d243e33
## This package understands the following switches:
Enrico Scholz dcca5c1
%bcond_without		noarch
Enrico Scholz cd57e42
%bcond_without		systemd
Enrico Scholz dcca5c1
Enrico Scholz dcca5c1
%global _hardened_build	1
Enrico Scholz dcca5c1
Enrico Scholz dcca5c1
%global username		toranon
Enrico Scholz dcca5c1
%global homedir			%_var/lib/%name
Enrico Scholz dcca5c1
%global logdir			%_var/log/%name
Enrico Scholz dcca5c1
Enrico Scholz dcca5c1
%{?with_noarch:%global noarch	BuildArch:	noarch}
Enrico Scholz dcca5c1
Enrico Scholz dcca5c1
Enrico Scholz dcca5c1
Name:		tor
Enrico Scholz dcca5c1
Version:	0.2.3.25
dddb33c
Release:	1911%{?dist}
Enrico Scholz dcca5c1
Group:		System Environment/Daemons
Enrico Scholz dcca5c1
License:	BSD
Enrico Scholz dcca5c1
Summary:	Anonymizing overlay network for TCP (The onion router)
Enrico Scholz dcca5c1
URL:		http://www.torproject.org
Enrico Scholz dcca5c1
Requires:	%name-core = %version-%release
Enrico Scholz dcca5c1
Requires:	%name-systemd  = %version-%release
d243e33
d243e33
d243e33
%package core
Enrico Scholz dcca5c1
Summary:	Core programs for tor
Enrico Scholz dcca5c1
Group:		System Environment/Daemons
Enrico Scholz dcca5c1
Source0:	https://www.torproject.org/dist/%name-%version.tar.gz
Enrico Scholz dcca5c1
Source1:	https://www.torproject.org/dist/%name-%version.tar.gz.asc
Enrico Scholz dcca5c1
Source2:	tor.logrotate
d243e33
Enrico Scholz 5e18c18
# tor-design.pdf is not shipped anymore with tor
Enrico Scholz dcca5c1
Obsoletes:	tor-doc < 0.2.2
Enrico Scholz dcca5c1
Enrico Scholz dcca5c1
BuildRequires:	libevent-devel openssl-devel asciidoc
2b7b900
Requires(pre):  shadow-utils
d243e33
d243e33
Enrico Scholz 558597e
%package -n torify
Enrico Scholz dcca5c1
Summary:	The torify wrapper script
Enrico Scholz dcca5c1
Group:		System Environment/Daemons
Enrico Scholz fd27ca8
Requires:	torsocks
Enrico Scholz dcca5c1
# Prevent version mix
Enrico Scholz dcca5c1
Conflicts:	%name-core < %version-%release
Enrico Scholz dcca5c1
Conflicts:	%name-core > %version-%release
Enrico Scholz 558597e
%{?noarch}
Enrico Scholz 558597e
Enrico Scholz 558597e
Enrico Scholz b9ae613
%package systemd
Enrico Scholz dcca5c1
Summary:	Systemd initscripts for tor
Enrico Scholz dcca5c1
Group:		System Environment/Daemons
Enrico Scholz dcca5c1
Source10:	tor.systemd.service
Enrico Scholz dcca5c1
Requires:	%name-core = %version-%release
60828eb
Requires(post): systemd
60828eb
Requires(preun): systemd
60828eb
Requires(postun): systemd
Enrico Scholz 1606319
%{?noarch}
81fe605
81fe605
d243e33
%description
d243e33
Tor is a connection-based low-latency anonymous communication system.
d243e33
d243e33
Applications connect to the local Tor proxy using the SOCKS protocol. The
d243e33
local proxy chooses a path through a set of relays, in which each relay
d243e33
knows its predecessor and successor, but no others. Traffic flowing down
d243e33
the circuit is unwrapped by a symmetric key at each relay, which reveals
d243e33
the downstream relay.
