bc5dde
#
bc5dde
# Red Hat BIND package .spec file
bc5dde
#
bc5dde
3ce7d3
%global PATCHVER P2
3ce7d3
#%%global PREVER rc1
3ce7d3
%global BINDVERSION %{version}%{?PREVER}%{?PATCHVER:-%{PATCHVER}}
3ce7d3
3ce7d3
# bcond_without is built by default, unless --without X is passed
3ce7d3
# bcond_with is built only when --with X is passed to build
3ce7d3
%bcond_without UNITTEST
3ce7d3
%bcond_with    SYSTEMTEST
3ce7d3
%bcond_without SDB
3ce7d3
%bcond_without GSSTSIG
3ce7d3
# it is not possible to build the package without PKCS11 sub-package
3ce7d3
# due to extensive changes to Makefiles
3ce7d3
%bcond_without PKCS11
3ce7d3
%bcond_without DEVEL
3ce7d3
%bcond_with    LMDB
3ce7d3
%bcond_with    DLZ
3ce7d3
%bcond_without EXPORT_LIBS
3ce7d3
%if 0%{?fedora} >= 17
3ce7d3
%bcond_without KYUA
3ce7d3
%else
3ce7d3
%bcond_with    KYUA
3ce7d3
%endif
3ce7d3
bc5dde
%{?!bind_uid:  %global bind_uid  25}
bc5dde
%{?!bind_gid:  %global bind_gid  25}
bc5dde
%global        bind_dir          /var/named
bc5dde
%global        chroot_prefix     %{bind_dir}/chroot
24159a
%global        selinuxbooleans   named_write_master_zones=1
3ce7d3
%if %{with SDB}
fd4b48
%global        chroot_sdb_prefix %{bind_dir}/chroot_sdb
fd4b48
%endif
3ce7d3
## The order of libs is important. See lib/Makefile.in for details
3ce7d3
%define bind_export_libs isc dns isccfg irs
3ce7d3
%{!?_export_dir:%global _export_dir /bind9-export/}
3ce7d3
# libisc-nosym requires to be linked with unresolved symbols
3ce7d3
# When libisc-nosym linking is fixed, it can be defined to 1
3ce7d3
# Visit https://bugzilla.redhat.com/show_bug.cgi?id=1540300
3ce7d3
%undefine _strict_symbol_defs_build
bc5dde
#
3ce7d3
3ce7d3
# lib*.so.X versions of selected libraries
3ce7d3
%global sover_dns 1102
3ce7d3
%global sover_isc 169
3ce7d3
%global sover_irs 160
3ce7d3
%global sover_isccfg 160
3ce7d3
3ce7d3
# Fix permissions on existing device files on upgrade
3ce7d3
%define chroot_fix_devices() \
3ce7d3
if [ $1 -gt 1 ]; then \
3ce7d3
  for DEV in "%{1}/dev"/{null,random,zero}; do \
3ce7d3
    if [ -e "$DEV" ] && [ "$(/bin/stat --printf="%G %a" "$DEV")" = "root 644" ]; \
3ce7d3
    then \
3ce7d3
      /bin/chmod 0664 "$DEV" \
3ce7d3
      /bin/chgrp named "$DEV" \
3ce7d3
    fi \
3ce7d3
  done \
3ce7d3
fi
3ce7d3
bc5dde
Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
bc5dde
Name:     bind
3ce7d3
License:  MPLv2.0
3ce7d3
Version:  9.11.4
ee1d55
Release:  26%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}.16
bc5dde
Epoch:    32
bc5dde
Url:      http://www.isc.org/products/BIND/
bc5dde
#
3ce7d3
Source:   https://ftp.isc.org/isc/bind9/%{BINDVERSION}/bind-%{BINDVERSION}.tar.gz
bc5dde
Source1:  named.sysconfig
bc5dde
Source3:  named.logrotate
bc5dde
Source7:  bind-9.3.1rc1-sdb_tools-Makefile.in
bc5dde
Source8:  dnszone.schema
bc5dde
Source12: README.sdb_pgsql
bc5dde
Source25: named.conf.sample
24159a
Source26: named.conf
3ce7d3
Source28: config-18.tar.bz2
c2d1e6
# Up-to-date bind.keys from upstream
c2d1e6
# Fetch a new one from page https://www.isc.org/bind-keys
c2d1e6
Source29: bind.keys
bc5dde
Source30: ldap2zone.c
bc5dde
Source31: ldap2zone.1
bc5dde
Source32: named-sdb.8
bc5dde
Source33: zonetodb.1
bc5dde
Source34: zone2sqlite.1
bc5dde
Source35: bind.tmpfiles.d
bc5dde
Source36: trusted-key.key
bc5dde
Source37: named.service
bc5dde
Source38: named-chroot.service
bc5dde
Source39: named-sdb.service
bc5dde
Source40: named-sdb-chroot.service
bc5dde
Source41: setup-named-chroot.sh
bc5dde
Source42: generate-rndc-key.sh
fd4b48
Source43: named.rwtab
fd4b48
Source44: named-chroot-setup.service
fd4b48
Source45: named-sdb-chroot-setup.service
fd4b48
Source46: named-setup-rndc.service
d56ed2
Source47: named-pkcs11.service
3ce7d3
Source48: setup-named-softhsm.sh
3ce7d3
Source49: named-chroot.files
bc5dde
bc5dde
# Common patches
bc5dde
Patch10: bind-9.5-PIE.patch
bc5dde
Patch16: bind-9.3.2-redhat_doc.patch
bc5dde
Patch72: bind-9.5-dlz-64bit.patch
bc5dde
Patch101:bind-96-old-api.patch
bc5dde
Patch102:bind-95-rh452060.patch
bc5dde
Patch106:bind93-rh490837.patch
bc5dde
Patch109:bind97-rh478718.patch
bc5dde
Patch112:bind97-rh645544.patch
964723
Patch124:bind93-rh726120.patch
fd4b48
Patch130:bind-9.9.1-P2-dlz-libdb.patch
3ce7d3
# Make tests on all architectures and disable it
bc5dde
Patch131:bind-9.9.1-P2-multlib-conflict.patch
bc5dde
Patch133:bind99-rh640538.patch
bc5dde
Patch134:bind97-rh669163.patch
3ce7d3
# Fedora specific patch to distribute native-pkcs#11 functionality
3ce7d3
Patch136:bind-9.10-dist-native-pkcs11.patch
3ce7d3
3ce7d3
# [ISC-Bugs #42525] non-portable use of strlcat in contrib/sdb/ldap/zone2ldap.c
3ce7d3
# introduced by https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commit;h=fc9f0ac5778f78003a7acc957a23711811fec122
3ce7d3
Patch137:bind-9.10-use-of-strlcat.patch
3ce7d3
Patch140:bind-9.11-rh1410433.patch
3ce7d3
Patch145:bind-9.11-rh1205168.patch
3ce7d3
# [ISC-Bugs #46853] commit cb616c6d5c2ece1fac37fa6e0bca2b53d4043098 ISC 4851
3ce7d3
Patch149:bind-9.11-kyua-pkcs11.patch
3ce7d3
Patch153:bind-9.11-export-suffix.patch
3ce7d3
Patch154:bind-9.11-oot-manual.patch
3ce7d3
Patch155:bind-9.11-pk11.patch
3ce7d3
Patch156:bind-9.11-fips-code.patch
3ce7d3
Patch157:bind-9.11-fips-tests.patch
3ce7d3
# commit 66ba2fdad583d962a1f4971c85d58381f0849e4d
3ce7d3
# commit b105ccee68ccc3c18e6ea530063b3c8e5a42571c
3ce7d3
# commit 083461d3329ff6f2410745848a926090586a9846
3ce7d3
Patch158:bind-9.11-rh1624100.patch
3ce7d3
Patch159:bind-9.11-host-idn-disable.patch
3ce7d3
# RHEL 7 feature reset patches
3ce7d3
# Disables sending cookies by default
3ce7d3
Patch160:bind-9.11-no-default-cookies.patch
3ce7d3
# Disables listening on IPv6 by default
3ce7d3
Patch161:bind-9.11-no-default-ipv6.patch
3ce7d3
# Accept dnssec-lookaside yes with a warning
3ce7d3
Patch162:bind-9.11-dnssec-lookaside.patch
3ce7d3
# Downgrade libidn2 usage back to libidn
3ce7d3
Patch163:bind-9.11-libidn.patch
3ce7d3
# https://gitlab.isc.org/isc-projects/bind9/issues/225
3ce7d3
Patch164:bind-9.11-ed448-disable.patch
3ce7d3
# random_test fails too often by random, disable it
3ce7d3
Patch165:bind-9.11-unit-disable-random.patch
3ce7d3
Patch166:bind-9.11-rh1685940.patch
3ce7d3
Patch167:bind-9.11-CVE-2018-5743.patch
3ce7d3
Patch168:bind-9.11-CVE-2018-5743-atomic.patch
3ce7d3
Patch169:bind-9.11-CVE-2019-6471.patch
302b22
Patch170:bind-9.11-CVE-2018-5745.patch
302b22
Patch171:bind-9.11-CVE-2019-6465.patch
302b22
Patch172:bind-9.11-rh1732883.patch
302b22
Patch173: bind-9.11-CVE-2018-5745-testfix.patch
302b22
Patch174: bind-9.11-rh1743572.patch
302b22
Patch175: bind-9.11.4-CVE-2019-6477.patch
302b22
Patch176: bind-9.11-rh1753259.patch
302b22
Patch177: bind-9.11-rh1743572-2.patch
1872c6
Patch178: bind-9.11-rh1781576.patch
1872c6
Patch179: bind-9.11-disab-timer-test.patch
db4030
Patch180: bind-9.11-rh1744081.patch
db4030
Patch181: bind-9.11-rh1300636.patch
db4030
Patch182: bind-9.11-rh1756201.patch
db4030
Patch183: bind-9.11.13-CVE-2020-8616.patch
db4030
Patch184: bind-9.11.13-CVE-2020-8617.patch
9abc64
Patch185: bind-9.11-CVE-2020-8616-test.patch
9abc64
Patch186: bind-9.11-CVE-2020-8617-test.patch
db4030
Patch187: bind-9.11-rh1832812.patch
db4030
Patch188: bind-9.11-edns512-tcp-loops.patch
5fe83d
Patch189: bind-9.11-CVE-2020-8622.patch
5fe83d
Patch190: bind-9.11-CVE-2020-8623.patch
5fe83d
Patch191: bind-9.11-CVE-2020-8624.patch
5fe83d
Patch192: bind98-rh1769876.patch
5d1446
Patch193: bind-9.11-rh1889902.patch
bbc600
Patch194: bind-9.11-CVE-2020-8625.patch
122de2
Patch195: bind-9.11-CVE-2021-25215.patch
96aeb7
# https://gitlab.isc.org/isc-projects/bind9/commit/dfadbc9d7b485b1af62d77ad6c309792bbaabfdf
96aeb7
Patch196: bind-9.11-CVE-2021-25214.patch
34afcc
Patch197: bind-9.11-rh2011220.patch
c21dae
Patch198: bind-9.11-rh1935152.patch
88d8b6
Patch200: bind-9.16-CVE-2022-38177.patch
88d8b6
Patch201: bind-9.16-CVE-2022-38178.patch
a9e10b
Patch202: bind-9.11-CVE-2022-2795.patch
a9e10b
Patch203: bind-9.11-CVE-2021-25220-test.patch
a9e10b
Patch204: bind-9.11-CVE-2021-25220.patch
7cb01a
Patch205: bind-9.11-CVE-2023-2828.patch
f80c77
Patch206: bind-9.11-CVE-2023-3341.patch
ee1d55
Patch207: bind-9.11.4-CVE-2023-50387.patch
ee1d55
Patch208: bind-9.11.4-missing-DBC-checks.patch
ee1d55
Patch209: bind-9.11.4-CVE-2023-4408.patch
ee1d55
Patch210: bind-9.11.4-CVE-2023-2828-fixup.patch
bc5dde
bc5dde
# SDB patches
bc5dde
Patch11: bind-9.3.2b2-sdbsrc.patch
3ce7d3
Patch12: bind-9.10-sdb.patch
bc5dde
bc5dde
# needs inpection
bc5dde
Patch17: bind-9.3.2b1-fix_sdb_ldap.patch
3ce7d3
Patch18: bind-9.11-zone2ldap.patch
bc5dde
3ce7d3
Requires(post):   systemd
bc5dde
Requires(preun):  systemd
bc5dde
Requires(postun): systemd
bc5dde
Requires:       coreutils
3ce7d3
Requires(pre):  shadow-utils
24159a
Requires(post): shadow-utils
24159a
Requires(post): glibc-common
3ce7d3
Requires(post): grep
3ce7d3
Requires:       bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires:       bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
bc5dde
Obsoletes:      bind-config < 30:9.3.2-34.fc6
bc5dde
Provides:       bind-config = 30:9.3.2-34.fc6
bc5dde
Obsoletes:      caching-nameserver < 31:9.4.1-7.fc8
bc5dde
Provides:       caching-nameserver = 31:9.4.1-7.fc8
bc5dde
Obsoletes:      dnssec-conf < 1.27-2
3ce7d3
Provides:       dnssec-conf = 1.27-2
3ce7d3
BuildRequires:  gcc, make
24159a
Requires:       python-ply
24159a
Provides:       python-isc = %{epoch}:%{version}-%{release}
24159a
Provides:       python-bind = %{epoch}:%{version}-%{release}
24159a
# selinux_set_booleans requires
24159a
Requires(post):      policycoreutils-python, libselinux-utils, selinux-policy
24159a
Requires(postun):    policycoreutils-python, libselinux-utils, selinux-policy
3ce7d3
# Ensures at least one selinux-policy-X is installed when post is executed.
3ce7d3
# Needed for selinux-policy-targeted to be already installed, but not requiring it explicitly
3ce7d3
# Should be satisfied with selinux-policy-minimum if no selinux policy is used
3ce7d3
Requires(post):      selinux-policy-base
3ce7d3
Requires(postun):    selinux-policy-base
bc5dde
BuildRequires:  openssl-devel, libtool, autoconf, pkgconfig, libcap-devel
310562
BuildRequires:  libidn-devel, libxml2-devel, GeoIP-devel
3ce7d3
BuildRequires:  systemd
3ce7d3
# needed for %%{__python} macro
3ce7d3
BuildRequires:  python-devel
24159a
BuildRequires:  python-ply
24159a
BuildRequires:  selinux-policy
3ce7d3
BuildRequires:  findutils sed
3ce7d3
%if %{with SDB}
3ce7d3
BuildRequires:  openldap-devel, postgresql-devel, sqlite-devel, mariadb-devel
fd4b48
BuildRequires:  libdb-devel
bc5dde
%endif
3ce7d3
%if %{with KYUA}
3ce7d3
# make unit dependencies
3ce7d3
BuildRequires:  libatf-c-devel kyua
3ce7d3
%else
3ce7d3
# shipped atf library requires c++
3ce7d3
BuildRequires:  gcc-c++
3ce7d3
%endif
3ce7d3
%if %{with PKCS11}
3ce7d3
BuildRequires:  softhsm
3ce7d3
%endif
3ce7d3
%if %{with SYSTEMTEST}
3ce7d3
# bin/tests/system dependencies
3ce7d3
BuildRequires:  net-tools perl(Net::DNS) perl(Net::DNS::Nameserver)
bc5dde
%endif
3ce7d3
%if %{with GSSTSIG}
bc5dde
BuildRequires:  krb5-devel
bc5dde
%endif
3ce7d3
%if %{with LMDB}
3ce7d3
BuildRequires:  lmdb-devel
3ce7d3
%endif
bc5dde
# Needed to regenerate dig.1 manpage
bc5dde
BuildRequires: docbook-style-xsl, libxslt
bc5dde
bc5dde
%description
bc5dde
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
bc5dde
(Domain Name System) protocols. BIND includes a DNS server (named),
bc5dde
which resolves host names to IP addresses; a resolver library
bc5dde
(routines for applications to use when interfacing with DNS); and
bc5dde
tools for verifying that the DNS server is operating properly.
bc5dde
3ce7d3
%if %{with PKCS11}
bc5dde
%package pkcs11
d56ed2
Summary: Bind with native PKCS#11 functionality for crypto
3ce7d3
Requires: systemd
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-pkcs11-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
#Recommends: softhsm
bc5dde
bc5dde
%description pkcs11
d56ed2
This is a version of BIND server built with native PKCS#11 functionality.
d56ed2
It is important to have SoftHSM v2+ installed and some token initialized.
d56ed2
For other supported HSM modules please check the BIND documentation.
d56ed2
This version of BIND binary is supported only in setup with the IPA server.
d56ed2
d56ed2
%package pkcs11-utils
d56ed2
Summary: Bind tools with native PKCS#11 for using DNSSEC
3ce7d3
Requires: bind-pkcs11-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Obsoletes: bind-pkcs11 < 32:9.9.4-16.P2 
d56ed2
d56ed2
%description pkcs11-utils
bc5dde
This is a set of PKCS#11 utilities that when used together create rsa
d56ed2
keys in a PKCS11 keystore. Also utilities for working with DNSSEC
d56ed2
compiled with native PKCS#11 functionality are included.
d56ed2
d56ed2
%package pkcs11-libs
d56ed2
Summary: Bind libraries compiled with native PKCS#11
d56ed2
Group:   System Environment/Daemons
d56ed2
Requires: bind-license = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
d56ed2
d56ed2
%description pkcs11-libs
d56ed2
This is a set of BIND libraries (dns, isc) compiled with native PKCS#11
d56ed2
functionality.
d56ed2
d56ed2
%package pkcs11-devel
d56ed2
Summary: Development files for Bind libraries compiled with native PKCS#11
d56ed2
Group:   System Environment/Daemons
3ce7d3
Requires: bind-pkcs11-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-lite-devel%{?_isa} = %{epoch}:%{version}-%{release}
d56ed2
d56ed2
%description pkcs11-devel
d56ed2
This a set of development files for BIND libraries (dns, isc) compiled
d56ed2
with native PKCS#11 functionality.
bc5dde
%endif
bc5dde
3ce7d3
%if %{with SDB}
bc5dde
%package sdb
bc5dde
Summary: BIND server with database backends and DLZ support
3ce7d3
Requires: systemd
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
bc5dde
bc5dde
%description sdb
bc5dde
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
bc5dde
(Domain Name System) protocols. BIND includes a DNS server (named-sdb)
bc5dde
which has compiled-in SDB (Simplified Database Backend) which includes
bc5dde
support for using alternative Zone Databases stored in an LDAP server
bc5dde
(ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb),
bc5dde
or in the filesystem (dirdb), in addition to the standard in-memory RBT
bc5dde
(Red Black Tree) zone database. It also includes support for DLZ
bc5dde
(Dynamic Loadable Zones)
bc5dde
%endif
bc5dde
bc5dde
%package libs-lite
bc5dde
Summary:  Libraries for working with the DNS protocol
bc5dde
Obsoletes:bind-libbind-devel < 31:9.3.3-4.fc7
bc5dde
Provides: bind-libbind-devel = 31:9.3.3-4.fc7
bc5dde
Requires: bind-license = %{epoch}:%{version}-%{release}
bc5dde
bc5dde
%description libs-lite
bc5dde
Contains lite version of BIND suite libraries which are used by various
bc5dde
programs to work with DNS protocol.
bc5dde
bc5dde
%package libs
bc5dde
Summary: Libraries used by the BIND DNS packages
bc5dde
Requires: bind-license = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
bc5dde
bc5dde
%description libs
bc5dde
Contains heavyweight version of BIND suite libraries used by both named DNS
bc5dde
server and utilities in bind-utils package.
bc5dde
bc5dde
%package license
bc5dde
Summary:  License of the BIND DNS suite
bc5dde
BuildArch:noarch
bc5dde
bc5dde
%description license
bc5dde
Contains license of the BIND DNS suite.
bc5dde
bc5dde
%package utils
bc5dde
Summary: Utilities for querying DNS name servers
3ce7d3
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
bc5dde
bc5dde
%description utils
bc5dde
Bind-utils contains a collection of utilities for querying DNS (Domain
bc5dde
Name System) name servers to find out information about Internet
bc5dde
hosts. These tools will provide you with the IP addresses for given
bc5dde
host names, as well as other information about registered domains and
bc5dde
network addresses.
bc5dde
bc5dde
You should install bind-utils if you need to get information from DNS name
bc5dde
servers.
bc5dde
3ce7d3
%if %{with DEVEL}
bc5dde
%package devel
bc5dde
Summary:  Header files and libraries needed for BIND DNS development
bc5dde
Obsoletes:bind-libbind-devel < 31:9.3.3-4.fc7
bc5dde
Provides: bind-libbind-devel = 31:9.3.3-4.fc7
3ce7d3
Requires: bind-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: bind-lite-devel%{?_isa} = %{epoch}:%{version}-%{release}
bc5dde
bc5dde
%description devel
bc5dde
The bind-devel package contains full version of the header files and libraries
bc5dde
required for development with ISC BIND 9
bc5dde
%endif
bc5dde
bc5dde
%package lite-devel
bc5dde
Summary:  Lite version of header files and libraries needed for BIND DNS development
3ce7d3
Requires: bind-libs-lite%{?_isa} = %{epoch}:%{version}-%{release}
bc5dde
bc5dde
%description lite-devel
bc5dde
The bind-lite-devel package contains lite version of the header
bc5dde
files and libraries required for development with ISC BIND 9
bc5dde
bc5dde
%package chroot
bc5dde
Summary:        A chroot runtime environment for the ISC BIND DNS server, named(8)
bc5dde
Prefix:         %{chroot_prefix}
3ce7d3
# grep is required due to setup-named-chroot.sh script
3ce7d3
Requires:       grep
3ce7d3
Requires:       bind%{?_isa} = %{epoch}:%{version}-%{release}
bc5dde
bc5dde
%description chroot
bc5dde
This package contains a tree of files which can be used as a
bc5dde
chroot(2) jail for the named(8) program from the BIND package.
bc5dde
Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>
bc5dde
3ce7d3
%if %{with SDB}
fd4b48
%package sdb-chroot
fd4b48
Summary:        A chroot runtime environment for the ISC BIND DNS server, named-sdb(8)
3ce7d3
Prefix:         %{chroot_sdb_prefix}
fd4b48
Group:          System Environment/Daemons
3ce7d3
# grep is required due to setup-named-chroot.sh script
3ce7d3
Requires:       grep
3ce7d3
Requires:       bind-sdb%{?_isa} = %{epoch}:%{version}-%{release}
fd4b48
Requires:       systemd-units
fd4b48
fd4b48
%description sdb-chroot
fd4b48
This package contains a tree of files which can be used as a
fd4b48
chroot(2) jail for the named-sdb(8) program from the BIND package.
fd4b48
Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>
fd4b48
%endif
fd4b48
fd4b48
3ce7d3
%if %{with DLZ}
3ce7d3
%package dlz-bdb
3ce7d3
Summary: BIND server bdb DLZ module
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
3ce7d3
%description dlz-bdb
3ce7d3
Dynamic Loadable Zones module for BIND server.
3ce7d3
3ce7d3
%package dlz-filesystem
3ce7d3
Summary: BIND server filesystem DLZ module
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
3ce7d3
%description dlz-filesystem
3ce7d3
Dynamic Loadable Zones module for BIND server.
3ce7d3
3ce7d3
%package dlz-ldap
3ce7d3
Summary: BIND server ldap DLZ module
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
3ce7d3
%description dlz-ldap
3ce7d3
Dynamic Loadable Zones module for BIND server.
3ce7d3
3ce7d3
%package dlz-mysql
3ce7d3
Summary: BIND server mysql DLZ module
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
3ce7d3
%description dlz-mysql
3ce7d3
Dynamic Loadable Zones module for BIND server.
3ce7d3
3ce7d3
%package dlz-mysqldyn
3ce7d3
Summary: BIND server mysqldyn DLZ module
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
3ce7d3
%description dlz-mysqldyn
3ce7d3
Dynamic Loadable Zones module for BIND server.
3ce7d3
3ce7d3
%package dlz-sqlite3
3ce7d3
Summary: BIND server sqlite3 DLZ module
3ce7d3
Requires: bind%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
3ce7d3
%description dlz-sqlite3
3ce7d3
Dynamic Loadable Zones module for BIND server.
