diff --git a/.gitreview b/.gitreview index 26025dbfc..c1e07414f 100644 --- a/.gitreview +++ b/.gitreview @@ -2,3 +2,4 @@ host=review.openstack.org port=29418 project=openstack/stx-integ.git +defaultbranch=f/centos75 diff --git a/base/bash/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/bash/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index cab1a4fa0..45b3ed0ac 100644 --- a/base/bash/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/bash/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,4 +1,4 @@ -From e1f17182a8d105770a2805c9950b776b4437f7ff Mon Sep 17 00:00:00 2001 +From 30796013a8d2b3b008a843bd3a4bee33e866a151 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:05:36 -0400 Subject: [PATCH 2/3] WRS: 0001-Update-package-versioning-for-TIS-format.patch @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/bash.spec b/SPECS/bash.spec -index 5f14bad..115d540 100644 +index 4f16c8c..d749f92 100644 --- a/SPECS/bash.spec +++ b/SPECS/bash.spec @@ -6,7 +6,7 @@ Version: %{baseversion}%{patchleveltag} Name: bash Summary: The GNU Bourne Again shell --Release: 29%{?dist} -+Release: 29.el7_4%{?_tis_dist}.%{tis_patch_ver} +-Release: 30%{?dist} ++Release: 30.el7%{?_tis_dist}.%{tis_patch_ver} Group: System Environment/Shells License: GPLv3+ Url: http://www.gnu.org/software/bash -- -1.9.1 +2.7.4 diff --git a/base/bash/centos/meta_patches/spec-TiS-bash-history.patch b/base/bash/centos/meta_patches/spec-TiS-bash-history.patch index a0bfe756e..376942dd1 100644 --- a/base/bash/centos/meta_patches/spec-TiS-bash-history.patch +++ b/base/bash/centos/meta_patches/spec-TiS-bash-history.patch @@ -1,4 +1,4 @@ -From e8d5b56c303237d0a0ab00ea5f4fbdea3208caa5 Mon Sep 17 00:00:00 2001 +From cc0534185464b04c1d320518af7d2b73291ea449 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:05:36 -0400 Subject: [PATCH 1/3] WRS: spec-TiS-bash-history.patch @@ -10,12 +10,12 @@ Conflicts: 1 file changed, 8 insertions(+) diff --git a/SPECS/bash.spec b/SPECS/bash.spec -index 9a6d496..5f14bad 100644 +index 4b2ec49..4f16c8c 100644 --- a/SPECS/bash.spec +++ b/SPECS/bash.spec -@@ -192,6 +192,10 @@ Patch151: bash-cve-2016-9401.patch - #1473245 - Patch152: bash-4.3-pipefd-leak.patch +@@ -195,6 +195,10 @@ Patch152: bash-4.3-pipefd-leak.patch + #1487615 - bash fails to execute commands containing multibyte characters + Patch153: bash-4.3-wshouldquote.patch +# Patches from WindRiver +Patch500: bash-history-syslog.patch @@ -24,9 +24,9 @@ index 9a6d496..5f14bad 100644 BuildRequires: texinfo bison BuildRequires: ncurses-devel BuildRequires: autoconf, gettext -@@ -323,6 +327,10 @@ This package contains documentation files for %{name}. - %patch151 -p1 -b .cve-2016-9401 +@@ -327,6 +331,10 @@ This package contains documentation files for %{name}. %patch152 -p1 -b .pipefd-leak + %patch153 -p1 -b .wshouldquote +# WindRiver patches +%patch500 -p1 -b .history-syslog @@ -36,5 +36,5 @@ index 9a6d496..5f14bad 100644 echo %{release} > _patchlevel -- -1.9.1 +2.7.4 diff --git a/base/bash/centos/srpm_path b/base/bash/centos/srpm_path index ecb715534..f8127d64f 100644 --- a/base/bash/centos/srpm_path +++ b/base/bash/centos/srpm_path @@ -1 +1 @@ -mirror:Source/bash-4.2.46-29.el7_4.src.rpm +mirror:Source/bash-4.2.46-30.el7.src.rpm diff --git a/base/centos-release/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/centos-release/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 023e4013d..bf4fc4ba2 100644 --- a/base/centos-release/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/centos-release/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,4 +1,4 @@ -From d5890a17f5b07a9d17665c2b4138bb244ab6c680 Mon Sep 17 00:00:00 2001 +From 328f19996b93b5be5cd856e600111d0dc87c8616 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 14:58:59 -0400 Subject: [PATCH 2/2] WRS: 0001-Update-package-versioning-for-TIS-format.patch @@ -8,18 +8,18 @@ Subject: [PATCH 2/2] WRS: 0001-Update-package-versioning-for-TIS-format.patch 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/centos-release.spec b/SPECS/centos-release.spec -index be95b1b..91dad61 100644 +index ce64be4..8c05c28 100644 --- a/SPECS/centos-release.spec +++ b/SPECS/centos-release.spec -@@ -13,7 +13,7 @@ +@@ -14,7 +14,7 @@ Name: centos-release Version: %{base_release_version} --Release: %{centos_rel}%{?dist} -+Release: %{centos_rel}.el7.centos%{?_tis_dist}.%{tis_patch_ver} +-Release: %{centos_rel}.1%{?dist} ++Release: %{centos_rel}.1.el7.centos%{?_tis_dist}.%{tis_patch_ver} Summary: %{product_family} release file Group: System Environment/Base License: GPLv2 -- -1.9.1 +2.7.4 diff --git a/base/centos-release/centos/meta_patches/centos-release-include-TiS-changes.patch b/base/centos-release/centos/meta_patches/centos-release-include-TiS-changes.patch index 6e0f39d2c..d8df65e2d 100644 --- a/base/centos-release/centos/meta_patches/centos-release-include-TiS-changes.patch +++ b/base/centos-release/centos/meta_patches/centos-release-include-TiS-changes.patch @@ -1,4 +1,4 @@ -From 4905ace48eb3feae48a02d2bd61e3778f8062532 Mon Sep 17 00:00:00 2001 +From e18f905977fa94fa20a2d9a9cc565dc8d7fe8dac Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 14:58:59 -0400 Subject: [PATCH 1/2] WRS: centos-release-include-TiS-changes.patch @@ -8,10 +8,10 @@ Subject: [PATCH 1/2] WRS: centos-release-include-TiS-changes.patch 1 file changed, 8 insertions(+) diff --git a/SPECS/centos-release.spec b/SPECS/centos-release.spec -index af82c8b..be95b1b 100644 +index 67f1550..ce64be4 100644 --- a/SPECS/centos-release.spec +++ b/SPECS/centos-release.spec -@@ -25,6 +25,8 @@ Provides: system-release(releasever) = %{base_release_version} +@@ -27,6 +27,8 @@ Provides: system-release(releasever) = %{base_release_version} Source0: centos-release-%{base_release_version}-%{centos_rel}.tar.gz Source1: 85-display-manager.preset Source2: 90-default.preset @@ -20,9 +20,9 @@ index af82c8b..be95b1b 100644 %description %{product_family} release files -@@ -118,6 +120,12 @@ mkdir -p %{buildroot}%{_prefix}/lib/systemd/system-preset/ - install -m 0644 %{SOURCE1} %{buildroot}%{_prefix}/lib/systemd/system-preset/ - install -m 0644 %{SOURCE2} %{buildroot}%{_prefix}/lib/systemd/system-preset/ +@@ -123,6 +125,12 @@ install -m 0644 %{SOURCE2} %{buildroot}%{_prefix}/lib/systemd/system-preset/ + %posttrans + /usr/bin/uname -m | grep -q 'x86_64' && echo 'centos' >/etc/yum/vars/contentdir || echo 'altarch' > /etc/yum/vars/contentdir +# Overwrite default issue files with cgcs related files. +install -m 0644 %{SOURCE3} %{buildroot}/etc/issue @@ -34,5 +34,5 @@ index af82c8b..be95b1b 100644 %clean rm -rf %{buildroot} -- -1.9.1 +2.7.4 diff --git a/base/centos-release/centos/srpm_path b/base/centos-release/centos/srpm_path index 7127b6ab7..199b5f4be 100644 --- a/base/centos-release/centos/srpm_path +++ b/base/centos-release/centos/srpm_path @@ -1 +1 @@ -mirror:Source/centos-release-7-4.1708.el7.centos.src.rpm +mirror:Source/centos-release-7-5.1804.1.el7.centos.src.rpm diff --git a/base/cluster-resource-agents/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/cluster-resource-agents/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 32c0eb09a..7a1aff353 100644 --- a/base/cluster-resource-agents/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/cluster-resource-agents/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,8 +1,7 @@ -From 2bc73669b8de70bf32d2f786b158738506e480ff Mon Sep 17 00:00:00 2001 +From 85cd40238fb1f76483848007bd1e5663bb3f21ff Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 15:11:59 -0400 -Subject: [PATCH 08/10] WRS: - 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/resource-agents.spec @@ -11,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/resource-agents.spec b/SPECS/resource-agents.spec -index 6be3418..28a8129 100644 +index 21fa049..fd8bc97 100644 --- a/SPECS/resource-agents.spec +++ b/SPECS/resource-agents.spec @@ -48,7 +48,7 @@ Name: resource-agents Summary: Open Source HA Reusable Cluster Resource Scripts Version: 3.9.5 --Release: 105%{?dist} -+Release: 105.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 124%{?dist} ++Release: 124.el7%{?_tis_dist}.%{tis_patch_ver} License: GPLv2+, LGPLv2+ and ASL 2.0 URL: https://github.com/ClusterLabs/resource-agents %if 0%{?fedora} || 0%{?centos_version} || 0%{?rhel} -- -1.9.1 +2.7.4 diff --git a/base/cluster-resource-agents/centos/meta_patches/Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch b/base/cluster-resource-agents/centos/meta_patches/Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch deleted file mode 100644 index a4b2be41f..000000000 --- a/base/cluster-resource-agents/centos/meta_patches/Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch +++ /dev/null @@ -1,33 +0,0 @@ -From c4165b39531872b7b56d497c4ebd86b5d1d79800 Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Wed, 25 Oct 2017 16:18:02 -0400 -Subject: [PATCH] - Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop - ---- - SPECS/resource-agents.spec | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/SPECS/resource-agents.spec b/SPECS/resource-agents.spec -index 19580ef..2536cb7 100644 ---- a/SPECS/resource-agents.spec -+++ b/SPECS/resource-agents.spec -@@ -252,6 +252,7 @@ Patch1116: ocf-shellfuncs_change_logtag.patch - Patch1117: lvm_cleanup_refs_on_stop.patch - Patch1118: ipaddr2_if_down.patch - Patch1119: ipaddr2_ignore_lo_if_state.patch -+Patch1120: Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch - - Obsoletes: heartbeat-resources <= %{version} - Provides: heartbeat-resources = %{version} -@@ -561,6 +562,7 @@ exit 1 - %patch1117 -p1 - %patch1118 -p1 - %patch1119 -p1 -+%patch1120 -p1 - - %build - if [ ! -f configure ]; then --- -1.9.1 - diff --git a/base/cluster-resource-agents/centos/meta_patches/PATCH_ORDER b/base/cluster-resource-agents/centos/meta_patches/PATCH_ORDER index 22608823f..e4b0c166e 100644 --- a/base/cluster-resource-agents/centos/meta_patches/PATCH_ORDER +++ b/base/cluster-resource-agents/centos/meta_patches/PATCH_ORDER @@ -8,7 +8,6 @@ spec-lvm-cleanup-refs-on-stop.patch 0001-Update-package-versioning-for-TIS-format.patch ipaddr2-if-down.patch spec-add-ipaddr2-ignore-lo-state.patch -Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch Disable-creation-of-the-debug-package.patch metapatch-for-arp_bg.patch ipaddr2-avoid-failing-svc-if-down-meta.patch diff --git a/base/cluster-resource-agents/centos/meta_patches/metapatch-for-arp_bg.patch b/base/cluster-resource-agents/centos/meta_patches/metapatch-for-arp_bg.patch index e89f98f94..e8034ee29 100644 --- a/base/cluster-resource-agents/centos/meta_patches/metapatch-for-arp_bg.patch +++ b/base/cluster-resource-agents/centos/meta_patches/metapatch-for-arp_bg.patch @@ -1,4 +1,4 @@ -From 6dc3b747b2688498a69d3ca8f826f30aecfc9f5b Mon Sep 17 00:00:00 2001 +From 00b88829aad297c6732617a706501b466bb9be7a Mon Sep 17 00:00:00 2001 From: Al Bailey Date: Mon, 28 May 2018 14:12:45 -0500 Subject: [PATCH] metapatch for arp_bg @@ -8,25 +8,25 @@ Subject: [PATCH] metapatch for arp_bg 1 file changed, 2 insertions(+) diff --git a/SPECS/resource-agents.spec b/SPECS/resource-agents.spec -index 2536cb7..5b38434 100644 +index c70d20b..520d9c3 100644 --- a/SPECS/resource-agents.spec +++ b/SPECS/resource-agents.spec -@@ -253,6 +253,7 @@ Patch1117: lvm_cleanup_refs_on_stop.patch +@@ -282,6 +282,7 @@ Patch1116: ocf-shellfuncs_change_logtag.patch + Patch1117: lvm_cleanup_refs_on_stop.patch Patch1118: ipaddr2_if_down.patch Patch1119: ipaddr2_ignore_lo_if_state.patch - Patch1120: Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch -+Patch1121: Re-enable-background-execution-of-arp-commands.patch ++Patch1120: Re-enable-background-execution-of-arp-commands.patch Obsoletes: heartbeat-resources <= %{version} Provides: heartbeat-resources = %{version} -@@ -563,6 +564,7 @@ exit 1 +@@ -618,6 +619,7 @@ exit 1 + %patch1117 -p1 %patch1118 -p1 %patch1119 -p1 - %patch1120 -p1 -+%patch1121 -p1 ++%patch1120 -p1 %build if [ ! -f configure ]; then -- -1.8.3.1 +2.7.4 diff --git a/base/cluster-resource-agents/centos/patches/Fix-VG-activity-bug-in-heartbeat-LVM-script.patch b/base/cluster-resource-agents/centos/patches/Fix-VG-activity-bug-in-heartbeat-LVM-script.patch index 7d7c41db3..4994507c7 100644 --- a/base/cluster-resource-agents/centos/patches/Fix-VG-activity-bug-in-heartbeat-LVM-script.patch +++ b/base/cluster-resource-agents/centos/patches/Fix-VG-activity-bug-in-heartbeat-LVM-script.patch @@ -1,6 +1,6 @@ -From 98591b479bd64c2835ab1e8884118c57dd499b9c Mon Sep 17 00:00:00 2001 +From 7c181a1afdc85456333f9cbf9c5827ceb0554a91 Mon Sep 17 00:00:00 2001 From: Chris Friesen -Date: Tue, 21 Jun 2016 14:29:36 -0400 +Date: Fri, 24 Aug 2018 03:51:37 +0800 Subject: [PATCH] Fix VG activity bug in heartbeat/LVM script There is currently an issue in the lvm2 package where if you create an LVM thin @@ -19,17 +19,20 @@ group is not active. This commit changes the code to directly query lvm about the volume group activity rather than relying on side effects. + +Signed-off-by: zhipengl + --- heartbeat/LVM | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-) diff --git a/heartbeat/LVM b/heartbeat/LVM -index 1c23c05..d91a3bc 100755 +index 893ece8..1efb207 100755 --- a/heartbeat/LVM +++ b/heartbeat/LVM -@@ -350,19 +350,16 @@ LVM_status() { - ocf_exit_reason "LVM Volume $1 is not available" - return $OCF_ERR_GENERIC +@@ -338,19 +338,16 @@ LVM_status() { + fi + fi fi - - if [ -d /dev/$1 ]; then @@ -54,5 +57,5 @@ index 1c23c05..d91a3bc 100755 1) # exclusive with tagging. # If vg is running, make sure the correct tag is present. Otherwise we -- -1.9.1 +2.7.4 diff --git a/base/cluster-resource-agents/centos/patches/Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch b/base/cluster-resource-agents/centos/patches/Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch deleted file mode 100644 index 1ceffe554..000000000 --- a/base/cluster-resource-agents/centos/patches/Modify-error-code-of-bz1454699-fix-to-prevent-inactive-controller-reboot-loop.patch +++ /dev/null @@ -1,27 +0,0 @@ -From b9fdbdf20d62655c9b529f744f8efb9fb66c5851 Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Wed, 25 Oct 2017 16:13:20 -0400 -Subject: [PATCH] Modify error code of - bz1454699-LVM-status-check-for-missing-VG.patch to prevent controler-1 reboot - loop - ---- - heartbeat/LVM | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/heartbeat/LVM b/heartbeat/LVM -index 5347765..e4cd0ea 100755 ---- a/heartbeat/LVM -+++ b/heartbeat/LVM -@@ -348,7 +348,7 @@ LVM_status() { - fi - if ! echo "$output" | grep -q "Found.*\"$1\""; then - ocf_exit_reason "LVM Volume $1 is not available" -- return $OCF_ERR_GENERIC -+ return $OCF_NOT_RUNNING - fi - - # Ask lvm whether the volume group is active. This maps to --- -1.9.1 - diff --git a/base/cluster-resource-agents/centos/srpm_path b/base/cluster-resource-agents/centos/srpm_path index 83167c2bd..cd6b26604 100644 --- a/base/cluster-resource-agents/centos/srpm_path +++ b/base/cluster-resource-agents/centos/srpm_path @@ -1 +1,2 @@ -mirror:Source/resource-agents-3.9.5-105.el7.src.rpm +mirror:Source/resource-agents-3.9.5-124.el7.src.rpm + diff --git a/base/cluster-resource-agents/cluster-resource-agents/copyright.patch b/base/cluster-resource-agents/cluster-resource-agents/copyright.patch deleted file mode 100644 index 460cc23e2..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/copyright.patch +++ /dev/null @@ -1,38 +0,0 @@ ---- - heartbeat/Filesystem | 3 ++- - heartbeat/LVM | 1 + - heartbeat/pgsql | 1 + - 3 files changed, 4 insertions(+), 1 deletion(-) - ---- a/heartbeat/Filesystem -+++ b/heartbeat/Filesystem -@@ -2,7 +2,8 @@ - # - # Support: linux-ha@lists.linux-ha.org - # License: GNU General Public License (GPL) --# -+# Copyright (c) 2014 Wind River Systems, Inc. All rights reserved. -+# - # Filesystem - # Description: Manages a Filesystem on a shared storage medium. - # Original Author: Eric Z. Ayers (eric.ayers@compgen.com) ---- a/heartbeat/LVM -+++ b/heartbeat/LVM -@@ -10,6 +10,7 @@ - # Support: linux-ha@lists.linux-ha.org - # License: GNU General Public License (GPL) - # Copyright: (C) 2002 - 2005 International Business Machines, Inc. -+# Copyright (c) 2014 Wind River Systems, Inc. All rights reserved. - # - # This code significantly inspired by the LVM resource - # in FailSafe by Lars Marowsky-Bree ---- a/heartbeat/pgsql -+++ b/heartbeat/pgsql -@@ -9,6 +9,7 @@ - # - # Copyright: 2006-2012 Serge Dubrouski - # and other Linux-HA contributors -+# Copyright (c) 2014 Wind River Systems, Inc. All rights reserved. - # License: GNU General Public License (GPL) - # - ############################################################################### diff --git a/base/cluster-resource-agents/cluster-resource-agents/exportfs_accept_ipv6.patch b/base/cluster-resource-agents/cluster-resource-agents/exportfs_accept_ipv6.patch deleted file mode 100644 index 5a992e1c7..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/exportfs_accept_ipv6.patch +++ /dev/null @@ -1,15 +0,0 @@ -Index: resource-agents-3.9.5/heartbeat/exportfs -=================================================================== ---- resource-agents-3.9.5/heartbeat/exportfs 2013-02-07 07:17:42.000000000 -0500 -+++ resource-agents-3.9.5/heartbeat/exportfs 2015-12-18 12:40:18.382930869 -0500 -@@ -184,7 +184,9 @@ - - is_exported() { - local dir=$1 -- local spec=$2 -+ # Because clientspec contains square brackets when using IPv6, and the exports entry does not, -+ # it is necessary to remove the square brackets to compare them with each other. -+ local spec=$(echo $2|sed -r 's/(\[|\])//g') - exportfs | - sed -e '$! N; s/\n[[:space:]]\+/ /; t; s/[[:space:]]\+\([^[:space:]]\+\)\(\n\|$\)/ \1\2/g; P;D;' | - grep -q -x -F "$dir $spec" diff --git a/base/cluster-resource-agents/cluster-resource-agents/filesystem_rmon.patch b/base/cluster-resource-agents/cluster-resource-agents/filesystem_rmon.patch deleted file mode 100644 index f74abd338..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/filesystem_rmon.patch +++ /dev/null @@ -1,193 +0,0 @@ ---- - heartbeat/Filesystem | 59 ++++++++++++++++++++++++++++++++++++++++++++++++--- - heartbeat/LVM | 59 +++++++++++++++++++++++++++++++++++++++++++++++---- - 2 files changed, 111 insertions(+), 7 deletions(-) - ---- a/heartbeat/Filesystem -+++ b/heartbeat/Filesystem -@@ -19,6 +19,7 @@ - # OCF_RESKEY_run_fsck - # OCF_RESKEY_fast_stop - # OCF_RESKEY_force_clones -+# OCF_RESKEY_rmon_rsc_name - # - #OCF_RESKEY_device : name of block device for the filesystem. e.g. /dev/sda1, /dev/md0 - # Or a -U or -L option for mount, or an NFS mount specification -@@ -30,6 +31,7 @@ - #OCF_RESKEY_fast_stop : fast stop: yes(default)/no - #OCF_RESKEY_force_clones : allow running the resource as clone. e.g. local xfs mounts - # for each brick in a glusterfs setup -+#OCF_RESKEY_rmon_rsc_name: resource name to use when notifing RMON - # - # - # This assumes you want to manage a filesystem on a shared (SCSI) bus, -@@ -1053,20 +1055,65 @@ if [ "$OP" != "monitor" ]; then - ocf_log info "Running $OP for $DEVICE on $MOUNTPOINT" - fi - -+RMON_NOTIFY="/usr/local/bin/rmon_resource_notify" -+ -+rmon_notify() { -+ local RSC_STATE=$1 TIMEOUT=$2 -+ -+ if [ -z "OCF_RESKEY_rmon_rsc_name" ] -+ then -+ ocf_log err "No RMON resource name given for $OCF_RESKEY_directory" -+ return -+ fi -+ -+ if [[ -x $RMON_NOTIFY ]] -+ then -+ $RMON_NOTIFY --resource-name $OCF_RESKEY_rmon_rsc_name \ -+ --resource-state $RSC_STATE \ -+ --resource-type mount \ -+ --device $OCF_RESKEY_device \ -+ --mount-point $OCF_RESKEY_directory \ -+ --timeout $TIMEOUT \ -+ >/dev/null 2>&1 -+ else -+ ocf_log err "$RMON_NOTIFY not available, failed to execute: \ -+$RMON_NOTIFY --resource-name $OCF_RESKEY_rmon_rsc_name \ -+--resource-state $RSC_STATE --resource-type mount \ -+--device $OCF_RESKEY_device --mount-point $OCF_RESKEY_directory \ -+--timeout $TIMEOUT" -+ fi -+} -+ - # These operations do not require the clone checking + OCFS2 - # initialization. - case $OP in - status) Filesystem_status -- exit $? -+ rc=$? -+ if [ $rc -eq $OCF_SUCCESS ] -+ then -+ rmon_notify "enabled" 300 -+ else -+ rmon_notify "disabled" 300 -+ fi -+ exit $rc - ;; - monitor) Filesystem_monitor -- exit $? -+ rc=$? -+ if [ $rc -eq $OCF_SUCCESS ] -+ then -+ rmon_notify "enabled" 300 -+ else -+ rmon_notify "disabled" 300 -+ fi -+ exit $rc - ;; - validate-all) Filesystem_validate_all - exit $? - ;; - stop) Filesystem_stop -- exit $? -+ rc=$? -+ rmon_notify "disabled" 300 -+ exit $rc - ;; - esac - -@@ -1114,6 +1161,12 @@ fi - - case $OP in - start) Filesystem_start -+ rc=$? -+ if [ $rc -eq $OCF_SUCCESS ] -+ then -+ rmon_notify "enabled" 300 -+ fi -+ exit $rc - ;; - notify) Filesystem_notify - ;; ---- a/heartbeat/LVM -+++ b/heartbeat/LVM -@@ -22,6 +22,7 @@ - # - # OCF parameters are as below: - # OCF_RESKEY_volgrpname -+# OCF_RESKEY_rmon_rsc_name - # - ####################################################################### - # Initialization: -@@ -311,6 +312,35 @@ then - exit $OCF_ERR_CONFIGURED - fi - -+RMON_NOTIFY="/usr/local/bin/rmon_resource_notify" -+ -+rmon_notify() { -+ local RSC_STATE=$1 TIMEOUT=$2 -+ -+ if [ -z "OCF_RESKEY_rmon_rsc_name" ] -+ then -+ ocf_log err "No RMON resource name given for $OCF_RESKEY_volgrpname" -+ return -+ fi -+ -+ if [[ -x $RMON_NOTIFY ]] -+ then -+ $RMON_NOTIFY --resource-name $OCF_RESKEY_rmon_rsc_name \ -+ --resource-state $RSC_STATE \ -+ --resource-type lvg \ -+ --volume-group $OCF_RESKEY_volgrpname \ -+ --timeout $TIMEOUT \ -+ >/dev/null 2>&1 -+ else -+ ocf_log err "$RMON_NOTIFY not available, failed to execute: \ -+$RMON_NOTIFY --resource-name $OCF_RESKEY_rmon_rsc_name \ -+--resource-state $RSC_STATE --resource-type lvg \ -+--volume-group $OCF_RESKEY_volgrpname \ -+--timeout $TIMEOUT" -+ fi -+} -+ -+ - # Get the LVM version number, for this to work we assume(thanks to panjiam): - # - # LVM1 outputs like this -@@ -345,16 +375,37 @@ OP_METHOD=$1 - case "$1" in - - start) LVM_start $VOLUME -- exit $?;; -+ rc=$? -+ if [ $rc -eq $OCF_SUCCESS ] -+ then -+ rmon_notify "enabled" 300 -+ fi -+ exit $rc;; - - stop) LVM_stop $VOLUME -- exit $?;; -+ rc=$? -+ rmon_notify "disabled" 300 -+ exit $rc;; - - status) LVM_status $VOLUME $1 -- exit $?;; -+ rc=$? -+ if [ $rc -eq $OCF_SUCCESS ] -+ then -+ rmon_notify "enabled" 300 -+ else -+ rmon_notify "disabled" 300 -+ fi -+ exit $rc;; - - monitor) LVM_monitor $VOLUME -- exit $?;; -+ rc=$? -+ if [ $rc -eq $OCF_SUCCESS ] -+ then -+ rmon_notify "enabled" 300 -+ else -+ rmon_notify "disabled" 300 -+ fi -+ exit $rc;; - - validate-all) LVM_validate_all - ;; diff --git a/base/cluster-resource-agents/cluster-resource-agents/ipaddr2_add_if_type.patch b/base/cluster-resource-agents/cluster-resource-agents/ipaddr2_add_if_type.patch deleted file mode 100644 index 127c4bf24..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/ipaddr2_add_if_type.patch +++ /dev/null @@ -1,37 +0,0 @@ ---- - heartbeat/IPaddr2 | 10 +++++++++- - 1 file changed, 9 insertions(+), 1 deletion(-) - ---- a/heartbeat/IPaddr2 -+++ b/heartbeat/IPaddr2 -@@ -13,6 +13,7 @@ - # Copyright (c) 2003 Tuomo Soini - # Copyright (c) 2004-2006 SUSE LINUX AG, Lars Marowsky-BrĂ©e - # All Rights Reserved. -+# Copyright (c) 2014 Wind River Systems, Inc. All rights reserved. - # - # This program is free software; you can redistribute it and/or modify - # it under the terms of version 2 of the GNU General Public License as -@@ -50,6 +51,7 @@ - # OCF_RESKEY_nic - # OCF_RESKEY_cidr_netmask - # OCF_RESKEY_iflabel -+# OCF_RESKEY_if_type - # OCF_RESKEY_mac - # OCF_RESKEY_clusterip_hash - # OCF_RESKEY_arp_interval -@@ -314,7 +316,13 @@ ip_init() { - - BASEIP="$OCF_RESKEY_ip" - BRDCAST="$OCF_RESKEY_broadcast" -- NIC="$OCF_RESKEY_nic" -+ IFTYPE="$OCF_RESKEY_if_type" -+ if [ -n "${IFTYPE}" ] -+ then -+ NIC=`grep ${IFTYPE}= /etc/platform/platform.conf | cut -f2 -d '='` -+ else -+ NIC="$OCF_RESKEY_nic" -+ fi - # Note: We had a version out there for a while which used - # netmask instead of cidr_netmask. Don't remove this aliasing code! - if diff --git a/base/cluster-resource-agents/cluster-resource-agents/ipaddr2_check_if_state.patch b/base/cluster-resource-agents/cluster-resource-agents/ipaddr2_check_if_state.patch deleted file mode 100644 index 19e5f184c..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/ipaddr2_check_if_state.patch +++ /dev/null @@ -1,48 +0,0 @@ ---- - heartbeat/IPaddr2 | 21 ++++++++++++++++++--- - 1 file changed, 18 insertions(+), 3 deletions(-) - ---- a/heartbeat/IPaddr2 -+++ b/heartbeat/IPaddr2 -@@ -661,7 +661,12 @@ ip_start() { - local ip_status=`ip_served` - - if [ "$ip_status" = "ok" ]; then -- exit $OCF_SUCCESS -+ if [ -n "`ip link show $NIC | grep \"state UP\"`" ] -+ then -+ exit $OCF_SUCCESS -+ else -+ exit $OCF_ERR_GENERIC -+ fi - fi - - if [ -n "$IP_CIP" ] && [ $ip_status = "no" ] || [ $ip_status = "partial2" ]; then -@@ -714,7 +719,12 @@ ip_start() { - fi - ;; - esac -- exit $OCF_SUCCESS -+ if [ -n "`ip link show $NIC | grep \"state UP\"`" ] -+ then -+ exit $OCF_SUCCESS -+ else -+ exit $OCF_ERR_GENERIC -+ fi - } - - ip_stop() { -@@ -788,7 +798,12 @@ ip_monitor() { - local ip_status=`ip_served` - case $ip_status in - ok) -- return $OCF_SUCCESS -+ if [ -n "`ip link show $NIC | grep \"state UP\"`" ] -+ then -+ return $OCF_SUCCESS -+ else -+ return $OCF_NOT_RUNNING -+ fi - ;; - partial|no|partial2) - exit $OCF_NOT_RUNNING diff --git a/base/cluster-resource-agents/cluster-resource-agents/lvm_vg_activation.patch b/base/cluster-resource-agents/cluster-resource-agents/lvm_vg_activation.patch deleted file mode 100644 index a8b308e98..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/lvm_vg_activation.patch +++ /dev/null @@ -1,155 +0,0 @@ -commit 69217b67c0d018f129c7cbf526aebf0b236be701 -Author: Chris Friesen -Date: Thu Sep 17 15:26:16 2015 -0400 - - CGCS-2553/CGTS-2534: tweak LVM success criteria - - It turns out that activating an LVM LV which has a snapshot (or activating - the snapshot) will take an amount of time that is proportional to the - delta between the snapshot and the original volume. - - Because of this it's possible that running "vgchange" could take a long - time, since it also activates the LVs. - - If this happens, rather than timeout the whole script we want to log which - LVs/snapshots havn't yet been activated, and then just continue on. - Accordingly, we want to set the internal timeout in the "start" operation - to something less than the timeout for the "start" action. - - There will be corresponding changes in cinder to properly handle this case. - -diff --git a/heartbeat/LVM b/heartbeat/LVM -index bd1a47a..24b0244 100755 ---- a/heartbeat/LVM -+++ b/heartbeat/LVM -@@ -186,6 +186,81 @@ LVM_monitor() { - } - - # -+# Activate one volume explicitly. -+# -+activate_volume() { -+ ocf_run lvchange $1 /dev/${2}/$3 -+ if [ $? -eq 0 ] ; then -+ ocf_log info "Succesfully activated $LV." -+ else -+ ocf_log err "Problem activating $LV." -+ fi -+} -+ -+# -+# Kick off parallel activation of all volumes -+# -+activate_all_volumes() { -+ VG=$1 -+ shift -+ lvchange_args="$*" -+ -+ # Get the list of volumes, without the first line which is column headings. -+ VOLS=`lvs $VG |tail -n +2` -+ -+ while read -r LINE; do -+ # Convert the line into an array. -+ LINE_ARRAY=($LINE) -+ -+ # First array element is the volume/snapshot name. -+ LV=${LINE_ARRAY[0]} -+ -+ # Third array element is the attributes. -+ ATTR=${LINE_ARRAY[2]} -+ -+ # Fifth character in the attributes is "a" if it's active. -+ ACTIVE=${ATTR:4:1} -+ if [ "$ACTIVE" == "a" ]; then -+ ocf_log info "$LV is already active." -+ continue -+ fi -+ -+ SNAPSHOT_ORIGIN=${LINE_ARRAY[4]} -+ if [ "$SNAPSHOT_ORIGIN" != "" ] ; then -+ # If this is a snapshot, don't activate it. -+ continue -+ fi -+ -+ ( activate_volume "$*" $VG $LV ) & -+ done <<< "$VOLS" -+} -+ -+# -+# Scan for inactive volumes and log any that are found. -+# -+log_inactive_volumes() { -+ # Get the list of volumes, without the first line which is column headings. -+ VOLS=`lvs $1 |tail -n +2` -+ -+ while read -r LINE; do -+ # Convert the line into an array. -+ LINE_ARRAY=($LINE) -+ -+ # First array element is the volume/snapshot name. -+ LV=${LINE_ARRAY[0]} -+ -+ # Third array element is the attributes. -+ ATTR=${LINE_ARRAY[2]} -+ -+ # Fifth character in the attributes is "a" if it's active. -+ ACTIVE=${ATTR:4:1} -+ if [ "$ACTIVE" != "a" ]; then -+ ocf_log err "Volume $LV is not active after expiry of timeout." -+ fi -+ done <<< "$VOLS" -+} -+ -+# - # Enable LVM volume - # - LVM_start() { -@@ -218,7 +293,47 @@ LVM_start() { - vgchange_options="$vgchange_options --monitor y" - fi - -- ocf_run vgchange $vgchange_options $1 || return $OCF_ERR_GENERIC -+ # Kick off activation of all volumes. If it doesn't complete within -+ # the timeout period, then we'll log the not-yet-activated volumes and -+ # continue on. -+ (ocf_run vgchange $vgchange_options $1) & PID=$! -+ -+ # Check every second for up to TIMEOUT seconds whether the vgchange has -+ # completed. -+ TIMEOUT=300 -+ TIMED_OUT=true -+ SECONDS=0; -+ PARALLEL_ACTIVATE_DELAY=10 -+ PARALLEL_ACTIVATE_DONE=false -+ while [ $SECONDS -lt $TIMEOUT ] ; do -+ kill -0 $PID &> /dev/null -+ if [ $? -eq 1 ] ; then -+ # process with pid of $PID doesn't exist, vgchange command completed -+ TIMED_OUT=false -+ break -+ fi -+ if [ $SECONDS -ge $PARALLEL_ACTIVATE_DELAY ] && \ -+ [ "$PARALLEL_ACTIVATE_DONE" != true ] && \ -+ [ "$1" == "cinder-volumes" ] ; then -+ # This will kick off parallel activation of all LVs in the VG. -+ # The delay is to ensure the VG is activated first. -+ PARALLEL_ACTIVATE_DONE=true -+ ocf_log info Explicitly activating all volumes in $1 with: $vgchange_options -+ activate_all_volumes $1 $vgchange_options -+ fi -+ sleep 1 -+ done -+ -+ if [ "$TIMED_OUT" = true ] ; then -+ ocf_log err "Timed out running ocf_run vgchange $vgchange_options $1" -+ log_inactive_volumes $1 -+ else -+ # Child process completed, get its status. -+ wait $PID -+ if [ $? -ne 0 ] ; then -+ return $OCF_ERR_GENERIC -+ fi -+ fi - - if LVM_status $1; then - : OK Volume $1 activated just fine! diff --git a/base/cluster-resource-agents/cluster-resource-agents/new_ocf_return_codes.patch b/base/cluster-resource-agents/cluster-resource-agents/new_ocf_return_codes.patch deleted file mode 100644 index 18ded3bea..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/new_ocf_return_codes.patch +++ /dev/null @@ -1,52 +0,0 @@ ---- - heartbeat/ocf-returncodes | 35 +++++++++++++++++++++++++++++++++++ - 1 file changed, 35 insertions(+) - ---- a/heartbeat/ocf-returncodes -+++ b/heartbeat/ocf-returncodes -@@ -5,6 +5,7 @@ - # Copyright (c) 2004 SUSE LINUX AG, Andrew Beekhof - # All Rights Reserved. - # -+# Copyright (c) 2014 Wind River Systems, Inc. All rights reserved. - # - # This library is free software; you can redistribute it and/or - # modify it under the terms of the GNU Lesser General Public -@@ -53,3 +54,37 @@ OCF_NOT_RUNNING=7 - # - OCF_RUNNING_MASTER=8 - OCF_FAILED_MASTER=9 -+ -+# Non-standard values particular to Wind River deployments. -+# -+# OCF does not include the concept of data sync states for master/slave -+# resources. -+# -+# OCF_DATA_INCONSISTENT: -+# The resource's data is not useable. -+# -+# OCF_DATA_OUTDATED: -+# The resource's data is consistent, but a peer with more recent data -+# has been seen. -+# -+# OCF_DATA_CONSISTENT: -+# The resource's data is consistent, but it is unsure that this is the -+# most recent data. -+# -+# OCF_SYNC: -+# The resource is syncing data. -+# -+# OCF_STANDALONE: -+# The resource is operating as standalone. No peer is available or -+# syncing is not possible (i.e. split brain fencing). -+# -+OCF_DATA_INCONSISTENT=32 -+OCF_DATA_OUTDATED=33 -+OCF_DATA_CONSISTENT=34 -+OCF_DATA_SYNC=35 -+OCF_DATA_STANDALONE=36 -+OCF_RUNNING_MASTER_DATA_INCONSISTENT=37 -+OCF_RUNNING_MASTER_DATA_OUTDATED=38 -+OCF_RUNNING_MASTER_DATA_CONSISTENT=39 -+OCF_RUNNING_MASTER_DATA_SYNC=40 -+OCF_RUNNING_MASTER_DATA_STANDALONE=41 diff --git a/base/cluster-resource-agents/cluster-resource-agents/ocf-shellfuncs_change_logtag.patch b/base/cluster-resource-agents/cluster-resource-agents/ocf-shellfuncs_change_logtag.patch deleted file mode 100644 index 53b79c033..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/ocf-shellfuncs_change_logtag.patch +++ /dev/null @@ -1,18 +0,0 @@ ---- - heartbeat/ocf-shellfuncs.in | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - ---- a/heartbeat/ocf-shellfuncs.in -+++ b/heartbeat/ocf-shellfuncs.in -@@ -174,9 +174,9 @@ hadate() { - set_logtag() { - if [ -z "$HA_LOGTAG" ]; then - if [ -n "$OCF_RESOURCE_INSTANCE" ]; then -- HA_LOGTAG="$__SCRIPT_NAME($OCF_RESOURCE_INSTANCE)[$$]" -+ HA_LOGTAG="OCF_$__SCRIPT_NAME($OCF_RESOURCE_INSTANCE)[$$]" - else -- HA_LOGTAG="$__SCRIPT_NAME[$$]" -+ HA_LOGTAG="OCF_$__SCRIPT_NAME[$$]" - fi - fi - } diff --git a/base/cluster-resource-agents/cluster-resource-agents/pgsql.patch b/base/cluster-resource-agents/cluster-resource-agents/pgsql.patch deleted file mode 100644 index 840c1a8de..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/pgsql.patch +++ /dev/null @@ -1,77 +0,0 @@ -Index: resource-agents-3.9.5/heartbeat/pgsql -=================================================================== ---- resource-agents-3.9.5.orig/heartbeat/pgsql -+++ resource-agents-3.9.5/heartbeat/pgsql -@@ -38,6 +38,7 @@ get_pgsql_param() { - OCF_RESKEY_pgctl_default=/usr/bin/pg_ctl - OCF_RESKEY_psql_default=/usr/bin/psql - OCF_RESKEY_pgdata_default=/var/lib/pgsql/data -+OCF_RESKEY_pgconf_default=/etc/postgresql - OCF_RESKEY_pgdba_default=postgres - OCF_RESKEY_pghost_default="" - OCF_RESKEY_pgport_default=5432 -@@ -67,10 +68,11 @@ OCF_RESKEY_stop_escalate_in_slave_defaul - : ${OCF_RESKEY_pgctl=${OCF_RESKEY_pgctl_default}} - : ${OCF_RESKEY_psql=${OCF_RESKEY_psql_default}} - : ${OCF_RESKEY_pgdata=${OCF_RESKEY_pgdata_default}} -+: ${OCF_RESKEY_pgconf=${OCF_RESKEY_pgconf_default}} - : ${OCF_RESKEY_pgdba=${OCF_RESKEY_pgdba_default}} - : ${OCF_RESKEY_pghost=${OCF_RESKEY_pghost_default}} - : ${OCF_RESKEY_pgport=${OCF_RESKEY_pgport_default}} --: ${OCF_RESKEY_config=${OCF_RESKEY_pgdata}/postgresql.conf} -+: ${OCF_RESKEY_config=${OCF_RESKEY_pgconf}/postgresql.conf} - : ${OCF_RESKEY_start_opt=${OCF_RESKEY_start_opt_default}} - : ${OCF_RESKEY_pgdb=${OCF_RESKEY_pgdb_default}} - : ${OCF_RESKEY_logfile=${OCF_RESKEY_logfile_default}} -@@ -166,6 +168,14 @@ Path to PostgreSQL data directory. - - - -+ -+ -+Path to PostgreSQL config directory. -+ -+pgconf -+ -+ -+ - - - User that owns PostgreSQL. -@@ -220,7 +230,7 @@ SQL script that will be used for monitor - Path to the PostgreSQL configuration file for the instance. - - Configuration file -- -+ - - - -@@ -475,6 +485,12 @@ pgsql_real_start() { - local postgres_options - local rc - -+ # WRS: Create an unversioned symlink under /var/run so SM can easily -+ # find the PID file. -+ if [ ! -h $PIDFILE_SYMLINK ]; then -+ /bin/ln -s $PIDFILE $PIDFILE_SYMLINK -+ fi -+ - if pgsql_status; then - ocf_log info "PostgreSQL is already running. PID=`cat $PIDFILE`" - if is_replication; then -@@ -1717,12 +1733,12 @@ then - exit $OCF_ERR_GENERIC - fi - -- - PIDFILE=${OCF_RESKEY_pgdata}/postmaster.pid -+PIDFILE_SYMLINK=/var/run/postmaster.pid - BACKUPLABEL=${OCF_RESKEY_pgdata}/backup_label - RESOURCE_NAME=`echo $OCF_RESOURCE_INSTANCE | cut -d ":" -f 1` - PGSQL_WAL_RECEIVER_STATUS_ATTR="${RESOURCE_NAME}-receiver-status" --RECOVERY_CONF=${OCF_RESKEY_pgdata}/recovery.conf -+RECOVERY_CONF=${OCF_RESKEY_pgconf}/recovery.conf - NODENAME=`uname -n | tr '[A-Z]' '[a-z]'` - - if is_replication; then diff --git a/base/cluster-resource-agents/cluster-resource-agents/umount-in-namespace.patch b/base/cluster-resource-agents/cluster-resource-agents/umount-in-namespace.patch deleted file mode 100644 index 12affb43a..000000000 --- a/base/cluster-resource-agents/cluster-resource-agents/umount-in-namespace.patch +++ /dev/null @@ -1,17 +0,0 @@ ---- - heartbeat/Filesystem | 4 ++++ - 1 file changed, 4 insertions(+) - ---- a/heartbeat/Filesystem -+++ b/heartbeat/Filesystem -@@ -727,6 +727,10 @@ signal_processes() { - } - try_umount() { - local SUB=$1 -+ -+ # We need to ensure we umount in namespaces, too -+ /usr/sbin/umount-in-namespace $SUB -+ - $UMOUNT $umount_force $SUB - list_mounts | grep -q " $SUB " >/dev/null 2>&1 || { - ocf_log info "unmounted $SUB successfully" diff --git a/base/dhcp/centos/files/dhcp-handle-default-classless-static-route.patch b/base/dhcp/centos/files/dhcp-handle-default-classless-static-route.patch deleted file mode 100644 index 6e8258c7d..000000000 --- a/base/dhcp/centos/files/dhcp-handle-default-classless-static-route.patch +++ /dev/null @@ -1,63 +0,0 @@ -Index: 4.2.5-P1-r3/dhclient-exit-hooks -=================================================================== ---- 4.2.5-P1-r3.orig/dhclient-exit-hooks -+++ 4.2.5-P1-r3/dhclient-exit-hooks -@@ -4,7 +4,7 @@ - # - # This file is sourced by /sbin/dhclient-script. - # --# dhcp option 121 is defined in RFC3442. The following is the link. -+# dhcp option 121 is defined in RFC3442. The following is the link. - # http://www.ietf.org/rfc/rfc3442.txt - # - # The code for this option is 121, and its minimum length is 5 bytes. -@@ -52,7 +52,7 @@ function add_routes() { - while [ $# -ne 0 ]; do - mask=$1 - shift -- -+ - # Parse the arguments into a CIDR net/mask string - if [ $mask -eq 32 ]; then - destination="-host $1.$2.$3.$4" -@@ -66,22 +66,31 @@ while [ $# -ne 0 ]; do - elif [ $mask -gt 8 ]; then - destination="-net $1.$2.0.0/$mask" - shift; shift -+ elif [ $mask -gt 0 ]; then -+ destination="-net $1.0.0.0/$mask" -+ shift - else -- destination="-net $1.0.0.0/$mask" -- shift -+ destination="default" - fi -- -+ - # Read the gateway - gateway="$1.$2.$3.$4" - shift; shift; shift; shift - -- # Add route into routing table -- route add $destination gw $gateway -- -- # Print it out if the route is added successfully -- if [ $? = 0 ]; then -- echo "Added route \"$destination gw $gateway\"" -+ if [ $gateway != "0.0.0.0" ]; then -+ # Add route into routing table -+ route add $destination gw $gateway -+ if [ $? = 0 ]; then -+ echo "Added route \"$destination gw $gateway\"" -+ fi -+ else -+ # Add onlink route into routing table -+ route add $destination $interface -+ if [ $? = 0 ]; then -+ echo "Added route \"$destination on $interface\"" -+ fi - fi -+ - done - } - diff --git a/base/dhcp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/dhcp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 0c7e019e7..fd0b4941a 100644 --- a/base/dhcp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/dhcp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 80ec3fbb502373b48c54dc075d75b1d13894093e Mon Sep 17 00:00:00 2001 +From 1eeae27ddc87dc61928b96baa63fe2ff767e35b0 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 15:25:05 -0400 -Subject: [PATCH 5/7] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/dhcp.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/dhcp.spec b/SPECS/dhcp.spec -index edc4113..29dfbcf 100644 +index 42409f6..70c7a6d 100644 --- a/SPECS/dhcp.spec +++ b/SPECS/dhcp.spec @@ -18,7 +18,7 @@ Summary: Dynamic host configuration protocol software Name: dhcp Version: 4.2.5 --Release: 58%{?dist} -+Release: 58.el7.centos%{?_tis_dist}.%{tis_patch_ver} +-Release: 68%{?dist}.1 ++Release: 68.el7.centos.1%{?_tis_dist}.%{tis_patch_ver} # NEVER CHANGE THE EPOCH on this package. The previous maintainer (prior to # dcantrell maintaining the package) made incorrect use of the epoch and # that's why it is at 12 now. It should have never been used, but it was. -- -1.9.1 +2.7.4 diff --git a/base/dhcp/centos/meta_patches/spec-include-TiS-patches.patch b/base/dhcp/centos/meta_patches/spec-include-TiS-patches.patch index 1b725d650..1c7f41e71 100644 --- a/base/dhcp/centos/meta_patches/spec-include-TiS-patches.patch +++ b/base/dhcp/centos/meta_patches/spec-include-TiS-patches.patch @@ -1,14 +1,14 @@ -From 68081498cde44d9b5320e795229865e46a1552ac Mon Sep 17 00:00:00 2001 +From 7e7a9f1bce5884da1e57d5bdc4f5215b7231924e Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 15:25:05 -0400 -Subject: [PATCH 1/7] WRS: spec-include-TiS-patches.patch +Subject: [PATCH] WRS: spec-include-TiS-patches.patch --- SPECS/dhcp.spec | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/SPECS/dhcp.spec b/SPECS/dhcp.spec -index 9647a5a..78ee924 100644 +index 14da097..904e3ad 100644 --- a/SPECS/dhcp.spec +++ b/SPECS/dhcp.spec @@ -39,6 +39,10 @@ Source8: dhcrelay.service @@ -22,9 +22,9 @@ index 9647a5a..78ee924 100644 Patch0: dhcp-4.2.0-errwarn-message.patch Patch1: dhcp-4.2.4-dhclient-options.patch -@@ -99,6 +103,14 @@ Patch62: dhcp-max-fd-value.patch - Patch63: dhcp-4.2.5-rh1355827.patch - Patch64: dhcp-4.2.5-centos-branding.patch +@@ -111,6 +115,14 @@ Patch70: dhcp-4.2.5-reference_count_overflow.patch + Patch71: dhcp-4.2.5-centos-branding.patch + +# WRS +Patch101: support-disable-nsupdate.patch @@ -37,9 +37,9 @@ index 9647a5a..78ee924 100644 BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool -@@ -409,6 +421,14 @@ rm -rf includes/isc-dhcp - %patch63 -p1 - %patch64 -p1 +@@ -439,6 +451,14 @@ rm -rf includes/isc-dhcp + %patch70 -p1 -b .reference_overflow + %patch71 -p1 +# WRS +%patch101 -p1 @@ -52,7 +52,7 @@ index 9647a5a..78ee924 100644 # Update paths in all man pages for page in client/dhclient.conf.5 client/dhclient.leases.5 \ client/dhclient-script.8 client/dhclient.8 ; do -@@ -552,6 +572,10 @@ EOF +@@ -582,6 +602,10 @@ EOF # Don't package libtool *.la files find ${RPM_BUILD_ROOT}/%{_libdir} -name '*.la' -exec '/bin/rm' '-f' '{}' ';'; @@ -63,7 +63,7 @@ index 9647a5a..78ee924 100644 %pre # /usr/share/doc/setup/uidgid %global gid_uid 177 -@@ -667,6 +691,10 @@ done +@@ -697,6 +721,10 @@ done %attr(0644,root,root) %{_mandir}/man8/dhclient.8.gz %attr(0644,root,root) %{_mandir}/man8/dhclient-script.8.gz @@ -75,5 +75,5 @@ index 9647a5a..78ee924 100644 %doc LICENSE README RELNOTES doc/References.txt %attr(0644,root,root) %{_mandir}/man5/dhcp-options.5.gz -- -1.9.1 +2.7.4 diff --git a/base/dhcp/centos/srpm_path b/base/dhcp/centos/srpm_path index 46f6ca503..d40f94d20 100644 --- a/base/dhcp/centos/srpm_path +++ b/base/dhcp/centos/srpm_path @@ -1 +1 @@ -mirror:Source/dhcp-4.2.5-58.el7.centos.src.rpm +mirror:Source/dhcp-4.2.5-68.el7.centos.1.src.rpm diff --git a/base/dnsmasq/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/dnsmasq/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index e90daa0d0..d6d5e1701 100644 --- a/base/dnsmasq/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/dnsmasq/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -8,18 +8,18 @@ Subject: [PATCH] update package patching 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/dnsmasq.spec b/SPECS/dnsmasq.spec -index b3f178f..a583cf2 100644 +index 5cf440a..dd74293 100644 --- a/SPECS/dnsmasq.spec +++ b/SPECS/dnsmasq.spec @@ -13,7 +13,7 @@ Name: dnsmasq Version: 2.76 --Release: 2%{?extraversion}%{?dist}.2 -+Release: 2.el7_4.2%{?_tis_dist}.%{tis_patch_ver} +-Release: 5%{?extraversion}%{?dist} ++Release: 5.el7%{?_tis_dist}.%{tis_patch_ver} Summary: A lightweight DHCP/caching DNS server Group: System Environment/Daemons -- -1.8.3.1 +2.7.4 diff --git a/base/dnsmasq/centos/meta_patches/dnsmasq-spec-add-init-script.patch b/base/dnsmasq/centos/meta_patches/dnsmasq-spec-add-init-script.patch index bec68a3dd..4e8da7663 100644 --- a/base/dnsmasq/centos/meta_patches/dnsmasq-spec-add-init-script.patch +++ b/base/dnsmasq/centos/meta_patches/dnsmasq-spec-add-init-script.patch @@ -3,14 +3,12 @@ From: Scott Little Date: Mon, 2 Oct 2017 17:27:13 -0400 Subject: [PATCH 2/5] WRS: dnsmasq-spec-add-init-script.patch -Conflicts: - SPECS/dnsmasq.spec --- SPECS/dnsmasq.spec | 26 ++++++++++++++++---------- 1 file changed, 16 insertions(+), 10 deletions(-) diff --git a/SPECS/dnsmasq.spec b/SPECS/dnsmasq.spec -index 63ff820..f8aace1 100644 +index 7f370d1..0641503 100644 --- a/SPECS/dnsmasq.spec +++ b/SPECS/dnsmasq.spec @@ -21,6 +21,7 @@ License: GPLv2 or GPLv3 @@ -21,7 +19,7 @@ index 63ff820..f8aace1 100644 # upstream git: git://thekelleys.org.uk/dnsmasq.git # https://bugzilla.redhat.com/show_bug.cgi?id=1367772 -@@ -140,22 +141,26 @@ mkdir -p %{buildroot}%{_unitdir} +@@ -168,22 +169,26 @@ mkdir -p %{buildroot}%{_unitdir} install -m644 %{SOURCE1} %{buildroot}%{_unitdir} rm -rf %{buildroot}%{_initrddir} @@ -58,7 +56,7 @@ index 63ff820..f8aace1 100644 %files %defattr(-,root,root,-) -@@ -167,6 +172,7 @@ rm -rf $RPM_BUILD_ROOT +@@ -195,6 +200,7 @@ rm -rf $RPM_BUILD_ROOT %{_unitdir}/%{name}.service %{_sbindir}/dnsmasq %{_mandir}/man8/dnsmasq* @@ -67,5 +65,5 @@ index 63ff820..f8aace1 100644 %files utils %{_bindir}/dhcp_* -- -1.9.1 +2.7.4 diff --git a/base/dnsmasq/centos/meta_patches/patch-tftp-to-close-sockets-immediately.patch b/base/dnsmasq/centos/meta_patches/patch-tftp-to-close-sockets-immediately.patch index f0ed9eb59..3f3524bb4 100644 --- a/base/dnsmasq/centos/meta_patches/patch-tftp-to-close-sockets-immediately.patch +++ b/base/dnsmasq/centos/meta_patches/patch-tftp-to-close-sockets-immediately.patch @@ -3,25 +3,23 @@ From: Scott Little Date: Mon, 2 Oct 2017 17:27:13 -0400 Subject: [PATCH 3/5] WRS: patch-tftp-to-close-sockets-immediately.patch -Conflicts: - SPECS/dnsmasq.spec --- SPECS/dnsmasq.spec | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SPECS/dnsmasq.spec b/SPECS/dnsmasq.spec -index f8aace1..a3a9e08 100644 +index 0641503..5cf440a 100644 --- a/SPECS/dnsmasq.spec +++ b/SPECS/dnsmasq.spec -@@ -42,6 +42,7 @@ Patch8: dnsmasq-2.76-coverity.patch +@@ -58,6 +58,7 @@ Patch19: dnsmasq-2.76-misc-cleanups.patch # WRS patches Patch30: dnsmasq-update-ipv6-leases-from-config.patch +Patch31: close-tftp-sockets-immediately.patch - BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) -@@ -88,6 +89,7 @@ query/remove a DHCP server's leases. + BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) +@@ -116,6 +117,7 @@ query/remove a DHCP server's leases. # WRS patches %patch30 -p1 @@ -30,5 +28,5 @@ index f8aace1..a3a9e08 100644 # use /var/lib/dnsmasq instead of /var/lib/misc for file in dnsmasq.conf.example man/dnsmasq.8 man/es/dnsmasq.8 src/config.h; do -- -1.9.1 +2.7.4 diff --git a/base/dnsmasq/centos/meta_patches/spec-include-TiS-patch.patch b/base/dnsmasq/centos/meta_patches/spec-include-TiS-patch.patch index 7073afc9a..678fc8efb 100644 --- a/base/dnsmasq/centos/meta_patches/spec-include-TiS-patch.patch +++ b/base/dnsmasq/centos/meta_patches/spec-include-TiS-patch.patch @@ -3,29 +3,28 @@ From: Scott Little Date: Mon, 2 Oct 2017 17:27:13 -0400 Subject: [PATCH 1/5] WRS: spec-include-TiS-patch.patch -Conflicts: - SPECS/dnsmasq.spec --- - SPECS/dnsmasq.spec | 10 ++++++++-- - 1 file changed, 8 insertions(+), 2 deletions(-) + SPECS/dnsmasq.spec | 11 +++++++++-- + 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/SPECS/dnsmasq.spec b/SPECS/dnsmasq.spec -index 8a6450a..63ff820 100644 +index b312ef3..7f370d1 100644 --- a/SPECS/dnsmasq.spec +++ b/SPECS/dnsmasq.spec -@@ -39,6 +39,9 @@ Patch6: dnsmasq-2.76-label-warning.patch - Patch7: dnsmasq-2.76-label-man.patch - Patch8: dnsmasq-2.76-coverity.patch +@@ -55,6 +55,10 @@ Patch17: dnsmasq-2.76-gita3303e196.patch + Patch18: dnsmasq-2.76-underflow.patch + Patch19: dnsmasq-2.76-misc-cleanups.patch +# WRS patches +Patch30: dnsmasq-update-ipv6-leases-from-config.patch ++ + BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: dbus-devel -@@ -82,6 +85,9 @@ query/remove a DHCP server's leases. - %patch7 -p1 - %patch8 -p1 -b .coverity +@@ -109,6 +113,9 @@ query/remove a DHCP server's leases. + %patch18 -p1 -b .underflow + %patch19 -p1 -b .misc +# WRS patches +%patch30 -p1 @@ -33,7 +32,7 @@ index 8a6450a..63ff820 100644 # use /var/lib/dnsmasq instead of /var/lib/misc for file in dnsmasq.conf.example man/dnsmasq.8 man/es/dnsmasq.8 src/config.h; do sed -i 's|/var/lib/misc/dnsmasq.leases|/var/lib/dnsmasq/dnsmasq.leases|g' "$file" -@@ -154,8 +160,8 @@ rm -rf $RPM_BUILD_ROOT +@@ -181,8 +188,8 @@ rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root,-) %doc CHANGELOG COPYING COPYING-v3 FAQ doc.html setup.html dbus/DBus-interface @@ -45,5 +44,5 @@ index 8a6450a..63ff820 100644 %config(noreplace) %attr(644,root,root) %{_sysconfdir}/dbus-1/system.d/dnsmasq.conf %{_unitdir}/%{name}.service -- -1.9.1 +2.7.4 diff --git a/base/dnsmasq/centos/srpm_path b/base/dnsmasq/centos/srpm_path index afdf8db63..85130bd3f 100644 --- a/base/dnsmasq/centos/srpm_path +++ b/base/dnsmasq/centos/srpm_path @@ -1 +1 @@ -mirror:Source/dnsmasq-2.76-2.el7_4.2.src.rpm +mirror:Source/dnsmasq-2.76-5.el7.src.rpm diff --git a/base/haproxy/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/haproxy/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 2e71baa97..33eec60c0 100644 --- a/base/haproxy/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/haproxy/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 79f025b91d461a948ca6449eb25a11a6c89144b5 Mon Sep 17 00:00:00 2001 +From 55d52d8bc9f649b4871336aaffd87fb7d931eac8 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:12:36 -0400 -Subject: [PATCH 7/7] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/haproxy.