From 093531830e2c47258bd383e920bfcf573e1af49e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= Date: Wed, 2 Sep 2026 15:22:59 +0200 Subject: [PATCH] Update built-in root anchors from named.root.key Remove original bind.keys and replace it with sourced file. Ensure it is converted into header by deleting original header before the build. Resolves: RHEL-131888 --- bind9.16.spec | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/bind9.16.spec b/bind9.16.spec index 7945c91..100da1e 100644 --- a/bind9.16.spec +++ b/bind9.16.spec @@ -578,6 +578,9 @@ sed -e 's|"$TOP/config.guess"|"$TOP_SRCDIR/config.guess"|' -i bin/tests/system/i sed -e 's, "enable-developer",& \&\& systemctl is-system-running \&>/dev/null \&\& ! [ -e /mnt/tests ],' \ -i bin/tests/system/run.sh +install -m 644 -p %{SOURCE27} bind.keys +# Ensure build-in keys are regenerated +rm -f bind.keys.h :; @@ -923,10 +926,10 @@ cp -a build/doc/arm/Bv9ARM.pdf ${RPM_BUILD_ROOT}%{_pkgdocdir} touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log # configuration files: -install -m 640 %{SOURCE16} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf +install -m 640 %{SOURCE16} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.{key,conf} -install -m 644 %{SOURCE27} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key -install -m 644 %{SOURCE36} ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key +install -m 644 %{SOURCE27} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key +install -m 644 %{SOURCE36} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named # data files: @@ -1299,6 +1302,7 @@ fi; %changelog * Wed Sep 02 2026 Petr Menšík - 32:9.16.23-0.22.13 - Add new root key 38696 into package files (RHEL-131888) +- Update built-in anchors in delv and named * Thu Jul 23 2026 RHEL Packaging Agent - 32:9.16.23-0.22.12 - Fix NSEC3 signer validation (CVE-2026-10723)