.gitignore

@@ -1 +1,31 @@
-SOURCES/open-vm-tools-12.2.5-21855600.tar.gz
+/open-vm-tools-9.2.2-893683.tar.gz
+/open-vm-tools-9.2.3-1031360.tar.gz
+/open-vm-tools-9.4.0-1280544.tar.gz
+/open-vm-tools-9.4.6-1770165.tar.gz
+/open-vm-tools-9.10.0-2476743.tar.gz
+/open-vm-tools-9.10.2-2822639.tar.gz
+/open-vm-tools-10.0.0-3000743.tar.gz
+/open-vm-tools-10.0.5-3227872.tar.gz
+/open-vm-tools-10.1.0-4449150.tar.gz
+/open-vm-tools-10.1.5-5055683.tar.gz
+/open-vm-tools-10.1.10-6082533.tar.gz
+/open-vm-tools-10.2.0-7253323.tar.gz
+/open-vm-tools-10.2.5-8068406.tar.gz
+/open-vm-tools-10.3.0-8931395.tar.gz
+/open-vm-tools-10.3.5-10430147.tar.gz
+/open-vm-tools-10.3.10-12406962.tar.gz
+/open-vm-tools-11.0.0-14549434.tar.gz
+/open-vm-tools-11.0.5-15389592.tar.gz
+/open-vm-tools-11.1.0-16036546.tar.gz
+/open-vm-tools-11.1.5-16724464.tar.gz
+/open-vm-tools-11.2.0-16938113.tar.gz
+/open-vm-tools-11.2.5-17337674.tar.gz
+/open-vm-tools-11.3.0-18090558.tar.gz
+/open-vm-tools-11.3.5-18557794.tar.gz
+/open-vm-tools-12.0.0-19345655.tar.gz
+/open-vm-tools-12.0.5-19716617.tar.gz
+/open-vm-tools-12.1.0-20219665.tar.gz
+/open-vm-tools-12.1.5-20735119.tar.gz
+/open-vm-tools-12.2.0-21223074.tar.gz
+/open-vm-tools-12.2.5-21855600.tar.gz
+/open-vm-tools-12.4.0-23259341.tar.gz

.open-vm-tools.metadata

@@ -1 +0,0 @@
-6bc6e77418cc4a039063a7ca40859535b9bbb339 SOURCES/open-vm-tools-12.2.5-21855600.tar.gz

