#

#               Red Hat BIND package .spec file

#

%define RELEASEVER b2

%{?!SDB:        %define SDB         1}

%{?!LIBBIND:    %define LIBBIND	    1}

%{?!efence:     %define efence      0}

%{?!test:       %define test        0}

%{?!WITH_DBUS:  %define WITH_DBUS   0} # + dynamic forwarder table management with D-BUS

%{?!bind_uid:   %define bind_uid   25}

%{?!bind_gid:   %define bind_gid   25}

%{?!DLZ:	%define DLZ	    1}

%{?!GSSTSIG:    %define GSSTSIG     1}

%define		bind_dir      /var/named

%define    	chroot_prefix %{bind_dir}/chroot

#

Summary: 	The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

Name: 		bind

License: 	ISC

Version: 	9.5.0

Release: 	26.%{RELEASEVER}%{?dist}

Epoch:   	32

Url: 		http://www.isc.org/products/BIND/

Buildroot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

Group: 		System Environment/Daemons

#

Source: 	ftp://ftp.isc.org/isc/bind9/%{version}/bind-%{version}%{RELEASEVER}.tar.gz

Source1: 	named.sysconfig

Source2: 	named.init

Source3: 	named.logrotate

Source4: 	keygen.c

Source5: 	rfc1912.txt

Source6: 	bind-chroot.tar.bz2

Source7: 	bind-9.3.1rc1-sdb_tools-Makefile.in

Source8: 	http://www.venaas.no/ldap/bind-sdb/dnszone.schema

Source9: 	libbind-man.tar.gz

Source10: 	named-dbus.conf

Source11: 	named.service

Source12: 	README.sdb_pgsql

Source13: 	namedSetForwarders

Source14: 	namedGetForwarders

Source21:	Copyright.caching-nameserver

Source22: 	bind-chroot-admin.in

Source24:	libbind.pc

Source25:	named.conf.sample

Source28:	config-2.tar

Source30:	ldap2zone.c

# Common patches

Patch0:  	bind-9.2.0rc3-varrun.patch

Patch1: 	bind-9.3.3rc2-rndckey.patch

Patch5: 	bind-nonexec.patch

Patch10: 	bind-9.5-PIE.patch

Patch13: 	bind-9.3.1rc1-fix_libbind_includedir.patch

Patch16: 	bind-9.3.2-redhat_doc.patch

Patch63:	bind-9.4.0-dnssec-directory.patch

Patch69:	bind-9.5.0-generate-xml.patch

Patch71:	bind-9.5-overflow.patch

Patch72:	bind-9.5-dlz-64bit.patch

Patch87:	bind-9.5-parallel-build.patch

Patch88:	bind-9.5-transfer-segv.patch

# SDB patches

Patch11: 	bind-9.3.2b2-sdbsrc.patch

Patch12: 	bind-9.5-sdb.patch

Patch62:        bind-9.5-sdb-sqlite-bld.patch

Patch68:	bind-9.4.1-ldap-api.patch

# needs inpection

Patch17: 	bind-9.3.2b1-fix_sdb_ldap.patch

# D-BUS patches

Patch15: 	bind-9.5.0-dbus.patch

Patch23: 	bind-9.5-dbus_archdep_libdir.patch

Patch81:	bind-9.5-dbus-leak.patch

Patch82:	bind-9.5-dbus-va_end.patch

# IDN paches

Patch73:	bind-9.5-libidn.patch

Patch83:	bind-9.5-libidn2.patch

Patch85:	bind-9.5-libidn3.patch

#

Requires:	bind-libs = %{epoch}:%{version}-%{release}, glibc  >= 2.2, mktemp

Requires(post): grep, chkconfig >= 1.3.26

Requires(pre): 	shadow-utils

Requires(preun):chkconfig >= 1.3.26

Obsoletes: bind-config, caching-nameserver

Provides:  bind-config, caching-nameserver

BuildRequires: 	gcc, glibc-devel >= 2.2.5-26,  glibc-kernheaders >= 2.4-7.10, openssl-devel, libtool, autoconf, pkgconfig

