2006-12-19 00:15:14 +01:00
|
|
|
|
#
|
2011-02-24 12:36:18 +01:00
|
|
|
|
# spec file for package bind
|
2006-12-19 00:15:14 +01:00
|
|
|
|
#
|
2015-02-11 13:29:20 +01:00
|
|
|
|
# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
|
2006-12-19 00:15:14 +01:00
|
|
|
|
#
|
2008-08-13 23:21:12 +02:00
|
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
|
|
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
|
|
|
|
# upon. The license for this file, and modifications and additions to the
|
|
|
|
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
|
|
|
|
# license for the pristine package is not an Open Source License, in which
|
|
|
|
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
|
|
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
|
|
|
|
# published by the Open Source Initiative.
|
|
|
|
|
|
|
2006-12-19 00:15:14 +01:00
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Name: bind
|
2007-03-02 09:16:36 +01:00
|
|
|
|
%define pkg_name bind
|
2015-09-22 22:15:47 +02:00
|
|
|
|
%define pkg_vers 9.10.2-P4
|
|
|
|
|
|
%define rpm_vers 9.10.2P4
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%define idn_vers 1.0
|
2006-12-19 00:15:14 +01:00
|
|
|
|
Summary: Domain Name System (DNS) Server (named)
|
2012-07-12 09:46:55 +02:00
|
|
|
|
License: ISC
|
2006-12-19 00:15:14 +01:00
|
|
|
|
Group: Productivity/Networking/DNS/Servers
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Version: %rpm_vers
|
2012-02-13 14:54:04 +01:00
|
|
|
|
Release: 0
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
2007-08-09 18:01:16 +02:00
|
|
|
|
Source: ftp://ftp.isc.org/isc/bind9/%{pkg_vers}/bind-%{pkg_vers}.tar.gz
|
2013-03-27 13:36:47 +01:00
|
|
|
|
Source3: ftp://ftp.isc.org/isc/bind9/%{pkg_vers}/bind-%{pkg_vers}.tar.gz.asc
|
|
|
|
|
|
# from http://www.isc.org/about/openpgp/ ... changes yearly apparently.
|
|
|
|
|
|
Source4: %name.keyring
|
2006-12-19 00:15:14 +01:00
|
|
|
|
Source1: vendor-files.tar.bz2
|
2010-01-07 12:54:38 +01:00
|
|
|
|
Source2: baselibs.conf
|
2006-12-19 00:15:14 +01:00
|
|
|
|
Source9: ftp://ftp.internic.net/domain/named.root
|
2015-09-22 22:15:47 +02:00
|
|
|
|
# url http://www.venaas.no/ldap/bind-sdb/dnszone-schema.txt no longer exists...
|
|
|
|
|
|
Source40: dnszone-schema.txt
|
2006-12-19 00:15:14 +01:00
|
|
|
|
Patch: configure.in.diff
|
|
|
|
|
|
Patch1: Makefile.in.diff
|
|
|
|
|
|
Patch4: perl-path.diff
|
2015-05-08 16:24:45 +02:00
|
|
|
|
Patch5: dns_dynamic_db.patch
|
2006-12-19 00:15:14 +01:00
|
|
|
|
Patch51: pie_compile.diff
|
|
|
|
|
|
Patch52: named-bootconf.diff
|
2014-01-24 11:15:48 +01:00
|
|
|
|
Patch53: bind-sdb-ldap.patch
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Patch101: runidn.diff
|
2015-02-11 13:29:20 +01:00
|
|
|
|
Patch102: idnkit-powerpc-ltconfig.patch
|
2014-10-16 16:25:14 +02:00
|
|
|
|
BuildRequires: krb5-devel
|
|
|
|
|
|
BuildRequires: libcap
|
|
|
|
|
|
BuildRequires: libcap-devel
|
|
|
|
|
|
BuildRequires: libmysqlclient-devel
|
|
|
|
|
|
BuildRequires: libtool
|
|
|
|
|
|
BuildRequires: libxml2-devel
|
|
|
|
|
|
BuildRequires: openldap2-devel
|
|
|
|
|
|
BuildRequires: openssl
|
|
|
|
|
|
BuildRequires: openssl-devel
|
|
|
|
|
|
BuildRequires: python-base
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2015-01-11 17:14:25 +01:00
|
|
|
|
BuildRequires: systemd-rpm-macros
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2014-10-16 16:25:14 +02:00
|
|
|
|
BuildRequires: update-desktop-files
|
|
|
|
|
|
Provides: bind8
|
|
|
|
|
|
Provides: bind9
|
|
|
|
|
|
Provides: dns_daemon
|
2014-12-05 11:12:05 +01:00
|
|
|
|
Obsoletes: bind8 < %version
|
|
|
|
|
|
Obsoletes: bind9 < %version
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Requires: %{name}-chrootenv
|
|
|
|
|
|
Requires: %{name}-utils
|
2014-12-08 09:18:17 +01:00
|
|
|
|
PreReq: %fillup_prereq %insserv_prereq bind-utils /bin/grep /bin/sed /bin/mkdir /usr/bin/tee /bin/chmod /bin/chown /bin/mv /bin/cat /usr/bin/dirname /usr/bin/diff /usr/bin/old
|
|
|
|
|
|
Requires(pre): /usr/sbin/groupadd /usr/sbin/useradd /usr/sbin/usermod
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Url: http://isc.org/sw/bind/
|
2012-11-18 19:12:17 +01:00
|
|
|
|
|
2010-04-13 21:20:44 +02:00
|
|
|
|
Source60: dlz-schema.txt
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%if "%{_vendor}" == "suse"
|
|
|
|
|
|
%define VENDOR SUSE
|
|
|
|
|
|
%else
|
|
|
|
|
|
%define VENDOR %_vendor
|
|
|
|
|
|
%endif
|
|
|
|
|
|
# Defines for user and group add
|
|
|
|
|
|
%define NAMED_UID 44
|
|
|
|
|
|
%define NAMED_UID_NAME named
|
|
|
|
|
|
%define NAMED_GID 44
|
|
|
|
|
|
%define NAMED_GID_NAME named
|
|
|
|
|
|
%define NAMED_COMMENT Name server daemon
|
|
|
|
|
|
%define NAMED_HOMEDIR /var/lib/named
|
|
|
|
|
|
%define NAMED_SHELL /bin/false
|
|
|
|
|
|
%define GROUPADD_NAMED /usr/sbin/groupadd -g %{NAMED_GID} -o -r %{NAMED_GID_NAME} 2> /dev/null || :
|
|
|
|
|
|
%define USERADD_NAMED /usr/sbin/useradd -r -o -g %{NAMED_GID_NAME} -u %{NAMED_UID} -s %{NAMED_SHELL} -c "%{NAMED_COMMENT}" -d %{NAMED_HOMEDIR} %{NAMED_UID_NAME} 2> /dev/null || :
|
|
|
|
|
|
%define USERMOD_NAMED /usr/sbin/usermod -s %{NAMED_SHELL} -d %{NAMED_HOMEDIR} %{NAMED_UID_NAME} 2>/dev/null || :
|
|
|
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
2014-05-08 11:51:15 +02:00
|
|
|
|
%if ! %{defined _rundir}
|
|
|
|
|
|
%define _rundir %{_localstatedir}/run
|
|
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
|
Berkeley Internet Name Domain (BIND) is an implementation of the Domain
|
|
|
|
|
|
Name System (DNS) protocols and provides an openly redistributable
|
|
|
|
|
|
reference implementation of the major components of the Domain Name
|
|
|
|
|
|
System. This package includes the components to operate a DNS server.
|
|
|
|
|
|
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%package -n idnkit
|
|
|
|
|
|
Summary: Toolkit for internationalized domain names
|
|
|
|
|
|
Group: Productivity/Networking/DNS/Utilities
|
|
|
|
|
|
Version: %idn_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
# Added on 2014-10-01
|
|
|
|
|
|
Provides: bind-utils:%_bindir/idnconv
|
|
|
|
|
|
Provides: bind-utils:%_bindir/runidn
|
|
|
|
|
|
|
|
|
|
|
|
%description -n idnkit
|
|
|
|
|
|
idnkit is a toolkit for handling internationalized domain names. It
|
|
|
|
|
|
consists of the following components.
|
|
|
|
|
|
|
|
|
|
|
|
* library for handling internationalized domain names (libidnkit)
|
|
|
|
|
|
* codeset conversion utility (idnconv)
|
|
|
|
|
|
* a command which adds IDN feature dynamically to Unix applications
|
|
|
|
|
|
(runidn)
|
|
|
|
|
|
|
|
|
|
|
|
%package -n idnkit-devel
|
|
|
|
|
|
Summary: Development files for idnkit
|
|
|
|
|
|
Group: Development/Libraries/C and C++
|
|
|
|
|
|
Version: %idn_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
Provides: bind-devel:%_includedir/bind/idn
|
|
|
|
|
|
Requires: libidnkit1 = %idn_vers
|
|
|
|
|
|
Requires: libidnkitlite1 = %idn_vers
|
|
|
|
|
|
Requires: libidnkitres1 = %idn_vers
|
|
|
|
|
|
|
|
|
|
|
|
%description -n idnkit-devel
|
|
|
|
|
|
idnkit is a toolkit for handling internationalized domain names. This
|
|
|
|
|
|
subpackage contains the header files needed for building programs
|
|
|
|
|
|
with it.
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%package -n libbind9-140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Summary: BIND9 shared library used by BIND
|
|
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%description -n libbind9-140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
This library contains a few utility functions used by the BIND
|
|
|
|
|
|
server and utilities.
|
|
|
|
|
|
|
- Update to version 9.10.2-P2
- An uninitialized value in validator.c could result in an assertion failure.
(CVE-2015-4620) [RT #39795]
- Update to version 9.10.2-P1
- Include client-ip rules when logging the number of RPZ rules of each type.
