|
|
c376124 |
%if 0%{?fedora} || 0%{?rhel} >= 7
|
|
|
c376124 |
%bcond_without systemd # enabled systemd
|
|
|
c376124 |
%else
|
|
|
c376124 |
%bcond_with systemd # disabled systemd
|
|
|
c376124 |
%endif
|
|
Fabio Alessandro Locati |
46ec5fb |
|
|
|
a25e271 |
Summary: Fast and lean authoritative DNS Name Server
|
|
|
fea33a3 |
Name: nsd
|
|
|
d16269e |
Version: 4.1.24
|
|
|
d16269e |
Release: 1%{?dist}
|
|
|
d7c2c32 |
License: BSD
|
|
|
c376124 |
Url: http://www.nlnetlabs.nl/nsd/
|
|
|
fea33a3 |
Group: System Environment/Daemons
|
|
|
c376124 |
Source0: http://www.nlnetlabs.nl/downloads/%{name}/%{name}-%{version}%{?prever}.tar.gz
|
|
|
c376124 |
Source1: nsd.conf
|
|
|
0df531a |
%if %{with systemd}
|
|
|
c376124 |
Source2: nsd.service
|
|
|
c376124 |
Source3: nsd-keygen.service
|
|
|
c376124 |
Source6: tmpfiles-nsd.conf
|
|
|
0df531a |
%else
|
|
|
c376124 |
Source10: nsd.init
|
|
|
0df531a |
%endif
|
|
Igor Gnatenko |
f3a453b |
BuildRequires: gcc
|
|
Fabio Alessandro Locati |
05a4b5a |
BuildRequires: flex
|
|
Fabio Alessandro Locati |
05a4b5a |
BuildRequires: openssl-devel
|
|
Fabio Alessandro Locati |
05a4b5a |
BuildRequires: libevent-devel
|
|
|
c376124 |
Requires(pre): shadow-utils
|
|
|
c376124 |
%if %{with systemd}
|
|
|
3dd0f65 |
BuildRequires: systemd-units
|
|
|
d16269e |
BuildRequires: systemd-devel
|
|
|
3dd0f65 |
Requires(post): systemd-units
|
|
|
3dd0f65 |
Requires(preun): systemd-units
|
|
|
3dd0f65 |
Requires(postun): systemd-units
|
|
|
d16269e |
#workaround for 4.1.24 bug in systemd detection :/
|
|
|
6b67696 |
BuildRequires: autoconf automake
|
|
|
c376124 |
%else
|
|
|
c376124 |
Group: System Environment/Daemons
|
|
|
c376124 |
Requires(post): /sbin/chkconfig
|
|
|
c376124 |
Requires(preun): /sbin/service
|
|
|
c376124 |
Requires(preun): /sbin/chkconfig
|
|
|
c376124 |
Requires(postun): /sbin/service
|
|
|
c376124 |
%endif
|
|
|
fea33a3 |
|
|
Fabio Alessandro Locati |
05a4b5a |
%global _hardened_build 1
|
|
Fabio Alessandro Locati |
05a4b5a |
|
|
|
fea33a3 |
%description
|
|
|
fea33a3 |
NSD is a complete implementation of an authoritative DNS name server.
|
|
|
fea33a3 |
For further information about what NSD is and what NSD is not please
|
|
|
c376124 |
consult the REQUIREMENTS document which is a part of this distribution.
|
|
|
fea33a3 |
|
|
|
fea33a3 |
%prep
|
|
|
c376124 |
%setup -q -n %{name}-%{version}%{?prever}
|
|
|
d16269e |
#workaround for 4.1.24 bug in systemd detection :/
|
|
|
d16269e |
autoreconf
|
|
|
fea33a3 |
|
|
|
d7c2c32 |
%build
|
|
|
c376124 |
CFLAGS="%{optflags} -fPIE -pie"
|
|
|
c376124 |
LDFLAGS="-Wl,-z,relro,-z,now"
|
|
|
c376124 |
export CFLAGS LDFLAGS
|
|
|
c376124 |
%configure \
|
|
|
c376124 |
--enable-bind8-stats \
|
|
|
c376124 |
--enable-checking \
|
|
|
c376124 |
--enable-nsec3 \
|
|
|
c376124 |
--with-pidfile=%{_localstatedir}/run/nsd/nsd.pid \
|
|
|
cbe2e9e |
--with-zonelistfile=%{_sharedstatedir}/nsd/zone.list \
|
|
|
c376124 |
--with-ssl \
|
|
|
c376124 |
--with-user=nsd \
|
|
|
c376124 |
--with-xfrdfile=%{_sharedstatedir}/nsd/ixfr.state \
|
|
|
cbe2e9e |
--with-dbfile="" \
|
|
|
d16269e |
--enable-ratelimit \
|
|
|
d16269e |
--enable-systemd
|
|
|
c376124 |
|
|
|
c376124 |
make %{?_smp_mflags}
|
|
|
75611be |
|
|
|
fea33a3 |
%install
|
|
|
c376124 |
make DESTDIR=%{buildroot} install
|
|
|
c376124 |
%if %{with systemd}
|
|
|
3dd0f65 |
mkdir -p %{buildroot}%{_unitdir}
|
|
|
cbe2e9e |
install -m 0644 %{SOURCE2} %{SOURCE3} %{buildroot}%{_unitdir}
|
|
|
c376124 |
mkdir -p %{buildroot}%{_tmpfilesdir}
|
|
|
c376124 |
install -m 0644 %{SOURCE6} %{buildroot}%{_tmpfilesdir}/nsd.conf
|
|
|
c376124 |
%else
|
|
|
c376124 |
mkdir -p %{buildroot}%{_initddir}
|
|
|
c376124 |