%if %{SDB}

BuildRequires:  openldap-devel, postgresql-devel, sqlite-devel

%endif

%if %{DLZ}

BuildRequires:	openldap-devel, postgresql-devel, mysql-devel, db4-devel, unixODBC-devel

%endif

%if %{WITH_DBUS}

BuildRequires:  dbus-devel

%endif

%if %{test}

BuildRequires:  net-tools, perl

%endif

%if %{GSSTSIG}

BuildRequires:	krb5-devel

Requires:	krb5-libs

%endif

BuildRequires:  libidn-devel

Requires:       libidn

%description

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

%if %{SDB}

%package sdb

Summary: BIND server with database backends and DLZ suppport

Group:   System Environment/Daemons

Requires: bind = %{epoch}:%{version}-%{release}

%description sdb

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named-sdb)

which has compiled-in SDB (Simplified Database Backend) which includes

support for using alternative Zone Databases stored in an LDAP server

(ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb),

or in the filesystem (dirdb), in addition to the standard in-memory RBT

(Red Black Tree) zone database. It also includes support for DLZ

(Dynamic Loadable Zones)

%endif

%package  libs

Summary:  Libraries used by the BIND DNS packages

Group:    Applications/System

Obsoletes: bind-libbind-devel

%description libs

Contains libraries used by both the bind server package as well as the utils packages.

%package  utils

Summary:  Utilities for querying DNS name servers

Group:    Applications/System

Requires: bind-libs = %{epoch}:%{version}-%{release}

%description utils

Bind-utils contains a collection of utilities for querying DNS (Domain

Name System) name servers to find out information about Internet

hosts. These tools will provide you with the IP addresses for given

host names, as well as other information about registered domains and

network addresses.

You should install bind-utils if you need to get information from DNS name

servers.

%package   devel

Summary:   Header files and libraries needed for BIND DNS development

Group:     Development/Libraries

Requires:  bind-libs = %{epoch}:%{version}-%{release}

Obsoletes: bind-libbind-devel

%description devel

The bind-devel package contains all the header files and libraries

required for development with ISC BIND 9 and BIND 8

%package   chroot

Summary:   A chroot runtime environment for the ISC BIND DNS server, named(8)

Group: 	   System Environment/Daemons

Prefix:    %{chroot_prefix}

Requires:    bind = %{epoch}:%{version}-%{release}

Requires(post):  grep

Requires(preun): grep

%description chroot

This package contains a tree of files which can be used as a

chroot(2) jail for the named(8) program from the BIND package.

Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

%prep

%setup -q -n %{name}-%{version}%{RELEASEVER}

# Common patches

%patch -p1 -b .varrun

%patch1 -p1 -b .key

%patch5 -p1 -b .nonexec

%patch10 -p1 -b .PIE

%patch69 -p1 -b .generate-xml

%if %{SDB}

%patch11 -p1 -b .sdbsrc

cp -f bin/named/main.c bin/named/main-sdb.c

# SDB ldap

cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named

# SDB postgreSQL

cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named

# SDB sqlite

cp -fp contrib/sdb/sqlite/sqlitedb.[ch] bin/named

# SDB Berkeley DB - needs to be ported to DB4!

#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb

# SDB dir

cp -fp contrib/sdb/dir/dirdb.[ch] bin/named

# SDB tools

mkdir -p bin/sdb_tools

cp -fp %{SOURCE30} bin/sdb_tools/ldap2zone.c

cp -fp %{SOURCE7} bin/sdb_tools/Makefile.in

#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools

cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools

cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools

cp -fp contrib/sdb/sqlite/zone2sqlite.c bin/sdb_tools

%patch12 -p1 -b .sdb

%patch68 -p1 -b .new-api

%endif

%if %{LIBBIND}

%patch13 -p1 -b .fix_libbind_includedir

%endif

%patch16 -p1 -b .redhat_doc

%if %{WITH_DBUS}

%patch15 -p1 -b .dbus

%patch23 -p1 -b .dbus_archdep_libdir

%patch81 -p1 -b .leak

%patch82 -p1 -b .va_end

%endif

%if %{SDB}

%patch17 -p1 -b .fix_sdb_ldap

%endif

%if %{WITH_DBUS}

#

# this must follow all dbus patches:

#

cp -fp contrib/dbus/{dbus_mgr.c,dbus_service.c} bin/named

cp -fp contrib/dbus/{dbus_mgr.h,dbus_service.h} bin/named/include/named

%endif

%if %{SDB}

%patch62 -p1 -b .sdb-sqlite-bld

%endif

%patch63 -p1 -b .directory

%patch71 -p1 -b .overflow

%ifnarch alpha ia64

%patch72 -p1 -b .64bit

%endif

%patch73 -p1 -b .libidn

%patch83 -p1 -b .libidn2

%patch85 -p1 -b .libidn3

%patch87 -p1 -b .parallel

%patch88 -p1 -b .transfer-segv

:;

%build

export CFLAGS="$CFLAGS $RPM_OPT_FLAGS -O0"

export CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"

export STD_CDEFINES="$CPPFLAGS $STD_CDEFINES"

libtoolize --copy --force; aclocal; autoconf

cp -f /usr/share/libtool/config.{guess,sub} .

%if %{WITH_DBUS}

%ifarch s390x x86_64 ppc64

# every 64-bit arch EXCEPT ia64 has dbus architecture dependant

# includes in  /usr/lib64/dbus-1.0/include

export DBUS_ARCHDEP_LIBDIR=lib64

%endif

%endif

if pkg-config openssl ; then

	export CFLAGS="$CFLAGS `pkg-config --cflags openssl`"

	export CPPFLAGS="$CPPFLAGS `pkg-config --cflags-only-I openssl`"

	export LDFLAGS="$LDFLAGS `pkg-config --libs-only-L openssl`"

fi

%if %{efence}

export LDFLAGS=-lefence

%endif

%configure \

	--with-libtool \

	--localstatedir=/var \

	--enable-threads \

	--enable-ipv6 \

	--with-pic \

%if %{LIBBIND}

	--enable-libbind \

%endif

%if %{DLZ}

	--disable-openssl-version-check \

	--with-dlz-ldap=yes \

	--with-dlz-postgres=yes \

	--with-dlz-mysql=yes \

	--with-dlz-bdb=yes \

	--with-dlz-filesystem=yes \

	--with-dlz-odbc=yes \

%endif

%if %{GSSTSIG}

	--with-gssapi=yes \

	--disable-isc-spnego \

%endif

;

if [ -s openssl_config.h ]; then cat openssl_config.h >> config.h ; fi;

make %{?_smp_mflags}

%install

rm -rf ${RPM_BUILD_ROOT}

cp  --preserve=timestamps %{SOURCE5} doc/rfc

gzip -9       doc/rfc/*

mkdir -p ${RPM_BUILD_ROOT}/etc/{rc.d/init.d,logrotate.d}

mkdir -p ${RPM_BUILD_ROOT}/usr/{bin,lib,sbin,include}

mkdir -p ${RPM_BUILD_ROOT}/var/named

mkdir -p ${RPM_BUILD_ROOT}/var/named/slaves

mkdir -p ${RPM_BUILD_ROOT}/var/named/data

mkdir -p ${RPM_BUILD_ROOT}/var/named/dynamic

mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/{man1,man5,man8}

mkdir -p ${RPM_BUILD_ROOT}/var/run/named

mkdir -p ${RPM_BUILD_ROOT}/var/log

#chroot

mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}

tar --no-same-owner -jxvf %{SOURCE6} --directory ${RPM_BUILD_ROOT}/%{chroot_prefix}

# these are required to prevent them being erased during upgrade of previous

# versions that included them (bug #130121):

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.conf

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.rfc1912.zones

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/rndc.key

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/null

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/random

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/zero

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/var/log/named.log

#end chroot

make DESTDIR=${RPM_BUILD_ROOT} install

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.conf

install -c -m 755 contrib/named-bootconf/named-bootconf.sh ${RPM_BUILD_ROOT}%{_sbindir}/named-bootconf

install -c -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/etc/rc.d/init.d/named

install -c -m 644 %SOURCE3 ${RPM_BUILD_ROOT}/etc/logrotate.d/named

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.key

%{__cc} $RPM_OPT_FLAGS -o ${RPM_BUILD_ROOT}%{_sbindir}/dns-keygen %{SOURCE4}

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig

cp %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/named

%if %{SDB}

mkdir -p ${RPM_BUILD_ROOT}/etc/openldap/schema

install -c -m 644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/openldap/schema/dnszone.schema