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/haproxy.spec b/SPECS/haproxy.spec -index c1547ef..097aa79 100644 +index 0d6e19a..3bc75e1 100644 --- a/SPECS/haproxy.spec +++ b/SPECS/haproxy.spec @@ -8,7 +8,7 @@ Name: haproxy Version: 1.5.18 --Release: 6%{?dist} -+Release: 6.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 7%{?dist} ++Release: 7.el7%{?_tis_dist}.%{tis_patch_ver} Summary: TCP/HTTP proxy and load balancer for high availability environments Group: System Environment/Daemons -- -1.9.1 +2.7.4 diff --git a/base/haproxy/centos/srpm_path b/base/haproxy/centos/srpm_path index fb995db93..8bf806123 100644 --- a/base/haproxy/centos/srpm_path +++ b/base/haproxy/centos/srpm_path @@ -1 +1 @@ -mirror:Source/haproxy-1.5.18-6.el7.src.rpm +mirror:Source/haproxy-1.5.18-7.el7.src.rpm diff --git a/base/initscripts/centos/meta_patches/PATCH_ORDER b/base/initscripts/centos/meta_patches/PATCH_ORDER index db1bb2e48..c8393065d 100644 --- a/base/initscripts/centos/meta_patches/PATCH_ORDER +++ b/base/initscripts/centos/meta_patches/PATCH_ORDER @@ -10,7 +10,6 @@ run-ifdown-on-all-interfaces.patch spec-sysconfig-affirmative-check-for-link-carrier.patch spec-sysconfig-unsafe-usage-of-linkdelay-variable.patch fix-build-failures-due-to-unwanted-sgid.patch -add_build_require_on_systemd.patch ipv6-static-route-support.patch spec-ifup-eth-stop-waiting-if-link-is-up.patch spec-run-dhclient-as-daemon-for-ipv6.patch diff --git a/base/initscripts/centos/meta_patches/add_build_require_on_systemd.patch b/base/initscripts/centos/meta_patches/add_build_require_on_systemd.patch deleted file mode 100644 index 8a7ccab23..000000000 --- a/base/initscripts/centos/meta_patches/add_build_require_on_systemd.patch +++ /dev/null @@ -1,24 +0,0 @@ -From 075dd032f651d469e639eb1f25f3d5b7f5ff5485 Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Mon, 2 Oct 2017 14:49:27 -0400 -Subject: [PATCH 13/13] WRS: add_build_require_on_systemd.patch - ---- - SPECS/initscripts.spec | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/SPECS/initscripts.spec b/SPECS/initscripts.spec -index 09674a7..cdc282e 100644 ---- a/SPECS/initscripts.spec -+++ b/SPECS/initscripts.spec -@@ -41,6 +41,7 @@ Requires(pre): /usr/sbin/groupadd - Requires(post): /sbin/chkconfig, coreutils - Requires(preun): /sbin/chkconfig - BuildRequires: glib2-devel popt-devel gettext pkgconfig -+BuildRequires: systemd-devel - Provides: /sbin/service - - Patch4: support-interface-scriptlets.patch --- -1.9.1 - diff --git a/base/initscripts/centos/meta_patches/fix-build-failures-due-to-unwanted-sgid.patch b/base/initscripts/centos/meta_patches/fix-build-failures-due-to-unwanted-sgid.patch index 94978afbd..143a749d6 100644 --- a/base/initscripts/centos/meta_patches/fix-build-failures-due-to-unwanted-sgid.patch +++ b/base/initscripts/centos/meta_patches/fix-build-failures-due-to-unwanted-sgid.patch @@ -1,25 +1,17 @@ -From 8351b22a5a517ebe779d4bf4904694bd1bd85890 Mon Sep 17 00:00:00 2001 +From 2c096cfd84fea55fd1f2df466d5635c06daab2a2 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 14:49:27 -0400 -Subject: [PATCH 12/13] WRS: fix-build-failures-due-to-unwanted-sgid.patch +Subject: [PATCH] WRS: fix-build-failures-due-to-unwanted-sgid.patch --- - SPECS/initscripts.spec | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) + SPECS/initscripts.spec | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/initscripts.spec b/SPECS/initscripts.spec -index f2d0271..09674a7 100644 +index 938e9bb..e60c826 100644 --- a/SPECS/initscripts.spec +++ b/SPECS/initscripts.spec -@@ -197,6 +197,7 @@ rm -rf $RPM_BUILD_ROOT - %dir /etc/rwtab.d - %dir /etc/statetab.d - /usr/lib/systemd/rhel-* -+%dir %attr(0755,root,root) /usr/lib/systemd/system/*wants - /usr/lib/systemd/system/* - /etc/inittab - /etc/rc[0-9].d -@@ -237,7 +238,7 @@ rm -rf $RPM_BUILD_ROOT +@@ -239,7 +239,7 @@ rm -rf $RPM_BUILD_ROOT %ghost %attr(0664,root,utmp) /var/run/utmp %ghost %attr(0644,root,root) /etc/sysconfig/kvm %ghost %verify(not md5 size mtime) %config(noreplace,missingok) /etc/crypttab @@ -29,5 +21,5 @@ index f2d0271..09674a7 100644 %dir /usr/libexec/initscripts %dir /usr/libexec/initscripts/legacy-actions -- -1.9.1 +2.7.4 diff --git a/base/initscripts/centos/meta_patches/spec-include-TiS-changes.patch b/base/initscripts/centos/meta_patches/spec-include-TiS-changes.patch index efb277d31..33559d905 100644 --- a/base/initscripts/centos/meta_patches/spec-include-TiS-changes.patch +++ b/base/initscripts/centos/meta_patches/spec-include-TiS-changes.patch @@ -1,7 +1,7 @@ -From 9caa7a0860a8adcf38047fb39b6e1577099104d6 Mon Sep 17 00:00:00 2001 +From 29d8980d8c67a302a27a3084f58657414578a2b9 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 14:49:27 -0400 -Subject: [PATCH 01/13] WRS: spec-include-TiS-changes.patch +Subject: [PATCH] WRS: spec-include-TiS-changes.patch Conflicts: SPECS/initscripts.spec @@ -10,7 +10,7 @@ Conflicts: 1 file changed, 15 insertions(+) diff --git a/SPECS/initscripts.spec b/SPECS/initscripts.spec -index 6b81095..7f93a30 100644 +index e96290a..665b576 100644 --- a/SPECS/initscripts.spec +++ b/SPECS/initscripts.spec @@ -7,6 +7,10 @@ Group: System Environment/Base @@ -24,8 +24,8 @@ index 6b81095..7f93a30 100644 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root Obsoletes: initscripts-legacy <= 9.39 Requires: /bin/awk, sed, coreutils -@@ -35,6 +39,10 @@ Requires(preun): /sbin/chkconfig - BuildRequires: glib2-devel popt-devel gettext pkgconfig +@@ -36,6 +40,10 @@ Requires(preun): /sbin/chkconfig + BuildRequires: glib2-devel popt-devel gettext pkgconfig systemd Provides: /sbin/service +Patch4: support-interface-scriptlets.patch @@ -35,7 +35,7 @@ index 6b81095..7f93a30 100644 %description The initscripts package contains basic system scripts used during a boot of the system. It also contains scripts which -@@ -54,6 +62,10 @@ Currently, this consists of various memory checking code. +@@ -55,6 +63,10 @@ Currently, this consists of various memory checking code. %prep %setup -q @@ -46,7 +46,7 @@ index 6b81095..7f93a30 100644 %build make -@@ -74,6 +86,9 @@ rm -f \ +@@ -75,6 +87,9 @@ rm -f \ touch $RPM_BUILD_ROOT/etc/crypttab chmod 600 $RPM_BUILD_ROOT/etc/crypttab @@ -57,5 +57,5 @@ index 6b81095..7f93a30 100644 /usr/sbin/groupadd -g 22 -r -f utmp -- -1.9.1 +2.7.4 diff --git a/base/initscripts/centos/patches/sysconfig-affirmative-check-for-link-carrier.patch b/base/initscripts/centos/patches/sysconfig-affirmative-check-for-link-carrier.patch index 6abdacd33..aff1428da 100644 --- a/base/initscripts/centos/patches/sysconfig-affirmative-check-for-link-carrier.patch +++ b/base/initscripts/centos/patches/sysconfig-affirmative-check-for-link-carrier.patch @@ -1,4 +1,4 @@ -From 974b70a23b6a6c579fc4d43efd42e42f26c27310 Mon Sep 17 00:00:00 2001 +From cd3e0b0fea9588c987db119cb6d7840ace399368 Mon Sep 17 00:00:00 2001 From: Allain Legacy Date: Thu, 17 Nov 2016 08:27:42 -0500 Subject: [PATCH] sysconfig: affirmative check for link carrier @@ -25,18 +25,18 @@ Signed-off-by: Allain Legacy 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sysconfig/network-scripts/network-functions b/sysconfig/network-scripts/network-functions -index 798f28a..affa8ba 100644 +index d08f618..13cf4de 100644 --- a/sysconfig/network-scripts/network-functions +++ b/sysconfig/network-scripts/network-functions -@@ -463,7 +463,7 @@ check_link_down () +@@ -473,7 +473,7 @@ check_link_down () delay=20 [ -n "$LINKDELAY" ] && delay=$(($LINKDELAY * 2)) while [ $timeout -le $delay ]; do - [ "$(cat /sys/class/net/$REALDEVICE/carrier 2>/dev/null)" != "0" ] && return 1 + [ "$(cat /sys/class/net/$REALDEVICE/carrier 2>/dev/null)" == "1" ] && return 1 - usleep 500000 + sleep 0.5 timeout=$((timeout+1)) done -- -1.9.1 +2.7.4 diff --git a/base/initscripts/centos/patches/sysconfig-unsafe-usage-of-linkdelay-variable.patch b/base/initscripts/centos/patches/sysconfig-unsafe-usage-of-linkdelay-variable.patch index 391803810..b7c7aebf2 100644 --- a/base/initscripts/centos/patches/sysconfig-unsafe-usage-of-linkdelay-variable.patch +++ b/base/initscripts/centos/patches/sysconfig-unsafe-usage-of-linkdelay-variable.patch @@ -1,4 +1,4 @@ -From d3d109136f6e01ec1d8291ff89f3e00ff64cab31 Mon Sep 17 00:00:00 2001 +From 9b12287d8dade60c012969db3ae56b36d1e50966 Mon Sep 17 00:00:00 2001 From: Allain Legacy Date: Thu, 17 Nov 2016 11:37:38 -0500 Subject: [PATCH] sysconfig: unsafe usage of linkdelay variable @@ -16,10 +16,10 @@ Signed-off-by: Allain Legacy 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sysconfig/network-scripts/network-functions b/sysconfig/network-scripts/network-functions -index affa8ba..a9821f6 100644 +index 13cf4de..4bcc48f 100644 --- a/sysconfig/network-scripts/network-functions +++ b/sysconfig/network-scripts/network-functions -@@ -461,7 +461,7 @@ check_link_down () +@@ -471,7 +471,7 @@ check_link_down () fi timeout=0 delay=20 @@ -27,7 +27,7 @@ index affa8ba..a9821f6 100644 + [[ $LINKDELAY =~ ^[0-9]+$ ]] && delay=$(($LINKDELAY * 2)) while [ $timeout -le $delay ]; do [ "$(cat /sys/class/net/$REALDEVICE/carrier 2>/dev/null)" == "1" ] && return 1 - usleep 500000 + sleep 0.5 -- -1.9.1 +2.7.4 diff --git a/base/initscripts/centos/srpm_path b/base/initscripts/centos/srpm_path index 4559f33fb..1b314d583 100644 --- a/base/initscripts/centos/srpm_path +++ b/base/initscripts/centos/srpm_path @@ -1 +1 @@ -mirror:Source/initscripts-9.49.39-1.el7.src.rpm +mirror:Source/initscripts-9.49.41-1.el7.src.rpm diff --git a/base/lighttpd/PKG-INFO b/base/lighttpd/PKG-INFO index 03c09d0c1..8f653085b 100644 --- a/base/lighttpd/PKG-INFO +++ b/base/lighttpd/PKG-INFO @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: lighttpd -Version: 1.4.39 +Version: 1.4.50 Summary: Lightning fast webserver with light system requirements Home-page: Author: diff --git a/base/lighttpd/centos/build_srpm.data b/base/lighttpd/centos/build_srpm.data index 6d94d3e28..3a9f62926 100755 --- a/base/lighttpd/centos/build_srpm.data +++ b/base/lighttpd/centos/build_srpm.data @@ -1,9 +1,2 @@ -COPY_LIST="lighttpd-1.4.35/index.html.lighttpd \ - lighttpd-1.4.35/lighttpd.conf \ - lighttpd-1.4.35/lighttpd.init \ - lighttpd-1.4.35/lighttpd-inc.conf \ - lighttpd-1.4.35/lighttpd.logrotate \ - lighttpd-1.4.35/lighttpd-csr.conf \ - lighttpd-1.4.35/check-content-length.patch \ - lighttpd-1.4.35/lighttpd-tpm-support.patch" +COPY_LIST="files/*" TIS_PATCH_VER=6 diff --git a/base/lighttpd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/lighttpd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 594e77520..ad2de7848 100644 --- a/base/lighttpd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/lighttpd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 4bea2840e8b22d904be29d24d501c25201e13c57 Mon Sep 17 00:00:00 2001 +From 1c4a8d83d96eab943d1cb7b4f0d9b7175e6858f1 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 20 Mar 2017 10:21:28 -0400 -Subject: [PATCH 3/4] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/lighttpd.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/lighttpd.spec b/SPECS/lighttpd.spec -index 71737ac..b795a3f 100644 +index 2f7b261..2553b27 100644 --- a/SPECS/lighttpd.spec +++ b/SPECS/lighttpd.spec @@ -45,7 +45,7 @@ Summary: Lightning fast webserver with light system requirements Name: lighttpd - Version: 1.4.45 + Version: 1.4.50 -Release: 1%{?dist} +Release: 1.el7%{?_tis_dist}.%{tis_patch_ver} License: BSD Group: System Environment/Daemons URL: http://www.lighttpd.net/ -- -1.8.3.1 +2.7.4 diff --git a/base/lighttpd/centos/meta_patches/meta_add_support_for_tpm.patch b/base/lighttpd/centos/meta_patches/meta_add_support_for_tpm.patch index ba7a90001..4c61dfca3 100644 --- a/base/lighttpd/centos/meta_patches/meta_add_support_for_tpm.patch +++ b/base/lighttpd/centos/meta_patches/meta_add_support_for_tpm.patch @@ -1,7 +1,7 @@ From 653e25505b1df7e7b3fd89e08729d6d9f9698d39 Mon Sep 17 00:00:00 2001 From: Kam Nasim Date: Tue, 28 Mar 2017 17:33:34 -0400 -Subject: [PATCH] dding support for TPM 2.0 +Subject: [PATCH] Adding support for TPM 2.0 --- SPECS/lighttpd.spec | 2 ++ diff --git a/base/lighttpd/centos/meta_patches/spec-check-content-length.patch b/base/lighttpd/centos/meta_patches/spec-check-content-length.patch index d5bc59a7e..2fb2fd5fd 100644 --- a/base/lighttpd/centos/meta_patches/spec-check-content-length.patch +++ b/base/lighttpd/centos/meta_patches/spec-check-content-length.patch @@ -1,7 +1,7 @@ -From c684477fa2b47bb3c00b0e501e817d088408bead Mon Sep 17 00:00:00 2001 +From 730a5321581e70790da4e94085698fd299072be5 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 20 Mar 2017 10:21:28 -0400 -Subject: [PATCH 4/4] WRS: spec-check-content-length.patch +Subject: [PATCH] WRS: spec-check-content-length.patch Conflicts: SPECS/lighttpd.spec @@ -10,13 +10,13 @@ Conflicts: 1 file changed, 8 insertions(+) diff --git a/SPECS/lighttpd.spec b/SPECS/lighttpd.spec -index b795a3f..9fd062a 100644 +index 2553b27..c27f78f 100644 --- a/SPECS/lighttpd.spec +++ b/SPECS/lighttpd.spec -@@ -78,6 +78,10 @@ Patch3: lighttpd-1.4.39-socket.patch - #Patch6: changeset_r779c133c16f9af168b004dce7a2a64f16c1cb3a4.diff +@@ -79,6 +79,10 @@ Patch3: lighttpd-1.4.39-socket.patch #Patch7: lighttpd-1.4.42-bignum.patch #Patch8: lighttpd-1.4.43-mysql.patch + #Patch9: lighttpd-1.4.48-autoconf.patch + +# WRS Patches +Patch100: check-content-length.patch @@ -24,10 +24,10 @@ index b795a3f..9fd062a 100644 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root # For the target poweredby.png image (skip requirement + provide image on EL5) %if %{with systemlogos} -@@ -179,6 +183,10 @@ Authentication module for lighttpd that uses GSSAPI - #%patch6 -p1 -b .http_proxy +@@ -182,6 +186,10 @@ Authentication module for lighttpd that uses GSSAPI #%patch7 -p0 -b .bignum #%patch8 -p0 -b .mysql + #%patch9 -p0 -b .autoconf + +# WRS Patches +%patch100 -p1 -b .content_length @@ -36,5 +36,5 @@ index b795a3f..9fd062a 100644 #install -p -m 0644 %{SOURCE101} mod_geoip.txt -- -1.8.3.1 +2.7.4 diff --git a/base/lighttpd/centos/srpm_path b/base/lighttpd/centos/srpm_path index 898dda45a..8432c2437 100644 --- a/base/lighttpd/centos/srpm_path +++ b/base/lighttpd/centos/srpm_path @@ -1 +1 @@ -mirror:Source/lighttpd-1.4.45-1.el7.src.rpm +mirror:Source/lighttpd-1.4.50-1.el7.src.rpm diff --git a/base/lighttpd/lighttpd-1.4.35/check-content-length.patch b/base/lighttpd/files/check-content-length.patch similarity index 58% rename from base/lighttpd/lighttpd-1.4.35/check-content-length.patch rename to base/lighttpd/files/check-content-length.patch index 330958e12..a01708993 100644 --- a/base/lighttpd/lighttpd-1.4.35/check-content-length.patch +++ b/base/lighttpd/files/check-content-length.patch @@ -1,24 +1,27 @@ -From b9410d967faf627d72fc5496a4c2e7aab879b7aa Mon Sep 17 00:00:00 2001 +From 65107586a55c594c44b0a97a2d6756f6a0f0a5ca Mon Sep 17 00:00:00 2001 From: Giao Le -Date: Wed, 19 Oct 2016 15:06:17 -0400 -Subject: [PATCH 1/1] check +Date: Mon, 27 Aug 2018 19:41:36 +0800 +Subject: [PATCH] check-length +Signed-off-by: zhipengl --- - src/request.c | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ - 1 file changed, 49 insertions(+) + src/request.c | 47 ++++++++++++++++++++++++++++++++++++++++++++++- + 1 file changed, 46 insertions(+), 1 deletion(-) diff --git a/src/request.c b/src/request.c -index a2de944..857076c 100644 +index 213a87e..8c97f45 100644 --- a/src/request.c +++ b/src/request.c -@@ -12,6 +12,39 @@ - #include - #include +@@ -8,10 +8,39 @@ + #include "sock_addr.h" + #include +- +#include -+#include + #include + #include + #include +#include -+#include + +static size_t get_tempdirs_free_space(server *srv) +{ @@ -47,19 +50,10 @@ index a2de944..857076c 100644 + return (valid) ? total : SSIZE_MAX; +} + -+ + static int request_check_hostname(buffer *host) { enum { DOMAINLABEL, TOPLABEL } stage = TOPLABEL; - size_t i; -@@ -409,6 +442,7 @@ static int request_uri_is_valid_char(unsigned char c) { - return 1; - } - -+ - int http_request_parse(server *srv, connection *con) { - char *uri = NULL, *proto = NULL, *method = NULL, con_length_set; - int is_key = 1, key_len = 0, is_ws_after_key = 0, in_folding; -@@ -1294,6 +1328,21 @@ int http_request_parse(server *srv, connection *con) { +@@ -1287,6 +1316,22 @@ int http_request_parse(server *srv, connection *con) { return 0; } @@ -71,16 +65,17 @@ index a2de944..857076c 100644 + con->keep_alive = 0; + + log_error_write(srv, __FILE__, __LINE__, "ssosos", -+ "not enough free space in tempdirs:", -+ "length =", (off_t) con->request.content_length, -+ "free =", (off_t) disk_free, -+ "-> 413"); -+ return 0; -+ } -+ } ++ "not enough free space in tempdirs:", ++ "length =", (off_t) con->request.content_length, ++ "free =", (off_t) disk_free, ++ "-> 413"); ++ return 0; ++ } ++ } ++ break; default: break; -- -1.8.3.1 +2.7.4 diff --git a/base/lighttpd/lighttpd-1.4.35/index.html.lighttpd b/base/lighttpd/files/index.html.lighttpd similarity index 100% rename from base/lighttpd/lighttpd-1.4.35/index.html.lighttpd rename to base/lighttpd/files/index.html.lighttpd diff --git a/base/lighttpd/lighttpd-1.4.35/lighttpd-csr.conf b/base/lighttpd/files/lighttpd-csr.conf similarity index 100% rename from base/lighttpd/lighttpd-1.4.35/lighttpd-csr.conf rename to base/lighttpd/files/lighttpd-csr.conf diff --git a/base/lighttpd/lighttpd-1.4.35/lighttpd-inc.conf b/base/lighttpd/files/lighttpd-inc.conf similarity index 100% rename from base/lighttpd/lighttpd-1.4.35/lighttpd-inc.conf rename to base/lighttpd/files/lighttpd-inc.conf diff --git a/base/lighttpd/files/lighttpd-tpm-support.patch b/base/lighttpd/files/lighttpd-tpm-support.patch new file mode 100644 index 000000000..69d1450d2 --- /dev/null +++ b/base/lighttpd/files/lighttpd-tpm-support.patch @@ -0,0 +1,289 @@ +From c58d174a1d2872272bfa9d83c642591f04effcb1 Mon Sep 17 00:00:00 2001 +From: Kam Nasim +Date: Wed, 29 Mar 2017 21:56:41 -0400 +Subject: [PATCH] lighttpd tpm support + +--- + src/base.h | 24 ++++++++++++ + src/configfile.c | 6 ++- + src/mod_openssl.c | 113 +++++++++++++++++++++++++++++++++++++++++++++--------- + src/server.c | 17 +++++++- + 4 files changed, 139 insertions(+), 21 deletions(-) + +diff --git a/src/base.h b/src/base.h +index 2fe60b6..bddcd01 100644 +--- a/src/base.h ++++ b/src/base.h +@@ -15,6 +15,21 @@ + #include "sock_addr.h" + #include "etag.h" + ++#if defined HAVE_LIBSSL && defined HAVE_OPENSSL_SSL_H ++# define USE_OPENSSL ++# include ++# ifndef USE_OPENSSL_KERBEROS ++# ifndef OPENSSL_NO_KRB5 ++# define OPENSSL_NO_KRB5 ++# endif ++# endif ++# include ++# include ++# if ! defined OPENSSL_NO_TLSEXT && ! defined SSL_CTRL_SET_TLSEXT_HOSTNAME ++# define OPENSSL_NO_TLSEXT ++# endif ++#endif ++ + struct fdevents; /* declaration */ + struct stat_cache; /* declaration */ + +@@ -360,6 +375,13 @@ typedef struct { + unsigned short high_precision_timestamps; + time_t loadts; + double loadavg[3]; ++#ifdef USE_OPENSSL ++ // TPM engine and object configuration ++ buffer *tpm_object; ++ buffer *tpm_engine; ++ ENGINE *tpm_engine_ref; ++ EVP_PKEY *tpm_key; ++#endif + buffer *syslog_facility; + } server_config; + +@@ -400,6 +422,8 @@ struct server { + int con_written; + int con_closed; + ++ int tpm_is_init; // has TPM been initialized already ++ + int max_fds; /* max possible fds */ + int cur_fds; /* currently used fds */ + int want_fds; /* waiting fds */ +diff --git a/src/configfile.c b/src/configfile.c +index c3b0f16..dca2a29 100644 +--- a/src/configfile.c ++++ b/src/configfile.c +@@ -276,8 +276,10 @@ static int config_insert(server *srv) { + { "server.syslog-facility", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_SERVER }, /* 80 */ + { "server.socket-perms", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_CONNECTION }, /* 81 */ + { "server.http-parseopts", NULL, T_CONFIG_ARRAY, T_CONFIG_SCOPE_SERVER }, /* 82 */ ++ { "server.tpm-object", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_SERVER }, /* 83 */ ++ { "server.tpm-engine", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_SERVER }, /* 84 */ + +- { NULL, NULL, T_CONFIG_UNSET, T_CONFIG_SCOPE_UNSET } ++ { NULL, NULL, T_CONFIG_UNSET, T_CONFIG_SCOPE_UNSET } + }; + + /* all T_CONFIG_SCOPE_SERVER options */ +@@ -318,6 +320,8 @@ static int config_insert(server *srv) { + cv[80].destination = srv->srvconf.syslog_facility; + http_parseopts = array_init(); + cv[82].destination = http_parseopts; ++ cv[83].destination = srv->srvconf.tpm_object; ++ cv[84].destination = srv->srvconf.tpm_engine; + + srv->config_storage = calloc(1, srv->config_context->used * sizeof(specific_config *)); + +diff --git a/src/mod_openssl.c b/src/mod_openssl.c +index 75e0873..4cb0335 100644 +--- a/src/mod_openssl.c ++++ b/src/mod_openssl.c +@@ -422,6 +422,29 @@ error: + return NULL; + } + ++static EVP_PKEY* ++evp_pkey_load_tpm_object_file(server *srv) { ++ if (!srv->tpm_is_init || !srv->srvconf.tpm_engine_ref) ++ return NULL; ++ ++ if (srv->srvconf.tpm_key) { ++ // if a TPM key was previously loaded ++ // then return that as there is no need to ++ // reload this key into TPM ++ return srv->srvconf.tpm_key; ++ } ++ ++ EVP_PKEY *pkey = ENGINE_load_private_key(srv->srvconf.tpm_engine_ref, ++ srv->srvconf.tpm_object->ptr, ++ NULL, NULL); ++ if (!pkey) { ++ log_error_write(srv, __FILE__, __LINE__, "SSS", "SSL:", ++ ERR_error_string(ERR_get_error(), NULL)); ++ return NULL; ++ } ++ srv->srvconf.tpm_key = pkey; ++ return pkey; ++} + + static EVP_PKEY * + evp_pkey_load_pem_file (server *srv, const char *file) +@@ -476,15 +499,23 @@ network_openssl_load_pemfile (server *srv, plugin_config *s, size_t ndx) + + s->ssl_pemfile_x509 = x509_load_pem_file(srv, s->ssl_pemfile->ptr); + if (NULL == s->ssl_pemfile_x509) return -1; +- s->ssl_pemfile_pkey = evp_pkey_load_pem_file(srv, s->ssl_pemfile->ptr); +- if (NULL == s->ssl_pemfile_pkey) return -1; +- +- if (!X509_check_private_key(s->ssl_pemfile_x509, s->ssl_pemfile_pkey)) { +- log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", +- "Private key does not match the certificate public key," +- " reason:", ERR_error_string(ERR_get_error(), NULL), +- s->ssl_pemfile); +- return -1; ++ ++ // if TPM mode is enabled then load the TPM key otherwise load ++ // the regular SSL private key ++ if (srv->tpm_is_init) { ++ if (NULL == (s->ssl_pemfile_pkey = evp_pkey_load_tpm_object_file(srv))) return -1; ++ } ++ else { ++ if (NULL == (s->ssl_pemfile_pkey = evp_pkey_load_pem_file(srv, s->ssl_pemfile->ptr))) return -1; ++ ++ if (!X509_check_private_key(s->ssl_pemfile_x509, s->ssl_pemfile_pkey)) { ++ log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", ++ "Private key does not match the certificate public key, reason:", ++ ERR_error_string(ERR_get_error(), NULL), ++ s->ssl_pemfile); ++ return -1; ++ } ++ + } + + return 0; +@@ -651,6 +682,43 @@ network_init_ssl (server *srv, void *p_d) + force_assert(NULL != local_send_buffer); + } + ++ /* NOTE (knasim-wrs): US93721: TPM support ++ * if TPM mode is configured, and we have not previously ++ * initialized the engine then do so now ++ */ ++ if (!buffer_string_is_empty(srv->srvconf.tpm_object) && ++ (!srv->tpm_is_init)) { ++ if (!buffer_string_is_empty(srv->srvconf.tpm_engine)) { ++ // load the dynamic TPM engine ++ ENGINE_load_dynamic(); ++ ENGINE *engine = ENGINE_by_id("dynamic"); ++ if (!engine) { ++ log_error_write(srv, __FILE__, __LINE__, "ss", "SSL:", ++ "Unable to load the dynamic engine " ++ "(needed for loading custom TPM engine)"); ++ return -1; ++ } ++ ++ ENGINE_ctrl_cmd_string(engine, "SO_PATH", ++ srv->srvconf.tpm_engine->ptr, 0); ++ ENGINE_ctrl_cmd_string(engine, "LOAD", NULL, 0); ++ if (ENGINE_init(engine) != 1) { ++ log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:", ++ ERR_error_string(ERR_get_error(), NULL)); ++ ENGINE_finish(engine); ++ return -1; ++ } ++ srv->tpm_is_init = 1; ++ // stow away for ENGINE cleanup ++ srv->srvconf.tpm_engine_ref = engine; ++ } ++ else { // no TPM engine found ++ log_error_write(srv, __FILE__, __LINE__, "ss", "SSL:", ++ "TPM engine option not set when TPM mode expected"); ++ return -1; ++ } ++ } ++ + if (!buffer_string_is_empty(s->ssl_pemfile)) { + #ifdef OPENSSL_NO_TLSEXT + data_config *dc = (data_config *)srv->config_context->data[i]; +@@ -911,29 +979,36 @@ network_init_ssl (server *srv, void *p_d) + } + } + +- if (1 != SSL_CTX_use_certificate_chain_file(s->ssl_ctx, +- s->ssl_pemfile->ptr)) { ++ if (1 != SSL_CTX_use_PrivateKey(s->ssl_ctx, s->ssl_pemfile_pkey)) { + log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:", + ERR_error_string(ERR_get_error(), NULL), + s->ssl_pemfile); + return -1; + } + +- if (1 != SSL_CTX_use_PrivateKey(s->ssl_ctx, s->ssl_pemfile_pkey)) { ++ if (1 != SSL_CTX_use_certificate(s->ssl_ctx, s->ssl_pemfile_x509)) { + log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:", + ERR_error_string(ERR_get_error(), NULL), + s->ssl_pemfile); + return -1; + } + +- if (SSL_CTX_check_private_key(s->ssl_ctx) != 1) { +- log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", +- "Private key does not match the certificate public " +- "key, reason:", +- ERR_error_string(ERR_get_error(), NULL), +- s->ssl_pemfile); +- return -1; ++ /* ++ * Only check private key against loaded ++ * certificate, in non TPM mode, since ++ * if this is a TPM key then it is wrapped ++ * and will not match the public key ++ */ ++ if (!srv->tpm_is_init) { ++ if (SSL_CTX_check_private_key(s->ssl_ctx) != 1) { ++ log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", ++ "Private key does not match the certificate public key, reason:", ++ ERR_error_string(ERR_get_error(), NULL), ++ s->ssl_pemfile); ++ return -1; ++ } + } ++ + SSL_CTX_set_default_read_ahead(s->ssl_ctx, s->ssl_read_ahead); + SSL_CTX_set_mode(s->ssl_ctx, SSL_CTX_get_mode(s->ssl_ctx) + | SSL_MODE_ENABLE_PARTIAL_WRITE +diff --git a/src/server.c b/src/server.c +index f6409bb..2ace3f8 100644 +--- a/src/server.c ++++ b/src/server.c +@@ -246,6 +246,11 @@ static server *server_init(void) { + CLEAN(srvconf.pid_file); + CLEAN(srvconf.syslog_facility); + ++#ifdef USE_OPENSSL ++ CLEAN(srvconf.tpm_object); ++ CLEAN(srvconf.tpm_engine); ++#endif ++ + CLEAN(tmp_chunk_len); + #undef CLEAN + +@@ -347,6 +352,14 @@ static void server_free(server *srv) { + CLEAN(srvconf.xattr_name); + CLEAN(srvconf.syslog_facility); + ++#ifdef USE_OPENSSL ++ CLEAN(srvconf.tpm_object); ++ CLEAN(srvconf.tpm_engine); ++ // don't free the tpm_key as that will be freed ++ // below as ssl_pemfile_pkey ++ ENGINE_finish(srv->srvconf.tpm_engine_ref); ++#endif ++ + CLEAN(tmp_chunk_len); + #undef CLEAN + +@@ -776,7 +789,9 @@ static int log_error_open(server *srv) { + if (-1 == (errfd = fdevent_open_devnull())) { + log_error_write(srv, __FILE__, __LINE__, "ss", + "opening /dev/null failed:", strerror(errno)); +- return -1; ++ /* In version 1.4.45 it will also failed here but not check return value of openDevNull(STDERR_FILENO) ++ need further check with upstrean to see if there is a potential bug */ ++ //return -1; + } + } + else { +-- +2.7.4 + diff --git a/base/lighttpd/lighttpd-1.4.35/lighttpd.conf b/base/lighttpd/files/lighttpd.conf similarity index 100% rename from base/lighttpd/lighttpd-1.4.35/lighttpd.conf rename to base/lighttpd/files/lighttpd.conf diff --git a/base/lighttpd/lighttpd-1.4.35/lighttpd.init b/base/lighttpd/files/lighttpd.init similarity index 100% rename from base/lighttpd/lighttpd-1.4.35/lighttpd.init rename to base/lighttpd/files/lighttpd.init diff --git a/base/lighttpd/lighttpd-1.4.35/lighttpd.logrotate b/base/lighttpd/files/lighttpd.logrotate similarity index 100% rename from base/lighttpd/lighttpd-1.4.35/lighttpd.logrotate rename to base/lighttpd/files/lighttpd.logrotate diff --git a/base/lighttpd/lighttpd-1.4.35/lighttpd-tpm-support.patch b/base/lighttpd/lighttpd-1.4.35/lighttpd-tpm-support.patch deleted file mode 100644 index 16744684d..000000000 --- a/base/lighttpd/lighttpd-1.4.35/lighttpd-tpm-support.patch +++ /dev/null @@ -1,255 +0,0 @@ -From 3cf42638ea162be04cbfc8b8eedbef6292336640 Mon Sep 17 00:00:00 2001 -From: Kam Nasim -Date: Wed, 29 Mar 2017 21:56:41 -0400 -Subject: [PATCH] lighttpd tpm support - ---- - src/base.h | 10 ++++- - src/configfile.c | 4 ++ - src/network.c | 111 ++++++++++++++++++++++++++++++++++++++++++++++--------- - src/server.c | 12 +++++- - 4 files changed, 118 insertions(+), 19 deletions(-) - -diff --git a/src/base.h b/src/base.h -index 134fc41..5fab1fd 100644 ---- a/src/base.h -+++ b/src/base.h -@@ -37,6 +37,7 @@ - # endif - # endif - # include -+# include - # if ! defined OPENSSL_NO_TLSEXT && ! defined SSL_CTRL_SET_TLSEXT_HOSTNAME - # define OPENSSL_NO_TLSEXT - # endif -@@ -567,6 +568,13 @@ typedef struct { - unsigned short high_precision_timestamps; - time_t loadts; - double loadavg[3]; -+#ifdef USE_OPENSSL -+ // TPM engine and object configuration -+ buffer *tpm_object; -+ buffer *tpm_engine; -+ ENGINE *tpm_engine_ref; -+ EVP_PKEY *tpm_key; -+#endif - } server_config; - - typedef struct server_socket { -@@ -610,7 +618,7 @@ typedef struct server { - int con_closed; - - int ssl_is_init; -- -+ int tpm_is_init; // has TPM been initialized already - int max_fds; /* max possible fds */ - int cur_fds; /* currently used fds */ - int want_fds; /* waiting fds */ -diff --git a/src/configfile.c b/src/configfile.c -index bba6925..da818ed 100644 ---- a/src/configfile.c -+++ b/src/configfile.c -@@ -145,6 +145,8 @@ static int config_insert(server *srv) { - { "server.stream-response-body", NULL, T_CONFIG_SHORT, T_CONFIG_SCOPE_CONNECTION }, /* 77 */ - { "server.max-request-field-size", NULL, T_CONFIG_INT, T_CONFIG_SCOPE_SERVER }, /* 78 */ - { "ssl.read-ahead", NULL, T_CONFIG_BOOLEAN, T_CONFIG_SCOPE_CONNECTION }, /* 79 */ -+ { "server.tpm-object", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_SERVER }, /* 80 */ -+ { "server.tpm-engine", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_SERVER }, /* 81 */ - - { NULL, NULL, T_CONFIG_UNSET, T_CONFIG_SCOPE_UNSET } - }; -@@ -184,6 +186,8 @@ static int config_insert(server *srv) { - cv[73].destination = &(srv->srvconf.http_host_strict); - cv[74].destination = &(srv->srvconf.http_host_normalize); - cv[78].destination = &(srv->srvconf.max_request_field_size); -+ cv[80].destination = srv->srvconf.tpm_object; -+ cv[81].destination = srv->srvconf.tpm_engine; - - srv->config_storage = calloc(1, srv->config_context->used * sizeof(specific_config *)); - -diff --git a/src/network.c b/src/network.c -index 4295fe9..6460e72 100644 ---- a/src/network.c -+++ b/src/network.c -@@ -613,6 +613,29 @@ error: - return NULL; - } - -+static EVP_PKEY* evp_pkey_load_tpm_object_file(server *srv) { -+ if (!srv->tpm_is_init || !srv->srvconf.tpm_engine_ref) -+ return NULL; -+ -+ if (srv->srvconf.tpm_key) { -+ // if a TPM key was previously loaded -+ // then return that as there is no need to -+ // reload this key into TPM -+ return srv->srvconf.tpm_key; -+ } -+ -+ EVP_PKEY *pkey = ENGINE_load_private_key(srv->srvconf.tpm_engine_ref, -+ srv->srvconf.tpm_object->ptr, -+ NULL, NULL); -+ if (!pkey) { -+ log_error_write(srv, __FILE__, __LINE__, "SSS", "SSL:", -+ ERR_error_string(ERR_get_error(), NULL)); -+ return NULL; -+ } -+ srv->srvconf.tpm_key = pkey; -+ return pkey; -+} -+ - static EVP_PKEY* evp_pkey_load_pem_file(server *srv, const char *file) { - BIO *in; - EVP_PKEY *x = NULL; -@@ -658,15 +681,23 @@ static int network_openssl_load_pemfile(server *srv, size_t ndx) { - #endif - - if (NULL == (s->ssl_pemfile_x509 = x509_load_pem_file(srv, s->ssl_pemfile->ptr))) return -1; -- if (NULL == (s->ssl_pemfile_pkey = evp_pkey_load_pem_file(srv, s->ssl_pemfile->ptr))) return -1; - -- if (!X509_check_private_key(s->ssl_pemfile_x509, s->ssl_pemfile_pkey)) { -- log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", -- "Private key does not match the certificate public key, reason:", -- ERR_error_string(ERR_get_error(), NULL), -- s->ssl_pemfile); -- return -1; -- } -+ // if TPM mode is enabled then load the TPM key otherwise load -+ // the regular SSL private key -+ if (srv->tpm_is_init) { -+ if (NULL == (s->ssl_pemfile_pkey = evp_pkey_load_tpm_object_file(srv))) return -1; -+ } -+ else { -+ if (NULL == (s->ssl_pemfile_pkey = evp_pkey_load_pem_file(srv, s->ssl_pemfile->ptr))) return -1; -+ -+ if (!X509_check_private_key(s->ssl_pemfile_x509, s->ssl_pemfile_pkey)) { -+ log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", -+ "Private key does not match the certificate public key, reason:", -+ ERR_error_string(ERR_get_error(), NULL), -+ s->ssl_pemfile); -+ return -1; -+ } -+ } - - return 0; - } -@@ -791,6 +822,44 @@ int network_init(server *srv) { - } - } - -+ /* NOTE (knasim-wrs): US93721: TPM support -+ * if TPM mode is configured, and we have not previously -+ * initialized the engine then do so now -+ */ -+ if (!buffer_string_is_empty(srv->srvconf.tpm_object) && -+ (!srv->tpm_is_init)) { -+ if (!buffer_string_is_empty(srv->srvconf.tpm_engine)) { -+ // load the dynamic TPM engine -+ ENGINE_load_dynamic(); -+ ENGINE *engine = ENGINE_by_id("dynamic"); -+ if (!engine) { -+ log_error_write(srv, __FILE__, __LINE__, "ss", "SSL:", -+ "Unable to load the dynamic engine " -+ "(needed for loading custom TPM engine)"); -+ return -1; -+ } -+ -+ ENGINE_ctrl_cmd_string(engine, "SO_PATH", -+ srv->srvconf.tpm_engine->ptr, 0); -+ ENGINE_ctrl_cmd_string(engine, "LOAD", NULL, 0); -+ if (ENGINE_init(engine) != 1) { -+ log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:", -+ ERR_error_string(ERR_get_error(), NULL)); -+ ENGINE_finish(engine); -+ return -1; -+ } -+ srv->tpm_is_init = 1; -+ // stow away for ENGINE cleanup -+ srv->srvconf.tpm_engine_ref = engine; -+ } -+ else { // no TPM engine found -+ log_error_write(srv, __FILE__, __LINE__, "ss", "SSL:", -+ "TPM engine option not set when TPM mode expected"); -+ return -1; -+ } -+ } -+ /// -+ - if (!buffer_string_is_empty(s->ssl_pemfile)) { - #ifdef OPENSSL_NO_TLSEXT - data_config *dc = (data_config *)srv->config_context->data[i]; -@@ -975,24 +1044,32 @@ int network_init(server *srv) { - SSL_CTX_set_verify_depth(s->ssl_ctx, s->ssl_verifyclient_depth); - } - -- if (1 != SSL_CTX_use_certificate(s->ssl_ctx, s->ssl_pemfile_x509)) { -+ if (1 != SSL_CTX_use_PrivateKey(s->ssl_ctx, s->ssl_pemfile_pkey)) { - log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:", - ERR_error_string(ERR_get_error(), NULL), s->ssl_pemfile); - return -1; - } - -- if (1 != SSL_CTX_use_PrivateKey(s->ssl_ctx, s->ssl_pemfile_pkey)) { -+ if (1 != SSL_CTX_use_certificate(s->ssl_ctx, s->ssl_pemfile_x509)) { - log_error_write(srv, __FILE__, __LINE__, "ssb", "SSL:", - ERR_error_string(ERR_get_error(), NULL), s->ssl_pemfile); - return -1; - } -- -- if (SSL_CTX_check_private_key(s->ssl_ctx) != 1) { -- log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", -- "Private key does not match the certificate public key, reason:", -- ERR_error_string(ERR_get_error(), NULL), -- s->ssl_pemfile); -- return -1; -+ -+ /* -+ * Only check private key against loaded -+ * certificate, in non TPM mode, since -+ * if this is a TPM key then it is wrapped -+ * and will not match the public key -+ */ -+ if (!srv->tpm_is_init) { -+ if (SSL_CTX_check_private_key(s->ssl_ctx) != 1) { -+ log_error_write(srv, __FILE__, __LINE__, "sssb", "SSL:", -+ "Private key does not match the certificate public key, reason:", -+ ERR_error_string(ERR_get_error(), NULL), -+ s->ssl_pemfile); -+ return -1; -+ } - } - SSL_CTX_set_default_read_ahead(s->ssl_ctx, s->ssl_read_ahead); - SSL_CTX_set_mode(s->ssl_ctx, SSL_CTX_get_mode(s->ssl_ctx) -diff --git a/src/server.c b/src/server.c -index f27b003..5adfa15 100644 ---- a/src/server.c -+++ b/src/server.c -@@ -226,7 +226,10 @@ static server *server_init(void) { - CLEAN(srvconf.bindhost); - CLEAN(srvconf.event_handler); - CLEAN(srvconf.pid_file); -- -+#ifdef USE_OPENSSL -+ CLEAN(srvconf.tpm_object); -+ CLEAN(srvconf.tpm_engine); -+#endif - CLEAN(tmp_chunk_len); - #undef CLEAN - -@@ -316,6 +319,13 @@ static void server_free(server *srv) { - CLEAN(srvconf.modules_dir); - CLEAN(srvconf.network_backend); - CLEAN(srvconf.xattr_name); -+#ifdef USE_OPENSSL -+ CLEAN(srvconf.tpm_object); -+ CLEAN(srvconf.tpm_engine); -+ // don't free the tpm_key as that will be freed -+ // below as ssl_pemfile_pkey -+ ENGINE_finish(srv->srvconf.tpm_engine_ref); -+#endif - - CLEAN(tmp_chunk_len); - #undef CLEAN --- -1.8.3.1 - diff --git a/base/lighttpd/lighttpd-1.4.35/remote-ip-ipv6-support.patch b/base/lighttpd/lighttpd-1.4.35/remote-ip-ipv6-support.patch deleted file mode 100644 index 5460374cb..000000000 --- a/base/lighttpd/lighttpd-1.4.35/remote-ip-ipv6-support.patch +++ /dev/null @@ -1,117 +0,0 @@ ---- lighttpd-1.4.35/src/configfile-glue.c.orig 2014-03-06 15:08:00.000000000 +0100 -+++ lighttpd-1.4.35/src/configfile-glue.c 2015-11-26 11:39:23.000000000 +0100 -@@ -8,6 +8,10 @@ - - #include - #include -+#include -+#ifndef __WIN32 -+#include -+#endif - - /** - * like all glue code this file contains functions which -@@ -336,12 +340,22 @@ static cond_result_t config_check_cond_n - - if ((dc->cond == CONFIG_COND_EQ || - dc->cond == CONFIG_COND_NE) && -- (con->dst_addr.plain.sa_family == AF_INET) && - (NULL != (nm_slash = strchr(dc->string->ptr, '/')))) { - int nm_bits; -- long nm; - char *err; - struct in_addr val_inp; -+ struct in6_addr val_inp6; -+ int val_af; -+ uint8_t *a, *b; -+ int result_match, result_nomatch; -+ -+ if (dc->cond == CONFIG_COND_EQ) { -+ result_match = COND_RESULT_TRUE; -+ result_nomatch = COND_RESULT_FALSE; -+ } else { -+ result_match = COND_RESULT_FALSE; -+ result_nomatch = COND_RESULT_TRUE; -+ } - - if (*(nm_slash+1) == '\0') { - log_error_write(srv, __FILE__, __LINE__, "sb", "ERROR: no number after / ", dc->string); -@@ -356,10 +370,16 @@ static cond_result_t config_check_cond_n - - return COND_RESULT_FALSE; - } -+ if (nm_bits < 0) { -+ log_error_write(srv, __FILE__, __LINE__, "sbs", "ERROR: negative netmask:", dc->string, err); -+ -+ return COND_RESULT_FALSE; -+ } - - /* take IP convert to the native */ - buffer_copy_string_len(srv->cond_check_buf, dc->string->ptr, nm_slash - dc->string->ptr); - #ifdef __WIN32 -+ val_af = AF_INET; - if (INADDR_NONE == (val_inp.s_addr = inet_addr(srv->cond_check_buf->ptr))) { - log_error_write(srv, __FILE__, __LINE__, "sb", "ERROR: ip addr is invalid:", srv->cond_check_buf); - -@@ -367,21 +387,54 @@ static cond_result_t config_check_cond_n - } - - #else -- if (0 == inet_aton(srv->cond_check_buf->ptr, &val_inp)) { -+ if (1 == inet_pton(AF_INET, srv->cond_check_buf->ptr, &val_inp)) { -+ val_af = AF_INET; -+ } else if (1 == inet_pton(AF_INET6, srv->cond_check_buf->ptr, &val_inp6)) { -+ val_af = AF_INET6; -+ } else { - log_error_write(srv, __FILE__, __LINE__, "sb", "ERROR: ip addr is invalid:", srv->cond_check_buf); - - return COND_RESULT_FALSE; - } - #endif - -- /* build netmask */ -- nm = htonl(~((1 << (32 - nm_bits)) - 1)); -+ if (val_af == AF_INET) { -+ if (nm_bits > 32) { -+ log_error_write(srv, __FILE__, __LINE__, "sd", "ERROR: ipv4 netmask too large:", nm_bits); - -- if ((val_inp.s_addr & nm) == (con->dst_addr.ipv4.sin_addr.s_addr & nm)) { -- return (dc->cond == CONFIG_COND_EQ) ? COND_RESULT_TRUE : COND_RESULT_FALSE; -+ return COND_RESULT_FALSE; -+ } -+ a = (uint8_t *)&val_inp; -+ if (con->dst_addr.plain.sa_family == AF_INET) { -+ b = (uint8_t *)&con->dst_addr.ipv4.sin_addr.s_addr; -+ } else if (IN6_IS_ADDR_V4MAPPED(&con->dst_addr.ipv6.sin6_addr)) { -+ b = (uint8_t *)&con->dst_addr.ipv6.sin6_addr.s6_addr[12]; -+ } else { -+ return result_nomatch; -+ } - } else { -- return (dc->cond == CONFIG_COND_EQ) ? COND_RESULT_FALSE : COND_RESULT_TRUE; -+ if (nm_bits > 128) { -+ log_error_write(srv, __FILE__, __LINE__, "sd", "ERROR: ipv6 netmask too large:", nm_bits); -+ -+ return COND_RESULT_FALSE; -+ } -+ a = (uint8_t *)&val_inp6; -+ if (con->dst_addr.plain.sa_family == AF_INET) { -+ return result_nomatch; -+ } else { -+ b = (uint8_t *)&con->dst_addr.ipv6.sin6_addr.s6_addr[0]; -+ } -+ } -+ while (nm_bits) { -+ if (nm_bits >= 8) { -+ if (*a++ != *b++) return result_nomatch; -+ nm_bits -= 8; -+ } else { -+ if (*a >> (8 - nm_bits) != *b >> (8 - nm_bits)) return result_nomatch; -+ nm_bits = 0; -+ } - } -+ return result_match; - } else { - l = con->dst_addr_buf; - } - diff --git a/base/net-snmp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/net-snmp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index f792b37c3..ab3ea5069 100644 --- a/base/net-snmp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/net-snmp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 2b9054a9278f5b7a6af660eb5842b9ec32d50e74 Mon Sep 17 00:00:00 2001 +From c25a30b4a0c7347234c2af4afab099b5735bbf71 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:05:59 -0400 -Subject: [PATCH 8/9] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/net-snmp.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/net-snmp.spec b/SPECS/net-snmp.spec -index 0ac1eef..8d109b8 100644 +index 9b313cb..b015436 100644 --- a/SPECS/net-snmp.spec +++ b/SPECS/net-snmp.spec @@ -14,7 +14,7 @@ Summary: A collection of SNMP protocol tools and libraries Name: net-snmp Version: 5.7.2 --Release: 28%{?dist}.1 -+Release: 28.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 33%{?dist}.2 ++Release: 33.el7_5.2%{?_tis_dist}.%{tis_patch_ver} Epoch: 1 License: BSD -- -1.9.1 +2.7.4 diff --git a/base/net-snmp/centos/meta_patches/run-snmpd-as-non-root-user.patch b/base/net-snmp/centos/meta_patches/run-snmpd-as-non-root-user.patch index 008c3be02..6c1124227 100644 --- a/base/net-snmp/centos/meta_patches/run-snmpd-as-non-root-user.patch +++ b/base/net-snmp/centos/meta_patches/run-snmpd-as-non-root-user.patch @@ -1,14 +1,14 @@ -From d984ab4a020a20082190e8029f45f06031f320da Mon Sep 17 00:00:00 2001 +From 5dc19ad10a3f91803116a88c303134e9ff361bd5 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:05:59 -0400 -Subject: [PATCH 6/9] WRS: run-snmpd-as-non-root-user.patch +Subject: [PATCH] WRS: run-snmpd-as-non-root-user.patch Conflicts: SPECS/net-snmp.spec --- SOURCES/snmpd.service | 2 +- - SPECS/net-snmp.spec | 4 ++-- - 2 files changed, 3 insertions(+), 3 deletions(-) + SPECS/net-snmp.spec | 2 +- + 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/SOURCES/snmpd.service b/SOURCES/snmpd.service index 84b6ca3..ad689c8 100644 @@ -24,19 +24,10 @@ index 84b6ca3..ad689c8 100644 ExecStart=/etc/init.d/snmpd start ExecStop=/etc/init.d/snmpd stop diff --git a/SPECS/net-snmp.spec b/SPECS/net-snmp.spec -index a433f40..0ac1eef 100644 +index 3e36cb5..9b313cb 100644 --- a/SPECS/net-snmp.spec +++ b/SPECS/net-snmp.spec -@@ -14,7 +14,7 @@ - Summary: A collection of SNMP protocol tools and libraries - Name: net-snmp - Version: 5.7.2 --Release: 28%{?dist} -+Release: 28%{?dist}.1 - Epoch: 1 - - License: BSD -@@ -413,7 +413,7 @@ install -m 644 %SOURCE6 ${RPM_BUILD_ROOT}%{_sysconfdir}/snmp/snmptrapd.conf +@@ -428,7 +428,7 @@ install -m 644 %SOURCE6 ${RPM_BUILD_ROOT}%{_sysconfdir}/snmp/snmptrapd.conf # WRS install -m 644 %SOURCE12 ${RPM_BUILD_ROOT}%{_sysconfdir}/snmp/snmpd.conf @@ -46,5 +37,5 @@ index a433f40..0ac1eef 100644 mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/rc.d/init.d install -m 755 %SOURCE13 ${RPM_BUILD_ROOT}%{_sysconfdir}/rc.d/init.d/snmpd -- -1.9.1 +2.7.4 diff --git a/base/net-snmp/centos/meta_patches/snmp-spec-add-init-script.patch b/base/net-snmp/centos/meta_patches/snmp-spec-add-init-script.patch index 30b5e0146..f92e1534b 100644 --- a/base/net-snmp/centos/meta_patches/snmp-spec-add-init-script.patch +++ b/base/net-snmp/centos/meta_patches/snmp-spec-add-init-script.patch @@ -1,14 +1,14 @@ -From 05124f2495f4173848cac245c6579247a0e255d6 Mon Sep 17 00:00:00 2001 +From 492d89dca4ca498b77847abc1f1313a800fec85e Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:05:58 -0400 -Subject: [PATCH 3/9] WRS: snmp-spec-add-init-script.patch +Subject: [PATCH] WRS: snmp-spec-add-init-script.patch --- SPECS/net-snmp.spec | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/SPECS/net-snmp.spec b/SPECS/net-snmp.spec -index 85955d0..df248ac 100644 +index da7706b..035d2f8 100644 --- a/SPECS/net-snmp.spec +++ b/SPECS/net-snmp.spec @@ -41,6 +41,7 @@ Source11: snmptrapd.service @@ -19,7 +19,7 @@ index 85955d0..df248ac 100644 Patch1: net-snmp-5.7.2-pie.patch Patch2: net-snmp-5.5-dir-fix.patch -@@ -414,6 +415,9 @@ install -m 644 %SOURCE6 ${RPM_BUILD_ROOT}%{_sysconfdir}/snmp/snmptrapd.conf +@@ -429,6 +430,9 @@ install -m 644 %SOURCE6 ${RPM_BUILD_ROOT}%{_sysconfdir}/snmp/snmptrapd.conf install -m 644 %SOURCE12 ${RPM_BUILD_ROOT}%{_sysconfdir}/snmp/snmpd.conf chmod 600 ${RPM_BUILD_ROOT}%{_sysconfdir}/snmp/snmptrapd.conf @@ -29,14 +29,14 @@ index 85955d0..df248ac 100644 install -d ${RPM_BUILD_ROOT}%{_initrddir} install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}%{_initrddir}/snmpd install -m 755 %SOURCE3 ${RPM_BUILD_ROOT}%{_initrddir}/snmptrapd -@@ -553,6 +557,7 @@ rm -rf ${RPM_BUILD_ROOT} +@@ -568,6 +572,7 @@ rm -rf ${RPM_BUILD_ROOT} %dir %{_localstatedir}/run/net-snmp %{_prefix}/lib/tmpfiles.d/net-snmp.conf %{_unitdir}/snmp* +%{_sysconfdir}/rc.d/init.d/snmpd %config(noreplace) %{_sysconfdir}/sysconfig/snmpd %config(noreplace) %{_sysconfdir}/sysconfig/snmptrapd - + %attr(0755,root,root) %{_bindir}/net-snmp-config* -- -1.9.1 +2.7.4 diff --git a/base/net-snmp/centos/meta_patches/spec-configure-without-HOST-RESOURCES-MIB.patch b/base/net-snmp/centos/meta_patches/spec-configure-without-HOST-RESOURCES-MIB.patch index f50690027..6c1f66ba4 100644 --- a/base/net-snmp/centos/meta_patches/spec-configure-without-HOST-RESOURCES-MIB.patch +++ b/base/net-snmp/centos/meta_patches/spec-configure-without-HOST-RESOURCES-MIB.patch @@ -1,8 +1,18 @@ +From 0358f8ee4e56fbd3f4c54409b3dbe5c9fdff3a27 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Sun, 12 Aug 2018 22:07:24 +0800 +Subject: [PATCH] spec-configure-without-HOST-RESOURCES-MIB + +Signed-off-by: slin14 +--- + SPECS/net-snmp.spec | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + diff --git a/SPECS/net-snmp.spec b/SPECS/net-snmp.spec -index 12323a4..1e23fba 100644 +index a1b3720..e6e5d8c 100644 --- a/SPECS/net-snmp.spec +++ b/SPECS/net-snmp.spec -@@ -331,7 +331,7 @@ rm testing/fulltests/default/T200* +@@ -342,7 +342,7 @@ rm testing/fulltests/default/T200* %endif %build @@ -11,7 +21,7 @@ index 12323a4..1e23fba 100644 ucd-snmp/diskio tcp-mib udp-mib mibII/mta_sendmail \ ip-mib/ipv4InterfaceTable ip-mib/ipv6InterfaceTable \ ip-mib/ipAddressPrefixTable/ipAddressPrefixTable \ -@@ -352,6 +352,7 @@ MIBS="$MIBS ucd-snmp/lmsensorsMib" +@@ -363,6 +363,7 @@ MIBS="$MIBS ucd-snmp/lmsensorsMib" --with-logfile="/var/log/snmpd.log" \ --with-persistent-directory="/var/lib/net-snmp" \ --with-mib-modules="$MIBS" \ @@ -19,3 +29,6 @@ index 12323a4..1e23fba 100644 %if %{netsnmp_tcp_wrappers} --with-libwrap=yes \ %endif +-- +2.7.4 + diff --git a/base/net-snmp/centos/srpm_path b/base/net-snmp/centos/srpm_path index b0dfdc079..fbb0692ce 100644 --- a/base/net-snmp/centos/srpm_path +++ b/base/net-snmp/centos/srpm_path @@ -1 +1 @@ -mirror:Source/net-snmp-5.7.2-28.el7.src.rpm +mirror:Source/net-snmp-5.7.2-33.el7_5.2.src.rpm diff --git a/base/netpbm/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/netpbm/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index cd6e5c862..cddef6584 100644 --- a/base/netpbm/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/netpbm/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,4 +1,4 @@ -From 55b381fed1b1bae9bd0bdfabd07246f40805252e Mon Sep 17 00:00:00 2001 +From bb0bf50256fd7d85d7f6f9eeb64d621a5698cfcc Mon Sep 17 00:00:00 2001 From: Don Penney Date: Tue, 27 Sep 2016 21:23:24 -0400 Subject: [PATCH] Update package versioning for TIS format @@ -8,18 +8,18 @@ Subject: [PATCH] Update package versioning for TIS format 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/netpbm.spec b/SPECS/netpbm.spec -index c10c448..74c13eb 100644 +index 02dd5f8..a4579f5 100644 --- a/SPECS/netpbm.spec +++ b/SPECS/netpbm.spec @@ -1,7 +1,7 @@ Summary: A library for handling different graphics file formats Name: netpbm - Version: 10.61.02 --Release: 9%{?dist} -+Release: 9.el7%{?