install -m 0755 %{SOURCE10} %{buildroot}%{_initddir}/nsd
|
|
|
c376124 |
%endif
|
|
|
c376124 |
mkdir -p %{buildroot}%{_localstatedir}/run/nsd
|
|
|
c376124 |
mkdir -p %{buildroot}%{_sharedstatedir}/nsd
|
|
|
c376124 |
|
|
|
c376124 |
# Install ghost files
|
|
|
c376124 |
for name in control server; do
|
|
|
c376124 |
for extension in key pem; do
|
|
|
c376124 |
touch %{buildroot}%{_sysconfdir}/nsd/nsd_${name}.${extension}
|
|
|
c376124 |
done
|
|
|
c376124 |
done
|
|
|
fea33a3 |
|
|
Fabio Alessandro Locati |
05a4b5a |
# Take care of the configuration
|
|
Fabio Alessandro Locati |
05a4b5a |
mkdir -p %{buildroot}%{_sysconfdir}/nsd/conf.d
|
|
|
c376124 |
mkdir -p %{buildroot}%{_sysconfdir}/nsd/server.d
|
|
|
c376124 |
install -m 0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/nsd/nsd.conf
|
|
|
4dfd50d |
rm %{buildroot}%{_sysconfdir}/nsd/nsd.conf.sample
|
|
|
fea33a3 |
|
|
|
c376124 |
%files
|
|
|
16359b2 |
%doc doc/*
|
|
|
7b80a30 |
%doc contrib/nsd.zones2nsd.conf
|
|
|
c376124 |
%dir %{_sysconfdir}/nsd
|
|
|
c376124 |
%config(noreplace) %{_sysconfdir}/nsd/nsd.conf
|
|
|
c376124 |
%attr(0640,root,nsd) %ghost %{_sysconfdir}/nsd/nsd_server.key
|
|
|
c376124 |
%attr(0640,root,nsd) %ghost %{_sysconfdir}/nsd/nsd_server.pem
|
|
|
c376124 |
%attr(0640,root,nsd) %ghost %{_sysconfdir}/nsd/nsd_control.key
|
|
|
c376124 |
%attr(0640,root,nsd) %ghost %{_sysconfdir}/nsd/nsd_control.pem
|
|
|
c376124 |
%dir %{_sysconfdir}/nsd/conf.d
|
|
|
c376124 |
%dir %{_sysconfdir}/nsd/server.d
|
|
|
c376124 |
%if %{with systemd}
|
|
|
c376124 |
%attr(0644,root,root) %{_unitdir}/nsd.service
|
|
|
c376124 |
%attr(0644,root,root) %{_unitdir}/nsd-keygen.service
|
|
|
c376124 |
%attr(0644,root,root) %{_tmpfilesdir}/nsd.conf
|
|
|
c376124 |
%else
|
|
|
c376124 |
%attr(0755,root,root) %{_initddir}/nsd
|
|
|
c376124 |
%config(noreplace) %{_sysconfdir}/sysconfig/nsd
|
|
|
c376124 |
%endif
|
|
|
c376124 |
%attr(0755,nsd,nsd) %dir %{_localstatedir}/run/nsd
|
|
|
c376124 |
%attr(0750,nsd,nsd) %dir %{_sharedstatedir}/nsd
|
|
|
fea33a3 |
%{_sbindir}/*
|
|
|
fea33a3 |
%{_mandir}/*/*
|
|
|
fea33a3 |
|
|
|
fea33a3 |
%pre
|
|
|
d7c2c32 |
getent group nsd >/dev/null || groupadd -r nsd
|
|
|
d7c2c32 |
getent passwd nsd >/dev/null || \
|
|
|
d7c2c32 |
useradd -r -g nsd -d /etc/nsd -s /sbin/nologin \
|
|
|
c376124 |
-c "nsd daemon account" nsd
|
|
|
fea33a3 |
exit 0
|
|
|
fea33a3 |
|
|
|
fea33a3 |
%post
|
|
|
c376124 |
%if %{with systemd}
|
|
|
4101ba1 |
%systemd_post nsd.service
|
|
|
c376124 |
%systemd_post nsd-keygen.serivce
|
|
|
c376124 |
%else
|
|
|
c376124 |
/sbin/chkconfig --add nsd
|
|
|
c376124 |
%endif
|
|
|
fea33a3 |
|
|
|
fea33a3 |
%preun
|
|
|
c376124 |
%if %{with systemd}
|
|
|
4101ba1 |
%systemd_preun nsd.service
|
|
|
c376124 |
%systemd_preun nsd-keygen.serivce
|
|
|
c376124 |
%else
|
|
|
c376124 |
if [ "$1" -eq 0 ]; then
|
|
|
c376124 |
/sbin/service nsd stop >/dev/null 2>&1
|
|
|
c376124 |
/sbin/chkconfig --del nsd
|
|
|
c376124 |
fi
|
|
|
c376124 |
%endif
|
|
|
fea33a3 |
|
|
|
fea33a3 |
%postun
|
|
|
c376124 |
%if %{with systemd}
|
|
|
4101ba1 |
%systemd_postun_with_restart nsd.service
|
|
|
c376124 |
%systemd_postun nsd-keygen.service
|
|
|
c376124 |
%else
|
|
|
c376124 |
if [ "$1" -ge 1 ]; then
|
|
|
c376124 |
/sbin/service nsd condrestart >/dev/null 2>&1 || :
|
|
|
c376124 |
fi
|
|
|
c376124 |
%endif
|
|
|
fea33a3 |
|
|
|
c376124 |
%triggerin -- nsd < 4.0.0-0
|
|
|
c376124 |
chown nsd:nsd %{_sharedstatedir}/nsd/* 2>&1 || :
|
|
|
3dd0f65 |
|
|
|
fea33a3 |
%changelog
|
|
|
d16269e |
* Mon Aug 13 2018 Paul Wouters <pwouters@redhat.com> - 4.1.24-1
|
|
|
d16269e |
- Resolves: rhbz#1609774 Updated to 4.1.24)
|
|
|
d16269e |
- Enable systemd for readiness signalling
|
|
