pool/rpcbind
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Update to rpcbind 1.2.7

Browse Source 
https://sourceforge.net/projects/rpcbind/files/rpcbind/1.2.7/1.2.7-ChangeLog/download
  * rpcinfo: try connecting using abstract address
  * Listen on an AF_UNIX abstract address if supported
  * autotools/systemd: call rpcbind with -w only on enabled warm starts
  * rpcbind: fix double free in init_transport
- Refresh and rename patches (while turning them into git patches)
  * 0001-systemd-unit-files.patch -> 0001-systemd-rpcbind.service-Fix-ordering-add-etc-sysconf.patch
  * harden_rpcbind.service.patch -> 0001-systemd-rpcbind.service-Add-hardening-bsc-1181400.patch

OBS-URL: https://build.opensuse.org/package/show/network/rpcbind?expand=0&rev=103
This commit is contained in:
Petr Vorel 2024-08-23 00:14:50 +00:00 committed by Git OBS Bridge
commit 133ec6a1b0
14 changed files with 993 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
.osc

25
0001-change-lockingdir-to-run.patch Normal file
View File

@ -0,0 +1,25 @@
From a71ec1287fd779d097e9a2b02ada8144eb7de079 Mon Sep 17 00:00:00 2001
From: Thomas Blume <thomas.blume@suse.com>
Date: Wed, 12 Jun 2019 10:09:01 +0200
Subject: [PATCH] change lockingdir to /run
---
src/rpcbind.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/rpcbind.c b/src/rpcbind.c
index ecebe97..9887b82 100644
--- a/src/rpcbind.c
+++ b/src/rpcbind.c
@@ -105,7 +105,7 @@ char *nss_modules = "files";
/* who to suid to if -s is given */
#define RUN_AS "daemon"
-#define RPCBINDDLOCK "/var/run/rpcbind.lock"
+#define RPCBINDDLOCK "/run/rpcbind.lock"
int runasdaemon = 0;
int insecure = 0;
--
2.45.2

39
0001-systemd-rpcbind.service-Add-hardening-bsc-1181400.patch Normal file
View File

@ -0,0 +1,39 @@
From 913dc9e39032cf8d06c8f3260ef7fcca636a9ebb Mon Sep 17 00:00:00 2001
From: Johannes Segitz <jsegitz@suse.com>
Date: Fri, 23 Aug 2024 00:51:43 +0200
Subject: [PATCH] systemd/rpcbind.service: Add hardening (bsc#1181400)
Signed-off-by: Johannes Segitz <jsegitz@suse.com>
[ pvorel: Rebased for 1.2.7 ]
Signed-off-by: Petr Vorel <pvorel@suse.cz>
---
systemd/rpcbind.service.in | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/systemd/rpcbind.service.in b/systemd/rpcbind.service.in
index 97207e0..b03409b 100644
--- a/systemd/rpcbind.service.in
+++ b/systemd/rpcbind.service.in
@@ -11,6 +11,19 @@ Wants=rpcbind.target
After=sysinit.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=notify
# distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
EnvironmentFile=-/etc/sysconfig/rpcbind
--
2.45.2

40
0001-systemd-rpcbind.service-Fix-ordering-add-etc-sysconf.patch Normal file
View File

@ -0,0 +1,40 @@
From e400274134c1401359ef38df34fc300e0fba2fba Mon Sep 17 00:00:00 2001
From: Thomas Blume <thomas.blume@suse.com>
Date: Thu, 22 Aug 2024 22:36:49 +0200
Subject: [PATCH] systemd/rpcbind.service: Fix ordering, add
/etc/sysconfig/rpcbind
* Add ordering dependency to rpcbind.service (bsc#1117217)
* Add EnvironmentFile=-/etc/sysconfig/rpcbind to rpcbind.service.in
(bsc#824621)
Link: https://bugzilla.suse.com/show_bug.cgi?id=1117217
Link: https://bugzilla.suse.com/show_bug.cgi?id=824621
Reviewed-by: Petr Vorel <pvorel@suse.cz>
Signed-off-by: Thomas Blume <thomas.blume@suse.com>
[ pvorel: rebased for 1.2.7 ]
Signed-off-by: Petr Vorel <pvorel@suse.cz>
---
systemd/rpcbind.service.in | 2 ++
1 file changed, 2 insertions(+)
diff --git a/systemd/rpcbind.service.in b/systemd/rpcbind.service.in
index c892ca8..97207e0 100644
--- a/systemd/rpcbind.service.in
+++ b/systemd/rpcbind.service.in
@@ -8,10 +8,12 @@ RequiresMountsFor=@statedir@
# rpcbind.socket, no matter how this unit is started.
Requires=rpcbind.socket
Wants=rpcbind.target
+After=sysinit.target
[Service]
Type=notify
# distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
+EnvironmentFile=-/etc/sysconfig/rpcbind
ExecStart=@_sbindir@/rpcbind $RPCBIND_OPTIONS @warmstarts_opt@ -f
[Install]
--
2.45.2