[RT #39670]
- Addressed further problems with reloading RPZ zones. [RT #39649]
- Addressed a regression introduced in change #4121. [RT #39611]
- The server could match a shorter prefix than what was available in
CLIENT-IP policy triggers, and so, an unexpected action could be taken.
This has been corrected. [RT #39481]
- On servers with one or more policy zones configured as slaves, if a policy
zone updated during regular operation (rather than at startup) using a full
zone reload, such as via AXFR, a bug could allow the RPZ summary data to
fall out of sync, potentially leading to an assertion failure in rpz.c when
further incremental updates were made to the zone, such as via IXFR.
[RT #39567]
- A bug in RPZ could cause the server to crash if policy zones were updated
while recursion was pending for RPZ processing of an active query.
[RT #39415]
- Fix a bug in RPZ that could cause some policy zones that did not
specifically require recursion to be treated as if they did; consequently,
setting qname-wait-recurse no; was sometimes ineffective. [RT #39229]
- Asynchronous zone loads were not handled correctly when the zone load was
already in progress; this could trigger a crash in zt.c. [RT #37573]
- Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't
result in a bug during operation. If the read failed, named could segfault.
[RT #38559]
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=172
2015-07-10 22:54:40 +02:00
|
|
|
|
%package -n libdns161
|
2014-12-11 15:46:49 +01:00
|
|
|
|
Summary: DNS library used by BIND
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
- Update to version 9.10.2-P2
- An uninitialized value in validator.c could result in an assertion failure.
(CVE-2015-4620) [RT #39795]
- Update to version 9.10.2-P1
- Include client-ip rules when logging the number of RPZ rules of each type.
[RT #39670]
- Addressed further problems with reloading RPZ zones. [RT #39649]
- Addressed a regression introduced in change #4121. [RT #39611]
- The server could match a shorter prefix than what was available in
CLIENT-IP policy triggers, and so, an unexpected action could be taken.
This has been corrected. [RT #39481]
- On servers with one or more policy zones configured as slaves, if a policy
zone updated during regular operation (rather than at startup) using a full
zone reload, such as via AXFR, a bug could allow the RPZ summary data to
fall out of sync, potentially leading to an assertion failure in rpz.c when
further incremental updates were made to the zone, such as via IXFR.
[RT #39567]
- A bug in RPZ could cause the server to crash if policy zones were updated
while recursion was pending for RPZ processing of an active query.
[RT #39415]
- Fix a bug in RPZ that could cause some policy zones that did not
specifically require recursion to be treated as if they did; consequently,
setting qname-wait-recurse no; was sometimes ineffective. [RT #39229]
- Asynchronous zone loads were not handled correctly when the zone load was
already in progress; this could trigger a crash in zt.c. [RT #37573]
- Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't
result in a bug during operation. If the read failed, named could segfault.
[RT #38559]
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=172
2015-07-10 22:54:40 +02:00
|
|
|
|
%description -n libdns161
|
2014-10-16 16:25:14 +02:00
|
|
|
|
This subpackage contains the "DNS client" module. This is a higher
|
|
|
|
|
|
level API that provides an interface to name resolution, single DNS
|
|
|
|
|
|
transaction with a particular server, and dynamic update. Regarding
|
|
|
|
|
|
name resolution, it supports advanced features such as DNSSEC
|
|
|
|
|
|
validation and caching. This module supports both synchronous and
|
|
|
|
|
|
asynchronous mode.
|
|
|
|
|
|
|
|
|
|
|
|
It also contains the Advanced Database (ADB) and Simple Database
|
|
|
|
|
|
(SDB) APIs. ADB allows user-written routines to replace BIND’s
|
|
|
|
|
|
internal database function for both nominated and all zones. SDB
|
|
|
|
|
|
allows a user-written driver to supply zone data either from
|
|
|
|
|
|
alternate data sources (for instance, a relational database) or using
|
|
|
|
|
|
specialized algorithms (for instance, for load-balancing).
|
|
|
|
|
|
[Book links for SDB: "Pro DNS and BIND 10", R. Aitchison, Apress]
|
|
|
|
|
|
|
|
|
|
|
|
%package -n libidnkit1
|
|
|
|
|
|
Summary: BIND Internationalized Domain Names library
|
|
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %idn_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
|
|
|
|
|
%description -n libidnkit1
|
|
|
|
|
|
The libidnkit library support various manipulations of
|
|
|
|
|
|
internationalized domain names.
|
|
|
|
|
|
|
|
|
|
|
|
libidnkit internally uses iconv function to provide encoding
|
|
|
|
|
|
conversion from UTF-8 to the local encoding (such as ISO-8859-1,
|
|
|
|
|
|
usually determined by the current locale), and vise versa.
|
|
|
|
|
|
|
|
|
|
|
|
%package -n libidnkitlite1
|
|
|
|
|
|
Summary: BIND Internationalized Domain Names lightweight library
|
|
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %idn_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
|
|
|
|
|
%description -n libidnkitlite1
|
|
|
|
|
|
The libidnkitlite library support various manipulations of
|
|
|
|
|
|
internationalized domain names.
|
|
|
|
|
|
|
|
|
|
|
|
libidnkitlite is lightweight version of libidnkit. It assumes local
|
|
|
|
|
|
encoding is UTF-8 so that it never uses iconv.
|
|
|
|
|
|
|
|
|
|
|
|
%package -n libidnkitres1
|
|
|
|
|
|
Summary: Resolver function library with IDN support
|
|
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %idn_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
|
|
|
|
|
%description -n libidnkitres1
|
|
|
|
|
|
libidnkitres is a LD_PRELOAD-able library which provides a modified
|
|
|
|
|
|
version of resolver functions (gethostbyname, getaddrinfo, etc.)
|
|
|
|
|
|
which implement features for handling internationalized domain names.
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%package -n libirs141
|
2015-10-05 09:46:26 +02:00
|
|
|
|
Summary: The BIND Information Retrieval System library
|
2014-12-05 11:12:05 +01:00
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
|
|
|
|
|
%description -n libirs141
|
|
|
|
|
|
libirs provides an interface to parse the traditional resolv.conf file and an
|
|
|
|
|
|
"advanced" configuration file related to the DNS library for configuration
|
|
|
|
|
|
parameters that would be beyond the capability of the resolv.conf file.
|
|
|
|
|
|
Specifically, it is intended to provide DNSSEC related configuration
|
2014-12-08 09:18:17 +01:00
|
|
|
|
parameters. By default, the path to this configuration file is /etc/dns.conf.
|
2014-12-05 11:12:05 +01:00
|
|
|
|
|
|
|
|
|
|
%package -n libirs-devel
|
|
|
|
|
|
Summary: Development files for IRS
|
|
|
|
|
|
Group: Development/Libraries/C and C++
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
Requires: libirs141 = %rpm_vers
|
|
|
|
|
|
|
|
|
|
|
|
%description -n libirs-devel
|
|
|
|
|
|
libirs provides an interface to parse the traditional resolv.conf file and an
|
|
|
|
|
|
"advanced" configuration file related to the DNS library for configuration
|
|
|
|
|
|
parameters that would be beyond the capability of the resolv.conf file. This
|
|
|
|
|
|
subpackage contains the header files needed for building programs with it.
|
|
|
|
|
|
|
2015-05-08 17:44:01 +02:00
|
|
|
|
%package -n libisc148
|
2014-12-08 09:18:17 +01:00
|
|
|
|
Summary: ISC shared library used by BIND
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
# Added on 2014-10-01. Does not really matter where it is put, we just need to
|
|
|
|
|
|
# flush the old name from the rpmdb. The libs will be automatically pulled in
|
|
|
|
|
|
# by way of rpm symbol requirements already.
|
|
|
|
|
|
Obsoletes: bind-libs = %version-%release
|
|
|
|
|
|
Provides: bind-libs < %version-%release
|
|
|
|
|
|
|
2015-05-08 17:44:01 +02:00
|
|
|
|
%description -n libisc148
|
2014-10-16 16:25:14 +02:00
|
|
|
|
This library contains miscellaneous utility function used by the BIND
|
|
|
|
|
|
server and utilities. It includes functions for assertion handling,
|
|
|
|
|
|
balanced binary (AVL) trees, bit masks comparison, event based
|
|
|
|
|
|
programs, heap-based priority queues, memory handling, and program
|
|
|
|
|
|
logging.
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%package -n libisccc140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Summary: Command Channel Library used by BIND
|
|
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%description -n libisccc140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
This library is used for communicating with BIND servers'
|
|
|
|
|
|
administrative command channel (port 953 by default).
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%package -n libisccfg140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Summary: Exported ISC configuration shared library
|
|
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%description -n libisccfg140
|
2015-10-05 09:46:26 +02:00
|
|
|
|
This BIND library contains the configuration file parser.
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%package -n liblwres141
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Summary: Lightweight Resolver API library
|
|
|
|
|
|
Group: System/Libraries
|
|
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%description -n liblwres141
|
2014-10-16 16:25:14 +02:00
|
|
|
|
The BIND 9 lightweight resolver library is a name service independent
|
|
|
|
|
|
stub resolver library. It provides hostname-to-address and
|
|
|
|
|
|
address-to-hostname lookup services to applications by transmitting
|
|
|
|
|
|
lookup requests to a resolver daemon, lwresd, running on the local
|
|
|
|
|
|
host. The resover daemon performs the lookup using the DNS or
|
|
|
|
|
|
possibly other name service protocols, and returns the results to the
|
|
|
|
|
|
application through the library. The library and resolver daemon
|
|
|
|
|
|
communicate using a UDP-based protocol.
|
|
|
|
|
|
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%package chrootenv
|
|
|
|
|
|
Summary: Chroot environment for BIND named and lwresd
|
|
|
|
|
|
Group: Productivity/Networking/DNS/Servers
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
2014-12-08 09:18:17 +01:00
|
|
|
|
Requires(pre): /usr/sbin/groupadd /usr/sbin/useradd
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%description chrootenv
|
|
|
|
|
|
This package contains all directories and files which are common to the
|
|
|
|
|
|
chroot environment of BIND named and lwresd. Most is part of the
|
|
|
|
|
|
structure below /var/lib/named.
|
|
|
|
|
|
|
|
|
|
|
|
%package devel
|
|
|
|
|
|
Summary: Development Libraries and Header Files of BIND
|
|
|
|
|
|
Group: Development/Libraries/C and C++
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
2014-12-05 11:12:05 +01:00
|
|
|
|
Requires: libbind9-140 = %version
|
- Update to version 9.10.2-P2
- An uninitialized value in validator.c could result in an assertion failure.
