4421 lines
154 KiB
RPMSpec
4421 lines
154 KiB
RPMSpec
#
|
|
# Red Hat BIND package .spec file
|
|
#
|
|
# vim:expandtab ts=2:
|
|
|
|
#%%global PATCHVER P1
|
|
#%%global PREVER rc1
|
|
%global BINDVERSION %{version}%{?PREVER}%{?PATCHVER:-%{PATCHVER}}
|
|
|
|
# bcond_without is built by default, unless --without X is passed
|
|
# bcond_with is built only when --with X is passed to build
|
|
%bcond_with SYSTEMTEST
|
|
%bcond_without SDB
|
|
%bcond_without GSSTSIG
|
|
# it is not possible to build the package without PKCS11 sub-package
|
|
# due to extensive changes to Makefiles
|
|
%bcond_without PKCS11
|
|
%bcond_without JSON
|
|
%bcond_with LMDB
|
|
%bcond_without DNSTAP
|
|
%bcond_with DLZ
|
|
%bcond_without EXPORT_LIBS
|
|
%bcond_without BDB
|
|
# Legacy GeoIP support
|
|
%bcond_with GEOIP
|
|
%bcond_with DOC
|
|
%if 0%{?fedora} >= 28 || 0%{?rhel} >= 8
|
|
%bcond_without UNITTEST
|
|
%else
|
|
%bcond_with UNITTEST
|
|
%endif
|
|
%bcond_with TSAN
|
|
%if 0%{?fedora} >= 28 || 0%{?rhel} >= 8
|
|
# New MaxMind GeoLite support
|
|
%bcond_without GEOIP2
|
|
%else
|
|
%bcond_with GEOIP2
|
|
%endif
|
|
|
|
%{?!bind_uid: %global bind_uid 25}
|
|
%{?!bind_gid: %global bind_gid 25}
|
|
%{!?_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}}
|
|
%global bind_dir /var/named
|
|
%global chroot_prefix %{bind_dir}/chroot
|
|
%if %{with SDB}
|
|
%global chroot_sdb_prefix %{bind_dir}/chroot_sdb
|
|
%endif
|
|
%global chroot_create_directories /dev /run/named %{_localstatedir}/{log,named,tmp} \\\
|
|
%{_sysconfdir}/{crypto-policies/back-ends,pki/dnssec-keys,named} \\\
|
|
%{_libdir}/bind %{_datadir}/GeoIP %{_datadir}/GeoIP /proc/sys/net/ipv4
|
|
|
|
## The order of libs is important. See lib/Makefile.in for details
|
|
%define bind_export_libs isc dns isccfg irs
|
|
%{!?_export_dir:%global _export_dir /bind9-export/}
|
|
# libisc-nosym requires to be linked with unresolved symbols
|
|
# When libisc-nosym linking is fixed, it can be defined to 1
|
|
# Visit https://bugzilla.redhat.com/show_bug.cgi?id=1540300
|
|
%undefine _strict_symbol_defs_build
|
|
#
|
|
|
|
# lib*.so.X versions of selected libraries
|
|
%global sover_dns 1115
|
|
%global sover_isc 1107
|
|
%global sover_irs 161
|
|
%global sover_isccfg 163
|
|
|
|
Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
|
|
Name: bind
|
|
License: MPLv2.0
|
|
Version: 9.11.36
|
|
Release: 16%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}.2
|
|
Epoch: 32
|
|
Url: https://www.isc.org/downloads/bind/
|
|
#
|
|
Source: https://downloads.isc.org/isc/bind9/%{BINDVERSION}/bind-%{BINDVERSION}.tar.gz
|
|
Source1: named.sysconfig
|
|
Source3: named.logrotate
|
|
Source7: bind-9.3.1rc1-sdb_tools-Makefile.in
|
|
Source8: dnszone.schema
|
|
Source12: README.sdb_pgsql
|
|
Source16: named.conf
|
|
# Refresh by command: dig @a.root-servers.net. +tcp +norec
|
|
# or from URL
|
|
Source17: https://www.internic.net/domain/named.root
|
|
Source18: named.localhost
|
|
Source19: named.loopback
|
|
Source20: named.empty
|
|
Source23: named.rfc1912.zones
|
|
Source25: named.conf.sample
|
|
Source27: named.root.key
|
|
Source30: ldap2zone.c
|
|
Source31: ldap2zone.1
|
|
Source32: named-sdb.8
|
|
Source33: zonetodb.1
|
|
Source34: zone2sqlite.1
|
|
Source35: bind.tmpfiles.d
|
|
Source36: trusted-key.key
|
|
Source37: named.service
|
|
Source38: named-chroot.service
|
|
Source39: named-sdb.service
|
|
Source40: named-sdb-chroot.service
|
|
Source41: setup-named-chroot.sh
|
|
Source42: generate-rndc-key.sh
|
|
Source43: named.rwtab
|
|
Source44: named-chroot-setup.service
|
|
Source45: named-sdb-chroot-setup.service
|
|
Source46: named-setup-rndc.service
|
|
Source47: named-pkcs11.service
|
|
Source48: setup-named-softhsm.sh
|
|
Source49: named-chroot.files
|
|
Source50: random.data
|
|
|
|
# Common patches
|
|
Patch10: bind-9.5-PIE.patch
|
|
Patch16: bind-9.3.2-redhat_doc.patch
|
|
Patch72: bind-9.5-dlz-64bit.patch
|
|
Patch101:bind-96-old-api.patch
|
|
Patch102:bind-95-rh452060.patch
|
|
Patch106:bind93-rh490837.patch
|
|
Patch109:bind97-rh478718.patch
|
|
Patch112:bind97-rh645544.patch
|
|
Patch130:bind-9.9.1-P2-dlz-libdb.patch
|
|
Patch131:bind-9.9.1-P2-multlib-conflict.patch
|
|
Patch133:bind99-rh640538.patch
|
|
Patch134:bind97-rh669163.patch
|
|
# Fedora specific patch to distribute native-pkcs#11 functionality
|
|
Patch136:bind-9.10-dist-native-pkcs11.patch
|
|
|
|
# [ISC-Bugs #42525] non-portable use of strlcat in contrib/sdb/ldap/zone2ldap.c
|
|
# introduced by https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commit;h=fc9f0ac5778f78003a7acc957a23711811fec122
|
|
Patch137:bind-9.10-use-of-strlcat.patch
|
|
Patch140:bind-9.11-rh1410433.patch
|
|
Patch145:bind-9.11-rh1205168.patch
|
|
# [ISC-Bugs #46853] commit cb616c6d5c2ece1fac37fa6e0bca2b53d4043098 ISC 4851
|
|
Patch149:bind-9.11-kyua-pkcs11.patch
|
|
# Avoid conflicts with OpenSSL PKCS11 engine
|
|
Patch150:bind-9.11-engine-pkcs11.patch
|
|
Patch153:bind-9.11-export-suffix.patch
|
|
Patch154:bind-9.11-oot-manual.patch
|
|
Patch155:bind-9.11-pk11.patch
|
|
Patch156:bind-9.11-fips-code.patch
|
|
Patch157:bind-9.11-fips-tests.patch
|
|
Patch159:bind-9.11-host-idn-disable.patch
|
|
Patch164:bind-9.11-fips-code-includes.patch
|
|
# [RT #31459] commit 06a8051d2476fb526fe6960832209392c763a9af
|
|
Patch165:bind-9.11-rt31459.patch
|
|
# [RT #46047] commit 24172bd2eeba91441ab1c65d2717b0692309244a ISC 4724
|
|
Patch166:bind-9.11-rt46047.patch
|
|
Patch167:bind-9.11-rh1668682.patch
|
|
# random_test fails too often by random, disable it
|
|
Patch168:bind-9.11-unit-disable-random.patch
|
|
Patch174:bind-9.11-fips-disable.patch
|
|
# Make sure jsonccp-devel does not interfere
|
|
Patch175:bind-9.11-json-c.patch
|
|
Patch177:bind-9.11-serve-stale.patch
|
|
Patch178:bind-9.11-dhcp-time-monotonic.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5253
|
|
Patch183:bind-9.11-rh1980757.patch
|
|
# modified, https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/3067
|
|
Patch184: bind-9.15-resolver-ntasks.patch
|
|
Patch185: bind-9.11-CVE-2021-25220.patch
|
|
Patch186: bind-9.11-CVE-2021-25220-test.patch
|
|
Patch188: bind-9.16-CVE-2022-38177.patch
|
|
Patch189: bind-9.16-CVE-2022-38178.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6695
|
|
Patch190: bind-9.11-rh2101712.patch
|
|
Patch191: bind-9.11-CVE-2022-2795.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/7376
|
|
Patch192: bind-9.11-rh2133889.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/82185f4f80d2fa39a4569f6740cb360ffff8f5c4
|
|
Patch193: bind-9.16-CVE-2022-3094-1.patch
|
|
Patch194: bind-9.16-CVE-2022-3094-2.patch
|
|
Patch195: bind-9.16-CVE-2022-3094-3.patch
|
|
Patch196: bind-9.16-CVE-2022-3094-test.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/f1d9e9ee3859976f403914d20ad2a10855343702
|
|
Patch197: bind-9.11-CVE-2023-2828.patch
|
|
Patch198: bind-9.16-CVE-2023-3341.patch
|
|
# https://issues.redhat.com/browse/RHEL-11785, downstream
|
|
Patch199: bind-9.11-stale-cache.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/8924adca613ca9daea63786563cce6fdbd742c56
|
|
Patch200: bind-9.16-update-b.root-servers.net.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/8768
|
|
Patch201: bind-9.11-CVE-2023-4408.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/8769
|
|
Patch202: bind-9.11-CVE-2023-50387.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/8778
|
|
Patch203: bind-9.11-CVE-2023-2828-fixup.patch
|
|
# addition to patch 200
|
|
Patch204: bind-9.11-CVE-2023-50387-fixup.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/225f2861920b8f8d42a0ea6c34dd1faa93aa8726
|
|
Patch205: bind-9.11-CVE-2024-1975.patch
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/3e0a67e4bdb253dae3a03a45c1aa117239a3313d
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/e4d7ce686bb38428eddc7e33b40057d68eca9a6e
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/b9b5485b22c364fb88c27aa04bad4c8f616da3fa
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/3f10d6eff035702796ba82cd28b9f7cf9836e743
|
|
# https://gitlab.isc.org/isc-projects/bind9/commit/23a4652346fb2877d6246b1eebaa967969dbde16
|
|
Patch206: bind-9.11-CVE-2024-1737.patch
|
|
# RH downstream, allow changing by environment
|
|
Patch208: bind-9.11-CVE-2024-1737-runtime-env.patch
|
|
|
|
# SDB patches
|
|
Patch11: bind-9.3.2b2-sdbsrc.patch
|
|
Patch12: bind-9.10-sdb.patch
|
|
|
|
# needs inpection
|
|
Patch17: bind-9.3.2b1-fix_sdb_ldap.patch
|
|
Patch18: bind-9.11-zone2ldap.patch
|
|
|
|
Requires(post): systemd
|
|
Requires(preun): systemd
|
|
Requires(postun): systemd
|
|
Requires: coreutils
|
|
Requires(pre): shadow-utils
|
|
Requires(post): shadow-utils
|
|
Requires(post): glibc-common
|
|
Requires(post): grep
|
|
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Obsoletes: bind-config < 30:9.3.2-34.fc6
|
|
Provides: bind-config = 30:9.3.2-34.fc6
|
|
Obsoletes: caching-nameserver < 31:9.4.1-7.fc8
|
|
Provides: caching-nameserver = 31:9.4.1-7.fc8
|
|
Obsoletes: dnssec-conf < 1.27-2
|
|
Provides: dnssec-conf = 1.27-2
|
|
# Fixes of CVE-2023-50387 and CVE-2023-50868 caused ABI change
|
|
# Enforce updated rebuild is accepted only
|
|
Conflicts: bind-dyndb-ldap < 11.6-5
|
|
Conflicts: dhcp-client < 12:4.3.6-50
|
|
Conflicts: dhcp-server < 12:4.3.6-50
|
|
Conflicts: dhcp-relay < 12:4.3.6-50
|
|
BuildRequires: gcc, make
|
|
BuildRequires: openssl-devel, libtool, autoconf, pkgconfig, libcap-devel
|
|
BuildRequires: libidn2-devel, libxml2-devel
|
|
BuildRequires: systemd
|
|
# needed for %%{__python3} macro
|
|
BuildRequires: python3-devel
|
|
BuildRequires: python3-ply
|
|
BuildRequires: findutils sed
|
|
%if %{with SDB}
|
|
BuildRequires: openldap-devel, postgresql-devel, sqlite-devel, mariadb-connector-c-devel
|
|
%endif
|
|
%if %{with BDB}
|
|
BuildRequires: libdb-devel
|
|
%endif
|
|
%if %{with UNITTEST}
|
|
# make unit dependencies
|
|
BuildRequires: libcmocka-devel kyua
|
|
%endif
|
|
%if %{with PKCS11} && (%{with UNITTEST} || %{with SYSTEMTEST})
|
|
BuildRequires: softhsm
|
|
%endif
|
|
%if %{with SYSTEMTEST}
|
|
# bin/tests/system dependencies
|
|
BuildRequires: perl(Net::DNS) perl(Net::DNS::Nameserver) perl(Time::HiRes) perl(Getopt::Long)
|
|
# manual configuration requires this tool
|
|
BuildRequires: iproute
|
|
%endif
|
|
%if %{with GSSTSIG}
|
|
BuildRequires: krb5-devel
|
|
%endif
|
|
%if %{with LMDB}
|
|
BuildRequires: lmdb-devel
|
|
%endif
|
|
%if %{with JSON}
|
|
BuildRequires: json-c-devel
|
|
%endif
|
|
%if %{with GEOIP}
|
|
BuildRequires: GeoIP-devel
|
|
%endif
|
|
%if %{with GEOIP2}
|
|
BuildRequires: libmaxminddb-devel
|
|
%endif
|
|
%if %{with DNSTAP}
|
|
BuildRequires: fstrm-devel protobuf-c-devel
|
|
%endif
|
|
# Needed to regenerate dig.1 manpage
|
|
BuildRequires: docbook-style-xsl, libxslt
|
|
%if %{with TSAN}
|
|
BuildRequires: libtsan
|
|
%endif
|
|
|
|
%description
|
|
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
|
|
(Domain Name System) protocols. BIND includes a DNS server (named),
|
|
which resolves host names to IP addresses; a resolver library
|
|
(routines for applications to use when interfacing with DNS); and
|
|
tools for verifying that the DNS server is operating properly.
|
|
|
|
%if %{with PKCS11}
|
|
%package pkcs11
|
|
Summary: Bind with native PKCS#11 functionality for crypto
|
|
Requires: systemd
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-pkcs11-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description pkcs11
|
|
This is a version of BIND server built with native PKCS#11 functionality.
|
|
It is important to have SoftHSM v2+ installed and some token initialized.
|
|
For other supported HSM modules please check the BIND documentation.
|
|
|
|
%package pkcs11-utils
|
|
Summary: Bind tools with native PKCS#11 for using DNSSEC
|
|
Requires: bind-pkcs11-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Obsoletes: bind-pkcs11 < 32:9.9.4-16.P2
|
|
|
|
%description pkcs11-utils
|
|
This is a set of PKCS#11 utilities that when used together create rsa
|
|
keys in a PKCS11 keystore. Also utilities for working with DNSSEC
|
|
compiled with native PKCS#11 functionality are included.
|
|
|
|
%package pkcs11-libs
|
|
Summary: Bind libraries compiled with native PKCS#11
|
|
Requires: bind-license = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description pkcs11-libs
|
|
This is a set of BIND libraries (dns, isc) compiled with native PKCS#11
|
|
functionality.
|
|
|
|
%package pkcs11-devel
|
|
Summary: Development files for Bind libraries compiled with native PKCS#11
|
|
Requires: bind-pkcs11-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-lite-devel%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description pkcs11-devel
|
|
This a set of development files for BIND libraries (dns, isc) compiled
|
|
with native PKCS#11 functionality.
|
|
%endif
|
|
|
|
%if %{with SDB}
|
|
%package sdb
|
|
Summary: BIND server with database backends and DLZ support
|
|
Requires: systemd
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description sdb
|
|
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
|
|
(Domain Name System) protocols. BIND includes a DNS server (named-sdb)
|
|
which has compiled-in SDB (Simplified Database Backend) which includes
|
|
support for using alternative Zone Databases stored in an LDAP server
|
|
(ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb),
|
|
or in the filesystem (dirdb), in addition to the standard in-memory RBT
|
|
(Red Black Tree) zone database. It also includes support for DLZ
|
|
(Dynamic Loadable Zones)
|
|
%endif
|
|
|
|
%package libs-lite
|
|
Summary: Libraries for working with the DNS protocol
|
|
Obsoletes:bind-libbind-devel < 31:9.3.3-4.fc7
|
|
Provides: bind-libbind-devel = 31:9.3.3-4.fc7
|
|
Requires: bind-license = %{epoch}:%{version}-%{release}
|
|
|
|
%description libs-lite
|
|
Contains lite version of BIND suite libraries which are used by various
|
|
programs to work with DNS protocol.
|
|
|
|
%package libs
|
|
Summary: Libraries used by the BIND DNS packages
|
|
Requires: bind-license = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description libs
|
|
Contains heavyweight version of BIND suite libraries used by both named DNS
|
|
server and utilities in bind-utils package.
|
|
|
|
%package license
|
|
Summary: License of the BIND DNS suite
|
|
BuildArch:noarch
|
|
|
|
%description license
|
|
Contains license of the BIND DNS suite.
|
|
|
|
%package utils
|
|
Summary: Utilities for querying DNS name servers
|
|
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: python3-bind = %{epoch}:%{version}-%{release}
|
|
|
|
%description utils
|
|
Bind-utils contains a collection of utilities for querying DNS (Domain
|
|
Name System) name servers to find out information about Internet
|
|
hosts. These tools will provide you with the IP addresses for given
|
|
host names, as well as other information about registered domains and
|
|
network addresses.
|
|
|
|
You should install bind-utils if you need to get information from DNS name
|
|
servers.
|
|
|
|
%package devel
|
|
Summary: Header files and libraries needed for BIND DNS development
|
|
Obsoletes:bind-libbind-devel < 31:9.3.3-4.fc7
|
|
Provides: bind-libbind-devel = 31:9.3.3-4.fc7
|
|
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: bind-lite-devel%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description devel
|
|
The bind-devel package contains full version of the header files and libraries
|
|
required for development with ISC BIND 9
|
|
|
|
%package lite-devel
|
|
Summary: Lite version of header files and libraries needed for BIND DNS development
|
|
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: openssl-devel%{?_isa} libxml2-devel%{?_isa}
|
|
# Not required by headers, but "isc-config.sh --libs isc" requires it
|
|
Requires: libcap-devel%{?_isa}
|
|
%if %{with GSSTSIG}
|
|
Requires: krb5-devel%{?_isa}
|
|
%endif
|
|
%if %{with LMDB}
|
|
Requires: lmdb-devel%{?_isa}
|
|
%endif
|
|
%if %{with JSON}
|
|
Requires: json-c-devel%{?_isa}
|
|
%endif
|
|
%if %{with DNSTAP}
|
|
Requires: fstrm-devel%{?_isa} protobuf-c-devel%{?_isa}
|
|
%endif
|
|
|
|
%description lite-devel
|
|
The bind-lite-devel package contains lite version of the header
|
|
files and libraries required for development with ISC BIND 9
|
|
|
|
%package chroot
|
|
Summary: A chroot runtime environment for the ISC BIND DNS server, named(8)
|
|
Prefix: %{chroot_prefix}
|
|
# grep is required due to setup-named-chroot.sh script
|
|
Requires: grep
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description chroot
|
|
This package contains a tree of files which can be used as a
|
|
chroot(2) jail for the named(8) program from the BIND package.
|
|
Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>
|
|
|
|
%if %{with SDB}
|
|
%package sdb-chroot
|
|
Summary: A chroot runtime environment for the ISC BIND DNS server, named-sdb(8)
|
|
Prefix: %{chroot_sdb_prefix}
|
|
# grep is required due to setup-named-chroot.sh script
|
|
Requires: grep
|
|
Requires: bind-sdb%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description sdb-chroot
|
|
This package contains a tree of files which can be used as a
|
|
chroot(2) jail for the named-sdb(8) program from the BIND package.
|
|
Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>
|
|
%endif
|
|
|
|
|
|
%if %{with DLZ}
|
|
%if %{with BDB}
|
|
%package dlz-bdb
|
|
Summary: BIND server bdb DLZ module
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description dlz-bdb
|
|
Dynamic Loadable Zones module for BIND server.
|
|
|
|
%end
|
|
|
|
%endif
|
|
|
|
%package dlz-filesystem
|
|
Summary: BIND server filesystem DLZ module
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description dlz-filesystem
|
|
Dynamic Loadable Zones module for BIND server.
|
|
|
|
%package dlz-ldap
|
|
Summary: BIND server ldap DLZ module
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description dlz-ldap
|
|
Dynamic Loadable Zones module for BIND server.
|
|
|
|
%package dlz-mysql
|
|
Summary: BIND server mysql DLZ module
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description dlz-mysql
|
|
Dynamic Loadable Zones module for BIND server.
|
|
|
|
%package dlz-mysqldyn
|
|
Summary: BIND server mysqldyn DLZ module
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description dlz-mysqldyn
|
|
Dynamic Loadable Zones module for BIND server.
|
|
|
|
%package dlz-sqlite3
|
|
Summary: BIND server sqlite3 DLZ module
|
|
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
|
|
|
|
%description dlz-sqlite3
|
|
Dynamic Loadable Zones module for BIND server.
|
|
%endif
|
|
|
|
|
|
%package -n python3-bind
|
|
Summary: A module allowing rndc commands to be sent from Python programs
|
|
Requires: bind-license = %{epoch}:%{version}-%{release}
|
|
Requires: %{?__python3} python3-ply %{?py3_dist:%py3_dist ply}
|
|
BuildArch: noarch
|
|
%{?python_provide:%python_provide python3-bind}
|
|
%{?python_provide:%python_provide python3-isc}
|
|
|
|
%description -n python3-bind
|
|
This package provides a module which allows commands to be sent to rndc directly from Python programs.
|
|
|
|
%if %{with DOC}
|
|
%package doc
|
|
Summary: BIND 9 Administrator Reference Manual
|
|
Requires: bind-license = %{epoch}:%{version}-%{release}
|
|
BuildArch: noarch
|
|
|
|
%description doc
|
|
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
|
|
(Domain Name System) protocols. BIND includes a DNS server (named),
|
|
which resolves host names to IP addresses; a resolver library
|
|
(routines for applications to use when interfacing with DNS); and
|
|
tools for verifying that the DNS server is operating properly.
|
|
|
|
This package contains BIND 9 Administrator Reference Manual
|
|
in HTML and PDF format.
|
|
%end
|
|
|
|
%endif
|
|
|
|
%if %{with EXPORT_LIBS}
|
|
%package export-libs
|
|
Summary: ISC libs for DHCP application
|
|
%if 0%{?fedora} >= 1
|
|
Obsoletes: bind99-libs < 9.9.11-4
|
|
Provides: bind99-libs = 9.9.11-4
|
|
# This subpackage will not use shared license, but distribute its own
|
|
%endif
|
|
|
|
%description export-libs
|
|
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
|
|
(Domain Name System) protocols. This package set contains only export
|
|
version of BIND libraries, that are used for building ISC DHCP.