27
0001-systemd-unit-files.patch Normal file
View File

@ -0,0 +1,27 @@
From 9c5efb3a0973d57b79e4fc7a96debe0e6ce2d000 Mon Sep 17 00:00:00 2001
From: Thomas Blume <thomas.blume@suse.com>
Date: Thu, 25 Oct 2018 11:14:32 +0200
Subject: [PATCH] systemd unit files
Add EnvironmentFile=-/etc/sysconfig/rpcbind to rpcbind.service
---
systemd/rpcbind.service.in | 1 +
1 file changed, 1 insertion(+)
Index: rpcbind-1.2.5/systemd/rpcbind.service.in
===================================================================
--- rpcbind-1.2.5.orig/systemd/rpcbind.service.in
+++ rpcbind-1.2.5/systemd/rpcbind.service.in
@@ -8,10 +8,12 @@ RequiresMountsFor=@statedir@
# rpcbind.socket, no matter how this unit is started.
Requires=rpcbind.socket
Wants=rpcbind.target
+After=sysinit.target
[Service]
Type=notify
# distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
+EnvironmentFile=-/etc/sysconfig/rpcbind
ExecStart=@_sbindir@/rpcbind $RPCBIND_OPTIONS -w -f
[Install]

5
_service Normal file
View File

@ -0,0 +1,5 @@
<services>
<service name="download_files" mode="localonly">
<param name="enforceupstream">yes</param>
</service>
</services>

24
harden_rpcbind.service.patch Normal file
View File

@ -0,0 +1,24 @@
Index: rpcbind-1.2.6/systemd/rpcbind.service.in
===================================================================
--- rpcbind-1.2.6.orig/systemd/rpcbind.service.in
+++ rpcbind-1.2.6/systemd/rpcbind.service.in
@@ -11,6 +11,19 @@ Wants=rpcbind.target
After=sysinit.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=notify
# distro can provide a drop-in adding EnvironmentFile=-/??? if needed.
EnvironmentFile=-/etc/sysconfig/rpcbind

2
rpc-user.conf Normal file
View File

@ -0,0 +1,2 @@
# Type Name ID GECOS [HOME]
u rpc - "User for rpcbind" /var/lib/empty

BIN
rpcbind-1.2.6.tar.bz2 (Stored with Git LFS) Normal file
View File

Binary file not shown.

3
rpcbind-1.2.7.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f6edf8cdf562aedd5d53b8bf93962d61623292bfc4d47eedd3f427d84d06f37e
size 125792

