commit
558f1eaed0
@ -0,0 +1,2 @@
|
|||||||
|
SOURCES/jitterentropy-library-3.4.1.tar.gz
|
||||||
|
SOURCES/rng-tools-6.15.tar.gz
|
@ -0,0 +1,2 @@
|
|||||||
|
2e3475074ae0c75fc417da553eb70ec160334b18 SOURCES/jitterentropy-library-3.4.1.tar.gz
|
||||||
|
f8720f7aaef3f5ca0d63cf7b88d0de802a358ae0 SOURCES/rng-tools-6.15.tar.gz
|
@ -0,0 +1,56 @@
|
|||||||
|
diff -up jitterentropy-library/Makefile jitterentropy-library/Makefile
|
||||||
|
--- jitterentropy-library/Makefile 2021-07-13 17:23:42.954652287 +0200
|
||||||
|
+++ jitterentropy-library/Makefile 2021-07-13 17:27:27.958549833 +0200
|
||||||
|
@@ -4,7 +4,7 @@ CC ?= gcc
|
||||||
|
#Hardening
|
||||||
|
ENABLE_STACK_PROTECTOR ?= 1
|
||||||
|
CFLAGS ?= -fwrapv --param ssp-buffer-size=4 -fvisibility=hidden -fPIE -Wcast-align -Wmissing-field-initializers -Wshadow -Wswitch-enum
|
||||||
|
-CFLAGS +=-Wextra -Wall -pedantic -fPIC -O0 -fwrapv -Wconversion
|
||||||
|
+CFLAGS +=-Wp,-U_FORTIFY_SOURCE -Wextra -Wall -pedantic -fPIC -O0 -fwrapv -Wconversion
|
||||||
|
LDFLAGS +=-Wl,-z,relro,-z,now -lpthread
|
||||||
|
|
||||||
|
# Enable internal timer support
|
||||||
|
@@ -28,7 +28,7 @@ LIBDIR := lib
|
||||||
|
INCDIR := include
|
||||||
|
SRCDIR := src
|
||||||
|
|
||||||
|
-INSTALL_STRIP ?= install -s
|
||||||
|
+INSTALL ?= install
|
||||||
|
|
||||||
|
NAME := jitterentropy
|
||||||
|
LIBMAJOR=$(shell cat $(SRCDIR)/jitterentropy-base.c | grep define | grep MAJVERSION | awk '{print $$3}')
|
||||||
|
@@ -73,25 +73,25 @@ cppcheck:
|
||||||
|
install: install-man install-shared install-includes
|
||||||
|
|
||||||
|
install-man:
|
||||||
|
- install -d -m 0755 $(DESTDIR)$(PREFIX)/share/man/man3
|
||||||
|
- install -m 644 doc/$(NAME).3 $(DESTDIR)$(PREFIX)/share/man/man3/
|
||||||
|
+ $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/share/man/man3
|
||||||
|
+ $(INSTALL) -m 644 doc/$(NAME).3 $(DESTDIR)$(PREFIX)/share/man/man3/
|
||||||
|
gzip -n -f -9 $(DESTDIR)$(PREFIX)/share/man/man3/$(NAME).3
|
||||||
|
|
||||||
|
install-shared:
|
||||||
|
- install -d -m 0755 $(DESTDIR)$(PREFIX)/$(LIBDIR)
|
||||||
|
- $(INSTALL_STRIP) -m 0755 lib$(NAME).so.$(LIBVERSION) $(DESTDIR)$(PREFIX)/$(LIBDIR)/
|
||||||
|
+ $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/$(LIBDIR)
|
||||||
|
+ $(INSTALL) -m 0755 lib$(NAME).so.$(LIBVERSION) $(DESTDIR)$(PREFIX)/$(LIBDIR)/
|
||||||
|
$(RM) $(DESTDIR)$(PREFIX)/$(LIBDIR)/lib$(NAME).so.$(LIBMAJOR)
|
||||||
|
ln -sf lib$(NAME).so.$(LIBVERSION) $(DESTDIR)$(PREFIX)/$(LIBDIR)/lib$(NAME).so.$(LIBMAJOR)
