#
# spec file for package rpcbind
#
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
#Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir}
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: rpcbind
Version: 0.2.4
Release: 2.1
Summary: Transport independent RPC portmapper
# Git-Web: http://git.linux-nfs.org/?p=steved/rpcbind.git;a=summary
License: BSD-4-Clause
Group: Productivity/Networking/System
URL: http://rpcbind.sourceforge.net
Source: https://downloads.sourceforge.net/sourceforge/%{name}/%{name}-%{version}.tar.bz2
Source2: sysconfig.rpcbind
Source4: pmap_set.c
Patch1: 0001-systemd-unit-files.patch
Patch31: 0031-rpcbind-manpage.patch
Patch32: svc-freeargs.patch
BuildRequires: libtirpc-devel >= 1.0.1
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: systemd-rpm-macros
BuildRequires: tcpd-devel
BuildRequires: pkgconfig(libsystemd)
Requires(post): %fillup_prereq
Requires(pre): shadow
Provides: portmap
%{?systemd_requires}
%if 0%{?suse_version} >= 1330
BuildRequires: libnsl-devel
Requires(pre): group(nobody)
%endif
%description
Rpcbind is a replacement for portmap. Whereas portmap supports only UDP
and TCP transports over INET (IPv4), rpcbind can be configured to work
on various transports supported by the TI-RPC. This includes TCP and
UDP over IPv6. Moreover, rpcbind provides additional functions in
regards to portmap.
%prep
%setup -q
cp %{SOURCE4} .
#%patch1 -p1
%patch31 -p1
%patch32 -p1
%build
autoreconf -fiv
export CFLAGS="%{optflags} -fpie"
export LDFLAGS="-pie -Wl,-z,relro,-z,now"
%configure \
--bindir=/sbin \
--enable-libwrap \
--enable-warmstarts \
--disable-debug \
--with-statedir=%{_rundir}/%{name} \
--with-rpcuser=rpc \
--with-systemdsystemunitdir=no
make %{?_smp_mflags}
gcc -I/usr/include/tirpc -pie -fpie -fwhole-program -Wl,-z,relro,-z,now %{optflags} pmap_set.c -o pmap_set -ltirpc
%install
%make_install
# fillup template
mkdir -p %{buildroot}%{_fillupdir}
install -m 644 %{SOURCE2} %{buildroot}%{_fillupdir}/
#
install -m 755 pmap_set %{buildroot}/sbin/pmap_set2
# create symlink for rcrpcbind
mkdir -p %{buildroot}%{_sbindir}
ln -s service %{buildroot}%{_sbindir}/rc%{name}
%pre
%service_add_pre %{name}.service %{name}.socket
# Add "rpc" user
getent passwd rpc >/dev/null || %{_sbindir}/useradd -r -g nobody -d %{_localstatedir}/lib/empty -s /sbin/nologin -c "user for rpcbind" rpc
exit 0
%preun
%service_del_preun %{name}.service %{name}.socket
%post
%{fillup_only -n rpcbind}
%service_add_post %{name}.service %{name}.socket
%postun
%service_del_postun %{name}.service %{name}.socket
%files
%license COPYING
%doc AUTHORS README
/sbin/pmap_set2
/sbin/%{name}
/sbin/rpcinfo
%{_sbindir}/rc%{name}
%{_mandir}/*/*
%{_fillupdir}/sysconfig.%{name}
#%{_unitdir}/%{name}.service
#%{_unitdir}/%{name}.socket
%changelog
* Mon Jun 4 2018 tchvatal@suse.com
- Drop all commented out patches (4 years now):
* 0008-First-part-of-init_transport-refactoring.patch
* 0009-init_transport-move-the-registration-code-into-a-sep.patch
* 0010-Fix-the-behavior-when-specifying-the-h-option.patch
* 0011-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
* 0014-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
* 0030-systemd-fix-rmtcall.patch
* Mon Jun 4 2018 tchvatal@suse.com
- Say goodbye to omc files fate#301838
- Format with spec-cleaner
* Tue Apr 3 2018 dimstar@opensuse.org
- Correctly rebase 0001-systemd-unit-files.patch: Since upstream
now ships systemd service files, we must no longer create full
unit files, but only correct the existing ones (adding
EnvironmentFile statement).
