rpms/bind
7
0
Fork 1
Code Issues Pull Requests Releases Activity

Include /dev/urandom in chroot

Browse Source 
Changed feature using OpenSSL RAND function requires /dev/urandom. It
was not provided in chroot and caused failure. Bug #1631515
This commit is contained in:
Petr Menšík 2018-09-24 13:13:17 +02:00
parent e0ab89b893
commit 135784d7f2
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
bind.spec
View File

@ -1282,6 +1282,7 @@ rm -rf ${RPM_BUILD_ROOT}
%defattr(0664,root,named,-) %defattr(0664,root,named,-)
%ghost %dev(c,1,3) %verify(not mtime) %{chroot_prefix}/dev/null %ghost %dev(c,1,3) %verify(not mtime) %{chroot_prefix}/dev/null
%ghost %dev(c,1,8) %verify(not mtime) %{chroot_prefix}/dev/random %ghost %dev(c,1,8) %verify(not mtime) %{chroot_prefix}/dev/random
%ghost %dev(c,1,9) %verify(not mtime) %{chroot_prefix}/dev/urandom
%ghost %dev(c,1,5) %verify(not mtime) %{chroot_prefix}/dev/zero %ghost %dev(c,1,5) %verify(not mtime) %{chroot_prefix}/dev/zero
%defattr(0640,root,named,0750) %defattr(0640,root,named,0750)
%dir %{chroot_prefix} %dir %{chroot_prefix}
@ -1317,6 +1318,7 @@ rm -rf ${RPM_BUILD_ROOT}
%defattr(0664,root,named,-) %defattr(0664,root,named,-)
%ghost %dev(c,1,3) %verify(not mtime) %{chroot_sdb_prefix}/dev/null %ghost %dev(c,1,3) %verify(not mtime) %{chroot_sdb_prefix}/dev/null
%ghost %dev(c,1,8) %verify(not mtime) %{chroot_sdb_prefix}/dev/random %ghost %dev(c,1,8) %verify(not mtime) %{chroot_sdb_prefix}/dev/random
%ghost %dev(c,1,9) %verify(not mtime) %{chroot_sdb_prefix}/dev/urandom
%ghost %dev(c,1,5) %verify(not mtime) %{chroot_sdb_prefix}/dev/zero %ghost %dev(c,1,5) %verify(not mtime) %{chroot_sdb_prefix}/dev/zero
%defattr(0640,root,named,0750) %defattr(0640,root,named,0750)
%dir %{chroot_sdb_prefix} %dir %{chroot_sdb_prefix}
@ -1440,6 +1442,7 @@ rm -rf ${RPM_BUILD_ROOT}
%changelog %changelog
* Thu Sep 20 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2 * Thu Sep 20 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2
- Update to bind-9.11.4-P2 - Update to bind-9.11.4-P2
- Add /dev/urandom to chroot (#1631515)
* Fri Aug 24 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P1 * Fri Aug 24 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P1
- Replace unoptimized code by OpenSSL counterparts - Replace unoptimized code by OpenSSL counterparts

7
setup-named-chroot.sh
View File

@ -44,9 +44,10 @@ dev_create()
dev_chroot_prep() dev_chroot_prep()
{ {
dev_create random c 1 8 dev_create random c 1 8
dev_create zero c 1 5 dev_create urandom c 1 9
dev_create null c 1 3 dev_create zero c 1 5
dev_create null c 1 3
} }
files_comment_filter() files_comment_filter()