d243e33
d243e33
Warnings: Tor does no protocol cleaning.  That means there is a danger
d243e33
that application protocols and associated programs can be induced to
d243e33
reveal information about the initiator. Tor depends on Privoxy and
d243e33
similar protocol cleaners to solve this problem. This is alpha code,
d243e33
and is even more likely than released code to have anonymity-spoiling
d243e33
bugs. The present network is very small -- this further reduces the
d243e33
strength of the anonymity provided. Tor is not presently suitable for
d243e33
high-stakes anonymity.
d243e33
d243e33
d243e33
%description core
d243e33
Tor is a connection-based low-latency anonymous communication system.
d243e33
d243e33
This package provides the "tor" program, which serves as both a client
d243e33
and a relay node.
d243e33
d243e33
Enrico Scholz 558597e
%description -n torify
Enrico Scholz 558597e
Tor is a connection-based low-latency anonymous communication system.
Enrico Scholz 558597e
Enrico Scholz 558597e
This package contains the "torify" wrapper script.
Enrico Scholz 558597e
Enrico Scholz 558597e
Enrico Scholz b9ae613
%description systemd
d243e33
Tor is a connection-based low-latency anonymous communication system.
d243e33
Enrico Scholz b9ae613
This package contains the systemd initscripts to start the "tor"
d243e33
daemon.
d243e33
d243e33
d243e33
%prep
d243e33
%setup -q
d243e33
Enrico Scholz dcca5c1
sed -i -e 's!^\(\# *\)\?DataDirectory .*!DataDirectory %homedir/.tor!' src/config/torrc.sample.in
Enrico Scholz dcca5c1
cat <<EOF >>src/config/torrc.sample.in
Enrico Scholz dcca5c1
Log notice syslog
Enrico Scholz dcca5c1
User  %username
Enrico Scholz dcca5c1
EOF
Enrico Scholz dcca5c1
d243e33
d243e33
%build
2e599d2
export LDFLAGS='-Wl,--as-needed'
Enrico Scholz dcca5c1
%configure
d243e33
make %{?_smp_mflags}
d243e33
d243e33
d243e33
%install
37ad318
rm -rf _doc _doc-torify
Enrico Scholz dcca5c1
d243e33
make install DESTDIR=$RPM_BUILD_ROOT
Enrico Scholz dcca5c1
mv $RPM_BUILD_ROOT%_sysconfdir/tor/torrc{.sample,}
d243e33
Enrico Scholz dcca5c1
mkdir -p $RPM_BUILD_ROOT{%logdir,%homedir,%_var/run/%name}
d243e33
Enrico Scholz dcca5c1
install -D -p -m 0644 %SOURCE10 $RPM_BUILD_ROOT%_unitdir/%name.service
Enrico Scholz dcca5c1
install -D -p -m 0644 %SOURCE2  $RPM_BUILD_ROOT%_sysconfdir/logrotate.d/tor
d243e33
Enrico Scholz dcca5c1
mv $RPM_BUILD_ROOT%_datadir/doc/tor _doc
Enrico Scholz 5e18c18
mkdir _doc-torify
Enrico Scholz 5e18c18
mv _doc/torify.html _doc-torify
Enrico Scholz 5e18c18
Enrico Scholz cd57e42
%{!?with_systemd:  rm -rf $RPM_BUILD_ROOT%_unitdir}
Enrico Scholz 6a11229
d243e33
d243e33
%pre core
2b7b900
getent group %username >/dev/null || groupadd -r %username
2b7b900
getent passwd %username >/dev/null || \
2b7b900
    useradd -r -s /sbin/nologin -d %homedir -M \
2b7b900
    -c 'TOR anonymizing user' -g %username %username
2b7b900
exit 0
d243e33
60828eb
%post
60828eb
%systemd_post %name.service
60828eb
60828eb
%preun
60828eb
%systemd_preun %name.service
60828eb
60828eb
%postun
60828eb
%systemd_postun_with_restart %name.service
ca4ac65
ca4ac65
d243e33
%files
ca4ac65
ca4ac65
d243e33
%files core
Enrico Scholz dcca5c1
%doc LICENSE README ChangeLog
Enrico Scholz dcca5c1
%doc ReleaseNotes
Enrico Scholz dcca5c1
%doc _doc/*
Enrico Scholz dcca5c1
%dir               %_sysconfdir/tor