666
rpcbind.changes Normal file
View File

@ -0,0 +1,666 @@
-------------------------------------------------------------------
Thu Aug 22 20:26:41 UTC 2024 - Petr Vorel <pvorel@suse.cz>
- Update to rpcbind 1.2.7
https://sourceforge.net/projects/rpcbind/files/rpcbind/1.2.7/1.2.7-ChangeLog/download
* rpcinfo: try connecting using abstract address
* Listen on an AF_UNIX abstract address if supported
* autotools/systemd: call rpcbind with -w only on enabled warm starts
* rpcbind: fix double free in init_transport
- Refresh and rename patches (while turning them into git patches)
* 0001-systemd-unit-files.patch -> 0001-systemd-rpcbind.service-Fix-ordering-add-etc-sysconf.patch
* harden_rpcbind.service.patch -> 0001-systemd-rpcbind.service-Add-hardening-bsc-1181400.patch
-------------------------------------------------------------------
Wed Jan 25 14:53:11 UTC 2023 - Thorsten Kukuk <kukuk@suse.com>
- Remove unused libnsl build requires
-------------------------------------------------------------------
Tue Dec 27 13:16:20 UTC 2022 - Ludwig Nussel <lnussel@suse.com>
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
-------------------------------------------------------------------
Tue Nov 16 07:39:53 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_rpcbind.service.patch
-------------------------------------------------------------------
Mon Jun 21 15:44:17 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
- Add now working CONFIG parameter to sysusers generator
- UsrMerge changes
-------------------------------------------------------------------
Mon May 17 07:06:12 UTC 2021 - Petr Vorel <pvorel@suse.cz>
- Update to rpcbind 1.2.6
- Remove 0031-rpcbind-manpage.patch (accepted upstream in commit 4bedcee)
- Drop pmap_set.c (installed as pmap_set2): bnc#446388 is from 2008, for
openSUSE 11.
- Refresh 0001-change-lockingdir-to-run.patch
- Replace %setup with %autosetup
-------------------------------------------------------------------
Tue Apr 13 08:40:08 UTC 2021 - Fabian Vogt <fvogt@suse.com>
- Specify the appropriate set of local nss modules (boo#1177461)
-------------------------------------------------------------------
Fri Jun 5 05:49:51 UTC 2020 - Petr Vorel <pvorel@suse.cz>
- Enable debug (--enable-debug, needed for getting messages with -d)
-------------------------------------------------------------------
Mon Mar 9 08:54:14 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
- rpc-user.conf: use sysusers method to create rpc user
- Minimize dependencies for container usage
-------------------------------------------------------------------
Wed Jun 12 08:11:40 UTC 2019 - Thomas Blume <Thomas.Blume@suse.com>
- change rpcbind locking path from /var/run/rpcbind.lock to
/run/rpcbind.lock (bsc#1134659)
add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
avoid an error from rpcbind.socket when rpcbind is running
during package update
-------------------------------------------------------------------
Wed Dec 12 07:41:26 UTC 2018 - Thomas.Blume@suse.com
- add ordering dependency to rpcbind.service (bsc#1117217)
* modify 0001-systemd-unit-files.patch
-------------------------------------------------------------------
Fri Oct 26 06:04:23 UTC 2018 - Thomas.Blume@suse.com
- update to current upstream version 1.2.5 (bsc#1113002)
* move procinfo from /sbin to /bin and create a symlink in /sbin
* remove obsolete svc-freeargs.patch (included in the sources now)
-------------------------------------------------------------------
Mon Jun 4 19:42:29 UTC 2018 - tchvatal@suse.com
- Drop all commented out patches (4 years now):
* 0008-First-part-of-init_transport-refactoring.patch
* 0009-init_transport-move-the-registration-code-into-a-sep.patch
* 0010-Fix-the-behavior-when-specifying-the-h-option.patch
* 0011-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
* 0014-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
* 0030-systemd-fix-rmtcall.patch
-------------------------------------------------------------------
Mon Jun 4 19:34:14 UTC 2018 - tchvatal@suse.com
- Say goodbye to omc files fate#301838
- Format with spec-cleaner
-------------------------------------------------------------------
Tue Apr 3 12:06:36 UTC 2018 - dimstar@opensuse.org
- Correctly rebase 0001-systemd-unit-files.patch: Since upstream
now ships systemd service files, we must no longer create full
unit files, but only correct the existing ones (adding
EnvironmentFile statement).
-------------------------------------------------------------------
Mon Mar 26 17:11:19 CEST 2018 - kukuk@suse.de
- Use %license instead of %doc [bsc#1082318]
-------------------------------------------------------------------
Sun Feb 18 19:48:56 UTC 2018 - avindra@opensuse.org
- Update to 0.2.4:
+ Memory corruption fix
+ Moved the default state directory to /var/run
+ Systemd unit files were added.
- cleanup with spec-cleaner
- don't ship NEWS or ChangeLog, these are not maintained
- rebase 0001-systemd-unit-files.patch
- remove upstreamed patches
* drop 0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
