pool/haveged
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5538f967e4
haveged/haveged.service

20 lines
587 B
SYSTEMD
Raw Normal View History

Accepting request 52242 from security Accepted submit request 52242 from user elvigia OBS-URL: https://build.opensuse.org/request/show/52242 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=2
2010-11-05 17:27:47 +01:00
[Unit]
- Cleanup with spec-cleaner - Adapt the service file to be forking and match what it does for me on Gentoo. - Disable threads as they seem break some times. - Capitalize summaries to make rpmlint happy. OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=90
2014-05-07 11:24:36 +02:00
Description=Entropy Daemon based on the HAVEGE algorithm
Documentation=man:haveged(8) http://www.issihosts.com/haveged/
- Adjust the service to start early enough for all usecases. Should fix bnc#892096. OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=98
2014-08-29 09:24:12 +02:00
DefaultDependencies=no
- Disable haveged service on containers. bnc#881882 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=96
2014-06-10 10:28:33 +02:00
ConditionVirtualization=!container
Accepting request 286508 from home:msmeissn:branches:security - haveged-dracut.module: include haveged into the initrd for randomness generation. - haveged.service: adjust so it is started before journald and also make sure it is shutdown quite late. - regenerate initrd on installation. OBS-URL: https://build.opensuse.org/request/show/286508 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=100
2015-02-18 09:13:58 +01:00
#Conflicts=shutdown.target
- Add haveged-no-syslog.patch to remedy the potential for deadlocks when booting the system: journald reads from /dev/random, which receives entropy from haveged, which in turn logs to syslog before providing any. Ideally, haveged would provide a proper command-line flag to disable use of syslog. Will work with upstream to resolve this in a cleaner way. (bnc#959237) - Remove "After=systemd-random-seed.service" from systemd service file to avoid the potential for deadlocks when booting the system: systemd-random-seed needs /var to read its previous state; mounting /var needs journald; journald needs entropy; and entropy is provided by haveged, which needs systemd-random-seed. (bnc#959237) OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
2016-06-17 16:37:51 +02:00
# Don't wait for systemd-random-seed.service, leads to deadlock with fips=1
#After=systemd-random-seed.service
Accepting request 339597 from home:msmeissn:branches:security - haveged.service: reverted the dependency on systemd-journald.socket for now, as it causes a dependency loop. bsc#949728 bsc#950857 OBS-URL: https://build.opensuse.org/request/show/339597 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=105
2015-10-18 13:01:48 +02:00
Before=sysinit.target shutdown.target systemd-journald.service
Accepting request 52242 from security Accepted submit request 52242 from user elvigia OBS-URL: https://build.opensuse.org/request/show/52242 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=2
2010-11-05 17:27:47 +01:00
[Service]
Accepting request 233306 from home:elvigia:branches:security - Fix "stop" of service, the daemon in foreground actually exits with a weird exit code. workaround this misbehaviour in the service file. - revert to non-forking service, "forking" services are racy and provided by systemd purely for compatibility with old daemons. see daemon(7) for the rationale. Only "simple" (default) and "notify" services must be used if possible. - Also, there is no haveged.conf around, neither such file is parsed by the daemon at all. - Start the daemon as soon as the random device is available with the help of udev, as starting services while starved of entropy is no good. OBS-URL: https://build.opensuse.org/request/show/233306 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=92
2014-05-12 10:39:42 +02:00
ExecStart=/usr/sbin/haveged -w 1024 -v 0 -F
Accepting request 622295 from home:WernerFink:branches:security - Move forward to socket communication within private network - Make haveged survive switch root within initrd (boo#1075359) OBS-URL: https://build.opensuse.org/request/show/622295 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=116
2018-07-12 14:26:06 +02:00
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT
Accepting request 135723 from home:elvigia:branches:security - Tight up systemd service file, this daemon does not need network and can use PrivateNetwork=yes OBS-URL: https://build.opensuse.org/request/show/135723 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=63
2012-09-24 22:51:37 +02:00
PrivateNetwork=yes
- Adjust the service to start early enough for all usecases. Should fix bnc#892096. OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=98
2014-08-29 09:24:12 +02:00
Restart=always
Accepting request 233306 from home:elvigia:branches:security - Fix "stop" of service, the daemon in foreground actually exits with a weird exit code. workaround this misbehaviour in the service file. - revert to non-forking service, "forking" services are racy and provided by systemd purely for compatibility with old daemons. see daemon(7) for the rationale. Only "simple" (default) and "notify" services must be used if possible. - Also, there is no haveged.conf around, neither such file is parsed by the daemon at all. - Start the daemon as soon as the random device is available with the help of udev, as starting services while starved of entropy is no good. OBS-URL: https://build.opensuse.org/request/show/233306 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=92
2014-05-12 10:39:42 +02:00
SuccessExitStatus=137 143
- Cleanup with spec-cleaner - Adapt the service file to be forking and match what it does for me on Gentoo. - Disable threads as they seem break some times. - Capitalize summaries to make rpmlint happy. OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=90
2014-05-07 11:24:36 +02:00
Accepting request 52242 from security Accepted submit request 52242 from user elvigia OBS-URL: https://build.opensuse.org/request/show/52242 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=2
2010-11-05 17:27:47 +01:00
[Install]
- Adjust the service to start early enough for all usecases. Should fix bnc#892096. OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=98
2014-08-29 09:24:12 +02:00
WantedBy=sysinit.target
Reference in New Issue Copy Permalink