pool/haveged
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
134 Commits 2 Branches 0 Tags
Commit Graph

134 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Dominique Leuenberger
3a06ec655c Accepting request 932923 from security 
OBS-URL: https://build.opensuse.org/request/show/932923
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=62
 2021-11-23 21:10:23 +00:00
Peter Simons
4800de73e5 Accepting request 932917 from home:jsegitz:branches:security 
- Remove ProtectKernelTunables hardening, causes the service to fail
  (boo#1192921)

OBS-URL: https://build.opensuse.org/request/show/932917
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=143
 2021-11-22 08:56:09 +00:00
Dominique Leuenberger
4d5ae32b8d https://bugzilla.opensuse.org/show_bug.cgi?id=1192921 
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=61
 2021-11-20 22:24:11 +00:00
Dominique Leuenberger
4d0935ebc5 Accepting request 930759 from security 
OBS-URL: https://build.opensuse.org/request/show/930759
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=60
 2021-11-20 01:38:22 +00:00
Peter Simons
020d7afb2c Accepting request 920872 from home:jsegitz:branches:systemdhardening:security 
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/920872
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=142
 2021-11-10 20:37:20 +00:00
Dominique Leuenberger
687f1d781c Accepting request 928677 from security 
- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.
--------------------------------------------------------------------

OBS-URL: https://build.opensuse.org/request/show/928677
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=59
 2021-11-08 16:23:54 +00:00
Marcus Meissner
6af202e44e - revert last change, e.g. for VMs where we are not being fed entropy 
from the host or similar setups.
--------------------------------------------------------------------
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=141
 2021-11-02 08:19:20 +00:00
Marcus Meissner
e155a57e32 osc copypac from project:openSUSE:Factory package:haveged revision:57 
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=139
 2021-11-02 08:17:58 +00:00
Dominique Leuenberger
2c759bdb27 Accepting request 928130 from security 
OBS-URL: https://build.opensuse.org/request/show/928130
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=58
 2021-10-31 21:55:33 +00:00
Marcus Meissner
25e9f9a4ac Accepting request 924659 from home:elvigia:branches:security 
- Improvements on the linux kernel random subsystem have made 
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.

OBS-URL: https://build.opensuse.org/request/show/924659
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=135
 2021-10-29 13:01:32 +00:00
Dominique Leuenberger
4ddc61f839 Accepting request 860156 from security 
- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch (forwarded request 860091 from polslinux)

OBS-URL: https://build.opensuse.org/request/show/860156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=57
 2021-01-08 16:32:19 +00:00
Marcus Meissner
44d6b1b2af Accepting request 860091 from home:polslinux:branches:security 
- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch

OBS-URL: https://build.opensuse.org/request/show/860091
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=133
 2021-01-04 11:49:19 +00:00
Dominique Leuenberger
f1c86e212f Accepting request 817818 from security 
OBS-URL: https://build.opensuse.org/request/show/817818
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=56
 2020-07-01 16:22:15 +00:00
Peter Simons
3e09c9b278 Accepting request 817797 from home:polslinux:branches:security 
- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]

OBS-URL: https://build.opensuse.org/request/show/817797
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=131
 2020-06-30 08:47:37 +00:00
Dominique Leuenberger
d5ed6ae9cd Accepting request 809687 from security 
OBS-URL: https://build.opensuse.org/request/show/809687
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=55
 2020-06-03 18:28:33 +00:00
Peter Simons
885ae5f03d Accepting request 808990 from home:pluskalm:branches:security 
- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch

OBS-URL: https://build.opensuse.org/request/show/808990
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=129
 2020-05-27 20:37:36 +00:00
Dominique Leuenberger
5538f967e4 Accepting request 719793 from security 
OBS-URL: https://build.opensuse.org/request/show/719793
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=54
 2019-08-05 08:29:14 +00:00
Tomáš Chvátal
9487313ec1 Accepting request 719780 from home:Andreas_Schwab:Factory 
- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)

