Update to the upstream v6.17 @ e8da3cdc
Handle new radiacode entropy source
Build with the updated jitterentropy v3.7.0 library
Drop the older i686 force-PIC fix
Resolves: RHEL-176340
Signed-off-by: Vladislav Dronov <vdronov@redhat.com>
Almost all modern CPUs have a hardware randomness source in some form.
Most of virtual machines have /dev/hwrng provided by a virtual host.
The jitter entropy source is just eating CPU cycles in such cases, so
disable it by default. It can be enabled explicitly for the older
hardware without hardware entropy (like the Athlon FX CPU).
Resolves: RHEL-91119
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Fix a number of issues found by covscan code scanner
Add a jitter init timeout for tests
Add a start condition for the FIPS mode
Resolves: rhbz#2156554
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Allow rngd process to drop privileges with "-D user:group"
Fix an error building with jitterentropy-3.4.0
Add a requirement for selinux-policy of a certain version
Fix a build failure on ppc64
Small edits in test scripts
Resolves: rhbz#2075977
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
So rngd options can be adjusted and not overwritten on updates
Disable pkcs11 and nist entropy sources by default
Resolves: rhbz#2015566
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
- Update to the upstream v6.13 + tip of origin/master + onecpu
branch + revert of 2ce93190 (bz 1965318)
- Rebuild rng-tools against the latest jitterentropy library
3.0.2-2.git.409828cf with fixes for an important issue
- Adjust Source0 to a more proper one
Resolves: rhbz#1965318
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Adjust rngd-wake-threshold.service and post section
so udevadm is not run in a container.
Resolves: rhbz#1975588
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
- Update the sources to 6.13
- Add important fixes from the upstream
- Remove Provides: jitterentropy-rngd as it was retired in f29.
- Resolves: rhbz#1965318
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
There is no need to hardcode _sbindir anymore, also
the old value of '/sbin' is incorrect now.
Resolves: rhbz#1965318
Signed-off-by: Vladis Dronov <vdronov@redhat.com>