Commit Graph

425 Commits

Author SHA1 Message Date
Jiri Popelka
0f0b1e4ee5 One more tweak of adding of user and group (#699713) 2011-09-09 17:16:12 +02:00
Jiri Popelka
34b6412f84 PIE-RELRO.patch is not needed anymore, defining _hardened_build does the same 2011-09-09 17:13:55 +02:00
Adam Tkac
6455feecba Rebuild against new bind.
Signed-off-by: Adam Tkac <atkac@redhat.com>
2011-09-09 13:11:03 +02:00
Jiri Popelka
f68f02db2e Fix adding of user and group (#699713) 2011-08-26 13:16:50 +02:00
Jiri Popelka
b8f92d8f72 Use {?_isa} macro to tighten explicit libs sub-package requirement. 2011-08-19 16:54:59 +02:00
Jiri Popelka
d7e74c83b3 Do not run dhcpd as root (BZ#699713)
Use '--enable-paranoia --enable-early-chroot' configure flags
Create/delete dhcpd user in %post/%postun
Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'
2011-08-12 15:22:35 +02:00
Jiri Popelka
5c346262c0 added test.sh to run upstream shipped tests. 2011-08-11 18:14:27 +02:00
Jiri Popelka
5e9e3f36a8 4.2.2: fix for CVE-2011-2748, CVE-2011-2749 (#729850) 2011-08-11 09:05:21 +02:00
Jiri Popelka
32a4427499 Do not ship default /etc/dhcp/dhclient.conf (#560361,c#9) 2011-08-10 17:17:01 +02:00
Jiri Popelka
0ab9732c2e Improve capabilities patch to be able to run with PARANOIA & EARLY_CHROOT (#699713) 2011-07-25 16:50:15 +02:00
Jiri Popelka
e3472df151 4.2.2rc1 2011-07-18 13:49:41 +02:00
Jiri Popelka
5f2fc2001b Fixed comment in /etc/sysconfig/dhcrelay 2011-07-01 15:31:00 +02:00
Jiri Popelka
48c3985b3a Drop all capabilities in dhcpd/dhcrelay (#699713) 2011-07-01 15:20:42 +02:00
Jiri Popelka
bb77af8b5e 4.2.2b1 2011-07-01 14:43:04 +02:00
Jiri Popelka
030991fd0d Removed upstream-merged IFNAMSIZ.patch
Polished patches according to results from static analysis of code.
2011-06-17 14:39:28 +02:00
Jiri Popelka
fdefd274e5 Add triggerpostun scriptlet tied to dhcp-sysvinit 2011-06-16 14:46:24 +02:00
Kamil Dudka
43a67dc92b make it possible to build dhcp without downstream patches 2011-06-16 14:43:36 +02:00
Jiri Popelka
94d8c6567b Fix typo in triggerun scriptlet (#705417) 2011-05-17 18:01:14 +02:00
Jiri Popelka
040a0f11d1 Explicit Requires on cups-libs (bug #705037). 2011-05-16 17:37:01 +02:00
Jiri Popelka
931db1171c Fix triggerun scriptlet 2011-05-11 18:29:46 +02:00
Jiri Popelka
fdc397c22a Fix 11-dhclient to export variables (#702735) 2011-05-09 14:32:51 +02:00
Jiri Popelka
6817180bd0 Comply with guidelines for systemd services 2011-04-29 12:13:36 +02:00
Jiri Popelka
cc2eb946a1 Fix NM dispatcher script for dhcpd to support arbitrary interface names 2011-04-27 17:17:31 +02:00
Jiri Popelka
2f1515e529 Better fix for CVE-2011-0997: making domain-name check more lenient (#694005) 2011-04-06 20:33:31 +02:00
Jiri Popelka
bad89d2bfa fix VERSION macro definition 2011-04-06 13:36:22 +02:00
Jiri Popelka
976c4dec61 4.2.1-P1: fix for CVE-2011-0997 (#694005) 2011-04-06 11:44:33 +02:00
Jiri Popelka
2b40dd8d32 Polished patches according to results from static analysis of code. 2011-03-25 16:27:50 +01:00
Rex Dieter
846f73bce1 rebuild (bind) 2011-03-07 13:39:08 -06:00
Jiri Popelka
9ac4a37707 4.2.1 2011-03-02 10:45:42 +01:00
Jiri Popelka
b2f01851dc 4.2.1rc1 2011-02-23 12:18:07 +01:00
Adam Tkac
b95a0d94b4 Rebuild against new bind-libs-lite.
