Summary: A security tool which acts as a wrapper for TCP daemons Name: tcp_wrappers Version: 7.6 Release: 78%{?dist} %define LIB_MAJOR 0 %define LIB_MINOR 7 %define LIB_REL 6 License: BSD Group: System Environment/Daemons Source: ftp://ftp.porcupine.org/pub/security/%{name}_%{version}-ipv6.4.tar.gz URL: ftp://ftp.porcupine.org/pub/security/index.html Patch0: tcpw7.2-config.patch Patch1: tcpw7.2-setenv.patch Patch2: tcpw7.6-netgroup.patch Patch3: tcp_wrappers-7.6-bug11881.patch Patch4: tcp_wrappers-7.6-bug17795.patch Patch5: tcp_wrappers-7.6-bug17847.patch Patch6: tcp_wrappers-7.6-fixgethostbyname.patch Patch7: tcp_wrappers-7.6-docu.patch Patch8: tcp_wrappers-7.6-man.patch Patch9: tcp_wrappers.usagi-ipv6.patch Patch11: tcp_wrappers-7.6-shared.patch Patch12: tcp_wrappers-7.6-sig.patch Patch14: tcp_wrappers-7.6-ldflags.patch Patch15: tcp_wrappers-7.6-fix_sig-bug141110.patch Patch16: tcp_wrappers-7.6-162412.patch Patch17: tcp_wrappers-7.6-220015.patch Patch19: tcp_wrappers-7.6-siglongjmp.patch Patch20: tcp_wrappers-7.6-sigchld.patch Patch21: tcp_wrappers-7.6-196326.patch Patch22: tcp_wrappers_7.6-249430.patch Patch23: tcp_wrappers-7.6-inetdconf.patch Patch24: tcp_wrappers-7.6-bug698464.patch Patch25: tcp_wrappers-7.6-relro.patch Patch26: tcp_wrappers-7.6-xgets.patch Patch27: tcp_wrappers-7.6-initgroups.patch Patch28: tcp_wrappers-7.6-warnings.patch Patch29: tcp_wrappers-7.6-uchart_fix.patch Patch30: tcp_wrappers-7.6-altformat.patch # required by sin_scope_id in ipv6 patch BuildRequires: glibc-devel >= 2.2 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Requires: tcp_wrappers-libs = %{version}-%{release} %description The tcp_wrappers package provides small daemon programs which can monitor and filter incoming requests for systat, finger, FTP, telnet, rlogin, rsh, exec, tftp, talk and other network services. Install the tcp_wrappers program if you need a security tool for filtering incoming network services requests. This version also supports IPv6. %package libs Summary: Libraries for tcp_wrappers Group: System Environment/Libraries %description libs tcp_wrappers-libs contains the libraries of the tcp_wrappers package. %package devel Summary: Development libraries and headers for tcp_wrappers Group: Development/Libraries Requires: tcp_wrappers-libs = %{version}-%{release} %description devel tcp_wrappers-devel contains the libraries and header files needed to develop applications with tcp_wrappers support. %prep %setup -q -n %{name}_%{version}-ipv6.4 %patch0 -p1 -b .config %patch1 -p1 -b .setenv %patch2 -p1 -b .netgroup %patch3 -p1 -b .bug11881 %patch4 -p1 -b .bug17795 %patch5 -p1 -b .bug17847 %patch6 -p1 -b .fixgethostbyname %patch7 -p1 -b .docu %patch8 -p1 -b .man %patch9 -p1 -b .usagi-ipv6 %patch11 -p1 -b .shared %patch12 -p1 -b .sig %patch14 -p1 -b .cflags %patch15 -p1 -b .fix_sig %patch16 -p1 -b .162412 %patch17 -p1 -b .220015 %patch19 -p1 -b .siglongjmp %patch20 -p1 -b .sigchld %patch21 -p1 -b .196326 %patch22 -p1 -b .249430 %patch23 -p1 -b .inetdconf %patch24 -p1 -b .698464 %patch25 -p1 -b .relro %patch26 -p1 -b .xgets %patch27 -p1 -b .initgroups %patch29 -p1 -b .uchart_fix %patch30 -p1 -b .altformat %patch28 -p1 -b .warnings %build make RPM_OPT_FLAGS="$RPM_OPT_FLAGS -fPIC -DPIC -D_REENTRANT -DHAVE_STRERROR" LDFLAGS="-pie -z relro -z now" MAJOR=%{LIB_MAJOR} MINOR=%{LIB_MINOR} REL=%{LIB_REL} linux %install rm -rf ${RPM_BUILD_ROOT} mkdir -p ${RPM_BUILD_ROOT}%{_includedir} mkdir -p ${RPM_BUILD_ROOT}/%{_libdir} mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man{3,5,8} mkdir -p ${RPM_BUILD_ROOT}%{_sbindir} install -p -m644 hosts_access.3 ${RPM_BUILD_ROOT}%{_mandir}/man3 install -p -m644 hosts_access.5 hosts_options.5 ${RPM_BUILD_ROOT}%{_mandir}/man5 install -p -m644 tcpd.8 tcpdchk.8 tcpdmatch.8 safe_finger.8 try-from.8 ${RPM_BUILD_ROOT}%{_mandir}/man8 ln -sf hosts_access.5 ${RPM_BUILD_ROOT}%{_mandir}/man5/hosts.allow.5 ln -sf hosts_access.5 ${RPM_BUILD_ROOT}%{_mandir}/man5/hosts.deny.5 #cp -a libwrap.a ${RPM_BUILD_ROOT}%{_libdirdir} cp -a libwrap.so* ${RPM_BUILD_ROOT}/%{_libdir} #install -p -m644 libwrap.so.0.7.6 ${RPM_BUILD_ROOT}/%{_libdir} install -p -m644 tcpd.h ${RPM_BUILD_ROOT}%{_includedir} install -m755 safe_finger ${RPM_BUILD_ROOT}%{_sbindir} install -m755 tcpd ${RPM_BUILD_ROOT}%{_sbindir} install -m755 try-from ${RPM_BUILD_ROOT}%{_sbindir} install -m755 tcpdmatch ${RPM_BUILD_ROOT}%{_sbindir} # XXX remove utilities that expect /etc/inetd.conf (#16059). #install -m755 tcpdchk ${RPM_BUILD_ROOT}%{_sbindir} rm -f ${RPM_BUILD_ROOT}%{_mandir}/man8/tcpdchk.* %post libs -p /sbin/ldconfig %postun libs -p /sbin/ldconfig %clean rm -rf ${RPM_BUILD_ROOT} %files %defattr(-,root,root,-) %{!?_licensedir:%global license %%doc} %license DISCLAIMER %doc BLURB CHANGES README* Banners.Makefile %{_sbindir}/* %{_mandir}/man8/* %files libs %defattr(-,root,root,-) %{!?_licensedir:%global license %%doc} %license DISCLAIMER %doc BLURB CHANGES README* Banners.Makefile %{_libdir}/*.so.* %{_mandir}/man5/* %files devel %defattr(-,root,root,-) %{_includedir}/* #%{_libdirdir}/*.a %{_libdir}/*.so %{_mandir}/man3/* %changelog * Wed Aug 6 2014 Tom Callaway - 7.6-78 - fix license handling * Sun Jun 08 2014 Fedora Release Engineering - 7.6-77 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Aug 15 2013 Petr Lautrbach 7.6-76 - clean warnings and fix compiler inet_ntop issue (#977995) * Sun Aug 04 2013 Fedora Release Engineering - 7.6-75 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Tue Jul 09 2013 Petr Lautrbach 7.6-74 - fix the tcp_wrappers-7.6-altformat.patch (#979009,#981788) * Fri Feb 8 2013 Viktor Hercinger - 7.6-73 - Add full relro support * Fri Feb 8 2013 Viktor Hercinger - 7.6-72 - Put binaries and libraries under /usr instead of root * Mon Jan 28 2013 Viktor Hercinger - 7.6-71 - Updated to version with upstream IPv6 support * Sat Jul 21 2012 Fedora Release Engineering - 7.6-70 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Jan 14 2012 Fedora Release Engineering - 7.6-69 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Aug 16 2011 Jan F. Chadima - 7.6-68 - remove most of warnings * Mon Aug 15 2011 Jan F. Chadima - 7.6-67 - clean (set up