Browse Source

NetworkManager package update

Signed-off-by: basebuilder_pel7x64builder0 <basebuilder@powerel.org>
master
basebuilder_pel7x64builder0 5 years ago
parent
commit
398ad621c8
  1. 34
      SOURCES/0001-cloned-mac-address-permanent-rh1413312.patch
  2. 58
      SOURCES/0003-dhclient-no-leading-zero-client-id-rh1556983.patch
  3. 399
      SPECS/NetworkManager.spec

34
SOURCES/0001-cloned-mac-address-permanent-rh1413312.patch

@ -1,4 +1,4 @@ @@ -1,4 +1,4 @@
From d7590dd02fd47cc32e0e76e19578116c83910591 Mon Sep 17 00:00:00 2001
From 488696bfaabe783972f756f53ff2cce7b0aa8d4b Mon Sep 17 00:00:00 2001
From: Thomas Haller <thaller@redhat.com>
Date: Fri, 24 Feb 2017 20:25:56 +0100
Subject: [PATCH] Revert "device: change default value for cloned-mac-address
@ -16,7 +16,7 @@ This reverts commit fae5ecec5a4d9987a1915441602cb78275a9f490. @@ -16,7 +16,7 @@ This reverts commit fae5ecec5a4d9987a1915441602cb78275a9f490.
5 files changed, 12 insertions(+), 13 deletions(-)

