230 lines
7.4 KiB
RPMSpec
230 lines
7.4 KiB
RPMSpec
Summary: A secure replacement for inetd
|
|
Name: xinetd
|
|
Version: 2.3.14
|
|
Release: 22%{?dist}
|
|
License: xinetd
|
|
Group: System Environment/Daemons
|
|
Epoch: 2
|
|
URL: http://www.xinetd.org
|
|
Source: http://www.xinetd.org/xinetd-%{version}.tar.gz
|
|
Source1: xinetd.init
|
|
Source3: xinetd.sysconf
|
|
Patch0: xinetd-2.3.11-pie.patch
|
|
Patch1: xinetd-2.3.12-tcp_rpc.patch
|
|
Patch2: xinetd-2.3.14-label.patch
|
|
Patch3: xinetd-2.3.14-contextconf.patch
|
|
Patch4: xinetd-2.3.14-bind-ipv6.patch
|
|
Patch5: xinetd-2.3.14-ssize_t.patch
|
|
Patch6: xinetd-2.3.14-man-section.patch
|
|
Patch7: xinetd-2.3.11-PIE.patch
|
|
Patch8: xinetd-2.3.14-ident-bind.patch
|
|
Patch9: xinetd-2.3.14-readable-debuginfo.patch
|
|
|
|
BuildRequires: autoconf, automake
|
|
BuildRequires: libselinux-devel >= 1.30
|
|
Requires: /sbin/chkconfig /etc/init.d /sbin/service
|
|
%{!?tcp_wrappers:BuildRequires: tcp_wrappers-devel}
|
|
Requires: filesystem >= 2.0.1, initscripts, setup, fileutils
|
|
Provides: inetd
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-root
|
|
|
|
%description
|
|
Xinetd is a secure replacement for inetd, the Internet services
|
|
daemon. Xinetd provides access control for all services based on the
|
|
address of the remote host and/or on time of access and can prevent
|
|
denial-of-access attacks. Xinetd provides extensive logging, has no
|
|
limit on the number of server arguments, and lets you bind specific
|
|
services to specific IP addresses on your host machine. Each service
|
|
has its own specific configuration file for Xinetd; the files are
|
|
located in the /etc/xinetd.d directory.
|
|
|
|
%prep
|
|
%setup -q
|
|
|
|
# SPARC/SPARC64 needs -fPIE/-PIE
|
|
# This really should be detected by configure.
|
|
%ifarch sparcv9 sparc64
|
|
%patch7 -p0 -b .PIE
|
|
%else
|
|
%patch0 -p0 -b .pie
|
|
%endif
|
|
%patch1 -p1 -b .tcp_rpc
|
|
%patch2 -p1 -b .lspp
|
|
%patch3 -p1 -b .confcntx
|
|
%patch4 -p1 -b .bind
|
|
%patch5 -p1 -b .ssize_t
|
|
%patch6 -p1 -b .man-section
|
|
%patch8 -p1 -b .ident-bind
|
|
%patch9 -p1 -b .readable-debuginfo
|
|
|
|
aclocal
|
|
autoconf
|
|
|
|
%build
|
|
%configure --with-loadavg --with-inet6 %{!?tcp_wrappers:--with-libwrap} --with-labeled-networking
|
|
make
|
|
|
|
%install
|
|
rm -rf $RPM_BUILD_ROOT
|
|
mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d
|
|
mkdir -p $RPM_BUILD_ROOT/etc/xinetd.d/
|
|
# Remove unneeded service
|
|
rm -f contrib/xinetd.d/ftp-sensor
|
|
%makeinstall DAEMONDIR=$RPM_BUILD_ROOT/usr/sbin MANDIR=$RPM_BUILD_ROOT/%{_mandir}
|
|
install -m 644 contrib/xinetd.conf $RPM_BUILD_ROOT/etc
|
|
install -m 644 contrib/xinetd.d/* $RPM_BUILD_ROOT/etc/xinetd.d
|
|
install -m 755 %SOURCE1 $RPM_BUILD_ROOT/etc/rc.d/init.d/xinetd
|
|
|
|
rm -f $RPM_BUILD_ROOT/%{_mandir}/man8/itox*
|
|
rm -f $RPM_BUILD_ROOT/usr/sbin/itox
|
|
rm -f $RPM_BUILD_ROOT/%{_mandir}/man8/xconv.pl*
|
|
rm -f $RPM_BUILD_ROOT/usr/sbin/xconv.pl
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/sysconfig
|
|
install -m 644 %SOURCE3 $RPM_BUILD_ROOT/etc/sysconfig/xinetd
|
|
|
|
%clean
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
%post
|
|
if [ $1 = 1 ]; then
|
|
/sbin/chkconfig --add xinetd
|
|
fi
|
|
|
|
%preun
|
|
if [ $1 = 0 ]; then
|
|
/sbin/service xinetd stop > /dev/null 2>&1
|
|
/sbin/chkconfig --del xinetd
|
|
fi
|
|
|
|
%postun
|
|
if [ $1 -ge 1 ]; then
|
|
/sbin/service xinetd condrestart >/dev/null 2>&1
|
|
fi
|
|
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%doc INSTALL CHANGELOG COPYRIGHT README xinetd/sample.conf contrib/empty.conf
|
|
|
|
%config(noreplace) /etc/xinetd.conf
|
|
%config(noreplace) /etc/sysconfig/xinetd
|
|
/etc/rc.d/init.d/xinetd
|
|
%config(noreplace) /etc/xinetd.d/*
|
|
/usr/sbin/xinetd
|
|
%{_mandir}/*/*
|
|
|
|
%changelog
|
|
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:2.3.14-22
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
|
|
|
* Thu Sep 18 2008 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-21
|
|
- fix glitches found during package review (#226560)
|
|
- make all files in .debuginfo package readable by everyone
|
|
|
|
* Wed Jul 16 2008 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-20
|
|