* Mon Mar 26 2018 kukuk@suse.de
- Use %%license instead of %%doc [bsc#1082318]
* Sun Feb 18 2018 avindra@opensuse.org
- Update to 0.2.4:
+ Memory corruption fix
+ Moved the default state directory to /var/run
+ Systemd unit files were added.
- cleanup with spec-cleaner
- don't ship NEWS or ChangeLog, these are not maintained
- rebase 0001-systemd-unit-files.patch
- remove upstreamed patches
* drop 0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
* drop 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
* drop 0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
* drop 0005-security.c-removed-warning.patch
* drop 0006-don-t-use-svc_fdset.patch
* drop 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
* Thu Nov 23 2017 rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%%_fillupdir macro (boo#1069468)
* Wed Aug 16 2017 kukuk@suse.de
- Add BuildRequires libnsl-devel (needed for obsoleting nsl in
glibc)
* Wed May 17 2017 schwab@suse.de
- svc-freeargs.patch: always call svc_freeargs, even if svc_getargs
failed (bsc#1037559, CVE-2017-8779)
* Tue May 2 2017 kukuk@suse.de
- Adjust for new system user/group RPMs
* Tue Nov 22 2016 kukuk@suse.de
- Add 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
from upstream, replacing systemd tmpfile solution.
* Sat Nov 12 2016 kukuk@suse.de
- Move /var/lib/rpcbind to /run/rpcbind, data should not survive
reboot and this makes read-only root filesystem easier.
* Tue Jun 7 2016 fbui@suse.com
- Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167)
systemd.pc is part of systemd main package now. Instead of
build-requiring systemd, import systemd-rpm-macros which has the
%%{_unitdir} definition and much less dependencies than systemd and
use it when configuring rpcbind so it won't try to find the unit dir
by using pkg-config.
Also replace BR libsystemd-daemon by libsystemd since the former is
obsolete and is replaced by the later.
* Mon Mar 14 2016 kukuk@suse.de
- pmap_set: use tirpc header files and link against libtirpc
* Fri Feb 19 2016 kukuk@suse.de
- Add 0006-don-t-use-svc_fdset.patch: don't use the svc_fdset
interface for libtirpc, which is limited to 1024 connections.
* Fri Feb 12 2016 kukuk@suse.de
- Sync with current git:
- Replace 0002-revert-auth.patch with
0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
- Add 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
to fix problems with activation via sockets by systemd
- Replace 0032-CVE-2015-7236.patch with
0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
- Add 0005-security.c-removed-warning.patch to fix compiler warnings
- Temporary remove 099-poll.patch
* Wed Jan 27 2016 kukuk@suse.de
- Disable 0030-systemd-fix-rmtcall.patch, needs the other disabled
patches.
- Submit for SLE12SP2 [FATE#320393]
* Tue Nov 17 2015 kukuk@suse.de
- Add 0002-revert-auth.patch: revert old patch no longer working
with libtirpc 1.0.1
(http://sourceforge.net/p/libtirpc/mailman/message/34585439/)
* Mon Sep 21 2015 okir@suse.com
- Add patch 0032-CVE-2015-7236.patch to fix a segfault on certain
remote scans [CVE-2015-7236, bsc#940191, bsc#946204]
* Mon Jul 27 2015 okir@suse.com
- Document how to restrict addresses that rpcbind will listen on
[bsc#935102]
Added 0031-rpcbind-manpage.patch
* Tue Jul 14 2015 kukuk@suse.de
- Add 099-poll.patch: use libtirpc with poll() implementation
* Wed May 27 2015 okir@suse.com
- Add patch 0030-systemd-fix-rmtcall.patch to fix rmtcall
forwarding (bnc#932423)
* Thu Apr 30 2015 kukuk@suse.de
- Update to rpcbind 0.2.3
- Following patches were accepted upstream:
- 0005-Remove-obsolete-function-in6_fillscopeid.patch
- 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
- 0007-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
- 0019-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
- 0020-rpcinfo-introduce-new-helper-function-ip_getclient.patch
- 0021-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
- 0022-rpcinfo-remove-obsolete-function-clnt_com_create.patch
- 0023-Make-rpcinfo-p-support-IPv6-addresses-too.patch
- 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch
* Thu Dec 18 2014 kukuk@suse.de
- Update to current git, which contains the following patches:
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
- 0003-systemd-no-dualmode.patch
- 0004-systemd-sd_notify.patch
- 0018-configure-check-for-nss.h.patch
* Fri Dec 12 2014 jeffm@suse.com
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch: fix
merge issue causing segfaults on missing file (bnc#909619).