Signed-off-by: Adam Tkac <atkac@redhat.com>
2011-02-21 17:40:22 +01:00
Dennis Gilmore
2dd1b89b40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 07:42:35 -06:00
Jiri Popelka
beef387033 Bump release 2011-01-31 15:24:44 +01:00
Jiri Popelka
005b240d12 Prevent anything under _docdir from being scanned. (#674058) 2011-01-31 15:21:36 +01:00
Jiri Popelka
a2aab09028 dhclient-script improvements (#672279) 2011-01-28 15:43:40 +01:00
Jiri Popelka
45c037153f 4.2.1b1: fix for CVE-2011-0413 (#672996) 2011-01-28 09:21:10 +01:00
Jiri Popelka
b909aab049 dhclient-script: another fix for checking for other running dhclient 2011-01-18 18:02:35 +01:00
Jiri Popelka
99f5023df5 Fix loading of configuration when LDAP is used (#668276) 2011-01-13 18:06:54 +01:00
Jiri Popelka
a396b806f1 Fix OMAPI (#666441) 2011-01-03 16:46:56 +01:00
Jiri Popelka
7a66932b50 Default /etc/dhcp/dhclient.conf (send dhcp-client-identifier) (#560361) 2010-12-21 14:03:52 +01:00
Jiri Popelka
43f4ae0815 Add dhcp-common subpackage (#634673) 2010-12-15 19:53:02 +01:00
Jiri Popelka
7b41fdb208 4.2.0-P2: fix for CVE-2010-3616 (#662326)
- Use upstream fix for #628258
- Provide versioned symbols for rpmlint
2010-12-13 12:08:24 +01:00
Jiri Popelka
77e77eaef7 Porting dhcpd/dhcpd6/dhcrelay services from SysV to Systemd 2010-12-07 15:32:39 +01:00
Jiri Popelka
05647bd6ff Remove explicit Obsoletes (#656310) 2010-11-23 19:37:21 +01:00
Dan Horák
d45f7d3e78 - fix build on sparc and s390 2010-11-19 12:07:45 +01:00
Jiri Popelka
76c2a1e49b DHCPv6 over PPP support (#626514) 2010-11-09 17:01:11 +01:00
Jiri Popelka
90ba4e9d04 bumped release 2010-11-05 11:24:32 +01:00
Jiri Popelka
c499a66e5a fix broken dependencies 2010-11-05 10:44:20 +01:00
Jiri Popelka
94ec5da03a Add domain part of hostname to 'search' statement in resolv.conf 2010-11-04 20:12:23 +01:00
Jiri Popelka
25d2dbf720 Fix for CVE-2010-3611 (#649880) 2010-11-04 20:10:20 +01:00
Adam Tkac
81227ae2b3 Build dhcp's libraries as shared libs instead of static libs.
Signed-off-by: Adam Tkac <atkac@redhat.com>
2010-10-20 15:03:31 +02:00
Adam Tkac
9819e31780 Fire away bundled BIND source.
Signed-off-by: Adam Tkac <atkac@redhat.com>
2010-10-20 15:01:14 +02:00
Adam Tkac
baeadb7b49 Improve PIE patch (build libraries with -fpic, not with -fpie).