SOURCES/ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch

@@ -1,424 +0,0 @@
-From 4fb21bd75fd5a4eceed67a8050436b47750ca716 Mon Sep 17 00:00:00 2001
-From: Katy Feng <fkaty@vmware.com>
-Date: Tue, 22 Aug 2023 11:11:42 -0700
-Subject: [PATCH] Provide alternate method to allow (expected) pre-frozen
- filesystems
-
-RH-Author: Ani Sinha <None>
-RH-MergeRequest: 30: Provide alternate method to allow (expected) pre-frozen filesystems when taking a quiesced snapshot.
-RH-Jira: RHEL-7012
-RH-Commit: [1/1] 07570fcdc1fd697d54268e530fc64162eb2a0bdb
-
-Effective with open-vm-tools 12.2.0, Linux quiesced snapshots will fail if
-any filesystem(s) have been prefrozen by other than the vmtoolsd process.
-This has been done to assure that filesystems are inactive while the
-snapshots are being taken. Some existing prefreeze scripts may be freezing
-some filesystem(s). In these cases, the vmtoolsd process must be informed of
-anticipated pre-frozen filesystems by providing an "excludedFileSystem" list in
-the [vmbackup] section of the tools.conf file.
-
-This change provides a new switch in the tools.conf file to allow pre-frozen
-filesystems to be encountered and accepted when doing a quiesced snapshot
-operation. With the default value of "false", the "ignoreFrozenFileSystems"
-can be configured with a setting of "true" to notify the quiesced snapshot
-operation that pre-frozen filesystems are allowed.
-
-(cherry picked from commit 60c3a80ddc2b400366ed05169e16a6bed6501da2)
-Signed-off-by: Ani Sinha <anisinha@redhat.com>
----
- open-vm-tools/lib/include/syncDriver.h        |  5 ++--
- open-vm-tools/lib/syncDriver/nullDriver.c     | 10 +++++---
- open-vm-tools/lib/syncDriver/syncDriverInt.h  | 14 +++++++----
- .../lib/syncDriver/syncDriverLinux.c          | 25 ++++++++++++++-----
- .../lib/syncDriver/syncDriverPosix.c          |  7 +++---
- open-vm-tools/lib/syncDriver/vmSyncDriver.c   | 10 +++++---
- .../services/plugins/vix/foundryToolsDaemon.c | 14 +++++++++--
- .../services/plugins/vmbackup/stateMachine.c  |  8 ++++--
- .../services/plugins/vmbackup/syncDriverOps.c |  5 ++--
- .../services/plugins/vmbackup/vmBackupInt.h   | 19 ++++++++------
- open-vm-tools/tools.conf                      | 23 +++++++++++++++++
- 11 files changed, 103 insertions(+), 37 deletions(-)
-
-diff --git a/open-vm-tools/lib/include/syncDriver.h b/open-vm-tools/lib/include/syncDriver.h
-index 20712f66..8ef229d4 100644
---- a/open-vm-tools/lib/include/syncDriver.h
-+++ b/open-vm-tools/lib/include/syncDriver.h
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2005-2018 VMware, Inc. All rights reserved.
-+ * Copyright (c) 2005-2018, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -51,7 +51,8 @@ typedef enum {
- Bool SyncDriver_Init(void);
- Bool SyncDriver_Freeze(const char *drives, Bool enableNullDriver,
-                        SyncDriverHandle *handle,
--                       const char *excludedFileSystems);
-+                       const char *excludedFileSystems,
-+                       Bool ignoreFrozenFS);
- Bool SyncDriver_Thaw(const SyncDriverHandle handle);
- SyncDriverStatus SyncDriver_QueryStatus(const SyncDriverHandle handle,
-                                         int32 timeout);
-diff --git a/open-vm-tools/lib/syncDriver/nullDriver.c b/open-vm-tools/lib/syncDriver/nullDriver.c
-index 5e19e208..be96222a 100644
---- a/open-vm-tools/lib/syncDriver/nullDriver.c
-+++ b/open-vm-tools/lib/syncDriver/nullDriver.c
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2011-2016 VMware, Inc. All rights reserved.
-+ * Copyright (c) 2011-2016, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -54,8 +54,9 @@ NullDriverClose(SyncDriverHandle handle)
-  *
-  * Calls sync().
-  *
-- * @param[in]  paths     Unused.
-- * @param[out] handle    Where to store the operation handle.
-+ * @param[in]  paths            Unused.
-+ * @param[out] handle           Where to store the operation handle.
-+ * @param[in]  ignoreFrozenFS   Unused.
-  *
-  * @return A SyncDriverErr.
-  *
-@@ -64,7 +65,8 @@ NullDriverClose(SyncDriverHandle handle)
- 
- SyncDriverErr
- NullDriver_Freeze(const GSList *paths,
--                  SyncDriverHandle *handle)
-+                  SyncDriverHandle *handle,
-+                  Bool ignoreFrozenFS)
- {
-    /*
-     * This is more of a "let's at least do something" than something that
-diff --git a/open-vm-tools/lib/syncDriver/syncDriverInt.h b/open-vm-tools/lib/syncDriver/syncDriverInt.h
-index 04f37bf2..a5706298 100644
---- a/open-vm-tools/lib/syncDriver/syncDriverInt.h
-+++ b/open-vm-tools/lib/syncDriver/syncDriverInt.h
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2011-2017 VMware, Inc. All rights reserved.
-+ * Copyright (c) 2011-2017, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -41,7 +41,8 @@ typedef enum {
- } SyncDriverErr;
- 
- typedef SyncDriverErr (*SyncFreezeFn)(const GSList *paths,
--                                      SyncDriverHandle *handle);
-+                                      SyncDriverHandle *handle,
-+                                      Bool ignoreFrozenFs);
- 
- typedef struct SyncHandle {
-    SyncDriverErr (*thaw)(const SyncDriverHandle handle);
-@@ -55,15 +56,18 @@ typedef struct SyncHandle {
- #if defined(__linux__)
- SyncDriverErr
- LinuxDriver_Freeze(const GSList *userPaths,
--                   SyncDriverHandle *handle);
-+                   SyncDriverHandle *handle,
-+                   Bool ignoreFrozenFs);
- 
- SyncDriverErr
- VmSync_Freeze(const GSList *userPaths,
--              SyncDriverHandle *handle);
-+              SyncDriverHandle *handle,
-+              Bool ignoreFrozenFs);
- 
- SyncDriverErr
- NullDriver_Freeze(const GSList *userPaths,
--                  SyncDriverHandle *handle);
-+                  SyncDriverHandle *handle,
-+                  Bool ignoreFrozenFs);
- #endif
- 
- #endif
-diff --git a/open-vm-tools/lib/syncDriver/syncDriverLinux.c b/open-vm-tools/lib/syncDriver/syncDriverLinux.c
-index 6d9a3568..4581098e 100644
---- a/open-vm-tools/lib/syncDriver/syncDriverLinux.c
-+++ b/open-vm-tools/lib/syncDriver/syncDriverLinux.c
-@@ -199,8 +199,9 @@ LinuxFiGetAttr(const SyncDriverHandle handle,   // IN (ignored)
-  * slow when guest is performing significant IO. Therefore, caller should