3ce7d3
%endif
3ce7d3
3ce7d3
3ce7d3
%if %{with EXPORT_LIBS}
3ce7d3
%package export-libs
3ce7d3
Summary:   ISC libs for DHCP application
3ce7d3
%if 0%{?fedora} >= 1
3ce7d3
Obsoletes: bind99-libs < 9.9.11-4
3ce7d3
Provides:  bind99-libs = 9.9.11-4
3ce7d3
# This subpackage will not use shared license, but distribute its own
3ce7d3
%endif
3ce7d3
3ce7d3
%description export-libs
3ce7d3
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
3ce7d3
(Domain Name System) protocols. This package set contains only export
3ce7d3
version of BIND libraries, that are used for building ISC DHCP.
3ce7d3
3ce7d3
%package export-devel
3ce7d3
Summary:  Header files and libraries needed for BIND export libraries
3ce7d3
Requires: %{name}-export-libs%{?_isa} = %{epoch}:%{version}-%{release}
3ce7d3
Requires: openssl-devel
3ce7d3
Requires: libcap-devel
3ce7d3
3ce7d3
%if 0%{?fedora} >= 1
3ce7d3
Obsoletes: bind99-devel < 9.9.11-4
3ce7d3
# To prevent linking against wrong set of libraries,
3ce7d3
# do not coexist with bind99-devel
3ce7d3
Conflicts: bind99-devel
3ce7d3
%endif
3ce7d3
3ce7d3
%description export-devel
3ce7d3
This package contains export version of the header files and libraries
3ce7d3
required for development with ISC BIND. These headers and libraries
3ce7d3
are used for building ISC DHCP.
3ce7d3
%endif
3ce7d3
bc5dde
%prep
3ce7d3
%setup -q -n %{name}-%{BINDVERSION}
bc5dde
bc5dde
# Common patches
bc5dde
%patch10 -p1 -b .PIE
bc5dde
%patch16 -p1 -b .redhat_doc
bc5dde
%patch72 -p1 -b .64bit
bc5dde
%patch102 -p1 -b .rh452060
bc5dde
%patch106 -p0 -b .rh490837
bc5dde
%patch109 -p1 -b .rh478718
bc5dde
%patch112 -p1 -b .rh645544
964723
%patch124 -p1 -b .rh726120
fd4b48
%patch130 -p1 -b .libdb
bc5dde
%patch131 -p1 -b .multlib-conflict
3ce7d3
%patch140 -p1 -b .rh1410433
3ce7d3
%patch145 -p1 -b .rh1205168
3ce7d3
%patch153 -p1 -b .export_suffix
3ce7d3
%patch154 -p1 -b .oot-man
3ce7d3
%patch155 -p1 -b .pk11-internal
3ce7d3
%patch156 -p1 -b .fips-code
3ce7d3
%patch157 -p1 -b .fips-tests
3ce7d3
%patch158 -p1 -b .rh1624100
3ce7d3
%patch159 -p1 -b .host-idn-disable
3ce7d3
%patch160 -p1 -b .rebase
3ce7d3
%patch161 -p1 -b .rebase
3ce7d3
%patch162 -p1 -b .rebase
3ce7d3
%patch163 -p1 -b .rebase
3ce7d3
%patch164 -p1 -b .noed448
3ce7d3
%patch165 -p1 -b .random_test-disable
3ce7d3
%patch166 -p1 -b .dhcp-entropy
3ce7d3
%patch167 -p1 -b .CVE-2018-5743
3ce7d3
%patch168 -p1 -b .CVE-2018-5743-atomic
3ce7d3
%patch169 -p1 -b .CVE-2019-6471
302b22
%patch170 -p1 -b .CVE-2018-5745
302b22
%patch171 -p1 -b .CVE-2019-6465
302b22
%patch172 -p1 -b .rh1732883
302b22
%patch173 -p1 -b .CVE-2018-5745-testfix
302b22
%patch174 -p1 -b .rh1743572
302b22
%patch175 -p1 -b .CVE-2019-6477
302b22
%patch176 -p1 -b .rh1753259
302b22
%patch177 -p1 -b .rh1743572
1872c6
%patch178 -p1 -b .rh1781576
db4030
%patch180 -p1 -b .rh1744081
db4030
%patch181 -p1 -b .rh1300636
db4030
%patch182 -p1 -b .rh1756201
db4030
%patch183 -p1 -b .CVE-2020-8616
db4030
%patch184 -p1 -b .CVE-2020-8617
9abc64
%patch185 -p1 -b .CVE-2020-8616-test
9abc64
%patch186 -p1 -b .CVE-2020-8616-test
db4030
%patch187 -p1 -b .rh1832812
db4030
%patch188 -p1 -b .edns512-loops
5fe83d
%patch189 -p1 -b .CVE-2020-8622
5fe83d
%patch190 -p1 -b .CVE-2020-8623
5fe83d
%patch191 -p1 -b .CVE-2020-8624
5fe83d
%patch192 -p1 -b .rh1769876
5d1446
%patch193 -p1 -b .rh1889902
bbc600
%patch194 -p1 -b .CVE-2020-8625
122de2
%patch195 -p1 -b .CVE-2021-25215
96aeb7
%patch196 -p1 -b .CVE-2021-25214
34afcc
%patch197 -p1 -b .rh2011220
c21dae
%patch198 -p1 -b .rh1935152
88d8b6
%patch200 -p1 -b .CVE-2022-38177
88d8b6
%patch201 -p1 -b .CVE-2022-38178
a9e10b
%patch202 -p1 -b .CVE-2022-2795
a9e10b
%patch203 -p1 -b .CVE-2021-25220-test
a9e10b
%patch204 -p1 -b .CVE-2021-25220
7cb01a
%patch205 -p1 -b .CVE-2023-2828
f80c77
%patch206 -p1 -b .CVE-2023-3341
ee1d55
%patch207 -p1 -b .CVE-2023-50387+50868
ee1d55
%patch208 -p1 -b .DBC-checks
ee1d55
%patch209 -p1 -b .CVE-2023-4408
ee1d55
%patch210 -p1 -b .CVE-2023-2828-fixup
c2d1e6
c2d1e6
# Override upstream builtin keys
c2d1e6
cp -fp %{SOURCE29} bind.keys
d56ed2
3ce7d3
%if %{with PKCS11}
d56ed2
cp -r bin/named{,-pkcs11}
d56ed2
cp -r bin/dnssec{,-pkcs11}
d56ed2
cp -r lib/isc{,-pkcs11}
d56ed2
cp -r lib/dns{,-pkcs11}
3ce7d3
%patch136 -p1 -b .dist_pkcs11
3ce7d3
%patch149 -p1 -b .kyua-pkcs11
d56ed2
%endif
bc5dde
1872c6
%ifarch ppc64le
1872c6
%patch179 -p1 -b .timer-test-ppc64le
1872c6
%endif
1872c6
3ce7d3
%if %{with SDB}
bc5dde
%patch101 -p1 -b .old-api
bc5dde
mkdir bin/named-sdb
bc5dde
cp -r bin/named/* bin/named-sdb
bc5dde
%patch11 -p1 -b .sdbsrc
bc5dde
# SDB ldap
bc5dde
cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named-sdb
bc5dde
# SDB postgreSQL
bc5dde
cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named-sdb
bc5dde
# SDB sqlite
bc5dde
cp -fp contrib/sdb/sqlite/sqlitedb.[ch] bin/named-sdb
bc5dde
# SDB Berkeley DB - needs to be ported to DB4!
bc5dde
#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb
bc5dde
# SDB dir
bc5dde
cp -fp contrib/sdb/dir/dirdb.[ch] bin/named-sdb
bc5dde
# SDB tools
bc5dde
mkdir -p bin/sdb_tools
bc5dde
cp -fp %{SOURCE30} bin/sdb_tools/ldap2zone.c
bc5dde
cp -fp %{SOURCE7} bin/sdb_tools/Makefile.in
bc5dde
#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools
bc5dde
cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools
bc5dde
cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools
bc5dde
cp -fp contrib/sdb/sqlite/zone2sqlite.c bin/sdb_tools
bc5dde
%patch12 -p1 -b .sdb
bc5dde
%patch17 -p1 -b .fix_sdb_ldap
3ce7d3
%patch18 -p1 -b .fix_zone2ldap
3ce7d3
%patch137 -p1 -b .strlcat_fix
bc5dde
%endif
3ce7d3
bc5dde
%patch133 -p1 -b .rh640538
bc5dde
%patch134 -p1 -b .rh669163
bc5dde
bc5dde
# Sparc and s390 arches need to use -fPIE
bc5dde
%ifarch sparcv9 sparc64 s390 s390x
bc5dde
for i in bin/named{,-sdb}/{,unix}/Makefile.in; do
bc5dde
  sed -i 's|fpie|fPIE|g' $i
bc5dde
done
bc5dde
%endif
bc5dde
:;
bc5dde
3ce7d3
bc5dde
%build
3ce7d3
## We use out of tree configure/build for export libs
3ce7d3
%define _configure "../configure"
3ce7d3
3ce7d3
# normal and pkcs11 unit tests
3ce7d3
%define unit_prepare_build() \
3ce7d3
  cp -uv Kyuafile Atffile "%{1}/" \
3ce7d3
  find lib -name 'K*.key' -exec cp -uv '{}' "%{1}/{}" ';' \
3ce7d3
  find lib -name 'Kyuafile' -exec cp -uv '{}' "%{1}/{}" ';' \
3ce7d3
  find lib -name 'Atffile' -exec cp -uv '{}' "%{1}/{}" ';' \
3ce7d3
  find lib -name 'testdata' -type d -exec cp -Tav '{}' "%{1}/{}" ';' \
3ce7d3
  find lib -name 'testkeys' -type d -exec cp -Tav '{}' "%{1}/{}" ';' \
3ce7d3
3ce7d3
%define systemtest_prepare_build() \
3ce7d3
  cp -Tuav bin/tests "%{1}/bin/tests/" \
3ce7d3
  cp -uv version "%{1}" \
3ce7d3
3ce7d3
%if %{with KYUA}
3ce7d3
# Use system installed libatf-c library with kyua tool
3ce7d3
ATF_PATH=/usr
3ce7d3
%else
3ce7d3
# Use bundled atf library with atf-run
3ce7d3
ATF_PATH=yes
3ce7d3
%endif
3ce7d3
bc5dde
export CFLAGS="$CFLAGS $RPM_OPT_FLAGS"
bc5dde
export CPPFLAGS="$CPPFLAGS -DDIG_SIGCHASE"
bc5dde
export STD_CDEFINES="$CPPFLAGS"
bc5dde
bc5dde
sed -i -e \
bc5dde
's/RELEASEVER=\(.*\)/RELEASEVER=\1-RedHat-%{version}-%{release}/' \
bc5dde
version
bc5dde
bc5dde
libtoolize -c -f; aclocal -I libtool.m4 --force; autoconf -f
bc5dde
3ce7d3
mkdir build
3ce7d3
pushd build
3ce7d3
LIBDIR_SUFFIX=
3ce7d3
export LIBDIR_SUFFIX
bc5dde
%configure \
3ce7d3
  --with-python=%{__python} \
bc5dde
  --with-libtool \
bc5dde
  --localstatedir=/var \
bc5dde
  --enable-threads \
310562
  --with-geoip \
bc5dde
  --enable-ipv6 \
fd4b48
  --enable-filter-aaaa \
bc5dde
  --enable-rrl \
bc5dde
  --with-pic \
a3a39f
%ifarch aarch64 ppc ppc64 ppc64le
a3a39f
  --disable-atomic \
a3a39f
%endif
bc5dde
  --disable-static \
bc5dde
  --includedir=%{_includedir}/bind9 \
3ce7d3
  --with-tuning=large \
3ce7d3
  --with-geoip \
3ce7d3
  --with-libidn \
3ce7d3
  --enable-openssl-hash \
3ce7d3
%if %{with PKCS11}
d56ed2
  --enable-native-pkcs11 \
d56ed2
  --with-pkcs11=%{_libdir}/pkcs11/libsofthsm2.so \
bc5dde
%endif
3ce7d3
%if %{with SDB}
d4e835
  --with-dlopen=yes \
bc5dde
  --with-dlz-ldap=yes \
bc5dde
  --with-dlz-postgres=yes \
bc5dde
  --with-dlz-mysql=yes \
bc5dde
  --with-dlz-filesystem=yes \
bc5dde
  --with-dlz-bdb=yes \
bc5dde
%endif
3ce7d3
%if %{with GSSTSIG}
bc5dde
  --with-gssapi=yes \
bc5dde
  --disable-isc-spnego \
bc5dde
%endif
3ce7d3
%if %{with LMDB}
3ce7d3
  --with-lmdb=yes \
3ce7d3
%else
3ce7d3
  --with-lmdb=no \
3ce7d3
%endif
3ce7d3
%if %{with UNITTEST}
3ce7d3
  --with-atf=${ATF_PATH} \
3ce7d3
%endif
bc5dde
  --enable-fixed-rrset \
964723
  --with-tuning=large \
bc5dde
  --with-docbook-xsl=%{_datadir}/sgml/docbook/xsl-stylesheets \
3ce7d3
  --enable-full-report \
bc5dde
;
bc5dde
make %{?_smp_mflags}
bc5dde
3ce7d3
### FIXME hack!!!
3ce7d3
### xsltproc doesn't find properly configured files
3ce7d3
### and use ones from source tree
3ce7d3
### copy generated files to the original location
3ce7d3
cp -rv doc/* ../doc/
3ce7d3
3ce7d3
bc5dde
# Regenerate dig.1 manpage
bc5dde
pushd bin/dig
bc5dde
make man
bc5dde
popd
bc5dde
pushd bin/python
bc5dde
make man
bc5dde
popd
bc5dde
3ce7d3
%if ! %{with KYUA}
3ce7d3
# Do not build atf again for export libs
3ce7d3
ATF_PATH="`pwd`/unit/atf"
3ce7d3
3ce7d3
# Atf libs are built. Prevent their installation
3ce7d3
sed -i -e \
3ce7d3
'/^SUBDIRS =/s/atf-src//i' \
3ce7d3
unit/Makefile
3ce7d3
%endif
3ce7d3
3ce7d3
%if %{with DLZ}
3ce7d3
  pushd contrib/dlz
3ce7d3
  pushd bin/dlzbdb
3ce7d3
    make
3ce7d3
  popd
3ce7d3
  pushd modules
3ce7d3
  for DIR in bdbhpt filesystem ldap mysql mysqldyn sqlite3; do
3ce7d3
    make -C $DIR CFLAGS="-fPIC -I../include $CFLAGS $LDFLAGS"
3ce7d3
  done
3ce7d3
  popd
3ce7d3
  popd
3ce7d3
%endif
3ce7d3
popd # build
3ce7d3
3ce7d3
%unit_prepare_build build
3ce7d3
%systemtest_prepare_build build
3ce7d3
3ce7d3
%if %{with EXPORT_LIBS}
3ce7d3
cp isc-config.sh.1 isc-export-config.sh.1
3ce7d3
3ce7d3
## Create export libs ##
3ce7d3
mkdir -p export-libs
3ce7d3
pushd export-libs
3ce7d3
LIBDIR_SUFFIX=%{_export_dir}
3ce7d3
export LIBDIR_SUFFIX
3ce7d3
## minimal subset of options to make clients aka dhcp working
3ce7d3
%{configure} \
3ce7d3
        --with-libtool \
3ce7d3
        --disable-static \
3ce7d3
        --disable-epoll \
3ce7d3
        --disable-kqueue \
3ce7d3
        --libdir=%{_libdir}%{_export_dir} \
3ce7d3
        --includedir=%{_includedir}%{_export_dir}/ \
3ce7d3
        --disable-threads \
3ce7d3
        --enable-openssl-hash \
3ce7d3
%if %{with GSSTSIG}
3ce7d3
        --with-gssapi=yes \
3ce7d3
        --disable-isc-spnego \
3ce7d3
%endif
3ce7d3
%if %{with UNITTEST}
3ce7d3
        --with-atf=${ATF_PATH} \
3ce7d3
%endif
3ce7d3
        --enable-fixed-rrset \
3ce7d3
        --disable-rpz-nsip \
3ce7d3
        --disable-rpz-nsdname \
3ce7d3
        --without-lmdb \
3ce7d3
        --without-libxml2 \
3ce7d3
        --without-libjson \
3ce7d3
        --without-zlib \
3ce7d3
        --without-dlopen \
3ce7d3
        --enable-full-report
3ce7d3
3ce7d3
## We don't want to build other libs than -export twice
3ce7d3
## FIXME this should be in patch instead of SED'ing
3ce7d3
## but do we really like/want to patch generated files?
3ce7d3
3ce7d3
mv isc-config.sh isc-export-config.sh
3ce7d3
3ce7d3
sed -i \
3ce7d3
-e '/^SUBDIRS =/s/.*/SUBDIRS = make lib/i' \
3ce7d3
-e 's/isc-config.sh/isc-export-config.sh/g' \
3ce7d3
-e 's/bind9-config/bind9-export-config/g' \
3ce7d3
Makefile
3ce7d3
3ce7d3
sed -i -e \
3ce7d3
"/^SUBDIRS =/s/.*/SUBDIRS = %{bind_export_libs}/i" \
3ce7d3
lib/Makefile
3ce7d3
3ce7d3
sed -i -e \
3ce7d3
'/^SUBDIRS =/s/atf-src//i' \
3ce7d3
unit/Makefile
3ce7d3
3ce7d3
for lib in %{bind_export_libs}
3ce7d3
do
3ce7d3
        find .  -name Makefile -exec sed  "s/lib${lib}\./lib${lib}-export\./g" -i {} \;
3ce7d3
        sed -e "s/-l${lib}\([^[:alpha:]]\)/-l${lib}-export\1/g" \
3ce7d3
            -e "s/lib${lib}\./lib${lib}-export\./g" \
3ce7d3
            -i isc-export-config.sh
3ce7d3
done;
3ce7d3
3ce7d3
make %{?_smp_mflags}
3ce7d3
popd
3ce7d3
3ce7d3
# export library unit tests
3ce7d3
%unit_prepare_build export-libs
3ce7d3
# Do not try pkcs11 and lwres in export libs
3ce7d3
sed -e '/^\s*include(.*-pkcs11/ d' -e '/^\s*include(.*lwres/ d' \
3ce7d3
        -i export-libs/lib/Kyuafile
3ce7d3
sed -e '/^tp:.*-pkcs11/ d' -e '/^tp:\s*lwres/ d' \
3ce7d3
        -i export-libs/lib/Atffile
3ce7d3
3ce7d3
## End of export libs
3ce7d3
%endif
3ce7d3
bc5dde
%check
3ce7d3
%if %{with PKCS11}
3ce7d3
  # Tests require initialization of pkcs11 token
3ce7d3
  export SOFTHSM2_CONF="`pwd`/softhsm2.conf"
3ce7d3
  sh %{SOURCE48} "${SOFTHSM2_CONF}" "`pwd`/softhsm-tokens"
3ce7d3
%endif
3ce7d3
3ce7d3
%if %{with UNITTEST}
3ce7d3
  pushd build
3ce7d3
  make unit
3ce7d3
  e=$?
3ce7d3
  if [ "$e" -ne 0 ]; then
3ce7d3
    echo "ERROR: this build of BIND failed 'make unit'. Aborting."
3ce7d3
    exit $e;
3ce7d3
  fi;
3ce7d3
  popd
3ce7d3
3ce7d3
  pushd export-libs
3ce7d3
  make unit
3ce7d3
  e=$?
3ce7d3
  if [ "$e" -ne 0 ]; then
3ce7d3
    echo "ERROR: this build of BIND export-libs failed 'make unit'. Aborting."
3ce7d3
    exit $e;
3ce7d3
  fi;
3ce7d3
  popd
3ce7d3
3ce7d3
%endif
3ce7d3
3ce7d3
%if %{with SYSTEMTEST}
bc5dde
if [ "`whoami`" = 'root' ]; then
bc5dde
  set -e
bc5dde
  chmod -R a+rwX .
bc5dde
  pushd bin/tests
bc5dde
  pushd system
bc5dde
  ./ifconfig.sh up
bc5dde
  popd
bc5dde
  make test
bc5dde
  e=$?
bc5dde
  pushd system
bc5dde
  ./ifconfig.sh down
bc5dde
  popd
bc5dde
  popd
bc5dde
  if [ "$e" -ne 0 ]; then
bc5dde
    echo "ERROR: this build of BIND failed 'make test'. Aborting."
bc5dde
    exit $e;
bc5dde
  fi;
bc5dde
else
bc5dde
  echo 'only root can run the tests (they require an ifconfig).'