cp -fp %{SOURCE12} contrib/sdb/pgsql/

%endif

%if %{LIBBIND}

gunzip < %{SOURCE9} | (cd ${RPM_BUILD_ROOT}/usr/share; tar -xpf -)

mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}/pkgconfig

install -m 644 %{SOURCE24} $RPM_BUILD_ROOT%{_libdir}/pkgconfig/libbind.pc

%endif

%if %{WITH_DBUS}

mkdir -p ${RPM_BUILD_ROOT}/etc/dbus-1/system.d

mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services

cp -fp %{SOURCE10} ${RPM_BUILD_ROOT}/etc/dbus-1/system.d/named.conf

cp -fp %{SOURCE11} ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services/named.service

cp -fp %{SOURCE13} ${RPM_BUILD_ROOT}%{_sbindir}/namedSetForwarders

cp -fp %{SOURCE14} ${RPM_BUILD_ROOT}%{_sbindir}/namedGetForwarders

%endif

%if %{test}

if [ "`whoami`" = 'root' ]; then

   set -e

   chmod -R a+rwX .

   pushd bin/tests

   pushd system

   ./ifconfig.sh up

   popd

   make test

   e=$?

   pushd system

   ./ifconfig.sh down

   popd

   popd

   if [ "$e" -ne 0 ]; then

      echo "ERROR: this build of BIND failed 'make test'. Aborting."

      exit $e;

   fi;

else

   echo 'test==1 : only root can run the tests (they require an ifconfig).';

fi

%endif

# Files required to run test-suite outside of build tree:

cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}/bind9

cp -fp lib/dns/include/dns/forward.h ${RPM_BUILD_ROOT}/%{_includedir}/dns

cp -fp lib/isc/unix/include/isc/keyboard.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

cp -fp lib/isc/include/isc/hash.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

# Remove libtool .la files:

find ${RPM_BUILD_ROOT}/%{_libdir} -name '*.la' -exec '/bin/rm' '-f' '{}' ';';

# /usr/lib/rpm/brp-compress

#

# Ghost config files:

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf

touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log

# configuration files:

tar -C ${RPM_BUILD_ROOT} -xf %{SOURCE28}

for f in /etc/named.conf /var/named/{named.ca,named.localhost,named.loopback,named.empty}; do

    touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/$f;

done

install -m 644 %{SOURCE5}  ./rfc1912.txt

install -m 644 %{SOURCE21} ./Copyright

# bind-chroot-admin script:

sed -e 's^@BIND_CHROOT_PREFIX@^'%{chroot_prefix}'^;s^@BIND_DIR@^'%{bind_dir}'^' < %{SOURCE22} > bind-chroot-admin;

install -m 754 bind-chroot-admin ${RPM_BUILD_ROOT}/%{_sbindir}

# sample bind configuration files for %doc:

mkdir -p sample/etc sample/var/named/{data,slaves}

cp -fp %{SOURCE25} sample/etc/named.conf

cp -fp ${RPM_BUILD_ROOT}/etc/named.rfc1912.zones sample/etc/named.rfc1912.zones

cp -fp ${RPM_BUILD_ROOT}/var/named/{named.ca,named.localhost,named.loopback,named.empty}  sample/var/named

for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.internal.zone.db my.external.zone.db; do 

  echo '@ in soa localhost. root 1 3H 15M 1W 1D

  ns localhost.' > sample/var/named/$f; 

done

/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: rndc.conf,v' bin/rndc/rndc.conf | sed 's/:.*$/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\

 *\

 * NOTE: you only need to create this file if it is to\

 * differ from the following default contents:

;d}' > sample/etc/rndc.conf;

#

chmod 0755 ${RPM_BUILD_ROOT}%{_libdir}/lib*so.*

:;

%pre

if [ "$1" -eq 1 ]; then

   /usr/sbin/groupadd -g %{bind_gid} -f -r named >/dev/null 2>&1 || :;