Enrico Scholz dcca5c1
%config(noreplace) %_sysconfdir/logrotate.d/tor
Enrico Scholz dcca5c1
%attr(0700,%username,%username) %dir %homedir
86ed4ef
%attr(0750,%username,%username)      %dir %logdir
86ed4ef
%attr(0644,root,root) %config(noreplace) %_sysconfdir/tor/torrc
Enrico Scholz dcca5c1
%_bindir/*
Enrico Scholz dcca5c1
%_mandir/man1/*
Enrico Scholz dcca5c1
%_datadir/tor
Enrico Scholz dcca5c1
Enrico Scholz dcca5c1
%exclude %_mandir/man1/torify*
Enrico Scholz dcca5c1
%exclude %_bindir/torify
Enrico Scholz 5f727d8
Enrico Scholz 558597e
Enrico Scholz 558597e
%files -n torify
Enrico Scholz 5e18c18
%doc _doc-torify/*
Enrico Scholz dcca5c1
%_bindir/torify
Enrico Scholz dcca5c1
%_mandir/man1/torify*
Enrico Scholz dcca5c1
%dir               %_sysconfdir/tor
Enrico Scholz dcca5c1
%config(noreplace) %_sysconfdir/tor/tor-tsocks.conf
d243e33
d243e33
Enrico Scholz cd57e42
%if 0%{?with_systemd:1}
Enrico Scholz b9ae613
%files systemd
Enrico Scholz cd57e42
  %_unitdir/%name.service
Enrico Scholz cd57e42
%endif
d243e33
481b5f8
d243e33
%changelog
dddb33c
* Wed Feb 27 2013 Jamie Nguyen <jamielinux@fedoraproject.org> 0.2.3.25-1911
dddb33c
- remove tor-upstart subpackage as upstart is no longer installable within
dddb33c
  Fedora and renders the the subpackage obsolete
dddb33c
2b7b900
* Wed Feb 27 2013 Jamie Nguyen <jamielinux@fedoraproject.org> 0.2.3.25-1910
2b7b900
- remove dependency on fedora-usermgmt as it has been queued for obsoletion
2b7b900
  from Fedora
2b7b900
- add users and groups without forcing use of uid=19 as it is not necessarily
2b7b900
  available, nor is it required or expected by upstream
2b7b900
- do not remove users/groups in %%postun as the guidelines state:
2b7b900
  https://fedoraproject.org/wiki/Packaging:UsersAndGroups
2b7b900
86ed4ef
* Wed Feb 27 2013 Jamie Nguyen <jamielinux@fedoraproject.org> 0.2.3.25-1909
86ed4ef
- change permissions of the following files/directories to match upstream:
86ed4ef
  /var/log/tor should be owned by toranon:toranon with 0750 permissions;
86ed4ef
  /var/lib/tor should be owned by toranon:toranon with 0700 permissions;
86ed4ef
  /etc/tor/torrc should be owned by root:root with 0644 permissions;
86ed4ef
1ddf8b0
* Wed Feb 27 2013 Jamie Nguyen <jamielinux@fedoraproject.org> 0.2.3.25-1908
1ddf8b0
- remove unnecessary Requires on logrotate directory
1ddf8b0
37ad318
* Wed Feb 27 2013 Jamie Nguyen <jamielinux@fedoraproject.org> 0.2.3.25-1907
37ad318
- remove unnecessary BuildRoot tag
37ad318
- remove unnecessary rm -rf RPM_BUILD_ROOT
37ad318
- remove unnecessary %%clean
37ad318
- remove unnecessary defattr's
37ad318
60828eb
* Wed Feb 27 2013 Jamie Nguyen <jamielinux@fedoraproject.org> 0.2.3.25-1906
60828eb
- remove unnecessary %%_unitdir macro
60828eb
- remove %%systemd_reqs and %%systemd_install macros, moving the parts to
60828eb
  the appropriate sections to improve readability and consistency with other
60828eb
  SPECS
60828eb
16ac40a
* Wed Feb 27 2013 Jamie Nguyen <jamielinux@fedoraproject.org> 0.2.3.25-1905
16ac40a
- remove %%release_func macro to improve readability and consistency with
16ac40a
  other SPECS
16ac40a
Enrico Scholz fd27ca8
* Wed Feb 13 2013 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.3.25-1904
Enrico Scholz fd27ca8
- fixed torsocks requirement
Enrico Scholz cd57e42
- conditionalized systemd builds