bc5dde
%endif
3ce7d3
:
bc5dde
bc5dde
%install
bc5dde
# Build directory hierarchy
310562
mkdir -p ${RPM_BUILD_ROOT}/etc/logrotate.d
bc5dde
mkdir -p ${RPM_BUILD_ROOT}%{_libdir}/bind
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/var/named/{slaves,data,dynamic}
bc5dde
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/{man1,man5,man8}
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/run/named
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/var/log
bc5dde
bc5dde
#chroot
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}/{dev,etc,var,run/named}
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}/var/{log,named,tmp}
fd4b48
fd4b48
# create symlink as it is on real filesystem
fd4b48
pushd ${RPM_BUILD_ROOT}/%{chroot_prefix}/var
fd4b48
ln -s ../run run
fd4b48
popd
fd4b48
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/{pki/dnssec-keys,named}
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}/%{_libdir}/bind
bc5dde
# these are required to prevent them being erased during upgrade of previous
bc5dde
touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.conf
bc5dde
#end chroot
bc5dde
fd4b48
#sdb-chroot
3ce7d3
%if %{with SDB}
fd4b48
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}/{dev,etc,var,run/named}
fd4b48
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}/var/{log,named,tmp}
fd4b48
fd4b48
# create symlink as it is on real filesystem
fd4b48
pushd ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}/var
fd4b48
ln -s ../run run
fd4b48
popd
fd4b48
fd4b48
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}/etc/{pki/dnssec-keys,named}
fd4b48
mkdir -p ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}/%{_libdir}/bind
fd4b48
# these are required to prevent them being erased during upgrade of previous
fd4b48
touch ${RPM_BUILD_ROOT}/%{chroot_sdb_prefix}/etc/named.conf
fd4b48
%endif
fd4b48
#end sdb-chroot
3ce7d3
pushd build
fd4b48
bc5dde
make DESTDIR=${RPM_BUILD_ROOT} install
3ce7d3
popd
3ce7d3
3ce7d3
%if %{with EXPORT_LIBS}
3ce7d3
pushd export-libs
3ce7d3
make DESTDIR=${RPM_BUILD_ROOT} install
3ce7d3
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/ld.so.conf.d
3ce7d3
echo "%{_libdir}/%{_export_dir}" > %{buildroot}%{_sysconfdir}/ld.so.conf.d/%{name}-export-%{_arch}.conf
3ce7d3
cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}%{_export_dir}
3ce7d3
rm -rf ${RPM_BUILD_ROOT}/%{_includedir}%{_export_dir}/pkcs11/
3ce7d3
rm -f ${RPM_BUILD_ROOT}/%{_includedir}%{_export_dir}/pk11/{constants,internal,pk11,result}.h
3ce7d3
popd
3ce7d3
%endif
bc5dde
bc5dde
# Remove unwanted files
bc5dde
rm -f ${RPM_BUILD_ROOT}/etc/bind.keys
bc5dde
bc5dde
# Systemd unit files
bc5dde
mkdir -p ${RPM_BUILD_ROOT}%{_unitdir}
bc5dde
install -m 644 %{SOURCE37} ${RPM_BUILD_ROOT}%{_unitdir}
bc5dde
install -m 644 %{SOURCE38} ${RPM_BUILD_ROOT}%{_unitdir}
fd4b48
install -m 644 %{SOURCE44} ${RPM_BUILD_ROOT}%{_unitdir}
fd4b48
install -m 644 %{SOURCE46} ${RPM_BUILD_ROOT}%{_unitdir}
fd4b48
3ce7d3
%if %{with SDB}
bc5dde
install -m 644 %{SOURCE39} ${RPM_BUILD_ROOT}%{_unitdir}
bc5dde
install -m 644 %{SOURCE40} ${RPM_BUILD_ROOT}%{_unitdir}
fd4b48
install -m 644 %{SOURCE45} ${RPM_BUILD_ROOT}%{_unitdir}
fd4b48
%endif
3ce7d3
3ce7d3
%if %{with PKCS11}
d56ed2
install -m 644 %{SOURCE47} ${RPM_BUILD_ROOT}%{_unitdir}
d56ed2
%endif
bc5dde
bc5dde
mkdir -p ${RPM_BUILD_ROOT}%{_libexecdir}
bc5dde
install -m 755 %{SOURCE41} ${RPM_BUILD_ROOT}%{_libexecdir}/setup-named-chroot.sh
bc5dde
install -m 755 %{SOURCE42} ${RPM_BUILD_ROOT}%{_libexecdir}/generate-rndc-key.sh
bc5dde
3ce7d3
%if %{with PKCS11}
3ce7d3
install -m 755 %{SOURCE48} ${RPM_BUILD_ROOT}%{_libexecdir}/setup-named-softhsm.sh
3ce7d3
%endif
3ce7d3
bc5dde
install -m 644 %SOURCE3 ${RPM_BUILD_ROOT}/etc/logrotate.d/named
bc5dde
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig
bc5dde
install -m 644 %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/named
3ce7d3
install -m 644 %{SOURCE49} ${RPM_BUILD_ROOT}%{_sysconfdir}/named-chroot.files
3ce7d3
%if %{with SDB}
bc5dde
mkdir -p ${RPM_BUILD_ROOT}/etc/openldap/schema
bc5dde
install -m 644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/openldap/schema/dnszone.schema
bc5dde
install -m 644 %{SOURCE12} contrib/sdb/pgsql/
bc5dde
%endif
bc5dde
3ce7d3
%if %{with DLZ}
3ce7d3
  pushd contrib/dlz
3ce7d3
  pushd bin/dlzbdb
3ce7d3
  make DESTDIR=${RPM_BUILD_ROOT} install
3ce7d3
  popd
3ce7d3
  pushd modules
3ce7d3
  for DIR in bdbhpt filesystem ldap mysql mysqldyn sqlite3; do
3ce7d3
    make -C $DIR DESTDIR=${RPM_BUILD_ROOT} libdir=%{_libdir}/bind install
3ce7d3
  done
3ce7d3
  mv mysqldyn/testing/README mysqldyn/testing/README.testing
3ce7d3
  popd
3ce7d3
  popd
3ce7d3
%endif
3ce7d3
bc5dde
# Install isc/errno2result.h header
3ce7d3
install -m 644 lib/isc/unix/errno2result.h ${RPM_BUILD_ROOT}%{_includedir}/bind9/isc
bc5dde
3ce7d3
pushd build
bc5dde
# Files required to run test-suite outside of build tree:
bc5dde
cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}/bind9
3ce7d3
popd
bc5dde
bc5dde
# Remove libtool .la files:
bc5dde
find ${RPM_BUILD_ROOT}/%{_libdir} -name '*.la' -exec '/bin/rm' '-f' '{}' ';';
bc5dde
bc5dde
# Remove -devel files out of buildroot if not needed
3ce7d3
%if !%{with DEVEL}
bc5dde
rm -f ${RPM_BUILD_ROOT}/%{_libdir}/bind9/*so
bc5dde
rm -rf ${RPM_BUILD_ROOT}/%{_includedir}/bind9
bc5dde
rm -f ${RPM_BUILD_ROOT}/%{_mandir}/man1/isc-config.sh.1*
bc5dde
rm -f ${RPM_BUILD_ROOT}/%{_mandir}/man3/lwres*
bc5dde
rm -f ${RPM_BUILD_ROOT}/%{_bindir}/isc-config.sh
bc5dde
%endif
bc5dde
bc5dde
# SDB manpages
3ce7d3
%if %{with SDB}
bc5dde
install -m 644 %{SOURCE31} ${RPM_BUILD_ROOT}%{_mandir}/man1/ldap2zone.1
bc5dde
install -m 644 %{SOURCE32} ${RPM_BUILD_ROOT}%{_mandir}/man8/named-sdb.8
bc5dde
install -m 644 %{SOURCE33} ${RPM_BUILD_ROOT}%{_mandir}/man1/zonetodb.1
bc5dde
install -m 644 %{SOURCE34} ${RPM_BUILD_ROOT}%{_mandir}/man1/zone2sqlite.1
bc5dde
%endif
bc5dde
d56ed2
# PKCS11 versions manpages
3ce7d3
%if %{with PKCS11}
d56ed2
pushd ${RPM_BUILD_ROOT}%{_mandir}/man8
d56ed2
ln -s named.8.gz named-pkcs11.8.gz
d56ed2
ln -s dnssec-checkds.8.gz dnssec-checkds-pkcs11.8.gz
d56ed2
ln -s dnssec-coverage.8.gz dnssec-coverage-pkcs11.8.gz
d56ed2
ln -s dnssec-dsfromkey.8.gz dnssec-dsfromkey-pkcs11.8.gz
d56ed2
ln -s dnssec-keyfromlabel.8.gz dnssec-keyfromlabel-pkcs11.8.gz
d56ed2
ln -s dnssec-keygen.8.gz dnssec-keygen-pkcs11.8.gz
d56ed2
ln -s dnssec-revoke.8.gz dnssec-revoke-pkcs11.8.gz
d56ed2
ln -s dnssec-settime.8.gz dnssec-settime-pkcs11.8.gz
d56ed2
ln -s dnssec-signzone.8.gz dnssec-signzone-pkcs11.8.gz
d56ed2
ln -s dnssec-verify.8.gz dnssec-verify-pkcs11.8.gz
964723
ln -s dnssec-importkey.8.gz dnssec-importkey-pkcs11.8.gz
d56ed2
popd
d56ed2
%endif
d56ed2
bc5dde
# Ghost config files:
bc5dde
touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log
bc5dde
bc5dde
# configuration files:
bc5dde
tar -C ${RPM_BUILD_ROOT} -xjf %{SOURCE28}
3ce7d3
install -m 640 %{SOURCE26} ${RPM_BUILD_ROOT}/etc/named.conf
bc5dde
touch ${RPM_BUILD_ROOT}/etc/rndc.key
bc5dde
touch ${RPM_BUILD_ROOT}/etc/rndc.conf
bc5dde
mkdir ${RPM_BUILD_ROOT}/etc/named
24159a
install -m 640 %{SOURCE26} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
bc5dde
install -m 644 bind.keys ${RPM_BUILD_ROOT}/etc/named.iscdlv.key
bc5dde
install -m 644 %{SOURCE36} ${RPM_BUILD_ROOT}/etc/trusted-key.key
bc5dde
bc5dde
# sample bind configuration files for %%doc:
bc5dde
mkdir -p sample/etc sample/var/named/{data,slaves}
bc5dde
install -m 644 %{SOURCE25} sample/etc/named.conf
bc5dde
# Copy default configuration to %%doc to make it usable from system-config-bind
24159a
install -m 644 %{SOURCE26} named.conf.default
bc5dde
install -m 644 ${RPM_BUILD_ROOT}/etc/named.rfc1912.zones sample/etc/named.rfc1912.zones
bc5dde
install -m 644 ${RPM_BUILD_ROOT}/var/named/{named.ca,named.localhost,named.loopback,named.empty}  sample/var/named
bc5dde
for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.internal.zone.db my.external.zone.db; do 
bc5dde
  echo '@ in soa localhost. root 1 3H 15M 1W 1D
bc5dde
  ns localhost.' > sample/var/named/$f; 
bc5dde
done
bc5dde
:;
bc5dde
d56ed2
mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}
d56ed2
install -m 644 %{SOURCE35} ${RPM_BUILD_ROOT}%{_tmpfilesdir}/named.conf
bc5dde
fd4b48
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/rwtab.d
fd4b48
install -m 644 %{SOURCE43} ${RPM_BUILD_ROOT}%{_sysconfdir}/rwtab.d/named
fd4b48
bc5dde
%pre
bc5dde
if [ "$1" -eq 1 ]; then
bc5dde
  /usr/sbin/groupadd -g %{bind_gid} -f -r named >/dev/null 2>&1 || :;
3ce7d3
  /usr/sbin/useradd  -u %{bind_uid} -r -N -M -g named -s /sbin/nologin -d /var/named -c Named named >/dev/null 2>&1 || :;
bc5dde
fi;
bc5dde
:;
bc5dde
bc5dde
%post
bc5dde
/sbin/ldconfig
bc5dde
if [ "$1" -eq 1 ]; then
bc5dde
  # Initial installation
bc5dde
  [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.* >/dev/null 2>&1 ;
bc5dde
  # rndc.key has to have correct perms and ownership, CVE-2007-6283
bc5dde
  [ -e /etc/rndc.key ] && chown root:named /etc/rndc.key
bc5dde
  [ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key
24159a
else
3ce7d3
  # Upgrade, use nologin shell again
3ce7d3
  if getent passwd named | grep ':/bin/false$' >/dev/null; then
3ce7d3
    /sbin/usermod -s /sbin/nologin named
24159a
  fi
bc5dde
fi
3ce7d3
. /etc/selinux/config
3ce7d3
if %{_sbindir}/selinuxenabled && [ "${SELINUX}" != "disabled" ] ; then
3ce7d3
  %selinux_set_booleans -s targeted %{selinuxbooleans}
3ce7d3
  %selinux_set_booleans -s mls %{selinuxbooleans}
3ce7d3
fi
24159a
%systemd_post named.service
bc5dde
:;
bc5dde
bc5dde
%preun
bc5dde
# Package removal, not upgrade
bc5dde
%systemd_preun named.service
bc5dde
bc5dde
%postun
bc5dde
/sbin/ldconfig
bc5dde
%systemd_postun_with_restart named.service
24159a
# Unset on both upgrade and install. Boolean would be unset from now
3ce7d3
# until %%posttrans on upgrade. Write requests might fail during update.
3ce7d3
. /etc/selinux/config
3ce7d3
if %{_sbindir}/selinuxenabled && [ "${SELINUX}" != "disabled" ] ; then
3ce7d3
  %selinux_unset_booleans -s targeted %{selinuxbooleans}
3ce7d3
  %selinux_unset_booleans -s mls %{selinuxbooleans}
3ce7d3
fi
bc5dde
3ce7d3
%if %{with SDB}
bc5dde
%post sdb
bc5dde
# Initial installation 
bc5dde
%systemd_post named-sdb.service
bc5dde
bc5dde
%preun sdb
bc5dde
# Package removal, not upgrade
bc5dde
%systemd_preun named-sdb.service
bc5dde
bc5dde
%postun sdb
bc5dde
# Package upgrade, not uninstall
bc5dde
%systemd_postun_with_restart named-sdb.service
bc5dde
%endif
bc5dde
3ce7d3
%if %{with PKCS11}
d56ed2
%post pkcs11
d56ed2
# Initial installation
d56ed2
%systemd_post named-pkcs11.service
d56ed2
d56ed2
%preun pkcs11
d56ed2
# Package removal, not upgrade
d56ed2
%systemd_preun named-pkcs11.service
d56ed2
d56ed2
%postun pkcs11
d56ed2
# Package upgrade, not uninstall
d56ed2
%systemd_postun_with_restart named-pkcs11.service
d56ed2
%endif
d56ed2
bc5dde
%triggerpostun -n bind -- bind <= 32:9.5.0-20.b1
bc5dde
if [ "$1" -gt 0 ]; then
bc5dde
  [ -e /etc/rndc.key ] && chown root:named /etc/rndc.key
bc5dde
  [ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key
bc5dde
fi
bc5dde
:;
bc5dde
d4e835
%triggerun -- bind < 32:9.9.0-0.6.rc1
bc5dde
/sbin/chkconfig --del named >/dev/null 2>&1 || :
bc5dde
/bin/systemctl try-restart named.service >/dev/null 2>&1 || :
bc5dde
3ce7d3
%ldconfig_scriptlets libs
3ce7d3
%ldconfig_scriptlets libs-lite
bc5dde
3ce7d3
%if %{with PKCS11}
3ce7d3
%ldconfig_scriptlets pkcs11-libs
3ce7d3
%endif
bc5dde
3ce7d3
%if %{with EXPORT_LIBS}
3ce7d3
%post export-libs -p /sbin/ldconfig
3ce7d3
%postun export-libs -p /sbin/ldconfig
3ce7d3
%endif
bc5dde
d4e835
%pre chroot
d4e835
# updating
d4e835
if [ "$1" -gt 1 ]; then
d4e835
    # if %%{chroot_prefix}/var/run is a directory, remove it
d4e835
    # fix for Bug #1091341
d4e835
    if [ -d %{chroot_prefix}/var/run ]; then
d4e835
        rm -rf %{chroot_prefix}/var/run
d4e835
    fi
d4e835
fi
d4e835
bc5dde
%post chroot
bc5dde
%systemd_post named-chroot.service
3ce7d3
%chroot_fix_devices %{chroot_prefix}
bc5dde
:;
bc5dde
bc5dde
%posttrans chroot
bc5dde
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then
bc5dde
  [ -x /sbin/restorecon ] && /sbin/restorecon %{chroot_prefix}/dev/* > /dev/null 2>&1;
bc5dde
fi;
bc5dde
bc5dde
%preun chroot
3ce7d3
# wait for stop of both named-chroot and named-chroot-setup services
3ce7d3
# on uninstall
3ce7d3
%systemd_preun named-chroot.service named-chroot-setup.service
bc5dde
:;
bc5dde
bc5dde
%postun chroot
bc5dde
# Package upgrade, not uninstall
bc5dde
%systemd_postun_with_restart named-chroot.service
fd4b48
fd4b48
3ce7d3
%if %{with SDB}
fd4b48
fd4b48
%post sdb-chroot
fd4b48
%systemd_post named-sdb-chroot.service
3ce7d3
%chroot_fix_devices %{chroot_sdb_prefix}
fd4b48
:;
fd4b48
fd4b48
%posttrans sdb-chroot
fd4b48
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then
fd4b48
  [ -x /sbin/restorecon ] && /sbin/restorecon %{chroot_sdb_prefix}/dev/* > /dev/null 2>&1;
fd4b48
fi;
fd4b48
:;
fd4b48
fd4b48
%preun sdb-chroot
fd4b48
%systemd_preun named-sdb-chroot.service 
fd4b48
:;
fd4b48
fd4b48
%postun sdb-chroot
fd4b48
# Package upgrade, not uninstall
bc5dde
%systemd_postun_with_restart named-sdb-chroot.service
bc5dde
fd4b48
%endif
fd4b48
bc5dde
%clean
bc5dde
rm -rf ${RPM_BUILD_ROOT}
bc5dde
:;
bc5dde
bc5dde
%files
bc5dde
%{_libdir}/bind
bc5dde
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/named
bc5dde
%config(noreplace) %attr(0644,root,named) %{_sysconfdir}/named.iscdlv.key
bc5dde
%config(noreplace) %attr(0644,root,named) %{_sysconfdir}/named.root.key
d56ed2
%{_tmpfilesdir}/named.conf
fd4b48
%{_sysconfdir}/rwtab.d/named
bc5dde
%{_unitdir}/named.service
fd4b48
%{_unitdir}/named-setup-rndc.service
3ce7d3
%{_sbindir}/named-journalprint
3ce7d3
%{_sbindir}/named-checkconf
3ce7d3
%{_bindir}/arpaname
3ce7d3
%{_bindir}/named-rrchecker
3ce7d3
%{_sbindir}/lwresd
3ce7d3
%{_sbindir}/named
3ce7d3
%{_sbindir}/rndc*
bc5dde
%{_sbindir}/ddns-confgen
3ce7d3
%{_sbindir}/tsig-keygen
bc5dde
%{_sbindir}/genrandom
bc5dde
%{_sbindir}/nsec3hash
bc5dde
%{_sbindir}/dnssec*
3ce7d3
%if %{with PKCS11}
d56ed2
%exclude %{_sbindir}/dnssec*pkcs11
3ce7d3
%endif
bc5dde
%{_sbindir}/isc-hmac-fixup
3ce7d3
%{_sbindir}/named-checkzone
3ce7d3
%{_sbindir}/named-compilezone
3ce7d3
%if %{with LMDB}
3ce7d3
%{_sbindir}/named-nzd2nzf
3ce7d3
%endif
bc5dde
%{_libexecdir}/generate-rndc-key.sh
bc5dde
%{_mandir}/man1/arpaname.1*
3ce7d3
%{_mandir}/man1/named-rrchecker.1*
bc5dde
%{_mandir}/man5/named.conf.5*
bc5dde
%{_mandir}/man5/rndc.conf.5*
bc5dde
%{_mandir}/man8/rndc.8*
bc5dde
%{_mandir}/man8/named.8*
bc5dde
%{_mandir}/man8/lwresd.8*
d56ed2
%exclude %{_mandir}/man8/dnssec*-pkcs11.8*
bc5dde
%{_mandir}/man8/named-checkconf.8*
bc5dde
%{_mandir}/man8/rndc-confgen.8*
3ce7d3
%{_mandir}/man8/named-journalprint.8*
bc5dde
%{_mandir}/man8/ddns-confgen.8*
3ce7d3
%{_mandir}/man8/tsig-keygen.8*
bc5dde
%{_mandir}/man8/genrandom.8*
bc5dde
%{_mandir}/man8/nsec3hash.8*
3ce7d3
%{_mandir}/man8/dnssec*.8*
3ce7d3
%if %{with PKCS11}
3ce7d3
%exclude %{_mandir}/man8/dnssec*-pkcs11.8*
3ce7d3
%endif
bc5dde
%{_mandir}/man8/isc-hmac-fixup.8*
3ce7d3
%{_mandir}/man8/named-checkzone.8*
3ce7d3
%{_mandir}/man8/named-compilezone.8*
3ce7d3
%if %{with LMDB}
3ce7d3
%{_mandir}/man8/named-nzd2nzf.8*
3ce7d3
%endif
bc5dde
%doc CHANGES README named.conf.default
bc5dde
%doc doc/arm/*html doc/arm/*pdf
bc5dde
%doc sample/
bc5dde
3ce7d3
%{python_sitelib}/*.egg-info
3ce7d3
%{python_sitelib}/isc/
3ce7d3
bc5dde
# Hide configuration
bc5dde
%defattr(0640,root,named,0750)
bc5dde
%dir %{_sysconfdir}/named
bc5dde
%config(noreplace) %verify(not link) %{_sysconfdir}/named.conf
bc5dde
%config(noreplace) %verify(not link) %{_sysconfdir}/named.rfc1912.zones
24159a
%defattr(0660,root,named,01770)
24159a
%dir %{_localstatedir}/named
bc5dde
%defattr(0660,named,named,0770)
bc5dde
%dir %{_localstatedir}/named/slaves
bc5dde
%dir %{_localstatedir}/named/data
bc5dde
%dir %{_localstatedir}/named/dynamic
bc5dde
%ghost %{_localstatedir}/log/named.log
bc5dde
%defattr(0640,root,named,0750)