diff --git a/clients/common/settings-docs.h.in b/clients/common/settings-docs.h.in
index 7ad8c19a6..5aca99eee 100644
index 59ca4cc..5fbafb7 100644
--- a/clients/common/settings-docs.h.in
+++ b/clients/common/settings-docs.h.in
@@ -7,7 +7,7 @@
@ -26,9 +26,9 @@ index 7ad8c19a6..5aca99eee 100644 @@ -26,9 +26,9 @@ index 7ad8c19a6..5aca99eee 100644
-#define DESCRIBE_DOC_NM_SETTING_WIRELESS_CLONED_MAC_ADDRESS N_("If specified, request that the device use this MAC address instead. This is known as MAC cloning or spoofing. Beside explicitly specifying a MAC address, the special values \"preserve\", \"permanent\", \"random\" and \"stable\" are supported. \"preserve\" means not to touch the MAC address on activation. \"permanent\" means to use the permanent hardware address of the device. \"random\" creates a random MAC address on each connect. \"stable\" creates a hashed MAC address based on connection.stable-id and a machine dependent key. If unspecified, the value can be overwritten via global defaults, see manual of NetworkManager.conf. If still unspecified, it defaults to \"preserve\" (older versions of NetworkManager may use a different default value). On D-Bus, this field is expressed as \"assigned-mac-address\" or the deprecated \"cloned-mac-address\".")
+#define DESCRIBE_DOC_NM_SETTING_WIRELESS_CLONED_MAC_ADDRESS N_("If specified, request that the device use this MAC address instead of its permanent MAC address. This is known as MAC cloning or spoofing. Beside explicitly specifying a MAC address, the special values \"preserve\", \"permanent\", \"random\" and \"stable\" are supported. \"preserve\" means not to touch the MAC address on activation. \"permanent\" means to use the permanent hardware address of the device. \"random\" creates a random MAC address on each connect. \"stable\" creates a hashed MAC address based on connection.stable-id and a machine dependent key. If unspecified, the value can be overwritten via global defaults, see manual of NetworkManager.conf. If still unspecified, it defaults to \"permanent\". On D-Bus, this field is expressed as \"assigned-mac-address\" or the deprecated \"cloned-mac-address\".")
#define DESCRIBE_DOC_NM_SETTING_WIRELESS_GENERATE_MAC_ADDRESS_MASK N_("With \"cloned-mac-address\" setting \"random\" or \"stable\", by default all bits of the MAC address are scrambled and a locally-administered, unicast MAC address is created. This property allows to specify that certain bits are fixed. Note that the least significant bit of the first MAC address will always be unset to create a unicast MAC address. If the property is NULL, it is eligible to be overwritten by a default connection setting. If the value is still NULL or an empty string, the default is to create a locally-administered, unicast MAC address. If the value contains one MAC address, this address is used as mask. The set bits of the mask are to be filled with the current MAC address of the device, while the unset bits are subject to randomization. Setting \"FE:FF:FF:00:00:00\" means to preserve the OUI of the current MAC address and only randomize the lower 3 bytes using the \"random\" or \"stable\" algorithm. If the value contains one additional MAC address after the mask, this address is used instead of the current MAC address to fill the bits that shall not be randomized. For example, a value of \"FE:FF:FF:00:00:00 68:F7:28:00:00:00\" will set the OUI of the MAC address to 68:F7:28, while the lower bits are randomized. A value of \"02:00:00:00:00:00 00:00:00:00:00:00\" will create a fully scrambled globally-administered, burned-in MAC address. If the value contains more than one additional MAC addresses, one of them is chosen randomly. For example, \"02:00:00:00:00:00 00:00:00:00:00:00 02:00:00:00:00:00\" will create a fully scrambled MAC address, randomly locally or globally administered.")
#define DESCRIBE_DOC_NM_SETTING_WIRELESS_HIDDEN N_("If TRUE, indicates this network is a non-broadcasting network that hides its SSID. In this case various workarounds may take place, such as probe-scanning the SSID for more reliable network discovery. However, these workarounds expose inherent insecurities with hidden SSID networks, and thus hidden SSID networks should be used with caution. Note that marking the network as hidden may be a privacy issue for you, as the explicit probe-scans may be distinctly recognizable on the air.")
#define DESCRIBE_DOC_NM_SETTING_WIRELESS_HIDDEN N_("If TRUE, indicates that the network is a non-broadcasting network that hides its SSID. This works both in infrastructure and AP mode. In infrastructure mode, various workarounds are used for a more reliable discovery of hidden networks, such as probe-scanning the SSID. However, these workarounds expose inherent insecurities with hidden SSID networks, and thus hidden SSID networks should be used with caution. In AP mode, the created network does not broadcast its SSID. Note that marking the network as hidden may be a privacy issue for you (in infrastructure mode) or client stations (in AP mode), as the explicit probe-scans are distinctly recognizable on the air.")
#define DESCRIBE_DOC_NM_SETTING_WIRELESS_MAC_ADDRESS N_("If specified, this connection will only apply to the Wi-Fi device whose permanent MAC address matches. This property does not change the MAC address of the device (i.e. MAC spoofing).")
@@ -89,7 +89,7 @@
@@ -86,7 +86,7 @@
#define DESCRIBE_DOC_NM_SETTING_802_1X_SUBJECT_MATCH N_("Substring to be matched against the subject of the certificate presented by the authentication server. When unset, no verification of the authentication server certificate's subject is performed. This property provides little security, if any, and its use is deprecated in favor of NMSetting8021x:domain-suffix-match.")
#define DESCRIBE_DOC_NM_SETTING_802_1X_SYSTEM_CA_CERTS N_("When TRUE, overrides the \"ca-path\" and \"phase2-ca-path\" properties using the system CA directory specified at configure time with the --system-ca-path switch. The certificates in this directory are added to the verification chain in addition to any certificates specified by the \"ca-cert\" and \"phase2-ca-cert\" properties. If the path provided with --system-ca-path is rather a file name (bundle of trusted CA certificates), it overrides \"ca-cert\" and \"phase2-ca-cert\" properties instead (sets ca_cert/ca_cert2 options for wpa_supplicant).")
#define DESCRIBE_DOC_NM_SETTING_WIRED_AUTO_NEGOTIATE N_("When TRUE, enforce auto-negotiation of speed and duplex mode. If \"speed\" and \"duplex\" properties are both specified, only that single mode will be advertised and accepted during the link auto-negotiation process: this works only for BASE-T 802.3 specifications and is useful for enforcing gigabits modes, as in these cases link negotiation is mandatory. When FALSE, \"speed\" and \"duplex\" properties should be both set or link configuration will be skipped.")
@ -38,10 +38,10 @@ index 7ad8c19a6..5aca99eee 100644 @@ -38,10 +38,10 @@ index 7ad8c19a6..5aca99eee 100644
#define DESCRIBE_DOC_NM_SETTING_WIRED_GENERATE_MAC_ADDRESS_MASK N_("With \"cloned-mac-address\" setting \"random\" or \"stable\", by default all bits of the MAC address are scrambled and a locally-administered, unicast MAC address is created. This property allows to specify that certain bits are fixed. Note that the least significant bit of the first MAC address will always be unset to create a unicast MAC address. If the property is NULL, it is eligible to be overwritten by a default connection setting. If the value is still NULL or an empty string, the default is to create a locally-administered, unicast MAC address. If the value contains one MAC address, this address is used as mask. The set bits of the mask are to be filled with the current MAC address of the device, while the unset bits are subject to randomization. Setting \"FE:FF:FF:00:00:00\" means to preserve the OUI of the current MAC address and only randomize the lower 3 bytes using the \"random\" or \"stable\" algorithm. If the value contains one additional MAC address after the mask, this address is used instead of the current MAC address to fill the bits that shall not be randomized. For example, a value of \"FE:FF:FF:00:00:00 68:F7:28:00:00:00\" will set the OUI of the MAC address to 68:F7:28, while the lower bits are randomized. A value of \"02:00:00:00:00:00 00:00:00:00:00:00\" will create a fully scrambled globally-administered, burned-in MAC address. If the value contains more than one additional MAC addresses, one of them is chosen randomly. For example, \"02:00:00:00:00:00 00:00:00:00:00:00 02:00:00:00:00:00\" will create a fully scrambled MAC address, randomly locally or globally administered.")
#define DESCRIBE_DOC_NM_SETTING_WIRED_MAC_ADDRESS N_("If specified, this connection will only apply to the Ethernet device whose permanent MAC address matches. This property does not change the MAC address of the device (i.e. MAC spoofing).")
diff --git a/libnm-core/nm-setting-wired.c b/libnm-core/nm-setting-wired.c
index 5da9ce7d7..ccbc42f90 100644
index 7f08430..b916a7c 100644
--- a/libnm-core/nm-setting-wired.c
+++ b/libnm-core/nm-setting-wired.c
@@ -1149,8 +1149,8 @@ nm_setting_wired_class_init (NMSettingWiredClass *setting_wired_class)
@@ -1150,8 +1150,8 @@ nm_setting_wired_class_init (NMSettingWiredClass *klass)
/**
* NMSettingWired:cloned-mac-address:
*
@ -52,7 +52,7 @@ index 5da9ce7d7..ccbc42f90 100644 @@ -52,7 +52,7 @@ index 5da9ce7d7..ccbc42f90 100644
*
* Beside explicitly specifying a MAC address, the special values "preserve", "permanent",
* "random" and "stable" are supported.
@@ -1162,8 +1162,7 @@ nm_setting_wired_class_init (NMSettingWiredClass *setting_wired_class)
@@ -1163,8 +1163,7 @@ nm_setting_wired_class_init (NMSettingWiredClass *klass)
* machine dependent key.
*
* If unspecified, the value can be overwritten via global defaults, see manual
@ -63,10 +63,10 @@ index 5da9ce7d7..ccbc42f90 100644 @@ -63,10 +63,10 @@ index 5da9ce7d7..ccbc42f90 100644
* On D-Bus, this field is expressed as "assigned-mac-address" or the deprecated
* "cloned-mac-address".
diff --git a/libnm-core/nm-setting-wireless.c b/libnm-core/nm-setting-wireless.c
index 89a2df8eb..e80d153f1 100644
index b4cb105..ac3f168 100644
--- a/libnm-core/nm-setting-wireless.c
+++ b/libnm-core/nm-setting-wireless.c
@@ -1396,8 +1396,8 @@ nm_setting_wireless_class_init (NMSettingWirelessClass *setting_wireless_class)
@@ -1405,8 +1405,8 @@ nm_setting_wireless_class_init (NMSettingWirelessClass *klass)
/**
* NMSettingWireless:cloned-mac-address:
*
@ -77,7 +77,7 @@ index 89a2df8eb..e80d153f1 100644 @@ -77,7 +77,7 @@ index 89a2df8eb..e80d153f1 100644
*
* Beside explicitly specifying a MAC address, the special values "preserve", "permanent",
* "random" and "stable" are supported.
@@ -1408,8 +1408,7 @@ nm_setting_wireless_class_init (NMSettingWirelessClass *setting_wireless_class)
@@ -1417,8 +1417,7 @@ nm_setting_wireless_class_init (NMSettingWirelessClass *klass)
* machine dependent key.
*
* If unspecified, the value can be overwritten via global defaults, see manual
@ -88,10 +88,10 @@ index 89a2df8eb..e80d153f1 100644 @@ -88,10 +88,10 @@ index 89a2df8eb..e80d153f1 100644
* On D-Bus, this field is expressed as "assigned-mac-address" or the deprecated
* "cloned-mac-address".
diff --git a/man/NetworkManager.conf.xml b/man/NetworkManager.conf.xml
index 17bc42f34..aa8e66946 100644
index 2893424..a8c4d0b 100644
--- a/man/NetworkManager.conf.xml
+++ b/man/NetworkManager.conf.xml
@@ -661,7 +661,7 @@ ipv6.ip6-privacy=0
@@ -705,7 +705,7 @@ ipv6.ip6-privacy=0
</varlistentry>
<varlistentry>
<term><varname>ethernet.cloned-mac-address</varname></term>
@ -100,7 +100,7 @@ index 17bc42f34..aa8e66946 100644 @@ -100,7 +100,7 @@ index 17bc42f34..aa8e66946 100644
</varlistentry>
<varlistentry>
<term><varname>ethernet.generate-mac-address-mask</varname></term>
@@ -733,7 +733,7 @@ ipv6.ip6-privacy=0
@@ -794,7 +794,7 @@ ipv6.ip6-privacy=0
</varlistentry>
<varlistentry>
<term><varname>wifi.cloned-mac-address</varname></term>
@ -110,11 +110,11 @@ index 17bc42f34..aa8e66946 100644 @@ -110,11 +110,11 @@ index 17bc42f34..aa8e66946 100644
<varlistentry>
<term><varname>wifi.generate-mac-address-mask</varname></term>
diff --git a/src/devices/nm-device.c b/src/devices/nm-device.c
index 5a5cb50e9..613e87034 100644
index 06ad2ce82..c0867a04b 100644
--- a/src/devices/nm-device.c
+++ b/src/devices/nm-device.c
@@ -14628,7 +14628,8 @@ _get_cloned_mac_address_setting (NMDevice *self, NMConnection *connection, gbool
is_wifi ? "wifi.cloned-mac-address" : "ethernet.cloned-mac-address",
@@ -15453,7 +15453,8 @@ _get_cloned_mac_address_setting (NMDevice *self, NMConnection *connection, gbool
: NM_CON_DEFAULT ("ethernet.cloned-mac-address"),
self);
- addr = NM_CLONED_MAC_PRESERVE;
@ -124,5 +124,5 @@ index 5a5cb50e9..613e87034 100644 @@ -124,5 +124,5 @@ index 5a5cb50e9..613e87034 100644
if (!a) {
if (is_wifi) {
--
2.17.0
2.21.0