-  * consider running this function in a separate thread.
-  *
-- * @param[in]  paths    List of paths to freeze.
-- * @param[out] handle   Handle to use for thawing.
-+ * @param[in]  paths           List of paths to freeze.
-+ * @param[out] handle          Handle to use for thawing.
-+ * @param[in]  ignoreFrozenFS  Switch to allow EBUSY error.
-  *
-  * @return A SyncDriverErr.
-  *
-@@ -209,7 +210,8 @@ LinuxFiGetAttr(const SyncDriverHandle handle,   // IN (ignored)
- 
- SyncDriverErr
- LinuxDriver_Freeze(const GSList *paths,
--                   SyncDriverHandle *handle)
-+                   SyncDriverHandle *handle,
-+                   Bool ignoreFrozenFS)
- {
-    ssize_t count = 0;
-    Bool first = TRUE;
-@@ -324,9 +326,12 @@ LinuxDriver_Freeze(const GSList *paths,
-           * Previously, an EBUSY error was ignored, assuming that we may try
-           * to freeze the same superblock more than once depending on the
-           * OS configuration (e.g., usage of bind mounts).
--          * Using the filesystem Id to check if this is a filesystem that we
--          * have seen previously and will ignore this FD only if that is
--          * the case.  Log a warning otherwise since the quiesced snapshot
-+          * Use the filesystem Id to check if this filesystem has been
-+          * handled before and, if so, ignore it.
-+          * Alternatively, allow (ignore) the EBUSY if the
-+          * "ignoreFrozenFileSystems" switch inside "vmbackup" section of
-+          * tools.conf file is TRUE.
-+          * Otherwise, log a warning as the quiesced snapshot
-           * attempt will fail.
-           */
-          if (ioctlerr == EBUSY) {
-@@ -339,6 +344,14 @@ LinuxDriver_Freeze(const GSList *paths,
-                 */
-                Debug(LGPFX "skipping path '%s' - previously frozen", path);
-                continue;
-+            } else if (ignoreFrozenFS) {
-+               /*
-+                * Ignores the EBUSY error if the FS has been frozen by another
-+                * process and the 'ignoreFrozenFileSystems' setting is
-+                * turned on in tools.conf file.
-+                */
-+               Debug(LGPFX "Ignoring the frozen filesystem '%s'",path);
-+               continue;
-             }
-             /*
-              * It appears that this FS has been locked or frozen by another
-diff --git a/open-vm-tools/lib/syncDriver/syncDriverPosix.c b/open-vm-tools/lib/syncDriver/syncDriverPosix.c
-index 7b6132ba..27369639 100644
---- a/open-vm-tools/lib/syncDriver/syncDriverPosix.c
-+++ b/open-vm-tools/lib/syncDriver/syncDriverPosix.c
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2005-2019 VMware, Inc. All rights reserved.
-+ * Copyright (c) 2005-2019, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -456,7 +456,8 @@ Bool
- SyncDriver_Freeze(const char *userPaths,              // IN
-                   Bool enableNullDriver,              // IN
-                   SyncDriverHandle *handle,           // OUT
--                  const char *excludedFileSystems)    // IN
-+                  const char *excludedFileSystems,    // IN
-+                  Bool ignoreFrozenFS)                // IN
- {
-    GSList *paths = NULL;
-    SyncDriverErr err = SD_UNAVAILABLE;
-@@ -517,7 +518,7 @@ SyncDriver_Freeze(const char *userPaths,              // IN
-          continue;
-       }
- #endif
--      err = freezeFn(paths, handle);
-+      err = freezeFn(paths, handle, ignoreFrozenFS);
-    }
- 
-    /*
-diff --git a/open-vm-tools/lib/syncDriver/vmSyncDriver.c b/open-vm-tools/lib/syncDriver/vmSyncDriver.c
-index 2bd0e886..a0d4a315 100644
---- a/open-vm-tools/lib/syncDriver/vmSyncDriver.c
-+++ b/open-vm-tools/lib/syncDriver/vmSyncDriver.c
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2011-2016 VMware, Inc. All rights reserved.
-+ * Copyright (c) 2011-2016, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -91,8 +91,9 @@ VmSyncClose(SyncDriverHandle handle)
-  * Opens a description to the driver's proc node, and if successful, send an
-  * ioctl to freeze the requested filesystems.
-  *
-- * @param[in]  paths    List of paths to freeze.
-- * @param[out] handle   Where to store the handle to use for thawing.
-+ * @param[in]  paths          List of paths to freeze.
-+ * @param[out] handle         Where to store the handle to use for thawing.
-+ * @param[in]  ignoreFrozenFS Unused.
-  *
-  * @return A SyncDriverErr.
-  *
-@@ -101,7 +102,8 @@ VmSyncClose(SyncDriverHandle handle)
- 
- SyncDriverErr
- VmSync_Freeze(const GSList *paths,
--              SyncDriverHandle *handle)
-+              SyncDriverHandle *handle,
-+              Bool ignoreFrozenFS)
- {
-    int file;
-    Bool first = TRUE;
-diff --git a/open-vm-tools/services/plugins/vix/foundryToolsDaemon.c b/open-vm-tools/services/plugins/vix/foundryToolsDaemon.c
-index 7d45d3f5..079540f1 100644
---- a/open-vm-tools/services/plugins/vix/foundryToolsDaemon.c
-+++ b/open-vm-tools/services/plugins/vix/foundryToolsDaemon.c
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2003-2021 VMware, Inc. All rights reserved.
-+ * Copyright (c) 2003-2021, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -545,6 +545,8 @@ ToolsDaemonTcloSyncDriverFreeze(RpcInData *data)
-    GKeyFile *confDictRef = ctx->config;
-    Bool enableNullDriver;
-    GSource *timer;
-+   char *excludedFileSystems;
-+   Bool ignoreFrozenFS;
- 
-    /*
-     * Parse the arguments
-@@ -581,10 +583,18 @@ ToolsDaemonTcloSyncDriverFreeze(RpcInData *data)
-                                                "vmbackup",
-                                                "enableNullDriver",
-                                                FALSE);
-+   excludedFileSystems = VMTools_ConfigGetString(confDictRef,
-+                                                  "vmbackup",
-+                                                  "excludedFileSystems",
-+                                                  NULL);
-+   ignoreFrozenFS = VMTools_ConfigGetBoolean(confDictRef,
-+                                             "vmbackup",
-+                                             "ignoreFrozenFileSystems",
-+                                             FALSE);
- 
-    /* Perform the actual freeze. */
-    if (!SyncDriver_Freeze(driveList, enableNullDriver, &gSyncDriverHandle,