24159a
%config %verify(not link) %{_localstatedir}/named/named.ca
24159a
%config %verify(not link) %{_localstatedir}/named/named.localhost
24159a
%config %verify(not link) %{_localstatedir}/named/named.loopback
24159a
%config %verify(not link) %{_localstatedir}/named/named.empty
bc5dde
%ghost %config(noreplace) %{_sysconfdir}/rndc.key
bc5dde
# ^- rndc.key now created on first install only if it does not exist
bc5dde
%ghost %config(noreplace) %{_sysconfdir}/rndc.conf
bc5dde
# ^- The default rndc.conf which uses rndc.key is in named's default internal config -
bc5dde
#    so rndc.conf is not necessary.
bc5dde
%config(noreplace) %{_sysconfdir}/logrotate.d/named
bc5dde
%defattr(-,named,named,-)
bc5dde
%dir /run/named
bc5dde
3ce7d3
%if %{with SDB}
bc5dde
%files sdb
bc5dde
%{_unitdir}/named-sdb.service
bc5dde
%{_mandir}/man1/zone2ldap.1*
bc5dde
%{_mandir}/man1/ldap2zone.1*
bc5dde
%{_mandir}/man1/zonetodb.1*
bc5dde
%{_mandir}/man1/zone2sqlite.1*
bc5dde
%{_mandir}/man8/named-sdb.8*
bc5dde
%doc contrib/sdb/ldap/README.ldap contrib/sdb/ldap/INSTALL.ldap contrib/sdb/pgsql/README.sdb_pgsql
bc5dde
%dir %{_sysconfdir}/openldap/schema
bc5dde
%config(noreplace) %{_sysconfdir}/openldap/schema/dnszone.schema
bc5dde
%{_sbindir}/named-sdb
bc5dde
%{_sbindir}/zone2ldap
bc5dde
%{_sbindir}/ldap2zone
bc5dde
%{_sbindir}/zonetodb
bc5dde
%{_sbindir}/zone2sqlite
bc5dde
%endif
bc5dde
bc5dde
%files libs
3ce7d3
%{_libdir}/libbind9.so.160*
3ce7d3
%{_libdir}/libisccc.so.160*
3ce7d3
%{_libdir}/liblwres.so.160*
d56ed2
%exclude %{_libdir}/*pkcs11.so.*
bc5dde
bc5dde
%files libs-lite
3ce7d3
%{_libdir}/libdns.so.%{sover_dns}*
3ce7d3
%{_libdir}/libirs.so.%{sover_irs}*
3ce7d3
%{_libdir}/libisc.so.%{sover_isc}*
3ce7d3
%{_libdir}/libisccfg.so.%{sover_isccfg}*
bc5dde
%files license
3ce7d3
%{!?_licensedir:%global license %%doc}
3ce7d3
%license COPYRIGHT
bc5dde
bc5dde
%files utils
bc5dde
%{_bindir}/dig
3ce7d3
%{_bindir}/delv
bc5dde
%{_bindir}/host
bc5dde
%{_bindir}/nslookup
bc5dde
%{_bindir}/nsupdate
3ce7d3
%{_bindir}/mdig
bc5dde
%{_mandir}/man1/host.1*
bc5dde
%{_mandir}/man1/nsupdate.1*
bc5dde
%{_mandir}/man1/dig.1*
3ce7d3
%{_mandir}/man1/delv.1*
3ce7d3
%{_mandir}/man1/mdig.1*
bc5dde
%{_mandir}/man1/nslookup.1*
bc5dde
%{_sysconfdir}/trusted-key.key
bc5dde
3ce7d3
%if %{with DEVEL}
bc5dde
%files devel
3ce7d3
%{_libdir}/libbind9.so
3ce7d3
%{_libdir}/libisccc.so
3ce7d3
%{_libdir}/liblwres.so
3ce7d3
%{_includedir}/bind9/config.h
3ce7d3
%{_includedir}/bind9/bind9
d56ed2
%exclude %{_libdir}/*pkcs11.so
3ce7d3
%{_includedir}/bind9/isccc
3ce7d3
%{_includedir}/bind9/lwres
d56ed2
%exclude %{_includedir}/bind9/pkcs11
d56ed2
%exclude %{_includedir}/bind9/pk11
bc5dde
%{_mandir}/man1/isc-config.sh.1*
3ce7d3
%{_mandir}/man1/bind9-config.1*
bc5dde
%{_mandir}/man3/lwres*
bc5dde
%{_bindir}/isc-config.sh
3ce7d3
%{_bindir}/bind9-config
bc5dde
%endif
bc5dde
bc5dde
%files lite-devel
3ce7d3
%{_libdir}/libdns.so
3ce7d3
%{_libdir}/libirs.so
3ce7d3
%{_libdir}/libisc.so
3ce7d3
%{_libdir}/libisccfg.so
3ce7d3
%dir %{_includedir}/bind9
3ce7d3
%{_includedir}/bind9/dns
3ce7d3
%{_includedir}/bind9/dst
3ce7d3
%{_includedir}/bind9/irs
3ce7d3
%{_includedir}/bind9/isc
3ce7d3
%dir %{_includedir}/bind9/pk11
3ce7d3
%{_includedir}/bind9/pk11/site.h
3ce7d3
%{_includedir}/bind9/isccfg
bc5dde
bc5dde
%files chroot
3ce7d3
%config(noreplace) %{_sysconfdir}/named-chroot.files
bc5dde
%{_unitdir}/named-chroot.service
fd4b48
%{_unitdir}/named-chroot-setup.service
bc5dde
%{_libexecdir}/setup-named-chroot.sh
3ce7d3
%defattr(0664,root,named,-)
3ce7d3
%ghost %dev(c,1,3) %verify(not mtime) %{chroot_prefix}/dev/null
3ce7d3
%ghost %dev(c,1,8) %verify(not mtime) %{chroot_prefix}/dev/random
3ce7d3
%ghost %dev(c,1,5) %verify(not mtime) %{chroot_prefix}/dev/zero
bc5dde
%defattr(0640,root,named,0750)
bc5dde
%dir %{chroot_prefix}
bc5dde
%dir %{chroot_prefix}/dev
bc5dde
%dir %{chroot_prefix}/etc
bc5dde
%dir %{chroot_prefix}/etc/named
bc5dde
%dir %{chroot_prefix}/etc/pki
bc5dde
%dir %{chroot_prefix}/etc/pki/dnssec-keys
bc5dde
%dir %{chroot_prefix}/var
bc5dde
%dir %{chroot_prefix}/run
bc5dde
%ghost %config(noreplace) %{chroot_prefix}/etc/named.conf
c8cd03
%defattr(-,root,root,-)
c8cd03
%dir %{chroot_prefix}/usr
c8cd03
%dir %{chroot_prefix}/%{_libdir}
c8cd03
%dir %{chroot_prefix}/%{_libdir}/bind
24159a
%defattr(0660,root,named,01770)
24159a
%dir %{chroot_prefix}/var/named
bc5dde
%defattr(0660,named,named,0770)
bc5dde
%dir %{chroot_prefix}/var/tmp
bc5dde
%dir %{chroot_prefix}/var/log
c8cd03
%defattr(-,named,named,-)
c8cd03
%dir %{chroot_prefix}/run/named
fd4b48
%{chroot_prefix}/var/run
bc5dde
3ce7d3
%if %{with SDB}
fd4b48
%files sdb-chroot
3ce7d3
%config(noreplace) %{_sysconfdir}/named-chroot.files
fd4b48
%{_unitdir}/named-sdb-chroot.service
fd4b48
%{_unitdir}/named-sdb-chroot-setup.service
fd4b48
%{_libexecdir}/setup-named-chroot.sh
3ce7d3
%defattr(0664,root,named,-)
3ce7d3
%ghost %dev(c,1,3) %verify(not mtime) %{chroot_sdb_prefix}/dev/null
3ce7d3
%ghost %dev(c,1,8) %verify(not mtime) %{chroot_sdb_prefix}/dev/random
3ce7d3
%ghost %dev(c,1,5) %verify(not mtime) %{chroot_sdb_prefix}/dev/zero
fd4b48
%defattr(0640,root,named,0750)
fd4b48
%dir %{chroot_sdb_prefix}
fd4b48
%dir %{chroot_sdb_prefix}/dev
fd4b48
%dir %{chroot_sdb_prefix}/etc
fd4b48
%dir %{chroot_sdb_prefix}/etc/named
fd4b48
%dir %{chroot_sdb_prefix}/etc/pki
fd4b48
%dir %{chroot_sdb_prefix}/etc/pki/dnssec-keys
fd4b48
%dir %{chroot_sdb_prefix}/var
fd4b48
%dir %{chroot_sdb_prefix}/run
fd4b48
%ghost %config(noreplace) %{chroot_sdb_prefix}/etc/named.conf
24159a
%defattr(0660,root,named,01770)
24159a
%dir %{chroot_sdb_prefix}/var/named
c8cd03
%defattr(-,root,root,-)
c8cd03
%dir %{chroot_sdb_prefix}/usr
c8cd03
%dir %{chroot_sdb_prefix}/%{_libdir}
c8cd03
%dir %{chroot_sdb_prefix}/%{_libdir}/bind
fd4b48
%defattr(0660,named,named,0770)
fd4b48
%dir %{chroot_sdb_prefix}/var/tmp
fd4b48
%dir %{chroot_sdb_prefix}/var/log
c8cd03
%defattr(-,named,named,-)
c8cd03
%dir %{chroot_sdb_prefix}/run/named
fd4b48
%{chroot_sdb_prefix}/var/run
fd4b48
%endif
fd4b48
3ce7d3
%if %{with PKCS11}
bc5dde
%files pkcs11
d56ed2
%{_sbindir}/named-pkcs11
d56ed2
%{_unitdir}/named-pkcs11.service
d56ed2
%{_mandir}/man8/named-pkcs11.8*
3ce7d3
%{_libexecdir}/setup-named-softhsm.sh
d56ed2
d56ed2
%files pkcs11-utils
d56ed2
%{_sbindir}/dnssec*pkcs11
bc5dde
%{_sbindir}/pkcs11-destroy
bc5dde
%{_sbindir}/pkcs11-keygen
bc5dde
%{_sbindir}/pkcs11-list
d56ed2
%{_sbindir}/pkcs11-tokens
d56ed2
%{_mandir}/man8/pkcs11*.8*
d56ed2
%{_mandir}/man8/dnssec*-pkcs11.8*
d56ed2
d56ed2
%files pkcs11-libs
3ce7d3
%{_libdir}/libdns-pkcs11.so.%{sover_dns}*
3ce7d3
%{_libdir}/libisc-pkcs11.so.%{sover_isc}*
d56ed2
d56ed2
%files pkcs11-devel
3ce7d3
%{_includedir}/bind9/pk11/*.h
3ce7d3
%exclude %{_includedir}/bind9/pk11/site.h
d56ed2
%{_includedir}/bind9/pkcs11
3ce7d3
%{_libdir}/libdns-pkcs11.so
3ce7d3
%{_libdir}/libisc-pkcs11.so
3ce7d3
%endif
d56ed2
3ce7d3
%if %{with EXPORT_LIBS}
3ce7d3
%files export-libs
3ce7d3
%dir %{_libdir}/%{_export_dir}
3ce7d3
%{_libdir}/%{_export_dir}/libdns-export.so.%{sover_dns}*
3ce7d3
%{_libdir}/%{_export_dir}/libirs-export.so.%{sover_irs}*
3ce7d3
%{_libdir}/%{_export_dir}/libisc-export.so.%{sover_isc}*
3ce7d3
%{_libdir}/%{_export_dir}/libisccfg-export.so.%{sover_isccfg}*
3ce7d3
%config(noreplace) %{_sysconfdir}/ld.so.conf.d/%{name}-export-%{_arch}.conf
3ce7d3
# This subpackage has to distribute its own license. Do not conflict with
3ce7d3
# other subpackages of different version
3ce7d3
%license COPYRIGHT
3ce7d3
3ce7d3
%files export-devel
3ce7d3
%{_libdir}/%{_export_dir}/libdns-export.so
3ce7d3
%{_libdir}/%{_export_dir}/libirs-export.so
3ce7d3
%{_libdir}/%{_export_dir}/libisc-export.so
3ce7d3
%{_libdir}/%{_export_dir}/libisccfg-export.so
3ce7d3
%dir %{_includedir}/%{_export_dir}
3ce7d3
%{_includedir}/%{_export_dir}/dns
3ce7d3
%{_includedir}/%{_export_dir}/dst
3ce7d3
%{_includedir}/%{_export_dir}/irs
3ce7d3
%{_includedir}/%{_export_dir}/isc
3ce7d3
%dir %{_includedir}/%{_export_dir}/pk11
3ce7d3
%{_includedir}/%{_export_dir}/pk11/site.h
3ce7d3
%{_includedir}/%{_export_dir}/isccfg
3ce7d3
%{_includedir}/%{_export_dir}/config.h
3ce7d3
%{_mandir}/man1/isc-export-config.sh.1*
3ce7d3
%{_mandir}/man1/bind9-export-config.1*
3ce7d3
%attr(0755,root,root) %{_bindir}/isc-export-config.sh
3ce7d3
%{_bindir}/bind9-export-config
bc5dde
%endif
bc5dde
3ce7d3
%if %{with DLZ}
3ce7d3
%files dlz-bdb
3ce7d3
%{_sbindir}/dlzbdb
3ce7d3
%{_libdir}/bind/dlz_bdbhpt_dynamic.so
3ce7d3
%doc contrib/dlz/modules/bdbhpt/testing/*
3ce7d3
3ce7d3
%files dlz-filesystem
3ce7d3
%{_libdir}/bind/dlz_filesystem_dynamic.so
3ce7d3
3ce7d3
%files dlz-mysql
3ce7d3
%{_libdir}/bind/dlz_mysql_dynamic.so
3ce7d3
%doc contrib/dlz/modules/mysql/testing/*
3ce7d3
3ce7d3
%files dlz-mysqldyn
3ce7d3
%{_libdir}/bind/dlz_mysqldyn_mod.so
3ce7d3
%doc contrib/dlz/modules/mysqldyn/testing/*
3ce7d3
%doc contrib/dlz/modules/mysqldyn/README
3ce7d3
3ce7d3
%files dlz-ldap
3ce7d3
%{_libdir}/bind/dlz_ldap_dynamic.so
3ce7d3
%doc contrib/dlz/modules/ldap/testing/*
3ce7d3
3ce7d3
%files dlz-sqlite3
3ce7d3
%{_libdir}/bind/dlz_sqlite3_dynamic.so
3ce7d3
%doc contrib/dlz/modules/sqlite3/testing/*
3ce7d3
3ce7d3
%endif
3ce7d3
3ce7d3
bc5dde
%changelog
ee1d55
* Tue Apr 16 2024 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16
ee1d55
- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
ee1d55
  CVE-2023-50868)
ee1d55
- Add missing design by contract tests to dns_catz*
ee1d55
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
ee1d55
- Do not use header_prev in expire_lru_headers
ee1d55
f80c77
* Mon Sep 25 2023 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15
f80c77
- Limit the amount of recursion possible in control channel (CVE-2023-3341)
f80c77
f80c77
* Mon Jul 03 2023 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14
7cb01a
- Prevent the cache going over the configured limit (CVE-2023-2828)
7cb01a
a9e10b
* Wed Dec 14 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13
a9e10b
- Tighten cache protection against record from forwarders (CVE-2021-25220)
a9e10b
a9e10b
* Wed Dec 14 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12
a9e10b
- Include test of forwarders (CVE-2021-25220)
a9e10b
a9e10b
* Thu Sep 29 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11
a9e10b
- Prevent excessive resource use while processing large delegations.
a9e10b
  (CVE-2022-2795)
a9e10b
88d8b6
* Thu Sep 22 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10
88d8b6
- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
88d8b6
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
88d8b6
c21dae
* Mon Jan 24 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9
c21dae
- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
c21dae
  (#1935152)
c21dae
34afcc
* Thu Oct 14 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8
34afcc
- Prevent a race after zone load (#2011220)
34afcc
96aeb7
* Tue Jul 13 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7
96aeb7
- Apply again patch 172, got removed by mistake
96aeb7
96aeb7
* Mon May 17 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6
96aeb7
- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)
96aeb7
122de2
* Tue Apr 27 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5
122de2
- Possible assertion failure on DNAME processing (CVE-2021-25215)
122de2
c21dae
bbc600
* Mon Feb 15 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4
bbc600
- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
bbc600
5d1446
* Fri Nov 06 2020 Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3
5d1446
- Fix inline re-signing (#rh1889902)
5d1446
5fe83d
* Fri Oct 02 2020 Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2
5fe83d
- Fix unsupported algorithms validation (#rh1769876)
5fe83d
5fe83d
* Wed Aug 26 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1
5fe83d
- Fix tsig-request verify (CVE-2020-8622)
5fe83d
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
5fe83d
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
5fe83d
db4030
* Fri May 29 2020 Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2
9abc64
- Fix EDNS512 loops on broken servers
9abc64
db4030
* Tue May 26 2020 Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2
db4030
- rebinding protection for forwarding DNS server upstream patch (#1832812)
db4030
db4030
* Fri May 22 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2
9abc64
- Add CVE tests to codebase
9abc64
db4030
* Mon May 18 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2
9abc64
- Limit number of queries triggered by a request (CVE-2020-8616)
9abc64
- Fix invalid tsig request (CVE-2020-8617)
9abc64
db4030
* Wed Mar 18 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2
db4030
- Solve often priming queries on some forwarder (#1756201)
a3a39f
db4030
* Mon Mar 16 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2
db4030
- Disable atomic operations also on ppc (#1779589)
db4030
db4030
* Fri Mar 13 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2
db4030
- Do not crash when nsupdate with GSS terminated early (#1300636)
1872c6
db4030
* Wed Mar 11 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
db4030
- Allow conflicting zone files with a warning (#1744081)
db4030
db4030
* Wed Mar 04 2020 Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2
db4030
- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)
db4030
db4030
* Fri Feb 21 2020 Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2
db4030
- Prevent deadlock on reload (#1781576)
db4030
- Disable unit test timer_test on ppc64le because of its instability
1872c6
302b22
* Thu Dec 12 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2
302b22
- Finish dig query when name is too long (#1743572)
302b22
302b22
* Wed Nov 27 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2
302b22
- Stop listening on IPv6 by default (#1753259)
302b22
302b22
* Tue Nov 19 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2
302b22
- Limit number of queries per TCP connection (CVE-2019-6477)
302b22
302b22
* Wed Oct 02 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2
302b22
- Revert not searching names with dot (#1743572)
302b22
302b22
* Thu Sep 05 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2
302b22
- Fix mkeys test validating CVE-2018-5745 fix
302b22
302b22
* Tue Aug  6 2019 Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2
302b22
- Use monotonic time in export library (#1093803)
302b22
302b22
* Wed Jul 17 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2
302b22
- Fix CVE-2018-5745
302b22
- Fix CVE-2019-6465
302b22
3ce7d3
* Wed Jun 19 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2
3ce7d3
- Fix CVE-2019-6471
3ce7d3
3ce7d3
* Wed Jun 12 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2
3ce7d3
- Fix scriptlet errors when selinux-policy is not installed (#1647659)
3ce7d3
3ce7d3
* Wed Apr 24 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2
3ce7d3
- Fix inefective limit of TCP clients (CVE-2018-5743)
3ce7d3
3ce7d3
* Wed Mar 27 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2
3ce7d3
- Use /sbin/nologin again (#1676661)
3ce7d3
3ce7d3
* Mon Mar 18 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2
3ce7d3
- Make sure selinux-policy is installed soon enough (#1647659)
3ce7d3
3ce7d3
* Mon Mar 18 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2
3ce7d3
- Disable custom random generator for export libs (#1685940)
3ce7d3
3ce7d3
* Tue Mar 12 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2
3ce7d3
- Fix memory handling in zone2ldap tool
dea8e2
3ce7d3
* Thu Feb 28 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2
3ce7d3
- Move dnssec utilities back to bind package
3ce7d3
- Remove separate python-bind package
272df6
3ce7d3
* Tue Jan 29 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2
3ce7d3
- Rebase features patches
3ce7d3
- Disable autodetected eddsa algorithm ED448
3ce7d3
- Add versioned depends to all library subpackages
3ce7d3
- Fix multilib conflict of devel packages
272df6
a38b63
* Fri Nov 23 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73
a38b63
- Fixes debug level comments (#1647539)
a38b63
24159a
* Thu Sep 20 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72
24159a
- Fix automatic selinux boolean named_write_master_zones (#1569466)
24159a
- Allow starting named with readonly home again
24159a
24159a
* Wed Aug 08 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71
f51a71
- Fix CVE-2018-5740
f51a71
24159a
* Sun Jun 24 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70
24159a
- Fix compiler warnings
24159a
24159a
* Thu Jun 21 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69
24159a
- Refetch always records with TTL 0 (#1549130)
24159a
24159a
* Thu Jun 21 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68
24159a
- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)
24159a
24159a
* Thu Jun 14 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67
24159a
- Move change of dns_view_t to the end (#1452091)
24159a
24159a
* Fri Jun 01 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66
24159a
- Correct recursing file name (#1435883)
24159a
- Use python binary again, install all modules (#1510008)
24159a
24159a
* Thu May 31 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65
24159a
- Add rndc secroots and recursing output files into data (#1435883)
24159a
24159a
* Mon May 28 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64
24159a
- Backported negative trust anchors (#1452091)
24159a
24159a
* Mon May 28 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63
24159a
- Make named home writeable (#1569466)
24159a
- Change named shell to /bin/false
24159a
24159a
* Tue May 22 2018 Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62
24159a
- Resolves: #1510008 - add support for dnssec-keymgr
24159a
964723
* Tue Jan 16 2018 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61
497f76
- Fix CVE-2017-3145
497f76
964723
* Tue Dec 05 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60
964723
- Fix regression caused by bug #1470637
964723
964723
* Mon Nov 13 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59
964723
- Support for additional signing algorithms in rndc (#1501531)
964723
- New autogenerated rndc keys will use hmac-sha256 algorithm
964723
964723
* Tue Oct 31 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58
964723
- Fix multilib regression in headers
964723
964723
* Mon Oct 30 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57
964723
- Add with-tunning=large support (#rh1464850)
964723
964723
* Thu Oct 19 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56
964723
- Fix named-chroot restart leak (#1503646)
964723
964723
* Thu Oct 12 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55
964723
- Handle dig timeouts the same way as upstream (#1470637)
964723
964723
* Wed Oct 11 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54
964723
- Do not use next search domain on timeout from dig (#1470637)
964723
964723
* Tue Aug 01 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53
964723
- Fixed TSIG validation of AXFR and IXFR (#1476013)
964723
964723
* Fri Jul 07 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52
964723
- Add missing manual for dnssec-importkey (#1472862)
4e17de
d10948
* Thu Jun 29 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51
d10948
- Fix CVE-2017-3142 and CVE-2017-3143
d10948
c8cd03
* Mon May 22 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50
c8cd03
- Update root servers and trust anchor (#1452635)
c2d1e6
c8cd03
* Thu Apr 20 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49
c8cd03
- Address deadlock between view.c and adb.c (#1416304)
c2d1e6
c8cd03
* Tue Apr 11 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48
a3e803
- Fix CVE-2017-3136 (ISC change 4575)
a3e803
- Fix CVE-2017-3137 (ISC change 4578)
a3e803
c8cd03
* Wed Mar 29 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47
c8cd03
- Simplify change of used config file, point to KB article (#1271315)
c8cd03
c8cd03
* Tue Mar 28 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46
c8cd03
- Make comment how to use different config file (#1271315)
c8cd03
c8cd03
* Thu Mar 16 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45
c8cd03
- Install again dns/dlz.h skipped in rebase
c8cd03
- Fixed coverity warnings on reenabled test dlzexternal
c8cd03
c8cd03
* Tue Mar 14 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44
c8cd03
- Backported new upstream dyndb interface, removed dynamic_db (#1393886)
c8cd03
c8cd03
* Mon Feb 27 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43
c8cd03
- Do not warn on WKS patch (#1392362)
c8cd03
c8cd03
* Tue Feb 21 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42
c8cd03
- Support WKS records in chroot
c8cd03
c8cd03
* Wed Feb 08 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41
7e32a4
- Fix CVE-2017-3135 (ISC change 4557)
7e32a4
- Fix and test caching CNAME before DNAME (ISC change 4558)
7e32a4
c8cd03
* Fri Jan 20 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40
c8cd03
- Fix possible infinite loop in start_lookup (CVE-2016-2775)
c8cd03
- Do not change lib permissions in chroot (#1392531)
c8cd03
c8cd03
* Mon Jan 09 2017 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39
578297
- Fix CVE-2016-9131 (ISC change 4508)
578297
- Fix CVE-2016-9147 (ISC change 4510)
578297
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)
578297
- Fix CVE-2016-9444 (ISC change 4517)
578297
312153
* Mon Oct 31 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38
312153
- Fix CVE-2016-8864
312153
310562
* Fri Sep 23 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37
97004c
- Fix CVE-2016-2776
97004c
310562
* Wed May 11 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36
310562
- Added automatic interface scan functionality (#1294506)
310562
- Removed NetworkManager dispatcher script since it is not needed any more (#1294506)
310562
310562
* Wed Apr 13 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35
310562
- Added GeoIP support (#1220594)
310562
310562
* Fri Apr 01 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34
310562
- Added support for CAA records (#1306610)
310562
- Use HTTPS URL instead of FTP for upstream sources (#1319280)
310562
310562
* Tue Mar 22 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33
310562
- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185)
310562
- Fix error in internal test suite (#1259514)
310562
- Fix named-checkconf call in *-chroot.service files (#1278082)
310562
- Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)
310562
310562
* Tue Mar 08 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32
b2eaff
- Fix CVE-2016-1285 and CVE-2016-1286
b2eaff
310562
* Mon Jan 18 2016 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31
e50659
- Fix CVE-2015-8704
e50659
310562
* Mon Dec 14 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30
918839
- Fix CVE-2015-8000
918839
d56ed2
* Wed Sep 02 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29
d56ed2
- Fix CVE-2015-5722
4be90d
d56ed2
* Wed Aug 05 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28
d56ed2
- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)
d56ed2
d56ed2
* Tue Jul 28 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27
aedf60
- Fix CVE-2015-5477
aedf60
d56ed2
* Wed Jul 08 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26
6e2ae0
- Fix CVE-2015-4620
6e2ae0
d56ed2
* Tue Jul 07 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25
d56ed2
- Fixed nsupdate realm auto-detection (#1214827)
d56ed2
d56ed2
* Mon Jun 29 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24
d56ed2
- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)
d56ed2
d56ed2
* Mon Jun 01 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23
d56ed2
- Don't copy /etc/localtime on -chroot package installation (#1186773)
d56ed2
- Fix SPF resource records check to comply with RFC7208 (#1215164)
d56ed2
- Don't use ISC's DLV by default (#1223336)
d56ed2
d56ed2
* Fri May 22 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22
d56ed2
- Add version specific requires on bind for bind-pkcs11 (Related: #1097753)
d56ed2
- Resolve issues found by static analysis (Related: #1097753)
d56ed2
d56ed2
* Thu May 21 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21
d56ed2
- Added native PKCS#11 functionality (#1097753)
d56ed2
d56ed2
* Wed May 20 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20
d56ed2
- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)
d56ed2
d56ed2
* Thu May 14 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19
d56ed2
- Install config for tmpfiles under %%{_tmpfilesdir} (#1180976)
d56ed2
- Fixed systemctl path in logrotate configuration (#1164264)
d56ed2
- remove information about system-config-bind from named.8 man page (#1152066)
d56ed2
c25660
* Mon Mar 02 2015 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1
c25660
- Fix CVE-2015-1349
c25660
d4e835
* Wed Dec 10 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18
d4e835
- Fix CVE-2014-8500 (#1171976)
d4e835
d4e835
* Thu Sep 18 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17
d4e835
- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150)
d4e835
- Fix error in triggerun scriptlet (#1143033)
d4e835
- Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)
d4e835
d4e835
* Thu Aug 21 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16
d4e835
- Add versioned requires on bind-libs to bind-utils and bind-sdb
d4e835
d4e835
* Wed Aug 20 2014 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15
d4e835
- Use /dev/urandom when generating rndc.key file (#1107568)
d4e835
- Allow authentication using TSIG in allow-notify configuration statement (#1067424)
d4e835
- Fix race condition when destroying a resolver fetch object (#1072379)
d4e835
- Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959)
d4e835
- Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)
5c48e4
fd4b48
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 32:9.9.4-14
fd4b48
- Mass rebuild 2014-01-24
fd4b48
fd4b48
* Wed Jan 15 2014 Honza Horak <hhorak@redhat.com> - 32:9.9.4-13
fd4b48
- Rebuild for mariadb-libs
fd4b48
  Related: #1045013
fd4b48
fd4b48
* Tue Jan 14 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.4-12
fd4b48
- Fix CVE-2014-0591
fd4b48
fd4b48
* Mon Jan 06 2014 Tomas Hozza <thozza@redhat.com> 32:9.9.4-11
fd4b48
- Build against libdb instead of libdb4 (#1044990)
fd4b48
fd4b48
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 32:9.9.4-10
fd4b48
- Mass rebuild 2013-12-27
fd4b48
fd4b48
* Wed Dec 18 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-9
fd4b48
- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)
fd4b48
fd4b48
* Tue Dec 17 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-8
fd4b48
- Split chroot package for named and named-sdb
fd4b48
- Extract setting-up/destroying of chroot to a separate systemd service (#1004300)
fd4b48
fd4b48
* Thu Dec 05 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-7
fd4b48
- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384)
fd4b48
- Added session-keyfile statement into default named.conf since we use /run/named (#1024384)
fd4b48
fd4b48
* Thu Nov 28 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-6
fd4b48
- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)
fd4b48
fd4b48
* Tue Nov 12 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
fd4b48
- Install configuration for rwtab and fix chroot setup script (#1028189)
fd4b48
- use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)
fd4b48
bc5dde
* Thu Oct 31 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-4
bc5dde
- Correct the patch for #1020683
bc5dde
bc5dde
* Tue Oct 29 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-3
bc5dde
- Fix race condition on send buffers in dighost.c (#1020683)
bc5dde
bc5dde
* Tue Oct 08 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-2
bc5dde
- install isc/errno2result.h header (#1015165)
bc5dde
bc5dde
* Mon Sep 23 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.4-1
bc5dde
- update to 9.9.4 (#1010200)
bc5dde
- drop merged patches
bc5dde
- modify patches to fit on new version
bc5dde
bc5dde
* Tue Sep 10 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2
bc5dde
- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stack
bc5dde
bc5dde
* Fri Aug 16 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2
bc5dde
- Don't generate rndc.key if there exists rndc.conf
bc5dde
bc5dde
* Fri Aug 16 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2
bc5dde
- don't install named-sdb.service if SDB macro is defined to zero
bc5dde
bc5dde
* Sun Jul 28 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2
bc5dde
- update to 9.9.3-P2 (fix for CVE-2013-4854)
bc5dde
- update RRL patch to 9.9.3-P2-rl.13207.22
bc5dde
- Fix script for setting up chroot so it unmounts everything successfully
bc5dde
bc5dde
* Wed Jul 10 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1
bc5dde
- Fix dates in Changelog
bc5dde
bc5dde
* Wed Jun 05 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1
bc5dde
- update to 9.9.3-P1 (fix for CVE-2013-3919)
bc5dde
- update RRL patch to 9.9.3-P1-rl.156.01
bc5dde
bc5dde
* Mon Jun 03 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-2
bc5dde
- bump release to prevent update path issues
bc5dde
bc5dde
* Mon Jun 03 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
bc5dde
- update to 9.9.3
bc5dde
- install dns/update.h header
bc5dde
- update RRL patch to the latest version 9.9.3-rl.150.20
bc5dde
bc5dde
* Fri May 17 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2
bc5dde
- Fix segfault in host/nslookup (#878139)
bc5dde
bc5dde
* Mon May 13 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
bc5dde
- update to 9.9.3rc2
bc5dde
- part of bind97-exportlib.patch not needed any more
bc5dde
- bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
bc5dde
- rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
bc5dde
- bind99-opts.patch merged
bc5dde
bc5dde
* Fri May 03 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
bc5dde
- Include recursion Warning in named.conf and named.conf.sample (#740894)
bc5dde
- Include managed-keys-directory statement in named.conf.sample (#948026)
bc5dde
bc5dde
* Thu May 02 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1
bc5dde
- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)
bc5dde
bc5dde
* Fri Apr 19 2013 Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1
bc5dde
- fix crash in nsupdate when processing "-r" parameter (#949544)
bc5dde
bc5dde
* Tue Apr 16 2013 Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1
bc5dde
- ship dns/rrl.h in -devel subpkg
bc5dde
bc5dde
* Tue Apr 16 2013 Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
bc5dde
- update to 9.9.3rc1
bc5dde
- bind-96-libtool2.patch has been merged
bc5dde
- fix bind tmpfiles.d for named.pid /run migration (#920713)
bc5dde
bc5dde
* Wed Mar 27 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2
bc5dde
- New upstream patch version fixing CVE-2013-2266 (#928032)
bc5dde
bc5dde
* Tue Mar 19 2013 Adam Tkac <atkac redhat com> 32:9.9.2-11.P1
bc5dde
- move pidfile to /run/named/named.pid
bc5dde
bc5dde
* Wed Mar 06 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1
bc5dde
- Fix Makefile.in to include header added by rate limiting patch (#918330)
bc5dde
bc5dde
* Tue Mar 05 2013 Adam Tkac <atkac redhat com> 32:9.9.2-9.P1
bc5dde
- drop some developer-only documentation and move ARM to %%docdir
bc5dde
bc5dde
* Mon Feb 18 2013 Adam Tkac <atkac redhat com> 32:9.9.2-8.P1
bc5dde
- include rate limiting patch
bc5dde
bc5dde
* Tue Jan 29 2013 Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
bc5dde
- Corrected IP addresses in named.ca (#901741)
bc5dde
- mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)
bc5dde
bc5dde
* Thu Dec 20 2012 Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
bc5dde
- generate /etc/rndc.key during named service startup if doesn't exist
bc5dde
- increase startup timeout in systemd units to 90sec (default)
bc5dde
- fix IDN related statement in dig.1 manpage
bc5dde
bc5dde
* Wed Dec 05 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1
bc5dde
- update to bind-9.9.2-P1
bc5dde
bc5dde
* Mon Nov 12 2012 Adam Tkac <atkac redhat com> 32:9.9.2-4
bc5dde
- document dig exit codes in manpage
bc5dde
- ignore empty "search" options in resolv.conf
bc5dde
bc5dde
* Mon Nov 12 2012 Adam Tkac <atkac redhat com> 32:9.9.2-3
bc5dde
- drop PKCS11 support on rhel
bc5dde
bc5dde
* Thu Oct 11 2012 Adam Tkac <atkac redhat com> 32:9.9.2-2
bc5dde
- install isc/stat.h
bc5dde
bc5dde
* Thu Oct 11 2012 Adam Tkac <atkac redhat com> 32:9.9.2-1
bc5dde
- update to 9.9.2
bc5dde
- bind97-rh714049.patch has been dropped
bc5dde
- patches merged
bc5dde
  - bind98-rh816164.patch
bc5dde
bc5dde
* Thu Sep 13 2012 Adam Tkac <atkac redhat com> 32:9.9.1-10.P3
bc5dde
- update to bind-9.9.1-P3
bc5dde
bc5dde
* Wed Aug 22 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
bc5dde
- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
bc5dde
- changed %%define macros to %%global and fixed several rpmlint warnings
bc5dde
bc5dde
* Wed Aug 08 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2
bc5dde
- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)
bc5dde
bc5dde
* Wed Aug 01 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2
bc5dde
- Fixed bind-devel multilib conflict (#478718)
bc5dde
bc5dde
* Mon Jul 30 2012 Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
bc5dde
- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
bc5dde
- Fixed path to libdb.so in config.dlz.in
bc5dde
bc5dde
* Thu Jul 26 2012 Adam Tkac <atkac redhat com> 32:9.9.1-5.P2
bc5dde
- update to 9.9.1-P2
bc5dde
bc5dde
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1
bc5dde
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
bc5dde
bc5dde
* Wed Jul 11 2012 Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1
bc5dde
- Avoid shell invocation and dep for -libs-lite %%postun.