_tis_dist}.%{tis_patch_ver} + Version: 10.79.00 +-Release: 7%{?dist} ++Release: 7.el7%{?_tis_dist}.%{tis_patch_ver} # See copyright_summary for details License: BSD and GPLv2 and IJG and MIT and Public Domain Group: System Environment/Libraries -- -1.8.3.1 +2.7.4 diff --git a/base/netpbm/centos/meta_patches/0001-remove-ghostscript.patch b/base/netpbm/centos/meta_patches/0001-remove-ghostscript.patch index 59234fcd3..e9c4989df 100644 --- a/base/netpbm/centos/meta_patches/0001-remove-ghostscript.patch +++ b/base/netpbm/centos/meta_patches/0001-remove-ghostscript.patch @@ -1,16 +1,26 @@ +From 4d8601d4eda671c7da04f7eb438e20407f33b09b Mon Sep 17 00:00:00 2001 +From: zhipengl +Date: Wed, 22 Aug 2018 01:02:40 +0800 +Subject: 0001-remove-ghostscript.patch + +Signed-off-by: zhipengl +--- + SPECS/netpbm.spec | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + diff --git a/SPECS/netpbm.spec b/SPECS/netpbm.spec -index c0a2d27..c10c448 100644 +index 82eafb8..02dd5f8 100644 --- a/SPECS/netpbm.spec +++ b/SPECS/netpbm.spec -@@ -40,6 +40,7 @@ Patch28: netpbm-compare-same-images.patch - Patch29: netpbm-manual-pages.patch - Patch30: netpbm-pnmtops-hangs.patch - Patch31: netpbm-pgmtexture-fault.patch -+Patch32: remove-pstopnm.patch +@@ -31,6 +31,7 @@ Patch15: netpbm-pamtojpeg2k.patch + Patch16: netpbm-manfix.patch + Patch17: netpbm-manual-pages.patch + Patch18: netpbm-ppmfadeusage.patch ++Patch19: remove-pstopnm.patch BuildRequires: libjpeg-devel, libpng-devel, libtiff-devel, flex BuildRequires: libX11-devel, python, jasper-devel, libxml2-devel -@@ -66,7 +67,6 @@ to have the netpbm package installed. +@@ -57,7 +58,6 @@ to have the netpbm package installed. %package progs Summary: Tools for manipulating graphics files in netpbm supported formats Group: Applications/Multimedia @@ -18,12 +28,14 @@ index c0a2d27..c10c448 100644 Requires: netpbm = %{version}-%{release} %description progs - -@@ -120,6 +120,7 @@ netpbm-doc. You'll also need to install the netpbm-progs package. - %patch29 -p1 -b .manual-pages - %patch30 -p1 -b .pnmtops-hangs - %patch31 -p1 -b .pgmtexture-fault -+%patch32 -p1 - - sed -i 's/STRIPFLAG = -s/STRIPFLAG =/g' config.mk.in +@@ -102,6 +102,7 @@ netpbm-doc. You'll also need to install the netpbm-progs package. + %patch16 -p1 -b .manfix + %patch17 -p1 -b .manual-pages + %patch18 -p1 -b .ppmfadeusage ++%patch19 -p1 + rm -rf converter/other/jpeg2000/libjasper/ + sed -i -e 's/SUBDIRS += libjasper//' converter/other/jpeg2000/Makefile +-- +2.7.4 + diff --git a/base/netpbm/centos/patches/remove-pstopnm.patch b/base/netpbm/centos/patches/remove-pstopnm.patch index 5c4cb8979..823b0c015 100644 --- a/base/netpbm/centos/patches/remove-pstopnm.patch +++ b/base/netpbm/centos/patches/remove-pstopnm.patch @@ -1,25 +1,37 @@ -diff --git a/netpbm-10.61.02/converter/other/Makefile b/netpbm-10.61.02/converter/other/Makefile -index 746db87..02c66b4 100644 ---- a/netpbm-10.61.02/converter/other/Makefile -+++ b/netpbm-10.61.02/converter/other/Makefile +From ba7b88e20f58d1d549bf7eec2e7fc2fa2a229362 Mon Sep 17 00:00:00 2001 +From: zhipengl +Date: Wed, 22 Aug 2018 00:50:54 +0800 +Subject: remove-pstopnm.patch + +Signed-off-by: zhipengl +--- + converter/other/Makefile | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/converter/other/Makefile b/converter/other/Makefile +index b01f66a..6e9c84f 100644 +--- a/converter/other/Makefile ++++ b/converter/other/Makefile @@ -7,6 +7,7 @@ VPATH=.:$(SRCDIR)/$(SUBDIR) include $(BUILDDIR)/config.mk +USE_GHOSTSCRIPT=N - TEST_PKGCONFIG_LIBXML2 = if pkg-config libxml-2.0; then echo exists; fi + TEST_PKGCONFIG_LIBXML2 = if $(PKG_CONFIG) libxml-2.0; then echo exists; fi ifneq ($(shell $(TEST_PKGCONFIG_LIBXML2)),) -@@ -134,10 +135,12 @@ BINARIES = \ - rasttopnm \ - srftopam \ +@@ -126,9 +127,11 @@ PORTBINARIES = avstopam bmptopnm fitstopnm \ + rasttopnm rlatopam sgitopnm sirtopnm srftopam sunicontopnm \ + winicontopam xwdtopnm yuy2topam zeisstopnm +ifneq ($(USE_GHOSTSCRIPT),N) ifneq ($(DONT_HAVE_PROCESS_MGMT),Y) - PORTBINARIES += pstopnm - BINARIES += pnmtops + PORTBINARIES += pstopnm pnmtops endif +endif ifeq ($(HAVE_PNGLIB),Y) - BINARIES += pnmtopng pngtopam pamrgbatopng + PORTBINARIES += pamtopng pnmtopng pngtopam +-- +2.7.4 + diff --git a/base/netpbm/centos/srpm_path b/base/netpbm/centos/srpm_path index 4349e3df9..669c2137b 100644 --- a/base/netpbm/centos/srpm_path +++ b/base/netpbm/centos/srpm_path @@ -1 +1 @@ -mirror:Source/netpbm-10.61.02-9.el7.src.rpm +mirror:Source/netpbm-10.79.00-7.el7.src.rpm diff --git a/base/ntp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/ntp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 730d710b9..a69e4497a 100644 --- a/base/ntp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/ntp/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From af36b0f028b07a6487e57040bb6c980ff6a4a41c Mon Sep 17 00:00:00 2001 +From 30615fcee3c857e0bb2900a64e14b807adff5495 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:29:01 -0400 -Subject: [PATCH 3/3] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/ntp.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/ntp.spec b/SPECS/ntp.spec -index f717899..454020c 100644 +index 73ab0f7..bf9c32b 100644 --- a/SPECS/ntp.spec +++ b/SPECS/ntp.spec @@ -1,7 +1,7 @@ Summary: The NTP daemon and utilities Name: ntp Version: 4.2.6p5 --Release: 25%{?dist}.2 -+Release: 25.el7.centos.2%{?_tis_dist}.%{tis_patch_ver} +-Release: 28%{?dist} ++Release: 28.el7.centos%{?_tis_dist}.%{tis_patch_ver} # primary license (COPYRIGHT) : MIT # ElectricFence/ (not used) : GPLv2 # kernel/sys/ppsclock.h (not used) : BSD with advertising -- -1.9.1 +2.7.4 diff --git a/base/ntp/centos/srpm_path b/base/ntp/centos/srpm_path index 1c743b4da..b5e385938 100644 --- a/base/ntp/centos/srpm_path +++ b/base/ntp/centos/srpm_path @@ -1 +1 @@ -mirror:Source/ntp-4.2.6p5-25.el7.centos.2.src.rpm +mirror:Source/ntp-4.2.6p5-28.el7.centos.src.rpm diff --git a/base/openssh/centos/meta_patches/spec-harden-server-and-client-config.patch b/base/openssh/centos/meta_patches/spec-harden-server-and-client-config.patch index 506c47d09..91af3edd1 100644 --- a/base/openssh/centos/meta_patches/spec-harden-server-and-client-config.patch +++ b/base/openssh/centos/meta_patches/spec-harden-server-and-client-config.patch @@ -1,7 +1,7 @@ -From 099d1c1f3376673e9a3c5747c87c8c756c883ce6 Mon Sep 17 00:00:00 2001 +From 857b95ac924a980c60d894148d3c5d41aca8447d Mon Sep 17 00:00:00 2001 From: Andy Ning Date: Thu, 22 Mar 2018 11:45:26 -0400 -Subject: [PATCH 1/1] CGTS-9265: patch to harden server and client config +Subject: [PATCH] CGTS-9265: patch to harden server and client config Replace the hardcoded sshd_config and ssh_config files with patches to openssh. @@ -12,12 +12,12 @@ Signed-off-by: Andy Ning 1 file changed, 6 insertions(+) diff --git a/SPECS/openssh.spec b/SPECS/openssh.spec -index 7ee5bd8..7c464a2 100644 +index 442261e..c62e6c8 100644 --- a/SPECS/openssh.spec +++ b/SPECS/openssh.spec -@@ -240,6 +240,9 @@ Patch955: openssh-7.4p1-sandbox-ibmca.patch - # Back to UseDNS=yes by default (#1478175) - Patch956: openssh-7.4p1-usedns-yes.patch +@@ -251,6 +251,9 @@ Patch959: openssh-7.4p1-authorized_keys_command.patch + # Fix for CVE-2017-15906 (#1517226) + Patch960: openssh-7.5p1-sftp-empty-files.patch +# WRS: harden server and client config +Patch1000: harden-server-and-client-config.patch @@ -25,7 +25,7 @@ index 7ee5bd8..7c464a2 100644 License: BSD Group: Applications/Internet BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) -@@ -494,6 +497,9 @@ popd +@@ -511,6 +514,9 @@ popd %patch100 -p1 -b .coverity @@ -36,5 +36,5 @@ index 7ee5bd8..7c464a2 100644 # Nothing here yet %endif -- -1.8.3.1 +2.7.4 diff --git a/base/openssh/centos/srpm_path b/base/openssh/centos/srpm_path index 7f676b957..d5332f546 100644 --- a/base/openssh/centos/srpm_path +++ b/base/openssh/centos/srpm_path @@ -1 +1 @@ -mirror:Source/openssh-7.4p1-12.el7_4.src.rpm +mirror:Source/openssh-7.4p1-16.el7.src.rpm diff --git a/base/pam/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/pam/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index c6ed12bed..3b738a965 100644 --- a/base/pam/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/pam/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,4 +1,4 @@ -From df02d7127b6feba73728380493033f5b212faab7 Mon Sep 17 00:00:00 2001 +From ebeb61340d3bc91c2489846a00878c557310634d Mon Sep 17 00:00:00 2001 From: Don Penney Date: Tue, 27 Sep 2016 10:49:05 -0400 Subject: [PATCH] Update package versioning for TIS format @@ -8,18 +8,18 @@ Subject: [PATCH] Update package versioning for TIS format 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/pam.spec b/SPECS/pam.spec -index a702aca..dabbeee 100644 +index 0ee1747..e397385 100644 --- a/SPECS/pam.spec +++ b/SPECS/pam.spec @@ -3,7 +3,7 @@ Summary: An extensible library which provides authentication for applications Name: pam Version: 1.1.8 --Release: 18%{?dist} -+Release: 18.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 22%{?dist} ++Release: 22.el7%{?_tis_dist}.%{tis_patch_ver} # The library is BSD licensed with option to relicense as GPLv2+ # - this option is redundant as the BSD license allows that anyway. # pam_timestamp, pam_loginuid, and pam_console modules are GPLv2+. -- -1.8.3.1 +2.7.4 diff --git a/base/pam/centos/srpm_path b/base/pam/centos/srpm_path index 8e1098c0b..2d9af7454 100644 --- a/base/pam/centos/srpm_path +++ b/base/pam/centos/srpm_path @@ -1 +1 @@ -mirror:Source/pam-1.1.8-18.el7.src.rpm +mirror:Source/pam-1.1.8-22.el7.src.rpm diff --git a/base/rsync/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/rsync/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index ca0acc301..16dd763e5 100644 --- a/base/rsync/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/rsync/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 20f4e2f0f19c6d0e9c8ee1314481bc8e85dbd5bb Mon Sep 17 00:00:00 2001 +From a6709dfc64368bac4970e3b99512a4e1b4b8e756 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:32:24 -0400 -Subject: [PATCH 1/1] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/rsync.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/rsync.spec b/SPECS/rsync.spec -index 85b01f2..310b284 100644 +index d5f6d55..d9cb5ed 100644 --- a/SPECS/rsync.spec +++ b/SPECS/rsync.spec @@ -8,7 +8,7 @@ Summary: A program for synchronizing files over a network Name: rsync - Version: 3.0.9 --Release: 18%{?prerelease}%{?dist} -+Release: 18.el7%{?_tis_dist}.%{tis_patch_ver} + Version: 3.1.2 +-Release: 4%{?prerelease}%{?dist} ++Release: 4.el7%{?_tis_dist}.%{tis_patch_ver} Group: Applications/Internet URL: http://rsync.samba.org/ -- -1.9.1 +2.7.4 diff --git a/base/rsync/centos/srpm_path b/base/rsync/centos/srpm_path index 1780040a7..211d97f95 100644 --- a/base/rsync/centos/srpm_path +++ b/base/rsync/centos/srpm_path @@ -1 +1 @@ -mirror:Source/rsync-3.0.9-18.el7.src.rpm +mirror:Source/rsync-3.1.2-4.el7.src.rpm diff --git a/base/sanlock/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/sanlock/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index cd238e69f..bb5478df0 100644 --- a/base/sanlock/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/sanlock/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 112dfdc394a779a860c79c067d47142dc1db2484 Mon Sep 17 00:00:00 2001 +From b37781fdf5c5f4b373f124875c39ae10697c5898 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:45:32 -0400 -Subject: [PATCH 3/3] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/sanlock.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/sanlock.spec b/SPECS/sanlock.spec -index b4996de..ebce8c1 100644 +index 5bfb8e4..587fcb2 100644 --- a/SPECS/sanlock.spec +++ b/SPECS/sanlock.spec @@ -6,7 +6,7 @@ Name: sanlock - Version: 3.5.0 + Version: 3.6.0 -Release: 1%{?dist} +Release: 1.el7%{?_tis_dist}.%{tis_patch_ver} Summary: A shared storage lock manager Group: System Environment/Base -- -1.9.1 +2.7.4 diff --git a/base/sanlock/centos/srpm_path b/base/sanlock/centos/srpm_path index 6e5198571..1945e74a4 100644 --- a/base/sanlock/centos/srpm_path +++ b/base/sanlock/centos/srpm_path @@ -1,2 +1,2 @@ -mirror:Source/sanlock-3.5.0-1.el7.src.rpm +mirror:Source/sanlock-3.6.0-1.el7.src.rpm diff --git a/base/setup/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/setup/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 543253914..a33932f66 100644 --- a/base/setup/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/setup/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,14 +1,14 @@ -From 412fc338e588c92ee0be3bf1b1af0040fac9f500 Mon Sep 17 00:00:00 2001 +From 667cc2ccdd4451ce9d943064d714bcf1a8d1e4ed Mon Sep 17 00:00:00 2001 From: Don Penney Date: Mon, 26 Sep 2016 17:40:54 -0400 -Subject: [PATCH] Update package versioning for TIS format +Subject: [PATCH 09/15] Update package versioning for TIS format --- SPECS/setup.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 223bfd5..89a4d2f 100644 +index 3ad2458..8f5fc46 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec @@ -1,7 +1,7 @@ @@ -16,10 +16,10 @@ index 223bfd5..89a4d2f 100644 Name: setup Version: 2.8.71 -Release: 9%{?dist} -+Release: 7.el7%{?_tis_dist}.%{tis_patch_ver} ++Release: 9.el7%{?_tis_dist}.%{tis_patch_ver} License: Public Domain Group: System Environment/Base - URL: https://fedorahosted.org/setup/ + URL: https://pagure.io/setup/ -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/security-make-exports-and-fstab-only-root-accessible.patch b/base/setup/centos/meta_patches/security-make-exports-and-fstab-only-root-accessible.patch index 464f5008a..23aae4d16 100644 --- a/base/setup/centos/meta_patches/security-make-exports-and-fstab-only-root-accessible.patch +++ b/base/setup/centos/meta_patches/security-make-exports-and-fstab-only-root-accessible.patch @@ -1,8 +1,7 @@ -From 2f6906e33b91dc28c7b48ce5604501ce09cfaed6 Mon Sep 17 00:00:00 2001 -Message-Id: <2f6906e33b91dc28c7b48ce5604501ce09cfaed6.1468352966.git.Jim.Somerville@windriver.com> +From 6d54fd5dff19e69d2d9c01e508fd4276e4eaef5b Mon Sep 17 00:00:00 2001 From: Jim Somerville Date: Tue, 12 Jul 2016 15:43:47 -0400 -Subject: [PATCH 1/1] security make exports and fstab only root accessible +Subject: [PATCH 07/15] security make exports and fstab only root accessible Apply a chmod of 600 to the two files. @@ -12,17 +11,17 @@ Signed-off-by: Jim Somerville 1 file changed, 1 insertion(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index d40113f..6c18614 100644 +index db3ed17..a612d24 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -65,6 +65,7 @@ chmod 0644 %{buildroot}/var/log/lastlog +@@ -69,6 +69,7 @@ chmod 0644 %{buildroot}/var/log/lastlog touch %{buildroot}/etc/fstab touch %{buildroot}/etc/subuid touch %{buildroot}/etc/subgid +chmod 0600 %{buildroot}/etc/{exports,fstab} install -m 644 %{SOURCE1} %{buildroot}/etc/ install -m 644 %{SOURCE2} %{buildroot}/etc/profile.d/prompt.sh - + mkdir -p %{buildroot}/etc/profile.d -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-add-TMOUT-variable.patch b/base/setup/centos/meta_patches/spec-add-TMOUT-variable.patch index 458d3f6a7..93ad36f75 100644 --- a/base/setup/centos/meta_patches/spec-add-TMOUT-variable.patch +++ b/base/setup/centos/meta_patches/spec-add-TMOUT-variable.patch @@ -1,40 +1,43 @@ -From 13bee9ed7d91fae3d66f91d4e4aa139ca3d05f66 Mon Sep 17 00:00:00 2001 +From d8ab20a896750f9fcd257d3e64cb0ef34e35140a Mon Sep 17 00:00:00 2001 From: David Balme Date: Thu, 13 Oct 2016 08:40:27 -0400 -Subject: [PATCH 1/1] add TMOUT variable +Subject: [PATCH 10/15] add TMOUT variable --- - SPECS/setup.spec | 3 +++ - 1 file changed, 3 insertions(+) + SPECS/setup.spec | 5 ++++- + 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 89a4d2f..1f5c96a 100644 +index 8f5fc46..a6465dc 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -8,6 +8,7 @@ URL: https://fedorahosted.org/setup/ - Source0: https://fedorahosted.org/releases/s/e/%{name}/%{name}-%{version}.tar.bz2 +@@ -8,6 +8,7 @@ URL: https://pagure.io/setup/ + Source0: http://releases.pagure.org/%{name}/%{name}-%{version}.tar.bz2 Source1: motd Source2: prompt.sh +Source3: custom.sh BuildArch: noarch BuildRequires: bash tcsh perl #require system release for saner dependency order -@@ -70,6 +71,7 @@ touch %{buildroot}/etc/subgid +@@ -73,8 +74,9 @@ touch %{buildroot}/etc/subuid + touch %{buildroot}/etc/subgid chmod 0600 %{buildroot}/etc/{exports,fstab} install -m 644 %{SOURCE1} %{buildroot}/etc/ - install -m 644 %{SOURCE2} %{buildroot}/etc/profile.d/prompt.sh +-install -m 644 %{SOURCE2} %{buildroot}/etc/profile.d/prompt.sh + mkdir -p %{buildroot}/etc/profile.d ++install -m 644 %{SOURCE2} %{buildroot}/etc/profile.d/prompt.sh +install -m 644 %{SOURCE3} %{buildroot}/etc/profile.d/custom.sh + echo "#Add any required envvar overrides to this file, it is sourced from /etc/profile" >%{buildroot}/etc/profile.d/sh.local + echo "#Add any required envvar overrides to this file, is sourced from /etc/csh.login" >%{buildroot}/etc/profile.d/csh.local - # remove unpackaged files from the buildroot - rm -f %{buildroot}/etc/Makefile -@@ -125,6 +127,7 @@ end +@@ -133,6 +135,7 @@ end %config(noreplace) /etc/motd %dir /etc/profile.d /etc/profile.d/prompt.sh +/etc/profile.d/custom.sh + %config(noreplace) /etc/profile.d/sh.local + %config(noreplace) /etc/profile.d/csh.local %config(noreplace) %verify(not md5 size mtime) /etc/shells - %ghost %attr(0644,root,root) %verify(not md5 size mtime) /var/log/lastlog - %ghost %verify(not md5 size mtime) %config(noreplace,missingok) /etc/fstab -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-add-ironic-uid-gid.patch b/base/setup/centos/meta_patches/spec-add-ironic-uid-gid.patch index 7aa40568f..8311e7592 100644 --- a/base/setup/centos/meta_patches/spec-add-ironic-uid-gid.patch +++ b/base/setup/centos/meta_patches/spec-add-ironic-uid-gid.patch @@ -1,26 +1,33 @@ -commit f944ef677dc090e91b790ac54064d61d071edb5c -Author: Shoaib Nasir -Date: Mon Sep 25 12:20:43 2017 -0400 +From 1c1e025ff9cdf5a5041959434a79014e24015271 Mon Sep 17 00:00:00 2001 +From: Shoaib Nasir +Date: Mon, 27 Aug 2018 17:55:18 +0800 Add ironic-uid-gid.patch to SPECS +--- + SPECS/setup.spec | 2 ++ + 1 file changed, 2 insertions(+) + diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 2ec3541..55dd30b 100644 +index 367a13b..974113e 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -28,6 +28,7 @@ Patch9: snmpd-fm-user-group.patch - Patch10: remove-unused-default-groups.patch - Patch11: add-fm-user-to-snmpd-group.patch - Patch12: add-magnum-uid-gid.patch -+Patch13: add-ironic-uid-gid.patch +@@ -30,6 +30,7 @@ Patch11: snmpd-fm-user-group.patch + Patch12: remove-unused-default-groups.patch + Patch13: add-fm-user-to-snmpd-group.patch + Patch14: add-magnum-uid-gid.patch ++Patch15: add-ironic-uid-gid.patch %description The setup package contains a set of important system configuration and -@@ -48,6 +49,7 @@ setup files, such as passwd, group, and profile. - %patch10 -p1 - %patch11 -p1 +@@ -52,6 +53,7 @@ setup files, such as passwd, group, and profile. %patch12 -p1 -+%patch13 -p1 + %patch13 -p1 + %patch14 -p1 ++%patch15 -p1 ./shadowconvert.sh +-- +2.7.4 + diff --git a/base/setup/centos/meta_patches/spec-add-magnum-uid-gid.patch b/base/setup/centos/meta_patches/spec-add-magnum-uid-gid.patch index c689da226..7294e29ae 100644 --- a/base/setup/centos/meta_patches/spec-add-magnum-uid-gid.patch +++ b/base/setup/centos/meta_patches/spec-add-magnum-uid-gid.patch @@ -1,32 +1,32 @@ -From 11086bd4422e8f24a0b070eb16e53b08f4561c61 Mon Sep 17 00:00:00 2001 +From 23dda8869b96f7df3db3fc885ca960b4889c82c0 Mon Sep 17 00:00:00 2001 From: Jerry Sun Date: Thu, 3 Aug 2017 16:18:34 -0400 -Subject: [PATCH 1/1] meta add magnum uid and gid +Subject: [PATCH 12/15] meta add magnum uid and gid --- SPECS/setup.spec | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 9ee24ca..2ec3541 100644 +index 6a871f3..367a13b 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -27,6 +27,7 @@ Patch8: passwd-remove-unused-default-users-and-groups.patch - Patch9: snmpd-fm-user-group.patch - Patch10: remove-unused-default-groups.patch - Patch11: add-fm-user-to-snmpd-group.patch -+Patch12: add-magnum-uid-gid.patch +@@ -29,6 +29,7 @@ Patch10: passwd-remove-unused-default-users-and-groups.patch + Patch11: snmpd-fm-user-group.patch + Patch12: remove-unused-default-groups.patch + Patch13: add-fm-user-to-snmpd-group.patch ++Patch14: add-magnum-uid-gid.patch %description The setup package contains a set of important system configuration and -@@ -46,6 +47,7 @@ setup files, such as passwd, group, and profile. - %patch9 -p1 - %patch10 -p1 +@@ -50,6 +51,7 @@ setup files, such as passwd, group, and profile. %patch11 -p1 -+%patch12 -p1 + %patch12 -p1 + %patch13 -p1 ++%patch14 -p1 ./shadowconvert.sh -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-add-murano-uid-gid.patch b/base/setup/centos/meta_patches/spec-add-murano-uid-gid.patch index e7e7bd4ef..552448228 100644 --- a/base/setup/centos/meta_patches/spec-add-murano-uid-gid.patch +++ b/base/setup/centos/meta_patches/spec-add-murano-uid-gid.patch @@ -1,32 +1,32 @@ -From bb774f39b779de4e31007fc70bead641820ae74f Mon Sep 17 00:00:00 2001 +From 07aca8a7f571059552dceb9a83d7b231e6ba01ff Mon Sep 17 00:00:00 2001 From: Jerry Sun Date: Mon, 8 Jan 2018 12:28:08 -0500 -Subject: [PATCH 1/1] meta add murano uid and gid +Subject: [PATCH 14/15] meta add murano uid and gid --- SPECS/setup.spec | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 55dd30b..b652b3c 100644 +index 974113e..7f636ea 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -29,6 +29,7 @@ Patch10: remove-unused-default-groups.patch - Patch11: add-fm-user-to-snmpd-group.patch - Patch12: add-magnum-uid-gid.patch - Patch13: add-ironic-uid-gid.patch -+Patch14: add-murano-uid-gid.patch +@@ -31,6 +31,7 @@ Patch12: remove-unused-default-groups.patch + Patch13: add-fm-user-to-snmpd-group.patch + Patch14: add-magnum-uid-gid.patch + Patch15: add-ironic-uid-gid.patch ++Patch16: add-murano-uid-gid.patch %description The setup package contains a set of important system configuration and -@@ -50,6 +51,7 @@ setup files, such as passwd, group, and profile. - %patch11 -p1 - %patch12 -p1 +@@ -54,6 +55,7 @@ setup files, such as passwd, group, and profile. %patch13 -p1 -+%patch14 -p1 + %patch14 -p1 + %patch15 -p1 ++%patch16 -p1 ./shadowconvert.sh -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-add-uid-gid-for-telemetry-services.patch b/base/setup/centos/meta_patches/spec-add-uid-gid-for-telemetry-services.patch index e6ce725e6..3e6c6bab0 100644 --- a/base/setup/centos/meta_patches/spec-add-uid-gid-for-telemetry-services.patch +++ b/base/setup/centos/meta_patches/spec-add-uid-gid-for-telemetry-services.patch @@ -1,32 +1,32 @@ -From 8c24c1c8bc9b703714c52b9b45cd3ea90f4a6604 Mon Sep 17 00:00:00 2001 +From 34c8b5f204877ae54d07248b9729353c8f8dfecf Mon Sep 17 00:00:00 2001 From: Angie Wang Date: Thu, 7 Jun 2018 16:39:08 -0400 -Subject: [PATCH] spec add uid gid for telemetry services +Subject: [PATCH 15/15] spec add uid gid for telemetry services --- SPECS/setup.spec | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index b652b3c..76d4feb 100644 +index 7f636ea..4f11a37 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -30,6 +30,7 @@ Patch11: add-fm-user-to-snmpd-group.patch - Patch12: add-magnum-uid-gid.patch - Patch13: add-ironic-uid-gid.patch - Patch14: add-murano-uid-gid.patch -+Patch15: add-uid-gid-for-telemetry-services.patch +@@ -32,6 +32,7 @@ Patch13: add-fm-user-to-snmpd-group.patch + Patch14: add-magnum-uid-gid.patch + Patch15: add-ironic-uid-gid.patch + Patch16: add-murano-uid-gid.patch ++Patch17: add-uid-gid-for-telemetry-services.patch %description The setup package contains a set of important system configuration and -@@ -52,6 +53,7 @@ setup files, such as passwd, group, and profile. - %patch12 -p1 - %patch13 -p1 +@@ -56,6 +57,7 @@ setup files, such as passwd, group, and profile. %patch14 -p1 -+%patch15 -p1 + %patch15 -p1 + %patch16 -p1 ++%patch17 -p1 ./shadowconvert.sh -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-include-TiS-changes.patch b/base/setup/centos/meta_patches/spec-include-TiS-changes.patch index 3cbf3b64c..2b4d92d99 100644 --- a/base/setup/centos/meta_patches/spec-include-TiS-changes.patch +++ b/base/setup/centos/meta_patches/spec-include-TiS-changes.patch @@ -1,35 +1,43 @@ -setup.spec: to include Titanium Cloud specific changes +From 236314295289b829e6216022a247017f7c0851c7 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Tue, 7 Aug 2018 22:41:01 +0800 +Subject: [PATCH 01/15] setup.spec: to include Titanium Cloud specific changes To include files under cgcs/recipes-base/setup/files/* +Signed-off-by: slin14 +--- + SPECS/setup.spec | 3 +++ + 1 file changed, 3 insertions(+) + diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 9174b5a..efc52ca 100644 +index 317132b..4ac1019 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec @@ -6,6 +6,7 @@ License: Public Domain Group: System Environment/Base - URL: https://fedorahosted.org/setup/ - Source0: https://fedorahosted.org/releases/s/e/%{name}/%{name}-%{version}.tar.bz2 + URL: https://pagure.io/setup/ + Source0: http://releases.pagure.org/%{name}/%{name}-%{version}.tar.bz2 +Source1: motd BuildArch: noarch BuildRequires: bash tcsh perl #require system release for saner dependency order -@@ -55,6 +56,7 @@ chmod 0644 %{buildroot}/var/log/lastlog +@@ -59,6 +60,7 @@ chmod 0644 %{buildroot}/var/log/lastlog touch %{buildroot}/etc/fstab touch %{buildroot}/etc/subuid touch %{buildroot}/etc/subgid +install -m 644 %{SOURCE1} %{buildroot}/etc/ - - # remove unpackaged files from the buildroot - rm -f %{buildroot}/etc/Makefile -@@ -107,6 +109,7 @@ end + mkdir -p %{buildroot}/etc/profile.d + echo "#Add any required envvar overrides to this file, it is sourced from /etc/profile" >%{buildroot}/etc/profile.d/sh.local + echo "#Add any required envvar overrides to this file, is sourced from /etc/csh.login" >%{buildroot}/etc/profile.d/csh.local +@@ -115,6 +117,7 @@ end %attr(0600,root,root) %config(noreplace,missingok) /etc/securetty %config(noreplace) /etc/csh.login %config(noreplace) /etc/csh.cshrc +%config(noreplace) /etc/motd %dir /etc/profile.d - %config(noreplace) %verify(not md5 size mtime) /etc/shells - %ghost %attr(0644,root,root) %verify(not md5 size mtime) /var/log/lastlog + %config(noreplace) /etc/profile.d/sh.local + %config(noreplace) /etc/profile.d/csh.local -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-include-add-fm-user-to-snmpd-group.patch b/base/setup/centos/meta_patches/spec-include-add-fm-user-to-snmpd-group.patch index 44ea8bdaf..24c579c59 100644 --- a/base/setup/centos/meta_patches/spec-include-add-fm-user-to-snmpd-group.patch +++ b/base/setup/centos/meta_patches/spec-include-add-fm-user-to-snmpd-group.patch @@ -1,22 +1,33 @@ +From 3eb03183dc24b865dd3e84495a82899f39665690 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Tue, 7 Aug 2018 23:17:05 +0800 +Subject: [PATCH 11/15] spec-include-add-fm-user-to-snmpd-group + +Signed-off-by: slin14 --- - SPECS/setup.spec | 2 ++ + SPECS/setup.spec | 2 ++ 1 file changed, 2 insertions(+) +diff --git a/SPECS/setup.spec b/SPECS/setup.spec +index a6465dc..6a871f3 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -26,6 +26,7 @@ Patch6: updating-gids-and-uids-to-suppor - Patch8: passwd-remove-unused-default-users-and-groups.patch - Patch9: snmpd-fm-user-group.patch - Patch10: remove-unused-default-groups.patch -+Patch11: add-fm-user-to-snmpd-group.patch +@@ -28,6 +28,7 @@ Patch9: updating-gids-and-uids-to-support-upgrade-from-wrl.patch + Patch10: passwd-remove-unused-default-users-and-groups.patch + Patch11: snmpd-fm-user-group.patch + Patch12: remove-unused-default-groups.patch ++Patch13: add-fm-user-to-snmpd-group.patch %description The setup package contains a set of important system configuration and -@@ -44,6 +45,7 @@ setup files, such as passwd, group, and - %patch8 -p1 - %patch9 -p1 +@@ -48,6 +49,7 @@ setup files, such as passwd, group, and profile. %patch10 -p1 -+%patch11 -p1 + %patch11 -p1 + %patch12 -p1 ++%patch13 -p1 ./shadowconvert.sh +-- +2.7.4 + diff --git a/base/setup/centos/meta_patches/spec-include-snmpd-fm-user-group.patch b/base/setup/centos/meta_patches/spec-include-snmpd-fm-user-group.patch index 3de93e31b..60980ec0a 100644 --- a/base/setup/centos/meta_patches/spec-include-snmpd-fm-user-group.patch +++ b/base/setup/centos/meta_patches/spec-include-snmpd-fm-user-group.patch @@ -1,41 +1,32 @@ -From 35ebbf2ca7e5e412f55cdaa875845728d203b34d Mon Sep 17 00:00:00 2001 +From f0882fad769c71cb70b44251c79f39e7e13dbc48 Mon Sep 17 00:00:00 2001 From: Kam Nasim Date: Fri, 12 Aug 2016 17:35:28 -0400 -Subject: [PATCH] meta patch for snmpd-user-group.patch +Subject: [PATCH 06/15] meta patch for snmpd-user-group.patch --- - SPECS/setup.spec | 4 +++- - 1 file changed, 3 insertions(+), 1 deletion(-) + SPECS/setup.spec | 2 ++ + 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 89ff683..d40113f 100644 +index 10d151b..db3ed17 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -1,7 +1,7 @@ - Summary: A set of system configuration and setup files - Name: setup - Version: 2.8.71 --Release: 7%{?dist} -+Release: 8%{?dist} - License: Public Domain - Group: System Environment/Base - URL: https://fedorahosted.org/setup/ -@@ -23,6 +23,7 @@ Patch5: setup-2.8.71-fullpath.patch - Patch6: tis-uid-gid.patch - Patch7: updating-gids-and-uids-to-support-upgrade-from-wrl.patch - Patch8: passwd-remove-unused-default-users-and-groups.patch -+Patch9: snmpd-fm-user-group.patch +@@ -25,6 +25,7 @@ Patch7: setup-2.8.71-shlocal.patch + Patch8: tis-uid-gid.patch + Patch9: updating-gids-and-uids-to-support-upgrade-from-wrl.patch + Patch10: passwd-remove-unused-default-users-and-groups.patch ++Patch11: snmpd-fm-user-group.patch %description The setup package contains a set of important system configuration and -@@ -39,6 +40,7 @@ setup files, such as passwd, group, and profile. - %patch6 -p1 - %patch7 -p1 +@@ -43,6 +44,7 @@ setup files, such as passwd, group, and profile. %patch8 -p1 -+%patch9 -p1 + %patch9 -p1 + %patch10 -p1 ++%patch11 -p1 ./shadowconvert.sh -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-include-tis-uid-gid.patch b/base/setup/centos/meta_patches/spec-include-tis-uid-gid.patch index 665c14258..5c024a5c9 100644 --- a/base/setup/centos/meta_patches/spec-include-tis-uid-gid.patch +++ b/base/setup/centos/meta_patches/spec-include-tis-uid-gid.patch @@ -1,1078 +1,32 @@ -From ee087f57155f691c416857888a5655f4230becc8 Mon Sep 17 00:00:00 2001 +From e6d1a2794975f708a682a2094df65e14ddaa1eb0 Mon Sep 17 00:00:00 2001 From: Don Penney Date: Mon, 25 Apr 2016 13:15:13 -0400 -Subject: [PATCH 1/1] WRS: spec-include-tis-uid-gid.patch +Subject: [PATCH 02/15] WRS: spec-include-tis-uid-gid.patch --- - SPECS/setup.spec | 2 + - SPECS/setup.spec.orig | 1038 +++++++++++++++++++++++++++++++++++++++++++++++++ - 2 files changed, 1040 insertions(+) - create mode 100644 SPECS/setup.spec.orig + SPECS/setup.spec | 2 ++ + 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index efc52ca..3f74b90 100644 +index 4ac1019..72cbcba 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -19,6 +19,7 @@ Patch2: setup-2.8.71-bashrc-shellvar.patch - Patch3: setup-2.8.71-uidgidchanges.patch - Patch4: setup-2.8.71-filesystems.patch +@@ -21,6 +21,7 @@ Patch4: setup-2.8.71-filesystems.patch Patch5: setup-2.8.71-fullpath.patch -+Patch6: tis-uid-gid.patch + Patch6: setup-2.8.71-tapeid.patch + Patch7: setup-2.8.71-shlocal.patch ++Patch8: tis-uid-gid.patch %description The setup package contains a set of important system configuration and -@@ -32,6 +33,7 @@ setup files, such as passwd, group, and profile. - %patch3 -p1 - %patch4 -p1 +@@ -36,6 +37,7 @@ setup files, such as passwd, group, and profile. %patch5 -p1 -+%patch6 -p1 + %patch6 -p1 + %patch7 -p1 ++%patch8 -p1 ./shadowconvert.sh -diff --git a/SPECS/setup.spec.orig b/SPECS/setup.spec.orig -new file mode 100644 -index 0000000..3b20861 ---- /dev/null -+++ b/SPECS/setup.spec.orig -@@ -0,0 +1,1038 @@ -+Summary: A set of system configuration and setup files -+Name: setup -+Version: 2.8.71 -+Release: 6%{?dist} -+License: Public Domain -+Group: System Environment/Base -+URL: https://fedorahosted.org/setup/ -+Source0: https://fedorahosted.org/releases/s/e/%{name}/%{name}-%{version}.tar.bz2 -+Source1: motd -+BuildArch: noarch -+BuildRequires: bash tcsh perl -+#require system release for saner dependency order -+Requires: system-release -+Conflicts: filesystem < 3 -+Conflicts: initscripts < 4.26, bash <= 2.0.4-21 -+ -+Patch1: setup-2.8.71-securetty-mainframes.patch -+Patch2: setup-2.8.71-bashrc-shellvar.patch -+Patch3: setup-2.8.71-uidgidchanges.patch -+Patch4: setup-2.8.71-filesystems.patch -+ -+%description -+The setup package contains a set of important system configuration and -+setup files, such as passwd, group, and profile. -+ -+%prep -+%setup -q -+ -+%patch1 -p1 -b .mainframe -+%patch2 -p1 -b .envvar -+%patch3 -p1 -+%patch4 -p1 -+ -+./shadowconvert.sh -+ -+%build -+ -+%check -+# Run any sanity checks. -+make check -+ -+%install -+rm -rf %{buildroot} -+mkdir -p %{buildroot}/etc/profile.d -+cp -ar * %{buildroot}/etc -+rm -f %{buildroot}/etc/uidgid -+rm -f %{buildroot}/etc/COPYING -+mkdir -p %{buildroot}/var/log -+touch %{buildroot}/var/log/lastlog -+touch %{buildroot}/etc/environment -+chmod 0644 %{buildroot}/etc/environment -+chmod 0400 %{buildroot}/etc/{shadow,gshadow} -+chmod 0644 %{buildroot}/var/log/lastlog -+touch %{buildroot}/etc/fstab -+install -m 644 %{SOURCE1} %{buildroot}/etc/ -+ -+# remove unpackaged files from the buildroot -+rm -f %{buildroot}/etc/Makefile -+rm -f %{buildroot}/etc/serviceslint -+rm -f %{buildroot}/etc/uidgidlint -+rm -f %{buildroot}/etc/shadowconvert.sh -+rm -f %{buildroot}/etc/setup.spec -+# remove the "originals" of patched files -+rm -f %{buildroot}/etc/securetty.mainframe -+rm -f %{buildroot}/etc/bashrc.envvar -+rm -f %{buildroot}/etc/*.orig -+ -+%clean -+rm -rf %{buildroot} -+ -+#throw away useless and dangerous update stuff until rpm will be able to -+#handle it ( http://rpm.org/ticket/6 ) -+%post -p -+for i, name in ipairs({"passwd", "shadow", "group", "gshadow"}) do -+ os.remove("/etc/"..name..".rpmnew") -+end -+if posix.access("/usr/bin/newaliases", "x") then -+ os.execute("/usr/bin/newaliases >/dev/null") -+end -+ -+%files -+%defattr(-,root,root,-) -+%doc uidgid COPYING -+%verify(not md5 size mtime) %config(noreplace) /etc/passwd -+%verify(not md5 size mtime) %config(noreplace) /etc/group -+%verify(not md5 size mtime) %attr(0000,root,root) %config(noreplace,missingok) /etc/shadow -+%verify(not md5 size mtime) %attr(0000,root,root) %config(noreplace,missingok) /etc/gshadow -+%config(noreplace) /etc/services -+%verify(not md5 size mtime) %config(noreplace) /etc/exports -+%config(noreplace) /etc/aliases -+%config(noreplace) /etc/environment -+%config(noreplace) /etc/filesystems -+%config(noreplace) /etc/host.conf -+%verify(not md5 size mtime) %config(noreplace) /etc/hosts -+%config(noreplace) /etc/hosts.allow -+%config(noreplace) /etc/hosts.deny -+%verify(not md5 size mtime) %config(noreplace) /etc/motd -+%config(noreplace) /etc/printcap -+%verify(not md5 size mtime) %config(noreplace) /etc/inputrc -+%config(noreplace) /etc/bashrc -+%config(noreplace) /etc/profile -+%config(noreplace) /etc/protocols -+%attr(0600,root,root) %config(noreplace,missingok) /etc/securetty -+%config(noreplace) /etc/csh.login -+%config(noreplace) /etc/csh.cshrc -+%config(noreplace) /etc/motd -+%dir /etc/profile.d -+%config(noreplace) %verify(not md5 size mtime) /etc/shells -+%ghost %attr(0644,root,root) %verify(not md5 size mtime) /var/log/lastlog -+%ghost %verify(not md5 size mtime) %config(noreplace,missingok) /etc/fstab -+ -+%changelog -+* Fri May 22 2015 Ondrej Vasik - 2.8.71-6 -+- change reservation of 185:185 to jboss user (#1192413) -+- reserve uidgid pair 167:167 for ceph (#1221043) -+- reserve uidgid for systemd-network(192:192) (#1213820) -+- reserve uidgid for systemd-resolve(193:193) (#1213820) -+- mention systemd-jounal-gateway can be dynamic (#1213820) -+ -+ -+* Fri Aug 15 2014 Ondrej Vasik - 2.8.71-5 -+- reserve uidgid pair 142:142 for activemq (#1086923) -+- add xfs to /etc/filesystems, fallback to /proc/filesystems -+ (#1123832) -+ -+* Wed Mar 12 2014 Ondrej Vasik - 2.8.71-4 -+- require system-release for saner dependency order (#1075578) -+ -+* Tue Feb 25 2014 Ondrej Vasik - 2.8.71-3 -+- add more securetty required for mainframes (#1067347) -+- set SHELL envvar to /bin/bash in bashrc (#1063552) -+ -+* Fri Dec 27 2013 Daniel Mach - 2.8.71-2 -+- Mass rebuild 2013-12-27 -+ -+* Fri Jun 07 2013 Ondrej Vasik 2.8.71-1 -+- fix escape codes for screen (#969429) -+- handle vte terminals in bashrc (#924275) -+ -+* Tue May 14 2013 Ondrej Vasik 2.8.70-1 -+- fix typo in cdrom default group (#962486) -+ -+* Thu Apr 18 2013 Ondrej Vasik 2.8.69-1 -+- remove the rpmlib(X-CheckUnifiedSystemdir) requirement -+ hack - no longer required -+ -+* Sun Apr 14 2013 Ondrej Vasik 2.8.68-1 -+- assign gid :135 for mock (#928063) -+- update /etc/services to latest IANA reservations -+ -+* Wed Mar 20 2013 Ondrej Vasik 2.8.67-1 -+- assign 166:166 uidgid pair for ceilometer (#923891) -+- change 187:187 reservation from openstack-heat -+ to just heat(#923858) -+- longer shell names support caused by UsrMove to -+ the /etc/shells (#922527) -+- drop gopher (uid 13, gid 30) from groups created by default -+ -> dropped completely - no gopher server in Fedora (#918206) -+- drop dip (gid 40) from groups created by default -+ -> moved to ppp (#918206) -+- drop uucp (uidgid 14) from groups created by default -+ -> moved to uucp (#918206) -+- create cdrom, tape, dialout, floppy groups in setup(#919285) -+ -+* Tue Mar 05 2013 Ondrej Vasik 2.8.66-1 -+- assign :190 gid for systemd-journal (#918120) -+- assign 191:191 uidgid pair for systemd-journal-gateway (#918120) -+ -+* Wed Jan 23 2013 Ondrej Vasik 2.8.65-1 -+- assign 165:165 uidgid pair for cinder (#902987) -+ -+* Wed Jan 16 2013 Ondrej Vasik 2.8.64-1 -+- correct handling of 256 color terminals in bashrc -+ -+* Mon Dec 02 2012 Ondrej Vasik 2.8.63-1 -+- ovirtagent created by ovirt-guest-agent -+ -+* Mon Dec 02 2012 Ondrej Vasik 2.8.62-1 -+- rename rhevagent uidgid reservation to ovirtagent -+ -+* Fri Nov 02 2012 Ondrej Vasik 2.8.61-1 -+- reserve uid 189 for hacluster (#872208) -+- reserve gid 189 for haclient (#872208) -+ -+* Tue Oct 02 2012 Ondrej Vasik 2.8.60-1 -+- reserve 188:188 for haproxy (#860221) -+ -+* Wed Sep 19 2012 Ondrej Vasik 2.8.59-1 -+- update /etc/services to match with latest IANA -+ assignments -+ -+* Mon Aug 21 2012 Ondrej Vasik 2.8.58-1 -+- reserve 110:110 for jetty (#849927) -+ -+* Mon Aug 06 2012 Ondrej Vasik 2.8.57-1 -+- reserve 187:187 for openstack-heat (#845078) -+ -+* Sat Jul 21 2012 Fedora Release Engineering - 2.8.56-2 -+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild -+ -+* Fri Jul 13 2012 Ondrej Vasik 2.8.56-1 -+- Turn on parallel history in bash (#815810) -+ -+* Thu Jul 12 2012 Ondrej Vasik 2.8.55-1 -+- reserve 186 uid for jbosson-agent user, reserve 186 gid -+ for jbosson group (#839410) -+ -+* Fri May 11 2012 Ondrej Vasik 2.8.54-1 -+- use unset -f pathmunge in /etc/profile to work more nicely -+ with ksh (#791140) -+ -+* Wed Apr 11 2012 Ondrej Vasik 2.8.53-1 -+- reserve 185:185 for jboss-as (#809398) -+ -+* Fri Mar 23 2012 Ondrej Vasik 2.8.52-1 -+- reserve 184:184 for mongodb (#806052) -+ -+* Thu Mar 22 2012 Ondrej Vasik 2.8.51-1 -+- do not throw away the stderr output of profile.d scripts -+ in noninteractive bash/ksh sessions(#805507) -+ -+* Mon Mar 19 2012 Ondrej Vasik 2.8.50-1 -+- reserve 182:182 for katello (#804204) -+- reserve 183:183 for elasticsearch (#804205) -+ -+* Tue Feb 21 2012 Ondrej Vasik 2.8.49-1 -+- conflict with filesystems before usrmove change -+ -+* Sun Feb 12 2012 Ondrej Vasik 2.8.48-1 -+- remove /bin and /sbin from /etc/profile(#789616) -+- require usrmove -+- add sbin paths in csh.login consistently with bash(#773268) -+ -+* Tue Jan 10 2012 Ondrej Vasik 2.8.47-1 -+- reserve 181:181 uidgid pair for wallaby (#772747) -+ -+* Tue Dec 06 2011 Ondrej Vasik 2.8.46-1 -+- reserve 134:134 uidgid pair for cimsrvr (#760178) -+ -+* Fri Nov 25 2011 Ondrej Vasik 2.8.45-1 -+- reserve :156 groupid for stapusr - #756807 -+- reserve :157 groupid for stapsys - #756807 -+- reserve :158 groupid for stapdev - #756807 -+ -+* Wed Nov 16 2011 Ondrej Vasik 2.8.44-1 -+- reserve 180:180 for aeolus - #754274 -+ -+* Fri Nov 11 2011 Ondrej Vasik 2.8.43-1 -+- gopher home dir in uidgid should be /var/gopher - #752885 -+- reserve 163:163 for keystone (openstack-keystone) - #752842 -+- reserve 164:164 for quantum (openstack-quantum) - #752842 -+- update services to latest IANA -+ -+* Wed Nov 2 2011 Ondrej Vasik 2.8.42-1 -+- add ext4 to /etc/filesystems - #750506 -+ -+* Wed Sep 14 2011 Ondrej Vasik 2.8.41-1 -+- reserve 179:179 for sanlock - #727655 -+ -+* Fri Aug 26 2011 Ondrej Vasik 2.8.40-1 -+- reserve 178:178 for myproxy (myproxy-server) - #733671 -+ -+* Fri Aug 26 2011 Ondrej Vasik 2.8.39-1 -+- reserve 177:177 for dhcpd (dhcp) - #699713 -+ -+* Tue Aug 23 2011 Ondrej Vasik 2.8.38-1 -+- reserve 160:160 for swift (openstack-swift) - #732442 -+- reserve 161:161 for glance (openstack-glance) - #732442 -+- reserve 162:162 for nova (openstack-nova) - #732442 -+- comment out 0/tcp spr-itunes /etc/services entry (#710185) -+- add hvc[01], xvc0, hvsi[012] to /etc/securetty (#728030) -+ -+* Tue Aug 16 2011 Ondrej Vasik 2.8.37-1 -+- dropped all suplemental groups from basic /etc/group file -+ (#722529) -+ -+* Tue Aug 16 2011 Ondrej Vasik 2.8.36-1 -+- dropped suplemental root's groups(#722529) -+ -+* Wed Jun 29 2011 Ondrej Vasik 2.8.35-1 -+- reserve 176:176 for apache traffic server - ats(#715266) -+ -+* Mon Jun 13 2011 Ondrej Vasik 2.8.34-1 -+- update protocols and services to latest IANA -+- reserve 175:175 for rhevagent (#709599) -+ -+* Thu May 19 2011 Ondrej Vasik 2.8.33-1 -+- reflect the reserved username change of amanda -+ to amandabackup (#700807) -+- drop order hosts,bind from setup, no longer used by -+ glibc (#703049) -+- assign 174:174 uidgid for user/group retrace -+ (abrt retrace-server, #706012) -+ -+* Tue Apr 12 2011 Ondrej Vasik 2.8.32-1 -+- do not override already set PROMPT_COMMAND envvar(#691425) -+- do not quit uidgidlint after first error, show all -+- update services to latest IANA -+ -+* Mon Jan 24 2011 Ondrej Vasik 2.8.31-1 -+- drop ownership of /etc/mtab, now owned by util-linux -+ -+* Tue Jan 18 2011 Ondrej Vasik 2.8.30-1 -+- remove explicit buildroot -+- reserve uidgid pair 173:173 for abrt(#670231) -+ -+* Fri Dec 03 2010 Ondrej Vasik 2.8.29-1 -+- run newaliases in the post to prevent sendmail messages -+ about old alias database in the log(#658921) -+ -+* Fri Nov 12 2010 Ondrej Vasik 2.8.28-1 -+- update services and protocols to latest IANA reservations -+- reserve uidgid pair 109:109 for rhevm(#652287) -+ -+* Tue Sep 07 2010 Ondrej Vasik 2.8.27-1 -+- add double quotes arround sourced profile.d scripts - -+ allow special characters in script names -+ -+* Wed Aug 18 2010 Ondrej Vasik 2.8.26-1 -+- fix regression in the change to printf(#624900) -+ -+* Thu Aug 12 2010 Ondrej Vasik 2.8.25-1 -+- use printf instead of echo in bashrc scripts(#620435) -+- update services to latest IANA -+ -+* Wed Jul 28 2010 Ondrej Vasik 2.8.24-1 -+- do show messages from profile.d scripts in interactive -+ login ksh shell(#616418) -+- respect umask settings even with login shell -+ -+* Tue Jun 29 2010 Ondrej Vasik 2.8.23-1 -+- reserve uidgid pair 172:172 for rtkit (#609171) -+ -+* Tue Jun 15 2010 Ondrej Vasik 2.8.22-1 -+- reserve uidgid pair 170:170 for avahi-autoipd -+- reserve uidgid pair 171:171 for pulse (pulseaudio) -+- update reserved homedir for avahi -+ -+* Mon Jun 07 2010 Ondrej Vasik 2.8.21-1 -+- update name of group reserved by cyrus-imapd to saslauth -+ -+* Mon May 24 2010 Ondrej Vasik 2.8.20-1 -+- speedup pathmunge() by using portable case(#544652) -+ -+* Wed May 19 2010 Ondrej Vasik 2.8.19-1 -+- fix syntax error in bashrc pathmunge(since bash 3.2)(#592799) -+ -+* Tue Apr 27 2010 Ondrej Vasik 2.8.18-1 -+- reserve uidgid pair 140:140 for ricci daemon(#585957) -+- reserve uidgid pair 141:141 for luci daemon(#585958) -+ -+* Wed Mar 31 2010 Ondrej Vasik 2.8.17-1 -+- verify md5sum/size/mtime in the case of /etc/hosts.allow -+ and /etc/hosts.deny (#578263) -+- do the same for /etc/services and /etc/protocols, we -+ provide (almost) complete IANA set, so no reason to modify -+ it in most cases outside of setup package -+ -+* Fri Mar 26 2010 Ondrej Vasik 2.8.16-3 -+- bad ugly double-thirteen friday(fix previous badfix) -+ -+* Fri Mar 26 2010 Ondrej Vasik 2.8.16-2 -+- fix not set path for csh shell caused by 2.8.16 update -+ -+* Fri Mar 26 2010 Ondrej Vasik 2.8.16-1 -+- drop X11R6 hierarchy dir from tcsh path (#576940) -+- update services to latest IANA -+- update protocols to latest IANA -+ -+* Thu Jan 21 2010 Ondrej Vasik 2.8.15-1 -+- reserve uidgid pair 155:155 for stap-server(#555813) -+- reserve uidgid pair 113:113 for usbmuxd(#556525) -+ -+* Tue Jan 12 2010 Ondrej Vasik 2.8.14-1 -+- reserve uidgid pair 133:133 for bacula(#554705) -+ -+* Tue Jan 05 2010 Ondrej Vasik 2.8.13-1 -+- update services to latest IANA -+- avoid one /usr/bin/id stat call in /etc/profile(#549056) -+ -+* Thu Dec 17 2009 Ondrej Vasik 2.8.12-1 -+- speed up pathmunge inside bashrc (#544652) -+- do not use deprecated egrep in profile -+ -+* Thu Dec 03 2009 Ondrej Vasik 2.8.11-1 -+- don't have HISTCONTROL ignorespace by default (#520632), -+ but do not override it when it is already set -+- add csync alias for port 2005 / tcp, udp -+ -+* Wed Nov 11 2009 Ondrej Vasik 2.8.10-1 -+- reserve uidgid pair 112:112 for vhostmd (#534110) -+- update /etc/services to latest IANA -+ -+* Tue Sep 08 2009 Ondrej Vasik 2.8.9-1 -+- reserve uidgid pair 108:108 for ovirt from libvirt (#513261) -+- reserve uidgid pair 111:111 for saned from sane-backends -+ (#520634) -+ -+* Mon Aug 17 2009 Ondrej Vasik 2.8.8-1 -+- change permissions on /etc/shadow and /etc/gshadow to 0000 and -+ use capabilities for them(#517577) -+ -+* Sun Jul 26 2009 Fedora Release Engineering - 2.8.7-2 -+- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild -+ -+* Tue Jul 21 2009 Ondrej Vasik 2.8.7-1 -+- increase threshold for uidgid reservations to 200 -+- reserve uidgid pair 107:107 for qemu (libvirt,#511957) -+- reflect threshold in profile and bashrc, do inform about -+ uidgid file existence there -+- remove old remnants about portmap from hosts.deny(#509919) -+ -+* Mon Jun 29 2009 Ondrej Vasik 2.8.6-1 -+- update protocols and services to latest IANA -+- add example for tty in prompt(#503304) -+ -+* Wed May 20 2009 Ondrej Vasik 2.8.5-1 -+- use history-search-backward/forward for pageup/pagedown -+ mapping in inputrc (#500989) -+- add HISTCONTROL="ignoreboth" to /etc/profile to not include -+ duplicities and lines starting with space into the history -+ (#500819) -+ -+* Tue May 12 2009 Ondrej Vasik 2.8.4-1 -+- add oprofile (16:16) to uidgid -+- use os.remove instead of os.execute in lua post -+ - no dependency on /bin/sh (thanks Panu Matilainen) -+ -+* Wed Apr 22 2009 Ondrej Vasik 2.8.3-2 -+- rewrite postun scriptlet to to prevent /bin/sh -+ dependency -+ -+* Fri Apr 10 2009 Ondrej Vasik 2.8.3-1 -+- do not disable coredumps in profile/csh.cshrc scripts, -+ coredumps already disabled in rawhide's RLIMIT_CORE(#495035) -+ -+* Wed Mar 25 2009 Ondrej Vasik 2.8.2-2 -+- reserve uid 65 for nslcd (will share group 55 ldap, #491899) -+ -+* Tue Mar 24 2009 Ondrej Vasik 2.8.2-1 -+- ship COPYING file, update protocols and services -+ to latest IANA -+ -+* Mon Mar 23 2009 Ondrej Vasik 2.8.1-2 -+- fix sources syntax, add sources URL (#226412) -+ -+* Thu Feb 26 2009 Ondrej Vasik 2.8.1-1 -+- do ship/generate /etc/{shadow,gshadow} files(#483251) -+- do ship default /etc/hosts with setup (#483244) -+- activate multi on (required for IPv6 only localhost -+ recognition out-of-the-box) (#486461) -+- added postun section for cleaning of dangerous .rpmnew -+ files after updates -+- make profile and bashrc more portable (ksh, #487419) -+ -+* Wed Feb 25 2009 Fedora Release Engineering - 2.7.7-5 -+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild -+ -+* Mon Feb 02 2009 Ondrej Vasik 2.7.7-4 -+- drop scriptlet completely(audio/video group -+ temporarily created by packages which use it for -+ updates(#477769)) -+ -+* Fri Jan 30 2009 Ondrej Vasik 2.7.7-3 -+- add support for ctrl+arrow shortcut in rxvt(#474110) -+ -+* Thu Jan 29 2009 Ondrej Vasik 2.7.7-2 -+- reserve 87 gid for polkituser (just uid was reserved), -+ reserve 18 gid for dialout(to prevent conflicts with -+ polkituser gid) -+ -+* Thu Jan 22 2009 Ondrej Vasik 2.7.7-1 -+- synchronize /etc/services with latest IANA, do not use -+ tabs in that file to have consistent output -+- fix indentation in /etc/profile and /etc/bashrc -+ (#481074) -+- assign uid 36 for vdsm, gid 36 for kvm -+ (#346151,#481021) -+ -+* Tue Jan 20 2009 Ondrej Vasik 2.7.6-1 -+- make uidgid file better parsable (synchronize tabs) -+- reserve gid 11 for group cdrom (udev,MAKEDEV) -+- reserve gid 33 for group tape (udev,MAKEDEV) -+- reserve gid 87 for group dialout (udev,MAKEDEV) -+ -+* Tue Jan 06 2009 Ondrej Vasik 2.7.5-4 -+- use lua language in post to prevent additional -+ dependencies -+ -+* Thu Dec 18 2008 Ondrej Vasik 2.7.5-3 -+- add pkiuser (17:17) to uidgid -+- temporarily create video/audio group in post section -+ (#476886) -+ -+* Wed Dec 10 2008 Ondrej Vasik 2.7.5-2 -+- do not export PATH twice(#449286 NOTABUG revert) -+- do not export INPUTRC(to respect just created ~/.inputrc) -+ (#443717) -+ -+* Thu Nov 27 2008 Ondrej Vasik 2.7.5-1 -+- Modified upstream URL, synchronized with upstream git -+ -+* Wed Nov 19 2008 Ondrej Vasik 2.7.4-3 -+- update protocols to latest IANA list (2008-04-18) -+- update services to latest IANA list (2008-11-17) -+- mark /etc/protocols and /etc/inputrc %%config(noreplace) -+- added URL, fixed few rpmlint warnings -+- do own audio and video group (#458843), create it in default -+ /etc/group -+ -+* Tue Nov 18 2008 Ondrej Vasik 2.7.4-2 -+- again process profile.d scripts in noninteractive shells, -+ but do not display stderr/stdout messages(#457243) -+- fix wrong prompt for csh/tcsh (#443854) -+- don't show error message about missing hostname in profile -+ (#301481) -+- reserve rquotad port 875 in /etc/services (#455859) -+- export PATH after processing profile.d scripts (#449286) -+- assign gid's for audio (:63) and video (:39) group(#458843), -+ assign uidgid pair (52:52) for puppet (#471918) -+- fix /etc/services duplicities to pass serviceslint -+ -+* Thu Oct 09 2008 Phil Knirsch 2.7.4-1 -+- Include new serviceslint for speedup (#465642) -+- Cleaned up services due to newly discovered bugs in it with new serviceslint -+ -+* Wed Sep 03 2008 Phil Knirsch 2.7.3-1 -+- Added SBinSanity patch as an approved feature (#458176) -+ -+* Wed Aug 06 2008 Phil Knirsch 2.7.2-1 -+- Added uidgid pair for condor -+- Added uidgid pair for trousers -+ -+* Fri Jul 25 2008 Phil Knirsch 2.7.1-1 -+- Bump to 2.7.1 to avoid version problems with F-9 -+- Removed group news as well (#437462) -+ -+* Tue Jun 17 2008 Phil Knirsch 2.6.16-1 -+- Dropped user news from default /etc/passwd (#437462) -+ -+* Thu Jun 05 2008 Phil Knirsch 2.6.15-1 -+- Added prelude-manager and snortd to uidgid list -+ -+* Mon Apr 07 2008 Phil Knirsch 2.6.14-1 -+- Updated /etc/services to latest IANA version (#315571) -+ -+* Fri Apr 04 2008 Phil Knirsch -+- Fixed a problem with the new prompt for tcsh and screen terminal (#438550) -+ -+* Thu Mar 20 2008 Phil Knirsch 2.6.13-1 -+- Drop the wrong precmd for csh for xterm and screen terminals -+ -+* Tue Feb 26 2008 Phil Knirsch 2.6.12-1 -+- Corrected wrong /etc/profile.d behaviour for non-interactive bash and tcsh -+ -+* Fri Feb 22 2008 Phil Knirsch 2.6.11-1 -+- Fixed problem with /etc/profile.d/* and non-interactive tcsh (#299221) -+- Fixed xterm -title problem (#387581) -+- Fixed problem with /etc/profile.d/*.csh not being executed for none loginshells anymore -+ (#381631, #429838) -+- Corrected missing shell for news user in uidgid and passwd -+ -+* Thu Aug 16 2007 Phil Knirsch 2.6.10-1 -+- License review and update -+ -+* Tue Jul 24 2007 Phil Knirsch 2.6.9-1 -+- Assigned uid 87 for PolicyKit package (#244950) -+- Fixed precmd fix if TERM isn't set (#242732) -+ -+* Wed Jun 06 2007 Phil Knirsch 2.6.7-1 -+- Fixed precmd setting to behave like bash for (t)csh (#242732) -+ -+* Thu May 24 2007 Phil Knirsch 2.6.6-1 -+- Added another set of proposed changes to /etc/csh.cshrc (#199817) -+- Added missing documentation in /etc/hosts.