Commit Graph

586 Commits

Author SHA1 Message Date
Tomas Hozza
a3771cee48 Update to 9.10.3rc1 (#1259690)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-09-04 01:50:26 +02:00
Tomas Hozza
d6c0550f5c Update to 9.10.2-P3 to fix CVE-2015-5477
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-07-29 10:53:07 +02:00
Tomas Hozza
1d29922e18 Update to 9.10.2-P2
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-07-09 12:13:13 +02:00
Tomas Hozza
566e7ed5b9 Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-06-29 13:33:28 +02:00
Tomas Hozza
5196f25446 Update to 9.10.2-P1
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-06-19 20:48:19 +02:00
Dennis Gilmore
0a65866650 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 01:48:25 +00:00
Tomas Hozza
e09c558cc5 Don't copy /etc/localtime on -chroot package installation
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-27 12:54:51 +02:00
Tomas Hozza
71f9fb4731 Utilize system-wide crypto-policies (#1179925)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-22 19:09:39 +02:00
Tomas Hozza
c501776f39 Don't use ISC's DLV by default (#1223365)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-22 17:45:37 +02:00
Tomas Hozza
ca42323df8 enable GeoIP access control feature
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-21 09:37:42 +02:00
Tomas Hozza
c1e4a2fd32 enable tuning for large systems - increases hardcoded internal limits
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-21 09:31:01 +02:00
Tomas Hozza
be760938ec update to 9.10.2 stable
- remove parallel-build patch after discussion with upstream [ISC-Bugs #38739]

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-03-05 13:01:25 +01:00
Tomas Hozza
548cd90fb3 Add build dependency on python3-devel
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-25 17:02:42 +01:00
Tomas Hozza
7345adf157 Use Python3 by default (#1186791)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-25 12:48:17 +01:00
Tomas Hozza
f011164832 Call ldconfig for pkcs11 version of libraries
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-23 16:26:28 +01:00
Tomas Hozza
a62625f0bd Fix the libdns version
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-23 13:17:47 +01:00
Tomas Hozza
f3967f6469 update to 9.10.2rc2
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-23 09:59:32 +01:00
Till Maas
d0351fe60b Rebuilt for Fedora 23 Change
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
2015-02-21 21:23:38 +01:00
Tomas Hozza
4e2098e221 update to 9.10.2rc1
- fix nsupdate server auto-detection (#1184151)
- drop merged patch bind99-rh985918.patch

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-02 12:39:57 +01:00
Tomas Hozza
407c2d38c0 Install config for tmpfiles under %{_tmpfilesdir} (#1181020)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-01-16 15:16:06 +01:00
Tomas Hozza
02be4819ea Require systemd not systemd-units
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-01-16 14:58:12 +01:00
Tomas Hozza
4fa9972d29 Update to 9.10.1-P1 stable
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-01-14 12:47:51 +01:00
Tomas Hozza
e001c1a066 Drop downstream patch for nslookup/host rejected by upstream
Upstream response:
26337  nslookup fails to get answer from non-recursive auth server
There has been a lot of email back and forth with Adam on this.
We have decided we cannot accept it, we disagree on the appropriate DNS behavior.

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-12-12 14:17:08 +01:00
Tomas Hozza
460bee9b36 Update to 9.9.6-P1 (CVE-2014-8500)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-12-09 19:01:49 +01:00
Tomas Hozza
c906894bd5 drop engine_pkcs11 dependency, since we use native PKCS#11 implementation
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-11-14 13:54:21 +01:00
Tomas Hozza
075927bb1c Fixed systemctl path in logrotate configuration (#1148360)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-11-14 13:53:09 +01:00
Petr Spacek
b6d2bfe08a Fix crash during GSS-TSIG processing introduced in 32:9.9.6-2
Resolves: #1155334, #1155127

Signed-off-by: Petr Spacek <pspacek@redhat.com>
2014-10-22 11:36:11 -04:00
Tomas Hozza
83a76bb0d8 Remove old Requires: bind in bind-sdb
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-14 14:38:48 +02:00
Tomas Hozza
dce2d1bd1c Added native PKCS#11 functionality
Resolves: rhbz#1097752
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-14 14:02:38 +02:00
Tomas Hozza
23b1421845 Fix assert in dig when using +sigchase (#985918)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-03 11:21:44 +02:00
Tomas Hozza
1407f656a4 Add architecture specific dependencies.
Also modify existing Requires to be architecture specific.