|
d16269e |
- Enable local unix domain socket /run/nsd/nsd.ctl for nsd-control
|
|
|
8e88668 |
- Resolves: rhbz#1468477 nsd-keygen unit does not generate keys if it's already started
|
|
|
d16269e |
|
|
|
2377a1c |
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.22-2
|
|
|
2377a1c |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
2377a1c |
|
|
|
69123d0 |
* Tue Jun 12 2018 Paul Wouters <pwouters@redhat.com> - 4.1.22-1
|
|
|
69123d0 |
- Resolves rhbz#1575608 nsd 4.1.22 is available
|
|
|
69123d0 |
- Enable round-robin, minimal-responses and refuse-any in nsd.conf
|
|
|
69123d0 |
|
|
|
f2f9c07 |
* Wed Feb 21 2018 Paul Wouters <pwouters@redhat.com> - 4.1.20-1
|
|
|
f2f9c07 |
- Updated to 4.1.20 (fixup memory leaks)
|
|
|
f2f9c07 |
|
|
|
64347f2 |
* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.19-2
|
|
|
64347f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
64347f2 |
|
|
|
b84d259 |
* Mon Dec 11 2017 Paul Wouters <pwouters@redhat.com> - 4.1.19-1
|
|
|
b84d259 |
- Updated to 4.1.19 (fixup of 4.1.18 for IPv6 issues)
|
|
|
b84d259 |
|
|
|
6131d6d |
* Fri Dec 01 2017 Paul Wouters <pwouters@redhat.com> - 4.1.18-1
|
|
|
6131d6d |
- Updated to 4.1.18
|
|
|
6131d6d |
|
|
|
d0fcaf2 |
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.16-3
|
|
|
d0fcaf2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
d0fcaf2 |
|
|
|
76b992a |
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.16-2
|
|
|
76b992a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
76b992a |
|
|
|
30c0456 |
* Tue Apr 25 2017 Paul Wouters <pwouters@redhat.com> - 4.1.16-1
|
|
|
30c0456 |
- Updated to 4.1.16 (minimum response option)
|
|
|
30c0456 |
- Disable on-disk database per default (use ram only)
|
|
|
30c0456 |
- Minor updates to nsd.conf
|
|
|
30c0456 |
|
|
|
58f0082 |
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.14-3
|
|
|
58f0082 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
58f0082 |
|
|
|
1a5fb8a |
* Fri Dec 09 2016 Paul Wouters <pwouters@redhat.com> - 4.1.14-2
|
|
|
1a5fb8a |
- Ensure nsd only starts after network is fully up
|
|
|
1a5fb8a |
|
|
|
1639197 |
* Thu Dec 08 2016 Paul Wouters <pwouters@redhat.com> - 4.1.14-1
|
|
|
1639197 |
- Updated to 4.1.14 (various XFR fixes)
|
|
|
1639197 |
|
|
|
e2ec0a9 |
* Wed Sep 28 2016 Paul Wouters <pwouters@redhat.com> - 4.1.13-1
|
|
|
e2ec0a9 |
- Updated to 4.1.13 (CVE-2016-6173, OPENPGPKEY support)
|
|
|
e2ec0a9 |
- Resolves: rhbz#1353577
|
|
|
e2ec0a9 |
|
|
|
9d23724 |
* Fri Sep 02 2016 Paul Wouters <pwouters@redhat.com> - 4.1.12-1
|
|
|
9d23724 |
- Updated to 4.1.12 for assertion failure in malformed edns query
|
|
|
9d23724 |
|
|
|
8c83e6e |
* Wed Aug 10 2016 Paul Wouters <pwouters@redhat.com> - 4.1.11-1
|
|
|
8c83e6e |
- Updated to 4.1.11 for the unlimited AXFR vulnerability
|
|
|
8c83e6e |
- Updated nsd.conf with new options
|
|
|
8c83e6e |
|
|
|
cbe2e9e |
* Sun Jul 03 2016 Paul Wouters <pwouters@redhat.com> - 4.1.10-2
|
|
|
cbe2e9e |
- Do not use db files anymore, use --with-zonelistfile
|
|
|
cbe2e9e |
- Documentation utf fixes are upstreamed
|
|
|
cbe2e9e |
- Empty sysconfig file removed (still supported on epel6)
|
|
|
cbe2e9e |
- Remove timer/cron entry - now done by nsd itself
|
|
|
cbe2e9e |
- Update nsd.conf file
|
|
|
cbe2e9e |
|
|
|
8efa4b8 |
* Wed Jun 15 2016 Fabio Alessandro Locati <fale@fedoraproject.org> - 4.1.10-1
|
|
Fabio Alessandro Locati |
46ec5fb |
- Update to 4.1.10
|
|
Fabio Alessandro Locati |
46ec5fb |
|
|
|
b6f1aef |
* Tue Mar 15 2016 Paul Wouters <pwouters@redhat.com> - 4.1.9-1
|
|
|
b6f1aef |
- Update to 4.1.9 which fixes restart failures on nsd.db change
|
|
|
b6f1aef |
|
|
|
8efa4b8 |
* Sat Mar 12 2016 Fabio Alessandro Locati <fale@fedoraproject.org> - 4.1.8-1