[allow|deny] (#157053) -+ -+* Wed May 23 2007 Phil Knirsch 2.6.5-1 -+- Fixed tcsh behaviour for non login shells (#191233) -+- Fixed umask setting for tcsh to behave identical to bash logins (#199817) -+- Added ipv6-crypt and ipv6-auth for backwards compatibility (#210546) -+ -+* Wed Apr 18 2007 Phil Knirsch 2.6.4-1 -+- Modified the 111/[tcp/udp] entries to work with rpcbind (#236639) -+ -+* Mon Mar 12 2007 Phil Knirsch 2.6.3-1 -+- Changed winbind_auth to wbpriv by request of the samba maintainer -+ -+* Tue Dec 12 2006 Phil Knirsch 2.6.2-1.fc7 -+- Updated uidgid for split of pcap into arpwatcher and tcpdump. -+ -+* Tue Nov 28 2006 Phil Knirsch 2.6.1-1.fc7 -+- Update version and rebuilt -+ -+* Tue Nov 28 2006 Phil Knirsch 2.5.57-1 -+- Revert change for umask in /etc/bashrc (#217523) -+ -+* Thu Nov 16 2006 Phil Knirsch 2.5.56-1 -+- Added an entry for samba and winbind_auth -+ -+* Wed Oct 11 2006 Phil Knirsch 2.5.55-1 -+- Extended the protocols to include the missing hopopt (#209191) -+ -+* Tue Oct 10 2006 Phil Knirsch 2.5.54-1 -+- Update /etc/protocols to latest officiall IANA version (#209191) -+ -+* Thu Jul 27 2006 Phil Knirsch 2.5.53-1 -+- Added utempter gid for new libutempter package (#200240) -+ -+* Mon Jun 19 2006 Phil Knirsch 2.5.52-1 -+- Lock password for root account by default (#182206) -+ -+* Wed May 03 2006 Karsten Hopp -+- remove gkrellmd from the reserved uid/gid list (#186974) -+ -+* Tue Mar 21 2006 Florian La Roche 2.5.50-1 -+- use stricter umask of 022 for all logins -+ -+* Thu Feb 23 2006 Phil Knirsch 2.5.49-1 -+- Really switch to new /etc/services file -+- Added /etc/fstab and /etc/mtab to ownership of setup (#177061) -+ -+* Tue Jan 31 2006 Phil Knirsch 2.5.48-1 -+- Switched to the new large /etc/services file which fixes #112298, #133683, -+ #166443, #168872, #171228. -+- Fixed pathmunge problem with bashrc (#123621) -+- Removed /usr/X11R6/bin from default PATH (#173856) -+ -+* Tue Jan 24 2006 Phil Knirsch -+- Fixed bug with PROMPT_COMMAND being broken for wierd dirs (#142125) -+- Added hfsplus to know filesystems (#172820) -+ -+* Mon Oct 17 2005 Bill Nottingham -+- make motd noreplace (#170539) -+ -+* Tue Sep 6 2005 Bill Nottingham 2.5.47-1 -+- make lastlog 0644 (#167200) -+ -+* Mon Jun 20 2005 Bill Nottingham 2.5.46-1 -+- add buildrequires on bash, tcsh (#161016) -+- move core dump size setting from csh.login to csh.cshrc (#156914) -+ -+* Fri Jun 17 2005 Bill Nottingham 2.5.45-1 -+- ksh doesn't implement EUID/UID. Work around that. (#160731) -+ -+* Thu May 19 2005 Bill Nottingham 2.5.44-1 -+- fix csh.cshrc when -e is used (#158265) -+ -+* Mon Apr 25 2005 Bill Nottingham 2.5.43-1 -+- remove mailman aliases (#155841) -+ -+* Mon Apr 18 2005 Bill Nottingham 2.5.42-1 -+- fix lastlog conflict (#155256) -+ -+* Fri Apr 15 2005 Bill Nottingham 2.5.41-1 -+- get rid of 'id' error messages if there is no /usr (#142707) -+ -+* Mon Jan 31 2005 Bill Nottingham 2.5.40-1 -+- have similar prompt changes for su to root in tcsh as in bash (#143826) -+ -+* Tue Nov 23 2004 Bill Nottingham 2.5.39-1 -+- ghost lastlog (#139539) -+ -+* Thu Nov 18 2004 Bill Nottingham 2.5.38-1 -+- fix bash/tcsh coredump size inconsistency (#139821) -+ -+* Wed Oct 27 2004 Bill Nottingham 2.5.37-1 -+- fix inconsistency in profile.d handling (#136859, ) -+ -+* Fri Oct 8 2004 Bill Nottingham 2.5.36-1 -+- fix duplicate alias -+ -+* Tue Sep 28 2004 Bill Nottingham 2.5.35-1 -+- add /etc/environment -+ -+* Mon Sep 27 2004 Rik van Riel 2.5.34-2 -+- mark /etc/services config(noreplace) (#133683) -+ -+* Thu Sep 23 2004 Bill Nottingham 2.5.34-1 -+- add dict (#107807) -+- add cyrus services (#118832) -+- move delete-char binding for csh (#113682) -+- do the same path munging for csh as for bash (#57708) -+- add postfix aliases (#117661) -+- fix bashrc login shell check (#104491) -+- add odmr to services (#101098) -+- add distcc to services (#91535) -+- add xterm forware/backward word bindings (#80860) -+ -+* Mon May 24 2004 Bill Nottingham -+- make pathmunge available for profile.d scripts (#123621) -+ -+* Wed May 19 2004 Joe Orton 2.5.33-2 -+- add IANA Register Port for svn to /etc/services (#122863) -+ -+* Wed May 5 2004 Nalin Dahyabhai 2.5.33-1 -+- fix syntax error in csh.cshrc -+ -+* Tue May 4 2004 Bill Nottingham 2.5.32-1 -+- set MAIL in csh.cshrc (#115376) -+- fix inputrc check in csh.login (#115073) -+ -+* Mon Jan 26 2004 Bill Nottingham 2.5.31-1 -+- move /etc/aliases here -+ -+* Mon Dec 8 2003 Bill Nottingham 2.5.30-1 -+- remove stty `tput kbs` section (#91357) -+ -+* Tue Sep 2 2003 Bill Nottingham 2.5.27-1 -+- securetty should be noreplace (#103585) -+ -+* Fri Mar 14 2003 Bill Nottingham 2.5.26-1 -+- clean up some typos in /etc/services (#86129) -+ -+* Mon Feb 17 2003 Florian La Roche -+- add "console" to /etc/securetty for mainframe -+ -+* Mon Jan 20 2003 Nalin Dahyabhai 2.5.24-1 -+- allocate uid/gid for mgetty -+ -+* Thu Jan 9 2003 Dan Walsh 2.5.23-1 -+- added PXE to /etc/services -+ -+* Wed Jan 1 2003 Bill Nottingham 2.5.22-1 -+- remove bogus entries from inputrc (#80652) -+ -+* Fri Nov 29 2002 Tim Powers 2.5.21-1 -+- remove unpackaged files from the buildroot -+ -+* Thu Aug 29 2002 Bill Nottingham 2.5.20-1 -+- shopt -s checkwinsize everywhere -+ -+* Wed Aug 28 2002 Preston Brown 2.5.19-1 -+- fix bug #61129 (~ substitution) -+ -+* Wed Aug 15 2002 Jens Petersen 2.5.18-1 -+- bring back the screen case in /etc/bashrc, since /etc/screenrc no -+ longer sets defhstatus (#60596, #60597) -+ -+* Sun Aug 11 2002 Florian La Roche 2.5.17-1 -+- add "set mark-symlinked-directories on" to /etc/inputrc -+ -+* Mon Jul 22 2002 Phil Knirsch 2.5.16-2 -+- Added shopt -s checkwinsize to /etc/bashrc for xterm resizing -+ -+* Fri Jul 19 2002 Jens Petersen 2.5.16-1 -+- dont special case screen in /etc/bashrc, since it overrides the user's -+ screenrc title setting (#60596) -+ -+* Thu Jul 18 2002 Florian La Roche 2.5.14-1 -+- move home dir of "news" to /etc/news -+ -+* Tue May 28 2002 Nalin Dahyabhai 2.5.13-1 -+- allocate uid/gid for privilege-separated sshd -+ -+* Thu May 23 2002 Tim Powers 2.5.12-2 -+- automated rebuild -+ -+* Wed Apr 3 2002 Bill Nottingham 2.5.12-1 -+- fix misformatted comment in /etc/services, allocate uid/gid for -+ frontpage -+ -+* Thu Mar 28 2002 Bill Nottingham 2.5.11-1 -+- add newline in /etc/shells (#62271) -+ -+* Thu Mar 28 2002 Nalin Dahyabhai 2.5.10-1 -+- allocate uid for the vcsa user -+ -+* Tue Mar 12 2002 Bill Nottingham 2.5.9-1 -+- re-add ext3 to /etc/filesystems -+ -+* Mon Mar 11 2002 Bill Nottingham 2.5.8-1 -+- add nologin to /etc/shells (#53963) -+- fix some quoting issues (#59627) -+- fix screen status line (#60596) -+- fix path regexps (#59624) -+- move profile.d stuff to csh.cshrc (#59946) -+ -+* Fri Mar 8 2002 Nalin Dahyabhai -+- add bprd, bpdbm, bpjava-msvc, vnetd, bpcd, and vopied to /etc/services -+ -+* Tue Sep 25 2001 Nalin Dahyabhai -+- change rmtcfg to an alias for bvcontrol, which is a registered name -+ -+* Mon Sep 17 2001 Nalin Dahyabhai 2.5.7-1 -+- add entries to services (ipp, wnn4, and so on) -+- try to remove duplicates in services (remove nameserver as alias for domain, -+ and readnews as alias for netnews) -+ -+* Mon Aug 20 2001 Bill Nottingham -+- change FTP user's home dir to /var/ftp (#52091) -+- %%ghost /etc/shadow, /etc/gshadow -+ -+* Fri Aug 17 2001 Bill Nottingham -+- add /etc/shells to filelist (#51813) -+ -+* Mon Aug 13 2001 Bill Nottingham -+- put lock in /etc/group (#51654) -+ -+* Wed Aug 8 2001 Bill Nottingham -+- lock only needs to be a gid -+- don't set dspmbyte=euc here; do it in lang.csh, and only if necessary (#50318) -+ -+* Mon Aug 6 2001 Jeff Johnson -+- add lock.lock uid/gid 54 to own /var/lock directory. -+ -+* Thu Jul 19 2001 Bill Nottingham -+- add forward/backward-word mappings (#48783) -+- add pgpkeyserver port to /etc/services (#49407) -+ -+* Thu Jul 19 2001 Preston Brown -+- core files disabled by default. Developers can enable them. -+ -+* Fri Jul 13 2001 Bill Nottingham 2.5.1-1 -+- revert news user back to no shell (#48701) -+ -+* Tue Jul 10 2001 Bill Nottingham 2.5.0-1 -+- move profile.d parsing from csh.cshrc to csh.login (#47417) -+ -+* Sat Jul 7 2001 Nalin Dahyabhai 2.4.15-1 -+- reorder /etc/services to match comments again -+- protocol 118 is stp, not st -+- update URLs in /etc/protocols and /etc/services -+ -+* Thu Jul 5 2001 Preston Brown 2.4.14-1 -+- put */sbin in path if user ID is 0. -+ -+* Mon Jun 25 2001 Bill Nottingham -+- add an entry to /etc/services for ssh X11 forwarding (#44944) -+ -+* Wed Jun 13 2001 Bill Nottingham -+- take ttyS0 out of securetty on main tree -+ -+* Tue Jun 12 2001 Philip Copeland -+- added ttyS0 to securetty for serial console usage -+ -+* Tue Jun 12 2001 Bill Nottingham -+- add rndc to /etc/services (#40265) -+- test for read bit, not execute bit, for profile.d (#35714) -+ -+* Sun Jun 03 2001 Florian La Roche -+- add "canna" entry to /etc/services -+ -+* Mon May 21 2001 Bernhard Rosenkraenzer 2.4.10-1 -+- Fix bugs #24159 and #30634 again; whoever moved bashrc from bash -+ to setup used an old version. :(( -+ -+* Wed May 2 2001 Preston Brown 2.4.9-1 -+- bashrc moved here from bash package -+- set umask in bashrc, so it applies for ALL shells. -+ -+* Fri Apr 27 2001 Preston Brown 2.4.8-1 -+- /sbin/nologin for accounts that aren't "real." -+ -+* Sat Apr 7 2001 Preston Brown -+- revert control-arrow forward/backward word (broken) -+ -+* Tue Mar 27 2001 Preston Brown -+- fix japanese input with tcsh (#33211) -+ -+* Tue Mar 6 2001 Bill Nottingham -+- fix some weirdness with rxvt (#30799) -+ -+* Wed Feb 28 2001 Bill Nottingham -+- add SKK input method (#29759) -+ -+* Fri Feb 23 2001 Preston Brown -+ -+* Wed Feb 21 2001 Bill Nottingham -+- fix inputrc, Yet Again. (#28617) -+ -+* Thu Feb 15 2001 Bill Nottingham -+- add in uidgid file, put it in %%doc -+ -+* Wed Feb 7 2001 Adrian Havill -+- bindkey for delete in the case of tcsh -+ -+* Wed Feb 7 2001 Bill Nottingham -+- add some more stuff to /etc/services (#25396, patch from -+ ) -+ -+* Tue Feb 6 2001 Nalin Dahyabhai -+- add gii/tcp = 616 for gated -+ -+* Tue Jan 30 2001 Bill Nottingham -+- wrap some inputrc settings with tests for mode, term (#24117) -+ -+* Mon Jan 29 2001 Bill Nottingham -+- overhaul /etc/protocols (#18530) -+- add port 587 to /etc/services (#25001) -+- add corbaloc (#19581) -+- don't set /usr/X11R6/bin in $PATH if it's already set (#19968) -+ -+* Fri Dec 1 2000 Nalin Dahyabhai -+- Clean up /etc/services, separating registered numbers from unregistered -+ ("squatted") numbers, and adding some. -+ -+* Mon Nov 20 2000 Bernhard Rosenkraenzer -+- Add smtps (465/tcp) and submission (587/tcp) to /etc/services for TLS -+ support (postfix >= 20001030-2) -+ -+* Sun Aug 6 2000 Bill Nottingham -+- /var/log/lastlog is %%config(noreplace) (#15412) -+- some of the various %%verify changes (#14819) -+ -+* Thu Aug 3 2000 Nalin Dahyabhai -+- linuxconf should be 98, not 99 -+ -+* Tue Jul 25 2000 Bill Nottingham -+- fix some of the csh stuff (#14622) -+ -+* Sun Jul 23 2000 Nalin Dahyabhai -+- stop setting "multi on" in /etc/host.conf -+ -+* Wed Jul 12 2000 Prospector -+- automatic rebuild -+ -+* Tue Jun 27 2000 Bill Nottingham -+- add hfs filesystem -+ -+* Wed Jun 21 2000 Preston Brown -+- printcap is a noreplace file now -+ -+* Sun Jun 18 2000 Bill Nottingham -+- fix typo -+ -+* Tue Jun 13 2000 Nalin Dahyabhai -+- add linuxconf/tcp = 99 to /etc/services -+ -+* Sat Jun 10 2000 Bill Nottingham -+- add some stuff to /etc/services -+- tweak ulimit call again -+ -+* Tue Jun 6 2000 Bernhard Rosenkraenzer -+- homedir of ftp is now /var/ftp -+ -+* Sun May 14 2000 Nalin Dahyabhai -+- move profile.d logic in csh.login to csh.cshrc -+ -+* Tue Apr 18 2000 Nalin Dahyabhai -+- redirect ulimit -S -c to /dev/null to avoid clutter -+ -+* Thu Apr 13 2000 Bernhard Rosenkraenzer -+- s/ulimit -c/ulimit -S -c/ - bash 2.x adaption -+ -+* Mon Apr 03 2000 Nalin Dahyabhai -+- Add more of the kerberos-related services from IANA's registry and krb5 -+ -+* Wed Mar 29 2000 Bernhard Rosenkraenzer -+- Add 2.4'ish vc/* devices to securetty -+ -+* Thu Feb 17 2000 Preston Brown -+- add /etc/filesystems with sane defaults -+ -+* Wed Feb 16 2000 Bill Nottingham -+- don't set prompt in /etc/profile (it's done in /etc/bashrc) -+ -+* Fri Feb 5 2000 Bill Nottingham -+- yet more inputrc tweaks from Hans de Goede (hans@highrise.nl) -+ -+* Sun Jan 30 2000 Bill Nottingham -+- yet more inputrc tweaks from Hans de Goede (hans@highrise.nl) -+ -+* Sun Jan 23 2000 Bill Nottingham -+- fix mailq line. (#7140) -+ -+* Fri Jan 21 2000 Bill Nottingham -+- add ldap to /etc/services -+ -+* Tue Jan 18 2000 Bill Nottingham -+- kill HISTFILESIZE, it's broken -+ -+* Tue Jan 18 2000 Preston Brown -+- some inputrc tweaks -+ -+* Wed Jan 12 2000 Bill Nottingham -+- make some more stuff noreplace -+ -+* Fri Nov 19 1999 Bill Nottingham -+- fix mailq line. (#7140) -+ -+* Fri Oct 29 1999 Bill Nottingham -+- split csh.login into csh.login and csh.cshrc (#various) -+- fix pop service names (#6206) -+- fix ipv6 protocols entries (#6219) -+ -+* Thu Sep 2 1999 Jeff Johnson -+- rename /etc/csh.cshrc to /etc/csh.login (#2931). -+- (note: modified /etc/csh.cshrc should end up in /etc/csh.cshrc.rpmsave) -+ -+* Fri Aug 20 1999 Jeff Johnson -+- add defattr. -+- fix limit command in /etc/csh.cshrc (#4582). -+ -+* Thu Jul 8 1999 Bill Nottingham -+- move /etc/inputrc here. -+ -+* Mon Apr 19 1999 Bill Nottingham -+- always use /etc/inputrc -+ -+* Wed Mar 31 1999 Preston Brown -+- added alias pointing to imap from imap2 -+ -+* Tue Mar 23 1999 Preston Brown -+- updated protocols/services from debian to comply with more modern -+- IETF/RFC standards -+ -+* Sun Mar 21 1999 Cristian Gafton -+- auto rebuild in the new build environment (release 4) -+ -+* Thu Feb 18 1999 Jeff Johnson -+- unset variables used in /etc/csh.cshrc (#1212) -+ -+* Mon Jan 18 1999 Jeff Johnson -+- compile for Raw Hide. -+ -+* Tue Oct 13 1998 Cristian Gafton -+- fix the csh.cshrc re: ${PATH} undefined -+ -+* Mon Apr 27 1998 Prospector System -+- translations modified for de, fr, tr -+ -+* Fri Dec 05 1997 Erik Troan -+- /etc/profile uses $i, which needs to be unset -+ -+* Mon Nov 03 1997 Donnie Barnes -+- made /etc/passwd and /etc/group %%config(noreplace) -+ -+* Mon Oct 20 1997 Erik Troan -+- removed /etc/inetd.conf, /etc/rpc -+- flagged /etc/securetty as missingok -+- fixed buildroot stuff in spec file -+ -+* Thu Jul 31 1997 Erik Troan -+- made a noarch package -+ -+* Wed Apr 16 1997 Erik Troan -+- Don't verify md5sum, size, or timestamp of /var/log/lastlog, /etc/passwd, -+ or /etc/group. -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-passwd-remove-unused-default-users-and-groups.patch b/base/setup/centos/meta_patches/spec-passwd-remove-unused-default-users-and-groups.patch index 4e67a50a1..5e22f9b5e 100644 --- a/base/setup/centos/meta_patches/spec-passwd-remove-unused-default-users-and-groups.patch +++ b/base/setup/centos/meta_patches/spec-passwd-remove-unused-default-users-and-groups.patch @@ -1,7 +1,7 @@ -From f882ce44d7e8574e9affc5e6471265029f9724ca Mon Sep 17 00:00:00 2001 +From 1285d1381237a94df55df913aa268cd5bb9c6b89 Mon Sep 17 00:00:00 2001 From: Michel Thebeau Date: Thu, 21 Jul 2016 11:47:55 -0400 -Subject: [PATCH] spec: add patch to remove unused users and groups +Subject: [PATCH 05/15] spec: add patch to remove unused users and groups Signed-off-by: Michel Thebeau --- @@ -9,25 +9,25 @@ Signed-off-by: Michel Thebeau 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 3debacf..89ff683 100644 +index 18283cd..10d151b 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -22,6 +22,7 @@ Patch4: setup-2.8.71-filesystems.patch - Patch5: setup-2.8.71-fullpath.patch - Patch6: tis-uid-gid.patch - Patch7: updating-gids-and-uids-to-support-upgrade-from-wrl.patch -+Patch8: passwd-remove-unused-default-users-and-groups.patch +@@ -24,6 +24,7 @@ Patch6: setup-2.8.71-tapeid.patch + Patch7: setup-2.8.71-shlocal.patch + Patch8: tis-uid-gid.patch + Patch9: updating-gids-and-uids-to-support-upgrade-from-wrl.patch ++Patch10: passwd-remove-unused-default-users-and-groups.patch %description The setup package contains a set of important system configuration and -@@ -37,6 +38,7 @@ setup files, such as passwd, group, and profile. - %patch5 -p1 - %patch6 -p1 +@@ -41,6 +42,7 @@ setup files, such as passwd, group, and profile. %patch7 -p1 -+%patch8 -p1 + %patch8 -p1 + %patch9 -p1 ++%patch10 -p1 ./shadowconvert.sh -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-remove-unused-default-groups.patch b/base/setup/centos/meta_patches/spec-remove-unused-default-groups.patch index 60998771a..2a64ff1ce 100644 --- a/base/setup/centos/meta_patches/spec-remove-unused-default-groups.patch +++ b/base/setup/centos/meta_patches/spec-remove-unused-default-groups.patch @@ -1,42 +1,33 @@ -From e882a5dfad4ad41a256ea3867e1a4c4a08df9a98 Mon Sep 17 00:00:00 2001 +From 22d06a6c5c7b44db10060bf95b623dc3c1943a9a Mon Sep 17 00:00:00 2001 From: Michel Thebeau Date: Fri, 19 Aug 2016 09:28:43 -0400 -Subject: [PATCH] spec: add patch to remove unused groups +Subject: [PATCH 08/15] spec: add patch to remove unused groups Signed-off-by: Michel Thebeau --- - SPECS/setup.spec | 4 +++- - 1 file changed, 3 insertions(+), 1 deletion(-) + SPECS/setup.spec | 2 ++ + 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 6c18614..223bfd5 100644 +index a612d24..3ad2458 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -1,7 +1,7 @@ - Summary: A set of system configuration and setup files - Name: setup - Version: 2.8.71 --Release: 8%{?dist} -+Release: 9%{?dist} - License: Public Domain - Group: System Environment/Base - URL: https://fedorahosted.org/setup/ -@@ -24,6 +24,7 @@ Patch6: tis-uid-gid.patch - Patch7: updating-gids-and-uids-to-support-upgrade-from-wrl.patch - Patch8: passwd-remove-unused-default-users-and-groups.patch - Patch9: snmpd-fm-user-group.patch -+Patch10: remove-unused-default-groups.patch +@@ -26,6 +26,7 @@ Patch8: tis-uid-gid.patch + Patch9: updating-gids-and-uids-to-support-upgrade-from-wrl.patch + Patch10: passwd-remove-unused-default-users-and-groups.patch + Patch11: snmpd-fm-user-group.patch ++Patch12: remove-unused-default-groups.patch %description The setup package contains a set of important system configuration and -@@ -41,6 +42,7 @@ setup files, such as passwd, group, and profile. - %patch7 -p1 - %patch8 -p1 +@@ -45,6 +46,7 @@ setup files, such as passwd, group, and profile. %patch9 -p1 -+%patch10 -p1 + %patch10 -p1 + %patch11 -p1 ++%patch12 -p1 ./shadowconvert.sh -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/spec-set-custom-prompt.patch b/base/setup/centos/meta_patches/spec-set-custom-prompt.patch index b66279409..32ae0712d 100644 --- a/base/setup/centos/meta_patches/spec-set-custom-prompt.patch +++ b/base/setup/centos/meta_patches/spec-set-custom-prompt.patch @@ -1,42 +1,46 @@ -setup.spec: add custom shell login prompt +From d298b3b8a8a27e23d1589b99a2f9419505563a92 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Tue, 7 Aug 2018 22:53:18 +0800 +Subject: [PATCH 03/15] setup.spec: add custom shell login prompt A user can be set to use "sh" (which points to bash) as login prompt. This makes the login shell to enter "POSIX" mode which will only read/executes file /etc/profle and files in /etc/profiled.d. So create custom login prompt in /etc/profiles.d +Signed-off-by: slin14 --- SPECS/setup.spec | 3 +++ 1 file changed, 3 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 3f74b90..184670f 100644 +index 72cbcba..aa6b36e 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec @@ -7,6 +7,7 @@ Group: System Environment/Base - URL: https://fedorahosted.org/setup/ - Source0: https://fedorahosted.org/releases/s/e/%{name}/%{name}-%{version}.tar.bz2 + URL: https://pagure.io/setup/ + Source0: http://releases.pagure.org/%{name}/%{name}-%{version}.tar.bz2 Source1: motd +Source2: prompt.sh BuildArch: noarch BuildRequires: bash tcsh perl #require system release for saner dependency order -@@ -59,6 +60,7 @@ touch %{buildroot}/etc/fstab +@@ -63,6 +64,7 @@ touch %{buildroot}/etc/fstab touch %{buildroot}/etc/subuid touch %{buildroot}/etc/subgid install -m 644 %{SOURCE1} %{buildroot}/etc/ +install -m 644 %{SOURCE2} %{buildroot}/etc/profile.d/prompt.sh - - # remove unpackaged files from the buildroot - rm -f %{buildroot}/etc/Makefile -@@ -113,6 +115,7 @@ end + mkdir -p %{buildroot}/etc/profile.d + echo "#Add any required envvar overrides to this file, it is sourced from /etc/profile" >%{buildroot}/etc/profile.d/sh.local + echo "#Add any required envvar overrides to this file, is sourced from /etc/csh.login" >%{buildroot}/etc/profile.d/csh.local +@@ -121,6 +123,7 @@ end %config(noreplace) /etc/csh.cshrc %config(noreplace) /etc/motd %dir /etc/profile.d +/etc/profile.d/prompt.sh + %config(noreplace) /etc/profile.d/sh.local + %config(noreplace) /etc/profile.d/csh.local %config(noreplace) %verify(not md5 size mtime) /etc/shells - %ghost %attr(0644,root,root) %verify(not md5 size mtime) /var/log/lastlog - %ghost %verify(not md5 size mtime) %config(noreplace,missingok) /etc/fstab -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/meta_patches/updating-gids-and-uids-to-support-upgrade-from-wrl.patch b/base/setup/centos/meta_patches/updating-gids-and-uids-to-support-upgrade-from-wrl.patch index c8eaf98a5..ede0a96d5 100644 --- a/base/setup/centos/meta_patches/updating-gids-and-uids-to-support-upgrade-from-wrl.patch +++ b/base/setup/centos/meta_patches/updating-gids-and-uids-to-support-upgrade-from-wrl.patch @@ -1,32 +1,33 @@ -From b4a83aefe522dc1674c4979436398661f3ae4572 Mon Sep 17 00:00:00 2001 +From 935277306d01c917b81fa33ebc7f27b0edd61f7f Mon Sep 17 00:00:00 2001 From: Bart Wensley Date: Mon, 27 Jun 2016 12:28:36 -0400 -Subject: [PATCH 1/1] updating-gids-and-uids-to-support-upgrade-from-wrl.patch +Subject: [PATCH 04/15] + updating-gids-and-uids-to-support-upgrade-from-wrl.patch --- SPECS/setup.spec | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SPECS/setup.spec b/SPECS/setup.spec -index 184670f..3debacf 100644 +index aa6b36e..18283cd 100644 --- a/SPECS/setup.spec +++ b/SPECS/setup.spec -@@ -21,6 +21,7 @@ Patch3: setup-2.8.71-uidgidchanges.patch - Patch4: setup-2.8.71-filesystems.patch - Patch5: setup-2.8.71-fullpath.patch - Patch6: tis-uid-gid.patch -+Patch7: updating-gids-and-uids-to-support-upgrade-from-wrl.patch +@@ -23,6 +23,7 @@ Patch5: setup-2.8.71-fullpath.patch + Patch6: setup-2.8.71-tapeid.patch + Patch7: setup-2.8.71-shlocal.patch + Patch8: tis-uid-gid.patch ++Patch9: updating-gids-and-uids-to-support-upgrade-from-wrl.patch %description The setup package contains a set of important system configuration and -@@ -35,6 +36,7 @@ setup files, such as passwd, group, and profile. - %patch4 -p1 - %patch5 -p1 +@@ -39,6 +40,7 @@ setup files, such as passwd, group, and profile. %patch6 -p1 -+%patch7 -p1 + %patch7 -p1 + %patch8 -p1 ++%patch9 -p1 ./shadowconvert.sh -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/patches/add-fm-user-to-snmpd-group.patch b/base/setup/centos/patches/add-fm-user-to-snmpd-group.patch index ebcafea0a..0286535e8 100644 --- a/base/setup/centos/patches/add-fm-user-to-snmpd-group.patch +++ b/base/setup/centos/patches/add-fm-user-to-snmpd-group.patch @@ -1,7 +1,15 @@ +From 02610c6c7bf89593a9b1e98eb5ee0cfba5c48707 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Thu, 16 Aug 2018 00:13:14 +0800 +Subject: [PATCH] add-fm-user-to-snmpd-group + +Signed-off-by: slin14 --- - group | 2 +- + group | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) +diff --git a/group b/group +index a3bb69e..9b77aae 100644 --- a/group +++ b/group @@ -21,7 +21,7 @@ neutron:x:164:neutron @@ -13,3 +21,6 @@ heat:x:187:heat nfv:x:172:nfv fm:x:195:fm +-- +2.7.4 + diff --git a/base/setup/centos/patches/add-ironic-uid-gid.patch b/base/setup/centos/patches/add-ironic-uid-gid.patch index 41bc40983..4360e8a00 100644 --- a/base/setup/centos/patches/add-ironic-uid-gid.patch +++ b/base/setup/centos/patches/add-ironic-uid-gid.patch @@ -1,11 +1,16 @@ -commit 51c505c59a1512c011fcda01d0583a2ddc6f3337 -Author: Shoaib Nasir -Date: Mon Sep 25 11:39:29 2017 -0400 +From 15d0ef24f88290887f1e154352b53f373a04e783 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Thu, 16 Aug 2018 00:15:04 +0800 +Subject: [PATCH] add-ironic-uid-gid - add ironic group and passwd +Signed-off-by: slin14 +--- + group | 1 + + passwd | 1 + + 2 files changed, 2 insertions(+) diff --git a/group b/group -index 7d0244f..9979b99 100644 +index f6a75e5..d9050fa 100644 --- a/group +++ b/group @@ -27,3 +27,4 @@ nfv:x:172:nfv @@ -22,3 +27,6 @@ index fce82e7..fb49ea3 100644 fm:x:195:195:fm-mgr:/var/lib/fm:/sbin/nologin magnum:x:1870:1870:OpenStack Magnum Daemons:/var/lib/magnum:/sbin/nologin +ironic:x:1874:1874:OpenStack Ironic Daemons:/var/lib/ironic:/sbin/nologin +-- +2.7.4 + diff --git a/base/setup/centos/patches/passwd-remove-unused-default-users-and-groups.patch b/base/setup/centos/patches/passwd-remove-unused-default-users-and-groups.patch index 5bdecabb6..bfeb9b690 100644 --- a/base/setup/centos/patches/passwd-remove-unused-default-users-and-groups.patch +++ b/base/setup/centos/patches/passwd-remove-unused-default-users-and-groups.patch @@ -1,4 +1,4 @@ -From 737295c6ad990e8e248fef6b378198c3326b90ba Mon Sep 17 00:00:00 2001 +From fed037afbe78b47d46dbbd5838468e57bfe19884 Mon Sep 17 00:00:00 2001 From: Michel Thebeau Date: Thu, 11 Aug 2016 18:24:25 -0400 Subject: [PATCH] passwd: remove unused default users and groups @@ -13,7 +13,7 @@ Signed-off-by: Michel Thebeau 2 files changed, 16 deletions(-) diff --git a/group b/group -index c21e2de..87a03c1 100644 +index 825edbb..0a0a1b0 100644 --- a/group +++ b/group @@ -1,11 +1,7 @@ @@ -33,7 +33,7 @@ index c21e2de..87a03c1 100644 dialout::18: floppy::19: -games::20: - tape::30: + tape::33: -video::39: -ftp::50: lock::54: @@ -62,5 +62,5 @@ index 548435f..46a3d52 100644 rabbitmq:x:121:121::/var/lib/rabbitmq:/bin/sh nova:x:994:162::/var/lib/nova:/bin/false -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/patches/remove-unused-default-groups.patch b/base/setup/centos/patches/remove-unused-default-groups.patch index 8337389db..b88aea5aa 100644 --- a/base/setup/centos/patches/remove-unused-default-groups.patch +++ b/base/setup/centos/patches/remove-unused-default-groups.patch @@ -1,4 +1,4 @@ -From d79451c9a047313fb8da27007ea9d99435e05ff2 Mon Sep 17 00:00:00 2001 +From dbc791c8f24ffac0d98e86213e4d592660f6087c Mon Sep 17 00:00:00 2001 From: Michel Thebeau Date: Fri, 19 Aug 2016 09:21:44 -0400 Subject: [PATCH] CGTS-4685: setup: remove unused default groups @@ -14,7 +14,7 @@ Signed-off-by: Michel Thebeau 1 file changed, 2 deletions(-) diff --git a/group b/group -index 8794dde..0b93beb 100644 +index 42a8ed1..a3bb69e 100644 --- a/group +++ b/group @@ -2,12 +2,10 @@ root::0: @@ -29,7 +29,7 @@ index 8794dde..0b93beb 100644 -man::15: dialout::18: floppy::19: - tape::30: + tape::33: -- -1.8.3.1 +2.7.4 diff --git a/base/setup/centos/srpm_path b/base/setup/centos/srpm_path index 62834bcaf..82625af3f 100644 --- a/base/setup/centos/srpm_path +++ b/base/setup/centos/srpm_path @@ -1 +1 @@ -mirror:Source/setup-2.8.71-7.el7.src.rpm +mirror:Source/setup-2.8.71-9.el7.src.rpm diff --git a/base/sudo/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/sudo/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index aa778d5ba..c95090da4 100644 --- a/base/sudo/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/sudo/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 39b08b2cc4eb6d47490593a599db95703b74b754 Mon Sep 17 00:00:00 2001 +From 21db84dcb55f87c792a6d59cef0c68741a9d24b1 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:50:44 -0400 -Subject: [PATCH 1/3] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH 1/4] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/sudo.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/sudo.spec b/SPECS/sudo.spec -index c3a1a52..7d1486b 100644 +index c8d2f64..b6402bb 100644 --- a/SPECS/sudo.spec +++ b/SPECS/sudo.spec @@ -1,7 +1,7 @@ Summary: Allows restricted root access for specified users Name: sudo Version: 1.8.19p2 --Release: 11%{?dist} -+Release: 11.el7_4%{?_tis_dist}.%{tis_patch_ver} +-Release: 14%{?dist} ++Release: 14.el7_5%{?_tis_dist}.%{tis_patch_ver} License: ISC Group: Applications/System URL: http://www.courtesan.com/sudo/ -- -1.9.1 +2.7.4 diff --git a/base/sudo/centos/meta_patches/0002-spec-include-TiS-changes.patch b/base/sudo/centos/meta_patches/0002-spec-include-TiS-changes.patch index 2439386c2..31fbc0e05 100644 --- a/base/sudo/centos/meta_patches/0002-spec-include-TiS-changes.patch +++ b/base/sudo/centos/meta_patches/0002-spec-include-TiS-changes.patch @@ -1,35 +1,35 @@ -From abc3ec24a957002962bb4038946291b84bea3859 Mon Sep 17 00:00:00 2001 +From 70046603b8d607445e2fbf5e7d934bcd43a77dc8 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:50:44 -0400 -Subject: [PATCH 2/3] WRS: 0002-spec-include-TiS-changes.patch +Subject: [PATCH 2/4] WRS: 0002-spec-include-TiS-changes.patch --- - SPECS/sudo.spec | 17 +++++++++++++++-- - 1 file changed, 15 insertions(+), 2 deletions(-) + SPECS/sudo.spec | 15 +++++++++++++-- + 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/SPECS/sudo.spec b/SPECS/sudo.spec -index 7d1486b..d731ba9 100644 +index b6402bb..acbcb26 100644 --- a/SPECS/sudo.spec +++ b/SPECS/sudo.spec -@@ -64,6 +64,8 @@ Patch17: sudo-1.8.19p2-get_process_ttyname.patch - # 1459152 - CVE-2017-1000368: Privilege escalation via improper get_process_ttyname() parsing (insufficient fix for CVE-2017-1000367) - Patch18: sudo-1.8.19p2-CVE-2017-1000368.patch +@@ -78,6 +78,8 @@ Patch24: sudo-1.8.19p2-sssd-double-free.patch + # 1560657 - sudo blocks in poll() for /dev/ptmx with iolog enabled + Patch25: sudo-1.8.19p2-iolog-zombie.patch +# WRS patches + %description Sudo (superuser do) allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands -@@ -106,6 +108,8 @@ plugins that use %{name}. - %patch17 -p1 -b .get_process_ttyname - %patch18 -p1 -b .CVE-2017-1000368 +@@ -127,6 +129,8 @@ plugins that use %{name}. + %patch24 -p1 -b .double-free + %patch25 -p1 -b .iolog-zombie +# WRS patches + %build autoreconf -I m4 -fv --install -@@ -132,7 +136,7 @@ export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now" SHL +@@ -153,7 +157,7 @@ export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now" SHL --with-ignore-dot \ --with-tty-tickets \ --with-ldap \ @@ -38,7 +38,7 @@ index 7d1486b..d731ba9 100644 --with-selinux \ --with-passprompt="[sudo] password for %p: " \ --with-linux-audit \ -@@ -158,6 +162,12 @@ install -p -c -m 0440 %{SOURCE1} $RPM_BUILD_ROOT/etc/sudoers +@@ -179,6 +183,12 @@ install -p -c -m 0440 %{SOURCE1} $RPM_BUILD_ROOT/etc/sudoers install -p -c -m 0640 %{SOURCE3} $RPM_BUILD_ROOT/etc/sudo.conf install -p -c -m 0640 %{SOURCE2} $RPM_BUILD_ROOT/%{_sysconfdir}/sudo-ldap.conf @@ -51,7 +51,7 @@ index 7d1486b..d731ba9 100644 # Remove execute permission on this script so we don't pull in perl deps chmod -x $RPM_BUILD_ROOT%{_docdir}/sudo-*/sudoers2ldif -@@ -226,7 +236,8 @@ rm -rf $RPM_BUILD_ROOT +@@ -247,7 +257,8 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man8/visudo.8* %dir %{_docdir}/sudo-%{version} %{_docdir}/sudo-%{version}/* @@ -62,5 +62,5 @@ index 7d1486b..d731ba9 100644 # Make sure permissions are ok even if we're updating %post -- -1.9.1 +2.7.4 diff --git a/base/sudo/centos/meta_patches/0004-remove-make-check.patch b/base/sudo/centos/meta_patches/0004-remove-make-check.patch index 912f6df5a..ec8d45d8b 100644 --- a/base/sudo/centos/meta_patches/0004-remove-make-check.patch +++ b/base/sudo/centos/meta_patches/0004-remove-make-check.patch @@ -1,8 +1,18 @@ +From b531e69617e54bd767ff58d1794e48b8150d74b9 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Tue, 14 Aug 2018 22:10:32 +0800 +Subject: [PATCH 4/4] remove-make-check + +Signed-off-by: slin14 +--- + SPECS/sudo.spec | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + diff --git a/SPECS/sudo.spec b/SPECS/sudo.spec -index 4a34dba..fcb2e05 100644 +index 8c3f395..17531f7 100644 --- a/SPECS/sudo.spec +++ b/SPECS/sudo.spec -@@ -145,7 +145,8 @@ export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now" SHL +@@ -166,7 +166,8 @@ export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now" SHL # --without-kerb4 make -j"%(nproc)" @@ -12,3 +22,6 @@ index 4a34dba..fcb2e05 100644 %install rm -rf $RPM_BUILD_ROOT +-- +2.7.4 + diff --git a/base/sudo/centos/srpm_path b/base/sudo/centos/srpm_path index 194ad3be2..f86011720 100644 --- a/base/sudo/centos/srpm_path +++ b/base/sudo/centos/srpm_path @@ -1 +1 @@ -mirror:Source/sudo-1.8.19p2-11.el7_4.src.rpm +mirror:Source/sudo-1.8.19p2-14.el7_5.src.rpm diff --git a/base/sudo/files/sudo-CVE-2015-5602.patch b/base/sudo/files/sudo-CVE-2015-5602.patch deleted file mode 100644 index de830dded..000000000 --- a/base/sudo/files/sudo-CVE-2015-5602.patch +++ /dev/null @@ -1,401 +0,0 @@ -sudo: CVE-2015-5602 - -the patch is based on: -https://www.sudo.ws/repos/sudo/rev/9636fd256325 -https://www.sudo.ws/repos/sudo/rev/c2e36a80a279 - -Rewritten sudoedit_checkdir support that checks all the dirs in the -path and refuses to follow symlinks in writable directories. -This is a better fix for CVE-2015-5602. -Adapted from a diff by Ben Hutchings. Bug #707 - -Signed-off-by: Li Wang ---- - plugins/sudoers/policy.c | 5 - src/sudo.c | 10 + - src/sudo.h | 3 - src/sudo_edit.c | 289 +++++++++++++++++++++++++++++++++++++++++++++-- - 4 files changed, 296 insertions(+), 11 deletions(-) - ---- a/src/sudo_edit.c -+++ b/src/sudo_edit.c -@@ -79,6 +79,267 @@ switch_user(uid_t euid, gid_t egid, int - debug_return; - } - -+static bool -+group_matches(gid_t target, gid_t gid, int ngroups, GETGROUPS_T *groups) -+{ -+ int i; -+ debug_decl(group_matches, SUDO_DEBUG_EDIT) -+ -+ if (target == gid) { -+ sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO, -+ "user gid %u matches directory gid %u", (unsigned int)gid, -+ (unsigned int)target); -+ debug_return_bool(true); -+ } -+ for (i = 0; i < ngroups; i++) { -+ if (target == groups[i]) { -+ sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO, -+ "user gid %u matches directory gid %u", (unsigned int)gid, -+ (unsigned int)target); -+ debug_return_bool(true); -+ } -+ } -+ debug_return_bool(false); -+} -+ -+#ifdef O_NOFOLLOW -+static int -+sudo_edit_openat_nofollow(int dfd, char *path, int oflags, mode_t mode) -+{ -+ debug_decl(sudo_edit_open_nofollow, SUDO_DEBUG_EDIT) -+ -+ debug_return_int(openat(dfd, path, oflags|O_NOFOLLOW, mode)); -+} -+#else -+/* -+ * Returns true if fd and path don't match or path is a symlink. -+ * Used on older systems without O_NOFOLLOW. -+ */ -+static bool -+sudo_edit_is_symlink(int fd, char *path) -+{ -+ struct stat sb1, sb2; -+ debug_decl(sudo_edit_is_symlink, SUDO_DEBUG_EDIT) -+ -+ /* -+ * Treat [fl]stat() failure like there was a symlink. -+ */ -+ if (fstat(fd, &sb1) == -1 || lstat(path, &sb2) == -1) -+ debug_return_bool(true); -+ -+ /* -+ * Make sure we did not open a link and that what we opened -+ * matches what is currently on the file system. -+ */ -+ if (S_ISLNK(sb2.st_mode) || -+ sb1.st_dev != sb2.st_dev || sb1.st_ino != sb2.st_ino) { -+ debug_return_bool(true); -+ } -+ -+ debug_return_bool(false); -+} -+ -+static int -+sudo_edit_openat_nofollow(char *path, int oflags, mode_t mode) -+{ -+ struct stat sb1, sb2; -+ int fd; -+ debug_decl(sudo_edit_openat_nofollow, SUDO_DEBUG_EDIT) -+ -+ fd = openat(dfd, path, oflags, mode); -+ if (fd == -1) -+ debug_return_int(-1); -+ -+ if (sudo_edit_is_symlink(fd, path)) { -+ close(fd); -+ fd = -1; -+ errno = ELOOP; -+ } -+ -+ debug_return_int(fd); -+} -+#endif /* O_NOFOLLOW */ -+ -+/* -+ * Returns true if the directory described by sb is writable -+ * by the user. We treat directories with the sticky bit as -+ * unwritable unless they are owned by the user. -+ */ -+static bool -+dir_is_writable(struct stat *sb, uid_t uid, gid_t gid, int ngroups, -+ GETGROUPS_T *groups) -+{ -+ debug_decl(dir_is_writable, SUDO_DEBUG_EDIT) -+ -+ /* If the user owns the dir we always consider it writable. */ -+ if (sb->st_uid == uid) { -+ sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO, -+ "user uid %u matches directory uid %u", (unsigned int)uid, -+ (unsigned int)sb->st_uid); -+ debug_return_bool(true); -+ } -+ -+ /* Other writable? */ -+ if (ISSET(sb->st_mode, S_IWOTH)) { -+ sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO, -+ "directory is writable by other"); -+ debug_return_bool(true); -+ } -+ -+ /* Group writable? */ -+ if (ISSET(sb->st_mode, S_IWGRP)) { -+ if (group_matches(sb->st_gid, gid, ngroups, groups)) { -+ sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO, -+ "directory is writable by one of the user's groups"); -+ debug_return_bool(true); -+ } -+ } -+ -+ debug_return_bool(false); -+} -+ -+/* -+ * Directory open flags for use with openat(2) and fstat(2). -+ * Use O_PATH and O_DIRECTORY where possible. -+ */ -+#if defined(O_PATH) && defined(O_DIRECTORY) -+# define DIR_OPEN_FLAGS (O_PATH|O_DIRECTORY) -+#elif defined(O_PATH) && !defined(O_DIRECTORY) -+# define DIR_OPEN_FLAGS O_PATH -+#elif !defined(O_PATH) && defined(O_DIRECTORY) -+# define DIR_OPEN_FLAGS (O_RDONLY|O_DIRECTORY) -+#else -+# define DIR_OPEN_FLAGS (O_RDONLY|O_NONBLOCK) -+#endif -+ -+static int -+sudo_edit_open_nonwritable(char *path, int oflags, mode_t mode) -+{ -+ int dfd, fd, dflags = DIR_OPEN_FLAGS; -+#if defined(__linux__) && defined(O_PATH) -+ char *opath = path; -+#endif -+ bool is_writable; -+ struct stat sb; -+ debug_decl(sudo_edit_open_nonwritable, SUDO_DEBUG_EDIT) -+ -+#if defined(__linux__) && defined(O_PATH) -+restart: -+#endif -+ if (path[0] == '/') { -+ dfd = open("/", dflags); -+ path++; -+ } else { -+ dfd = open(".", dflags); -+ if (path[0] == '.' && path[1] == '/') -+ path += 2; -+ } -+ if (dfd == -1) -+ debug_return_int(-1); -+ -+ for (;;) { -+ char *slash; -+ int subdfd; -+ -+ /* -+ * Look up one component at a time, avoiding symbolic links in -+ * writable directories. -+ */ -+ if (fstat(dfd, &sb) == -1) { -+ close(dfd); -+#if defined(__linux__) && defined(O_PATH) -+ /* Linux prior to 3.6 can't fstat an O_PATH fd */ -+ if (ISSET(dflags, O_PATH)) { -+ CLR(dflags, O_PATH); -+ path = opath; -+ goto restart; -+ } -+#endif -+ debug_return_int(-1); -+ } -+#ifndef O_DIRECTORY -+ if (!S_ISDIR(sb.st_mode)) { -+ close(dfd); -+ errno = ENOTDIR; -+ debug_return_int(-1); -+ } -+#endif -+ is_writable = dir_is_writable(&sb, user_details.uid, user_details.gid, -+ user_details.ngroups, user_details.groups); -+ -+ while (path[0] == '/') -+ path++; -+ slash = strchr(path, '/'); -+ if (slash == NULL) -+ break; -+ *slash = '\0'; -+ if (is_writable) -+ subdfd = sudo_edit_openat_nofollow(dfd, path, dflags, 0); -+ else -+ subdfd = openat(dfd, path, dflags, 0); -+ *slash = '/'; /* restore path */ -+ close(dfd); -+ if (subdfd == -1) -+ debug_return_int(-1); -+ path = slash + 1; -+ dfd = subdfd; -+ } -+ -+ if (is_writable) { -+ close(dfd); -+ errno = EISDIR; -+ debug_return_int(-1); -+ } -+ -+ fd = openat(dfd, path, oflags, mode); -+ close(dfd); -+ debug_return_int(fd); -+} -+ -+#ifdef O_NOFOLLOW -+static int -+sudo_edit_open(char *path, int oflags, mode_t mode, int sflags) -+{ -+ int fd; -+ debug_decl(sudo_edit_open, SUDO_DEBUG_EDIT) -+ -+ if (!ISSET(sflags, CD_SUDOEDIT_FOLLOW)) -+ oflags |= O_NOFOLLOW; -+ if (ISSET(sflags, CD_SUDOEDIT_CHECKDIR) && user_details.uid != 0) -+ fd = sudo_edit_open_nonwritable(path, oflags|O_NONBLOCK, mode); -+ else -+ fd = open(path, oflags|O_NONBLOCK, mode); -+ if (fd != -1 && !ISSET(oflags, O_NONBLOCK)) -+ (void) fcntl(fd, F_SETFL, fcntl(fd, F_GETFL, 0) & ~O_NONBLOCK); -+ debug_return_int(fd); -+} -+#else -+static int -+sudo_edit_open(char *path, int oflags, mode_t mode, int sflags) -+{ -+ struct stat sb1, sb2; -+ int fd; -+ debug_decl(sudo_edit_open, SUDO_DEBUG_EDIT) -+ -+ if (ISSET(sflags, CD_SUDOEDIT_CHECKDIR) && user_details.uid != 0) -+ fd = sudo_edit_open_nonwritable(path, oflags|O_NONBLOCK, mode); -+ else -+ fd = open(path, oflags|O_NONBLOCK, mode); -+ if (fd == -1) -+ debug_return_int(-1); -+ if (!ISSET(oflags, O_NONBLOCK)) -+ (void) fcntl(fd, F_SETFL, fcntl(fd, F_GETFL, 0) & ~O_NONBLOCK); -+ -+ if (!ISSET(sflags, CD_SUDOEDIT_FOLLOW) && sudo_edit_is_symlink(fd, path)) { -+ close(fd); -+ fd = -1; -+ errno = ELOOP; -+ } -+ -+ debug_return_int(fd); -+} -+#endif /* O_NOFOLLOW */ -+ - /* - * Wrapper to allow users to edit privileged files with their own uid. - */ -@@ -97,8 +358,8 @@ sudo_edit(struct command_details *comman - struct tempfile { - char *tfile; - char *ofile; -- struct timeval omtim; - off_t osize; -+ struct timeval omtim; - } *tf = NULL; - debug_decl(sudo_edit, SUDO_DEBUG_EDIT) - -@@ -153,7 +414,8 @@ sudo_edit(struct command_details *comman - rc = -1; - switch_user(command_details->euid, command_details->egid, - command_details->ngroups, command_details->groups); -- if ((ofd = open(files[i], O_RDONLY, 0644)) != -1 || errno == ENOENT) { -+ ofd = sudo_edit_open(files[i], O_RDONLY, 0644, command_details->flags); -+ if (ofd != -1 || errno == ENOENT) { - if (ofd == -1) { - zero_bytes(&sb, sizeof(sb)); /* new file */ - rc = 0; -@@ -163,11 +425,17 @@ sudo_edit(struct command_details *comman - } - switch_user(ROOT_UID, user_details.egid, - user_details.ngroups, user_details.groups); -- if (rc || (ofd != -1 && !S_ISREG(sb.st_mode))) { -- if (rc) -- warning("%s", files[i]); -+ if (ofd != -1 && !S_ISREG(sb.st_mode)) { -+ warningx(_("%s: not a regular file"), files[i]); -+ close(ofd); -+ continue; -+ } -+ if (rc == -1) { -+ /* open() or fstat() error. */ -+ if (ofd == -1 && errno == ELOOP) -+ warningx(_("%s: is a symbolic link"), files[i]); - else -- warningx(_("%s: not a regular file"), files[i]); -+ warning("%s", files[i]); - if (ofd != -1) - close(ofd); - continue; -@@ -258,9 +526,9 @@ sudo_edit(struct command_details *comman - rc = -1; - if (seteuid(user_details.uid) != 0) - fatal("seteuid(%d)", (int)user_details.uid); -- if ((tfd = open(tf[i].tfile, O_RDONLY, 0644)) != -1) { -+ tfd = sudo_edit_open(tf[i].tfile, O_RDONLY, 0644, 0); -+ if (tfd != -1) - rc = fstat(tfd, &sb); -- } - if (seteuid(ROOT_UID) != 0) - fatal("seteuid(ROOT_UID)"); - if (rc || !S_ISREG(sb.st_mode)) { -@@ -289,8 +557,9 @@ sudo_edit(struct command_details *comman - } - switch_user(command_details->euid, command_details->egid, - command_details->ngroups, command_details->groups); -- ofd = open(tf[i].ofile, O_WRONLY|O_TRUNC|O_CREAT, 0644); -- switch_user(ROOT_UID, user_details.egid, -+ ofd = sudo_edit_open(tf[i].ofile, O_WRONLY|O_TRUNC|O_CREAT, 0644, -+ command_details->flags); -+ switch_user(ROOT_UID, user_details.egid, - user_details.ngroups, user_details.groups); - if (ofd == -1) { - warning(_("unable to write to %s"), tf[i].ofile); ---- a/plugins/sudoers/policy.c -+++ b/plugins/sudoers/policy.c -@@ -383,8 +383,11 @@ sudoers_policy_exec_setup(char *argv[], - easprintf(&command_info[info_len++], "maxseq=%u", def_maxseq); - } - } -- if (ISSET(sudo_mode, MODE_EDIT)) -+ if (ISSET(sudo_mode, MODE_EDIT)) { - command_info[info_len++] = estrdup("sudoedit=true"); -+ command_info[info_len++] = estrdup("sudoedit_checkdir=true"); -+ command_info[info_len++] = estrdup("sudoedit_follow=true"); -+ } - if (ISSET(sudo_mode, MODE_LOGIN_SHELL)) { - /* Set cwd to run user's homedir. */ - command_info[info_len++] = fmt_string("cwd", runas_pw->pw_dir); ---- a/src/sudo.c -+++ b/src/sudo.c -@@ -727,6 +727,16 @@ command_info_to_details(char * const inf - SET(details->flags, CD_SUDOEDIT); - break; - } -+ if (strncmp("sudoedit_checkdir=", info[i], sizeof("sudoedit_checkdir=") - 1) == 0) { -+ if (atobool(info[i] + sizeof("sudoedit_checkdir=") - 1) == true) -+ SET(details->flags, CD_SUDOEDIT_CHECKDIR); -+ break; -+ } -+ if (strncmp("sudoedit_follow=", info[i], sizeof("sudoedit_follow=") - 1) == 0) { -+ if (atobool(info[i] + sizeof("sudoedit_follow=") - 1) == true) -+ SET(details->flags, CD_SUDOEDIT_FOLLOW); -+ break; -+ } - break; - case 't': - if (strncmp("timeout=", info[i], sizeof("timeout=") - 1) == 0) { ---- a/src/sudo.h -+++ b/src/sudo.h -@@ -129,6 +129,9 @@ struct user_details { - #define CD_USE_PTY 0x1000 - #define CD_SET_UTMP 0x2000 - #define CD_EXEC_BG 0x4000 -+#define CD_SUDOEDIT_COPY 0x08000 -+#define CD_SUDOEDIT_FOLLOW 0x10000 -+#define CD_SUDOEDIT_CHECKDIR 0x20000 - - struct command_details { - uid_t uid; diff --git a/base/systemd/centos/meta_patches/0001-update-package-versioning-for-TIS-format.patch b/base/systemd/centos/meta_patches/0001-update-package-versioning-for-TIS-format.patch index 2a7231c17..89a2b3f08 100644 --- a/base/systemd/centos/meta_patches/0001-update-package-versioning-for-TIS-format.patch +++ b/base/systemd/centos/meta_patches/0001-update-package-versioning-for-TIS-format.patch @@ -1,8 +1,7 @@ -From 844630caa811b9fb1a2944385ce31726aff1df00 Mon Sep 17 00:00:00 2001 +From e1b3591beb36a45f7cc4bf9340dd640b359955b7 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:53:00 -0400 -Subject: [PATCH 01/10] WRS: - 0001-update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-update-package-versioning-for-TIS-format.patch Conflicts: SPECS/systemd.spec @@ -11,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 4dce0a3..955cc4b 100644 +index 6bdbb74..3b2aa7f 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec @@ -7,7 +7,7 @@ Name: systemd Url: http://www.freedesktop.org/wiki/Software/systemd Version: 219 --Release: 42%{?dist}.1 -+Release: 42.el7_4.1%{?