Dominique Leuenberger
dbd94ed773
Accepting request 1219544 from security
...
OBS-URL: https://build.opensuse.org/request/show/1219544
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=67
2024-10-31 15:09:23 +00:00
Martin Schreiner
f4e1452fd8
- Remove haveged-once.service.
...
Service is no longer required exactly as of version 1.9.19, because
the fix for it was merged upstream (synchronize haveged instances
during switch root).
- Revert a change in haveged-dracut.module, as haveged should be
required by systemd-journald.service, not sysinit.target.
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=152
2024-10-30 11:55:03 +00:00
Martin Schreiner
f3e5d1945b
- Update to 1.9.19:
...
* Added --time_interval N to add entropy unconditionally every N
seconds.
* Synchronize haveged instances during switch root.
* 90-haveged.rules: fix warnings reported by udevadm verify.
- Introduce haveged-once.service.
* This new service is meant to be called from initrd, and it uses
the '--once' flag.
* Haveged is executed, and then exits, raising the entropy levels
during very early boot.
Once / is mounted and 'systemd switch-root' is called, then the
regular haveged.service is invoked.
* Fix for bsc#1165294 and bsc#1222296.
- Improve haveged-dracut.module, so that haveged is called only once
from initrd.
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=151
2024-10-29 20:31:40 +00:00
Ana Guerrero
764080453f
Accepting request 1130690 from security
...
OBS-URL: https://build.opensuse.org/request/show/1130690
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=66
2023-12-05 16:00:55 +00:00
5eba5ca9bf
Accepting request 1130687 from home:ohollmann:branches:security
...
- Remove haveged-switch-root.service because it's implemented incorrectly and
neither upstream don't know how to fix it (#77 ). On the other hand, without
this service haveged will be started from scratch after switch root so it's
hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
as a security threat because of creating fixed name file in world-writable
directory. [jsc#PED-6184, bsc#1206699]
* Remove
- haveged-switch-root.service
- haveged-switch-root.patch
OBS-URL: https://build.opensuse.org/request/show/1130687
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=149
2023-12-04 09:40:17 +00:00
Dominique Leuenberger
3aba9dd788
Accepting request 1039602 from security
...
- Synchronize haveged instances during switching root (bsc#1203079)
* Add haveged-switch-root.patch
OBS-URL: https://build.opensuse.org/request/show/1039602
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=65
2022-12-03 09:03:20 +00:00
Otto Hollmann
858bf80d64
Accepting request 1039586 from home:ohollmann:branches:security
...
- Synchronize haveged instances during switching root (bsc#1203079)
* Add haveged-switch-root.patch
OBS-URL: https://build.opensuse.org/request/show/1039586
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=147
2022-12-02 12:58:51 +00:00
Dominique Leuenberger
48b1905dd4
Accepting request 972436 from security
...
OBS-URL: https://build.opensuse.org/request/show/972436
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=64
2022-04-26 18:14:58 +00:00
Peter Simons
17acddfc68
Accepting request 972422 from home:dirkmueller:Factory
...
- update to 1.9.18:
* Round bits up and target full pool size [Jason A. Donenfeld]
* Specify right kernel commit in README [Jason A. Donenfeld]
OBS-URL: https://build.opensuse.org/request/show/972422
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=145
2022-04-25 05:36:13 +00:00
Dominique Leuenberger
323ba83494
Accepting request 955204 from security
...
Update to v1.9.17 (forwarded request 955185 from ohollmann)
OBS-URL: https://build.opensuse.org/request/show/955204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=63
2022-02-17 22:39:52 +00:00
ee189b05ef
Accepting request 955185 from home:ohollmann:branches:security
...
Update to v1.9.17
OBS-URL: https://build.opensuse.org/request/show/955185
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=144
2022-02-16 09:03:55 +00:00
Dominique Leuenberger
3a06ec655c
Accepting request 932923 from security
...
OBS-URL: https://build.opensuse.org/request/show/932923
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=62
2021-11-23 21:10:23 +00:00
Peter Simons
4800de73e5
Accepting request 932917 from home:jsegitz:branches:security
...
- Remove ProtectKernelTunables hardening, causes the service to fail
(boo#1192921)
OBS-URL: https://build.opensuse.org/request/show/932917
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=143
2021-11-22 08:56:09 +00:00
Dominique Leuenberger
4d5ae32b8d
https://bugzilla.opensuse.org/show_bug.cgi?id=1192921
...
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=61
2021-11-20 22:24:11 +00:00
Dominique Leuenberger
4d0935ebc5
Accepting request 930759 from security
...
OBS-URL: https://build.opensuse.org/request/show/930759
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=60
2021-11-20 01:38:22 +00:00
Peter Simons
020d7afb2c
Accepting request 920872 from home:jsegitz:branches:systemdhardening:security
...
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
OBS-URL: https://build.opensuse.org/request/show/920872
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=142
2021-11-10 20:37:20 +00:00
Dominique Leuenberger
687f1d781c
Accepting request 928677 from security
...
- revert last change, e.g. for VMs where we are not being fed entropy
from the host or similar setups.