58
SOURCES/0003-dhclient-no-leading-zero-client-id-rh1556983.patch

@ -1,4 +1,4 @@ @@ -1,4 +1,4 @@
From 8e8c797904fc29396d340609f006add206df4973 Mon Sep 17 00:00:00 2001
From bbee3b6833ab1792e75470db5f3b7022e9a965f5 Mon Sep 17 00:00:00 2001
From: Beniamino Galvani <bgalvani@redhat.com>
Date: Wed, 20 Jun 2018 11:49:22 +0200
Subject: [PATCH 1/2] Revert "dhclient: write client-id with backslash and
@ -7,11 +7,11 @@ Subject: [PATCH 1/2] Revert "dhclient: write client-id with backslash and @@ -7,11 +7,11 @@ Subject: [PATCH 1/2] Revert "dhclient: write client-id with backslash and
This reverts commit 0e4b33ee7552b036332f1bdbfed78f8ee75f000e.
---
src/dhcp/nm-dhcp-dhclient-utils.c | 2 +-
src/dhcp/tests/test-dhcp-dhclient.c | 32 +----------------------------
2 files changed, 2 insertions(+), 32 deletions(-)
src/dhcp/tests/test-dhcp-dhclient.c | 33 +----------------------------
2 files changed, 2 insertions(+), 33 deletions(-)

diff --git a/src/dhcp/nm-dhcp-dhclient-utils.c b/src/dhcp/nm-dhcp-dhclient-utils.c
index 3290dd65c..6adb395c9 100644
index cbd706f..7324597 100644
--- a/src/dhcp/nm-dhcp-dhclient-utils.c
+++ b/src/dhcp/nm-dhcp-dhclient-utils.c
@@ -124,7 +124,7 @@ add_ip4_config (GString *str, GBytes *client_id, const char *hostname, gboolean
@ -24,10 +24,10 @@ index 3290dd65c..6adb395c9 100644 @@ -24,10 +24,10 @@ index 3290dd65c..6adb395c9 100644
}
diff --git a/src/dhcp/tests/test-dhcp-dhclient.c b/src/dhcp/tests/test-dhcp-dhclient.c
index 2f369aacc..f3b17807f 100644
index 55d712b..7df0720 100644
--- a/src/dhcp/tests/test-dhcp-dhclient.c
+++ b/src/dhcp/tests/test-dhcp-dhclient.c
@@ -176,35 +176,6 @@ test_quote_client_id (void)
@@ -178,36 +178,6 @@ test_quote_client_id (void)
/*****************************************************************************/
@ -45,6 +45,7 @@ index 2f369aacc..f3b17807f 100644 @@ -45,6 +45,7 @@ index 2f369aacc..f3b17807f 100644
- "also request static-routes;\n"
- "also request wpad;\n"
- "also request ntp-servers;\n"
- "also request root-path;\n"
- "\n";
-
-static void
@ -63,7 +64,7 @@ index 2f369aacc..f3b17807f 100644 @@ -63,7 +64,7 @@ index 2f369aacc..f3b17807f 100644
static const char *hex_zero_client_id_expected = \
"# Created by NetworkManager\n"
"\n"
@@ -1026,8 +997,7 @@ main (int argc, char **argv)
@@ -1130,8 +1100,7 @@ main (int argc, char **argv)
g_test_add_func ("/dhcp/dhclient/orig_missing", test_orig_missing);
g_test_add_func ("/dhcp/dhclient/override_client_id", test_override_client_id);
@ -74,9 +75,9 @@ index 2f369aacc..f3b17807f 100644 @@ -74,9 +75,9 @@ index 2f369aacc..f3b17807f 100644
g_test_add_func ("/dhcp/dhclient/ascii_client_id", test_ascii_client_id);
g_test_add_func ("/dhcp/dhclient/hex_single_client_id", test_hex_single_client_id);
--
2.17.0
2.21.0

From 5fa45f1a84ea2e46e5fb07aeef19cb46322b64bc Mon Sep 17 00:00:00 2001
From 2049c9c861f262aa6c949f45cd401ec515c2f2d0 Mon Sep 17 00:00:00 2001
From: Beniamino Galvani <bgalvani@redhat.com>
Date: Wed, 20 Jun 2018 11:50:51 +0200
Subject: [PATCH 2/2] Revert "dhcp: dhclient: set type 0 for printable client
@ -86,12 +87,12 @@ Keep the RHEL 7.5 behavior. @@ -86,12 +87,12 @@ Keep the RHEL 7.5 behavior.