Enrico Scholz cd57e42
Enrico Scholz dcca5c1
* Sun Feb 10 2013 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.3.25-1903
Enrico Scholz dcca5c1
- reverted "Package cleanup and various fixes"; too invasive and
Enrico Scholz dcca5c1
  non-auditable changes which are breaking things
Enrico Scholz dcca5c1
8a1f68a
* Thu Feb 07 2013 Jamie Nguyen <jamielinux@fedoraproject.org> - 0.2.3.25-1902
8a1f68a
- torify subpackage should depend on torsocks not tsocks (#908569)
8a1f68a
397dff1
* Wed Feb 06 2013 Jamie Nguyen <jamielinux@fedoraproject.org> - 0.2.3.25-1901
397dff1
- add additional %%configure options for user and group
397dff1
- add --defaults-torrc to systemd service to make sure sane defaults are set
397dff1
  unless explicitly overridden
397dff1
- remove unnecessary BuildRoot tag
397dff1
- remove unnecessary rm -rf RPM_BUILD_ROOT
397dff1
- remove unnecessary %%clean section
397dff1
- remove unnecessary defattr's
397dff1
- fix Requires for torify subpackage
397dff1
- update scriptlets to latest systemd guidelines
397dff1
- aesthetic changes to the SPEC for clarity and readability
397dff1
Enrico Scholz 7dbdc05
* Sun Dec  9 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.3.25-1900
Enrico Scholz 7dbdc05
- updated to 0.2.3.25
Enrico Scholz 7dbdc05
Enrico Scholz ab51a94
* Sat Sep 22 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.39-1900
Enrico Scholz ab51a94
- updated to 0.2.2.29
Enrico Scholz ab51a94
- CVE-2012-4419: assertion failure when comparing an address with port
Enrico Scholz ab51a94
  0 to an address policy
Enrico Scholz ab51a94
- CVE-2012-4422: assertion failure in tor_timegm()
Enrico Scholz ea1aa79
- use %%systemd macros
Enrico Scholz ab51a94
Enrico Scholz effda7f
* Sun Aug 19 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.38-1900
Enrico Scholz effda7f
- updated to 0.2.2.38
Enrico Scholz 6a11229
- conditionalized upstart and disabled it by default
Enrico Scholz effda7f
7680332
* Fri Jul 27 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.2.37-1801
7680332
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
7680332
Enrico Scholz 9a9ab66
* Tue Jun 12 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.37-1800
Enrico Scholz 9a9ab66
- updated to 0.2.2.37
Enrico Scholz 9a9ab66
Enrico Scholz af2f4e5
* Sat May 26 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.36-1800
Enrico Scholz af2f4e5
- updated to 0.2.2.36
Enrico Scholz af2f4e5
Enrico Scholz ef499c0
* Fri Apr 13 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.35-1800
Enrico Scholz ef499c0
- build with -fPIE
Enrico Scholz ef499c0
Enrico Scholz 3904e56
* Tue Mar  6 2012 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
Enrico Scholz 3904e56
- fixed urls (#800236)
Enrico Scholz 3904e56
05756b9
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.2.35-1702
05756b9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
05756b9
Enrico Scholz 7e0533c
* Sat Dec 17 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.35-1701
Enrico Scholz a491a2d
- added 'su' logrotate option (#751525)
Enrico Scholz 632d78c
- fixed systemd unit file; customization of TimeoutSec + LimitNOFILE is
Enrico Scholz 632d78c
  not possible by environment variables. Hardcode some values which can
Enrico Scholz 632d78c
  be overridden by the systemd .include method (#755167).