|
|
|
|
%package export-devel
|
|
Summary: Header files and libraries needed for BIND export libraries
|
|
Requires: %{name}-export-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: openssl-devel
|
|
Requires: libcap-devel
|
|
|
|
%if 0%{?fedora} >= 1
|
|
Obsoletes: bind99-devel < 9.9.11-4
|
|
# To prevent linking against wrong set of libraries,
|
|
# do not coexist with bind99-devel
|
|
Conflicts: bind99-devel
|
|
%endif
|
|
|
|
%description export-devel
|
|
This package contains export version of the header files and libraries
|
|
required for development with ISC BIND. These headers and libraries
|
|
are used for building ISC DHCP.
|
|
%endif
|
|
|
|
%prep
|
|
%setup -q -n %{name}-%{BINDVERSION}
|
|
|
|
# Common patches
|
|
%patch10 -p1 -b .PIE
|
|
%patch16 -p1 -b .redhat_doc
|
|
%ifnarch alpha ia64
|
|
%patch72 -p1 -b .64bit
|
|
%endif
|
|
%patch102 -p1 -b .rh452060
|
|
%patch106 -p1 -b .rh490837
|
|
%patch109 -p1 -b .rh478718
|
|
%patch112 -p1 -b .rh645544
|
|
%patch130 -p1 -b .libdb
|
|
%patch131 -p1 -b .multlib-conflict
|
|
%patch140 -p1 -b .rh1410433
|
|
%patch145 -p1 -b .rh1205168
|
|
%patch153 -p1 -b .export_suffix
|
|
%patch154 -p1 -b .oot-man
|
|
%patch155 -p1 -b .pk11-internal
|
|
%patch156 -p1 -b .fips-code
|
|
%patch157 -p1 -b .fips-tests
|
|
%patch159 -p1 -b .host-idn-disable
|
|
%patch164 -p1 -b .fips-includes
|
|
%patch165 -p1 -b .rt31459
|
|
%patch166 -p1 -b .rt46047
|
|
%patch167 -p1 -b .rh1668682
|
|
%patch168 -p1 -b .random_test-disable
|
|
%patch174 -p1 -b .rh1737407
|
|
%patch175 -p1 -b .json-c
|
|
%patch177 -p1 -b .serve-stale
|
|
%patch178 -p1 -b .time-monotonic
|
|
%patch183 -p1 -b .rh1980757
|
|
%patch184 -p1 -b .rh2030239
|
|
%patch185 -p1 -b .CVE-2021-25220
|
|
%patch186 -p1 -b .CVE-2021-25220-test
|
|
%patch188 -p1 -b .CVE-2022-38177
|
|
%patch189 -p1 -b .CVE-2022-38178
|
|
%patch190 -p1 -b .rh2101712
|
|
%patch191 -p1 -b .CVE-2022-2795
|
|
%patch192 -p1 -b .rh2133889
|
|
%patch193 -p1 -b .CVE-2022-3094
|
|
%patch194 -p1 -b .CVE-2022-3094
|
|
%patch195 -p1 -b .CVE-2022-3094
|
|
%patch196 -p1 -b .CVE-2022-3094-test
|
|
%patch197 -p1 -b .CVE-2023-2828
|
|
%patch198 -p1 -b .CVE-2023-3341
|
|
%patch199 -p1 -b .RHEL-11785
|
|
%patch200 -p1 -b .b.root-servers.net
|
|
%patch201 -p1 -b .CVE-2023-4408
|
|
%patch202 -p1 -b .CVE-2023-50387+50868
|
|
%patch203 -p1 -b .CVE-2023-2828-fixup
|
|
%patch204 -p1 -b .CVE-2023-50387-fixup
|
|
%patch205 -p1 -b .CVE-2024-1975
|
|
%patch206 -p1 -b .CVE-2024-1737
|
|
%patch208 -p1 -b .CVE-2024-1737-env
|
|
|
|
mkdir lib/dns/tests/testdata/dstrandom
|
|
cp -a %{SOURCE50} lib/dns/tests/testdata/dstrandom/random.data
|
|
|
|
# Avoid having [FIXME: manual] on top of generated manual pages
|
|
# Alternative approach due missing docbook5 style sheets.
|
|
# Remove namespace, so docbook is threated as version 4.
|
|
# Spaces should be fine.
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/4524
|
|
find bin lib/lwres/man -name '*.docbook' -exec \
|
|
sed -e 's|<refmiscinfo>BIND9|<refmiscinfo class="manual">BIND9|' \
|
|
-e 's|xmlns="http://docbook.org/ns/docbook"\sversion="5.0"\s||' \
|
|
-i '{}' ';'
|
|
|
|
%if %{with PKCS11}
|
|
%patch150 -p1 -b .engine-pkcs11
|
|
cp -r bin/named{,-pkcs11}
|
|
cp -r bin/dnssec{,-pkcs11}
|
|
cp -r lib/isc{,-pkcs11}
|
|
cp -r lib/dns{,-pkcs11}
|
|
%patch136 -p1 -b .dist_pkcs11
|
|
%patch149 -p1 -b .kyua-pkcs11
|
|
%endif
|
|
|
|
%if %{with SDB}
|
|
%patch101 -p1 -b .old-api
|
|
mkdir bin/named-sdb
|
|
cp -r bin/named/* bin/named-sdb
|
|
%patch11 -p1 -b .sdbsrc
|
|
# SDB ldap
|
|
cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named-sdb
|
|
# SDB postgreSQL
|
|
cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named-sdb
|
|
# SDB sqlite
|
|
cp -fp contrib/sdb/sqlite/sqlitedb.[ch] bin/named-sdb
|
|
# SDB Berkeley DB - needs to be ported to DB4!
|
|
#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb
|
|
# SDB dir
|
|
cp -fp contrib/sdb/dir/dirdb.[ch] bin/named-sdb
|
|
# SDB tools
|
|
mkdir -p bin/sdb_tools
|
|
cp -fp %{SOURCE30} bin/sdb_tools/ldap2zone.c
|
|
cp -fp %{SOURCE7} bin/sdb_tools/Makefile.in
|
|
#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools
|
|
cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools
|
|
cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools
|
|
cp -fp contrib/sdb/sqlite/zone2sqlite.c bin/sdb_tools
|
|
%patch12 -p1 -b .sdb
|
|
%patch17 -p1 -b .fix_sdb_ldap
|
|
%patch18 -p1 -b .fix_zone2ldap
|
|
%patch137 -p1 -b .strlcat_fix
|
|
%endif
|
|
|
|
%patch133 -p1 -b .rh640538
|
|
%patch134 -p1 -b .rh669163
|
|
|
|
# Sparc and s390 arches need to use -fPIE
|
|
%ifarch sparcv9 sparc64 s390 s390x
|
|
for i in bin/named{,-sdb}/{,unix}/Makefile.in; do
|
|
sed -i 's|fpie|fPIE|g' $i
|
|
done
|
|
%endif
|
|
:;
|
|
|
|
|
|
%build
|
|
## We use out of tree configure/build for export libs
|
|
%define _configure "../configure"
|
|
|
|
# normal and pkcs11 unit tests
|
|
%define unit_prepare_build() \
|
|
cp -uv Kyuafile "%{1}/" \
|
|
find lib -name 'K*.key' -exec cp -uv '{}' "%{1}/{}" ';' \
|
|
find lib -name 'Kyuafile' -exec cp -uv '{}' "%{1}/{}" ';' \
|
|
find lib -name 'testdata' -type d -exec cp -Tav '{}' "%{1}/{}" ';' \
|
|
find lib -name 'testkeys' -type d -exec cp -Tav '{}' "%{1}/{}" ';' \
|
|
|
|
%define systemtest_prepare_build() \
|
|
cp -Tuav bin/tests "%{1}/bin/tests/" \
|
|
cp -uv version "%{1}" \
|
|
|
|
CFLAGS="$CFLAGS $RPM_OPT_FLAGS"
|
|
%if %{with TSAN}
|
|
CFLAGS+=" -O1 -fsanitize=thread -fPIE -pie"
|
|
%endif
|
|
export CFLAGS
|
|
export CPPFLAGS="$CPPFLAGS -DDIG_SIGCHASE"
|
|
export STD_CDEFINES="$CPPFLAGS"
|
|
|
|
|
|
sed -i -e \
|
|
's/RELEASEVER=\(.*\)/RELEASEVER=\1-RedHat-%{version}-%{release}/' \
|
|
version
|
|
|
|
libtoolize -c -f; aclocal -I libtool.m4 --force; autoconf -f
|
|
|
|
mkdir build
|
|
pushd build
|
|
LIBDIR_SUFFIX=
|
|
export LIBDIR_SUFFIX
|
|
%configure \
|
|
--with-python=%{__python3} \
|
|
--with-libtool \
|
|
--localstatedir=/var \
|
|
--enable-threads \
|
|
--enable-ipv6 \
|
|
--enable-filter-aaaa \
|
|
--with-pic \
|
|
--disable-static \
|
|
--includedir=%{_includedir}/bind9 \
|
|
--with-tuning=large \
|
|
--with-libidn2 \
|
|
--enable-openssl-hash \
|
|
%if %{with GEOIP}
|
|
--with-geoip \
|
|
%endif
|
|
%if %{with GEOIP2}
|
|
--with-geoip2 \
|
|
%endif
|
|
%if %{with PKCS11}
|
|
--enable-native-pkcs11 \
|
|
--with-pkcs11=%{_libdir}/pkcs11/libsofthsm2.so \
|
|
%endif
|
|
%if %{with SDB}
|
|
--with-dlopen=yes \
|
|
--with-dlz-ldap=yes \
|
|
--with-dlz-postgres=yes \
|
|
--with-dlz-mysql=yes \
|
|
--with-dlz-filesystem=yes \
|
|
%endif
|
|
%if %{with BDB}
|
|
--with-dlz-bdb=yes \
|
|
%endif
|
|
%if %{with GSSTSIG}
|
|
--with-gssapi=yes \
|
|
--disable-isc-spnego \
|
|
%endif
|
|
%if %{with LMDB}
|
|
--with-lmdb=yes \
|
|
%else
|
|
--with-lmdb=no \
|
|
%endif
|
|
%if %{with JSON}
|
|
--with-libjson \
|
|
%endif
|
|
%if %{with DNSTAP}
|
|
--enable-dnstap \
|
|
%else
|
|
--disable-dnstap \
|
|
%endif
|
|
%if %{with UNITTEST}
|
|
--with-cmocka \
|
|
%endif
|
|
--enable-fixed-rrset \
|
|
--with-docbook-xsl=%{_datadir}/sgml/docbook/xsl-stylesheets \
|
|
--enable-full-report \
|
|
;
|
|
%if %{with DNSTAP}
|
|
pushd lib
|
|
SRCLIB="../../../lib"
|
|
(cd dns && ln -s ${SRCLIB}/dns/dnstap.proto)
|
|
%if %{with PKCS11}
|
|
(cd dns-pkcs11 && ln -s ${SRCLIB}/dns-pkcs11/dnstap.proto)
|
|
%endif
|
|
popd
|
|
%endif
|
|
make %{?_smp_mflags}
|
|
|
|
### FIXME hack!!!
|
|
### xsltproc doesn't find properly configured files
|
|
### and use ones from source tree
|
|
### copy generated files to the original location
|
|
cp -rv doc/* ../doc/
|
|
|
|
|
|
# Regenerate dig.1 manpage
|
|
pushd bin/dig
|
|
make man
|
|
popd
|
|
pushd bin/python
|
|
make man
|
|
popd
|
|
|
|
%if %{with DOC}
|
|
# Does not work. Use upstream generated documentation instead.
|
|
# make doc
|
|
%endif
|
|
|
|
%if %{with DLZ}
|
|
pushd contrib/dlz
|
|
pushd modules
|
|
for DIR in filesystem ldap mysql mysqldyn sqlite3; do
|
|
make -C $DIR CFLAGS="-fPIC -I../include $CFLAGS $LDFLAGS"
|
|
done
|
|
popd
|
|
%if %{with BDB}
|
|
pushd bin/dlzbdb
|
|
make
|
|
popd
|
|
pushd modules
|
|
make -C bdbhpt CFLAGS="-fPIC -I../include $CFLAGS $LDFLAGS"
|
|
popd
|
|
%endif
|
|
popd
|
|
%endif
|
|
popd # build
|
|
|
|
%unit_prepare_build build
|
|
%systemtest_prepare_build build
|
|
|
|
%if %{with EXPORT_LIBS}
|
|
cp isc-config.sh.1 isc-export-config.sh.1
|
|
|
|
## Create export libs ##
|
|
mkdir -p export-libs
|
|
pushd export-libs
|
|
LIBDIR_SUFFIX=%{_export_dir}
|
|
export LIBDIR_SUFFIX
|
|
## minimal subset of options to make clients aka dhcp working
|
|
%{configure} \
|
|
--with-libtool \
|
|
--disable-static \
|
|
--disable-epoll \
|
|
--disable-kqueue \
|
|
--libdir=%{_libdir}%{_export_dir} \
|
|
--includedir=%{_includedir}%{_export_dir}/ \
|
|
--disable-threads \
|
|
--enable-openssl-hash \
|
|
%if %{with GSSTSIG}
|
|
--with-gssapi=yes \
|
|
--disable-isc-spnego \
|
|
%endif
|
|
%if %{with UNITTEST}
|
|
--with-cmocka \
|
|
%endif
|
|
--enable-fixed-rrset \
|
|
--disable-rpz-nsip \
|
|
--disable-rpz-nsdname \
|
|
--without-lmdb \
|
|
--without-libxml2 \
|
|
--without-libjson \
|
|
--without-zlib \
|
|
--without-dlopen \
|
|
--enable-full-report
|
|
|
|
## We don't want to build other libs than -export twice
|
|
## FIXME this should be in patch instead of SED'ing
|
|
## but do we really like/want to patch generated files?
|
|
|
|
mv isc-config.sh isc-export-config.sh
|
|
|
|
sed -i \
|
|
-e '/^SUBDIRS =/s/.*/SUBDIRS = make lib/i' \
|
|
-e 's/isc-config.sh/isc-export-config.sh/g' \
|
|
-e 's/bind9-config/bind9-export-config/g' \
|
|
Makefile
|
|
|
|
sed -i -e \
|
|
"/^SUBDIRS =/s/.*/SUBDIRS = %{bind_export_libs}/i" \
|
|
lib/Makefile
|
|
|
|
for lib in %{bind_export_libs}
|
|
do
|
|
find . -name Makefile -exec sed "s/lib${lib}\./lib${lib}-export\./g" -i {} \;
|
|
sed -e "s/-l${lib}\([^[:alpha:]]\)/-l${lib}-export\1/g" \
|
|
-e "s/lib${lib}\./lib${lib}-export\./g" \
|
|
-i isc-export-config.sh
|
|
done;
|
|
|
|
make %{?_smp_mflags}
|
|
popd
|
|
|
|
# export library unit tests
|
|
%unit_prepare_build export-libs
|
|
# Test just compiled libraries
|
|
for lib in %{bind_export_libs}
|
|
do
|
|
sed -e "s,^\s*include(.*${lib}/.*,-- use &," \
|
|
-i export-libs/lib/Kyuafile
|
|
done
|
|
|
|
sed -e "/^\s*include(/ d" -e 's/^-- use //' \
|
|
-i export-libs/lib/Kyuafile
|
|
|
|
## End of export libs
|
|
%endif
|
|
|
|
%check
|
|
%if %{with PKCS11} && (%{with UNITTEST} || %{with SYSTEMTEST})
|
|
# Tests require initialization of pkcs11 token
|
|
export SOFTHSM2_CONF="`pwd`/softhsm2.conf"
|
|
sh %{SOURCE48} "${SOFTHSM2_CONF}" "`pwd`/softhsm-tokens"
|
|
%endif
|
|
|
|
%if %{with TSAN}
|
|
export TSAN_OPTIONS="log_exe_name=true log_path=ThreadSanitizer exitcode=0"
|
|
%endif
|
|
|
|
%if %{with UNITTEST}
|
|
pushd build
|
|
make unit
|
|
e=$?
|
|
if [ "$e" -ne 0 ]; then
|
|
echo "ERROR: this build of BIND failed 'make unit'. Aborting."
|
|
exit $e;
|
|
fi;
|
|
popd
|
|
|
|
pushd export-libs
|
|
make unit
|
|
e=$?
|
|
if [ "$e" -ne 0 ]; then
|
|
echo "ERROR: this build of BIND export-libs failed 'make unit'. Aborting."
|
|
exit $e;
|
|
fi;
|
|
popd
|
|
|
|
%endif
|
|
|
|
%if %{with SYSTEMTEST}
|
|
# Runs system test if ip addresses are already configured
|
|
# or it is able to configure them
|
|
if perl bin/tests/system/testsock.pl
|
|
then
|
|
CONFIGURED=already
|
|
else
|
|
CONFIGURED=
|
|
sh bin/tests/system/ifconfig.sh up
|
|
perl bin/tests/system/testsock.pl && CONFIGURED=build
|
|
fi
|
|
if [ -n "$CONFIGURED" ]
|
|
then
|
|
set -e
|
|
pushd build/bin/tests
|
|
chown -R ${USER} . # Can be unknown user
|
|
make test %{?_smp_mflags} 2>&1 | tee test.log
|
|
e=$?
|
|
popd
|
|
[ "$CONFIGURED" = build ] && sh bin/tests/system/ifconfig.sh down
|
|
if [ "$e" -ne 0 ]; then
|
|
echo "ERROR: this build of BIND failed 'make test'. Aborting."
|
|
exit $e;
|
|
fi;
|
|
else
|
|
echo 'SKIPPED: tests require root, CAP_NET_ADMIN or already configured test addresses.'
|
|
fi
|
|
%endif
|
|
:
|
|
|
|
%install
|
|
# Build directory hierarchy
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_libdir}/bind
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/named/{slaves,data,dynamic}
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/{man1,man5,man8}
|
|
mkdir -p ${RPM_BUILD_ROOT}/run/named
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/log
|
|
|
|
#chroot
|
|
for D in %{chroot_create_directories}
|
|
do
|
|
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}${D}
|
|
done
|
|
|
|
# create symlink as it is on real filesystem
|
|
pushd ${RPM_BUILD_ROOT}/%{chroot_prefix}/var
|
|
ln -s ../run run
|
|
popd
|
|
|
|
# these are required to prevent them being erased during upgrade of previous
|
|
touch ${RPM_BUILD_ROOT}/%{chroot_prefix}%{_sysconfdir}/named.conf
|
|
#end chroot
|
|
|
|
#sdb-chroot
|
|
%if %{with SDB}
|
|
for D in %{chroot_create_directories}
|
|
do
|
|
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}${D}
|
|
done
|
|
|
|
# create symlink as it is on real filesystem
|
|
pushd ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}%{_localstatedir}
|
|
ln -s ../run run
|
|
popd
|
|
|
|
# these are required to prevent them being erased during upgrade of previous
|
|
touch ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}%{_sysconfdir}/named.conf
|
|
%endif
|
|
#end sdb-chroot
|
|
|
|
pushd build
|
|
make DESTDIR=${RPM_BUILD_ROOT} install
|
|
popd
|
|
|
|
%if %{with EXPORT_LIBS}
|
|
pushd export-libs
|
|
make DESTDIR=${RPM_BUILD_ROOT} install
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/ld.so.conf.d
|
|
echo "%{_libdir}/%{_export_dir}" > %{buildroot}%{_sysconfdir}/ld.so.conf.d/%{name}-export-%{_arch}.conf
|
|
cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}%{_export_dir}
|
|
rm -rf ${RPM_BUILD_ROOT}/%{_includedir}%{_export_dir}/pkcs11/
|
|
rm -f ${RPM_BUILD_ROOT}/%{_includedir}%{_export_dir}/pk11/{constants,internal,pk11,result}.h
|
|
popd
|
|
%endif
|
|
|
|
# Remove unwanted files
|
|
rm -f ${RPM_BUILD_ROOT}/etc/bind.keys
|
|
|
|
# Systemd unit files
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_unitdir}
|
|
install -m 644 %{SOURCE37} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
install -m 644 %{SOURCE38} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
install -m 644 %{SOURCE44} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
install -m 644 %{SOURCE46} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
|
|
%if %{with SDB}
|
|
install -m 644 %{SOURCE39} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
install -m 644 %{SOURCE40} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
install -m 644 %{SOURCE45} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
%endif
|
|
|
|
%if %{with PKCS11}
|
|
install -m 644 %{SOURCE47} ${RPM_BUILD_ROOT}%{_unitdir}
|
|
%endif
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_libexecdir}
|
|
install -m 755 %{SOURCE41} ${RPM_BUILD_ROOT}%{_libexecdir}/setup-named-chroot.sh
|
|
install -m 755 %{SOURCE42} ${RPM_BUILD_ROOT}%{_libexecdir}/generate-rndc-key.sh
|
|
|
|
%if %{with PKCS11}
|
|
install -m 755 %{SOURCE48} ${RPM_BUILD_ROOT}%{_libexecdir}/setup-named-softhsm.sh
|
|
%endif
|
|
|
|
install -m 644 %SOURCE3 ${RPM_BUILD_ROOT}/etc/logrotate.d/named
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig
|
|
install -m 644 %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/named
|
|
install -m 644 %{SOURCE49} ${RPM_BUILD_ROOT}%{_sysconfdir}/named-chroot.files
|
|
%if %{with SDB}
|
|
mkdir -p ${RPM_BUILD_ROOT}/etc/openldap/schema
|
|
install -m 644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/openldap/schema/dnszone.schema
|
|
install -m 644 %{SOURCE12} contrib/sdb/pgsql/
|
|
%endif
|
|
|
|
%if %{with DLZ}
|
|
pushd contrib/dlz
|
|
pushd modules
|
|
for DIR in filesystem ldap mysql mysqldyn sqlite3; do
|
|
make -C $DIR DESTDIR=${RPM_BUILD_ROOT} libdir=%{_libdir}/bind install
|
|
done
|
|
mv mysqldyn/testing/README mysqldyn/testing/README.testing
|
|
%if %{with BDB}
|
|
make -C bdbhpt DESTDIR=${RPM_BUILD_ROOT} libdir=%{_libdir}/bind install
|
|
%endif
|
|
popd
|
|
%if %{with BDB}
|
|
pushd bin/dlzbdb
|
|
make DESTDIR=${RPM_BUILD_ROOT} install
|
|
popd
|
|
%endif
|
|
popd
|
|
%endif
|
|
|
|
# Install isc/errno2result.h header
|
|
install -m 644 lib/isc/unix/errno2result.h ${RPM_BUILD_ROOT}%{_includedir}/bind9/isc
|
|
|
|
pushd build
|
|
# Files required to run test-suite outside of build tree:
|
|
cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}/bind9
|
|
popd
|
|
|
|
# Remove libtool .la files:
|
|
find ${RPM_BUILD_ROOT}/%{_libdir} -name '*.la' -exec '/bin/rm' '-f' '{}' ';';
|
|
|
|
|
|
# SDB manpages
|
|
%if %{with SDB}
|
|
install -m 644 %{SOURCE31} ${RPM_BUILD_ROOT}%{_mandir}/man1/ldap2zone.1
|
|
install -m 644 %{SOURCE32} ${RPM_BUILD_ROOT}%{_mandir}/man8/named-sdb.8
|
|
install -m 644 %{SOURCE33} ${RPM_BUILD_ROOT}%{_mandir}/man1/zonetodb.1
|
|
install -m 644 %{SOURCE34} ${RPM_BUILD_ROOT}%{_mandir}/man1/zone2sqlite.1
|
|
%endif
|
|
|
|
# PKCS11 versions manpages
|
|
%if %{with PKCS11}
|
|
pushd ${RPM_BUILD_ROOT}%{_mandir}/man8
|
|
ln -s named.8.gz named-pkcs11.8.gz
|
|
ln -s dnssec-checkds.8.gz dnssec-checkds-pkcs11.8.gz
|
|
ln -s dnssec-dsfromkey.8.gz dnssec-dsfromkey-pkcs11.8.gz
|
|
ln -s dnssec-importkey.8.gz dnssec-importkey-pkcs11.8.gz
|
|
ln -s dnssec-keyfromlabel.8.gz dnssec-keyfromlabel-pkcs11.8.gz
|
|
ln -s dnssec-keygen.8.gz dnssec-keygen-pkcs11.8.gz
|
|
ln -s dnssec-revoke.8.gz dnssec-revoke-pkcs11.8.gz
|
|
ln -s dnssec-settime.8.gz dnssec-settime-pkcs11.8.gz
|
|
ln -s dnssec-signzone.8.gz dnssec-signzone-pkcs11.8.gz
|
|
ln -s dnssec-verify.8.gz dnssec-verify-pkcs11.8.gz
|
|
popd
|
|
%endif
|
|
|
|
%if %{with DOC}
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_pkgdocdir}
|
|
cp -a doc/arm/*.html doc/arm/*.pdf ${RPM_BUILD_ROOT}%{_pkgdocdir}
|
|
%endif
|
|
|
|
# Ghost config files:
|
|
touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log
|
|
|
|
# configuration files:
|
|
install -m 640 %{SOURCE16} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
|
|
touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.{key,conf}
|
|
install -m 644 %{SOURCE27} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key
|
|
install -m 644 %{SOURCE36} ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named
|
|
|
|
# data files:
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_localstatedir}/named
|
|
install -m 640 %{SOURCE17} ${RPM_BUILD_ROOT}%{_localstatedir}/named/named.ca
|
|
install -m 640 %{SOURCE18} ${RPM_BUILD_ROOT}%{_localstatedir}/named/named.localhost
|
|
install -m 640 %{SOURCE19} ${RPM_BUILD_ROOT}%{_localstatedir}/named/named.loopback
|
|
install -m 640 %{SOURCE20} ${RPM_BUILD_ROOT}%{_localstatedir}/named/named.empty
|
|
install -m 640 %{SOURCE23} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.rfc1912.zones
|
|
|
|
# sample bind configuration files for %%doc:
|
|
mkdir -p sample/etc sample/var/named/{data,slaves}
|
|
install -m 644 %{SOURCE25} sample/etc/named.conf
|
|
# Copy default configuration to %%doc to make it usable from system-config-bind
|
|
install -m 644 %{SOURCE16} named.conf.default
|
|
install -m 644 %{SOURCE23} sample/etc/named.rfc1912.zones
|
|
install -m 644 %{SOURCE18} %{SOURCE19} %{SOURCE20} sample/var/named
|
|
install -m 644 %{SOURCE17} sample/var/named/named.ca
|
|
for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.internal.zone.db my.external.zone.db; do
|
|
echo '@ in soa localhost. root 1 3H 15M 1W 1D
|
|
ns localhost.' > sample/var/named/$f;
|
|
done
|
|
:;
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}
|
|
install -m 644 %{SOURCE35} ${RPM_BUILD_ROOT}%{_tmpfilesdir}/named.conf
|
|
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/rwtab.d
|
|
install -m 644 %{SOURCE43} ${RPM_BUILD_ROOT}%{_sysconfdir}/rwtab.d/named
|
|
|
|
%pre
|
|
if [ "$1" -eq 1 ]; then
|
|
/usr/sbin/groupadd -g %{bind_gid} -f -r named >/dev/null 2>&1 || :;
|
|
/usr/sbin/useradd -u %{bind_uid} -r -N -M -g named -s /bin/false -d /var/named -c Named named >/dev/null 2>&1 || :;
|
|
fi;
|
|
:;
|
|
|
|
%post
|
|
%?ldconfig
|
|
if [ "$1" -eq 1 ]; then
|
|
# Initial installation
|
|
[ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.* >/dev/null 2>&1 ;
|
|
# rndc.key has to have correct perms and ownership, CVE-2007-6283
|
|
[ -e /etc/rndc.key ] && chown root:named /etc/rndc.key
|
|
[ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key
|
|
else
|
|
# Upgrade, use invalid shell
|
|
if getent passwd named | grep ':/sbin/nologin$' >/dev/null; then
|
|
usermod -s /bin/false named
|
|
fi
|
|
# Checkconf will parse out comments
|
|
if /usr/sbin/named-checkconf -p /etc/named.conf 2>/dev/null | grep -q named.iscdlv.key
|
|
then
|
|
echo "Replacing obsolete named.iscdlv.key with named.root.key..."