This reverts commit 8ffa22d10d3001405965826b46463663fd2dacc2.
---
src/dhcp/nm-dhcp-dhclient-utils.c | 46 +++-------------
src/dhcp/tests/test-dhcp-dhclient.c | 83 +++--------------------------
2 files changed, 16 insertions(+), 113 deletions(-)
src/dhcp/nm-dhcp-dhclient-utils.c | 46 +++------------
src/dhcp/tests/test-dhcp-dhclient.c | 87 +++--------------------------
2 files changed, 17 insertions(+), 116 deletions(-)

diff --git a/src/dhcp/nm-dhcp-dhclient-utils.c b/src/dhcp/nm-dhcp-dhclient-utils.c
index 6adb395c9..90fa33397 100644
index 7324597..4eb4c5d 100644
--- a/src/dhcp/nm-dhcp-dhclient-utils.c
+++ b/src/dhcp/nm-dhcp-dhclient-utils.c
@@ -137,9 +137,8 @@ add_ip4_config (GString *str, GBytes *client_id, const char *hostname, gboolean
@ -172,12 +173,12 @@ index 6adb395c9..90fa33397 100644 @@ -172,12 +173,12 @@ index 6adb395c9..90fa33397 100644
+ return nm_dhcp_utils_client_id_string_to_bytes (s);
}
GBytes *
static gboolean
diff --git a/src/dhcp/tests/test-dhcp-dhclient.c b/src/dhcp/tests/test-dhcp-dhclient.c
index f3b17807f..377938c87 100644
index 7df0720..acdd276 100644
--- a/src/dhcp/tests/test-dhcp-dhclient.c
+++ b/src/dhcp/tests/test-dhcp-dhclient.c
@@ -150,7 +150,7 @@ test_override_client_id (void)
@@ -151,7 +151,7 @@ test_override_client_id (void)
static const char *quote_client_id_expected = \
"# Created by NetworkManager\n"
"\n"
@ -186,7 +187,7 @@ index f3b17807f..377938c87 100644 @@ -186,7 +187,7 @@ index f3b17807f..377938c87 100644
"\n"
"option rfc3442-classless-static-routes code 121 = array of unsigned integer 8;\n"
"option ms-classless-static-routes code 249 = array of unsigned integer 8;\n"
@@ -168,36 +168,7 @@ test_quote_client_id (void)
@@ -170,37 +170,7 @@ test_quote_client_id (void)
{
test_config (NULL, quote_client_id_expected,
AF_INET, NULL, 0, FALSE,
@ -212,6 +213,7 @@ index f3b17807f..377938c87 100644 @@ -212,6 +213,7 @@ index f3b17807f..377938c87 100644
- "also request static-routes;\n"
- "also request wpad;\n"
- "also request ntp-servers;\n"
- "also request root-path;\n"
- "\n";
-
-static void
@ -224,7 +226,7 @@ index f3b17807f..377938c87 100644 @@ -224,7 +226,7 @@ index f3b17807f..377938c87 100644
NULL,
"eth0",
NULL);
@@ -208,7 +179,7 @@ test_hex_zero_client_id (void)
@@ -211,7 +181,7 @@ test_hex_zero_client_id (void)
static const char *ascii_client_id_expected = \
"# Created by NetworkManager\n"
"\n"
@ -233,7 +235,7 @@ index f3b17807f..377938c87 100644 @@ -233,7 +235,7 @@ index f3b17807f..377938c87 100644
"\n"
"option rfc3442-classless-static-routes code 121 = array of unsigned integer 8;\n"
"option ms-classless-static-routes code 249 = array of unsigned integer 8;\n"
@@ -264,13 +235,13 @@ test_hex_single_client_id (void)
@@ -269,13 +239,13 @@ test_hex_single_client_id (void)
/*****************************************************************************/
static const char *existing_hex_client_id_orig = \
@ -249,7 +251,7 @@ index f3b17807f..377938c87 100644 @@ -249,7 +251,7 @@ index f3b17807f..377938c87 100644
"\n"
"option rfc3442-classless-static-routes code 121 = array of unsigned integer 8;\n"
"option ms-classless-static-routes code 249 = array of unsigned integer 8;\n"
@@ -287,7 +258,7 @@ static void
@@ -293,7 +263,7 @@ static void
test_existing_hex_client_id (void)
{
gs_unref_bytes GBytes *new_client_id = NULL;
@ -258,7 +260,7 @@ index f3b17807f..377938c87 100644 @@ -258,7 +260,7 @@ index f3b17807f..377938c87 100644
new_client_id = g_bytes_new (bytes, sizeof (bytes));
test_config (existing_hex_client_id_orig, existing_hex_client_id_expected,
@@ -300,52 +271,16 @@ test_existing_hex_client_id (void)
@@ -306,53 +276,16 @@ test_existing_hex_client_id (void)
/*****************************************************************************/
@ -280,6 +282,7 @@ index f3b17807f..377938c87 100644 @@ -280,6 +282,7 @@ index f3b17807f..377938c87 100644
- "also request static-routes;\n"
- "also request wpad;\n"
- "also request ntp-servers;\n"
- "also request root-path;\n"
- "\n";
-
-static void
@ -313,7 +316,16 @@ index f3b17807f..377938c87 100644 @@ -313,7 +316,16 @@ index f3b17807f..377938c87 100644
"\n"
"option rfc3442-classless-static-routes code 121 = array of unsigned integer 8;\n"
"option ms-classless-static-routes code 249 = array of unsigned integer 8;\n"
@@ -998,11 +933,9 @@ main (int argc, char **argv)
@@ -944,7 +877,7 @@ static void
test_structured (void)
{
gs_unref_bytes GBytes *new_client_id = NULL;
- const guint8 bytes[] = "sad-and-useless";
+ const guint8 bytes[] = "\x00sad-and-useless";
static const char *const orig = \
"interface \"eth0\" { \n"
@@ -1101,11 +1034,9 @@ main (int argc, char **argv)
g_test_add_func ("/dhcp/dhclient/orig_missing", test_orig_missing);
g_test_add_func ("/dhcp/dhclient/override_client_id", test_override_client_id);
g_test_add_func ("/dhcp/dhclient/quote_client_id", test_quote_client_id);
@ -326,5 +338,5 @@ index f3b17807f..377938c87 100644 @@ -326,5 +338,5 @@ index f3b17807f..377938c87 100644
g_test_add_func ("/dhcp/dhclient/fqdn", test_fqdn);
g_test_add_func ("/dhcp/dhclient/fqdn_options_override", test_fqdn_options_override);
--
2.17.0
2.21.0