(CVE-2015-4620) [RT #39795]
- Update to version 9.10.2-P1
- Include client-ip rules when logging the number of RPZ rules of each type.
[RT #39670]
- Addressed further problems with reloading RPZ zones. [RT #39649]
- Addressed a regression introduced in change #4121. [RT #39611]
- The server could match a shorter prefix than what was available in
CLIENT-IP policy triggers, and so, an unexpected action could be taken.
This has been corrected. [RT #39481]
- On servers with one or more policy zones configured as slaves, if a policy
zone updated during regular operation (rather than at startup) using a full
zone reload, such as via AXFR, a bug could allow the RPZ summary data to
fall out of sync, potentially leading to an assertion failure in rpz.c when
further incremental updates were made to the zone, such as via IXFR.
[RT #39567]
- A bug in RPZ could cause the server to crash if policy zones were updated
while recursion was pending for RPZ processing of an active query.
[RT #39415]
- Fix a bug in RPZ that could cause some policy zones that did not
specifically require recursion to be treated as if they did; consequently,
setting qname-wait-recurse no; was sometimes ineffective. [RT #39229]
- Asynchronous zone loads were not handled correctly when the zone load was
already in progress; this could trigger a crash in zt.c. [RT #37573]
- Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't
result in a bug during operation. If the read failed, named could segfault.
[RT #38559]
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=172
2015-07-10 22:54:40 +02:00
|
|
|
|
Requires: libdns161 = %version
|
2014-12-05 11:12:05 +01:00
|
|
|
|
Requires: libirs141 = %version
|
2015-05-08 17:44:01 +02:00
|
|
|
|
Requires: libisc148 = %version
|
2014-12-05 11:12:05 +01:00
|
|
|
|
Requires: libisccc140 = %version
|
|
|
|
|
|
Requires: libisccfg140 = %version
|
|
|
|
|
|
Requires: liblwres141 = %version
|
2012-07-26 11:55:26 +02:00
|
|
|
|
Provides: bind8-devel
|
|
|
|
|
|
Provides: bind9-devel
|
2014-12-05 11:12:05 +01:00
|
|
|
|
Obsoletes: bind8-devel < %version
|
|
|
|
|
|
Obsoletes: bind9-devel < %version
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%description devel
|
|
|
|
|
|
This package contains the header files, libraries, and documentation
|
|
|
|
|
|
for building programs using the libraries of the Berkeley Internet Name
|
|
|
|
|
|
Domain (BIND) Domain Name System implementation of the Domain Name
|
|
|
|
|
|
System (DNS) protocols.
|
|
|
|
|
|
|
|
|
|
|
|
%package doc
|
|
|
|
|
|
Summary: BIND documentation
|
|
|
|
|
|
Group: Documentation/Other
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2010-01-07 12:54:38 +01:00
|
|
|
|
BuildArch: noarch
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%description doc
|
|
|
|
|
|
Documentation of the Berkeley Internet Name Domain (BIND) Domain Name
|
|
|
|
|
|
System implementation of the Domain Name System (DNS) protocols. This
|
|
|
|
|
|
includes also the BIND Administrator Reference Manual (ARM).
|
|
|
|
|
|
|
|
|
|
|
|
%package lwresd
|
|
|
|
|
|
Summary: Lightweight Resolver Daemon
|
|
|
|
|
|
Group: Productivity/Networking/DNS/Utilities
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
2007-03-02 09:16:36 +01:00
|
|
|
|
Requires: %{name}-chrootenv
|
2006-12-19 00:15:14 +01:00
|
|
|
|
Provides: dns_daemon
|
2014-12-08 09:18:17 +01:00
|
|
|
|
Requires(pre): /usr/sbin/groupadd /usr/sbin/useradd
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2010-12-16 15:32:05 +01:00
|
|
|
|
PreReq: sysvinit(network) sysvinit(syslog)
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%description lwresd
|
|
|
|
|
|
Bind-lwresd provides resolution services to local clients using a
|
|
|
|
|
|
combination of the lightweight resolver library liblwres and the
|
|
|
|
|
|
resolver daemon process lwresd running on the local host. These
|
|
|
|
|
|
communicate using a simple UDP-based protocol, the "lightweight
|
|
|
|
|
|
resolver protocol" that is distinct from and simpler than the full DNS
|
|
|
|
|
|
protocol.
|
|
|
|
|
|
|
|
|
|
|
|
%package utils
|
|
|
|
|
|
Summary: Utilities to query and test DNS
|
|
|
|
|
|
Group: Productivity/Networking/DNS/Utilities
|
2014-10-16 16:25:14 +02:00
|
|
|
|
Version: %rpm_vers
|
|
|
|
|
|
Release: 0
|
2012-07-26 11:55:26 +02:00
|
|
|
|
Provides: bind9-utils
|
|
|
|
|
|
Provides: bindutil
|
|
|
|
|
|
Provides: dns_utils
|
2014-12-05 11:12:05 +01:00
|
|
|
|
Obsoletes: bind9-utils < %version
|
|
|
|
|
|
Obsoletes: bindutil < %version
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%description utils
|
2015-10-05 09:46:26 +02:00
|
|
|
|
This package includes the utilities "host", "dig", and "nslookup" used to
|
2006-12-19 00:15:14 +01:00
|
|
|
|
test and query the Domain Name System (DNS). The Berkeley Internet
|
|
|
|
|
|
Name Domain (BIND) DNS server is found in the package named bind.
|
|
|
|
|
|
|
|
|
|
|
|
%prep
|
2015-10-05 09:46:26 +02:00
|
|
|
|
%setup -q -n %{pkg_name}-%{pkg_vers} -a1
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%patch -p1
|
|
|
|
|
|
%patch1 -p1
|
2011-02-24 11:17:20 +01:00
|
|
|
|
%patch4 -p0
|
2015-05-08 16:24:45 +02:00
|
|
|
|
%patch5 -p1
|
2007-03-02 09:16:36 +01:00
|
|
|
|
#%patch50
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%patch51
|
|
|
|
|
|
%patch52
|
2014-01-24 11:15:48 +01:00
|
|
|
|
%patch53
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%patch101 -p1
|
2015-02-11 13:29:20 +01:00
|
|
|
|
%patch102 -p1
|
2006-12-19 00:15:14 +01:00
|
|
|
|
# modify settings of some files regarding to OS version and vendor
|
|
|
|
|
|
function replaceStrings()
|
|
|
|
|
|
{
|
|
|
|
|
|
file="$1"
|
|
|
|
|
|
sed -e "s@__NSD__@/lib@g" \
|
2007-03-02 09:16:36 +01:00
|
|
|
|
-e "s@__BIND_PACKAGE_NAME__@%{pkg_name}@g" \
|
2006-12-19 00:15:14 +01:00
|
|
|
|
-e "s@__VENDOR__@%{VENDOR}@g" \
|
2014-12-08 09:18:17 +01:00
|
|
|
|
-e "s@___lib__@%{_lib}@g" \
|
|
|
|
|
|
-i "${file}"
|
2006-12-19 00:15:14 +01:00
