1 |
# $Id: e-smith-base.spec,v 1.24 2013/03/16 16:15:40 slords Exp $ |
# $Id: e-smith-base.spec,v 1.98 2016/01/17 21:30:12 vip-ire Exp $ |
2 |
|
|
3 |
Summary: e-smith server and gateway - base module |
Summary: e-smith server and gateway - base module |
4 |
%define name e-smith-base |
%define name e-smith-base |
5 |
Name: %{name} |
Name: %{name} |
6 |
%define version 5.4.0 |
%define version 5.6.0 |
7 |
%define release 24 |
%define release 27 |
8 |
Version: %{version} |
Version: %{version} |
9 |
Release: %{release}%{?dist} |
Release: %{release}%{?dist} |
10 |
License: GPL |
License: GPL |
11 |
Group: Networking/Daemons |
Group: Networking/Daemons |
12 |
Source: %{name}-%{version}.tar.xz |
Source: %{name}-%{version}.tar.xz |
13 |
Patch0: e-smith-base-5.4.0-runlevel_4.patch |
Patch1: e-smith-base-5.6.0-console.patch |
14 |
Patch1: e-smith-base-5.4.0-local_event.patch |
Patch2: e-smith-base-5.6.0_added_verification_of_pptp_clients_against_dhcp.patch |
15 |
Patch2: e-smith-base-5.4.0-noapmd.patch |
Patch3: e-smith-base-5.6.0_console_verification_dhcp_vs_pptp.patch |
16 |
Patch3: e-smith-base-5.4.0-rsysloglink.patch |
Patch4: e-smith-base-5.6.0_remove_10runparts_for_anacron_compatibility.patch |
17 |
Patch4: e-smith-base-5.4.0-optimize_user_modify_unix.patch |
Patch5: e-smith-base-5.6.0-mdevent.patch |
18 |
Patch5: e-smith-base-5.4.0-user_modify_in_bootstrap.patch |
Patch6: e-smith-base-5.6.0-pppoe_after_post_upgrade.patch |
19 |
Patch6: e-smith-base-5.4.0-pppoeMlimit.patch |
Patch7: e-smith-base-5.6.0-symlink_udev-post.patch |
20 |
Patch7: e-smith-base-5.4.0-microcode.patch |
Patch8: e-smith-base-5.6.0-detect_conf_change_single_nic.patch |
21 |
Patch8: e-smith-base-5.4.0-PostUpgradeRestore.patch |
Patch9: e-smith-base-5.6.0-service_runlevel_4.patch |
22 |
Patch9: e-smith-base-5.4.0-inittab.patch |
Patch10: e-smith-base-5.6.0-ensure_apache_alias_www.patch |
23 |
Patch10: e-smith-base-5.4.0-pwauth.patch |
Patch11: e-smith-base-5.6.0-specify_dhcpd_configuration_file.patch |
24 |
Patch11: e-smith-base-5.4.0-uidgid.patch |
Patch12: e-smith-base-5.6.0-default_to_no_on_quit_console_app.patch |
25 |
Patch12: e-smith-base-5.4.0-fixwww.patch |
Patch13: e-smith-base-5.6.0-only_reset_access_for_private_server.patch |
26 |
Patch13: e-smith-base-5.4.0-SystemName.patch |
Patch14: e-smith-base-5.6.0-only_fire_ip_change_on_wan.patch |
27 |
Patch14: e-smith-base-5.4.0-existing_hwaddr.patch |
Patch15: e-smith-base-5.6.0-dummy_nic.patch |
28 |
Patch15: e-smith-base-5.4.0-remove_syslogd_templates.patch |
Patch16: e-smith-base-5.6.0-disable_selinux.patch |
29 |
Patch16: e-smith-base-5.4.0-rsyslog_templates.patch |
Patch17: e-smith-base-5.6.0_sha256_cert.patch |
30 |
Patch17: e-smith-base-5.4.0-rsyslog_db.patch |
Patch18: e-smith-base-5.6.0-update_mime_types.patch |
31 |
Patch18: e-smith-base-5.4.0-rsyslog.conf.patch |
Patch19: e-smith-base-5.6.0-ssl_update.patch |
32 |
Patch19: e-smith-base-5.4.0-rate_limit.patch |
Patch20: e-smith-base-5.6.0-reload_ssl_when_renew_cert.patch |
33 |
Patch20: e-smith-base-5.4.0-no_modprobe.patch |
Patch21: e-smith-base-5.6.0-display_http_server_manager.patch |
|
Patch21: e-smith-base-5.4.0-more_rsyslog.patch |
|
|
Patch22: e-smith-base-5.4.0-ConsoleBackupText.patch |
|
34 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
35 |
BuildArch: noarch |
BuildArch: noarch |
36 |
Requires: pwauth |
Requires: pwauth |
46 |
Requires: perl(Net::IPv4Addr) |
Requires: perl(Net::IPv4Addr) |
47 |
Requires: /usr/sbin/irqbalance |
