Accepting request 233306 from home:elvigia:branches:security

- Fix "stop" of service, the daemon in foreground actually 
 exits with a weird exit code. workaround this misbehaviour
 in the service file.

- revert to non-forking service, "forking" services are racy
  and provided by systemd purely for compatibility with old daemons.
  see daemon(7) for the rationale. Only "simple" (default) and 
  "notify" services must be used if possible.
- Also, there is no haveged.conf around, neither such file
  is parsed by the daemon at all.
- Start the daemon as soon as the random device is available with
  the help of udev, as starting services while starved of entropy 
  is no good.

OBS-URL: https://build.opensuse.org/request/show/233306
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=92
This commit is contained in:
2014-05-12 08:39:42 +00:00
committed by Git OBS Bridge
parent d41d862a9d
commit 5638d8ef8d
4 changed files with 33 additions and 5 deletions

View File

@@ -3,12 +3,10 @@ Description=Entropy Daemon based on the HAVEGE algorithm
Documentation=man:haveged(8) http://www.issihosts.com/haveged/
[Service]
Type=forking
EnvironmentFile=/etc/haveged.conf
PIDFile=/run/haveged.pid
ExecStart=/usr/sbin/haveged -w 1024 -v 0 -p /run/haveged.pid
ExecStart=/usr/sbin/haveged -w 1024 -v 0 -F
CapabilityBoundingSet=CAP_SYS_ADMIN
PrivateNetwork=yes
SuccessExitStatus=137 143
[Install]
WantedBy=multi-user.target