rpms-fedora-extras/frr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
110 Commits 41 Branches 1 Tag
44f1e4e48516237c1020ff9b4955ce7e8d09208f
Commit Graph
55 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michal Ruprich 959d8d1a3f Resolves: rhbz#2329643 - upgrading frr to 10.2 causes pimd crashes 2024-12-05 18:28:34 +01:00
Michal Ruprich 9db41267a7 New version 10.2 2024-11-22 10:40:19 +01:00
Michal Ruprich 0d2ad1b406 Resolves: #2311119 - Multiple AVCs for accessing lib_t in FRR-10.1 
Resolves: #2311120 - AVCs for using a netlink socket in FRR
 2024-09-10 14:44:31 +02:00
Michal Ruprich 0c182ee574 libre soname bump 2024-08-15 14:00:44 +02:00
Michal Ruprich c39d922dae New version 10.1 2024-08-12 13:14:52 +02:00
Michal Ruprich 61519cccf4 New version 10.0.1 2024-07-31 12:50:07 +02:00
Michal Ruprich c09dc1bed5 Moving yang modules to frr specific dir to avoid conflicts 2024-04-17 08:38:00 +02:00
Michal Ruprich f10270279b New version 9.1 2024-01-25 14:43:24 +01:00
Michal Ruprich 30f4eb8e8e New version 9.0.1 2023-10-16 09:44:02 +02:00
Michal Ruprich ca06a43267 Adding a couple of SELinux rules, includes fix for rhbz#2149299 2023-09-01 13:15:04 +02:00
Michal Ruprich b6998f1514 New version 8.5.2 2023-06-30 15:51:23 +02:00
Michal Ruprich de8d85febb frr-8.5.1-4 
Selinux policy changes:
- Allow watch,read on /var/run/netns directory and its content
- Add sys_admin capability

It seems like sys_admin is needed because frr is using setns function to change the actual namespace. Full log here:
type=PROCTITLE msg=audit(06/29/2023 03:42:07.692:559) : proctitle=/usr/libexec/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000 -n
type=SYSCALL msg=audit(06/29/2023 03:42:07.692:559) : arch=x86_64 syscall=setns success=no exit=EPERM(Operation not permitted) a0=0x11 a1=CLONE_NEWNET a2=0x0 a3=0x0 items=0 ppid=3692 pid=3701 auid=unset uid=frr gid=frr euid=frr suid=frr fsuid=frr egid=frr sgid=frr fsgid=frr tty=(none) ses=unset comm=zebra exe=/usr/libexec/frr/zebra subj=system_u:system_r:frr_t:s0 key=(null)
type=AVC msg=audit(06/29/2023 03:42:07.692:559) : avc: denied { sys_admin } for pid=3701 comm=zebra capability=sys_admin scontext=system_u:system_r:frr_t:s0 tcontext=system_u:system_r:frr_t:s0 tclass=capability permissive=0

Resolves: #2216073 - SELinux is preventing FRR-Zebra to access to network namespaces
 2023-06-29 15:54:02 +02:00
Michal Ruprich 58b91e7bdb New version 8.5.1 2023-04-26 13:21:40 +02:00
Michal Ruprich a5fc21e539 New version 8.5 2023-04-12 14:07:11 +02:00
Michal Ruprich 12b88485f2 Rebuilding for new abseil-cpp version 2023-03-23 13:33:53 +01:00
Michal Ruprich f062556435 SPDX migration 2023-03-22 13:05:16 +01:00
Michal Ruprich a0c4fb9063 Adding an include for fips 2023-01-12 15:50:47 +01:00
Michal Ruprich 0d70491296 New version 8.4.2 2023-01-12 12:55:39 +01:00
Michal Ruprich 1787b2810b New version 8.4.1 
Fix for rhbz #2140705
 2022-11-25 18:02:48 +01:00
Michal Ruprich 5301cdd961 New version 8.4 2022-11-10 09:57:42 +01:00
Michal Ruprich 3905b5274d Adding SELinux rule to enable zebra to write to sysctl_net_t 
Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t
 2022-09-16 16:00:15 +02:00
Michal Ruprich 41a038e1d1 Fixing an error in post scriptlet 2022-09-09 19:14:38 +02:00
