- Remove haveged-switch-root.service because it's implemented incorrectly and
neither upstream don't know how to fix it (#77). On the other hand, without
this service haveged will be started from scratch after switch root so it's
hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
as a security threat because of creating fixed name file in world-writable
directory. [jsc#PED-6184, bsc#1206699]
* Remove
- haveged-switch-root.service
- haveged-switch-root.patch
OBS-URL: https://build.opensuse.org/request/show/1130687
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=149
from the host or similar setups.
--------------------------------------------------------------------
- Improvements on the linux kernel random subsystem have made
the haveged service/daemon obsolete, remove the service files,
initrd modules and udev rules, the other components
are still useful.
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=141
- Update to version 1.9.8:
* Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
* order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
* use systemd security features [Christian Hesse]
* do not run in container [Christian Hesse]
* do not use carriage return in line break [Christian Hesse]
* Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
* Added test for /dev/random symlink [Jirka Hladky]
* Update to automake 1.16 [Jirka Hladky]
* Fix segv at start [Andrew]
* Fixed built issue on Cygwin [jbaker6953]
* Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
* init.d/Makefile.am - add missing dependency [Jackie Huang]
* service.redhat - update PIDFile [Pierre-Jean Texier]
* Fix type mismatch in get_poolsize [Andreas Schwab]
* Fixup upstream changelog [Nicolas Braud-Santoni]
* Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
* Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
* Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
* f2193587.patch
* get-poolsize.patch
OBS-URL: https://build.opensuse.org/request/show/808990
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=129
when booting the system: journald reads from /dev/random, which
receives entropy from haveged, which in turn logs to syslog
before providing any. Ideally, haveged would provide a proper
command-line flag to disable use of syslog. Will work with
upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
file to avoid the potential for deadlocks when booting the
system: systemd-random-seed needs /var to read its previous
state; mounting /var needs journald; journald needs entropy; and
entropy is provided by haveged, which needs systemd-random-seed.
(bnc#959237)
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
- Fix "stop" of service, the daemon in foreground actually
exits with a weird exit code. workaround this misbehaviour
in the service file.
- revert to non-forking service, "forking" services are racy
and provided by systemd purely for compatibility with old daemons.
see daemon(7) for the rationale. Only "simple" (default) and
"notify" services must be used if possible.
- Also, there is no haveged.conf around, neither such file
is parsed by the daemon at all.
- Start the daemon as soon as the random device is available with
the help of udev, as starting services while starved of entropy
is no good.
OBS-URL: https://build.opensuse.org/request/show/233306
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=92
* Correct additional run-time test aligment problems on mips.
* Correct run-time test aligment problems on sparc and mips.
* Correct ppc detection in build
deprecates haveged-ppc.patch
- use correct Group for libhavege1
- haveged-devel requires libhavege1
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=82
- spit off devel package (all new files not present before)
- spit off library package to follow shared library policy
- update to 1.7
* Add havege_status_dump() as basis for haveged diagnositics
* Provide sample spec to build haveged and haveged-devel
* Add contrib/build to provide build support
* Modify build to use libtool
* Retname base types to alias stdint.h types to allow 'fixes' if necessary
* Rename all public functions to follow havege_* naming convention
* Sanitize havege.h to be include file for devel package
* Add destroy() to havege for library use.
* Move all remaining static vars to allocated memory.
* Rework include file structure to eliminate include sequence errors.
* Fix (rare) segfault in test0 caused by 1.6 alignment fix
- update to v1.6a
* Fix typo in configure.ac
OBS-URL: https://build.opensuse.org/request/show/149339
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=70
* Add online tests based on AIS-31
* Add -p option to specify the pid location.
* Fix -F option to not take argument - i.e. now a switch
* Factor diagnostic methods for capture and inject for better performance
* Fix install target, move to bin and eliminate script if not daemon, now use sysv and systemd templates
- use -F with no arguments in haveged.service
* Add s390 architecture. Thanks to Dan Horak and Jiri Hladky
* Add generic architecture with clock_gettime() timer.
* Rewrite collection loop to support multiple instances and new diagnostics
* Rewrite tuning mechanism to add virtual file system mining and correct cpuid bugs
* Add prototype multi-thread collection option
* Reduce collection buffer size to .5MB
* Improve/correct build and install
* Add new invocation options to support new features.
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=60