--                          NULL) ||
-+                          excludedFileSystems, ignoreFrozenFS) ||
-        SyncDriver_QueryStatus(gSyncDriverHandle, INFINITE) != SYNCDRIVER_IDLE) {
-       g_warning("%s: Failed to Freeze drives '%s'\n",
-                 __FUNCTION__, driveList);
-diff --git a/open-vm-tools/services/plugins/vmbackup/stateMachine.c b/open-vm-tools/services/plugins/vmbackup/stateMachine.c
-index 99f52582..b04565d8 100644
---- a/open-vm-tools/services/plugins/vmbackup/stateMachine.c
-+++ b/open-vm-tools/services/plugins/vmbackup/stateMachine.c
-@@ -1073,9 +1073,13 @@ VmBackupStartCommon(RpcInData *data,
- #if defined(__linux__)
-    gBackupState->excludedFileSystems =
-          VMBACKUP_CONFIG_GET_STR(ctx->config, "excludedFileSystems", NULL);
--   g_debug("Using excludedFileSystems = \"%s\"\n",
-+   gBackupState->ignoreFrozenFS =
-+       VMBACKUP_CONFIG_GET_BOOL(ctx->config, "ignoreFrozenFileSystems", FALSE);
-+
-+   g_debug("Using excludedFileSystems = \"%s\", ignoreFrozenFileSystems = %d\n",
-            (gBackupState->excludedFileSystems != NULL) ?
--            gBackupState->excludedFileSystems : "(null)");
-+            gBackupState->excludedFileSystems : "(null)",
-+           gBackupState->ignoreFrozenFS);
- #endif
-    g_debug("Quiescing volumes: %s",
-            (gBackupState->volumes) ? gBackupState->volumes : "(null)");
-diff --git a/open-vm-tools/services/plugins/vmbackup/syncDriverOps.c b/open-vm-tools/services/plugins/vmbackup/syncDriverOps.c
-index cc01d294..a090ec72 100644
---- a/open-vm-tools/services/plugins/vmbackup/syncDriverOps.c
-+++ b/open-vm-tools/services/plugins/vmbackup/syncDriverOps.c
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2007-2019, 2021 VMware, Inc. All rights reserved.
-+ * Copyright (C) 2007-2019, 2021, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -276,7 +276,8 @@ VmBackupNewDriverOp(VmBackupState *state,       // IN
-                                      useNullDriverPrefs ?
-                                         state->enableNullDriver : FALSE,
-                                      op->syncHandle,
--                                     state->excludedFileSystems);
-+                                     state->excludedFileSystems,
-+                                     state->ignoreFrozenFS);
-          break;
-       case OP_THAW:
-          op->manifest = SyncNewManifest(state, *op->syncHandle);
-diff --git a/open-vm-tools/services/plugins/vmbackup/vmBackupInt.h b/open-vm-tools/services/plugins/vmbackup/vmBackupInt.h
-index 0c912174..65e2e552 100644
---- a/open-vm-tools/services/plugins/vmbackup/vmBackupInt.h
-+++ b/open-vm-tools/services/plugins/vmbackup/vmBackupInt.h
-@@ -1,5 +1,5 @@
- /*********************************************************
-- * Copyright (C) 2008-2019 VMware, Inc. All rights reserved.
-+ * Copyright (c) 2008-2019, 2023 VMware, Inc. All rights reserved.
-  *
-  * This program is free software; you can redistribute it and/or modify it
-  * under the terms of the GNU Lesser General Public License as published
-@@ -100,18 +100,22 @@ struct VmBackupSyncCompleter;
-  * Don't modify the fields directly - rather, use VmBackup_SetCurrentOp,
-  * which does most of the handling needed by users of the state machine.
-  *
-- * NOTE: The thread for freeze operation modifies currentOp in BackupState
-- *       which is also accessed by the AsyncCallback driving the state
-- *       machine (run by main thread). Also, gcc might generate two
-- *       instructions for writing a 64-bit value. Therefore, protect the
-- *       access to currentOp and related fields using opLock mutex.
-+ * NOTE 1: The thread for freeze operation modifies currentOp in BackupState
-+ *         which is also accessed by the AsyncCallback driving the state
-+ *         machine (run by main thread). Also, gcc might generate two
-+ *         instructions for writing a 64-bit value. Therefore, protect the
-+ *         access to currentOp and related fields using opLock mutex.
-+ *
-+ * NOTE 2: Only used by Linux guests, ignored on Windows guests and is
-+ *         initialized to "false" when the VmBackupState is initialized
-+ *         at the start of a backup operation.
-  */
- 
- typedef struct VmBackupState {
-    ToolsAppCtx   *ctx;
-    VmBackupOp    *currentOp;
-    const char    *currentOpName;
--   GMutex         opLock;          // See note above
-+   GMutex         opLock;          // See note 1 above
-    char          *volumes;
-    char          *snapshots;
-    guint          pollPeriod;
-@@ -127,6 +131,7 @@ typedef struct VmBackupState {
-    Bool           allowHWProvider;
-    Bool           execScripts;
-    Bool           enableNullDriver;
-+   Bool           ignoreFrozenFS;   // See note 2 above
-    Bool           needsPriv;
-    gchar         *scriptArg;
-    guint          timeout;
-diff --git a/open-vm-tools/tools.conf b/open-vm-tools/tools.conf
-index e5a03a9c..f238cb59 100644
---- a/open-vm-tools/tools.conf
-+++ b/open-vm-tools/tools.conf
-@@ -395,6 +395,29 @@
- 
- #excludedFileSystems=
- 
-+# Linux:
-+# It is possible that filesystems are being frozen in pre-freeze scripts
-+# to control the order in which those specific filesystems are to be frozen.
-+# The vmtoolsd process must be informed of all such filesystems with the help
-+# of "excludedFileSystems" setting of tools.conf.
-+#
-+# A temporary workaround is available (starting from 12.3.0) for admins to allow
-+# quiesceing operation to succeed until the "excludedFileSystems" list
-+# is configured.
-+#
-+# If another process thaws the file system while a quiescing operation
-+# operation is ongoing, the snapshot may be compromised. Once the
-+# "excludedFileSystems" list is configured this setting MUST be unset (or set
-+# to false).
-+#
-+# The value of ignoreFrozenFileSystems is a true or false; the default is
-+# false.
-+#
-+# Set to true to ignore pre-frozen file systems during the quiescing operation.
-+#
-+# ignoreFrozenFileSystems is Linux only (Not supported on Windows).
-+#ignoreFrozenFileSystems=false
-+
- # execScripts specifies whether to execute scripts as part of the quiescing
- # operation. Scripts are executed from the scripts directory along with the
- # legacy scripts.
--- 
-2.37.3
-

