Accepting request 1219544 from security

OBS-URL: https://build.opensuse.org/request/show/1219544
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=67

haveged-1.9.18.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b835fa02b52ee7d06276e028571cadcb14d08f5e5a4b5767adf81451f70561c7
-size 495798

haveged-1.9.19.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:acbb05776668657012273be9bb3310e3140b79959aa4538e4cca8d30d40c0b8f
+size 507441

haveged-dracut.module

@@ -14,11 +14,7 @@ installkernel() {
 
 # called by dracut
 install() {
-    inst_multiple -o \
-        /usr/sbin/haveged \
-        $systemdsystemunitdir/haveged.service
-    mkdir -p "$initdir/$systemdsystemunitdir/sysinit.target.wants"
-    mkdir -p "$initdir/$systemdsystemunitdir/initrd-switch-root.target.wants"
+    inst_multiple -o /usr/sbin/haveged $systemdsystemunitdir/haveged-once.service
     mkdir -p "$initdir/$systemdsystemunitdir/systemd-journald.service.wants"
-    ln_r "$systemdsystemunitdir/haveged.service" "$systemdsystemunitdir/systemd-journald.service.wants/haveged.service"
+    ln_r "$systemdsystemunitdir/haveged-once.service" "$systemdsystemunitdir/systemd-journald.service.wants/haveged-once.service"
 }

haveged.changes

@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Wed Oct 30 11:39:54 UTC 2024 - Martin Schreiner <martin.schreiner@suse.com>
+
+- Remove haveged-once.service.
+  Service is no longer required exactly as of version 1.9.19, because
+  the fix for it was merged upstream (synchronize haveged instances
+  during switch root).
+- Revert a change in haveged-dracut.module, as haveged should be
+  required by systemd-journald.service, not sysinit.target.
+
+-------------------------------------------------------------------
+Tue Oct 29 18:28:04 UTC 2024 - Martin Schreiner <martin.schreiner@suse.com>
+
+- Update to 1.9.19:
+  * Added --time_interval N to add entropy unconditionally every N
+    seconds.
+  * Synchronize haveged instances during switch root.
+  * 90-haveged.rules: fix warnings reported by udevadm verify.
+- Introduce haveged-once.service.
+  * This new service is meant to be called from initrd, and it uses
+    the '--once' flag.
+  * Haveged is executed, and then exits, raising the entropy levels
+    during very early boot.
+    Once / is mounted and 'systemd switch-root' is called, then the
+    regular haveged.service is invoked.
+  * Fix for bsc#1165294 and bsc#1222296.
+- Improve haveged-dracut.module, so that haveged is called only once
+  from initrd.
+
 -------------------------------------------------------------------
 Fri Oct 27 13:04:10 UTC 2023 - Otto Hollmann <otto.hollmann@suse.com>
 

haveged.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package haveged
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,16 +18,16 @@
 
 %{!?_udevrulesdir: %global _udevrulesdir %(pkg-config --variable=udevdir udev)/rules.d }
 Name:           haveged
-Version:        1.9.18
+Version:        1.9.19
 Release:        0
 Summary:        Daemon for feeding entropy into the random pool
 License:        GPL-3.0-only
 Group:          System/Daemons
 URL:            https://github.com/jirka-h/haveged
 Source0:        https://github.com/jirka-h/haveged/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
-Source2:        %{name}.service
-Source3:        90-haveged.rules
-Source4:        haveged-dracut.module
+Source1:        %{name}.service
+Source2:        90-haveged.rules
+Source3:        haveged-dracut.module
 Patch0:         ppc64le.patch
 # PATCH-FIX-UPSTREAM: don't write to syslog at startup to avoid deadlocks psimons@suse.com bnc#959237
 Patch2:         haveged-no-syslog.patch
@@ -39,7 +39,7 @@ BuildRequires:  pkgconfig
 BuildRequires:  pkgconfig(systemd)
 BuildRequires:  pkgconfig(udev)
 Requires(post): coreutils
-Requires(postun):coreutils
+Requires(postun): coreutils
 Enhances:       apache2
 Enhances:       gpg2
 Enhances:       openssl
@@ -103,12 +103,9 @@ make %{?_smp_mflags} check
 
 %install
 %make_install
-install -Dpm 0644 %{SOURCE2} \
-  %{buildroot}%{_unitdir}/%{name}.service
-install -Dpm 0644 %{SOURCE3} \
-  %{buildroot}%{_udevrulesdir}/90-%{name}.rules
-install -Dpm 0755 %{SOURCE4} \
-  %{buildroot}%{_prefix}/lib/dracut/modules.d/98%{name}/module-setup.sh
+install -Dpm 0644 %{SOURCE1} %{buildroot}%{_unitdir}/%{name}.service
+install -Dpm 0644 %{SOURCE2} %{buildroot}%{_udevrulesdir}/90-%{name}.rules
+install -Dpm 0755 %{SOURCE3} %{buildroot}%{_prefix}/lib/dracut/modules.d/98%{name}/module-setup.sh
 rm -f %{buildroot}%{_libdir}/libhavege.*a
 ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}