Add GeoIP to bind-chroot (#1497646)
named can use ACLs defined by GeoIP of request. Such information is not available by default under named-chroot service. Enable GeoIP databases under chroot without explicit configuration.
This commit is contained in:
parent
0fa39c28ad
commit
bf5bc99f81
@ -39,7 +39,7 @@
|
|||||||
%endif
|
%endif
|
||||||
%global chroot_create_directories /dev /run/named %{_localstatedir}/{log,named,tmp} \\\
|
%global chroot_create_directories /dev /run/named %{_localstatedir}/{log,named,tmp} \\\
|
||||||
%{_sysconfdir}/{crypto-policies/back-ends,pki/dnssec-keys,named} \\\
|
%{_sysconfdir}/{crypto-policies/back-ends,pki/dnssec-keys,named} \\\
|
||||||
%{_libdir}/bind
|
%{_libdir}/bind %{_datadir}/GeoIP
|
||||||
|
|
||||||
%global selinuxbooleans named_write_master_zones=1
|
%global selinuxbooleans named_write_master_zones=1
|
||||||
## The order of libs is important. See lib/Makefile.in for details
|
## The order of libs is important. See lib/Makefile.in for details
|
||||||
@ -1397,6 +1397,7 @@ fi;
|
|||||||
%dir %{chroot_prefix}/usr
|
%dir %{chroot_prefix}/usr
|
||||||
%dir %{chroot_prefix}/%{_libdir}
|
%dir %{chroot_prefix}/%{_libdir}
|
||||||
%dir %{chroot_prefix}/%{_libdir}/bind
|
%dir %{chroot_prefix}/%{_libdir}/bind
|
||||||
|
%dir %{chroot_prefix}/%{_datadir}/GeoIP
|
||||||
%defattr(0660,root,named,01770)
|
%defattr(0660,root,named,01770)
|
||||||
%dir %{chroot_prefix}%{_localstatedir}/named
|
%dir %{chroot_prefix}%{_localstatedir}/named
|
||||||
%defattr(0660,named,named,0770)
|
%defattr(0660,named,named,0770)
|
||||||
@ -1435,6 +1436,7 @@ fi;
|
|||||||
%dir %{chroot_sdb_prefix}/usr
|
%dir %{chroot_sdb_prefix}/usr
|
||||||
%dir %{chroot_sdb_prefix}/%{_libdir}
|
%dir %{chroot_sdb_prefix}/%{_libdir}
|
||||||
%dir %{chroot_sdb_prefix}/%{_libdir}/bind
|
%dir %{chroot_sdb_prefix}/%{_libdir}/bind
|
||||||
|
%dir %{chroot_sdb_prefix}/%{_datadir}/GeoIP
|
||||||
%defattr(0660,named,named,0770)
|
%defattr(0660,named,named,0770)
|
||||||
%dir %{chroot_sdb_prefix}%{_localstatedir}/tmp
|
%dir %{chroot_sdb_prefix}%{_localstatedir}/tmp
|
||||||
%dir %{chroot_sdb_prefix}%{_localstatedir}/log
|
%dir %{chroot_sdb_prefix}%{_localstatedir}/log
|
||||||
@ -1540,6 +1542,7 @@ fi;
|
|||||||
%changelog
|
%changelog
|
||||||
* Tue Sep 03 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.10-2
|
* Tue Sep 03 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.10-2
|
||||||
- Move some administration utilities back to bind-utils (#1720380)
|
- Move some administration utilities back to bind-utils (#1720380)
|
||||||
|
- Add GeoIP to bind-chroot (#1497646)
|
||||||
|
|
||||||
* Tue Aug 27 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.10-1
|
* Tue Aug 27 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.10-1
|
||||||
- Update to 9.11.10
|
- Update to 9.11.10
|
||||||
|
@ -16,6 +16,7 @@
|
|||||||
/etc/named
|
/etc/named
|
||||||
/usr/lib64/bind
|
/usr/lib64/bind
|
||||||
/usr/lib/bind
|
/usr/lib/bind
|
||||||
|
/usr/share/GeoIP
|
||||||
/run/named
|
/run/named
|
||||||
# Warning: the order is important
|
# Warning: the order is important
|
||||||
# If a directory containing $ROOTDIR is listed here,
|
# If a directory containing $ROOTDIR is listed here,
|
||||||
|
Loading…
Reference in New Issue
Block a user