|
||||||
|
ln -sf lib$(NAME).so.$(LIBMAJOR) $(DESTDIR)$(PREFIX)/$(LIBDIR)/lib$(NAME).so
|
||||||
|
|
||||||
|
install-includes:
|
||||||
|
- install -d -m 0755 $(DESTDIR)$(PREFIX)/$(INCDIR)
|
||||||
|
- install -m 0644 jitterentropy.h $(DESTDIR)$(PREFIX)/$(INCDIR)/
|
||||||
|
- install -m 0644 jitterentropy-base-user.h $(DESTDIR)$(PREFIX)/$(INCDIR)/
|
||||||
|
+ $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/$(INCDIR)
|
||||||
|
+ $(INSTALL) -m 0644 jitterentropy.h $(DESTDIR)$(PREFIX)/$(INCDIR)/
|
||||||
|
+ $(INSTALL) -m 0644 jitterentropy-base-user.h $(DESTDIR)$(PREFIX)/$(INCDIR)/
|
||||||
|
|
||||||
|
install-static:
|
||||||
|
- install -d -m 0755 $(DESTDIR)$(PREFIX)/$(LIBDIR)
|
||||||
|
- install -m 0755 lib$(NAME).a $(DESTDIR)$(PREFIX)/$(LIBDIR)/
|
||||||
|
+ $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/$(LIBDIR)
|
||||||
|
+ $(INSTALL) -m 0755 lib$(NAME).a $(DESTDIR)$(PREFIX)/$(LIBDIR)/
|
||||||
|
|
||||||
|
clean:
|
||||||
|
@- $(RM) $(NAME)
|
@ -0,0 +1,33 @@
|
|||||||
|
diff -up jitterentropy-library/Makefile jitterentropy-library/Makefile
|
||||||
|
--- jitterentropy-library/Makefile 2021-07-13 17:23:42.954652287 +0200
|
||||||
|
+++ jitterentropy-library/Makefile 2021-07-13 17:27:27.958549833 +0200
|
||||||
|
@@ -70,29 +70,6 @@ scan: $(analyze_plists)
|
||||||
|
cppcheck:
|
||||||
|
cppcheck --force -q --enable=performance --enable=warning --enable=portability *.h *.c
|
||||||
|
|
||||||
|
-install: install-man install-shared install-includes
|
||||||
|
-
|
||||||
|
-install-man:
|
||||||
|
- $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/share/man/man3
|
||||||
|
- $(INSTALL) -m 644 doc/$(NAME).3 $(DESTDIR)$(PREFIX)/share/man/man3/
|
||||||
|
- gzip -n -f -9 $(DESTDIR)$(PREFIX)/share/man/man3/$(NAME).3
|
||||||
|
-
|
||||||
|
-install-shared:
|
||||||
|
- $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/$(LIBDIR)
|
||||||
|
- $(INSTALL) -m 0755 lib$(NAME).so.$(LIBVERSION) $(DESTDIR)$(PREFIX)/$(LIBDIR)/
|
||||||
|
- $(RM) $(DESTDIR)$(PREFIX)/$(LIBDIR)/lib$(NAME).so.$(LIBMAJOR)
|
||||||
|
- ln -sf lib$(NAME).so.$(LIBVERSION) $(DESTDIR)$(PREFIX)/$(LIBDIR)/lib$(NAME).so.$(LIBMAJOR)
|
||||||
|
- ln -sf lib$(NAME).so.$(LIBMAJOR) $(DESTDIR)$(PREFIX)/$(LIBDIR)/lib$(NAME).so
|
||||||
|
-
|
||||||
|
-install-includes:
|
||||||
|
- $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/$(INCDIR)
|
||||||
|
- $(INSTALL) -m 0644 jitterentropy.h $(DESTDIR)$(PREFIX)/$(INCDIR)/
|
||||||
|