|
|
|
|
}
|
|
|
|
|
|
pushd vendor-files
|
|
|
|
|
|
for file in docu/README tools/createNamedConfInclude config/{README,named.conf} init/{named,lwresd} sysconfig/{named-common,named-named,syslog-named}; do
|
|
|
|
|
|
replaceStrings ${file}
|
|
|
|
|
|
done
|
|
|
|
|
|
popd
|
2014-01-24 11:15:48 +01:00
|
|
|
|
cp contrib/sdb/ldap/ldapdb.c bin/named/
|
|
|
|
|
|
cp contrib/sdb/ldap/ldapdb.h bin/named/include/
|
2006-12-19 00:15:14 +01:00
|
|
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
|
%{?suse_update_config:%{suse_update_config -f}}
|
2014-12-05 11:12:05 +01:00
|
|
|
|
# gssapi/gssapi_krb5.h isn't found if aclocal.m4 gets modified this way
|
|
|
|
|
|
#cat /usr/share/aclocal/libtool.m4 >> aclocal.m4
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%{__libtoolize} -f
|
|
|
|
|
|
%{__aclocal}
|
|
|
|
|
|
%{__autoconf}
|
2009-02-06 20:40:10 +01:00
|
|
|
|
#pushd lib/bind
|
|
|
|
|
|
#%{?suse_update_config:%{suse_update_config -f}}
|
|
|
|
|
|
#cat /usr/share/aclocal/libtool.m4 >> aclocal.m4
|
|
|
|
|
|
#%{__libtoolize} -f
|
|
|
|
|
|
#%{__aclocal}
|
|
|
|
|
|
#%{__autoconf}
|
|
|
|
|
|
#popd
|
2006-12-19 00:15:14 +01:00
|
|
|
|
#pushd contrib/idn/idnkit-1.0-src
|
|
|
|
|
|
#%{?suse_update_config:%{suse_update_config -f}}
|
|
|
|
|
|
#cat /usr/share/aclocal/libtool.m4 >> aclocal.m4
|
|
|
|
|
|
#%{__libtoolize} -f
|
|
|
|
|
|
#%{__aclocal}
|
|
|
|
|
|
#%{__autoconf}
|
|
|
|
|
|
#popd
|
2014-06-01 12:06:10 +02:00
|
|
|
|
export CFLAGS="$RPM_OPT_FLAGS -DNO_VERSION_DATE -fno-strict-aliasing $(getconf LFS_CFLAGS)" LDFLAGS="-L%{_libdir}"
|
2007-03-02 09:16:36 +01:00
|
|
|
|
#export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing -DLDAP_DEPRECATED" LDFLAGS="-L%{_libdir}"
|
2006-12-19 00:15:14 +01:00
|
|
|
|
#export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing -fpie" LDFLAGS="-L%{_libdir} -pie"
|
|
|
|
|
|
CONFIGURE_OPTIONS="\
|
|
|
|
|
|
--prefix=%{_prefix} \
|
|
|
|
|
|
--bindir=%{_bindir} \
|
|
|
|
|
|
--sbindir=%{_sbindir} \
|
|
|
|
|
|
--sysconfdir=%{_sysconfdir} \
|
|
|
|
|
|
--localstatedir=%{_var} \
|
|
|
|
|
|
--libdir=%{_libdir} \
|
2015-05-08 16:24:45 +02:00
|
|
|
|
--enable-exportlib \
|
|
|
|
|
|
--with-export-libdir=%{_libdir} \
|
|
|
|
|
|
--with-export-includedir=%{_includedir} \
|
2006-12-19 00:15:14 +01:00
|
|
|
|
--includedir=%{_includedir}/bind \
|
|
|
|
|
|
--mandir=%{_mandir} \
|
|
|
|
|
|
--infodir=%{_infodir} \
|
2014-12-05 11:12:05 +01:00
|
|
|
|
--disable-static \
|
2006-12-19 00:15:14 +01:00
|
|
|
|
--with-openssl \
|
|
|
|
|
|
--enable-threads \
|
|
|
|
|
|
--with-libtool \
|
|
|
|
|
|
--enable-runidn \
|
2009-07-03 16:59:08 +02:00
|
|
|
|
--with-libxml2 \
|
2014-01-24 11:15:48 +01:00
|
|
|
|
--with-dlz-mysql \
|
2014-12-05 11:12:05 +01:00
|
|
|
|
--with-dlz-ldap \
|
|
|
|
|
|
--enable-rrl
|
2006-12-19 00:15:14 +01:00
|
|
|
|
"
|
2013-05-08 15:45:12 +02:00
|
|
|
|
cp -f -p config.guess config.sub contrib/idn/idnkit-1.0-src/
|
2006-12-19 00:15:14 +01:00
|
|
|
|
./configure ${CONFIGURE_OPTIONS}
|
2013-08-06 15:06:41 +02:00
|
|
|
|
# disable rpath
|
|
|
|
|
|
sed -i '
|
|
|
|
|
|
s|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g
|
|
|
|
|
|
s|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g
|
|
|
|
|
|
' libtool
|
2010-04-13 21:20:44 +02:00
|
|
|
|
%{__make} %{?_smp_mflags}
|
2006-12-19 00:15:14 +01:00
|
|
|
|
pushd contrib/idn/idnkit-1.0-src
|
|
|
|
|
|
./configure ${CONFIGURE_OPTIONS}
|
2013-08-06 15:06:41 +02:00
|
|
|
|
# disable rpath
|
|
|
|
|
|
sed -i '
|
|
|
|
|
|
s|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g
|
|
|
|
|
|
s|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g
|
|
|
|
|
|
' libtool
|
2011-10-02 02:09:30 +02:00
|
|
|
|
%{__make} %{?_smp_mflags}
|
2006-12-19 00:15:14 +01:00
|
|
|
|
popd
|
|
|
|
|
|
# running BIND system tests
|
|
|
|
|
|
# FIXME: enable make test if every test checks for a free port first; fixed port
|
|
|
|
|
|
# 5300 might lead to test failures if port is already in use.
|
|
|
|
|
|
#pushd bin/tests/system/
|
|
|
|
|
|
#./ifconfig.sh up
|
|
|
|
|
|
#%{__make} test
|
|
|
|
|
|
#./ifconfig.sh down
|
|
|
|
|
|
#popd
|
|
|
|
|
|
# replace __NSD__ in some files by a sub directory to set the full path to
|
|
|
|
|
|
# named's root directory
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
|
%{GROUPADD_NAMED}
|
|
|
|
|
|
%{USERADD_NAMED}
|
|
|
|
|
|
mkdir -p \
|
|
|
|
|
|
${RPM_BUILD_ROOT}/%{_sysconfdir}/init.d \
|
|
|
|
|
|
${RPM_BUILD_ROOT}/%{_sysconfdir}/named.d \
|
|
|
|
|
|
${RPM_BUILD_ROOT}/%{_sysconfdir}/openldap/schema \
|
2014-12-05 11:12:05 +01:00
|
|
|
|
${RPM_BUILD_ROOT}/%{_sysconfdir}/slp.reg.d \
|
2006-12-19 00:15:14 +01:00
|
|
|
|
${RPM_BUILD_ROOT}/usr/{bin,%{_lib},sbin,include} \
|
|
|
|
|
|
${RPM_BUILD_ROOT}/%{_datadir}/bind \
|
|
|
|
|
|
${RPM_BUILD_ROOT}/%{_datadir}/susehelp/meta/Administration/System \
|
|
|
|
|
|
${RPM_BUILD_ROOT}/%{_defaultdocdir}/bind \
|
2014-12-08 09:18:17 +01:00
|
|
|
|
${RPM_BUILD_ROOT}/var/lib/named/{etc/named.d,dev,dyn,log,master,slave,var/{lib,run/{lwresd,named}}} \
|
2006-12-19 00:15:14 +01:00
|
|
|
|
${RPM_BUILD_ROOT}%{_mandir}/{man1,man3,man5,man8} \
|
|
|
|
|
|
${RPM_BUILD_ROOT}/var/adm/fillup-templates \
|
2014-05-08 11:51:15 +02:00
|
|
|
|
${RPM_BUILD_ROOT}/%{_rundir} \
|
2015-05-08 16:24:45 +02:00
|
|
|
|
${RPM_BUILD_ROOT}/%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services \
|
2015-06-18 14:30:16 +02:00
|
|
|
|
${RPM_BUILD_ROOT}%{_includedir}/bind/dns \
|
|
|
|
|
|
${RPM_BUILD_ROOT}%{_libexecdir}/bind
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%{__make} DESTDIR=${RPM_BUILD_ROOT} install
|
|
|
|
|
|
pushd contrib/idn/idnkit-1.0-src
|
|
|
|
|
|
%{__make} DESTDIR=${RPM_BUILD_ROOT} install
|
2015-01-11 19:19:25 +01:00
|
|
|
|
popd
|
2015-06-18 14:30:16 +02:00
|
|
|
|
# install interface header file for developing Dynamic DB plugin
|
|
|
|
|
|
install -m 0644 lib/dns/include/dns/dynamic_db.h ${RPM_BUILD_ROOT}%{_includedir}/bind/dns/