|
|
Fabio Alessandro Locati |
bab526f |
- Update to 4.1.8
|
|
Fabio Alessandro Locati |
bab526f |
|
|
|
4725d7a |
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.7-5
|
|
|
4725d7a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
4725d7a |
|
|
|
c2bf660 |
* Wed Jan 20 2016 Paul Wouters <pwouters@redhat.com> - 4.1.7-4
|
|
|
c2bf660 |
- Remove cronjob and enable zonefiles-write: in nsd.conf instead
|
|
|
c2bf660 |
- Do not manually run nsd-control notify - daemon already does when needed
|
|
|
c2bf660 |
- Do not remove xfrd.state state information
|
|
|
c2bf660 |
|
|
|
b673f37 |
* Mon Dec 28 2015 Paul Wouters <pwouters@redhat.com> - 4.1.7-3
|
|
|
b673f37 |
- Removed Mass rebuild changelogs causing chronological order error
|
|
|
b673f37 |
- Bump EVR required due to epel7 build
|
|
|
b673f37 |
|
|
|
c376124 |
* Sun Dec 27 2015 Tuomo Soini <tis@foobar.fi> - 4.1.7-2
|
|
|
c376124 |
- Enable PrivateTmp for nsd.service
|
|
|
c376124 |
- Rename /etc/nsd/local.d/ to /etc/nsd/server.d/
|
|
|
c376124 |
- Add /etc/nsd/local.d for local server config
|
|
|
c376124 |
- Add ghost entries for nsd_control and nsd_server key and certificate
|
|
|
c376124 |
- Fix sysv init script by removing nsd3 specific NSDC_PROG options
|
|
|
c376124 |
- Use signals whenever possible instead of using nsd-control
|
|
|
c376124 |
- Use cron script on sysvinit systems only
|
|
|
c376124 |
- Add nsd-write.service and nsd-write.timer (not enabled by default)
|
|
|
c376124 |
- Remove old options from /etc/sysconfig/nsd
|
|
|
c376124 |
- Install /etc/sysconfig/nsd on sysvinit systems only
|
|
|
c376124 |
- Remove all example files from /etc/nsd/conf.d/ - don't belong to package
|
|
|
c376124 |
- Add nsd-keygen.service to generate nsd-control keys
|
|
|
c376124 |
- Add creation of nsd_control.key to nsd.init
|
|
|
c376124 |
- nsd.service depends on nsd-keygen.service
|
|
|
c376124 |
- Change nsd.service to use KillMode=mixed
|
|
|
c376124 |
- Add triggerin for older nsd package to chown /var/lib/nsd/*
|
|
|
c376124 |
- Update nsd.conf from upstream and add nsd-control section
|
|
|
c376124 |
|
|
|
8efa4b8 |
* Sun Dec 20 2015 Fabio Alessandro Locati <fale@fedoraproject.org> - 4.1.7-1
|
|
Fabio Alessandro Locati |
05a4b5a |
- Update to last upstream
|
|
Fabio Alessandro Locati |
05a4b5a |
- Multiple tests and fixes
|
|
Fabio Alessandro Locati |
05a4b5a |
|
|
Fabio Alessandro Locati |
301b0b1 |
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.18-3
|
|
Fabio Alessandro Locati |
301b0b1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
Fabio Alessandro Locati |
301b0b1 |
|
|
Fabio Alessandro Locati |
05a4b5a |
* Sat Apr 11 2015 Paul Wouters <pwouters@redhat.com> - 4.1.1-1
|
|
Fabio Alessandro Locati |
05a4b5a |
- Updated to 4.1.1
|
|
Fabio Alessandro Locati |
05a4b5a |
- Updated cron job for new nsd-control
|
|
Fabio Alessandro Locati |
05a4b5a |
- Updated nsd.conf
|
|
Fabio Alessandro Locati |
05a4b5a |
- Updated nsd init script for use of nsd-control
|
|
Fabio Alessandro Locati |
05a4b5a |
- Renamed --max_interfaces to --max-ips
|
|
Fabio Alessandro Locati |
05a4b5a |
- Added BuildRequires for libevent-devel
|
|
Fabio Alessandro Locati |
05a4b5a |
- Fix buglet in nsd user creation's exit command
|
|
Fabio Alessandro Locati |
05a4b5a |
- Create nsd4 remote-control pem files for nsd-control
|
|
Fabio Alessandro Locati |
05a4b5a |
- chown /var/lib/nsd/nsd.db to the nsd user required for nsd4
|
|
Fabio Alessandro Locati |
05a4b5a |
- Add logrotate support
|
|
Fabio Alessandro Locati |
05a4b5a |
|
|
|
cd6f689 |
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.18-2
|
|
|
cd6f689 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
cd6f689 |