- $(INSTALL) -m 0644 jitterentropy-base-user.h $(DESTDIR)$(PREFIX)/$(INCDIR)/
|
||||||
|
-
|
||||||
|
-install-static:
|
||||||
|
- $(INSTALL) -d -m 0755 $(DESTDIR)$(PREFIX)/$(LIBDIR)
|
||||||
|
- $(INSTALL) -m 0755 lib$(NAME).a $(DESTDIR)$(PREFIX)/$(LIBDIR)/
|
||||||
|
-
|
||||||
|
clean:
|
||||||
|
@- $(RM) $(NAME)
|
||||||
|
@- $(RM) $(OBJS)
|
@ -0,0 +1,59 @@
|
|||||||
|
diff -up Makefile.am Makefile.am
|
||||||
|
--- ./Makefile.am 2021-07-03 22:22:27.000000000 +0200
|
||||||
|
+++ ./Makefile.am 2021-08-06 12:18:48.498612099 +0200
|
||||||
|
@@ -1,7 +1,7 @@
|
||||||
|
##
|
||||||
|
## Toplevel Makefile.am for rng-tools
|
||||||
|
##
|
||||||
|
-SUBDIRS = contrib tests
|
||||||
|
+SUBDIRS = contrib tests jitterentropy-library
|
||||||
|
|
||||||
|
sbin_PROGRAMS = rngd
|
||||||
|
bin_PROGRAMS = rngtest
|
||||||
|
@@ -23,44 +23,31 @@ if RNDR
|
||||||
|
rngd_SOURCES += rngd_rndr.c
|
||||||
|
endif
|
||||||
|
|
||||||
|
-if JITTER
|
||||||
|
rngd_SOURCES += rngd_jitter.c
|
||||||
|
-endif
|
||||||
|
-
|
||||||
|
-if RTLSDR
|
||||||
|
-rngd_SOURCES += rngd_rtlsdr.c
|
||||||
|
-endif
|
||||||
|
|
||||||
|
if QRYPT
|
||||||
|
rngd_SOURCES += rngd_qrypt.c
|
||||||
|
endif
|
||||||
|
|
||||||
|
-rngd_LDADD = librngd.a $(LIBS) $(librtlsdr_LIBS) ${libp11_LIBS} ${libcrypto_LIBS} ${jansson_LIBS} ${libcurl_LIBS} ${libxml2_LIBS} ${openssl_LIBS} ${libcap_LIBS} $(PTHREAD_LIBS)
|
||||||
|
+rngd_LDADD = librngd.a $(LIBS) jitterentropy-library/libjitterentropy.a ${libcrypto_LIBS} ${jansson_LIBS} ${libcurl_LIBS} ${libxml2_LIBS} ${openssl_LIBS} ${libcap_LIBS} $(PTHREAD_LIBS)
|
||||||
|
|
||||||
|
if DARN
|
||||||
|
rngd_SOURCES += rngd_darn.c
|
||||||
|
|
||||||
|
# Build Power9-only code with Power9
|
||||||
|
# compile flags in a separate library
|
||||||
|
rngd_LDADD += libdarn_impl.a
|
||||||
|
noinst_LIBRARIES += libdarn_impl.a
|
||||||
|
libdarn_impl_a_SOURCES = darn_impl.c
|
||||||
|
libdarn_impl_a_CFLAGS = -mcpu=power9 -mtune=power9
|
||||||
|
endif
|
||||||
|
|
||||||
|
-if PKCS11
|
||||||
|
-rngd_SOURCES += rngd_pkcs11.c
|
||||||
|
-pkcs11_ENGINE = -DDEFAULT_PKCS11_ENGINE=\"$(PKCS11_ENGINE)\"
|
||||||
|
-endif
|
||||||
|
-
|
||||||
|
-rngd_CFLAGS = ${pkcs11_CFLAGS} $(librtlsdr_CFLAGS) ${pkcs11_ENGINE} ${libp11_CFLAGS} ${libcrypto_CFLAGS} ${libxml2_CFLAGS} ${openssl_CFLAGS} ${libcap_CFLAGS} $(PTHREAD_CFLAGS)
|
||||||
|
+rngd_CFLAGS = ${libcrypto_CFLAGS} ${libxml2_CFLAGS} ${openssl_CFLAGS} ${libcap_CFLAGS} $(PTHREAD_CFLAGS) -DHAVE_JITTER -I./jitterentropy-library/
|
||||||
|