|
|
|
|
|
|
# install errno2result.h, some dynamic DB plugins could use it.
|
|
|
|
|
|
install -m 0755 -d ${RPM_BUILD_ROOT}%{_includedir}/isc/
|
|
|
|
|
|
install -m 0644 lib/isc/unix/errno2result.h ${RPM_BUILD_ROOT}%{_includedir}/isc/
|
|
|
|
|
|
|
2007-03-29 15:06:39 +02:00
|
|
|
|
# remove useless .la files
|
|
|
|
|
|
rm -f ${RPM_BUILD_ROOT}/%{_lib}/libidnkit.la
|
|
|
|
|
|
rm -f ${RPM_BUILD_ROOT}/%{_lib}/libidnkitlite.la
|
2008-09-05 19:59:29 +02:00
|
|
|
|
rm -f ${RPM_BUILD_ROOT}/%{_libdir}/lib*.{la,a}
|
2006-12-19 00:15:14 +01:00
|
|
|
|
mv vendor-files/config/named.conf ${RPM_BUILD_ROOT}/%{_sysconfdir}
|
|
|
|
|
|
mv vendor-files/config/bind.reg ${RPM_BUILD_ROOT}/%{_sysconfdir}/slp.reg.d
|
|
|
|
|
|
mv vendor-files/config/rndc-access.conf ${RPM_BUILD_ROOT}/%{_sysconfdir}/named.d
|
2015-05-08 20:11:21 +02:00
|
|
|
|
for file in lwresd.conf named.conf.include rndc.key; do
|
2006-12-19 00:15:14 +01:00
|
|
|
|
touch ${RPM_BUILD_ROOT}/%{_sysconfdir}/${file}
|
|
|
|
|
|
done
|
|
|
|
|
|
for file in lwresd named; do
|
|
|
|
|
|
install -m 0754 vendor-files/init/${file} ${RPM_BUILD_ROOT}/etc/init.d/${file}
|
|
|
|
|
|
ln -sf /etc/init.d/${file} ${RPM_BUILD_ROOT}/usr/sbin/rc${file}
|
|
|
|
|
|
done
|
|
|
|
|
|
install -m 0644 ${RPM_SOURCE_DIR}/named.root ${RPM_BUILD_ROOT}/var/lib/named/root.hint
|
|
|
|
|
|
mv vendor-files/config/{127.0.0,localhost}.zone ${RPM_BUILD_ROOT}/var/lib/named
|
|
|
|
|
|
install -m 0754 vendor-files/tools/createNamedConfInclude ${RPM_BUILD_ROOT}/%{_datadir}/bind
|
|
|
|
|
|
install -m 0755 vendor-files/tools/bind.genDDNSkey ${RPM_BUILD_ROOT}/%{_bindir}/genDDNSkey
|
|
|
|
|
|
cp -a vendor-files/docu/BIND.desktop ${RPM_BUILD_ROOT}/%{_datadir}/susehelp/meta/Administration/System
|
|
|
|
|
|
cp -p ${RPM_SOURCE_DIR}/dnszone-schema.txt ${RPM_BUILD_ROOT}/%{_sysconfdir}/openldap/schema/dnszone.schema
|
2010-04-13 21:20:44 +02:00
|
|
|
|
cp -p "%{S:60}" "${RPM_BUILD_ROOT}/%{_sysconfdir}/openldap/schema/dlz.schema"
|
2006-12-19 00:15:14 +01:00
|
|
|
|
install -m 0754 vendor-files/tools/ldapdump ${RPM_BUILD_ROOT}/%{_datadir}/bind
|
|
|
|
|
|
find ${RPM_BUILD_ROOT}/%{_libdir} -type f -name '*.so*' -print0 | xargs -0 chmod 0755
|
|
|
|
|
|
touch ${RPM_BUILD_ROOT}/var/lib/named/etc/{localtime,named.conf.include,named.d/rndc.access.conf}
|
|
|
|
|
|
touch ${RPM_BUILD_ROOT}/var/lib/named/dev/log
|
|
|
|
|
|
ln -s ../.. ${RPM_BUILD_ROOT}/var/lib/named/var/lib/named
|
|
|
|
|
|
ln -s ../log ${RPM_BUILD_ROOT}/var/lib/named/var
|
2014-05-08 11:51:15 +02:00
|
|
|
|
%if "%_rundir" == "/run"
|
2014-12-08 09:18:17 +01:00
|
|
|
|
ln -s ../var/lib/named/var/run/lwresd ${RPM_BUILD_ROOT}/run
|
2014-05-08 11:51:15 +02:00
|
|
|
|
ln -s ../var/lib/named/var/run/named ${RPM_BUILD_ROOT}/run
|
|
|
|
|
|
%else
|
2014-12-08 09:18:17 +01:00
|
|
|
|
ln -s ../lib/named/var/run/lwresd ${RPM_BUILD_ROOT}/var/run
|
2006-12-19 00:15:14 +01:00
|
|
|
|
ln -s ../lib/named/var/run/named ${RPM_BUILD_ROOT}/var/run
|
2014-05-08 11:51:15 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
for file in named-common named-named syslog-named; do
|
|
|
|
|
|
install -m 0644 vendor-files/sysconfig/${file} ${RPM_BUILD_ROOT}/var/adm/fillup-templates/sysconfig.${file}
|
|
|
|
|
|
done
|
2007-03-06 09:01:35 +01:00
|
|
|
|
install -m 644 vendor-files/sysconfig/SuSEFirewall.named %{buildroot}/%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/bind
|
2006-12-19 00:15:14 +01:00
|
|
|
|
# Cleanup doc
|
|
|
|
|
|
rm doc/misc/Makefile*
|
|
|
|
|
|
# Remove samples
|
|
|
|
|
|
rm ${RPM_BUILD_ROOT}/etc/*.sample
|
|
|
|
|
|
find doc/arm -type f ! -name '*.html' -print0 | xargs -0 rm -f
|
|
|
|
|
|
# Create doc as we want it in bind and not bind-doc
|
|
|
|
|
|
cp -a vendor-files/docu/README ${RPM_BUILD_ROOT}/%{_defaultdocdir}/bind/README.%{VENDOR}
|
|
|
|
|
|
cp -a vendor-files/docu/dnszonehowto.html contrib/sdb/ldap/
|
|
|
|
|
|
mkdir -p vendor-files/config/ISC-examples
|
|
|
|
|
|
cp -a bin/tests/*.conf* vendor-files/config/ISC-examples
|
2014-01-24 11:15:48 +01:00
|
|
|
|
for file in CHANGES COPYRIGHT README FAQ version contrib doc/{arm,misc} vendor-files/config contrib/sdb/ldap/INSTALL.ldap; do
|
2006-12-19 00:15:14 +01:00
|
|
|
|
basename=$( basename ${file})
|
|
|
|
|
|
cp -a ${file} ${RPM_BUILD_ROOT}/%{_defaultdocdir}/bind/${basename}
|
|
|
|
|
|
echo "%doc %{_defaultdocdir}/bind/${basename}" >>filelist-bind-doc
|
|
|
|
|
|
done
|
|
|
|
|
|
pushd ${RPM_BUILD_ROOT}%{_defaultdocdir}/bind/contrib/idn/idnkit-1.0-src
|
|
|
|
|
|
%{__make} distclean
|
|
|
|
|
|
rm -rf include lib man map patch tools win wsock Makefile.in acconfig.h aclocal.m4 config.* configure* install-sh ltconfig make.wnt mkinstalldirs
|
|
|
|
|
|
popd
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
2015-05-08 16:24:45 +02:00
|
|
|
|
install -m 0644 bind.keys ${RPM_BUILD_ROOT}/var/lib/named/named.root.key
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%pre
|
|
|
|
|
|
# Are we updating from a package named bind9?
|
|
|
|
|
|
if test -d usr/share/doc/packages/bind9 && sbin/chkconfig -c named; then
|
|
|
|
|
|
NAMED_ACTIVE_FILE="var/adm/named.was.active"
|
|
|
|
|
|
test -f ${NAMED_ACTIVE_FILE} && old ${NAMED_ACTIVE_FILE}
|
|
|
|
|
|
ACTIVE_DIR=$( dirname ${NAMED_ACTIVE_FILE})
|
|
|
|
|
|
test -d ${ACTIVE_DIR} || mkdir -p ${ACTIVE_DIR}
|
|
|
|
|
|
touch ${NAMED_ACTIVE_FILE}
|
|
|
|
|
|
fi
|
|
|
|
|
|
%{GROUPADD_NAMED}
|
|
|
|
|
|
%{USERADD_NAMED}
|
|
|
|
|
|
# Might be an update.
|
|
|
|
|
|
%{USERMOD_NAMED}
|
|
|
|
|
|
# var/run/named is now a sym link pointing to the chroot jail
|
|
|
|
|
|
test -L var/run/named || rm -rf var/run/named
|
|
|
|
|
|
test -f etc/sysconfig/named && \
|
|
|
|
|
|
. etc/sysconfig/named
|
|
|
|
|
|
# Store NAMED_RUN_CHROOTED setting to a temp file.
|
|
|
|
|
|
TEMP_SYSCONFIG_FILE="var/adm/named-chroot"
|
|
|
|
|
|
TEMP_DIR=$( dirname ${TEMP_SYSCONFIG_FILE})
|
|
|
|
|
|
test -d ${TEMP_DIR} || \
|
|
|
|
|
|
mkdir -p ${TEMP_DIR}
|
|
|
|
|
|
test -e ${TEMP_SYSCONFIG_FILE} && \
|
|
|
|
|
|
old ${TEMP_SYSCONFIG_FILE}
|
|
|
|
|
|
echo "NAMED_RUN_CHROOTED=\"${NAMED_RUN_CHROOTED}\"" >${TEMP_SYSCONFIG_FILE}
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-08 16:06:56 +02:00
|
|
|
|
%service_add_pre named
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%preun
|
|
|
|
|
|
%stop_on_removal named
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-08 16:06:56 +02:00
|
|
|
|
%service_del_preun named
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%post
|
|
|
|
|
|
%{fillup_and_insserv -nf named}
|
|
|
|
|
|
%{fillup_only -nsa named named}
|
|
|
|
|
|
if [ ! -f etc/rndc.key ]; then
|
|
|
|
|
|
usr/sbin/rndc-confgen -a -b 512 -r dev/urandom
|
|
|
|
|
|
chmod 0640 etc/rndc.key
|
|
|
|
|
|
chown root:named etc/rndc.key
|
|
|
|
|
|
fi
|
|
|
|
|
|
TEMP_SYSCONFIG_FILE="var/adm/named-chroot"
|
|
|
|
|
|
# Are we in update mode?
|
|
|
|
|
|
if [ ${FIRST_ARG:-0} -gt 1 ]; then
|
|
|
|
|
|
# Is named.conf an old, /var/named configuration?
|
|
|
|
|
|
if [ -f etc/named.conf ] && grep -qi '^[[:space:]]*directory[[:space:]]*"/var/named"[[:space:]]*;' etc/named.conf; then
|
|
|
|
|
|
test -d var/log || \
|
|
|
|
|
|
mkdir -p var/log
|
|
|
|
|
|
CONVLOG="/var/log/named-move-to-var-lib"
|
|
|
|
|
|
# move zone files to new location
|
|
|
|
|
|
echo "Moving zone files to new location /var/lib/named" | tee ${CONVLOG}
|
|
|
|
|
|
IFS="
|
|
|
|
|
|
"
|
|
|
|
|
|
for dir in var/named var/named/slave; do
|
|
|
|
|
|
for source in $( find ${dir} -maxdepth 1 ); do
|
|
|
|
|
|
case "${source#var/named/}" in
|
|
|
|
|
|
localhost.zone|127.0.0.zone|root.hint|slave|var/named) continue ;;
|
|
|
|
|
|
esac
|
|
|
|
|
|
sourcedir=$( echo "${source%/*}")
|
|
|
|
|
|
destdir=$( echo "${sourcedir#var/named}")
|
|
|
|
|
|
if [ -e "var/lib/named/${destdir}/${source##*/}" ]; then
|
|
|
|
|
|
echo "Warning: /var/lib/named${destdir}/${source##*/} already exists; skipped." | tee -a ${CONVLOG}
|
|
|
|
|
|
else
|
|
|
|
|
|
echo "${source#var/named/}" | tee -a ${CONVLOG}
|
|
|
|
|
|
mv "${source}" "var/lib/named/${destdir}"
|
|
|
|
|
|
fi
|
|
|
|
|
|
done
|
|
|
|
|
|
done
|
|
|
|
|
|
# updating named.conf
|
|
|
|
|
|
echo -n "Backup old /etc/named.conf to " | tee -a ${CONVLOG}
|
|
|
|
|
|
oldconfig=$( old etc/named.conf) 2>/dev/null
|
|
|
|
|
|
oldconfig=${oldconfig##*/}
|
2014-12-08 09:18:17 +01:00
|
|
|
|
echo -n "/etc/${oldconfig}. Conversion " | tee -a ${CONVLOG}
|
2006-12-19 00:15:14 +01:00
|
|
|
|
sed -e "s@\"/var/named\"@\"/var/lib/named\"@" "etc/${oldconfig}" > etc/named.conf 2>/dev/null
|
|
|
|
|
|
conv_rc=$?
