rpm/xrootd
SHA256
1
0
Fork 0
forked from pool/xrootd
Code Pull Requests Activity
Files
factory
xrootd/harden_cmsd@.service.patch

28 lines
851 B
Diff
Raw Permalink Normal View History

Accepting request 1099838 from home:pgajdos - version update to 5.6.1 * Version 5.6.1 Minor bug fixes [CMake] Fix Findlibuuid.cmake to use kernel provided uuid on macOS [XrdCl] Avoid race in postmaster QueryTransport [XrdCl] Add missing argument in call to debug log message. This fixes sporadic crashes seen in FTS when debug logging is enabled. [XrdCrypto] Avoid race in GetCryptoFactory Miscellaneous [CMake] Make sure Python is required in PyPI build [CMake] Set RPATH that works for binaries and libraries on macOS [CMake,Python] Handle RPATH for Python bindings on macOS [Python] Use PEP517 by default when building Python bindings * Version 5.6.0 New Features [CMake] Modernization of build system, now requires CMake 3.16 [Client] Add xrdfs cache subcommand to allow for cache evictions [Misc] Add support for building with musl libc (issue #1645) [Python] Modernization of build system, better support for creating binary wheels, properly propagating CXXFLAGS (issues #1768, #1807, #1833, #1844, #2001, #2002) [Python] Better handling of unicode strings in the API (issue #2011) [Server] Add gsi option to display DN when it differs from entity name [Server] Allow generic prepare plug-in to handle large responses (issue #2023) [Server] Allow specfication of minimum and maximum creation mode (issue #649) [Server] Make maxfd be configurable (default is 256k) (issue #2010) [Server] Include token information in the monitoring stream (phase 1). [Xcache] Implement a file evict function [Xcache,XrdCl] Increase default number of parallel event loops to 10 (#2047) [XrdCl] xrdcp: number of parallel copy jobs increased from 4 to 128 [XrdHttp] Allow XRootD to return trailers indicating failure (#1912) OBS-URL: https://build.opensuse.org/request/show/1099838 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=70
2023-07-21 06:55:44 +00:00
Index: xrootd-5.6.1/packaging/common/cmsd@.service
Accepting request 945793 from home:jsegitz:branches:systemdhardening:science Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/945793 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=55
2022-01-19 12:01:56 +00:00
===================================================================
Accepting request 1099838 from home:pgajdos - version update to 5.6.1 * Version 5.6.1 Minor bug fixes [CMake] Fix Findlibuuid.cmake to use kernel provided uuid on macOS [XrdCl] Avoid race in postmaster QueryTransport [XrdCl] Add missing argument in call to debug log message. This fixes sporadic crashes seen in FTS when debug logging is enabled. [XrdCrypto] Avoid race in GetCryptoFactory Miscellaneous [CMake] Make sure Python is required in PyPI build [CMake] Set RPATH that works for binaries and libraries on macOS [CMake,Python] Handle RPATH for Python bindings on macOS [Python] Use PEP517 by default when building Python bindings * Version 5.6.0 New Features [CMake] Modernization of build system, now requires CMake 3.16 [Client] Add xrdfs cache subcommand to allow for cache evictions [Misc] Add support for building with musl libc (issue #1645) [Python] Modernization of build system, better support for creating binary wheels, properly propagating CXXFLAGS (issues #1768, #1807, #1833, #1844, #2001, #2002) [Python] Better handling of unicode strings in the API (issue #2011) [Server] Add gsi option to display DN when it differs from entity name [Server] Allow generic prepare plug-in to handle large responses (issue #2023) [Server] Allow specfication of minimum and maximum creation mode (issue #649) [Server] Make maxfd be configurable (default is 256k) (issue #2010) [Server] Include token information in the monitoring stream (phase 1). [Xcache] Implement a file evict function [Xcache,XrdCl] Increase default number of parallel event loops to 10 (#2047) [XrdCl] xrdcp: number of parallel copy jobs increased from 4 to 128 [XrdHttp] Allow XRootD to return trailers indicating failure (#1912) OBS-URL: https://build.opensuse.org/request/show/1099838 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=70