|
|
|
474991c |
* Mon Jul 28 2014 Paul Wouters <pwouters@redhat.com> - 3.2.18-1
|
|
|
474991c |
- Updated to 3.2.18 - improved TXT parsing, new NSID option
|
|
|
474991c |
- Fix nsd.service daemonize option (rhbz#1089505)
|
|
|
474991c |
|
|
|
d30696e |
* Sun Mar 30 2014 Paul Wouters <pwouters@redhat.com> - 3.2.17-1
|
|
|
d30696e |
- Updated to 3.2.17
|
|
|
d30696e |
- Added --with-max-ips=1024
|
|
|
d30696e |
- Removed merged in patch
|
|
|
d30696e |
|
|
|
4101ba1 |
* Thu Apr 18 2013 Paul Wouters <pwouters@redhat.com> - 3.2.15-4
|
|
|
4101ba1 |
- Enable hardened build
|
|
|
4101ba1 |
- rhbz#850231 - Introduce new systemd-rpm macros in nsd spec file
|
|
|
4101ba1 |
- Added -D option to nsd to allow us to use systemd service Type=simple
|
|
|
4101ba1 |
- Switch from Fork to Simple systemd service
|
|
|
4101ba1 |
- Use /run and not /var/run for pid
|
|
|
4101ba1 |
- The cronjon now uses systemctl reload, which also triggers notifies
|
|
|
4101ba1 |
(should speed up notifications to secondaries)
|
|
|
4101ba1 |
|
|
|
b4553b5 |
* Mon Mar 25 2013 Peter Robinson <pbrobinson@fedoraproject.org> 3.2.15-3
|
|
|
b4553b5 |
- Bump so rawhide/F19 has bigger NVR that older releases
|
|
|
b4553b5 |
|
|
Paul Wouters |
ae25fdd |
* Mon Feb 04 2013 Paul Wouters <pwouters@redhat.com> - 3.2.15-1
|
|
Paul Wouters |
ae25fdd |
- Updates to 3.2.15 which contains rate limit code
|
|
|
4101ba1 |
(fixes rhbz#842036 - nsd fails to start in fips mode)
|
|
|
3902fb1 |
|
|
|
95ab6c9 |
* Fri Nov 23 2012 Paul Wouters <pwouters@redhat.com> - 3.2.14-2
|
|
|
ecf94c8 |
- Updated to 3.2.14 with minor bugfixes and TCP writev support
|
|
|
95ab6c9 |
- Only run nsdc rebuild hourly cronjob when nsd service is running
|
|
|
19f94a3 |
|
|
|
17d8550 |
* Fri Jul 27 2012 Paul Wouters <pwouters@redhat.com> - 3.2.13-1
|
|
|
5bcb6b5 |
- Updated to 3.2.13, addresses VU#517036 CVE-2012-2979
|
|
|
5bcb6b5 |
(note Fedora/EPEL packages are not vulnerable to this)
|
|
|
5bcb6b5 |
|
|
|
200b040 |
* Mon Jul 23 2012 Paul Wouters <pwouters@redhat.com> - 3.2.12-2
|
|
|
200b040 |
- Add /var/run/nsd via tmpfiles (rhbz#842021)
|
|
|
200b040 |
|
|
|
9971012 |
* Thu Jul 19 2012 Paul Wouters <pwouters@redhat.com> - 3.2.12-1
|
|
|
9971012 |
- Upgraded to 3.2.12 which fixes CVE-2012-2978 (rhbz#841268)
|
|
|
9971012 |
|
|
|
4585a36 |
* Mon Jul 16 2012 Paul Wouters <pwouters@redhat.com> - 3.2.11-1
|
|
|
4585a36 |
- Updated to 3.2.11
|
|
|
2ab2918 |
- Remove execute perm from unitdir file
|
|
|
4585a36 |
|
|
|
3601986 |
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.9-3
|
|
|
3601986 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
3601986 |
|
|
Paul Wouters |
3804984 |
* Tue Nov 29 2011 Paul Wouters <paul@xelerance.com> - 3.2.9-2
|
|
Paul Wouters |
3804984 |
- Change spec and initscript to chown /var/run/nsd to nsd user to work around
|
|
Paul Wouters |
3804984 |
the "nsdc restart" problem where it cannot update its own pid file
|
|
Paul Wouters |
3804984 |
|
|
Paul Wouters |
d38c631 |
* Sun Nov 27 2011 Paul Wouters <paul@xelerance.com> - 3.2.9-1
|
|
Paul Wouters |
d38c631 |
- Updated to 3.2.9
|
|
Paul Wouters |
d38c631 |
|
|
|
dd99da5 |
* Mon Sep 12 2011 Tom Callaway <spot@fedoraproject.org> - 3.2.8-7
|
|
|
dd99da5 |
- fix tmpfiles.d creation of /var/run/nsd to be owned by root
|
|
|
dd99da5 |
|
|
|
3dd0f65 |
* Mon Sep 12 2011 Tom Callaway <spot@fedoraproject.org> - 3.2.8-6
|
|
|
3dd0f65 |
- convert to systemd, tmpfiles.d
|
|
|
3dd0f65 |
|
|
Paul Wouters |
fc38092 |
* Fri Jun 3 2011 Paul Wouters <paul@xelerance.com> - 3.2.8-5
|
|
Paul Wouters |
fc38092 |
- fix /var/run/nsd to be owned by root, not nsd
|
|
Paul Wouters |
fc38092 |
|
|
Paul Wouters |
18d921d |
* Fri Jun 3 2011 Tuomo Soini <tis@foobar.fi> - 3.2.8-4