|
|
sed -e 's|/etc/named\.iscdlv\.key|/etc/named.root.key|' -i.rpmbackup /etc/named.conf
|
|
fi
|
|
fi
|
|
%systemd_post named.service
|
|
:;
|
|
|
|
%preun
|
|
# Package removal, not upgrade
|
|
%systemd_preun named.service
|
|
|
|
%postun
|
|
%?ldconfig
|
|
# Package upgrade, not uninstall
|
|
%systemd_postun_with_restart named.service
|
|
|
|
%if %{with SDB}
|
|
%post sdb
|
|
# Initial installation
|
|
%systemd_post named-sdb.service
|
|
|
|
%preun sdb
|
|
# Package removal, not upgrade
|
|
%systemd_preun named-sdb.service
|
|
|
|
%postun sdb
|
|
# Package upgrade, not uninstall
|
|
%systemd_postun_with_restart named-sdb.service
|
|
%endif
|
|
|
|
%if %{with PKCS11}
|
|
%post pkcs11
|
|
# Initial installation
|
|
%systemd_post named-pkcs11.service
|
|
|
|
%preun pkcs11
|
|
# Package removal, not upgrade
|
|
%systemd_preun named-pkcs11.service
|
|
|
|
%postun pkcs11
|
|
# Package upgrade, not uninstall
|
|
%systemd_postun_with_restart named-pkcs11.service
|
|
%endif
|
|
|
|
%triggerin -- selinux-policy < 3.14.1-44
|
|
# Failsafe for upgrades, set to new default
|
|
if [ -x "%{_sbindir}/selinuxenabled" -a -x "%{_sbindir}/setsebool" ] && %{_sbindir}/selinuxenabled; then
|
|
"%{_sbindir}/setsebool" -P named_write_master_zones=1
|
|
fi
|
|
%end
|
|
|
|
%triggerpostun -n bind -- bind <= 32:9.5.0-20.b1
|
|
if [ "$1" -gt 0 ]; then
|
|
[ -e /etc/rndc.key ] && chown root:named /etc/rndc.key
|
|
[ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key
|
|
fi
|
|
:;
|
|
|
|
%triggerun -- bind < 32:9.9.0-0.6.rc1
|
|
/sbin/chkconfig --del named >/dev/null 2>&1 || :
|
|
/bin/systemctl try-restart named.service >/dev/null 2>&1 || :
|
|
|
|
%ldconfig_scriptlets libs
|
|
%ldconfig_scriptlets libs-lite
|
|
|
|
%if %{with PKCS11}
|
|
%ldconfig_scriptlets pkcs11-libs
|
|
%endif
|
|
|
|
%if %{with EXPORT_LIBS}
|
|
%post export-libs -p /sbin/ldconfig
|
|
%end
|
|
|
|
%postun export-libs -p /sbin/ldconfig
|
|
%end
|
|
%endif
|
|
|
|
# Fix permissions on existing device files on upgrade
|
|
%define chroot_fix_devices() \
|
|
if [ $1 -gt 1 ]; then \
|
|
for DEV in "%{1}/dev"/{null,random,zero}; do \
|
|
if [ -e "$DEV" ] && [ "$(/bin/stat --printf="%G %a" "$DEV")" = "root 644" ]; \
|
|
then \
|
|
/bin/chmod 0664 "$DEV" \
|
|
/bin/chgrp named "$DEV" \
|
|
fi \
|
|
done \
|
|
fi
|
|
|
|
%post chroot
|
|
%systemd_post named-chroot.service
|
|
%chroot_fix_devices %{chroot_prefix}
|
|
:;
|
|
|
|
%posttrans chroot
|
|
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then
|
|
[ -x /sbin/restorecon ] && /sbin/restorecon %{chroot_prefix}/dev/* > /dev/null 2>&1;
|
|
fi;
|
|
|
|
%preun chroot
|
|
# wait for stop of both named-chroot and named-chroot-setup services
|
|
# on uninstall
|
|
%systemd_preun named-chroot.service named-chroot-setup.service
|
|
:;
|
|
|
|
%postun chroot
|
|
# Package upgrade, not uninstall
|
|
%systemd_postun_with_restart named-chroot.service
|
|
|
|
|
|
%if %{with SDB}
|
|
|
|
%post sdb-chroot
|
|
%systemd_post named-sdb-chroot.service
|
|
%chroot_fix_devices %{chroot_sdb_prefix}
|
|
:;
|
|
|
|
%posttrans sdb-chroot
|
|
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then
|
|
[ -x /sbin/restorecon ] && /sbin/restorecon %{chroot_sdb_prefix}/dev/* > /dev/null 2>&1;
|
|
fi;
|
|
:;
|
|
|
|
%preun sdb-chroot
|
|
%systemd_preun named-sdb-chroot.service
|
|
:;
|
|
|
|
%postun sdb-chroot
|
|
# Package upgrade, not uninstall
|
|
%systemd_postun_with_restart named-sdb-chroot.service
|
|
|
|
%endif
|
|
|
|
%clean
|
|
rm -rf ${RPM_BUILD_ROOT}
|
|
:;
|
|
|
|
%files
|
|
%{_libdir}/bind
|
|
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/named
|
|
%config(noreplace) %attr(0644,root,named) %{_sysconfdir}/named.root.key
|
|
%{_tmpfilesdir}/named.conf
|
|
%{_sysconfdir}/rwtab.d/named
|
|
%{_unitdir}/named.service
|
|
%{_unitdir}/named-setup-rndc.service
|
|
%{_sbindir}/named-journalprint
|
|
%{_sbindir}/named-checkconf
|
|
%{_bindir}/named-rrchecker
|
|
%{_bindir}/mdig
|
|
%{_sbindir}/lwresd
|
|
%{_sbindir}/named
|
|
%{_sbindir}/rndc*
|
|
%{_libexecdir}/generate-rndc-key.sh
|
|
%{_mandir}/man1/mdig.1*
|
|
%{_mandir}/man1/named-rrchecker.1*
|
|
%{_mandir}/man5/named.conf.5*
|
|
%{_mandir}/man5/rndc.conf.5*
|
|
%{_mandir}/man8/rndc.8*
|
|
%{_mandir}/man8/named.8*
|
|
%{_mandir}/man8/lwresd.8*
|
|
%{_mandir}/man8/named-checkconf.8*
|
|
%{_mandir}/man8/rndc-confgen.8*
|
|
%{_mandir}/man8/named-journalprint.8*
|
|
%doc CHANGES README named.conf.default
|
|
%doc sample/
|
|
%if %{without DOC}
|
|
%doc doc/arm/*.html doc/arm/*.pdf
|
|
%endif
|
|
|
|
# Hide configuration
|
|
%defattr(0640,root,named,0750)
|
|
%dir %{_sysconfdir}/named
|
|
%config(noreplace) %verify(not link) %{_sysconfdir}/named.conf
|
|
%config(noreplace) %verify(not link) %{_sysconfdir}/named.rfc1912.zones
|
|
%defattr(0660,root,named,01770)
|
|
%dir %{_localstatedir}/named
|
|
%defattr(0660,named,named,0770)
|
|
%dir %{_localstatedir}/named/slaves
|
|
%dir %{_localstatedir}/named/data
|
|
%dir %{_localstatedir}/named/dynamic
|
|
%ghost %{_localstatedir}/log/named.log
|
|
%defattr(0640,root,named,0750)
|
|
%config %verify(not link) %{_localstatedir}/named/named.ca
|
|
%config %verify(not link) %{_localstatedir}/named/named.localhost
|
|
%config %verify(not link) %{_localstatedir}/named/named.loopback
|
|
%config %verify(not link) %{_localstatedir}/named/named.empty
|
|
%ghost %config(noreplace) %{_sysconfdir}/rndc.key
|
|
# ^- rndc.key now created on first install only if it does not exist
|
|
%ghost %config(noreplace) %{_sysconfdir}/rndc.conf
|
|
# ^- The default rndc.conf which uses rndc.key is in named's default internal config -
|
|
# so rndc.conf is not necessary.
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/named
|
|
%defattr(-,named,named,-)
|
|
%dir /run/named
|
|
|
|
%if %{with SDB}
|
|
%files sdb
|
|
%{_unitdir}/named-sdb.service
|
|
%{_mandir}/man1/zone2ldap.1*
|
|
%{_mandir}/man1/ldap2zone.1*
|
|
%{_mandir}/man1/zonetodb.1*
|
|
%{_mandir}/man1/zone2sqlite.1*
|
|
%{_mandir}/man8/named-sdb.8*
|
|
%doc contrib/sdb/ldap/README.ldap contrib/sdb/ldap/INSTALL.ldap contrib/sdb/pgsql/README.sdb_pgsql
|
|
%dir %{_sysconfdir}/openldap/schema
|
|
%config(noreplace) %{_sysconfdir}/openldap/schema/dnszone.schema
|
|
%{_sbindir}/named-sdb
|
|
%{_sbindir}/zone2ldap
|
|
%{_sbindir}/ldap2zone
|
|
%{_sbindir}/zonetodb
|
|
%{_sbindir}/zone2sqlite
|
|
%endif
|
|
|
|
%files libs
|
|
%{_libdir}/libbind9.so.161*
|
|
%{_libdir}/libisccc.so.161*
|
|
%{_libdir}/liblwres.so.161*
|
|
|
|
%files libs-lite
|
|
%{_libdir}/libdns.so.%{sover_dns}*
|
|
%{_libdir}/libirs.so.%{sover_irs}*
|
|
%{_libdir}/libisc.so.%{sover_isc}*
|
|
%{_libdir}/libisccfg.so.%{sover_isccfg}*
|
|
|
|
%files license
|
|
%{!?_licensedir:%global license %%doc}
|
|
%license COPYRIGHT
|
|
|
|
%files utils
|
|
%{_bindir}/dig
|
|
%{_bindir}/delv
|
|
%{_bindir}/host
|
|
%{_bindir}/nslookup
|
|
%{_bindir}/nsupdate
|
|
%{_bindir}/arpaname
|
|
%{_sbindir}/ddns-confgen
|
|
%{_sbindir}/tsig-keygen
|
|
%{_sbindir}/genrandom
|
|
%{_sbindir}/nsec3hash
|
|
%{_sbindir}/dnssec*
|
|
%if %{with PKCS11}
|
|
%exclude %{_sbindir}/dnssec*pkcs11
|
|
%endif
|
|
%{_sbindir}/isc-hmac-fixup
|
|
%{_sbindir}/named-checkzone
|
|
%{_sbindir}/named-compilezone
|
|
%if %{with DNSTAP}
|
|
%{_bindir}/dnstap-read
|
|
%{_mandir}/man1/dnstap-read.1*
|
|
%endif
|
|
%if %{with LMDB}
|
|
%{_sbindir}/named-nzd2nzf
|
|
%endif
|
|
%if %{with DNSTAP}
|
|
%{_bindir}/dnstap-read
|
|
%{_mandir}/man1/dnstap-read.1*
|
|
%endif
|
|
%{_mandir}/man1/host.1*
|
|
%{_mandir}/man1/nsupdate.1*
|
|
%{_mandir}/man1/dig.1*
|
|
%{_mandir}/man1/delv.1*
|
|
%{_mandir}/man1/nslookup.1*
|
|
%{_mandir}/man1/arpaname.1*
|
|
%{_mandir}/man8/ddns-confgen.8*
|
|
%{_mandir}/man8/tsig-keygen.8*
|
|
%{_mandir}/man8/genrandom.8*
|
|
%{_mandir}/man8/nsec3hash.8*
|
|
%{_mandir}/man8/dnssec*.8*
|
|
%if %{with PKCS11}
|
|
%exclude %{_mandir}/man8/dnssec*-pkcs11.8*
|
|
%endif
|
|
%{_mandir}/man8/isc-hmac-fixup.8*
|
|
%{_mandir}/man8/named-checkzone.8*
|
|
%{_mandir}/man8/named-compilezone.8*
|
|
%if %{with LMDB}
|
|
%{_mandir}/man8/named-nzd2nzf.8*
|
|
%endif
|
|
%{_sysconfdir}/trusted-key.key
|
|
|
|
%files devel
|
|
%{_libdir}/libbind9.so
|
|
%{_libdir}/libisccc.so
|
|
%{_libdir}/liblwres.so
|
|
%{_includedir}/bind9/config.h
|
|
%{_includedir}/bind9/bind9
|
|
%{_includedir}/bind9/isccc
|
|
%{_includedir}/bind9/lwres
|
|
%{_mandir}/man1/isc-config.sh.1*
|
|
%{_mandir}/man1/bind9-config.1*
|
|
%{_mandir}/man3/lwres*
|
|
%{_bindir}/isc-config.sh
|
|
%{_bindir}/bind9-config
|
|
|
|
%files lite-devel
|
|
%{_libdir}/libdns.so
|
|
%{_libdir}/libirs.so
|
|
%{_libdir}/libisc.so
|
|
%{_libdir}/libisccfg.so
|
|
%dir %{_includedir}/bind9
|
|
%{_includedir}/bind9/dns
|
|
%{_includedir}/bind9/dst
|
|
%{_includedir}/bind9/irs
|
|
%{_includedir}/bind9/isc
|
|
%dir %{_includedir}/bind9/pk11
|
|
%{_includedir}/bind9/pk11/site.h
|
|
%{_includedir}/bind9/isccfg
|
|
|
|
%files chroot
|
|
%config(noreplace) %{_sysconfdir}/named-chroot.files
|
|
%{_unitdir}/named-chroot.service
|
|
%{_unitdir}/named-chroot-setup.service
|
|
%{_libexecdir}/setup-named-chroot.sh
|
|
%defattr(0664,root,named,-)
|
|
%ghost %dev(c,1,3) %verify(not mtime) %{chroot_prefix}/dev/null
|
|
%ghost %dev(c,1,8) %verify(not mtime) %{chroot_prefix}/dev/random
|
|
%ghost %dev(c,1,9) %verify(not mtime) %{chroot_prefix}/dev/urandom
|
|
%ghost %dev(c,1,5) %verify(not mtime) %{chroot_prefix}/dev/zero
|
|
%defattr(0640,root,named,0750)
|
|
%dir %{chroot_prefix}
|
|
%dir %{chroot_prefix}/dev
|
|
%dir %{chroot_prefix}%{_sysconfdir}
|
|
%dir %{chroot_prefix}%{_sysconfdir}/named
|
|
%dir %{chroot_prefix}%{_sysconfdir}/pki
|
|
%dir %{chroot_prefix}%{_sysconfdir}/pki/dnssec-keys
|
|
%dir %{chroot_prefix}%{_sysconfdir}/crypto-policies
|
|
%dir %{chroot_prefix}%{_sysconfdir}/crypto-policies/back-ends
|
|
%dir %{chroot_prefix}%{_localstatedir}
|
|
%dir %{chroot_prefix}/run
|
|
%ghost %config(noreplace) %{chroot_prefix}%{_sysconfdir}/named.conf
|
|
%defattr(-,root,root,-)
|
|
%dir %{chroot_prefix}/usr
|
|
%dir %{chroot_prefix}/%{_libdir}
|
|
%dir %{chroot_prefix}/%{_libdir}/bind
|
|
%dir %{chroot_prefix}/%{_datadir}/GeoIP
|
|
%{chroot_prefix}/proc
|
|
%defattr(0660,root,named,01770)
|
|
%dir %{chroot_prefix}%{_localstatedir}/named
|
|
%defattr(0660,named,named,0770)
|
|
%dir %{chroot_prefix}%{_localstatedir}/tmp
|
|
%dir %{chroot_prefix}%{_localstatedir}/log
|
|
%defattr(-,named,named,-)
|
|
%dir %{chroot_prefix}/run/named
|
|
%{chroot_prefix}%{_localstatedir}/run
|
|
|
|
%if %{with SDB}
|
|
%files sdb-chroot
|
|
%config(noreplace) %{_sysconfdir}/named-chroot.files
|
|
%{_unitdir}/named-sdb-chroot.service
|
|
%{_unitdir}/named-sdb-chroot-setup.service
|
|
%{_libexecdir}/setup-named-chroot.sh
|
|
%defattr(0664,root,named,-)
|
|
%ghost %dev(c,1,3) %verify(not mtime) %{chroot_sdb_prefix}/dev/null
|
|
%ghost %dev(c,1,8) %verify(not mtime) %{chroot_sdb_prefix}/dev/random
|
|
%ghost %dev(c,1,9) %verify(not mtime) %{chroot_sdb_prefix}/dev/urandom
|
|
%ghost %dev(c,1,5) %verify(not mtime) %{chroot_sdb_prefix}/dev/zero
|
|
%defattr(0640,root,named,0750)
|
|
%dir %{chroot_sdb_prefix}
|
|
%dir %{chroot_sdb_prefix}/dev
|
|
%dir %{chroot_sdb_prefix}%{_sysconfdir}
|
|
%dir %{chroot_sdb_prefix}%{_sysconfdir}/named
|
|
%dir %{chroot_sdb_prefix}%{_sysconfdir}/pki
|
|
%dir %{chroot_sdb_prefix}%{_sysconfdir}/pki/dnssec-keys
|
|
%dir %{chroot_sdb_prefix}%{_sysconfdir}/crypto-policies
|
|
%dir %{chroot_sdb_prefix}%{_sysconfdir}/crypto-policies/back-ends
|
|
%dir %{chroot_sdb_prefix}%{_localstatedir}
|
|
%dir %{chroot_sdb_prefix}/run
|
|
%ghost %config(noreplace) %{chroot_sdb_prefix}%{_sysconfdir}/named.conf
|
|
%defattr(0660,root,named,01770)
|
|
%dir %{chroot_sdb_prefix}%{_localstatedir}/named
|
|
%defattr(-,root,root,-)
|
|
%dir %{chroot_sdb_prefix}/usr
|
|
%dir %{chroot_sdb_prefix}/%{_libdir}
|
|
%dir %{chroot_sdb_prefix}/%{_libdir}/bind
|
|
%dir %{chroot_sdb_prefix}/%{_datadir}/GeoIP
|
|
%defattr(0660,named,named,0770)
|
|
%dir %{chroot_sdb_prefix}%{_localstatedir}/tmp
|
|
%dir %{chroot_sdb_prefix}%{_localstatedir}/log
|
|
%defattr(-,named,named,-)
|
|
%dir %{chroot_sdb_prefix}/run/named
|
|
%{chroot_sdb_prefix}%{_localstatedir}/run
|
|
%endif
|
|
|
|
%if %{with PKCS11}
|
|
%files pkcs11
|
|
%{_sbindir}/named-pkcs11
|
|
%{_unitdir}/named-pkcs11.service
|
|
%{_mandir}/man8/named-pkcs11.8*
|
|
%{_libexecdir}/setup-named-softhsm.sh
|
|
|
|
%files pkcs11-utils
|
|
%{_sbindir}/dnssec*pkcs11
|
|
%{_sbindir}/pkcs11-destroy
|
|
%{_sbindir}/pkcs11-keygen
|
|
%{_sbindir}/pkcs11-list
|
|
%{_sbindir}/pkcs11-tokens
|
|
%{_mandir}/man8/pkcs11*.8*
|
|
%{_mandir}/man8/dnssec*-pkcs11.8*
|
|
%{_mandir}/man8/dnssec*.8*
|
|
%exclude %{_mandir}/man8/dnssec-coverage.8*
|
|
%exclude %{_mandir}/man8/dnssec-keymgr.8*
|
|
|
|
%files pkcs11-libs
|
|
%{_libdir}/libdns-pkcs11.so.%{sover_dns}*
|
|
%{_libdir}/libisc-pkcs11.so.%{sover_isc}*
|
|
|
|
%files pkcs11-devel
|
|
%{_includedir}/bind9/pk11/*.h
|
|
%exclude %{_includedir}/bind9/pk11/site.h
|
|
%{_includedir}/bind9/pkcs11
|
|
%{_libdir}/libdns-pkcs11.so
|
|
%{_libdir}/libisc-pkcs11.so
|
|
%endif
|
|
|
|
%if %{with EXPORT_LIBS}
|
|
%files export-libs
|
|
%dir %{_libdir}/%{_export_dir}
|
|
%{_libdir}/%{_export_dir}/libdns-export.so.%{sover_dns}*
|
|
%{_libdir}/%{_export_dir}/libirs-export.so.%{sover_irs}*
|
|
%{_libdir}/%{_export_dir}/libisc-export.so.%{sover_isc}*
|
|
%{_libdir}/%{_export_dir}/libisccfg-export.so.%{sover_isccfg}*
|
|
%config(noreplace) %{_sysconfdir}/ld.so.conf.d/%{name}-export-%{_arch}.conf
|
|
# This subpackage has to distribute its own license. Do not conflict with
|
|
# other subpackages of different version
|
|
%license COPYRIGHT
|
|
|
|
%files export-devel
|
|
%{_libdir}/%{_export_dir}/libdns-export.so
|
|
%{_libdir}/%{_export_dir}/libirs-export.so
|
|
%{_libdir}/%{_export_dir}/libisc-export.so
|
|
%{_libdir}/%{_export_dir}/libisccfg-export.so
|
|
%dir %{_includedir}/%{_export_dir}
|
|
%{_includedir}/%{_export_dir}/dns
|
|
%{_includedir}/%{_export_dir}/dst
|
|
%{_includedir}/%{_export_dir}/irs
|
|
%{_includedir}/%{_export_dir}/isc
|
|
%dir %{_includedir}/%{_export_dir}/pk11
|
|
%{_includedir}/%{_export_dir}/pk11/site.h
|
|
%{_includedir}/%{_export_dir}/isccfg
|
|
%{_includedir}/%{_export_dir}/config.h
|
|
%{_mandir}/man1/isc-export-config.sh.1*
|
|
%{_mandir}/man1/bind9-export-config.1*
|
|
%attr(0755,root,root) %{_bindir}/isc-export-config.sh
|
|
%{_bindir}/bind9-export-config
|
|
%endif
|
|
|
|
%if %{with DLZ} && %{with BDB}
|
|
%files dlz-bdb
|
|
%{_sbindir}/dlzbdb
|
|
%{_libdir}/bind/dlz_bdbhpt_dynamic.so
|
|
%doc contrib/dlz/modules/bdbhpt/testing/*
|
|
|
|
%endif
|
|
|
|
%if %{with DLZ}
|
|
%files dlz-filesystem
|
|
%{_libdir}/bind/dlz_filesystem_dynamic.so
|
|
|
|
%files dlz-mysql
|
|
%{_libdir}/bind/dlz_mysql_dynamic.so
|
|
%doc contrib/dlz/modules/mysql/testing/*
|
|
|
|
%files dlz-mysqldyn
|
|
%{_libdir}/bind/dlz_mysqldyn_mod.so
|
|
%doc contrib/dlz/modules/mysqldyn/testing/*
|
|
%doc contrib/dlz/modules/mysqldyn/README
|
|
|
|
%files dlz-ldap
|
|
%{_libdir}/bind/dlz_ldap_dynamic.so
|
|
%doc contrib/dlz/modules/ldap/testing/*
|
|
|
|
%files dlz-sqlite3
|
|
%{_libdir}/bind/dlz_sqlite3_dynamic.so
|
|
%doc contrib/dlz/modules/sqlite3/testing/*
|
|
|
|
%endif
|
|
|
|
%files -n python3-bind
|
|
%{python3_sitelib}/*.egg-info
|
|
%{python3_sitelib}/isc/
|
|
|
|
%if %{with DOC}
|
|
%files doc
|
|
%dir %{_pkgdocdir}
|
|
%doc %{_pkgdocdir}/*.html
|
|
%doc %{_pkgdocdir}/*.pdf
|
|
%endif
|
|
|
|
%changelog
|
|
* Tue Aug 06 2024 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.2
|
|
- Rebuild after CI change
|
|
|
|
* Thu Jul 18 2024 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.1
|
|
- Resolve CVE-2024-1975
|
|
- Resolve CVE-2024-1737
|
|
- Add ability to change runtime limits for max types and records per name
|
|
|
|
* Mon Apr 15 2024 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16
|
|
- Ensure incompatible dhcp is not accepted
|
|
|
|
* Fri Apr 12 2024 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-15
|
|
- Ensure incompatible bind-dyndb-ldap is not accepted
|
|
|
|
* Mon Feb 26 2024 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-14
|
|
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
|
|
- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
|
|
- Do not use header_prev in expire_lru_headers
|
|
|
|
* Thu Dec 07 2023 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-13
|
|
- Update addresses of b.root-servers.net (RHEL-18449)
|
|
|
|
* Mon Oct 09 2023 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-12
|
|
- Disable caching of stale records by default (RHEL-11785)
|
|
|
|
* Tue Sep 19 2023 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-11
|
|
- Prevent exahustion of memory from control channel (CVE-2023-3341)
|
|
|
|
* Thu Jun 22 2023 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-10
|
|
- Prevent the cache going over the configured limit (CVE-2023-2828)
|
|
|
|
* Wed Feb 08 2023 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-9
|
|
- Prevent flooding with UPDATE requests (CVE-2022-3094)
|
|
- include upstream test for that change
|
|
|
|
* Thu Oct 13 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-8
|
|
- Correct regression preventing bind-dyndb-ldap build (#2133889)
|
|
|
|
* Thu Sep 29 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-7
|
|
- Prevent excessive resource use while processing large delegations.
|
|
(CVE-2022-2795)
|
|
|
|
* Thu Sep 22 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-6
|
|
- Prevent freeing zone during statistics rendering (#2101712)
|
|
|
|
* Thu Sep 22 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-5
|
|
- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
|
|
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
|
|
|
|
* Wed Apr 13 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-4
|
|
- Tighten cache protection against record from forwarders (CVE-2021-25220)
|
|
- Include test of forwarders
|
|
|
|
* Thu Feb 10 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-2
|
|
- Reduce memory used per-view on machine with few processors (#2030239)
|
|
|
|
* Tue Dec 21 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-2
|
|
- Rebuilt on a new side-tag (#2013993)
|
|
|
|
* Mon Nov 01 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-1
|
|
- Update to 9.11.36
|
|
|
|
* Mon Nov 01 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-9
|
|
- Correct tsig system test
|
|
|
|
* Wed Oct 13 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-8
|
|
- Propagate ephemeral port ranges to chroot (#1950714)
|
|
|
|
* Tue Aug 24 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-7
|
|
- Do not request softhsm from bind-pkcs11, it is only in modular build
|
|
(#1934035)
|
|
|
|
* Fri Jul 09 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-6
|
|
- Use random entropy to generate unique TKEY identifiers (#1980916)
|
|
|
|
* Fri May 07 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-5
|
|
- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
|
|
(#1953056)
|
|
|
|
* Tue Apr 27 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
|
|
- Possible assertion failure on DNAME processing (CVE-2021-25215)
|
|
- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
|
|
|
|
* Mon Feb 15 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-3
|
|
- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
|
|
|
|
* Tue Jan 05 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
|
|
- Add DNSTAP support (#1854148), new dnstap-read tool
|
|
- Add JSON support in statistics-channel (#1899257)
|
|
|
|
* Mon Jan 04 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-1
|
|
- Update to 9.11.26
|
|
|
|
* Thu Nov 26 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
|
|
- Update to 9.11.25
|
|
- Require libcap from devel package
|
|
