#

#               Red Hat BIND package .spec file

#

%define PATCHVER P2

%define VERSION %{version}-%{PATCHVER}

%define _default_patch_fuzz 2

%{?!SDB:        %define SDB         1}

%{?!LIBBIND:    %define LIBBIND	    1}

%{?!test:       %define test        0}

%{?!WITH_DBUS:  %define WITH_DBUS   0} # + dynamic forwarder table management with D-BUS

%{?!bind_uid:   %define bind_uid   25}

%{?!bind_gid:   %define bind_gid   25}

%{?!GSSTSIG:    %define GSSTSIG     1}

%define		bind_dir      /var/named

%define    	chroot_prefix %{bind_dir}/chroot

#

Summary: 	The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

Name: 		bind

License: 	ISC

Version: 	9.5.1

Release: 	2.%{PATCHVER}%{?dist}

Epoch:   	32

Url: 		http://www.isc.org/products/BIND/

Buildroot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

Group: 		System Environment/Daemons

#

Source:		ftp://ftp.isc.org/isc/bind9/%{VERSION}/bind-%{VERSION}.tar.gz

Source1: 	named.sysconfig

Source2: 	named.init

Source3: 	named.logrotate

Source4: 	keygen.c

Source5: 	rfc1912.txt

Source6: 	bind-chroot.tar.bz2

Source7: 	bind-9.3.1rc1-sdb_tools-Makefile.in

Source8: 	dnszone.schema

Source9: 	libbind-man.tar.gz

Source10: 	named-dbus.conf

Source11: 	named.service

Source12: 	README.sdb_pgsql

Source13: 	namedSetForwarders

Source14: 	namedGetForwarders

Source21:	Copyright.caching-nameserver

Source22: 	bind-chroot-admin.in

Source24:	libbind.pc

Source25:	named.conf.sample

Source28:	config-3.tar.bz2

Source30:	ldap2zone.c

# Common patches

Patch0:  	bind-9.2.0rc3-varrun.patch

Patch1: 	bind-9.3.3rc2-rndckey.patch

Patch5: 	bind-nonexec.patch

Patch10: 	bind-9.5-PIE.patch

Patch13: 	bind-9.3.1rc1-fix_libbind_includedir.patch

Patch16: 	bind-9.3.2-redhat_doc.patch

Patch63:	bind-9.4.0-dnssec-directory.patch

Patch71:	bind-9.5-overflow.patch

Patch72:	bind-9.5-dlz-64bit.patch

Patch87:	bind-9.5-parallel-build.patch

Patch96:	bind-95-rh452060.patch

# SDB patches

Patch11: 	bind-9.3.2b2-sdbsrc.patch

Patch12: 	bind-9.5-sdb.patch

Patch62:        bind-9.5-sdb-sqlite-bld.patch

Patch68:	bind-9.4.1-ldap-api.patch

# needs inpection

Patch17: 	bind-9.3.2b1-fix_sdb_ldap.patch

# D-BUS patches

Patch15: 	bind-9.5.0-dbus.patch

Patch23: 	bind-9.5-dbus_archdep_libdir.patch

Patch81:	bind-9.5-dbus-leak.patch

Patch82:	bind-9.5-dbus-va_end.patch

# IDN paches

Patch73:	bind-9.5-libidn.patch

Patch83:	bind-9.5-libidn2.patch

Patch85:	bind-9.5-libidn3.patch

#

Requires:	mktemp

Requires(post): grep, chkconfig >= 1.3.26

Requires(pre): 	shadow-utils

Requires(preun):chkconfig >= 1.3.26

Obsoletes: bind-config, caching-nameserver

Provides:  bind-config, caching-nameserver

BuildRequires:	openssl-devel, libtool, autoconf, pkgconfig, libcap-devel

BuildRequires:  libidn-devel

%if %{SDB}

BuildRequires:  openldap-devel, postgresql-devel, sqlite-devel, mysql-devel, unixODBC-devel

%endif

%if %{WITH_DBUS}

BuildRequires:  dbus-devel

%endif

%if %{test}

BuildRequires:  net-tools, perl

%endif

%if %{GSSTSIG}

BuildRequires:	krb5-devel

%endif

%description

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

%if %{SDB}

%package sdb

Summary: BIND server with database backends and DLZ support

Group:   System Environment/Daemons

%description sdb

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named-sdb)

which has compiled-in SDB (Simplified Database Backend) which includes

support for using alternative Zone Databases stored in an LDAP server

(ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb),

or in the filesystem (dirdb), in addition to the standard in-memory RBT

(Red Black Tree) zone database. It also includes support for DLZ

(Dynamic Loadable Zones)

%endif

%package  libs

Summary:  Libraries used by the BIND DNS packages

Group:    Applications/System

Obsoletes: bind-libbind-devel

%description libs

Contains libraries used by both the bind server package as well as the utils packages.