bc5dde
bc5dde
* Mon Jun 04 2012 Adam Tkac <atkac redhat com> 32:9.9.1-2.P1
bc5dde
- update to 9.9.1-P1 (CVE-2012-1667)
bc5dde
bc5dde
* Thu May 24 2012 Adam Tkac <atkac redhat com> 32:9.9.1-1
bc5dde
- update to 9.9.1
bc5dde
- bind99-coverity.patch merged
bc5dde
- bind-9.5-overflow.patch merged
bc5dde
bc5dde
* Mon May 07 2012 Adam Tkac <atkac redhat com> 32:9.9.0-6
bc5dde
- nslookup: return non-zero exit code when fail to get answer (#816164)
bc5dde
bc5dde
* Thu Apr 26 2012 Adam Tkac <atkac redhat com> 32:9.9.0-5
bc5dde
- initscript: don't umount /var/named when didn't mount it
bc5dde
bc5dde
* Tue Apr 24 2012 Adam Tkac <atkac redhat com> 32:9.9.0-4
bc5dde
- apply all non-SDB patches before SDB ones (#804475)
bc5dde
- enable Berkeley DB DLZ backend (#804478)
bc5dde
bc5dde
* Thu Apr 12 2012 Adam Tkac <atkac redhat com> 32:9.9.0-3
bc5dde
- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)
bc5dde
bc5dde
* Mon Mar 26 2012 Adam Tkac <atkac redhat com> 32:9.9.0-2
bc5dde
- remove unneeded bind99-v6only.patch
bc5dde
bc5dde
* Mon Mar 05 2012 Adam Tkac <atkac redhat com> 32:9.9.0-1
bc5dde
- update to 9.9.0
bc5dde
- load dynamic DBs later (and update dyndb patch)
bc5dde
- fix memory leak in named during processing of rndc command
bc5dde
- don't call `rndc-confgen -a` in "post" section
bc5dde
- fix some packaging bugs in bind-chroot
bc5dde
bc5dde
* Wed Feb 15 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2
bc5dde
- build with "--enable-fixed-rrset"
bc5dde
bc5dde
* Wed Feb 01 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2
bc5dde
- update to 9.9.0rc2
bc5dde
- doc/rfc and doc/draft are no longer shipped in tarball
bc5dde
bc5dde
* Mon Jan 30 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1
bc5dde
- retire initscript in favour of systemd unit files (#719419)
bc5dde
bc5dde
* Thu Jan 12 2012 Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1
bc5dde
- update to 9.9.0rc1
bc5dde
bc5dde
* Wed Dec 07 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2
bc5dde
- ship dns/forward.h in -devel subpkg
bc5dde
bc5dde
* Tue Nov 22 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
bc5dde
- update to 9.9.0b2 (CVE-2011-4313)
bc5dde
- patches merged
bc5dde
  - bind97-rh700097.patch
bc5dde
  - bind99-cinfo.patch
bc5dde
bc5dde
* Mon Nov 14 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1
bc5dde
- ship dns/clientinfo.h in bind-devel
bc5dde
bc5dde
* Fri Nov 11 2011 Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1
bc5dde
- update to 9.9.0b1
bc5dde
- bind98-dlz_buildfix.patch merged
bc5dde
bc5dde
* Fri Oct 28 2011 Adam Tkac <atkac redhat com> 32:9.8.1-4
bc5dde
- nslookup failed to resolve name in certain cases
bc5dde
bc5dde
* Mon Sep 26 2011 Adam Tkac <atkac redhat com> 32:9.8.1-3
bc5dde
- remove deps filter, it is no longer needed (#739663)
bc5dde
bc5dde
* Fri Sep 09 2011 Adam Tkac <atkac redhat com> 32:9.8.1-2
bc5dde
- fix logrotate config file (#725256)
bc5dde
bc5dde
* Wed Sep 07 2011 Adam Tkac <atkac redhat com> 32:9.8.1-1
bc5dde
- update to 9.8.1
bc5dde
- ship /etc/trusted-key.key (needed by dig)
bc5dde
- use select instead of epoll in export libs (#735103)
bc5dde
bc5dde
* Wed Aug 31 2011 Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
bc5dde
- fix DLZ related compilation issues
bc5dde
- make /etc/named.{root,iscdlv}.key world-readable
bc5dde
- add bind-libs versioned requires to bind pkg
bc5dde
bc5dde
* Wed Aug 31 2011 Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
bc5dde
- fix rare race condition in request.c
bc5dde
- print "the working directory is not writable" as debug message
bc5dde
- re-add configtest target to initscript
bc5dde
- initscript: sybsys name is always named, not named-sdb
bc5dde
- nsupdate returned zero when target zone didn't exist (#700097)
bc5dde
- nsupdate could have failed if server has multiple IPs and the first
bc5dde
  was unreachable (#714049)
bc5dde
bc5dde
* Wed Aug 31 2011 Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
bc5dde
- update to 9.8.1rc1
bc5dde
- patches merged
bc5dde
  - bind97-rh674334.patch
bc5dde
  - bind97-cleanup.patch
bc5dde
  - bind98-includes.patch
bc5dde
bc5dde
* Wed Aug 03 2011 Adam Tkac <atkac redhat com> 32:9.8.0-9.P4
bc5dde
- improve patch for #725741
bc5dde
bc5dde
* Tue Jul 26 2011 Adam Tkac <atkac redhat com> 32:9.8.0-8.P4
bc5dde
- named could have crashed during reload when dyndb module is used (#725741)
bc5dde
bc5dde
* Tue Jul 05 2011 Adam Tkac <atkac redhat com> 32:9.8.0-7.P4
bc5dde
- update to 9.8.0-P4
bc5dde
  - bind98-libdns-export.patch merged
bc5dde
bc5dde
* Thu Jun 02 2011 Adam Tkac <atkac redhat com> 32:9.8.0-6.P2
bc5dde
- update the dyndb patch
bc5dde
bc5dde
* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.8.0-5.P2
bc5dde
- fix compilation of libdns-export.so
bc5dde
bc5dde
* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.8.0-4.P2
bc5dde
- update to 9.8.0-P2 (CVE-2011-1910)
bc5dde
bc5dde
* Fri May 06 2011 Adam Tkac <atkac redhat com> 32:9.8.0-3.P1
bc5dde
- update to 9.8.0-P1 (CVE-2011-1907)
bc5dde
bc5dde
* Wed Mar 23 2011 Dan Horák <dan@danny.cz> - 32:9.8.0-2
bc5dde
- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)
bc5dde
bc5dde
* Thu Mar 03 2011 Adam Tkac <atkac redhat com> 32:9.8.0-1
bc5dde
- update to 9.8.0
bc5dde
- bind97-rh665971.patch merged
bc5dde
bc5dde
* Thu Mar 03 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1
bc5dde
- revert previous change (integration with libnmserver)
bc5dde
bc5dde
* Tue Feb 22 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1
bc5dde
- integrate named with libnmserver library
bc5dde
bc5dde
* Tue Feb 22 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1
bc5dde
- include dns/rpz.h in -devel subpkg
bc5dde
bc5dde
* Mon Feb 21 2011 Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1
bc5dde
- update to 9.8.0rc1
bc5dde
bc5dde
* Fri Feb 18 2011 Adam Tkac <atkac redhat com> 32:9.7.3-1
bc5dde
- update to 9.7.3
bc5dde
- fix dig +trace on dualstack systems (#674334)
bc5dde
- fix linkage order when building on system with older BIND (#665971)
bc5dde
- reduce number of gcc warnings
bc5dde
bc5dde
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1
bc5dde
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
bc5dde
bc5dde
* Tue Jan 25 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1
bc5dde
- update to 9.7.3rc1
bc5dde
  - bind97-krb5-self.patch merged
bc5dde
bc5dde
* Wed Jan 12 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1
bc5dde
- fix typo in initscript
bc5dde
bc5dde
* Thu Jan 06 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
bc5dde
- fix "service named status" when used with named-sdb
bc5dde
- don't check MD5, size and mtime of sysconfig/named
bc5dde
bc5dde
* Wed Jan 05 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1
bc5dde
- add new option DISABLE_ZONE_CHECKING to sysconfig/named
bc5dde
bc5dde
* Wed Jan 05 2011 Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1
bc5dde
- update to 9.7.3b1
bc5dde
bc5dde
* Wed Jan 05 2011 Adam Tkac <atkac redhat com> 32:9.7.2-10.P3
bc5dde
- initscript should terminate only the correct "named" process (#622785)
bc5dde
bc5dde
* Mon Dec 20 2010 Adam Tkac <atkac redhat com> 32:9.7.2-9.P3
bc5dde
- fix "krb5-self" update-policy rule processing
bc5dde
bc5dde
* Thu Dec 02 2010 Adam Tkac <atkac redhat com> 32:9.7.2-8.P3
bc5dde
- update to 9.7.2-P3
bc5dde
bc5dde
* Mon Nov 29 2010 Jan Görig <jgorig redhat com> 32:9.7.2-7.P2
bc5dde
- added tmpfiles.d support (#656550)
bc5dde
- removed old PID checking in initscript
bc5dde
bc5dde
* Mon Nov 08 2010 Adam Tkac <atkac redhat com> 32:9.7.2-6.P2
bc5dde
- don't emit various informational messages by default (#645544)
bc5dde
bc5dde
* Wed Oct 20 2010 Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
bc5dde
- move BIND9 internal libs back to %%{_libdir}
bc5dde
- add "-export" suffix to public libraries (-lite subpkg)
bc5dde
bc5dde
* Thu Oct 07 2010 Adam Tkac <atkac redhat com> 32:9.7.2-4.P2
bc5dde
- ship -devel subpkg for internal libs, dnsperf needs it
bc5dde
bc5dde
* Thu Oct 07 2010 Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
bc5dde
- new bind-libs-lite and bind-lite-devel subpkgs which contain
bc5dde
  public version of BIND 9 libraries
bc5dde
- don't ship devel files for internal version of BIND 9 libraries
bc5dde
bc5dde
* Wed Sep 29 2010 Adam Tkac <atkac redhat com> 32:9.7.2-2.P2
bc5dde
- update to 9.7.2-P2
bc5dde
bc5dde
* Thu Sep 16 2010 Adam Tkac <atkac redhat com> 32:9.7.2-1
bc5dde
- update to 9.7.2
bc5dde
bc5dde
* Fri Aug 27 2010 Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1
bc5dde
- update to 9.7.2rc1
bc5dde
bc5dde
* Tue Aug 10 2010 Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1
bc5dde
- host: handle "debug", "attempts" and "timeout" options in resolv.conf well
bc5dde
bc5dde
* Tue Aug 03 2010 Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1
bc5dde
- update to 9.7.2b1
bc5dde
- patches merged
bc5dde
  - bind97-rh507429.patch
bc5dde
bc5dde
* Mon Jul 19 2010 Adam Tkac <atkac redhat com> 32:9.7.1-5.P2
bc5dde
- supply root zone DNSKEY in default configuration
bc5dde
bc5dde
* Mon Jul 19 2010 Adam Tkac <atkac redhat com> 32:9.7.1-4.P2
bc5dde
- update to 9.7.1-P2 (CVE-2010-0213)
bc5dde
bc5dde
* Mon Jul 12 2010 Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
bc5dde
- remove outdated Copyright.caching-nameserver file
bc5dde
- remove rfc1912.txt, it is already located in %%doc/rfc directory
bc5dde
- move COPYRIGHT to the bind-libs subpkg
bc5dde
- add COPYRIGHT to the -pkcs11 subpkg
bc5dde
bc5dde
* Fri Jul 09 2010 Adam Tkac <atkac redhat com> 32:9.7.1-2.P1
bc5dde
- update to 9.7.1-P1
bc5dde
bc5dde
* Mon Jun 28 2010 Adam Tkac <atkac redhat com> 32:9.7.1-1
bc5dde
- update to 9.7.1
bc5dde
- improve the "dnssec-conf" trigger
bc5dde
bc5dde
* Wed Jun 09 2010 Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1
bc5dde
- update to 9.7.1rc1
bc5dde
- patches merged
bc5dde
  - bind97-keysdir.patch
bc5dde
bc5dde
* Mon May 31 2010 Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
bc5dde
- update to 9.7.1b1
bc5dde
- make /var/named/dynamic as a default directory for managed DNSSEC keys
bc5dde
- add patch to get "managed-keys-directory" option working
bc5dde
- patches merged
bc5dde
  - bind97-managed-keyfile.patch
bc5dde
  - bind97-rh554316.patch
bc5dde
bc5dde
* Fri May 21 2010 Adam Tkac <atkac redhat com> 32:9.7.0-11.P2
bc5dde
- update dnssec-conf Obsoletes/Provides
bc5dde
bc5dde
* Thu May 20 2010 Adam Tkac <atkac redhat com> 32:9.7.0-10.P2
bc5dde
- update to 9.7.0-P2
bc5dde
bc5dde
* Fri Mar 26 2010 Adam Tkac <atkac redhat com> 32:9.7.0-9.P1
bc5dde
- added lost patch for #554316 (occasional crash in keytable.c)
bc5dde
bc5dde
* Fri Mar 26 2010 Adam Tkac <atkac redhat com> 32:9.7.0-8.P1
bc5dde
- active query might be destroyed in resume_dslookup() which triggered REQUIRE
bc5dde
  failure (#507429)
bc5dde
bc5dde
* Mon Mar 22 2010 Adam Tkac <atkac redhat com> 32:9.7.0-7.P1
bc5dde
- install SDB related manpages only when build with SDB
bc5dde
bc5dde
* Fri Mar 19 2010 Adam Tkac <atkac redhat com> 32:9.7.0-6.P1
bc5dde
- update to 9.7.0-P1
bc5dde
bc5dde
* Tue Mar 16 2010 Jan Görig <jgorig redhat com> 32:9.7.0-5
bc5dde
- bind-sdb now requires bind
bc5dde
bc5dde
* Mon Mar 15 2010 Jan Görig <jgorig redhat com> 32:9.7.0-4
bc5dde
- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)
bc5dde
bc5dde
* Mon Mar 01 2010 Adam Tkac <atkac redhat com> 32:9.7.0-3
bc5dde
- fix multilib issue (#478718) [jgorig]
bc5dde
bc5dde
* Mon Mar 01 2010 Adam Tkac <atkac redhat com> 32:9.7.0-2
bc5dde
- improve automatic DNSSEC reconfiguration trigger
bc5dde
- initscript now returns 2 in case that action doesn't exist (#523435)
bc5dde
- enable/disable chroot when bind-chroot is installed/uninstalled
bc5dde
bc5dde
* Wed Feb 17 2010 Adam Tkac <atkac redhat com> 32:9.7.0-1
bc5dde
- update to 9.7.0 final
bc5dde
bc5dde
* Mon Feb 15 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
bc5dde
- obsolete dnssec-conf
bc5dde
- automatically update configuration from old dnssec-conf based
bc5dde
- improve default configuration; enable DLV by default
bc5dde
- remove obsolete triggerpostun from bind-libs subpackage
bc5dde
bc5dde
* Thu Jan 28 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2
bc5dde
- update to 9.7.0rc2
bc5dde
bc5dde
* Wed Jan 27 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1
bc5dde
- initscript LSB related fixes (#523435)
bc5dde
bc5dde
* Wed Jan 27 2010 Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1
bc5dde
- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)
bc5dde
bc5dde
* Tue Dec 15 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1
bc5dde
- update to 9.7.0rc1
bc5dde
- bind97-headers.patch merged
bc5dde
- update default configuration
bc5dde
bc5dde
* Tue Dec 01 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3
bc5dde
- update to 9.7.0b3
bc5dde
bc5dde
* Thu Nov 26 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2
bc5dde
- install isc/namespace.h header
bc5dde
bc5dde
* Fri Nov 06 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2
bc5dde
- update to 9.7.0b2
bc5dde
bc5dde
* Tue Nov 03 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
bc5dde
- update to 9.7.0b1
bc5dde
- add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
bc5dde
  keys
bc5dde
bc5dde
* Thu Oct 08 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3
bc5dde
- don't package named-bootconf utility, it is very outdated and unneeded
bc5dde
bc5dde
* Mon Sep 21 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3
bc5dde
- determine file size via `stat` instead of `ls` (#523682)
bc5dde
bc5dde
* Wed Sep 16 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3
bc5dde
- update to 9.7.0a3
bc5dde
bc5dde
* Tue Sep 15 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
bc5dde
- improve chroot related documentation (#507795)
bc5dde
- add NetworkManager dispatcher script to reload named when network interface is
bc5dde
  activated/deactivated (#490275)
bc5dde
- don't set/unset named_write_master_zones SELinux boolean every time in
bc5dde
  initscript, modify it only when it's actually needed
bc5dde
bc5dde
* Tue Sep 15 2009 Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2
bc5dde
- update to 9.7.0a2
bc5dde
- merged patches
bc5dde
  - bind-96-db_unregister.patch
bc5dde
  - bind96-rh507469.patch
bc5dde
bc5dde
* Tue Sep 01 2009 Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
bc5dde
- next attempt to fix the postun trigger (#520385)
bc5dde
- remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch
bc5dde
bc5dde
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1
bc5dde
- rebuilt with new openssl
bc5dde
bc5dde
* Tue Aug 04 2009 Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1
bc5dde
- update the patch for dynamic loading of database backends
bc5dde
bc5dde
* Wed Jul 29 2009 Adam Tkac <atkac redhat com> 32:9.6.1-6.P1
bc5dde
- 9.6.1-P1 release (CVE-2009-0696)
bc5dde
- fix postun trigger (#513016, hopefully)
bc5dde
bc5dde
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5
bc5dde
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
bc5dde
bc5dde
* Mon Jul 20 2009 Adam Tkac <atkac redhat com> 32:9.6.1-4
bc5dde
- remove useless bind-9.3.3rc2-rndckey.patch
bc5dde
bc5dde
* Mon Jul 13 2009 Adam Tkac <atkac redhat com> 32:9.6.1-3
bc5dde
- fix broken symlinks in bind-libs (#509635)
bc5dde
- fix typos in /etc/sysconfig/named (#509650)
bc5dde
- add DEBUG option to /etc/sysconfig/named (#510283)
bc5dde
bc5dde
* Wed Jun 24 2009 Adam Tkac <atkac redhat com> 32:9.6.1-2
bc5dde
- improved "chroot automount" patches (#504596)
bc5dde
- host should fail if specified server doesn't respond (#507469)
bc5dde
bc5dde
* Wed Jun 17 2009 Adam Tkac <atkac redhat com> 32:9.6.1-1
bc5dde
- 9.6.1 release
bc5dde
- simplify chroot maintenance. Important files and directories are mounted into
bc5dde
  chroot (see /etc/sysconfig/named for more info, #504596)
bc5dde
- fix doc/named.conf.default perms
bc5dde
bc5dde
* Wed May 27 2009 Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1
bc5dde
- 9.6.1rc1 release
bc5dde
bc5dde
* Wed Apr 29 2009 Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
bc5dde
- update the patch for dynamic loading of database backends
bc5dde
- create %%{_libdir}/bind directory
bc5dde
- copy default named.conf to doc directory, shared with s-c-bind (atkac)
bc5dde
bc5dde
* Fri Apr 24 2009 Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
bc5dde
- update the patch for dynamic loading of database backends
bc5dde
- fix dns_db_unregister()
bc5dde
- useradd now takes "-N" instead of "-n" (atkac, #495726)
bc5dde
- print nicer error msg when zone file is actually a directory (atkac, #490837)
bc5dde
bc5dde
* Mon Mar 30 2009 Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
bc5dde
- 9.6.1b1 release
bc5dde
- patches merged
bc5dde
  - bind-96-isc_header.patch
bc5dde
  - bind-95-rh469440.patch
bc5dde
  - bind-96-realloc.patch
bc5dde
  - bind9-fedora-0001.diff
bc5dde
- use -version-number instead of -version-info libtool param
bc5dde
bc5dde
* Mon Mar 23 2009 Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1
bc5dde
- logrotate configuration file now points to /var/named/data/named.run by
bc5dde
  default (#489986)
bc5dde
bc5dde
* Tue Mar 17 2009 Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
bc5dde
- fall back to insecure mode when no supported DNSSEC algorithm is found
bc5dde
  instead of SERVFAIL
bc5dde
- don't fall back to non-EDNS0 queries when DO bit is set
bc5dde
bc5dde
* Tue Mar 10 2009 Adam Tkac <atkac redhat com> 32:9.6.0-10.P1
bc5dde
- enable DNSSEC only if it is enabled in sysconfig/dnssec
bc5dde
bc5dde
* Mon Mar 09 2009 Adam Tkac <atkac redhat com> 32:9.6.0-9.P1
bc5dde
- add DNSSEC support to initscript, enabled it per default
bc5dde
- add requires dnssec-conf
bc5dde
bc5dde
* Mon Mar 09 2009 Adam Tkac <atkac redhat com> 32:9.6.0-8.P1
bc5dde
- fire away libbind, it is now separate package
bc5dde
bc5dde
* Wed Mar 04 2009 Adam Tkac <atkac redhat com> 32:9.6.0-7.P1
bc5dde
- fixed some read buffer overflows (upstream)
bc5dde
bc5dde
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1
bc5dde
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
bc5dde
bc5dde
* Thu Feb 12 2009 Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1
bc5dde
- update the patch for dynamic loading of database backends
bc5dde
- include iterated_hash.h
bc5dde
bc5dde
* Sat Jan 24 2009 Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1
bc5dde
- rebuild for dependencies
bc5dde
bc5dde
* Wed Jan 21 2009 Adam Tkac <atkac redhat com> 32:9.6.0-3.P1
bc5dde
- rebuild against new openssl
bc5dde
bc5dde
* Thu Jan 08 2009 Adam Tkac <atkac redhat com> 32:9.6.0-2.P1
bc5dde
- 9.6.0-P1 release (CVE-2009-0025)
bc5dde
bc5dde
* Mon Jan 05 2009 Adam Tkac <atkac redhat com> 32:9.6.0-1
bc5dde
- Happy new year
bc5dde
- 9.6.0 release
bc5dde
bc5dde
* Thu Dec 18 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2
bc5dde
- 9.6.0rc2 release
bc5dde
- bind-96-rh475120.patch merged
bc5dde
bc5dde
* Tue Dec 16 2008 Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1
bc5dde
- add patch for dynamic loading of database backends
bc5dde
bc5dde
* Tue Dec 09 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1
bc5dde
- allow to reuse address for non-random query-source ports (#475120)
bc5dde
bc5dde
* Wed Dec 03 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
bc5dde
