Update to 2.2.7 (#2041231)
This commit is contained in:
parent
6f08ad6092
commit
10c9828182
1
.gitignore
vendored
1
.gitignore
vendored
@ -38,3 +38,4 @@
|
|||||||
/keepalived-2.2.2.tar.gz
|
/keepalived-2.2.2.tar.gz
|
||||||
/keepalived-2.2.3.tar.gz
|
/keepalived-2.2.3.tar.gz
|
||||||
/keepalived-2.2.4.tar.gz
|
/keepalived-2.2.4.tar.gz
|
||||||
|
/keepalived-2.2.7.tar.gz
|
||||||
|
@ -1,41 +0,0 @@
|
|||||||
From 7977fec0be89ae6fe87405b3f8da2f0b5e415e3d Mon Sep 17 00:00:00 2001
|
|
||||||
From: Vincent Bernat <vincent@bernat.ch>
|
|
||||||
Date: Tue, 23 Nov 2021 06:50:59 +0100
|
|
||||||
Subject: [PATCH] dbus: fix policy to not be overly broad
|
|
||||||
|
|
||||||
The DBus policy did not restrict the message destination, allowing any
|
|
||||||
user to inspect and manipulate any property.
|
|
||||||
|
|
||||||
Signed-off-by: Vincent Bernat <vincent@bernat.ch>
|
|
||||||
---
|
|
||||||
keepalived/dbus/org.keepalived.Vrrp1.conf | 13 ++++++++-----
|
|
||||||
1 file changed, 8 insertions(+), 5 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/keepalived/dbus/org.keepalived.Vrrp1.conf b/keepalived/dbus/org.keepalived.Vrrp1.conf
|
|
||||||
index 2b78a575..b5ced608 100644
|
|
||||||
--- a/keepalived/dbus/org.keepalived.Vrrp1.conf
|
|
||||||
+++ b/keepalived/dbus/org.keepalived.Vrrp1.conf
|
|
||||||
@@ -3,12 +3,15 @@
|
|
||||||
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
||||||
<busconfig>
|
|
||||||
<policy user="root">
|
|
||||||
- <allow own="org.keepalived.Vrrp1"/>
|
|
||||||
- <allow send_destination="org.keepalived.Vrrp1"/>
|
|
||||||
+ <allow own="org.keepalived.Vrrp1" />
|
|
||||||
+ <allow send_destination="org.keepalived.Vrrp1" />
|
|
||||||
</policy>
|
|
||||||
<policy context="default">
|
|
||||||
- <allow send_interface="org.freedesktop.DBus.Introspectable" />
|
|
||||||
- <allow send_interface="org.freedesktop.DBus.Peer" />
|
|
||||||
- <allow send_interface="org.freedesktop.DBus.Properties" />
|
|
||||||
+ <allow send_destination="org.keepalived.Vrrp1"
|
|
||||||
+ send_interface="org.freedesktop.DBus.Introspectable" />
|
|
||||||
+ <allow send_destination="org.keepalived.Vrrp1"
|
|
||||||
+ send_interface="org.freedesktop.DBus.Peer" />
|
|
||||||
+ <allow send_destination="org.keepalived.Vrrp1"
|
|
||||||
+ send_interface="org.freedesktop.DBus.Properties" />
|
|
||||||
</policy>
|
|
||||||
</busconfig>
|
|
||||||
--
|
|
||||||
2.33.1
|
|
||||||
|
|
@ -9,16 +9,14 @@
|
|||||||
|
|
||||||
Name: keepalived
|
Name: keepalived
|
||||||
Summary: High Availability monitor built upon LVS, VRRP and service pollers
|
Summary: High Availability monitor built upon LVS, VRRP and service pollers
|
||||||
Version: 2.2.4
|
Version: 2.2.7
|
||||||
Release: 5%{?dist}
|
Release: 1%{?dist}
|
||||||
License: GPLv2+
|
License: GPLv2+
|
||||||
URL: http://www.keepalived.org/
|
URL: http://www.keepalived.org/
|
||||||
|
|
||||||
Source0: http://www.keepalived.org/software/keepalived-%{version}.tar.gz
|
Source0: http://www.keepalived.org/software/keepalived-%{version}.tar.gz
|
||||||
Source1: keepalived.service
|
Source1: keepalived.service
|
||||||
|
|
||||||
Patch1: bz2027158-fix-dbus-policy.patch
|
|
||||||
|
|
||||||
Requires(post): systemd
|
Requires(post): systemd
|
||||||
Requires(preun): systemd
|
Requires(preun): systemd
|
||||||
Requires(postun): systemd
|
Requires(postun): systemd
|
||||||
@ -58,7 +56,6 @@ infrastructures.
|
|||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q
|
%setup -q
|
||||||
%patch1 -p1
|
|
||||||
|
|
||||||
%build
|
%build
|
||||||
%configure \
|
%configure \
|
||||||
@ -108,6 +105,9 @@ mkdir -p %{buildroot}%{_libexecdir}/keepalived
|
|||||||
%{_mandir}/man8/keepalived.8*
|
%{_mandir}/man8/keepalived.8*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Feb 14 2022 Ryan O'Hara <rohara@redhat.com> - 2.2.7-1
|
||||||
|
- Update to 2.2.7 (#2041231)
|
||||||
|
|
||||||
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.4-5
|
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.4-5
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
||||||
|
|
||||||
|
2
sources
2
sources
@ -1 +1 @@
|
|||||||
SHA512 (keepalived-2.2.4.tar.gz) = b8b0f3e7092b7b7093a9927259928076ee95ed176dd26b3a5c38e8c0dc7b83468433944905618dbc9e4b73b81b0cd3f16c2db4234ed4fcdf30f4fc0e532f9422
|
SHA512 (keepalived-2.2.7.tar.gz) = 9869437fe6f0c10590b13088002b53474a51102da9838a6575d835d006c4871b61324ab80e0e81e0a23d0124e6f033cfc7114749e87b8f736408f3f0bedb3968
|
||||||
|
Loading…
Reference in New Issue
Block a user