OBS-URL: https://build.opensuse.org/request/show/719780
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=127
 2019-07-30 09:26:39 +00:00
Dominique Leuenberger
7cedb119f7 Accepting request 705285 from security 
OBS-URL: https://build.opensuse.org/request/show/705285
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=53
 2019-05-28 07:41:21 +00:00
Peter Simons
468974c7a0 Accepting request 705278 from home:fcrozat:branches:security 
- Add patch f2193587.patch from github pull request (bsc#1134351)

OBS-URL: https://build.opensuse.org/request/show/705278
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=125
 2019-05-24 16:55:08 +00:00
Dominique Leuenberger
c90de52468 Accepting request 636618 from security 
OBS-URL: https://build.opensuse.org/request/show/636618
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=52
 2018-09-26 12:53:36 +00:00
Tomáš Chvátal
433852052d Accepting request 636617 from home:WernerFink:branches:security 
- Add patch f2193587.patch from github pull request
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches

OBS-URL: https://build.opensuse.org/request/show/636617
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=123
 2018-09-19 10:25:55 +00:00
Yuchen Lin
1f35945167 Accepting request 635067 from security 
OBS-URL: https://build.opensuse.org/request/show/635067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=51
 2018-09-18 09:38:24 +00:00
Tomáš Chvátal
17a598f87b Accepting request 635042 from home:jengelh:branches:security 
- Use noun phrase for summary. Grammar fixes to description.

OBS-URL: https://build.opensuse.org/request/show/635042
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=121
 2018-09-11 17:24:26 +00:00
Peter Simons
564e22aadf Accepting request 634947 from home:pluskalm:branches:security 
- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's

OBS-URL: https://build.opensuse.org/request/show/634947
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=120
 2018-09-11 14:19:25 +00:00
Dominique Leuenberger
661edd5066 Accepting request 622459 from security 
OBS-URL: https://build.opensuse.org/request/show/622459
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=50
 2018-07-18 20:36:16 +00:00
Marcus Meissner
6bdf774b77 Accepting request 622304 from home:WernerFink:branches:security 
- Add patch change-sysroot.patch to
  move forward to socket communication within private network 
- Add haveged-switch-root.service which send the new root location
  to running haveged process

OBS-URL: https://build.opensuse.org/request/show/622304
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=118
 2018-07-13 11:17:07 +00:00
Marcus Meissner
c6f5b6edad added change-sysroot.patch 
haveged-switch-root.service

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=117
 2018-07-12 12:35:45 +00:00
Marcus Meissner
b1519e602b Accepting request 622295 from home:WernerFink:branches:security 
- Move forward to socket communication within private network 

- Make haveged survive switch root within initrd  (boo#1075359)

OBS-URL: https://build.opensuse.org/request/show/622295
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=116
 2018-07-12 12:26:06 +00:00
Dominique Leuenberger
f5d958c168 Accepting request 588636 from security 
OBS-URL: https://build.opensuse.org/request/show/588636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=49
 2018-03-26 09:57:39 +00:00
Peter Simons
255ec1fd73 Accepting request 588634 from home:kukuk:branches:security 
- Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/588634
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=114
 2018-03-19 14:34:22 +00:00
Dominique Leuenberger
d7c3ce25af Accepting request 577945 from security 
OBS-URL: https://build.opensuse.org/request/show/577945
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=48
 2018-02-20 16:53:17 +00:00
Marcus Meissner
c97be11e29 Accepting request 577874 from home:avindra 
- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/577874
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=112
 2018-02-19 07:16:16 +00:00
Dominique Leuenberger
1bf1f36d62 Accepting request 403498 from security 
- reset rpm groups (forwarded request 403495 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/403498
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=47
 2016-06-29 13:02:31 +00:00
Peter Simons
ab2704a644 Accepting request 403495 from home:jengelh:branches:security 
- reset rpm groups

OBS-URL: https://build.opensuse.org/request/show/403495
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=110
 2016-06-19 13:41:12 +00:00
Peter Simons
8143361db9 - Add haveged-no-syslog.patch to remedy the potential for deadlocks 
when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
  
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=109
 2016-06-17 14:37:51 +00:00
Dominique Leuenberger
e2450edbc5 Accepting request 349038 from security 
1

