Commit Graph

64 Commits

Author SHA1 Message Date
Zdenek Pytela
16d43cc08d Allow frr daemons bind generic sockets to tcp ports
The vrrpd and pathd daemons need to bind to ports 2619/tcp and 2621/tcp.
This commit can be reverted if the inter-process communication changes
to using unix sockets in the future.

Addresses the following AVC denial:

type=PROCTITLE msg=audit(08/10/2022 05:32:53.905:257) : proctitle=/usr/libexec/frr/pathd -d -F traditional -A 127.0.0.1
type=AVC msg=audit(08/10/2022 05:32:53.905:257) : avc:  denied  { name_bind } for  pid=8625 comm=pathd src=2621 scontext=system_u:system_r:frr_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0
type=SYSCALL msg=audit(08/10/2022 05:32:53.905:257) : arch=x86_64 syscall=bind success=no exit=EACCES(Permission denied) a0=0xc a1=0x55e3ba44fdd0 a2=0x10 a3=0x7fff610c2bd4 items=0 ppid=8623 pid=8625 auid=unset uid=geoclue gid=flatpak euid=geoclue suid=geoclue fsuid=geoclue egid=flatpak sgid=flatpak fsgid=flatpak tty=(none) ses=unset comm=pathd exe=/usr/libexec/frr/pathd subj=system_u:system_r:frr_t:s0 key=(null)
type=SOCKADDR msg=audit(08/10/2022 05:32:53.905:257) : saddr={ saddr_fam=inet laddr=127.0.0.1 lport=2621 }

Resolves: rhbz#2117262
2022-08-19 10:30:23 +00:00
Michal Ruprich
d0157c4cbf Adding vrrpd and pathd to the policy 2022-08-10 12:03:08 +02:00
Michal Ruprich
40f863faec Finalizing SELinux policy 2022-08-10 10:36:08 +02:00
Zdenek Pytela
1e7608b86e Allow frr_t create /root/.history_frr with a private type
The file can be created when the frr service starts, so
a file transition is needed to be defined in the policy.
2022-08-10 10:09:25 +02:00
Michal Ruprich
4a6900f6dc Fixing wrong path for vtysh in frr.fc 2022-08-02 09:58:48 +02:00
Benjamin A. Beasley
15e17067ee Rebuild with abseil-cpp-20211102.0-4.fc37 (RHBZ#2108658)
The file absl_random_internal_randen_hwaes_impl.pc shipped in
abseil-cpp-devel incorrectly specified -maes -msse4.1 in its CFLAGS,
causing any packages which used pkgconfig to compile against abseil to
require SSE4.1 instructions to run. This affected frr in F37/Rawhide.
2022-07-29 12:54:46 -04:00
Michal Ruprich
9408b0b09e Packaging SELinux policy for FRR 2022-07-28 13:35:19 +02:00
Fedora Release Engineering
cba62cd207 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-21 03:41:16 +00:00
Michal Ruprich
0c5e4dac6b Rebuild for grpc-1.46.1 2022-05-17 09:24:20 +02:00
Michal Ruprich
38e840d2af Fix for CVE-2022-16126 2022-04-11 12:00:54 +02:00
Michal Ruprich
4519d663ea New version 8.2.2 2022-03-15 14:49:25 +01:00
Michal Ruprich
46c4cd45bd Rebuild for abseil-cpp 20211102.0 2022-03-10 14:40:05 +01:00
Michal Ruprich
4ed096d9e0 New version 8.2 (rhbz#2020439)
Resolves: #2011868 - systemctl frr reload does not stop daemons that are not enabled in /etc/frr/daemons
2022-03-09 15:19:46 +01:00
Michal Ruprich
efd1a71f65 Rebuilding for FTBFS in Rawhide(rhbz#2045399) 2022-02-01 07:31:08 +01:00
Fedora Release Engineering
b2d9986308 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 03:28:53 +00:00
Miro Hrončok
48fc52869f Rebuilt for libre2.so.9 2022-01-08 11:41:45 +01:00
Frantisek Hrdina
cc05a64a36 Adding gating.yaml 2021-12-09 13:35:17 +01:00
Frantisek Hrdina
96de429704 Adding fmf plan 2021-12-02 11:49:53 +01:00
Adrian Reber
6ff7ded7f0
Rebuilt for protobuf 3.19.0 2021-11-06 10:18:25 +01:00
Adrian Reber
7ce4ec0635
Rebuilt for protobuf 3.18.1 2021-10-25 18:32:46 +02:00
Michal Ruprich
c5466bb615 Obsoleting quagga so it may be retired 2021-10-15 12:31:03 +02:00
Michal Ruprich
07fa06fda3 Rebuilding for grpc 1.41 2021-10-07 08:20:09 +02:00
Michal Ruprich
8f024e6425 Rebuild for new version of libyang 2021-09-30 17:08:48 +02:00
Benjamin A. Beasley
49e2bd48c8 Rebuild for grpc 1.40 2021-09-18 08:42:37 -04:00
Sahana Prasad
494d547bc7 Rebuilt with OpenSSL 3.0.0 2021-09-16 15:56:20 +02:00
Michal Ruprich
b33a5eb07f New version 8.0.1 2021-09-16 09:00:46 +02:00
Sahana Prasad
a96e1dd222 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:01:58 +02:00
Michal Ruprich
c7d9dbbe26 New version 8.0 2021-08-11 12:46:03 +02:00
Benjamin A. Beasley
176ca84f0f Rebuild for grpc 1.39 2021-08-04 08:40:34 -04:00
Fedora Release Engineering
dcf54beb15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-21 23:25:01 +00:00
Michal Ruprich
31b2cc24c1 Resolves: #1983278 - ospfd crashes in route_node_delete with assertion fail 2021-07-20 09:35:21 +02:00
Björn Esser
60a5f4164e
Rebuild for versioned symbols in json-c 2021-07-10 11:53:05 +02:00
Neal Gompa
88413391a7 Drop redundant build dependencies
These are pulled in by their respective -devel packages already.
2021-07-07 14:48:03 -04:00
Neal Gompa
eec6e6c3c0 Use git-core instead of git for applying patches
This reduces the required build-time dependencies, which
speeds up building the package.
2021-07-07 14:47:57 -04:00
Neal Gompa
9f5eed940b Use systemd-sysusers for frr user and frrvty group
This complies with the new guidelines on user/group creation