correctly) additional groups * Mon Aug 15 2011 Jan F. Chadima - 7.6-66 - repair possible DOS in xgets * Wed Aug 10 2011 Jan F. Chadima - 7.6-65 - Add partial relro support for libraries * Tue May 24 2011 Jan F. Chadima - 7.6-64 - Improve the support for IPv4 /prefix notation (#698464) * Wed May 4 2011 Jan F. Chadima - 7.6-61 - Add support for IPv4 /prefix notation (#698464) * Wed Feb 09 2011 Fedora Release Engineering - 7.6-60 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Jun 16 2010 Jan F. Chadima - 7.6-59 - Add modified tcpdmatch (#604011) * Fri Feb 5 2010 Jan F. Chadima - 7.6-58 - Add manual pages for safe_finger and try-from (#526190) * Wed Jan 6 2010 Jan F. Chadima - 7.6-57 - Merge review (#226482) * Sun Jul 26 2009 Fedora Release Engineering - 7.6-56 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Apr 14 2009 Jan F. Chadima - 7.6-55 - resolving addr when name == "" (repair of patch #220015) * Wed Feb 25 2009 Fedora Release Engineering - 7.6-54 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Aug 29 2008 Jan Safranek - 7.6-53 - rediff all patches to get rid of patch fuzz * Wed Feb 20 2008 Fedora Release Engineering - 7.6-52 - Autorebuild for GCC 4.3 * Tue Oct 16 2007 Tomas Janousek - 7.6-51 - review changes * Fri Aug 24 2007 Tomas Janousek - 7.6-50 - license tag update (and rebuild for BuildID, etc.) - include docs in the -libs subpackage, as it is the only one installed on most systems (and to comply with the license text) * Wed Jul 25 2007 Tomas Janousek - 7.6-49 - fix for a.b.c.d/255.255.255.255 - fixes #249430 * Thu Jun 28 2007 Tomas Janousek - 7.6-48 - dropped the hostname resolving patch - resolve the address given to hosts_ctl to hostname, if hostname not given - compare localhost and localhost.localdomain as the same - fixed a few compile warnings * Wed Jun 06 2007 Tomas Janousek - 7.6-47 - fix the hostname resolving patch for x86_64 * Mon May 28 2007 Tomas Janousek - 7.6-46 - modified the fix for #112975 to fix #156373 as well * Fri May 25 2007 Tomas Janousek - 7.6-45 - unblock and catch SIGCHLD from spawned shell commands, fixes #112975 * Mon Apr 16 2007 Tomas Janousek - 7.6-44 - added restore_sigalarm and siglongjmp patches from Debian, fixes #205129 * Fri Mar 09 2007 Tomas Janousek - 7.6-43 - resolve hostnames in hosts.{allow,deny}, should fix a bunch of issues with IPv4/6 * Thu Mar 08 2007 Tomas Janousek - 7.6-42.1 - moved libwrap.so* to /lib - removed the static library libwrap.a * Mon Mar 05 2007 Tomas Janousek - 7.6-42 - added Obsoletes field so that the upgrade goes cleanly - added dist tag * Mon Dec 4 2006 Thomas Woerner 7.6-41 - moved devel libraries, headers and man pages into devel sub package (#193188) - new libs sub package for libraries - using BuildRequires instead of BuildPreReq * Wed Jul 12 2006 Jesse Keating - 7.6-40.2.1 - rebuild * Fri Feb 10 2006 Jesse Keating - 7.6-40.2 - bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating - 7.6-40.1 - rebuilt for new gcc4.1 snapshot and glibc changes * Tue Jan 24 2006 Thomas Woerner 7.6-40 - fixed uninitialized fp in function inet_cfg (#162412) * Fri