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-03 11:21:44 +02:00
Tomas Hozza
b746061914 Update to 9.9.6
- drop merged patches and rebase some of existing patches

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-03 11:21:38 +02:00
Peter Robinson
c095b972f6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-15 22:35:38 +00:00
Tomas Hozza
55b0a6bfc2 Use network-online.target instead of network.target (#1117086)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-07-18 13:32:25 +02:00
Tom Callaway
7f37d19d5d mark license files properly 2014-07-11 16:13:05 -04:00
Tomas Hozza
4e390f5349 Use only one VERSION macro
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-06-12 16:28:18 +02:00
Tomas Hozza
4b0aa8b659 Include the 'dot' if PATCHVER or PREVER are defined
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-06-12 16:09:44 +02:00
Tomas Hozza
7809ef4347 Update to 9.9.5-P1
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-06-12 16:05:32 +02:00
Tomas Hozza
ed837c4f03 Use /dev/urandom for generation of rndc.key (#1079799
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-06-09 13:47:34 +02:00
Dennis Gilmore
d18b5e4f2e - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-06 21:58:28 -05:00
Tomas Hozza
4ecbfd89d6 Squash libidn patches into one
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-05-26 15:42:49 +02:00
Tomas Hozza
9f33a20115 configure bind with --with-dlopen=yes to support dynamically loadable DLZ drivers
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-04-22 14:22:24 +02:00
Tomas Hozza
230113feee Fix two issues
- dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
- Fix race condition when freeing fetch object (ISC-Bugs #35385)

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-03-05 14:43:00 +01:00
Tomas Hozza
7ebf9a3e72 Update to 9.9.5 stable
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-02-13 09:31:31 +01:00
Rex Dieter
e983ad30af libs, -libs-lite: track sonames, so abi bumps aren't a surprise 2014-01-26 13:15:09 -06:00
Tomas Hozza
9d09f43a80 Fix spec file error causing FTBFS in rawhide
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-01-24 14:43:23 +01:00
Tomas Hozza
fb62390fbb update to 9.9.5rc2
- merged patches dropped
- some patches rebased to the new version

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-01-24 13:08:12 +01:00
Tomas Hozza
01ddf2c8af non-existance of resolv.conf should not be fatal
Resolves rhbz#1052343

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-01-15 10:17:36 +01:00
Tomas Hozza
14a63be5be Fix CVE-2014-0591
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-01-14 14:05:20 +01:00
Tomas Hozza
1a8c6bc42b Build bind-sdb against libdb instead of libdb4
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-01-06 22:02:48 +01:00
Tomas Hozza
abe4be5502 Update to bind-9.9.5b1
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-01-06 15:06:20 +01:00
Tomas Hozza
cfca698d2b Fix crash in rbtdb after two sucessive getoriginnode() calls
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-12-18 13:03:52 +01:00
Tomas Hozza
7eb562bbab Rework the chroot setup/destruction workflow
- Split chroot package for named and named-sdb
- Extract setting-up/destroying of chroot to a separate systemd service (#997030)

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-12-17 17:09:44 +01:00
Tomas Hozza
0cd5a0ff48 Fixed memory leak in nsupdate if 'realm' was used multiple times
Resolves: #984687
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-11-28 10:05:22 +01:00
Tomas Hozza
3267c0ac54 Install configuration for rwtab and fix chroot setup script
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-11-12 14:29:33 +01:00
Tomas Hozza
cb97bbcb9f Conditionaly build bind for developers
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-11-04 09:05:55 +01:00
Tomas Hozza
ab389647c8 Correct the upstream patch for #794940
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-31 16:51:24 +01:00
Tomas Hozza
f9f4e84366 use --enable-filter-aaaa when building bind to enable use of filter-aaaa-on-v4 option
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-31 11:33:29 +01:00
Tomas Hozza
426c09470b Forgot to change config-11.tar.bz2 -> config-12.tar.bz2
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-30 13:25:47 +01:00
Tomas Hozza
8beb2b82a5 Bump the release number
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-30 12:57:45 +01:00
Tomas Hozza
93a69bb161 Added session-keyfile statement into default named.conf since we use /run/named
Since we don't use default /var/run/named path for PID file, we should not
use it also for Dynamic DNS session key.

Therefore the following line was added into the named.conf:
session-keyfile "/run/named/session.key";

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-30 12:45:06 +01:00
Tomas Hozza
09394b223a Create symlink /var/named/chroot/var/run -> /var/named/chroot/run
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-30 12:43:31 +01:00
Tomas Hozza
48fc9b39c5 Use upstream version of patch for previously fixed #794940
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-29 10:49:29 +01:00
Tomas Hozza
3ddaff2ea9 Fix race condition on send buffers in dighost.c (#794940)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-18 11:48:03 +02:00
Tomas Hozza
3d99690d74 install isc/errno2result.h header
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-10-08 14:07:46 +02:00
Tomas Hozza
55d3302131 Update to bind-9.9.4 stable
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-09-23 09:26:20 +02:00
Tomas Hozza
4a918b84b0 Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stack
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-09-10 10:03:44 +02:00
Tomas Hozza
d010f7191d update to bind-9.9.4rc2
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-09-09 12:35:04 +02:00
Tomas Hozza
a249bc6298 Move named-checkzone and named-compilezone to bind-utils package
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-08-20 17:05:29 +02:00
Tomas Hozza
5caf68e0f8 Move tools that don't need the server to run, from main package to bind-utils (#964313)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-08-20 15:37:54 +02:00
Tomas Hozza
5154ca3352 Don't generate rndc.key if there exists rndc.conf
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-08-16 13:08:20 +02:00
Tomas Hozza
ba646ed5d4 don't install named-sdb.service if SDB macro is defined to zero
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-08-16 12:03:32 +02:00
Tomas Hozza
65cc9d95ad update to bind-9.9.4rc1
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-08-05 15:28:53 +02:00
Tomas Hozza
f4daa58a90 Fix setup-named-chroot.sh to mount/umount everything successfully
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-08-05 15:18:52 +02:00
Dennis Gilmore
d60cf6630d - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-02 22:26:19 -05:00
Tomas Hozza
37d1c73624 update to bind-9.9.4b1
- drop merged RRL patch
- drop merged stat.h patch

