Commit Graph

21 Commits

Author SHA256 Message Date
Peter Simons
4800de73e5 Accepting request 932917 from home:jsegitz:branches:security
- Remove ProtectKernelTunables hardening, causes the service to fail
  (boo#1192921)

OBS-URL: https://build.opensuse.org/request/show/932917
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=143
2021-11-22 08:56:09 +00:00
Peter Simons
020d7afb2c Accepting request 920872 from home:jsegitz:branches:systemdhardening:security
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/920872
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=142
2021-11-10 20:37:20 +00:00
e155a57e32 osc copypac from project:openSUSE:Factory package:haveged revision:57
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=139
2021-11-02 08:17:58 +00:00
25e9f9a4ac Accepting request 924659 from home:elvigia:branches:security
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/request/show/924659
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=135
2021-10-29 13:01:32 +00:00
b1519e602b Accepting request 622295 from home:WernerFink:branches:security
- Move forward to socket communication within private network 

- Make haveged survive switch root within initrd  (boo#1075359)

OBS-URL: https://build.opensuse.org/request/show/622295
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=116
2018-07-12 12:26:06 +00:00
Peter Simons
8143361db9 - Add haveged-no-syslog.patch to remedy the potential for deadlocks
when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
  
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
2016-06-17 14:37:51 +00:00
573491c75a Accepting request 339597 from home:msmeissn:branches:security
- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857

OBS-URL: https://build.opensuse.org/request/show/339597
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=105
2015-10-18 11:01:48 +00:00
8af54b5cc8 Accepting request 335611 from home:msmeissn:branches:security
- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669

OBS-URL: https://build.opensuse.org/request/show/335611
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=103
2015-10-01 16:54:42 +00:00
5566086fb1 Accepting request 286508 from home:msmeissn:branches:security
- haveged-dracut.module: include haveged into the initrd for
  randomness generation.
- haveged.service: adjust so it is started before journald
  and also make sure it is shutdown quite late.
- regenerate initrd on installation.

OBS-URL: https://build.opensuse.org/request/show/286508
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=100
2015-02-18 08:13:58 +00:00
Tomáš Chvátal
22cb0b6cc5 - Adjust the service to start early enough for all usecases.
Should fix bnc#892096.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=98
2014-08-29 07:24:12 +00:00
Tomáš Chvátal
c512938519 - Disable haveged service on containers. bnc#881882
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=96
2014-06-10 08:28:33 +00:00
5638d8ef8d Accepting request 233306 from home:elvigia:branches:security
- Fix "stop" of service, the daemon in foreground actually 
 exits with a weird exit code. workaround this misbehaviour
 in the service file.

- revert to non-forking service, "forking" services are racy
  and provided by systemd purely for compatibility with old daemons.
  see daemon(7) for the rationale. Only "simple" (default) and 
  "notify" services must be used if possible.
- Also, there is no haveged.conf around, neither such file
  is parsed by the daemon at all.
- Start the daemon as soon as the random device is available with
  the help of udev, as starting services while starved of entropy 
  is no good.

OBS-URL: https://build.opensuse.org/request/show/233306
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=92
2014-05-12 08:39:42 +00:00
Tomáš Chvátal
d41d862a9d - Cleanup with spec-cleaner
- Adapt the service file to be forking and match what it does for
  me on Gentoo.
- Disable threads as they seem break some times.
- Capitalize summaries to make rpmlint happy.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=90
2014-05-07 09:24:36 +00:00
Cristian Rodríguez
8063c7f0be Accepting request 174574 from home:elvigia:branches:security
- Remove PrivateTmp=true here, haveged does not create temporary
  files, either directly or indirectly.

OBS-URL: https://build.opensuse.org/request/show/174574
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=80
2013-05-06 01:13:45 +00:00
4cb6e18af6 Accepting request 135723 from home:elvigia:branches:security
- Tight up systemd service file, this daemon does not
  need network and can use PrivateNetwork=yes

OBS-URL: https://build.opensuse.org/request/show/135723
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=63
2012-09-24 20:51:37 +00:00
Michal Vyskocil
90916ac299 - Update to 1.5
* Add online tests based on AIS-31 
  * Add -p option to specify the pid location.
  * Fix -F option to not take argument - i.e. now a switch
  * Factor diagnostic methods for capture and inject for better performance
  * Fix install target, move to bin and eliminate script if not daemon, now use sysv and systemd templates 
- use -F with no arguments in haveged.service 

  * Add s390 architecture. Thanks to Dan Horak and Jiri Hladky
  * Add generic architecture with clock_gettime() timer.
  * Rewrite collection loop to support multiple instances and new diagnostics
  * Rewrite tuning mechanism to add virtual file system mining and correct cpuid bugs
  * Add prototype multi-thread collection option
  * Reduce collection buffer size to .5MB
  * Improve/correct build and install
  * Add new invocation options to support new features.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=60
2012-08-13 13:53:01 +00:00
Cristian Rodríguez
8fc0694db0 Accepting request 98462 from home:elvigia:branches:security
- Put the haveged binary back in /usr/sbin not in /sbin

OBS-URL: https://build.opensuse.org/request/show/98462
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=56
2011-12-31 14:51:57 +00:00
Cristian Rodríguez
3b9d2e3df5 Accepting request 96691 from home:elvigia:branches:security
- Update to version 1.3.0a, PPC fixes.
- Cleanup systemd unit and drop capabiltities there.

OBS-URL: https://build.opensuse.org/request/show/96691
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=54
2011-12-14 23:48:37 +00:00
Cristian Rodríguez
2c8fab5d04 Accepting request 94188 from home:elvigia:branches:security
- Use proper systemd macros
- reduce verbosity level to the minimum

OBS-URL: https://build.opensuse.org/request/show/94188
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=49
2011-11-29 03:23:27 +00:00
Cristian Rodríguez
a760ac17ce Accepting request 93110 from home:elvigia:branches:security
- Use Service type "simple" in systemd unit

OBS-URL: https://build.opensuse.org/request/show/93110
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=47
2011-11-22 15:12:25 +00:00
Ruediger Oertel
af21ab9d9e Accepting request 52242 from security
Accepted submit request 52242 from user elvigia

OBS-URL: https://build.opensuse.org/request/show/52242
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=2
2010-11-05 16:27:47 +00:00