   /usr/sbin/useradd  -u %{bind_uid} -r -n -M -g named -s /sbin/nologin -d /var/named -c Named named >/dev/null 2>&1 || :;

fi;

:;

%post

/sbin/ldconfig

/sbin/chkconfig --add named

if [ "$1" -eq 1 ]; then

	# no more named.boot autoconversion! No-one should be using BIND-4 anymore.

	if [ ! -e /etc/rndc.key ]; then

	# create the rndc.key file:

	   echo 'key "rndckey" {

	algorithm	hmac-md5;

	secret		"'`/usr/sbin/dns-keygen`'";

};'  >     /etc/rndc.key;

	elif /bin/egrep -q '@KEY@' /etc/rndc.key; then

	   # fix potential problem with older versions

	   /bin/sed -i -e 's^@KEY@^'`/usr/sbin/dns-keygen`'^' /etc/rndc.key ;

	fi

	[ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.* >/dev/null 2>&1 ;

	# rndc.key has to have correct perms and ownership, CVE-2007-6283

	[ -e /etc/rndc.key ] && chown root:named /etc/rndc.key

	[ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key

	[ -x /usr/sbin/bind-chroot-admin ] && /usr/sbin/bind-chroot-admin --sync;

fi

:;

%preun

if [ "$1" -eq 0 ]; then

   /sbin/service named stop >/dev/null 2>&1 || :;

   /sbin/chkconfig --del named || :;

fi;

:;

%postun

/sbin/ldconfig

if [ "$1" -ge 1 ]; then

   /sbin/service named try-restart >/dev/null 2>&1 || :;

fi;

:;

%if %{SDB}

%post sdb

/sbin/service named try-restart > /dev/null 2>&1 || :;

%postun sdb

/sbin/service named try-restart > /dev/null 2>&1 || :;

%endif

%triggerpostun -n bind -- bind <= 32:9.5.0-20.b1

if [ "$1" -gt 0 ]; then

	[ -e /etc/rndc.key ] && chown root:named /etc/rndc.key

	[ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key

fi

:;

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%post chroot

if [ "$1" -gt 0 ]; then

   /usr/sbin/bind-chroot-admin --enable > /dev/null 2>&1;

fi;

:;

%posttrans chroot

if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled && \

   [ -x /sbin/restorecon ]; then

	/sbin/restorecon %{chroot_prefix}/dev/* > /dev/null 2>&1;

fi;

:;

%preun chroot

if [ "$1" -eq 0 ]; then

   /usr/sbin/bind-chroot-admin --disable > /dev/null 2>&1;

fi

:;

%clean

rm -rf ${RPM_BUILD_ROOT}

:;

%files

%defattr(0640,root,named,0750)

%dir %{_localstatedir}/named

%config(noreplace) %verify(not link) %{_sysconfdir}/named.conf

%config(noreplace) %verify(not link) %{_sysconfdir}/named.rfc1912.zones

%config %verify(not link) %{_localstatedir}/named/named.ca

%config %verify(not link) %{_localstatedir}/named/named.localhost

%config %verify(not link) %{_localstatedir}/named/named.loopback

%config %verify(not link) %{_localstatedir}/named/named.empty

%defattr(0644,root,root,0755)

%doc Copyright

%doc rfc1912.txt

%defattr(0660,named,named,0770)

%dir %{_localstatedir}/named/slaves

%dir %{_localstatedir}/named/data

%dir %{_localstatedir}/named/dynamic

%dir %{_localstatedir}/run/named

%ghost %{_localstatedir}/log/named.log

%defattr(0754,root,root,0750)

%config %{_sysconfdir}/rc.d/init.d/named

%defattr(0640,root,named,0750)

%config(noreplace) %{_sysconfdir}/sysconfig/named

%ghost %config(noreplace) %{_sysconfdir}/rndc.key

# ^- rndc.key now created on first install only if it does not exist

# %verify(not size,not md5) %config(noreplace) %attr(0640,root,named) /etc/rndc.conf

# ^- Let the named internal default rndc.conf be used -

#    rndc.conf not required unless it differs from default.

%ghost %config(noreplace) %{_sysconfdir}/rndc.conf

# ^- The default rndc.conf which uses rndc.key is in named's default internal config -

#    so rndc.conf is not necessary.

%config(noreplace) %{_sysconfdir}/logrotate.d/named

%defattr(-,root,root)

