BZ#920845
Fixes for CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654
CVE-2013-1655 CVE-2013-2274 CVE-2013-2275
see puppetlabs.com/security for more information.
This commit also rebases the webrick compatibility patch to be a cherry-pick
from upstream rather than a Fedora-specific patch.
Signed-off-by: Michael Stahnke <stahnma@puppetlabs.com>
Note that the license has changed from GPLv2 to ASL 2.0.
With 2.7, the puppetstoredconfigclean script has been dropped from ext/
because 'puppet node clean' performs this task. Unfortunately, it does
more than just cleaning up the storeconfig db (removing signed
certificates and reports), so we can't just call 'puppet node clean'.
Instead, restore the script and add a note that it is deprecated,
pointing to 'puppet node clean' as the supported method of cleaning
storedconfig and other node data.
- Adjust selinux conditional for EL-6
- Apply rundir-perms patch from tarball rather than including it separately
- Update URL's to reflect the new puppetlabs.com domain
- Require ruby-shadow on Fedora and RHEL >= 5
- Simplify Fedora/RHEL version checks for ruby(abi) and BuildArch
- Require chkconfig and initstripts for preun, post, and postun scripts
- Conditionally restart puppet in %postun
- Ensure %preun, %post, and %postun scripts exit cleanly
- Create puppet user/group according to Fedora packaging guidelines
- Quiet a few rpmlint complaints
- Remove useless %pbuild macro
- Make specfile more like the Fedora/EPEL template
Michael Stahnke
Todd Zullinger
Todd Zullinger
Jeroen van Meeuwen
David Lutterkort