Compare commits

..

12 Commits

Author SHA1 Message Date
Zoran Peričić
9f47d698f5 v.ims.1 - Bump version 2023-01-25 18:37:31 +01:00
cb7be7535f nhrp: configure strongswan vici path 2023-01-25 18:37:31 +01:00
Michal Ruprich
12cd4431e4 New version 8.4.2 2023-01-12 16:29:19 +01:00
Michal Ruprich
858f96ce3e New version 8.4.1
Fix for rhbz #2140705
2022-11-25 18:07:53 +01:00
Michal Ruprich
519e1a5f6a New version 8.4 2022-11-10 10:31:46 +01:00
Michal Ruprich
964a13758e Rebuilding because of weird abseil-cpp version mismatch in the compose (rhbz #2128691) 2022-09-22 10:10:15 +02:00
Michal Ruprich
a5ca1b7fce Adding SELinux rule to enable zebra to write to sysctl_net_t
Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t
2022-09-16 16:02:34 +02:00
Michal Ruprich
8c46bbbf5c Adding a couple of rules to tackle AVCs 2022-09-09 19:07:50 +02:00
Michal Ruprich
61a4e5aa67 Resolves: #2124254 - frr can no longer update routes 2022-09-09 16:11:03 +02:00
Michal Ruprich
2462abb0da Resolves: #2124253 - SELinux is preventing zebra from setattr access on the directory frr
Better handling FRR files during upgrade
2022-09-07 11:48:06 +02:00
Michal Ruprich
c4595285be Forgot to add a patch 2022-09-06 13:31:47 +02:00
Michal Ruprich
879b7a1f73 New version 8.3.1 2022-09-06 13:26:06 +02:00
5 changed files with 12 additions and 28 deletions

2
.gitignore vendored
View File

@@ -14,5 +14,3 @@
/frr-8.4.tar.gz /frr-8.4.tar.gz
/frr-8.4.1.tar.gz /frr-8.4.1.tar.gz
/frr-8.4.2.tar.gz /frr-8.4.2.tar.gz
/frr-8.5.tar.gz
/frr-8.5.1.tar.gz

4
frr.fc
View File

@@ -1,4 +1,4 @@
/usr/libexec/frr/(.*)? gen_context(system_u:object_r:frr_exec_t,s0) /usr/libexec/frr(/.*)? gen_context(system_u:object_r:frr_exec_t,s0)
/usr/lib/systemd/system/frr.* gen_context(system_u:object_r:frr_unit_file_t,s0) /usr/lib/systemd/system/frr.* gen_context(system_u:object_r:frr_unit_file_t,s0)
@@ -21,8 +21,6 @@
/var/lock/subsys/ripngd -- gen_context(system_u:object_r:frr_lock_t,s0) /var/lock/subsys/ripngd -- gen_context(system_u:object_r:frr_lock_t,s0)
/var/lock/subsys/staticd -- gen_context(system_u:object_r:frr_lock_t,s0) /var/lock/subsys/staticd -- gen_context(system_u:object_r:frr_lock_t,s0)
/var/lock/subsys/zebra -- gen_context(system_u:object_r:frr_lock_t,s0) /var/lock/subsys/zebra -- gen_context(system_u:object_r:frr_lock_t,s0)
/var/lock/subsys/vrrpd -- gen_context(system_u:object_r:frr_lock_t,s0)
/var/lock/subsys/pathd -- gen_context(system_u:object_r:frr_lock_t,s0)
/var/run/frr(/.*)? gen_context(system_u:object_r:frr_var_run_t,s0) /var/run/frr(/.*)? gen_context(system_u:object_r:frr_var_run_t,s0)