%{_sbindir}/dnssec*

%{_sbindir}/named-check*

%{_sbindir}/dns-keygen

%defattr(0750,root,root,0755)

%{_sbindir}/lwresd

%{_sbindir}/named

%{_sbindir}/named-bootconf

%{_sbindir}/rndc*

%{_sbindir}/named-compilezone

%defattr(0644,root,root,0755)

%{_mandir}/man5/named.conf.5*

%{_mandir}/man5/rndc.conf.5*

%{_mandir}/man8/rndc.8*

%{_mandir}/man8/named.8*

%{_mandir}/man8/lwresd.8*

%{_mandir}/man8/dnssec*.8*

%{_mandir}/man8/named-checkconf.8*

%{_mandir}/man8/named-checkzone.8*

%{_mandir}/man8/named-compilezone.8*

%{_mandir}/man8/rndc-confgen.8*

%doc CHANGES COPYRIGHT README

%doc doc/arm doc/misc

%doc sample/

%if %{WITH_DBUS}

%doc contrib/dbus/README.DBUS

%attr(644,root,root) %config %{_sysconfdir}/dbus-1/system.d/named.conf

%attr(644,root,root) %config %{_datadir}/dbus-1/services/named.service

%attr(750,root,root) %{_sbindir}/namedGetForwarders

%attr(750,root,root) %{_sbindir}/namedSetForwarders

%endif

%if %{SDB}

%files sdb

%defattr(0644,root,root,0755)

%{_mandir}/man1/zone2ldap.1*

%doc contrib/sdb/ldap/README.ldap contrib/sdb/ldap/INSTALL.ldap contrib/sdb/pgsql/README.sdb_pgsql

%dir %{_sysconfdir}/openldap/schema

%config(noreplace) %{_sysconfdir}/openldap/schema/dnszone.schema

%defattr(0750,root,root,0755)

%{_sbindir}/named-sdb

%{_sbindir}/zone2ldap

%{_sbindir}/ldap2zone

%{_sbindir}/zonetodb

%{_sbindir}/zone2sqlite

%endif

%files libs

%defattr(-,root,root,0755)

%{_libdir}/*so.*

%files utils

%defattr(0755,root,root,0755)

%{_bindir}/dig

%{_bindir}/host

%{_bindir}/nslookup

%{_bindir}/nsupdate

%defattr(0644,root,root,0755)

%{_mandir}/man1/host.1*

%{_mandir}/man8/nsupdate.8*

%{_mandir}/man1/dig.1*

%{_mandir}/man1/nslookup.1*

%files devel

%defattr(-,root,root,0755)

%{_libdir}/libbind9.a

%{_libdir}/libdns.a

%{_libdir}/libisc.a

%{_libdir}/libisccc.a

%{_libdir}/libisccfg.a

%{_libdir}/liblwres.a

%{_libdir}/*so

%{_includedir}/bind9

%{_includedir}/dns

%{_includedir}/dst

%{_includedir}/isc

%{_includedir}/isccc

%{_includedir}/isccfg

%{_includedir}/lwres

%{_mandir}/man3/lwres*

%{_bindir}/isc-config.sh

%doc doc/draft doc/rfc

%if %{LIBBIND}

%{_libdir}/libbind.a

%{_libdir}/pkgconfig/libbind.pc

%{_includedir}/bind

%{_mandir}/man3/libbind-*

%{_mandir}/man7/libbind-*

%{_mandir}/man5/libbind-*

%endif

%files chroot

%defattr(0640,root,named,0750)

%dir %{chroot_prefix}

%dir %{chroot_prefix}/dev

%dir %{chroot_prefix}/etc

%ghost %config(noreplace) %{chroot_prefix}/etc/named.conf

%ghost %config(noreplace) %{chroot_prefix}/etc/named.rfc1912.zones

%ghost %config(noreplace) %{chroot_prefix}/etc/rndc.key

%dir %{chroot_prefix}/var

%dir  %{chroot_prefix}/var/run

%dir  %{chroot_prefix}/var/named

%ghost  %config %{chroot_prefix}/var/named/named.ca

%ghost  %config %{chroot_prefix}/var/named/named.localhost

%ghost  %config %{chroot_prefix}/var/named/named.loopback

%ghost  %config %{chroot_prefix}/var/named/named.empty

%defattr(0660,named,named,0770)

