Hello community, here is the log from the commit of package cryptsetup for openSUSE:Factory checked in at 2014-08-15 09:55:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cryptsetup (Old) and /work/SRC/openSUSE:Factory/.cryptsetup.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cryptsetup" Changes: -------- --- /work/SRC/openSUSE:Factory/cryptsetup/cryptsetup.changes 2014-07-13 17:15:28.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.cryptsetup.new/cryptsetup.changes 2014-08-15 09:55:26.000000000 +0200 @@ -0,0 +1,32 @@ +------------------------------------------------------------------- +Tue Aug 12 16:34:04 UTC 2014 - [email protected] + +- version 1.6.5 + * Allow LUKS header operation handling without requiring root privilege. + It means that you can manipulate with keyslots as a regular user, only + write access to device (or image) is required. + * Fix internal PBKDF2 key derivation function implementation for alternative + crypto backends (kernel, NSS) which do not support PBKDF2 directly and have + issues with longer HMAC keys. + * Support for Python3 for simple Python binding. + Python >= 2.6 is now required. You can set Python compiled version by setting + --with-python_version configure option (together with --enable-python). + * Use internal PBKDF2 in Nettle library for Nettle crypto backend. + Cryptsetup compilation requires Nettle >= 2.6 (if using Nettle crypto backend). + * Allow simple status of crypt device without providing metadata header. + The command "cryptsetup status" will print basic info, even if you + do not provide detached header argument. + * Allow to specify ECB mode in cryptsetup benchmark. + * Add some LUKS images for regression testing. + Note that if image with Whirlpool fails, the most probable cause is that + you have old gcrypt library with flawed whirlpool hash. + Read FAQ section 8.3 for more info. +- Removed e2fsprogs-devel and libtool build requirements (not needed). +- Added libpwquality-devel and libuuid-devel build requirements. + +------------------------------------------------------------------- +Mon Aug 11 15:21:03 UTC 2014 - [email protected] + +- libcryptsetup4-hmac split off contain the hmac for FIPS certification + +------------------------------------------------------------------- Old: ---- cryptsetup-1.6.4.tar.sign cryptsetup-1.6.4.tar.xz New: ---- cryptsetup-1.6.5.tar.sign cryptsetup-1.6.5.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cryptsetup.spec ++++++ --- /var/tmp/diff_new_pack.ojQ3Ne/_old 2014-08-15 09:55:27.000000000 +0200 +++ /var/tmp/diff_new_pack.ojQ3Ne/_new 2014-08-15 09:55:27.000000000 +0200 @@ -16,31 +16,32 @@ # +%define so_ver 4 + Name: cryptsetup -Url: http://code.google.com/p/cryptsetup/ -Version: 1.6.4 +Version: 1.6.5 Release: 0 Summary: Set Up dm-crypt Based Encrypted Block Devices License: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.0+ Group: System/Base - -Source: https://www.kernel.org/pub/linux/utils/cryptsetup/v1.6/cryptsetup-%{version}.tar.xz -# this is the signature of the uncompressed tarball +Url: http://code.google.com/p/cryptsetup/ +Source0: https://www.kernel.org/pub/linux/utils/cryptsetup/v1.6/cryptsetup-%{version}.tar.xz +# GPG signature of the uncompressed tarball. Source1: https://www.kernel.org/pub/linux/utils/cryptsetup/v1.6/cryptsetup-%{version}.tar.sign Source2: baselibs.conf Source3: %{name}.keyring -BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: device-mapper-devel -BuildRequires: e2fsprogs-devel BuildRequires: fipscheck BuildRequires: fipscheck-devel BuildRequires: libgcrypt-devel +BuildRequires: libpwquality-devel BuildRequires: libselinux-devel -BuildRequires: libtool +BuildRequires: libuuid-devel # 2.6.38 has the required if_alg.h BuildRequires: linux-glibc-devel >= 2.6.38 BuildRequires: pkgconfig BuildRequires: popt-devel +BuildRoot: %{_tmppath}/%{name}-%{version}-build %description cryptsetup is used to conveniently set up dm-crypt based device-mapper @@ -49,25 +50,33 @@ includes support for automatically setting up encrypted