--------------------------------------------------------------------
OBS-URL: https://build.opensuse.org/request/show/928677
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=59
2021-11-08 16:23:54 +00:00
6af202e44e
- revert last change, e.g. for VMs where we are not being fed entropy
...
from the host or similar setups.
--------------------------------------------------------------------
- Improvements on the linux kernel random subsystem have made
the haveged service/daemon obsolete, remove the service files,
initrd modules and udev rules, the other components
are still useful.
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=141
2021-11-02 08:19:20 +00:00
e155a57e32
osc copypac from project:openSUSE:Factory package:haveged revision:57
...
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=139
2021-11-02 08:17:58 +00:00
Dominique Leuenberger
2c759bdb27
Accepting request 928130 from security
...
OBS-URL: https://build.opensuse.org/request/show/928130
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=58
2021-10-31 21:55:33 +00:00
25e9f9a4ac
Accepting request 924659 from home:elvigia:branches:security
...
- Improvements on the linux kernel random subsystem have made
the haveged service/daemon obsolete, remove the service files,
initrd modules and udev rules, the other components
are still useful.
OBS-URL: https://build.opensuse.org/request/show/924659
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=135
2021-10-29 13:01:32 +00:00
Dominique Leuenberger
4ddc61f839
Accepting request 860156 from security
...
- Update to 1.9.14:
* made enttest configurable
* havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch (forwarded request 860091 from polslinux)
OBS-URL: https://build.opensuse.org/request/show/860156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=57
2021-01-08 16:32:19 +00:00
44d6b1b2af
Accepting request 860091 from home:polslinux:branches:security
...
- Update to 1.9.14:
* made enttest configurable
* havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch
OBS-URL: https://build.opensuse.org/request/show/860091
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=133
2021-01-04 11:49:19 +00:00
Dominique Leuenberger
f1c86e212f
Accepting request 817818 from security
...
OBS-URL: https://build.opensuse.org/request/show/817818
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=56
2020-07-01 16:22:15 +00:00
Peter Simons
3e09c9b278
Accepting request 817797 from home:polslinux:branches:security
...
- Update to 1.9.13:
* added support for --version [Jirka Hladky]
* updated systemd service file [Jirka Hladky]
* fix a memory leak in havege_destroy [Anakin Zhang]
* updated version reported by program [Jirka Hladky]
* fix ordering cycle with private tmp [Christian Hesse]
* Updated systemd service file [Nicolas Braud-Santoni]
* Bump soname [Nicolas Braud-Santoni]
* Fix crash on shutdown in threaded mode [Sergei Trofimovich]
* Fix compilation with --enable-threads [Lars Wendler]
OBS-URL: https://build.opensuse.org/request/show/817797
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=131
2020-06-30 08:47:37 +00:00
Dominique Leuenberger
d5ed6ae9cd
Accepting request 809687 from security
...
OBS-URL: https://build.opensuse.org/request/show/809687
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=55
2020-06-03 18:28:33 +00:00
Peter Simons
885ae5f03d
Accepting request 808990 from home:pluskalm:branches:security
...
- Update to version 1.9.8:
* Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
* order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
* use systemd security features [Christian Hesse]
* do not run in container [Christian Hesse]
* do not use carriage return in line break [Christian Hesse]
* Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
* Added test for /dev/random symlink [Jirka Hladky]
* Update to automake 1.16 [Jirka Hladky]
* Fix segv at start [Andrew]
* Fixed built issue on Cygwin [jbaker6953]
* Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
* init.d/Makefile.am - add missing dependency [Jackie Huang]
* service.redhat - update PIDFile [Pierre-Jean Texier]
* Fix type mismatch in get_poolsize [Andreas Schwab]
* Fixup upstream changelog [Nicolas Braud-Santoni]
* Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
* Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
* Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
* f2193587.patch
* get-poolsize.patch
OBS-URL: https://build.opensuse.org/request/show/808990
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=129
2020-05-27 20:37:36 +00:00
Dominique Leuenberger
5538f967e4
Accepting request 719793 from security
...
OBS-URL: https://build.opensuse.org/request/show/719793
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=54
2019-08-05 08:29:14 +00:00
Tomáš Chvátal
9487313ec1
Accepting request 719780 from home:Andreas_Schwab:Factory
...
- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
checking (bsc#1111047)
OBS-URL: https://build.opensuse.org/request/show/719780
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=127
2019-07-30 09:26:39 +00:00
Dominique Leuenberger
7cedb119f7
Accepting request 705285 from security
...
OBS-URL: https://build.opensuse.org/request/show/705285
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=53
2019-05-28 07:41:21 +00:00
Peter Simons
468974c7a0
Accepting request 705278 from home:fcrozat:branches:security
...
- Add patch f2193587.patch from github pull request (bsc#1134351)
OBS-URL: https://build.opensuse.org/request/show/705278
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=125
2019-05-24 16:55:08 +00:00
Dominique Leuenberger
c90de52468
Accepting request 636618 from security
...