|
|
|
|
|
|
if [ ${conv_rc} -eq 0 ]; then
|
|
|
|
|
|
echo "succeded." | tee -a ${CONVLOG}
|
|
|
|
|
|
chmod --reference="etc/${oldconfig}" etc/named.conf
|
|
|
|
|
|
chown --reference="etc/${oldconfig}" etc/named.conf
|
|
|
|
|
|
else
|
|
|
|
|
|
echo "failed." | tee -a ${CONVLOG}
|
|
|
|
|
|
fi
|
|
|
|
|
|
if [ ${conv_rc} -eq 0 ]; then
|
|
|
|
|
|
cat << EOF >>${CONVLOG}
|
|
|
|
|
|
Result: named.conf conversion succeded. For details check the following
|
|
|
|
|
|
diff of the the old and new configuration.
|
|
|
|
|
|
Ergebnis: Die named.conf-Konvertierung war erfolgreich. Details finden
|
|
|
|
|
|
Sie in der nachfolgenden Differenz der alten und neuen Konfiguration.
|
|
|
|
|
|
EOF
|
|
|
|
|
|
diff -u etc/${oldconfig} etc/named.conf >>${CONVLOG}
|
|
|
|
|
|
else
|
|
|
|
|
|
cat << EOF >>${CONVLOG}
|
|
|
|
|
|
Result: Conversion failed. You must check your /etc/named.conf
|
|
|
|
|
|
Ergebnis: Die Konvertierung ist fehlgeschlagen. Sie müssen Ihre
|
|
|
|
|
|
/etc/named.conf überprüfen.
|
|
|
|
|
|
EOF
|
|
|
|
|
|
fi
|
|
|
|
|
|
else
|
|
|
|
|
|
rm -f var/lib/update-messages/bind.1
|
|
|
|
|
|
fi # End of 'Is named.conf an old, /var/named configuration?'.
|
|
|
|
|
|
# Add include files to NAMED_CONF_INCLUDE_FILES if we have already a include
|
|
|
|
|
|
# file (SL Standard Server 8) and NAMED_RUN_CHROOTED from the
|
|
|
|
|
|
# TEMP_SYSCONFIG_FILE is empty.
|
|
|
|
|
|
if [ -f ${TEMP_SYSCONFIG_FILE} ]; then
|
|
|
|
|
|
. ${TEMP_SYSCONFIG_FILE}
|
|
|
|
|
|
fi
|
|
|
|
|
|
if [ -s etc/named.conf.include -a -z "${NAMED_RUN_CHROOTED}" ]; then
|
|
|
|
|
|
test -f etc/sysconfig/named && . etc/sysconfig/named
|
|
|
|
|
|
if [ "${NAMED_INITIALIZE_SCRIPTS}" = "createNamedConfInclude" -a \
|
|
|
|
|
|
-z "${NAMED_CONF_INCLUDE_FILES}" ]; then
|
|
|
|
|
|
# Get the included files from an existing meta include file.
|
|
|
|
|
|
INCLUDE_LINES=$( grep -e '^[[:space:]]*include' etc/named.conf.include | cut -f 2 -d '"')
|
|
|
|
|
|
if [ "${INCLUDE_LINES}" -a -z "${NAMED_CONF_INCLUDE_FILES}" ]; then
|
|
|
|
|
|
for file in ${INCLUDE_LINES}; do
|
|
|
|
|
|
# don't add a file a second time
|
|
|
|
|
|
echo "${INCLUDE_FILES}" | grep -qe "\<${file#/etc/named.d/}\>" && continue
|
|
|
|
|
|
# don't add the meta include file as the init script copy it anyway
|
|
|
|
|
|
# to the chroot jail
|
|
|
|
|
|
test "${file}" = "/etc/named.conf.include" && continue
|
|
|
|
|
|
test "${INCLUDE_FILES}" && INCLUDE_FILES="${INCLUDE_FILES} "
|
|
|
|
|
|
# strip off any leading /etc/named.d/ as the init script takes care
|
|
|
|
|
|
# of relative file names
|
|
|
|
|
|
INCLUDE_FILES="${INCLUDE_FILES}${file#/etc/named.d/}"
|
|
|
|
|
|
done
|
|
|
|
|
|
TMPFILE=$( mktemp /var/tmp/named.sysconfig.XXXXXX)
|
|
|
|
|
|
if [ $? -ne 0 ]; then
|
2014-12-08 09:18:17 +01:00
|
|
|
|
echo "Can't create temp file. Please add your included files from /etc/named.conf to"
|
|
|
|
|
|
echo "NAMED_CONF_INCLUDE_FILES of /etc/sysconfig/named manually."
|
2006-12-19 00:15:14 +01:00
|
|
|
|
return
|
|
|
|
|
|
fi
|
|
|
|
|
|
chmod --reference=etc/sysconfig/named ${TMPFILE}
|
|
|
|
|
|
if sed "s+^NAMED_CONF_INCLUDE_FILES.*$+NAMED_CONF_INCLUDE_FILES=\"${INCLUDE_FILES}\"+" etc/sysconfig/named > "${TMPFILE}"; then
|
|
|
|
|
|
mv "${TMPFILE}" etc/sysconfig/named
|
|
|
|
|
|
else
|
|
|
|
|
|
echo "Can't set NAMED_CONF_INCLUDE_FILES of /etc/sysconfig/named to \"${INCLUDE_FILES}\"."
|
|
|
|
|
|
fi
|
|
|
|
|
|
fi
|
|
|
|
|
|
fi
|
|
|
|
|
|
else
|
|
|
|
|
|
rm -f touch var/lib/update-messages/bind.3
|
|
|
|
|
|
fi # End of 'Add include files to NAMED_CONF_INCLUDE_FILES'
|
|
|
|
|
|
fi # End of 'Are we in update mode?'
|
|
|
|
|
|
# Remove TEMP_SYSCONFIG_FILE in any case.
|
|
|
|
|
|
rm -f ${TEMP_SYSCONFIG_FILE}
|
|
|
|
|
|
NAMED_ACTIVE_FILE="var/adm/named.was.active"
|
|
|
|
|
|
if [ -f ${NAMED_ACTIVE_FILE} ]; then
|
|
|
|
|
|
sbin/insserv named
|
|
|
|
|
|
test ! -s ${NAMED_ACTIVE_FILE} && rm -f ${NAMED_ACTIVE_FILE}
|
|
|
|
|
|
fi
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-08 16:06:56 +02:00
|
|
|
|
%service_add_post named
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%postun
|
|
|
|
|
|
%restart_on_update named
|
|
|
|
|
|
%insserv_cleanup
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-08 16:06:56 +02:00
|
|
|
|
%service_del_postun named
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%post -n libbind9-140 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libbind9-140 -p /sbin/ldconfig
|
- Update to version 9.10.2-P2
- An uninitialized value in validator.c could result in an assertion failure.
(CVE-2015-4620) [RT #39795]
- Update to version 9.10.2-P1
- Include client-ip rules when logging the number of RPZ rules of each type.
[RT #39670]
- Addressed further problems with reloading RPZ zones. [RT #39649]
- Addressed a regression introduced in change #4121. [RT #39611]
- The server could match a shorter prefix than what was available in
CLIENT-IP policy triggers, and so, an unexpected action could be taken.
This has been corrected. [RT #39481]
- On servers with one or more policy zones configured as slaves, if a policy
zone updated during regular operation (rather than at startup) using a full
zone reload, such as via AXFR, a bug could allow the RPZ summary data to
fall out of sync, potentially leading to an assertion failure in rpz.c when
further incremental updates were made to the zone, such as via IXFR.
[RT #39567]
- A bug in RPZ could cause the server to crash if policy zones were updated
while recursion was pending for RPZ processing of an active query.
[RT #39415]
- Fix a bug in RPZ that could cause some policy zones that did not
specifically require recursion to be treated as if they did; consequently,
setting qname-wait-recurse no; was sometimes ineffective. [RT #39229]
- Asynchronous zone loads were not handled correctly when the zone load was
already in progress; this could trigger a crash in zt.c. [RT #37573]
- Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't
result in a bug during operation. If the read failed, named could segfault.