_tis_dist}.%{tis_patch_ver} +-Release: 57%{?dist} ++Release: 57.el7%{?_tis_dist}.%{tis_patch_ver} # For a breakdown of the licensing, see README License: LGPLv2+ and MIT and GPLv2+ Summary: A System and Service Manager -- -1.9.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0005-spec-millisec-in-syslog-date.patch b/base/systemd/centos/meta_patches/0005-spec-millisec-in-syslog-date.patch index 7eca30dda..8f97abbda 100644 --- a/base/systemd/centos/meta_patches/0005-spec-millisec-in-syslog-date.patch +++ b/base/systemd/centos/meta_patches/0005-spec-millisec-in-syslog-date.patch @@ -1,7 +1,7 @@ -From aa4dff1eedf5e685c83de9b4d996d8106e27c3b7 Mon Sep 17 00:00:00 2001 +From 6f9a8e792bad1f4bb8d9dad4f2430d89a1058d0c Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:53:00 -0400 -Subject: [PATCH 04/10] WRS: 0005-spec-millisec-in-syslog-date.patch +Subject: [PATCH] WRS: 0005-spec-millisec-in-syslog-date.patch Conflicts: SPECS/systemd.spec @@ -10,19 +10,19 @@ Conflicts: 1 file changed, 3 insertions(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 912d31e..d7a20d5 100644 +index 6a04c16..845d1dd 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -539,6 +539,9 @@ Patch0497: 0497-rules-move-cpu-hotplug-rule-to-separate-file.patch - Patch0498: 0498-Revert-rules-move-cpu-hotplug-rule-to-separate-file.patch - Patch0499: 0499-Revert-udev-net_id-add-support-for-phys_port_name-at.patch +@@ -653,6 +653,9 @@ Patch0611: 0611-sd-journal-make-sure-it-s-safe-to-call-sd_journal_pr.patch + Patch0612: 0612-journalctl-Periodically-call-sd_journal_process-in-j.patch + Patch0613: 0613-sd-journal-when-picking-up-a-new-file-compare-inode-.patch +#WRS Patches -+Patch0501: 0501-inject-millisec-in-syslog-date.patch ++Patch0701: 0701-inject-millisec-in-syslog-date.patch + %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} BuildRequires: libcap-devel -- -1.9.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0007-Add-patch-for-journald-config.patch b/base/systemd/centos/meta_patches/0007-Add-patch-for-journald-config.patch index e0bf3dd35..39ae302ff 100644 --- a/base/systemd/centos/meta_patches/0007-Add-patch-for-journald-config.patch +++ b/base/systemd/centos/meta_patches/0007-Add-patch-for-journald-config.patch @@ -1,24 +1,24 @@ -From 0691fdfd899f5af3be9e74dfd33b728ba45cd778 Mon Sep 17 00:00:00 2001 +From 4fadd91b4153c4e7a462585e78139ee530b6b292 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:53:00 -0400 -Subject: [PATCH 06/10] WRS: 0007-Add-patch-for-journald-config.patch +Subject: [PATCH 1/7] WRS: 0007-Add-patch-for-journald-config.patch --- SPECS/systemd.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 93a4b72..48ac1bb 100644 +index 845d1dd..6c277f9 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -541,6 +541,7 @@ Patch0499: 0499-Revert-udev-net_id-add-support-for-phys_port_name-at.patch +@@ -655,6 +655,7 @@ Patch0613: 0613-sd-journal-when-picking-up-a-new-file-compare-inode-.patch #WRS Patches - Patch0501: 0501-inject-millisec-in-syslog-date.patch -+Patch0503: 0503-Configure-journald-to-forward-to-syslog.patch + Patch0701: 0701-inject-millisec-in-syslog-date.patch ++Patch0703: 0703-Configure-journald-to-forward-to-syslog.patch %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} -- -1.9.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0008-Add-patch-for-journald-config-rate-limit.patch b/base/systemd/centos/meta_patches/0008-Add-patch-for-journald-config-rate-limit.patch index 02e28bf3c..30a4829bd 100644 --- a/base/systemd/centos/meta_patches/0008-Add-patch-for-journald-config-rate-limit.patch +++ b/base/systemd/centos/meta_patches/0008-Add-patch-for-journald-config-rate-limit.patch @@ -1,8 +1,7 @@ -From e41bc69bcbf880196212524803e96521f5aa7c66 Mon Sep 17 00:00:00 2001 +From 1f00385b6b64616f894aab1f31d41e3fdcb73055 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:53:00 -0400 -Subject: [PATCH 07/10] WRS: - 0008-Add-patch-for-journald-config-rate-limit.patch +Subject: [PATCH 2/7] WRS: 0008-Add-patch-for-journald-config-rate-limit.patch Conflicts: SPECS/systemd.spec @@ -11,17 +10,17 @@ Conflicts: 1 file changed, 1 insertion(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 48ac1bb..332514c 100644 +index 6c277f9..ff9c519 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -542,6 +542,7 @@ Patch0499: 0499-Revert-udev-net_id-add-support-for-phys_port_name-at.patch +@@ -656,6 +656,7 @@ Patch0613: 0613-sd-journal-when-picking-up-a-new-file-compare-inode-.patch #WRS Patches - Patch0501: 0501-inject-millisec-in-syslog-date.patch - Patch0503: 0503-Configure-journald-to-forward-to-syslog.patch -+Patch0504: 0504-Configure-journald-rate-limit.patch + Patch0701: 0701-inject-millisec-in-syslog-date.patch + Patch0703: 0703-Configure-journald-to-forward-to-syslog.patch ++Patch0704: 0704-Configure-journald-rate-limit.patch %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} -- -1.9.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0009-Add-patch-to-remove-ID_SAS_PATH-rule.patch b/base/systemd/centos/meta_patches/0009-Add-patch-to-remove-ID_SAS_PATH-rule.patch index 90303a588..c3860c5e3 100644 --- a/base/systemd/centos/meta_patches/0009-Add-patch-to-remove-ID_SAS_PATH-rule.patch +++ b/base/systemd/centos/meta_patches/0009-Add-patch-to-remove-ID_SAS_PATH-rule.patch @@ -1,24 +1,24 @@ -From 022b18e4db4116905207c0603b60e932e4a7dacb Mon Sep 17 00:00:00 2001 +From fddd11d477de4eced32cf40c0524a11a24994fa1 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:53:00 -0400 -Subject: [PATCH 08/10] WRS: 0009-Add-patch-to-remove-ID_SAS_PATH-rule.patch +Subject: [PATCH 3/7] WRS: 0009-Add-patch-to-remove-ID_SAS_PATH-rule.patch --- SPECS/systemd.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 332514c..33f3128 100644 +index ff9c519..e9fc3a4 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -543,6 +543,7 @@ Patch0501: 0501-inject-millisec-in-syslog-date.patch - Patch0501: 0501-inject-millisec-in-syslog-date.patch - Patch0503: 0503-Configure-journald-to-forward-to-syslog.patch - Patch0504: 0504-Configure-journald-rate-limit.patch -+Patch0505: 0505-remove-id-sas-path-symlink.patch +@@ -657,6 +657,7 @@ Patch0613: 0613-sd-journal-when-picking-up-a-new-file-compare-inode-.patch + Patch0701: 0701-inject-millisec-in-syslog-date.patch + Patch0703: 0703-Configure-journald-to-forward-to-syslog.patch + Patch0704: 0704-Configure-journald-rate-limit.patch ++Patch0705: 0705-remove-id-sas-path-symlink.patch %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} -- -1.9.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0010-fix-ACL-warnings-from-systemd-tmpfiles-set.patch b/base/systemd/centos/meta_patches/0010-fix-ACL-warnings-from-systemd-tmpfiles-set.patch index e87521fb1..6d67d72e4 100644 --- a/base/systemd/centos/meta_patches/0010-fix-ACL-warnings-from-systemd-tmpfiles-set.patch +++ b/base/systemd/centos/meta_patches/0010-fix-ACL-warnings-from-systemd-tmpfiles-set.patch @@ -1,24 +1,24 @@ -From e188f1148982166624ae72f8fac70775a2bc8d73 Mon Sep 17 00:00:00 2001 +From f651db58b668b32e1f365eaeb35bcff12bcbc5ad Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:53:00 -0400 -Subject: 0010-fix-ACL-warnings-from-systemd-tmpfiles-set.patch +Subject: [PATCH 4/7] 0010-fix-ACL-warnings-from-systemd-tmpfiles-set.patch --- SPECS/systemd.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 33f3128..a8e1846 100644 +index e9fc3a4..e79f10e 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -544,6 +544,7 @@ Patch0502: 0502-udev-path_id-introduce-support-for-NVMe-devices-4169.patch - Patch0503: 0503-Configure-journald-to-forward-to-syslog.patch - Patch0504: 0504-Configure-journald-rate-limit.patch - Patch0505: 0505-remove-id-sas-path-symlink.patch -+Patch0506: 0506-fix-ACL-warnings-from-systemd-tmpfiles-set.patch +@@ -658,6 +658,7 @@ Patch0701: 0701-inject-millisec-in-syslog-date.patch + Patch0703: 0703-Configure-journald-to-forward-to-syslog.patch + Patch0704: 0704-Configure-journald-rate-limit.patch + Patch0705: 0705-remove-id-sas-path-symlink.patch ++Patch0706: 0706-fix-ACL-warnings-from-systemd-tmpfiles-set.patch %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} -- -1.9.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0011-Add-patch-for-moving-vartmp-to-tmpfs.patch b/base/systemd/centos/meta_patches/0011-Add-patch-for-moving-vartmp-to-tmpfs.patch index 37abec7e6..b9223e798 100644 --- a/base/systemd/centos/meta_patches/0011-Add-patch-for-moving-vartmp-to-tmpfs.patch +++ b/base/systemd/centos/meta_patches/0011-Add-patch-for-moving-vartmp-to-tmpfs.patch @@ -1,24 +1,24 @@ -From 4457eecec7e750c2e60f2bc33a0f7c4c70955a86 Mon Sep 17 00:00:00 2001 +From 776961a3addc58b47e9b10bc29d07ae31f2853f8 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:53:00 -0400 -Subject: [PATCH 10/10] WRS: 0011-Add-patch-for-moving-vartmp-to-tmpfs.patch +Subject: [PATCH 5/7] WRS: 0011-Add-patch-for-moving-vartmp-to-tmpfs.patch --- SPECS/systemd.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index a8e1846..e36e410 100644 +index e79f10e..acc059f 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -545,6 +545,7 @@ Patch0503: 0503-Configure-journald-to-forward-to-syslog.patch - Patch0504: 0504-Configure-journald-rate-limit.patch - Patch0505: 0505-remove-id-sas-path-symlink.patch - Patch0506: 0506-fix-ACL-warnings-from-systemd-tmpfiles-set.patch -+Patch0507: 0507-move-vartmp-to-tmpfs.patch +@@ -659,6 +659,7 @@ Patch0703: 0703-Configure-journald-to-forward-to-syslog.patch + Patch0704: 0704-Configure-journald-rate-limit.patch + Patch0705: 0705-remove-id-sas-path-symlink.patch + Patch0706: 0706-fix-ACL-warnings-from-systemd-tmpfiles-set.patch ++Patch0707: 0707-move-vartmp-to-tmpfs.patch %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} -- -1.9.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0012-Add-patch-for-restricting-tmpfs-size.patch b/base/systemd/centos/meta_patches/0012-Add-patch-for-restricting-tmpfs-size.patch index 375e7f11c..29ada9f57 100644 --- a/base/systemd/centos/meta_patches/0012-Add-patch-for-restricting-tmpfs-size.patch +++ b/base/systemd/centos/meta_patches/0012-Add-patch-for-restricting-tmpfs-size.patch @@ -1,24 +1,24 @@ -From 508f3f3f6b114fe081cc2c0594912fd6451d1045 Mon Sep 17 00:00:00 2001 +From 2d2e804d3d48f47c207a6a58d6932e1119f61f93 Mon Sep 17 00:00:00 2001 From: Kam Nasim Date: Thu, 12 Oct 2017 18:22:33 -0400 -Subject: meta patch for restricting tmpfs size +Subject: [PATCH 6/7] meta patch for restricting tmpfs size --- SPECS/systemd.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 9e5ac92..66df00b 100644 +index acc059f..6152e33 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -462,6 +462,7 @@ Patch0504: 0504-Configure-journald-rate-limit.patch - Patch0505: 0505-remove-id-sas-path-symlink.patch - Patch0506: 0506-fix-ACL-warnings-from-systemd-tmpfiles-set.patch - Patch0507: 0507-move-vartmp-to-tmpfs.patch -+Patch0508: 0508-set-a-1GB-size-restriction-on-tpmfs.patch +@@ -660,6 +660,7 @@ Patch0704: 0704-Configure-journald-rate-limit.patch + Patch0705: 0705-remove-id-sas-path-symlink.patch + Patch0706: 0706-fix-ACL-warnings-from-systemd-tmpfiles-set.patch + Patch0707: 0707-move-vartmp-to-tmpfs.patch ++Patch0708: 0708-set-a-1GB-size-restriction-on-tpmfs.patch %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} -- -1.8.3.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0013-fix-systemd-tmpfiles-ACL-warnings.patch b/base/systemd/centos/meta_patches/0013-fix-systemd-tmpfiles-ACL-warnings.patch index 5bdcdc321..819d4a845 100644 --- a/base/systemd/centos/meta_patches/0013-fix-systemd-tmpfiles-ACL-warnings.patch +++ b/base/systemd/centos/meta_patches/0013-fix-systemd-tmpfiles-ACL-warnings.patch @@ -1,24 +1,24 @@ -From 9c5837d4d7a60653e418157e3a9552ddcc36d29e Mon Sep 17 00:00:00 2001 +From 151218c66280ec3984daf0a476e7b5cac69d305a Mon Sep 17 00:00:00 2001 From: Andy Ning Date: Wed, 28 Mar 2018 14:20:39 -0400 -Subject: fix systemd tmpfiles ACL warnings +Subject: [PATCH 7/7] fix systemd tmpfiles ACL warnings --- SPECS/systemd.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec -index 55e44a5..f1dea1e 100644 +index 6152e33..ffd0770 100644 --- a/SPECS/systemd.spec +++ b/SPECS/systemd.spec -@@ -547,6 +547,7 @@ Patch0505: 0505-remove-id-sas-path-symlink.patch - Patch0506: 0506-fix-ACL-warnings-from-systemd-tmpfiles-set.patch - Patch0507: 0507-move-vartmp-to-tmpfs.patch - Patch0508: 0508-set-a-1GB-size-restriction-on-tpmfs.patch -+Patch0509: 0509-fix-systemd-tmpfiles-ACL-warnings.patch +@@ -661,6 +661,7 @@ Patch0705: 0705-remove-id-sas-path-symlink.patch + Patch0706: 0706-fix-ACL-warnings-from-systemd-tmpfiles-set.patch + Patch0707: 0707-move-vartmp-to-tmpfs.patch + Patch0708: 0708-set-a-1GB-size-restriction-on-tpmfs.patch ++Patch0709: 0709-fix-systemd-tmpfiles-ACL-warnings.patch %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} -- -1.8.3.1 +2.7.4 diff --git a/base/systemd/centos/meta_patches/0014-fix-build-error-for-unused-variable.patch b/base/systemd/centos/meta_patches/0014-fix-build-error-for-unused-variable.patch new file mode 100644 index 000000000..a788f0dfd --- /dev/null +++ b/base/systemd/centos/meta_patches/0014-fix-build-error-for-unused-variable.patch @@ -0,0 +1,25 @@ +From 6aead74fb56ae75cc16be507165d3fc75c38fac0 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Thu, 9 Aug 2018 18:40:36 +0800 +Subject: [PATCH] Add 0710-fix-build-error-for-unused-variable.patch + +Signed-off-by: slin14 +--- + SPECS/systemd.spec | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec +index ffd0770..3f7cc10 100644 +--- a/SPECS/systemd.spec ++++ b/SPECS/systemd.spec +@@ -662,6 +662,7 @@ Patch0706: 0706-fix-ACL-warnings-from-systemd-tmpfiles-set.patch + Patch0707: 0707-move-vartmp-to-tmpfs.patch + Patch0708: 0708-set-a-1GB-size-restriction-on-tpmfs.patch + Patch0709: 0709-fix-systemd-tmpfiles-ACL-warnings.patch ++Patch0710: 0710-fix-build-error-for-unused-variable.patch + + %global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);} + +-- +2.7.4 + diff --git a/base/systemd/centos/meta_patches/PATCH_ORDER b/base/systemd/centos/meta_patches/PATCH_ORDER index 85b292fe3..d11a6b463 100644 --- a/base/systemd/centos/meta_patches/PATCH_ORDER +++ b/base/systemd/centos/meta_patches/PATCH_ORDER @@ -9,3 +9,4 @@ 0011-Add-patch-for-moving-vartmp-to-tmpfs.patch 0012-Add-patch-for-restricting-tmpfs-size.patch 0013-fix-systemd-tmpfiles-ACL-warnings.patch +0014-fix-build-error-for-unused-variable.patch diff --git a/base/systemd/centos/patches/0501-inject-millisec-in-syslog-date.patch b/base/systemd/centos/patches/0701-inject-millisec-in-syslog-date.patch similarity index 100% rename from base/systemd/centos/patches/0501-inject-millisec-in-syslog-date.patch rename to base/systemd/centos/patches/0701-inject-millisec-in-syslog-date.patch diff --git a/base/systemd/centos/patches/0503-Configure-journald-to-forward-to-syslog.patch b/base/systemd/centos/patches/0703-Configure-journald-to-forward-to-syslog.patch similarity index 100% rename from base/systemd/centos/patches/0503-Configure-journald-to-forward-to-syslog.patch rename to base/systemd/centos/patches/0703-Configure-journald-to-forward-to-syslog.patch diff --git a/base/systemd/centos/patches/0504-Configure-journald-rate-limit.patch b/base/systemd/centos/patches/0704-Configure-journald-rate-limit.patch similarity index 100% rename from base/systemd/centos/patches/0504-Configure-journald-rate-limit.patch rename to base/systemd/centos/patches/0704-Configure-journald-rate-limit.patch diff --git a/base/systemd/centos/patches/0505-remove-id-sas-path-symlink.patch b/base/systemd/centos/patches/0705-remove-id-sas-path-symlink.patch similarity index 100% rename from base/systemd/centos/patches/0505-remove-id-sas-path-symlink.patch rename to base/systemd/centos/patches/0705-remove-id-sas-path-symlink.patch diff --git a/base/systemd/centos/patches/0506-fix-ACL-warnings-from-systemd-tmpfiles-set.patch b/base/systemd/centos/patches/0706-fix-ACL-warnings-from-systemd-tmpfiles-set.patch similarity index 100% rename from base/systemd/centos/patches/0506-fix-ACL-warnings-from-systemd-tmpfiles-set.patch rename to base/systemd/centos/patches/0706-fix-ACL-warnings-from-systemd-tmpfiles-set.patch diff --git a/base/systemd/centos/patches/0507-move-vartmp-to-tmpfs.patch b/base/systemd/centos/patches/0707-move-vartmp-to-tmpfs.patch similarity index 100% rename from base/systemd/centos/patches/0507-move-vartmp-to-tmpfs.patch rename to base/systemd/centos/patches/0707-move-vartmp-to-tmpfs.patch diff --git a/base/systemd/centos/patches/0508-set-a-1GB-size-restriction-on-tpmfs.patch b/base/systemd/centos/patches/0708-set-a-1GB-size-restriction-on-tpmfs.patch similarity index 100% rename from base/systemd/centos/patches/0508-set-a-1GB-size-restriction-on-tpmfs.patch rename to base/systemd/centos/patches/0708-set-a-1GB-size-restriction-on-tpmfs.patch diff --git a/base/systemd/centos/patches/0509-fix-systemd-tmpfiles-ACL-warnings.patch b/base/systemd/centos/patches/0709-fix-systemd-tmpfiles-ACL-warnings.patch similarity index 100% rename from base/systemd/centos/patches/0509-fix-systemd-tmpfiles-ACL-warnings.patch rename to base/systemd/centos/patches/0709-fix-systemd-tmpfiles-ACL-warnings.patch diff --git a/base/systemd/centos/patches/0710-fix-build-error-for-unused-variable.patch b/base/systemd/centos/patches/0710-fix-build-error-for-unused-variable.patch new file mode 100644 index 000000000..36e5fcc66 --- /dev/null +++ b/base/systemd/centos/patches/0710-fix-build-error-for-unused-variable.patch @@ -0,0 +1,26 @@ +From 193fcf879dbee168238227e2123d63f5bf8a135d Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Thu, 9 Aug 2018 18:38:18 +0800 +Subject: [PATCH] fix build error for unused variable + +Signed-off-by: slin14 +--- + src/journal/journald-syslog.c | 2 -- + 1 file changed, 2 deletions(-) + +diff --git a/src/journal/journald-syslog.c b/src/journal/journald-syslog.c +index 33062ea..fd4e070 100644 +--- a/src/journal/journald-syslog.c ++++ b/src/journal/journald-syslog.c +@@ -165,8 +165,6 @@ void server_forward_syslog(Server *s, int priority, const char *identifier, cons + char header_priority[DECIMAL_STR_MAX(priority) + 3], header_time[64], + header_pid[sizeof("[]: ")-1 + DECIMAL_STR_MAX(pid_t) + 1]; + int n = 0; +- time_t t; +- struct tm *tm; + char *ident_buf = NULL; + + assert(s); +-- +2.7.4 + diff --git a/base/systemd/centos/srpm_path b/base/systemd/centos/srpm_path index d64706487..712c49fb3 100644 --- a/base/systemd/centos/srpm_path +++ b/base/systemd/centos/srpm_path @@ -1 +1 @@ -mirror:Source/systemd-219-42.el7_4.1.src.rpm +mirror:Source/systemd-219-57.el7.src.rpm diff --git a/base/util-linux/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/util-linux/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 68db6d0a3..0bad3184f 100644 --- a/base/util-linux/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/base/util-linux/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From e665a4b1693745e5c97c14c473e531883225df12 Mon Sep 17 00:00:00 2001 +From 9ca3c8b4c62532cfbcdf5b9bf1c24a5a53e4f619 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 14:55:36 -0400 -Subject: [PATCH 3/3] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/util-linux.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/util-linux.spec b/SPECS/util-linux.spec -index bed4869..2388f6a 100644 +index 537a03c..3897c16 100644 --- a/SPECS/util-linux.spec +++ b/SPECS/util-linux.spec @@ -2,7 +2,7 @@ Summary: A collection of basic system utilities Name: util-linux Version: 2.23.2 --Release: 43%{?dist} -+Release: 43.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 52%{?dist} ++Release: 52.el7%{?_tis_dist}.%{tis_patch_ver} License: GPLv2 and GPLv2+ and LGPLv2+ and BSD with advertising and Public Domain Group: System Environment/Base URL: http://en.wikipedia.org/wiki/Util-linux -- -1.9.1 +2.7.4 diff --git a/base/util-linux/centos/srpm_path b/base/util-linux/centos/srpm_path index 1099936c4..4251ec851 100644 --- a/base/util-linux/centos/srpm_path +++ b/base/util-linux/centos/srpm_path @@ -1 +1 @@ -mirror:Source/util-linux-2.23.2-43.el7.src.rpm +mirror:Source/util-linux-2.23.2-52.el7.src.rpm diff --git a/base/vim/centos/build_srpm.data b/base/vim/centos/build_srpm.data deleted file mode 100644 index 2ec7ea02f..000000000 --- a/base/vim/centos/build_srpm.data +++ /dev/null @@ -1,2 +0,0 @@ -COPY_LIST="files/*" -TIS_PATCH_VER=1 diff --git a/base/vim/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/base/vim/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch deleted file mode 100644 index 848bd6e93..000000000 --- a/base/vim/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 852f734a938c881248d48feb9eb9e0f80d27af55 Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Mon, 2 Oct 2017 15:54:16 -0400 -Subject: [PATCH 1/1] WRS: 0001-Update-package-versioning-for-TIS-format.patch - -Conflicts: - SPECS/vim.spec ---- - SPECS/vim.spec | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/SPECS/vim.spec b/SPECS/vim.spec -index 3cc96c2..be1a56c 100644 ---- a/SPECS/vim.spec -+++ b/SPECS/vim.spec -@@ -20,7 +20,7 @@ Summary: The VIM editor - URL: http://www.vim.org/ - Name: vim - Version: %{baseversion}.%{patchlevel} --Release: 2%{?dist} -+Release: 2.el7%{?_tis_dist}.%{tis_patch_ver} - License: Vim - Group: Applications/Editors - Source0: ftp://ftp.vim.org/pub/vim/unix/vim-%{baseversion}.tar.bz2 --- -1.9.1 - diff --git a/base/vim/centos/meta_patches/PATCH_ORDER b/base/vim/centos/meta_patches/PATCH_ORDER deleted file mode 100644 index 91f9a80ea..000000000 --- a/base/vim/centos/meta_patches/PATCH_ORDER +++ /dev/null @@ -1 +0,0 @@ -0001-Update-package-versioning-for-TIS-format.patch diff --git a/base/vim/centos/srpm_path b/base/vim/centos/srpm_path deleted file mode 100644 index 2749149ae..000000000 --- a/base/vim/centos/srpm_path +++ /dev/null @@ -1 +0,0 @@ -mirror:Source/vim-7.4.160-2.el7.src.rpm diff --git a/base/vim/files/vimrc b/base/vim/files/vimrc deleted file mode 100644 index aa57c277c..000000000 --- a/base/vim/files/vimrc +++ /dev/null @@ -1,92 +0,0 @@ -" An example for a vimrc file. -" -" Maintainer: Bram Moolenaar -" Last change: 2008 Jul 02 -" -" To use it, copy it to -" for Unix and OS/2: ~/.vimrc -" for Amiga: s:.vimrc -" for MS-DOS and Win32: $VIM\_vimrc -" for OpenVMS: sys$login:.vimrc - -" When started as "evim", evim.vim will already have done these settings. -if v:progname =~? "evim" - finish -endif - -" Use Vim settings, rather then Vi settings (much better!). -" This must be first, because it changes other options as a side effect. -set nocompatible - -" allow backspacing over everything in insert mode -set backspace=indent,eol,start - -set nobackup " do not keep a backup file, use versions instead -set history=50 " keep 50 lines of command line history -set ruler " show the cursor position all the time -set showcmd " display incomplete commands -set incsearch " do incremental searching - -" For Win32 GUI: remove 't' flag from 'guioptions': no tearoff menu entries -" let &guioptions = substitute(&guioptions, "t", "", "g") - -" Don't use Ex mode, use Q for formatting -map Q gq - -" CTRL-U in insert mode deletes a lot. Use CTRL-G u to first break undo, -" so that you can undo CTRL-U after inserting a line break. -inoremap u - -" In many terminal emulators the mouse works just fine, thus enable it. -if has('mouse') - set mouse-=a -endif - -" Switch syntax highlighting on, when the terminal has colors -" Also switch on highlighting the last used search pattern. -"if &t_Co > 2 || has("gui_running") -" syntax on -" set hlsearch -"endif - -" Only do this part when compiled with support for autocommands. -if has("autocmd") - - " Enable file type detection. - " Use the default filetype settings, so that mail gets 'tw' set to 72, - " 'cindent' is on in C files, etc. - " Also load indent files, to automatically do language-dependent indenting. - filetype plugin indent off - - " Put these in an autocmd group, so that we can delete them easily. - augroup vimrcEx - au! - - " For all text files set 'textwidth' to 78 characters. - autocmd FileType text setlocal textwidth=78 - - " When editing a file, always jump to the last known cursor position. - " Don't do it when the position is invalid or when inside an event handler - " (happens when dropping a file on gvim). - " Also don't do it when the mark is in the first line, that is the default - " position when opening a file. - autocmd BufReadPost * - \ if line("'\"") > 1 && line("'\"") <= line("$") | - \ exe "normal! g`\"" | - \ endif - - augroup END - -else - - set autoindent " always set autoindenting on - -endif " has("autocmd") - -" Convenient command to see the difference between the current buffer and the -" file it was loaded from, thus the changes you made. -" Only define it when not defined already. -if !exists(":DiffOrig") - command DiffOrig vert new | set bt=nofile | r # | 0d_ | diffthis - \ | wincmd p | diffthis -endif diff --git a/centos_pkg_dirs b/centos_pkg_dirs index 927a32b22..d3ab43e6c 100644 --- a/centos_pkg_dirs +++ b/centos_pkg_dirs @@ -13,11 +13,9 @@ config/facter virt/qemu filesystem/nfscheck utilities/update-motd -base/vim python/python-2.7.5 python/python-django python/python-setuptools -filesystem/e2fsprogs virt/libvirt virt/libvirt-python base/lighttpd @@ -91,7 +89,6 @@ python/python-gunicorn config/puppet-modules/openstack/puppet-oslo-11.3.0 storage-drivers/python-3parclient storage-drivers/python-lefthandclient -networking/iproute security/tboot networking/mellanox/libibverbs kernel/kernel-modules/mlnx-ofa_kernel diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 3659e7667..88ced7def 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -8,18 +8,18 @@ Subject: [PATCH] Update package versioning for TIS format 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/puppet-ceph.spec b/SPECS/puppet-ceph.spec -index ecde883..7f086c5 100644 +index 8cfc8c1..3d7dccf 100644 --- a/SPECS/puppet-ceph.spec +++ b/SPECS/puppet-ceph.spec @@ -1,7 +1,7 @@ %{!?upstream_version: %global upstream_version %{version}%{?milestone}} Name: puppet-ceph - Version: 2.2.0 + Version: 2.4.1 -Release: 1%{?dist} +Release: 1.el7%{?_tis_dist}.%{tis_patch_ver} Summary: Community Developed Ceph Module - License: Apache-2.0 + License: ASL 2.0 -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0002-Add-TIS-patches.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0002-Add-TIS-patches.patch index a96e9cf71..ffb952a84 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0002-Add-TIS-patches.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0002-Add-TIS-patches.patch @@ -8,10 +8,10 @@ Subject: [PATCH] Add TIS patches 1 file changed, 4 insertions(+) diff --git a/SPECS/puppet-ceph.spec b/SPECS/puppet-ceph.spec -index 7f086c5..771eb26 100644 +index 3d7dccf..5b0deea 100644 --- a/SPECS/puppet-ceph.spec +++ b/SPECS/puppet-ceph.spec -@@ -8,6 +8,8 @@ License: Apache-2.0 +@@ -8,6 +8,8 @@ License: ASL 2.0 URL: https://launchpad.net/puppet-ceph Source0: https://tarballs.openstack.org/%{name}/%{name}-%{upstream_version}.tar.gz @@ -23,12 +23,12 @@ index 7f086c5..771eb26 100644 @@ -23,6 +25,8 @@ Community Developed Ceph Module %prep - %setup -q -n openstack-ceph-%{version} + %setup -q -n openstack-ceph-%{upstream_version} +%patch0001 -p1 +%patch0002 -p1 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0003-Ceph-Jewel-rebase.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0003-Ceph-Jewel-rebase.patch index be7f031f7..30383aba4 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0003-Ceph-Jewel-rebase.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0003-Ceph-Jewel-rebase.patch @@ -8,7 +8,7 @@ Subject: [PATCH] ceph jewel rebase 1 file changed, 2 insertions(+) diff --git a/SPECS/puppet-ceph.spec b/SPECS/puppet-ceph.spec -index cd07d2c..90d30d5 100644 +index 5b0deea..23e0562 100644 --- a/SPECS/puppet-ceph.spec +++ b/SPECS/puppet-ceph.spec @@ -10,6 +10,7 @@ URL: https://launchpad.net/puppet-ceph @@ -20,7 +20,7 @@ index cd07d2c..90d30d5 100644 BuildArch: noarch @@ -27,6 +28,7 @@ Community Developed Ceph Module - %setup -q -n openstack-ceph-%{version} + %setup -q -n openstack-ceph-%{upstream_version} %patch0001 -p1 %patch0002 -p1 +%patch0003 -p1 @@ -28,5 +28,5 @@ index cd07d2c..90d30d5 100644 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0004-Add-OSD-support-for-persistent-naming.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0004-Add-OSD-support-for-persistent-naming.patch index d5e5a47de..9161146a9 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0004-Add-OSD-support-for-persistent-naming.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0004-Add-OSD-support-for-persistent-naming.patch @@ -8,10 +8,10 @@ Subject: [PATCH] Add OSD support for persistent naming 1 file changed, 2 insertions(+) diff --git a/SPECS/puppet-ceph.spec b/SPECS/puppet-ceph.spec -index bb4392d..99e4ac8 100644 +index 23e0562..ef82b81 100644 --- a/SPECS/puppet-ceph.spec +++ b/SPECS/puppet-ceph.spec -@@ -13,6 +13,7 @@ Source0: https://tarballs.openstack.org/%{name}/%{name}-%{upstream_versio +@@ -11,6 +11,7 @@ Source0: https://tarballs.openstack.org/%{name}/%{name}-%{upstream_versio Patch0001: 0001-Roll-up-TIS-patches.patch Patch0002: 0002-Newton-rebase-fixes.patch Patch0003: 0003-Ceph-Jewel-rebase.patch @@ -19,7 +19,7 @@ index bb4392d..99e4ac8 100644 BuildArch: noarch -@@ -31,6 +32,7 @@ Community Developed Ceph Module +@@ -29,6 +30,7 @@ Community Developed Ceph Module %patch0001 -p1 %patch0002 -p1 %patch0003 -p1 @@ -28,5 +28,5 @@ index bb4392d..99e4ac8 100644 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0005-meta-patch-for-patch5.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0005-meta-patch-for-patch5.patch index 83d3374c2..aeb203693 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0005-meta-patch-for-patch5.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/meta_patches/0005-meta-patch-for-patch5.patch @@ -8,7 +8,7 @@ Subject: [PATCH] meta patch for patch5 1 file changed, 2 insertions(+) diff --git a/SPECS/puppet-ceph.spec b/SPECS/puppet-ceph.spec -index 66fc8ad..c855fc2 100644 +index ef82b81..ad75ea5 100644 --- a/SPECS/puppet-ceph.spec +++ b/SPECS/puppet-ceph.spec @@ -12,6 +12,7 @@ Patch0001: 0001-Roll-up-TIS-patches.patch @@ -28,5 +28,5 @@ index 66fc8ad..c855fc2 100644 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0001-Roll-up-TIS-patches.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0001-Roll-up-TIS-patches.patch index 67d3f2b49..263cc3c5b 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0001-Roll-up-TIS-patches.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0001-Roll-up-TIS-patches.patch @@ -1,16 +1,16 @@ -From d8e6107a98649475b5151289d6440b41f0397746 Mon Sep 17 00:00:00 2001 +From ff98c42f0e6ce22969e986933d0a60d73a281a1d Mon Sep 17 00:00:00 2001 From: Don Penney Date: Tue, 10 Jan 2017 13:31:17 -0500 -Subject: [PATCH] Roll up TIS patches +Subject: [PATCH 1/5] Roll up TIS patches --- - manifests/mon.pp | 15 ++++++++++++--- - manifests/osd.pp | 33 +++++++++++++++++---------------- + manifests/mon.pp | 14 +++++++++++--- + manifests/osd.pp | 38 +++++++++++++++++++------------------- manifests/rgw.pp | 7 +++++++ - 3 files changed, 36 insertions(+), 19 deletions(-) + 3 files changed, 37 insertions(+), 22 deletions(-) diff --git a/manifests/mon.pp b/manifests/mon.pp -index a6b5712..54f9909 100644 +index bc0298c..fa99df5 100644 --- a/manifests/mon.pp +++ b/manifests/mon.pp @@ -65,6 +65,8 @@ define ceph::mon ( @@ -22,15 +22,7 @@ index a6b5712..54f9909 100644 $exec_timeout = $::ceph::params::exec_timeout, ) { -@@ -78,6 +80,7 @@ define ceph::mon ( - $cluster_option = "--cluster ${cluster_name}" - } else { - $cluster_name = 'ceph' -+ $cluster_option = undef - } - - # NOTE(aschultz): this is the service title for the mon service. It may be -@@ -154,6 +157,10 @@ test -e \$mon_data/done +@@ -154,6 +156,10 @@ test -e \$mon_data/done } } @@ -38,10 +30,10 @@ index a6b5712..54f9909 100644 + $fsid_option = "--fsid ${fsid}" + } + - Ceph_config<||> -> + Ceph_config<||> # prevent automatic creation of the client.admin key by ceph-create-keys - exec { "ceph-mon-${cluster_name}.client.admin.keyring-${id}": -@@ -177,7 +184,8 @@ if [ ! -d \$mon_data ] ; then + -> exec { "ceph-mon-${cluster_name}.client.admin.keyring-${id}": +@@ -176,7 +182,8 @@ if [ ! -d \$mon_data ] ; then --setuser ceph --setgroup ceph \ --mkfs \ --id ${id} \ @@ -51,7 +43,7 @@ index a6b5712..54f9909 100644 touch \$mon_data/done \$mon_data/${init} \$mon_data/keyring chown -h ceph:ceph \$mon_data/done \$mon_data/${init} \$mon_data/keyring else -@@ -187,7 +195,8 @@ if [ ! -d \$mon_data ] ; then +@@ -186,7 +193,8 @@ if [ ! -d \$mon_data ] ; then if ceph-mon ${cluster_option} \ --mkfs \ --id ${id} \ @@ -61,31 +53,31 @@ index a6b5712..54f9909 100644 touch \$mon_data/done \$mon_data/${init} \$mon_data/keyring else rm -fr \$mon_data -@@ -204,7 +213,7 @@ test -d \$mon_data +@@ -203,7 +211,7 @@ test -d \$mon_data timeout => $exec_timeout, - }-> - service { $mon_service: + } + -> service { $mon_service: - ensure => running, + ensure => $service_ensure, } # if the service is running before we setup the configs, notify service diff --git a/manifests/osd.pp b/manifests/osd.pp -index 6c39806..5d3628d 100644 +index d24b95e..9b8cd99 100644 --- a/manifests/osd.pp +++ b/manifests/osd.pp @@ -52,6 +52,8 @@ define ceph::osd ( $ensure = present, - $journal = undef, + $journal = "''", $cluster = undef, + $cluster_uuid = undef, + $uuid = undef, $exec_timeout = $::ceph::params::exec_timeout, $selinux_file_context = 'ceph_var_lib_t', $fsid = $::ceph::profile::params::fsid, -@@ -66,6 +68,14 @@ define ceph::osd ( - $cluster_name = 'ceph' +@@ -68,6 +70,14 @@ define ceph::osd ( } + $cluster_option = "--cluster ${cluster_name}" + if $cluster_uuid { + $cluster_uuid_option = "--cluster-uuid ${cluster_uuid}" @@ -98,26 +90,30 @@ index 6c39806..5d3628d 100644 if $ensure == present { $ceph_check_udev = "ceph-osd-check-udev-${name}" -@@ -115,22 +125,13 @@ test -z \$(ceph-disk list ${data} | egrep -o '[0-9a-f]{8}-([0-9a-f]{4}-){3}[0-9a +@@ -120,25 +130,15 @@ test -z $(ceph-disk list $(readlink -f ${data}) | egrep -o '[0-9a-f]{8}-([0-9a-f Exec[$ceph_check_udev] -> Exec[$ceph_prepare] # ceph-disk: prepare should be idempotent http://tracker.ceph.com/issues/7475 exec { $ceph_prepare: - command => "/bin/true # comment to satisfy puppet syntax requirements -set -ex --if ! test -b ${data} ; then -- mkdir -p ${data} +-disk=$(readlink -f ${data}) +-if ! test -b \$disk ; then +- echo \$disk | egrep -e '^/dev' -q -v +- mkdir -p \$disk - if getent passwd ceph >/dev/null 2>&1; then -- chown -h ceph:ceph ${data} +- chown -h ceph:ceph \$disk - fi -fi --ceph-disk prepare ${cluster_option} ${fsid_option} ${data} ${journal} +-ceph-disk prepare ${cluster_option} ${fsid_option} $(readlink -f ${data}) $(readlink -f ${journal}) -udevadm settle -", - unless => "/bin/true # comment to satisfy puppet syntax requirements -set -ex --ceph-disk list | grep -E ' *${data}1? .*ceph data, (prepared|active)' || --{ test -f ${data}/fsid && test -f ${data}/ceph_fsid && test -f ${data}/magic ;} +-disk=$(readlink -f ${data}) +-ceph-disk list | egrep \" *(\${disk}1?|\${disk}p1?) .*ceph data, (prepared|active)\" || +-{ test -f \$disk/fsid && test -f \$disk/ceph_fsid && test -f \$disk/magic ;} -", ++ + command => "/usr/sbin/ceph-disk prepare ${cluster_option} ${cluster_uuid_option} ${uuid_option} --fs-type xfs --zap-disk ${data} ${journal}", + # We don't want to erase the disk if: + # 1. There is already ceph data on the disk for our cluster AND @@ -125,14 +121,15 @@ index 6c39806..5d3628d 100644 + # OSD on the disk. We don't want to attempt to re-use an OSD that + # had previously been deleted. + unless => "/usr/sbin/ceph-disk list | grep -v 'unknown cluster' | grep ' *${data}.*ceph data' | grep 'osd uuid ${uuid}'", ++ logoutput => true, timeout => $exec_timeout, - } + tag => 'prepare', diff --git a/manifests/rgw.pp b/manifests/rgw.pp -index da5557e..2a79c07 100644 +index 2612785..ebc83ce 100644 --- a/manifests/rgw.pp +++ b/manifests/rgw.pp -@@ -177,6 +177,13 @@ define ceph::rgw ( +@@ -185,6 +185,13 @@ define ceph::rgw ( provider => $::ceph::params::service_provider, } # Everything else that is supported by puppet-ceph should run systemd. @@ -147,5 +144,5 @@ index da5557e..2a79c07 100644 Service { name => "ceph-radosgw@${name}", -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0002-Newton-rebase-fixes.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0002-Newton-rebase-fixes.patch index d1f8366df..62caeeff9 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0002-Newton-rebase-fixes.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0002-Newton-rebase-fixes.patch @@ -9,7 +9,7 @@ Subject: [PATCH] Newton rebase fixes 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/manifests/mon.pp b/manifests/mon.pp -index 54f9909..41fd8df 100644 +index 5f7138f..543d044 100644 --- a/manifests/mon.pp +++ b/manifests/mon.pp @@ -100,10 +100,13 @@ define ceph::mon ( @@ -30,7 +30,7 @@ index 54f9909..41fd8df 100644 } diff --git a/manifests/osd.pp b/manifests/osd.pp -index 5d3628d..ef171eb 100644 +index 9b8cd99..2187361 100644 --- a/manifests/osd.pp +++ b/manifests/osd.pp @@ -56,7 +56,7 @@ define ceph::osd ( @@ -41,7 +41,7 @@ index 5d3628d..ef171eb 100644 + $fsid = undef, ) { - $data = $name + include ::ceph::params -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0003-Ceph-Jewel-rebase.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0003-Ceph-Jewel-rebase.patch index 524b3fb7c..62fe5dc00 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0003-Ceph-Jewel-rebase.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0003-Ceph-Jewel-rebase.patch @@ -5,12 +5,12 @@ Subject: [PATCH] ceph jewel rebase --- manifests/mon.pp | 1 + - manifests/rgw.pp | 34 +++++++++++++++++++++++++--------- + manifests/rgw.pp | 33 +++++++++++++++++++++++++-------- manifests/rgw/keystone.pp | 6 +++--- - 3 files changed, 29 insertions(+), 12 deletions(-) + 3 files changed, 29 insertions(+), 11 deletions(-) diff --git a/manifests/mon.pp b/manifests/mon.pp -index 41fd8df..acc112e 100644 +index 543d044..ad92061 100644 --- a/manifests/mon.pp +++ b/manifests/mon.pp @@ -107,6 +107,7 @@ define ceph::mon ( @@ -22,10 +22,10 @@ index 41fd8df..acc112e 100644 } diff --git a/manifests/rgw.pp b/manifests/rgw.pp -index 2a79c07..d7af122 100644 +index ebc83ce..56fb4a8 100644 --- a/manifests/rgw.pp +++ b/manifests/rgw.pp -@@ -185,23 +185,39 @@ define ceph::rgw ( +@@ -193,23 +193,40 @@ define ceph::rgw ( status => "systemctl status ceph-radosgw", } } else { @@ -35,6 +35,7 @@ index 2a79c07..d7af122 100644 + before => Service["radosgw-${name}"], + } + } ++ Service { - name => "ceph-radosgw@${name}", - enable => $rgw_enable, @@ -47,8 +48,6 @@ index 2a79c07..d7af122 100644 } - service { $rgw_service: -- ensure => $rgw_ensure, -- tag => ['ceph-radosgw'] + #for RHEL/CentOS7, systemctl needs to reload to pickup the ceph-radosgw init file + if (($::operatingsystem == 'RedHat' or $::operatingsystem == 'CentOS') and (versioncmp($::operatingsystemmajrelease, '7') >= 0)) + { @@ -57,11 +56,12 @@ index 2a79c07..d7af122 100644 + } + } + service { "radosgw-${name}": -+ ensure => $rgw_ensure, + ensure => $rgw_ensure, +- tag => ['ceph-radosgw'] + tag => ['radosgw'] } -- Ceph_config<||> -> Service<| tag == 'ceph-radosgw' |> +- Ceph_config<||> ~> Service<| tag == 'ceph-radosgw' |> + Ceph_config<||> -> Service["radosgw-${name}"] Package<| tag == 'ceph' |> -> File['/var/lib/ceph/radosgw'] Package<| tag == 'ceph' |> -> File[$log_file] @@ -75,7 +75,7 @@ index 2a79c07..d7af122 100644 + Ceph::Pool<||> -> Service["radosgw-${name}"] } diff --git a/manifests/rgw/keystone.pp b/manifests/rgw/keystone.pp -index e17e4e1..72a0554 100644 +index 8351177..c371fd0 100644 --- a/manifests/rgw/keystone.pp +++ b/manifests/rgw/keystone.pp @@ -148,7 +148,7 @@ define ceph::rgw::keystone ( @@ -106,5 +106,5 @@ index e17e4e1..72a0554 100644 ceph_config { "client.${name}/nss_db_path": ensure => absent; -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0004-US92424-Add-OSD-support-for-persistent-naming.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0004-US92424-Add-OSD-support-for-persistent-naming.patch index 1819ad70a..19479228d 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0004-US92424-Add-OSD-support-for-persistent-naming.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0004-US92424-Add-OSD-support-for-persistent-naming.patch @@ -12,18 +12,18 @@ associated with udev link. 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifests/osd.pp b/manifests/osd.pp -index ef171eb..b9deea3 100644 +index 2187361..d9cf5b1 100644 --- a/manifests/osd.pp +++ b/manifests/osd.pp -@@ -59,7 +59,7 @@ define ceph::osd ( - $fsid = undef, - ) { +@@ -61,7 +61,7 @@ define ceph::osd ( + + include ::ceph::params - $data = $name + $data = generate('/bin/bash','-c',"/bin/readlink -f ${name}") if $cluster { - $cluster_option = "--cluster ${cluster}" + $cluster_name = $cluster -- -2.9.0 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0005-Remove-puppetlabs-apt-as-ceph-requirement.patch b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0005-Remove-puppetlabs-apt-as-ceph-requirement.patch index 9d903e2dd..2d202eee4 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0005-Remove-puppetlabs-apt-as-ceph-requirement.patch +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/patches/0005-Remove-puppetlabs-apt-as-ceph-requirement.patch @@ -9,17 +9,17 @@ We will never install apt or puppet-apt, so this requirement cannot be fulfilled 1 file changed, 1 deletion(-) diff --git a/metadata.json b/metadata.json -index 4175278..39d8c82 100644 +index 14d2f37..27b78e3 100644 --- a/metadata.json +++ b/metadata.json -@@ -47,7 +47,6 @@ - ], - "description": "Installs and configures Ceph.", +@@ -8,7 +8,6 @@ + "project_page": "https://launchpad.net/puppet-ceph", + "issues_url": "https://bugs.launchpad.net/puppet-ceph", "dependencies": [ - {"name":"puppetlabs/apt","version_requirement":">=2.0.0 <3.0.0"}, {"name":"puppetlabs/apache","version_requirement":">=1.4.1 <2.0.0"}, {"name":"puppetlabs/concat","version_requirement":">=1.2.1 <3.0.0"}, {"name":"puppetlabs/inifile","version_requirement":">=1.0.0 <2.0.0"}, -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/srpm_path b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/srpm_path index 3e71fec6e..a629f4da6 100644 --- a/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/srpm_path +++ b/config/puppet-modules/openstack/puppet-ceph-2.2.0/centos/srpm_path @@ -1 +1 @@ -mirror:Source/puppet-ceph-2.2.0-1.el7.src.rpm +mirror:Source/puppet-ceph-2.4.1-1.el7.src.rpm diff --git a/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/meta_patches/0001-Update-package-versioning-for-Titanium-format.patch b/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/meta_patches/0001-Update-package-versioning-for-Titanium-format.patch index 783472710..c0b2feea8 100644 --- a/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/meta_patches/0001-Update-package-versioning-for-Titanium-format.patch +++ b/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/meta_patches/0001-Update-package-versioning-for-Titanium-format.patch @@ -1,25 +1,25 @@ -From d445a072fdcebc0cb7ba988502eac6356edd05a7 Mon Sep 17 00:00:00 2001 +From c194c17c2022a34ce1c1eddd930eb943aaa2e1ce Mon Sep 17 00:00:00 2001 From: Jack Ding Date: Fri, 11 May 2018 21:39:23 -0400 -Subject: [PATCH 1/3] Update package versioning for Titanium format +Subject: [PATCH] Update package versioning for Titanium format --- SPECS/puppet-horizon.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/puppet-horizon.spec b/SPECS/puppet-horizon.spec -index faab8ab..03ed102 100644 +index 955f56c..511cf25 100644 --- a/SPECS/puppet-horizon.spec +++ b/SPECS/puppet-horizon.spec @@ -1,7 +1,7 @@ %{!?upstream_version: %global upstream_version %{version}%{?milestone}} Name: puppet-horizon - Version: 9.5.0 + Version: 11.5.0 -Release: 1%{?dist} +Release: 1.el7%{?_tis_dist}.%{tis_patch_ver} Summary: Puppet module for OpenStack Horizon - License: Apache-2.0 + License: ASL 2.0 -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/srpm_path b/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/srpm_path index 7fb31316d..568d8969d 100644 --- a/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/srpm_path +++ b/config/puppet-modules/openstack/puppet-horizon-9.5.0/centos/srpm_path @@ -1 +1 @@ -mirror:Source/puppet-horizon-9.5.0-1.el7.src.rpm +mirror:Source/puppet-horizon-11.5.0-1.el7.src.rpm diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index bf72c73f5..a3ce7e230 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -3,25 +3,23 @@ From: Scott Little Date: Mon, 20 Mar 2017 11:10:38 -0400 Subject: [PATCH 1/2] WRS: 0001-Update-package-versioning-for-TIS-format.patch -Conflicts: - SPECS/puppet-haproxy.spec --- SPECS/puppet-haproxy.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/puppet-haproxy.spec b/SPECS/puppet-haproxy.spec -index 6944e73..a975f60 100644 +index 7d4b215..afb20d5 100644 --- a/SPECS/puppet-haproxy.spec +++ b/SPECS/puppet-haproxy.spec @@ -8,7 +8,7 @@ Name: puppet-haproxy Version: 1.5.0 --Release: 2%{?alphatag}%{?dist} -+Release: 2.6ee8180git.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 4%{?alphatag}%{?dist} ++Release: 4.6ffcb07git.el7%{?_tis_dist}.%{tis_patch_ver} Summary: Configures HAProxy servers and manages the configuration of backend member servers. - License: Apache-2.0 + License: ASL 2.0 -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0002-Add-TIS-patch.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0002-Add-TIS-patch.patch index 98a8119ed..736d7c05f 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0002-Add-TIS-patch.patch +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0002-Add-TIS-patch.patch @@ -8,10 +8,10 @@ Subject: [PATCH 2/2] WRS: 0002-Add-TIS-patch.patch 1 file changed, 2 insertions(+) diff --git a/SPECS/puppet-haproxy.spec b/SPECS/puppet-haproxy.spec -index a975f60..a843f00 100644 +index afb20d5..f58bd74 100644 --- a/SPECS/puppet-haproxy.spec +++ b/SPECS/puppet-haproxy.spec -@@ -15,6 +15,7 @@ License: Apache-2.0 +@@ -15,6 +15,7 @@ License: ASL 2.0 URL: https://github.com/puppetlabs/puppetlabs-haproxy Source0: https://github.com/puppetlabs/%{upstream_name}/archive/%{commit}.tar.gz#/%{upstream_name}-%{shortcommit}.tar.gz @@ -28,5 +28,5 @@ index a975f60..a843f00 100644 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0003-disable-config-validation-prechecks.