rngd_LDFLAGS = $(PTHREAD_CFLAGS)
|
||||||
|
|
||||||
|
rngtest_SOURCES = exits.h stats.h stats.c rngtest.c
|
||||||
|
rngtest_LDADD = librngd.a
|
||||||
|
|
||||||
|
librngd_a_SOURCES = fips.h fips.c
|
||||||
|
|
||||||
|
-
|
||||||
|
EXTRA_DIST = autogen.sh
|
||||||
|
-
|
@ -0,0 +1,42 @@
|
|||||||
|
From 86a66ed41390fa5f98aade60a55376269fd163b0 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Vladis Dronov <vdronov@redhat.com>
|
||||||
|
Date: Fri, 17 Sep 2021 01:04:51 +0200
|
||||||
|
Subject: [PATCH] Comment out an unused assignment
|
||||||
|
|
||||||
|
Covscan warns about an unused value. Comment it out.
|
||||||
|
|
||||||
|
Defect type: UNUSED_VALUE: covscan warning:
|
||||||
|
rng-tools-6.13/rngd_rdrand.c:260: assigned_value: Assigning value
|
||||||
|
from "!!(info.ecx & 0x2000000U)" to "have_aesni" here, but that
|
||||||
|
stored value is overwritten before it can be used.
|
||||||
|
|
||||||
|
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
|
||||||
|
---
|
||||||
|
rngd_rdrand.c | 4 ++--
|
||||||
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git rngd_rdrand.c rngd_rdrand.c
|
||||||
|
index caa9d05..ea7b8fa 100644
|
||||||
|
--- rngd_rdrand.c
|
||||||
|
+++ rngd_rdrand.c
|
||||||
|
@@ -239,7 +239,7 @@ int init_drng_entropy_source(struct rng *ent_src)
|
||||||
|
struct cpuid info;
|
||||||
|
/* We need RDRAND, but AESni is optional */
|
||||||
|
const uint32_t features_ecx1_rdrand = 1 << 30;
|
||||||
|
- const uint32_t features_ecx1_aesni = 1 << 25;
|
||||||
|
+ //const uint32_t features_ecx1_aesni = 1 << 25;
|
||||||
|
const uint32_t features_ebx7_rdseed = 1 << 18;
|
||||||
|
uint32_t max_cpuid_leaf;
|
||||||
|
unsigned char xkey[AES_BLOCK]; /* Material to XOR into the key */
|
||||||
|
@@ -257,7 +257,7 @@ int init_drng_entropy_source(struct rng *ent_src)
|
||||||
|
if (!(info.ecx & features_ecx1_rdrand))
|
||||||
|
return 1;
|
||||||
|
|
||||||
|
- have_aesni = !!(info.ecx & features_ecx1_aesni);
|
||||||
|
+ //have_aesni = !!(info.ecx & features_ecx1_aesni);
|
||||||
|
have_aesni = 0; /* BACK OUT NH */
|
||||||
|
have_rdseed = 0;
|
||||||
|
if (max_cpuid_leaf >= 7) {
|
||||||
|
--
|
||||||
|
2.26.3
|
||||||
|
|
@ -0,0 +1,47 @@
|
|||||||
|
From de2ee0d8b7e8ad2915165ef941a6ec37442a2fdc Mon Sep 17 00:00:00 2001
|
||||||
|
From: Vladis Dronov <vdronov@redhat.com>
|
||||||
|
Date: Tue, 6 Jul 2021 14:36:46 +0200
|
||||||
|
Subject: [PATCH] Revert "Build randstat binary"
|
||||||
|
|
||||||
|
We do not want new and mostly useless randstat binary.