- Fix crash on NTA recheck failure (#1893761)
|
|
|
|
* Fri Sep 25 2020 Tomas Korbar <tkorbar@redhat.com> - 32:9.11.20-6
|
|
- Do not ignore RPZ wildcard passthru (#1876492)
|
|
|
|
* Tue Aug 18 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
|
|
- Fix tsig-request verify (CVE-2020-8622)
|
|
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
|
|
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
|
|
- Include available test
|
|
|
|
* Wed Jul 22 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.20-4
|
|
- Prevent crash on dstlib initialization failure (#1859454)
|
|
|
|
* Fri Jun 19 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.20-3
|
|
- Add remaining require to bind package (#1633169)
|
|
|
|
* Fri Jun 19 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.20-2
|
|
- Add manual page for dnssec-importkey-pkcs11 (#1666785)
|
|
- Add versioned depends to all library subpackages
|
|
|
|
* Wed Jun 17 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.20-1
|
|
- Update to 9.11.20
|
|
|
|
* Mon Jun 08 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.19-2
|
|
- Remove old KSK 19036 from remaining trusted-key.key
|
|
|
|
* Fri May 15 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.19-1
|
|
- Update to 9.11.19 (CVE-2020-8616, CVE-2020-8617)
|
|
|
|
* Thu Apr 16 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.18-1
|
|
- Update to 9.11.18
|
|
|
|
* Tue Apr 07 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.17-1
|
|
- Update to 9.11.17
|
|
|
|
* Tue Apr 07 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.14-1
|
|
- Update to 9.11.14
|
|
- Remove libmaxminddb-devel from devel package dependencies
|
|
|
|
* Thu Feb 27 2020 Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.13-3
|
|
- Fix rwlock to be thread-safe (#1740511)
|
|
|
|
* Tue Jan 14 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.13-2
|
|
- Release GeoIP data on reload (#1790879)
|
|
|
|
* Tue Nov 19 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.13-1
|
|
- Update to 9.11.13
|
|
|
|
* Tue Nov 19 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.12-5
|
|
- Report failures on systemctl reload (#1739428)
|
|
|
|
* Mon Nov 18 2019 Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.12-4
|
|
- dhcp: Use monotonic time for detecting time jumps if available (#1729211)
|
|
|
|
* Fri Nov 15 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.12-3
|
|
- Backported serve-stale feature (#1664863)
|
|
|
|
* Thu Nov 07 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
|
|
- Add GeoLite2 support (#1564443)
|
|
- Add GeoIP to bind-chroot (#1497646)
|
|
- Fix wrong default GeoIP directory (#1768258)
|
|
|
|
* Mon Oct 21 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.12-1
|
|
- Update to 9.11.12 (#1557762)
|
|
|
|
* Wed Sep 25 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.11-1
|
|
- Update to 9.11.11
|
|
|
|
* Tue Aug 27 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.10-1
|
|
- Update to 9.11.10
|
|
- Share pkcs11-utils and dnssec-utils manuals instead of recommend
|
|
|
|
* Thu Aug 08 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.7-1
|
|
- Update to 9.11.7
|
|
|
|
* Thu Aug 08 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2
|
|
- Permit explicit disabling of RSAMD5 in FIPS mode (#1737407)
|
|
|
|
* Wed Jul 17 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-25.P2
|
|
- Fix CVE-2018-5745
|
|
- Fix CVE-2019-6465
|
|
|
|
* Wed Jul 17 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2
|
|
- Do not override random numbers provider in DHCP (#1668682)
|
|
|
|
* Wed Jul 17 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2
|
|
- Report errors on invalid IDN 2008 names (#1679307)
|
|
|
|
* Wed Jun 19 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2
|
|
- Fix CVE-2019-6471
|
|
|
|
* Thu Jun 13 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2
|
|
- Fix random generator initialization
|
|
|
|
* Wed Apr 24 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2
|
|
- Fix multilib conflict of devel packages (#1666785)
|
|
|
|
* Wed Apr 24 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
|
|
- Add support for OpenSSL provided random data
|
|
- Disable often failing unit test random_test
|
|
- Add /dev/urandom to chroot
|
|
|
|
* Wed Apr 24 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-18.P2
|
|
- Fix zone2ldap tool memory management (#1602451)
|
|
- Add support for OpenSSL provided random data
|
|
|
|
* Wed Apr 24 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-17.P2
|
|
- Fix inefective limit of TCP clients (CVE-2018-5743)
|
|
|
|
* Thu Feb 21 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2
|
|
- Fix CVE-2018-5744
|
|
|
|
* Thu Jan 10 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2
|
|
- Fix error on bind-chroot upgrade before first start (#1634753)
|
|
|
|
* Mon Oct 15 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2
|
|
- Rely on named_write_master_zones being default on (#1588592)
|
|
|
|
* Sat Sep 29 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2
|
|
- Fix export-libs macro & scriptlet
|
|
|
|
* Thu Sep 27 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2
|
|
- Update to bind-9.11.4-P2 (#1631134, #1633665)
|
|
|
|
|
|
* Thu Sep 27 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-11.P1
|
|
- Reenable IDN output but allow turning it off (#1632891)
|
|
|
|
* Wed Sep 26 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P1
|
|
- Make spec valid when python3-rpm-macros is not installed (#1619153)
|
|
|
|
* Wed Sep 19 2018 Tomas Orsava <torsava@redhat.com> - 32:9.11.4-9.P1
|
|
- Require the Python interpreter directly instead of using the package name
|
|
- Related: rhbz#1619153
|
|
|
|
* Mon Sep 17 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P1
|
|
- Fix annocheck failures, replace unoptimized code by OpenSSL counterparts (#1624100)
|
|
|
|
* Tue Aug 14 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
|
|
- Fix chroot devices upgrade warning (#1592872)
|
|
- Automatically replace obsoleted ISC DLV key with root key (#1595782)
|
|
|
|
* Fri Aug 10 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P1
|
|
- Fix sdb-chroot devices upgrade (#1592872)
|
|
|
|
* Thu Aug 09 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P1
|
|
- Update to 9.11.4-P1
|
|
- Adds root key sentinel support
|
|
- Large IXFR zone transfers are rejected to prevent journal corruption
|
|
- Fixes CVE-2018-5740
|
|
|
|
* Thu Aug 02 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4
|
|
- Support unavailable MD5 in FIPS mode
|
|
|
|
* Thu Aug 02 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3
|
|
- Use OpenSSL for digest operations (#1611537)
|
|
|
|
* Tue Jul 31 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2
|
|
- Install generated manual pages
|
|
- Remove system-config-bind from manual
|
|
- Disable GeoIP support (#1609856)
|
|
|
|
* Thu Jul 12 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1
|
|
- Update to 9.11.4
|
|
- Use kyua instead of kyua-cli for unit tests
|
|
|
|
* Thu Jul 12 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-15
|
|
- Use new config file named-chroot.files for chroot setup (#1429656)
|
|
- Fix chroot devices file verification (#1592873)
|
|
- Prevent errors on bind-chroot uninstall when running (#1600583)
|
|
|
|
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 32:9.11.3-14
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
* Mon Jul 02 2018 Miro Hrončok <mhroncok@redhat.com> - 32:9.11.3-13
|
|
- Rebuilt for Python 3.7
|
|
|
|
* Wed Jun 27 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-12
|
|
- Require utils instead of library
|
|
|
|
* Wed Jun 27 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-11
|
|
- Remove named.iscdlv.key file (#1595782)
|
|
- Fix CVE-2018-5738
|
|
|
|
* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> - 32:9.11.3-10
|
|
- Rebuilt for Python 3.7
|
|
|
|
* Fri May 25 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-9
|
|
- Make named home writeable (#1422680)
|
|
- Change named shell to /bin/false
|
|
|
|
* Fri May 25 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-8
|
|
- Require C++ on build when shipped atf library is used
|
|
|
|
* Mon Apr 09 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-7
|
|
- Run tests also without kyua
|
|
|
|
* Thu Apr 05 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-6
|
|
- Do not link libidn2 to all libraries (#1098783)
|
|
- Update named.ca
|
|
|
|
* Tue Apr 03 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-5
|
|
- Enable libidn2 support (#1098783)
|
|
- Make +noidnout default
|
|
- Compile export libs without GSSAPI
|
|
|
|
* Wed Mar 21 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-4
|
|
- Rebase to 9.11.3
|
|
- Add dig support for libidn2 (#1098783)
|
|
|
|
* Wed Mar 21 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-3.b1
|
|
- Fix build with disabled unittest
|
|
- Recommend softhsm from pkcs11 variant
|
|
|
|
* Thu Feb 22 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-2.b1
|
|
- Require openssl-devel and libcap-devel from bind-export-devel
|
|
- Conflict with bind99-devel
|
|
- Change spec globals to rpmbuild --with feature
|
|
|
|
* Thu Feb 15 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-1.b1
|
|
- Rebase to 9.11.3b1
|
|
|
|
* Wed Feb 07 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-11.P1
|
|
- Use versioned provides
|
|
- Fix starting of unit tests
|
|
- Forward export libs path to isc-config
|
|
- Rename export devel subpackage to bind-export-devel
|
|
|
|
* Wed Feb 07 2018 Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.2-10.P1
|
|
- Add obsoletes/provides tags for smooth update
|
|
|
|
* Wed Feb 07 2018 Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.2-9.P1
|
|
- Build devel package for export-libs
|
|
|
|
* Wed Feb 07 2018 Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.2-8.P1
|
|
- Build export libraries with disabled threads and selects
|
|
|
|
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 32:9.11.2-7.P1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
* Tue Jan 30 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-6.P1
|
|
- Remove ldconfig calls where possible
|
|
- Note -z defs cannot be enabled until more work
|
|
|
|
* Tue Jan 16 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-5.P1
|
|
- Fix CVE-2017-3145, rebase to 9.11.2-P1
|
|
|
|
* Tue Jan 02 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-4
|
|
- Enable unit tests with kyua tool (#1532694)
|
|
- Provide internal tool to prepare softhsm token storage
|
|
- Proper fix for python3-bind subpackage directory ownership (#1522944)
|
|
|
|
* Fri Dec 15 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-3
|
|
- Own python3-bind isc directory (#1522944)
|
|
- Make tsstsig system test pass again (#1500017)
|
|
|
|
* Mon Oct 23 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-2
|
|
- Build against mariadb-connector-c-devel (#1493615)
|
|
- Include DNSKEY 20326 also in trusted-key.key (#1505476)
|
|
- Fix dynamic symbols conflict with ldap (#1205168)
|
|
- Use hmac-sha256 for new RNDC keys (#1508003)
|
|
- Include protocols and services in chroot
|
|
|
|
* Wed Aug 02 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.2-1
|
|
- Update to 9.11.2
|
|
- Add recursing and secroots file into default and sample config
|
|
- Fix nsupdate GSSAPI auth against AD server (#1484451)
|
|
|
|
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 32:9.11.1-6.P3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 32:9.11.1-5.P3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
* Fri Jul 14 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-4.P3
|
|
- Simplify change of default configuration file path
|
|
|
|
* Thu Jul 13 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-3.P3
|
|
- Use mysql_config for SDB variant, build against mariadb-devel
|
|
|
|
* Mon Jul 10 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-2.P3
|
|
- Update to 9.11.1-P3
|
|
|
|
* Fri Jun 30 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-2.P2
|
|
- Update to 9.11.1-P2
|
|
|
|
* Thu Jun 29 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-2.P1
|
|
- dnssec-checkds and dnssec-coverage requires python module (#1466183)
|
|
|
|
* Thu Jun 15 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-1.P1
|
|
- Update to 9.11.1-P1
|
|
|
|
* Fri Apr 21 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-8.P5
|
|
- Fix queries for TKEY in nsupdate, when using GSSAPI (#1236087)
|
|
|
|
* Thu Apr 13 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-7.P5
|
|
- Update to 9.11.0-P5
|
|
- Use BINDVERSION for upstream version
|
|
|
|
* Fri Feb 10 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-7.P3
|
|
- Update to 9.11.0-P3
|
|
|
|
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 32:9.11.0-7.P2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
* Wed Jan 18 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-6.P2
|
|
- RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb (#1410433)
|
|
- Fix some rpm warnings
|
|
|
|
* Mon Jan 16 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-5.P2
|
|
- Fix manual pages generated by recent docbook-style-xsl (#1397186)
|
|
|
|
* Thu Jan 12 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-4.P2
|
|
- Update to 9.11.0-P2
|
|
|
|
* Mon Dec 19 2016 Miro Hrončok <mhroncok@redhat.com> - 32:9.11.0-4.P1
|
|
- Rebuild for Python 3.6
|
|
|
|
* Tue Nov 22 2016 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-3.P1
|
|
- Split pk11 includes, include real functions only in pkcs11 variant
|
|
|
|
* Wed Nov 16 2016 Petr Menšík <pemensik@redhat.com> - 32:9.11.0-2.P1
|
|
- Do not change lib permissions in chroot
|
|
|
|
* Wed Nov 16 2016 Michal Ruprich <mruprich@redhat.com> - 32:9.11.0-1.P1
|
|
- Update to 9.11.0-P1
|
|
|
|
* Tue Nov 08 2016 Petr Menšík <pemensik@redhat.com> - 32:9.10.4-3.P4
|
|
- Build with OpenSSL 1.1
|
|
|
|
* Thu Nov 03 2016 Petr Menšík <pemensik@redhat.com> - 32:9.10.4-2.P4
|
|
- Update to 9.10.4-P4
|
|
|
|
* Thu Sep 29 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.4-2.P3
|
|
- Update to 9.10.4-P3
|
|
|
|
* Wed Jul 20 2016 Michal Ruprich <mruprich@redhat.com> - 32:9.10.4-1.P2
|
|
- Update to 9.10.4-P2
|
|
|
|
* Thu May 26 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.4-1.P1
|
|
- Update to 9.10.4-P1
|
|
|
|
* Fri May 20 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-14.P4
|
|
- (un)mount /var/named in -chroot packages as the last directory (Related: #1279188)
|
|
|
|
* Thu May 12 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-13.P4
|
|
- Remove NM dispatcher script, since it is not needed any more (#1277257)
|
|
- Replaced After=network-online.target with After=network.target in all unit files
|
|
|
|
* Fri Mar 11 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-12.P4
|
|
- Update to 9.10.3-P4 due to CVE-2016-1285 CVE-2016-1286 CVE-2016-2088
|
|
|
|
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 32:9.10.3-11.P3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
* Thu Jan 21 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-10.P3
|
|
- Update to 9.10.3-P3 due to CVE-2015-8704 and CVE-2015-8705 (#1300051)
|
|
|
|
* Wed Jan 06 2016 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-9.P2
|
|
- Commented out bindkeys-file statement in default configuration (#1223365#c3)
|
|
- Removed unrecognized configure option --enable-developer
|
|
- Added configure option --enable-full-report to get report on enabled features
|
|
|
|
* Sat Dec 26 2015 Robert Scheck <robert@fedoraproject.org> - 32:9.10.3-8.P2
|
|
- Remove unrecognized build options for %%configure
|
|
- Own %%{_includedir}/bind9 directory in -lite-devel
|
|
- Fixed building without (optional) PKCS#11 support
|
|
|
|
* Wed Dec 16 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-7.P2
|
|
- bump release to maintain update path
|
|
|
|
* Wed Dec 16 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-4.P2
|
|
- Update to 9.10.3-P2
|
|
|
|
* Tue Nov 10 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.10.3-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
|
|
|
|
* Wed Nov 04 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-2
|
|
- Fixed named-checkconf call in *-chroot.service files (#1277820)
|
|
|
|
* Thu Sep 17 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.3-1
|
|
- Update to 9.10.3 stable
|
|
|
|
* Thu Sep 03 2015 Tomas Hozza <thozza@redhat.com>
|
|
- Update to 9.10.3rc1
|
|
|
|
* Wed Jul 29 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-9.P3
|
|
- Update to 9.10.2-P3 to fix CVE-2015-5477
|
|
|
|
* Thu Jul 09 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-8.P2
|
|
- Update to 9.10.2-P2
|
|
|
|
* Mon Jun 29 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-7.P1
|
|
- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named
|
|
|
|
* Fri Jun 19 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-6.P1
|
|
- Update to 9.10.2-P1
|
|
|
|
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.10.2-5
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
* Wed May 27 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-4
|
|
- Don't copy /etc/localtime on -chroot package installation
|
|
|
|
* Fri May 22 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-3
|
|
- Don't use ISC's DLV by default (#1223365)
|
|
- Utilize system-wide crypto-policies (#1179925)
|
|
|
|
* Thu May 21 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-2
|
|
- enable tuning for large systems - increases hardcoded internal limits
|
|
- enable GeoIP access control feature
|
|
|
|
* Thu Feb 26 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-1
|
|
- update to 9.10.2 stable
|
|
- remove parallel-build patch after discussion with upstream [ISC-Bugs #38739]
|
|
|
|
* Wed Feb 25 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-0.3.rc1
|
|
- update to 9.10.2rc2
|
|
- call ldconfig for pkcs11-libs
|
|
- Use Python3 by default (#1186791)
|
|
|
|
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 32:9.10.2-0.2.rc1
|
|
- Rebuilt for Fedora 23 Change
|
|
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
|
|
|
|
* Mon Feb 02 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.2-0.1.rc1
|
|
- update to 9.10.2rc1
|
|
- fix nsupdate server auto-detection (#1184151)
|
|
- drop merged patch bind99-rh985918.patch
|
|
|
|
* Fri Jan 16 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.1-2.P1
|
|
- Install config for tmpfiles under %%{_tmpfilesdir} (#1181020)
|
|
|
|
* Tue Jan 13 2015 Tomas Hozza <thozza@redhat.com> - 32:9.10.1-1.P1
|
|
- Update to 9.10.1-P1 stable
|
|
|
|
* Fri Dec 12 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.6-6.P1
|
|
- Drop downstream patch for nslookup/host rejected by upstream
|
|
|
|
* Tue Dec 09 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.6-5.P1
|
|
- Update to 9.9.6-P1 (CVE-2014-8500)
|
|
|
|
* Fri Nov 14 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.6-4
|
|
- Fixed systemctl path in logrotate configuration (#1148360)
|
|
- drop engine_pkcs11 dependency, since we use native PKCS#11 implementation
|
|
|
|
* Wed Oct 22 2014 Petr Spacek <pspacek@redhat.com> - 32:9.9.6-3
|
|
- Fix crash during GSS-TSIG processing (#1155334, #1155127)
|
|
introduced in 32:9.9.6-2
|
|
|
|
* Tue Oct 14 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.6-2
|
|
- Added native PKCS#11 functionality (#1097752)
|
|
- bind-sdb now requires bind due to configuration and other utilities
|
|
- bind-pkcs11 now requires bind due to configuration and other utilities
|
|
|
|
* Thu Oct 02 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.6-1
|
|
- Update to 9.9.6
|
|
- drop merged patches and rebase some of existing patches
|
|
- Add architecture specific dependencies.
