rpms/sssd
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote

Browse Source 
Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization
This commit is contained in:
Alexey Tikhonov 2021-08-16 19:55:25 +02:00
parent f017fabf25
commit 4fc9503558
3 changed files with 10908 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
0003-NSS-don-t-treat-absent-CLEAR_MC_FLAG-as-an-error-Thi.patch Normal file
View File

@ -0,0 +1,30 @@
From 365cd676c9fbeed8246c4e0c017dcac0c72a2526 Mon Sep 17 00:00:00 2001
From: Alexey Tikhonov <atikhono@redhat.com>
Date: Tue, 10 Aug 2021 18:21:56 +0200
Subject: [PATCH] NSS: don't treat absent 'CLEAR_MC_FLAG' as an error (This is
expected in case of SIGHUP sent for log rotation.)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
---
src/responder/nss/nsssrv.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/responder/nss/nsssrv.c b/src/responder/nss/nsssrv.c
index 9c5907d86..526d97b08 100644
--- a/src/responder/nss/nsssrv.c
+++ b/src/responder/nss/nsssrv.c
@@ -63,7 +63,7 @@ nss_clear_memcache(TALLOC_CTX *mem_ctx,
if (ret == ENOENT) {
DEBUG(SSSDBG_TRACE_FUNC,
"CLEAR_MC_FLAG not found. Nothing to do.\n");
- return ret;
+ return EOK; /* Most probably log rotation SIGHUP to monitor */
} else {
DEBUG(SSSDBG_CRIT_FAILURE,
"Failed to check existence of "CLEAR_MC_FLAG": %s.\n",
--
2.26.3

10871
0004-po-update-translations.patch Normal file
View File

File diff suppressed because it is too large Load Diff

8
sssd.spec
View File

@ -27,7 +27,7 @@
Name: sssd Name: sssd
Version: 2.5.2 Version: 2.5.2
Release: 4%{?dist} Release: 5%{?dist}
Summary: System Security Services Daemon Summary: System Security Services Daemon
License: GPLv3+ License: GPLv3+
URL: https://github.com/SSSD/sssd/ URL: https://github.com/SSSD/sssd/
@ -36,6 +36,8 @@ Source0: https://github.com/SSSD/sssd/releases/download/2.5.2/sssd-2.5.2.tar.gz
### Patches ### ### Patches ###
Patch0001: 0001-Basics-of-subid-ranges-support-for-IPA-provider.patch Patch0001: 0001-Basics-of-subid-ranges-support-for-IPA-provider.patch
Patch0002: 0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch Patch0002: 0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch
Patch0003: 0003-NSS-don-t-treat-absent-CLEAR_MC_FLAG-as-an-error-Thi.patch
Patch0004: 0004-po-update-translations.patch
### Dependencies ### ### Dependencies ###
@ -1018,6 +1020,10 @@ fi
%systemd_postun_with_restart sssd.service %systemd_postun_with_restart sssd.service
%changelog %changelog
* Mon Aug 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
- Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
- Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization
* Mon Aug 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-4 * Mon Aug 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-4
- Resolves: rhbz#1973411 - CVE-2021-3621 sssd: shell command injection in sssctl [rhel-9] - Resolves: rhbz#1973411 - CVE-2021-3621 sssd: shell command injection in sssctl [rhel-9]