Enrico Scholz ba4e330
- added systemd rule in the postrotate script
Enrico Scholz 7e0533c
Enrico Scholz b84c8ae
* Sat Dec 17 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.35-1700
Enrico Scholz b84c8ae
- updated to 0.2.2.35 (security)
Enrico Scholz b84c8ae
- CVE-2011-2778: Tor heap-based buffer overflow
Enrico Scholz b84c8ae
Enrico Scholz f87a00a
* Fri Oct 28 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.34-1700
Enrico Scholz f87a00a
- updated to 0.2.2.34; critical privacy/anonymity fixes
Enrico Scholz 58e3d78
- CVE-2011-2768
Enrico Scholz 58e3d78
- CVE-2011-2769
Enrico Scholz f87a00a
1961e7a
* Wed Oct 26 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.2.33-1701
1961e7a
- Rebuilt for glibc bug#747377
1961e7a
Enrico Scholz 5e18c18
* Sun Sep 18 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.2.33-1700
Enrico Scholz 5e18c18
- updated to 2.2.33
Enrico Scholz 5e18c18
- removed -doc subpackage because shipped files are not available
Enrico Scholz 5e18c18
  anymore
Enrico Scholz 5f727d8
- ship torify files only in torify subpackage; not in main one
Enrico Scholz 393af75
- start systemd service after nss-lookup.target (#719476)
Enrico Scholz 5e18c18
Enrico Scholz ef9e562
* Thu Jul 28 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.30-1700
Enrico Scholz ef9e562
- added and use systemd macros
Enrico Scholz ef9e562
Enrico Scholz 4ac537c
* Thu Mar 17 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.30-1601
Enrico Scholz 5966c83
- made EnvironmentFile in systemd definition optional
Enrico Scholz 1606319
- systemd: added Requires: for core package; made it noarch
Enrico Scholz 5966c83
Enrico Scholz daadcbf
* Mon Feb 28 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.30-1600
Enrico Scholz daadcbf
- updated to 0.2.1.30
Enrico Scholz 558597e
- added 'torify' script (#669684)
Enrico Scholz daadcbf
97c0561
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.1.29-1501
97c0561
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
97c0561
Enrico Scholz be547a2
* Mon Jan 17 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.29-1500
Enrico Scholz be547a2
- updated to 0.2.1.29 (SECURITY)
Enrico Scholz be547a2
- CVE-2011-0427: heap overflow bug, potential remote code execution
Enrico Scholz be547a2
Luke Macken 5fe7ea9
* Tue Dec 21 2010 Luke Macken <lmacken@redhat.com> - 0.2.1.28-1502
Luke Macken 0697cae
- updated to 0.2.1.28 (SECURITY: fixes a remotely exploitable heap overflow bug)
Luke Macken 0697cae
Enrico Scholz b9ae613
* Tue Dec  7 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.27-1501
Enrico Scholz b9ae613
- replaced lsb and sysv init stuff with systemd init script
Enrico Scholz b9ae613
Enrico Scholz 02e6842
* Fri Nov 26 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.27-1500
Enrico Scholz 02e6842
- updated to 0.2.1.27
Enrico Scholz 594b82e
- added tmpfiles.d file to create %%_var/run/%%name directory in -lsb
Enrico Scholz fe953a1
- work around broken chkconfig by adding dummy Default-Start: in -lsb
Enrico Scholz 02e6842
Enrico Scholz 571c1e1
* Fri Nov 26 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.26-1500
Enrico Scholz 571c1e1
- fixed 'limit' statement in upstart script
Enrico Scholz 571c1e1
a6e6e58
* Tue Jun  1 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.26-1400
a6e6e58
- updated to 0.2.1.26
a6e6e58
- log to syslog as request by upstream (#532373#19)
a6e6e58
- removed workaround to install lsb initscript because parts of the
a6e6e58
  underlying problem have been fixed in redhat-lsb and the remaining
a6e6e58
  ones were solved by previous commit
a6e6e58
- removed $local_fs dependency in -lsb initscript to workaround
a6e6e58
  buggy redhat-lsb; $remote_fs should imply it and has been moved to
a6e6e58
  Should-Start:
a6e6e58
ca4ac65
