Hello community, here is the log from the commit of package pdns for openSUSE:Factory checked in at 2019-09-02 13:25:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pdns (Old) and /work/SRC/openSUSE:Factory/.pdns.new.7948 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pdns" Mon Sep 2 13:25:28 2019 rev:65 rq:727236 version:4.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/pdns/pdns.changes 2019-08-09 16:54:27.289453301 +0200 +++ /work/SRC/openSUSE:Factory/.pdns.new.7948/pdns.changes 2019-09-02 13:25:32.469310267 +0200 @@ -1,0 +2,13 @@ +Fri Aug 30 10:56:44 UTC 2019 - Michael Ströder <[email protected]> + +- Update to 4.2.0: + - New features: + * Lua records + * ixfrdist + * a new LMDB backend + - Important functional changes: + * the default UDP response size limit has been changed from 1680 to 1232 + * the autoserial feature has been removed +- pdns-4.0.3_allow_dacoverride_in_capset.patch: refreshed + +------------------------------------------------------------------- Old: ---- pdns-4.1.13.tar.bz2 pdns-4.1.13.tar.bz2.sig New: ---- pdns-4.2.0.tar.bz2 pdns-4.2.0.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pdns.spec ++++++ --- /var/tmp/diff_new_pack.J8Mavi/_old 2019-09-02 13:25:33.229310124 +0200 +++ /var/tmp/diff_new_pack.J8Mavi/_new 2019-09-02 13:25:33.229310124 +0200 @@ -43,7 +43,7 @@ %bcond_without pdns_pkcs11 %bcond_without pdns_zeromq Name: pdns -Version: 4.1.13 +Version: 4.2.0 Release: 0 Summary: Authoritative-only nameserver License: GPL-2.0-only @@ -365,7 +365,7 @@ %service_del_postun %{name}.service %files -%doc AUTHORS NEWS NOTICE README* +%doc NOTICE README* %license COPYING %exclude %{_docdir}/%{name}/*.sql %exclude %{_docdir}/%{name}/*.schema @@ -373,6 +373,7 @@ %{_unitdir}/%{name}@.service %config(noreplace) %attr(640,root,pdns) %{_sysconfdir}/%{name}/%{name}.conf %{_bindir}/dnsbulktest +%{_bindir}/dnspcap2calidns %{_bindir}/dnsreplay %{_bindir}/dnsscan %{_bindir}/dnsscope @@ -399,6 +400,7 @@ %{_mandir}/man1/dnspcap2protobuf.1%{?ext_man} %endif %{_mandir}/man1/dnsbulktest.1%{?ext_man} +%{_mandir}/man1/dnspcap2calidns.1%{?ext_man} %{_mandir}/man1/dnsgram.1%{?ext_man} %{_mandir}/man1/dnsscan.1%{?ext_man} %{_mandir}/man1/ixplore.1%{?ext_man} ++++++ pdns-4.0.3_allow_dacoverride_in_capset.patch ++++++ --- /var/tmp/diff_new_pack.J8Mavi/_old 2019-09-02 13:25:33.257310119 +0200 +++ /var/tmp/diff_new_pack.J8Mavi/_new 2019-09-02 13:25:33.257310119 +0200 @@ -1,26 +1,12 @@ -situation: - -/var/lib/pdns pdns:pdns 750 -/var/lib/pdns/sqlite3.db pdns:pdns 640 - -during start up it seems pdns tries to open the file as root -which fails because of the permissions, internally it tries to -open it with dac override capability, which fails as it isn't -in the capability set. - -Adding CAP_DAC_OVERRIDE fixes the start problems. - - -Index: pdns-4.0.3/pdns/pdns.service.in -=================================================================== ---- pdns-4.0.3.orig/pdns/pdns.service.in -+++ pdns-4.0.3/pdns/pdns.service.in -@@ -13,7 +13,7 @@ RestartSec=1 +diff -ur pdns-4.2.0.orig/pdns/pdns.service.in pdns-4.2.0/pdns/pdns.service.in +--- pdns-4.2.0.orig/pdns/pdns.service.in 2019-01-22 16:27:52.000000000 +0100 ++++ pdns-4.2.0/pdns/pdns.service.in 2019-08-30 13:02:47.645258188 +0200 +@@ -13,7 +13,7 @@ StartLimitInterval=0 - PrivateTmp=true - PrivateDevices=true + + # Sandboxing -CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_CHOWN CAP_SYS_CHROOT +CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_CHOWN CAP_SYS_CHROOT CAP_DAC_OVERRIDE - NoNewPrivileges=true - # ProtectSystem=full will disallow write access to /etc and /usr, possibly - # not being able to write slaved-zones into sqlite3 or zonefiles. + LockPersonality=true + ProtectControlGroups=true + ProtectHome=true ++++++ pdns-4.1.13.tar.bz2 -> pdns-4.2.0.tar.bz2 ++++++ ++++ 96507 lines of diff (skipped)
