rpms/bind9.16
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update built-in root anchors from named.root.key

Browse Source 
Remove original bind.keys and replace it with sourced file. Ensure it is
converted into header by deleting original header before the build.

Resolves: RHEL-131888
This commit is contained in:
Petr Menšík 2026-09-02 15:22:59 +02:00
parent eb1fe5d710
commit 093531830e
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
bind9.16.spec
View File

@ -578,6 +578,9 @@ sed -e 's|"$TOP/config.guess"|"$TOP_SRCDIR/config.guess"|' -i bin/tests/system/i
sed -e 's, "enable-developer",& \&\& systemctl is-system-running \&>/dev/null \&\& ! [ -e /mnt/tests ],' \
-i bin/tests/system/run.sh
install -m 644 -p %{SOURCE27} bind.keys
# Ensure build-in keys are regenerated
rm -f bind.keys.h
:;
@ -923,10 +926,10 @@ cp -a build/doc/arm/Bv9ARM.pdf ${RPM_BUILD_ROOT}%{_pkgdocdir}
touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log
# configuration files:
install -m 640 %{SOURCE16} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
install -m 640 %{SOURCE16} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.{key,conf}
install -m 644 %{SOURCE27} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key
install -m 644 %{SOURCE36} ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key
install -m 644 %{SOURCE27} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key
install -m 644 %{SOURCE36} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named
# data files:
@ -1299,6 +1302,7 @@ fi;
%changelog
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.22.13
- Add new root key 38696 into package files (RHEL-131888)
- Update built-in anchors in delv and named
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-0.22.12
- Fix NSEC3 signer validation (CVE-2026-10723)