|
|
|
@ -1,7 +1,7 @@ |
|
|
|
|
# ufdbGuard.spec.CentOS7 |
|
|
|
|
|
|
|
|
|
%global _hardened_build 1 |
|
|
|
|
%global version 1.33.4 |
|
|
|
|
%global version 1.33.5 |
|
|
|
|
|
|
|
|
|
# no stripping of the binaries |
|
|
|
|
%global __os_install_post %{nil} |
|
|
|
@ -55,17 +55,15 @@ Requires: wget >= 1.14 |
|
|
|
|
Requires: tar, gzip |
|
|
|
|
# require packages for ufdb-pstack |
|
|
|
|
Requires: gdb >= 7.6.1 |
|
|
|
|
Requires: yum-utils >= 1.1.31 |
|
|
|
|
# Requires: yum-utils >= 1.1.31 |
|
|
|
|
# required packages for installation |
|
|
|
|
Requires: at |
|
|
|
|
# Requires: at |
|
|
|
|
# required packages for analysis scripts |
|
|
|
|
Requires: perl |
|
|
|
|
%global __requires_exclude %{?__requires_exclude}|perl\\(CGI::|perl\\(FCGI:: |
|
|
|
|
# squid is required but may be installed from source and not using an RPM, |
|
|
|
|
# or ufdbguard is used on a system where squid is not installed. |
|
|
|
|
# Requires: squid |
|
|
|
|
# gdb is highly recommended but not a requirement |
|
|
|
|
# Requires: gdb |
|
|
|
|
|
|
|
|
|
Buildrequires: openssl-devel >= 1.0.1e |
|
|
|
|
Buildrequires: bzip2-devel >= 1.0.6 |
|
|
|
@ -119,7 +117,8 @@ fi |
|
|
|
|
# echo "Execute /tmp/ufdb.postinstall to update debuginfo for glibc, zlib, bzip2 and openssl. *****" >&2 |
|
|
|
|
# echo >&2 |
|
|
|
|
|
|
|
|
|
at now + 3min <<EOF |
|
|
|
|
/usr/bin/sh >/tmp/ufdbguardd.postinstall.log 2>&1 <<EOF & |
|
|
|
|
sleep 180 |
|
|
|
|
debuginfo-install -y -q glibc >/dev/null 2>&1 |
|
|
|
|
debuginfo-install -y -q zlib >/dev/null 2>&1 |
|
|
|
|
debuginfo-install -y -q bzip2 >/dev/null 2>&1 |
|
|
|
@ -311,8 +310,12 @@ exit 0 |
|
|
|
|
# TODO |
|
|
|
|
|
|
|
|
|
%changelog |
|
|
|
|
* Tue Feb 20 2018 Daniel Berteaud <daniel@firewall-services.com> 1.33.4-CentOS7 |
|
|
|
|
- new package built with tito |
|
|
|
|
* Thu Apr 19 2018 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.5 |
|
|
|
|
Fix: ufdbguardd may crash during a database refresh |
|
|
|
|
Fix: empty pass statements in acls may cause a crash. |
|
|
|
|
Fix: SSH tunnels were detected but access was not blocked |
|
|
|
|
Fix: sometimes the SSL/TLS certificate was not checked to be signed by a CA |
|
|
|
|
Fix: skip acls with "pass any" if the source has the continue flag set |
|
|
|
|
|
|
|
|
|
* Thu Sep 21 2017 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.4 |
|
|
|
|
Fix: URLs with very long domainnames may cause a crash if the URL is not in the URL database |
|
|
|
@ -332,7 +335,7 @@ Fix: when evaluate-and IPv4/6 is used in a source definition, the source may not |
|
|
|
|
Fix: ufdbguardd did not accept the IPv6 address '::' |
|
|
|
|
Enhancement: several warnings for IPv4 and IPv6 addresses inside a source were implemented |
|
|
|
|
|
|
|
|
|
* Wed May 23 2017 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.2 |
|
|
|
|
* Tue May 23 2017 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.2 |
|
|
|
|
Fix: ufdbguardd may incorrectly abort with a fatal error cannot-get-rwlock-for-database-refresh-after-many-attempts |
|
|
|
|
Fix: safesearch did not work in 2 out of 3 cases |
|
|
|
|
Fix: ufdbguard did not compile on FreeBSD. |
|
|
|
|