* drop 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
* drop 0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
* drop 0005-security.c-removed-warning.patch
* drop 0006-don-t-use-svc_fdset.patch
* drop 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
-------------------------------------------------------------------
Thu Nov 23 13:38:46 UTC 2017 - rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
-------------------------------------------------------------------
Wed Aug 16 10:34:13 CEST 2017 - kukuk@suse.de
- Add BuildRequires libnsl-devel (needed for obsoleting nsl in
glibc)
-------------------------------------------------------------------
Wed May 17 09:14:15 UTC 2017 - schwab@suse.de
- svc-freeargs.patch: always call svc_freeargs, even if svc_getargs
failed (bsc#1037559, CVE-2017-8779)
-------------------------------------------------------------------
Tue May 2 13:58:57 CEST 2017 - kukuk@suse.de
- Adjust for new system user/group RPMs
-------------------------------------------------------------------
Tue Nov 22 08:27:10 CET 2016 - kukuk@suse.de
- Add 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
from upstream, replacing systemd tmpfile solution.
-------------------------------------------------------------------
Sat Nov 12 21:19:10 CET 2016 - kukuk@suse.de
- Move /var/lib/rpcbind to /run/rpcbind, data should not survive
reboot and this makes read-only root filesystem easier.
-------------------------------------------------------------------
Tue Jun 7 17:04:12 UTC 2016 - fbui@suse.com
- Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167)
systemd.pc is part of systemd main package now. Instead of
build-requiring systemd, import systemd-rpm-macros which has the
%{_unitdir} definition and much less dependencies than systemd and
use it when configuring rpcbind so it won't try to find the unit dir
by using pkg-config.
Also replace BR libsystemd-daemon by libsystemd since the former is
obsolete and is replaced by the later.
-------------------------------------------------------------------
Mon Mar 14 14:48:36 CET 2016 - kukuk@suse.de
- pmap_set: use tirpc header files and link against libtirpc
-------------------------------------------------------------------
Fri Feb 19 16:00:46 CET 2016 - kukuk@suse.de
- Add 0006-don-t-use-svc_fdset.patch: don't use the svc_fdset
interface for libtirpc, which is limited to 1024 connections.
-------------------------------------------------------------------
Fri Feb 12 16:18:30 CET 2016 - kukuk@suse.de
- Sync with current git:
- Replace 0002-revert-auth.patch with
0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
- Add 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
to fix problems with activation via sockets by systemd
- Replace 0032-CVE-2015-7236.patch with
0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
- Add 0005-security.c-removed-warning.patch to fix compiler warnings
- Temporary remove 099-poll.patch
-------------------------------------------------------------------
Wed Jan 27 15:08:00 CET 2016 - kukuk@suse.de
- Disable 0030-systemd-fix-rmtcall.patch, needs the other disabled
patches.
- Submit for SLE12SP2 [FATE#320393]
-------------------------------------------------------------------
Tue Nov 17 14:20:28 CET 2015 - kukuk@suse.de
- Add 0002-revert-auth.patch: revert old patch no longer working
with libtirpc 1.0.1
(http://sourceforge.net/p/libtirpc/mailman/message/34585439/)
-------------------------------------------------------------------
Mon Sep 21 13:51:41 UTC 2015 - okir@suse.com
- Add patch 0032-CVE-2015-7236.patch to fix a segfault on certain
remote scans [CVE-2015-7236, bsc#940191, bsc#946204]
-------------------------------------------------------------------
Mon Jul 27 08:27:14 UTC 2015 - okir@suse.com
- Document how to restrict addresses that rpcbind will listen on
[bsc#935102]
Added 0031-rpcbind-manpage.patch
-------------------------------------------------------------------
Tue Jul 14 16:52:03 CEST 2015 - kukuk@suse.de
- Add 099-poll.patch: use libtirpc with poll() implementation
-------------------------------------------------------------------
Wed May 27 08:38:26 UTC 2015 - okir@suse.com
- Add patch 0030-systemd-fix-rmtcall.patch to fix rmtcall
forwarding (bnc#932423)
-------------------------------------------------------------------
Thu Apr 30 09:36:21 CEST 2015 - kukuk@suse.de
- Update to rpcbind 0.2.3
- Following patches were accepted upstream:
- 0005-Remove-obsolete-function-in6_fillscopeid.patch
- 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
- 0007-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
- 0019-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
- 0020-rpcinfo-introduce-new-helper-function-ip_getclient.patch
- 0021-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
- 0022-rpcinfo-remove-obsolete-function-clnt_com_create.patch
- 0023-Make-rpcinfo-p-support-IPv6-addresses-too.patch
- 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Thu Dec 18 13:56:59 CET 2014 - kukuk@suse.de
- Update to current git, which contains the following patches:
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
- 0003-systemd-no-dualmode.patch
- 0004-systemd-sd_notify.patch
- 0018-configure-check-for-nss.h.patch
-------------------------------------------------------------------
Fri Dec 12 17:01:44 UTC 2014 - jeffm@suse.com
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch: fix
merge issue causing segfaults on missing file (bnc#909619).
-------------------------------------------------------------------
Thu Dec 11 13:07:09 CET 2014 - kukuk@suse.de
- Split off 0003-systemd-no-dualmode.patch from
0001-systemd-enhancements.patch for easier upstream submission.
- Split off 0004-systemd-sd_notify.patch from
0001-systemd-enhancements.patch for easier upstream submission.
- Rename 0001-systemd-enhancements.patch to 0001-systemd-unit-files.patch
-------------------------------------------------------------------
Tue Dec 9 15:52:01 CET 2014 - kukuk@suse.de
- Update to latest rpcbind 0.2.2 upstream release.
- Following patches are upstream:
- 0001-Fix-building-one-systems-w-out-nss.h.patch
- 0002-Rename-configure.in-to-configure.ac.patch
- 0003-rpcbind-rpcuser-not-being-set-in-Makefile.am.patch
- 0004-Silence-a-warning-about-setgroups-being-implicitly-d.patch
- Adjust following patches:
- 0005-Remove-obsolete-function-in6_fillscopeid.patch
- 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
- 0018-configure-check-for-nss.h.patch
- Obsolete patches:
- 0015-When-using-systemd-activation-make-rpcbind-notify-sy.patch
- 0016-Notify-systemd-unconditionally.patch
- 0012-Support-systemd-activation.patch
- 0013-socket-activation-Fix-rpcbind.service-to-use-separat.patch
- 0017-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
- 0025-rpcinfo-warmstat_no-warning-about-missing-file.patch
- 0026-systemd-no-default-dep
- 0027-socket-before-service.patch
- 0028-rpcbind-after-var-run.patch
- 0029-rpcbind-sd-notify-stupid-errmsg.patch
- New patches:
- 0001-systemd-enhancements.patch
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
- Disabled patches:
- 0008-First-part-of-init_transport-refactoring.patch
- 0009-init_transport-move-the-registration-code-into-a-sep.patch
- 0010-Fix-the-behavior-when-specifying-the-h-option.patch
- 0011-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
- 0014-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
- 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Wed Nov 12 15:05:00 CET 2014 - kukuk@suse.de
- Disable debug code, which else would fill up the log files
[bnc#905042]
-------------------------------------------------------------------
Tue Jun 10 10:41:15 UTC 2014 - okir@suse.com
- 0029-rpcbind-sd-notify-stupid-errmsg.patch: Remove a useless
error/debug message (bnc#881663)
-------------------------------------------------------------------
Thu Jun 5 12:55:45 UTC 2014 - werner@suse.de
- Add patch 0028-rpcbind-after-var-run.patch as rpcbind service
wants /var/run mounted before started (bnc#881518)
-------------------------------------------------------------------
Wed May 21 13:56:14 UTC 2014 - werner@suse.de
- Require the systemd libraries for build to allow the move
of systemd.pc back to systemd
-------------------------------------------------------------------
Mon Mar 31 10:38:40 UTC 2014 - werner@suse.de
- Add 0027-socket-before-service.patch to make sure that always
the socket is up before the service. This will make sure that
rpcbind.target will not only cause the socket but also the
rpcbind.service (bnc#860246)
- Beside this ingnore exit state 2 in case of shutdown (bnc#860246)
-------------------------------------------------------------------
Wed Mar 26 21:52:19 UTC 2014 - nfbrown@suse.com
- 0026-systemd-no-default-dep
No default dependencies for rpcbind. This allows it to start
early when it might be needed.
(bnc#860246)
-------------------------------------------------------------------
Tue Mar 4 17:55:01 UTC 2014 - coolo@suse.com
- fix typo in useradd call's user home dir
-------------------------------------------------------------------
Tue Mar 4 06:39:39 UTC 2014 - coolo@suse.com
- prereq useradd - called from %pre
-------------------------------------------------------------------
Wed Feb 26 16:10:49 CET 2014 - kukuk@suse.de
- Fix ownership of /var/lib/rpcbind, else rpcbind cannot write
warmstart files
-------------------------------------------------------------------
Wed Feb 26 15:27:45 CET 2014 - kukuk@suse.de
- Don't print error message about missing files in warmstart code
if we do a coldstart [bnc#865807]
(0025-rpcinfo-warmstat_no-warning-about-missing-file.patch)
-------------------------------------------------------------------
Fri Feb 14 15:10:19 CET 2014 - kukuk@suse.de
- Re-add rcrpcbind symlink
-------------------------------------------------------------------
Thu Jan 23 16:58:25 UTC 2014 - okir@suse.com
- Fixed rpc broadcast handling (bnc#857324)
Upgraded to upstream 0.2.1-rc4 as part of this, and rebased the
patch set.
Added:
0001-Fix-building-one-systems-w-out-nss.h.patch
0002-Rename-configure.in-to-configure.ac.patch
0003-rpcbind-rpcuser-not-being-set-in-Makefile.am.patch