|
|
- Fix assert in dig when using +sigchase (#985918)
|
|
|
|
* Fri Aug 15 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.5-9.P1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
|
* Fri Jul 18 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-8.P1
|
|
- Use network-online.target instead of network.target (#1117086)
|
|
|
|
* Fri Jul 11 2014 Tom Callaway <spot@fedoraproject.org> 32:9.9.5-7.P1
|
|
- fix license handling
|
|
|
|
* Thu Jun 12 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-6.P1
|
|
- Update to 9.9.5-P1
|
|
|
|
* Mon Jun 09 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-5
|
|
- Use /dev/urandom for generation of rndc.key (#1079799)
|
|
|
|
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.5-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
* Tue Apr 22 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-3
|
|
- configure bind with --with-dlopen=yes to support dynamically loadable DLZ drivers
|
|
|
|
* Wed Mar 05 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-2
|
|
- dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
|
|
- Fix race condition when freeing fetch object (ISC-Bugs #35385)
|
|
|
|
* Thu Feb 13 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-1
|
|
- Update to 9.9.5 stable
|
|
|
|
* Sun Jan 26 2014 Rex Dieter <rdieter@fedoraproject.org> 32:9.9.5-0.5.rc2
|
|
- -libs, -libs-lite: track sonames, so abi bumps aren't a surprise
|
|
|
|
* Fri Jan 24 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-0.4.rc2
|
|
- update to 9.9.5rc2
|
|
- merged patches dropped
|
|
- some patches rebased to the new version
|
|
|
|
* Wed Jan 15 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-0.3.b1
|
|
- non-existance of resolv.conf should not be fatal (#1052343)
|
|
|
|
* Tue Jan 14 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-0.2.b1
|
|
- Fix CVE-2014-0591
|
|
|
|
* Mon Jan 06 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.5-0.1.b1
|
|
- Update to bind-9.9.5b1
|
|
- Build bind-sdb against libdb instead of libdb4
|
|
|
|
* Wed Dec 18 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-11
|
|
- Fix crash in rbtdb after two sucessive getoriginnode() calls
|
|
|
|
* Tue Dec 17 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-10
|
|
- Split chroot package for named and named-sdb
|
|
- Extract setting-up/destroying of chroot to a separate systemd service (#997030)
|
|
|
|
* Thu Nov 28 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-9
|
|
- Fixed memory leak in nsupdate if 'realm' was used multiple times (#984687)
|
|
|
|
* Tue Nov 12 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-8
|
|
- Install configuration for rwtab and fix chroot setup script
|
|
|
|
* Thu Oct 31 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-7
|
|
- Correct the upstream patch for #794940
|
|
|
|
* Thu Oct 31 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-6
|
|
- use --enable-filter-aaaa when building bind to enable use of filter-aaaa-on-v4 option
|
|
|
|
* Wed Oct 30 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
|
|
- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run
|
|
- Added session-keyfile statement into default named.conf since we use /run/named
|
|
|
|
* Tue Oct 29 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-4
|
|
- Use upstream version of patch for previously fixed #794940
|
|
|
|
* Fri Oct 18 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-3
|
|
- Fix race condition on send buffers in dighost.c (#794940)
|
|
|
|
* Tue Oct 08 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-2
|
|
- install isc/errno2result.h header
|
|
|
|
* Fri Sep 20 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-1
|
|
- Update to bind-9.9.4 stable
|
|
|
|
* Tue Sep 10 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.9.rc2
|
|
- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stack
|
|
|
|
* Mon Sep 09 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.8.rc2
|
|
- update to bind-9.9.4rc2
|
|
|
|
* Tue Aug 20 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.7.rc1
|
|
- Move named-checkzone and named-compilezone to bind-utils package
|
|
|
|
* Tue Aug 20 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.6.rc1
|
|
- Move tools that don't need the server to run, from main package to bind-utils (#964313)
|
|
|
|
* Fri Aug 16 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.5.rc1
|
|
- Don't generate rndc.key if there exists rndc.conf
|
|
|
|
* Fri Aug 16 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.4.rc1
|
|
- don't install named-sdb.service if SDB macro is defined to zero
|
|
|
|
* Mon Aug 05 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.3.rc1
|
|
- Fix setup-named-chroot.sh to mount/umount everything successfully
|
|
- update to bind-9.9.4rc1
|
|
|
|
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.4-0.2.b1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
* Mon Jul 15 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-0.1.b1
|
|
- update to bind-9.9.4b1
|
|
- drop merged RRL patch
|
|
- drop merged stat.h patch
|
|
|
|
* Wed Jun 05 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1
|
|
- update to 9.9.3-P1 (fix for CVE-2013-3919)
|
|
- update RRL patch to 9.9.3-P1-rl.156.01
|
|
|
|
* Mon Jun 03 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-2
|
|
- bump release to prevent update path issues
|
|
|
|
* Mon Jun 03 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
|
|
- update to 9.9.3
|
|
- install dns/update.h header
|
|
- update RRL patch to the latest version 9.9.3-rl.150.20
|
|
|
|
* Fri May 17 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2
|
|
- Fix segfault in host/nslookup (#878139)
|
|
|
|
* Mon May 13 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
|
|
- update to 9.9.3rc2
|
|
- part of bind97-exportlib.patch not needed any more
|
|
- bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
|
|
- rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
|
|
- bind99-opts.patch merged
|
|
|
|
* Fri May 03 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
|
|
- Include recursion Warning in named.conf and named.conf.sample (#740894)
|
|
- Include managed-keys-directory statement in named.conf.sample (#948026)
|
|
|
|
* Thu May 02 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1
|
|
- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)
|
|
|
|
* Fri Apr 19 2013 Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1
|
|
- fix crash in nsupdate when processing "-r" parameter (#949544)
|
|
|
|
* Tue Apr 16 2013 Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1
|
|
- ship dns/rrl.h in -devel subpkg
|
|
|
|
* Tue Apr 16 2013 Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
|
|
- update to 9.9.3rc1
|
|
- bind-96-libtool2.patch has been merged
|
|
- fix bind tmpfiles.d for named.pid /run migration (#920713)
|
|
|
|
* Wed Mar 27 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2
|
|
- New upstream patch version fixing CVE-2013-2266 (#928032)
|
|
|
|
* Tue Mar 19 2013 Adam Tkac <atkac redhat com> 32:9.9.2-11.P1
|
|
- move pidfile to /run/named/named.pid
|
|
|
|
* Wed Mar 06 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1
|
|
- Fix Makefile.in to include header added by rate limiting patch (#918330)
|
|
|
|
* Tue Mar 05 2013 Adam Tkac <atkac redhat com> 32:9.9.2-9.P1
|
|
- drop some developer-only documentation and move ARM to %%docdir
|
|
|
|
* Mon Feb 18 2013 Adam Tkac <atkac redhat com> 32:9.9.2-8.P1
|
|
- include rate limiting patch
|
|
|
|
* Tue Jan 29 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
|
|
- Corrected IP addresses in named.ca (#901741)
|
|
- mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)
|
|
|
|
* Thu Dec 20 2012 Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
|
|
- generate /etc/rndc.key during named service startup if doesn't exist
|
|
- increase startup timeout in systemd units to 90sec (default)
|
|
- fix IDN related statement in dig.1 manpage
|
|
|
|
* Wed Dec 05 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1
|
|
- update to bind-9.9.2-P1
|
|
|
|
* Mon Nov 12 2012 Adam Tkac <atkac redhat com> 32:9.9.2-4
|
|
- document dig exit codes in manpage
|
|
- ignore empty "search" options in resolv.conf
|
|
|
|
* Mon Nov 12 2012 Adam Tkac <atkac redhat com> 32:9.9.2-3
|
|
- drop PKCS11 support on rhel
|
|
|
|
* Thu Oct 11 2012 Adam Tkac <atkac redhat com> 32:9.9.2-2
|
|
- install isc/stat.h
|
|
|
|
* Thu Oct 11 2012 Adam Tkac <atkac redhat com> 32:9.9.2-1
|
|
- update to 9.9.2
|
|
- bind97-rh714049.patch has been dropped
|
|
- patches merged
|
|
- bind98-rh816164.patch
|
|
|
|
* Thu Sep 13 2012 Adam Tkac <atkac redhat com> 32:9.9.1-10.P3
|
|
- update to bind-9.9.1-P3
|
|
|
|
* Wed Aug 22 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
|
|
- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
|
|
- changed %%define macros to %%global and fixed several rpmlint warnings
|
|
|
|
* Wed Aug 08 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2
|
|
- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)
|
|
|
|
* Wed Aug 01 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2
|
|
- Fixed bind-devel multilib conflict (#478718)
|
|
|
|
* Mon Jul 30 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
|
|
- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
|
|
- Fixed path to libdb.so in config.dlz.in
|
|
|
|
* Thu Jul 26 2012 Adam Tkac <atkac redhat com> 32:9.9.1-5.P2
|
|
- update to 9.9.1-P2
|
|
|
|
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
* Wed Jul 11 2012 Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1
|
|
- Avoid shell invocation and dep for -libs-lite %%postun.
|
|
|
|
* Mon Jun 04 2012 Adam Tkac <atkac redhat com> 32:9.9.1-2.P1
|
|
- update to 9.9.1-P1 (CVE-2012-1667)
|
|
|
|
* Thu May 24 2012 Adam Tkac <atkac redhat com> 32:9.9.1-1
|
|
- update to 9.9.1
|
|
- bind99-coverity.patch merged
|
|
- bind-9.5-overflow.patch merged
|
|
|
|
* Mon May 07 2012 Adam Tkac <atkac redhat com> 32:9.9.0-6
|
|
- nslookup: return non-zero exit code when fail to get answer (#816164)
|
|
|
|
* Thu Apr 26 2012 Adam Tkac <atkac redhat com> 32:9.9.0-5
|
|
- initscript: don't umount /var/named when didn't mount it
|
|
|
|
* Tue Apr 24 2012 Adam Tkac <atkac redhat com> 32:9.9.0-4
|
|
- apply all non-SDB patches before SDB ones (#804475)
|
|
- enable Berkeley DB DLZ backend (#804478)
|
|
|
|
* Thu Apr 12 2012 Adam Tkac <atkac redhat com> 32:9.9.0-3
|
|
- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)
|
|
|
|
* Mon Mar 26 2012 Adam Tkac <atkac redhat com> 32:9.9.0-2
|
|
- remove unneeded bind99-v6only.patch
|
|
|
|
* Mon Mar 05 2012 Adam Tkac <atkac redhat com> 32:9.9.0-1
|
|
- update to 9.9.0
|
|
- load dynamic DBs later (and update dyndb patch)
|
|
- fix memory leak in named during processing of rndc command
|
|
- don't call `rndc-confgen -a` in "post" section
|
|
- fix some packaging bugs in bind-chroot
|
|
|
|
* Wed Feb 15 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2
|
|
- build with "--enable-fixed-rrset"
|
|
|
|
* Wed Feb 01 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2
|
|
- update to 9.9.0rc2
|
|
- doc/rfc and doc/draft are no longer shipped in tarball
|
|
|
|
* Mon Jan 30 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1
|
|
- retire initscript in favour of systemd unit files (#719419)
|
|
|
|
* Thu Jan 12 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1
|
|
- update to 9.9.0rc1
|
|
|
|
* Wed Dec 07 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2
|
|
- ship dns/forward.h in -devel subpkg
|
|
|
|
* Tue Nov 22 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
|
|
- update to 9.9.0b2 (CVE-2011-4313)
|
|
- patches merged
|
|
- bind97-rh700097.patch
|
|
- bind99-cinfo.patch
|
|
|
|
* Mon Nov 14 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1
|
|
- ship dns/clientinfo.h in bind-devel
|
|
|
|
* Fri Nov 11 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1
|
|
- update to 9.9.0b1
|
|
- bind98-dlz_buildfix.patch merged
|
|
|
|
* Fri Oct 28 2011 Adam Tkac <atkac redhat com> 32:9.8.1-4
|
|
- nslookup failed to resolve name in certain cases
|
|
|
|
* Mon Sep 26 2011 Adam Tkac <atkac redhat com> 32:9.8.1-3
|
|
- remove deps filter, it is no longer needed (#739663)
|
|
|
|
* Fri Sep 09 2011 Adam Tkac <atkac redhat com> 32:9.8.1-2
|
|
- fix logrotate config file (#725256)
|
|
|
|
* Wed Sep 07 2011 Adam Tkac <atkac redhat com> 32:9.8.1-1
|
|
- update to 9.8.1
|
|
- ship /etc/trusted-key.key (needed by dig)
|
|
- use select instead of epoll in export libs (#735103)
|
|
|
|
* Wed Aug 31 2011 Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
|
|
- fix DLZ related compilation issues
|
|
- make /etc/named.{root,iscdlv}.key world-readable
|
|
- add bind-libs versioned requires to bind pkg
|
|
|
|
* Wed Aug 31 2011 Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
|
|
- fix rare race condition in request.c
|
|
- print "the working directory is not writable" as debug message
|
|
- re-add configtest target to initscript
|
|
- initscript: sybsys name is always named, not named-sdb
|
|
- nsupdate returned zero when target zone didn't exist (#700097)
|
|
- nsupdate could have failed if server has multiple IPs and the first
|
|
was unreachable (#714049)
|
|
|
|
* Wed Aug 31 2011 Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
|
|
- update to 9.8.1rc1
|
|
- patches merged
|
|
- bind97-rh674334.patch
|
|
- bind97-cleanup.patch
|
|
- bind98-includes.patch
|
|
|
|
* Wed Aug 03 2011 Adam Tkac <atkac redhat com> 32:9.8.0-9.P4
|
|
- improve patch for #725741
|
|
|
|
* Tue Jul 26 2011 Adam Tkac <atkac redhat com> 32:9.8.0-8.P4
|
|
- named could have crashed during reload when dyndb module is used (#725741)
|
|
|
|
* Tue Jul 05 2011 Adam Tkac <atkac redhat com> 32:9.8.0-7.P4
|
|
- update to 9.8.0-P4
|
|
- bind98-libdns-export.patch merged
|
|
|
|
* Thu Jun 02 2011 Adam Tkac <atkac redhat com> 32:9.8.0-6.P2
|
|
- update the dyndb patch
|
|
|
|
* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.8.0-5.P2
|
|
- fix compilation of libdns-export.so
|
|
|
|
* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.8.0-4.P2
|
|
- update to 9.8.0-P2 (CVE-2011-1910)
|
|
|
|
* Fri May 06 2011 Adam Tkac <atkac redhat com> 32:9.8.0-3.P1
|
|
- update to 9.8.0-P1 (CVE-2011-1907)
|
|
|
|
* Wed Mar 23 2011 Dan Horák <dan@danny.cz> - 32:9.8.0-2
|
|
- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)
|
|
|
|
* Thu Mar 03 2011 Adam Tkac <atkac redhat com> 32:9.8.0-1
|
|
- update to 9.8.0
|
|
- bind97-rh665971.patch merged
|
|
|
|
* Thu Mar 03 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1
|
|
- revert previous change (integration with libnmserver)
|
|
|
|
* Tue Feb 22 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1
|
|
- integrate named with libnmserver library
|
|
|
|
* Tue Feb 22 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1
|
|
- include dns/rpz.h in -devel subpkg
|
|
|
|
* Mon Feb 21 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1
|
|
- update to 9.8.0rc1
|
|
|
|
* Fri Feb 18 2011 Adam Tkac <atkac redhat com> 32:9.7.3-1
|
|
- update to 9.7.3
|
|
- fix dig +trace on dualstack systems (#674334)
|
|
- fix linkage order when building on system with older BIND (#665971)
|
|
- reduce number of gcc warnings
|
|
|
|
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
|
* Tue Jan 25 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1
|
|
- update to 9.7.3rc1
|
|
- bind97-krb5-self.patch merged
|
|
|
|
* Wed Jan 12 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1
|
|
- fix typo in initscript
|
|
|
|
* Thu Jan 06 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
|
|
- fix "service named status" when used with named-sdb
|
|
- don't check MD5, size and mtime of sysconfig/named
|
|
|
|
* Wed Jan 05 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1
|
|
- add new option DISABLE_ZONE_CHECKING to sysconfig/named
|
|
|
|
* Wed Jan 05 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1
|
|
- update to 9.7.3b1
|
|
|
|
* Wed Jan 05 2011 Adam Tkac <atkac redhat com> 32:9.7.2-10.P3
|
|
- initscript should terminate only the correct "named" process (#622785)
|
|
|
|
* Mon Dec 20 2010 Adam Tkac <atkac redhat com> 32:9.7.2-9.P3
|
|
- fix "krb5-self" update-policy rule processing
|
|
|
|
* Thu Dec 02 2010 Adam Tkac <atkac redhat com> 32:9.7.2-8.P3
|
|
- update to 9.7.2-P3
|
|
|
|
* Mon Nov 29 2010 Jan Görig <jgorig redhat com> 32:9.7.2-7.P2
|
|
- added tmpfiles.d support (#656550)
|
|
- removed old PID checking in initscript
|
|
|
|
* Mon Nov 08 2010 Adam Tkac <atkac redhat com> 32:9.7.2-6.P2
|
|
- don't emit various informational messages by default (#645544)
|
|
|
|
* Wed Oct 20 2010 Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
|
|
- move BIND9 internal libs back to %%{_libdir}
|
|
- add "-export" suffix to public libraries (-lite subpkg)
|
|
|
|
* Thu Oct 07 2010 Adam Tkac <atkac redhat com> 32:9.7.2-4.P2
|
|
- ship -devel subpkg for internal libs, dnsperf needs it
|
|
|
|
* Thu Oct 07 2010 Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
|
|
- new bind-libs-lite and bind-lite-devel subpkgs which contain
|
|
public version of BIND 9 libraries
|
|
- don't ship devel files for internal version of BIND 9 libraries
|
|
|
|
* Wed Sep 29 2010 Adam Tkac <atkac redhat com> 32:9.7.2-2.P2
|
|
- update to 9.7.2-P2
|
|
|
|
* Thu Sep 16 2010 Adam Tkac <atkac redhat com> 32:9.7.2-1
|
|
- update to 9.7.2
|
|
|
|
* Fri Aug 27 2010 Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1
|
|
- update to 9.7.2rc1
|
|
|
|
* Tue Aug 10 2010 Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1
|
|
- host: handle "debug", "attempts" and "timeout" options in resolv.conf well
|
|
|
|
* Tue Aug 03 2010 Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1
|
|
- update to 9.7.2b1
|
|
- patches merged
|
|
- bind97-rh507429.patch
|
|
|
|
* Mon Jul 19 2010 Adam Tkac <atkac redhat com> 32:9.7.1-5.P2
|
|
- supply root zone DNSKEY in default configuration
|
|
|
|
* Mon Jul 19 2010 Adam Tkac <atkac redhat com> 32:9.7.1-4.P2
|
|
- update to 9.7.1-P2 (CVE-2010-0213)
|
|
|
|
* Mon Jul 12 2010 Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
|
|
- remove outdated Copyright.caching-nameserver file
|
|
- remove rfc1912.txt, it is already located in %%doc/rfc directory
|
|
- move COPYRIGHT to the bind-libs subpkg
|
|
- add COPYRIGHT to the -pkcs11 subpkg
|
|
|
|
* Fri Jul 09 2010 Adam Tkac <atkac redhat com> 32:9.7.1-2.P1
|
|
- update to 9.7.1-P1
|
|
|
|
* Mon Jun 28 2010 Adam Tkac <atkac redhat com> 32:9.7.1-1
|
|
- update to 9.7.1
|
|
- improve the "dnssec-conf" trigger
|
|
|
|
* Wed Jun 09 2010 Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1
|
|
- update to 9.7.1rc1
|
|
- patches merged
|
|
- bind97-keysdir.patch
|
|
|
|
* Mon May 31 2010 Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
|
|
- update to 9.7.1b1
|
|
- make /var/named/dynamic as a default directory for managed DNSSEC keys
|
|
- add patch to get "managed-keys-directory" option working
|
|
- patches merged
|
|
- bind97-managed-keyfile.patch
|
|
- bind97-rh554316.patch
|
|
|
|
* Fri May 21 2010 Adam Tkac <atkac redhat com> 32:9.7.0-11.P2
|
|
- update dnssec-conf Obsoletes/Provides
|
|
|
|
* Thu May 20 2010 Adam Tkac <atkac redhat com> 32:9.7.0-10.P2
|
|
- update to 9.7.0-P2
|
|
|
|
* Fri Mar 26 2010 Adam Tkac <atkac redhat com> 32:9.7.0-9.P1
|
|
- added lost patch for #554316 (occasional crash in keytable.c)
|
|
|
|
* Fri Mar 26 2010 Adam Tkac <atkac redhat com> 32:9.7.0-8.P1
|
|
- active query might be destroyed in resume_dslookup() which triggered REQUIRE
|
|
failure (#507429)
|
|
|
|
* Mon Mar 22 2010 Adam Tkac <atkac redhat com> 32:9.7.0-7.P1
|
|
- install SDB related manpages only when build with SDB
|
|
|
|
* Fri Mar 19 2010 Adam Tkac <atkac redhat com> 32:9.7.0-6.P1
|
|
- update to 9.7.0-P1
|
|
|
|
* Tue Mar 16 2010 Jan Görig <jgorig redhat com> 32:9.7.0-5
|
|
- bind-sdb now requires bind
|
|
|
|
* Mon Mar 15 2010 Jan Görig <jgorig redhat com> 32:9.7.0-4
|
|
- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)
|
|
|
|
* Mon Mar 01 2010 Adam Tkac <atkac redhat com> 32:9.7.0-3
|
|
- fix multilib issue (#478718) [jgorig]
|
|
|
|
* Mon Mar 01 2010 Adam Tkac <atkac redhat com> 32:9.7.0-2
|
|
- improve automatic DNSSEC reconfiguration trigger
|
|
- initscript now returns 2 in case that action doesn't exist (#523435)
|
|
- enable/disable chroot when bind-chroot is installed/uninstalled
|
|
|
|
* Wed Feb 17 2010 Adam Tkac <atkac redhat com> 32:9.7.0-1
|
|
- update to 9.7.0 final
|
|
|
|
* Mon Feb 15 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
|
|
- obsolete dnssec-conf
|
|
- automatically update configuration from old dnssec-conf based
|
|
- improve default configuration; enable DLV by default
|
|
- remove obsolete triggerpostun from bind-libs subpackage
|
|
|
|
* Thu Jan 28 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2
|
|
- update to 9.7.0rc2
|
|
|
|
* Wed Jan 27 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1
|
|
- initscript LSB related fixes (#523435)
|
|
|
|
* Wed Jan 27 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1
|
|
- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)
|
|
|
|
* Tue Dec 15 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1
|
|
- update to 9.7.0rc1
|
|
- bind97-headers.patch merged
|
|
- update default configuration
|
|
|
|
* Tue Dec 01 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3
|
|
- update to 9.7.0b3
|
|
|
|
* Thu Nov 26 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2
|
|
- install isc/namespace.h header
|
|
|
|
* Fri Nov 06 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2
|
|
- update to 9.7.0b2
|
|
|
|
* Tue Nov 03 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
|
|
- update to 9.7.0b1
|
|
- add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
|
|
keys
|
|
|
|
* Thu Oct 08 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3
|
|
- don't package named-bootconf utility, it is very outdated and unneeded
|
|
|
|
* Mon Sep 21 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3
|
|
- determine file size via `stat` instead of `ls` (#523682)
|
|
|
|
* Wed Sep 16 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3
|
|
- update to 9.7.0a3
|
|
|
|
* Tue Sep 15 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
|
|
- improve chroot related documentation (#507795)
|
|
- add NetworkManager dispatcher script to reload named when network interface is
|
|
activated/deactivated (#490275)
|
|
- don't set/unset named_write_master_zones SELinux boolean every time in
|
|
initscript, modify it only when it's actually needed
|
|
|
|
* Tue Sep 15 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2
|
|