volumes at boot time via the config file /etc/crypttab. -%package -n libcryptsetup4 +%package -n libcryptsetup%{so_ver} Summary: Set Up dm-crypt Based Encrypted Block Devices -Group: System/Base +Group: System/Libraries -%description -n libcryptsetup4 +%description -n libcryptsetup%{so_ver} cryptsetup is used to conveniently set up dm-crypt based device-mapper targets. It allows to set up targets to read cryptoloop compatible volumes as well as LUKS formatted ones. The package additionally includes support for automatically setting up encrypted volumes at boot time via the config file /etc/crypttab. +%package -n libcryptsetup4-hmac +Summary: Checksums for libcryptsetup4 +Group: System/Base + +%description -n libcryptsetup4-hmac +This package contains HMAC checksums for integrity checking of libcryptsetup4, +used for FIPS. + %package -n libcryptsetup-devel Summary: Set Up dm-crypt Based Encrypted Block Devices Group: Development/Libraries/C and C++ +Requires: glibc-devel +Requires: libcryptsetup%{so_ver} = %{version} # cryptsetup-devel last used 11.1 Provides: cryptsetup-devel = %{version} Obsoletes: cryptsetup-devel < %{version} -Requires: glibc-devel -Requires: libcryptsetup4 = %{version} %description -n libcryptsetup-devel cryptsetup is used to conveniently set up dm-crypt based device-mapper @@ -80,14 +89,10 @@ %setup -q %build -# cryptsetup build -%{?suse_update_config:%{suse_update_config}} -autoreconf -f -i -test -e po/Makevars || cp po/Makevars.template po/Makevars -%configure \ - --disable-static --enable-shared \ - --enable-cryptsetup-reencrypt \ - --enable-selinux --enable-fips +%configure --enable-cryptsetup-reencrypt \ + --enable-selinux \ + --enable-fips \ + --enable-pwquality make %{?_smp_mflags} %install @@ -99,13 +104,13 @@ fipshmac %{buildroot}/%{_libdir}/libcryptsetup.so.* \ %{nil} -make install DESTDIR=$RPM_BUILD_ROOT -install -d -m 755 $RPM_BUILD_ROOT/sbin -ln -s ..%{_sbindir}/cryptsetup $RPM_BUILD_ROOT/sbin +make install DESTDIR=%{buildroot} +install -dm 0755 %{buildroot}/sbin +ln -s ..%{_sbindir}/cryptsetup %{buildroot}/sbin # don't want this file in /lib (FHS compat check), and can't move it to /usr/lib -rm -f $RPM_BUILD_ROOT/%_libdir/*.la +rm -f %{buildroot}/%{_libdir}/*.la # -%find_lang %name --all-name +%find_lang %{name} --all-name %post test -n "$FIRST_ARG" || FIRST_ARG="$1" @@ -127,30 +132,35 @@ fi fi -%post -n libcryptsetup4 -p /sbin/ldconfig +%post -n libcryptsetup%{so_ver} -p /sbin/ldconfig -%postun -n libcryptsetup4 -p /sbin/ldconfig +%postun -n libcryptsetup%{so_ver} -p /sbin/ldconfig -%files -f %name.lang +%files -f %{name}.lang %defattr(-,root,root) +%doc AUTHORS COPYING* FAQ README TODO docs/ChangeLog.old docs/*ReleaseNotes #ghost %verify(not md5 size mtime) %config(noreplace,missingok) /etc/crypttab #ghost %verify(not md5 size mtime) %config(noreplace,missingok) /etc/cryptotab /sbin/cryptsetup %{_sbindir}/cryptsetup %{_sbindir}/veritysetup %{_sbindir}/cryptsetup-reencrypt -%_mandir/man8/cryptsetup.8.gz -%_mandir/man8/cryptsetup-reencrypt.8.gz -%_mandir/man8/veritysetup.8.gz +%{_mandir}/man8/cryptsetup.8.gz +%{_mandir}/man8/cryptsetup-reencrypt.8.gz +%{_mandir}/man8/veritysetup.8.gz + +%files -n libcryptsetup%{so_ver} +%defattr(-,root,root) +%{_libdir}/libcryptsetup.so.%{so_ver}* -%files -n libcryptsetup4 +%files -n libcryptsetup4-hmac %defattr(-,root,root) -/%{_libdir}/libcryptsetup.so.4* -/%{_libdir}/.libcryptsetup.so.4*hmac +%{_libdir}/.libcryptsetup.so.%{so_ver}*hmac %files -n libcryptsetup-devel %defattr(-,root,root) -%_includedir/libcryptsetup.h +%doc docs/examples/ +%{_includedir}/libcryptsetup.h %{_libdir}/libcryptsetup.so %{_libdir}/pkgconfig/* ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.ojQ3Ne/_old 2014-08-15 09:55:27.000000000 +0200 +++ /var/tmp/diff_new_pack.ojQ3Ne/_new 2014-08-15 09:55:27.000000000 +0200 @@ -1 +1,2 @@ libcryptsetup4 +libcryptsetup4-hmac ++++++ cryptsetup-1.6.4.tar.xz -> cryptsetup-1.6.5.tar.xz ++++++ ++++ 19872 lines of diff (skipped) -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