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-07-15 13:58:12 +02:00
Tomas Hozza
bd600e49c8 Fix dates in Changelog
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-07-10 10:47:23 +02:00
Tomas Hozza
0c054b2ac8 update to 9.9.3-P1 (fix for CVE-2013-3919)
- update RRL patch to 9.9.3-P1-rl.156.01

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-06-05 09:52:49 +02:00
Tomas Hozza
76b23b8702 bump release to prevent update path issues
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-06-03 20:03:00 +02:00
Tomas Hozza
df0cae9e8b update RRL patch to the latest version 9.9.3-rl.150.20
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-06-03 14:40:31 +02:00
Tomas Hozza
1bf060007d update to 9.9.3
- install dns/update.h header

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-06-03 09:47:13 +02:00
Tomas Hozza
2cc782fdff Fix segfault in host/nslookup (#878139)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-05-17 09:58:20 +02:00
Tomas Hozza
0a46a99c61 Change config-10.tar.bz2 to config-11.tar.bz2 in sources
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-05-13 13:21:33 +02:00
Tomas Hozza
60039a5407 update to 9.9.3rc2
- part of bind97-exportlib.patch not needed any more
- bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
- rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
- bind99-opts.patch merged

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-05-13 12:50:46 +02:00
Tomas Hozza
ad6dbbdee6 Include managed-keys-directory statement in named.conf.sample (#948026)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-05-03 12:55:45 +02:00
Tomas Hozza
d0fda06135 Include recursion Warning in named.conf and named.conf.sample (#740894)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-05-03 12:50:12 +02:00
Tomas Hozza
4242e4f1c1 Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-05-02 15:54:40 +02:00
Adam Tkac
7731d63afb Fix crash in nsupdate when processing "-r" parameter (#949544)
Signed-off-by: Adam Tkac <adam.tkac@geodis.cz>
2013-04-19 12:21:30 +02:00
Adam Tkac
4ebe3dc7ef Ship dns/rrl.h in -devel subpkg
Signed-off-by: Adam Tkac <atkac@redhat.com>
2013-04-16 16:44:05 +02:00
Adam Tkac
c9b9417fb2 Update to 9.9.3rc1
- bind-96-libtool2.patch has been merged
- fix bind tmpfiles.d for named.pid /run migration (#920713)

Signed-off-by: Adam Tkac <atkac@redhat.com>
2013-04-16 15:42:36 +02:00
Tomas Hozza
31f953d106 New upstream patch version fixing CVE-2013-2266 (#928032)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-03-27 12:57:26 +01:00
Adam Tkac
2043f0c3c9 Move pidfile to /run/named/named.pid
Signed-off-by: Adam Tkac <atkac@redhat.com>
2013-03-19 16:03:18 +01:00
Tomas Hozza
c69f33f779 Fix Makefile.in to include header added by rate limiting patch (#918330)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-03-07 09:22:55 +01:00
Adam Tkac
2d741bb523 Drop some developer-only documentation and move ARM to %%docdir
Signed-off-by: Adam Tkac <atkac@redhat.com>
2013-03-05 13:45:29 +01:00
Adam Tkac
05cf2799f8 Include rate limiting patch
Signed-off-by: Adam Tkac <atkac@redhat.com>
2013-02-18 14:47:30 +01:00
Tomas Hozza
a54c4dc454 mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-01-29 17:39:29 +01:00
Tomas Hozza
619831eeff Corrected IP addresses in named.ca (#901741)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2013-01-28 16:12:15 +01:00
Adam Tkac
151d963a40 Fix IDN related statement in dig.1 manpage
Signed-off-by: Adam Tkac <atkac@redhat.com>
2012-12-20 14:40:30 +01:00
Adam Tkac
0f7d49832f Renerate /etc/rndc.key during named service startup if doesn't exist
- increase startup timeout in systemd units to 90sec (default)

Signed-off-by: Adam Tkac <atkac@redhat.com>
2012-12-20 14:34:39 +01:00
Tomas Hozza
e73262808d update to bind-9.9.2-P1
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2012-12-05 09:30:24 +01:00