Requires: /usr/sbin/irqbalance |
48 |
Requires: /usr/sbin/cpuspeed |
Requires: /usr/sbin/cpuspeed |
|
Requires: /sbin/microcode_ctl |
|
49 |
Requires: /usr/sbin/smartd |
Requires: /usr/sbin/smartd |
50 |
Requires: dbus |
Requires: dbus |
51 |
Requires: hal |
Requires: hal |
57 |
Requires: mdadm |
Requires: mdadm |
58 |
Requires: pv |
Requires: pv |
59 |
Requires: pam_abl |
Requires: pam_abl |
60 |
|
Requires: diald |
61 |
Requires: /usr/bin/passwd |
Requires: /usr/bin/passwd |
62 |
Requires: nss-pam-ldapd |
Requires: nss-pam-ldapd |
63 |
Obsoletes: nss_ldap < 254 |
Obsoletes: nss_ldap < 254 |
78 |
e-smith server and gateway software - base module. |
e-smith server and gateway software - base module. |
79 |
|
|
80 |
%changelog |
%changelog |
81 |
|
* Sun Jan 31 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-27.sme |
82 |
|
- Correctly display http URL to the server-manager in the console [SME: 9163] |
83 |
|
|
84 |
|
* Sun Jan 17 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-26.sme |
85 |
|
- Fire ssl-update event when default cert is renewed [SME: 2257] |
86 |
|
|
87 |
|
* Sun Jan 17 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-25.sme |
88 |
|
- Expand /home/e-smith/ssl.pem/pem during ssl-update [SME: 9152] |
89 |
|
|
90 |
|
* Tue Sep 30 2015 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-24.sme |
91 |
|
- Update /etc/mime.types templates [SME: 9078] |
92 |
|
|
93 |
|
* Mon Aug 24 2015 Charlie Brady <charlie_brady@mitel.com> 5.6.0-23.sme |
94 |
|
- Use sha256 algorithm for signature of SSL cert. [SME: 8615] |
95 |
|
|
96 |
|
* Thu Jun 25 2015 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-22.sme |
97 |
|
- Fix including /etc/selinux directory [SME: 8954] |
98 |
|
|
99 |
|
* Thu Jun 25 2015 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-21.sme |
100 |
|
- Add templates for /etc/selinux/config [SME: 8954] |
101 |
|
|
102 |
|
* Thu Jun 11 2015 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-20.sme |
103 |
|
- Add dummy NIC support as InternalInterface [SME: 7200] |
104 |
|
|
105 |
|
* Tue Mar 31 2015 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-19.sme |
106 |
|
- Only fire the ip-change event when IP is assigned to WAN nic |
107 |
|
(Code by Charlie Brady and John Crisp) [SME: 8896] |
108 |
|
|
109 |
|
* Tue Mar 31 2015 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-18.sme |
110 |
|
- Only reset service access when switching to or from private server mode |
111 |
|
(Code by Charlie Brady) [SME: 8879] |
112 |
|
|
113 |
|
* Sun Jan 11 2015 Stephane de Labrusse <stephdl@de-labrusse.fr> 5.6.0-17.sme |
114 |
|
- When quiting the console app with unsaved changes set the default selected |
115 |
|
- answer to NO Hsing-Foo Wang <hsingfoo@gmail.com> [SME: 8616] |
116 |
|
|
117 |
|
* Tue Jan 6 2015 Stephane de Labrusse <stephdl@de-labrusse.fr> 5.6.0-16.sme |
118 |
|
- Added a comment to specify the real configuration file of dhcpd [SME: 8386] |
119 |
|
|
120 |
|
* Sat Jan 3 2015 Stephane de Labrusse <stephdl@de-labrusse.fr> 5.6.0-15.sme |
121 |
|
- Modified the patch of daniel e-smith-base-5.6.0-ensure_apache_alias_www.patch |
122 |
|
- Ensure www group exists and that apache is an alias of www [SME: 8549] |
123 |
|
|
124 |
|
* Sun Nov 2 2014 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-13.sme |
125 |
|
- Ensure www group exists and that apache is an alias of www [SME: 8549] |
126 |
|
|
127 |
|
* Sun Nov 2 2014 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-12.sme |