View File

@@ -1,3 +1,5 @@
%global dist .ims.1%{?dist}
%global frr_libdir %{_libexecdir}/frr %global frr_libdir %{_libexecdir}/frr
%global _hardened_build 1 %global _hardened_build 1
@@ -6,7 +8,7 @@
%bcond_without selinux %bcond_without selinux
Name: frr Name: frr
Version: 8.5.1 Version: 8.4.2
Release: 1%{?dist} Release: 1%{?dist}
Summary: Routing daemon Summary: Routing daemon
License: GPLv2+ License: GPLv2+
@@ -125,6 +127,7 @@ autoreconf -ivf
--disable-babeld \ --disable-babeld \
--with-moduledir=%{_libdir}/frr/modules \ --with-moduledir=%{_libdir}/frr/modules \
--with-crypto=openssl \ --with-crypto=openssl \
--with-vici-socket=/run/strongswan/charon.vici \
--enable-fpm \ --enable-fpm \
--enable-grpc --enable-grpc
@@ -267,15 +270,6 @@ rm tests/lib/*grpc*
%endif %endif
%changelog %changelog
* Wed Apr 26 2023 Michal Ruprich <mruprich@redhat.com> - 8.5.1-1
- New version 8.5.1
* Wed Apr 12 2023 Michal Ruprich <mruprich@redhat.com> - 8.5-1
- New version 8.5
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 8.4.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jan 12 2023 Michal Ruprich <mruprich@redhat.com> - 8.4.2-1 * Thu Jan 12 2023 Michal Ruprich <mruprich@redhat.com> - 8.4.2-1
- New version 8.4.2 - New version 8.4.2
@@ -286,12 +280,15 @@ rm tests/lib/*grpc*
* Thu Nov 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.4-1 * Thu Nov 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.4-1
- New version 8.4 - New version 8.4
* Thu Sep 22 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
- Rebuilding because of weird abseil-cpp version mismatch in the compose (rhbz #2128691)
* Fri Sep 16 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-5 * Fri Sep 16 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-5
- Adding SELinux rule to enable zebra to write to sysctl_net_t - Adding SELinux rule to enable zebra to write to sysctl_net_t
- Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t - Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t
* Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-4 * Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-4
- Fixing an error in post scriptlet - Adding a couple of rules to tackle AVCs
* Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-3 * Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-3
- Resolves: #2124254 - frr can no longer update routes - Resolves: #2124254 - frr can no longer update routes
@@ -303,15 +300,6 @@ rm tests/lib/*grpc*
* Tue Sep 06 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-1 * Tue Sep 06 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
- New version 8.3.1 - New version 8.3.1
* Mon Aug 22 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-10
- Rebuilding for new abseil-cpp and grpc updates
* Wed Aug 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-9
- Adding vrrpd and pathd as daemons to the policy
* Wed Aug 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-8
- Finalizing SELinux policy
* Tue Aug 02 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-7 * Tue Aug 02 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-7
- Fixing wrong path for vtysh in frr.fc - Fixing wrong path for vtysh in frr.fc

2
frr.te
View File

@@ -83,8 +83,8 @@ corenet_tcp_bind_bgp_port(frr_t)
corenet_tcp_connect_bgp_port(frr_t) corenet_tcp_connect_bgp_port(frr_t)
corenet_tcp_bind_cmadmin_port(frr_t) corenet_tcp_bind_cmadmin_port(frr_t)
corenet_udp_bind_cmadmin_port(frr_t) corenet_udp_bind_cmadmin_port(frr_t)
corenet_tcp_bind_firepower_port(frr_t)
corenet_tcp_bind_generic_port(frr_t) corenet_tcp_bind_generic_port(frr_t)
corenet_tcp_bind_firepower_port(frr_t)
corenet_tcp_bind_priority_e_com_port(frr_t) corenet_tcp_bind_priority_e_com_port(frr_t)
corenet_udp_bind_router_port(frr_t) corenet_udp_bind_router_port(frr_t)
corenet_tcp_bind_qpasa_agent_port(frr_t) corenet_tcp_bind_qpasa_agent_port(frr_t)

View File

@@ -1,2 +1,2 @@
SHA512 (frr-8.5.1.tar.gz) = 90da4900a178dbe0ddd763e3e39734cf720fe255a4b56563b8f9200276c5e01668d0cf7bae399b25dd4753d574866a87200d1fcf2d03a7421a81104129abd29c SHA512 (frr-8.4.2.tar.gz) = 1079bf3f597cc21ccbc37c5617cfb95f6e066de2a726a9b8ffb5825f92af3049d0e19ef4e9944a9e11dabc4309c56f0ab22e4c9188f5008ebcea47e0428f3ff0
SHA512 (remove-babeld-ldpd.sh) = a5bf67a3722cb20d43cef1dac28f839db68df73a1b7d34d8438e4f9366da3b67d85c1f44281f93434e8dd8ebcb2d3dc258b77eaa5627475b7395d207f020839d SHA512 (remove-babeld-ldpd.sh) = a5bf67a3722cb20d43cef1dac28f839db68df73a1b7d34d8438e4f9366da3b67d85c1f44281f93434e8dd8ebcb2d3dc258b77eaa5627475b7395d207f020839d