Dec 09 2005 Jesse Keating - rebuilt * Fri May 6 2005 Thomas Woerner 7.6-39 - fixed sig patch (#141110). Thanks to Nikita Shulga for the patch * Wed Feb 9 2005 Thomas Woerner 7.6-38 - rebuild * Thu Oct 7 2004 Thomas Woerner 7.6-37.2 - new URL and spec file cleanup, patch from Robert Scheck * Mon Oct 4 2004 Thomas Woerner 7.6-37.1 - rebuilt * Tue Jun 15 2004 Elliot Lee - rebuilt * Fri Mar 5 2004 Thomas Woerner 7.6-36 - pied tcpd * Tue Mar 02 2004 Elliot Lee - rebuilt * Fri Feb 13 2004 Elliot Lee - rebuilt * Wed Jun 04 2003 Elliot Lee - rebuilt * Sun Feb 16 2003 Florian La Roche - use strerror #84312 * Tue Feb 11 2003 Harald Hoyer 7.6-33 - revert Nalins weak version - link libwrap.so against libnsl, on which it depends * Mon Feb 10 2003 Nalin Dahyabhai 7.6-32 - link libwrap.so against libnsl, on which it depends - add default (weak) versions of allow_severity and deny_severity to the shared library so that configure tests can find it correctly * Mon Feb 10 2003 Harald Hoyer 7.6-29 - shared library generated and added #75494 - added security patch tcp_wrappers-7.6-sig.patch - compile and link with -fPIC -DPIC * Wed Jan 22 2003 Tim Powers - rebuilt * Tue Jan 7 2003 Jeff Johnson 7.6-25 - don't include -debuginfo files in package. * Tue Nov 19 2002 Tim Powers - rebuild on all arches * Fri Jun 21 2002 Tim Powers - automated rebuild * Tue Jun 11 2002 Florian La Roche - fix #61192 - added Patch8 to fix #17847 - update IPv6 patch * Thu May 23 2002 Tim Powers - automated rebuild * Wed Jan 09 2002 Tim Powers - automated rebuild * Sun Mar 11 2001 Pekka Savola - Add IPv6 patch from USAGI, enable it. * Mon Feb 5 2001 Preston Brown - fix gethostbyname to work better with dot "." notation (#16949) * Sat Dec 30 2000 Jeff Johnson - permit hosts.{allow,deny} to be assembled from included components (#17795). - permit '*' and '?' wildcard matches on hostnames (#17847). * Sun Nov 19 2000 Bill Nottingham - ia64 needs -fPIC too * Mon Aug 14 2000 Jeff Johnson - remove utilities that expect /etc/inetd.conf (#16059). * Thu Jul 27 2000 Jeff Johnson - security hardening (#11881). * Wed Jul 12 2000 Prospector - automatic rebuild * Tue Jun 6 2000 Jeff Johnson - FHS packaging. * Tue May 16 2000 Chris Evans - Make tcpd mode -rwx--x--x as a security hardening measure * Mon Feb 7 2000 Jeff Johnson - compress man pages. * Mon Aug 23 1999 Jeff Johnson - add netgroup support (#3940). * Wed May 26 1999 Jeff Johnson - compile on sparc with -fPIC. * Sun Mar 21 1999 Cristian Gafton - auto rebuild in the new build environment (release 7) * Wed Dec 30 1998 Cristian Gafton - build for glibc 2.1 * Sat Aug 22 1998 Jeff Johnson - close setenv bug (problem #690) - spec file cleanup * Thu Jun 25 1998 Alan Cox - Erp where did the Dec 05 patch escape to * Thu May 07 1998 Prospector System - translations modified for de, fr, tr * Fri Dec 05 1997 Erik Troan - don't build setenv.o module -- it just breaks things * Wed Oct 29 1997 Marc Ewing - upgrade to 7.6 * Thu Jul 17 1997 Erik Troan - built against glibc * Mon Mar 03 1997 Erik Troan - Upgraded to version 7.5 - Uses a build root