* Tue Jun  1 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
ca4ac65
- created -doc subpackage and moved most (all) files from main into it
ca4ac65
81fe605
* Sun Mar 28 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
81fe605
- added -sysv subpackage
81fe605
7a32f8a
* Thu Mar 18 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.25-1400
7a32f8a
- updated to 0.2.1.25
7a32f8a
c985ebf
* Wed Mar  3 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.24-1402
c985ebf
- removed /var/lib/tor-data dir (Chen Lei)
c985ebf
7589c34
* Tue Mar  2 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.24-1401
7589c34
- require tor-core, not tor in -upstart (thx to Dave Jones)
7589c34
77120ad
* Sat Feb 27 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.24-1400
77120ad
- updated to 0.2.1.24
77120ad
decf0b3
* Mon Feb 15 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.23-1300
decf0b3
- updated to 0.2.1.23
decf0b3
904ac82
* Thu Jan 21 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.22-1300
904ac82
- updated to 0.2.1.22
904ac82
a208a5d
* Thu Dec 31 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.21-1300
a208a5d
- updated to 0.2.1.21
a208a5d
afc380d
* Sun Dec  6 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.20-1301
afc380d
- updated -upstart to upstart 0.6.3
afc380d
fa9528a
* Sat Nov 14 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.20-1300
fa9528a
- updated URLs (#532373)
3732221
- removed (inactive) update mechanism for GeoIP data; this might
3732221
  reduce anonimity  (#532373)
3732221
- use the pidfile at various places in the LSB initscript to operate
3732221
  on the correct process (#532373)
fa9528a
- set a higher 'nofile' limit in the upstart initscript to allow fast
fa9528a
  relays; LSB users will have to add a 'ulimit -n' into /etc/sysconfig/tor
fa9528a
  to get a similar effect (#532373)
3732221
- let the LSB initscript wait until process exits within a certain
3732221
  time; this fixes shutdown/restart problems when working as a server
3732221
  (#532373)
3732221
- fixed initng related typo in logrotate script (#532373)
3732221
- removed <linux/netfilter_ipv4.h> hack; it is fixed upstream and/or
3732221
  in the kernel sources
fa9528a
- use %%postun, not %%post as a -upstart scriptlet and send INT, not
fa9528a
  TERM signal to stop/restart daemon
fa9528a
30f82ed
* Sun Oct 25 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.20-1
30f82ed
- updated to 0.2.1.20
30f82ed
324f1e3
* Sat Sep 12 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.19-2
324f1e3
- workaround bug in redhat-lsb (#522053)
324f1e3
a0a2c71
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 0.2.1.19-1
a0a2c71
- rebuilt with new openssl
a0a2c71
158f965
* Sun Aug  9 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.19-0
158f965
- updated to 0.2.1.19
158f965
- rediffed patches
158f965
deb6a8a
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0.35-2
deb6a8a
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
deb6a8a
4883443
* Fri Jun 26 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.35-1
4883443
- updated to 0.2.0.35
4883443
- added '--quiet' to startup options (bug #495987)
14aa17d
- updated %%doc entries
4883443
fbe5024
* Wed May  6 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.34-4
fbe5024
- made it easy to rebuild package in RHEL by adding a 'noarch'
fbe5024
  conditional to enable/disable noarch subpackages
fbe5024
481b5f8
* Sat Mar  7 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.34-3
481b5f8
- added -upstart subpackage (-lsb still wins by default as there exists
481b5f8
  no end-user friendly solution for managing upstart initscripts)
481b5f8
f1bcd51
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0.34-2
f1bcd51
