Commit Graph

696 Commits

Author SHA1 Message Date
Petr Menšík ac50574b43 CVE-2018-5738 2018-06-27 18:18:57 +02:00
Petr Menšík 600bfd47ef Remove named.iscdlv.key file (#1595782) 2018-06-27 18:18:57 +02:00
Miro Hrončok 72c97d6c12 Rebuilt for Python 3.7 2018-06-19 10:40:25 +02:00
Petr Menšík e3d0b186d1 Use selinux boolean to enable writing
Resolves: rhbz#1569466
2018-06-08 15:07:24 +02:00
Petr Menšík 5c4c792b8d Change named shell to /bin/false
Related: rhbz#1569466
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-06-08 15:07:24 +02:00
Petr Menšík 0188ce47c6 Make named home writeable (#1422680)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-06-08 15:07:18 +02:00
Petr Menšík de74eb1feb Require C++ on build when shipped atf library is used 2018-05-25 16:09:37 +02:00
Petr Menšík f3f402d7f2 Run tests also without kyua
Support start of unit tests without kyua and system atf libraries.

Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-10 16:53:59 +02:00
Petr Menšík b8176e5eb4 Update named.ca 2018-04-05 16:38:16 +02:00
Petr Menšík f17cd8fc68 Do not link libidn2 to all libraries (#1098783) 2018-04-05 16:38:16 +02:00
Petr Menšík 36ff6aebe6 Make +noidnout default 2018-04-03 11:26:44 +02:00
Petr Menšík cc9419191f Compile export libs without GSSAPI
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-03 10:54:13 +02:00
Petr Menšík 8c4729c436 Enable libidn2 support (#1098783)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-03 10:53:35 +02:00
Petr Menšík f505a47d9b Add dig support for libidn2 (#1098783)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 21:34:41 +01:00
Petr Menšík 86ff90b834 Rebase to 9.11.3
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 17:59:41 +01:00
Petr Menšík 029f0510e6 Fix build with disabled unittest
Recommend softhsm from pkcs11 variant

Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 16:55:46 +01:00
Petr Menšík 40e8ab1f0c - Conflict with bind99-devel
- Require openssl-devel and libcap-devel from bind-export-devel
2018-02-26 10:29:11 +01:00
Petr Menšík 9d24906d8d Remove Group: from spec 2018-02-17 09:29:59 +01:00
Petr Menšík 5fe0b21885 - Use bcond_with to define optional features instead of %global
- Move export libs closer to PKCS11 libs, simplify soversion updates
- Remove unnecesary spec parts
2018-02-17 09:29:59 +01:00
Petr Menšík 56e7b0f856 Export libs should distribute own copy of license 2018-02-17 09:29:59 +01:00
Petr Menšík cb2172301b Rebase to 9.11.3b1
Remove merged upstream patches

Signed-off-by: Petr Menšík <pemensik@redhat.com>

Update new so names
2018-02-17 09:29:59 +01:00
Petr Menšík 128dd7c787 - Use versioned provides
- Use spaces instead of tabs and minor cleanup
2018-02-17 09:29:58 +01:00
Petr Menšík 3931fea548 Rename devel export package to bind-export-devel.
Matches name to bind-devel and bind-libs in similar manner.
2018-02-17 09:29:55 +01:00
Petr Menšík 9a235f827e Forward export libs path to isc-config 2018-02-17 09:28:56 +01:00
Petr Menšík 6787c0592a Skip pkcs11 unit tests in export library
Modify also export configure script to use real libraries