%dir %{chroot_prefix}/var/named/slaves

%dir %{chroot_prefix}/var/named/data

%dir %{chroot_prefix}/var/named/dynamic

%dir %{chroot_prefix}/var/run/named

%dir %{chroot_prefix}/var/tmp

%dir %{chroot_prefix}/var/log

%ghost %{chroot_prefix}/var/log/named.log

%ghost %{chroot_prefix}/dev/null

%ghost %{chroot_prefix}/dev/random

%ghost %{chroot_prefix}/dev/zero

%defattr(0750,root,root,0755)

%{_sbindir}/bind-chroot-admin

%changelog

* Mon Feb 11 2008 Adam Tkac <atkac redhat com> 32:9.5.0-26.b2

- build with -D_GNU_SOURCE (#431734)

- improved fix for #253537, posttrans script is now used

- improved fix for #400461

- 9.5.0b2

  - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch

    - only named, named-sdb and lwresd are PIE

  - bind-9.5-sdb.patch has been updated

  - bind-9.5-libidn.patch has been updated

  - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch

  - removed bind-9.5-gssapi-header.patch (upstream)

  - removed bind-9.5-CVE-2008-0122.patch (upstream)

- removed bind-9.2.2-nsl.patch

- improved sdb_tools Makefile.in

* Mon Feb 04 2008 Adam Tkac <atkac redhat com> 32:9.5.0-25.b1

- fixed segfault during sending notifies (#400461)

- rebuild with gcc 4.3 series

* Tue Jan 22 2008 Adam Tkac <atkac redhat com> 32:9.5.0-24.b1

- removed bind-9.3.2-prctl_set_dumpable.patch (upstream)

- allow parallel building of libdns library

- CVE-2008-0122

* Thu Dec 27 2007 Adam Tkac <atkac redhat com> 32:9.5.0-23.b1

- fixed initscript wait loop (#426382)

- removed dependency on policycoreutils and libselinux (#426515)

* Thu Dec 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-22.b1

- fixed regression caused by libidn2 patch (#426348)

* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-21.b1

- fixed typo in post section (CVE-2007-6283)

* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-20.b1

- removed obsoleted triggers

- CVE-2007-6283

* Wed Dec 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1

- added dst/gssapi.h to -devel subpackage (#419091)

- improved fix for (#417431)

* Mon Dec 10 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1

- fixed shutdown with initscript when rndc doesn't work (#417431)

- fixed IDN patch (#412241)

* Thu Dec 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.b1

- 9.5.0b1 (#405281, #392491)

* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7

- Rebuild for deps

* Wed Dec 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7

- build with -O0

* Mon Dec 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7

- bind-9.5-random_ports.patch was removed because upstream doesn't

  like it. query-source{,v6} options are sufficient (#391931)

- bind-chroot-admin called restorecon on /proc filesystem (#405281)

* Mon Nov 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7

- removed edns patch to keep compatibility with vanilla bind

  (#275091, comment #20)

* Wed Nov 21 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7

- use system port selector instead ISC's (#391931)

* Mon Nov 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.a7

- removed statement from initscript which passes -D to named

* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-17.a7

- 9.5.0a7

- dropped patches (upstream)

  - bind-9.5-update.patch

  - bind-9.5-pool_badfree.patch

  - bind-9.5-_res_errno.patch

* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6

- added bind-sdb again, contains SDB modules and DLZ modules

- bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch

* Mon Nov 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6

- removed Requires: openldap, postgresql, mysql, db4, unixODBC

- new L.ROOT-SERVERS.NET address

* Mon Oct 29 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6

- completely disable DBUS

* Fri Oct 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6

- minor cleanup in bind-chroot-admin

* Wed Oct 25 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6

- fixed typo in initscript

* Tue Oct 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.a6

- disabled DBUS (dhcdbd doesn't exist & #339191)

