Commit Graph

74 Commits

Author SHA256 Message Date
5eba5ca9bf Accepting request 1130687 from home:ohollmann:branches:security
- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
    - haveged-switch-root.service
    - haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1130687
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=149
2023-12-04 09:40:17 +00:00
Otto Hollmann
858bf80d64 Accepting request 1039586 from home:ohollmann:branches:security
- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch

OBS-URL: https://build.opensuse.org/request/show/1039586
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=147
2022-12-02 12:58:51 +00:00
Peter Simons
17acddfc68 Accepting request 972422 from home:dirkmueller:Factory
- update to 1.9.18:
  * Round bits up and target full pool size [Jason A. Donenfeld]
  * Specify right kernel commit in README [Jason A. Donenfeld]

OBS-URL: https://build.opensuse.org/request/show/972422
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=145
2022-04-25 05:36:13 +00:00
ee189b05ef Accepting request 955185 from home:ohollmann:branches:security
Update to v1.9.17

OBS-URL: https://build.opensuse.org/request/show/955185
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=144
2022-02-16 09:03:55 +00:00
Peter Simons
4800de73e5 Accepting request 932917 from home:jsegitz:branches:security
- Remove ProtectKernelTunables hardening, causes the service to fail
  (boo#1192921)

OBS-URL: https://build.opensuse.org/request/show/932917
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=143
2021-11-22 08:56:09 +00:00
Peter Simons
020d7afb2c Accepting request 920872 from home:jsegitz:branches:systemdhardening:security
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/920872
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=142
2021-11-10 20:37:20 +00:00
e155a57e32 osc copypac from project:openSUSE:Factory package:haveged revision:57
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=139
2021-11-02 08:17:58 +00:00
25e9f9a4ac Accepting request 924659 from home:elvigia:branches:security
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/request/show/924659
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=135
2021-10-29 13:01:32 +00:00
44d6b1b2af Accepting request 860091 from home:polslinux:branches:security
- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch

OBS-URL: https://build.opensuse.org/request/show/860091
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=133
2021-01-04 11:49:19 +00:00
Peter Simons
3e09c9b278 Accepting request 817797 from home:polslinux:branches:security
- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]

OBS-URL: https://build.opensuse.org/request/show/817797
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=131
2020-06-30 08:47:37 +00:00
Peter Simons
885ae5f03d Accepting request 808990 from home:pluskalm:branches:security
- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch

OBS-URL: https://build.opensuse.org/request/show/808990
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=129
2020-05-27 20:37:36 +00:00
Tomáš Chvátal
9487313ec1 Accepting request 719780 from home:Andreas_Schwab:Factory
- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)

OBS-URL: https://build.opensuse.org/request/show/719780
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=127
2019-07-30 09:26:39 +00:00
Peter Simons
468974c7a0 Accepting request 705278 from home:fcrozat:branches:security
- Add patch f2193587.patch from github pull request (bsc#1134351)

OBS-URL: https://build.opensuse.org/request/show/705278
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=125
2019-05-24 16:55:08 +00:00
Tomáš Chvátal
433852052d Accepting request 636617 from home:WernerFink:branches:security
- Add patch f2193587.patch from github pull request
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches

OBS-URL: https://build.opensuse.org/request/show/636617
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=123
2018-09-19 10:25:55 +00:00
Tomáš Chvátal
17a598f87b Accepting request 635042 from home:jengelh:branches:security
- Use noun phrase for summary. Grammar fixes to description.

OBS-URL: https://build.opensuse.org/request/show/635042
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=121
2018-09-11 17:24:26 +00:00
Peter Simons
564e22aadf Accepting request 634947 from home:pluskalm:branches:security
- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's

OBS-URL: https://build.opensuse.org/request/show/634947
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=120
2018-09-11 14:19:25 +00:00
b1519e602b Accepting request 622295 from home:WernerFink:branches:security
- Move forward to socket communication within private network 

- Make haveged survive switch root within initrd  (boo#1075359)

OBS-URL: https://build.opensuse.org/request/show/622295
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=116
2018-07-12 12:26:06 +00:00
Peter Simons
255ec1fd73 Accepting request 588634 from home:kukuk:branches:security
- Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/588634
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=114
2018-03-19 14:34:22 +00:00
c97be11e29 Accepting request 577874 from home:avindra
- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/577874
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=112
2018-02-19 07:16:16 +00:00
Peter Simons
ab2704a644 Accepting request 403495 from home:jengelh:branches:security
- reset rpm groups

OBS-URL: https://build.opensuse.org/request/show/403495
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=110
2016-06-19 13:41:12 +00:00
Peter Simons
8143361db9 - Add haveged-no-syslog.patch to remedy the potential for deadlocks
when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
  