[RT #38559]
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=172
2015-07-10 22:54:40 +02:00
|
|
|
|
%post -n libdns161 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libdns161 -p /sbin/ldconfig
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%post -n libidnkit1 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libidnkit1 -p /sbin/ldconfig
|
|
|
|
|
|
%post -n libidnkitlite1 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libidnkitlite1 -p /sbin/ldconfig
|
|
|
|
|
|
%post -n libidnkitres1 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libidnkitres1 -p /sbin/ldconfig
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%post -n libirs141 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libirs141 -p /sbin/ldconfig
|
2015-05-08 17:44:01 +02:00
|
|
|
|
%post -n libisc148 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libisc148 -p /sbin/ldconfig
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%post -n libisccc140 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libisccc140 -p /sbin/ldconfig
|
|
|
|
|
|
%post -n libisccfg140 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n libisccfg140 -p /sbin/ldconfig
|
|
|
|
|
|
%post -n liblwres141 -p /sbin/ldconfig
|
|
|
|
|
|
%postun -n liblwres141 -p /sbin/ldconfig
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%pre chrootenv
|
|
|
|
|
|
%{GROUPADD_NAMED}
|
|
|
|
|
|
%{USERADD_NAMED}
|
|
|
|
|
|
|
|
|
|
|
|
%post chrootenv
|
|
|
|
|
|
%{fillup_only -nsa named common}
|
|
|
|
|
|
%{fillup_only -nsa syslog named}
|
|
|
|
|
|
|
|
|
|
|
|
%pre lwresd
|
|
|
|
|
|
%{GROUPADD_NAMED}
|
|
|
|
|
|
%{USERADD_NAMED}
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-08 16:06:56 +02:00
|
|
|
|
%service_add_pre lwresd
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%post lwresd
|
|
|
|
|
|
# Create a key if usr/sbin/rndc-confgen is installed.
|
|
|
|
|
|
if [ -x usr/sbin/rndc-confgen -a ! -f etc/rndc.key ]; then
|
|
|
|
|
|
usr/sbin/rndc-confgen -a -b 512 -r dev/urandom
|
|
|
|
|
|
chmod 0640 etc/rndc.key
|
|
|
|
|
|
chown root:named etc/rndc.key
|
|
|
|
|
|
fi
|
|
|
|
|
|
# delete an emtpy lwresd.conf file
|
|
|
|
|
|
if [ ! -s etc/lwresd.conf ]; then
|
|
|
|
|
|
rm -f etc/lwresd.conf
|
|
|
|
|
|
fi
|
|
|
|
|
|
if [ $1 -le 1 ]; then
|
|
|
|
|
|
%{fillup_and_insserv -fy lwresd}
|
|
|
|
|
|
fi;
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-08 16:06:56 +02:00
|
|
|
|
%service_add_post lwresd
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%preun lwresd
|
|
|
|
|
|
%stop_on_removal lwresd
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-12 07:49:00 +02:00
|
|
|
|
%service_del_preun lwresd
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%postun lwresd
|
|
|
|
|
|
%restart_on_update lwresd
|
|
|
|
|
|
%insserv_cleanup
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-09-12 07:49:00 +02:00
|
|
|
|
%service_del_postun lwresd
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%post utils
|
2010-05-03 21:15:33 +02:00
|
|
|
|
/sbin/ldconfig
|
2006-12-19 00:15:14 +01:00
|
|
|
|
# Create a key if lwresd is installed.
|
|
|
|
|
|
if [ -x usr/sbin/lwresd -a ! -f etc/rndc.key ]; then
|
|
|
|
|
|
usr/sbin/rndc-confgen -a -b 512 -r dev/urandom
|
|
|
|
|
|
chmod 0640 etc/rndc.key
|
|
|
|
|
|
chown root:named etc/rndc.key
|
|
|
|
|
|
fi
|
|
|
|
|
|
# ---------------------------------------------------------------------------
|
|
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%attr(0644,root,named) %config(noreplace) /%{_sysconfdir}/named.conf
|
2007-03-30 16:26:57 +02:00
|
|
|
|
%dir %{_sysconfdir}/slp.reg.d
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%attr(0644,root,root) /%{_sysconfdir}/slp.reg.d/bind.reg
|
|
|
|
|
|
%attr(0644,root,named) %ghost /%{_sysconfdir}/named.conf.include
|
|
|
|
|
|
%attr(0640,root,named) %ghost %config(noreplace) /%{_sysconfdir}/rndc.key
|
|
|
|
|
|
%config /%{_sysconfdir}/init.d/named
|
2014-12-08 09:18:17 +01:00
|
|
|
|
%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/bind
|
2014-08-01 13:43:42 +02:00
|
|
|
|
%{_bindir}/bind9-config
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%{_sbindir}/rcnamed
|
|
|
|
|
|
%{_sbindir}/named
|
|
|
|
|
|
%{_sbindir}/named-checkconf
|
|
|
|
|
|
%{_sbindir}/named-checkzone
|
2007-03-02 09:16:36 +01:00
|
|
|
|
%{_sbindir}/named-compilezone
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%{_sbindir}/named-rrchecker
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man1/bind9-config.1.gz
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%{_mandir}/man1/named-rrchecker.1.gz
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man5/named.conf.5.gz
|
|
|
|
|
|
%{_mandir}/man8/named-checkconf.8.gz
|
|
|
|
|
|
%{_mandir}/man8/named-checkzone.8.gz
|
|
|
|
|
|
%{_mandir}/man8/named.8.gz
|
|
|
|
|
|
%{_mandir}/man8/named-compilezone.8.gz
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%dir %{_datadir}/bind
|
|
|
|
|
|
%{_datadir}/bind/createNamedConfInclude
|
|
|
|
|
|
%{_datadir}/bind/ldapdump
|
2014-12-08 09:18:17 +01:00
|
|
|
|
%ghost %{_rundir}/named
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%{_var}/adm/fillup-templates/sysconfig.named-named
|
|
|
|
|
|
%dir %{_var}/lib/named/master
|
|
|
|
|
|
%attr(-,named,named) %dir %{_var}/lib/named/dyn
|
|
|
|
|
|
%attr(-,named,named) %dir %{_var}/lib/named/slave
|
|
|
|
|
|
%config %{_var}/lib/named/root.hint
|
|
|
|
|
|
%config %{_var}/lib/named/127.0.0.zone
|
|
|
|
|
|
%config %{_var}/lib/named/localhost.zone
|
2015-05-08 16:24:45 +02:00
|
|
|
|
%config %{_var}/lib/named/named.root.key
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%ghost %{_var}/lib/named/etc/localtime
|
|
|
|
|
|
%attr(0644,root,named) %ghost %{_var}/lib/named/etc/named.conf.include
|
2014-12-08 09:18:17 +01:00
|
|
|
|
%attr(-,named,named) %dir %{_var}/lib/named/var/run/named
|
2015-06-18 14:30:16 +02:00
|
|
|
|
%dir %{_libexecdir}/bind
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%files -n idnkit
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/idn.conf
|
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/idnalias.conf
|
|
|
|
|
|
%{_bindir}/idnconv
|
|
|
|
|
|
%{_bindir}/runidn
|
|
|
|
|
|
%{_mandir}/man1/idnconv.1.gz
|
|
|
|
|
|
%{_mandir}/man1/runidn.1.gz
|
|
|
|
|
|
%{_mandir}/man5/idn.conf.5.gz
|
|
|
|
|
|
%{_mandir}/man5/idnalias.conf.5.gz
|
|
|
|
|
|
%{_mandir}/man5/idnrc.5.gz
|
|
|
|
|
|
%{_datadir}/idnkit/
|
|
|
|
|
|
|
|
|
|
|
|
%files -n idnkit-devel
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%dir %_includedir/bind/
|
|
|
|
|
|
%_includedir/bind/idn/
|
|
|
|
|
|
%_libdir/libidn*.so
|
|
|
|
|
|
%_mandir/man3/libidn*.3*
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%files -n libbind9-140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%defattr(-,root,root)
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%_libdir/libbind9.so.140*
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
- Update to version 9.10.2-P2
- An uninitialized value in validator.c could result in an assertion failure.
(CVE-2015-4620) [RT #39795]
- Update to version 9.10.2-P1
- Include client-ip rules when logging the number of RPZ rules of each type.
[RT #39670]
- Addressed further problems with reloading RPZ zones. [RT #39649]
- Addressed a regression introduced in change #4121. [RT #39611]
- The server could match a shorter prefix than what was available in
CLIENT-IP policy triggers, and so, an unexpected action could be taken.
This has been corrected. [RT #39481]
- On servers with one or more policy zones configured as slaves, if a policy
zone updated during regular operation (rather than at startup) using a full
zone reload, such as via AXFR, a bug could allow the RPZ summary data to
fall out of sync, potentially leading to an assertion failure in rpz.c when
further incremental updates were made to the zone, such as via IXFR.
[RT #39567]
- A bug in RPZ could cause the server to crash if policy zones were updated
while recursion was pending for RPZ processing of an active query.
[RT #39415]
- Fix a bug in RPZ that could cause some policy zones that did not
specifically require recursion to be treated as if they did; consequently,
setting qname-wait-recurse no; was sometimes ineffective. [RT #39229]
- Asynchronous zone loads were not handled correctly when the zone load was
already in progress; this could trigger a crash in zt.c. [RT #37573]
- Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't
result in a bug during operation. If the read failed, named could segfault.
[RT #38559]
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=172
2015-07-10 22:54:40 +02:00
|
|
|
|
%files -n libdns161
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%defattr(-,root,root)
|
- Update to version 9.10.2-P2
- An uninitialized value in validator.c could result in an assertion failure.
(CVE-2015-4620) [RT #39795]
- Update to version 9.10.2-P1
- Include client-ip rules when logging the number of RPZ rules of each type.
[RT #39670]
- Addressed further problems with reloading RPZ zones. [RT #39649]
- Addressed a regression introduced in change #4121. [RT #39611]
- The server could match a shorter prefix than what was available in
CLIENT-IP policy triggers, and so, an unexpected action could be taken.
This has been corrected. [RT #39481]
- On servers with one or more policy zones configured as slaves, if a policy
zone updated during regular operation (rather than at startup) using a full
zone reload, such as via AXFR, a bug could allow the RPZ summary data to
fall out of sync, potentially leading to an assertion failure in rpz.c when
further incremental updates were made to the zone, such as via IXFR.
[RT #39567]
- A bug in RPZ could cause the server to crash if policy zones were updated
while recursion was pending for RPZ processing of an active query.
[RT #39415]
- Fix a bug in RPZ that could cause some policy zones that did not
specifically require recursion to be treated as if they did; consequently,
setting qname-wait-recurse no; was sometimes ineffective. [RT #39229]
- Asynchronous zone loads were not handled correctly when the zone load was
already in progress; this could trigger a crash in zt.c. [RT #37573]
- Fix an out-of-bounds read in RPZ code. If the read succeeded, it doesn't
result in a bug during operation. If the read failed, named could segfault.
