v.ims.1 - Bump version

nhrp: configure strongswan vici path
New version 8.5.1
2023-06-14 23:15:51 +02:00 · 2023-06-14 23:15:51 +02:00 · 2023-04-26 13:24:50 +02:00 · 2023-04-12 14:14:37 +02:00 · 2023-01-19 03:57:19 +00:00 · 2023-01-12 15:50:47 +01:00
5 changed files with 28 additions and 9 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,5 @@
 /frr-8.4.tar.gz
 /frr-8.4.1.tar.gz
 /frr-8.4.2.tar.gz
+/frr-8.5.tar.gz
+/frr-8.5.1.tar.gz
--- a/frr.fc
+++ b/frr.fc
@@ -1,4 +1,4 @@
-/usr/libexec/frr(/.*)?              gen_context(system_u:object_r:frr_exec_t,s0)
+/usr/libexec/frr/(.*)?              gen_context(system_u:object_r:frr_exec_t,s0)

 /usr/lib/systemd/system/frr.*   gen_context(system_u:object_r:frr_unit_file_t,s0)

@@ -21,6 +21,8 @@
 /var/lock/subsys/ripngd     --  gen_context(system_u:object_r:frr_lock_t,s0)
 /var/lock/subsys/staticd    --  gen_context(system_u:object_r:frr_lock_t,s0)
 /var/lock/subsys/zebra      --  gen_context(system_u:object_r:frr_lock_t,s0)
+/var/lock/subsys/vrrpd      --  gen_context(system_u:object_r:frr_lock_t,s0)
+/var/lock/subsys/pathd      --  gen_context(system_u:object_r:frr_lock_t,s0)

 /var/run/frr(/.*)?              gen_context(system_u:object_r:frr_var_run_t,s0)

--- a/frr.spec
+++ b/frr.spec
@@ -8,7 +8,7 @@
 %bcond_without selinux

 Name:           frr
-Version:        8.4.2
+Version:        8.5.1
 Release:        1%{?dist}
 Summary:        Routing daemon
 License:        GPLv2+
@@ -270,6 +270,15 @@ rm tests/lib/*grpc*
 %endif

 %changelog
+* Wed Apr 26 2023 Michal Ruprich <mruprich@redhat.com> - 8.5.1-1
+- New version 8.5.1
+
+* Wed Apr 12 2023 Michal Ruprich <mruprich@redhat.com> - 8.5-1
+- New version 8.5
+
+* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 8.4.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
+
 * Thu Jan 12 2023 Michal Ruprich <mruprich@redhat.com> - 8.4.2-1
 - New version 8.4.2

@@ -280,15 +289,12 @@ rm tests/lib/*grpc*
 * Thu Nov 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.4-1
 - New version 8.4

-* Thu Sep 22 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
- Rebuilding because of weird abseil-cpp version mismatch in the compose (rhbz #2128691)
-
 * Fri Sep 16 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-5
 - Adding SELinux rule to enable zebra to write to sysctl_net_t
 - Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t

 * Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-4
- Adding a couple of rules to tackle AVCs
+- Fixing an error in post scriptlet

 * Fri Sep 09 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-3
 - Resolves: #2124254 - frr can no longer update routes
@@ -300,6 +306,15 @@ rm tests/lib/*grpc*
 * Tue Sep 06 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
 - New version 8.3.1

+* Mon Aug 22 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-10
+- Rebuilding for new abseil-cpp and grpc updates
+
+* Wed Aug 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-9
+- Adding vrrpd and pathd as daemons to the policy
+
+* Wed Aug 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-8
+- Finalizing SELinux policy
+
 * Tue Aug 02 2022 Michal Ruprich <mruprich@redhat.com> - 8.2.2-7
 - Fixing wrong path for vtysh in frr.fc

--- a/frr.te
+++ b/frr.te
@@ -83,8 +83,8 @@ corenet_tcp_bind_bgp_port(frr_t)
 corenet_tcp_connect_bgp_port(frr_t)
 corenet_tcp_bind_cmadmin_port(frr_t)
 corenet_udp_bind_cmadmin_port(frr_t)
-corenet_tcp_bind_generic_port(frr_t)
 corenet_tcp_bind_firepower_port(frr_t)
+corenet_tcp_bind_generic_port(frr_t)
 corenet_tcp_bind_priority_e_com_port(frr_t)
 corenet_udp_bind_router_port(frr_t)
 corenet_tcp_bind_qpasa_agent_port(frr_t)
@@ -116,5 +116,5 @@ optional_policy(`
 ')