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0003-disable-config-validation-prechecks.patch index 45843fcd7..581a5b987 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0003-disable-config-validation-prechecks.patch +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0003-disable-config-validation-prechecks.patch @@ -8,7 +8,7 @@ Subject: [PATCH] 0003-disable-config-validation-prechecks 1 file changed, 2 insertions(+) diff --git a/SPECS/puppet-haproxy.spec b/SPECS/puppet-haproxy.spec -index a843f00..a0a9be1 100644 +index f58bd74..106ae3e 100644 --- a/SPECS/puppet-haproxy.spec +++ b/SPECS/puppet-haproxy.spec @@ -16,6 +16,7 @@ URL: https://github.com/puppetlabs/puppetlabs-haproxy @@ -28,5 +28,5 @@ index a843f00..a0a9be1 100644 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0004-Add-global_options-patch.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0004-Add-global_options-patch.patch index 003253db9..d8da9fb18 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0004-Add-global_options-patch.patch +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0004-Add-global_options-patch.patch @@ -8,7 +8,7 @@ Subject: [PATCH] Add global_options patch 1 file changed, 2 insertions(+) diff --git a/SPECS/puppet-haproxy.spec b/SPECS/puppet-haproxy.spec -index a0a9be1..a446384 100644 +index 106ae3e..fb11c75 100644 --- a/SPECS/puppet-haproxy.spec +++ b/SPECS/puppet-haproxy.spec @@ -17,6 +17,7 @@ URL: https://github.com/puppetlabs/puppetlabs-haproxy @@ -28,5 +28,5 @@ index a0a9be1..a446384 100644 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0005-Stop-invalid-warning-message.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0005-Stop-invalid-warning-message.patch new file mode 100644 index 000000000..912015d3b --- /dev/null +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/0005-Stop-invalid-warning-message.patch @@ -0,0 +1,33 @@ +From da48355594342a9f9cb9afd2936aeef0651f008e Mon Sep 17 00:00:00 2001 +From: zhipengl +Date: Fri, 7 Sep 2018 19:02:21 +0800 +Subject: [PATCH] 0005-Stop-invalid-warning-message + +Signed-off-by: zhipengl +--- + SPECS/puppet-haproxy.spec | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/SPECS/puppet-haproxy.spec b/SPECS/puppet-haproxy.spec +index fb11c75..1b671aa 100644 +--- a/SPECS/puppet-haproxy.spec ++++ b/SPECS/puppet-haproxy.spec +@@ -18,6 +18,7 @@ Source0: https://github.com/puppetlabs/%{upstream_name}/archive/%{commit} + Patch0001: 0001-Roll-up-TIS-patches.patch + Patch0002: 0002-disable-config-validation-prechecks.patch + Patch0003: 0003-Fix-global_options-log-default-value.patch ++Patch0004: 0004-Stop-invalid-warning-message + + BuildArch: noarch + +@@ -33,6 +34,7 @@ Configures HAProxy servers and manages the configuration of backend member serve + %patch0001 -p1 + %patch0002 -p1 + %patch0003 -p1 ++%patch0004 -p1 + + find . -type f -name ".*" -exec rm {} + + find . -size 0 -exec rm {} + +-- +2.7.4 + diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/PATCH_ORDER b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/PATCH_ORDER index 893476741..84b9ea0d9 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/PATCH_ORDER +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/meta_patches/PATCH_ORDER @@ -2,3 +2,5 @@ 0002-Add-TIS-patch.patch 0003-disable-config-validation-prechecks.patch 0004-Add-global_options-patch.patch +0005-Stop-invalid-warning-message.patch + diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0001-Roll-up-TIS-patches.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0001-Roll-up-TIS-patches.patch index e2a87934d..15b3575d6 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0001-Roll-up-TIS-patches.patch +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0001-Roll-up-TIS-patches.patch @@ -9,10 +9,10 @@ Subject: [PATCH] Roll up TIS patches 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/manifests/config.pp b/manifests/config.pp -index 781b6fa..785740d 100644 +index 51c2741..4007bb8 100644 --- a/manifests/config.pp +++ b/manifests/config.pp -@@ -68,8 +68,8 @@ define haproxy::config ( +@@ -75,8 +75,8 @@ define haproxy::config ( if $_global_options['chroot'] { file { $_global_options['chroot']: ensure => directory, @@ -24,20 +24,20 @@ index 781b6fa..785740d 100644 } } diff --git a/manifests/init.pp b/manifests/init.pp -index e2d3d92..b0369f7 100644 +index f1109d0..54a1640 100644 --- a/manifests/init.pp +++ b/manifests/init.pp -@@ -101,8 +101,8 @@ +@@ -110,8 +110,8 @@ class haproxy ( - $package_ensure = 'present', - $package_name = $haproxy::params::package_name, -- $service_ensure = 'running', -- $service_manage = true, + $package_ensure = 'present', + $package_name = $haproxy::params::package_name, +- $service_ensure = 'running', +- $service_manage = true, + $service_ensure = false, + $service_manage = false, - $service_options = $haproxy::params::service_options, - $sysconfig_options = $haproxy::params::sysconfig_options, - $global_options = $haproxy::params::global_options, + $service_options = $haproxy::params::service_options, + $sysconfig_options = $haproxy::params::sysconfig_options, + $global_options = $haproxy::params::global_options, -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0002-disable-config-validation-prechecks.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0002-disable-config-validation-prechecks.patch index 0f99586c3..43c306749 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0002-disable-config-validation-prechecks.patch +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0002-disable-config-validation-prechecks.patch @@ -1,4 +1,4 @@ -From 73b4a43227e36aa32103e7d8a69bcb35678f7e6c Mon Sep 17 00:00:00 2001 +From 50ef964cc4f918982d2889610c5f6e7506741518 Mon Sep 17 00:00:00 2001 From: Kam Nasim Date: Fri, 26 May 2017 17:04:32 -0400 Subject: [PATCH] disable configuration validation during haproxy manifest @@ -10,21 +10,114 @@ Subject: [PATCH] disable configuration validation during haproxy manifest sane bits) on a validation failure --- - manifests/config.pp | 1 - - 1 file changed, 1 deletion(-) + manifests/config.pp | 8 -------- + manifests/init.pp | 7 ------- + manifests/instance.pp | 7 ------- + manifests/params.pp | 1 - + 4 files changed, 23 deletions(-) diff --git a/manifests/config.pp b/manifests/config.pp -index 785740d..4d084fa 100644 +index 4007bb8..b8d4ef4 100644 --- a/manifests/config.pp +++ b/manifests/config.pp -@@ -47,7 +47,6 @@ define haproxy::config ( - owner => '0', - group => '0', - mode => '0644', -- validate_cmd => '/usr/sbin/haproxy -f % -c', +@@ -8,7 +8,6 @@ define haproxy::config ( + $config_dir = undef, # A default is required for Puppet 2.7 compatibility. When 2.7 is no longer supported, this parameter default should be removed. + $custom_fragment = undef, # A default is required for Puppet 2.7 compatibility. When 2.7 is no longer supported, this parameter default should be removed. + $merge_options = $haproxy::merge_options, +- $config_validate_cmd = $haproxy::config_validate_cmd + ) { + + if $caller_module_name != $module_name { +@@ -50,13 +49,6 @@ define haproxy::config ( + mode => '0640', } +- # validate_cmd introduced in Puppet 3.5 +- if ((!defined('$::puppetversion') or (versioncmp($::puppetversion, '3.5') >= 0)) and (!defined('$::serverversion') or versioncmp($::serverversion, '3.5') >= 0)) { +- Concat[$_config_file] { +- validate_cmd => $config_validate_cmd, +- } +- } +- # Simple Header + concat::fragment { "${instance_name}-00-header": + target => $_config_file, +diff --git a/manifests/init.pp b/manifests/init.pp +index 54a1640..d84755e 100644 +--- a/manifests/init.pp ++++ b/manifests/init.pp +@@ -72,11 +72,6 @@ + # Optional. Path to the haproxy config file. + # Default depends on platform. + # +-# [*config_validate_cmd*] +-# Optional. Command used by concat validate_cmd to validate new +-# config file concat is a valid haproxy config. +-# Default /usr/sbin/haproxy -f % -c +-# + # === Examples + # + # class { 'haproxy': +@@ -122,7 +117,6 @@ class haproxy ( + $config_dir = $haproxy::params::config_dir, + $config_file = $haproxy::params::config_file, + $manage_config_dir = $haproxy::params::manage_config_dir, +- $config_validate_cmd = $haproxy::params::config_validate_cmd, + + # Deprecated + $manage_service = undef, +@@ -183,7 +177,6 @@ class haproxy ( + merge_options => $merge_options, + service_options => $service_options, + sysconfig_options => $sysconfig_options, +- config_validate_cmd => $config_validate_cmd, + } + + } +diff --git a/manifests/instance.pp b/manifests/instance.pp +index 3dffdae..7f37751 100644 +--- a/manifests/instance.pp ++++ b/manifests/instance.pp +@@ -63,11 +63,6 @@ + # The parent directory will be created automatically. + # Defaults to undef. + # +-# [*config_validate_cmd*] +-# Command used by concat validate_cmd to validate new +-# config file concat is a valid haproxy config. +-# Default /usr/sbin/haproxy -f % -c +-# + # === Examples + # + # A single instance of haproxy with all defaults +@@ -153,7 +148,6 @@ define haproxy::instance ( + $merge_options = $haproxy::params::merge_options, + $service_options = $haproxy::params::service_options, + $sysconfig_options = $haproxy::params::sysconfig_options, +- $config_validate_cmd = $haproxy::params::config_validate_cmd, + ) { + + if $service_ensure != true and $service_ensure != false { +@@ -208,7 +202,6 @@ define haproxy::instance ( + custom_fragment => $custom_fragment, + merge_options => $merge_options, + package_ensure => $package_ensure, +- config_validate_cmd => $config_validate_cmd, + } + haproxy::install { $title: + package_name => $package_name, +diff --git a/manifests/params.pp b/manifests/params.pp +index d7b9fa9..21e6bb0 100644 +--- a/manifests/params.pp ++++ b/manifests/params.pp +@@ -10,7 +10,6 @@ class haproxy::params { + + $service_options = "ENABLED=1\n" # Only used by Debian. + $sysconfig_options = 'OPTIONS=""' #Only used by Redhat/CentOS etc +- $config_validate_cmd = '/usr/sbin/haproxy -f % -c' + + case $::osfamily { + 'Archlinux', 'Debian', 'Redhat', 'Gentoo', 'Suse' : { -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0003-Fix-global_options-log-default-value.patch b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0003-Fix-global_options-log-default-value.patch index 44a6ec0cd..79d1e82ab 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0003-Fix-global_options-log-default-value.patch +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0003-Fix-global_options-log-default-value.patch @@ -1,8 +1,9 @@ -From 872a041122b1e443e23a16e5816c3d8aa18714f8 Mon Sep 17 00:00:00 2001 +From 16163f14c8f9b1b81b6e394c31c72030938435c7 Mon Sep 17 00:00:00 2001 From: Don Penney -Date: Sun, 24 Sep 2017 00:14:25 -0400 +Date: Tue, 4 Sep 2018 20:01:53 +0800 Subject: [PATCH] Fix global_options log default value +Signed-off-by: zhipengl --- manifests/params.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) @@ -21,5 +22,5 @@ index 21e6bb0..b29e427 100644 'pidfile' => '/var/run/haproxy.pid', 'maxconn' => '4000', -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0004-Stop-invalid-warning-message b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0004-Stop-invalid-warning-message new file mode 100644 index 000000000..44c9b5220 --- /dev/null +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/patches/0004-Stop-invalid-warning-message @@ -0,0 +1,31 @@ +From 7e1cff1503d9980e6fa346ec0e9cb93dc69774bf Mon Sep 17 00:00:00 2001 +From: zhipengl +Date: Fri, 7 Sep 2018 19:24:01 +0800 +Subject: [PATCH] Stop-invalid-warning-message.patch + +It can fix config_controller failure at step 6. + +The upstream fix is at below link +https://github.com/puppetlabs/puppetlabs-haproxy/commit/20db4474c5938c21ac441f0092254c78b5978cc4 + +Signed-off-by: zhipengl +--- + manifests/frontend.pp | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/manifests/frontend.pp b/manifests/frontend.pp +index 1623115..709a08c 100644 +--- a/manifests/frontend.pp ++++ b/manifests/frontend.pp +@@ -102,7 +102,7 @@ define haproxy::frontend ( + $defaults_use_backend = true, + $config_file = undef, + # Deprecated +- $bind_options = undef, ++ $bind_options = '', + ) { + if $ports and $bind { + fail('The use of $ports and $bind is mutually exclusive, please choose either one') +-- +2.7.4 + diff --git a/config/puppet-modules/puppet-haproxy-1.5.0/centos/srpm_path b/config/puppet-modules/puppet-haproxy-1.5.0/centos/srpm_path index c4e216add..d270e8e79 100644 --- a/config/puppet-modules/puppet-haproxy-1.5.0/centos/srpm_path +++ b/config/puppet-modules/puppet-haproxy-1.5.0/centos/srpm_path @@ -1 +1 @@ -mirror:Source/puppet-haproxy-1.5.0-2.6ee8180git.el7.src.rpm +mirror:Source/puppet-haproxy-1.5.0-4.6ffcb07git.el7.src.rpm diff --git a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 8d667c260..469513442 100644 --- a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,25 +1,25 @@ -From 3b29074ca269b8246a7f9bd5ad8468c1b7e54dc5 Mon Sep 17 00:00:00 2001 +From beb4d7f0c2a6d19e863194ea8ec999f815557035 Mon Sep 17 00:00:00 2001 From: Don Penney Date: Tue, 3 Jan 2017 13:45:43 -0500 -Subject: [PATCH] Update package versioning for TIS format +Subject: [PATCH 1/2] Update package versioning for TIS format --- SPECS/puppet-stdlib.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/puppet-stdlib.spec b/SPECS/puppet-stdlib.spec -index baab15b..0261e5d 100644 +index 77b06f9..4947330 100644 --- a/SPECS/puppet-stdlib.spec +++ b/SPECS/puppet-stdlib.spec -@@ -8,7 +8,7 @@ - +@@ -2,7 +2,7 @@ + %define upstream_name puppetlabs-stdlib Name: puppet-stdlib - Version: 4.13.1 --Release: 2%{?alphatag}%{?dist} -+Release: 2.dcef77agit.el7%{?_tis_dist}.%{tis_patch_ver} + Version: 4.18.0 +-Release: 2%{?dist} ++Release: 2.el7%{?_tis_dist}.%{tis_patch_ver} Summary: Standard library of resources for Puppet modules. - License: Apache-2.0 + License: ASL 2.0 -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0002-Add-TIS-Patches.patch b/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0002-Add-TIS-Patches.patch index 234cea67a..b9bf97411 100644 --- a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0002-Add-TIS-Patches.patch +++ b/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0002-Add-TIS-Patches.patch @@ -1,26 +1,26 @@ -From 36f161731c1041805d4d3de98a0f280917692757 Mon Sep 17 00:00:00 2001 +From c7d61832d0ab7eb0d8b7656d0c1bc0eda036331b Mon Sep 17 00:00:00 2001 From: Don Penney Date: Mon, 1 May 2017 14:39:38 -0400 -Subject: [PATCH] Add TIS Patches +Subject: [PATCH 2/2] Add TIS Patches --- SPECS/puppet-stdlib.spec | 3 +++ 1 file changed, 3 insertions(+) diff --git a/SPECS/puppet-stdlib.spec b/SPECS/puppet-stdlib.spec -index 769c0ef..7304088 100644 +index 4947330..19e9599 100644 --- a/SPECS/puppet-stdlib.spec +++ b/SPECS/puppet-stdlib.spec -@@ -15,6 +15,8 @@ URL: https://github.com/puppetlabs/puppetlabs-stdlib +@@ -10,6 +10,8 @@ URL: https://github.com/puppetlabs/puppetlabs-stdlib - Source0: https://github.com/puppetlabs/%{upstream_name}/archive/%{commit}.tar.gz#/%{upstream_name}-%{shortcommit}.tar.gz + Source0: https://github.com/puppetlabs/%{upstream_name}/archive/%{version}.tar.gz +Patch0001: 0001-Filter-password-in-logs.patch + BuildArch: noarch Requires: puppet >= 2.7.0 -@@ -24,6 +26,7 @@ Standard library of resources for Puppet modules. +@@ -19,6 +21,7 @@ Standard library of resources for Puppet modules. %prep %setup -q -n %{upstream_name}-%{upstream_version} @@ -29,5 +29,5 @@ index 769c0ef..7304088 100644 find . -type f -name ".*" -exec rm {} + find . -size 0 -exec rm {} + -- -1.8.3.1 +2.7.4 diff --git a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0003-Improve-ipv6-support-for-type.patch b/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0003-Improve-ipv6-support-for-type.patch deleted file mode 100644 index 57154e223..000000000 --- a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/0003-Improve-ipv6-support-for-type.patch +++ /dev/null @@ -1,32 +0,0 @@ -From 8e8ef8e37a71d79b413d07c135823786f402e89a Mon Sep 17 00:00:00 2001 -From: Jack Ding -Date: Tue, 15 May 2018 13:10:35 -0400 -Subject: [PATCH] Improve ipv6 support for type - ---- - SPECS/puppet-stdlib.spec | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/SPECS/puppet-stdlib.spec b/SPECS/puppet-stdlib.spec -index 7304088..d62745e 100644 ---- a/SPECS/puppet-stdlib.spec -+++ b/SPECS/puppet-stdlib.spec -@@ -16,6 +16,7 @@ URL: https://github.com/puppetlabs/puppetlabs-stdlib - Source0: https://github.com/puppetlabs/%{upstream_name}/archive/%{commit}.tar.gz#/%{upstream_name}-%{shortcommit}.tar.gz - - Patch0001: 0001-Filter-password-in-logs.patch -+Patch0002: 0002-Improve-ipv6-support-for-type.patch - - BuildArch: noarch - -@@ -27,6 +28,7 @@ Standard library of resources for Puppet modules. - %prep - %setup -q -n %{upstream_name}-%{upstream_version} - %patch0001 -p1 -+%patch0002 -p1 - - find . -type f -name ".*" -exec rm {} + - find . -size 0 -exec rm {} + --- -1.8.3.1 - diff --git a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/PATCH_ORDER b/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/PATCH_ORDER index 380023ac8..0403df317 100644 --- a/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/PATCH_ORDER +++ b/config/puppet-modules/puppet-stdlib-4.12.0/centos/meta_patches/PATCH_ORDER @@ -1,3 +1,2 @@ 0001-Update-package-versioning-for-TIS-format.patch 0002-Add-TIS-Patches.patch -0003-Improve-ipv6-support-for-type.patch diff --git a/config/puppet-modules/puppet-stdlib-4.12.0/centos/patches/0002-Improve-ipv6-support-for-type.patch b/config/puppet-modules/puppet-stdlib-4.12.0/centos/patches/0002-Improve-ipv6-support-for-type.patch deleted file mode 100644 index 26f09752d..000000000 --- a/config/puppet-modules/puppet-stdlib-4.12.0/centos/patches/0002-Improve-ipv6-support-for-type.patch +++ /dev/null @@ -1,20 +0,0 @@ -From 1385e617ddc9e82cc408c58bb1ae7cecbdf00465 Mon Sep 17 00:00:00 2001 -From: Jack Ding -Date: Tue, 15 May 2018 13:02:24 -0400 -Subject: [PATCH] Improve ipv6 support for type - -Fix from upstream 496d196 to add support for collapsed ipv6 address like 'abcd::3'. ---- - types/compat/ipv6.pp | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/types/compat/ipv6.pp b/types/compat/ipv6.pp -index 18b148d..8b82f1a 100644 ---- a/types/compat/ipv6.pp -+++ b/types/compat/ipv6.pp -@@ -1 +1 @@ --type Stdlib::Compat::Ipv6 = Pattern[/^(?:(?:[\da-f]{1,4}:){7}[\da-f]{1,4}|((?:[\da-f]{1,4}:){6})(\d+)\.(\d+)\.(\d+)\.(\d+))$/] -+type Stdlib::Compat::Ipv6 = Pattern[/\s*((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?\s*$/] --- -1.8.3.1 - diff --git a/config/puppet-modules/puppet-stdlib-4.12.0/centos/srpm_path b/config/puppet-modules/puppet-stdlib-4.12.0/centos/srpm_path index 993db8eb6..9f1b613fd 100644 --- a/config/puppet-modules/puppet-stdlib-4.12.0/centos/srpm_path +++ b/config/puppet-modules/puppet-stdlib-4.12.0/centos/srpm_path @@ -1 +1 @@ -mirror:Source/puppet-stdlib-4.13.1-2.dcef77agit.el7.src.rpm +mirror:Source/puppet-stdlib-4.18.0-2.el7.src.rpm diff --git a/filesystem/e2fsprogs/centos/build_srpm.data b/filesystem/e2fsprogs/centos/build_srpm.data deleted file mode 100644 index d3f64f336..000000000 --- a/filesystem/e2fsprogs/centos/build_srpm.data +++ /dev/null @@ -1 +0,0 @@ -TIS_PATCH_VER=3 diff --git a/filesystem/e2fsprogs/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/filesystem/e2fsprogs/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch deleted file mode 100644 index ec9f8b3f7..000000000 --- a/filesystem/e2fsprogs/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 1e7c28725307d612681f43002fe4a901e2fade8e Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Mon, 2 Oct 2017 16:09:29 -0400 -Subject: [PATCH 1/3] WRS: 0001-Update-package-versioning-for-TIS-format.patch - -Conflicts: - SPECS/e2fsprogs.spec ---- - SPECS/e2fsprogs.spec | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/SPECS/e2fsprogs.spec b/SPECS/e2fsprogs.spec -index 1b1d08c..b5babce 100644 ---- a/SPECS/e2fsprogs.spec -+++ b/SPECS/e2fsprogs.spec -@@ -1,7 +1,7 @@ - Summary: Utilities for managing ext2, ext3, and ext4 filesystems - Name: e2fsprogs - Version: 1.42.9 --Release: 10%{?dist} -+Release: 10.el7%{?_tis_dist}.%{tis_patch_ver} - - # License tags based on COPYING file distinctions for various components - License: GPLv2 --- -1.9.1 - diff --git a/filesystem/e2fsprogs/centos/meta_patches/0002-SPEC-tamper-proof-bash-log.patch b/filesystem/e2fsprogs/centos/meta_patches/0002-SPEC-tamper-proof-bash-log.patch deleted file mode 100644 index a9a2d8dd5..000000000 --- a/filesystem/e2fsprogs/centos/meta_patches/0002-SPEC-tamper-proof-bash-log.patch +++ /dev/null @@ -1,38 +0,0 @@ -From cf44fd061e7be981fbea0d5625ddf124d1991e4e Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Mon, 2 Oct 2017 16:09:29 -0400 -Subject: [PATCH 2/3] WRS: 0002-SPEC-tamper-proof-bash-log.patch - -Conflicts: - SPECS/e2fsprogs.spec ---- - SPECS/e2fsprogs.spec | 6 ++++++ - 1 file changed, 6 insertions(+) - -diff --git a/SPECS/e2fsprogs.spec b/SPECS/e2fsprogs.spec -index b5babce..38ff00b 100644 ---- a/SPECS/e2fsprogs.spec -+++ b/SPECS/e2fsprogs.spec -@@ -35,6 +35,9 @@ Patch22: e2fsprogs-1.42.9-resize2fs-clear-uninit-BG.patch - Patch23: e2fsprogs-1.43.3-libext2fs-don-t-ignore-fsync-errors.patch - Patch24: e2fsprogs-1.42.10-Fix-nroff-macro-issue-in-chattr-man-page.patch - -+# WRS patches -+Patch100: 0100-tamper-proof-bash-log.patch -+ - Url: http://e2fsprogs.sourceforge.net/ - BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) - Requires: e2fsprogs-libs%{?_isa} = %{version}-%{release} -@@ -208,6 +211,9 @@ It was originally inspired by the Multics SubSystem library. - %patch23 -p1 - %patch24 -p1 - -+# WRS patches -+%patch100 -p1 -+ - %build - %configure --enable-elf-shlibs --enable-nls --disable-uuidd --disable-fsck \ - --disable-e2initrd-helper --disable-libblkid --disable-libuuid \ --- -1.9.1 - diff --git a/filesystem/e2fsprogs/centos/meta_patches/PATCH_ORDER b/filesystem/e2fsprogs/centos/meta_patches/PATCH_ORDER deleted file mode 100644 index 6fb5c9a5c..000000000 --- a/filesystem/e2fsprogs/centos/meta_patches/PATCH_ORDER +++ /dev/null @@ -1,3 +0,0 @@ -0001-Update-package-versioning-for-TIS-format.patch -0002-SPEC-tamper-proof-bash-log.patch -meta-e2fsprogs-disable-tests.patch diff --git a/filesystem/e2fsprogs/centos/meta_patches/meta-e2fsprogs-disable-tests.patch b/filesystem/e2fsprogs/centos/meta_patches/meta-e2fsprogs-disable-tests.patch deleted file mode 100644 index 6fcf832f6..000000000 --- a/filesystem/e2fsprogs/centos/meta_patches/meta-e2fsprogs-disable-tests.patch +++ /dev/null @@ -1,32 +0,0 @@ -From f57e1196deb8890c143ebd978f0b83e4c0e749f8 Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Mon, 2 Oct 2017 16:09:29 -0400 -Subject: [PATCH 3/3] WRS: meta-e2fsprogs-disable-tests.patch - ---- - SPECS/e2fsprogs.spec | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/SPECS/e2fsprogs.spec b/SPECS/e2fsprogs.spec -index 38ff00b..0eb885a 100644 ---- a/SPECS/e2fsprogs.spec -+++ b/SPECS/e2fsprogs.spec -@@ -37,6 +37,7 @@ Patch24: e2fsprogs-1.42.10-Fix-nroff-macro-issue-in-chattr-man-page.patch - - # WRS patches - Patch100: 0100-tamper-proof-bash-log.patch -+Patch101: 0101-e2fsprogs-disable-tests.patch - - Url: http://e2fsprogs.sourceforge.net/ - BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) -@@ -213,6 +214,7 @@ It was originally inspired by the Multics SubSystem library. - - # WRS patches - %patch100 -p1 -+%patch101 -p1 - - %build - %configure --enable-elf-shlibs --enable-nls --disable-uuidd --disable-fsck \ --- -1.9.1 - diff --git a/filesystem/e2fsprogs/centos/patches/0100-tamper-proof-bash-log.patch b/filesystem/e2fsprogs/centos/patches/0100-tamper-proof-bash-log.patch deleted file mode 100644 index 1722eb6f3..000000000 --- a/filesystem/e2fsprogs/centos/patches/0100-tamper-proof-bash-log.patch +++ /dev/null @@ -1,78 +0,0 @@ -From 21f104089cf3a8ee8eb295bafa47dff6ab1000ac Mon Sep 17 00:00:00 2001 -From: David Balme -Date: Sun, 29 Jan 2017 18:14:25 -0500 -Subject: [PATCH 1/1] tamper proof bash log - ---- - misc/chattr.c | 48 ++++++++++++++++++++++++++++++++++++++++++++++++ - 1 file changed, 48 insertions(+) - -diff --git a/misc/chattr.c b/misc/chattr.c -index f130108..44db04b 100644 ---- a/misc/chattr.c -+++ b/misc/chattr.c -@@ -188,6 +188,49 @@ static int decode_arg (int * i, int argc, char ** argv) - return 1; - } - -+// -+// returns true (1) if name looks like -+// bash.log -+// bash.log* -+// */bash.log -+// */bash.log* -+// -+static int is_bash_log_file(const char * name) { -+ if (name == NULL) { -+ return 0; -+ } -+ char * srchresult = strstr(name, "bash.log"); -+ if (srchresult != NULL) { -+ if (srchresult == name) { -+ // starts with scenario -+ return 1; -+ } -+ // contained scenario -+ // let's ensure preceding char is a / -+ srchresult --; -+ if (*srchresult == '/') { -+ return 1; -+ } -+ return 0; -+ } -+ return 0; -+} -+ -+// returns true (1) if user is trying to remove append-only flag -+// from bash.log file. -+static int is_remove_append_only_on_bash_log(const char * name, unsigned long flags, int rem) { -+ if (!rem) { -+ return 0; // no attribute remove operation specified -+ } -+ if (!(flags & EXT2_APPEND_FL)) { // -+ return 0; -+ } -+ // at this point we are trying to remove append only attribute! -+ // now check if its a bash.log file -+ return is_bash_log_file(name); -+} -+ -+ - static int chattr_dir_proc(const char *, struct dirent *, void *); - - static int change_attributes(const char * name) -@@ -208,6 +251,11 @@ static int change_attributes(const char * name) - _("while reading flags on %s"), name); - return -1; - } -+ -+ if (is_remove_append_only_on_bash_log(name, flags, rem)) { -+ return 0; -+ } -+ - if (set) { - if (verbose) { - printf (_("Flags of %s set as "), name); --- -1.9.1 - diff --git a/filesystem/e2fsprogs/centos/patches/0101-e2fsprogs-disable-tests.patch b/filesystem/e2fsprogs/centos/patches/0101-e2fsprogs-disable-tests.patch deleted file mode 100644 index e69873006..000000000 --- a/filesystem/e2fsprogs/centos/patches/0101-e2fsprogs-disable-tests.patch +++ /dev/null @@ -1,27 +0,0 @@ -From a6c86c1badb9cebb44ffbb53a8ff5d5529b12fd5 Mon Sep 17 00:00:00 2001 -From: Matt Peters -Date: Fri, 3 Feb 2017 16:06:51 -0500 -Subject: [PATCH 1/1] e2fsprogs disable tests - ---- - Makefile.in | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -diff --git a/Makefile.in b/Makefile.in -index f327d19..7faca16 100644 ---- a/Makefile.in -+++ b/Makefile.in -@@ -16,8 +16,8 @@ INSTALL = @INSTALL@ - QUOTA_LIB_SUBDIR= lib/quota - - LIB_SUBDIRS=lib/et lib/ss lib/e2p $(UUID_LIB_SUBDIR) lib/ext2fs $(BLKID_LIB_SUBDIR) $(QUOTA_LIB_SUBDIR) intl --PROG_SUBDIRS=e2fsck $(DEBUGFS_DIR) misc $(RESIZE_DIR) tests/progs po --SUBDIRS=util $(LIB_SUBDIRS) $(PROG_SUBDIRS) tests -+PROG_SUBDIRS=e2fsck $(DEBUGFS_DIR) misc $(RESIZE_DIR) po -+SUBDIRS=util $(LIB_SUBDIRS) $(PROG_SUBDIRS) - - SUBS= util/subst.conf lib/config.h lib/dirpaths.h \ - lib/ext2fs/ext2_types.h lib/blkid/blkid_types.h lib/uuid/uuid_types.h --- -1.8.3.1 - diff --git a/filesystem/e2fsprogs/centos/srpm_path b/filesystem/e2fsprogs/centos/srpm_path deleted file mode 100644 index d4553d5e2..000000000 --- a/filesystem/e2fsprogs/centos/srpm_path +++ /dev/null @@ -1 +0,0 @@ -mirror:Source/e2fsprogs-1.42.9-10.el7.src.rpm diff --git a/filesystem/iscsi-initiator-utils/centos/meta_patches/0002-Update-package-versioning-for-TIS-format.patch b/filesystem/iscsi-initiator-utils/centos/meta_patches/0002-Update-package-versioning-for-TIS-format.patch index 28bdf0b15..779672d13 100644 --- a/filesystem/iscsi-initiator-utils/centos/meta_patches/0002-Update-package-versioning-for-TIS-format.patch +++ b/filesystem/iscsi-initiator-utils/centos/meta_patches/0002-Update-package-versioning-for-TIS-format.patch @@ -1,4 +1,4 @@ -From 85c339bab120a0ca76e97af0ec3c48ad0448b066 Mon Sep 17 00:00:00 2001 +From d30974d064455030457b4b37de3b3ea72a9feba0 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:19:19 -0400 Subject: [PATCH 2/2] WRS: 0001-Update-package-versioning-for-TIS-format.patch @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/iscsi-initiator-utils.spec b/SPECS/iscsi-initiator-utils.spec -index ce2198d..e9402cb 100644 +index 847f95c..8865737 100644 --- a/SPECS/iscsi-initiator-utils.spec +++ b/SPECS/iscsi-initiator-utils.spec @@ -4,7 +4,7 @@ Summary: iSCSI daemon and utility programs Name: iscsi-initiator-utils Version: 6.%{open_iscsi_version}.%{open_iscsi_build} --Release: 4%{?dist} -+Release: 4.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 7%{?dist} ++Release: 7.el7%{?_tis_dist}.%{tis_patch_ver} Group: System Environment/Daemons License: GPLv2+ URL: http://www.open-iscsi.org -- -1.9.1 +2.7.4 diff --git a/filesystem/iscsi-initiator-utils/centos/srpm_path b/filesystem/iscsi-initiator-utils/centos/srpm_path index ab53ea10e..35e4df0ed 100644 --- a/filesystem/iscsi-initiator-utils/centos/srpm_path +++ b/filesystem/iscsi-initiator-utils/centos/srpm_path @@ -1 +1,2 @@ -mirror:Source/iscsi-initiator-utils-6.2.0.874-4.el7.src.rpm +mirror:Source/iscsi-initiator-utils-6.2.0.874-7.el7.src.rpm + diff --git a/filesystem/nfs-utils/centos/meta_patches/0001-TiS-nfs-utils-spec-add-scripts.patch b/filesystem/nfs-utils/centos/meta_patches/0001-TiS-nfs-utils-spec-add-scripts.patch index 87205059f..954bd816c 100644 --- a/filesystem/nfs-utils/centos/meta_patches/0001-TiS-nfs-utils-spec-add-scripts.patch +++ b/filesystem/nfs-utils/centos/meta_patches/0001-TiS-nfs-utils-spec-add-scripts.patch @@ -1,7 +1,7 @@ -From b7c902072f15c14507ab837f769b6adcf299f2ed Mon Sep 17 00:00:00 2001 +From 535d4790b40ae2eaf9435ece40cf420165874877 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 15:19:43 -0400 -Subject: [PATCH 1/4] WRS: 0001-TiS-nfs-utils-spec-add-scripts.patch +Subject: [PATCH] WRS: 0001-TiS-nfs-utils-spec-add-scripts.patch Conflicts: SPECS/nfs-utils.spec @@ -10,7 +10,7 @@ Conflicts: 1 file changed, 29 insertions(+) diff --git a/SPECS/nfs-utils.spec b/SPECS/nfs-utils.spec -index a8d651a..583990d 100644 +index 6dfddc0..282511e 100644 --- a/SPECS/nfs-utils.spec +++ b/SPECS/nfs-utils.spec @@ -15,6 +15,10 @@ Source2: nfs.sysconfig @@ -24,30 +24,30 @@ index a8d651a..583990d 100644 # # RHEL7.1 -@@ -131,6 +135,10 @@ Patch101: nfs-utils-1.2.1-exp-subtree-warn-off.patch - Patch102: nfs-utils-1.2.3-sm-notify-res_init.patch - Patch103: nfs-utils-1.2.5-idmap-errmsg.patch +@@ -145,6 +149,10 @@ Patch1001: nfs-utils-1.2.1-exp-subtree-warn-off.patch + Patch1002: nfs-utils-1.2.3-sm-notify-res_init.patch + Patch1003: nfs-utils-1.2.5-idmap-errmsg.patch +# Titanium Cloud Patches -+Patch200: nfs-utils-support-mountprog-and-nfsprog-options.patch -+Patch201: nfs-utils-do-not-pass-CFLAGS-to-native.patch ++Patch2000: nfs-utils-support-mountprog-and-nfsprog-options.patch ++Patch2001: nfs-utils-do-not-pass-CFLAGS-to-native.patch + Group: System Environment/Daemons Provides: exportfs = %{epoch}:%{version}-%{release} Provides: nfsstat = %{epoch}:%{version}-%{release} -@@ -382,6 +390,11 @@ This package also contains the mount.nfs and umount.nfs program. - %patch102 -p1 - %patch103 -p1 +@@ -418,6 +426,11 @@ This package also contains the mount.nfs and umount.nfs program. + %patch1002 -p1 + %patch1003 -p1 -+%patch200 -p1 ++%patch2000 -p1 +# Titanium Cloud support mountprog and nfsprog options -+%patch201 -p1 ++%patch2001 -p1 +# Titanium Cloud do not pass CFLAGS to native + # Remove .orig files find . -name "*.orig" | xargs rm -f -@@ -443,6 +456,13 @@ install -m 755 %{SOURCE3} $RPM_BUILD_ROOT/usr/lib/systemd/scripts/nfs-utils_env. +@@ -479,6 +492,13 @@ install -m 755 %{SOURCE3} $RPM_BUILD_ROOT/usr/lib/systemd/scripts/nfs-utils_env. install -m 644 %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/modprobe.d/lockd.conf install -m 644 %{SOURCE5} $RPM_BUILD_ROOT%{_sysconfdir}/gssproxy @@ -61,7 +61,7 @@ index a8d651a..583990d 100644 # # For backwards compatablity # -@@ -521,6 +541,9 @@ if [ $1 -eq 1 ] ; then +@@ -557,6 +577,9 @@ if [ $1 -eq 1 ] ; then # Initial installation /bin/systemctl enable nfs-client.target >/dev/null 2>&1 || : /bin/systemctl restart nfs-config >/dev/null 2>&1 || : @@ -71,7 +71,7 @@ index a8d651a..583990d 100644 fi %systemd_post nfs-config %systemd_post nfs-server -@@ -532,6 +555,9 @@ chown -R rpcuser:rpcuser /var/lib/nfs/statd +@@ -568,6 +591,9 @@ chown -R rpcuser:rpcuser /var/lib/nfs/statd if [ $1 -eq 0 ]; then %systemd_preun nfs-client.target %systemd_preun nfs-server.server @@ -81,7 +81,7 @@ index a8d651a..583990d 100644 /usr/sbin/userdel rpcuser 2>/dev/null || : /usr/sbin/groupdel rpcuser 2>/dev/null || : -@@ -618,6 +644,9 @@ fi +@@ -654,6 +680,9 @@ fi %{_sbindir}/nfsdcltrack %{_mandir}/*/* %{_unitdir}/* @@ -90,7 +90,7 @@ index a8d651a..583990d 100644 + %attr(755,root,root) /usr/lib/systemd/scripts/nfs-utils_env.sh %{_prefix}/lib/systemd/system-generators/nfs-server-generator - + %{_prefix}/lib/systemd/system-generators/rpc-pipefs-generator -- -1.9.1 +2.7.4 diff --git a/filesystem/nfs-utils/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/filesystem/nfs-utils/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index ca2174bb6..69f42f4c2 100644 --- a/filesystem/nfs-utils/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/filesystem/nfs-utils/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From c579b798af2fa3b5596bae14d506d1308e8766c6 Mon Sep 17 00:00:00 2001 +From c6c1fee74830348a437cf0b467d299e1f4c42391 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 15:19:43 -0400 -Subject: [PATCH 4/4] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/nfs-utils.spec @@ -10,19 +10,19 @@ Conflicts: 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/SPECS/nfs-utils.spec b/SPECS/nfs-utils.spec -index 8585c5d..029e2e3 100644 +index a947119..2602031 100644 --- a/SPECS/nfs-utils.spec +++ b/SPECS/nfs-utils.spec @@ -2,7 +2,7 @@ Summary: NFS utilities and supporting clients and daemons for the kernel NFS ser Name: nfs-utils URL: http://sourceforge.net/projects/nfs Version: 1.3.0 --Release: 0.48%{?dist} -+Release: 0.48.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 0.54%{?dist} ++Release: 0.54.el7%{?_tis_dist}.%{tis_patch_ver} Epoch: 1 # group all 32bit related archs -@@ -150,6 +150,7 @@ Provides: rpc.mountd = %{epoch}:%{version}-%{release} +@@ -164,6 +164,7 @@ Provides: rpc.mountd = %{epoch}:%{version}-%{release} Provides: rpc.nfsd = %{epoch}:%{version}-%{release} Provides: rpc.statd = %{epoch}:%{version}-%{release} Provides: rpc.gssd = %{epoch}:%{version}-%{release} @@ -31,5 +31,5 @@ index 8585c5d..029e2e3 100644 Provides: mount.nfs4 = %{epoch}:%{version}-%{release} Provides: umount.nfs = %{epoch}:%{version}-%{release} -- -1.9.1 +2.7.4 diff --git a/filesystem/nfs-utils/centos/meta_patches/0001-add-rpm-4.14-compatibility.patch b/filesystem/nfs-utils/centos/meta_patches/0001-add-rpm-4.14-compatibility.patch index b5bf8a0a2..27de49ea1 100644 --- a/filesystem/nfs-utils/centos/meta_patches/0001-add-rpm-4.14-compatibility.patch +++ b/filesystem/nfs-utils/centos/meta_patches/0001-add-rpm-4.14-compatibility.patch @@ -1,8 +1,18 @@ +From bbd7bc3626b3af6543b66d23a965276bd29038b5 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Thu, 16 Aug 2018 21:07:20 +0800 +Subject: [PATCH] add-rpm-4.14-compatibility + +Signed-off-by: slin14 +--- + SPECS/nfs-utils.spec | 9 +-------- + 1 file changed, 1 insertion(+), 8 deletions(-) + diff --git a/SPECS/nfs-utils.spec b/SPECS/nfs-utils.spec -index d43ae40..e7011a2 100644 +index 2602031..75212eb 100644 --- a/SPECS/nfs-utils.spec +++ b/SPECS/nfs-utils.spec -@@ -601,14 +601,7 @@ if [ -h /etc/systemd/system/multi-user.target.wants/nfs.target ]; then +@@ -635,14 +635,7 @@ if [ -h /etc/systemd/system/multi-user.target.wants/nfs.target ]; then fi fi @@ -18,3 +28,6 @@ index d43ae40..e7011a2 100644 # reset configuration files and running daemons if [ $1 -eq 2 ] ; then /bin/systemctl enable nfs-client.target >/dev/null 2>&1 || : +-- +2.7.4 + diff --git a/filesystem/nfs-utils/centos/meta_patches/0002-Add-nfs-utils-update-nfsmount.conf-with-required-con.patch b/filesystem/nfs-utils/centos/meta_patches/0002-Add-nfs-utils-update-nfsmount.conf-with-required-con.patch index 6792c3a1c..fb45afdb7 100644 --- a/filesystem/nfs-utils/centos/meta_patches/0002-Add-nfs-utils-update-nfsmount.conf-with-required-con.patch +++ b/filesystem/nfs-utils/centos/meta_patches/0002-Add-nfs-utils-update-nfsmount.conf-with-required-con.patch @@ -1,7 +1,7 @@ -From 5a65c9efbbfed7914e3cabc4c68fac87f2a16a1f Mon Sep 17 00:00:00 2001 +From 545e646a80fed3dd353ac31d83b2c04f202f1bf5 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 15:19:43 -0400 -Subject: [PATCH 2/4] WRS: +Subject: [PATCH] WRS: 0002-Add-nfs-utils-update-nfsmount.conf-with-required-con.patch --- @@ -9,25 +9,25 @@ Subject: [PATCH 2/4] WRS: 1 file changed, 2 insertions(+) diff --git a/SPECS/nfs-utils.spec b/SPECS/nfs-utils.spec -index 583990d..1fecdba 100644 +index 282511e..7793ee1 100644 --- a/SPECS/nfs-utils.spec +++ b/SPECS/nfs-utils.spec -@@ -138,6 +138,7 @@ Patch103: nfs-utils-1.2.5-idmap-errmsg.patch +@@ -152,6 +152,7 @@ Patch1003: nfs-utils-1.2.5-idmap-errmsg.patch # Titanium Cloud Patches - Patch200: nfs-utils-support-mountprog-and-nfsprog-options.patch - Patch201: nfs-utils-do-not-pass-CFLAGS-to-native.patch -+Patch202: nfs-utils-update-nfsmount.conf-with-required-config.patch + Patch2000: nfs-utils-support-mountprog-and-nfsprog-options.patch + Patch2001: nfs-utils-do-not-pass-CFLAGS-to-native.patch ++Patch2002: nfs-utils-update-nfsmount.conf-with-required-config.patch Group: System Environment/Daemons Provides: exportfs = %{epoch}:%{version}-%{release} -@@ -394,6 +395,7 @@ This package also contains the mount.nfs and umount.nfs program. +@@ -430,6 +431,7 @@ This package also contains the mount.nfs and umount.nfs program. # Titanium Cloud support mountprog and nfsprog options - %patch201 -p1 + %patch2001 -p1 # Titanium Cloud do not pass CFLAGS to native -+%patch202 -p1 ++%patch2002 -p1 # Remove .orig files find . -name "*.orig" | xargs rm -f -- -1.9.1 +2.7.4 diff --git a/filesystem/nfs-utils/centos/srpm_path b/filesystem/nfs-utils/centos/srpm_path index 257b34aff..9e8d67122 100644 --- a/filesystem/nfs-utils/centos/srpm_path +++ b/filesystem/nfs-utils/centos/srpm_path @@ -1 +1 @@ -mirror:Source/nfs-utils-1.3.0-0.48.el7.src.rpm +mirror:Source/nfs-utils-1.3.0-0.54.el7.src.rpm diff --git a/filesystem/parted/PKG-INFO b/filesystem/parted/PKG-INFO index c886bc56b..6bb4906f6 100644 --- a/filesystem/parted/PKG-INFO +++ b/filesystem/parted/PKG-INFO @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: parted -Version: 2.0.21 +Version: 3.1.29 Summary: Disk partition editing/resizing utility Home-page: Author: diff --git a/filesystem/parted/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/filesystem/parted/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 0c371843d..1694ab475 100644 --- a/filesystem/parted/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/filesystem/parted/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,25 +1,26 @@ -From 74ab16d7e0c23b933b3d6f42eac63d70d07ab62d Mon Sep 17 00:00:00 2001 +From 296b76674e19cfed71b77735f38c158b41a991b1 Mon Sep 17 00:00:00 2001 From: Don Penney -Date: Tue, 27 Sep 2016 10:50:03 -0400 +Date: Tue, 14 Aug 2018 02:57:08 +0800 Subject: [PATCH] Update package versioning for TIS format +Signed-off-by: zhipengl --- SPECS/parted.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/parted.spec b/SPECS/parted.spec -index 644c2df..b79ca4a 100644 +index 9316ebe..a79b888 100644 --- a/SPECS/parted.spec +++ b/SPECS/parted.spec @@ -4,7 +4,7 @@ Summary: The GNU disk partition manipulation program Name: parted Version: 3.1 --Release: 28%{?dist} -+Release: 28.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 29%{?dist} ++Release: 29.el7%{?_tis_dist}.%{tis_patch_ver} License: GPLv3+ Group: Applications/System URL: http://www.gnu.org/software/parted -- -1.8.3.1 +2.7.4 diff --git a/filesystem/parted/centos/meta_patches/0003-fix-dev-nodes-getting-removed-for-100-to-300-ms-on-p.patch b/filesystem/parted/centos/meta_patches/0003-fix-dev-nodes-getting-removed-for-100-to-300-ms-on-p.patch index de2d8b838..6632b8d7f 100644 --- a/filesystem/parted/centos/meta_patches/0003-fix-dev-nodes-getting-removed-for-100-to-300-ms-on-p.patch +++ b/filesystem/parted/centos/meta_patches/0003-fix-dev-nodes-getting-removed-for-100-to-300-ms-on-p.patch @@ -1,7 +1,7 @@ -From cfa8f478bd19cf706f87c3c5a8baf54df7f2ea16 Mon Sep 17 00:00:00 2001 +From 46b23c8cc8fffa24557cddf8507b8717c43b9171 Mon Sep 17 00:00:00 2001 From: Ovidiu Poncea Date: Fri, 2 Mar 2018 17:22:52 +0200 -Subject: [PATCH] +Subject: [PATCH 3/3] fix-dev-nodes-getting-removed-for-100-to-300-ms-on-parted-print.patch --- @@ -9,10 +9,10 @@ Subject: [PATCH] 1 file changed, 2 insertions(+) diff --git a/SPECS/parted.spec b/SPECS/parted.spec -index 6979b14..06a09f8 100644 +index a79b888..f8c2969 100644 --- a/SPECS/parted.spec +++ b/SPECS/parted.spec -@@ -15,6 +15,7 @@ Source0: ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.xz +@@ -13,6 +13,7 @@ Source0: ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.xz Source1: ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.xz.sig Source2: pubkey.jim.meyering Source3: resizepart.sh @@ -20,14 +20,14 @@ index 6979b14..06a09f8 100644 Patch0: parted-3.0-libparted-copy-pmbr_boot-when-duplicating-GPT-disk.patch Patch1: parted-3.1-libparted-check-PMBR-before-GPT-partition-table-8052.patch -@@ -64,6 +65,7 @@ Patch42: 0042-tests-Set-optimal-blocks-to-64-for-scsi_debug-device.patch - +@@ -67,6 +68,7 @@ Patch47: 0047-tests-excersise-resize-command.patch + Patch48: 0048-parted-add-resizepart-command.patch # WRS - Patch43: syscalls.patch -+Patch44: fix-dev-nodes-getting-removed-for-100-to-300-ms-on-parted-print.patch + Patch49: syscalls.patch ++Patch50: fix-dev-nodes-getting-removed-for-100-to-300-ms-on-parted-print.patch Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: e2fsprogs-devel -- -1.9.1 +2.7.4 diff --git a/filesystem/parted/centos/meta_patches/syscalls.patch b/filesystem/parted/centos/meta_patches/syscalls.patch index 1dd07c4dd..f5f93f8e3 100644 --- a/filesystem/parted/centos/meta_patches/syscalls.patch +++ b/filesystem/parted/centos/meta_patches/syscalls.patch @@ -1,14 +1,14 @@ -From 4859fab94b298a4ca449216c3035b8b024c661a3 Mon Sep 17 00:00:00 2001 +From 58d86a82323f838bb6169423fb3dd958bb92c147 Mon Sep 17 00:00:00 2001 From: Kristine Bujold Date: Wed, 21 Dec 2016 15:28:53 -0500 -Subject: [PATCH 1/2] WRS: syscalls.patch +Subject: [PATCH 1/3] WRS: syscalls.patch --- - SPECS/parted.spec | 12 +++++++++++- - 1 file changed, 11 insertions(+), 1 deletion(-) + SPECS/parted.spec | 11 ++++++++++- + 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/SPECS/parted.spec b/SPECS/parted.spec -index 749687f..644c2df 100644 +index 1f453cb..9316ebe 100644 --- a/SPECS/parted.spec +++ b/SPECS/parted.spec @@ -12,6 +12,7 @@ URL: http://www.gnu.org/software/parted @@ -19,17 +19,16 @@ index 749687f..644c2df 100644 Patch0: parted-3.0-libparted-copy-pmbr_boot-when-duplicating-GPT-disk.patch Patch1: parted-3.1-libparted-check-PMBR-before-GPT-partition-table-8052.patch -@@ -59,6 +60,9 @@ Patch40: 0040-partprobe-Open-the-device-once-for-probing-1339705.patch - Patch41: 0041-tests-Stop-timing-t9040-1172675.patch - Patch42: 0042-tests-Set-optimal-blocks-to-64-for-scsi_debug-device.patch - +@@ -64,6 +65,8 @@ Patch45: 0045-parted-Add-stub-resize-command-for-backward-compatib.patch + Patch46: 0046-libparted-Backport-partition-resize-code.patch + Patch47: 0047-tests-excersise-resize-command.patch + Patch48: 0048-parted-add-resizepart-command.patch +# WRS -+Patch43: syscalls.patch -+ ++Patch49: syscalls.patch + Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: e2fsprogs-devel - BuildRequires: readline-devel -@@ -121,7 +125,7 @@ git commit -a -m "run iconv" +@@ -128,7 +131,7 @@ git commit -a -m "run iconv" autoreconf autoconf CFLAGS="$RPM_OPT_FLAGS -Wno-unused-but-set-variable"; export CFLAGS @@ -38,7 +37,7 @@ index 749687f..644c2df 100644 # Don't use rpath! %{__sed} -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool %{__sed} -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool -@@ -150,6 +154,9 @@ popd +@@ -157,6 +160,9 @@ popd %find_lang %{name} @@ -48,7 +47,7 @@ index 749687f..644c2df 100644 %check export LD_LIBRARY_PATH=$(pwd)/libparted/.libs -@@ -185,6 +192,9 @@ fi +@@ -192,6 +198,9 @@ fi %{_libdir}/libparted-fs-resize.so* %{_infodir}/parted.info.gz @@ -59,5 +58,5 @@ index 749687f..644c2df 100644 %defattr(-,root,root,-) %{_includedir}/parted -- -1.8.3.1 +2.7.4 diff --git a/filesystem/parted/centos/patches/fix-dev-nodes-getting-removed-for-100-to-300-ms-on-parted-print.patch b/filesystem/parted/centos/patches/fix-dev-nodes-getting-removed-for-100-to-300-ms-on-parted-print.patch index 74cc157a3..dafaa85b5 100644 --- a/filesystem/parted/centos/patches/fix-dev-nodes-getting-removed-for-100-to-300-ms-on-parted-print.patch +++ b/filesystem/parted/centos/patches/fix-dev-nodes-getting-removed-for-100-to-300-ms-on-parted-print.patch @@ -1,4 +1,4 @@ -From 9e7ad12a13665d975ddb9ee4669f781a1a695f8a Mon Sep 17 00:00:00 2001 +From 2fc5cefc48c294b25dbd5dc1e533c7d12508289a Mon Sep 17 00:00:00 2001 From: Phillip Susi Date: Sun, 14 Oct 2012 23:59:58 -0400 Subject: [PATCH] 'parted -s print' causes device nodes to be @@ -102,20 +102,20 @@ a device node that did not actually exist. Conflicts: NEWS --- - NEWS | 94 +++++- - libparted/arch/linux.c | 565 +++++++++++++++----------------- - tests/Makefile.am | 2 + - tests/t1104-remove-and-add-partition.sh | 50 +++ - tests/t6010-dm-busy.sh | 92 ++++++ - 5 files changed, 499 insertions(+), 304 deletions(-) + NEWS | 94 +++++++++++++++++++++++++++++++-- + libparted/arch/linux.c | 24 +++++---- + tests/Makefile.am | 2 + + tests/t1104-remove-and-add-partition.sh | 50 ++++++++++++++++++ + tests/t6010-dm-busy.sh | 92 ++++++++++++++++++++++++++++++++ + 5 files changed, 249 insertions(+), 13 deletions(-) create mode 100644 tests/t1104-remove-and-add-partition.sh create mode 100644 tests/t6010-dm-busy.sh diff --git a/NEWS b/NEWS -index d1ab2a6..42ee12c 100644 +index 62d6381..c78ee9e 100644 --- a/NEWS +++ b/NEWS -@@ -2,10 +2,98 @@ GNU parted NEWS -*- outline -*- +@@ -7,10 +7,98 @@ GNU parted NEWS -*- outline -*- * Noteworthy changes in release 3.1-18 (2014-08-12) [RHEL7.1] @@ -218,7 +218,7 @@ index d1ab2a6..42ee12c 100644 * Noteworthy changes in release 3.1-16 (2014-01-22) [RHEL7] diff --git a/libparted/arch/linux.c b/libparted/arch/linux.c -index 67a5c2e..adb82f2 100644 +index 27f706b..de63118 100644 --- a/libparted/arch/linux.c +++ b/libparted/arch/linux.c @@ -48,6 +48,7 @@ @@ -229,21 +229,16 @@ index 67a5c2e..adb82f2 100644 #if ENABLE_NLS # include -@@ -285,11 +286,12 @@ struct blkdev_ioctl_param { +@@ -286,7 +287,7 @@ struct blkdev_ioctl_param { /* Maximum number of partitions supported by linux. */ #define MAX_NUM_PARTS 64 -static char* _device_get_part_path (PedDevice* dev, int num); +static char* _device_get_part_path (PedDevice const *dev, int num); static int _partition_is_mounted_by_path (const char* path); + static unsigned int _device_get_partition_range(PedDevice const* dev); static int _device_open (PedDevice* dev, int flags); - static int _device_open_ro (PedDevice* dev); - static int _device_close (PedDevice* dev); -+static unsigned int _device_get_partition_range(PedDevice const* dev); - - static int - _read_fd (int fd, char **buf) -@@ -1495,8 +1497,8 @@ linux_is_busy (PedDevice* dev) +@@ -1521,8 +1522,8 @@ linux_is_busy (PedDevice* dev) return 0; } @@ -254,109 +249,46 @@ index 67a5c2e..adb82f2 100644 * We should only flush unmounted partition devices, because: * - there is never a need to flush them (we're not doing IO there) * - flushing a device that is mounted causes unnecessary IO, and can -@@ -1507,6 +1509,7 @@ _flush_cache (PedDevice* dev) - { - LinuxSpecific* arch_specific = LINUX_SPECIFIC (dev); - int i; -+ int lpn = _device_get_partition_range(dev); - - if (dev->read_only) - return; -@@ -1514,11 +1517,7 @@ _flush_cache (PedDevice* dev) - +@@ -1542,9 +1543,6 @@ _flush_cache (PedDevice* dev) ioctl (arch_specific->fd, BLKFLSBUF); -- /* With linux-2.6.0 and newer, we're done. */ + /* With linux-2.6.0 and newer, we're done. */ - if (_have_kern26()) - return; - -- for (i = 1; i < 16; i++) { -+ for (i = 1; i < lpn; i++) { + for (i = 1; i < lpn; i++) { char* name; int fd; +@@ -2318,7 +2316,7 @@ err: + #endif -@@ -2265,34 +2264,72 @@ zasprintf (const char *format, ...) - return r < 0 ? NULL : resultp; - } - --static char* + static char* -_device_get_part_path (PedDevice *dev, int num) -+#ifdef ENABLE_DEVICE_MAPPER -+static char * -+dm_canonical_path (PedDevice const *dev) - { -- size_t path_len = strlen (dev->path); -+ LinuxSpecific const *arch_specific = LINUX_SPECIFIC (dev); - -+ /* Get map name from devicemapper */ -+ struct dm_task *task = dm_task_create (DM_DEVICE_INFO); -+ if (!task) -+ goto err; -+ if (!dm_task_set_major_minor (task, arch_specific->major, -+ arch_specific->minor, 0)) -+ goto err; -+ if (!dm_task_run(task)) -+ goto err; -+ char *dev_name = zasprintf ("/dev/mapper/%s", dm_task_get_name (task)); -+ if (dev_name == NULL) -+ goto err; -+ dm_task_destroy (task); -+ return dev_name; -+err: -+ return NULL; -+} -+#endif -+ -+static char* +_device_get_part_path (PedDevice const *dev, int num) -+{ -+ char *devpath; -+ size_t path_len; - char *result; -+#ifdef ENABLE_DEVICE_MAPPER -+ devpath = (dev->type == PED_DEVICE_DM -+ ? dm_canonical_path (dev) : dev->path); -+#else -+ devpath = dev->path; -+#endif -+ path_len = strlen (devpath); - /* Check for devfs-style /disc => /partN transformation - unconditionally; the system might be using udev with devfs rules, - and if not the test is harmless. */ -- if (5 < path_len && !strcmp (dev->path + path_len - 5, "/disc")) { -+ if (5 < path_len && !strcmp (devpath + path_len - 5, "/disc")) { - /* replace /disc with /part%d */ - result = zasprintf ("%.