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
f1bcd51
ba9fc1b
* Tue Feb 10 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.34-1
ba9fc1b
- updated to 0.2.0.34 (SECURITY: fixes DoS vulnerabilities)
ba9fc1b
4460497
* Thu Jan 22 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.33-1
4460497
- updated to 0.2.0.33 (SECURITY: fixed heap-corruption bug)
4460497
51f8f68
* Sun Jan 18 2009 Tomas Mraz <tmraz@redhat.com> - 0.2.0.32-2
51f8f68
- rebuild with new openssl
51f8f68
19c708b
* Sun Dec  7 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.32-1
19c708b
- updated to 0.2.0.32
19c708b
- removed -setgroups patch; supplementary groups are now set upstream
19c708b
2e599d2
* Sun Jul 20 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.30-1
5b8e530
- updated to 0.2.0.30; rediffed patches
2e599d2
- (re)enabled transparent proxy support by workarounding broken
2e599d2
  <linux/netfilter_ipv4.h> header
2e599d2
- moved the 'geoip' database to /var/lib/tor-data where it can be
2e599d2
  updated periodically
2e599d2
- built with -Wl,--as-needed
2e599d2
Nikolay Vladimirov b1da098
* Thu Jul 10 2008 Nikolay Vladimirov <nikolay@vladimiroff.com> - 0.1.2.19-3
Nikolay Vladimirov b1da098
- rebuild for new libevent
Nikolay Vladimirov b1da098
e98ad5b
* Wed Feb 13 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.19-2
e98ad5b
- added 'missingok' to logrotate script (#429402)
e98ad5b
ae3a018
* Tue Feb 12 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.19-1
ae3a018
- updated to 0.1.2.19
ae3a018
- use file based BR for latex
ae3a018
- improved 'status' method of initscript to return rc of 'pidofproc'
ae3a018
  instead of doing further manual tests.  Calling 'pidofproc' directly
ae3a018
  instead of within a subshell should workaround #432254 too.
ae3a018
e740077
* Sat Jan 26 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 0.1.2.18-4
e740077
- Update BuildRequires: tex(latex),
e740077
- BR: texlive-texmf-fonts seems also to be necessary
e740077
e740077
* Sat Jan 26 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 0.1.2.18-3
50e64c3
- Rebuild for new libevent.
50e64c3
bbc2d14
* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> - 0.1.2.18-2
bbc2d14
- Rebuild for deps
bbc2d14
740a459
* Tue Oct 30 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.18-1
740a459
- updated to 0.1.2.18
740a459
cbea9b1
* Fri Aug 31 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.17-1
cbea9b1
- updated to 0.1.2.17
cbea9b1
1f89aa3
* Sat Aug 25 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.16-2
1f89aa3
- fixed open(2) issue
1f89aa3
17039a9
* Fri Aug  3 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.16-1
17039a9
- updated to 0.1.2.16 (SECURITY)
17039a9
03d84ae
* Sat Jul 28 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.15-1
03d84ae
- updated to 0.1.2.15
03d84ae
9a4d761
* Sat May 26 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.14-1
9a4d761
- updated to 0.1.2.14
9a4d761
126c378
* Wed Apr 25 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.13-1
126c378
- updated to 0.1.2.13
126c378
- minor cleanups; especially in the %%doc section
126c378
f5249f3
* Sun Apr  8 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-4
f5249f3
- rebuilt for (yet another) new libevent
f5249f3
632808c
* Mon Feb 26 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-3
632808c
- rebuilt for new libevent
632808c
36321bd
* Wed Jan 24 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-2
36321bd
- updated -setgroups patch (#224090, thx to Sami Farin)
36321bd
1ed7ca9
* Sun Dec 17 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-1
1ed7ca9
- updated to 0.1.1.26 (SECURITY)
1ed7ca9
- do not turn on logging by default; it's easier to say "we do not log
1ed7ca9
  anything" to the police instead of enumerating the logged event