- 9.6.0rc1 release
bc5dde
- patches merged
bc5dde
  - bind-9.2.0rc3-varrun.patch
bc5dde
  - bind-95-sdlz-include.patch
bc5dde
  - bind-96-libxml2.patch
bc5dde
- fixed rare use-after-free problem in host utility (#452060)
bc5dde
- enabled chase of DNSSEC signature chains in dig
bc5dde
bc5dde
* Mon Dec 01 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1
bc5dde
- improved sample config file (#473586)
bc5dde
bc5dde
* Wed Nov 26 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1
bc5dde
- reverted previous change, koji doesn't like it
bc5dde
bc5dde
* Wed Nov 26 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1
bc5dde
- build bind-chroot as noarch
bc5dde
bc5dde
* Mon Nov 24 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1
bc5dde
- updates due libtool 2.2.6
bc5dde
- don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources
bc5dde
bc5dde
* Tue Nov 11 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1
bc5dde
- make statistics http server working, patch backported from 9.6 HEAD
bc5dde
bc5dde
* Mon Nov 10 2008 Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
bc5dde
- 9.6.0b1 release
bc5dde
- don't build ODBC and Berkeley DB DLZ drivers
bc5dde
- end of bind-chroot-admin script, copy config files to chroot manually
bc5dde
- /proc doesn't have to be mounted to chroot
bc5dde
- temporary use libbind from 9.5 series, noone has been released for 9.6 yet
bc5dde
bc5dde
* Mon Nov 03 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2
bc5dde
- dig/host: use only IPv4 addresses when -4 option is specified (#469440)
bc5dde
bc5dde
* Thu Oct 30 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2
bc5dde
- removed unneeded bind-9.4.1-ldap-api.patch
bc5dde
bc5dde
* Thu Oct 30 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2
bc5dde
- ship dns/{s,}dlz.h and isc/radix.h in bind-devel
bc5dde
bc5dde
* Tue Oct 07 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2
bc5dde
- removed bind-9.4.0-dnssec-directory.patch, it is wrong
bc5dde
bc5dde
* Wed Sep 24 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
bc5dde
- 9.5.1b2 release
bc5dde
- patches merged
bc5dde
  - bind95-rh454783.patch
bc5dde
  - bind-9.5-edns.patch
bc5dde
  - bind95-rh450995.patch
bc5dde
  - bind95-rh457175.patch
bc5dde
bc5dde
* Wed Sep 17 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1
bc5dde
- IDN output strings didn't honour locale settings (#461409)
bc5dde
bc5dde
* Tue Aug 05 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1
bc5dde
- disable transfer stats on DLZ zones (#454783)
bc5dde
bc5dde
* Mon Aug 04 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1
bc5dde
- add forgotten patch for #457175
bc5dde
- build with -O2
bc5dde
bc5dde
* Thu Jul 31 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
bc5dde
- static libraries are no longer supported
bc5dde
- IP acls weren't merged correctly (#457175)
bc5dde
- use fPIE on sparcv9/sparc64 (Dennis Gilmore)
bc5dde
- add sparc64 to list of 64bit arches in spec (Dennis Gilmore)
bc5dde
bc5dde
* Mon Jul 21 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1
bc5dde
- updated patches due new rpm (--fuzz=0 patch parameter)
bc5dde
bc5dde
* Mon Jul 14 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1
bc5dde
- use %%patch0 for Patch0 (#455061)
bc5dde
- correct source address (#455118)
bc5dde
bc5dde
* Tue Jul 08 2008 Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
bc5dde
- 9.5.1b1 release (CVE-2008-1447)
bc5dde
- dropped bind-9.5-recv-race.patch because upstream doesn't want it
bc5dde
bc5dde
* Mon Jun 30 2008 Adam Tkac <atkac redhat com> 32:9.5.0-37.1
bc5dde
- update default named.conf statements (#452708)
bc5dde
bc5dde
* Thu Jun 26 2008 Adam Tkac <atkac redhat com> 32:9.5.0-37
bc5dde
- some compat changes to fix building on RHEL4
bc5dde
bc5dde
* Mon Jun 23 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36.3
bc5dde
- fixed typo in %%posttrans script
bc5dde
bc5dde
* Wed Jun 18 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36.2
bc5dde
- parse inner acls correctly (#450995)
bc5dde
bc5dde
* Mon Jun 02 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36.1
bc5dde
- removed dns-keygen utility in favour of rndc-confgen -a (#449287)
bc5dde
- some minor sample fixes (#449274)
bc5dde
bc5dde
* Thu May 29 2008 Adam Tkac <atkac redhat com> 32:9.5.0-36
bc5dde
- updated to 9.5.0 final
bc5dde
- use getifaddrs to find available interfaces
bc5dde
bc5dde
* Mon May 26 2008 Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1
bc5dde
- make /var/run/named writable by named (#448277)
bc5dde
- fixed one non-utf8 file
bc5dde
bc5dde
* Thu May 22 2008 Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1
bc5dde
- fixes needed to pass package review (#225614)
bc5dde
bc5dde
* Wed May 21 2008 Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1
bc5dde
- bind-chroot now depends on bind (#446477)
bc5dde
bc5dde
* Wed May 14 2008 Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
bc5dde
- updated to 9.5.0rc1
bc5dde
- merged patches
bc5dde
  - bind-9.5-libcap.patch
bc5dde
- make binaries readable by others (#427826)
bc5dde
bc5dde
* Tue May 13 2008 Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
bc5dde
- reverted "any" patch, upstream says not needed
bc5dde
- log EDNS failure only when we really switch to plain EDNS (#275091)
bc5dde
- detect configuration file better
bc5dde
bc5dde
* Tue May 06 2008 Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3
bc5dde
- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)
bc5dde
bc5dde
* Mon May 05 2008 Adam Tkac <atkac redhat com> 32:9.5.0-31.b3
bc5dde
- readded bind-9.5-libcap.patch
bc5dde
- added bind-9.5-recv-race.patch from F8 branch (#400461)
bc5dde
bc5dde
* Wed Apr 23 2008 Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3
bc5dde
- build Berkeley DB DLZ backend
bc5dde
bc5dde
* Mon Apr 21 2008 Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
bc5dde
- 9.5.0b3 release
bc5dde
- dropped patches (upstream)
bc5dde
  - bind-9.5-transfer-segv.patch
bc5dde
  - bind-9.5-mudflap.patch
bc5dde
  - bind-9.5.0-generate-xml.patch
bc5dde
  - bind-9.5-libcap.patch
bc5dde
bc5dde
* Wed Apr 02 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2
bc5dde
- fixed named.conf.sample file (#437569)
bc5dde
bc5dde
* Fri Mar 14 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2
bc5dde
- fixed URLs
bc5dde
bc5dde
* Mon Feb 25 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2
bc5dde
- BuildRequires cleanup
bc5dde
bc5dde
* Sun Feb 24 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.b2
bc5dde
- rebuild without mudflap (#434159)
bc5dde
bc5dde
* Wed Feb 20 2008 Adam Tkac <atkac redhat com> 32:9.5.0-28.b2
bc5dde
- port named to use libcap library, enable threads (#433102)
bc5dde
- removed some unneeded Requires
bc5dde
bc5dde
* Tue Feb 19 2008 Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
bc5dde
- removed conditional build with libefence (use -fmudflapth instead)
bc5dde
- fixed building of DLZ stuff (#432497)
bc5dde
- do not build Berkeley DB DLZ backend
bc5dde
- temporary build with --disable-linux-caps and without threads (#433102)
bc5dde
- update named.ca file to affect IPv6 changes in root zone
bc5dde
bc5dde
* Mon Feb 11 2008 Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
bc5dde
- build with -D_GNU_SOURCE (#431734)
bc5dde
- improved fix for #253537, posttrans script is now used
bc5dde
- improved fix for #400461
bc5dde
- 9.5.0b2
bc5dde
  - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
bc5dde
    - only named, named-sdb and lwresd are PIE
bc5dde
  - bind-9.5-sdb.patch has been updated
bc5dde
  - bind-9.5-libidn.patch has been updated
bc5dde
  - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
bc5dde
  - removed bind-9.5-gssapi-header.patch (upstream)
bc5dde
  - removed bind-9.5-CVE-2008-0122.patch (upstream)
bc5dde
- removed bind-9.2.2-nsl.patch
bc5dde
- improved sdb_tools Makefile.in
bc5dde
bc5dde
* Mon Feb 04 2008 Adam Tkac <atkac redhat com> 32:9.5.0-25.b1
bc5dde
- fixed segfault during sending notifies (#400461)
bc5dde
- rebuild with gcc 4.3 series
bc5dde
bc5dde
* Tue Jan 22 2008 Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
bc5dde
- removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
bc5dde
- allow parallel building of libdns library
bc5dde
- CVE-2008-0122
bc5dde
bc5dde
* Thu Dec 27 2007 Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
bc5dde
- fixed initscript wait loop (#426382)
bc5dde
- removed dependency on policycoreutils and libselinux (#426515)
bc5dde
bc5dde
* Thu Dec 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-22.b1
bc5dde
- fixed regression caused by libidn2 patch (#426348)
bc5dde
bc5dde
* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-21.b1
bc5dde
- fixed typo in post section (CVE-2007-6283)
bc5dde
bc5dde
* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-20.b1
bc5dde
- removed obsoleted triggers
bc5dde
- CVE-2007-6283
bc5dde
bc5dde
* Wed Dec 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1
bc5dde
- added dst/gssapi.h to -devel subpackage (#419091)
bc5dde
- improved fix for (#417431)
bc5dde
bc5dde
* Mon Dec 10 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1
bc5dde
- fixed shutdown with initscript when rndc doesn't work (#417431)
bc5dde
- fixed IDN patch (#412241)
bc5dde
bc5dde
* Thu Dec 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.b1
bc5dde
- 9.5.0b1 (#405281, #392491)
bc5dde
bc5dde
* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7
bc5dde
- Rebuild for deps
bc5dde
bc5dde
* Wed Dec 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7
bc5dde
- build with -O0
bc5dde
bc5dde
* Mon Dec 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
bc5dde
- bind-9.5-random_ports.patch was removed because upstream doesn't
bc5dde
  like it. query-source{,v6} options are sufficient (#391931)
bc5dde
- bind-chroot-admin called restorecon on /proc filesystem (#405281)
bc5dde
bc5dde
* Mon Nov 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7
bc5dde
- removed edns patch to keep compatibility with vanilla bind
bc5dde
  (#275091, comment #20)
bc5dde
bc5dde
* Wed Nov 21 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7
bc5dde
- use system port selector instead ISC's (#391931)
bc5dde
bc5dde
* Mon Nov 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.a7
bc5dde
- removed statement from initscript which passes -D to named
bc5dde
bc5dde
* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
bc5dde
- 9.5.0a7
bc5dde
- dropped patches (upstream)
bc5dde
  - bind-9.5-update.patch
bc5dde
  - bind-9.5-pool_badfree.patch
bc5dde
  - bind-9.5-_res_errno.patch
bc5dde
bc5dde
* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
bc5dde
- added bind-sdb again, contains SDB modules and DLZ modules
bc5dde
- bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch
bc5dde
bc5dde
* Mon Nov 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6
bc5dde
- removed Requires: openldap, postgresql, mysql, db4, unixODBC
bc5dde
- new L.ROOT-SERVERS.NET address
bc5dde
bc5dde
* Mon Oct 29 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6
bc5dde
- completely disable DBUS
bc5dde
bc5dde
* Fri Oct 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6
bc5dde
- minor cleanup in bind-chroot-admin
bc5dde
bc5dde
* Thu Oct 25 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6
bc5dde
- fixed typo in initscript
bc5dde
bc5dde
* Tue Oct 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.a6
bc5dde
- disabled DBUS (dhcdbd doesn't exist & #339191)
bc5dde
bc5dde
* Thu Oct 18 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6
bc5dde
- fixed missing va_end () functions (#336601)
bc5dde
- fixed memory leak when dbus initialization fails
bc5dde
bc5dde
* Tue Oct 16 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.a6
bc5dde
- corrected named.5 SDB statement (#326051)
bc5dde
bc5dde
* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-14.a6
bc5dde
- added edns patch again (#275091)
bc5dde
bc5dde
* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-13.a6
bc5dde
- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)
bc5dde
bc5dde
* Thu Sep 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6
bc5dde
- build with O2
bc5dde
- removed "autotools" patch
bc5dde
- bugfixing in bind-chroot-admin (#279901)
bc5dde
bc5dde
* Thu Sep 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
bc5dde
- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
bc5dde
  obsoleted by upstream bind-9.5-_res_errno.patch
bc5dde
bc5dde
* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6
bc5dde
- fixed wrong resolver's dispatch pool cleanup (#275011, patch from 
bc5dde
  tmraz redhat com)
bc5dde
bc5dde
* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
bc5dde
- initscript failure message is now printed correctly (#277981,
bc5dde
  Quentin Armitage (quentin armitage org uk) )
bc5dde
bc5dde
* Mon Sep 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6
bc5dde
- temporary revert ISC 2119 change and add "libbind-errno" patch
bc5dde
  (#254501) again
bc5dde
bc5dde
* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
bc5dde
- removed end dots from Summary sections (skasal@redhat.com)
bc5dde
- fixed wrong file creation by autotools patch (skasal@redhat.com)
bc5dde
bc5dde
* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
bc5dde
- start using --disable-isc-spnego configure option
bc5dde
  - remove bind-9.5-spnego-memory_management.patch (source isn't
bc5dde
    compiled)
bc5dde
bc5dde
* Wed Aug 22 2007 Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
bc5dde
- added new initscript option KEYTAB_FILE which specified where
bc5dde
  is located kerberos .keytab file for named service
bc5dde
- obsolete temporary bind-9.5-spnego-memory_management.patch by
bc5dde
  bind-9.5-gssapictx-free.patch which conforms BIND coding standards
bc5dde
  (#251853)
bc5dde
bc5dde
* Tue Aug 21 2007 Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
bc5dde
- dropped direct dependency to /etc/openldap/schema directory
bc5dde
- changed hardcoded paths to macros
bc5dde
- fired away code which configure LDAP server
bc5dde
bc5dde
* Tue Aug 14 2007 Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6
bc5dde
- named could crash with SRV record UPDATE (#251336)
bc5dde
bc5dde
* Mon Aug 13 2007 Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
bc5dde
- disable 64bit dlz driver patch on alpha and ia64 (#251298)
bc5dde
- remove wrong malloc functions from lib/dns/spnego.c (#251853)
bc5dde
bc5dde
* Mon Aug 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6
bc5dde
- changed licence from BSD-like to ISC
bc5dde
bc5dde
* Tue Jul 31 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6
bc5dde
- disabled named on all runlevels by default
bc5dde
bc5dde
* Mon Jul 30 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
bc5dde
- minor next improvements on autotools patch
bc5dde
- dig and host utilities now using libidn instead idnkit for
bc5dde
  IDN support
bc5dde
bc5dde
* Wed Jul 25 2007 Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6
bc5dde
- binutils/gcc bug rebuild (#249435)
bc5dde
bc5dde
* Tue Jul 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
bc5dde
- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
bc5dde
  CVE-2007-2926
bc5dde
- fixed building on 64bits
bc5dde
bc5dde
* Mon Jul 23 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-5
bc5dde
- integrated "autotools" patch for testing purposes (upstream will
bc5dde
  accept it in future, for easier building)
bc5dde
bc5dde
* Mon Jul 23 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1
bc5dde
- fixed DLZ drivers building on 64bit systems
bc5dde
bc5dde
* Fri Jul 20 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-4
bc5dde
- fixed relation between logrotated and chroot-ed named
bc5dde
bc5dde
* Wed Jul 18 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
bc5dde
- removed bind-sdb package (default named has compiled SDB backend now)
bc5dde
- integrated DLZ (Dynamically loadable zones) drivers
bc5dde
- integrated GSS-TSIG support (RFC 3645)
bc5dde
- build with -O0 (many new features, potential core dumps will be more useful)
bc5dde
bc5dde
* Tue Jul 17 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2
bc5dde
- initscript should be ready for parallel booting (#246878)
bc5dde
bc5dde
* Tue Jul 17 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3
bc5dde
- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)
bc5dde
bc5dde
* Mon Jul 16 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2
bc5dde
- moved chroot configfiles into chroot subpackage (#248306)
bc5dde
bc5dde
* Mon Jul 02 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-2
bc5dde
- minor changes in default configuration
bc5dde
- fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
bc5dde
- removed wrong patch to #150288
bc5dde
bc5dde
* Tue Jun 19 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-1
bc5dde
- updated to latest upstream
bc5dde
bc5dde
* Wed Jun 13 2007 Adam Tkac <atkac redhat com> 31:9.4.1-7
bc5dde
- marked caching-nameserver as obsolete (#244604)
bc5dde
- fixed typo in initscript (causes that named doesn't detect NetworkManager
bc5dde
  correctly)
bc5dde
- next cleanup in configuration - moved configfiles into config.tar
bc5dde
- removed delay between start & stop in restart function in named.init
bc5dde
bc5dde
* Tue Jun 12 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6
bc5dde
- major changes in initscript. Could be LSB compatible now
bc5dde
- removed caching-nameserver subpackage. Move configs from this
bc5dde
  package to main bind package as default configuration and major
bc5dde
  configuration cleanup
bc5dde
bc5dde
* Mon Jun 04 2007 Adam Tkac <atkac redhat com> 31:9.4.1-5
bc5dde
- very minor compatibility change in bind-chroot-admin (line 215)
bc5dde
- enabled IDN support by default and don't distribute IDN libraries
bc5dde
- specfile cleanup
bc5dde
- add dynamic directory to /var/named. This directory will be primarily used for
bc5dde
  dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist
bc5dde
bc5dde
* Thu May 24 2007 Adam Tkac <atkac redhat com> 31:9.4.1-4
bc5dde
- removed ldap-api patch and start using deprecated API
bc5dde
- fixed minor problem in bind-chroot-admin script (#241103)
bc5dde
bc5dde
* Tue May 22 2007 Adam Tkac <atkac redhat com> 31:9.4.1-3
bc5dde
- fixed bind-chroot-admin dynamic DNS handling (#239149)
bc5dde
- updated zone-freeze patch to latest upstream
bc5dde
- ldap sdb has been rewriten to latest api (#239802)
bc5dde
bc5dde
* Mon May 07 2007 Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7
bc5dde
- test build on new build system
bc5dde
bc5dde
* Wed May 02 2007 Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7
bc5dde
- updated to 9.4.1 which contains fix to CVE-2007-2241
bc5dde
bc5dde
* Fri Apr 27 2007 Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
bc5dde
- improved "zone freeze patch" - if multiple zone with same name exists
bc5dde
  no zone is freezed
bc5dde
- minor cleanup in caching-nameserver's config file
bc5dde
- fixed race-condition in dbus code (#235809)
bc5dde
- added forgotten restorecon statement in bind-chroot-admin
bc5dde
bc5dde
* Tue Apr 17 2007 Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
bc5dde
- removed DEBUGINFO option because with this option (default) was bind
bc5dde
  builded with -O0 and without this flag no debuginfo package was produced.