Signed-off-by: Adam Tkac <atkac@redhat.com>
2010-10-20 14:59:16 +02:00
Jiri Popelka
41ed8fdb0a Server was ignoring client's Solicit (with preference included) (#634842) 2010-10-13 12:12:39 +02:00
Jiri Popelka
b112ec7432 s/ping/arping/ in dhclient-script to handle not-on-local-net gateway in ARP-less device (#524298) 2010-10-07 18:05:44 +02:00
Jiri Popelka
290660e57a Check lease for unexpired addresses prior to confirming it (#585418) 2010-10-07 14:00:53 +02:00
Jiri Popelka
2560aa7e3c RFC 3442 - improved dhclient-script 2010-10-04 11:55:50 +02:00
Jiri Popelka
d5a4ff8b46 Do not bring the interface down (#574568) 2010-09-30 16:04:48 +02:00
Jiri Popelka
1a731ce50f Hardening dhcpd/dhcrelay/dhclient by making them PIE & RELRO 2010-09-07 17:39:52 +02:00
Jiri Popelka
4ff3870707 Another fix for handling time values on 64-bit platforms (#628258) 2010-09-02 18:58:05 +02:00
Jiri Popelka
63aa3f4bc6 Fix parsing of lease file dates & times on 64-bit platforms (#628258) 2010-09-01 13:22:34 +02:00
Jiri Popelka
a21bc05f7d RFC 3442 - Classless Static Route Option for DHCPv4 (#516325) 2010-08-31 13:10:13 +02:00
Jiri Popelka
027db6fe99 Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay 2010-08-20 17:37:12 +02:00
Jiri Popelka
9ba8b65c5c * Fri Jul 30 2010 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-2
- Rename 10-dhclient to 11-dhclient (10-sendmail already exists)
- Add 12-dhcpd NM dispatcher script (#565921)
2010-08-02 11:33:46 +02:00
Jiří Popelka
5a3797ea32 - 4.2.0: includes ldap-for-dhcp 2010-07-21 16:56:35 +00:00
Jiří Popelka
94f2da27ed - Add LICENSE file to dhclient subpackage. 2010-07-12 10:33:05 +00:00
Jiří Popelka
f45f2bb289 - Adhere to Static Library Packaging Guidelines (#609605). 2010-07-01 09:40:16 +00:00
Jiří Popelka
5f19ed1856 - Fix parsing of date (#514828) 2010-06-29 10:24:33 +00:00
Jiří Popelka
d66bacbc2c - 4.1.1-P1 (pair of bug fixes including one for a security related bug).
- Compile with -fno-strict-aliasing
- N-V-R (copied from bind.spec): Name-Version-Release.Patch.dist
2010-06-03 10:15:57 +00:00
Jiří Popelka
601ecd2ea2 - Bumped Release. 2010-06-02 14:45:39 +00:00
Jiří Popelka
911542218a - 4.1.1-P1 (pair of bug fixes including one for a security related bug).
- Compile with -fno-strict-aliasing
2010-06-02 14:09:12 +00:00
Jiří Popelka
ea06b93b2d - Fix the initialization-delay.patch (#587070) 2010-05-03 14:44:05 +00:00
Jiří Popelka
2f26ada950 - There was a useless 0-4 second delay before sending first DHCPDISCOVER. I
didn't remove it at all, but made it 0-1 second. (#587070)
2010-04-29 15:24:42 +00:00
Jiří Popelka
262beb6e04 - Move /etc/NetworkManager/dispatcher.d/10-dhclient script from dhcp to
dhclient subpackage (#586999).