SOURCES/ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch

@@ -1,38 +0,0 @@
-From a839cb975d58968237bd871b1fb4cbe191af085b Mon Sep 17 00:00:00 2001
-From: Miroslav Rezanina <mrezanin@redhat.com>
-Date: Thu, 7 Sep 2023 02:27:50 -0400
-Subject: [PATCH] VGAuth: Allow only X509 certs to verify the SAML token
- signature.
-
-RH-Author: Miroslav Rezanina <mrezanin@redhat.com>
-RH-Bugzilla: 2236543
-RH-CVE: CVE-2023-20900
-
-Signed-off-by: Miroslav Rezanina <mrezanin@redhat.com>
----
- open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c | 9 ++++++++-
- 1 file changed, 8 insertions(+), 1 deletion(-)
-
-diff --git a/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c b/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c
-index f5541a9a..0b2a945b 100644
---- a/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c
-+++ b/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c
-@@ -1335,7 +1335,14 @@ VerifySignature(xmlDocPtr doc,
-     */
-    bRet = RegisterID(xmlDocGetRootElement(doc), "ID");
-    if (bRet == FALSE) {
--      g_warning("failed to register ID\n");
-+      g_warning("Failed to register ID\n");
-+      goto done;
-+   }
-+
-+   /* Use only X509 certs to validate the signature */
-+   if (xmlSecPtrListAdd(&(dsigCtx->keyInfoReadCtx.enabledKeyData),
-+                        BAD_CAST xmlSecKeyDataX509Id) < 0) {
-+      g_warning("Failed to limit allowed key data\n");
-       goto done;
-    }
- 
--- 
-2.39.3
-

gating.yaml

@@ -0,0 +1,7 @@
+--- !Policy
+product_versions:
+  - rhel-9
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: 3rd-esxi-x86_64.brew-build.tier1.functional}
+  - !PassingTestCaseRule {test_case_name: 3rd-esxi-aarch64.brew-build.tier1.functional}

open-vm-tools.spec

@@ -18,10 +18,9 @@
 ### Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 ################################################################################
 
-%global _hardened_build 1
-%global majorversion    12.2
-%global minorversion    5
-%global toolsbuild      21855600
+%global majorversion    12.4
+%global minorversion    0
+%global toolsbuild      23259341
 %global toolsversion    %{majorversion}.%{minorversion}
 %global toolsdaemon     vmtoolsd
 %global vgauthdaemon    vgauthd
@@ -32,7 +31,7 @@
 
 Name:             open-vm-tools
 Version:          %{toolsversion}
-Release:          3%{?dist}
+Release:          1%{?dist}
 Summary:          Open Virtual Machine Tools for virtual machines hosted on VMware
 License:          GPLv2
 URL:              https://github.com/vmware/%{name}
@@ -44,18 +43,14 @@ Source3:          run-vmblock\x2dfuse.mount
 Source4:          open-vm-tools.conf
 Source5:          vmtoolsd.pam
 
-
 %if 0%{?rhel} >= 7
-ExclusiveArch:    x86_64
+ExclusiveArch:    x86_64 aarch64
 %else
 ExclusiveArch:    %{ix86} x86_64 aarch64
 %endif
 
-# Patch0: name.patch
-# For RHEL-4584 - CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.10.0]
-Patch1: ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch
-# For RHEL-7012 - [RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups
-Patch2: ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch
+# Patches
+#Patch0:           <patch-name0>.patch
 
 BuildRequires:    autoconf
 BuildRequires:    automake
@@ -64,7 +59,12 @@ BuildRequires:    make
 BuildRequires:    gcc-c++
 BuildRequires:    doxygen
 # Fuse is optional and enables vmblock-fuse
+# Switching Fedora to use fuse3.   Red Hat to switch on their own schedule.
+%if 0%{?fedora} || 0%{?rhel} > 8
+BuildRequires:    fuse3-devel
+%else
 BuildRequires:    fuse-devel
+%endif
 BuildRequires:    glib2-devel >= 2.14.0
 BuildRequires:    libicu-devel
 BuildRequires:    libmspack-devel
@@ -91,7 +91,7 @@ BuildRequires:    gtk3-devel >= 3.10.0
 BuildRequires:    gtkmm30-devel >= 3.10.0
 BuildRequires:    libtirpc-devel
 BuildRequires:    rpcgen
-BuildRequires:    systemd-rpm-macros
+BuildRequires:    systemd-udev
 %else
 BuildRequires:    gtk2-devel >= 2.4.0
 BuildRequires:    gtkmm24-devel
@@ -99,7 +99,11 @@ BuildRequires:    systemd
 %endif
 
 Requires:         coreutils
+%if 0%{?fedora} || 0%{?rhel} > 8
+Requires:         fuse3
+%else
 Requires:         fuse
+%endif
 Requires:         iproute
 Requires:         grep
 Requires:         pciutils
@@ -414,178 +418,257 @@ fi
 %{_bindir}/vmware-vgauth-smoketest
 
 %changelog
-* Wed Sep 27 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.5-3
-- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-7012]
-- Resolves: RHEL-7012
-  ([RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups)
+* Thu Apr 18 2024 Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
+- Rebase to 12.4.0 [RHEL-30341
+- Resolves: RHEL-30341
+  ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)
 
-* Wed Sep 20 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
-- Rebuild CVE-2023-20900 for 8.10
-- Resolves: RHEL-4584
-  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
+* Mon Dec 04 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
+- ovt-Restart-tools-on-failure.patch [RHEL-15346]
+- Resolves: RHEL-15346
+  (Add Restart=on-failure to vmtoolsd.service)
 
-* Tue Jul 11 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
-- Rebase to open-vm-tools 12.2.5 [bz#2214861]
-- Resolves: bz#2214861
-  ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
-- Resolves: bz#2216415
-  ([ESXi][RHEL8] URL in service unit files are started from http instead of https)
+* Thu Nov 09 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
+- Rebase to 12.3.5-1 [RHEL-15058]
+- Fixed CVE-2023-34058 [RHEL-14653]
+- Fixed CVE-2023-34059 [RHEL-14687]
+- Resolves: RHEL-15058
+  ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
+- Resolves: RHEL-14653
+  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
+- Resolves: RHEL-14687
+  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])
 