OBS-URL: https://build.opensuse.org/request/show/349038
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=46
 2015-12-18 20:53:03 +00:00
Tomáš Chvátal
8de79979ae Accepting request 349020 from home:tiwai:branches:security 
- Fix missing dependency on coreutils for initrd macros (boo#958562)

OBS-URL: https://build.opensuse.org/request/show/349020
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=107
 2015-12-15 17:14:09 +00:00
Stephan Kulow
1a4cc3df94 Accepting request 339598 from security 
- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857 (forwarded request 339597 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/339598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=45
 2015-10-24 16:55:33 +00:00
Marcus Meissner
573491c75a Accepting request 339597 from home:msmeissn:branches:security 
- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857

OBS-URL: https://build.opensuse.org/request/show/339597
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=105
 2015-10-18 11:01:48 +00:00
Stephan Kulow
8b10f56c36 Accepting request 335612 from security 
- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669 (forwarded request 335611 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/335612
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=44
 2015-10-12 08:00:16 +00:00
Marcus Meissner
8af54b5cc8 Accepting request 335611 from home:msmeissn:branches:security 
- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669

OBS-URL: https://build.opensuse.org/request/show/335611
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=103
 2015-10-01 16:54:42 +00:00
Marcus Meissner
ffee4af437 Accepting request 334870 from devel:ARM:Factory 
- add fix-enforced-clock-gettime.patch to fix build on generic
  platforms like e.g. aarch64, which is only needed due to
  our (non-recommended choice) of using gettime (fate#318370)

  randomness generation. bsc#898669
  and also make sure it is shutdown quite late. bsc#898669
- regenerate initrd on installation. bsc#898669

OBS-URL: https://build.opensuse.org/request/show/334870
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=102
 2015-10-01 16:48:59 +00:00
Dominique Leuenberger
25eca2e138 Accepting request 286590 from security 
1

OBS-URL: https://build.opensuse.org/request/show/286590
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=43
 2015-02-20 11:43:01 +00:00
Marcus Meissner
5566086fb1 Accepting request 286508 from home:msmeissn:branches:security 
- haveged-dracut.module: include haveged into the initrd for
  randomness generation.
- haveged.service: adjust so it is started before journald
  and also make sure it is shutdown quite late.
- regenerate initrd on installation.

OBS-URL: https://build.opensuse.org/request/show/286508
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=100
 2015-02-18 08:13:58 +00:00
Stephan Kulow
4eb87769f5 Accepting request 246784 from security 
- Adjust the service to start early enough for all usecases.
  Should fix bnc#892096.

OBS-URL: https://build.opensuse.org/request/show/246784
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=42
 2014-08-31 07:58:45 +00:00
Tomáš Chvátal
22cb0b6cc5 - Adjust the service to start early enough for all usecases. 
Should fix bnc#892096.

OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=98
 2014-08-29 07:24:12 +00:00
Stephan Kulow
7357e35bd3 Accepting request 236707 from security 
- Disable haveged service on containers. bnc#881882

OBS-URL: https://build.opensuse.org/request/show/236707
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=40
 2014-06-25 04:57:22 +00:00
Tomáš Chvátal
c512938519 - Disable haveged service on containers. bnc#881882 
OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=96
 2014-06-10 08:28:33 +00:00
Stephan Kulow
4aa9fcbf31 Accepting request 233562 from security 
- Disable randomly failing ENT test bnc#876674
- Added patches:
  * haveged-conditional-enttest.patch

- Threads seem not to fix the random testsuite fail.

- Fix "stop" of service, the daemon in foreground actually 
 exits with a weird exit code. workaround this misbehaviour
 in the service file.

- revert to non-forking service, "forking" services are racy
  and provided by systemd purely for compatibility with old daemons.
  see daemon(7) for the rationale. Only "simple" (default) and 
  "notify" services must be used if possible.
- Also, there is no haveged.conf around, neither such file
  is parsed by the daemon at all.
- Start the daemon as soon as the random device is available with
  the help of udev, as starting services while starved of entropy 
  is no good.

OBS-URL: https://build.opensuse.org/request/show/233562
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haveged?expand=0&rev=39
 2014-05-14 08:26:09 +00:00