import tog-pegasus-2.14.1-46.el8

This commit is contained in:
CentOS Sources 2020-07-28 05:17:19 -04:00 committed by Stepan Oksanichenko
parent 1efec8145b
commit 035d377534
3 changed files with 38 additions and 2 deletions

View File

@ -0,0 +1,24 @@
diff -up pegasus/rpm/manLinux/man8.Z/cimconfig.8.orig pegasus/rpm/manLinux/man8.Z/cimconfig.8
--- pegasus/rpm/manLinux/man8.Z/cimconfig.8.orig 2020-06-25 14:03:32.211892328 +0200
+++ pegasus/rpm/manLinux/man8.Z/cimconfig.8 2020-06-25 14:11:31.687821336 +0200
@@ -463,7 +463,7 @@ mentioned between single quotes since it
like .+, !, -.
.PD 0
.IP
-.BR "Default Value: " DEFAULT\ (The\ default\ cipher\ list\ of\ OpenSSL)
+.BR "Default Value: " PROFILE=SYSTEM\ (Protocols\ enforced\ by\ system-wide\ crypto\ policy)
.IP
.BR Dynamic: \0No
.PD
diff -up pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp.orig pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp
--- pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp.orig 2020-06-25 14:02:19.104445704 +0200
+++ pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp 2020-06-25 14:02:54.695663130 +0200
@@ -140,7 +140,7 @@ static struct ConfigPropertyRow properti
#ifdef PEGASUS_ENABLE_USERGROUP_AUTHORIZATION
{"authorizedUserGroups", "", IS_STATIC, IS_VISIBLE},
#endif
- {"sslCipherSuite", "DEFAULT", IS_STATIC, IS_VISIBLE}
+ {"sslCipherSuite", "PROFILE=SYSTEM", IS_STATIC, IS_VISIBLE}
#ifdef PEGASUS_ENABLE_SESSION_COOKIES
,{"httpSessionTimeout", "0", IS_DYNAMIC, IS_VISIBLE}
#endif

View File

@ -1 +1 @@
d /var/run/tog-pegasus 1750 root pegasus - d /run/tog-pegasus 1750 root pegasus -

View File

@ -8,7 +8,7 @@
Name: tog-pegasus Name: tog-pegasus
Version: %{major_ver}.1 Version: %{major_ver}.1
Release: 44%{?dist} Release: 46%{?dist}
Epoch: 2 Epoch: 2
Summary: OpenPegasus WBEM Services for Linux Summary: OpenPegasus WBEM Services for Linux
@ -98,6 +98,9 @@ Patch40: pegasus-2.14.1-tesid.patch
Patch41: pegasus-2.14.1-ssl-cert-path.patch Patch41: pegasus-2.14.1-ssl-cert-path.patch
# 42: port to openssl-1.1 # 42: port to openssl-1.1
Patch42: pegasus-2.14.1-openssl-1.1-fix.patch Patch42: pegasus-2.14.1-openssl-1.1-fix.patch
# 43: comply with system crypto policy
# (use 'PROFILE=SYSTEM' instead of 'DEFAULT' in SSL_CTX_set_cipher_list calls)
Patch43: pegasus-2.14.1-crypto-policy-compliance.patch
BuildRequires: procps, libstdc++, pam-devel BuildRequires: procps, libstdc++, pam-devel
BuildRequires: openssl, openssl-devel BuildRequires: openssl, openssl-devel
@ -251,6 +254,7 @@ yes | mak/CreateDmtfSchema 238 %{SOURCE9} cim_schema_2.38.0
%patch40 -p1 -b .testid %patch40 -p1 -b .testid
%patch41 -p1 -b .ssl-cert-path %patch41 -p1 -b .ssl-cert-path
%patch42 -p1 -b .openssl-1.1-fix %patch42 -p1 -b .openssl-1.1-fix
%patch43 -p1 -b .crypto-policy-compliance
%build %build
@ -552,6 +556,14 @@ fi
%changelog %changelog
* Mon Jun 29 2020 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-46
- Comply with system crypto policy
Resolves: #1842838
* Tue May 05 2020 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-45
- Fix tmpfiles path
Resolves: #1805977
* Wed Aug 01 2018 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-44 * Wed Aug 01 2018 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-44
- Review and fix %%files section because of failing rpm -V - Review and fix %%files section because of failing rpm -V