-* Wed Jun 28 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
-- ovt-Remove-some-dead-code.patch [bz#2215563]
-- Resolves: bz#2215563
-  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])
+* Fri Sep 22 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
+- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
+- Resolves: RHEL-2446
+  ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)
+
+* Fri Sep 08 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
+- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
+- Resolves: bz#2236544
+  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])
+
+* Mon Jul 10 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
+- Rebaer to open-vm-tools 12.2.5
+- Resolves: bz#2214862
+  ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)
+
+* Tue Jun 27 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
+- ovt-Remove-some-dead-code.patch [bz#2215566]
+- Resolves: bz#2215566
+  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])
+
+* Tue Jun 20 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
+- ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
+- Resolves: bz#2208160
+  ([ESXi][RHEL9] URL in service unit files are started from http instead of https)
 
 * Wed May 03 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
-- Rebase to open-vm-tools 12.2.0 [bz#2177068]
-- Resolves: bz#2177068
-  ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)
+- Rebase to open-vm-tools 12.2.0 [bz#2177086]
+- Resolves: bz#2177086
+  ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)
 
-* Fri Dec 09 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
-- Rebase to open-vm-tools 12.1.5 [bz#2150188]
-- Resolves: bz#2150188
-  (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)
+* Fri Dec 09 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
+- Rebase to open-vm-tools 12.1.5 [bz#2150190]
+- Resolves: bz#2150190
+  ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)
 
-* Tue Sep 13 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1
-- Rebase to open-vm-tools 12.1.0
-- Resolves: bz#2121196
-  ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)
-
-* Tue Sep 06 2022 Jon Maloy <jmaloy@redhat.com> - 12.0.5-2
-- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
-- Resolves: bz#2119284
-  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])
+* Fri Sep 09 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
+- Rebase to open-mv-tools 12.1.0 [bz#2121203]
+- Resolves: bz#2121203
+  ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)
 
 * Tue Jun 07 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
-- Rebase to open-vm-tools 12.0.5 [bz#2090273]
-- Resolves: bz#2090273
-  ([ESXi][RHEL8]Open-vm-tools release 12.0.5 has been released - please rebase)
+- Rebase to open-vm-tools 12.0.5 [bz#2090275]
+- Resolves: bz#2090275
+  ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)
 
 * Thu Apr 28 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
-- Rebase to open-vm-tools 12.0.0 [bz#2061189]
-- Resolves: bz#2061189
-  ([ESXi][RHEL8]Open-vm-tools release 12.0.0 has been released - please rebase)
+- Rebase to 12.0.0 [bz#2061193]
+- Resolves: bz#2061193
+  ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)
 
-* Mon Oct 18 2021 Miroslav Rezanian <mrezanin@redhat.com> - 11.3.5-1
-- Rebase to open-vm-tools 11.3.5 [bz#2008244]
-- Resolves: bz#2008244
-  ([ESXi][RHEL8]Open-vm-tools release 11.3.5 has been released - please rebase)
+* Fri Oct 15 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
+- Rebase to 11.3.5 [bz#2008243]
+- Resolves: bz#2008243
+  ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)
 
-* Thu Sep 23 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.3.0-1.el8
-- Rebase to open-vm-tools 11.3.0 [bz#1974468]
-- Resolves: bz#1974468
-  ([ESXi][RHEL8]Open-vm-tools release 11.3.0 has been released - please rebase)
+* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 11.3.0-2
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
+  Related: rhbz#1991688
 
-* Thu Apr 29 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el8
-- ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1935807]
-- Resolves: bz#1935807
-  ([ESXi][RHEL-8.5][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)
+* Wed Jul 21 2021 Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
+- Rebase to 11.3.0 [bz#1974471]
+- Resolves: bz#1974471
+  ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)
 
-* Tue Mar 02 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
-- Rebase to 11.2.5 [bz#1916561]
-  ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)
+* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 11.2.5-5
+- Rebuilt for RHEL 9 BETA for openssl 3.0
+  Related: rhbz#1971065
 
-* Tue Dec 01 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.0-2.el8
-- ovt-Fix-memory-leaks.patch [bz#1896804]
-- Resolves: bz#1896804
-  ([ESXi][open-vm-tools] Coverity detected important defects in open-vm-tools-11.2.0 rebase)
+* Tue May 11 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
+- ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
+- Resolves: bz#1954040
+  ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)
 
-* Tue Nov 10 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.2.0-1.el8
-- Rebase to 11.2.0 [bz#1890831]
-- Resolves: bz#1890831
-  ([ESXi][RHEL8]Rebase open-vm-tools to 11.2.0 for 8.4)
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 11.2.5-3
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
 
-* Wed Sep 30 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.1.5-1.el8
-- Rebase to 11.1.5 [bz#1870781]
-- Resolves: bz#1870781
-  ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.5 for 8.4)
+* Fri Apr 09 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
+- ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
+- ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
+- Resolves: bz#1936382
+  ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)
 
-* Thu Jul 02 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.1.0-2.el8
-- Remove net-tools dependency [bz#1849459]
-- Resolves: bz#1849459
-  ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)
+* Fri Jan 15 2021 Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
+- Package new upstream version open-vm-tools-11.2.5-17337674.
+- libdnet dependency was removed in open-vm-tools 11.0.0. So,
+  removed the stale BuildRequires for libdnet.
 
-* Tue May 26 2020 Mirosalv Rezanina <mrezanin@redhat.com> - 11.1.0-1.el8
-- Rebase to 11.1.0 [bz#1806677]
-- Added open-vm-tools-sdmp package [bz#1833157)
-- Resolves: bz#1806677
-  ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
-- Resolves: bz#1833157
-  ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)
+* Thu Jan 14 2021 Richard W.M. Jones <rjones@redhat.com> - 11.2.0-2
+- Bump and rebuild against libdnet 1.14 (RHBZ#1915838).
 