* Thu Dec 11 2014 kukuk@suse.de
- Split off 0003-systemd-no-dualmode.patch from
0001-systemd-enhancements.patch for easier upstream submission.
- Split off 0004-systemd-sd_notify.patch from
0001-systemd-enhancements.patch for easier upstream submission.
- Rename 0001-systemd-enhancements.patch to 0001-systemd-unit-files.patch
* Tue Dec 9 2014 kukuk@suse.de
- Update to latest rpcbind 0.2.2 upstream release.
- Following patches are upstream:
- 0001-Fix-building-one-systems-w-out-nss.h.patch
- 0002-Rename-configure.in-to-configure.ac.patch
- 0003-rpcbind-rpcuser-not-being-set-in-Makefile.am.patch
- 0004-Silence-a-warning-about-setgroups-being-implicitly-d.patch
- Adjust following patches:
- 0005-Remove-obsolete-function-in6_fillscopeid.patch
- 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
- 0018-configure-check-for-nss.h.patch
- Obsolete patches:
- 0015-When-using-systemd-activation-make-rpcbind-notify-sy.patch
- 0016-Notify-systemd-unconditionally.patch
- 0012-Support-systemd-activation.patch
- 0013-socket-activation-Fix-rpcbind.service-to-use-separat.patch
- 0017-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
- 0025-rpcinfo-warmstat_no-warning-about-missing-file.patch
- 0026-systemd-no-default-dep
- 0027-socket-before-service.patch
- 0028-rpcbind-after-var-run.patch
- 0029-rpcbind-sd-notify-stupid-errmsg.patch
- New patches:
- 0001-systemd-enhancements.patch
- 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
- Disabled patches:
- 0008-First-part-of-init_transport-refactoring.patch
- 0009-init_transport-move-the-registration-code-into-a-sep.patch
- 0010-Fix-the-behavior-when-specifying-the-h-option.patch
- 0011-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
- 0014-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
- 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch
* Wed Nov 12 2014 kukuk@suse.de
- Disable debug code, which else would fill up the log files
[bnc#905042]
* Tue Jun 10 2014 okir@suse.com
- 0029-rpcbind-sd-notify-stupid-errmsg.patch: Remove a useless
error/debug message (bnc#881663)
* Thu Jun 5 2014 werner@suse.de
- Add patch 0028-rpcbind-after-var-run.patch as rpcbind service
wants /var/run mounted before started (bnc#881518)
* Wed May 21 2014 werner@suse.de
- Require the systemd libraries for build to allow the move
of systemd.pc back to systemd
* Mon Mar 31 2014 werner@suse.de
- Add 0027-socket-before-service.patch to make sure that always
the socket is up before the service. This will make sure that
rpcbind.target will not only cause the socket but also the
rpcbind.service (bnc#860246)
- Beside this ingnore exit state 2 in case of shutdown (bnc#860246)
* Wed Mar 26 2014 nfbrown@suse.com
- 0026-systemd-no-default-dep
No default dependencies for rpcbind. This allows it to start
early when it might be needed.
(bnc#860246)
* Tue Mar 4 2014 coolo@suse.com
- fix typo in useradd call's user home dir
* Tue Mar 4 2014 coolo@suse.com
- prereq useradd - called from %%pre
* Wed Feb 26 2014 kukuk@suse.de
- Fix ownership of /var/lib/rpcbind, else rpcbind cannot write
warmstart files
* Wed Feb 26 2014 kukuk@suse.de
- Don't print error message about missing files in warmstart code
if we do a coldstart [bnc#865807]
(0025-rpcinfo-warmstat_no-warning-about-missing-file.patch)
* Fri Feb 14 2014 kukuk@suse.de
- Re-add rcrpcbind symlink
* Thu Jan 23 2014 okir@suse.com
- Fixed rpc broadcast handling (bnc#857324)
Upgraded to upstream 0.2.1-rc4 as part of this, and rebased the
patch set.
