +00:00
Martin Pluskal
1197c7b6de - Use correct license
- Drop hardcoded dependency on libseccom, it is detected during 
  build

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=15
2016-04-08 15:54:51 +00:00
Martin Pluskal
04d4e77785 Accepting request 386163 from home:pluskalm:branches:network:time
- Do reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12 
  x86_64

OBS-URL: https://build.opensuse.org/request/show/386163
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=13
2016-04-08 08:42:30 +00:00
Martin Pluskal
5469ba86f8 OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=12 2016-04-06 08:58:31 +00:00
Martin Pluskal
ac8323b394 Accepting request 384762 from home:markkp:branches:network:time
Lots of changes to prepare chrony for inclusion in SLES12 SP2.

OBS-URL: https://build.opensuse.org/request/show/384762
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=11
2016-04-06 08:53:39 +00:00
Martin Pluskal
5d7a54988f - Cleanup spec file with spec-cleaner
- Prepare for submission to Factory (see fate#319508)

OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=10
2016-03-28 09:36:00 +00:00
Martin Pluskal
3aa0bc9112 Accepting request 360184 from home:darix:branches:network:time
- update to 2.3
- refreshed patches to apply cleanly again:
  chrony-2.2_logrotate.patch
  chrony-config.patch
  chrony-service-helper.patch

OBS-URL: https://build.opensuse.org/request/show/360184
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=9
2016-02-18 22:22:23 +00:00
Martin Pluskal
8df796624b Accepting request 356695 from home:darix:branches:network:time
- update to 2.2.1
  Restrict authentication of NTP server/peer to specified key
  (CVE-2016-1567)

OBS-URL: https://build.opensuse.org/request/show/356695
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=8
2016-01-29 14:41:59 +00:00
beefc924bf Accepting request 346364 from home:darix:branches:network:time
- silence groupadd/useradd call and drop the shell from the user.

OBS-URL: https://build.opensuse.org/request/show/346364
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=7
2015-11-26 10:46:56 +00:00
Martin Pluskal
83aa68ed96 Accepting request 346314 from home:darix:branches:network:time
- update to 2.2
  see /usr/share/doc/packages/chrony/NEWS
- sync with fedora spec and add systemd support
- refreshed chrony-config.patch to apply cleanly again
- added chrony-2.2_logrotate.patch: add missing su option as we no
  longer have the daemon run as root.
- added chrony-service-helper.patch: imported from fedora with a
  changed path for moving from libexecdir to datadir
- only use syscall filters on 12.3 and newer
- move helper from libexecdir to datadir

OBS-URL: https://build.opensuse.org/request/show/346314
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=6
2015-11-26 08:03:25 +00:00
David Bahi
2bad924aa0 Accepting request 223745 from home:darix:branches:network:time
- clean up build section
  - the configure script can actually import CC/CFLAGS from the
    environment. no need to break any CFLAGS it might set in the
    configure script.
  - remove unneeded prefix from the make calls.
  - enable building the binaries with PIE/relro now
- Update to version 1.29.1:
  * Modify chronyc protocol to prevent amplification attacks
    (CVE-2014-0021) (incompatible with previous protocol version,
    chronyc supports both)
- Additional changes from 1.29
  * Fix crash when processing crafted commands (CVE-2012-4502)
    (possible with IP addresses allowed by cmdallow and localhost)
  * Don't send uninitialized data in SUBNETS_ACCESSED and
    CLIENT_ACCESSES replies (CVE-2012-4503) (not used by chronyc)
  * Drop support for SUBNETS_ACCESSED and CLIENT_ACCESSES commands
- Updated chrony-config.patch:
  - lots of config values were fixed upstream already
  - key file patching is unnecessary

OBS-URL: https://build.opensuse.org/request/show/223745
OBS-URL: https://build.opensuse.org/package/show/network:time/chrony?expand=0&rev=5
2014-02-25 15:55:43 +00:00