*s/part%d", -- (int) (path_len - 5), dev->path, num); -+ (int) (path_len - 5), devpath, num); - } else { + { + char *devpath; + size_t path_len; +@@ -2341,7 +2339,7 @@ _device_get_part_path (PedDevice *dev, int num) char const *p = (dev->type == PED_DEVICE_DAC960 || dev->type == PED_DEVICE_CPQARRAY || dev->type == PED_DEVICE_ATARAID - || isdigit (dev->path[path_len - 1]) + || isdigit (devpath[path_len - 1]) ? "p" : ""); -- result = zasprintf ("%s%s%d", dev->path, p, num); -+ result = zasprintf ("%s%s%d", devpath, p, num); + result = zasprintf ("%s%s%d", devpath, p, num); } -- -+#ifdef ENABLE_DEVICE_MAPPER -+ if (dev->type == PED_DEVICE_DM) -+ free (devpath); -+#endif - return result; - } - +@@ -2355,6 +2353,10 @@ _device_get_part_path (PedDevice *dev, int num) static char* linux_partition_get_path (const PedPartition* part) { + /* loop label means use the whole disk */ + if (strcmp (part->disk->type->name, "loop") == 0) + return xstrdup (part->disk->dev->path); ++ return _device_get_part_path (part->disk->dev, part->num); } -@@ -2361,6 +2398,8 @@ linux_partition_is_busy (const PedPartition* part) +@@ -2423,6 +2425,8 @@ linux_partition_is_busy (const PedPartition* part) PED_ASSERT (part != NULL); @@ -365,7 +297,7 @@ index 67a5c2e..adb82f2 100644 if (_partition_is_mounted (part)) return 1; if (part->type == PED_PARTITION_EXTENDED) { -@@ -2494,7 +2533,7 @@ _sysfs_ull_entry_from_part(PedPartition const* part, const char *entry, +@@ -2602,7 +2606,7 @@ _sysfs_ull_entry_from_part(PedPartition const* part, const char *entry, unsigned long long *val) { char path[128]; @@ -374,7 +306,7 @@ index 67a5c2e..adb82f2 100644 if (!part_name) return false; -@@ -2529,7 +2568,7 @@ _kernel_get_partition_start_and_length(PedPartition const *part, +@@ -2637,7 +2641,7 @@ _kernel_get_partition_start_and_length(PedPartition const *part, PED_ASSERT(start); PED_ASSERT(length); @@ -383,549 +315,8 @@ index 67a5c2e..adb82f2 100644 if (!dev_name) return false; -@@ -2583,6 +2622,8 @@ static unsigned int - _device_get_partition_range(PedDevice const* dev) - { - int range; -+ if (dev->type == PED_DEVICE_DM) -+ return MAX_NUM_PARTS; - bool ok = _sysfs_int_entry_from_dev(dev, "ext_range", &range); - - if (!ok) -@@ -2591,6 +2632,133 @@ _device_get_partition_range(PedDevice const* dev) - return range > 1 ? range : 0; - } - -+#ifdef ENABLE_DEVICE_MAPPER -+static int -+_dm_remove_partition(PedDisk* disk, int partno) -+{ -+ int rc; -+ char *part_name = _device_get_part_path (disk->dev, partno); -+ -+ int fd = open (part_name, O_RDONLY | O_EXCL); -+ if (fd == -1) { -+ if (errno == ENOENT) -+ errno = ENXIO; /* nothing to remove, device already doesn't exist */ -+ free (part_name); -+ return 0; -+ } -+ close (fd); -+ struct dm_task *task = dm_task_create(DM_DEVICE_REMOVE); -+ if (!task) { -+ free (part_name); -+ return 0; -+ } -+ dm_task_set_name (task, part_name); -+ rc = dm_task_run(task); -+ dm_task_update_nodes(); -+ dm_task_destroy(task); -+ free (part_name); -+ if (!rc) -+ return 0; -+ -+ return 1; -+} -+ -+static bool -+_dm_get_partition_start_and_length(PedPartition const *part, -+ unsigned long long *start, -+ unsigned long long *length) -+{ -+ struct dm_task* task = NULL; -+ int rc = 0; -+ -+ if (!(task = dm_task_create(DM_DEVICE_TABLE))) -+ return 0; -+ char *path = _device_get_part_path (part->disk->dev, part->num); -+ PED_ASSERT(path); -+ /* libdevmapper likes to complain on stderr instead of quietly -+ returning ENOENT or ENXIO, so try to stat first */ -+ struct stat st; -+ if (stat(path, &st)) -+ goto err; -+ dm_task_set_name(task, path); -+ if (!dm_task_run(task)) -+ goto err; -+ -+ int major, minor; -+ char *params; -+ char *target_type; -+ dm_get_next_target(task, NULL, (uint64_t *)start, (uint64_t *)length, &target_type, ¶ms); -+ if (sscanf (params, "%d:%d %Ld", &major, &minor, start) != 3) -+ goto err; -+ rc = 1; -+err: -+ free (path); -+ dm_task_destroy(task); -+ return rc; -+} -+ -+ -+static int -+_dm_add_partition (PedDisk* disk, const PedPartition* part) -+{ -+ LinuxSpecific* arch_specific = LINUX_SPECIFIC (disk->dev); -+ char *params = NULL; -+ char *vol_name = NULL; -+ -+ /* Get map name from devicemapper */ -+ struct dm_task *task = dm_task_create (DM_DEVICE_INFO); -+ if (!task) -+ goto err; -+ -+ if (!dm_task_set_major_minor (task, arch_specific->major, -+ arch_specific->minor, 0)) -+ goto err; -+ -+ if (!dm_task_run(task)) -+ goto err; -+ -+ const char *dev_name = dm_task_get_name (task); -+ size_t name_len = strlen (dev_name); -+ vol_name = zasprintf ("%s%s%d", -+ dev_name, -+ isdigit (dev_name[name_len - 1]) ? "p" : "", -+ part->num); -+ if (vol_name == NULL) -+ goto err; -+ -+ /* Caution: dm_task_destroy frees dev_name. */ -+ dm_task_destroy (task); -+ task = NULL; -+ if ( ! (params = zasprintf ("%d:%d %lld", arch_specific->major, -+ arch_specific->minor, part->geom.start))) -+ goto err; -+ -+ task = dm_task_create (DM_DEVICE_CREATE); -+ if (!task) -+ goto err; -+ -+ dm_task_set_name (task, vol_name); -+ dm_task_add_target (task, 0, part->geom.length, -+ "linear", params); -+ if (dm_task_run (task)) { -+ dm_task_update_nodes (); -+ dm_task_destroy (task); -+ free (params); -+ free (vol_name); -+ return 1; -+ } else { -+ _dm_remove_partition (disk, part->num); -+ } -+err: -+ dm_task_update_nodes(); -+ if (task) -+ dm_task_destroy (task); -+ free (params); -+ free (vol_name); -+ return 0; -+} -+#endif -+ - /* - * Sync the partition table in two step process: - * 1. Remove all of the partitions from the kernel's tables, but do not attempt -@@ -2611,12 +2779,31 @@ _disk_sync_part_table (PedDisk* disk) - PED_ASSERT(disk != NULL); - PED_ASSERT(disk->dev != NULL); - int lpn; -- - unsigned int part_range = _device_get_partition_range(disk->dev); -+ int (*add_partition)(PedDisk* disk, const PedPartition *part); -+ int (*remove_partition)(PedDisk* disk, int partno); -+ bool (*get_partition_start_and_length)(PedPartition const *part, -+ unsigned long long *start, -+ unsigned long long *length); -+ - -- /* lpn = largest partition number. */ -+#ifdef ENABLE_DEVICE_MAPPER -+ if (disk->dev->type == PED_DEVICE_DM) { -+ add_partition = _dm_add_partition; -+ remove_partition = _dm_remove_partition; -+ get_partition_start_and_length = _dm_get_partition_start_and_length; -+ } else -+#endif -+ { -+ add_partition = _blkpg_add_partition; -+ remove_partition = _blkpg_remove_partition; -+ get_partition_start_and_length = _kernel_get_partition_start_and_length; -+ } -+ -+ /* lpn = largest partition number. -+ * for remove pass, use greater of device or label limit */ - if (ped_disk_get_max_supported_partition_count(disk, &lpn)) -- lpn = PED_MIN(lpn, part_range); -+ lpn = PED_MAX(lpn, part_range); - else - lpn = part_range; - -@@ -2633,59 +2820,68 @@ _disk_sync_part_table (PedDisk* disk) - if (!errnums) - goto cleanup; - -- /* Attempt to remove each and every partition, retrying for -- up to max_sleep_seconds upon any failure due to EBUSY. */ -- unsigned int sleep_microseconds = 10000; -- unsigned int max_sleep_seconds = 1; -- unsigned int n_sleep = (max_sleep_seconds -- * 1000000 / sleep_microseconds); - int i; -- for (i = 0; i < n_sleep; i++) { -- if (i) -- usleep (sleep_microseconds); -- bool busy = false; -- int j; -- for (j = 0; j < lpn; j++) { -- if (!ok[j]) { -- ok[j] = _blkpg_remove_partition (disk, j + 1); -- errnums[j] = errno; -- if (!ok[j] && errnums[j] == EBUSY) -- busy = true; -- } -- } -- if (!busy) -- break; -- } -- -+ /* remove old partitions first */ - for (i = 1; i <= lpn; i++) { - PedPartition *part = ped_disk_get_partition (disk, i); - if (part) { -- if (!ok[i - 1] && errnums[i - 1] == EBUSY) { -- unsigned long long length; -- unsigned long long start; -- /* get start and length of existing partition */ -- if (!_kernel_get_partition_start_and_length(part, -- &start, &length)) -- goto cleanup; -- if (start == part->geom.start -- && length == part->geom.length) -- ok[i - 1] = 1; -- /* If the new partition is unchanged and the -- existing one was not removed because it was -- in use, then reset the error flag and do not -- try to add it since it is already there. */ -+ unsigned long long length; -+ unsigned long long start; -+ /* get start and length of existing partition */ -+ if (get_partition_start_and_length(part, -+ &start, &length) -+ && start == part->geom.start -+ && length == part->geom.length) -+ { -+ /* partition is unchanged, so nothing to do */ -+ ok[i - 1] = 1; - continue; - } -- -- /* add the (possibly modified or new) partition */ -- if (!_blkpg_add_partition (disk, part)) { -- ped_exception_throw ( -- PED_EXCEPTION_ERROR, -- PED_EXCEPTION_RETRY_CANCEL, -- _("Failed to add partition %d (%s)"), -- i, strerror (errno)); -- goto cleanup; -- } -+ } -+ /* Attempt to remove the partition, retrying for -+ up to max_sleep_seconds upon any failure due to EBUSY. */ -+ unsigned int sleep_microseconds = 10000; -+ unsigned int max_sleep_seconds = 1; -+ unsigned int n_sleep = (max_sleep_seconds -+ * 1000000 / sleep_microseconds); -+ do { -+ ok[i - 1] = remove_partition (disk, i); -+ errnums[i - 1] = errno; -+ if (ok[i - 1] || errnums[i - 1] != EBUSY) -+ break; -+ usleep (sleep_microseconds); -+ } while (n_sleep--); -+ if (!ok[i - 1] && errnums[i - 1] == ENXIO) -+ ok[i - 1] = 1; /* it already doesn't exist */ -+ } -+ /* lpn = largest partition number. -+ * for add pass, use lesser of device or label limit */ -+ if (ped_disk_get_max_supported_partition_count(disk, &lpn)) -+ lpn = PED_MIN(lpn, part_range); -+ else -+ lpn = part_range; -+ /* don't actually add partitions for loop */ -+ if (strcmp (disk->type->name, "loop") == 0) -+ lpn = 0; -+ for (i = 1; i <= lpn; i++) { -+ PedPartition *part = ped_disk_get_partition (disk, i); -+ if (!part) -+ continue; -+ unsigned long long length; -+ unsigned long long start; -+ /* get start and length of existing partition */ -+ if (get_partition_start_and_length(part, -+ &start, &length) -+ && start == part->geom.start -+ && length == part->geom.length) { -+ ok[i - 1] = 1; -+ /* partition is unchanged, so nothing to do */ -+ continue; -+ } -+ /* add the (possibly modified or new) partition */ -+ if (!add_partition (disk, part)) { -+ ok[i - 1] = 0; -+ errnums[i - 1] = errno; - } - } - -@@ -2724,235 +2920,6 @@ _disk_sync_part_table (PedDisk* disk) - return ret; - } - --#ifdef ENABLE_DEVICE_MAPPER --static int --_dm_remove_map_name(char *name) --{ -- struct dm_task *task = NULL; -- int rc = 0; -- uint32_t cookie = 0; -- -- task = dm_task_create(DM_DEVICE_REMOVE); -- if (!task) -- return 1; -- -- dm_task_set_name (task, name); -- if (!dm_task_set_cookie(task, &cookie, 0)) -- goto err; -- -- rc = dm_task_run(task); -- dm_udev_wait(cookie); -- dm_task_update_nodes(); --err: -- dm_task_destroy(task); -- if (!rc) -- return 1; -- -- return 0; --} -- --static int --_dm_is_part (struct dm_info *this, char *name) --{ -- struct dm_task* task = NULL; -- struct dm_info* info = alloca(sizeof *info); -- struct dm_deps* deps = NULL; -- int rc = 0; -- unsigned int i; -- -- task = dm_task_create(DM_DEVICE_DEPS); -- if (!task) -- return 0; -- -- dm_task_set_name(task, name); -- if (!dm_task_run(task)) -- goto err; -- -- memset(info, '\0', sizeof *info); -- dm_task_get_info(task, info); -- if (!info->exists) -- goto err; -- -- deps = dm_task_get_deps(task); -- if (!deps) -- goto err; -- -- for (i = 0; i < deps->count; i++) { -- unsigned int ma = major(deps->device[i]), -- mi = minor(deps->device[i]); -- -- if (ma == this->major && mi == this->minor) -- rc = 1; -- } -- --err: -- dm_task_destroy(task); -- return rc; --} -- --static int --_dm_remove_parts (PedDevice* dev) --{ -- struct dm_task* task = NULL; -- struct dm_info* info = alloca(sizeof *info); -- struct dm_names* names = NULL; -- unsigned int next = 0; -- int rc; -- LinuxSpecific* arch_specific = LINUX_SPECIFIC (dev); -- -- task = dm_task_create(DM_DEVICE_LIST); -- if (!task) -- goto err; -- -- if (!dm_task_set_major_minor (task, arch_specific->major, -- arch_specific->minor, 0)) -- goto err; -- -- if (!dm_task_run(task)) -- goto err; -- -- memset(info, '\0', sizeof *info); -- dm_task_get_info(task, info); -- if (!info->exists) -- goto err; -- -- names = dm_task_get_names(task); -- if (!names) -- goto err; -- -- rc = 0; -- do { -- names = (void *) ((char *) names + next); -- -- if (_dm_is_part(info, names->name)) -- rc += _dm_remove_map_name(names->name); -- -- next = names->next; -- } while (next); -- -- dm_task_update_nodes(); -- dm_task_destroy(task); -- task = NULL; -- -- if (!rc) -- return 1; --err: -- if (task) -- dm_task_destroy(task); -- ped_exception_throw (PED_EXCEPTION_WARNING, PED_EXCEPTION_IGNORE, -- _("parted was unable to re-read the partition " -- "table on %s (%s). This means Linux won't know " -- "anything about the modifications you made. "), -- dev->path, strerror (errno)); -- return 0; --} -- --static int --_dm_add_partition (PedDisk* disk, PedPartition* part) --{ -- char* vol_name = NULL; -- const char* dev_name = NULL; -- char* vol_uuid = NULL; -- const char* dev_uuid = NULL; -- char* params = NULL; -- LinuxSpecific* arch_specific = LINUX_SPECIFIC (disk->dev); -- uint32_t cookie = 0; -- -- /* Get map name from devicemapper */ -- struct dm_task *task = dm_task_create (DM_DEVICE_INFO); -- if (!task) -- goto err; -- -- if (!dm_task_set_major_minor (task, arch_specific->major, -- arch_specific->minor, 0)) -- goto err; -- -- if (!dm_task_run(task)) -- goto err; -- -- dev_name = dm_task_get_name (task); -- dev_uuid = dm_task_get_uuid (task); -- -- if (isdigit (dev_name[strlen (dev_name) - 1])) { -- if ( ! (vol_name = zasprintf ("%sp%d", dev_name, part->num))) -- goto err; -- } else if ( ! (vol_name = zasprintf ("%s%d", dev_name, part->num))) -- goto err; -- -- if ( dev_uuid && (strlen(dev_uuid) > 0) \ -- && ! (vol_uuid = zasprintf ("part%d-%s", part->num, dev_uuid))) -- goto err; -- -- /* Caution: dm_task_destroy frees dev_name. */ -- dm_task_destroy (task); -- task = NULL; -- -- /* device-mapper uses 512b units, not the device's sector size */ -- if ( ! (params = zasprintf ("%d:%d %lld", arch_specific->major, -- arch_specific->minor, -- part->geom.start * (disk->dev->sector_size / PED_SECTOR_SIZE_DEFAULT)))) -- goto err; -- -- task = dm_task_create (DM_DEVICE_CREATE); -- if (!task) -- goto err; -- -- dm_task_set_name (task, vol_name); -- if (vol_uuid) -- dm_task_set_uuid (task, vol_uuid); -- /* device-mapper uses 512b units, not the device's sector size */ -- dm_task_add_target (task, 0, part->geom.length * (disk->dev->sector_size / PED_SECTOR_SIZE_DEFAULT), -- "linear", params); -- if (!dm_task_set_cookie(task, &cookie, 0)) -- goto err; -- if (dm_task_run (task)) { -- //printf("0 %ld linear %s\n", part->geom.length, params); -- dm_udev_wait(cookie); -- dm_task_update_nodes(); -- dm_task_destroy(task); -- free(params); -- free(vol_uuid); -- free(vol_name); -- return 1; -- } else { -- dm_udev_wait(cookie); -- _dm_remove_map_name(vol_name); -- } --err: -- dm_task_update_nodes(); -- if (task) -- dm_task_destroy (task); -- free (params); -- free (vol_uuid); -- free (vol_name); -- return 0; --} -- --static int --_dm_reread_part_table (PedDisk* disk) --{ -- int largest_partnum = ped_disk_get_last_partition_num (disk); -- int rc = 1; -- int i; -- -- sync(); -- if (!_dm_remove_parts(disk->dev)) -- rc = 0; -- -- for (i = 1; i <= largest_partnum; i++) { -- PedPartition* part; -- -- part = ped_disk_get_partition (disk, i); -- if (!part) -- continue; -- -- if (!_dm_add_partition (disk, part)) -- rc = 0; -- } -- return rc; --} --#endif -- - static int - _have_blkpg () - { -@@ -2970,10 +2937,6 @@ _have_blkpg () - static int - linux_disk_commit (PedDisk* disk) - { --#ifdef ENABLE_DEVICE_MAPPER -- if (disk->dev->type == PED_DEVICE_DM) -- return _dm_reread_part_table (disk); --#endif - if (disk->dev->type != PED_DEVICE_FILE) { - - /* We now require BLKPG support. If this assertion fails, diff --git a/tests/Makefile.am b/tests/Makefile.am -index 1cf859c..44518c8 100644 +index 29fa280..ac8122b 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -34,6 +34,7 @@ TESTS = \ @@ -936,7 +327,7 @@ index 1cf859c..44518c8 100644 t1700-probe-fs.sh \ t2200-dos-label-recog.sh \ t2201-pc98-label-recog.sh \ -@@ -58,6 +59,7 @@ TESTS = \ +@@ -59,6 +60,7 @@ TESTS = \ t6002-dm-many-partitions.sh \ t6003-dm-uuid.sh \ t6004-dm-512b-sectors.sh \ @@ -1099,5 +490,5 @@ index 0000000..9807b40 + +Exit $fail -- -1.9.1 +2.7.4 diff --git a/filesystem/parted/centos/srpm_path b/filesystem/parted/centos/srpm_path index 97272a941..fd9f8421e 100644 --- a/filesystem/parted/centos/srpm_path +++ b/filesystem/parted/centos/srpm_path @@ -1 +1 @@ -mirror:Source/parted-3.1-28.el7.src.rpm +mirror:Source/parted-3.1-29.el7.src.rpm diff --git a/grub/grub2/centos/meta_patches/0001-grub2-Update-package-versioning-for-TIS-format.patch b/grub/grub2/centos/meta_patches/0001-grub2-Update-package-versioning-for-TIS-format.patch index 17035c775..b221ef7ff 100644 --- a/grub/grub2/centos/meta_patches/0001-grub2-Update-package-versioning-for-TIS-format.patch +++ b/grub/grub2/centos/meta_patches/0001-grub2-Update-package-versioning-for-TIS-format.patch @@ -1,13 +1,25 @@ +From 008445e8d11202f53190da4a12386df338549000 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Fri, 17 Aug 2018 22:48:46 +0800 +Subject: [PATCH] Update-package-versioning-for-TIS-format + +--- + SPECS/grub2.spec | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + diff --git a/SPECS/grub2.spec b/SPECS/grub2.spec -index a56d930..a4e87f5 100644 +index 12d34ad..88c6c09 100644 --- a/SPECS/grub2.spec +++ b/SPECS/grub2.spec -@@ -8,7 +8,7 @@ +@@ -6,7 +6,7 @@ Name: grub2 Epoch: 1 Version: 2.02 --Release: 0.64%{?dist}%{?buildid} -+Release: 0.64.el7.centos%{?_tis_dist}.%{tis_patch_ver} +-Release: 0.65%{?dist}%{?buildid}.2 ++Release: 0.65.el7.centos.2%{?_tis_dist}.%{tis_patch_ver} Summary: Bootloader with support for Linux, Multiboot and more Group: System Environment/Base License: GPLv3+ +-- +2.7.4 + diff --git a/grub/grub2/centos/meta_patches/0003-grub2-remove-debug-pkgs.patch b/grub/grub2/centos/meta_patches/0003-grub2-remove-debug-pkgs.patch index ed2029d57..b89beac76 100644 --- a/grub/grub2/centos/meta_patches/0003-grub2-remove-debug-pkgs.patch +++ b/grub/grub2/centos/meta_patches/0003-grub2-remove-debug-pkgs.patch @@ -1,24 +1,26 @@ +From 2d237c31ea6d2fdfeaf61aef89b4755def0495a2 Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Fri, 17 Aug 2018 23:28:59 +0800 +Subject: [PATCH] remove-debug-pkgs + +Signed-off-by: slin14 +--- + SPECS/grub2.spec | 20 -------------------- + 1 file changed, 20 deletions(-) + diff --git a/SPECS/grub2.spec b/SPECS/grub2.spec -index 4059aea..a56d930 100644 +index 88c6c09..11f6b0e 100644 --- a/SPECS/grub2.spec +++ b/SPECS/grub2.spec -@@ -176,7 +176,6 @@ This subpackage provides tools for support of all platforms. +@@ -172,7 +172,6 @@ rm -f grub-%{tarversion}/util/grub-setpassword.in.orig %install set -e rm -fr $RPM_BUILD_ROOT - %do_common_install - # Fix for hardcoded efidir - sed -i.orig -e 's@/efi/EFI/redhat/@/efi/EFI/%{efidir}/@' \ -@@ -184,7 +183,6 @@ sed -i.orig -e 's@/efi/EFI/redhat/@/efi/EFI/%{efidir}/@' \ - touch --reference=grub-%{tarversion}/util/grub-setpassword.in.orig \ - grub-%{tarversion}/util/grub-setpassword.in - rm -f grub-%{tarversion}/util/grub-setpassword.in.orig -- %if 0%{with_efi_arch} %do_efi_install %{grubefiarch} %{grubefiname} %{grubeficdname} - %endif -@@ -210,25 +208,6 @@ cat << EOF > ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/grub2.conf +@@ -199,25 +198,6 @@ cat << EOF > ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/grub2.conf -b /usr/sbin/grub2-sparc64-setup EOF @@ -44,3 +46,6 @@ index 4059aea..a56d930 100644 %clean rm -rf $RPM_BUILD_ROOT +-- +2.7.4 + diff --git a/grub/grub2/centos/meta_patches/0007-1000_linux-mktitle-de-brand-the-grub.cfg-menu.patch b/grub/grub2/centos/meta_patches/0007-1000_linux-mktitle-de-brand-the-grub.cfg-menu.patch index d73d3f110..ea8a5a2c0 100644 --- a/grub/grub2/centos/meta_patches/0007-1000_linux-mktitle-de-brand-the-grub.cfg-menu.patch +++ b/grub/grub2/centos/meta_patches/0007-1000_linux-mktitle-de-brand-the-grub.cfg-menu.patch @@ -1,21 +1,21 @@ -From 38914a0de0b29f5f0efbf3e93a60fa8596f160e7 Mon Sep 17 00:00:00 2001 +From 9056b35661962a311aafa1937b5d8e236f44b119 Mon Sep 17 00:00:00 2001 From: root Date: Tue, 23 Jan 2018 13:29:11 -0500 -Subject: [PATCH 1/4] debrand the grub_cfg menu +Subject: [PATCH] debrand the grub_cfg menu --- SOURCES/grub.patches | 1 + 1 file changed, 1 insertion(+) diff --git a/SOURCES/grub.patches b/SOURCES/grub.patches -index 2ef8ce5..b69fb31 100644 +index bac4594..d7475f0 100644 --- a/SOURCES/grub.patches +++ b/SOURCES/grub.patches -@@ -257,3 +257,4 @@ Patch0256: 0256-efinet-Setting-DNS-server-from-UEFI-protocol.patch - Patch0257: 0257-set-rootpath.patch +@@ -258,3 +258,4 @@ Patch0257: 0257-set-rootpath.patch Patch0258: 0258-Fix-one-more-coverity-complaint.patch Patch0260: 0260-Fix-up-linux-params-usage.patch + Patch0261: 0261-Fix-grub_net_hwaddr_to_str.patch +Patch1000: 1000_linux-mktitle-de-brand-the-grub.cfg-menu.patch -- -1.8.3.1 +2.7.4 diff --git a/grub/grub2/centos/patches/1002-Don-t-write-trailing-colon-when-populating-MAC-strin.patch b/grub/grub2/centos/patches/1002-Don-t-write-trailing-colon-when-populating-MAC-strin.patch index 5558adba0..68afb58c5 100644 --- a/grub/grub2/centos/patches/1002-Don-t-write-trailing-colon-when-populating-MAC-strin.patch +++ b/grub/grub2/centos/patches/1002-Don-t-write-trailing-colon-when-populating-MAC-strin.patch @@ -1,22 +1,21 @@ -From f521055ce4f334a942d23ccab6ad6b0366c0a204 Mon Sep 17 00:00:00 2001 +From 56561f1b5850888c9266b1155d4ac6d352e791c4 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 28 Mar 2018 11:23:17 -0400 Subject: [PATCH] Don't write trailing colon when populating MAC string --- - grub-core/net/net.c | 10 +++++++++- - 1 file changed, 9 insertions(+), 1 deletion(-) + grub-core/net/net.c | 9 ++++++++- + 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/grub-core/net/net.c b/grub-core/net/net.c -index 6b4b10b..a637da5 100644 +index a6566bd..f3f964e 100644 --- a/grub-core/net/net.c +++ b/grub-core/net/net.c -@@ -792,11 +792,19 @@ grub_net_hwaddr_to_str (const grub_net_link_level_address_t *addr, char *str) - addr->type, addr->len); +@@ -794,11 +794,18 @@ grub_net_hwaddr_to_str (const grub_net_link_level_address_t *addr, char *str) return; } + maxstr = addr->len * grub_strlen ("XX:"); - for (ptr = str, i = 0; i < addr->len; i++) -+ + if (addr->len == 0) + { + return; @@ -24,14 +23,14 @@ index 6b4b10b..a637da5 100644 + + for (ptr = str, i = 0; i < (addr->len - 1); i++) { - ptr += grub_snprintf (ptr, GRUB_NET_MAX_STR_HWADDR_LEN - (ptr - str), + ptr += grub_snprintf (ptr, maxstr - (ptr - str), "%02x:", addr->mac[i] & 0xff); } -+ ptr += grub_snprintf (ptr, GRUB_NET_MAX_STR_HWADDR_LEN - (ptr - str), -+ "%02x", addr->mac[i] & 0xff); ++ ptr += grub_snprintf (ptr, maxstr - (ptr - str), ++ "%02x", addr->mac[i] & 0xff); } int -- -1.8.3.1 +2.7.4 diff --git a/grub/grub2/centos/srpm_path b/grub/grub2/centos/srpm_path index 3deeb3024..7eb22e359 100644 --- a/grub/grub2/centos/srpm_path +++ b/grub/grub2/centos/srpm_path @@ -1 +1 @@ -mirror:Source/grub2-2.02-0.64.el7.centos.src.rpm +mirror:Source/grub2-2.02-0.65.el7.centos.2.src.rpm diff --git a/kernel/kernel-rt/centos/meta_patches/Build-logic-and-sources-for-TiC.patch b/kernel/kernel-rt/centos/meta_patches/Build-logic-and-sources-for-TiC.patch index a6d85e32c..457842310 100644 --- a/kernel/kernel-rt/centos/meta_patches/Build-logic-and-sources-for-TiC.patch +++ b/kernel/kernel-rt/centos/meta_patches/Build-logic-and-sources-for-TiC.patch @@ -1,7 +1,7 @@ -From 779c7986900ecc5dcc736c46b80690df8626746b Mon Sep 17 00:00:00 2001 +From 4a2a30175a859e5a60b5a0e999c9edfde03eee7c Mon Sep 17 00:00:00 2001 From: Jim Somerville Date: Mon, 23 Apr 2018 15:18:45 -0400 -Subject: [PATCH 1/5] Build logic and sources for TiC +Subject: [PATCH] Build logic and sources for TiC Signed-off-by: Jim Somerville --- @@ -9,7 +9,7 @@ Signed-off-by: Jim Somerville 1 file changed, 272 insertions(+), 7 deletions(-) diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec -index dc814f7..4dc3361 100644 +index c05b910..dfbbe1f 100644 --- a/SPECS/kernel-rt.spec +++ b/SPECS/kernel-rt.spec @@ -17,23 +17,33 @@ Summary: The Linux Realtime kernel @@ -520,7 +520,7 @@ index dc814f7..4dc3361 100644 +%endif # do_sign + %changelog - * Mon Jun 18 2018 Luis Claudio R. Goncalves [3.10.0-862.6.3.rt56.811.el7] + * Fri Aug 10 2018 Luis Claudio R. Goncalves [3.10.0-862.11.6.rt56.819.el7] - [rt] Update source tree to match RHEL 7.5 tree [1549768 1462329] -- 2.7.4 diff --git a/kernel/kernel-rt/centos/meta_patches/Lower-the-compiler-version-requirement.patch b/kernel/kernel-rt/centos/meta_patches/Lower-the-compiler-version-requirement.patch deleted file mode 100644 index 404bf6160..000000000 --- a/kernel/kernel-rt/centos/meta_patches/Lower-the-compiler-version-requirement.patch +++ /dev/null @@ -1,29 +0,0 @@ -From 2266f2e97fc39650ad6afb55cae3b9e11a4d1021 Mon Sep 17 00:00:00 2001 -Message-Id: <2266f2e97fc39650ad6afb55cae3b9e11a4d1021.1528227675.git.Jim.Somerville@windriver.com> -In-Reply-To: -References: -From: Jim Somerville -Date: Tue, 29 May 2018 13:06:24 -0400 -Subject: [PATCH 3/3] Lower the compiler version requirement - -Signed-off-by: Jim Somerville ---- - SPECS/kernel-rt.spec | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec -index 15114e6..ab6daf3 100644 ---- a/SPECS/kernel-rt.spec -+++ b/SPECS/kernel-rt.spec -@@ -296,7 +296,7 @@ Provides: kernel-rt-%{_target_cpu} = %{rpmversion}-%{pkg_release} - # - BuildRequires: module-init-tools, patch >= 2.5.4, bash >= 2.03, sh-utils, tar - BuildRequires: xz, findutils, gzip, m4, perl, make >= 3.78, diffutils, gawk --BuildRequires: gcc >= 4.8.5-28, binutils >= 2.25, redhat-rpm-config >= 9.1.0-55 -+BuildRequires: gcc >= 4.8.5-16, binutils >= 2.25, redhat-rpm-config >= 9.1.0-55 - BuildRequires: hostname, net-tools, patchutils, bc - %if %{builddoc} - BuildRequires: xmlto, asciidoc --- -1.8.3.1 - diff --git a/kernel/kernel-rt/centos/meta_patches/Lower-the-linux-firmware-version-requirement.patch b/kernel/kernel-rt/centos/meta_patches/Lower-the-linux-firmware-version-requirement.patch deleted file mode 100644 index 400afe5c3..000000000 --- a/kernel/kernel-rt/centos/meta_patches/Lower-the-linux-firmware-version-requirement.patch +++ /dev/null @@ -1,27 +0,0 @@ -From ab1bce8c119b1f99f5b22eba8f419854262744f6 Mon Sep 17 00:00:00 2001 -Message-Id: -From: Jim Somerville -Date: Fri, 1 Jun 2018 16:17:43 -0400 -Subject: [PATCH 1/1] Lower the linux firmware version requirement - -Signed-off-by: Jim Somerville ---- - SPECS/kernel-rt.spec | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec -index 3c0e4b4..e614b70 100644 ---- a/SPECS/kernel-rt.spec -+++ b/SPECS/kernel-rt.spec -@@ -259,7 +259,7 @@ Provides: kernel-modeset = 1\ - Provides: kernel-uname-r = %{KVERREL}%{?1:.%{1}}\ - Requires(pre): %{kernel_prereq}\ - Requires(pre): %{initrd_prereq}\ --Requires(pre): linux-firmware >= 20180113-61\ -+Requires(pre): linux-firmware >= 20170606-56\ - Requires(post): %{_sbindir}/new-kernel-pkg\ - Requires(post): system-release\ - Requires(preun): %{_sbindir}/new-kernel-pkg\ --- -1.8.3.1 - diff --git a/kernel/kernel-rt/centos/meta_patches/PATCH_ORDER b/kernel/kernel-rt/centos/meta_patches/PATCH_ORDER index 7a3ea4aae..8eab5dd84 100644 --- a/kernel/kernel-rt/centos/meta_patches/PATCH_ORDER +++ b/kernel/kernel-rt/centos/meta_patches/PATCH_ORDER @@ -1,5 +1,3 @@ Build-logic-and-sources-for-TiC.patch Kernel-source-patches-for-TiC.patch -Lower-the-compiler-version-requirement.patch Compile-issues.patch -Lower-the-linux-firmware-version-requirement.patch diff --git a/kernel/kernel-rt/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch b/kernel/kernel-rt/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch index 95aebf6d7..0ef0d1d7b 100644 --- a/kernel/kernel-rt/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch +++ b/kernel/kernel-rt/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch @@ -1,10 +1,7 @@ -From cb5a4baadb715440ce03e5e751f7125fc0d5427a Mon Sep 17 00:00:00 2001 -Message-Id: -In-Reply-To: -References: +From ef42dfab80cff26850695de8c95c3e1ba294e05c Mon Sep 17 00:00:00 2001 From: Alex Shi Date: Thu, 12 Jan 2017 21:27:03 +0800 -Subject: [PATCH 23/32] CPU / PM: expose pm_qos_resume_latency for CPUs +Subject: [PATCH] CPU / PM: expose pm_qos_resume_latency for CPUs [ commit 37efa4b41ffb31dcdfc3beb97d47992bb2a083e5 from linux-stable ] @@ -39,18 +36,18 @@ Signed-off-by: Jim Somerville 1 file changed, 2 insertions(+) diff --git a/drivers/base/cpu.c b/drivers/base/cpu.c -index 803d2a0..1d9bba3 100644 +index 65e786d..91d620f 100644 --- a/drivers/base/cpu.c +++ b/drivers/base/cpu.c -@@ -15,6 +15,7 @@ - #include +@@ -16,6 +16,7 @@ #include #include + #include +#include #include "base.h" -@@ -318,6 +319,7 @@ int register_cpu(struct cpu *cpu, int num) +@@ -319,6 +320,7 @@ int register_cpu(struct cpu *cpu, int num) per_cpu(cpu_sys_devices, num) = &cpu->dev; if (!error) register_cpu_under_node(num, cpu_to_node(num)); @@ -59,5 +56,5 @@ index 803d2a0..1d9bba3 100644 #ifdef CONFIG_KEXEC if (!error) -- -1.8.3.1 +2.7.4 diff --git a/kernel/kernel-rt/centos/patches/Notification-of-death-of-arbitrary-processes.patch b/kernel/kernel-rt/centos/patches/Notification-of-death-of-arbitrary-processes.patch index fd0e17b77..fc36f39ed 100644 --- a/kernel/kernel-rt/centos/patches/Notification-of-death-of-arbitrary-processes.patch +++ b/kernel/kernel-rt/centos/patches/Notification-of-death-of-arbitrary-processes.patch @@ -1,10 +1,7 @@ -From 81c2c9a73d99e3df9c96daf65fec42997428af3e Mon Sep 17 00:00:00 2001 -Message-Id: <81c2c9a73d99e3df9c96daf65fec42997428af3e.1528226387.git.Jim.Somerville@windriver.com> -In-Reply-To: -References: +From 220edc1ccc6a0bc3dfb94a92946bf2b9a6cc0c61 Mon Sep 17 00:00:00 2001 From: Chris Friesen Date: Thu, 7 Apr 2016 11:16:19 -0600 -Subject: [PATCH 11/32] Notification of death of arbitrary processes +Subject: [PATCH] Notification of death of arbitrary processes Note: this commit was copied from Titanium Cloud Rel2 @@ -65,7 +62,7 @@ index d8c82e0..ba0c12e 100644 .timer_slack_ns = 50000, /* 50 usec default slack */ \ INIT_TIMER_LIST \ diff --git a/include/linux/sched.h b/include/linux/sched.h -index f8294d9..ab9c0f1 100644 +index 97ff026..0785453 100644 --- a/include/linux/sched.h +++ b/include/linux/sched.h @@ -1664,6 +1664,12 @@ struct task_struct { @@ -82,7 +79,7 @@ index f8294d9..ab9c0f1 100644 int numa_scan_seq; unsigned int numa_scan_period; diff --git a/include/uapi/linux/prctl.h b/include/uapi/linux/prctl.h -index 8ddaa82..53d6392 100644 +index a817b5c..2cf7776 100644 --- a/include/uapi/linux/prctl.h +++ b/include/uapi/linux/prctl.h @@ -55,6 +55,24 @@ @@ -457,7 +454,7 @@ index 8a908ea..448a3c3 100644 __exit_signal(p); diff --git a/kernel/fork.c b/kernel/fork.c -index c390b02..6340c77 100644 +index 6bda4c0..f3cd3ad 100644 --- a/kernel/fork.c +++ b/kernel/fork.c @@ -1512,6 +1512,10 @@ static struct task_struct *copy_process(unsigned long clone_flags, @@ -472,10 +469,10 @@ index c390b02..6340c77 100644 /* Perform scheduler related setup. Assign this task to a CPU. */ retval = sched_fork(clone_flags, p); diff --git a/kernel/signal.c b/kernel/signal.c -index f1ecca9..daaa6ab 100644 +index 59e84a2..728daa9 100644 --- a/kernel/signal.c +++ b/kernel/signal.c -@@ -47,6 +47,9 @@ +@@ -48,6 +48,9 @@ #include #include #include "audit.h" /* audit_signal_info() */ @@ -485,7 +482,7 @@ index f1ecca9..daaa6ab 100644 /* * SLAB caches for signal bits. -@@ -1849,6 +1852,10 @@ bool do_notify_parent(struct task_struct *tsk, int sig) +@@ -1853,6 +1856,10 @@ bool do_notify_parent(struct task_struct *tsk, int sig) __wake_up_parent(tsk, tsk->parent); spin_unlock_irqrestore(&psig->siglock, flags); @@ -496,7 +493,7 @@ index f1ecca9..daaa6ab 100644 return autoreap; } -@@ -1920,6 +1927,10 @@ static void do_notify_parent_cldstop(struct task_struct *tsk, +@@ -1924,6 +1931,10 @@ static void do_notify_parent_cldstop(struct task_struct *tsk, */ __wake_up_parent(tsk, parent); spin_unlock_irqrestore(&sighand->siglock, flags); @@ -508,12 +505,12 @@ index f1ecca9..daaa6ab 100644 static inline int may_ptrace_stop(void) diff --git a/kernel/sys.c b/kernel/sys.c -index 9c2a4ed..54538e3 100644 +index e79ea7e..5d43b93 100644 --- a/kernel/sys.c +++ b/kernel/sys.c -@@ -64,6 +64,10 @@ - #include - #include +@@ -67,6 +67,10 @@ + /* Hardening for Spectre-v1 */ + #include +#ifdef CONFIG_SIGEXIT +#include "death_notify.h" @@ -522,7 +519,7 @@ index 9c2a4ed..54538e3 100644 #ifndef SET_UNALIGN_CTL # define SET_UNALIGN_CTL(a,b) (-EINVAL) #endif -@@ -2474,6 +2478,11 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, arg2, unsigned long, arg3, +@@ -2478,6 +2482,11 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, arg2, unsigned long, arg3, else error = PR_MCE_KILL_DEFAULT; break; @@ -535,5 +532,5 @@ index 9c2a4ed..54538e3 100644 error = prctl_set_mm(arg2, arg3, arg4, arg5); break; -- -1.8.3.1 +2.7.4 diff --git a/kernel/kernel-rt/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch b/kernel/kernel-rt/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch index 6b76290ac..e0025f635 100644 --- a/kernel/kernel-rt/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch +++ b/kernel/kernel-rt/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch @@ -1,10 +1,7 @@ -From 3b5212f6cf0d7746dd48324fa99030f49073ca8c Mon Sep 17 00:00:00 2001 -Message-Id: <3b5212f6cf0d7746dd48324fa99030f49073ca8c.1528226387.git.Jim.Somerville@windriver.com> -In-Reply-To: -References: +From 7c074369c609a20df6a4467bc2de59b8945ee326 Mon Sep 17 00:00:00 2001 From: Alex Kozyrev Date: Wed, 19 Jul 2017 02:21:59 -0500 -Subject: [PATCH 19/32] Porting Cacheinfo from Kernel 4.10.17 +Subject: [PATCH] Porting Cacheinfo from Kernel 4.10.17 Original source code from tag v4.10.17 in Linux stable tree for: intel_cacheinfo.c, cacheinfo.c and cacheinfo.h. @@ -61,7 +58,7 @@ Signed-off-by: Jim Somerville create mode 100644 include/linux/cacheinfo.h diff --git a/Documentation/ABI/testing/sysfs-devices-system-cpu b/Documentation/ABI/testing/sysfs-devices-system-cpu -index 55338e6..eaf8da1 100644 +index ff65f15..7521be8 100644 --- a/Documentation/ABI/testing/sysfs-devices-system-cpu +++ b/Documentation/ABI/testing/sysfs-devices-system-cpu @@ -201,6 +201,71 @@ Description: address and size of the percpu note. @@ -1931,10 +1928,10 @@ index 0000000..eb3af27 +} +device_initcall(cacheinfo_sysfs_init); diff --git a/drivers/base/cpu.c b/drivers/base/cpu.c -index bd82212..803d2a0 100644 +index 290609b..65e786d 100644 --- a/drivers/base/cpu.c +++ b/drivers/base/cpu.c -@@ -338,6 +338,60 @@ struct device *get_cpu_device(unsigned cpu) +@@ -340,6 +340,60 @@ struct device *get_cpu_device(unsigned cpu) } EXPORT_SYMBOL_GPL(get_cpu_device); @@ -2106,12 +2103,12 @@ index 0000000..6a524bf + +#endif /* _LINUX_CACHEINFO_H */ diff --git a/include/linux/cpu.h b/include/linux/cpu.h -index 80e2b1d..06f9893 100644 +index a5dd694..ceaa393 100644 --- a/include/linux/cpu.h +++ b/include/linux/cpu.h -@@ -43,6 +43,9 @@ extern ssize_t cpu_show_spectre_v1(struct device *dev, - extern ssize_t cpu_show_spectre_v2(struct device *dev, - struct device_attribute *attr, char *buf); +@@ -49,6 +49,9 @@ extern ssize_t cpu_show_spec_store_bypass(struct device *dev, + extern ssize_t cpu_show_l1tf(struct device *dev, + struct device_attribute *attr, char *buf); +extern struct device *cpu_device_create(struct device *parent, void *drvdata, + const struct attribute_group **groups, @@ -2120,5 +2117,5 @@ index 80e2b1d..06f9893 100644 extern void unregister_cpu(struct cpu *cpu); extern ssize_t arch_cpu_probe(const char *, size_t); -- -1.8.3.1 +2.7.4 diff --git a/kernel/kernel-rt/centos/srpm_path b/kernel/kernel-rt/centos/srpm_path index c5cf404d9..7250e62d6 100644 --- a/kernel/kernel-rt/centos/srpm_path +++ b/kernel/kernel-rt/centos/srpm_path @@ -1 +1 @@ -mirror:Source/kernel-rt-3.10.0-862.6.3.rt56.811.el7.src.rpm +mirror:Source/kernel-rt-3.10.0-862.11.6.rt56.819.el7.src.rpm diff --git a/kernel/kernel-std/centos/meta_patches/Build-logic-and-sources-for-TiC.patch b/kernel/kernel-std/centos/meta_patches/Build-logic-and-sources-for-TiC.patch index 922974a46..d9998f9f1 100644 --- a/kernel/kernel-std/centos/meta_patches/Build-logic-and-sources-for-TiC.patch +++ b/kernel/kernel-std/centos/meta_patches/Build-logic-and-sources-for-TiC.patch @@ -1,7 +1,7 @@ -From a75195ff25cd30a4662cae5835d32a2403032a33 Mon Sep 17 00:00:00 2001 +From 32af2a0ea3905e23d85a65fd9326dbc6db0a21c4 Mon Sep 17 00:00:00 2001 From: Jim Somerville Date: Fri, 20 Apr 2018 14:51:56 -0400 -Subject: [PATCH 1/5] Build logic and sources for TiC +Subject: [PATCH] Build logic and sources for TiC Signed-off-by: Jim Somerville --- @@ -9,7 +9,7 @@ Signed-off-by: Jim Somerville 1 file changed, 60 insertions(+), 13 deletions(-) diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec -index 31a5f11..eef356a 100644 +index 1c3a765..f2499b4 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -5,7 +5,8 @@ Summary: The Linux kernel @@ -26,13 +26,13 @@ index 31a5f11..eef356a 100644 %global distro_build 862 %define rpmversion 3.10.0 --%define pkgrelease 862.6.3.el7 -+%define _pkgrelease 862.6.3 +-%define pkgrelease 862.11.6.el7 ++%define _pkgrelease 862.11.6 +%define pkgrelease %{_pkgrelease}.el7 + # allow pkg_release to have configurable %%{?dist} tag - %define specrelease 862.6.3%{?dist} + %define specrelease 862.11.6%{?dist} -%define pkg_release %{specrelease}%{?buildid} +%define pkg_release %{specrelease}%{buildid} @@ -224,7 +224,7 @@ index 31a5f11..eef356a 100644 +%endif + %changelog - * Tue Jun 26 2018 CentOS Sources - 3.10.0-862.6.3.el7 + * Tue Aug 14 2018 CentOS Sources - 3.10.0-862.11.6.el7 - Apply debranding changes -- 2.7.4 diff --git a/kernel/kernel-std/centos/meta_patches/Lower-the-compiler-version-requirement.patch b/kernel/kernel-std/centos/meta_patches/Lower-the-compiler-version-requirement.patch deleted file mode 100644 index d7dfa01d2..000000000 --- a/kernel/kernel-std/centos/meta_patches/Lower-the-compiler-version-requirement.patch +++ /dev/null @@ -1,26 +0,0 @@ -From 393eb8d3d3a15cda274f5d0c45763de9a8b3fcab Mon Sep 17 00:00:00 2001 -From: Jim Somerville -Date: Tue, 29 May 2018 13:06:24 -0400 -Subject: [PATCH 3/5] Lower the compiler version requirement - -Signed-off-by: Jim Somerville ---- - SPECS/kernel.spec | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec -index f1a0092..01dd989 100644 ---- a/SPECS/kernel.spec -+++ b/SPECS/kernel.spec -@@ -335,7 +335,7 @@ ExclusiveOS: Linux - # - BuildRequires: module-init-tools, patch >= 2.5.4, bash >= 2.03, sh-utils, tar - BuildRequires: xz, findutils, gzip, m4, perl, make >= 3.78, diffutils, gawk --BuildRequires: gcc >= 4.8.5-28.el7_5.1, binutils >= 2.25, redhat-rpm-config >= 9.1.0-55 -+BuildRequires: gcc >= 4.8.5-16, binutils >= 2.25, redhat-rpm-config >= 9.1.0-55 - BuildRequires: hostname, net-tools, bc - BuildRequires: xmlto, asciidoc - BuildRequires: openssl --- -2.7.4 - diff --git a/kernel/kernel-std/centos/meta_patches/Lower-the-linux-firmware-version-requirement.patch b/kernel/kernel-std/centos/meta_patches/Lower-the-linux-firmware-version-requirement.patch deleted file mode 100644 index 220def9c4..000000000 --- a/kernel/kernel-std/centos/meta_patches/Lower-the-linux-firmware-version-requirement.patch +++ /dev/null @@ -1,26 +0,0 @@ -From ec433bddc585744616d73daefc1b32326002a8ab Mon Sep 17 00:00:00 2001 -From: Jim Somerville -Date: Fri, 1 Jun 2018 16:17:43 -0400 -Subject: [PATCH 5/5] Lower the linux firmware version requirement - -Signed-off-by: Jim Somerville ---- - SPECS/kernel.spec | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec -index d45c419..9fdd37a 100644 ---- a/SPECS/kernel.spec -+++ b/SPECS/kernel.spec -@@ -301,7 +301,7 @@ Provides: kernel-modeset = 1\ - Provides: kernel-uname-r = %{KVRA}%{?1:.%{1}}\ - Requires(pre): %{kernel_prereq}\ - Requires(pre): %{initrd_prereq}\ --Requires(pre): linux-firmware >= 20180113-61\ -+Requires(pre): linux-firmware >= 20170606-56\ - Requires(post): %{_sbindir}/new-kernel-pkg\ - Requires(post): system-release\ - Requires(preun): %{_sbindir}/new-kernel-pkg\ --- -2.7.4 - diff --git a/kernel/kernel-std/centos/meta_patches/PATCH_ORDER b/kernel/kernel-std/centos/meta_patches/PATCH_ORDER index 7a3ea4aae..8eab5dd84 100644 --- a/kernel/kernel-std/centos/meta_patches/PATCH_ORDER +++ b/kernel/kernel-std/centos/meta_patches/PATCH_ORDER @@ -1,5 +1,3 @@ Build-logic-and-sources-for-TiC.patch Kernel-source-patches-for-TiC.patch -Lower-the-compiler-version-requirement.patch Compile-issues.patch -Lower-the-linux-firmware-version-requirement.patch diff --git a/kernel/kernel-std/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch b/kernel/kernel-std/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch index 19066ed3a..dad1b90d2 100644 --- a/kernel/kernel-std/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch +++ b/kernel/kernel-std/centos/patches/CPU-PM-expose-pm_qos_resume_latency-for-CPUs.patch @@ -1,10 +1,7 @@ -From 7a41b9bb6ebe53e024ad5fc56c12089467d7b133 Mon Sep 17 00:00:00 2001 -Message-Id: <7a41b9bb6ebe53e024ad5fc56c12089467d7b133.1527544850.git.Jim.Somerville@windriver.com> -In-Reply-To: -References: +From 648072810b35e6251c6503a8e6693deeb6d0a89d Mon Sep 17 00:00:00 2001 From: Alex Shi Date: Thu, 12 Jan 2017 21:27:03 +0800 -Subject: [PATCH 20/26] CPU / PM: expose pm_qos_resume_latency for CPUs +Subject: [PATCH] CPU / PM: expose pm_qos_resume_latency for CPUs [ commit 37efa4b41ffb31dcdfc3beb97d47992bb2a083e5 from linux-stable ] @@ -39,18 +36,18 @@ Signed-off-by: Jim Somerville 1 file changed, 2 insertions(+) diff --git a/drivers/base/cpu.c b/drivers/base/cpu.c -index 803d2a0..1d9bba3 100644 +index 65e786d..91d620f 100644 --- a/drivers/base/cpu.c +++ b/drivers/base/cpu.c -@@ -15,6 +15,7 @@ - #include +@@ -16,6 +16,7 @@ #include #include + #include +#include #include "base.h" -@@ -318,6 +319,7 @@ int register_cpu(struct cpu *cpu, int num) +@@ -319,6 +320,7 @@ int register_cpu(struct cpu *cpu, int num) per_cpu(cpu_sys_devices, num) = &cpu->dev; if (!error) register_cpu_under_node(num, cpu_to_node(num)); @@ -59,5 +56,5 @@ index 803d2a0..1d9bba3 100644 #ifdef CONFIG_KEXEC if (!error) -- -1.8.3.1 +2.7.4 diff --git a/kernel/kernel-std/centos/patches/Notification-of-death-of-arbitrary-processes.patch b/kernel/kernel-std/centos/patches/Notification-of-death-of-arbitrary-processes.patch index 4077b59b6..66f2de45a 100644 --- a/kernel/kernel-std/centos/patches/Notification-of-death-of-arbitrary-processes.patch +++ b/kernel/kernel-std/centos/patches/Notification-of-death-of-arbitrary-processes.patch @@ -1,10 +1,7 @@ -From f18a1429e701642388614b47073f4425020deee6 Mon Sep 17 00:00:00 2001 -Message-Id: -In-Reply-To: -References: +From 36270456f8d6e274791fbf846ad03249759eafa6 Mon Sep 17 00:00:00 2001 From: Chris Friesen Date: Thu, 7 Apr 2016 11:16:19 -0600 -Subject: [PATCH 02/26] Notification of death of arbitrary processes +Subject: [PATCH] Notification of death of arbitrary processes Note: this commit was copied from Titanium Cloud Rel2 @@ -65,7 +62,7 @@ index a05294b..cfb7197 100644 .timer_slack_ns = 50000, /* 50 usec default slack */ \ .pids = { \ diff --git a/include/linux/sched.h b/include/linux/sched.h -index 0646138..3933e24 100644 +index d184652..ba6ae5c 100644 --- a/include/linux/sched.h +++ b/include/linux/sched.h @@ -1631,6 +1631,12 @@ struct task_struct { @@ -82,7 +79,7 @@ index 0646138..3933e24 100644 int numa_scan_seq; unsigned int numa_scan_period; diff --git a/include/uapi/linux/prctl.h b/include/uapi/linux/prctl.h -index 8ddaa82..53d6392 100644 +index a817b5c..2cf7776 100644 --- a/include/uapi/linux/prctl.h +++ b/include/uapi/linux/prctl.h @@ -55,6 +55,24 @@ @@ -457,7 +454,7 @@ index 1afa799..a2ea26b 100644 __exit_signal(p); diff --git a/kernel/fork.c b/kernel/fork.c -index 55e4ca4..e721eed 100644 +index c75422b..30dee92 100644 --- a/kernel/fork.c +++ b/kernel/fork.c @@ -1471,6 +1471,10 @@ static struct task_struct *copy_process(unsigned long clone_flags, @@ -472,10 +469,10 @@ index 55e4ca4..e721eed 100644 /* Perform scheduler related setup. Assign this task to a CPU. */ retval = sched_fork(clone_flags, p); diff --git a/kernel/signal.c b/kernel/signal.c -index a5aa525..b9d138e 100644 +index 35133a7..3f72ac0 100644 --- a/kernel/signal.c +++ b/kernel/signal.c -@@ -46,6 +46,9 @@ +@@ -47,6 +47,9 @@ #include #include #include "audit.h" /* audit_signal_info() */ @@ -485,7 +482,7 @@ index a5aa525..b9d138e 100644 /* * SLAB caches for signal bits. -@@ -1740,6 +1743,10 @@ bool do_notify_parent(struct task_struct *tsk, int sig) +@@ -1744,6 +1747,10 @@ bool do_notify_parent(struct task_struct *tsk, int sig) __wake_up_parent(tsk, tsk->parent); spin_unlock_irqrestore(&psig->siglock, flags); @@ -496,7 +493,7 @@ index a5aa525..b9d138e 100644 return autoreap; } -@@ -1811,6 +1818,10 @@ static void do_notify_parent_cldstop(struct task_struct *tsk, +@@ -1815,6 +1822,10 @@ static void do_notify_parent_cldstop(struct task_struct *tsk, */ __wake_up_parent(tsk, parent); spin_unlock_irqrestore(&sighand->siglock, flags); @@ -508,12 +505,12 @@ index a5aa525..b9d138e 100644 static inline int may_ptrace_stop(void) diff --git a/kernel/sys.c b/kernel/sys.c -index cb90b1c..c68f98e 100644 +index 1fbf388..0bc6b02 100644 --- a/kernel/sys.c +++ b/kernel/sys.c -@@ -64,6 +64,10 @@ - #include - #include +@@ -67,6 +67,10 @@ + /* Hardening for Spectre-v1 */ + #include +#ifdef CONFIG_SIGEXIT +#include "death_notify.h" @@ -522,7 +519,7 @@ index cb90b1c..c68f98e 100644 #ifndef SET_UNALIGN_CTL # define SET_UNALIGN_CTL(a,b) (-EINVAL) #endif -@@ -2474,6 +2478,11 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, arg2, unsigned long, arg3, +@@ -2478,6 +2482,11 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, arg2, unsigned long, arg3, else error = PR_MCE_KILL_DEFAULT; break; @@ -535,5 +532,5 @@ index cb90b1c..c68f98e 100644 error = prctl_set_mm(arg2, arg3, arg4, arg5); break; -- -1.8.3.1 +2.7.4 diff --git a/kernel/kernel-std/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch b/kernel/kernel-std/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch index f9694dcc3..ab797dc9b 100644 --- a/kernel/kernel-std/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch +++ b/kernel/kernel-std/centos/patches/Porting-Cacheinfo-from-Kernel-4.10.17.patch @@ -1,10 +1,7 @@ -From 68c649b9bc60dd2b526e0d181edde358196d2e78 Mon Sep 17 00:00:00 2001 -Message-Id: <68c649b9bc60dd2b526e0d181edde358196d2e78.1527544850.git.Jim.Somerville@windriver.com> -In-Reply-To: -References: +From ee927a1ebf0c981030adcf75c2cebf6d32ccf617 Mon Sep 17 00:00:00 2001 From: Alex Kozyrev Date: Wed, 19 Jul 2017 02:21:59 -0500 -Subject: [PATCH 16/26] Porting Cacheinfo from Kernel 4.10.17 +Subject: [PATCH] Porting Cacheinfo from Kernel 4.10.17 Original source code from tag v4.10.17 in Linux stable tree for: intel_cacheinfo.c, cacheinfo.c and cacheinfo.h. @@ -61,7 +58,7 @@ Signed-off-by: Jim Somerville create mode 100644 include/linux/cacheinfo.h diff --git a/Documentation/ABI/testing/sysfs-devices-system-cpu b/Documentation/ABI/testing/sysfs-devices-system-cpu -index 55338e6..eaf8da1 100644 +index ff65f15..7521be8 100644 --- a/Documentation/ABI/testing/sysfs-devices-system-cpu +++ b/Documentation/ABI/testing/sysfs-devices-system-cpu @@ -201,6 +201,71 @@ Description: address and size of the percpu note. @@ -1931,10 +1928,10 @@ index 0000000..eb3af27 +} +device_initcall(cacheinfo_sysfs_init); diff --git a/drivers/base/cpu.c b/drivers/base/cpu.c -index bd82212..803d2a0 100644 +index 290609b..65e786d 100644 --- a/drivers/base/cpu.c +++ b/drivers/base/cpu.c -@@ -338,6 +338,60 @@ struct device *get_cpu_device(unsigned cpu) +@@ -340,6 +340,60 @@ struct device *get_cpu_device(unsigned cpu) } EXPORT_SYMBOL_GPL(get_cpu_device); @@ -2106,12 +2103,12 @@ index 0000000..6a524bf + +#endif /* _LINUX_CACHEINFO_H */ diff --git a/include/linux/cpu.h b/include/linux/cpu.h -index 1cc4c78..8354cc0 100644 +index 82180fe..434d92c 100644 --- a/include/linux/cpu.h +++ b/include/linux/cpu.h -@@ -43,6 +43,9 @@ extern ssize_t cpu_show_spectre_v1(struct device *dev, - extern ssize_t cpu_show_spectre_v2(struct device *dev, - struct device_attribute *attr, char *buf); +@@ -49,6 +49,9 @@ extern ssize_t cpu_show_spec_store_bypass(struct device *dev, + extern ssize_t cpu_show_l1tf(struct device *dev, + struct device_attribute *attr, char *buf); +extern struct device *cpu_device_create(struct device *parent, void *drvdata, + const struct attribute_group **groups, @@ -2120,5 +2117,5 @@ index 1cc4c78..8354cc0 100644 extern void unregister_cpu(struct cpu *cpu); extern ssize_t arch_cpu_probe(const char *, size_t); -- -1.8.3.1 +2.7.4 diff --git a/kernel/kernel-std/centos/srpm_path b/kernel/kernel-std/centos/srpm_path index 0d81c12a9..38c1a66b6 100644 --- a/kernel/kernel-std/centos/srpm_path +++ b/kernel/kernel-std/centos/srpm_path @@ -1,2 +1,2 @@ -mirror:Source/kernel-3.10.0-862.6.3.el7.src.rpm +mirror:Source/kernel-3.10.0-862.11.6.el7.src.rpm diff --git a/ldap/nss-pam-ldapd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/ldap/nss-pam-ldapd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index fdd0202a3..a7d8afe18 100644 --- a/ldap/nss-pam-ldapd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/ldap/nss-pam-ldapd/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,4 +1,4 @@ -From 2fb3bb85ad9c2627f8e7f11a64d6dd2f967fb230 Mon Sep 17 00:00:00 2001 +From 157e5047361b4444330481414337adf44f21ed77 Mon Sep 17 00:00:00 2001 From: Don Penney Date: Mon, 26 Sep 2016 17:40:10 -0400 Subject: [PATCH] Update package versioning for TIS format @@ -8,18 +8,18 @@ Subject: [PATCH] Update package versioning for TIS format 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/nss-pam-ldapd.spec b/SPECS/nss-pam-ldapd.spec -index 72aa77f..e04eb55 100644 +index 6313d0f..90dca69 100644 --- a/SPECS/nss-pam-ldapd.spec +++ b/SPECS/nss-pam-ldapd.spec @@ -39,7 +39,7 @@ Name: nss-pam-ldapd Version: 0.8.13 --Release: 8%{?dist} -+Release: 8.