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
2016-06-17 14:37:51 +00:00
Tomáš Chvátal
8de79979ae Accepting request 349020 from home:tiwai:branches:security
- Fix missing dependency on coreutils for initrd macros (boo#958562)

OBS-URL: https://build.opensuse.org/request/show/349020
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=107
2015-12-15 17:14:09 +00:00
8af54b5cc8 Accepting request 335611 from home:msmeissn:branches:security
- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669

OBS-URL: https://build.opensuse.org/request/show/335611
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=103
2015-10-01 16:54:42 +00:00
ffee4af437 Accepting request 334870 from devel:ARM:Factory
- add fix-enforced-clock-gettime.patch to fix build on generic
  platforms like e.g. aarch64, which is only needed due to
  our (non-recommended choice) of using gettime (fate#318370)

  randomness generation. bsc#898669
  and also make sure it is shutdown quite late. bsc#898669
- regenerate initrd on installation. bsc#898669

OBS-URL: https://build.opensuse.org/request/show/334870
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=102
2015-10-01 16:48:59 +00:00
5566086fb1 Accepting request 286508 from home:msmeissn:branches:security
- haveged-dracut.module: include haveged into the initrd for
  randomness generation.
- haveged.service: adjust so it is started before journald
  and also make sure it is shutdown quite late.
- regenerate initrd on installation.

OBS-URL: https://build.opensuse.org/request/show/286508
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=100
2015-02-18 08:13:58 +00:00
Tomáš Chvátal
9bded32d00 - Disable randomly failing ENT test bnc#876674
- Added patches:
  * haveged-conditional-enttest.patch

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=94
2014-05-12 11:01:39 +00:00
Tomáš Chvátal
90baee8324 - Threads seem not to fix the random testsuite fail.
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=93
2014-05-12 10:49:49 +00:00
5638d8ef8d Accepting request 233306 from home:elvigia:branches:security
- Fix "stop" of service, the daemon in foreground actually 
 exits with a weird exit code. workaround this misbehaviour
 in the service file.

- revert to non-forking service, "forking" services are racy
  and provided by systemd purely for compatibility with old daemons.
  see daemon(7) for the rationale. Only "simple" (default) and 
  "notify" services must be used if possible.
- Also, there is no haveged.conf around, neither such file
  is parsed by the daemon at all.
- Start the daemon as soon as the random device is available with
  the help of udev, as starting services while starved of entropy 
  is no good.

OBS-URL: https://build.opensuse.org/request/show/233306
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=92
2014-05-12 08:39:42 +00:00
Tomáš Chvátal
d41d862a9d - Cleanup with spec-cleaner
- Adapt the service file to be forking and match what it does for
  me on Gentoo.
- Disable threads as they seem break some times.
- Capitalize summaries to make rpmlint happy.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=90
2014-05-07 09:24:36 +00:00
dbd24e73c7 Accepting request 225561 from openSUSE:Factory:PowerPC
- Add ppc64le support 
- added patches:
  * ppc64le.patch

OBS-URL: https://build.opensuse.org/request/show/225561
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=88
2014-03-12 13:44:15 +00:00
343753c795 Accepting request 222713 from home:elvigia:branches:security
- version 1.9.1
* test suite improvements
* man page updates
* a few build tweaks
- restore rchaveged link

OBS-URL: https://build.opensuse.org/request/show/222713
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=86
2014-02-18 15:56:46 +00:00
Michal Vyskocil
c72fdcaf17 - update to 1.8
* Fix return code for signalled termination.
 * Update init.d/service.fedora - new return code + simple, not forking
 * Add --enable_unitdir as DESTDIR for systemd install

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=84
2014-01-06 12:47:14 +00:00
Michal Vyskocil
65ce37ae89 - update to 1.7c
* Correct additional run-time test aligment problems on mips. 
  * Correct run-time test aligment problems on sparc and mips.
  * Correct ppc detection in build
    deprecates haveged-ppc.patch
- use correct Group for libhavege1
- haveged-devel requires libhavege1

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=82
2013-06-17 09:42:58 +00:00
Cristian Rodríguez
091d1557ca Accepting request 174333 from home:elvigia:branches:security
- haveged 1.7a 
* Correct VPATH issues and modify check target to support 
parallel builds and changes in automake 1.13 test harness. 
Updated sample spec file and other documentation changes.

OBS-URL: https://build.opensuse.org/request/show/174333
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=78
2013-05-02 20:50:32 +00:00
Michal Vyskocil
7803fc98dc - add autoconf to BuildRequires
- explain the need for autoreconf
- tag haveged-ppc.patch

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=76
2013-03-26 14:22:03 +00:00
Michal Vyskocil
7216d944f9 Accepting request 160369 from home:elvigia:branches:security
- Remove all sysvinit compatibility.