128 |
|
- Check were running runlevel 4, not 7 in service wrapper [SME: 8637] |
129 |
|
|
130 |
|
* Sun Sep 21 2014 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-11.sme |
131 |
|
- Correctly update NIC configuration on single NIC systems [SME: 8561] |
132 |
|
|
133 |
|
* Wed Sep 10 2014 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-10.sme |
134 |
|
- Symlink udev-post service in rc7 [SME: 8542] |
135 |
|
|
136 |
|
* Fri Jul 25 2014 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-9.sme |
137 |
|
- Fix PPPoE after a post-upgrade [SME: 8493] |
138 |
|
|
139 |
|
* Thu Jul 3 2014 Ian Wells <esmith@wellsi.com> 5.6.0-8.sme |
140 |
|
- Remove dependency on microcode_ctl [SME: 8468] |
141 |
|
|
142 |
|
* Sun May 11 2014 stephane de Labrusse <stephdl@de-labrusse.fr> 5.6.0-7.sme |
143 |
|
- Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey |
144 |
|
- [SME: 7748] |
145 |
|
|
146 |
|
* Tue May 06 2014 stephane de Labrusse <stephdl@de-labrusse.fr> 5.6.0-6.sme |
147 |
|
- remove /etc/e-smith/templates/etc/crontab/10runparts for anacron compatibility |
148 |
|
- [SME: 8364] |
149 |
|
|
150 |
|
* Wed Apr 23 2014 stephane de Labrusse <stephdl@de-labrusse.fr> 5.6.0-5.sme |
151 |
|
- Add a verification in the console of number of pptp clients against ip allowed in dhcpd |
152 |
|
- [SME: 8312] |
153 |
|
|
154 |
|
* Sun Apr 6 2014 stephane de Labrusse <stephdl@de-labrusse.fr> 5.6.0-4.sme |
155 |
|
- Add a verification in remoteaccess panel of number of pptp clients against ip allowed in dhcpd |
156 |
|
- [SME: 8312] |
157 |
|
|
158 |
|
* Sat Apr 5 2014 Ian Wells <esmith@wellsi.com> 5.6.0-3.sme |
159 |
|
- Ensure console is run with taint checking [SME: 8311] |
160 |
|
- Non-functional perl::Critic changes. |
161 |
|
|
162 |
|
* Sun Mar 23 2014 Ian Wells <esmith@wellsi.com> 5.6.0-2.sme |
163 |
|
- Roll new stream to really remove obsolete images [SME: 7962] |
164 |
|
|
165 |
|
* Sun Mar 23 2014 Ian Wells <esmith@wellsi.com> 5.6.0-1.sme |
166 |
|
- Roll new stream to remove obsolete images [SME: 7962] |
167 |
|
|
168 |
|
* Thu Mar 20 2014 Ian Wells <esmith@wellsi.com> 5.4.0-62.sme |
169 |
|
- Move console backup to e-smith-backup [SME: 3324] |
170 |
|
|
171 |
|
* Sun Mar 16 2014 Ian Wells <esmith@wellsi.com> 5.4.0-61.sme |
172 |
|
- Remove support.pl from e-smith-base and move to smeserver-support [SME: 8264] |
173 |
|
|
174 |
|
* Sat Mar 15 2014 Ian Wells <esmith@wellsi.com> 5.4.0-60.sme |
175 |
|
- Console restore should reboot [SME: 8259] |
176 |
|
|
177 |
|
* Sat Mar 8 2014 Ian Wells <esmith@wellsi.com> 5.4.0-59.sme |
178 |
|
- Boostrap console should only offer restore if no password set [SME: 8259] |
179 |
|
|
180 |
|
* Thu Mar 6 2014 Ian Wells <esmith@wellsi.com> 5.4.0-58.sme |
181 |
|
- Add restore backup as a console item for freshly installed servers [SME: 8259] |
182 |
|
- Non-code changes to perform_restore.pm |
183 |
|
|
184 |
|
* Sun Feb 16 2014 Ian Wells <esmith@wellsi.com> 5.4.0-57.sme |
185 |
|
- Refer to removable media not CDROM in console restore [SME: 8214] |
186 |
|
|
187 |
|
* Tue Jan 28 2014 Ian Wells <esmith@wellsi.com> 5.4.0-56.sme |
188 |
|
- Remove insecure SSL ciphers [SME: 8138] |
189 |
|
|
190 |
|
* Sun Dec 15 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-55.sme |
191 |
|
- Restart rsyslog in logrotate event [SME: 8065] |
192 |
|
|
193 |
|
* Sun Dec 15 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-54.sme |
194 |
|