Added:
0001-Fix-building-one-systems-w-out-nss.h.patch
0002-Rename-configure.in-to-configure.ac.patch
0003-rpcbind-rpcuser-not-being-set-in-Makefile.am.patch
Deleted (already upstream):
0003-configure-fix-the-case-when-with-rpcuser-is-not-give.patch
Renumbered (previous numbering shown below):
0001-Silence-a-warning-about-setgroups-being-implicitly-d.patch
0002-Remove-obsolete-function-in6_fillscopeid.patch
0004-In-init_transport-move-creation-of-COTS-sockets-clos.patch
0005-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
0006-First-part-of-init_transport-refactoring.patch
0007-init_transport-move-the-registration-code-into-a-sep.patch
0008-Fix-the-behavior-when-specifying-the-h-option.patch
0009-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
0010-Support-systemd-activation.patch
0011-socket-activation-Fix-rpcbind.service-to-use-separat.patch
0012-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
0013-When-using-systemd-activation-make-rpcbind-notify-sy.patch
0014-Notify-systemd-unconditionally.patch
0015-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
0016-configure-check-for-nss.h.patch
0018-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
0019-rpcinfo-introduce-new-helper-function-ip_getclient.patch
0020-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
0021-rpcinfo-remove-obsolete-function-clnt_com_create.patch
0022-Make-rpcinfo-p-support-IPv6-addresses-too.patch
0023-rpcinfo-remove-obsolete-function-get_inet_address.patch
* Mon Jan 20 2014 okir@suse.com
- Make rpcinfo -p/-u/-t options support IPv6 (bnc# 859448)
Added:
0018-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
0019-rpcinfo-introduce-new-helper-function-ip_getclient.patch
0020-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
0021-rpcinfo-remove-obsolete-function-clnt_com_create.patch
0022-Make-rpcinfo-p-support-IPv6-addresses-too.patch
0023-rpcinfo-remove-obsolete-function-get_inet_address.patch
* Tue Jan 14 2014 okir@suse.com
- Recognize RPCBIND_OPTIONS from /etc/sysconfig/rpcbind (bnc#824621)
Added:
0015-Pull-the-sysconfig-file-into-rpcbind.service-and-use.patch
- Make rpcbind run as user "rpc" by default (bnc#714735)
- Avoid NIS lookups of host names and service names (bnc#858700)
Added:
0016-configure-check-for-nss.h.patch
* Fri Jan 10 2014 okir@suse.com
- Notify systemd unconditionally. This prevented
"systemctl start rpcbind.service" from succeeding
Added:
0014-Notify-systemd-unconditionally.patch
* Tue Aug 20 2013 okir@suse.com
- Update rpcbind to latest upstream, and rewrote patches for systemd
integration.
Removed:
0001-systemd-add-support-for-system-bus-activation.patch
socket-activation-don-t-unlink-socket-we-didn-t-create
socket-activation-fix-rpcbind-service-to-use-separate-sockets
rpcbind-journal.patch
move-lock-file-to-run-fs.patch
rpcbind-systemd-notify.patch
Added:
0001-Silence-a-warning-about-setgroups-being-implicitly-d.patch
0002-Remove-obsolete-function-in6_fillscopeid.patch
0003-configure-fix-the-case-when-with-rpcuser-is-not-give.patch
0004-In-init_transport-move-creation-of-COTS-sockets-clos.patch
0005-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
0006-First-part-of-init_transport-refactoring.patch
0007-init_transport-move-the-registration-code-into-a-sep.patch
0008-Fix-the-behavior-when-specifying-the-h-option.patch
0009-Clean-up-the-way-we-handle-the-h-option-in-init_tran.patch
0010-Support-systemd-activation.patch
0011-socket-activation-Fix-rpcbind.service-to-use-separat.patch
0012-When-using-systemd-redirect-syslog-calls-to-the-syst.patch
0013-When-using-systemd-activation-make-rpcbind-notify-sy.patch
* Thu Jun 27 2013 crrodriguez@opensuse.org
- rpcbind-systemd-notify.patch make systemd service type
"notify" this is almost the same as the default but
with the difference that the daemon now is able to
to notify systemd when it finished startup hence
avoiding a race condition in where startup is faster than
the process finishing its own internal setup routines.
* Mon May 6 2013 cfarrell@suse.com
- license update: BSD-4-Clause
Look at src/util.c
* Thu Apr 4 2013 crrodriguez@opensuse.org
- remove sysvinit support (read opensuse-packaging for details)
- remove "portmap" migration, according to the time machine
it went away in openSUSE 11.2 and the oldest supported version
is now 12.1
* Wed Nov 28 2012 rmilasan@suse.com
- Move rpcbind.sock and rpcbind.lock to /run to not interfere with
systemd.
