Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package frr for openSUSE:Factory checked in at 2021-10-15 23:03:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/frr (Old) and /work/SRC/openSUSE:Factory/.frr.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "frr" Fri Oct 15 23:03:35 2021 rev:15 rq:925497 version:8.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/frr/frr.changes 2021-09-28 19:17:25.160247152 +0200 +++ /work/SRC/openSUSE:Factory/.frr.new.1890/frr.changes 2021-10-15 23:03:48.450090786 +0200 @@ -1,0 +2,20 @@ +Fri Oct 15 12:11:50 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + +------------------------------------------------------------------- +Sat Oct 9 01:58:08 UTC 2021 - Linnaea Lavia <linn...@lavia.moe> + +- Update to version 8.0.1 + * refreshed patch: + - 0001-disable-zmq-test.patch + - harden_frr.service.patch + * LDP gained SNMP support + * OSPFv3 gained VRF support + * EVPN Multihoming is now fully supported + * TI-LFA implemented in IS-IS and OSPS + * New Segment Routing daemon + * See: https://frrouting.org/release/8.0/ + and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1 + +------------------------------------------------------------------- Old: ---- frr-7.5.1.tar.gz New: ---- frr-8.0.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ frr.spec ++++++ --- /var/tmp/diff_new_pack.qPiLTI/_old 2021-10-15 23:03:49.038091205 +0200 +++ /var/tmp/diff_new_pack.qPiLTI/_new 2021-10-15 23:03:49.042091208 +0200 @@ -32,7 +32,7 @@ %define frr_daemondir %{_prefix}/lib/frr Name: frr -Version: 7.5.1 +Version: 8.0.1 Release: 0 Summary: FRRouting Routing daemon License: GPL-2.0-or-later AND LGPL-2.1-or-later @@ -51,7 +51,6 @@ BuildRequires: bison >= 2.7 BuildRequires: flex BuildRequires: libtool -BuildRequires: libyang-extentions BuildRequires: makeinfo %if %{with mininet} BuildRequires: mininet @@ -69,10 +68,11 @@ BuildRequires: pkgconfig(json-c) BuildRequires: pkgconfig(libcap) BuildRequires: pkgconfig(libcares) +BuildRequires: pkgconfig(libelf) BuildRequires: pkgconfig(libpcre) BuildRequires: pkgconfig(libprotobuf-c) BuildRequires: pkgconfig(libsystemd) -BuildRequires: pkgconfig(libyang) >= 1.0.184 +BuildRequires: pkgconfig(libyang) >= 2.0.0 BuildRequires: pkgconfig(libzmq) >= 4.0.0 BuildRequires: pkgconfig(rtrlib) >= 0.5.0 BuildRequires: pkgconfig(sqlite3) @@ -84,7 +84,6 @@ Conflicts: quagga Provides: zebra = %{version} Obsoletes: zebra < %{version} -Requires: libyang-extentions %description FRR is free software which manages TCP/IP based routing protocols. @@ -192,7 +191,6 @@ autoreconf -fiv %configure \ --disable-silent-rules \ - --enable-exampledir=%{_docdir}/%{name}/examples \ --sysconfdir=%{_sysconfdir}/%{name} \ --localstatedir=%{frr_statedir} \ --sbindir=%{frr_daemondir} \ @@ -351,7 +349,6 @@ %license COPYING COPYING-LGPLv2.1 %doc README.md %doc doc/mpls -%doc %{_docdir}/%{name}/examples %dir %attr(750,%{frr_user},%{frr_user}) %{_sysconfdir}/%{name} %config(noreplace) %attr(640,%{frr_user},%{frr_group}) %{_sysconfdir}/%{name}/[!v]*.conf* %config(noreplace) %attr(640,%{frr_user},%{frrvty_group}) %{_sysconfdir}/%{name}/vtysh.conf @@ -387,6 +384,7 @@ %{frr_daemondir}/nhrpd %{frr_daemondir}/ospf6d %{frr_daemondir}/ospfd +%{frr_daemondir}/pathd %{frr_daemondir}/pbrd %{frr_daemondir}/pimd %{frr_daemondir}/ripd @@ -401,6 +399,7 @@ %{_libdir}/frr/modules/zebra_cumulus_mlag.so %{_libdir}/frr/modules/zebra_fpm.so %{_libdir}/frr/modules/zebra_irdp.so +%{_libdir}/frr/modules/pathd_pcep.so %{_libdir}/frr/modules/bgpd_rpki.so %if %{with grpc} %{_libdir}/frr/modules/grpc.so @@ -448,6 +447,8 @@ %{_includedir}/%{name}/ospfapi/*.h %dir %{_includedir}/%{name}/eigrpd %{_includedir}/%{name}/eigrpd/*.h +%dir %{_includedir}/%{name}/bfdd +%{_includedir}/%{name}/bfdd/*.h %{_libdir}/lib*.so %changelog ++++++ 0001-disable-zmq-test.patch ++++++ --- /var/tmp/diff_new_pack.qPiLTI/_old 2021-10-15 23:03:49.062091222 +0200 +++ /var/tmp/diff_new_pack.qPiLTI/_new 2021-10-15 23:03:49.066091225 +0200 @@ -11,13 +11,14 @@ index 1f8ee5416..b298fe7b5 100644 --- a/tests/lib/test_zmq.py +++ b/tests/lib/test_zmq.py -@@ -5,7 +5,6 @@ import os - class TestZMQ(frrtest.TestRefOut): - program = './test_zmq' +@@ -5,8 +5,7 @@ import os + program = "./test_zmq" -- @pytest.mark.skipif('S["ZEROMQ_TRUE"]=""\n' not in open('../config.status').readlines(), -- reason='ZEROMQ not enabled') -+ @pytest.mark.skip(reason="Test disabled due to intermittent build service timeouts") + @pytest.mark.skipif( +- 'S["ZEROMQ_TRUE"]=""\n' not in open("../config.status").readlines(), +- reason="ZEROMQ not enabled", ++ reason="Test disabled due to intermittent build service timeouts" + ) def test_refout(self): return super(TestZMQ, self).test_refout() -- ++++++ frr-7.5.1.tar.gz -> frr-8.0.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/frr/frr-7.5.1.tar.gz /work/SRC/openSUSE:Factory/.frr.new.1890/frr-8.0.1.tar.gz differ: char 14, line 1 ++++++ harden_frr.service.patch ++++++ --- /var/tmp/diff_new_pack.qPiLTI/_old 2021-10-15 23:03:49.114091260 +0200 +++ /var/tmp/diff_new_pack.qPiLTI/_new 2021-10-15 23:03:49.118091263 +0200 @@ -1,16 +1,35 @@ -Index: frr-frr-7.5.1/tools/frr.service +Index: frr-frr-8.0.1/tools/frr.service.in =================================================================== ---- frr-frr-7.5.1.orig/tools/frr.service -+++ frr-frr-7.5.1/tools/frr.service -@@ -7,6 +7,16 @@ Before=network.target - OnFailure=heartbeat-failed@%n.service +--- frr-frr-8.0.1.orig/tools/frr.service.in ++++ frr-frr-8.0.1/tools/frr.service.in +@@ -7,6 +7,15 @@ Before=network.target + OnFailure=heartbeat-failed@%n + + [Service] ++# added automatically, for details please see ++# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort ++ProtectSystem=full ++ProtectHome=true ++ProtectKernelModules=true ++ProtectKernelLogs=true ++ProtectControlGroups=true ++RestrictRealtime=true ++# end of automatic additions + Nice=-5 + Type=forking + NotifyAccess=all +Index: frr-frr-8.0.1/tools/f...@.service.in +=================================================================== +--- frr-frr-8.0.1.orig/tools/f...@.service.in ++++ frr-frr-8.0.1/tools/f...@.service.in +@@ -7,6 +7,15 @@ Before=network.target + OnFailure=heartbeat-failed@%n [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true -+ProtectClock=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true
