145 Commits

Author SHA256 Message Date
Dominique Leuenberger
dbd94ed773 Accepting request 1219544 from security
OBS-URL: https://build.opensuse.org/request/show/1219544
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=67
2024-10-31 15:09:23 +00:00
Martin Schreiner
f4e1452fd8 - Remove haveged-once.service.
Service is no longer required exactly as of version 1.9.19, because
  the fix for it was merged upstream (synchronize haveged instances
  during switch root).
- Revert a change in haveged-dracut.module, as haveged should be
  required by systemd-journald.service, not sysinit.target.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=152
2024-10-30 11:55:03 +00:00
Martin Schreiner
f3e5d1945b - Update to 1.9.19:
* Added --time_interval N to add entropy unconditionally every N
    seconds.
  * Synchronize haveged instances during switch root.
  * 90-haveged.rules: fix warnings reported by udevadm verify.
- Introduce haveged-once.service.
  * This new service is meant to be called from initrd, and it uses
    the '--once' flag.
  * Haveged is executed, and then exits, raising the entropy levels
    during very early boot.
    Once / is mounted and 'systemd switch-root' is called, then the
    regular haveged.service is invoked.
  * Fix for bsc#1165294 and bsc#1222296.
- Improve haveged-dracut.module, so that haveged is called only once
  from initrd.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=151
2024-10-29 20:31:40 +00:00
Ana Guerrero
764080453f Accepting request 1130690 from security
OBS-URL: https://build.opensuse.org/request/show/1130690
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=66
2023-12-05 16:00:55 +00:00
5eba5ca9bf Accepting request 1130687 from home:ohollmann:branches:security
- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
    - haveged-switch-root.service
    - haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1130687
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=149
2023-12-04 09:40:17 +00:00
Dominique Leuenberger
3aba9dd788 Accepting request 1039602 from security
- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1039602
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=65
2022-12-03 09:03:20 +00:00
Otto Hollmann
858bf80d64 Accepting request 1039586 from home:ohollmann:branches:security
- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1039586
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=147
2022-12-02 12:58:51 +00:00
Dominique Leuenberger
48b1905dd4 Accepting request 972436 from security
OBS-URL: https://build.opensuse.org/request/show/972436
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=64
2022-04-26 18:14:58 +00:00
Peter Simons
17acddfc68 Accepting request 972422 from home:dirkmueller:Factory
- update to 1.9.18:
  * Round bits up and target full pool size [Jason A. Donenfeld]
  * Specify right kernel commit in README [Jason A. Donenfeld]

OBS-URL: https://build.opensuse.org/request/show/972422
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=145
2022-04-25 05:36:13 +00:00
Dominique Leuenberger
323ba83494 Accepting request 955204 from security
Update to v1.9.17 (forwarded request 955185 from ohollmann)

OBS-URL: https://build.opensuse.org/request/show/955204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=63
2022-02-17 22:39:52 +00:00
ee189b05ef Accepting request 955185 from home:ohollmann:branches:security
Update to v1.9.17

OBS-URL: https://build.opensuse.org/request/show/955185
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=144
2022-02-16 09:03:55 +00:00
Dominique Leuenberger
3a06ec655c Accepting request 932923 from security
OBS-URL: https://build.opensuse.org/request/show/932923
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=62
2021-11-23 21:10:23 +00:00
Peter Simons
4800de73e5 Accepting request 932917 from home:jsegitz:branches:security
- Remove ProtectKernelTunables hardening, causes the service to fail
  (boo#1192921)

OBS-URL: https://build.opensuse.org/request/show/932917
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=143
2021-11-22 08:56:09 +00:00
Dominique Leuenberger
4d5ae32b8d https://bugzilla.opensuse.org/show_bug.cgi?id=1192921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=61
2021-11-20 22:24:11 +00:00
Dominique Leuenberger
4d0935ebc5 Accepting request 930759 from security
OBS-URL: https://build.opensuse.org/request/show/930759
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=60
2021-11-20 01:38:22 +00:00
Peter Simons
020d7afb2c Accepting request 920872 from home:jsegitz:branches:systemdhardening:security
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/920872
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=142
2021-11-10 20:37:20 +00:00
Dominique Leuenberger
687f1d781c Accepting request 928677 from security
- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.
--------------------------------------------------------------------

OBS-URL: https://build.opensuse.org/request/show/928677
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=59
2021-11-08 16:23:54 +00:00
6af202e44e - revert last change, e.g. for VMs where we are not being fed entropy
from the host or similar setups.
--------------------------------------------------------------------
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=141
2021-11-02 08:19:20 +00:00
e155a57e32 osc copypac from project:openSUSE:Factory package:haveged revision:57
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=139
2021-11-02 08:17:58 +00:00
Dominique Leuenberger
2c759bdb27 Accepting request 928130 from security
OBS-URL: https://build.opensuse.org/request/show/928130
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=58
2021-10-31 21:55:33 +00:00
25e9f9a4ac Accepting request 924659 from home:elvigia:branches:security
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/request/show/924659
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=135
2021-10-29 13:01:32 +00:00
Dominique Leuenberger
4ddc61f839 Accepting request 860156 from security
- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch (forwarded request 860091 from polslinux)

OBS-URL: https://build.opensuse.org/request/show/860156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=57
2021-01-08 16:32:19 +00:00
44d6b1b2af Accepting request 860091 from home:polslinux:branches:security
- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch

OBS-URL: https://build.opensuse.org/request/show/860091
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=133
2021-01-04 11:49:19 +00:00
Dominique Leuenberger
f1c86e212f Accepting request 817818 from security
OBS-URL: https://build.opensuse.org/request/show/817818
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=56
2020-07-01 16:22:15 +00:00
Peter Simons
3e09c9b278 Accepting request 817797 from home:polslinux:branches:security
- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]

