diff --git a/strongswan-5.8.4-runtime-dir.patch b/strongswan-5.8.4-runtime-dir.patch new file mode 100644 index 0000000..a577161 --- /dev/null +++ b/strongswan-5.8.4-runtime-dir.patch @@ -0,0 +1,24 @@ +diff -ur strongswan-5.8.4.orig/init/systemd/strongswan.service.in strongswan-5.8.4/init/systemd/strongswan.service.in +--- strongswan-5.8.4.orig/init/systemd/strongswan.service.in 2019-08-27 16:26:53.000000000 +0300 ++++ strongswan-5.8.4/init/systemd/strongswan.service.in 2020-04-12 12:05:57.383596844 +0300 +@@ -9,6 +9,8 @@ + ExecReload=@SBINDIR@/swanctl --reload + ExecReload=@SBINDIR@/swanctl --load-all --noprompt + Restart=on-abnormal ++RuntimeDirectory=strongswan ++RuntimeDirectoryMode=0755 + + [Install] + WantedBy=multi-user.target +diff -ur strongswan-5.8.4.orig/init/systemd-starter/strongswan-starter.service.in strongswan-5.8.4/init/systemd-starter/strongswan-starter.service.in +--- strongswan-5.8.4.orig/init/systemd-starter/strongswan-starter.service.in 2019-08-27 16:26:53.000000000 +0300 ++++ strongswan-5.8.4/init/systemd-starter/strongswan-starter.service.in 2020-04-12 12:05:51.810559482 +0300 +@@ -6,6 +6,8 @@ + ExecStart=@SBINDIR@/@IPSEC_SCRIPT@ start --nofork + StandardOutput=syslog + Restart=on-abnormal ++RuntimeDirectory=strongswan ++RuntimeDirectoryMode=0755 + + [Install] + WantedBy=multi-user.target diff --git a/strongswan.spec b/strongswan.spec index 676ff24..79ef071 100644 --- a/strongswan.spec +++ b/strongswan.spec @@ -3,12 +3,13 @@ Name: strongswan Version: 5.8.4 -Release: 1%{?dist} +Release: 2%{?dist} Summary: An OpenSource IPsec-based VPN and TNC solution License: GPLv2+ URL: http://www.strongswan.org/ Source0: http://download.strongswan.org/%{name}-%{version}%{?prerelease}.tar.bz2 -Source1: tmpfiles-strongswan.conf +Source1: tmpfiles-strongswan.conf +Patch0: strongswan-5.8.4-runtime-dir.patch Patch1: strongswan-5.6.0-uintptr_t.patch Patch3: strongswan-5.6.2-CVE-2018-5388.patch @@ -79,6 +80,7 @@ PT-TLS to support TNC over TLS. %prep %setup -q -n %{name}-%{version}%{?prerelease} +%patch0 -p1 %patch1 -p1 %patch3 -p1 @@ -270,6 +272,9 @@ install -D -m 0644 %{SOURCE1} %{buildroot}/%{_tmpfilesdir}/strongswan.conf %{_libexecdir}/strongswan/charon-nm %changelog +* Sun Apr 12 2020 Mikhail Zabaluev - 5.8.4-2 +- Patch0: Add RuntimeDirectory options to service files (#1789263) + * Sun Apr 12 2020 Mikhail Zabaluev - 5.8.4-1 - Updated to 5.8.4 - Patch4 has been applied upstream