|
|
Paul Wouters |
b833fb6 |
- fix init status to work as expected (bz#525107)
|
|
Paul Wouters |
e1c27bc |
- fix nsd.conf and nsd.conf.5 to have correct logfile
|
|
Paul Wouters |
e1c27bc |
- fix nsd.init syntax error by piddir change
|
|
Paul Wouters |
0792db3 |
- fix initscript to create /var/run/nsd if missing (bz#710376)
|
|
Paul Wouters |
e1c27bc |
|
|
Paul Wouters |
bbb0b68 |
* Sun Mar 27 2011 Paul Wouters <paul@xelerance.com> - 3.2.8-1
|
|
Paul Wouters |
bbb0b68 |
- updated to 3.2.8
|
|
Paul Wouters |
bbb0b68 |
|
|
Paul Wouters |
ec86161 |
* Wed Mar 09 2011 Paul Wouters <paul@xelerance.com> - 3.2.7-5
|
|
Paul Wouters |
888e8c3 |
- Fix misnamed variable NSD_AUTORELOAD which should be NSD_AUTOREBUILD
|
|
Paul Wouters |
cda864f |
- Fix for init script properly returning OK/Failed (bz#535107) by Noa Resare
|
|
Paul Wouters |
cda864f |
- Add ghost directive to /var/run/nsd (bz#656642)
|
|
Paul Wouters |
cda864f |
- Bump release for EVR
|
|
Paul Wouters |
888e8c3 |
|
|
|
e65f585 |
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.7-2
|
|
|
e65f585 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
e65f585 |
|
|
Paul Wouters |
4c365ff |
* Thu Feb 03 2011 Paul Wouters <paul@xelerance.com> - 3.2.7-1
|
|
Paul Wouters |
4c365ff |
- Updated to 3.2.7
|
|
Paul Wouters |
4c365ff |
|
|
Paul Wouters |
f0ac2e0 |
* Mon Aug 02 2010 Paul Wouters <paul@xelerance.com> - 3.2.6-1
|
|
Paul Wouters |
f0ac2e0 |
- Updated to 3.2.6
|
|
Paul Wouters |
f0ac2e0 |
- Removed obsolete --enable-nsid
|
|
Paul Wouters |
f0ac2e0 |
|
|
|
8a578a6 |
* Wed Jan 06 2010 Paul Wouters <paul@xelerance.com> - 3.2.4-1
|
|
|
8a578a6 |
- Updated to nsd 3.2.4
|
|
|
8a578a6 |
|
|
|
a236fa7 |
* Tue Jan 05 2010 Paul Wouters <paul@xelerance.com> - 3.2.3-4
|
|
|
a236fa7 |
- Incorporated Ville Mattila's fixes to nsd.cron
|
|
|
a236fa7 |
- Support for NSD_AUTOREBUILD in /etc/sysconfig/nsd [Ville]
|
|
|
a236fa7 |
|
|
|
c772ab1 |
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 3.2.3-3
|
|
|
c772ab1 |
- rebuilt with new openssl
|
|
|
c772ab1 |
|
|
|
6d6ff76 |
* Thu Aug 20 2009 Ville Mattila <vmattila@csc.fi> - 3.2.3-2
|
|
|
6d6ff76 |
- The 'nsdc patch' and 'nsdc rebuild' commands wrote a %%1 file by mistake
|
|
|
6d6ff76 |
|
|
|
3fa14f2 |
* Mon Aug 17 2009 Paul Wouters <paul@xelerance.com> - 3.2.3-1
|
|
|
3fa14f2 |
-Updated to version 3.2.3
|
|
|
3fa14f2 |
|
|
|
a11c503 |
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.2-4
|
|
|
a11c503 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
a11c503 |
|
|
|
bbdc21b |
* Sat Jun 06 2009 Paul Wouters <paul@xelerance.com> - 3.2.2-3
|
|
|
bbdc21b |
- Fixed /dev/nul which cause a file \%%1 to be written by cron
|
|
|
bbdc21b |
- Bump for EVR.
|
|
|
bbdc21b |
|
|
|
f4a96a5 |
* Mon May 18 2009 Paul Wouters <paul@xelerance.com> - 3.2.2-1
|
|
|
f4a96a5 |
- Upgraded to 3.2.2 security release
|
|
|
f4a96a5 |
http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html
|
|
|
f4a96a5 |
|
|
|
a25e271 |
* Thu Apr 09 2009 Ville Mattila <vmattila@csc.fi> - 3.2.1-6
|
|
|
a25e271 |
- Make various file paths used by the nsd.init script configurable
|
|
|
a25e271 |
from /etc/sysconfig/nsd.
|
|
|
a25e271 |
- Add template /etc/sysconfig/nsd.
|
|
|
a25e271 |
|
|
|
e4e00f6 |
* Sun Mar 08 2009 Paul Wouters <paul@xelerance.com> - 3.2.1-5
|
|
|
e4e00f6 |
- nsd used the 'named' subsystem in one call in the init script
|
|
|
e4e00f6 |
|
|
|
f7b588c |
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.1-4
|
|
|
f7b588c |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
|
|
f7b588c |
|
|
|
43f3812 |
* Mon Jan 26 2009 Paul Wouters <paul@xelerance.com> - 3.2.1-3
|
|
|
43f3812 |
- Fix init script 'unary operator' error.
