Accepting request 44089 from security

Copy from security/fail2ban based on submit request 44089 from user elvigia

OBS-URL: https://build.opensuse.org/request/show/44089
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=8

fail2ban-0.8.2-fd_cloexec.patch

@@ -0,0 +1,22 @@
+--- fail2ban-0.8.2/server/filter.py.orig	2008-03-27 16:26:59.000000000 +0000
++++ fail2ban-0.8.2/server/filter.py	2008-03-27 15:29:48.000000000 +0000
+@@ -428,6 +428,7 @@
+ # is computed and compared to the previous hash of this line.
+ 
+ import md5
++import fcntl
+ 
+ class FileContainer:
+ 	
+@@ -455,6 +456,11 @@
+ 	
+ 	def open(self):
+ 		self.__handler = open(self.__filename)
++
++		# Set the file descriptor to be FD_CLOEXEC
++		fd = self.__handler.fileno()
++		fcntl.fcntl (self.__handler.fileno(), fcntl.F_SETFD, fd | fcntl.FD_CLOEXEC)
++
+ 		firstLine = self.__handler.readline()
+ 		# Computes the MD5 of the first line.
+ 		myHash = md5.new(firstLine).digest()

fail2ban.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Jul 27 20:39:41 UTC 2010 - cristian.rodriguez@opensuse.org
+
+- Use O_CLOEXEC on fds (patch from Fedora) 
+
 -------------------------------------------------------------------
 Wed May  5 16:48:46 UTC 2010 - lchiquitto@novell.com
 

fail2ban.spec

@@ -26,7 +26,7 @@ BuildRequires:  python-devel
 PreReq:         %fillup_prereq
 AutoReqProv:    on
 Version:        0.8.4
-Release:        2
+Release:        7
 Url:            http://www.fail2ban.org/
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildArch:      noarch
@@ -34,6 +34,7 @@ Summary:        Bans IP addresses that make too many authentication failures
 Source0:        http://download.sourceforge.net/sourceforge/fail2ban/%{name}-%{version}.tar.bz2
 Source1:        %{name}.init
 Source2:        %{name}.sysconfig
+Patch:          fail2ban-0.8.2-fd_cloexec.patch
 
 %description
 Fail2ban scans log files like /var/log/messages and bans IP addresses
@@ -51,6 +52,7 @@ Authors:
 %prep
 %setup
 perl -pi -e 's;/usr/local/;/usr/;g' files/suse-initd
+%patch -p1
 
 %build
 export CFLAGS="$RPM_OPT_FLAGS"