|
||||||
|
This reverts commit 2ce93190cb0111fcab2f622a539689d70960643a.
|
||||||
|
|
||||||
|
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
|
||||||
|
---
|
||||||
|
.gitignore | 3 +--
|
||||||
|
contrib/Makefile.am | 5 +++--
|
||||||
|
2 files changed, 4 insertions(+), 4 deletions(-)
|
||||||
|
|
||||||
|
diff --git .gitignore .gitignore
|
||||||
|
index 943fa2b..5dc334d 100644
|
||||||
|
--- .gitignore
|
||||||
|
+++ .gitignore
|
||||||
|
@@ -1,6 +1,6 @@
|
||||||
|
*.a
|
||||||
|
*.o
|
||||||
|
-.deps/
|
||||||
|
+/.deps/
|
||||||
|
/aclocal.m4
|
||||||
|
/ar-lib
|
||||||
|
/autom4te.cache/
|
||||||
|
@@ -10,7 +10,6 @@
|
||||||
|
/config.status
|
||||||
|
/config.sub
|
||||||
|
/configure
|
||||||
|
-/contrib/randstat
|
||||||
|
/depcomp
|
||||||
|
/install-sh
|
||||||
|
/missing
|
||||||
|
diff --git contrib/Makefile.am contrib/Makefile.am
|
||||||
|
index a81fb0e..18c4fbc 100644
|
||||||
|
--- contrib/Makefile.am
|
||||||
|
+++ contrib/Makefile.am
|
||||||
|
@@ -1,2 +1,3 @@
|
||||||
|
-bin_PROGRAMS = randstat
|
||||||
|
-randstat_SOURCES = randstat.c
|
||||||
|
+
|
||||||
|
+EXTRA_DIST = randstat.c
|
||||||
|
+
|
||||||
|
--
|
||||||
|
2.26.3
|
||||||
|
|
@ -0,0 +1,13 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Hardware RNG Entropy Gatherer Daemon
|
||||||
|
ConditionVirtualization=!container
|
||||||
|
ConditionKernelCommandLine=!fips=1
|
||||||
|
|
||||||
|
# The "-f" option is required for the systemd service rngd to work with Type=simple
|
||||||
|
[Service]
|
||||||
|
Type=simple
|
||||||
|
EnvironmentFile=/etc/sysconfig/rngd
|
||||||
|
ExecStart=/usr/sbin/rngd -f $RNGD_ARGS
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=sysinit.target
|
@ -0,0 +1,3 @@
|
|||||||
|
# Optional arguments passed to rngd. See rngd(8) and
|
||||||
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1252175#c21
|
||||||
|
RNGD_ARGS="--fill-watermark=0 -x pkcs11 -x nist -x qrypt -D daemon:daemon"
