New version 8.5

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-04-12 14:14:37 +02:00 · 2023-01-19 03:57:19 +00:00 · 2023-01-12 15:50:47 +01:00 · 2023-01-12 12:55:39 +01:00 · 2022-11-25 18:02:48 +01:00 · 2022-11-23 09:13:27 +01:00
5 changed files with 24 additions and 12 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,4 @@
 /frr-8.4.tar.gz
 /frr-8.4.1.tar.gz
 /frr-8.4.2.tar.gz
 /frr-8.5.tar.gz
--- a/frr.fc
+++ b/frr.fc
@@ -1,4 +1,4 @@
-/usr/libexec/frr(/.*)?              gen_context(system_u:object_r:frr_exec_t,s0)
+/usr/libexec/frr/(.*)?              gen_context(system_u:object_r:frr_exec_t,s0)
 /usr/lib/systemd/system/frr.*   gen_context(system_u:object_r:frr_unit_file_t,s0)
@@ -21,6 +21,8 @@
 /var/lock/subsys/ripngd     --  gen_context(system_u:object_r:frr_lock_t,s0)
 /var/lock/subsys/staticd    --  gen_context(system_u:object_r:frr_lock_t,s0)
 /var/lock/subsys/zebra      --  gen_context(system_u:object_r:frr_lock_t,s0)
 /var/lock/subsys/vrrpd      --  gen_context(system_u:object_r:frr_lock_t,s0)
 /var/lock/subsys/pathd      --  gen_context(system_u:object_r:frr_lock_t,s0)
 /var/run/frr(/.*)?              gen_context(system_u:object_r:frr_var_run_t,s0)
--- a/frr.spec
+++ b/frr.spec
@@ -1,5 +1,3 @@
 %global dist .ims.1%{?dist}
 %global frr_libdir %{_libexecdir}/frr
 %global _hardened_build 1
@@ -8,7 +6,7 @@
 %bcond_without selinux
 Name:           frr
-Version:        8.4.2
+Version:        8.5
 Release:        1%{?dist}
 Summary:        Routing daemon
 License:        GPLv2+
@@ -127,7 +125,6 @@ autoreconf -ivf
    --disable-babeld \
    --with-moduledir=%{_libdir}/frr/modules \
    --with-crypto=openssl \
    --with-vici-socket=/run/strongswan/charon.vici \
    --enable-fpm \
    --enable-grpc
@@ -270,6 +267,12 @@ rm tests/lib/*grpc*
 %endif
 %changelog
 * Wed Apr 12 2023 Michal Ruprich <mruprich@redhat.com> - 8.5-1
 - New version 8.5
 * Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 8.4.2-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
 * Thu Jan 12 2023 Michal Ruprich <mruprich@redhat.com> - 8.4.2-1
 - New version 8.4.2
@@ -280,15 +283,12 @@ rm tests/lib/*grpc*
 * Thu Nov 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.4-1
 - New version 8.4
 * Thu Sep 22 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
 - Rebuilding because of weird abseil-cpp version mismatch in the compose (rhbz #2128691)
 * Fri Sep 16 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-5
 - Adding SELinux rule to enable zebra to write to sysctl_net_t
 - Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t
 * Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-4
- Adding a couple of rules to tackle AVCs
+- Fixing an error in post scriptlet
 * Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-3
 - Resolves: #2124254 - frr can no longer update routes
@@ -300,6 +300,15 @@ rm tests/lib/*grpc*
 * Tue Sep 06 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
 - New version 8.3.1
 * Mon Aug 22 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-10
 - Rebuilding for new abseil-cpp and grpc updates
 * Wed Aug 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-9
 - Adding vrrpd and pathd as daemons to the policy
 * Wed Aug 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-8
 - Finalizing SELinux policy
 * Tue Aug 02 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-7
 - Fixing wrong path for vtysh in frr.fc
--- a/frr.te
+++ b/frr.te
@@ -83,8 +83,8 @@ corenet_tcp_bind_bgp_port(frr_t)
 corenet_tcp_connect_bgp_port(frr_t)
 corenet_tcp_bind_cmadmin_port(frr_t)
 corenet_udp_bind_cmadmin_port(frr_t)
 corenet_tcp_bind_generic_port(frr_t)
 corenet_tcp_bind_firepower_port(frr_t)
 corenet_tcp_bind_generic_port(frr_t)
 corenet_tcp_bind_priority_e_com_port(frr_t)
 corenet_udp_bind_router_port(frr_t)
 corenet_tcp_bind_qpasa_agent_port(frr_t)
--- a/2
+++ b/2
@@ -1,2 +1,2 @@
-SHA512 (frr-8.4.2.tar.gz) = 1079bf3f597cc21ccbc37c5617cfb95f6e066de2a726a9b8ffb5825f92af3049d0e19ef4e9944a9e11dabc4309c56f0ab22e4c9188f5008ebcea47e0428f3ff0