-* Tue Apr 21 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
-- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1811729]
-- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1811729]
-- ovt-add-appinfo-plugin.patch [bz#1809751]
-- Resolves: bz#1809751
-  ([ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch)
-- Resolves: bz#1811729
-  ([ESXi][RHEL8.2.1]open-vm-tools coverity scan issue)
+* Fri Nov 06 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.0-1
+- Package new upstream version open-vm-tools-11.2.0-16938113.
 
-* Wed Apr 08 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1.el8
-- Rebase to 11.0.5 (bz#1798285)
-- Resolves: bz#1798285
-  ([ESXi][RHEL8.2.1]Rebase open-vm-tools to 11.0.5 for 8.2.1)
+* Fri Oct 30 2020 Jeff Law <law@redhat.com> - 11.1.5-2
+- Fix incorrect volatile exposed by gcc-11
 
-* Tue Feb 18 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-4.el8
-- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1800812]
-- Resolves: bz#1800812
-  ([ESXi][RHEL8]Log spew "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name)
+* Tue Sep 08 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.5-1
+- Package new upstream version open-vm-tools-11.1.5-16724464.
+- Removed gcc10-warning.patch and sdmp-fixes.patch (no longer needed).
 
-* Thu Dec 05 2019 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-3.el8
-- ovt-Address-Coverity-issues-reported-in-bora-lib-file-fi.patch [bz#1769881]
-- ovt-Fix-a-potential-NULL-pointer-dereference-in-the-vmba.patch [bz#1769881]
-- ovt-Address-two-Coverity-reported-issues-in-hostinfoPosi.patch [bz#1769881]
-- ovt-Fix-a-resource-leak-issue-in-deployPkg.patch [bz#1769881]
-- Resolves: bz#1769881
-  ([ESXi][RHEL8.2]Important issues found by covscan in "open-vm-tools-11.0.0-2.el8" package)
+* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 11.1.0-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
 
-* Mon Oct 14 2019 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-1.el8
-- Rebase to 11.0.0 [bz#1754658]
-- Resolves: bz#1754658
-  (Rebase open-vm-tools to 11.0 for 8.2.0)
-- Resolves: bz#1760891
-  (Need to backport some severe memory leak fixes from upstream)
+* Thu Jul 09 2020 Merlin Mathesius <mmathesi@redhat.com> - 11.1.0-3
+- Conditional fixes to build for ELN
 
-* Thu Aug 01 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-3.el8
-- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1602648]
-- ovt-Fix-memory-leak-in-GetFormattedCommandLine-function-.patch [bz#1602648]
-- ovt-Fix-a-leak-if-VGAuth-setup-fails.-Coverity-issue.patch [bz#1602648]
-- ovt-Fix-minor-leak-in-FileRotateByRenumber-Coverity-scan.patch [bz#1602648]
-- ovt-Fix-memory-leak-in-SNEBuildHash-function.patch [bz#1602648]
-- ovt-Fix-Coverity-reported-issues-in-i18n.c-code-VMTools-.patch [bz#1602648]
-- ovt-Fix-a-memory-leak-in-the-unicode-library.patch [bz#1602648]
-- ovt-Fix-a-trivial-Coverity-reported-memory-leak-in-vgaut.patch [bz#1602648]
-- ovt-Fixes-for-few-leaks-and-improved-error-handling.patch [bz#1602648]
-- ovt-Fix-Coverity-reported-double-memory-free-errors.patch [bz#1602648]
-- ovt-Fix-a-trivial-Coverity-reported-memory-leak.patch [bz#1602648]
-- ovt-Fix-RH-Covscan-Coverity-reported-memory-leaks-in-too.patch [bz#1602648]
-- ovt-Fix-Using-uninitialized-value-issue-reported-by-Cove.patch [bz#1602648]
-- ovt-copyPasteCompatX11.c-code-generating-unnecessary-Cov.patch [bz#1602648]
-- ovt-Fix-a-Coverity-issue-reported-in-vgauth-serviceImpl-.patch [bz#1602648]
-- ovt-Fix-two-coverity-issues-reported-by-a-customer.patch [bz#1602648]
-- Resolves: bz#1602648
-  ([ESXi][RHEL8]Please review important issues found by covscan in "open-vm-tools-10.2.5-2.el8+7" package)
+* Sun Jun 21 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.0-2
+- Added sdmp-fixes.patch from upstream to remove net-tools dependency
+  and couple of important fixes
 
-* Tue Jun 04 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-2
-- Rebase to 10.3.10 [bz#1702784]
-- Resolves: bz#1702784
-  (Rebase open-vm-tools to 10.3.10)
+* Mon May 25 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.0-1
+- Package new upstream version open-vm-tools-11.1.0-16036546.
+- Added new open-vm-tools-sdmp package.
+- Workaround for vm-support script path is no longer needed.
+- Added missing dependencies for vm-support script.
+- Updated gcc10-warning.patch.
+- Removed gcc9-static-inline.patch and diskinfo-log-spew.patch that
+  are no longer needed.
 
-* Tue Jan 08 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el8
-- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1660713]
-- Resolves: bz#1660713
-  ([ESXi][RHEL8.0]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
+* Sun May 17 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-4
+- Updated PAM configuration file to follow configured authn scheme.
 
-* Tue Oct 16 2018 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-1
-- Rebase to 10.3.0 [bz#1626578]
-- Resolves: bz#1626578
-  ([ESXi][RHEL8]Rebase open-vm-tools to 10.3.0)
+* Tue Mar 24 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-3
+- Use /sbin/ldconfig on older than Fedora 28 and RHEL 8 platforms.
 