 optional_policy(`
-        userdom_admin_home_dir_filetrans(frr_t, frr_conf_t, file, ".history_frr")
+	userdom_admin_home_dir_filetrans(frr_t, frr_conf_t, file, ".history_frr")
 ')
--- a/2
+++ b/2
@@ -1,2 +1,2 @@
-SHA512 (frr-8.4.2.tar.gz) = 1079bf3f597cc21ccbc37c5617cfb95f6e066de2a726a9b8ffb5825f92af3049d0e19ef4e9944a9e11dabc4309c56f0ab22e4c9188f5008ebcea47e0428f3ff0
+SHA512 (frr-8.5.1.tar.gz) = 90da4900a178dbe0ddd763e3e39734cf720fe255a4b56563b8f9200276c5e01668d0cf7bae399b25dd4753d574866a87200d1fcf2d03a7421a81104129abd29c
 SHA512 (remove-babeld-ldpd.sh) = a5bf67a3722cb20d43cef1dac28f839db68df73a1b7d34d8438e4f9366da3b67d85c1f44281f93434e8dd8ebcb2d3dc258b77eaa5627475b7395d207f020839d
Author	SHA1	Message	Date
Zoran Peričić	a87200504a	v.ims.1 - Bump version	2023-06-14 23:15:51 +02:00
Zoran Peričić	d86181a51c	nhrp: configure strongswan vici path	2023-06-14 23:15:51 +02:00
Michal Ruprich	0c167a3dfc	New version 8.5.1	2023-04-26 13:24:50 +02:00
Michal Ruprich	1067766458	New version 8.5	2023-04-12 14:14:37 +02:00
Fedora Release Engineering	777829246b	Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>	2023-01-19 03:57:19 +00:00
Michal Ruprich	a0c4fb9063	Adding an include for fips	2023-01-12 15:50:47 +01:00
Michal Ruprich	0d70491296	New version 8.4.2	2023-01-12 12:55:39 +01:00
Michal Ruprich	1787b2810b	New version 8.4.1 Fix for rhbz #2140705	2022-11-25 18:02:48 +01:00
Michal Ruprich	d506655fff	AVC when running the reload script for FRR	2022-11-23 09:13:27 +01:00
Michal Ruprich	5301cdd961	New version 8.4	2022-11-10 09:57:42 +01:00
Michal Ruprich	3905b5274d	Adding SELinux rule to enable zebra to write to sysctl_net_t Adding SELinux rule to enable bgpd to call name_connect to bgp_port_t	2022-09-16 16:00:15 +02:00
Michal Ruprich	41a038e1d1	Fixing an error in post scriptlet	2022-09-09 19:14:38 +02:00
Michal Ruprich	a7b3783ddc	Resolves: #2124254 - frr can no longer update routes	2022-09-09 16:14:11 +02:00
Michal Ruprich	a2ffd90d49	Resolves: #2124253 - SELinux is preventing zebra from setattr access on the directory frr Better handling FRR files during upgrade	2022-09-07 11:28:59 +02:00
Michal Ruprich	db09f8886c	Adding sources	2022-09-06 12:48:05 +02:00
Michal Ruprich	6e63bc125e	New version 8.3.1	2022-09-06 12:38:38 +02:00
Michal Ruprich	b2c9845f51	Rebuilding for new abseil-cpp and grpc updates	2022-08-22 14:09:39 +02:00
Zdenek Pytela	16d43cc08d	Allow frr daemons bind generic sockets to tcp ports The vrrpd and pathd daemons need to bind to ports 2619/tcp and 2621/tcp. This commit can be reverted if the inter-process communication changes to using unix sockets in the future. Addresses the following AVC denial: type=PROCTITLE msg=audit(08/10/2022 05:32:53.905:257) : proctitle=/usr/libexec/frr/pathd -d -F traditional -A 127.0.0.1 type=AVC msg=audit(08/10/2022 05:32:53.905:257) : avc: denied { name_bind } for pid=8625 comm=pathd src=2621 scontext=system_u:system_r:frr_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0 type=SYSCALL msg=audit(08/10/2022 05:32:53.905:257) : arch=x86_64 syscall=bind success=no exit=EACCES(Permission denied) a0=0xc a1=0x55e3ba44fdd0 a2=0x10 a3=0x7fff610c2bd4 items=0 ppid=8623 pid=8625 auid=unset uid=geoclue gid=flatpak euid=geoclue suid=geoclue fsuid=geoclue egid=flatpak sgid=flatpak fsgid=flatpak tty=(none) ses=unset comm=pathd exe=/usr/libexec/frr/pathd subj=system_u:system_r:frr_t:s0 key=(null) type=SOCKADDR msg=audit(08/10/2022 05:32:53.905:257) : saddr={ saddr_fam=inet laddr=127.0.0.1 lport=2621 } Resolves: rhbz#2117262	2022-08-19 10:30:23 +00:00
Michal Ruprich	d0157c4cbf	Adding vrrpd and pathd to the policy	2022-08-10 12:03:08 +02:00
Michal Ruprich	40f863faec	Finalizing SELinux policy	2022-08-10 10:36:08 +02:00
Zdenek Pytela	1e7608b86e	Allow frr_t create /root/.history_frr with a private type The file can be created when the frr service starts, so a file transition is needed to be defined in the policy.	2022-08-10 10:09:25 +02:00