+SHA512 (frr-8.5.tar.gz) = 26a1bb752130bac684c8f83fb68d33fd16a94054904a37a9550d6028d6181663f757a700e967ae4265ca2a7c6e26b4f0d2fadcfae55a7101c6ce33ac83f2c9b9
 SHA512 (remove-babeld-ldpd.sh) = a5bf67a3722cb20d43cef1dac28f839db68df73a1b7d34d8438e4f9366da3b67d85c1f44281f93434e8dd8ebcb2d3dc258b77eaa5627475b7395d207f020839d
Author	SHA1	Message	Date
Michal Ruprich	1067766458	New version 8.5	2023-04-12 14:14:37 +02:00
Fedora Release Engineering	777829246b	Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>	2023-01-19 03:57:19 +00:00
Michal Ruprich	a0c4fb9063	Adding an include for fips	2023-01-12 15:50:47 +01:00
Michal Ruprich	0d70491296	New version 8.4.2	2023-01-12 12:55:39 +01:00
Michal Ruprich	1787b2810b	New version 8.4.1 Fix for rhbz #2140705	2022-11-25 18:02:48 +01:00
Michal Ruprich	d506655fff	AVC when running the reload script for FRR	2022-11-23 09:13:27 +01:00
Michal Ruprich	5301cdd961	New version 8.4	2022-11-10 09:57:42 +01:00
Michal Ruprich	3905b5274d	Adding SELinux rule to enable zebra to write to sysctl_net_t Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t	2022-09-16 16:00:15 +02:00
Michal Ruprich	41a038e1d1	Fixing an error in post scriptlet	2022-09-09 19:14:38 +02:00
Michal Ruprich	a7b3783ddc	Resolves: #2124254 - frr can no longer update routes	2022-09-09 16:14:11 +02:00
Michal Ruprich	a2ffd90d49	Resolves: #2124253 - SELinux is preventing zebra from setattr access on the directory frr Better handling FRR files during upgrade	2022-09-07 11:28:59 +02:00
Michal Ruprich	db09f8886c	Adding sources	2022-09-06 12:48:05 +02:00
Michal Ruprich	6e63bc125e	New version 8.3.1	2022-09-06 12:38:38 +02:00
Michal Ruprich	b2c9845f51	Rebuilding for new abseil-cpp and grpc updates	2022-08-22 14:09:39 +02:00
Zdenek Pytela	16d43cc08d	Allow frr daemons bind generic sockets to tcp ports The vrrpd and pathd daemons need to bind to ports 2619/tcp and 2621/tcp. This commit can be reverted if the inter-process communication changes to using unix sockets in the future. Addresses the following AVC denial: type=PROCTITLE msg=audit(08/10/2022 05:32:53.905:257) : proctitle=/usr/libexec/frr/pathd -d -F traditional -A 127.0.0.1 type=AVC msg=audit(08/10/2022 05:32:53.905:257) : avc: denied { name_bind } for pid=8625 comm=pathd src=2621 scontext=system_u:system_r:frr_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0 type=SYSCALL msg=audit(08/10/2022 05:32:53.905:257) : arch=x86_64 syscall=bind success=no exit=EACCES(Permission denied) a0=0xc a1=0x55e3ba44fdd0 a2=0x10 a3=0x7fff610c2bd4 items=0 ppid=8623 pid=8625 auid=unset uid=geoclue gid=flatpak euid=geoclue suid=geoclue fsuid=geoclue egid=flatpak sgid=flatpak fsgid=flatpak tty=(none) ses=unset comm=pathd exe=/usr/libexec/frr/pathd subj=system_u:system_r:frr_t:s0 key=(null) type=SOCKADDR msg=audit(08/10/2022 05:32:53.905:257) : saddr={ saddr_fam=inet laddr=127.0.0.1 lport=2621 } Resolves: rhbz#2117262	2022-08-19 10:30:23 +00:00
Michal Ruprich	d0157c4cbf	Adding vrrpd and pathd to the policy	2022-08-10 12:03:08 +02:00
Michal Ruprich	40f863faec	Finalizing SELinux policy	2022-08-10 10:36:08 +02:00
Zdenek Pytela	1e7608b86e	Allow frr_t create /root/.history_frr with a private type The file can be created when the frr service starts, so a file transition is needed to be defined in the policy.	2022-08-10 10:09:25 +02:00
`@@ -1,2 +1,2 @@`
	`SHA512 (frr-8.4.2.tar.gz) = 1079bf3f597cc21ccbc37c5617cfb95f6e066de2a726a9b8ffb5825f92af3049d0e19ef4e9944a9e11dabc4309c56f0ab22e4c9188f5008ebcea47e0428f3ff0`	`SHA512 (frr-8.5.tar.gz) = 26a1bb752130bac684c8f83fb68d33fd16a94054904a37a9550d6028d6181663f757a700e967ae4265ca2a7c6e26b4f0d2fadcfae55a7101c6ce33ac83f2c9b9`
	`SHA512 (remove-babeld-ldpd.sh) = a5bf67a3722cb20d43cef1dac28f839db68df73a1b7d34d8438e4f9366da3b67d85c1f44281f93434e8dd8ebcb2d3dc258b77eaa5627475b7395d207f020839d`	`SHA512 (remove-babeld-ldpd.sh) = a5bf67a3722cb20d43cef1dac28f839db68df73a1b7d34d8438e4f9366da3b67d85c1f44281f93434e8dd8ebcb2d3dc258b77eaa5627475b7395d207f020839d`