As resolved in the Foundation Trustees meeting 2017/10/22, and the
Licensing team, Fedora's Hobbled-EC patchset is added for USE=bindist in
OpenSSL 1.1 series.
This provides the subset of Elliptic Curve Cryptography that Fedora &
RedHat believe to be free of patent concerns at this time, and use for
their RPMs.
The patch disables or modifies:
- some Elliptic Curves
- some EC methods
- code that interacts the above
OpenSSL 1.1 is still in package.mask at this time, and a 1.0 version of
this patch will follow soon.
Upstream: https://src.fedoraproject.org/cgit/rpms/openssl.git
Bug: https://bugs.gentoo.org/531540
Package-Manager: Portage-2.3.8, Repoman-2.3.3
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
The monitoring-plugins build system has automagic support for radius
that can be disabled via the --without-radius flag. Doing so allows
(or prevents) the check_radius plugin from being built. This new
revision adds "radius" to IUSE for monitoring-plugins, and builds
check_radius (and pulls in its dependencies) only with USE=radius.
Thanks to Martin Samek who noticed the missing flag.
Closes: https://bugs.gentoo.org/634582
Package-Manager: Portage-2.3.8, Repoman-2.3.3
The nagios-plugins build system has automagic support for radius that
can be disabled via the --without-radius flag. Doing so allows (or
prevents) the check_radius plugin from being built. This new revision
adds "radius" to IUSE for nagios-plugins, and builds check_radius (and
pulls in its dependencies) only when USE=radius is set.
Thanks to Martin Samek who noticed the missing flag.
Bug: https://bugs.gentoo.org/634582
Package-Manager: Portage-2.3.8, Repoman-2.3.3
"Unescaped left brace in regex is illegal here in regex", deprecated
for some time and now a fatal error
Closes: https://bugs.gentoo.org/634948
Package-Manager: Portage-2.3.12, Repoman-2.3.3
Before the change build log looks like:
cc -I. ... -g -O2 -pipe -fdiagnostics-show-option -frecord-gcc-switches -fPIC -I. -c main.c
After the change:
x86_64-pc-linux-gnu-gcc -I. ... -g -O2 -pipe -fdiagnostics-show-option -frecord-gcc-switches -fPIC -I. -c main.c
See https://devmanual.gentoo.org/ebuild-writing/functions/src_compile/building/
for more details.
Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
In previous revisions, the init script for arpwatch called "chown" as
root on a location under /var/lib/arpwatch -- a path that is controlled
by the "arpwatch" user per its ebuild. That could be exploited by the
"arpwatch" user to take control of root-owned files.
This new revision comes with a new init script and conf.d file that
completely rework the way instances are created and run. The
"arpwatch" user is hard-coded, because as was mentioned, the ebuild
sets some important permissions for that user. Since it is not
possible to change that user, the need for "chown" is eliminated.
Separate instances are now created by symlinking the init script (like
our network interface scripts), rather than by enumerating them in a
single arpwatch init script. Upgraders will want to review their
configurations.
Bug: https://bugs.gentoo.org/602552
Package-Manager: Portage-2.3.8, Repoman-2.3.3
Tobias Klausmann
Sergei Trofimovich
Thomas Deutschmann
Felix Janda
Robin H. Johnson
Andreas K. Hüttel
Jonas Stein
Michael Orlitzky
Tupone Alfredo
Bernard Cafarelli
Patrick Lauer