OBS-URL: https://build.opensuse.org/request/show/817797
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=131
2020-06-30 08:47:37 +00:00
Dominique Leuenberger
d5ed6ae9cd Accepting request 809687 from security
OBS-URL: https://build.opensuse.org/request/show/809687
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=55
2020-06-03 18:28:33 +00:00
Peter Simons
885ae5f03d Accepting request 808990 from home:pluskalm:branches:security
- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege  by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch

OBS-URL: https://build.opensuse.org/request/show/808990
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=129
2020-05-27 20:37:36 +00:00
Dominique Leuenberger
5538f967e4 Accepting request 719793 from security
OBS-URL: https://build.opensuse.org/request/show/719793
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=54
2019-08-05 08:29:14 +00:00
Tomáš Chvátal
9487313ec1 Accepting request 719780 from home:Andreas_Schwab:Factory
- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)

OBS-URL: https://build.opensuse.org/request/show/719780
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=127
2019-07-30 09:26:39 +00:00
Dominique Leuenberger
7cedb119f7 Accepting request 705285 from security
OBS-URL: https://build.opensuse.org/request/show/705285
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=53
2019-05-28 07:41:21 +00:00
Peter Simons
468974c7a0 Accepting request 705278 from home:fcrozat:branches:security
- Add patch f2193587.patch from github pull request (bsc#1134351)

OBS-URL: https://build.opensuse.org/request/show/705278
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=125
2019-05-24 16:55:08 +00:00
Dominique Leuenberger
c90de52468 Accepting request 636618 from security
OBS-URL: https://build.opensuse.org/request/show/636618
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=52
2018-09-26 12:53:36 +00:00
Tomáš Chvátal
433852052d Accepting request 636617 from home:WernerFink:branches:security
- Add patch f2193587.patch from github pull request
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches

OBS-URL: https://build.opensuse.org/request/show/636617
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=123
2018-09-19 10:25:55 +00:00
Yuchen Lin
1f35945167 Accepting request 635067 from security
OBS-URL: https://build.opensuse.org/request/show/635067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=51
2018-09-18 09:38:24 +00:00
Tomáš Chvátal
17a598f87b Accepting request 635042 from home:jengelh:branches:security
- Use noun phrase for summary. Grammar fixes to description.

OBS-URL: https://build.opensuse.org/request/show/635042
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=121
2018-09-11 17:24:26 +00:00
Peter Simons
564e22aadf Accepting request 634947 from home:pluskalm:branches:security
- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's

OBS-URL: https://build.opensuse.org/request/show/634947
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=120
2018-09-11 14:19:25 +00:00
Dominique Leuenberger
661edd5066 Accepting request 622459 from security
OBS-URL: https://build.opensuse.org/request/show/622459
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=50
2018-07-18 20:36:16 +00:00
6bdf774b77 Accepting request 622304 from home:WernerFink:branches:security
- Add patch change-sysroot.patch to
  move forward to socket communication within private network 
- Add haveged-switch-root.service which send the new root location
  to running haveged process

OBS-URL: https://build.opensuse.org/request/show/622304
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=118
2018-07-13 11:17:07 +00:00
c6f5b6edad added change-sysroot.patch
haveged-switch-root.service

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=117
2018-07-12 12:35:45 +00:00
b1519e602b Accepting request 622295 from home:WernerFink:branches:security
- Move forward to socket communication within private network 

- Make haveged survive switch root within initrd  (boo#1075359)

OBS-URL: https://build.opensuse.org/request/show/622295
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=116
2018-07-12 12:26:06 +00:00
Dominique Leuenberger
f5d958c168 Accepting request 588636 from security
OBS-URL: https://build.opensuse.org/request/show/588636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=49
2018-03-26 09:57:39 +00:00
Peter Simons
255ec1fd73 Accepting request 588634 from home:kukuk:branches:security
- Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/588634
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=114
2018-03-19 14:34:22 +00:00
Dominique Leuenberger
d7c3ce25af Accepting request 577945 from security
OBS-URL: https://build.opensuse.org/request/show/577945
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=48
2018-02-20 16:53:17 +00:00
c97be11e29 Accepting request 577874 from home:avindra
- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/577874
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=112
2018-02-19 07:16:16 +00:00
Dominique Leuenberger
1bf1f36d62 Accepting request 403498 from security
- reset rpm groups (forwarded request 403495 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/403498
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=47
2016-06-29 13:02:31 +00:00
Peter Simons
ab2704a644 Accepting request 403495 from home:jengelh:branches:security
- reset rpm groups

OBS-URL: https://build.opensuse.org/request/show/403495
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=110
2016-06-19 13:41:12 +00:00
Peter Simons
8143361db9 - Add haveged-no-syslog.patch to remedy the potential for deadlocks
when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
  
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
2016-06-17 14:37:51 +00:00
Dominique Leuenberger
e2450edbc5 Accepting request 349038 from security
1

OBS-URL: https://build.opensuse.org/request/show/349038
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=46
2015-12-18 20:53:03 +00:00
Tomáš Chvátal
8de79979ae Accepting request 349020 from home:tiwai:branches:security
- Fix missing dependency on coreutils for initrd macros (boo#958562)

OBS-URL: https://build.opensuse.org/request/show/349020
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=107
2015-12-15 17:14:09 +00:00
Stephan Kulow
1a4cc3df94 Accepting request 339598 from security
- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857 (forwarded request 339597 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/339598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=45
2015-10-24 16:55:33 +00:00