- Set smb ServerName if unset (patch from Ian Wells) [SME: 8030] |
195 |
|
|
196 |
|
* Mon Dec 9 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-53.sme |
197 |
|
- Don't reload init in bootstrap-console-save and console-save [SME: 8050] |
198 |
|
|
199 |
|
* Mon Dec 9 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-52.sme |
200 |
|
- Re-add missing templates metadata for bond0 [SME: 7990] |
201 |
|
|
202 |
|
* Sat Nov 30 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-51.sme |
203 |
|
- Load the bonding module if NIC bonding is enabled [SME: 7996] |
204 |
|
|
205 |
|
* Sat Nov 30 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-50.sme |
206 |
|
- Define the udev-post service in the DB [SME: 7992] |
207 |
|
|
208 |
|
* Sat Nov 30 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-49.sme |
209 |
|
- Remove the "swap interface" feature [SME: 7993] |
210 |
|
|
211 |
|
* Sat Nov 30 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-48.sme |
212 |
|
- Do not hardcode NIC names to eth0 and eth1 [SME: 7990] |
213 |
|
- Remove obsolete VLAN code [SME: 7994] |
214 |
|
|
215 |
|
* Sat Nov 30 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-47.sme |
216 |
|
- Remove HWAddress prop from interfaces [SME: 7991] |
217 |
|
|
218 |
|
* Thu Nov 14 2013 Chris Burnat <devlist@burnat.com> 5.4.0-46.sme |
219 |
|
- Fix add_new_disk_to_raid1 (codes by Charlie Brady - patch by Terje Edseth) |
220 |
|
[SME: 7960] |
221 |
|
|
222 |
|
* Wed Oct 30 2013 Charlie Brady <charlie_brady@mitel.com> 5.4.0-45.sme |
223 |
|
- Fix parsing issues with "manage RAID" menu option in the console. |
224 |
|
[SME: 7953] |
225 |
|
|
226 |
|
* Mon Sep 30 2013 John H. Bennett III <bennettj@johnbennettservices.com> 5.4.0-44.sme |
227 |
|
- Patch to correct issue with not being able to access a password protected |
228 |
|
ibay [SME: 7794] |
229 |
|
|
230 |
|
* Sun Jul 7 2013 Ian Wells <esmith@wellsi.com> 5.4.0-43.sme |
231 |
|
- Improve text in console backup for success and failure [SME: 7770] |
232 |
|
|
233 |
|
* Fri Jul 5 2013 Ian Wells <esmith@wellsi.com> 5.4.0-42.sme |
234 |
|
- Console USB Backup, allow user setting of compression level [SME: 7745] |
235 |
|
Compression level of the console backup is now -6 by default |
236 |
|
|
237 |
|
* Fri Jul 5 2013 Ian Wells <esmith@wellsi.com> 5.4.0-41.sme |
238 |
|
- Update ServerName (Samba netbios name) when SystemName is updated [SME: 7746] |
239 |
|
|
240 |
|
* Fri Jul 5 2013 Ian Wells <esmith@wellsi.com> 5.4.0-40.sme |
241 |
|
- Remove old System Name from the Hosts DB, by Charlie Brady [SME: 7747] |
242 |
|
|
243 |
|
* Sun Jun 23 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-39.sme |
244 |
|
- Fix group creation when LDAP auth is enabled [SME: 7672] |
245 |
|
|
246 |
|
* Sat Jun 8 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-38.sme |
247 |
|
- Disable IPv6 on a default install (patch by Shad Lords) [SME: 7531] |
248 |
|
|
249 |
|
* Sat Jun 8 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-37.sme |
250 |
|
- Continue escaping control chars in rsyslog, just replace LF with space [SME: 7662] |
251 |
|
|
252 |
|
* Fri Jun 7 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-36.sme |
253 |
|
- Don't escape control characters in rsyslog [SME: 7662] |
254 |
|
|
255 |
|
* Thu Jun 6 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-35.sme |
256 |
|
- Use UTF-8 in the console [SME: 7591] |
257 |
|
|
258 |
|
* Sun May 19 2013 Ian Wells <esmith@wellsi.com> 5.4.0-34.sme |
259 |
|