|
@ -0,0 +1,245 @@
|
|||||||
|
%global _hardened_build 1
|
||||||
|
|
||||||
|
Summary: Random number generator related utilities
|
||||||
|
Name: rng-tools
|
||||||
|
Version: 6.15
|
||||||
|
Release: 3%{?dist}
|
||||||
|
Group: System Environment/Base
|
||||||
|
License: GPLv2+
|
||||||
|
URL: https://github.com/nhorman/rng-tools
|
||||||
|
Source0: %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
|
||||||
|
Source1: rngd.service
|
||||||
|
Source2: rngd.sysconfig
|
||||||
|
Source3: jitterentropy-library-3.4.1.tar.gz
|
||||||
|
|
||||||
|
BuildRequires: gcc make binutils
|
||||||
|
BuildRequires: gettext
|
||||||
|
BuildRequires: systemd systemd-rpm-macros
|
||||||
|
BuildRequires: autoconf >= 2.57, automake >= 1.7
|
||||||
|
BuildRequires: libgcrypt-devel libcurl-devel
|
||||||
|
BuildRequires: libxml2-devel openssl-devel
|
||||||
|
BuildRequires: jansson-devel
|
||||||
|
BuildRequires: libcap-devel
|
||||||
|
|
||||||
|
Requires(post): systemd
|
||||||
|
Requires(preun): systemd
|
||||||
|
Requires(postun): systemd
|
||||||
|
|
||||||
|
# This ensures that the selinux-policy package and all its dependencies
|
||||||
|
# are not pulled into containers and other systems that do not use SELinux.
|
||||||
|
Requires: (selinux-policy >= 3.14.3-98 if selinux-policy)
|
||||||
|
|
||||||
|
Patch0: 1-je-rh-makefile.patch
|
||||||
|
Patch1: 2-je-remove-install.patch
|
||||||
|
Patch2: 3-rt-use-jitter-static.patch
|
||||||
|
Patch3: 4-rt-comment-out-have-aesni.patch
|
||||||
|
Patch4: 5-rt-revert-build-randstat.patch
|
||||||
|
|
||||||
|
%description
|
||||||
|
This is a random number generator daemon and its tools. It monitors
|
||||||
|
a set of entropy sources present on a system (like /dev/hwrng, RDRAND,
|
||||||
|
TPM, jitter) and supplies entropy from them to a kernel entropy pool.
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%setup -q
|
||||||
|
tar xf %{SOURCE3}
|
||||||
|
mv jitterentropy-library-3.4.1 jitterentropy-library
|
||||||
|
%autopatch -p0
|
||||||
|
|
||||||
|
%build
|
||||||
|
./autogen.sh
|
||||||
|
# a dirty hack so libdarn_impl_a_CFLAGS overrides common CFLAGS
|
||||||
|
sed -i -e 's/$(libdarn_impl_a_CFLAGS) $(CFLAGS)/$(CFLAGS) $(libdarn_impl_a_CFLAGS)/' Makefile.in
|
||||||
|
%configure --without-pkcs11 --without-rtlsdr
|
||||||
|
%make_build
|
||||||
|
|
||||||
|
%install
|
||||||
|
%make_install
|
||||||
|
|
||||||
|
# install systemd unit file
|
||||||
|
install -Dt %{buildroot}%{_unitdir} -m0644 %{SOURCE1}
|
||||||
|
# install sysconfig file
|
||||||
|
install -D %{SOURCE2} -m0644 %{buildroot}%{_sysconfdir}/sysconfig/rngd
|
||||||
|
|
||||||
|
%post
|
||||||
|
%systemd_post rngd.service
|
||||||
|
|
||||||
|
%preun
|
||||||
|
%systemd_preun rngd.service
|
||||||
|
|
||||||
|
%postun
|
||||||
|
%systemd_postun_with_restart rngd.service
|
||||||
|
|
||||||
|
%files
|
||||||
|
%{!?_licensedir:%global license %%doc}
|
||||||
|
%license COPYING
|
||||||
|
%doc AUTHORS README.md
|
||||||
|
%{_bindir}/rngtest
|
||||||
|
%{_sbindir}/rngd
|
||||||
|
%{_mandir}/man1/rngtest.1.*
|
||||||
|
%{_mandir}/man8/rngd.8.*
|
||||||
|
%attr(0644,root,root) %{_unitdir}/rngd.service
|
||||||
|
%config(noreplace) %attr(0644,root,root) %{_sysconfdir}/sysconfig/rngd
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Tue Dec 27 2022 Vladis Dronov <vdronov@redhat.com> - 6.15-3
|
||||||
|
- Update rng-tools to v6.15 @ cb8cc624 (bz 2141379)
|
||||||
|