- update to 9.7.0a2
|
|
- merged patches
|
|
- bind-96-db_unregister.patch
|
|
- bind96-rh507469.patch
|
|
|
|
* Tue Sep 01 2009 Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
|
|
- next attempt to fix the postun trigger (#520385)
|
|
- remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch
|
|
|
|
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1
|
|
- rebuilt with new openssl
|
|
|
|
* Tue Aug 04 2009 Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1
|
|
- update the patch for dynamic loading of database backends
|
|
|
|
* Wed Jul 29 2009 Adam Tkac <atkac redhat com> 32:9.6.1-6.P1
|
|
- 9.6.1-P1 release (CVE-2009-0696)
|
|
- fix postun trigger (#513016, hopefully)
|
|
|
|
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
|
* Mon Jul 20 2009 Adam Tkac <atkac redhat com> 32:9.6.1-4
|
|
- remove useless bind-9.3.3rc2-rndckey.patch
|
|
|
|
* Mon Jul 13 2009 Adam Tkac <atkac redhat com> 32:9.6.1-3
|
|
- fix broken symlinks in bind-libs (#509635)
|
|
- fix typos in /etc/sysconfig/named (#509650)
|
|
- add DEBUG option to /etc/sysconfig/named (#510283)
|
|
|
|
* Wed Jun 24 2009 Adam Tkac <atkac redhat com> 32:9.6.1-2
|
|
- improved "chroot automount" patches (#504596)
|
|
- host should fail if specified server doesn't respond (#507469)
|
|
|
|
* Wed Jun 17 2009 Adam Tkac <atkac redhat com> 32:9.6.1-1
|
|
- 9.6.1 release
|
|
- simplify chroot maintenance. Important files and directories are mounted into
|
|
chroot (see /etc/sysconfig/named for more info, #504596)
|
|
- fix doc/named.conf.default perms
|
|
|
|
* Wed May 27 2009 Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1
|
|
- 9.6.1rc1 release
|
|
|
|
* Wed Apr 29 2009 Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
|
|
- update the patch for dynamic loading of database backends
|
|
- create %%{_libdir}/bind directory
|
|
- copy default named.conf to doc directory, shared with s-c-bind (atkac)
|
|
|
|
* Fri Apr 24 2009 Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
|
|
- update the patch for dynamic loading of database backends
|
|
- fix dns_db_unregister()
|
|
- useradd now takes "-N" instead of "-n" (atkac, #495726)
|
|
- print nicer error msg when zone file is actually a directory (atkac, #490837)
|
|
|
|
* Mon Mar 30 2009 Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
|
|
- 9.6.1b1 release
|
|
- patches merged
|
|
- bind-96-isc_header.patch
|
|
- bind-95-rh469440.patch
|
|
- bind-96-realloc.patch
|
|
- bind9-fedora-0001.diff
|
|
- use -version-number instead of -version-info libtool param
|
|
|
|
* Mon Mar 23 2009 Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1
|
|
- logrotate configuration file now points to /var/named/data/named.run by
|
|
default (#489986)
|
|
|
|
* Tue Mar 17 2009 Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
|
|
- fall back to insecure mode when no supported DNSSEC algorithm is found
|
|
instead of SERVFAIL
|
|
- don't fall back to non-EDNS0 queries when DO bit is set
|
|
|
|
* Tue Mar 10 2009 Adam Tkac <atkac redhat com> 32:9.6.0-10.P1
|
|
- enable DNSSEC only if it is enabled in sysconfig/dnssec
|
|
|
|
* Mon Mar 09 2009 Adam Tkac <atkac redhat com> 32:9.6.0-9.P1
|
|
- add DNSSEC support to initscript, enabled it per default
|
|
- add requires dnssec-conf
|
|
|
|
* Mon Mar 09 2009 Adam Tkac <atkac redhat com> 32:9.6.0-8.P1
|
|
- fire away libbind, it is now separate package
|
|
|
|
* Wed Mar 04 2009 Adam Tkac <atkac redhat com> 32:9.6.0-7.P1
|
|
- fixed some read buffer overflows (upstream)
|
|
|
|
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
|
|
|
* Thu Feb 12 2009 Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1
|
|
- update the patch for dynamic loading of database backends
|
|
- include iterated_hash.h
|
|
|
|
* Sat Jan 24 2009 Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1
|
|
- rebuild for dependencies
|
|
|
|
* Wed Jan 21 2009 Adam Tkac <atkac redhat com> 32:9.6.0-3.P1
|
|
- rebuild against new openssl
|
|
|
|
* Thu Jan 08 2009 Adam Tkac <atkac redhat com> 32:9.6.0-2.P1
|
|
- 9.6.0-P1 release (CVE-2009-0025)
|
|
|
|
* Mon Jan 05 2009 Adam Tkac <atkac redhat com> 32:9.6.0-1
|
|
- Happy new year
|
|
- 9.6.0 release
|
|
|
|
* Thu Dec 18 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2
|
|
- 9.6.0rc2 release
|
|
- bind-96-rh475120.patch merged
|
|
|
|
* Tue Dec 16 2008 Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1
|
|
- add patch for dynamic loading of database backends
|
|
|
|
* Tue Dec 09 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1
|
|
- allow to reuse address for non-random query-source ports (#475120)
|
|
|
|
* Wed Dec 03 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
|
|
- 9.6.0rc1 release
|
|
- patches merged
|
|
- bind-9.2.0rc3-varrun.patch
|
|
- bind-95-sdlz-include.patch
|
|
- bind-96-libxml2.patch
|
|
- fixed rare use-after-free problem in host utility (#452060)
|
|
- enabled chase of DNSSEC signature chains in dig
|
|
|
|
* Mon Dec 01 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1
|
|
- improved sample config file (#473586)
|
|
|
|
* Wed Nov 26 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1
|
|
- reverted previous change, koji doesn't like it
|
|
|
|
* Wed Nov 26 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1
|
|
- build bind-chroot as noarch
|
|
|
|
* Mon Nov 24 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1
|
|
- updates due libtool 2.2.6
|
|
- don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources
|
|
|
|
* Tue Nov 11 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1
|
|
- make statistics http server working, patch backported from 9.6 HEAD
|
|
|
|
* Mon Nov 10 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
|
|
- 9.6.0b1 release
|
|
- don't build ODBC and Berkeley DB DLZ drivers
|
|
- end of bind-chroot-admin script, copy config files to chroot manually
|
|
- /proc doesn't have to be mounted to chroot
|
|
- temporary use libbind from 9.5 series, noone has been released for 9.6 yet
|
|
|
|
* Mon Nov 03 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2
|
|
- dig/host: use only IPv4 addresses when -4 option is specified (#469440)
|
|
|
|
* Thu Oct 30 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2
|
|
- removed unneeded bind-9.4.1-ldap-api.patch
|
|
|
|
* Thu Oct 30 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2
|
|
- ship dns/{s,}dlz.h and isc/radix.h in bind-devel
|
|
|
|
* Tue Oct 07 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2
|
|
- removed bind-9.4.0-dnssec-directory.patch, it is wrong
|
|
|
|
* Wed Sep 24 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
|
|
- 9.5.1b2 release
|
|
- patches merged
|
|
- bind95-rh454783.patch
|
|
- bind-9.5-edns.patch
|
|
- bind95-rh450995.patch
|
|
- bind95-rh457175.patch
|
|
|
|
* Wed Sep 17 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1
|
|
- IDN output strings didn't honour locale settings (#461409)
|
|
|
|
* Tue Aug 05 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1
|
|
- disable transfer stats on DLZ zones (#454783)
|
|
|
|
* Mon Aug 04 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1
|
|
- add forgotten patch for #457175
|
|
- build with -O2
|
|
|
|
* Thu Jul 31 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
|
|
- static libraries are no longer supported
|
|
- IP acls weren't merged correctly (#457175)
|
|
- use fPIE on sparcv9/sparc64 (Dennis Gilmore)
|
|
- add sparc64 to list of 64bit arches in spec (Dennis Gilmore)
|
|
|
|
* Mon Jul 21 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1
|
|
- updated patches due new rpm (--fuzz=0 patch parameter)
|
|
|
|
* Mon Jul 14 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1
|
|
- use %%patch0 for Patch0 (#455061)
|
|
- correct source address (#455118)
|
|
|
|
* Tue Jul 08 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
|
|
- 9.5.1b1 release (CVE-2008-1447)
|
|
- dropped bind-9.5-recv-race.patch because upstream doesn't want it
|
|
|
|
* Mon Jun 30 2008 Adam Tkac <atkac redhat com> 32:9.5.0-37.1
|
|
- update default named.conf statements (#452708)
|
|
|
|
* Thu Jun 26 2008 Adam Tkac <atkac redhat com> 32:9.5.0-37
|
|
- some compat changes to fix building on RHEL4
|
|
|
|
* Mon Jun 23 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36.3
|
|
- fixed typo in %%posttrans script
|
|
|
|
* Wed Jun 18 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36.2
|
|
- parse inner acls correctly (#450995)
|
|
|
|
* Mon Jun 02 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36.1
|
|
- removed dns-keygen utility in favour of rndc-confgen -a (#449287)
|
|
- some minor sample fixes (#449274)
|
|
|
|
* Thu May 29 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36
|
|
- updated to 9.5.0 final
|
|
- use getifaddrs to find available interfaces
|
|
|
|
* Mon May 26 2008 Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1
|
|
- make /var/run/named writable by named (#448277)
|
|
- fixed one non-utf8 file
|
|
|
|
* Thu May 22 2008 Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1
|
|
- fixes needed to pass package review (#225614)
|
|
|
|
* Wed May 21 2008 Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1
|
|
- bind-chroot now depends on bind (#446477)
|
|
|
|
* Wed May 14 2008 Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
|
|
- updated to 9.5.0rc1
|
|
- merged patches
|
|
- bind-9.5-libcap.patch
|
|
- make binaries readable by others (#427826)
|
|
|
|
* Tue May 13 2008 Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
|
|
- reverted "any" patch, upstream says not needed
|
|
- log EDNS failure only when we really switch to plain EDNS (#275091)
|
|
- detect configuration file better
|
|
|
|
* Tue May 06 2008 Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3
|
|
- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)
|
|
|
|
* Mon May 05 2008 Adam Tkac <atkac redhat com> 32:9.5.0-31.b3
|
|
- readded bind-9.5-libcap.patch
|
|
- added bind-9.5-recv-race.patch from F8 branch (#400461)
|
|
|
|
* Wed Apr 23 2008 Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3
|
|
- build Berkeley DB DLZ backend
|
|
|
|
* Mon Apr 21 2008 Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
|
|
- 9.5.0b3 release
|
|
- dropped patches (upstream)
|
|
- bind-9.5-transfer-segv.patch
|
|
- bind-9.5-mudflap.patch
|
|
- bind-9.5.0-generate-xml.patch
|
|
- bind-9.5-libcap.patch
|
|
|
|
* Wed Apr 02 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2
|
|
- fixed named.conf.sample file (#437569)
|
|
|
|
* Fri Mar 14 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2
|
|
- fixed URLs
|
|
|
|
* Mon Feb 25 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2
|
|
- BuildRequires cleanup
|
|
|
|
* Sun Feb 24 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.b2
|
|
- rebuild without mudflap (#434159)
|
|
|
|
* Wed Feb 20 2008 Adam Tkac <atkac redhat com> 32:9.5.0-28.b2
|
|
- port named to use libcap library, enable threads (#433102)
|
|
- removed some unneeded Requires
|
|
|
|
* Tue Feb 19 2008 Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
|
|
- removed conditional build with libefence (use -fmudflapth instead)
|
|
- fixed building of DLZ stuff (#432497)
|
|
- do not build Berkeley DB DLZ backend
|
|
- temporary build with --disable-linux-caps and without threads (#433102)
|
|
- update named.ca file to affect IPv6 changes in root zone
|
|
|
|
* Mon Feb 11 2008 Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
|
|
- build with -D_GNU_SOURCE (#431734)
|
|
- improved fix for #253537, posttrans script is now used
|
|
- improved fix for #400461
|
|
- 9.5.0b2
|
|
- bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
|
|
- only named, named-sdb and lwresd are PIE
|
|
- bind-9.5-sdb.patch has been updated
|
|
- bind-9.5-libidn.patch has been updated
|
|
- bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
|
|
- removed bind-9.5-gssapi-header.patch (upstream)
|
|
- removed bind-9.5-CVE-2008-0122.patch (upstream)
|
|
- removed bind-9.2.2-nsl.patch
|
|
- improved sdb_tools Makefile.in
|
|
|
|
* Mon Feb 04 2008 Adam Tkac <atkac redhat com> 32:9.5.0-25.b1
|
|
- fixed segfault during sending notifies (#400461)
|
|
- rebuild with gcc 4.3 series
|
|
|
|
* Tue Jan 22 2008 Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
|
|
- removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
|
|
- allow parallel building of libdns library
|
|
- CVE-2008-0122
|
|
|
|
* Thu Dec 27 2007 Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
|
|
- fixed initscript wait loop (#426382)
|
|
- removed dependency on policycoreutils and libselinux (#426515)
|
|
|
|
* Thu Dec 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-22.b1
|
|
- fixed regression caused by libidn2 patch (#426348)
|
|
|
|
* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-21.b1
|
|
- fixed typo in post section (CVE-2007-6283)
|
|
|
|
* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-20.b1
|
|
- removed obsoleted triggers
|
|
- CVE-2007-6283
|
|
|
|
* Wed Dec 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1
|
|
- added dst/gssapi.h to -devel subpackage (#419091)
|
|
- improved fix for (#417431)
|
|
|
|
* Mon Dec 10 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1
|
|
- fixed shutdown with initscript when rndc doesn't work (#417431)
|
|
- fixed IDN patch (#412241)
|
|
|
|
* Thu Dec 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.b1
|
|
- 9.5.0b1 (#405281, #392491)
|
|
|
|
* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7
|
|
- Rebuild for deps
|
|
|
|
* Wed Dec 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7
|
|
- build with -O0
|
|
|
|
* Mon Dec 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
|
|
- bind-9.5-random_ports.patch was removed because upstream doesn't
|
|
like it. query-source{,v6} options are sufficient (#391931)
|
|
- bind-chroot-admin called restorecon on /proc filesystem (#405281)
|
|
|
|
* Mon Nov 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7
|
|
- removed edns patch to keep compatibility with vanilla bind
|
|
(#275091, comment #20)
|
|
|
|
* Wed Nov 21 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7
|
|
- use system port selector instead ISC's (#391931)
|
|
|
|
* Mon Nov 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.a7
|
|
- removed statement from initscript which passes -D to named
|
|
|
|
* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
|
|
- 9.5.0a7
|
|
- dropped patches (upstream)
|
|
- bind-9.5-update.patch
|
|
- bind-9.5-pool_badfree.patch
|
|
- bind-9.5-_res_errno.patch
|
|
|
|
* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
|
|
- added bind-sdb again, contains SDB modules and DLZ modules
|
|
- bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch
|
|
|
|
* Mon Nov 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6
|
|
- removed Requires: openldap, postgresql, mysql, db4, unixODBC
|
|
- new L.ROOT-SERVERS.NET address
|
|
|
|
* Mon Oct 29 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6
|
|
- completely disable DBUS
|
|
|
|
* Fri Oct 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6
|
|
- minor cleanup in bind-chroot-admin
|
|
|
|
* Thu Oct 25 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6
|
|
- fixed typo in initscript
|
|
|
|
* Tue Oct 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.a6
|
|
- disabled DBUS (dhcdbd doesn't exist & #339191)
|
|
|
|
* Thu Oct 18 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6
|
|
- fixed missing va_end () functions (#336601)
|
|
- fixed memory leak when dbus initialization fails
|
|
|
|
* Tue Oct 16 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.a6
|
|
- corrected named.5 SDB statement (#326051)
|
|
|
|
* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-14.a6
|
|
- added edns patch again (#275091)
|
|
|
|
* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-13.a6
|
|
- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)
|
|
|
|
* Thu Sep 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6
|
|
- build with O2
|
|
- removed "autotools" patch
|
|
- bugfixing in bind-chroot-admin (#279901)
|
|
|
|
* Thu Sep 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
|
|
- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
|
|
obsoleted by upstream bind-9.5-_res_errno.patch
|
|
|
|
* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6
|
|
- fixed wrong resolver's dispatch pool cleanup (#275011, patch from
|
|
tmraz redhat com)
|
|
|
|
* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
|
|
- initscript failure message is now printed correctly (#277981,
|
|
Quentin Armitage (quentin armitage org uk) )
|
|
|
|
* Mon Sep 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6
|
|
- temporary revert ISC 2119 change and add "libbind-errno" patch
|
|
(#254501) again
|
|
|
|
* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
|
|
- removed end dots from Summary sections (skasal@redhat.com)
|
|
- fixed wrong file creation by autotools patch (skasal@redhat.com)
|
|
|
|
* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
|
|
- start using --disable-isc-spnego configure option
|
|
- remove bind-9.5-spnego-memory_management.patch (source isn't
|
|
compiled)
|
|
|
|
* Wed Aug 22 2007 Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
|
|
- added new initscript option KEYTAB_FILE which specified where
|
|
is located kerberos .keytab file for named service
|
|
- obsolete temporary bind-9.5-spnego-memory_management.patch by
|
|
bind-9.5-gssapictx-free.patch which conforms BIND coding standards
|
|
(#251853)
|
|
|
|
* Tue Aug 21 2007 Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
|
|
- dropped direct dependency to /etc/openldap/schema directory
|
|
- changed hardcoded paths to macros
|
|
- fired away code which configure LDAP server
|
|
|
|
* Tue Aug 14 2007 Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6
|
|
- named could crash with SRV record UPDATE (#251336)
|
|
|
|
* Mon Aug 13 2007 Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
|
|
- disable 64bit dlz driver patch on alpha and ia64 (#251298)
|
|
- remove wrong malloc functions from lib/dns/spnego.c (#251853)
|
|
|
|
* Mon Aug 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6
|
|
- changed licence from BSD-like to ISC
|
|
|
|
* Tue Jul 31 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6
|
|
- disabled named on all runlevels by default
|
|
|
|
* Mon Jul 30 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
|
|
- minor next improvements on autotools patch
|
|
- dig and host utilities now using libidn instead idnkit for
|
|
IDN support
|
|
|
|
* Wed Jul 25 2007 Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6
|
|
- binutils/gcc bug rebuild (#249435)
|
|
|
|
* Tue Jul 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
|
|
- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
|
|
CVE-2007-2926
|
|
- fixed building on 64bits
|
|
|
|
* Mon Jul 23 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-5
|
|
- integrated "autotools" patch for testing purposes (upstream will
|
|
accept it in future, for easier building)
|
|
|
|
* Mon Jul 23 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1
|
|
- fixed DLZ drivers building on 64bit systems
|
|
|
|
* Fri Jul 20 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-4
|
|
- fixed relation between logrotated and chroot-ed named
|
|
|
|
* Wed Jul 18 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
|
|
- removed bind-sdb package (default named has compiled SDB backend now)
|
|
- integrated DLZ (Dynamically loadable zones) drivers
|
|
- integrated GSS-TSIG support (RFC 3645)
|
|
- build with -O0 (many new features, potential core dumps will be more useful)
|
|
|
|
* Tue Jul 17 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2
|
|
- initscript should be ready for parallel booting (#246878)
|
|
|
|
* Tue Jul 17 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3
|
|
- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)
|
|
|
|
* Mon Jul 16 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2
|
|
- moved chroot configfiles into chroot subpackage (#248306)
|
|
|
|
* Mon Jul 02 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-2
|
|
- minor changes in default configuration
|
|
- fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
|
|
- removed wrong patch to #150288
|
|
|
|
* Tue Jun 19 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-1
|
|
- updated to latest upstream
|
|
|
|
* Wed Jun 13 2007 Adam Tkac <atkac redhat com> 31:9.4.1-7
|
|
- marked caching-nameserver as obsolete (#244604)
|
|
- fixed typo in initscript (causes that named doesn't detect NetworkManager
|
|
correctly)
|
|
- next cleanup in configuration - moved configfiles into config.tar
|
|
- removed delay between start & stop in restart function in named.init
|
|
|
|
* Tue Jun 12 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6
|
|
- major changes in initscript. Could be LSB compatible now
|
|
- removed caching-nameserver subpackage. Move configs from this
|
|
package to main bind package as default configuration and major
|
|
configuration cleanup
|
|
|
|
* Mon Jun 04 2007 Adam Tkac <atkac redhat com> 31:9.4.1-5
|
|
- very minor compatibility change in bind-chroot-admin (line 215)
|
|
- enabled IDN support by default and don't distribute IDN libraries
|
|
- specfile cleanup
|
|
- add dynamic directory to /var/named. This directory will be primarily used for
|
|
dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist
|
|
|
|
* Thu May 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-4
|
|
- removed ldap-api patch and start using deprecated API
|
|
- fixed minor problem in bind-chroot-admin script (#241103)
|
|
|
|
* Tue May 22 2007 Adam Tkac <atkac redhat com> 31:9.4.1-3
|
|
- fixed bind-chroot-admin dynamic DNS handling (#239149)
|
|
- updated zone-freeze patch to latest upstream
|
|
- ldap sdb has been rewriten to latest api (#239802)
|
|
|
|
* Mon May 07 2007 Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7
|
|
- test build on new build system
|
|
|
|
* Wed May 02 2007 Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7
|
|
- updated to 9.4.1 which contains fix to CVE-2007-2241
|
|
|
|
* Fri Apr 27 2007 Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
|
|
- improved "zone freeze patch" - if multiple zone with same name exists
|
|
no zone is freezed
|
|
- minor cleanup in caching-nameserver's config file
|
|
- fixed race-condition in dbus code (#235809)
|
|
- added forgotten restorecon statement in bind-chroot-admin
|
|
|
|
* Tue Apr 17 2007 Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
|
|
- removed DEBUGINFO option because with this option (default) was bind
|
|
builded with -O0 and without this flag no debuginfo package was produced.