399
SPECS/NetworkManager.spec

@ -8,9 +8,9 @@ @@ -8,9 +8,9 @@
%global glib2_version %(pkg-config --modversion glib-2.0 2>/dev/null || echo bad)

%global epoch_version 1
%global rpm_version 1.12.0
%global real_version 1.12.0
%global release_version 10
%global rpm_version 1.18.0
%global real_version 1.18.0
%global release_version 5
%global snapshot %{nil}
%global git_sha %{nil}

@ -23,21 +23,23 @@ @@ -23,21 +23,23 @@

%global _hardened_build 1

%if x%{?snapshot} != x
%if "x%{?snapshot}" != x
%global snapshot_dot .%{snapshot}
%endif
%if x%{?git_sha} != x
%if "x%{?git_sha}" != x
%global git_sha_dot .%{git_sha}
%endif

%global snap %{?snapshot_dot}%{?git_sha_dot}

%global real_version_major %(printf '%s' '%{real_version}' | sed -n 's/^\\([1-9][0-9]*\\.[1-9][0-9]*\\)\\.[1-9][0-9]*$/\\1/p')
### ### ### %global real_version_major %(printf '%s' '%{real_version}' | sed -n 's/^\\([1-9][0-9]*\\.[1-9][0-9]*\\)\\.[1-9][0-9]*$/\\1/p')
%global real_version_major 1.18

%global is_devel_build %(printf '%s' '%{real_version}' | sed -n 's/^1\\.\\([0-9]*[13579]\\)\\..*/1/p')
%global systemd_units NetworkManager.service NetworkManager-wait-online.service NetworkManager-dispatcher.service

###############################################################################

%bcond_with meson
%bcond_without adsl
%bcond_without bluetooth
%bcond_without wwan
@ -51,12 +53,9 @@ @@ -51,12 +53,9 @@
# on RHEL we don't regenerate the documentation
%bcond_with regen_docs

%if 0%{is_devel_build}
%bcond_without debug
%else
%bcond_with debug
%endif
%bcond_without test
%bcond_with test
%bcond_with lto
%bcond_with sanitizer
%if 0%{?fedora} > 28 || 0%{?rhel} > 7
%bcond_with libnm_glib
@ -95,13 +94,46 @@ @@ -95,13 +94,46 @@
%global with_modem_manager_1 0
%endif

%if 0%{?fedora} >= 31 || 0%{?rhel} > 7
%global dhcp_default internal
%else
%global dhcp_default dhclient
%endif

%if 0%{?fedora} || 0%{?rhel} > 7
%global logging_backend_default journal
%global dns_rc_manager_default symlink
%else
%global logging_backend_default syslog
%global dns_rc_manager_default file
%endif

%if 0%{?rhel}
%global config_plugins_default ifcfg-rh,ibft
%global ibft_enabled yes
%else
%global config_plugins_default ifcfg-rh
%global ibft_enabled no
%endif

%if 0%{?fedora}
# Altough eBPF would be available on Fedora's kernel, it seems
# we often get SELinux denials (rh#1651654). But even aside them,
# bpf(BPF_MAP_CREATE, ...) randomly fails with EPERM. That might
# be related to `ulimit -l`. Anyway, this is not usable at the
# moment.
%global ebpf_enabled no
%else
%global ebpf_enabled no
%endif

###############################################################################

Name: NetworkManager
Summary: Network connection manager and user applications
Epoch: %{epoch_version}
Version: %{rpm_version}
Release: %{release_version}%{?snap}%{?dist}
Release: %{release_version}%{?snap}%{?dist}.1
Group: System Environment/Base
License: GPLv2+
URL: http://www.gnome.org/projects/NetworkManager/
@ -109,30 +141,40 @@ URL: http://www.gnome.org/projects/NetworkManager/ @@ -109,30 +141,40 @@ URL: http://www.gnome.org/projects/NetworkManager/
Source: https://download.gnome.org/sources/NetworkManager/%{real_version_major}/%{name}-%{real_version}.tar.xz
Source1: NetworkManager.conf
Source2: 00-server.conf
Source3: 20-connectivity-fedora.conf
Source4: 20-connectivity-redhat.conf
Source5: 10-slaves-order.conf

# RHEL downstream patches that change behavior from upstream.
# These are not bugfixes, hence they are also relevant after
# the next rebase of the source tarball.
Source3: 10-slaves-order.conf
Source4: 20-connectivity-fedora.conf
Source5: 20-connectivity-redhat.conf

# Patches numbering convention:
# 0001 - 0999 : RHEL downstream patches that change behavior from upstream.
# These are not bugfixes, hence they are also relevant after
# the next rebase of the source tarball.
# 1000 - 8999 : bugfix patches, usually backports, no more needed after
# rebasing.
# 9000 - 9999 : downstream patches that should be applied after all the other
# ones.
Patch1: 0001-cloned-mac-address-permanent-rh1413312.patch
Patch2: 0002-nm-wait-online-not-require-nm-service-rh1520865.patch
Patch3: 0003-dhclient-no-leading-zero-client-id-rh1556983.patch
Patch4: 0004-device-disable-rp_filter-handling.patch
Patch5: 0005-ibft-cap-sys-admin-rh1371201.patch
Patch6: 0006-support-aes256-private-keys-rh1623798.patch
Patch7: 0007-core-fix-wireless-bitrate-property-name-on-D-Bus-rh1626391.patch
Patch8: 0008-dns-dnsmsaq-avoid-crash-no-rev-domains-rh1628576.patch
Patch9: 0009-dhcp-internal-fixes-cve-2018-15688-rh1643984.patch

Patch1000: 1000-cli-remove-assertion-in-nmc_device_state_to_color.patch
Patch1001: 1001-translations-rh1569438.patch
Patch1002: 1002-cli-fix-reading-vpn.secrets.-from-passwd-file.patch
Patch1003: 1003-manager-accept-non-null-device-for-VPN-activations-rh1641174.patch
Patch1004: 1004-preserve-routes-on-link-down-rh1676551.patch
Patch1005: 1005-manager-ignore-ovs-system-master-when-assuming-rh1676551.patch
Patch1006: 1006-device-announce-arp-after-slaves-rh1678796.patch
Patch4: 0004-ibft-cap-sys-admin-rh1371201.patch
Patch5: 0005-dhcp-internal-default-client-id-rh1695723.patch
Patch6: 0006-no-keyfile-file-name-extension-rh1697858.patch