|
|
|
32640be |
|
|
|
6c7e77b |
* Mon Jan 26 2009 Paul Wouters <paul@xelerance.com> - 3.2.1-1
|
|
|
6c7e77b |
- Updated to new version 3.2.1
|
|
|
6c7e77b |
|
|
|
76f2997 |
* Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> - 3.2.0-4
|
|
|
76f2997 |
- rebuild with new openssl
|
|
|
76f2997 |
|
|
|
fff8fa1 |
* Mon Nov 24 2008 Paul Wouters <paul@xelerance.com> - 3.2.0-3
|
|
|
fff8fa1 |
- Updates summary as per Richard Hughes guidelines
|
|
|
fff8fa1 |
|
|
|
351f14e |
* Mon Nov 10 2008 Paul Wouters <paul@xelerance.com> - 3.2.0-2
|
|
|
351f14e |
- Bump version after pre-release version correction.
|
|
|
351f14e |
|
|
|
74e93d6 |
* Mon Nov 10 2008 Paul Wouters <paul@xelerance.com> - 3.2.0-1
|
|
|
74e93d6 |
- 3.2.0-1
|
|
|
74e93d6 |
|
|
|
c858bae |
* Thu Oct 9 2008 Paul Wouters <paul@xelerance.com> - 3.1.1-1
|
|
|
c858bae |
- updated to 3.1.1
|
|
|
c858bae |
|
|
|
d7c2c32 |
* Mon Aug 11 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 3.1.0-2
|
|
|
d7c2c32 |
- fix license tag
|
|
|
d7c2c32 |
- fix static user creation
|
|
|
d7c2c32 |
|
|
|
24d1de1 |
* Mon Jun 30 2008 Paul Wouters <paul@xelerance.com> - 3.1.0-1
|
|
|
24d1de1 |
- Updated to 3.1.0
|
|
|
24d1de1 |
|
|
|
976466d |
* Tue May 6 2008 Paul Wouters <paul@xelerance.com> - 3.0.8-2
|
|
|
976466d |
- Fix /dev/null redirection [Venkatesh Krishnamurthi]
|
|
|
976466d |
|
|
|
60cac7a |
* Tue May 6 2008 Paul Wouters <paul@xelerance.com> - 3.0.8-1
|
|
|
60cac7a |
- Updated to 3.0.8
|
|
|
60cac7a |
|
|
|
cf1ea9d |
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 3.0.7-3
|
|
|
cf1ea9d |
- Autorebuild for GCC 4.3
|
|
|
cf1ea9d |
|
|
|
487bcef |
* Wed Dec 5 2007 Paul Wouters <paul@xelerance.com> - 3.0.7-2
|
|
|
487bcef |
- Rebuild for new libcrypto
|
|
|
487bcef |
|
|
|
75611be |
* Tue Nov 13 2007 Paul Wouters <paul@xelerance.com> - 3.0.7-1
|
|
|
75611be |
- Updated to new version
|
|
|
75611be |
- fix RELNOTES/README to be utf8
|
|
|
32ca9f4 |
- Fix path to nsd.db in cron job.
|
|
|
75611be |
|
|
|
da6cbb8 |
* Thu Nov 8 2007 Paul Wouters <paul@xelerance.com> - 3.0.6-7
|
|
|
da6cbb8 |
- Modified cron to only rebuild/reload when zone updates
|
|
|
da6cbb8 |
have been received
|
|
|
da6cbb8 |
|
|
|
709b0f5 |
* Wed Nov 7 2007 Paul Wouters <paul@xelerance.com> - 3.0.6-6
|
|
|
709b0f5 |
- Added hourly cron job to do various maintenance tasks
|
|
|
709b0f5 |
- Added nsd rebuild to create the proper nsd.db file on startup
|
|
|
709b0f5 |
- Added nsd patch on shutdown to ensure zonefiles are up to date
|
|
|
709b0f5 |
|
|
|
50ae015 |
* Tue Oct 2 2007 Paul Wouters <paul@xelerance.com> - 3.0.6-5
|
|
|
50ae015 |
- nsdc update and nsdc notify are no longer needed in initscript.
|
|
|
50ae015 |
|
|
|
b7aa26c |
* Mon Sep 24 2007 Jesse Keating <jkeating@redhat.com> - 3.0.6-4
|
|
|
b7aa26c |
- Bump release for upgrade path.
|
|
|
b7aa26c |
|
|
|
4dfd50d |
* Fri Sep 14 2007 Paul Wouters <paul@xelerance.com> 3.0.6-3
|
|
|
4dfd50d |
- Do not include examples from nsd.conf.sample that causes
|
|
|
4dfd50d |
bogus network traffic.
|
|
|
4dfd50d |
|
|
|
59bea48 |
* Fri Sep 14 2007 Paul Wouters <paul@xelerance.com> 3.0.6-2
|
|
|
59bea48 |
- Change locations of ixfr.db and xfrd.state to /var/lib/nsd
|
|
|
59bea48 |
- Enable NSEC3
|
|
|
59bea48 |
- Delay running nsdc update until after nsd has started
|
|
|
59bea48 |
- Delete xfrd.state on nsd stop
|
|
|
59bea48 |
- Run nsdc notify in the background, since it can take
|
|
|
59bea48 |
a very long time when remote servers are unavailable.