|
|
(I want faster bind => -O2 + debuginfo)
|
|
- fixed zone finding (#236426)
|
|
|
|
* Mon Apr 16 2007 Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7
|
|
- added idn support (still under development with upstream, disabled by default)
|
|
|
|
* Wed Apr 11 2007 Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7
|
|
- dnssec-signzone utility now doesn't ignore -d parameter
|
|
|
|
* Tue Apr 10 2007 Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
|
|
- removed query-source[-v6] options from caching-nameserver config
|
|
(#209954, increase security)
|
|
- throw away idn. It won't be ready in fc7
|
|
|
|
* Tue Mar 13 2007 Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
|
|
- prepared bind to merge review
|
|
- added experimental idn support to bind-utils utils (not enabled by default yet)
|
|
- change chroot policy in caching-nameserver post section
|
|
- fixed bug in bind-chroot-admin - rootdir function is called properly now
|
|
|
|
* Mon Mar 12 2007 Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
|
|
- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
|
|
- moved bind-chroot-admin script to chroot package
|
|
- bind-9.3.2-redhat_doc.patch is always applied (#231738)
|
|
|
|
* Tue Mar 06 2007 Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
|
|
- updated to 9.4.0
|
|
- bind-chroot-admin now sets EAs correctly (#213926)
|
|
- throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)
|
|
|
|
* Thu Feb 15 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7
|
|
- minor cleanup in bind-chroot-admin script
|
|
|
|
* Fri Feb 09 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7
|
|
- fixed broken bind-chroot-admin script (#227995)
|
|
|
|
* Wed Feb 07 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7
|
|
- bind-chroot-admin now uses correct chroot path (#227600)
|
|
|
|
* Mon Feb 05 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7
|
|
- fixed conflict between bind-sdb and ldap
|
|
- removed duplicated bind directory in bind-libs
|
|
|
|
* Thu Feb 01 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
|
|
- fixed building without libbind
|
|
- fixed post section (selinux commands is now in if-endif statement)
|
|
- prever macro has been removed from version
|
|
|
|
* Mon Jan 29 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7
|
|
- redirected output from bind-chroot prep and %%preun stages to /dev/null
|
|
|
|
* Thu Jan 25 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7
|
|
- updated to version 9.3.4 which contains security bugfixes
|
|
|
|
* Tue Jan 23 2007 Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7
|
|
- package bind-libbind-devel has been marked as obsolete
|
|
|
|
* Mon Jan 22 2007 Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
|
|
- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
|
|
- Resolves: #214208
|
|
|
|
* Tue Jan 16 2007 Martin Stransky <stransky@redhat.com> - 31:9.3.3-3
|
|
- fixed a multi-lib issue
|
|
- Resolves: rhbz#222717
|
|
|
|
* Thu Jan 4 2007 Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
|
|
- added namedGetForwarders written in shell (#176100),
|
|
created by Baris Cicek <baris@nerd.com.tr>.
|
|
|
|
* Sun Dec 10 2006 Martin Stransky <stransky@redhat.com> - 31:9.3.3-1
|
|
- update to 9.3.3 final
|
|
- fix for #219069: file included twice in src.rpm
|
|
|
|
* Wed Dec 6 2006 Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
|
|
- added back an interval to restart
|
|
- renamed package, it should meet the N-V-R criteria
|
|
- fix for #216185: bind-chroot-admin able to change root mode 750
|
|
- added fix from #215997: incorrect permissions on dnszone.schema
|
|
- added a notice to init script when /etc/named.conf doesn't exist (#216075)
|
|
|
|
* Mon Oct 30 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
|
|
- fix for #200465: named-checkzone and co. cannot be run as non-root user
|
|
- fix for #212348: chroot'd named causes df permission denied error
|
|
- fix for #211249, #211083 - problems with stopping named
|
|
- fix for #212549: init script does not unmount /proc filesystem
|
|
- fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
|
|
added edns-enable options to named configuration file which can suppress
|
|
EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
|
|
- fix for #212961: bind-chroot doesn't clean up its mess on %%preun
|
|
- update to 9.3.3rc3, removed already merged patches
|
|
|
|
* Fri Oct 13 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-5
|
|
- fix for #209359: bind-libs from compatlayer CD will not
|
|
install on ia64
|
|
|
|
* Tue Oct 10 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-4
|
|
- added fix for #210096: warning: group named does not exist - using root
|
|
|
|
* Thu Oct 5 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
|
|
- added fix from #209400 - Bind Init Script does not create
|
|
the PID file always, created by Jeff Means
|
|
- added timeout to stop section of init script.
|
|
The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
|
|
shell variable.
|
|
|
|
* Mon Oct 2 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-2
|
|
- removed chcon from %%post script, replaced by restorecon
|
|
(Bug 202547, comment no. 37)
|
|
|
|
* Fri Sep 15 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-1
|
|
- updated to the latest upstream (9.3.3rc2)
|
|
|
|
* Wed Sep 6 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-41
|
|
- added upstream patch for correct SIG handling - CVE-2006-4095
|
|
|
|
* Tue Sep 5 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-40
|
|
- suppressed messages from bind-chroot-admin
|
|
- cleared notes about bind-config
|
|
|
|
* Tue Aug 22 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-39
|
|
- added fix for #203522 - "bind-chroot-admin -e" command fails
|
|
|
|
* Mon Aug 21 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-38
|
|
- fix for #203194 - tmpfile usage
|
|
|
|
* Thu Aug 17 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
|
|
- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
|
|
- fix for #202547 - file_contexts: invalid context
|
|
|
|
* Fri Aug 11 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-36
|
|
- added Provides: bind-config
|
|
|
|
* Fri Aug 11 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-35
|
|
- fix bug 197493: renaming subpackage bind-config to caching-nameserver
|
|
|
|
* Mon Jul 24 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34
|
|
- fix bug 199876: make '%%exclude libbbind.*' conditional on %%{LIBBIND}
|
|
|
|
* Mon Jul 24 2006 Florian La Roche <laroche@redhat.com> - 30:9.3.2-33
|
|
- fix #195881, perms are not packaged correctly
|
|
|
|
* Fri Jul 21 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
|
|
- fix addenda to bug 189789:
|
|
determination of selinux enabled was still not 100% correct in bind-chroot-admin
|
|
- fix addenda to bug 196398:
|
|
make named.init test for NetworkManager being enabled AFTER testing for -D absence;
|
|
named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
|
|
auto-enable of named dbus support if NetworkManager enabled.
|
|
|
|
* Wed Jul 19 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
|
|
- fix bug 196398 - Enable -D option automatically in initscript
|
|
if NetworkManager enabled in any runlevel.
|
|
- fix namedGetForwarders for new dbus
|
|
- fix bug 195881 - libbind.so should be owned by bind-libbind-devel
|
|
|
|
* Wed Jul 19 2006 Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6
|
|
- Rebuild against new dbus
|
|
|
|
* Wed Jul 12 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6
|
|
- rebuild with fixed glibc-kernheaders
|
|
|
|
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1
|
|
- rebuild
|
|
|
|
* Wed Jun 14 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
|
|
- fix bugs 191093, 189789
|
|
- backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
|
|
( see http://www.isc.org/sw/bind9.3.php "Fixes" ):
|
|
o change 2024 / bug 16027:
|
|
named emitted spurious "zone serial unchanged" messages on reload
|
|
o change 2013 / bug 15941:
|
|
handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
|
|
o change 2009 / bug 15808: coverity fixes
|
|
o change 1997 / bug 15818:
|
|
named was failing to replace negative cache entries when a positive one
|
|
for the type was learnt
|
|
o change 1994 / bug 15694: OpenSSL 0.9.8 support
|
|
o change 1991 / bug 15813:
|
|
The configuration data, once read, should be treated as readonly.
|
|
o misc. validator fixes
|
|
o misc. resolver fixes
|
|
o misc. dns fixes
|
|
o misc. isc fixes
|
|
o misc. libbind fixes
|
|
o misc. isccfg fix
|
|
o misc. lwres fix
|
|
o misc. named fixes
|
|
o misc. dig fixes
|
|
o misc. nsupdate fix
|
|
o misc. tests fixes
|
|
|
|
* Wed Jun 7 2006 Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6
|
|
- and actually put the devel symlinks in the right subpackage
|
|
|
|
* Thu May 25 2006 Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6
|
|
- rebuild for -devel deps
|
|
|
|
* Tue Apr 18 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
|
|
- apply upstream patch for ncache_adderesult segfault bug 173961 addenda
|
|
- fix bug 188382: rpm --verify permissions inconsistencies
|
|
- fix bug 189186: use /sbin/service instead of initscript
|
|
- rebuild for new gcc, glibc-kernheaders
|
|
|
|
* Tue Apr 04 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
|
|
- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961
|
|
(upstream bugs #15642, #15528 ?)
|
|
- allow named ability to generate core dumps after setuid (upstream bug #15753)
|
|
|
|
* Mon Apr 03 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18
|
|
- fix bug 187529: make bind-chroot-admin deal with subdirectories properly
|
|
|
|
* Thu Mar 30 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
|
|
- fix bug 187286:
|
|
prevent host(1) printing duplicate 'is an alias for' messages
|
|
for the default AAAA and MX lookups as well as for the A lookup
|
|
(it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
|
|
This is upstream bug #15702 fixed in the unreleased bind-9.3.3
|
|
- fix bug 187333: fix SOURCE24 and SOURCE25 transposition
|
|
|
|
* Wed Mar 29 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
|
|
- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
|
|
- add '%%doc' sample configuration files in /usr/share/doc/bind*/sample
|
|
- rebuild with new gcc and glibc
|
|
|
|
* Wed Mar 22 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12
|
|
- fix typo in initscript
|
|
- fix Requires(post): policycoreutils in sub-packages
|
|
|
|
* Mon Mar 20 2006 Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10
|
|
- fix bug 185969: more .spec file cleanup
|
|
|
|
* Wed Mar 08 2006 Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
|
|
- Do not allow package to be installed if named:25 userid creation fails
|
|
- Give libbind a pkg-config file
|
|
- remove restorecon from bind-chroot-admin (not required).
|
|
- fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)
|
|
|
|
* Tue Mar 07 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7
|
|
- fix issues with bind-chroot-admin
|
|
|
|
* Mon Mar 06 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
|
|
- replace caching-nameserver with bind-config sub-package
|
|
- fix bug 177595: handle case where $ROOTDIR is a link in initscript
|
|
- fix bug 177001: bind-config creates symlinks OK now
|
|
- fix bug 176388: named.conf is now never replaced by any RPM
|
|
- fix bug 176248: remove unecessary creation of rpmsave links
|
|
- fix bug 174925: no replacement of named.conf
|
|
- fix bug 173963: existing named.conf never modified
|
|
- major .spec file cleanup
|
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1
|
|
- bump again for double-long bug on ppc(64)
|
|
|
|
* Tue Feb 07 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
|
|
- regenerate redhat_doc patch for non-DBUS builds
|
|
- allow dbus builds to work with dbus version < 0.6 (bz #179816)
|
|
|
|
* Tue Feb 07 2006 Florian La Roche <laroche@redhat.com> 30:9.3.2-3
|
|
- try supporting without dbus support
|
|
|
|
* Mon Feb 06 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1
|
|
- Rebuild for new gcc, glibc, glibc-kernheaders
|
|
|
|
* Mon Jan 16 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2
|
|
- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+
|
|
/proc/net/if_inet6 format
|
|
|
|
* Wed Dec 21 2005 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1
|
|
- Upgrade to 9.3.2, released today
|
|
|
|
* Tue Dec 20 2005 Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2
|
|
- fix bug 176100: do not Require: perl just for namedGetForwarders !
|
|
|
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
- rebuilt
|
|
|
|
* Fri Dec 02 2005 Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1
|
|
- Upgrade to upstream version 9.3.2rc1
|
|
- fix namedSetForwarders -> namedGetForwarders SOURCE14 typo
|
|
|
|
* Thu Dec 01 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26
|
|
- rebuild for new dbus 0.6 dependency; remove use of
|
|
DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT
|
|
|
|
* Wed Nov 23 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
|
|
- allow D-BUS support to work in bind-chroot environment:
|
|
workaround latest selinux policy by mounting /var/run/dbus/
|
|
under chroot instead of /var/run/dbus/system-bus-socket
|
|
|
|
* Sun Nov 13 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
|
|
- fix bug 172632 - remove .la files
|
|
- ship namedGetForwarders and namedSetForwarders scripts
|
|
- fix detection of -D option in chroot
|
|
|
|
* Tue Nov 8 2005 Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21
|
|
- rebuilt with new openssl
|
|
|
|
* Wed Oct 19 2005 Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
|
|
- Allow the -D enable D-BUS option to be used within bind-chroot .
|
|
- fix bug 171226: supply some documentation for pgsql SDB .
|
|
|
|
* Thu Oct 06 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
|
|
- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
|
|
task->state != task_ready and will cause Abort in task.c if process
|
|
is waiting for NameOwnerChanged to do a SetForwarders
|
|
|
|
* Wed Oct 05 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16
|
|
- Fix reconnecting to dbus-daemon after it stops & restarts .
|
|
|
|
* Tue Sep 27 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14
|
|
- When forwarder nameservers are changed with D-BUS, flush the cache.
|
|
|
|
* Mon Sep 26 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
|
|
- fix bug 168302: use %%{__cc} for compiling dns-keygen
|
|
- fix bug 167682: bind-chroot directory permissions
|
|
- fix issues with -D dbus option when dbus service not running or disabled
|
|
|
|
* Tue Aug 30 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
|
|
- fix bug 167062: named should be started after syslogd by default
|
|
|
|
* Mon Aug 22 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11
|
|
- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option
|
|
|
|
* Tue Aug 16 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
|
|
- Build with D-BUS patch by default; D-BUS support enabled with named -D option
|
|
- Enable D-BUS for named_sdb also
|
|
- fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
|
|
- update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
|
|
- fix named.init script to handle named_sdb properly
|
|
- fix named.init script checkconfig() to handle named '-c' option
|
|
and make configtest, test, check configcheck synonyms
|
|
|
|
* Tue Jul 19 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8
|
|
- fix named.init script bugs 163598, 163409, 151852(addendum)
|
|
|
|
* Tue Jul 12 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
|
|
- fix bug 160914: resolver utilities should try next server on empty referral
|
|
(now that glibc bug 162625 is fixed)
|
|
host and nslookup now by default try next server on SERVFAIL
|
|
(host now has '-s' option to disable, and nslookup given
|
|
'[no]fail' option similar to dig's [no]fail option).
|
|
- rebuild and re-test with new glibc & gcc (all tests passed).
|
|
|
|
* Tue May 31 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
|
|
- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
|
|
files and not use uninitialized garbage nameserver values
|
|
(ISC bug 14841 raised).
|
|
|
|
* Mon May 23 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4
|
|
- Fix SDB LDAP
|
|
|
|
* Mon May 16 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
|
|
- Fix bug 157601: give named.init a configtest function
|
|
- Fix bug 156797: named.init should check SELinux booleans.local before booleans
|
|
- Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
|
|
- Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
|
|
BIND quirks and SELinux DDNS / slave zone file configuration
|
|
- D-BUS patches NOT applied until dhcdbd is in FC
|
|
|
|
* Sun May 15 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
|
|
- Enhancement to allow dynamic forwarder table management and
|
|
- DHCP forwarder auto-configuration with D-BUS
|
|
|
|
* Thu Apr 14 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
|
|
- Rebuild for bind-sdb libpq.so.3 dependency
|
|
- fix bug 150981: don't install libbind man-pages if no libbind
|
|
- fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
|
|
to work and correct number of CPUs to be determined
|
|
|
|
* Fri Mar 11 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4
|
|
- Upgrade to ISC BIND 9.3.1 (final release) released today.
|
|
|
|
* Wed Mar 9 2005 Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
|
|
- fix bug 150288: h_errno not being accessed / set correctly in libbind
|
|
- add libbind man-pages from bind-8.4.6
|
|
|
|
* Mon Mar 7 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4
|
|
- Rebuild with gcc4 / glibc-2.3.4-14.
|
|
|
|
* Tue Mar 1 2005 Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3
|
|
- configure with --with-pic to get PIC libraries
|
|
|
|
* Sun Feb 20 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2
|
|
- fix bug 149183: don't use getifaddrs() .
|
|
|
|
* Wed Feb 16 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
|
|
- Upgrade to 9.3.1rc1
|
|
- Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
|
|
- add named_sdb - ldap + pgsql + dir database backend support with
|
|
- 'ENABLE_SDB' named.sysconfig option
|
|
- Add BIND resolver library & includes sub-package ( libbind-devel)
|
|
- fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
|
|
- fix bug 146084 : shutup restorecon
|
|
|
|
* Tue Jan 11 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
|
|
- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
|
|
- based on 'named_write_master_zones' SELinux boolean.
|
|
- Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)
|
|
|
|
* Mon Nov 29 2004 Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1
|
|
- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)
|
|
|
|
* Mon Nov 29 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
|
|
- Fix bugs 140528 and 141113:
|
|
- 2 second timeouts when IPv6 not configured and root nameserver's
|
|
- AAAA addresses are queried
|
|
|
|
* Mon Oct 18 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
|
|
- Fix bug 136243: bind-chroot %%post must run restorecon -R %%{prefix}
|
|
- Fix bug 135175: named.init must return non-zero if named is not run
|
|
- Fix bug 134060: bind-chroot %%post must use mktemp, not /tmp/named
|
|
- Fix bug 133423: bind-chroot %%files entries should have been %%dirs
|
|
|
|
* Thu Sep 23 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
|
|
- BIND 9.2.4 (final release) released - source code actually
|
|
- identical to 9.2.4rc8, with only version number change.
|
|
|
|
* Mon Sep 20 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
|
|
- Upgrade to upstream bind-9.2.4rc8 .
|
|
- Progress: Finally! Hooray! ISC bind now distributes:
|
|
- o named.conf(5) and nslookup(8) manpages
|
|
- 'bind-manpages.bz2' source can now disappear
|
|
- (could this have something to do with ISC bug I raised about this?)
|
|
- o 'deprecation_msg' global has vanished
|
|
- bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear
|
|
|
|
* Mon Sep 20 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
|
|
- Fix bug 106572/132385: copy /etc/localtime to chroot on start
|
|
|
|
* Fri Sep 10 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
|
|
- Fix bug 132303: if ROOTDIR line was replaced after upgrade from
|
|
- bind-chroot-9.2.2-21, restart named
|
|
|
|
* Wed Sep 8 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
|
|
- Fix bug 131803: replace ROOTDIR line removed by broken
|
|
- bind-chroot 9.2.2-21's '%%postun'; added %%triggerpostun for bind-chroot
|
|
|
|
* Tue Sep 7 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3
|
|
- Fix bugs 130121 & 130981 for RHEL-3
|
|
|
|
* Mon Aug 30 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
|
|
- Fix bug 130121: add '%%ghost' entries for files included in previous
|
|
- bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
|
|
- that RPM removed after upgrade .
|
|
|
|
* Thu Aug 26 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fix bug 130981: add '-t' option to named-checkconf invocation in
|
|
- named.init if chroot installed.
|
|
|
|
* Wed Aug 25 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Remove resolver(5) manpage now in man-pages (bug 130792);
|
|
- Don't create /dev/ entries in bind-chroot if already there (bug 127556);
|
|
- fix bind-devel Requires (bug 130919)
|
|
- Set default location for dumpdb & stats files to /var/named/data
|
|
|
|
* Tue Aug 24 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fix devel Requires for bug 130738 & fix version
|
|
|
|
* Tue Aug 24 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fix errors on clean install if named group does not exist
|
|
- (bug 130777)
|
|
|
|
* Thu Aug 19 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Upgrade to bind-9.2.4rc7; applied initscript fix
|
|
- for bug 102035.