# Bugfixes
Patch1000: 1000-cli-hide-certificate-blobs-rh1702199.patch
Patch1001: 1001-device-fix-reapply-of-MTU-rh1702657.patch
Patch1002: 1002-settings-fix-failed-assertion-rh1707261.patch
Patch1003: 1003-sw-devices-managed-after-wake-rh1701585.patch
Patch1004: 1004-device-restore-ipv6-config-on-link-up-rh1548237.patch
Patch1005: 1005-load-connection-dbus-fixes-rh1708660.patch
Patch1006: 1006-fix-file-permissions-secret-key-rh1709849.patch
Patch1007: 1007-tc-update-rh1546802.patch
Patch1008: 1008-don-t-kill-teamd-for-external-devices-rh1711952.patch
Patch1009: 1009-ifcfg-rh-use-PKCS12-private-as-client-cert-rh1714610.patch
Patch1010: 1010-translations-rh1689962.patch
Patch1011: 1011-cli-editor-no-wait-on-failure-rh1702203.patch
Patch1012: 1012-team-fix-validate-send-always-flags-rh1720153.patch
Patch1013: 1013-ovs-slaves-restart-fixes-rh1733709.patch

# The pregenerated docs contain default values and paths that depend
# on the configure options when creating the source tarball.
@ -154,8 +196,10 @@ Obsoletes: NetworkManager < %{obsoletes_device_plugins} @@ -154,8 +196,10 @@ Obsoletes: NetworkManager < %{obsoletes_device_plugins}
Obsoletes: NetworkManager < %{obsoletes_ppp_plugin}
Obsoletes: NetworkManager-wimax < 1.2

%if 0%{?rhel} && 0%{?rhel} <= 7
# Kept for RHEL to ensure that wired 802.1x works out of the box
Requires: wpa_supplicant >= 1:1.1
%endif

Conflicts: NetworkManager-vpnc < 1:0.7.0.99-1
Conflicts: NetworkManager-openvpn < 1:0.7.0.99-1
@ -166,8 +210,12 @@ Conflicts: kde-plasma-networkmanagement < 1:0.9-0.49.20110527git.nm09 @@ -166,8 +210,12 @@ Conflicts: kde-plasma-networkmanagement < 1:0.9-0.49.20110527git.nm09
BuildRequires: gcc
BuildRequires: libtool
BuildRequires: pkgconfig
%if %{with meson}
BuildRequires: meson
%else
BuildRequires: automake
BuildRequires: autoconf
%endif
BuildRequires: intltool
BuildRequires: gettext-devel

@ -194,7 +242,7 @@ BuildRequires: gtk-doc @@ -194,7 +242,7 @@ BuildRequires: gtk-doc
%endif
BuildRequires: libudev-devel
BuildRequires: libuuid-devel
BuildRequires: vala-tools
BuildRequires: /usr/bin/valac
BuildRequires: iptables
BuildRequires: libxslt
%if %{with bluetooth}
@ -232,6 +280,18 @@ BuildRequires: libubsan @@ -232,6 +280,18 @@ BuildRequires: libubsan
%endif
%endif

# NetworkManager uses various parts of systemd-networkd internally, including
# DHCP client, IPv4 Link-Local address negotiation or LLDP support.
# This provide is essentially here so that NetworkManager shows on Security
# Response Team's radar in case a flaw is found. The code is frequently
# synchronized and thus it's not easy to establish a good version number
# here. The version of zero is there just to have something conservative so
# that the scripts that would parse the SPEC file naively would be unlikely
# to fail. Refer to git log for the real date and commit number of last
# synchronization:
# https://gitlab.freedesktop.org/NetworkManager/NetworkManager/commits/master/src/systemd
Provides: bundled(systemd) = 0


%description
NetworkManager is a system service that manages network interfaces and
@ -260,8 +320,12 @@ Summary: Bluetooth device plugin for NetworkManager @@ -260,8 +320,12 @@ Summary: Bluetooth device plugin for NetworkManager
Group: System Environment/Base
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
Requires: NetworkManager-wwan = %{epoch}:%{version}-%{release}
%if 0%{?rhel} && 0%{?rhel} <= 7
# No Requires:bluez to prevent it being installed when updating
# to the split NM package
%else
Requires: bluez >= 4.101-5
%endif
Obsoletes: NetworkManager < %{obsoletes_device_plugins}
Obsoletes: NetworkManager-bt

@ -277,6 +341,12 @@ Group: System Environment/Base @@ -277,6 +341,12 @@ Group: System Environment/Base
BuildRequires: teamd-devel
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
Obsoletes: NetworkManager < %{obsoletes_device_plugins}
%if 0%{?fedora} || 0%{?rhel} >= 8
# Team was split from main NM binary between 0.9.10 and 1.0
# We need this Obsoletes in addition to the one above
# (git:3aede801521ef7bff039e6e3f1b3c7b566b4338d).
Obsoletes: NetworkManager < 1.0.0
%endif

%description team
This package contains NetworkManager support for team devices.
@ -310,8 +380,12 @@ This package contains NetworkManager support for Wifi and OLPC devices. @@ -310,8 +380,12 @@ This package contains NetworkManager support for Wifi and OLPC devices.
Summary: Mobile broadband device plugin for NetworkManager
Group: System Environment/Base
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
%if 0%{?rhel} && 0%{?rhel} <= 7
# No Requires:ModemManager to prevent it being installed when updating
# to the split NM package
%else
Requires: ModemManager
%endif
Obsoletes: NetworkManager < %{obsoletes_device_plugins}

%description wwan
@ -475,8 +549,126 @@ by nm-connection-editor and nm-applet in a non-graphical environment. @@ -475,8 +549,126 @@ by nm-connection-editor and nm-applet in a non-graphical environment.
%prep
%autosetup -p1 -n NetworkManager-%{real_version}

# On RHEL 7 patch creates backup files if the match is not clean.
# Fixed in later RPM versions.
find -name '*.orig' -delete