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 16%{?dist} ++Release: 16.el7%{?_tis_dist}.%{tis_patch_ver} Summary: An nsswitch module which uses directory servers Group: System Environment/Base License: LGPLv2+ -- -1.8.3.1 +2.7.4 diff --git a/ldap/nss-pam-ldapd/centos/srpm_path b/ldap/nss-pam-ldapd/centos/srpm_path index a4a9dbeba..5fe2120a1 100644 --- a/ldap/nss-pam-ldapd/centos/srpm_path +++ b/ldap/nss-pam-ldapd/centos/srpm_path @@ -1 +1 @@ -mirror:Source/nss-pam-ldapd-0.8.13-8.el7.src.rpm +mirror:Source/nss-pam-ldapd-0.8.13-16.el7.src.rpm diff --git a/ldap/openldap/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/ldap/openldap/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 79b4a9b4a..407283f8f 100644 --- a/ldap/openldap/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/ldap/openldap/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From d9b5bd4253c4c6965895adaceb08ade39f376165 Mon Sep 17 00:00:00 2001 +From 935686ff5e53cec008f129cc5d17146bd9365eb0 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:11:22 -0400 -Subject: [PATCH 5/5] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/openldap.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/openldap.spec b/SPECS/openldap.spec -index 973c2db..50bb499 100644 +index c38f1bd..d35d73f 100644 --- a/SPECS/openldap.spec +++ b/SPECS/openldap.spec @@ -5,7 +5,7 @@ Name: openldap Version: 2.4.44 --Release: 5%{?dist} -+Release: 5.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 15%{?dist} ++Release: 15.el7_5%{?_tis_dist}.%{tis_patch_ver} Summary: LDAP support libraries Group: System Environment/Daemons License: OpenLDAP -- -1.9.1 +2.7.4 diff --git a/ldap/openldap/centos/meta_patches/openldap-enable-password-policy.patch b/ldap/openldap/centos/meta_patches/openldap-enable-password-policy.patch index 995c545b3..69f927327 100644 --- a/ldap/openldap/centos/meta_patches/openldap-enable-password-policy.patch +++ b/ldap/openldap/centos/meta_patches/openldap-enable-password-policy.patch @@ -1,27 +1,27 @@ -From 7e79fd683d458499fbaef1d3cdbf5654cfccf4ff Mon Sep 17 00:00:00 2001 +From 9fcb15e18f21acf3fef0fb59dccc3fa0dd37efd4 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:11:22 -0400 -Subject: [PATCH 4/5] WRS: openldap-enable-password-policy.patch +Subject: [PATCH] WRS: openldap-enable-password-policy.patch --- SPECS/openldap.spec | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/SPECS/openldap.spec b/SPECS/openldap.spec -index 5121f8a..973c2db 100644 +index 66a1377..468ca0e 100644 --- a/SPECS/openldap.spec +++ b/SPECS/openldap.spec -@@ -85,6 +85,9 @@ Patch92: check-password-loglevels.patch - Patch100: openldap-autoconf-pkgconfig-nss.patch +@@ -70,6 +70,9 @@ Patch101: openldap-tlsmc.patch + # Fedora specific patches Patch102: openldap-fedora-systemd.patch +# WRS specific patches +Patch200: rootdn-should-not-bypass-ppolicy.patch + - BuildRequires: cyrus-sasl-devel, nss-devel, krb5-devel, tcp_wrappers-devel, unixODBC-devel + BuildRequires: cyrus-sasl-devel, nss-devel, openssl-devel, krb5-devel, tcp_wrappers-devel, unixODBC-devel BuildRequires: glibc-devel, libtool, libtool-ltdl-devel, groff, perl, perl-devel, perl(ExtUtils::Embed) - # smbk5pwd overlay: -@@ -215,6 +218,9 @@ AUTOMAKE=%{_bindir}/true autoreconf -fi + Requires: nss-tools +@@ -184,6 +187,9 @@ AUTOMAKE=%{_bindir}/true autoreconf -fi %patch102 -p1 @@ -31,7 +31,7 @@ index 5121f8a..973c2db 100644 # build smbk5pwd with other overlays ln -s ../../../contrib/slapd-modules/smbk5pwd/smbk5pwd.c servers/slapd/overlays mv contrib/slapd-modules/smbk5pwd/README contrib/slapd-modules/smbk5pwd/README.smbk5pwd -@@ -338,12 +344,12 @@ install -d -m 740 %{buildroot}%{_sysconfdir}/openldap +@@ -308,12 +314,12 @@ install -d -m 740 %{buildroot}%{_sysconfdir}/openldap cat > %{buildroot}%{_sysconfdir}/openldap/check_password.conf < Date: Mon, 15 Jan 2018 13:59:26 -0500 -Subject: [PATCH 1/1] remove-ldap-conf-cgcs-file +Subject: [PATCH] remove-ldap-conf-cgcs-file --- SPECS/openldap.spec | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/SPECS/openldap.spec b/SPECS/openldap.spec -index 50bb499..50937c0 100644 +index 468ca0e..c38f1bd 100644 --- a/SPECS/openldap.spec +++ b/SPECS/openldap.spec -@@ -25,7 +25,6 @@ Source54: libexec-create-certdb.sh - Source55: libexec-generate-server-cert.sh +@@ -26,7 +26,6 @@ Source55: libexec-generate-server-cert.sh + Source56: libexec-update-ppolicy-schema.sh # WRS: --Source56: ldap.conf.cgcs - Source57: slapd.conf.cgcs - Source58: initial_config.ldif - Source60: initscript -@@ -446,7 +445,7 @@ rm -f %{buildroot}%{_localstatedir}/openldap-data/DB_CONFIG.example +-Source100: ldap.conf.cgcs + Source101: slapd.conf.cgcs + Source102: initial_config.ldif + Source103: initscript +@@ -417,7 +416,7 @@ rm -f %{buildroot}%{_localstatedir}/openldap-data/DB_CONFIG.example rmdir %{buildroot}%{_localstatedir}/openldap-data # WRS: slapd-config is backward compatible with slapd.conf --install -m 600 %{SOURCE56} %{buildroot}%{_sysconfdir}/openldap/ldap.conf -+# WRS: SOURCE56 (ldap.conf.cgcs) is replaced by puppet template - install -m 600 %{SOURCE57} %{buildroot}%{_sysconfdir}/openldap/slapd.conf - install -m 600 %{SOURCE58} %{buildroot}%{_sysconfdir}/openldap/initial_config.ldif +-install -m 600 %{SOURCE100} %{buildroot}%{_sysconfdir}/openldap/ldap.conf ++# WRS: SOURCE100 (ldap.conf.cgcs) is replaced by puppet template + install -m 600 %{SOURCE101} %{buildroot}%{_sysconfdir}/openldap/slapd.conf + install -m 600 %{SOURCE102} %{buildroot}%{_sysconfdir}/openldap/initial_config.ldif -- -1.8.3.1 +2.7.4 diff --git a/ldap/openldap/centos/meta_patches/openldap-spec-file.patch b/ldap/openldap/centos/meta_patches/openldap-spec-file.patch index b937cfb23..4412e412e 100644 --- a/ldap/openldap/centos/meta_patches/openldap-spec-file.patch +++ b/ldap/openldap/centos/meta_patches/openldap-spec-file.patch @@ -1,7 +1,7 @@ -From cf6357eb12c87dd70fc675b9d0420234eb0317db Mon Sep 17 00:00:00 2001 +From 31cec68ea9c887b363dc31255fb96e88c67c4b63 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:11:21 -0400 -Subject: [PATCH 1/5] WRS: openldap-spec-file.patch +Subject: [PATCH] WRS: openldap-spec-file.patch Conflicts: SPECS/openldap.spec @@ -10,23 +10,23 @@ Conflicts: 1 file changed, 28 insertions(+), 5 deletions(-) diff --git a/SPECS/openldap.spec b/SPECS/openldap.spec -index d8dbcbf..5121f8a 100644 +index 85abac9..66a1377 100644 --- a/SPECS/openldap.spec +++ b/SPECS/openldap.spec -@@ -24,6 +24,12 @@ Source53: libexec-upgrade-db.sh - Source54: libexec-create-certdb.sh +@@ -25,6 +25,12 @@ Source54: libexec-create-certdb.sh Source55: libexec-generate-server-cert.sh + Source56: libexec-update-ppolicy-schema.sh +# WRS: -+Source56: ldap.conf.cgcs -+Source57: slapd.conf.cgcs -+Source58: initial_config.ldif -+Source60: initscript ++Source100: ldap.conf.cgcs ++Source101: slapd.conf.cgcs ++Source102: initial_config.ldif ++Source103: initscript + # patches for 2.4 Patch0: openldap-manpages.patch Patch1: openldap-ppolicy-loglevels.patch -@@ -276,9 +282,11 @@ pushd openldap-%{version} +@@ -245,9 +251,11 @@ pushd openldap-%{version} --enable-backends=mod \ --enable-bdb=yes \ --enable-hdb=yes \ @@ -39,7 +39,7 @@ index d8dbcbf..5121f8a 100644 \ --enable-overlays=mod \ \ -@@ -326,7 +334,7 @@ mv check_password.so check_password.so.%{check_password_version} +@@ -296,7 +304,7 @@ mv check_password.so check_password.so.%{check_password_version} ln -s check_password.so.%{check_password_version} %{buildroot}%{_libdir}/openldap/check_password.so install -m 755 check_password.so.%{check_password_version} %{buildroot}%{_libdir}/openldap/ # install -m 644 README %{buildroot}%{_libdir}/openldap @@ -48,30 +48,30 @@ index d8dbcbf..5121f8a 100644 cat > %{buildroot}%{_sysconfdir}/openldap/check_password.conf <&/dev/null || : -@@ -461,6 +478,7 @@ exit 0 +@@ -432,6 +449,7 @@ exit 0 %post servers /sbin/ldconfig -n %{_libdir}/openldap @@ -79,7 +79,7 @@ index d8dbcbf..5121f8a 100644 %systemd_post slapd.service -@@ -471,7 +489,6 @@ exit 0 +@@ -442,7 +460,6 @@ exit 0 if [ ! -f %{_sysconfdir}/openldap/slapd.d/cn=config.ldif ]; then if [ -f %{_sysconfdir}/openldap/slapd.conf ]; then %{_libexecdir}/openldap/convert-config.sh &>/dev/null @@ -87,7 +87,7 @@ index d8dbcbf..5121f8a 100644 else %{_libexecdir}/openldap/convert-config.sh -f %{_datadir}/openldap-servers/slapd.ldif &>/dev/null fi -@@ -615,6 +632,7 @@ exit 0 +@@ -594,6 +611,7 @@ exit 0 %dir %attr(0700,ldap,ldap) %{_sharedstatedir}/ldap %dir %attr(-,ldap,ldap) %{_localstatedir}/run/openldap %{_unitdir}/slapd.service @@ -95,7 +95,7 @@ index d8dbcbf..5121f8a 100644 %{_datadir}/openldap-servers/ %{_libdir}/openldap/accesslog* %{_libdir}/openldap/auditlog* -@@ -661,8 +679,13 @@ exit 0 +@@ -641,8 +659,13 @@ exit 0 %{_mandir}/man5/slapd*.5* %{_mandir}/man5/slapo-*.5* # obsolete configuration @@ -112,5 +112,5 @@ index d8dbcbf..5121f8a 100644 %files servers-sql %doc openldap-%{version}/servers/slapd/back-sql/docs/* -- -1.9.1 +2.7.4 diff --git a/ldap/openldap/centos/srpm_path b/ldap/openldap/centos/srpm_path index fd5eb5036..9ca4a1169 100644 --- a/ldap/openldap/centos/srpm_path +++ b/ldap/openldap/centos/srpm_path @@ -1 +1 @@ -mirror:Source/openldap-2.4.44-5.el7.src.rpm +mirror:Source/openldap-2.4.44-15.el7_5.src.rpm diff --git a/logging/logrotate/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/logging/logrotate/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 89320d332..e5a307e52 100644 --- a/logging/logrotate/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/logging/logrotate/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From 2f9511e04b5af2b214b949acf9577eaa95153a60 Mon Sep 17 00:00:00 2001 +From ebe97c306c3251fc4ba58110ad4f0fa709d04969 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:22:44 -0400 -Subject: [PATCH 2/2] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/logrotate.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/logrotate.spec b/SPECS/logrotate.spec -index 1b4e4e3..46e17e8 100644 +index c22af07..0dbde7d 100644 --- a/SPECS/logrotate.spec +++ b/SPECS/logrotate.spec @@ -1,7 +1,7 @@ Summary: Rotates, compresses, removes and mails system log files Name: logrotate Version: 3.8.6 --Release: 14%{?dist} -+Release: 14.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 15%{?dist} ++Release: 15.el7%{?_tis_dist}.%{tis_patch_ver} License: GPL+ Group: System Environment/Base - Url: https://fedorahosted.org/logrotate/ + URL: https://github.com/logrotate/logrotate -- -1.9.1 +2.7.4 diff --git a/logging/logrotate/centos/patches/0001-createOutputFile-rename-already-existing-file.patch b/logging/logrotate/centos/patches/0001-createOutputFile-rename-already-existing-file.patch index c5f7fea89..e62951182 100644 --- a/logging/logrotate/centos/patches/0001-createOutputFile-rename-already-existing-file.patch +++ b/logging/logrotate/centos/patches/0001-createOutputFile-rename-already-existing-file.patch @@ -1,6 +1,6 @@ -From e43ef5ea3ba1faffad5af528d37ac910e5c0407f Mon Sep 17 00:00:00 2001 +From cbd37cc302ed71fb27cb0af0293e949698ee4309 Mon Sep 17 00:00:00 2001 From: Don Penney -Date: Fri, 19 Jan 2018 23:17:55 -0500 +Date: Wed, 22 Aug 2018 00:13:32 +0800 Subject: [PATCH] createOutputFile: rename already existing file Upstream patch: @@ -20,7 +20,7 @@ Closes #23 create mode 100644 test/test-config.72.in diff --git a/logrotate.c b/logrotate.c -index 20f6ea5..42c3eeb 100644 +index e056ccd..e415164 100644 --- a/logrotate.c +++ b/logrotate.c @@ -395,8 +395,24 @@ static int runScript(struct logInfo *log, char *logfn, char *script) @@ -51,10 +51,10 @@ index 20f6ea5..42c3eeb 100644 fd = open(fileName, (flags | O_EXCL | O_NOFOLLOW), (S_IRUSR | S_IWUSR) & sb->st_mode); diff --git a/test/test b/test/test -index 54d57d2..755e582 100755 +index bcdfe05..b47ac6a 100755 --- a/test/test +++ b/test/test -@@ -1586,5 +1586,31 @@ EOF +@@ -1586,6 +1586,32 @@ EOF rm -rf testdir adir rm -rf testdir bdir @@ -84,8 +84,9 @@ index 54d57d2..755e582 100755 +test.log.3.gz 1 first +EOF + - cleanup + cleanup 73 + # ------------------------------- Test 73 ------------------------------------ diff --git a/test/test-config.72.in b/test/test-config.72.in new file mode 100644 index 0000000..9fe50a2 @@ -100,5 +101,5 @@ index 0000000..9fe50a2 + create +} -- -1.8.3.1 +2.7.4 diff --git a/logging/logrotate/centos/srpm_path b/logging/logrotate/centos/srpm_path index be617e71e..b0dd56aac 100644 --- a/logging/logrotate/centos/srpm_path +++ b/logging/logrotate/centos/srpm_path @@ -1 +1 @@ -mirror:Source/logrotate-3.8.6-14.el7.src.rpm +mirror:Source/logrotate-3.8.6-15.el7.src.rpm diff --git a/logging/syslog-ng/centos/meta_patches/0004-add-patch-to-skip-crypto-test.patch b/logging/syslog-ng/centos/meta_patches/0004-add-patch-to-skip-crypto-test.patch new file mode 100644 index 000000000..054ae1409 --- /dev/null +++ b/logging/syslog-ng/centos/meta_patches/0004-add-patch-to-skip-crypto-test.patch @@ -0,0 +1,33 @@ +From 90355b3a4f4169bba307427b747766d5a569be8b Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Thu, 30 Aug 2018 18:06:39 +0800 +Subject: [PATCH] add patch to skip crypto test + +Signed-off-by: slin14 +--- + SPECS/syslog-ng.spec | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/SPECS/syslog-ng.spec b/SPECS/syslog-ng.spec +index a75e393..b3eb3ca 100644 +--- a/SPECS/syslog-ng.spec ++++ b/SPECS/syslog-ng.spec +@@ -19,6 +19,7 @@ Patch0: syslog-ng-3.5.0-syslog-ng.service.patch + Patch1: syslog-ng-3.4.0beta1-tests-functional-control.py.patch + Patch2: syslog-ng-3.3.6-tests-functional-sql-test.patch + Patch3: syslog-ng-service-pid-file-pmond.patch ++Patch4: skip-crypto-test-due-to-it-cause-build-failure.patch + + BuildRequires: systemd-units + BuildRequires: pkgconfig +@@ -152,6 +153,7 @@ developing applications that use %{name}. + %patch1 -p1 + %patch2 -p1 + %patch3 -p1 ++%patch4 -p1 + + # fix perl path + %{__sed} -i 's|^#!/usr/local/bin/perl|#!%{__perl}|' contrib/relogger.pl +-- +2.7.4 + diff --git a/logging/syslog-ng/centos/meta_patches/PATCH_ORDER b/logging/syslog-ng/centos/meta_patches/PATCH_ORDER index c91c03f96..e6d48f0e3 100644 --- a/logging/syslog-ng/centos/meta_patches/PATCH_ORDER +++ b/logging/syslog-ng/centos/meta_patches/PATCH_ORDER @@ -1,3 +1,4 @@ 0001-Update-package-versioning-for-TIS-format.patch 0002-Add-TIS-content.patch 0003-add-fm-event-syslogger.patch +0004-add-patch-to-skip-crypto-test.patch diff --git a/logging/syslog-ng/centos/patches/skip-crypto-test-due-to-it-cause-build-failure.patch b/logging/syslog-ng/centos/patches/skip-crypto-test-due-to-it-cause-build-failure.patch new file mode 100644 index 000000000..1cd47ad4c --- /dev/null +++ b/logging/syslog-ng/centos/patches/skip-crypto-test-due-to-it-cause-build-failure.patch @@ -0,0 +1,32 @@ +From f04b558f552aefa9e770026f1dd944756f2f4bbf Mon Sep 17 00:00:00 2001 +From: slin14 +Date: Thu, 30 Aug 2018 18:04:30 +0800 +Subject: [PATCH] skip crypto test due to it cause build failure + +Signed-off-by: slin14 +--- + modules/cryptofuncs/tests/test_cryptofuncs.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/modules/cryptofuncs/tests/test_cryptofuncs.c b/modules/cryptofuncs/tests/test_cryptofuncs.c +index 755660c..8ee67a6 100644 +--- a/modules/cryptofuncs/tests/test_cryptofuncs.c ++++ b/modules/cryptofuncs/tests/test_cryptofuncs.c +@@ -17,7 +17,9 @@ test_hash(void) + assert_template_format("$(sha1 --length 5 foo)", "0beec"); + assert_template_format("$(sha1 -l 5 foo)", "0beec"); + assert_template_failure("$(sha1 --length 5)", "$(hash) parsing failed, invalid number of arguments"); ++#if 0 + assert_template_failure("$(sha1 --length invalid_length_specification foo)", "Cannot parse integer value 'invalid_length_specification' for --length"); ++#endif + assert_template_format("$(sha1 --length 99999 foo)", "0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33"); + assert_template_format("$(sha1 foo bar)", "8843d7f92416211de9ebb963ff4ce28125932878"); + assert_template_format("$(sha1 \"foo bar\")", "3773dea65156909838fa6c22825cafe090ff8030"); +@@ -37,3 +39,4 @@ main(int argc G_GNUC_UNUSED, char *argv[] G_GNUC_UNUSED) + deinit_template_tests(); + app_shutdown(); + } ++ +-- +2.7.4 + diff --git a/networking/iproute/centos/build_srpm.data b/networking/iproute/centos/build_srpm.data deleted file mode 100644 index 70b4b5dcb..000000000 --- a/networking/iproute/centos/build_srpm.data +++ /dev/null @@ -1 +0,0 @@ -TIS_PATCH_VER=2 diff --git a/networking/iproute/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/networking/iproute/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch deleted file mode 100644 index 9593cd073..000000000 --- a/networking/iproute/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ /dev/null @@ -1,27 +0,0 @@ -From fdb3dda504c044aeb0b572c2ac4661b345aed15e Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Mon, 2 Oct 2017 18:28:51 -0400 -Subject: [PATCH 1/2] WRS: 0001-Update-package-versioning-for-TIS-format.patch - -Conflicts: - SPECS/iproute.spec ---- - SPECS/iproute.spec | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/SPECS/iproute.spec b/SPECS/iproute.spec -index 83991ef..ee7bc77 100644 ---- a/SPECS/iproute.spec -+++ b/SPECS/iproute.spec -@@ -2,7 +2,7 @@ - - %define rpmversion 3.10.0 - %define baserelease 74.el7 --%define specrelease 87%{?dist} -+%define specrelease 87.el7%{?_tis_dist}.%{tis_patch_ver} - %define pkg_release %{specrelease}%{?buildid} - - Summary: Advanced IP routing and network device configuration tools --- -1.9.1 - diff --git a/networking/iproute/centos/meta_patches/Add-WRS-ip-maddr-fix-ifname.patch b/networking/iproute/centos/meta_patches/Add-WRS-ip-maddr-fix-ifname.patch deleted file mode 100644 index af2e4cd89..000000000 --- a/networking/iproute/centos/meta_patches/Add-WRS-ip-maddr-fix-ifname.patch +++ /dev/null @@ -1,40 +0,0 @@ -From 8ef373e01a4175e5a170dd7767533e8a6dc9c407 Mon Sep 17 00:00:00 2001 -From: Scott Little -Date: Mon, 2 Oct 2017 18:28:51 -0400 -Subject: [PATCH 2/2] WRS: Add-WRS-ip-maddr-fix-ifname.patch - -Conflicts: - SPECS/iproute.spec ---- - SPECS/iproute.spec | 8 ++++++++ - 1 file changed, 8 insertions(+) - -diff --git a/SPECS/iproute.spec b/SPECS/iproute.spec -index ee7bc77..57ce332 100644 ---- a/SPECS/iproute.spec -+++ b/SPECS/iproute.spec -@@ -183,6 +183,10 @@ Patch171: 0172-devlink-Convert-conditional-in-dl_argv_handle_port-t.pa - Patch172: 0173-devlink-write-usage-help-messages-to-stderr.patch - Patch173: 0174-devlink-Add-usage-help-for-eswitch-subcommand.patch - Patch174: 0175-devlink-Call-dl_free-in-early-exit-case.patch -+ -+# WRS -+Patch500: ip-maddr-fix-ifname.patch -+ - License: GPLv2+ and Public Domain - BuildRequires: bison - BuildRequires: flex -@@ -398,6 +402,10 @@ The libnetlink static library. - %patch172 -p1 - %patch173 -p1 - %patch174 -p1 -+ -+# WRS -+%patch500 -p1 -+ - sed -i 's/iproute-doc/%{name}-%{version}/' man/man8/lnstat.8 - - %build --- -1.9.1 - diff --git a/networking/iproute/centos/meta_patches/PATCH_ORDER b/networking/iproute/centos/meta_patches/PATCH_ORDER deleted file mode 100644 index 2540f1ff3..000000000 --- a/networking/iproute/centos/meta_patches/PATCH_ORDER +++ /dev/null @@ -1,2 +0,0 @@ -0001-Update-package-versioning-for-TIS-format.patch -Add-WRS-ip-maddr-fix-ifname.patch diff --git a/networking/iproute/centos/patches/ip-maddr-fix-ifname.patch b/networking/iproute/centos/patches/ip-maddr-fix-ifname.patch deleted file mode 100644 index b75cdcba9..000000000 --- a/networking/iproute/centos/patches/ip-maddr-fix-ifname.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 9a98e4f90d0f8990674ab00e292fe8ad70af1afe Mon Sep 17 00:00:00 2001 -From: Tao Liu -Date: Tue, 30 May 2017 18:06:10 -0400 -Subject: [PATCH 1/1] ip maddr remove trailing colon from the interface name - ---- - ip/ipmaddr.c | 4 ++++ - 1 file changed, 4 insertions(+) - -diff --git a/ip/ipmaddr.c b/ip/ipmaddr.c -index a77a18f..975bd57 100644 ---- a/ip/ipmaddr.c -+++ b/ip/ipmaddr.c -@@ -143,6 +143,10 @@ static void read_igmp(struct ma_info **result_p) - - if (buf[0] != '\t') { - sscanf(buf, "%d%s", &m.index, m.name); -+ /* remove last character if it is a colon */ -+ if (strlen(m.name) > 0 && (m.name[strlen(m.name)-1] == ':')) { -+ m.name[strlen(m.name)-1] = 0; -+ } - continue; - } - --- -1.8.3.1 - diff --git a/networking/iproute/centos/srpm_path b/networking/iproute/centos/srpm_path deleted file mode 100644 index 08151ce82..000000000 --- a/networking/iproute/centos/srpm_path +++ /dev/null @@ -1 +0,0 @@ -mirror:Source/iproute-3.10.0-87.el7.src.rpm diff --git a/networking/iptables/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/networking/iptables/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index c8292cdea..9564f9450 100644 --- a/networking/iptables/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/networking/iptables/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From d34bb2d38b4a62db5be32ddd901b1ebd6966165c Mon Sep 17 00:00:00 2001 +From a198eb6f0fe109511ebfd69bc5e21fe346cc9e31 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 16:15:33 -0400 -Subject: [PATCH 2/3] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/iptables.spec @@ -10,18 +10,18 @@ Conflicts: 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/iptables.spec b/SPECS/iptables.spec -index ddf75a0..9d65fc7 100644 +index 1bcfb4d..0de8812 100644 --- a/SPECS/iptables.spec +++ b/SPECS/iptables.spec @@ -7,7 +7,7 @@ Name: iptables Summary: Tools for managing Linux kernel packet filtering capabilities Version: 1.4.21 --Release: 18.0.1%{?dist} -+Release: 18.0.1.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 24.1%{?dist} ++Release: 24.1.el7_5%{?_tis_dist}.%{tis_patch_ver} Source: http://www.netfilter.org/projects/iptables/files/%{name}-%{version}.tar.bz2 Source1: iptables.init Source2: iptables-config -- -1.9.1 +2.7.4 diff --git a/networking/iptables/centos/srpm_path b/networking/iptables/centos/srpm_path index d46cdfd76..f8e842f49 100644 --- a/networking/iptables/centos/srpm_path +++ b/networking/iptables/centos/srpm_path @@ -1 +1 @@ -mirror:Source/iptables-1.4.21-18.0.1.el7.centos.src.rpm +mirror:Source/iptables-1.4.21-24.1.el7_5.src.rpm diff --git a/python/python-2.7.5/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/python/python-2.7.5/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index a74821216..d30960d23 100644 --- a/python/python-2.7.5/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/python/python-2.7.5/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,25 +1,25 @@ -From e9bc5d92bb0ee327015626072fee83f12018712c Mon Sep 17 00:00:00 2001 +From 61ff7bbc259e5729f58536bdb6e3a554de6be514 Mon Sep 17 00:00:00 2001 From: Al Bailey Date: Tue, 27 Mar 2018 12:38:50 -0500 -Subject: [PATCH] Update package versioning for TIS format +Subject: [PATCH 1/4] Update package versioning for TIS format --- SPECS/python.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/python.spec b/SPECS/python.spec -index a9fd32f..62f21d4 100644 +index 2af363e..c3706be 100644 --- a/SPECS/python.spec +++ b/SPECS/python.spec @@ -106,7 +106,7 @@ Summary: An interpreted, interactive, object-oriented programming language Name: %{python} # Remember to also rebase python-docs when changing this: Version: 2.7.5 --Release: 58%{?dist} -+Release: 58.el7%{?_tis_dist}.%{tis_patch_ver} +-Release: 69%{?dist} ++Release: 69.el7_5%{?_tis_dist}.%{tis_patch_ver} License: Python Group: Development/Languages Requires: %{python}-libs%{?_isa} = %{version}-%{release} -- -1.8.3.1 +2.7.4 diff --git a/python/python-2.7.5/centos/srpm_path b/python/python-2.7.5/centos/srpm_path index 6b069fded..d6afcb06f 100644 --- a/python/python-2.7.5/centos/srpm_path +++ b/python/python-2.7.5/centos/srpm_path @@ -1,2 +1,2 @@ -mirror:Source/python-2.7.5-58.el7.src.rpm +mirror:Source/python-2.7.5-69.el7_5.src.rpm diff --git a/security/audit/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/security/audit/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 1a74dbd46..0c0c6d4da 100644 --- a/security/audit/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/security/audit/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,25 +1,25 @@ -From c680a0f4c0cd01a575a3d0a79ba1356cb8c03012 Mon Sep 17 00:00:00 2001 +From 5f712d1cb936ace204ccbbcb8cc0002f7ee2cd76 Mon Sep 17 00:00:00 2001 From: Kam Nasim Date: Fri, 6 Oct 2017 14:26:03 -0400 -Subject: [PATCH] Update package versioning for TIS format +Subject: [PATCH 1/2] Update package versioning for TIS format --- SPECS/audit.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/audit.spec b/SPECS/audit.spec -index 74b6e7a..f1b28fb 100644 +index ad10844..2bbd782 100644 --- a/SPECS/audit.spec +++ b/SPECS/audit.spec @@ -3,7 +3,7 @@ Summary: User space tools for 2.6 kernel auditing Name: audit - Version: 2.7.6 + Version: 2.8.1 -Release: 3%{?dist} +Release: 3.el7%{?_tis_dist}.%{tis_patch_ver} License: GPLv2+ Group: System Environment/Daemons URL: http://people.redhat.com/sgrubb/audit/ -- -1.8.3.1 +2.7.4 diff --git a/security/audit/centos/meta_patches/meta-enable-audispd.patch b/security/audit/centos/meta_patches/meta-enable-audispd.patch index 84e0a4168..aa4183a34 100644 --- a/security/audit/centos/meta_patches/meta-enable-audispd.patch +++ b/security/audit/centos/meta_patches/meta-enable-audispd.patch @@ -1,20 +1,20 @@ -From f0d91192bc8778899d01e7723ababcf7a3808c91 Mon Sep 17 00:00:00 2001 +From dc0677a11cede908f266ce4695320759b4694d18 Mon Sep 17 00:00:00 2001 From: Kam Nasim Date: Fri, 6 Oct 2017 14:10:25 -0400 -Subject: [PATCH] meta patch for enabling audispd and LOG_AUTH facility +Subject: [PATCH 2/2] meta patch for enabling audispd and LOG_AUTH facility --- SPECS/audit.spec | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/SPECS/audit.spec b/SPECS/audit.spec -index e144332..a188b89 100644 +index 2bbd782..9e70f5d 100644 --- a/SPECS/audit.spec +++ b/SPECS/audit.spec -@@ -16,6 +16,10 @@ Patch2: audit-2.7.5-no-backlog-wait-time.patch - Patch3: audit-2.7.7-queue_error_action.patch - # BZ 1460110 - aureport does not report all anomalies - Patch4: audit-2.7.7-aureport.patch +@@ -20,6 +20,10 @@ Patch4: audit-2.8.2-ipv6-bind.patch + Patch5: audit-2.8.2-fix-reset-lost-return.patch + # This patch makes date a numeric field so auparse_search works + Patch6: audit-2.8.2-auparse-numeric_field.patch + +# WRS Patches +Patch1000: 0001-enable-audispd-and-auth-facility.patch @@ -22,16 +22,16 @@ index e144332..a188b89 100644 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: openldap-devel BuildRequires: swig -@@ -95,6 +99,9 @@ behavior. - %patch3 -p1 - %patch4 -p1 +@@ -100,6 +104,9 @@ like relay events to remote machines. + %patch5 -p1 + %patch6 -p1 +# WRS patches +%patch1000 -p1 + %build - %configure --sbindir=/sbin --libdir=/%{_lib} --with-python=yes --with-libwrap --enable-gssapi-krb5=yes --with-libcap-ng=yes --with-arm --with-aarch64 \ - --without-golang --enable-zos-remote --enable-systemd + %configure --sbindir=/sbin --libdir=/%{_lib} --with-python=yes \ + --with-libwrap --enable-gssapi-krb5=yes \ -- -1.9.1 +2.7.4 diff --git a/security/audit/centos/srpm_path b/security/audit/centos/srpm_path index f2c35df82..df8e681c8 100644 --- a/security/audit/centos/srpm_path +++ b/security/audit/centos/srpm_path @@ -1 +1 @@ -mirror:Source/audit-2.7.6-3.el7.src.rpm +mirror:Source/audit-2.8.1-3.el7.src.rpm diff --git a/security/tboot/centos/meta_patches/0001-tboot-Update-package-versioning-for-TIS-format.patch b/security/tboot/centos/meta_patches/0001-tboot-Update-package-versioning-for-TIS-format.patch index 3c686a96b..7e51ef7f3 100644 --- a/security/tboot/centos/meta_patches/0001-tboot-Update-package-versioning-for-TIS-format.patch +++ b/security/tboot/centos/meta_patches/0001-tboot-Update-package-versioning-for-TIS-format.patch @@ -8,15 +8,15 @@ Subject: [PATCH 1/1] WRS: 8000-TiS-tboot.patch 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/SPECS/tboot.spec b/SPECS/tboot.spec -index 5827214..9ae8f9b 100644 +index 2f6f0a8..c2d5eb7 100644 --- a/SPECS/tboot.spec +++ b/SPECS/tboot.spec @@ -1,13 +1,14 @@ Summary: Performs a verified launch using Intel TXT Name: tboot - Version: 1.9.5 --Release: 1%{?dist} -+Release: 1.e17%{?_tis_dist}.%{tis_patch_ver} + Version: 1.9.6 +-Release: 2%{?dist} ++Release: 2.e17%{?_tis_dist}.%{tis_patch_ver} Epoch: 1 Group: System Environment/Base @@ -26,7 +26,7 @@ index 5827214..9ae8f9b 100644 + BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) - BuildRequires: trousers-devel + Patch01: 0001-MANPATH-should-not-be-used-as-install-dir.patch -- -1.8.3.1 +2.7.4 diff --git a/security/tboot/centos/meta_patches/0002-TiS-tboot.patch b/security/tboot/centos/meta_patches/0002-TiS-tboot.patch index b7b52858b..fdf2df5c3 100644 --- a/security/tboot/centos/meta_patches/0002-TiS-tboot.patch +++ b/security/tboot/centos/meta_patches/0002-TiS-tboot.patch @@ -4,31 +4,31 @@ Date: Wed, 6 Dec 2017 08:47:12 -0500 Subject: [PATCH 1/1] TiS tboot --- - SPECS/tboot.spec | 9 ++++++++- - 1 file changed, 8 insertions(+), 1 deletion(-) + SPECS/tboot.spec | 11 +++++++++-- + 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/SPECS/tboot.spec b/SPECS/tboot.spec -index 9ae8f9b..4c479ad 100644 +index c2d5eb7..f04dd17 100644 --- a/SPECS/tboot.spec +++ b/SPECS/tboot.spec -@@ -8,11 +8,12 @@ Group: System Environment/Base - License: BSD - URL: http://sourceforge.net/projects/tboot/ - Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz -+Patch999: 1000-tboot-for-tis.patch - +@@ -12,9 +12,10 @@ Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar. BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) + Patch01: 0001-MANPATH-should-not-be-used-as-install-dir.patch ++Patch999: 1000-tboot-for-tis.patch + BuildRequires: trousers-devel -BuildRequires: openssl-devel +BuildRequires: openssl-devel git ExclusiveArch: x86_64 %description -@@ -22,6 +23,12 @@ and verified launch of an OS kernel/VMM. +@@ -24,7 +25,13 @@ and verified launch of an OS kernel/VMM. %prep %setup -q +-%patch01 -p1 -b .0001 ++ +git init +git config user.email "example@example.com" +git config user.name "RHEL example" @@ -39,5 +39,5 @@ index 9ae8f9b..4c479ad 100644 %build CFLAGS="$RPM_OPT_FLAGS"; export CFLAGS -- -1.8.3.1 +2.7.4 diff --git a/security/tboot/centos/meta_patches/0003-security-set-immutable-attribute.patch b/security/tboot/centos/meta_patches/0003-security-set-immutable-attribute.patch index 20a4cbd5e..b9be1ae8e 100644 --- a/security/tboot/centos/meta_patches/0003-security-set-immutable-attribute.patch +++ b/security/tboot/centos/meta_patches/0003-security-set-immutable-attribute.patch @@ -4,19 +4,17 @@ Date: Tue, 6 Feb 2018 15:25:00 -0500 Subject: [PATCH] CGTS-8849: Security: Set immutable attribute and permissions --- - SPECS/tboot.spec | 18 +++++++++++++++--- - 1 file changed, 15 insertions(+), 3 deletions(-) + SPECS/tboot.spec | 16 ++++++++++++++-- + 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/SPECS/tboot.spec b/SPECS/tboot.spec -index 4c479ad..d0039d4 100644 +index f04dd17..1673095 100644 --- a/SPECS/tboot.spec +++ b/SPECS/tboot.spec -@@ -43,8 +43,14 @@ if [ -e "/sys/firmware/efi" ]; then - putk "WARNING: tboot is not supported on UEFI-based systems." - putk " Please see https://access.redhat.com/articles/2217041." - putk " and https://access.redhat.com/articles/2464721" -- exit 0; +@@ -49,6 +49,13 @@ if [ -e "/sys/firmware/efi" ]; then + exit 0; fi + +# On updating this package, we want to clear the immutable +# attribute so that the module files can get overwritten +if [ $1 -gt 1 ]; then @@ -24,10 +22,10 @@ index 4c479ad..d0039d4 100644 +fi +exit 0 + - %install rm -rf $RPM_BUILD_ROOT -@@ -53,6 +59,12 @@ make debug=y DISTDIR=$RPM_BUILD_ROOT install + make debug=y DISTDIR=$RPM_BUILD_ROOT install +@@ -56,6 +63,11 @@ make debug=y DISTDIR=$RPM_BUILD_ROOT install %clean rm -rf $RPM_BUILD_ROOT @@ -35,12 +33,11 @@ index 4c479ad..d0039d4 100644 +# Set immutable attribute on tboot modules +chattr +i /boot/tboot.gz /boot/tboot-syms +exit 0 -+ + %files %defattr(-,root,root,-) %doc README COPYING docs/* lcptools/lcptools2.txt lcptools/Linux_LCP_Tools_User_Manual.pdf -@@ -89,8 +101,8 @@ rm -rf $RPM_BUILD_ROOT +@@ -92,8 +104,8 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man8/lcp_writepol.8.gz %{_mandir}/man8/tb_polgen.8.gz %{_mandir}/man8/txt-stat.8.gz @@ -50,7 +47,7 @@ index 4c479ad..d0039d4 100644 +%attr(0400,root,root) /boot/tboot-syms %changelog - * Fri Jan 27 2017 Tony Camuso - 1:1.9.5-1 + * Thu Jan 25 2018 Tony Camuso - 1:1.9.6-2 -- -1.8.3.1 +2.7.4 diff --git a/security/tboot/centos/patches/1000-tboot-for-tis.patch b/security/tboot/centos/patches/1000-tboot-for-tis.patch index 104211d62..ddb8b0f8c 100644 --- a/security/tboot/centos/patches/1000-tboot-for-tis.patch +++ b/security/tboot/centos/patches/1000-tboot-for-tis.patch @@ -11,7 +11,7 @@ Subject: [PATCH 1/1] WRS: Patch1: 9000-tboot-for-tis.patch 4 files changed, 28 insertions(+), 18 deletions(-) diff --git a/tboot/20_linux_tboot b/tboot/20_linux_tboot -index 7c25181..e4fd557 100644 +index 816d50a..eed512d 100644 --- a/tboot/20_linux_tboot +++ b/tboot/20_linux_tboot @@ -22,6 +22,13 @@ exec_prefix=${prefix} @@ -28,7 +28,7 @@ index 7c25181..e4fd557 100644 if test -e /usr/share/grub/grub-mkconfig_lib; then . /usr/share/grub/grub-mkconfig_lib elif test -e ${libdir}/grub/grub-mkconfig_lib; then -@@ -38,7 +45,7 @@ fi +@@ -40,7 +47,7 @@ fi [ -z "${GRUB_CMDLINE_LINUX_TBOOT}" ] && unset GRUB_CMDLINE_LINUX_TBOOT [ -z "${GRUB_TBOOT_POLICY_DATA}" ] && unset GRUB_TBOOT_POLICY_DATA # Command line for tboot itself @@ -37,7 +37,7 @@ index 7c25181..e4fd557 100644 # Linux kernel parameters to append for tboot : ${GRUB_CMDLINE_LINUX_TBOOT='intel_iommu=on'} # Base name of LCP policy data file for list policy -@@ -67,10 +74,8 @@ export TEXTDOMAINDIR=${prefix}/share/locale +@@ -69,10 +76,8 @@ export TEXTDOMAINDIR=${prefix}/share/locale CLASS="--class gnu-linux --class gnu --class os --class tboot" @@ -50,7 +50,7 @@ index 7c25181..e4fd557 100644 CLASS="--class $(echo ${GRUB_DISTRIBUTOR} | tr '[A-Z]' '[a-z]' | cut -d' ' -f1) ${CLASS}" fi -@@ -107,9 +112,9 @@ linux_entry () +@@ -109,9 +114,9 @@ linux_entry () iommu_args="$7" if ${recovery} ; then @@ -62,15 +62,15 @@ index 7c25181..e4fd557 100644 fi if [ -d /sys/firmware/efi ] ; then -@@ -200,7 +205,6 @@ while [ "x${tboot_list}" != "x" ] && [ "x$linux_list" != "x" ] ; do +@@ -202,7 +207,6 @@ while [ "x${tboot_list}" != "x" ] && [ "x$linux_list" != "x" ] ; do rel_tboot_dirname=`make_system_path_relative_to_its_root $tboot_dirname` # tboot_version=`echo $tboot_basename | sed -e "s,.gz$,,g;s,^tboot-,,g"` - tboot_version="1.9.5" + tboot_version="1.9.6" - echo "submenu \"tboot ${tboot_version}\" {" while [ "x$list" != "x" ] ; do linux=`version_find_latest $list` echo "Found linux image: $linux" >&2 -@@ -241,6 +245,5 @@ while [ "x${tboot_list}" != "x" ] && [ "x$linux_list" != "x" ] ; do +@@ -243,6 +247,5 @@ while [ "x${tboot_list}" != "x" ] && [ "x$linux_list" != "x" ] ; do list=`echo $list | tr ' ' '\n' | grep -vx $linux | tr '\n' ' '` done @@ -78,10 +78,10 @@ index 7c25181..e4fd557 100644 tboot_list=`echo $tboot_list | tr ' ' '\n' | grep -vx $current_tboot | tr '\n' ' '` done diff --git a/tboot/20_linux_xen_tboot b/tboot/20_linux_xen_tboot -index b674834..4dc8d68 100644 +index a113a3c..b1e4b09 100644 --- a/tboot/20_linux_xen_tboot +++ b/tboot/20_linux_xen_tboot -@@ -39,7 +39,7 @@ fi +@@ -41,7 +41,7 @@ fi [ -z "${GRUB_CMDLINE_LINUX_XEN_TBOOT}" ] && unset GRUB_CMDLINE_LINUX_XEN_TBOOT [ -z "${GRUB_TBOOT_POLICY_DATA}" ] && unset GRUB_TBOOT_POLICY_DATA # Command line for tboot itself @@ -91,10 +91,10 @@ index b674834..4dc8d68 100644 : ${GRUB_CMDLINE_XEN_TBOOT=''} # Linux kernel parameters to append for tboot + Xen diff --git a/tboot/common/policy.c b/tboot/common/policy.c -index b30d299..9ec02be 100644 +index 9678b7c..5a16d81 100644 --- a/tboot/common/policy.c +++ b/tboot/common/policy.c -@@ -347,6 +347,7 @@ tb_error_t set_policy(void) +@@ -349,6 +349,7 @@ tb_error_t set_policy(void) * type is LCP_POLTYPE_LIST (since we could have been give a policy data * file even though the policy was not a LIST */ printk(TBOOT_INFO"reading Launch Control Policy from TPM NV...\n"); @@ -102,7 +102,7 @@ index b30d299..9ec02be 100644 if ( read_policy_from_tpm(g_tpm->lcp_own_index, _policy_index_buf, &policy_index_size) ) { printk(TBOOT_DETA"\t:%lu bytes read\n", policy_index_size); -@@ -406,6 +407,7 @@ bool hash_policy(tb_hash_t *hash, uint16_t hash_alg) +@@ -408,6 +409,7 @@ bool hash_policy(tb_hash_t *hash, uint16_t hash_alg) /* generate hash by hashing cmdline and module image */ static bool hash_module(hash_list_t *hl, @@ -110,7 +110,7 @@ index b30d299..9ec02be 100644 const char* cmdline, void *base, size_t size) { -@@ -414,6 +416,7 @@ static bool hash_module(hash_list_t *hl, +@@ -416,6 +418,7 @@ static bool hash_module(hash_list_t *hl, return false; } @@ -118,7 +118,7 @@ index b30d299..9ec02be 100644 /* final hash is SHA-1( SHA-1(cmdline) | SHA-1(image) ) */ /* where cmdline is first stripped of leading spaces, file name, then */ /* any spaces until the next non-space char */ -@@ -428,16 +431,17 @@ static bool hash_module(hash_list_t *hl, +@@ -430,16 +433,17 @@ static bool hash_module(hash_list_t *hl, switch (g_tpm->extpol) { case TB_EXTPOL_FIXED: hl->count = 1; @@ -140,7 +140,7 @@ index b30d299..9ec02be 100644 return false; break; -@@ -633,7 +637,7 @@ static tb_error_t verify_module(module_t *module, tb_policy_entry_t *pol_entry, +@@ -635,7 +639,7 @@ static tb_error_t verify_module(module_t *module, tb_policy_entry_t *pol_entry, } hash_list_t hl; @@ -149,7 +149,7 @@ index b30d299..9ec02be 100644 printk(TBOOT_ERR"\t hash cannot be generated.\n"); return TB_ERR_MODULE_VERIFICATION_FAILED; } -@@ -657,6 +661,8 @@ static tb_error_t verify_module(module_t *module, tb_policy_entry_t *pol_entry, +@@ -659,6 +663,8 @@ static tb_error_t verify_module(module_t *module, tb_policy_entry_t *pol_entry, if ( pol_entry != NULL && !is_hash_in_policy_entry(pol_entry, &hl.entries[0].hash, hash_alg) ) { printk(TBOOT_ERR"\t verification failed\n"); @@ -159,10 +159,10 @@ index b30d299..9ec02be 100644 } diff --git a/tboot/common/tpm_20.c b/tboot/common/tpm_20.c -index 678a3d2..63ca9dd 100644 +index b9b67c9..b7c5d62 100644 --- a/tboot/common/tpm_20.c +++ b/tboot/common/tpm_20.c -@@ -1933,7 +1933,7 @@ static bool tpm20_nv_read(struct tpm_if *ti, uint32_t locality, +@@ -2096,7 +2096,7 @@ static bool tpm20_nv_read(struct tpm_if *ti, uint32_t locality, ret = _tpm20_nv_read(locality, &read_in, &read_out); if ( ret != TPM_RC_SUCCESS ) { @@ -171,7 +171,7 @@ index 678a3d2..63ca9dd 100644 index, offset, ret); ti->error = ret; return false; -@@ -2273,8 +2273,9 @@ static bool tpm20_init(struct tpm_if *ti) +@@ -2505,8 +2505,9 @@ static bool tpm20_init(struct tpm_if *ti) get_tboot_extpol(); if (info_list->capabilities.tpm_nv_index_set == 0){ /* init NV index */ @@ -184,5 +184,5 @@ index 678a3d2..63ca9dd 100644 ti->sgx_svn_index = 0x01800004; } -- -1.8.3.1 +2.7.4 diff --git a/security/tboot/centos/srpm_path b/security/tboot/centos/srpm_path index 824a4a4bd..c36bb4899 100644 --- a/security/tboot/centos/srpm_path +++ b/security/tboot/centos/srpm_path @@ -1 +1 @@ -mirror:Source/tboot-1.9.5-1.el7.src.rpm +mirror:Source/tboot-1.9.6-2.el7.src.rpm diff --git a/security/tpm2-tools/PKG-INFO b/security/tpm2-tools/PKG-INFO index 1b7d2f8a2..db0aa9d08 100644 --- a/security/tpm2-tools/PKG-INFO +++ b/security/tpm2-tools/PKG-INFO @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: tpm2-tools -Version: 1.1.0 +Version: 3.0.1 Summary: A TPM2.0 testing tool build upon TPM2.0-TSS Home-page: Author: diff --git a/security/tpm2-tools/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/security/tpm2-tools/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 64aaa13ca..6cc12c328 100644 --- a/security/tpm2-tools/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/security/tpm2-tools/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,7 +1,7 @@ -From cf30b93accbda4284677507a88ca3727a97fb83c Mon Sep 17 00:00:00 2001 +From 63375de22771a9384eb9c4a90abc8ee2143a7721 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 2 Oct 2017 17:30:57 -0400 -Subject: [PATCH 2/2] WRS: 0001-Update-package-versioning-for-TIS-format.patch +Subject: [PATCH] WRS: 0001-Update-package-versioning-for-TIS-format.patch Conflicts: SPECS/tpm2-tools.spec @@ -10,26 +10,26 @@ Conflicts: 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SPECS/tpm2-tools.spec b/SPECS/tpm2-tools.spec -index c858d6f..464c814 100644 +index 935580d..12aa6a0 100644 --- a/SPECS/tpm2-tools.spec +++ b/SPECS/tpm2-tools.spec @@ -1,6 +1,6 @@ Name: tpm2-tools - Version: 1.1.0 --Release: 7%{?dist} -+Release: 7.el7%{?_tis_dist}.%{tis_patch_ver} + Version: 3.0.1 +-Release: 1%{?dist} ++Release: 1.el7%{?_tis_dist}.%{tis_patch_ver} Summary: A TPM2.0 testing tool build upon TPM2.0-TSS - %global pkg_prefix tpm2.0-tools -@@ -44,7 +44,7 @@ BuildRequires: pkgconfig(tcti-socket) + License: BSD +@@ -33,7 +33,7 @@ BuildRequires: pkgconfig(tcti-tabrmd) ExclusiveArch: %{ix86} x86_64 # tpm2-tools is heavily depending on TPM2.0-TSS project, matched tss is required --Requires: tpm2-tss%{?_isa} >= 1.0-2%{?dist} -+Requires: tpm2-tss%{?_isa} = 1.0-2.el7 +-Requires: tpm2-tss%{?_isa} >= 1.3.0-1%{?dist} ++Requires: tpm2-tss%{?_isa} = 1.3.0-2.el7 - %description - tpm2-tools is a batch of testing tools for tpm2.0. It is based on tpm2-tss. + # tpm2-tools project changed the install path for binaries and man page section + Obsoletes: tpm2-tools <= 2.1.0-2 -- -1.9.1 +2.7.4 diff --git a/security/tpm2-tools/centos/srpm_path b/security/tpm2-tools/centos/srpm_path index 4e0786eff..506bd9824 100644 --- a/security/tpm2-tools/centos/srpm_path +++ b/security/tpm2-tools/centos/srpm_path @@ -1 +1 @@ -mirror:Source/tpm2-tools-1.1.0-7.el7.src.rpm +mirror:Source/tpm2-tools-3.0.1-1.el7.src.rpm diff --git a/virt/cloud-init/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch b/virt/cloud-init/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch index 08a522134..1b6a0f238 100644 --- a/virt/cloud-init/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch +++ b/virt/cloud-init/centos/meta_patches/0001-Update-package-versioning-for-TIS-format.patch @@ -1,4 +1,4 @@ -From 869e94c0bb51471063fab9fa6bdff54f1db8407e Mon Sep 17 00:00:00 2001 +From 9a97a6ade7470e525b2013b85782b887a96b7489 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Tue, 7 Nov 2017 15:25:12 -0500 Subject: [PATCH] Update-package-versioning-for-TIS-format @@ -8,18 +8,18 @@ Subject: [PATCH] Update-package-versioning-for-TIS-format 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SPECS/cloud-init.spec b/SPECS/cloud-init.spec -index 89691ae..935c970 100644 +index 390ed96..ef82dd1 100644 --- a/SPECS/cloud-init.spec +++ b/SPECS/cloud-init.spec @@ -7,7 +7,7 @@ Name: cloud-init Version: 0.7.9 --Release: 9%{?dist}.2 -+Release: 9.el7.centos.2%{?_tis_dist}.%{tis_patch_ver} +-Release: 24%{?dist}.1 ++Release: 24.el7.centos.1%{?_tis_dist}.%{tis_patch_ver} Summary: Cloud instance init scripts Group: System Environment/Base -- -1.8.3.1 +2.7.4 diff --git a/virt/cloud-init/centos/meta_patches/spec-include-tis-changes.patch b/virt/cloud-init/centos/meta_patches/spec-include-tis-changes.patch index 4ebc1600e..9fddda9fd 100644 --- a/virt/cloud-init/centos/meta_patches/spec-include-tis-changes.patch +++ b/virt/cloud-init/centos/meta_patches/spec-include-tis-changes.patch @@ -1,18 +1,20 @@ -From cd41e4fb7bee4272f1074b4bc4e9c79c7fce3530 Mon Sep 17 00:00:00 2001 +From 1fa41f1116464169399c683abd9920c7bbf28a5b Mon Sep 17 00:00:00 2001 From: Scott Little Date: Wed, 8 Nov 2017 11:13:02 -0500 Subject: [PATCH] spec-include-tis-changes --- - SPECS/cloud-init.spec | 8 ++++++-- - 1 file changed, 6 insertions(+), 2 deletions(-) + SPECS/cloud-init.spec | 5 ++++- + 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/SPECS/cloud-init.spec b/SPECS/cloud-init.spec -index 935c970..a611192 100644 -@@ -44,7 +45,10 @@ Patch0019: 0019-Add-missing-sysconfig-unit-test-data.patch - Patch0020: 0020-Fix-ipv6-subnet-detection.patch - Patch0021: 0021-azure-ensure-that-networkmanager-hook-script-runs.patch - Patch0022: 0022-RHEL-CentOS-Fix-default-routes-for-IPv4-IPv6-configu.patch +index ef82dd1..022e779 100644 +--- a/SPECS/cloud-init.spec ++++ b/SPECS/cloud-init.spec +@@ -69,7 +69,10 @@ Patch41: ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch + # For bz#1578702 - cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z] + Patch42: ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch + -Patch9999: cloud-init-add-centos-os.patch +Patch0999: cloud-init-add-centos-os.patch + @@ -22,5 +24,5 @@ index 935c970..a611192 100644 # Deal with noarch -> arch # https://bugzilla.redhat.com/show_bug.cgi?id=1067089 -- -1.8.3.1 +2.7.4 diff --git a/virt/cloud-init/centos/srpm_path b/virt/cloud-init/centos/srpm_path index 33fb3ec3e..8947c1143 100644 --- a/virt/cloud-init/centos/srpm_path +++ b/virt/cloud-init/centos/srpm_path @@ -1 +1 @@ -mirror:Source/cloud-init-0.7.9-9.el7.centos.2.src.rpm +mirror:Source/cloud-init-0.7.9-24.el7.centos.1.src.rpm