OBS-URL: https://build.opensuse.org/request/show/636618
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=52
2018-09-26 12:53:36 +00:00
Tomáš Chvátal
433852052d
Accepting request 636617 from home:WernerFink:branches:security
...
- Add patch f2193587.patch from github pull request
* Fix segfault on arm machines which do not eport the cache size
or say it is -1 in sysfs
- Refresh patches
OBS-URL: https://build.opensuse.org/request/show/636617
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=123
2018-09-19 10:25:55 +00:00
Yuchen Lin
1f35945167
Accepting request 635067 from security
...
OBS-URL: https://build.opensuse.org/request/show/635067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=51
2018-09-18 09:38:24 +00:00
Tomáš Chvátal
17a598f87b
Accepting request 635042 from home:jengelh:branches:security
...
- Use noun phrase for summary. Grammar fixes to description.
OBS-URL: https://build.opensuse.org/request/show/635042
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=121
2018-09-11 17:24:26 +00:00
Peter Simons
564e22aadf
Accepting request 634947 from home:pluskalm:branches:security
...
- Update to version 1.9.4:
* Avoid misleading message if cmd socket is in use
* Implements a command mode and use it for chroot
- Drop upstreamed patches:
* change-sysroot.patch
- Update project and download url's
OBS-URL: https://build.opensuse.org/request/show/634947
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=120
2018-09-11 14:19:25 +00:00
Dominique Leuenberger
661edd5066
Accepting request 622459 from security
...
OBS-URL: https://build.opensuse.org/request/show/622459
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=50
2018-07-18 20:36:16 +00:00
6bdf774b77
Accepting request 622304 from home:WernerFink:branches:security
...
- Add patch change-sysroot.patch to
move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
to running haveged process
OBS-URL: https://build.opensuse.org/request/show/622304
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=118
2018-07-13 11:17:07 +00:00
c6f5b6edad
added change-sysroot.patch
...
haveged-switch-root.service
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=117
2018-07-12 12:35:45 +00:00
b1519e602b
Accepting request 622295 from home:WernerFink:branches:security
...
- Move forward to socket communication within private network
- Make haveged survive switch root within initrd (boo#1075359)
OBS-URL: https://build.opensuse.org/request/show/622295
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=116
2018-07-12 12:26:06 +00:00
Dominique Leuenberger
f5d958c168
Accepting request 588636 from security
...
OBS-URL: https://build.opensuse.org/request/show/588636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=49
2018-03-26 09:57:39 +00:00
Peter Simons
255ec1fd73
Accepting request 588634 from home:kukuk:branches:security
...
- Use %license instead of %doc [bsc#1082318]
OBS-URL: https://build.opensuse.org/request/show/588634
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=114
2018-03-19 14:34:22 +00:00
Dominique Leuenberger
d7c3ce25af
Accepting request 577945 from security
...
OBS-URL: https://build.opensuse.org/request/show/577945
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=48
2018-02-20 16:53:17 +00:00
c97be11e29
Accepting request 577874 from home:avindra
...
- update to 1.9.2
* Cross compile fixes
* Limit watermark max to less than pool size to avoid 100% cpu
condition
* Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner
OBS-URL: https://build.opensuse.org/request/show/577874
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=112
2018-02-19 07:16:16 +00:00
Dominique Leuenberger
1bf1f36d62
Accepting request 403498 from security
...
- reset rpm groups (forwarded request 403495 from jengelh)
OBS-URL: https://build.opensuse.org/request/show/403498
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=47
2016-06-29 13:02:31 +00:00
Peter Simons
ab2704a644
Accepting request 403495 from home:jengelh:branches:security
...
- reset rpm groups
OBS-URL: https://build.opensuse.org/request/show/403495
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=110
2016-06-19 13:41:12 +00:00
Peter Simons
8143361db9
- Add haveged-no-syslog.patch to remedy the potential for deadlocks
...
when booting the system: journald reads from /dev/random, which
receives entropy from haveged, which in turn logs to syslog
before providing any. Ideally, haveged would provide a proper
command-line flag to disable use of syslog. Will work with
upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
file to avoid the potential for deadlocks when booting the
system: systemd-random-seed needs /var to read its previous
state; mounting /var needs journald; journald needs entropy; and
entropy is provided by haveged, which needs systemd-random-seed.
(bnc#959237)
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
2016-06-17 14:37:51 +00:00
Dominique Leuenberger
e2450edbc5
Accepting request 349038 from security
...
1
OBS-URL: https://build.opensuse.org/request/show/349038
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=46
2015-12-18 20:53:03 +00:00
Tomáš Chvátal
8de79979ae
Accepting request 349020 from home:tiwai:branches:security
...
- Fix missing dependency on coreutils for initrd macros (boo#958562)
OBS-URL: https://build.opensuse.org/request/show/349020
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=107
2015-12-15 17:14:09 +00:00
Stephan Kulow
1a4cc3df94
Accepting request 339598 from security
...
- haveged.service: reverted the dependency on systemd-journald.socket
for now, as it causes a dependency loop. bsc#949728 bsc#950857 (forwarded request 339597 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/339598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=45
2015-10-24 16:55:33 +00:00