%build
%if %{with meson}
%meson \
-Db_ndebug=false \
--warnlevel 2 \
%if %{with test}
--werror \
%endif
-Ddhcpcanon=no \
-Ddhcpcd=no \
-Dconfig_dhcp_default=%{dhcp_default} \
%if %{with crypto_gnutls}
-Dcrypto=gnutls \
%else
-Dcrypto=nss \
%endif
%if %{with debug}
-Dmore_logging=true \
-Dmore_asserts=10000 \
%else
-Dmore_logging=false \
-Dmore_asserts=0 \
%endif
-Dld_gc=true \
%if %{with lto}
-D b_lto=true \
%else
-D b_lto=false \
%endif
-Dlibaudit=yes-disabled-by-default \
%if 0%{?with_modem_manager_1}
-Dmodem_manager=true \
%else
-Dmodem_manager=false \
%endif
%if %{with wifi}
-Dwifi=true \
%if 0%{?fedora}
-Dwext=true \
%else
-Dwext=false \
%endif
%else
-Dwifi=false \
%endif
%if %{with iwd}
-Diwd=true \
%else
-Diwd=false \
%endif
-Dvapi=true \
-Dintrospection=true \
%if %{with regen_docs}
-Ddocs=true \
%else
-Ddocs=false \
%endif
%if %{with team}
-Dteamdctl=true \
%else
-Dteamdctl=false \
%endif
%if %{with ovs}
-Dovs=true \
%else
-Dovs=false \
%endif
-Dselinux=true \
-Dpolkit=true \
-Dpolkit_agent=true \
-Dmodify_system=true \
-Dconcheck=true \
%if 0%{?fedora}
-Dlibpsl=true \
%else
-Dlibpsl=false \
%endif
%if %{ebpf_enabled} != yes
-Debpf=false \
%else
-Debpf=true \
%endif
-Dsession_tracking=systemd \
-Dsuspend_resume=systemd \
-Dsystemdsystemunitdir=%{systemd_dir} \
-Dsystem_ca_path=/etc/pki/tls/cert.pem \
-Ddbus_conf_dir=%{dbus_sys_dir} \
-Dtests=yes \
-Dvalgrind=no \
-Difcfg_rh=true \
%if %{ibft_enabled} != yes
-Dibft=false \
%else
-Dibft=true \
%endif
-Difupdown=false \
%if %{with ppp}
-Dpppd_plugin_dir=%{_libdir}/pppd/%{ppp_version} \
-Dppp=true \
%endif
-Ddist_version=%{version}-%{release} \
-Dconfig_plugins_default=%{config_plugins_default} \
-Dconfig_dns_rc_manager_default=%{dns_rc_manager_default} \
-Dconfig_logging_backend_default=%{logging_backend_default} \
-Djson_validation=true \
%if %{with libnm_glib}
-Dlibnm_glib=true
%else
-Dlibnm_glib=false
%endif

%meson_build

%else
# autotools
%if %{with regen_docs}
gtkdocize
%endif
@ -488,7 +680,7 @@ intltoolize --automake --copy --force @@ -488,7 +680,7 @@ intltoolize --automake --copy --force
--with-dhclient=yes \
--with-dhcpcd=no \
--with-dhcpcanon=no \
--with-config-dhcp-default=dhclient \
--with-config-dhcp-default=%{dhcp_default} \
%if %{with crypto_gnutls}
--with-crypto=gnutls \
%else
@ -511,6 +703,11 @@ intltoolize --automake --copy --force @@ -511,6 +703,11 @@ intltoolize --automake --copy --force
--without-more-asserts \
%endif
--enable-ld-gc \
%if %{with lto}
--enable-lto \
%else
--disable-lto \
%endif
--with-libaudit=yes-disabled-by-default \
%if 0%{?with_modem_manager_1}
--with-modem-manager-1=yes \
@ -559,27 +756,30 @@ intltoolize --automake --copy --force @@ -559,27 +756,30 @@ intltoolize --automake --copy --force
%else
--without-libpsl \
%endif
--with-ebpf=%{ebpf_enabled} \
--with-session-tracking=systemd \
--with-suspend-resume=systemd \
--with-systemdsystemunitdir=%{systemd_dir} \
--with-system-ca-path=/etc/pki/tls/cert.pem \
--with-dbus-sys-dir=%{dbus_sys_dir} \
%if %{with test}
--with-tests=yes \
%if %{with test}
--enable-more-warnings=error \
%else
--enable-more-warnings=yes \
--with-tests=no \
%endif
--with-valgrind=no \
--enable-ifcfg-rh=yes \
--enable-config-plugin-ibft=%{ibft_enabled} \
--enable-ifupdown=no \
%if %{with ppp}
--with-pppd-plugin-dir=%{_libdir}/pppd/%{ppp_version} \
--enable-ppp=yes \
%endif
--with-dist-version=%{version}-%{release} \
--with-config-plugins-default='ifcfg-rh,ibft' \
--with-config-dns-rc-manager-default=file \
--with-config-logging-backend-default=syslog \
--with-config-plugins-default=%{config_plugins_default} \
--with-config-dns-rc-manager-default=%{dns_rc_manager_default} \
--with-config-logging-backend-default=%{logging_backend_default} \
--enable-json-validation \
%if %{with libnm_glib}
--with-libnm-glib
@ -589,24 +789,27 @@ intltoolize --automake --copy --force @@ -589,24 +789,27 @@ intltoolize --automake --copy --force

make %{?_smp_mflags}

%endif # end autotools

%install
# install NM
%if %{with meson}
%meson_install
%else
make install DESTDIR=%{buildroot}
%endif

cp %{SOURCE1} %{buildroot}%{_sysconfdir}/%{name}/

cp %{SOURCE2} %{buildroot}%{nmlibdir}/conf.d/

%if %{with connectivity_fedora}
cp %{SOURCE3} %{buildroot}%{nmlibdir}/conf.d/
%endif

%if %{with connectivity_redhat}
%if %{with connectivity_fedora}
cp %{SOURCE4} %{buildroot}%{nmlibdir}/conf.d/
%endif

%if %{with connectivity_redhat}
cp %{SOURCE5} %{buildroot}%{nmlibdir}/conf.d/
%endif

cp examples/dispatcher/10-ifcfg-rh-routes.sh %{buildroot}%{_sysconfdir}/%{name}/dispatcher.d/
ln -s ../no-wait.d/10-ifcfg-rh-routes.sh %{buildroot}%{_sysconfdir}/%{name}/dispatcher.d/pre-up.d/
@ -630,9 +833,20 @@ touch %{buildroot}%{_sbindir}/ifup %{buildroot}%{_sbindir}/ifdown @@ -630,9 +833,20 @@ touch %{buildroot}%{_sbindir}/ifup %{buildroot}%{_sbindir}/ifdown


%check
%if %{with meson}
%if %{with test}
make %{?_smp_mflags} check
%meson_test
%else
%ninja_test -C %{_vpath_builddir} || :
%endif
%else
# autotools
%if %{with test}
make -k %{?_smp_mflags} check
%else
make -k %{?_smp_mflags} check || :
%endif
%endif # end autotools


%pre
@ -649,7 +863,7 @@ fi @@ -649,7 +863,7 @@ fi
/usr/bin/udevadm control --reload-rules || :
/usr/bin/udevadm trigger --subsystem-match=net || :