Deleted (already upstream):
0003-configure-fix-the-case-when-with-rpcuser-is-not-give.patch
Renumbered (previous numbering shown below):
0001-Silence-a-warning-about-setgroups-being-implicitly-d.patch
0002-Remove-obsolete-function-in6_fillscopeid.patch
0004-In-init_transport-move-creation-of-COTS-sockets-clos.patch
0005-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
0006-First-part-of-init_transport-refactoring.patch
0007-init_transport-move-the-registration-code-into-a-sep.patch
0008-Fix-the-behavior-when-specifying-the-h-option.patch
0009-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
0010-Support-systemd-activation.patch
0011-socket-activation-Fix-rpcbind.service-to-use-separat.patch
0012-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
0013-When-using-systemd-activation-make-rpcbind-notify-sy.patch
0014-Notify-systemd-unconditionally.patch
0015-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
0016-configure-check-for-nss.h.patch
0018-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
0019-rpcinfo-introduce-new-helper-function-ip_getclient.patch
0020-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
0021-rpcinfo-remove-obsolete-function-clnt_com_create.patch
0022-Make-rpcinfo-p-support-IPv6-addresses-too.patch
0023-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Mon Jan 20 12:20:02 UTC 2014 - okir@suse.com
- Make rpcinfo -p/-u/-t options support IPv6 (bnc# 859448)
Added:
0018-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
0019-rpcinfo-introduce-new-helper-function-ip_getclient.patch
0020-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
0021-rpcinfo-remove-obsolete-function-clnt_com_create.patch
0022-Make-rpcinfo-p-support-IPv6-addresses-too.patch
0023-rpcinfo-remove-obsolete-function-get_inet_address.patch
-------------------------------------------------------------------
Tue Jan 14 16:18:49 UTC 2014 - okir@suse.com
- Recognize RPCBIND_OPTIONS from /etc/sysconfig/rpcbind (bnc#824621)
Added:
0015-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
- Make rpcbind run as user "rpc" by default (bnc#714735)
- Avoid NIS lookups of host names and service names (bnc#858700)
Added:
0016-configure-check-for-nss.h.patch
-------------------------------------------------------------------
Fri Jan 10 10:58:47 UTC 2014 - okir@suse.com
- Notify systemd unconditionally. This prevented
"systemctl start rpcbind.service" from succeeding
Added:
0014-Notify-systemd-unconditionally.patch
-------------------------------------------------------------------
Tue Aug 20 18:34:19 UTC 2013 - okir@suse.com
- Update rpcbind to latest upstream, and rewrote patches for systemd
integration.
Removed:
0001-systemd-add-support-for-system-bus-activation.patch
socket-activation-don-t-unlink-socket-we-didn-t-create
socket-activation-fix-rpcbind-service-to-use-separate-sockets
rpcbind-journal.patch
move-lock-file-to-run-fs.patch
rpcbind-systemd-notify.patch
Added:
0001-Silence-a-warning-about-setgroups-being-implicitly-d.patch
0002-Remove-obsolete-function-in6_fillscopeid.patch
0003-configure-fix-the-case-when-with-rpcuser-is-not-give.patch
0004-In-init_transport-move-creation-of-COTS-sockets-clos.patch
0005-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
0006-First-part-of-init_transport-refactoring.patch
0007-init_transport-move-the-registration-code-into-a-sep.patch
0008-Fix-the-behavior-when-specifying-the-h-option.patch
0009-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
0010-Support-systemd-activation.patch
0011-socket-activation-Fix-rpcbind.service-to-use-separat.patch
0012-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
0013-When-using-systemd-activation-make-rpcbind-notify-sy.patch
-------------------------------------------------------------------
Thu Jun 27 21:36:52 UTC 2013 - crrodriguez@opensuse.org
- rpcbind-systemd-notify.patch make systemd service type
"notify" this is almost the same as the default but
with the difference that the daemon now is able to
to notify systemd when it finished startup hence
avoiding a race condition in where startup is faster than
the process finishing its own internal setup routines.
-------------------------------------------------------------------
Mon May 6 12:20:44 UTC 2013 - cfarrell@suse.com
- license update: BSD-4-Clause
Look at src/util.c
-------------------------------------------------------------------
Thu Apr 4 00:32:00 UTC 2013 - crrodriguez@opensuse.org
- remove sysvinit support (read opensuse-packaging for details)
- remove "portmap" migration, according to the time machine
it went away in openSUSE 11.2 and the oldest supported version
is now 12.1
-------------------------------------------------------------------
Wed Nov 28 14:44:15 UTC 2012 - rmilasan@suse.com
- Move rpcbind.sock and rpcbind.lock to /run to not interfere with
systemd.
-------------------------------------------------------------------
Thu Oct 25 21:29:15 UTC 2012 - crrodriguez@opensuse.org
- Instead of using syslog, log to the journal
-------------------------------------------------------------------
Wed Oct 24 15:56:17 UTC 2012 - crrodriguez@opensuse.org