2023-07-21 06:55:44 +00:00
--- xrootd-5.6.1.orig/packaging/common/cmsd@.service
+++ xrootd-5.6.1/packaging/common/cmsd@.service
@@ -6,14 +6,14 @@ Requires=network-online.target
Accepting request 945793 from home:jsegitz:branches:systemdhardening:science Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/945793 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=55
2022-01-19 12:01:56 +00:00
After=network-online.target
[Service]
Accepting request 1099838 from home:pgajdos - version update to 5.6.1 * Version 5.6.1 Minor bug fixes [CMake] Fix Findlibuuid.cmake to use kernel provided uuid on macOS [XrdCl] Avoid race in postmaster QueryTransport [XrdCl] Add missing argument in call to debug log message. This fixes sporadic crashes seen in FTS when debug logging is enabled. [XrdCrypto] Avoid race in GetCryptoFactory Miscellaneous [CMake] Make sure Python is required in PyPI build [CMake] Set RPATH that works for binaries and libraries on macOS [CMake,Python] Handle RPATH for Python bindings on macOS [Python] Use PEP517 by default when building Python bindings * Version 5.6.0 New Features [CMake] Modernization of build system, now requires CMake 3.16 [Client] Add xrdfs cache subcommand to allow for cache evictions [Misc] Add support for building with musl libc (issue #1645) [Python] Modernization of build system, better support for creating binary wheels, properly propagating CXXFLAGS (issues #1768, #1807, #1833, #1844, #2001, #2002) [Python] Better handling of unicode strings in the API (issue #2011) [Server] Add gsi option to display DN when it differs from entity name [Server] Allow generic prepare plug-in to handle large responses (issue #2023) [Server] Allow specfication of minimum and maximum creation mode (issue #649) [Server] Make maxfd be configurable (default is 256k) (issue #2010) [Server] Include token information in the monitoring stream (phase 1). [Xcache] Implement a file evict function [Xcache,XrdCl] Increase default number of parallel event loops to 10 (#2047) [XrdCl] xrdcp: number of parallel copy jobs increased from 4 to 128 [XrdHttp] Allow XRootD to return trailers indicating failure (#1912) OBS-URL: https://build.opensuse.org/request/show/1099838 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=70
2023-07-21 06:55:44 +00:00
-#PrivateDevices=true
-#ProtectHostname=true
-#ProtectClock=true
-#ProtectKernelTunables=true
-#ProtectKernelModules=true
-#ProtectKernelLogs=true
-#ProtectControlGroups=true
-#RestrictRealtime=true
Accepting request 945793 from home:jsegitz:branches:systemdhardening:science Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/945793 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=55
2022-01-19 12:01:56 +00:00
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
Accepting request 1005016 from home:badshah400:xrootd_update - Update to version 5.5.0. - Update patches to apply cleanly. - Adapt to changes in installed files list for python3. - Build python bindings for all supported python versions (python3 only). - Add BuildRequires: python-pip needed to install standard python egg-info (avoiding installing .pth files). - Install /run/%{name} as ghost dir. - Drop unused filter from rpmlintrc. - Rename logrotate file to xrootd-server to conform with rpmlint suggestion. - Add BuildRequires: sysuser-tools and use its macros to set up xrootd user and group in compliance with <https://en.opensuse.org/openSUSE:Packaging_guidelines#Users_and_Groups>. - Add %{name}-user.conf as source as required for above. - Drop conditionals for openSUSE < 1500 (sle_version < 150000). - Minor specfile cleanups using spec-cleaner. OBS-URL: https://build.opensuse.org/request/show/1005016 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=58
2022-09-21 08:36:28 +00:00
ExecStart=/usr/bin/cmsd -l /var/log/xrootd/cmsd.log -c /etc/xrootd/xrootd-%i.cfg -k fifo -s /run/xrootd/cmsd-%i.pid -n %i
Accepting request 945793 from home:jsegitz:branches:systemdhardening:science Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/945793 OBS-URL: https://build.opensuse.org/package/show/science/xrootd?expand=0&rev=55
2022-01-19 12:01:56 +00:00
User=xrootd
Group=xrootd
Copy Permalink