%systemd_post NetworkManager.service NetworkManager-wait-online.service NetworkManager-dispatcher.service
%systemd_post %{systemd_units}

%triggerin -- initscripts
if [ -f %{_sbindir}/ifup -a ! -L %{_sbindir}/ifup ]; then
@ -678,14 +892,16 @@ fi @@ -678,14 +892,16 @@ fi
/usr/bin/udevadm control --reload-rules || :
/usr/bin/udevadm trigger --subsystem-match=net || :

%systemd_postun
%systemd_postun %{systemd_units}


%if (0%{?fedora} && 0%{?fedora} < 28) || 0%{?rhel}
%post glib -p /sbin/ldconfig
%postun glib -p /sbin/ldconfig

%post libnm -p /sbin/ldconfig
%postun libnm -p /sbin/ldconfig
%endif


%files
@ -712,6 +928,7 @@ fi @@ -712,6 +928,7 @@ fi
%{_libexecdir}/nm-dhcp-helper
%{_libexecdir}/nm-dispatcher
%{_libexecdir}/nm-iface-helper
%exclude %{_libexecdir}/nm-initrd-generator
%dir %{_libdir}/%{name}
%dir %{nmplugindir}
%{nmplugindir}/libnm-settings-plugin*.so
@ -729,7 +946,7 @@ fi @@ -729,7 +946,7 @@ fi
%{_mandir}/man8/*
%dir %{_localstatedir}/lib/NetworkManager
%dir %{_sysconfdir}/NetworkManager/system-connections
%{_datadir}/dbus-1/system-services/org.freedesktop.NetworkManager.service
%dir %{_sysconfdir}/sysconfig/network-scripts
%{_datadir}/dbus-1/system-services/org.freedesktop.nm_dispatcher.service
%{_datadir}/polkit-1/actions/*.policy
%{_prefix}/lib/udev/rules.d/*.rules
@ -803,7 +1020,6 @@ fi @@ -803,7 +1020,6 @@ fi

%if %{with libnm_glib}
%files glib-devel
%doc docs/api/html/*
%dir %{_includedir}/libnm-glib
%dir %{_includedir}/%{name}
%{_includedir}/libnm-glib/*.h
@ -839,7 +1055,6 @@ fi @@ -839,7 +1055,6 @@ fi


%files libnm-devel
%doc docs/api/html/*
%dir %{_includedir}/libnm
%{_includedir}/libnm/*.h
%{_libdir}/pkgconfig/libnm.pc
@ -893,16 +1108,82 @@ fi @@ -893,16 +1108,82 @@ fi


%changelog
* Mon Mar 4 2019 Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-10
* Thu Aug 1 2019 Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-5.1
* core: fix activation of ovs slaves after a service restart (rh #1733709)

* Wed Jun 26 2019 Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-5
- po: update translations (rh #1689962)

* Mon Jun 17 2019 Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
- cli: don't wait forever in the editor on update connection failure (rh #1702203)
- team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)

* Mon May 20 2019 Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
- team: don't kill teamd for external devices (rh #1711952)
- ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
- po: update translations (rh #1689962)

* Mon May 6 2019 Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
- cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
- device: fix reapply of MTU (rh #1702657)
- settings: fix failed assertion when adding connections (rh #1707261)
- core: ensure software devices are managed when networking gets enabled (rh #1701585)
- device: restore IPv6 configuration on link up (rh #1548237)
- dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
- core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
- tc: add suppor for mired action an fq_codel qdisc (rh #1546802)

* Sun Apr 21 2019 Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
- Update to 1.18.0 release
- cli: fix crash handling gsm secrets (rh #1698495)
- rules: fix duplicate policy routing rules (rh #1652653)

* Tue Apr 16 2019 Thomas Haller <thaller@redhat.com> - 1:1.18.0-0.6
- dcb: fix crash (rh #1700408)
- cli: fix crash (rh #1700409)

* Tue Apr 16 2019 Thomas Haller <thaller@redhat.com> - 1:1.18.0-0.5
- Update to 1.18-rc1 (1.17.90) snapshot

* Wed Apr 10 2019 Francesco Giudici <fgiudici@redhat.com> - 1:1.18.0-0.4.20190408git43d9187c14
- keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
- dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)

* Wed Apr 3 2019 Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.3.20190408git43d9187c14
- infiniband: allow large MTU (rh #1534869) (rh #1653494)
- sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)

* Wed Apr 3 2019 Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.2.20190404git9a8fe5f339
- Update to a 1.18 snapshot:
- clients: only ask secrets for settings that require them (rh #1506536)
- checkpoint: remove a device from checkpoint if it disappears (rh #1578335)
- lldp: support more VLAN TLVs (rh #1652211)
- bridge: add VLAN filtering support (rh #1652910)

* Fri Mar 29 2019 Lubomir Rintel <lrintel@redhat.com> - 1:1.16.2-0.2.20190328git8ec0954570
- Update to a 1.16 snapshot:
- device: apply static addresses immediately for DHCPv4 method (rh #1369905)
- man/openvswitch: advise to use "master" instead of "conn.master" (rh #1519176)
- manager: don't update ifindex of existing devices (rh #1542366)
- ovs-interface: allow re-activating an already active interface (rh #1543557)
- ovs: avoid reactivating devices when their master gets removed (rh #1540218)
- cli: avoid possible crash on device disconnect (rh #1546061)
- cli: fix upping of the connection after it was updated (rh #1546805)
- device: restore IPv6 addresses when the link comes back up (rh #1548237)
- device: set token only after router discovery was started (rh #1560652)
- team: make teamd log to syslog (rh #1596917)
- device: fix a possible crash on generating a connection (rh #1631741)
- ovs: remove NetworkManager-ovs dependency on openvswitch (rh #1633190)
- dhcp/internal: handle multiple Router DHCP options (rh #1634657)
- cli: fix a possible crash when removing devices (rh #1639208)
- device: avoid taking down link to change MAC address (rh #1639274)
- libnm: fix crash in activate_info_complete() when cancelling (rh #1642625)
- dhcp6: make sure we have enough space for the DHCP6 option header (rh #1643985)
- lldp: fix parsing of vlan-name attribute (rh #1652210)
- team: add support for 'vlanid' link-watchers property (rh #1652931)
- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)

* Tue Feb 19 2019 Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-9
- device: restore routes after a link down event (rh #1676551)

* Fri Nov 2 2018 Thomas Haller <thaller@redhat.com> - 1:1.12.0-8
- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)

* Mon Oct 22 2018 Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-7
- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)

Loading…
Cancel
Save