Michal Ruprich a7b3783ddc Resolves: #2124254 - frr can no longer update routes 2022-09-09 16:14:11 +02:00
Michal Ruprich a2ffd90d49 Resolves: #2124253 - SELinux is preventing zebra from setattr access on the directory frr 
Better handling FRR files during upgrade
 2022-09-07 11:28:59 +02:00
Michal Ruprich db09f8886c Adding sources 2022-09-06 12:48:05 +02:00
Michal Ruprich 6e63bc125e New version 8.3.1 2022-09-06 12:38:38 +02:00
Michal Ruprich b2c9845f51 Rebuilding for new abseil-cpp and grpc updates 2022-08-22 14:09:39 +02:00
Michal Ruprich d0157c4cbf Adding vrrpd and pathd to the policy 2022-08-10 12:03:08 +02:00
Michal Ruprich 40f863faec Finalizing SELinux policy 2022-08-10 10:36:08 +02:00
Michal Ruprich 4a6900f6dc Fixing wrong path for vtysh in frr.fc 2022-08-02 09:58:48 +02:00
Michal Ruprich 9408b0b09e Packaging SELinux policy for FRR 2022-07-28 13:35:19 +02:00
Michal Ruprich 0c5e4dac6b Rebuild for grpc-1.46.1 2022-05-17 09:24:20 +02:00
Michal Ruprich 38e840d2af Fix for CVE-2022-16126 2022-04-11 12:00:54 +02:00
Michal Ruprich 4519d663ea New version 8.2.2 2022-03-15 14:49:25 +01:00
Michal Ruprich 46c4cd45bd Rebuild for abseil-cpp 20211102.0 2022-03-10 14:40:05 +01:00
Michal Ruprich 4ed096d9e0 New version 8.2 (rhbz#2020439) 
Resolves: #2011868 - systemctl frr reload does not stop daemons that are not enabled in /etc/frr/daemons
 2022-03-09 15:19:46 +01:00
Michal Ruprich efd1a71f65 Rebuilding for FTBFS in Rawhide(rhbz#2045399) 2022-02-01 07:31:08 +01:00
Michal Ruprich c5466bb615 Obsoleting quagga so it may be retired 2021-10-15 12:31:03 +02:00
Michal Ruprich 07fa06fda3 Rebuilding for grpc 1.41 2021-10-07 08:20:09 +02:00
Michal Ruprich 8f024e6425 Rebuild for new version of libyang 2021-09-30 17:08:48 +02:00
Michal Ruprich b33a5eb07f New version 8.0.1 2021-09-16 09:00:46 +02:00
Michal Ruprich c7d9dbbe26 New version 8.0 2021-08-11 12:46:03 +02:00
Michal Ruprich 31b2cc24c1 Resolves: #1983278 - ospfd crashes in route_node_delete with assertion fail 2021-07-20 09:35:21 +02:00
Michal Ruprich 158687cb0e Rebuild for newer abseil-cpp 2021-07-07 11:13:10 +02:00
Michal Ruprich 22d94bec34 Fixing permissions on config files in /etc/frr 
Enabling integrated configuration option for frr
 2021-04-23 12:38:22 +02:00
Michal Ruprich c0bc1c720a New version 7.5.1 
Enabling grpc, adding hostname for post scriptlet
Moving files to libexec due to selinux issues
 2021-03-16 11:30:31 +01:00
Michal Ruprich d3558d90f6 Fixing FTBS - icc options are confusing the new gcc 2021-02-16 17:14:30 +01:00
Michal Ruprich 3d0f818836 New version 7.5 2021-01-01 14:47:47 +01:00
Michal Ruprich 7bc4774a57 New version 7.4 2020-09-21 14:26:29 +02:00
Michal Ruprich 3f446986bd New version 7.3 2020-02-19 10:42:42 +01:00
Michal Ruprich 55a1ddaf1c New version 7.2 2020-01-08 12:24:01 +01:00
Michal Ruprich a762237e7b Rebuilding for new version of libyang 2019-11-12 12:02:23 +01:00
Michal Ruprich db560a0aad Adding noreplace to the /etc/frr/daemons file 2019-10-07 08:43:15 +02:00
Michal Ruprich 1924a87e88 New way of finding python version during build 
Replacing crypto of all routing daemons with openssl
Disabling EIGRP crypto because it is broken
Disabling crypto in FIPS mode
 2019-09-13 16:38:56 +02:00
Michal Ruprich 463257a2dd Initial import (#1702720) 2019-07-21 15:10:06 +02:00