Commit Graph

142 Commits

Author SHA256 Message Date
Ana Guerrero
764080453f Accepting request 1130690 from security
OBS-URL: https://build.opensuse.org/request/show/1130690
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=66
2023-12-05 16:00:55 +00:00
5eba5ca9bf Accepting request 1130687 from home:ohollmann:branches:security
- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
    - haveged-switch-root.service
    - haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1130687
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=149
2023-12-04 09:40:17 +00:00
Dominique Leuenberger
3aba9dd788 Accepting request 1039602 from security
- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1039602
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=65
2022-12-03 09:03:20 +00:00
Otto Hollmann
858bf80d64 Accepting request 1039586 from home:ohollmann:branches:security
- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1039586
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=147
2022-12-02 12:58:51 +00:00
Dominique Leuenberger
48b1905dd4 Accepting request 972436 from security
OBS-URL: https://build.opensuse.org/request/show/972436
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=64
2022-04-26 18:14:58 +00:00
Peter Simons
17acddfc68 Accepting request 972422 from home:dirkmueller:Factory
- update to 1.9.18:
  * Round bits up and target full pool size [Jason A. Donenfeld]
  * Specify right kernel commit in README [Jason A. Donenfeld]

OBS-URL: https://build.opensuse.org/request/show/972422
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=145
2022-04-25 05:36:13 +00:00
Dominique Leuenberger
323ba83494 Accepting request 955204 from security
Update to v1.9.17 (forwarded request 955185 from ohollmann)

OBS-URL: https://build.opensuse.org/request/show/955204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=63
2022-02-17 22:39:52 +00:00
ee189b05ef Accepting request 955185 from home:ohollmann:branches:security
Update to v1.9.17

OBS-URL: https://build.opensuse.org/request/show/955185
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=144
2022-02-16 09:03:55 +00:00
Dominique Leuenberger
3a06ec655c Accepting request 932923 from security
OBS-URL: https://build.opensuse.org/request/show/932923
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=62
2021-11-23 21:10:23 +00:00
Peter Simons
4800de73e5 Accepting request 932917 from home:jsegitz:branches:security
- Remove ProtectKernelTunables hardening, causes the service to fail
  (boo#1192921)

OBS-URL: https://build.opensuse.org/request/show/932917
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=143
2021-11-22 08:56:09 +00:00
Dominique Leuenberger
4d5ae32b8d https://bugzilla.opensuse.org/show_bug.cgi?id=1192921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=61
2021-11-20 22:24:11 +00:00
Dominique Leuenberger
4d0935ebc5 Accepting request 930759 from security
OBS-URL: https://build.opensuse.org/request/show/930759
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=60
2021-11-20 01:38:22 +00:00
Peter Simons
020d7afb2c Accepting request 920872 from home:jsegitz:branches:systemdhardening:security
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/920872
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=142
2021-11-10 20:37:20 +00:00
Dominique Leuenberger
687f1d781c Accepting request 928677 from security
- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.
--------------------------------------------------------------------

OBS-URL: https://build.opensuse.org/request/show/928677
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=59
2021-11-08 16:23:54 +00:00
6af202e44e - revert last change, e.g. for VMs where we are not being fed entropy
from the host or similar setups.
--------------------------------------------------------------------
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=141
2021-11-02 08:19:20 +00:00
e155a57e32 osc copypac from project:openSUSE:Factory package:haveged revision:57
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=139
2021-11-02 08:17:58 +00:00
Dominique Leuenberger
2c759bdb27 Accepting request 928130 from security
OBS-URL: https://build.opensuse.org/request/show/928130
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=58
2021-10-31 21:55:33 +00:00
25e9f9a4ac Accepting request 924659 from home:elvigia:branches:security
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/request/show/924659
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=135
2021-10-29 13:01:32 +00:00
Dominique Leuenberger
4ddc61f839 Accepting request 860156 from security
- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch (forwarded request 860091 from polslinux)

OBS-URL: https://build.opensuse.org/request/show/860156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=57
2021-01-08 16:32:19 +00:00
44d6b1b2af Accepting request 860091 from home:polslinux:branches:security
- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch

OBS-URL: https://build.opensuse.org/request/show/860091
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=133
2021-01-04 11:49:19 +00:00
Dominique Leuenberger
f1c86e212f Accepting request 817818 from security
OBS-URL: https://build.opensuse.org/request/show/817818
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=56
2020-07-01 16:22:15 +00:00
Peter Simons
3e09c9b278 Accepting request 817797 from home:polslinux:branches:security
- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]

OBS-URL: https://build.opensuse.org/request/show/817797
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=131
2020-06-30 08:47:37 +00:00
Dominique Leuenberger
d5ed6ae9cd Accepting request 809687 from security
OBS-URL: https://build.opensuse.org/request/show/809687
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=55
2020-06-03 18:28:33 +00:00
Peter Simons
885ae5f03d Accepting request 808990 from home:pluskalm:branches:security
- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch

OBS-URL: https://build.opensuse.org/request/show/808990
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=129
2020-05-27 20:37:36 +00:00
Dominique Leuenberger
5538f967e4 Accepting request 719793 from security
OBS-URL: https://build.opensuse.org/request/show/719793
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=54
2019-08-05 08:29:14 +00:00
Tomáš Chvátal
9487313ec1 Accepting request 719780 from home:Andreas_Schwab:Factory
- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)