Reference: https://docs.fedoraproject.org/en-US/packaging-guidelines/UsersAndGroups/#_dynamic_allocation
2021-07-07 14:47:53 -04:00
Neal Gompa
7880ef80b4 Remove unneeded info scriptlets
These are handled by file triggers now
2021-07-07 14:47:47 -04:00
Neal Gompa
ca909aee1b Clean up the spec file for legibility and modern spec standards 2021-07-07 14:47:40 -04:00
Michal Ruprich
158687cb0e Rebuild for newer abseil-cpp 2021-07-07 11:13:10 +02:00
Benjamin A. Beasley
8e0c6a5a41 Rebuild for grpc 1.37 2021-05-11 16:01:37 -04:00
Michal Ruprich
22d94bec34 Fixing permissions on config files in /etc/frr
Enabling integrated configuration option for frr
2021-04-23 12:38:22 +02:00
Michal Ruprich
c0bc1c720a New version 7.5.1
Enabling grpc, adding hostname for post scriptlet
Moving files to libexec due to selinux issues
2021-03-16 11:30:31 +01:00
Zbigniew Jędrzejewski-Szmek
1cc2fcd604 Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
2021-03-02 16:13:45 +01:00
Michal Ruprich
d3558d90f6 Fixing FTBS - icc options are confusing the new gcc 2021-02-16 17:14:30 +01:00
Fedora Release Engineering
eafae8ca75 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 05:58:59 +00:00
Michal Ruprich
3d0f818836 New version 7.5 2021-01-01 14:47:47 +01:00
Tom Stellard
b79d97cbd2 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2020-12-18 22:55:29 +00:00
Michal Ruprich
7bc4774a57 New version 7.4 2020-09-21 14:26:29 +02:00
Josef Řídký
549c517210 Rebuilt for new net-snmp release 2020-08-27 14:13:47 +02:00
Fedora Release Engineering
6295fc893e - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 17:53:36 +00:00
Michal Ruprich
0d34206229 New version 7.3.1
Fixes a couple of bugs(#1832259, #1835039, #1830815, #1830808, #1830806, #1830800, #1830798, #1814773)
2020-06-18 11:05:15 +02:00