1ed7ca9
  classes and trying to explain that they do not contain any valuable
1ed7ca9
  information
1ed7ca9
1ed7ca9
* Sun Nov 12 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.25-1
1ed7ca9
- updated to 0.1.1.25
1ed7ca9
965ed04
* Thu Oct  5 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.24-1
965ed04
- updated to 0.1.1.24
965ed04
c1d09ab
* Sat Sep 30 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-5
c1d09ab
- updated to recent fedora-usermgmt
c1d09ab
- minor cleanups
c1d09ab
- require only 'lsb-core-noarch' instead of whole 'lsb'
c1d09ab
3959dc5
* Tue Sep 26 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-4
3959dc5
- first FE release (review #175433)
3959dc5
d243e33
* Mon Sep 25 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-3
d243e33
- removed '.have-lsb' and related logic in logrotate script; check for
d243e33
  existence of the corresponding initscript instead of
d243e33
- fixed bare '%%' in changelog section
d243e33
d243e33
* Thu Sep 21 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-2
d243e33
- simplified things yet more and removed tsocks/torify too
d243e33
- build -lsb unconditionally
d243e33
d243e33
* Thu Sep 21 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-1
d243e33
- simplified spec file and removed -initng and -minit stuff
d243e33
d243e33
* Sun Aug 13 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-0
d243e33
- updated to 0.1.1.23
d243e33
d243e33
* Sat Jul  8 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.22-0
d243e33
- updated to 0.1.1.22
d243e33
d243e33
* Tue Jun 13 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.21-0
d243e33
- updated to 0.1.1.21
d243e33
d243e33
* Wed May 24 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.20-0
d243e33
- updated to 0.1.1.20; adjusted %%doc file-list
d243e33
- added (optional) -tsocks subpackage
d243e33
- use the more modern %%bcond_with* for specifying optional features
d243e33
d243e33
* Sun Feb 19 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.17-0
d243e33
- updated to 0.1.0.17
d243e33
d243e33
* Mon Jan 30 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.16-0.1
d243e33
- renamed the current main-package into a '-core' subpackage and
d243e33
  created a new main-package which requires both the 'tor-core'
d243e33
  subpackage and this with the current default init-method. This
d243e33
  allows 'yum install tor' to work better; because yum is not very
d243e33
  smart, the old packaging might install unwanted packages else.
d243e33
d243e33
* Wed Jan  4 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.16-0
d243e33
- updated to 0.1.0.16
d243e33
d243e33
* Fri Dec 23 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.11
d243e33
- reworked the 'setgroups' patch so that 'tor' survives a SIGHUP
d243e33
- (re)added the 'reload' functionality to the lsb initscript and use
d243e33
  it in logrotate
d243e33
d243e33
* Fri Dec 23 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.8
d243e33
- added ChangeLog to %%doc
d243e33
- made torrc not world-readable
d243e33
- added logrotate script
d243e33
d243e33
* Thu Dec 22 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.4
d243e33
- updated initng scripts to initng-0.4.8 syntax
d243e33
- tweaked some Requires(...):
d243e33
- added ghostscript BuildRequires:
d243e33
- install initng scripts into the correct dir
d243e33
d243e33
* Thu Dec 15 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.2
d243e33
- use relative UID of 19 instead of 18 due to conflicts with the
d243e33
  'munin' package
d243e33
d243e33
* Wed Dec 14 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.1
d243e33
- added -minit subpackage
d243e33
d243e33
* Sat Dec 10 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1
d243e33
- initial build