2010-04-28 18:57:07 +00:00
Jiří Popelka
f3dd4cf940 - Add domain-search to the list of default requested DHCP options (#586906) 2010-04-28 14:05:21 +00:00
Jiří Popelka
2d5915903a - If the Reply was received in response to Renew or Rebind message, client
adds any new addresses in the IA option to the IA (#578097)
2010-04-21 14:56:20 +00:00
Jiří Popelka
33f7324460 - Fill in Elapsed Time Option in Release/Decline messages (#582939) 2010-04-19 10:35:29 +00:00
Jiří Popelka
ed7e418d35 - In client initiated message exchanges stop retransmission upon reaching
the MRD rather than at some point after it (#559153)
2010-03-25 18:46:07 +00:00
Jiří Popelka
21b8c45264 - In dhclient-script check whether bound address passed duplicate address
detection (DAD) (#559147)
- If the bound address failed DAD (is found to be in use on the link), the
    dhcpv6 client sends a Decline message to the server as described in
    section 18.1.7 of RFC-3315 (#559147)
2010-03-24 11:06:45 +00:00
Jiří Popelka
c4025679fd - Fix UseMulticast.patch to not repeatedly parse dhcpd.conf for unicast
option
- Fix dhclient-script to set interface MTU only when it's greater than 576
    (#574629)
2010-03-19 17:22:59 +00:00
Jiří Popelka
b08ba4ea9a - Discard unicast Request/Renew/Release/Decline message (unless we set
unicast option) and respond with Reply with UseMulticast Status Code
    option (#573090)
- Remove DHCPV6 OPERATION section from dhclient.conf.5 describing
    deprecated 'send dhcp6.oro' syntax
2010-03-12 20:18:59 +00:00
Jiří Popelka
64b0222678 - Fix paths in man pages (#568031)
- Remove odd tests in %preun
2010-02-25 17:16:43 +00:00
Jiří Popelka
1bab4538a8 - Add interface-mtu to the list of default requested DHCP options (#566873) 2010-02-22 16:11:24 +00:00
Jiří Popelka
de0a7afcfd - Fix pm-utils/sleep.d/ directory ownership conflict 2010-02-19 17:35:55 +00:00
Jiří Popelka
5ec8ece1f2 - In dhclient-script:
- use ip command options '-4' or '-6' as shortcuts for '-f[amily] inet'
    resp. '-f[amily] inet6'
- do not use IP protocol family identifier with 'ip link'
2010-02-19 11:37:25 +00:00
Jiří Popelka
197cc48745 - Fix installation of pm-utils script (#479639, c#16) 2010-02-18 11:41:18 +00:00
Jiří Popelka
3b1375475b - ldap-for-dhcp-4.1.1-2 (#564810) 2010-02-16 17:48:50 +00:00
Jiří Popelka
d44b3993c3 - Fix ldap patch to explicitly link with liblber (#564810) 2010-02-16 11:06:49 +00:00
Jiří Popelka
465f750ab6 - Fix dhclient-decline-backoff.patch (#562854) 2010-02-08 16:01:45 +00:00
Jiří Popelka
152a4960a9 - Fix dhclient-script to delete address which the client is going to
release as soon as it begins the Release message exchange process
    (#559142)
2010-02-05 15:09:41 +00:00
Jiří Popelka
cd8c86f398 - move /etc/dhcp.conf to /etc/dhcp.conf.rpmsave in %post (#561094)
- document -nc option in dhclient(8) man page
2010-02-03 17:48:51 +00:00
Jiří Popelka
79859968bb - Fix capability patch (#546765) 2010-02-02 12:30:33 +00:00
Jiří Popelka
a449503820 - Fix capability patch (#546765) 2010-02-02 12:28:55 +00:00
Jiří Popelka
9538db2fbf - Upgraded to ISC dhcp-4.1.1 2010-01-20 17:07:47 +00:00
Jiří Popelka
3728cf43b7 - Hide startup info when starting dhcpd6 service.
- Remove -TERM from calling killproc when stopping dhcrelay (#555672)
2010-01-18 09:13:37 +00:00
Jiří Popelka
9c63bd9d6e - Added init script to also start dhcpd for IPv6 (#552453)
- Added dhcpd6.conf.sample
2010-01-15 12:52:28 +00:00
Jiří Popelka
606ac5674b - Use %global instead of %define. 2010-01-07 07:37:30 +00:00
Jiří Popelka
59ea29af7c - dhclient logs its pid to make troubleshooting NM managed systems with
multiple dhclients running easier (#546792)
2009-12-14 10:56:21 +00:00
Jiří Popelka
9ca442a1dd - Honor DEFROUTE=yes|no for all connection types (#530209) 2009-11-23 09:14:24 +00:00
Jiří Popelka
9726e0ff9f - Make dhclient-script add IPv6 address to interface (#531997) 2009-10-30 09:51:58 +00:00