OBS-URL: https://build.opensuse.org/request/show/719780
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=127
2019-07-30 09:26:39 +00:00
Dominique Leuenberger
7cedb119f7 Accepting request 705285 from security
OBS-URL: https://build.opensuse.org/request/show/705285
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=53
2019-05-28 07:41:21 +00:00
Peter Simons
468974c7a0 Accepting request 705278 from home:fcrozat:branches:security
- Add patch f2193587.patch from github pull request (bsc#1134351)

OBS-URL: https://build.opensuse.org/request/show/705278
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=125
2019-05-24 16:55:08 +00:00
Dominique Leuenberger
c90de52468 Accepting request 636618 from security
OBS-URL: https://build.opensuse.org/request/show/636618
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=52
2018-09-26 12:53:36 +00:00
Tomáš Chvátal
433852052d Accepting request 636617 from home:WernerFink:branches:security
- Add patch f2193587.patch from github pull request
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches

OBS-URL: https://build.opensuse.org/request/show/636617
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=123
2018-09-19 10:25:55 +00:00
Yuchen Lin
1f35945167 Accepting request 635067 from security
OBS-URL: https://build.opensuse.org/request/show/635067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=51
2018-09-18 09:38:24 +00:00
Tomáš Chvátal
17a598f87b Accepting request 635042 from home:jengelh:branches:security
- Use noun phrase for summary. Grammar fixes to description.

OBS-URL: https://build.opensuse.org/request/show/635042
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=121
2018-09-11 17:24:26 +00:00
Peter Simons
564e22aadf Accepting request 634947 from home:pluskalm:branches:security
- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's

OBS-URL: https://build.opensuse.org/request/show/634947
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=120
2018-09-11 14:19:25 +00:00
Dominique Leuenberger
661edd5066 Accepting request 622459 from security
OBS-URL: https://build.opensuse.org/request/show/622459
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=50
2018-07-18 20:36:16 +00:00
6bdf774b77 Accepting request 622304 from home:WernerFink:branches:security
- Add patch change-sysroot.patch to
  move forward to socket communication within private network 
- Add haveged-switch-root.service which send the new root location
  to running haveged process

OBS-URL: https://build.opensuse.org/request/show/622304
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=118
2018-07-13 11:17:07 +00:00
c6f5b6edad added change-sysroot.patch
haveged-switch-root.service

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=117
2018-07-12 12:35:45 +00:00
b1519e602b Accepting request 622295 from home:WernerFink:branches:security
- Move forward to socket communication within private network 

- Make haveged survive switch root within initrd  (boo#1075359)

OBS-URL: https://build.opensuse.org/request/show/622295
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=116
2018-07-12 12:26:06 +00:00
Dominique Leuenberger
f5d958c168 Accepting request 588636 from security
OBS-URL: https://build.opensuse.org/request/show/588636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=49
2018-03-26 09:57:39 +00:00
Peter Simons
255ec1fd73 Accepting request 588634 from home:kukuk:branches:security
- Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/588634
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=114
2018-03-19 14:34:22 +00:00
Dominique Leuenberger
d7c3ce25af Accepting request 577945 from security
OBS-URL: https://build.opensuse.org/request/show/577945
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=48
2018-02-20 16:53:17 +00:00
c97be11e29 Accepting request 577874 from home:avindra
- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/577874
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=112
2018-02-19 07:16:16 +00:00
Dominique Leuenberger
1bf1f36d62 Accepting request 403498 from security
- reset rpm groups (forwarded request 403495 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/403498
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=47
2016-06-29 13:02:31 +00:00
Peter Simons
ab2704a644 Accepting request 403495 from home:jengelh:branches:security
- reset rpm groups

OBS-URL: https://build.opensuse.org/request/show/403495
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=110
2016-06-19 13:41:12 +00:00
Peter Simons
8143361db9 - Add haveged-no-syslog.patch to remedy the potential for deadlocks
when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
  
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
2016-06-17 14:37:51 +00:00
Dominique Leuenberger
e2450edbc5 Accepting request 349038 from security
1

OBS-URL: https://build.opensuse.org/request/show/349038
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=46
2015-12-18 20:53:03 +00:00
Tomáš Chvátal
8de79979ae Accepting request 349020 from home:tiwai:branches:security
- Fix missing dependency on coreutils for initrd macros (boo#958562)

OBS-URL: https://build.opensuse.org/request/show/349020
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=107
2015-12-15 17:14:09 +00:00
Stephan Kulow
1a4cc3df94 Accepting request 339598 from security
- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857 (forwarded request 339597 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/339598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=45
2015-10-24 16:55:33 +00:00
573491c75a Accepting request 339597 from home:msmeissn:branches:security
- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857

OBS-URL: https://build.opensuse.org/request/show/339597
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=105
2015-10-18 11:01:48 +00:00
Stephan Kulow
8b10f56c36 Accepting request 335612 from security
- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669 (forwarded request 335611 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/335612
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=44
2015-10-12 08:00:16 +00:00
8af54b5cc8 Accepting request 335611 from home:msmeissn:branches:security
- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669

OBS-URL: https://build.opensuse.org/request/show/335611
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=103
2015-10-01 16:54:42 +00:00