- Update jitterentropy library to v3.4.1 @ 7bf9f85d
|
||||||
|
- Fix a stack corruption on s390x
|
||||||
|
- Fix a number of issues found by covscan code scanner
|
||||||
|
- Add a jitter init timeout for tests
|
||||||
|
- Add a start condition for the FIPS mode (bz 2154804)
|
||||||
|
|
||||||
|
* Tue Oct 04 2022 Vladis Dronov <vdronov@redhat.com> - 6.15-2
|
||||||
|
- Update rng-tools to v6.15 @ 6dcc9ec2 (bz 2124602)
|
||||||
|
- Update jitterentropy library to v3.4.1 @ 4544e113
|
||||||
|
- Do not require selinux-policy if it is not present
|
||||||
|
|
||||||
|
* Sat Apr 16 2022 Vladis Dronov <vdronov@redhat.com> - 6.15-1
|
||||||
|
- Update rng-tools to v6.15 @ 172bf0e3 (bz 2075974)
|
||||||
|
- Update jitterentropy library to v3.4.0 @ 887c9871
|
||||||
|
- Allow rngd process to drop privileges with "-D user:group"
|
||||||
|
- Fix an error building with jitterentropy-3.4.0
|
||||||
|
- Add a requirement for selinux-policy of a certain version
|
||||||
|
- Fix a build failure on ppc64
|
||||||
|
- Small edits in test scripts
|
||||||
|
|
||||||
|
* Mon Nov 22 2021 Vladis Dronov <vdronov@redhat.com> - 6.14-4.git.b2b7934e
|
||||||
|
- Update rng-tools to v6.14 @ b2b7934e (bz 2015570)
|
||||||
|
- Update jitterentropy library to v3.3.1 @ 887c9871
|
||||||
|
- Add a config file for storing rngd options
|
||||||
|
- Fix a security issue found by a covscan in jitterentropy library
|
||||||
|
|
||||||
|
* Thu Jul 22 2021 Vladis Dronov <vdronov@redhat.com> - 6.13-1.git.d207e0b6
|
||||||
|
- Update to the upstream v6.13 + tip of origin/master + onecpu
|
||||||
|
branch + revert of 2ce93190
|
||||||
|
- Rebuild rng-tools against the latest jitterentropy library
|
||||||
|
3.0.2-2.git.409828cf with fixes for an important issue
|
||||||
|
- Fix a number of issues (bz 1974103, bz 1980421, bz 1859154)
|
||||||
|
|
||||||
|
* Mon Jul 05 2021 Vladis Dronov <vdronov@redhat.com> - 6.8-6
|
||||||
|
- Adjust rngd-wake-threshold.service and post section so udevadm is not
|
||||||
|
run in a container (bz 1975554)
|
||||||
|
|
||||||
|
* Thu May 27 2021 Vladis Dronov <vdronov@redhat.com> - 6.8-5
|
||||||
|
- Fix /dev/hwrng permissions issue at boot time (bz 1955522)
|
||||||
|
|
||||||
|
* Mon May 24 2021 Vladis Dronov <vdronov@redhat.com> - 6.8-4
|
||||||
|
- There is no need to hardcode _sbindir anymore, also the old value is
|
||||||
|
incorrect
|
||||||
|
- Update the rngd.service file
|
||||||
|
- Fix a busyloop bug (bz 1956248)
|
||||||
|
- Fix /dev/hwrng permission issue (bz 1955522)
|
||||||
|
|
||||||
|
* Tue Feb 18 2020 Neil Horman <nhorman@redhat.com> - 6.8-3
|
||||||
|
- Fix coarse clock time on Azure (bz 180155)
|
||||||
|
|
||||||
|
* Mon Dec 02 2019 Neil Horman <nhorman@redhat.com> - 6.8-2
|
||||||
|
- Fix erroneous message due to bad errno check (bz 1776710)
|
||||||
|
- Enable addition of 0 value for fill-watermark (bz 1776710)
|
||||||
|
|
||||||
|
* Fri Nov 15 2019 Neil Horman <nhorman@redhat.com> - 6.8-1
|
||||||
|
- Update to latest upstream (bz 1769916)
|
||||||
|
|
||||||
|
* Wed Oct 09 2019 Neil Horman <nhorman@redhat.com> 6.6-5
|
||||||
|
- Fix group typo in rngd.service (bz 1751810)
|
||||||
|
|
||||||
|
* Fri Oct 04 2019 Neil Horman <nhorman@redhat.com> 6.6-4
|
||||||
|
- Revision bump to rebuild for new CI runs
|
||||||
|
|
||||||
|
* Mon Mar 25 2019 Neil Horman <nhorman@redhat.com> 6.2-3
|
||||||
|
- Allow rngd to run as non-privledged user (bz 1692435)