%package  utils

Summary:  Utilities for querying DNS name servers

Group:    Applications/System

%description utils

Bind-utils contains a collection of utilities for querying DNS (Domain

Name System) name servers to find out information about Internet

hosts. These tools will provide you with the IP addresses for given

host names, as well as other information about registered domains and

network addresses.

You should install bind-utils if you need to get information from DNS name

servers.

%package   devel

Summary:   Header files and libraries needed for BIND DNS development

Group:     Development/Libraries

Obsoletes: bind-libbind-devel

%description devel

The bind-devel package contains all the header files and libraries

required for development with ISC BIND 9 and BIND 8

%package   chroot

Summary:   A chroot runtime environment for the ISC BIND DNS server, named(8)

Group: 	   System Environment/Daemons

Prefix:    %{chroot_prefix}

Requires(post):  grep

Requires(preun): grep

Requires: bind = %{epoch}:%{version}-%{release}

%description chroot

This package contains a tree of files which can be used as a

chroot(2) jail for the named(8) program from the BIND package.

Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

%prep

%setup -q -n %{name}-%{VERSION}

# Common patches

%patch0 -p1 -b .varrun

%patch1 -p1 -b .key

%patch5 -p1 -b .nonexec

%patch10 -p1 -b .PIE

%patch16 -p1 -b .redhat_doc

%if %{SDB}

mkdir bin/named-sdb

cp -r bin/named/* bin/named-sdb

%patch11 -p1 -b .sdbsrc

# SDB ldap

cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named-sdb

# SDB postgreSQL

cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named-sdb

# SDB sqlite

cp -fp contrib/sdb/sqlite/sqlitedb.[ch] bin/named-sdb

# SDB Berkeley DB - needs to be ported to DB4!

#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb

# SDB dir

cp -fp contrib/sdb/dir/dirdb.[ch] bin/named-sdb

# SDB tools

mkdir -p bin/sdb_tools

cp -fp %{SOURCE30} bin/sdb_tools/ldap2zone.c

cp -fp %{SOURCE7} bin/sdb_tools/Makefile.in

#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools

cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools

cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools

cp -fp contrib/sdb/sqlite/zone2sqlite.c bin/sdb_tools

%patch12 -p1 -b .sdb

%patch68 -p1 -b .new-api

%endif

%if %{LIBBIND}

%patch13 -p1 -b .fix_libbind_includedir

%endif

%if %{WITH_DBUS}

%patch15 -p1 -b .dbus

%patch23 -p1 -b .dbus_archdep_libdir

%patch81 -p1 -b .leak

%patch82 -p1 -b .va_end

%endif

%if %{SDB}

%patch17 -p1 -b .fix_sdb_ldap

%endif

%if %{WITH_DBUS}

#

# this must follow all dbus patches:

#

cp -fp contrib/dbus/{dbus_mgr.c,dbus_service.c} bin/named

cp -fp contrib/dbus/{dbus_mgr.h,dbus_service.h} bin/named/include/named

%endif

%if %{SDB}

%patch62 -p1 -b .sdb-sqlite-bld

%endif

%patch63 -p1 -b .directory

%patch71 -p1 -b .overflow

%ifnarch alpha ia64

%patch72 -p1 -b .64bit

%endif

%patch73 -p1 -b .libidn

%patch83 -p1 -b .libidn2

%patch85 -p1 -b .libidn3

%patch87 -p1 -b .parallel

%patch96 -p1 -b .rh452060

# Sparc and s390 arches need to use -fPIE                                                           

%ifarch sparcv9 sparc64 s390 s390x

for i in bin/named-sdb/unix/Makefile.in bin/named-sdb/Makefile.in bin/named/unix/Makefile.in bin/named/Makefile.in; do

       sed -i 's|fpie|fPIE|g' $i

done

%endif

:;