|
|
|
59bea48 |
|
|
|
6d65e23 |
* Tue Sep 11 2007 Paul Wouters <paul@xelerance.com> 3.0.6-1
|
|
|
6d65e23 |
- Upgraded to 3.0.6
|
|
|
6d65e23 |
- Do not include bind2nsd, since it didn't compile for me
|
|
|
6d65e23 |
|
|
|
63634cb |
* Fri Jul 13 2007 Paul Wouters <paul@xelerance.com> 3.0.5-2
|
|
|
63634cb |
- Fix init script, bug #245546
|
|
|
63634cb |
|
|
|
00bb8e6 |
* Fri Mar 23 2007 Paul Wouters <paul@xelerance.com> 3.0.5-1
|
|
|
00bb8e6 |
- Upgraded to 3.0.5
|
|
|
00bb8e6 |
|
|
|
a49fa68 |
* Thu Dec 7 2006 Paul Wouters <paul@xelerance.com> 3.0.3-1
|
|
|
a49fa68 |
- Upgraded to 3.0.3
|
|
|
a49fa68 |
|
|
|
16359b2 |
* Mon Nov 27 2006 Paul Wouters <paul@xelerance.com> 3.0.2-1
|
|
|
16359b2 |
- Upgraded to 3.0.2.
|
|
|
16359b2 |
- Use new configuration file nsd.conf. Still needs migration script.
|
|
|
16359b2 |
patch from Farkas Levente <lfarkas@bppiac.hu>
|
|
|
16359b2 |
|
|
|
e9f5ce6 |
* Mon Oct 16 2006 Paul Wouters <paul@xelerance.com> 2.3.6-2
|
|
|
e9f5ce6 |
- Bump version for upgrade path
|
|
|
e9f5ce6 |
|
|
|
2979b81 |
* Thu Oct 12 2006 Paul Wouters <paul@xelerance.com> 2.3.6-1
|
|
|
2979b81 |
- Upgraded to 2.3.6
|
|
|
2979b81 |
- Removed obsolete workaround in nsd.init
|
|
|
2979b81 |
- Fixed spec file so daemon gets properly restarted on upgrade
|
|
|
2979b81 |
|
|
|
232bfb4 |
* Mon Sep 11 2006 Paul Wouters <paul@xelerance.com> 2.3.5-4
|
|
|
232bfb4 |
- Rebuild requested for PT_GNU_HASH support from gcc
|
|
|
232bfb4 |
- Removed dbaccess.c from doc section
|
|
|
232bfb4 |
|
|
|
c2f0858 |
* Mon Jun 26 2006 Paul Wouters <paul@xelerance.com> - 2.3.5-3
|
|
|
c2f0858 |
- Bump version for FC-x upgrade path
|
|
|
c2f0858 |
|
|
|
c2f0858 |
* Mon Jun 26 2006 Paul Wouters <paul@xelerance.com> - 2.3.5-1
|
|
|
788b255 |
- Upgraded to nsd-2.3.5
|
|
|
788b255 |
|
|
|
babe51a |
* Sun May 7 2006 Paul Wouters <paul@xelerance.com> - 2.3.4-3
|
|
|
c025ce8 |
- Upgraded to nsd-2.3.4.
|
|
|
c025ce8 |
- Removed manual install targets because DESTDIR is now supported
|
|
|
c025ce8 |
- Re-enabled --checking, checking patch no longer needed and removed.
|
|
|
c025ce8 |
- Work around in nsd.init for nsd failing to start when there is no ipv6
|
|
|
c025ce8 |
|
|
|
e39af5e |
* Thu Dec 15 2005 Paul Wouters <paul@xelerance.com> - 2.3.3-7
|
|
|
e39af5e |
- chkconfig and attribute changes as proposed by Dmitry Butskoy
|
|
|
e39af5e |
|
|
|
1f3f193 |
* Thu Dec 15 2005 Paul Wouters <paul@xelerance.com> - 2.3.3-6
|
|
|
1f3f193 |
- Moved pid file to /var/run/nsd/nsd.pid.
|
|
|
a49fa68 |
- Use _localstatedir instead of "/var"
|
|
|
1f3f193 |
|
|
|
c98708c |
* Tue Dec 13 2005 Paul Wouters <paul@xelerance.com> - 2.3.3-5
|
|
|
c98708c |
- Added BuildRequires for openssl-devel, removed Requires for openssl.
|
|
|
c98708c |
|
|
|
c98708c |
* Mon Dec 12 2005 Paul Wouters <paul@xelerance.com> - 2.3.3-4
|
|
|
fea33a3 |
- upgraded to nsd-2.3.3
|
|
|
fea33a3 |
|
|
|
fea33a3 |
* Wed Dec 7 2005 Tom "spot" Callaway <tcallawa@redhat.com> - 2.3.2-2
|
|
|
fea33a3 |
- minor cleanups
|
|
|
fea33a3 |
|
|
|
fea33a3 |
* Mon Dec 5 2005 Paul Wouters <paul@xelerance.com> - 2.3.2-1
|
|
|
fea33a3 |
- Upgraded to 2.3.2. Changed post scripts to comply to Fedora
|
|
|
fea33a3 |
Extras policies (eg do not start daemon on fresh install)
|
|
|
fea33a3 |
|
|
|
fea33a3 |
* Tue Oct 4 2005 Paul Wouters <paul@xelerance.com> - 2.3.1-1
|
|
|
fea33a3 |
- Initial version
|