|
|
|
|
* Mon Aug 9 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fixed bug 129289: bind-chroot install / deinstall
|
|
- on install, existing config files 'safe_replace'd
|
|
- with links to chroot copies; on uninstall, moved back.
|
|
|
|
* Fri Aug 6 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fixed bug 129258: "${prefix}/var/tmp" typo in spec
|
|
|
|
* Wed Jul 28 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fixed bug 127124 : 'Requires: kernel >= 2.4'
|
|
- causes problems with Linux VServers
|
|
|
|
* Tue Jul 27 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fixed bug 127555 : chroot tar missing var/named/slaves
|
|
|
|
* Fri Jul 16 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Upgraded to ISC version 9.2.4rc6
|
|
|
|
* Fri Jul 16 2004 Jason Vas Dias <jvdias@redhat.com>
|
|
- Fixed named.init generation of error messages on
|
|
- 'service named stop' and 'service named reload'
|
|
- as per bug 127775
|
|
|
|
* Wed Jun 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-19
|
|
- Bump for rhel 3.0 U3
|
|
|
|
* Wed Jun 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-18
|
|
- remove disable-linux-caps
|
|
|
|
* Wed Jun 16 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-17
|
|
- Update RHEL3 to latest bind
|
|
|
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Tue Jun 8 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-15
|
|
- Remove device files from chroot, Named uses the system one
|
|
|
|
* Fri Mar 26 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-14
|
|
- Move RFC to devel package
|
|
|
|
* Fri Mar 26 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-13
|
|
- Fix location of restorecon
|
|
|
|
* Thu Mar 25 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-12
|
|
- Tighten security on config files. Should be owned by root
|
|
|
|
* Thu Mar 25 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-11
|
|
- Update key patch to include conf-keygen
|
|
|
|
* Tue Mar 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-10
|
|
- fix chroot to only happen once.
|
|
- fix init script to do kill insteall of killall
|
|
|
|
* Mon Mar 15 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-9
|
|
- Add fix for SELinux security context
|
|
|
|
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Sat Feb 28 2004 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- run ldconfig for libs subrpm
|
|
|
|
* Mon Feb 23 2004 Tim Waugh <twaugh@redhat.com>
|
|
- Use ':' instead of '.' as separator for chown.
|
|
|
|
* Tue Feb 17 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-7
|
|
- Add COPYRIGHT
|
|
|
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Tue Dec 30 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-5
|
|
- Add defattr to libs
|
|
|
|
* Mon Dec 29 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-4
|
|
- Break out library package
|
|
|
|
* Mon Dec 22 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-3
|
|
- Fix condrestart
|
|
|
|
* Wed Nov 12 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-2
|
|
- Move libisc and libdns to bind from bind-util
|
|
|
|
* Tue Nov 11 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-1
|
|
- Move to 9.2.3
|
|
|
|
* Mon Oct 27 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10
|
|
- Add PIE support
|
|
|
|
* Fri Oct 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9
|
|
- Add /var/named/slaves directory
|
|
|
|
* Sun Oct 12 2003 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- do not link against libnsl, not needed for Linux
|
|
|
|
* Wed Oct 8 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6
|
|
- Fix local time in log file
|
|
|
|
* Tue Oct 7 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5
|
|
- Try again
|
|
|
|
* Mon Oct 6 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4
|
|
- Fix handling of chroot -/dev/random
|
|
|
|
* Thu Oct 2 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3
|
|
- Stop hammering stuff on update of chroot environment
|
|
|
|
* Mon Sep 29 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2
|
|
- Fix chroot directory to grab all subdirectories
|
|
|
|
* Wed Sep 24 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1
|
|
- New patch to support for "delegation-only"
|
|
|
|
* Wed Sep 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-23
|
|
- patch support for "delegation-only"
|
|
|
|
* Wed Jul 30 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-22
|
|
- Update to build on RHL
|
|
|
|
* Wed Jul 30 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-21
|
|
- Install libraries as exec so debug info will be pulled
|
|
|
|
* Sat Jul 19 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-20
|
|
- Remove BSDCOMPAT (BZ 99454)
|
|
|
|
* Tue Jul 15 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-19
|
|
- Update to build on RHL
|
|
|
|
* Tue Jul 15 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-18
|
|
- Change protections on /var/named and /var/chroot/named
|
|
|
|
* Tue Jun 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-17
|
|
- Update to build on RHL
|
|
|
|
* Tue Jun 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-16
|
|
- Update to build on RHEL
|
|
|
|
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Tue Apr 22 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-14
|
|
- Update to build on RHEL
|
|
|
|
* Tue Apr 22 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
|
|
- Fix config description of named.conf in chroot
|
|
- Change named.init script to check for existence of /etc/sysconfig/network
|
|
|
|
* Fri Apr 18 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-12
|
|
- Update to build on RHEL
|
|
|
|
* Fri Apr 18 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-11
|
|
- Update to build on RHEL
|
|
|
|
* Fri Apr 18 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-10
|
|
- Fix echo OK on starting/stopping service
|
|
|
|
* Fri Mar 28 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-9
|
|
- Update to build on RHEL
|
|
|
|
* Fri Mar 28 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-8
|
|
- Fix echo on startup
|
|
|
|
* Tue Mar 25 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-7
|
|
- Fix problems with chroot environment
|
|
- Eliminate posix threads
|
|
|
|
* Mon Mar 24 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-6
|
|
- Fix build problems
|
|
|
|
* Fri Mar 14 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-5
|
|
- Fix build on beehive
|
|
|
|
* Thu Mar 13 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-4
|
|
- build bind-chroot kit
|
|
|
|
* Tue Mar 11 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-3
|
|
- Change configure to use proper threads model
|
|
|
|
* Fri Mar 7 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-2
|
|
- update to 9.2.2
|
|
|
|
* Tue Mar 4 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-1
|
|
- update to 9.2.2
|
|
|
|
* Fri Jan 24 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.1-16
|
|
- Put a sleep in restart to make sure stop completes
|
|
|
|
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
|
|
- rebuilt
|
|
|
|
* Tue Jan 7 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.1-14
|
|
- Separate /etc/rndc.key to separate file
|
|
|
|
* Tue Jan 7 2003 Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13
|
|
- Use openssl's pkgconfig data, if available, at build-time.
|
|
|
|
* Mon Jan 6 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
|
|
- Fix log rotate to use service named reload
|
|
- Change service named reload to give success/failure message [73770]
|
|
- Fix File checking [75710]
|
|
- Begin change to automatically run in CHROOT environment
|
|
|
|
* Tue Dec 24 2002 Daniel Walsh <dwalsh@redhat.com> 9.2.1-10
|
|
- Fix startup script to work like all others.
|
|
|
|
* Mon Dec 16 2002 Daniel Walsh <dwalsh@redhat.com> 9.2.1-9
|
|
- Fix configure to build on x86_64 platforms
|
|
|
|
* Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de>
|
|
- fix #70583, doesn't build on IA64
|
|
|
|
* Tue Jul 30 2002 Karsten Hopp <karsten@redhat.de> 9.2.1-8
|
|
- bind-utils shouldn't require bind
|
|
|
|
* Mon Jul 22 2002 Karsten Hopp <karsten@redhat.de> 9.2.1-7
|
|
- fix name of pidfine in logrotate script (#68842)
|
|
- fix owner of logfile in logrotate script (#41391)
|
|
- fix nslookup and named.conf man pages (output on stderr)
|
|
(#63553, #63560, #63561, #54889, #57457)
|
|
- add rfc1912 (#50005)
|
|
- gzip all rfc's
|
|
- fix typo in keygen.c (#54870)
|
|
- added missing manpages (#64065)
|
|
- shutdown named properly with rndc stop (#62492)
|
|
- /sbin/nologin instead of /bin/false (#68607)
|
|
- move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
|
|
- don't kill initscript when rndc fails (reload) (#58750)
|
|
|
|
|
|
* Mon Jun 24 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5
|
|
- Fix #65975
|
|
|
|
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
|
|
- automated rebuild
|
|
|
|
* Thu May 23 2002 Tim Powers <timp@redhat.com>
|
|
- automated rebuild
|
|
|
|
* Thu May 9 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
|
|
- Move libisccc, lib isccfg and liblwres from bind-utils to bind,
|
|
they're not required if you aren't running a nameserver.
|
|
|
|
* Fri May 03 2002 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- update to 9.2.1 release
|
|
|
|
* Thu Mar 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8
|
|
- Merge 30+ bug fixes from 9.2.1rc1 code
|
|
|
|
* Mon Mar 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
|
|
- Don't exit if /etc/named.conf doesn't exist if we're running
|
|
chroot (#60868)
|
|
- Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
|
|
versions or bug #58335 will be back. "It compiles, therefore it works"
|
|
isn't always true.
|
|
|
|
* Thu Feb 28 2002 Elliot Lee <sopwith@redhat.com> 9.2.0-6
|
|
- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders
|
|
versions).
|
|
- Use _smp_mflags
|
|
|
|
* Wed Feb 20 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4
|
|
- rebuild, require recent autoconf, automake (#58335)
|
|
|
|
* Fri Jan 25 2002 Tim Powers <timp@redhat.com>
|
|
- rebuild against new libssl
|
|
|
|
* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
|
|
- automated rebuild
|
|
|
|
* Tue Nov 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1
|
|
- 9.2.0
|
|
|
|
* Thu Nov 22 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2
|
|
- 9.2.0rc10
|
|
|
|
* Mon Nov 5 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2
|
|
- Fix up rndc.conf (#55574)
|
|
|
|
* Thu Oct 25 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1
|
|
- rc8
|
|
- Enforce --enable-threads
|
|
|
|
* Mon Oct 22 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1
|
|
- 9.2.0rc7
|
|
- Use rndc status for "service named status", it's supposed to actually
|
|
work in 9.2.x.
|
|
|
|
* Wed Oct 3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1
|
|
- 9.2.0rc5
|
|
- Fix rpm --rebuild with ancient libtool versions (#53938, #54257)
|
|
|
|
* Tue Sep 25 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1
|
|
- 9.2.0rc4
|
|
|
|
* Fri Sep 14 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
|
|
- 9.2.0rc3
|
|
- remove ttl patch, I don't think we need this for 8.0.
|
|
- remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
|
|
- add lwres* man pages to -devel
|
|
|
|
* Mon Sep 3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
|
|
- Make sure /etc/rndc.conf isn't world-readable even after the
|
|
%%post script inserted a random key (#53009)
|
|
|
|
* Thu Jul 19 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
|
|
- Add build dependencies (#49368)
|
|
- Make sure running service named start several times doesn't create
|
|
useless processes (#47596)
|
|
- Work around the named parent process returning 0 even if the config
|
|
file is broken (it's parsed later by the child processes) (#45484)
|
|
|
|
* Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2
|
|
- Don't use rndc status, it's not yet implemented (#48839)
|
|
|
|
* Sun Jul 08 2001 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- update to 9.1.3 release
|
|
|
|
* Tue Jul 3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1
|
|
- Fix up rndc configuration and improve security (#46586)
|
|
|
|
* Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2
|
|
- Sync with caching-nameserver-7.1-6
|
|
|
|
* Mon Jun 25 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1
|
|
- Update to rc2
|
|
|
|
* Fri Jun 1 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3
|
|
- Remove resolv.conf(5) man page, it's now in man-pages
|
|
|
|
* Thu May 31 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
|
|
- Add named.conf man page from bind 8.x (outdated, but better than nothing,
|
|
#42732)
|
|
- Rename the rndc key (#42895)
|
|
- Add dnssec* man pages
|
|
|
|
* Mon May 28 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1
|
|
- 9.1.3rc1
|
|
- s/Copyright/License/
|
|
|
|
* Mon May 7 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
|
|
- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
|
|
the version number, though.
|
|
|
|
* Thu May 3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1
|
|
- 9.1.2rc1
|
|
|
|
* Thu Mar 29 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1
|
|
- 9.1.1
|
|
|
|
* Thu Mar 15 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10
|
|
- Merge fixes from 9.1.1rc5
|
|
|
|
* Sun Mar 11 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
|
|
- Work around bind 8 -> bind 9 migration problem when using buggy zone files:
|
|
accept zones without a TTL, but spew out a big fat warning. (#31393)
|
|
|
|
* Thu Mar 8 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Add fixes from rc4
|
|
|
|
* Fri Mar 2 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- rebuild in new environment
|
|
|
|
* Thu Mar 1 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- killall -HUP named if rndc reload fails (#30113)
|
|
|
|
* Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Merge some fixes from 9.1.1rc3
|
|
|
|
* Tue Feb 20 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Don't use the standard rndc key from the documentation, instead, create a random one
|
|
at installation time (#26358)
|
|
- Make /etc/rndc.conf readable by user named only, it contains secret keys
|
|
|
|
* Tue Feb 20 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
|
|
from 9.1.1rc2
|
|
- bind requires bind-utils (#28317)
|
|
|
|
* Tue Feb 13 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Update to rc2, fixes 2 more bugs
|
|
- Fix build with glibc >= 2.2.1-7
|
|
|
|
* Thu Feb 8 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
|
|
1 was fixed in a Red Hat patch already, 2 others are portability
|
|
improvements)
|
|
|
|
* Wed Feb 7 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Remove initscripts 5.54 requirement (#26489)
|
|
|
|
* Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Add named-checkconf, named-checkzone (#25170)
|
|
|
|
* Mon Jan 29 2001 Trond Eivind Glomsrod <teg@redhat.com>
|
|
- use echo, not gprintf
|
|
|
|
* Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Fix problems with $GENERATE
|
|
Patch from Daniel Roesen <droesen@entire-systems.com>
|
|
Bug #24890
|
|
|
|
* Thu Jan 18 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.1.0 final
|
|
|
|
* Sat Jan 13 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.1.0rc1
|
|
- i18nify init script
|
|
- bzip2 source to save space
|
|
|
|
* Thu Jan 11 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Fix %%postun script
|
|
|
|
* Tue Jan 9 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.1.0b3
|
|
|
|
* Mon Jan 8 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Add named.conf man page from bind8 (#23503)
|
|
|
|
* Sun Jan 7 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Make /etc/rndc.conf and /etc/sysconfig/named noreplace
|
|
- Make devel require bind = %%{version} rather than just bind
|
|
|
|
* Sun Jan 7 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Fix init script for real
|
|
|
|
* Sat Jan 6 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Fix init script when ROOTDIR is not set
|
|
|
|
* Thu Jan 4 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Add hooks for setting up named to run chroot (RFE #23246)
|
|
- Fix up requirements
|
|
|
|
* Fri Dec 29 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.1.0b2
|
|
|
|
* Wed Dec 20 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Move run files to /var/run/named/ - /var/run isn't writable
|
|
by the user we're running as. (Bug #20665)
|
|
|
|
* Tue Dec 19 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Fix reverse lookups (#22272)
|
|
- Run ldconfig in %%post utils
|
|
|
|
* Tue Dec 12 2000 Karsten Hopp <karsten@redhat.de>
|
|
- fixed logrotate script (wrong path to kill)
|
|
- include header files in -devel package
|
|
- bugzilla #22049, #19147, 21606
|
|
|
|
* Fri Dec 8 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)
|
|
|
|
* Mon Nov 13 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.0.1
|
|
|
|
* Mon Oct 30 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Fix initscript (Bug #19956)
|
|
- Add sample rndc.conf (Bug #19956)
|
|
- Fix build with tar 1.13.18
|
|
|
|
* Tue Oct 10 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Add some missing man pages (taken from bind8) (Bug #18794)
|
|
|
|
* Sun Sep 17 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.0.0 final
|
|
|
|
* Wed Aug 30 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- rc5
|
|
- fix up nslookup
|
|
|
|
* Thu Aug 24 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- rc4
|
|
|
|
* Thu Jul 13 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 9.0.0rc1
|
|
|
|
* Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
|
|
- automatic rebuild
|
|
|
|
* Sun Jul 9 2000 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- add "exit 0" for uninstall case
|
|
|
|
* Fri Jul 7 2000 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- add prereq init.d and cleanup install section
|
|
|
|
* Fri Jun 30 2000 Trond Eivind Glomsrod <teg@redhat.com>
|
|
- fix the init script
|
|
|
|
* Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""
|
|
|
|
* Mon Jun 26 2000 Bernhard Rosenkranzer <bero@redhat.com>
|
|
- Fix up the initscript (Bug #13033)
|
|
- Fix build with current glibc (Bug #12755)
|
|
- /etc/rc.d/init.d -> /etc/init.d
|
|
- use %%{_mandir} rather than /usr/share/man
|
|
|
|
* Mon Jun 19 2000 Bill Nottingham <notting@redhat.com>
|
|
- fix conflict with man-pages
|
|
- remove compatibilty chkconfig links
|
|
- initscript munging
|
|
|
|
* Wed Jun 14 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- modify logrotate setup to use PID file
|
|
- temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
|
|
- actually bump the release this time
|
|
|
|
* Sun Jun 4 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- FHS compliance
|
|
|
|
* Mon Apr 17 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- clean up restart patch
|
|
|
|
* Mon Apr 10 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- provide /var/named (fix for bugs #9847, #10205)
|
|
- preserve args when restarted via ndc(8) (bug #10227)
|
|
- make resolv.conf(5) a link to resolver(5) (bug #10245)
|
|
- fix SYSTYPE bug in all makefiles
|
|
- move creation of named user from %%post into %%pre
|
|
|
|
* Mon Feb 28 2000 Bernhard Rosenkranzer <bero@redhat.com>
|
|
- Fix TTL (patch from ISC, Bug #9820)
|
|
|
|
* Wed Feb 16 2000 Bernhard Rosenkranzer <bero@redhat.com>
|
|
- fix typo in spec (it's %%post, without a leading blank) introduced in -6
|
|
- change SYSTYPE to linux
|
|
|
|
* Fri Feb 11 2000 Bill Nottingham <notting@redhat.com>
|
|
- pick a standard < 100 uid/gid for named
|
|
|
|
* Fri Feb 04 2000 Elliot Lee <sopwith@redhat.com>
|
|
- Pass named a '-u named' parameter by default, and add/remove user.
|
|
|
|
* Thu Feb 3 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- fix host mx bug (Bug #9021)
|
|
|
|
* Mon Jan 31 2000 Cristian Gafton <gafton@redhat.com>
|
|
- rebuild to fix dependencies
|
|
- man pages are compressed
|
|
|
|
* Wed Jan 19 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)
|
|
|
|
* Mon Jan 17 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- Fix up location of named-bootconf.pl and make it executable
|
|
(Bug #8028)
|
|
- bind-devel requires bind
|
|
|
|
* Mon Nov 15 1999 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- update to 8.2.2-P5
|
|
|
|
* Wed Nov 10 1999 Bill Nottingham <notting@redhat.com>
|
|
- update to 8.2.2-P3
|
|
|
|
* Tue Oct 12 1999 Cristian Gafton <gafton@redhat.com>
|
|
- add patch to stop a cache only server from complaining about lame servers
|
|
on every request.
|
|
|
|
* Fri Sep 24 1999 Preston Brown <pbrown@redhat.com>
|
|
- use real stop and start in named.init for restart, not ndc restart, it has
|
|
problems when named has changed during a package update... (# 4890)
|
|
|
|
* Fri Sep 10 1999 Bill Nottingham <notting@redhat.com>
|
|
- chkconfig --del in %%preun, not %%postun
|
|
|
|
* Mon Aug 16 1999 Bill Nottingham <notting@redhat.com>
|
|
- initscript munging
|
|
|
|
* Mon Jul 26 1999 Bill Nottingham <notting@redhat.com>
|
|
- fix installed chkconfig links to match init file
|
|
|
|
* Sat Jul 3 1999 Jeff Johnson <jbj@redhat.com>
|
|
- conflict with new (in man-1.24) man pages (#3876,#3877).
|
|
|
|
* Tue Jun 29 1999 Bill Nottingham <notting@redhat.com>
|
|
- fix named.logrotate (wrong %%SOURCE)
|
|
|
|
* Fri Jun 25 1999 Jeff Johnson <jbj@redhat.com>
|
|
- update to 8.2.1.
|
|
- add named.logrotate (#3571).
|
|
- hack around egcs-1.1.2 -m486 bug (#3413, #3485).
|
|
- vet file list.
|
|
|
|
* Fri Jun 18 1999 Bill Nottingham <notting@redhat.com>
|
|
- don't run by default
|
|
|
|
* Sun May 30 1999 Jeff Johnson <jbj@redhat.com>
|
|
- nslookup fixes (#2463).
|
|
- missing files (#3152).
|
|
|
|
* Sat May 1 1999 Stepan Kasal <kasal@math.cas.cz>
|
|
- nslookup patched:
|
|
to count numRecords properly
|
|
to fix subsequent calls to ls -d
|
|
to parse "view" and "finger" commands properly
|
|
the view hack updated for bind-8 (using sed)
|
|
|
|
* Wed Mar 31 1999 Bill Nottingham <notting@redhat.com>
|
|
- add ISC patch
|
|
- add quick hack to make host not crash
|
|
- add more docs
|
|
|
|
* Fri Mar 26 1999 Cristian Gafton <gafton@redhat.com>
|
|
- add probing information in the init file to keep linuxconf happy
|
|
- dont strip libbind
|
|
|
|
* Sun Mar 21 1999 Cristian Gafton <gafton@redhat.com>
|
|
- auto rebuild in the new build environment (release 3)
|
|
|
|
* Wed Mar 17 1999 Preston Brown <pbrown@redhat.com>
|
|
- removed 'done' output at named shutdown.
|
|
|
|
* Tue Mar 16 1999 Cristian Gafton <gafton@redhat.com>
|
|
- version 8.2
|
|
|
|
* Wed Dec 30 1998 Cristian Gafton <gafton@redhat.com>
|
|
- patch to use the __FDS_BITS macro
|
|
- build for glibc 2.1
|
|
|
|
* Wed Sep 23 1998 Jeff Johnson <jbj@redhat.com>
|
|
- change named.restart to /usr/sbin/ndc restart
|
|
|
|
* Sat Sep 19 1998 Jeff Johnson <jbj@redhat.com>
|
|
- install man pages correctly.
|
|
- change K10named to K45named.
|
|
|
|
* Wed Aug 12 1998 Jeff Johnson <jbj@redhat.com>
|
|
- don't start if /etc/named.conf doesn't exist.
|
|
|
|
* Sat Aug 8 1998 Jeff Johnson <jbj@redhat.com>
|
|
- autmagically create /etc/named.conf from /etc/named.boot in %%post
|
|
- remove echo in %%post
|
|
|
|
* Wed Jun 10 1998 Jeff Johnson <jbj@redhat.com>
|
|
- merge in 5.1 mods
|
|
|
|
* Sun Apr 12 1998 Manuel J. Galan <manolow@step.es>
|
|
- Several essential modifications to build and install correctly.
|
|
- Modified 'ndc' to avoid deprecated use of '-'
|
|
|
|
* Mon Dec 22 1997 Scott Lampert <fortunato@heavymetal.org>
|
|
- Used buildroot
|
|
- patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
|
|
on Redhat 5.0 instead of <nlist.h>
|