-* Mon May 14 2018 Miroslav Rezanina <mrezanin@redhat.com> - 10.2.5-2
-- Updated RHEL version
-- Resolves: bz#1527233
-  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)
+* Fri Feb 07 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-2
+- Added patch diskinfo-log-spew.patch.
+
+* Tue Feb 04 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-1
+- Package new upstream version open-vm-tools-11.0.5-15389592.
+- Removed vix-memleak.patch which is no longer needed.
+
+* Tue Feb 04 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-6
+- Added gcc10-warning.patch for fixing compilation issues.
+
+* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 11.0.0-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Wed Oct 09 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-4
+- Fixes for drag-n-drop that needs vmblock-fuse mount.
+- Added run-vmblock\x2dfuse.mount service unit for vmblock-fuse mount.
+- Added open-vm-tools.conf for loading Fuse.
+
+* Wed Oct 09 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-3
+- Cleanup GuestProxy certs from /etc/vmware-tools/GuestProxyData if needed.
+- Cleanup vmtoolsd-init service symlinks.
+
+* Wed Oct 02 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-2
+- vmtoolsd-init.service is no longer needed for 11.0.0, removed it.
+
+* Wed Oct 02 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-1
+- Package new upstream version open-vm-tools-11.0.0-14549434.
+- Added gcc9-static-inline.patch for gcc9 warnings.
+- Added vix-memleak.patch for a memory leak.
+- Removed gcc9-warnings.patch which is no longer needed.
+- Removed vmware-guestproxycerttool as it is no longer available upstream.
+
+* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.3.10-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Sat Mar 16 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.10-1
+- Package new upstream version open-vm-tools-10.3.10-12406962.
+- Removed quiescing-combined.patch which is no longer needed.
+
+* Wed Feb 13 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.5-2
+- Combine all gcc9 warning patches into one single gcc9-warnings.patch.
+
+* Tue Feb 12 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.5-1
+- Package new upstream version open-vm-tools-10.3.5-10430147.
+- Removed cloud-init.patch which is no longer needed.
+- Removed hgfsPlugin-crash.patch which is no longer needed.
+- Removed linuxDeploymentUtils-strncat.patch which is no longer needed.
+- Added quiescing-combined.patch for quiesced snapshot fixes.
+- Updated hgfsServer-aligned.patch for open-vm-tools-10.3.5.
+
+* Tue Feb 12 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-8
+- Updated *-aligned.patch files with more tweaks.
+- Filed a regression in readdir operation in dir-aligned.patch.
+
+* Sun Feb 03 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-7
+- Added hgfsServer-aligned.patch for "address-of-packed-member" error.
+- Added hgfsmounter-aligned.patch for "address-of-packed-member" error.
+- Added util-misc-format.patch for "format-overflow" error.
+- Added linuxDeploymentUtils-strncat.patch for "stringop-truncation" error.
+- Added filesystem-aligned.patch for "address-of-packed-member" error.
+- Added file-aligned.patch for "address-of-packed-member" error.
+- Added fsutil-aligned.patch for "address-of-packed-member" error.
+- Added dir-aligned.patch for "address-of-packed-member" error.
+- Added link-aligned.patch for "address-of-packed-member" error.
+
+* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.3.0-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Mon Oct 01 2018 Simone Caronni <negativo17@gmail.com> - 10.3.0-5
+- Update SPEC file to match packaging guidelines.
+- Re-add ldconfig scriptlets. They expand to nothing in Fedora 28+, but they
+  are still required for Fedora 27. These can be removed when Fedora 27 is EOL.
+
+* Fri Aug 10 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-4
+- Fixed few bugs related to vmtoolsd-init.service.
+
+* Tue Aug 07 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-3
+- Implement the https://pagure.io/packaging-committee/issue/506 guideline.
+- Added vmtoolsd-init.service per the guideline.
+- Replaced the certificate cleanup with "vmware-guestproxycerttool -e".
+
+* Mon Aug 06 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-2
+- Added hgfsPlugin-crash.patch for vmtoolsd crash (RHBZ#1612470).
+
+* Thu Aug 02 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-1
+- Package new upstream version open-vm-tools-10.3.0-8931395.
+- Updated cloud-init.patch for 10.3.0.
+- Removed use-tirpc.patch which is no longer needed.
+
+* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 10.2.5-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Wed Jul 11 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-6
+- Added cloud-init.patch to detect cloud-init correctly.
+- Added cleanup for /etc/vmware-tools directory on uninstall.
+
+* Tue Jul 10 2018 Pete Walter <pwalter@fedoraproject.org> - 10.2.5-5
+- Rebuild for ICU 62
+
+* Thu Jul 05 2018 Richard W.M. Jones <rjones@redhat.com> - 10.2.5-4
+- Remove ldconfig
+  https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/
+
+* Tue May 15 2018 Pete Walter <pwalter@fedoraproject.org> - 10.2.5-3
+- Rebuild for ICU 61.1
 
 * Wed May 09 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-2
 - Use tirpc for Fedora 28 onwards.

sources

@@ -0,0 +1 @@
+SHA512 (open-vm-tools-12.4.0-23259341.tar.gz) = 11ea43c64ec534922145f83e2b7ef9254437f80656ad03b596340a78c3698adcc7d84adade9c5d8e1c83b5ebc3bd086601b1d104e0f070274dc2b6bc1f64fb17

vmtoolsd.service

@@ -4,12 +4,13 @@ Documentation=https://github.com/vmware/open-vm-tools
 ConditionVirtualization=vmware
 Requires=vgauthd.service
 After=vgauthd.service
-DefaultDependencies=no
-Before=cloud-init-local.service
+StartLimitIntervalSec=30
+StartLimitBurst=3
 
 [Service]
 ExecStart=/usr/bin/vmtoolsd
 TimeoutStopSec=5
+Restart=on-failure
 
 [Install]
 WantedBy=multi-user.target