Make sure only the replaced library is changed to export
2018-02-17 09:28:56 +01:00
Petr Menšík 46c6c4cd84 - Correct path for running make unit
- Prepare always for unit test
- Prepare only main build for system test, export test does not build
named
- Copy the key also to lib/dns-pkcs11
- BuildRequire findutils always
2018-02-17 09:28:36 +01:00
Petr Menšík 4f517bd499 Prepare system and unit test files
Enable unit tests also for export library
2018-02-17 09:28:36 +01:00
Petr Menšík 21ad2a883e Copy unit rules into build directories.
Run unittest for both build and export libs.
2018-02-17 09:28:36 +01:00
Petr Menšík bd8ef642c3 Remove unneeded export header files for pk11 and pkcs11 2018-02-17 09:28:36 +01:00
Petr Menšík 7d67be0060 Install export isc-config.sh
Use bind9-export includes. Fix patching isc-export-config.sh
2018-02-17 09:28:36 +01:00
Petr Menšík 1d54148484 Create bind-export-devel package with headers for single-threaded. 2018-02-16 21:07:08 +01:00
Petr Menšík f75d562486 Provide description to package. Disable most of autodetected features for export libraries. 2018-02-16 21:07:08 +01:00
Petr Menšík 539c207dc9 Fix indentation 2018-02-16 21:07:08 +01:00
Pavel Zhukov 687255db6e Add forgotten ldconfig for export-libs 2018-02-14 21:36:43 +01:00
Pavel Zhukov c117ea001f Obsolete/provide bind99 package for smooth update 2018-02-14 21:36:43 +01:00
Pavel Zhukov 76e1f1a098 Add export-libs-devel package 2018-02-14 21:34:55 +01:00
Pavel Zhukov cdabc47c40 Disable epoll/kqueue as untested 2018-02-14 21:32:44 +01:00
Pavel Zhukov 27e37d675a Build man in builddir 2018-02-14 21:30:59 +01:00
Pavel Zhukov 028f8c2ce4 Build export libs and deprecate bind99 2018-02-14 21:30:59 +01:00
Fedora Release Engineering a10892eed8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 03:49:58 +00:00
Petr Menšík 3582b7047d Note -z defs cannot be enabled until more work 2018-01-30 19:00:58 +01:00
Petr Menšík 358a6cb08d Remove ldconfig calls where possible 2018-01-30 17:34:53 +01:00
Petr Menšík da51426156 Remove already included patch adding Kyuafile 2018-01-16 23:57:12 +01:00
Petr Menšík 7556fb076a Fix CVE-2017-3145, rebase to 9.11.2-P1
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-01-16 23:38:29 +01:00
Petr Menšík db0b09231c Proper fix for python3-bind subpackage directory ownership (#1522944) 2018-01-10 12:53:57 +01:00
Petr Menšík 9647ab2c58 Provide internal tool to prepare softhsm token storage 2018-01-10 12:34:53 +01:00
Petr Menšík 661d72987e 4776. [bug] Improve portability of ht_test. [RT #46333] 2018-01-09 19:07:42 +01:00
Petr Menšík dd79d39eee Fix machine portability issues, fixes unit tests on non-x86 architectures 2018-01-09 18:19:55 +01:00
Petr Menšík e5f6b89e92 Enable unit tests with kyua tool (#1532694) 2018-01-09 18:19:43 +01:00
Petr Menšík 50d9fbf691 Make tsstsig system test pass again (#1500017)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-12-15 16:31:14 +01:00
Petr Menšík 7536ed9d37 Own python3-bind isc directory (#1522944) 2017-12-15 15:20:27 +01:00
Petr Menšík bdc5ebdfa5 Include protocols and services in chroot 2017-10-31 19:58:06 +01:00
Petr Menšík f5cbbc1a87 Use hmac-sha256 for new RNDC keys (#1508003)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-10-31 17:37:27 +01:00
Petr Menšík 4d8c709975 Fix dynamic symbols conflict with ldap (#1205168) 2017-10-31 17:11:44 +01:00
Petr Menšík 4645641491 include DNSKEY 20326 also in trusted-key.key (#1505476) 2017-10-23 18:35:00 +02:00
Petr Menšík 2dc24d7a28 build against mariadb-connector-c-devel (#1493615)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-10-23 18:03:38 +02:00
Petr Menšík 1f8ab5c253 Fix nsupdate GSSAPI auth against AD server (#1484451) 2017-09-13 17:59:46 +02:00
Petr Menšík 0b15f32821 Add secroots and recursing path overrides, to write into data directory. 2017-09-13 17:48:11 +02:00
Petr Menšík 5d8eb8cf1d Update named.ca, move named.conf out of config archive 2017-08-16 22:47:09 +02:00
Petr Menšík e9f0f4543b Optional LMDB support, disabled by default 2017-08-14 12:33:48 +02:00
Petr Menšík 7584e54e6c Update to 9.11.2 2017-08-14 12:17:30 +02:00
Petr Menšík 79d28ed32a Update to 9.11.2b1 2017-08-08 17:14:41 +02:00
Fedora Release Engineering c81a9f4bd4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 18:13:28 +00:00
Fedora Release Engineering 268c28154e - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 03:56:37 +00:00
Petr Menšík 84de79cc62 Fix different formating spaces 2017-07-14 17:07:00 +02:00
Petr Menšík 6bf59b0f11 Make comment how to use different config file 2017-07-14 17:02:15 +02:00
Petr Menšík 508d643480 Use distribution flags for modules 2017-07-14 16:49:47 +02:00
Petr Menšík 43f0ac7c91 Distribute DLZ modules in separate packages.
Optional feature not yet enabled.
2017-07-14 16:49:47 +02:00
Petr Menšík f2fb8b7545 Use mysql_config for SDB variant 2017-07-14 16:49:47 +02:00
Petr Menšík e42c700db9 Update to 9.11.1-P3 2017-07-10 10:21:43 +02:00
Petr Menšík 85d0fb613e Update to 9.11.1-P2 2017-06-30 16:06:24 +02:00
Petr Menšík b0ccd9af19 Make utils depend on python module 2017-06-30 13:58:39 +02:00
Björn Esser 3c983e38ec Fix build for bumped SO-names 2017-06-25 16:26:22 +02:00
Petr Menšík 102df25a21 Fix changed patches 2017-06-15 21:42:29 +02:00
Petr Menšík 08bdf0ebe6 Update to 9.11.1-P1 2017-06-15 17:19:36 +02:00
Petr Menšík 19b1efe0bb Fix queries for TKEY in nsupdate, when using GSSAPI (#1236087) 2017-04-21 17:38:45 +02:00
Petr Menšík 09e4b5788e - Update to 9.11.0-P5
- Use BINDVERSION for upstream version

Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-04-18 10:51:38 +02:00
Petr Menšík bbe4229562 Update to 9.11.0-P3 2017-02-10 09:20:33 +01:00
Fedora Release Engineering 29088fe6b4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 06:52:02 +00:00
Petr Menšík 7e15fd4b3f Fix some rpm warnings 2017-01-18 17:26:26 +01:00
Petr Menšík 3d5ea105bd RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb (#1410433)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-18 17:22:50 +01:00
Petr Menšík fdce4eb560 Fix manual pages generated by recent docbook-style-xsl (bz#1397186)
4527.  [doc]           Support DocBook XSL Stylesheets v1.79.1. [RT #43831]

Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-16 13:12:32 +01:00
Petr Menšík f696d69809 Update to 9.11.0-P2
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-12 16:09:05 +01:00
Miro Hrončok 9775c204db Rebuild for Python 3.6 2016-12-19 18:20:36 +01:00
Petr Menšík a925732bd1 Split pk11 includes, include real functions only in pkcs11 variant 2016-11-22 19:36:32 +01:00
Petr Menšík 8afcc7945f Merge branch 'rhbz1392538-chroot' 2016-11-16 13:54:14 +01:00
Michal Ruprich d886cd072d Update to 9.11.0-P1 2016-11-16 08:46:09 +01:00
Petr Menšík 59793ad00a Do not change lib permissions in chroot 2016-11-11 15:40:13 +01:00
Petr Menšík 20cebfb8c5 Build with OpenSSL 1.1 2016-11-08 20:39:14 +01:00
Petr Menšík e94c66494e Update to 9.10.4-P4 2016-11-08 16:31:48 +01:00
Tomas Hozza 27a8e54aa7 Update to 9.10.4-P3
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-09-29 10:23:55 +02:00
Michal Ruprich 02e0755d17 Update to 9.10.4-P2
Signed-off-by: Michal Ruprich <mruprich@redhat.com>
2016-07-20 13:51:14 +02:00
Tomas Hozza 3fed71e579 Update to 9.10.4-P1 2016-05-26 17:23:15 +02:00
Tomas Hozza aeb3d0fc5d (un)mount /var/named in -chroot packages as the last directory (Related: #1279188) 2016-05-20 16:19:54 +02:00
Tomas Hozza d591319212 Replaced After=network-online.target with After=network.target in all unit files
BIND is able to react to network configuration changes and therefore it can start even before all interfaces are fully configured. There is no need to wait until interfaces are fully configured.

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-05-12 13:31:49 +02:00
Tomas Hozza 379b90d05d Remove NM dispatcher script, since it is not needed any more (#1277257) 2016-05-12 13:23:35 +02:00
Tomas Hozza 03a1eba10d Use HTTPS instead of FTP for Source0
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-21 12:41:27 +01:00
Tomas Hozza 8ac7bef51e Cleanup dependencies to reflect reality
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-21 12:38:15 +01:00
Tomas Hozza 83466f11b9 Update to 9.10.3-P4 due to CVE-2016-1285 CVE-2016-1286 CVE-2016-2088
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-11 15:02:53 +01:00
Dennis Gilmore d273b747cd - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-03 17:01:35 +00:00