bc5dde
  (I want faster bind => -O2 + debuginfo)
bc5dde
- fixed zone finding (#236426)
bc5dde
bc5dde
* Mon Apr 16 2007 Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7
bc5dde
- added idn support (still under development with upstream, disabled by default)
bc5dde
bc5dde
* Wed Apr 11 2007 Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7
bc5dde
- dnssec-signzone utility now doesn't ignore -d parameter
bc5dde
bc5dde
* Tue Apr 10 2007 Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
bc5dde
- removed query-source[-v6] options from caching-nameserver config
bc5dde
  (#209954, increase security)
bc5dde
- throw away idn. It won't be ready in fc7
bc5dde
bc5dde
* Tue Mar 13 2007 Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
bc5dde
- prepared bind to merge review
bc5dde
- added experimental idn support to bind-utils utils (not enabled by default yet)
bc5dde
- change chroot policy in caching-nameserver post section
bc5dde
- fixed bug in bind-chroot-admin - rootdir function is called properly now
bc5dde
bc5dde
* Mon Mar 12 2007 Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
bc5dde
- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
bc5dde
- moved bind-chroot-admin script to chroot package
bc5dde
- bind-9.3.2-redhat_doc.patch is always applied (#231738)
bc5dde
bc5dde
* Tue Mar 06 2007 Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
bc5dde
- updated to 9.4.0
bc5dde
- bind-chroot-admin now sets EAs correctly (#213926)
bc5dde
- throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)
bc5dde
bc5dde
* Thu Feb 15 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7
bc5dde
- minor cleanup in bind-chroot-admin script
bc5dde
bc5dde
* Fri Feb 09 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7
bc5dde
- fixed broken bind-chroot-admin script (#227995)
bc5dde
bc5dde
* Wed Feb 07 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7
bc5dde
- bind-chroot-admin now uses correct chroot path (#227600)
bc5dde
bc5dde
* Mon Feb 05 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7
bc5dde
- fixed conflict between bind-sdb and ldap
bc5dde
- removed duplicated bind directory in bind-libs
bc5dde
bc5dde
* Thu Feb 01 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
bc5dde
- fixed building without libbind
bc5dde
- fixed post section (selinux commands is now in if-endif statement)
bc5dde
- prever macro has been removed from version
bc5dde
bc5dde
* Mon Jan 29 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7
bc5dde
- redirected output from bind-chroot prep and %%preun stages to /dev/null
bc5dde
bc5dde
* Thu Jan 25 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7
bc5dde
- updated to version 9.3.4 which contains security bugfixes
bc5dde
bc5dde
* Tue Jan 23 2007 Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7
bc5dde
- package bind-libbind-devel has been marked as obsolete
bc5dde
bc5dde
* Mon Jan 22 2007 Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
bc5dde
- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
bc5dde
- Resolves: #214208
bc5dde
bc5dde
* Tue Jan 16 2007 Martin Stransky <stransky@redhat.com> - 31:9.3.3-3
bc5dde
- fixed a multi-lib issue
bc5dde
- Resolves: rhbz#222717
bc5dde
bc5dde
* Thu Jan 4 2007 Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
bc5dde
- added namedGetForwarders written in shell (#176100),
bc5dde
  created by Baris Cicek <baris@nerd.com.tr>.
bc5dde
bc5dde
* Sun Dec 10 2006 Martin Stransky <stransky@redhat.com> - 31:9.3.3-1
bc5dde
- update to 9.3.3 final
bc5dde
- fix for #219069: file included twice in src.rpm
bc5dde
bc5dde
* Wed Dec 6 2006 Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
bc5dde
- added back an interval to restart
bc5dde
- renamed package, it should meet the N-V-R criteria
bc5dde
- fix for #216185: bind-chroot-admin able to change root mode 750
bc5dde
- added fix from #215997: incorrect permissions on dnszone.schema
bc5dde
- added a notice to init script when /etc/named.conf doesn't exist (#216075)
bc5dde
bc5dde
* Mon Oct 30 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
bc5dde
- fix for #200465: named-checkzone and co. cannot be run as non-root user
bc5dde
- fix for #212348: chroot'd named causes df permission denied error
bc5dde
- fix for #211249, #211083 - problems with stopping named
bc5dde
- fix for #212549: init script does not unmount /proc filesystem
bc5dde
- fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
bc5dde
    added edns-enable options to named configuration file which can suppress
bc5dde
    EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
bc5dde
- fix for #212961: bind-chroot doesn't clean up its mess on %%preun
bc5dde
- update to 9.3.3rc3, removed already merged patches
bc5dde
bc5dde
* Fri Oct 13 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-5
bc5dde
- fix for #209359: bind-libs from compatlayer CD will not 
bc5dde
  install on ia64
bc5dde
bc5dde
* Tue Oct 10 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-4
bc5dde
- added fix for #210096: warning: group named does not exist - using root
bc5dde
bc5dde
* Thu Oct  5 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
bc5dde
- added fix from #209400 - Bind Init Script does not create 
bc5dde
  the PID file always, created by Jeff Means
bc5dde
- added timeout to stop section of init script. 
bc5dde
  The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
bc5dde
  shell variable.
bc5dde
bc5dde
* Mon Oct  2 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-2
bc5dde
- removed chcon from %%post script, replaced by restorecon 
bc5dde
  (Bug 202547, comment no. 37)
bc5dde
bc5dde
* Fri Sep 15 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-1
bc5dde
- updated to the latest upstream (9.3.3rc2)
bc5dde
bc5dde
* Wed Sep  6 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-41
bc5dde
- added upstream patch for correct SIG handling - CVE-2006-4095
bc5dde
bc5dde
* Tue Sep  5 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-40
bc5dde
- suppressed messages from bind-chroot-admin
bc5dde
- cleared notes about bind-config
bc5dde
bc5dde
* Tue Aug 22 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-39
bc5dde
- added fix for #203522 - "bind-chroot-admin -e" command fails
bc5dde
bc5dde
* Mon Aug 21 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-38
bc5dde
- fix for #203194 - tmpfile usage
bc5dde
bc5dde
* Thu Aug 17 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
bc5dde
- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
bc5dde
- fix for #202547 - file_contexts: invalid context
bc5dde
bc5dde
* Fri Aug 11 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-36
bc5dde
- added Provides: bind-config
bc5dde
bc5dde
* Fri Aug 11 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-35
bc5dde
- fix bug 197493: renaming subpackage bind-config to caching-nameserver
bc5dde
bc5dde
* Mon Jul 24 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34
bc5dde
- fix bug 199876: make '%%exclude libbbind.*' conditional on %%{LIBBIND}
bc5dde
bc5dde
* Mon Jul 24 2006 Florian La Roche <laroche@redhat.com> - 30:9.3.2-33
bc5dde
- fix #195881, perms are not packaged correctly
bc5dde
bc5dde
* Fri Jul 21 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
bc5dde
- fix addenda to bug 189789: 
bc5dde
  determination of selinux enabled was still not 100% correct in bind-chroot-admin
bc5dde
- fix addenda to bug 196398:
bc5dde
  make named.init test for NetworkManager being enabled AFTER testing for -D absence;
bc5dde
  named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
bc5dde
  auto-enable of named dbus support if NetworkManager enabled.
bc5dde
bc5dde
* Wed Jul 19 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
bc5dde
- fix bug 196398 - Enable -D option automatically in initscript
bc5dde
  if NetworkManager enabled in any runlevel.
bc5dde
- fix namedGetForwarders for new dbus
bc5dde
- fix bug 195881 - libbind.so should be owned by bind-libbind-devel
bc5dde
bc5dde
* Wed Jul 19 2006 Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6
bc5dde
- Rebuild against new dbus
bc5dde
bc5dde
* Wed Jul 12 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6
bc5dde
- rebuild with fixed glibc-kernheaders
bc5dde
bc5dde
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1
bc5dde
- rebuild
bc5dde
bc5dde
* Wed Jun 14 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
bc5dde
- fix bugs 191093, 189789
bc5dde
- backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
bc5dde
  ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
bc5dde
  o change 2024 / bug 16027:
bc5dde
    named emitted spurious "zone serial unchanged" messages on reload
bc5dde
  o change 2013 / bug 15941:
bc5dde
    handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
bc5dde
  o change 2009 / bug 15808: coverity fixes
bc5dde
  o change 1997 / bug 15818: 
bc5dde
    named was failing to replace negative cache entries when a positive one
bc5dde
    for the type was learnt
bc5dde
  o change 1994 / bug 15694: OpenSSL 0.9.8 support
bc5dde
  o change 1991 / bug 15813:
bc5dde
    The configuration data, once read, should be treated as readonly.
bc5dde
  o misc. validator fixes 
bc5dde
  o misc. resolver fixes
bc5dde
  o misc. dns fixes
bc5dde
  o misc. isc fixes
bc5dde
  o misc. libbind fixes
bc5dde
  o misc. isccfg fix
bc5dde
  o misc. lwres fix
bc5dde
  o misc. named fixes
bc5dde
  o misc. dig fixes
bc5dde
  o misc. nsupdate fix
bc5dde
  o misc. tests fixes
bc5dde
bc5dde
* Wed Jun  7 2006 Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6
bc5dde
- and actually put the devel symlinks in the right subpackage
bc5dde
bc5dde
* Thu May 25 2006 Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6
bc5dde
- rebuild for -devel deps
bc5dde
bc5dde
* Tue Apr 18 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
bc5dde
- apply upstream patch for ncache_adderesult segfault bug 173961 addenda
bc5dde
- fix bug 188382: rpm --verify permissions inconsistencies
bc5dde
- fix bug 189186: use /sbin/service instead of initscript
bc5dde
- rebuild for new gcc, glibc-kernheaders
bc5dde
bc5dde
* Tue Apr 04 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
bc5dde
- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
bc5dde
  (upstream bugs #15642, #15528 ?)
bc5dde
- allow named ability to generate core dumps after setuid (upstream bug #15753)
bc5dde
bc5dde
* Mon Apr 03 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18
bc5dde
- fix bug 187529: make bind-chroot-admin deal with subdirectories properly
bc5dde
bc5dde
* Thu Mar 30 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
bc5dde
- fix bug 187286: 
bc5dde
     prevent host(1) printing duplicate 'is an alias for' messages
bc5dde
     for the default AAAA and MX lookups as well as for the A lookup
bc5dde
     (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
bc5dde
     This is upstream bug #15702 fixed in the unreleased bind-9.3.3
bc5dde
- fix bug 187333: fix SOURCE24 and SOURCE25 transposition
bc5dde
bc5dde
* Wed Mar 29 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
bc5dde
- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
bc5dde
- add '%%doc' sample configuration files in /usr/share/doc/bind*/sample
bc5dde
- rebuild with new gcc and glibc
bc5dde
bc5dde
* Wed Mar 22 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12
bc5dde
- fix typo in initscript
bc5dde
- fix Requires(post): policycoreutils in sub-packages
bc5dde
bc5dde
* Mon Mar 20 2006 Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10
bc5dde
- fix bug 185969: more .spec file cleanup
bc5dde
bc5dde
* Wed Mar 08 2006 Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
bc5dde
- Do not allow package to be installed if named:25 userid creation fails
bc5dde
- Give libbind a pkg-config file
bc5dde
- remove restorecon from bind-chroot-admin (not required).
bc5dde
- fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)
bc5dde
bc5dde
* Tue Mar 07 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7
bc5dde
- fix issues with bind-chroot-admin
bc5dde
bc5dde
* Mon Mar 06 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
bc5dde
- replace caching-nameserver with bind-config sub-package
bc5dde
- fix bug 177595: handle case where $ROOTDIR is a link in initscript
bc5dde
- fix bug 177001: bind-config creates symlinks OK now
bc5dde
- fix bug 176388: named.conf is now never replaced by any RPM
bc5dde
- fix bug 176248: remove unecessary creation of rpmsave links
bc5dde
- fix bug 174925: no replacement of named.conf
bc5dde
- fix bug 173963: existing named.conf never modified
bc5dde
- major .spec file cleanup
bc5dde
bc5dde
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1
bc5dde
- bump again for double-long bug on ppc(64)
bc5dde
bc5dde
* Tue Feb 07 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
bc5dde
- regenerate redhat_doc patch for non-DBUS builds
bc5dde
- allow dbus builds to work with dbus version < 0.6 (bz #179816)
bc5dde
bc5dde
* Tue Feb 07 2006 Florian La Roche <laroche@redhat.com> 30:9.3.2-3
bc5dde
- try supporting without dbus support
bc5dde
bc5dde
* Mon Feb 06 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1
bc5dde
- Rebuild for new gcc, glibc, glibc-kernheaders
bc5dde
bc5dde
* Mon Jan 16 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2
bc5dde
- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+
bc5dde
  /proc/net/if_inet6 format
bc5dde
bc5dde
* Wed Dec 21 2005 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1
bc5dde
- Upgrade to 9.3.2, released today
bc5dde
bc5dde
* Tue Dec 20 2005 Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2
bc5dde
- fix bug 176100: do not Require: perl just for namedGetForwarders !
bc5dde
bc5dde
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
bc5dde
- rebuilt
bc5dde
bc5dde
* Fri Dec 02 2005 Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1
bc5dde
- Upgrade to upstream version 9.3.2rc1
bc5dde
- fix namedSetForwarders -> namedGetForwarders SOURCE14 typo
bc5dde
bc5dde
* Thu Dec 01 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26
bc5dde
- rebuild for new dbus 0.6 dependency; remove use of
bc5dde
  DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT
bc5dde
bc5dde
* Wed Nov 23 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
bc5dde
- allow D-BUS support to work in bind-chroot environment:
bc5dde
  workaround latest selinux policy by mounting /var/run/dbus/
bc5dde
  under chroot instead of /var/run/dbus/system-bus-socket
bc5dde
bc5dde
* Sun Nov 13 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
bc5dde
- fix bug 172632 - remove .la files
bc5dde
- ship namedGetForwarders and namedSetForwarders scripts
bc5dde
- fix detection of -D option in chroot
bc5dde
bc5dde
* Tue Nov  8 2005 Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21
bc5dde
- rebuilt with new openssl
bc5dde
bc5dde
* Wed Oct 19 2005 Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
bc5dde
- Allow the -D enable D-BUS option to be used within bind-chroot .
bc5dde
- fix bug 171226: supply some documentation for pgsql SDB .
bc5dde
bc5dde
* Thu Oct 06 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
bc5dde
- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
bc5dde
      task->state != task_ready and will cause Abort in task.c if process
bc5dde
      is waiting for NameOwnerChanged to do a SetForwarders
bc5dde
bc5dde
* Wed Oct 05 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16
bc5dde
- Fix reconnecting to dbus-daemon after it stops & restarts .
bc5dde
bc5dde
* Tue Sep 27 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14
bc5dde
- When forwarder nameservers are changed with D-BUS, flush the cache.
bc5dde
bc5dde
* Mon Sep 26 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
bc5dde
- fix bug 168302: use %%{__cc} for compiling dns-keygen
bc5dde
- fix bug 167682: bind-chroot directory permissions
bc5dde
- fix issues with -D dbus option when dbus service not running or disabled
bc5dde
bc5dde
* Tue Aug 30 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
bc5dde
- fix bug 167062: named should be started after syslogd by default
bc5dde
bc5dde
* Mon Aug 22 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11
bc5dde
- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option
bc5dde
bc5dde
* Tue Aug 16 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
bc5dde
- Build with D-BUS patch by default; D-BUS support enabled with named -D option
bc5dde
- Enable D-BUS for named_sdb also
bc5dde
- fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
bc5dde
- update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
bc5dde
- fix named.init script to handle named_sdb properly
bc5dde
- fix named.init script checkconfig() to handle named '-c' option
bc5dde
  and make configtest, test, check configcheck synonyms
bc5dde
bc5dde
* Tue Jul 19 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8
bc5dde
- fix named.init script bugs 163598, 163409, 151852(addendum)
bc5dde
bc5dde
* Tue Jul 12 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
bc5dde
- fix bug 160914: resolver utilities should try next server on empty referral
bc5dde
                  (now that glibc bug 162625 is fixed)
bc5dde
                  host and nslookup now by default try next server on SERVFAIL
bc5dde
                  (host now has '-s' option to disable, and nslookup given
bc5dde
                   '[no]fail' option similar to dig's [no]fail option).
bc5dde
- rebuild and re-test with new glibc & gcc (all tests passed).
bc5dde
bc5dde
* Tue May 31 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
bc5dde
- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
bc5dde
                  files and not use uninitialized garbage nameserver values
bc5dde
                  (ISC bug 14841 raised).
bc5dde
bc5dde
* Mon May 23 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4
bc5dde
- Fix SDB LDAP
bc5dde
bc5dde
* Mon May 16 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
bc5dde
- Fix bug 157601: give named.init a configtest function
bc5dde
- Fix bug 156797: named.init should check SELinux booleans.local before booleans
bc5dde
- Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
bc5dde
- Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
bc5dde
                  BIND quirks and SELinux DDNS / slave zone file configuration
bc5dde
- D-BUS patches NOT applied until dhcdbd is in FC
bc5dde
bc5dde
* Sun May 15 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
bc5dde
- Enhancement to allow dynamic forwarder table management and
bc5dde
- DHCP forwarder auto-configuration with D-BUS
bc5dde
bc5dde
* Thu Apr 14 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
bc5dde
- Rebuild for bind-sdb libpq.so.3 dependency
bc5dde
- fix bug 150981: don't install libbind man-pages if no libbind
bc5dde
- fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
bc5dde
  to work and correct number of CPUs to be determined
bc5dde
bc5dde
* Fri Mar 11 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4
bc5dde
- Upgrade to ISC BIND 9.3.1 (final release) released today.
bc5dde
bc5dde
* Wed Mar  9 2005 Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
bc5dde
- fix bug 150288: h_errno not being accessed / set correctly in libbind
bc5dde
- add libbind man-pages from bind-8.4.6
bc5dde
bc5dde
* Mon Mar  7 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4
bc5dde
- Rebuild with gcc4 / glibc-2.3.4-14.
bc5dde
bc5dde
* Tue Mar  1 2005 Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3
bc5dde
- configure with --with-pic to get PIC libraries
bc5dde
bc5dde
* Sun Feb 20 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2
bc5dde
- fix bug 149183: don't use getifaddrs() .
bc5dde
bc5dde
* Wed Feb 16 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
bc5dde
- Upgrade to 9.3.1rc1
bc5dde
- Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
bc5dde
-     add named_sdb - ldap + pgsql + dir database backend support with
bc5dde
-     'ENABLE_SDB' named.sysconfig option
bc5dde
- Add BIND resolver library & includes sub-package ( libbind-devel)
bc5dde
- fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
bc5dde
- fix bug 146084 : shutup restorecon
bc5dde
bc5dde
* Tue Jan 11 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
bc5dde
- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
bc5dde
-                 based on 'named_write_master_zones' SELinux boolean.
bc5dde
- Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)
bc5dde
bc5dde
* Mon Nov 29 2004 Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1
bc5dde
- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)
bc5dde
bc5dde
* Mon Nov 29 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
bc5dde
- Fix bugs 140528 and 141113:
bc5dde
- 2 second timeouts when IPv6 not configured and root nameserver's
bc5dde
- AAAA addresses are queried
bc5dde
bc5dde
* Mon Oct 18 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
bc5dde
- Fix bug 136243: bind-chroot %%post must run restorecon -R %%{prefix}
bc5dde
- Fix bug 135175: named.init must return non-zero if named is not run
bc5dde
- Fix bug 134060: bind-chroot %%post must use mktemp, not /tmp/named
bc5dde
- Fix bug 133423: bind-chroot %%files entries should have been %%dirs
bc5dde
bc5dde
* Thu Sep 23 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
bc5dde
- BIND 9.2.4 (final release) released - source code actually
bc5dde
- identical to 9.2.4rc8, with only version number change.
bc5dde
bc5dde
* Mon Sep 20 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
bc5dde
- Upgrade to upstream bind-9.2.4rc8 .
bc5dde
- Progress: Finally! Hooray! ISC bind now distributes:
bc5dde
- o named.conf(5) and nslookup(8) manpages
bc5dde
-    'bind-manpages.bz2' source can now disappear
bc5dde
-    (could this have something to do with ISC bug I raised about this?)
bc5dde
- o 'deprecation_msg' global has vanished
bc5dde
-     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear
bc5dde
bc5dde
* Mon Sep 20 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
bc5dde
- Fix bug 106572/132385: copy /etc/localtime to chroot on start
bc5dde
bc5dde
* Fri Sep 10 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
bc5dde
- Fix bug 132303: if ROOTDIR line was replaced after upgrade from
bc5dde
- bind-chroot-9.2.2-21, restart named
bc5dde
bc5dde
* Wed Sep 8  2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
bc5dde
- Fix bug 131803: replace ROOTDIR line removed by broken
bc5dde
- bind-chroot 9.2.2-21's '%%postun'; added %%triggerpostun for bind-chroot
bc5dde
bc5dde
* Tue Sep 7  2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3
bc5dde
- Fix bugs 130121 & 130981 for RHEL-3
bc5dde
bc5dde
* Mon Aug 30 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
bc5dde
- Fix bug 130121: add '%%ghost' entries for files included in previous
bc5dde
- bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
bc5dde
- that RPM removed after upgrade .
bc5dde
bc5dde
* Thu Aug 26 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fix bug 130981: add '-t' option to named-checkconf invocation in
bc5dde
- named.init if chroot installed.
bc5dde
bc5dde
* Wed Aug 25 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Remove resolver(5) manpage now in man-pages (bug 130792);
bc5dde
- Don't create /dev/ entries in bind-chroot if already there (bug 127556);
bc5dde
- fix bind-devel Requires (bug 130919)
bc5dde
- Set default location for dumpdb & stats files to /var/named/data
bc5dde
bc5dde
* Tue Aug 24 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fix devel Requires for bug 130738 & fix version
bc5dde
bc5dde
* Tue Aug 24 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fix errors on clean install if named group does not exist
bc5dde
- (bug 130777)
bc5dde
bc5dde
* Thu Aug 19 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Upgrade to bind-9.2.4rc7; applied initscript fix
bc5dde
- for bug 102035.
bc5dde
bc5dde
* Mon Aug  9 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fixed bug 129289: bind-chroot install / deinstall
bc5dde
- on install, existing config files 'safe_replace'd
bc5dde
- with links to chroot copies; on uninstall, moved back.
bc5dde
bc5dde
* Fri Aug  6 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fixed bug 129258: "${prefix}/var/tmp" typo in spec
bc5dde
bc5dde
* Wed Jul 28 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fixed bug 127124 : 'Requires: kernel >= 2.4'
bc5dde
- causes problems with Linux VServers
bc5dde
bc5dde
* Tue Jul 27 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fixed bug 127555 : chroot tar missing var/named/slaves
bc5dde
bc5dde
* Fri Jul 16 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Upgraded to ISC version 9.2.4rc6
bc5dde
bc5dde
* Fri Jul 16 2004 Jason Vas Dias <jvdias@redhat.com>
bc5dde
- Fixed named.init generation of error messages on
bc5dde
- 'service named stop' and 'service named reload'
bc5dde
- as per bug 127775
bc5dde
bc5dde
* Wed Jun 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-19
bc5dde
- Bump for rhel 3.0  U3
bc5dde
bc5dde
* Wed Jun 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-18
bc5dde
- remove disable-linux-caps
bc5dde
bc5dde
* Wed Jun 16 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-17
bc5dde
- Update RHEL3 to latest bind
bc5dde
bc5dde
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
bc5dde
- rebuilt
bc5dde
bc5dde
* Tue Jun 8 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-15
bc5dde
- Remove device files from chroot,  Named uses the system one
bc5dde
bc5dde
* Fri Mar 26 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-14
bc5dde
- Move RFC to devel package
bc5dde
bc5dde
* Fri Mar 26 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-13
bc5dde
- Fix location of restorecon
bc5dde
bc5dde
* Thu Mar 25 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-12
bc5dde
- Tighten security on config files.  Should be owned by root
bc5dde
bc5dde
* Thu Mar 25 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-11
bc5dde
- Update key patch to include conf-keygen
bc5dde
bc5dde
* Tue Mar 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-10
bc5dde
- fix chroot to only happen once.
bc5dde
- fix init script to do kill insteall of killall
bc5dde
bc5dde
* Mon Mar 15 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-9
bc5dde
- Add fix for SELinux security context
bc5dde
bc5dde
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
bc5dde
- rebuilt
bc5dde
bc5dde
* Sat Feb 28 2004 Florian La Roche <Florian.LaRoche@redhat.de>
bc5dde
- run ldconfig for libs subrpm
bc5dde
bc5dde
* Mon Feb 23 2004 Tim Waugh <twaugh@redhat.com>
bc5dde
- Use ':' instead of '.' as separator for chown.