- Remove redundant parts of init-accounts [SME: 3550] |
260 |
|
|
261 |
|
* Sat May 18 2013 chris burnat <devlist@burnat.com> 5.4.0-33.sme |
262 |
|
- Add_template_to_ssl.pem, codes by JP Pialasse [SME: 7601] |
263 |
|
|
264 |
|
* Tue May 07 2013 Ian Wells <esmith@wellsi.com> 5.4.0-32.sme |
265 |
|
- Require diald [SME: 7279] |
266 |
|
|
267 |
|
* Mon May 06 2013 Ian Wells <esmith@wellsi.com> 5.4.0-31.sme |
268 |
|
- Removal of rc.e-smith now functionality is in e-smith-service [SME: 7267] |
269 |
|
|
270 |
|
* Sun May 05 2013 Ian Wells <esmith@wellsi.com> 5.4.0-30.sme |
271 |
|
- Revert last change. [SME: 7227] |
272 |
|
|
273 |
|
* Sat May 04 2013 Ian Wells <esmith@wellsi.com> 5.4.0-29.sme |
274 |
|
- Suppress template text from /etc/inittab [SME: 7227] |
275 |
|
|
276 |
|
* Mon Apr 22 2013 Ian Wells <esmith@wellsi.com> 5.4.0-28.sme |
277 |
|
- Replacement of rc.e-smith by moving code into e-smith-service [SME: 7267] |
278 |
|
|
279 |
|
* Mon Apr 21 2013 chris burnat <devlist@burnat.com> 5.4.0-27.sme |
280 |
|
- Fix the way '.' works in bash [SME: 7532] |
281 |
|
|
282 |
|
* Fri Mar 22 2013 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-26.sme |
283 |
|
- rename /etc/ldap.conf to /etc/pam_ldap.conf (and same for .secret) [SME: 7289] |
284 |
|
|
285 |
|
* Sat Mar 16 2013 Ian Wells <esmith@wellsi.com> 5.4.0-25.sme |
286 |
|
- Always define InternalInterface NICBonding [SME: 7498] |
287 |
|
|
288 |
* Sat Mar 16 2013 Terry Fage <trex1512@yahoo.com.au> 5.4.0-24.sme |
* Sat Mar 16 2013 Terry Fage <trex1512@yahoo.com.au> 5.4.0-24.sme |
289 |
- In the console refer to removable media instead of USB disk [SME: 7414] |
- In the console refer to removable media instead of USB disk [SME: 7414] |
290 |
|
|
1785 |
|
|
1786 |
%prep |
%prep |
1787 |
%setup |
%setup |
|
%patch0 -p1 |
|
1788 |
%patch1 -p1 |
%patch1 -p1 |
1789 |
%patch2 -p1 |
%patch2 -p1 |
1790 |
%patch3 -p1 |
%patch3 -p1 |
1806 |
%patch19 -p1 |
%patch19 -p1 |
1807 |
%patch20 -p1 |
%patch20 -p1 |
1808 |
%patch21 -p1 |
%patch21 -p1 |
|
%patch22 -p1 |
|
1809 |
|
|
1810 |
%pre |
%pre |
|
/sbin/e-smith/create-system-user smelog 1002 \ |
|
|
'smelog log user' /var/log/smelog /bin/false |
|
1811 |
/sbin/e-smith/create-system-user smelastsys 2999 \ |
/sbin/e-smith/create-system-user smelastsys 2999 \ |
1812 |
'sme last system user marker' /tmp /bin/false |
'sme last system user marker' /tmp /bin/false |
1813 |
|
|
1832 |
|
|
1833 |
%install |
%install |
1834 |
rm -rf $RPM_BUILD_ROOT |
rm -rf $RPM_BUILD_ROOT |
1835 |
|
mkdir -p $RPM_BUILD_ROOT/etc/selinux |
1836 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
1837 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
1838 |
--file /etc/cron.daily/conf-mod_ssl 'attr(0544,root,root)' \ |
--file /etc/cron.daily/conf-mod_ssl 'attr(0544,root,root)' \ |
1884 |
--dir /var/log/ippp 'attr(2750,smelog,smelog)' \ |
--dir /var/log/ippp 'attr(2750,smelog,smelog)' \ |
1885 |
--dir /etc/e-smith/skel/user/.ssh 'attr(0700,root,root)' \ |
--dir /etc/e-smith/skel/user/.ssh 'attr(0700,root,root)' \ |
1886 |
--file /var/service/local/run 'attr(0750,root,root)' \ |
--file /var/service/local/run 'attr(0750,root,root)' \ |
1887 |
|
--file /etc/sysconfig/modules/dummy.modules 'attr(0755,root,root)' \ |
1888 |
|
--dir /etc/selinux 'attr(0755,root,root)' \ |
1889 |
> %{name}-%{version}-%{release}-filelist |
> %{name}-%{version}-%{release}-filelist |
1890 |
|
|
1891 |
mkdir -p $RPM_BUILD_ROOT/home/e-smith/db |
mkdir -p $RPM_BUILD_ROOT/home/e-smith/db |