OBS-URL: https://build.opensuse.org/request/show/160369
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=75
2013-03-21 11:27:42 +00:00
056c2cebf7 also COPYING for devel
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=73
2013-01-22 13:46:45 +00:00
7b7d150acb add COPYING
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=72
2013-01-22 08:36:17 +00:00
ad55c3efc7 Accepting request 149339 from home:oertel:branches:security
- spit off devel package (all new files not present before)
- spit off library package to follow shared library policy
- update to 1.7
  * Add havege_status_dump() as basis for haveged diagnositics
  * Provide sample spec to build haveged and haveged-devel
  * Add contrib/build to provide build support
  * Modify build to use libtool
  * Retname base types to alias stdint.h types to allow 'fixes' if necessary
  * Rename all public functions to follow havege_* naming convention
  * Sanitize havege.h to be include file for devel package
  * Add destroy() to havege for library use.
  * Move all remaining static vars to allocated memory.
  * Rework include file structure to eliminate include sequence errors.
  * Fix (rare) segfault in test0 caused by 1.6 alignment fix
  
- update to  v1.6a
  * Fix typo in configure.ac

OBS-URL: https://build.opensuse.org/request/show/149339
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=70
2013-01-21 10:31:12 +00:00
Cristian Rodríguez
5c27a07514 Accepting request 146234 from home:k0da:ppc
- fix powerpc detection (haveged-ppc.patch)

OBS-URL: https://build.opensuse.org/request/show/146234
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=68
2012-12-21 23:19:20 +00:00
Pascal Bleser
016f11af6b 1.6
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=67
2012-12-16 02:15:42 +00:00
7b40fe1fe0 Accepting request 142964 from home:elvigia:branches:security
- Current version does support ARM, remove the ExcludeArch

OBS-URL: https://build.opensuse.org/request/show/142964
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=65
2012-11-27 10:07:35 +00:00
Michal Vyskocil
90916ac299 - Update to 1.5
* Add online tests based on AIS-31 
  * Add -p option to specify the pid location.
  * Fix -F option to not take argument - i.e. now a switch
  * Factor diagnostic methods for capture and inject for better performance
  * Fix install target, move to bin and eliminate script if not daemon, now use sysv and systemd templates 
- use -F with no arguments in haveged.service 

  * Add s390 architecture. Thanks to Dan Horak and Jiri Hladky
  * Add generic architecture with clock_gettime() timer.
  * Rewrite collection loop to support multiple instances and new diagnostics
  * Rewrite tuning mechanism to add virtual file system mining and correct cpuid bugs
  * Add prototype multi-thread collection option
  * Reduce collection buffer size to .5MB
  * Improve/correct build and install
  * Add new invocation options to support new features.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=60
2012-08-13 13:53:01 +00:00
Michal Vyskocil
78c4aec20f Accepting request 120742 from home:aboe76:branches:security
version bump from source:
1.3a to 1.4 no need to patch the source.

OBS-URL: https://build.opensuse.org/request/show/120742
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=59
2012-05-14 07:58:10 +00:00
Cristian Rodríguez
237c8afc68 Accepting request 103678 from home:elvigia:branches:security
- build with -fpie

OBS-URL: https://build.opensuse.org/request/show/103678
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=58
2012-02-09 22:52:49 +00:00
Cristian Rodríguez
8fc0694db0 Accepting request 98462 from home:elvigia:branches:security
- Put the haveged binary back in /usr/sbin not in /sbin

OBS-URL: https://build.opensuse.org/request/show/98462
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=56
2011-12-31 14:51:57 +00:00
Cristian Rodríguez
3b9d2e3df5 Accepting request 96691 from home:elvigia:branches:security
- Update to version 1.3.0a, PPC fixes.
- Cleanup systemd unit and drop capabiltities there.

OBS-URL: https://build.opensuse.org/request/show/96691
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=54
2011-12-14 23:48:37 +00:00
Stephan Kulow
2b427b6c88 Accepting request 94934 from home:coolo:removeautomake
add automake to buildrequires

OBS-URL: https://build.opensuse.org/request/show/94934
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=52
2011-12-02 07:27:26 +00:00
Cristian Rodríguez
557c678588 Accepting request 94703 from home:oertel:branches:openSUSE:Factory
- fix build on ia64, s390, s390x

OBS-URL: https://build.opensuse.org/request/show/94703
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=51
2011-12-02 05:14:25 +00:00
Cristian Rodríguez
2c8fab5d04 Accepting request 94188 from home:elvigia:branches:security
- Use proper systemd macros
- reduce verbosity level to the minimum

OBS-URL: https://build.opensuse.org/request/show/94188
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=49
2011-11-29 03:23:27 +00:00