bc5dde
bc5dde
* Tue Feb 17 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-7
bc5dde
- Add COPYRIGHT
bc5dde
bc5dde
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
bc5dde
- rebuilt
bc5dde
bc5dde
* Tue Dec 30 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-5
bc5dde
- Add defattr to libs
bc5dde
bc5dde
* Mon Dec 29 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-4
bc5dde
- Break out library package
bc5dde
bc5dde
* Mon Dec 22 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-3
bc5dde
- Fix condrestart
bc5dde
bc5dde
* Wed Nov 12 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-2
bc5dde
- Move libisc and libdns to bind from bind-util
bc5dde
bc5dde
* Tue Nov 11 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.3-1
bc5dde
- Move to 9.2.3
bc5dde
bc5dde
* Mon Oct 27 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10
bc5dde
- Add PIE support
bc5dde
bc5dde
* Fri Oct 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9
bc5dde
- Add /var/named/slaves directory
bc5dde
bc5dde
* Sun Oct 12 2003 Florian La Roche <Florian.LaRoche@redhat.de>
bc5dde
- do not link against libnsl, not needed for Linux
bc5dde
bc5dde
* Wed Oct 8 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6
bc5dde
- Fix local time in log file
bc5dde
bc5dde
* Tue Oct 7 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5
bc5dde
- Try again
bc5dde
bc5dde
* Mon Oct 6 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4
bc5dde
- Fix handling of chroot -/dev/random
bc5dde
bc5dde
* Thu Oct 2 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3
bc5dde
- Stop hammering stuff on update of chroot environment
bc5dde
bc5dde
* Mon Sep 29 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2
bc5dde
- Fix chroot directory to grab all subdirectories
bc5dde
bc5dde
* Wed Sep 24 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1
bc5dde
- New patch to support for "delegation-only"
bc5dde
bc5dde
* Wed Sep 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-23
bc5dde
- patch support for "delegation-only"
bc5dde
bc5dde
* Wed Jul 30 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-22
bc5dde
- Update to build on RHL
bc5dde
bc5dde
* Wed Jul 30 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-21
bc5dde
- Install libraries as exec so debug info will be pulled
bc5dde
bc5dde
* Sat Jul 19 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-20
bc5dde
- Remove BSDCOMPAT (BZ 99454)
bc5dde
bc5dde
* Tue Jul 15 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-19
bc5dde
- Update to build on RHL
bc5dde
bc5dde
* Tue Jul 15 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-18
bc5dde
- Change protections on /var/named and /var/chroot/named
bc5dde
bc5dde
* Tue Jun 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-17
bc5dde
- Update to build on RHL
bc5dde
bc5dde
* Tue Jun 17 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-16
bc5dde
- Update to build on RHEL
bc5dde
bc5dde
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
bc5dde
- rebuilt
bc5dde
bc5dde
* Tue Apr 22 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-14
bc5dde
- Update to build on RHEL
bc5dde
bc5dde
* Tue Apr 22 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
bc5dde
- Fix config description of named.conf in chroot
bc5dde
- Change named.init script to check for existence of /etc/sysconfig/network
bc5dde
bc5dde
* Fri Apr 18 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-12
bc5dde
- Update to build on RHEL
bc5dde
bc5dde
* Fri Apr 18 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-11
bc5dde
- Update to build on RHEL
bc5dde
bc5dde
* Fri Apr 18 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-10
bc5dde
- Fix echo OK on starting/stopping service
bc5dde
bc5dde
* Fri Mar 28 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-9
bc5dde
- Update to build on RHEL
bc5dde
bc5dde
* Fri Mar 28 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-8
bc5dde
- Fix echo on startup
bc5dde
bc5dde
* Tue Mar 25 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-7
bc5dde
- Fix problems with chroot environment
bc5dde
- Eliminate posix threads
bc5dde
bc5dde
* Mon Mar 24 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-6
bc5dde
- Fix build problems
bc5dde
bc5dde
* Fri Mar 14 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-5
bc5dde
- Fix build on beehive
bc5dde
bc5dde
* Thu Mar 13 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-4
bc5dde
- build bind-chroot kit
bc5dde
bc5dde
* Tue Mar 11 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-3
bc5dde
- Change configure to use proper threads model
bc5dde
bc5dde
* Fri Mar 7 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-2
bc5dde
- update to 9.2.2
bc5dde
bc5dde
* Tue Mar 4 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.2-1
bc5dde
- update to 9.2.2
bc5dde
bc5dde
* Fri Jan 24 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.1-16
bc5dde
- Put a sleep in restart to make sure stop completes
bc5dde
bc5dde
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
bc5dde
- rebuilt
bc5dde
bc5dde
* Tue Jan 7 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.1-14
bc5dde
- Separate /etc/rndc.key to separate file
bc5dde
bc5dde
* Tue Jan 7 2003 Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13
bc5dde
- Use openssl's pkgconfig data, if available, at build-time.
bc5dde
bc5dde
* Mon Jan 6 2003 Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
bc5dde
- Fix log rotate to use service named reload
bc5dde
- Change service named reload to give success/failure message [73770]
bc5dde
- Fix File checking [75710]
bc5dde
- Begin change to automatically run in CHROOT environment
bc5dde
bc5dde
* Tue Dec 24 2002 Daniel Walsh <dwalsh@redhat.com> 9.2.1-10
bc5dde
- Fix startup script to work like all others.
bc5dde
bc5dde
* Mon Dec 16 2002 Daniel Walsh <dwalsh@redhat.com> 9.2.1-9
bc5dde
- Fix configure to build on x86_64 platforms
bc5dde
bc5dde
* Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de>
bc5dde
- fix #70583,  doesn't build on IA64
bc5dde
bc5dde
* Tue Jul 30 2002 Karsten Hopp <karsten@redhat.de> 9.2.1-8
bc5dde
- bind-utils shouldn't require bind
bc5dde
bc5dde
* Mon Jul 22 2002 Karsten Hopp <karsten@redhat.de> 9.2.1-7
bc5dde
- fix name of pidfine in logrotate script (#68842)
bc5dde
- fix owner of logfile in logrotate script (#41391)
bc5dde
- fix nslookup and named.conf man pages (output on stderr)
bc5dde
  (#63553, #63560, #63561, #54889, #57457)
bc5dde
- add rfc1912 (#50005)
bc5dde
- gzip all rfc's
bc5dde
- fix typo in keygen.c (#54870)
bc5dde
- added missing manpages (#64065)
bc5dde
- shutdown named properly with rndc stop (#62492)
bc5dde
- /sbin/nologin instead of /bin/false (#68607)
bc5dde
- move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
bc5dde
- don't kill initscript when rndc fails (reload)    (#58750)
bc5dde
bc5dde
bc5dde
* Mon Jun 24 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5
bc5dde
- Fix #65975
bc5dde
bc5dde
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
bc5dde
- automated rebuild
bc5dde
bc5dde
* Thu May 23 2002 Tim Powers <timp@redhat.com>
bc5dde
- automated rebuild
bc5dde
bc5dde
* Thu May  9 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
bc5dde
- Move libisccc, lib isccfg and liblwres from bind-utils to bind,
bc5dde
  they're not required if you aren't running a nameserver.
bc5dde
bc5dde
* Fri May 03 2002 Florian La Roche <Florian.LaRoche@redhat.de>
bc5dde
- update to 9.2.1 release
bc5dde
bc5dde
* Thu Mar 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8
bc5dde
- Merge 30+ bug fixes from 9.2.1rc1 code
bc5dde
bc5dde
* Mon Mar 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
bc5dde
- Don't exit if /etc/named.conf doesn't exist if we're running
bc5dde
  chroot (#60868)
bc5dde
- Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
bc5dde
  versions or bug #58335 will be back. "It compiles, therefore it works"
bc5dde
  isn't always true.
bc5dde
bc5dde
* Thu Feb 28 2002 Elliot Lee <sopwith@redhat.com> 9.2.0-6
bc5dde
- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders
bc5dde
versions).
bc5dde
- Use _smp_mflags
bc5dde
bc5dde
* Wed Feb 20 2002 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4
bc5dde
- rebuild, require recent autoconf, automake (#58335)
bc5dde
bc5dde
* Fri Jan 25 2002 Tim Powers <timp@redhat.com>
bc5dde
- rebuild against new libssl
bc5dde
bc5dde
* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
bc5dde
- automated rebuild
bc5dde
bc5dde
* Tue Nov 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1
bc5dde
- 9.2.0
bc5dde
bc5dde
* Thu Nov 22 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2
bc5dde
- 9.2.0rc10
bc5dde
bc5dde
* Mon Nov  5 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2
bc5dde
- Fix up rndc.conf (#55574)
bc5dde
bc5dde
* Thu Oct 25 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1
bc5dde
- rc8
bc5dde
- Enforce --enable-threads
bc5dde
bc5dde
* Mon Oct 22 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1
bc5dde
- 9.2.0rc7
bc5dde
- Use rndc status for "service named status", it's supposed to actually
bc5dde
  work in 9.2.x.
bc5dde
bc5dde
* Wed Oct  3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1
bc5dde
- 9.2.0rc5
bc5dde
- Fix rpm --rebuild with ancient libtool versions (#53938, #54257)
bc5dde
bc5dde
* Tue Sep 25 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1
bc5dde
- 9.2.0rc4
bc5dde
bc5dde
* Fri Sep 14 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
bc5dde
- 9.2.0rc3
bc5dde
- remove ttl patch, I don't think we need this for 8.0.
bc5dde
- remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
bc5dde
- add lwres* man pages to -devel
bc5dde
bc5dde
* Mon Sep  3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
bc5dde
- Make sure /etc/rndc.conf isn't world-readable even after the
bc5dde
  %%post script inserted a random key (#53009)
bc5dde
bc5dde
* Thu Jul 19 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
bc5dde
- Add build dependencies (#49368)
bc5dde
- Make sure running service named start several times doesn't create
bc5dde
  useless processes (#47596)
bc5dde
- Work around the named parent process returning 0 even if the config
bc5dde
  file is broken (it's parsed later by the child processes) (#45484)
bc5dde
bc5dde
* Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2
bc5dde
- Don't use rndc status, it's not yet implemented (#48839)
bc5dde
bc5dde
* Sun Jul 08 2001 Florian La Roche <Florian.LaRoche@redhat.de>
bc5dde
- update to 9.1.3 release
bc5dde
bc5dde
* Tue Jul  3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1
bc5dde
- Fix up rndc configuration and improve security (#46586)
bc5dde
bc5dde
* Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2
bc5dde
- Sync with caching-nameserver-7.1-6
bc5dde
bc5dde
* Mon Jun 25 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1
bc5dde
- Update to rc2
bc5dde
bc5dde
* Fri Jun  1 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3
bc5dde
- Remove resolv.conf(5) man page, it's now in man-pages
bc5dde
bc5dde
* Thu May 31 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
bc5dde
- Add named.conf man page from bind 8.x (outdated, but better than nothing,
bc5dde
  #42732)
bc5dde
- Rename the rndc key (#42895)
bc5dde
- Add dnssec* man pages
bc5dde
bc5dde
* Mon May 28 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1
bc5dde
- 9.1.3rc1
bc5dde
- s/Copyright/License/
bc5dde
bc5dde
* Mon May  7 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
bc5dde
- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
bc5dde
  the version number, though.
bc5dde
bc5dde
* Thu May  3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1
bc5dde
- 9.1.2rc1
bc5dde
bc5dde
* Thu Mar 29 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1
bc5dde
- 9.1.1
bc5dde
bc5dde
* Thu Mar 15 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10
bc5dde
- Merge fixes from 9.1.1rc5
bc5dde
bc5dde
* Sun Mar 11 2001 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
bc5dde
- Work around bind 8 -> bind 9 migration problem when using buggy zone files:
bc5dde
  accept zones without a TTL, but spew out a big fat warning. (#31393)
bc5dde
bc5dde
* Thu Mar  8 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Add fixes from rc4
bc5dde
bc5dde
* Fri Mar  2 2001 Nalin Dahyabhai <nalin@redhat.com>
bc5dde
- rebuild in new environment
bc5dde
bc5dde
* Thu Mar  1 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- killall -HUP named if rndc reload fails (#30113)
bc5dde
bc5dde
* Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Merge some fixes from 9.1.1rc3
bc5dde
bc5dde
* Tue Feb 20 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Don't use the standard rndc key from the documentation, instead, create a random one
bc5dde
  at installation time (#26358)
bc5dde
- Make /etc/rndc.conf readable by user named only, it contains secret keys
bc5dde
bc5dde
* Tue Feb 20 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
bc5dde
  from 9.1.1rc2
bc5dde
- bind requires bind-utils (#28317)
bc5dde
bc5dde
* Tue Feb 13 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Update to rc2, fixes 2 more bugs
bc5dde
- Fix build with glibc >= 2.2.1-7
bc5dde
bc5dde
* Thu Feb  8 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
bc5dde
  1 was fixed in a Red Hat patch already, 2 others are portability
bc5dde
  improvements)
bc5dde
bc5dde
* Wed Feb  7 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Remove initscripts 5.54 requirement (#26489)
bc5dde
bc5dde
* Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Add named-checkconf, named-checkzone (#25170)
bc5dde
bc5dde
* Mon Jan 29 2001 Trond Eivind Glomsrod <teg@redhat.com>
bc5dde
- use echo, not gprintf
bc5dde
bc5dde
* Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Fix problems with $GENERATE
bc5dde
  Patch from Daniel Roesen <droesen@entire-systems.com>
bc5dde
  Bug #24890
bc5dde
bc5dde
* Thu Jan 18 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.1.0 final
bc5dde
bc5dde
* Sat Jan 13 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.1.0rc1
bc5dde
- i18nify init script
bc5dde
- bzip2 source to save space
bc5dde
bc5dde
* Thu Jan 11 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Fix %%postun script
bc5dde
bc5dde
* Tue Jan  9 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.1.0b3
bc5dde
bc5dde
* Mon Jan  8 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Add named.conf man page from bind8 (#23503)
bc5dde
bc5dde
* Sun Jan  7 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Make /etc/rndc.conf and /etc/sysconfig/named noreplace
bc5dde
- Make devel require bind = %%{version} rather than just bind
bc5dde
bc5dde
* Sun Jan  7 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Fix init script for real
bc5dde
bc5dde
* Sat Jan  6 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Fix init script when ROOTDIR is not set
bc5dde
bc5dde
* Thu Jan  4 2001 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Add hooks for setting up named to run chroot (RFE #23246)
bc5dde
- Fix up requirements
bc5dde
bc5dde
* Fri Dec 29 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.1.0b2
bc5dde
bc5dde
* Wed Dec 20 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Move run files to /var/run/named/ - /var/run isn't writable
bc5dde
  by the user we're running as. (Bug #20665)
bc5dde
bc5dde
* Tue Dec 19 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Fix reverse lookups (#22272)
bc5dde
- Run ldconfig in %%post utils
bc5dde
bc5dde
* Tue Dec 12 2000 Karsten Hopp <karsten@redhat.de>
bc5dde
- fixed logrotate script (wrong path to kill)
bc5dde
- include header files in -devel package
bc5dde
- bugzilla #22049, #19147, 21606
bc5dde
bc5dde
* Fri Dec  8 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)
bc5dde
bc5dde
* Mon Nov 13 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.0.1
bc5dde
bc5dde
* Mon Oct 30 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Fix initscript (Bug #19956)
bc5dde
- Add sample rndc.conf (Bug #19956)
bc5dde
- Fix build with tar 1.13.18
bc5dde
bc5dde
* Tue Oct 10 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Add some missing man pages (taken from bind8) (Bug #18794)
bc5dde
bc5dde
* Sun Sep 17 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.0.0 final
bc5dde
bc5dde
* Wed Aug 30 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- rc5
bc5dde
- fix up nslookup
bc5dde
bc5dde
* Thu Aug 24 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- rc4
bc5dde
bc5dde
* Thu Jul 13 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- 9.0.0rc1
bc5dde
bc5dde
* Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
bc5dde
- automatic rebuild
bc5dde
bc5dde
* Sun Jul  9 2000 Florian La Roche <Florian.LaRoche@redhat.de>
bc5dde
- add "exit 0" for uninstall case
bc5dde
bc5dde
* Fri Jul  7 2000 Florian La Roche <Florian.LaRoche@redhat.de>
bc5dde
- add prereq init.d and cleanup install section
bc5dde
bc5dde
* Fri Jun 30 2000 Trond Eivind Glomsrod <teg@redhat.com>
bc5dde
- fix the init script
bc5dde
bc5dde
* Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com>
bc5dde
- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""
bc5dde
bc5dde
* Mon Jun 26 2000 Bernhard Rosenkranzer <bero@redhat.com>
bc5dde
- Fix up the initscript (Bug #13033)
bc5dde
- Fix build with current glibc (Bug #12755)
bc5dde
- /etc/rc.d/init.d -> /etc/init.d
bc5dde
- use %%{_mandir} rather than /usr/share/man
bc5dde
bc5dde
* Mon Jun 19 2000 Bill Nottingham <notting@redhat.com>
bc5dde
- fix conflict with man-pages
bc5dde
- remove compatibilty chkconfig links
bc5dde
- initscript munging
bc5dde
bc5dde
* Wed Jun 14 2000 Nalin Dahyabhai <nalin@redhat.com>
bc5dde
- modify logrotate setup to use PID file
bc5dde
- temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
bc5dde
- actually bump the release this time
bc5dde
bc5dde
* Sun Jun  4 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- FHS compliance
bc5dde
bc5dde
* Mon Apr 17 2000 Nalin Dahyabhai <nalin@redhat.com>
bc5dde
- clean up restart patch
bc5dde
bc5dde
* Mon Apr 10 2000 Nalin Dahyabhai <nalin@redhat.com>
bc5dde
- provide /var/named (fix for bugs #9847, #10205)
bc5dde
- preserve args when restarted via ndc(8) (bug #10227)
bc5dde
- make resolv.conf(5) a link to resolver(5) (bug #10245)
bc5dde
- fix SYSTYPE bug in all makefiles
bc5dde
- move creation of named user from %%post into %%pre
bc5dde
bc5dde
* Mon Feb 28 2000 Bernhard Rosenkranzer <bero@redhat.com>
bc5dde
- Fix TTL (patch from ISC, Bug #9820)
bc5dde
bc5dde
* Wed Feb 16 2000 Bernhard Rosenkranzer <bero@redhat.com>
bc5dde
- fix typo in spec (it's %%post, without a leading blank) introduced in -6
bc5dde
- change SYSTYPE to linux
bc5dde
bc5dde
* Fri Feb 11 2000 Bill Nottingham <notting@redhat.com>
bc5dde
- pick a standard < 100 uid/gid for named
bc5dde
bc5dde
* Fri Feb 04 2000 Elliot Lee <sopwith@redhat.com>
bc5dde
- Pass named a '-u named' parameter by default, and add/remove user.
bc5dde
bc5dde
* Thu Feb  3 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- fix host mx bug (Bug #9021)
bc5dde
bc5dde
* Mon Jan 31 2000 Cristian Gafton <gafton@redhat.com>
bc5dde
- rebuild to fix dependencies
bc5dde
- man pages are compressed
bc5dde
bc5dde
* Wed Jan 19 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)
bc5dde
bc5dde
* Mon Jan 17 2000 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- Fix up location of named-bootconf.pl and make it executable
bc5dde
  (Bug #8028)
bc5dde
- bind-devel requires bind
bc5dde
bc5dde
* Mon Nov 15 1999 Bernhard Rosenkraenzer <bero@redhat.com>
bc5dde
- update to 8.2.2-P5
bc5dde
bc5dde
* Wed Nov 10 1999 Bill Nottingham <notting@redhat.com>
bc5dde
- update to 8.2.2-P3
bc5dde
bc5dde
* Tue Oct 12 1999 Cristian Gafton <gafton@redhat.com>
bc5dde
- add patch to stop a cache only server from complaining about lame servers
bc5dde
  on every request.
bc5dde
bc5dde
* Fri Sep 24 1999 Preston Brown <pbrown@redhat.com>
bc5dde
- use real stop and start in named.init for restart, not ndc restart, it has
bc5dde
  problems when named has changed during a package update... (# 4890)
bc5dde
bc5dde
* Fri Sep 10 1999 Bill Nottingham <notting@redhat.com>
bc5dde
- chkconfig --del in %%preun, not %%postun
bc5dde
bc5dde
* Mon Aug 16 1999 Bill Nottingham <notting@redhat.com>
bc5dde
- initscript munging
bc5dde
bc5dde
* Mon Jul 26 1999 Bill Nottingham <notting@redhat.com>
bc5dde
- fix installed chkconfig links to match init file
bc5dde
bc5dde
* Sat Jul  3 1999 Jeff Johnson <jbj@redhat.com>
bc5dde
- conflict with new (in man-1.24) man pages (#3876,#3877).
bc5dde
bc5dde
* Tue Jun 29 1999 Bill Nottingham <notting@redhat.com>
bc5dde
- fix named.logrotate (wrong %%SOURCE)
bc5dde
bc5dde
* Fri Jun 25 1999 Jeff Johnson <jbj@redhat.com>
bc5dde
- update to 8.2.1.
bc5dde
- add named.logrotate (#3571).
bc5dde
- hack around egcs-1.1.2 -m486 bug (#3413, #3485).
bc5dde
- vet file list.
bc5dde
bc5dde
* Fri Jun 18 1999 Bill Nottingham <notting@redhat.com>
bc5dde
- don't run by default
bc5dde
bc5dde
* Sun May 30 1999 Jeff Johnson <jbj@redhat.com>
bc5dde
- nslookup fixes (#2463).
bc5dde
- missing files (#3152).
bc5dde
bc5dde
* Sat May  1 1999 Stepan Kasal <kasal@math.cas.cz>
bc5dde
- nslookup patched:
bc5dde
  to count numRecords properly
bc5dde
  to fix subsequent calls to ls -d
bc5dde
  to parse "view" and "finger" commands properly
bc5dde
  the view hack updated for bind-8 (using sed)
bc5dde
bc5dde
* Wed Mar 31 1999 Bill Nottingham <notting@redhat.com>
bc5dde
- add ISC patch
bc5dde
- add quick hack to make host not crash
bc5dde
- add more docs
bc5dde
bc5dde
* Fri Mar 26 1999 Cristian Gafton <gafton@redhat.com>
bc5dde
- add probing information in the init file to keep linuxconf happy
bc5dde
- dont strip libbind
bc5dde
bc5dde
* Sun Mar 21 1999 Cristian Gafton <gafton@redhat.com>
bc5dde
- auto rebuild in the new build environment (release 3)
bc5dde
bc5dde
* Wed Mar 17 1999 Preston Brown <pbrown@redhat.com>
bc5dde
- removed 'done' output at named shutdown.
bc5dde
bc5dde
* Tue Mar 16 1999 Cristian Gafton <gafton@redhat.com>
bc5dde
- version 8.2
bc5dde
bc5dde
* Wed Dec 30 1998 Cristian Gafton <gafton@redhat.com>
bc5dde
- patch to use the __FDS_BITS macro
bc5dde
- build for glibc 2.1
bc5dde
bc5dde
* Wed Sep 23 1998 Jeff Johnson <jbj@redhat.com>
bc5dde
- change named.restart to /usr/sbin/ndc restart
bc5dde
bc5dde
* Sat Sep 19 1998 Jeff Johnson <jbj@redhat.com>
bc5dde
- install man pages correctly.
bc5dde
- change K10named to K45named.
bc5dde
bc5dde
* Wed Aug 12 1998 Jeff Johnson <jbj@redhat.com>
bc5dde
- don't start if /etc/named.conf doesn't exist.
bc5dde
bc5dde
* Sat Aug  8 1998 Jeff Johnson <jbj@redhat.com>
bc5dde
- autmagically create /etc/named.conf from /etc/named.boot in %%post
bc5dde
- remove echo in %%post
bc5dde
bc5dde
* Wed Jun 10 1998 Jeff Johnson <jbj@redhat.com>
bc5dde
- merge in 5.1 mods
bc5dde
bc5dde
* Sun Apr 12 1998 Manuel J. Galan <manolow@step.es>
bc5dde
- Several essential modifications to build and install correctly.
bc5dde
- Modified 'ndc' to avoid deprecated use of '-'
bc5dde
bc5dde
* Mon Dec 22 1997 Scott Lampert <fortunato@heavymetal.org>
bc5dde
- Used buildroot
bc5dde
- patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
bc5dde
  on Redhat 5.0 instead of <nlist.h>