- fix wrong bind() call (#448069)
|
|
|
|
* Thu May 29 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 2:2.3.14-19
|
|
- fix sparc fPIE issues
|
|
|
|
* Thu Jan 31 2008 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-18
|
|
- fixed LABEL flag (#430929)
|
|
|
|
* Wed Jan 30 2008 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-17
|
|
- fixing init scripts (#430816)
|
|
|
|
* Mon Jan 28 2008 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-16
|
|
- xinetd.log man page is in the right section now (#428812)
|
|
|
|
* Thu Sep 6 2007 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-15
|
|
- initscript made LSB compliant (#247099)
|
|
|
|
* Thu Sep 6 2007 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-14
|
|
- removed inetdconvert script, nobody is using inetd
|
|
|
|
* Wed Aug 22 2007 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-13
|
|
- updated license field
|
|
|
|
* Wed May 16 2007 Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-12
|
|
- bind IPv6 socket by default and switch to IPv4 on error
|
|
(bz#195265)
|
|
- service xinetd status returns actual status (bz#232887)
|
|
- use ssize_t instead of int (bz#211776)
|
|
|
|
* Mon Dec 4 2006 Thomas Woerner <twoerner@redhat.com> - 2:2.3.14-11
|
|
- tcp_wrappers has a new devel and libs sub package, therefore changing build
|
|
requirement for tcp_wrappers to tcp_wrappers-devel
|
|
|
|
* Fri Dec 01 2006 James Antill <james.antill@redhat.com> - 2:2.3.14-9
|
|
- Fix getpeercon() for LABELED networking MLS environments
|
|
- Resolves: rhbz#209379
|
|
|
|
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 2:2.3.14-8
|
|
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
|
|
|
|
* Wed Sep 20 2006 Steve Grubb <sgrubb@redhat.com> 2:2.3.14-7
|
|
- Revised labeled networking patch to not allow redirection
|
|
|
|
* Tue Aug 29 2006 Steve Grubb <sgrubb@redhat.com> 2:2.3.14-6
|
|
- Revised labeled networking patch again
|
|
|
|
* Thu Aug 24 2006 Steve Grubb <sgrubb@redhat.com> 2:2.3.14-5
|
|
- Revised labeled networking patch
|
|
|
|
* Wed Aug 23 2006 Steve Grubb <sgrubb@redhat.com> 2:2.3.14-4
|
|
- Added labeled networking patch
|
|
|
|
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2:2.3.14-3.1
|
|
- rebuild
|
|
|
|
* Fri Jun 16 2006 Steve Grubb <sgrubb@redhat.com> 2:2.3.14-3
|
|
- Rework spec file & use xinetd's sevice config files
|
|
|
|
* Fri Mar 24 2006 Jay Fenlason <fenlason@redhat.com> 2:2.3.14-2
|
|
- Upgrade to new upstream version. This obsoletes the -libwrap,
|
|
-rpc, -banner, -bug140084 and -gcc4 patches.
|
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2:2.3.13-6.2.1
|
|
- bump again for double-long bug on ppc(64)
|
|
|
|
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2:2.3.13-6.2
|
|
- rebuilt for new gcc4.1 snapshot and glibc changes
|
|
|
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
- rebuilt
|
|
|
|
* Thu Feb 17 2005 Jay Fenlason <fenlason@redhat.com> 2:2.3.13-6
|
|
- include new patch to allow gcc4 to compile xinetd.
|
|
|
|
* Sat Jan 8 2005 Jay Fenlason <fenlason@redhat.com> 2:2.3.13-4
|
|
- Added patch committed to upstream CVS to fix bz#140084
|
|
(error logging accidentally using one of [012] as the syslog
|
|
descriptor)
|
|
|
|
* Fri Jun 18 2004 Jay Fenlason <fenlason@redhat.com> 2:2.3.13-3
|
|
- Add patch to fix #126242: banner's don't work
|
|
|
|
* Thu Jun 17 2004 Jay Fenlason <fenlason@redhat.com>
|
|
- Remove the configuration for the no-longer-present "services" service.
|
|
Closes #126169
|
|
|
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Fri May 14 2004 Jay Fenlason <fenlason@redhat.com>
|
|
- Add patch to allow multiple rpc services to cooexist as long as they're
|
|
different program numbers or different versions.
|
|
|
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Thu Jan 29 2004 Jay Fenlason <fenlason@redhat.com> 2.3.13-1
|
|
- Upgrade to new upstream version, which obsoletes most patches.
|
|
- Add new tcp_rpc patch, to turn on the nolibwrap flag on tcp rpc services,
|
|
since libwrap cannot be used on them.
|
|
|
|
* Sun Dec 28 2003 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- use new technology to filter python dep for inetdconvert instead
|
|
of changing the -x bit on file permissions
|
|
|