* Wed Oct 18 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6

- fixed missing va_end () functions (#336601)

- fixed memory leak when dbus initialization fails

* Tue Oct 16 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.a6

- corrected named.5 SDB statement (#326051)

* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-14.a6

- added edns patch again (#275091)

* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-13.a6

- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)

* Thu Sep 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6

- build with O2

- removed "autotools" patch

- bugfixing in bind-chroot-admin (#279901)

* Thu Sep 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.a6

- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are

  obsoleted by upstream bind-9.5-_res_errno.patch

* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6

- fixed wrong resolver's dispatch pool cleanup (#275011, patch from 

  tmraz redhat com)

* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6

- initscript failure message is now printed correctly (#277981,

  Quentin Armitage (quentin armitage org uk) )

* Mon Sep 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6

- temporary revert ISC 2119 change and add "libbind-errno" patch

  (#254501) again

* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6

- removed end dots from Summary sections (skasal@redhat.com)

- fixed wrong file creation by autotools patch (skasal@redhat.com)

* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.a6

- start using --disable-isc-spnego configure option

  - remove bind-9.5-spnego-memory_management.patch (source isn't

    compiled)

* Wed Aug 22 2007 Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6

- added new initscript option KEYTAB_FILE which specified where

  is located kerberos .keytab file for named service

- obsolete temporary bind-9.5-spnego-memory_management.patch by

  bind-9.5-gssapictx-free.patch which conforms BIND coding standards

  (#251853)

* Tue Aug 21 2007 Adam Tkac <atkac redhat com> 32:9.5.0-10.a6

- dropped direct dependency to /etc/openldap/schema directory

- changed hardcoded paths to macros

- fired away code which configure LDAP server

* Tue Aug 14 2007 Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6

- named could crash with SRV record UPDATE (#251336)

* Mon Aug 13 2007 Adam Tkac <atkac redhat com> 32:9.5.0-9.a6

- disable 64bit dlz driver patch on alpha and ia64 (#251298)

- remove wrong malloc functions from lib/dns/spnego.c (#251853)

* Mon Aug 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6

- changed licence from BSD-like to ISC

* Tue Jul 31 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6

- disabled named on all runlevels by default

* Mon Jul 30 2007 Adam Tkac <atkac redhat com> 32:9.5.0-8.a6

- minor next improvements on autotools patch

- dig and host utilities now using libidn instead idnkit for

  IDN support

* Wed Jul 25 2007 Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6

- binutils/gcc bug rebuild (#249435)

* Tue Jul 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-6.a6

- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and

  CVE-2007-2926

- fixed building on 64bits

* Mon Jul 23 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-5

- integrated "autotools" patch for testing purposes (upstream will

  accept it in future, for easier building)

* Mon Jul 23 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1

- fixed DLZ drivers building on 64bit systems

* Fri Jul 20 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-4

- fixed relation between logrotated and chroot-ed named

* Wed Jul 18 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9

- removed bind-sdb package (default named has compiled SDB backend now)

- integrated DLZ (Dynamically loadable zones) drivers

- integrated GSS-TSIG support (RFC 3645)

- build with -O0 (many new features, potential core dumps will be more useful)

* Tue Jul 17 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2

- initscript should be ready for parallel booting (#246878)

* Tue Jul 17 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-3

- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)

* Mon Jul 16 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2

- moved chroot configfiles into chroot subpackage (#248306)

* Thu Jul 02 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-2

- minor changes in default configuration

- fix h_errno assigment during resolver initialization (unbounded recursion, #245857)

- removed wrong patch to #150288

* Tue Jun 19 2007 Adam Tkac <atkac redhat com> 31:9.5.0a5-1

- updated to latest upstream

* Mon Jun 13 2007 Adam Tkac <atkac redhat com> 31:9.4.1-7

- marked caching-nameserver as obsolete (#244604)

- fixed typo in initscript (causes that named doesn't detect NetworkManager

  correctly)

- next cleanup in configuration - moved configfiles into config.tar

- removed delay between start & stop in restart function in named.init

* Tue Jun 12 2007 Adam Tkac <atkac redhat com> 31:9.4.1-6

- major changes in initscript. Could be LSB compatible now