- There should be no Requires on syslog as it is no longer
required for anything since the introduction of the journal.
-------------------------------------------------------------------
Wed Apr 18 23:46:52 CEST 2012 - jeffm@suse.de
- socket-activation: Fix rpcbind.service to use separate
sockets (bnc#757909).
-------------------------------------------------------------------
Wed Apr 18 05:47:20 CEST 2012 - jeffm@suse.de
- socket-activation: don't unlink socket we didn't create (bnc#757667).
-------------------------------------------------------------------
Mon Dec 19 22:54:46 UTC 2011 - crrodriguez@opensuse.org
- Update systemd patches
-------------------------------------------------------------------
Wed Dec 7 13:50:49 UTC 2011 - crrodriguez@opensuse.org
- Add systemd socket activation patch, based on
http://www.spinics.net/lists/linux-nfs/msg14371.html
but does not bundle sd-daemon.[c|h] it uses libsystemd-daemon
instead.
-------------------------------------------------------------------
Sun Dec 4 17:14:37 UTC 2011 - crrodriguez@opensuse.org
- Update to version 0.2.0_git201103171419
- Fix rpm source tags to not be conditional.
-------------------------------------------------------------------
Tue Nov 29 20:27:38 UTC 2011 - crrodriguez@opensuse.org
- Add systemd units
-------------------------------------------------------------------
Fri Nov 25 10:43:48 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to avoid implicit dependency
-------------------------------------------------------------------
Tue Jun 14 19:00:51 UTC 2011 - aj@suse.de
- Install rpcinfo man page since glibc does not install its man
page anymore.
-------------------------------------------------------------------
Wed Jan 12 14:39:35 UTC 2011 - lnussel@suse.de
- don't enable rpcbind init script by default
-------------------------------------------------------------------
Tue Dec 7 12:01:55 UTC 2010 - coolo@novell.com
- add some provides and requires for sysvinit scripts to please insserv
-------------------------------------------------------------------
Sun Nov 14 14:00:49 UTC 2010 - cristian.rodriguez@opensuse.org
- Use full RELRO here
-------------------------------------------------------------------
Tue Oct 26 15:20:07 UTC 2010 - cristian.rodriguez@opensuse.org
- Update to a newer GIT snapshot
* nd: set SO_REUSEADDR on NC_TPI_COTS listening sockets
* rpcbind: add no-fork mode
-------------------------------------------------------------------
Thu Dec 4 11:02:25 CET 2008 - coolo@suse.de
- fix "checkproc: command not found" during installation
-------------------------------------------------------------------
Tue Dec 2 00:29:16 CET 2008 - ro@suse.de
- rename installed pmap_set to pmap_set2 to avoid conflict
with portmap
-------------------------------------------------------------------
Mon Dec 1 12:29:50 CET 2008 - mkoenig@suse.de
- if upgrading from portmap:
* we need to stop portmap and start rpcbind in %post since the
restart on upgrade mechanism does not work here
* dump portmap tables and set them again in rpcbind [bnc#446388]
- add pmap_set.c which is needed to set the old portmap tables
in rpcbind
-------------------------------------------------------------------
Wed Nov 26 14:18:06 CET 2008 - mkoenig@suse.de
- specify runlevel in chkconfig check [bnc#444663]
-------------------------------------------------------------------
Wed Nov 5 14:44:56 CET 2008 - mkoenig@suse.de
- fix version comparison in Obsoletes [bnc#440313]
- disable portmap service in pre script to avoid problems when
upgrading from portmap
-------------------------------------------------------------------
Wed Oct 15 19:07:48 CEST 2008 - mkoenig@suse.de
- update to 0.1.6 with additional patches from git
* Fixed an ipv6 related segfault on startup
* rpcbind needs to also downgrade its gid to a non-priviledgied group
* Removed the documentation about the non-existent '-L' flag
* Introduce helpers for ipprot/netid mapping
* Change how we decide on the netids to use for portmap
* Simplify port live check in pmap_svc.c
* Support portmap on AF_LOCAL, too
* Fix for warm start
* Properly identify local root user over ipv4/v6
- fixes [bnc#435637]
- remove patch
rpcbind-0.1.4-iff_up.patch
rpcbind-0.1.4-localaddr.patch
-------------------------------------------------------------------
Mon Aug 18 17:41:18 CEST 2008 - mkoenig@suse.de
- use version in Provides/Obsoletes
-------------------------------------------------------------------
Fri Jul 18 15:54:26 CEST 2008 - mkoenig@suse.de
- update to version 0.1.5
- license change to BSD-3
- patches merged
rpcbind-0.1.4-compile.patch
rpcbind-0.1.4-debug.patch
rpcbind-0.1.4-libwrap.patch
rpcbind-0.1.4-recvfrom-fix.patch
rpcbind-0.1.4-rpcuser.patch
rpcbind-0.1.4-warmstarts-cleanup.patch
rpcbind-0.1.4-warmstarts.patch
-------------------------------------------------------------------
Wed Apr 2 14:21:49 CEST 2008 - mkoenig@suse.de
- initial packaging, version 0.1.4 [fate#300607]
- add patches from Steve Dickson, including fixes and
support for debug and warmstart
- build as PIE