|
||||||
|
|
||||||
|
* Mon Dec 17 2018 Neil Horman <nhorman@redhat.com> 6.2-2
|
||||||
|
- default to 1 thread on cpu 0 if getaffinty returns error (bz 1658855)
|
||||||
|
|
||||||
|
* Thu May 17 2018 Neil Horman <nhorman@redhat.com> 6.2-1
|
||||||
|
- Update to latest upstream
|
||||||
|
- Add CI self tests
|
||||||
|
|
||||||
|
* Thu Feb 15 2018 Adam Williamson <awilliam@redhat.com> - 6.1-4
|
||||||
|
- Drop all attempts to 'fix' #1490632, revert spec to same as 6.1-1
|
||||||
|
|
||||||
|
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6.1-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Nov 02 2017 Neil Horman <nhorman@redhat.com> - 6.1-2
|
||||||
|
- Enable rngd on entropy src availability (bz 1490632)
|
||||||
|
|
||||||
|
* Tue Oct 10 2017 Neil Horman <nhorman@redhat.com> - 6.1-1
|
||||||
|
- update to latest upstream
|
||||||
|
|
||||||
|
* Fri Jul 28 2017 Neil Horman <nhorman@redhat.com> - 6-1
|
||||||
|
- Update to latest upstream
|
||||||
|
|
||||||
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 5-10
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 5-9
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Oct 18 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5-8
|
||||||
|
- If device is not found exit immediately (#892178)
|
||||||
|
|
||||||
|
* Sun Mar 6 2016 Peter Robinson <pbrobinson@fedoraproject.org> 5-7
|
||||||
|
- Use %%license
|
||||||
|
|
||||||
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 5-6
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5-5
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Dec 10 2014 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5-4
|
||||||
|
- Build with hardening flags (#1051344)
|
||||||
|
- Fail nicely if no hardware generator is found (#892178)
|
||||||
|
- Drop unneeded dependency
|
||||||
|
|
||||||
|
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Apr 23 2014 Luke Macken <lmacken@redhat.com> - 5-1
|
||||||
|
- Update to release version 5.
|
||||||
|
- Remove rng-tools-man.patch
|
||||||
|
|
||||||
|
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4-4
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Sep 25 2012 Jaromir Capik <jcapik@redhat.com> - 4-2
|
||||||
|
- Migration to new systemd macros
|
||||||
|
|
||||||
|
* Mon Aug 6 2012 Jeff Garzik <jgarzik@redhat.com> - 4-1
|
||||||
|
- Update to release version 4.
|
||||||
|
|
||||||
|
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3-5
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jan 12 2012 Jiri Popelka <jpopelka@redhat.com> - 3-4
|
||||||
|
- 2 patches from RHEL-6
|
||||||
|
- systemd service
|
||||||
|
- man page fixes
|
||||||
|
- modernize spec file
|
||||||
|
|
||||||
|
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Jul 3 2010 Jeff Garzik <jgarzik@redhat.com> - 3-2
|
||||||
|
- comply with renaming guidelines, by Providing rng-utils = 1:2.0-4.2
|
||||||
|
|
||||||
|
* Sat Jul 3 2010 Jeff Garzik <jgarzik@redhat.com> - 3-1
|
||||||
|
- Update to release version 3.
|
||||||
|
|
||||||
|
* Fri Mar 26 2010 Jeff Garzik <jgarzik@redhat.com> - 2-3
|
||||||
|
- more minor updates for package review
|
||||||
|
|
||||||
|
* Thu Mar 25 2010 Jeff Garzik <jgarzik@redhat.com> - 2-2
|
||||||
|
- several minor updates for package review
|
||||||
|
|
||||||
|
* Wed Mar 24 2010 Jeff Garzik <jgarzik@redhat.com> - 2-1
|
||||||
|
- initial revision (as rng-tools)
|
Loading…
Reference in new issue