%build

export CFLAGS="$CFLAGS $RPM_OPT_FLAGS"

export CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"

export STD_CDEFINES="$CPPFLAGS"

libtoolize -c -f; aclocal --force; autoheader -f; autoconf -f

%if %{WITH_DBUS}

%ifarch s390x x86_64 ppc64 sparc64

# every 64-bit arch EXCEPT ia64 has dbus architecture dependant

# includes in  /usr/lib64/dbus-1.0/include

export DBUS_ARCHDEP_LIBDIR=lib64

%endif

%endif

if pkg-config openssl ; then

	export CFLAGS="$CFLAGS `pkg-config --cflags openssl`"

	export CPPFLAGS="$CPPFLAGS `pkg-config --cflags-only-I openssl`"

	export LDFLAGS="$LDFLAGS `pkg-config --libs-only-L openssl`"

fi

%configure \

	--with-libtool \

	--localstatedir=/var \

	--enable-threads \

	--enable-ipv6 \

	--with-pic \

	--disable-openssl-version-check \

%if %{LIBBIND}

	--enable-libbind \

%endif

%if %{SDB}

	--with-dlz-ldap=yes \

	--with-dlz-postgres=yes \

	--with-dlz-mysql=yes \

	--with-dlz-filesystem=yes \

	--with-dlz-odbc=yes \

%endif

%if %{GSSTSIG}

	--with-gssapi=yes \

	--disable-isc-spnego \

%endif

;

if [ -s openssl_config.h ]; then cat openssl_config.h >> config.h ; fi;

make %{?_smp_mflags}

%install

rm -rf ${RPM_BUILD_ROOT}

cp  --preserve=timestamps %{SOURCE5} doc/rfc

gzip -9       doc/rfc/*

mkdir -p ${RPM_BUILD_ROOT}/etc/{rc.d/init.d,logrotate.d}

mkdir -p ${RPM_BUILD_ROOT}/usr/{bin,lib,sbin,include}

mkdir -p ${RPM_BUILD_ROOT}/var/named

mkdir -p ${RPM_BUILD_ROOT}/var/named/slaves

mkdir -p ${RPM_BUILD_ROOT}/var/named/data

mkdir -p ${RPM_BUILD_ROOT}/var/named/dynamic

mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/{man1,man5,man8}

mkdir -p ${RPM_BUILD_ROOT}/var/run/named

mkdir -p ${RPM_BUILD_ROOT}/var/log

#chroot

mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}

tar --no-same-owner -jxvf %{SOURCE6} --directory ${RPM_BUILD_ROOT}/%{chroot_prefix}

# these are required to prevent them being erased during upgrade of previous

# versions that included them (bug #130121):

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.conf

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.rfc1912.zones

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/rndc.key

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/null

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/random

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/zero

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/var/log/named.log

#end chroot

make DESTDIR=${RPM_BUILD_ROOT} install

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.conf

install -c -m 755 contrib/named-bootconf/named-bootconf.sh ${RPM_BUILD_ROOT}%{_sbindir}/named-bootconf

install -c -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/etc/rc.d/init.d/named

install -c -m 644 %SOURCE3 ${RPM_BUILD_ROOT}/etc/logrotate.d/named

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.key

%{__cc} $RPM_OPT_FLAGS -o ${RPM_BUILD_ROOT}%{_sbindir}/dns-keygen %{SOURCE4}

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig

cp %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/named

%if %{SDB}

mkdir -p ${RPM_BUILD_ROOT}/etc/openldap/schema

install -c -m 644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/openldap/schema/dnszone.schema

cp -fp %{SOURCE12} contrib/sdb/pgsql/

%endif

%if %{LIBBIND}

gunzip < %{SOURCE9} | (cd ${RPM_BUILD_ROOT}/usr/share; tar -xpf -)

mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}/pkgconfig

install -m 644 %{SOURCE24} $RPM_BUILD_ROOT%{_libdir}/pkgconfig/libbind.pc

%endif

%if %{WITH_DBUS}

mkdir -p ${RPM_BUILD_ROOT}/etc/dbus-1/system.d

mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services

cp -fp %{SOURCE10} ${RPM_BUILD_ROOT}/etc/dbus-1/system.d/named.conf

cp -fp %{SOURCE11} ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services/named.service

cp -fp %{SOURCE13} ${RPM_BUILD_ROOT}%{_sbindir}/namedSetForwarders

cp -fp %{SOURCE14} ${RPM_BUILD_ROOT}%{_sbindir}/namedGetForwarders

%endif

%if %{test}

if [ "`whoami`" = 'root' ]; then

   set -e

   chmod -R a+rwX .

   pushd bin/tests

   pushd system

   ./ifconfig.sh up

   popd

   make test

   e=$?

   pushd system

   ./ifconfig.sh down

   popd

   popd

   if [ "$e" -ne 0 ]; then

      echo "ERROR: this build of BIND failed 'make test'. Aborting."