126
rpcbind.spec Normal file
View File

@ -0,0 +1,126 @@
#
# spec file for package rpcbind
#
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
#Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir}
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: rpcbind
Version: 1.2.7
Release: 0
Summary: Transport independent RPC portmapper
# Git-Web: http://git.linux-nfs.org/?p=steved/rpcbind.git;a=summary
License: BSD-4-Clause
Group: Productivity/Networking/System
URL: http://rpcbind.sourceforge.net
Source: https://downloads.sourceforge.net/sourceforge/%{name}/%{name}-%{version}.tar.bz2
Source2: sysconfig.rpcbind
Source5: rpc-user.conf
Patch1: 0001-systemd-rpcbind.service-Fix-ordering-add-etc-sysconf.patch
Patch2: 0001-change-lockingdir-to-run.patch
Patch3: 0001-systemd-rpcbind.service-Add-hardening-bsc-1181400.patch
BuildRequires: libtirpc-devel >= 1.0.1
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: sysuser-shadow
BuildRequires: sysuser-tools
BuildRequires: tcpd-devel
BuildRequires: pkgconfig(libsystemd)
Requires(post): %fillup_prereq
Provides: portmap
%{?systemd_ordering}
%sysusers_requires
%description
Rpcbind is a replacement for portmap. Whereas portmap supports only UDP
and TCP transports over INET (IPv4), rpcbind can be configured to work
on various transports supported by the TI-RPC. This includes TCP and
UDP over IPv6. Moreover, rpcbind provides additional functions in
regards to portmap.
%prep
%autosetup -p1
%build
autoreconf -fiv
export CFLAGS="%{optflags} -fpie"
export LDFLAGS="-pie -Wl,-z,relro,-z,now"
%configure \
--enable-libwrap \
--enable-warmstarts \
--enable-debug \
--with-statedir=%{_rundir}/%{name} \
--with-rpcuser=rpc \
--with-systemdsystemunitdir=%{_unitdir} \
--with-nss-modules="files usrfiles"
make %{?_smp_mflags}
%sysusers_generate_pre %{SOURCE5} rpc rpc-user.conf
%install
%make_install
# fillup template
mkdir -p %{buildroot}%{_fillupdir}
install -m 644 %{SOURCE2} %{buildroot}%{_fillupdir}/
# sysusers.d config
mkdir -p %{buildroot}%{_sysusersdir}
install -m 644 %{SOURCE5} %{buildroot}%{_sysusersdir}/
# create symlink for rcrpcbind
mkdir -p %{buildroot}/%{_sbindir}
ln -s service %{buildroot}%{_sbindir}/rc%{name}
ln -s %{_bindir}/rpcinfo %{buildroot}%{_sbindir}/rpcinfo
%if 0%{?suse_version} < 1550
mkdir %{buildroot}/sbin
mkdir %{buildroot}/bin
ln -s %{_bindir}/rpcinfo %{buildroot}/sbin/rpcinfo
ln -s %{_bindir}/rpcinfo %{buildroot}/bin/rpcinfo
ln -s %{_sbindir}/%{name} %{buildroot}/sbin/%{name}
%endif
%pre -f rpc.pre
%service_add_pre %{name}.service %{name}.socket
%preun
%service_del_preun %{name}.service %{name}.socket
%post
%{fillup_only -n rpcbind}
%service_add_post %{name}.socket %{name}.service
%postun
%service_del_postun %{name}.socket %{name}.service
%files
%license COPYING
%doc AUTHORS README
%if 0%{?suse_version} < 1550
/sbin/%{name}
/bin/rpcinfo
/sbin/rpcinfo
%endif
%{_sbindir}/%{name}
%{_bindir}/rpcinfo
%{_sbindir}/rpcinfo
%{_sbindir}/rc%{name}
%{_mandir}/*/*
%{_fillupdir}/sysconfig.%{name}
%{_sysusersdir}/rpc-user.conf
%{_unitdir}/%{name}.service
%{_unitdir}/%{name}.socket
%changelog

9
sysconfig.rpcbind Normal file
View File

@ -0,0 +1,9 @@
## Path: Network/RPC/Rpcbind
## Description: Rpcbind startup options
## Type: string
## Default: ""
#
# Startup options for rpcbind
#
RPCBIND_OPTIONS=""