* Thu Oct 25 2012 crrodriguez@opensuse.org
- Instead of using syslog, log to the journal
* Wed Oct 24 2012 crrodriguez@opensuse.org
- There should be no Requires on syslog as it is no longer
required for anything since the introduction of the journal.
* Wed Apr 18 2012 jeffm@suse.de
- socket-activation: Fix rpcbind.service to use separate
sockets (bnc#757909).
* Wed Apr 18 2012 jeffm@suse.de
- socket-activation: don't unlink socket we didn't create (bnc#757667).
* Mon Dec 19 2011 crrodriguez@opensuse.org
- Update systemd patches
* Wed Dec 7 2011 crrodriguez@opensuse.org
- Add systemd socket activation patch, based on
http://www.spinics.net/lists/linux-nfs/msg14371.html
but does not bundle sd-daemon.[c|h] it uses libsystemd-daemon
instead.
* Sun Dec 4 2011 crrodriguez@opensuse.org
- Update to version 0.2.0_git201103171419
- Fix rpm source tags to not be conditional.
* Tue Nov 29 2011 crrodriguez@opensuse.org
- Add systemd units
* Fri Nov 25 2011 coolo@suse.com
- add libtool as buildrequire to avoid implicit dependency
* Tue Jun 14 2011 aj@suse.de
- Install rpcinfo man page since glibc does not install its man
page anymore.
* Wed Jan 12 2011 lnussel@suse.de
- don't enable rpcbind init script by default
* Tue Dec 7 2010 coolo@novell.com
- add some provides and requires for sysvinit scripts to please insserv
* Sun Nov 14 2010 cristian.rodriguez@opensuse.org
- Use full RELRO here
* Tue Oct 26 2010 cristian.rodriguez@opensuse.org
- Update to a newer GIT snapshot
* nd: set SO_REUSEADDR on NC_TPI_COTS listening sockets
* rpcbind: add no-fork mode
* Thu Dec 4 2008 coolo@suse.de
- fix "checkproc: command not found" during installation
* Mon Dec 1 2008 ro@suse.de
- rename installed pmap_set to pmap_set2 to avoid conflict
with portmap
* Mon Dec 1 2008 mkoenig@suse.de
- if upgrading from portmap:
* we need to stop portmap and start rpcbind in %%post since the
restart on upgrade mechanism does not work here
* dump portmap tables and set them again in rpcbind [bnc#446388]
- add pmap_set.c which is needed to set the old portmap tables
in rpcbind
* Wed Nov 26 2008 mkoenig@suse.de
- specify runlevel in chkconfig check [bnc#444663]
* Wed Nov 5 2008 mkoenig@suse.de
- fix version comparison in Obsoletes [bnc#440313]
- disable portmap service in pre script to avoid problems when
upgrading from portmap
* Wed Oct 15 2008 mkoenig@suse.de
- update to 0.1.6 with additional patches from git
* Fixed an ipv6 related segfault on startup
* rpcbind needs to also downgrade its gid to a non-priviledgied group
* Removed the documentation about the non-existent '-L' flag
* Introduce helpers for ipprot/netid mapping
* Change how we decide on the netids to use for portmap
* Simplify port live check in pmap_svc.c
* Support portmap on AF_LOCAL, too
* Fix for warm start
* Properly identify local root user over ipv4/v6
- fixes [bnc#435637]
- remove patch
rpcbind-0.1.4-iff_up.patch
rpcbind-0.1.4-localaddr.patch
* Mon Aug 18 2008 mkoenig@suse.de
- use version in Provides/Obsoletes
* Fri Jul 18 2008 mkoenig@suse.de
- update to version 0.1.5
- license change to BSD-3
- patches merged
rpcbind-0.1.4-compile.patch
rpcbind-0.1.4-debug.patch
rpcbind-0.1.4-libwrap.patch
rpcbind-0.1.4-recvfrom-fix.patch
rpcbind-0.1.4-rpcuser.patch
rpcbind-0.1.4-warmstarts-cleanup.patch
rpcbind-0.1.4-warmstarts.patch
* Wed Apr 2 2008 mkoenig@suse.de
- initial packaging, version 0.1.4 [fate#300607]
- add patches from Steve Dickson, including fixes and
support for debug and warmstart
- build as PIE