[RT #38559]
OBS-URL: https://build.opensuse.org/package/show/network/bind?expand=0&rev=172
2015-07-10 22:54:40 +02:00
|
|
|
|
%_libdir/libdns.so.161*
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
|
|
|
|
|
%files -n libidnkit1
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%_libdir/libidnkit.so.1*
|
|
|
|
|
|
|
|
|
|
|
|
%files -n libidnkitlite1
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%_libdir/libidnkitlite.so.1*
|
|
|
|
|
|
|
|
|
|
|
|
%files -n libidnkitres1
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%_libdir/libidnkitres.so.1*
|
|
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%files -n libirs141
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%_libdir/libirs.so.141*
|
|
|
|
|
|
|
|
|
|
|
|
%files -n libirs-devel
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%_libdir/libirs.so
|
|
|
|
|
|
|
2015-05-08 17:44:01 +02:00
|
|
|
|
%files -n libisc148
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%defattr(-,root,root)
|
2015-05-08 17:44:01 +02:00
|
|
|
|
%_libdir/libisc.so.148*
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%files -n libisccc140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%defattr(-,root,root)
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%_libdir/libisccc.so.140*
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%files -n libisccfg140
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%defattr(-,root,root)
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%_libdir/libisccfg.so.140*
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%files -n liblwres141
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%defattr(-,root,root)
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%_libdir/liblwres.so.141*
|
2014-10-16 16:25:14 +02:00
|
|
|
|
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%files chrootenv
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%dir %{_var}/lib/named
|
|
|
|
|
|
%dir %{_var}/lib/named/etc
|
|
|
|
|
|
%dir %{_var}/lib/named/etc/named.d
|
|
|
|
|
|
%dir %{_var}/lib/named/dev
|
|
|
|
|
|
%dir %{_var}/lib/named/var
|
|
|
|
|
|
%dir %{_var}/lib/named/var/lib
|
|
|
|
|
|
%dir %{_var}/lib/named/var/run
|
|
|
|
|
|
%attr(-,named,named) %dir %{_var}/lib/named/log
|
|
|
|
|
|
%ghost %{_var}/lib/named/etc/named.d/rndc.access.conf
|
|
|
|
|
|
%ghost %{_var}/lib/named/dev/log
|
|
|
|
|
|
%attr(0666, root, root) %dev(c, 1, 3) %{_var}/lib/named/dev/null
|
|
|
|
|
|
%attr(0666, root, root) %dev(c, 1, 8) %{_var}/lib/named/dev/random
|
|
|
|
|
|
%{_var}/lib/named/var/lib/named
|
|
|
|
|
|
%{_var}/lib/named/var/log
|
|
|
|
|
|
%{_var}/adm/fillup-templates/sysconfig.named-common
|
|
|
|
|
|
%{_var}/adm/fillup-templates/sysconfig.syslog-named
|
|
|
|
|
|
|
|
|
|
|
|
%files devel
|
|
|
|
|
|
%defattr(-,root,root)
|
2015-06-18 14:30:16 +02:00
|
|
|
|
%dir %{_includedir}/isc
|
|
|
|
|
|
%{_includedir}/isc/errno2result.h
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%{_bindir}/isc-config.sh
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_libdir}/libbind9.so
|
|
|
|
|
|
%{_libdir}/libdns.so
|
|
|
|
|
|
%{_libdir}/libisc*.so
|
|
|
|
|
|
%{_libdir}/liblwres.so
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%{_includedir}/bind
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%exclude %{_includedir}/bind/idn
|
|
|
|
|
|
%{_mandir}/man3/lwres*.3*
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%files doc -f filelist-bind-doc
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%dir %doc %{_defaultdocdir}/bind
|
|
|
|
|
|
%doc %{_datadir}/susehelp
|
|
|
|
|
|
|
|
|
|
|
|
%files lwresd
|
|
|
|
|
|
%defattr(-,root,root)
|
2014-12-08 09:18:17 +01:00
|
|
|
|
%ghost %attr(0644,root,named) %config(noreplace) /%{_sysconfdir}/lwresd.conf
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%config /etc/init.d/lwresd
|
|
|
|
|
|
%{_sbindir}/rclwresd
|
|
|
|
|
|
%{_sbindir}/lwresd
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man8/lwresd.8.gz
|
2014-12-08 09:18:17 +01:00
|
|
|
|
%ghost %{_rundir}/lwresd
|
|
|
|
|
|
%attr(-,named,named) %dir %{_var}/lib/named/var/run/lwresd
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
|
|
|
|
|
%files utils
|
|
|
|
|
|
%defattr(-,root,root)
|
|
|
|
|
|
%dir /etc/named.d
|
|
|
|
|
|
%config(noreplace) /etc/named.d/rndc-access.conf
|
2010-02-18 13:47:25 +01:00
|
|
|
|
%config(noreplace) /etc/bind.keys
|
2007-03-29 15:06:39 +02:00
|
|
|
|
%dir %{_sysconfdir}/openldap
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%dir %{_sysconfdir}/openldap/schema
|
|
|
|
|
|
%attr(0444,root,root) %config %{_sysconfdir}/openldap/schema/dnszone.schema
|
2010-04-13 21:20:44 +02:00
|
|
|
|
%attr(0444,root,root) %config %{_sysconfdir}/openldap/schema/dlz.schema
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%{_bindir}/delv
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%{_bindir}/dig
|
|
|
|
|
|
%{_bindir}/host
|
|
|
|
|
|
%{_bindir}/nslookup
|
|
|
|
|
|
%{_bindir}/nsupdate
|
|
|
|
|
|
%{_bindir}/genDDNSkey
|
2010-02-18 13:47:25 +01:00
|
|
|
|
%{_sbindir}/arpaname
|
|
|
|
|
|
%{_sbindir}/ddns-confgen
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2013-08-05 16:51:21 +02:00
|
|
|
|
%{_sbindir}/dnssec-checkds
|
|
|
|
|
|
%{_sbindir}/dnssec-coverage
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2013-06-27 11:27:34 +02:00
|
|
|
|
%{_sbindir}/dnssec-dsfromkey
|
2014-08-01 13:43:42 +02:00
|
|
|
|
%{_sbindir}/dnssec-importkey
|
2013-06-27 11:27:34 +02:00
|
|
|
|
%{_sbindir}/dnssec-keyfromlabel
|
|
|
|
|
|
%{_sbindir}/dnssec-keygen
|
2010-02-18 13:47:25 +01:00
|
|
|
|
%{_sbindir}/dnssec-revoke
|
|
|
|
|
|
%{_sbindir}/dnssec-settime
|
2013-06-27 11:27:34 +02:00
|
|
|
|
%{_sbindir}/dnssec-signzone
|
|
|
|
|
|
%{_sbindir}/dnssec-verify
|
2010-02-18 13:47:25 +01:00
|
|
|
|
%{_sbindir}/genrandom
|
|
|
|
|
|
%{_sbindir}/isc-hmac-fixup
|
|
|
|
|
|
%{_sbindir}/named-journalprint
|
|
|
|
|
|
%{_sbindir}/nsec3hash
|
2013-06-27 11:27:34 +02:00
|
|
|
|
%{_sbindir}/rndc
|
|
|
|
|
|
%{_sbindir}/rndc-confgen
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%{_sbindir}/tsig-keygen
|
2006-12-19 00:15:14 +01:00
|
|
|
|
%dir %doc %{_defaultdocdir}/bind
|
2013-07-17 14:09:28 +02:00
|
|
|
|
%{_defaultdocdir}/bind/README.%{VENDOR}
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man1/arpaname.1.gz
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%{_mandir}/man1/delv.1.gz
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man1/dig.1.gz
|
|
|
|
|
|
%{_mandir}/man1/host.1.gz
|
|
|
|
|
|
%{_mandir}/man1/isc-config.sh.1.gz
|
|
|
|
|
|
%{_mandir}/man1/nslookup.1.gz
|
|
|
|
|
|
%{_mandir}/man1/nsupdate.1.gz
|
|
|
|
|
|
%{_mandir}/man5/rndc.conf.5.gz
|
|
|
|
|
|
%{_mandir}/man8/ddns-confgen.8.gz
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%if 0%{?suse_version} == 0 || 0%{?suse_version} > 1230
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man8/dnssec-checkds.8.gz
|
|
|
|
|
|
%{_mandir}/man8/dnssec-coverage.8.gz
|
2015-05-08 20:11:21 +02:00
|
|
|
|
%endif
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man8/dnssec-dsfromkey.8.gz
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%{_mandir}/man8/dnssec-importkey.8.gz
|
2014-10-16 16:25:14 +02:00
|
|
|
|
%{_mandir}/man8/dnssec-keyfromlabel.8.gz
|
|
|
|
|
|
%{_mandir}/man8/dnssec-keygen.8.gz
|
|
|
|
|
|
%{_mandir}/man8/dnssec-revoke.8.gz
|
|
|
|
|
|
%{_mandir}/man8/dnssec-settime.8.gz
|
|
|
|
|
|
%{_mandir}/man8/dnssec-signzone.8.gz
|
|
|
|
|
|
%{_mandir}/man8/dnssec-verify.8.gz
|
|
|
|
|
|
%{_mandir}/man8/genrandom.8.gz
|
|
|
|
|
|
%{_mandir}/man8/isc-hmac-fixup.8.gz
|
|
|
|
|
|
%{_mandir}/man8/named-journalprint.8.gz
|
|
|
|
|
|
%{_mandir}/man8/nsec3hash.8.gz
|
|
|
|
|
|
%{_mandir}/man8/rndc.8.gz
|
|
|
|
|
|
%{_mandir}/man8/rndc-confgen.8.gz
|
2014-12-05 11:12:05 +01:00
|
|
|
|
%{_mandir}/man8/tsig-keygen.8.gz
|
2006-12-19 00:15:14 +01:00
|
|
|
|
|
2007-03-02 09:16:36 +01:00
|
|
|
|
%changelog
|