      exit $e;

   fi;

else

   echo 'test==1 : only root can run the tests (they require an ifconfig).';

fi

%endif

# Files required to run test-suite outside of build tree:

cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}/bind9

cp -fp lib/dns/include/dns/forward.h ${RPM_BUILD_ROOT}/%{_includedir}/dns

cp -fp lib/isc/unix/include/isc/keyboard.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

cp -fp lib/isc/include/isc/hash.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

# Remove libtool .la files:

find ${RPM_BUILD_ROOT}/%{_libdir} -name '*.la' -exec '/bin/rm' '-f' '{}' ';';

# /usr/lib/rpm/brp-compress

#

# Ghost config files:

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf

touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log

# configuration files:

tar -C ${RPM_BUILD_ROOT} -xf %{SOURCE28}

for f in /etc/named.conf /var/named/{named.ca,named.localhost,named.loopback,named.empty}; do

    touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/$f;

done

install -m 644 %{SOURCE5}  ./rfc1912.txt

install -m 644 %{SOURCE21} ./Copyright

# bind-chroot-admin script:

sed -e 's^@BIND_CHROOT_PREFIX@^'%{chroot_prefix}'^;s^@BIND_DIR@^'%{bind_dir}'^' < %{SOURCE22} > bind-chroot-admin;

install -m 754 bind-chroot-admin ${RPM_BUILD_ROOT}/%{_sbindir}

# sample bind configuration files for %doc:

mkdir -p sample/etc sample/var/named/{data,slaves}

cp -fp %{SOURCE25} sample/etc/named.conf

cp -fp ${RPM_BUILD_ROOT}/etc/named.rfc1912.zones sample/etc/named.rfc1912.zones

cp -fp ${RPM_BUILD_ROOT}/var/named/{named.ca,named.localhost,named.loopback,named.empty}  sample/var/named

for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.internal.zone.db my.external.zone.db; do 

  echo '@ in soa localhost. root 1 3H 15M 1W 1D

  ns localhost.' > sample/var/named/$f; 

done

/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.274 2009/03/23 10:44:19 atkac Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\

 *\

 * NOTE: you only need to create this file if it is to\

 * differ from the following default contents:

;d}' > sample/etc/rndc.conf;

#

chmod 0755 ${RPM_BUILD_ROOT}%{_libdir}/lib*so.*

:;

%pre

if [ "$1" -eq 1 ]; then

   /usr/sbin/groupadd -g %{bind_gid} -f -r named >/dev/null 2>&1 || :;

   /usr/sbin/useradd  -u %{bind_uid} -r -n -M -g named -s /sbin/nologin -d /var/named -c Named named >/dev/null 2>&1 || :;

fi;

:;

%post

/sbin/ldconfig

/sbin/chkconfig --add named

if [ "$1" -eq 1 ]; then

	# no more named.boot autoconversion! No-one should be using BIND-4 anymore.

	if [ ! -e /etc/rndc.key ]; then

	# create the rndc.key file:

	   echo 'key "rndckey" {

	algorithm	hmac-md5;

	secret		"'`/usr/sbin/dns-keygen`'";

};'  >     /etc/rndc.key;

	elif /bin/egrep -q '@KEY@' /etc/rndc.key; then

	   # fix potential problem with older versions

	   /bin/sed -i -e 's^@KEY@^'`/usr/sbin/dns-keygen`'^' /etc/rndc.key ;

	fi

	[ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.* >/dev/null 2>&1 ;

	# rndc.key has to have correct perms and ownership, CVE-2007-6283

	[ -e /etc/rndc.key ] && chown root:named /etc/rndc.key

	[ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key

	[ -x /usr/sbin/bind-chroot-admin ] && /usr/sbin/bind-chroot-admin --sync;

fi

:;

%preun

if [ "$1" -eq 0 ]; then

   /sbin/service named stop >/dev/null 2>&1 || :;

   /sbin/chkconfig --del named || :;

fi;

:;

%postun

/sbin/ldconfig

if [ "$1" -ge 1 ]; then

   /sbin/service named try-restart >/dev/null 2>&1 || :;

fi;

:;

%if %{SDB}

%post sdb

/sbin/service named try-restart > /dev/null 2>&1 || :;

%postun sdb

/sbin/service named try-restart > /dev/null 2>&1 || :;

%endif

%triggerpostun -n bind -- bind <= 32:9.5.0-20.b1

if [ "$1" -gt 0 ]; then

	[ -e /etc/rndc.key ] && chown root:named /etc/rndc.key

	[ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key

fi

:;

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%post chroot

if [ "$1" -gt 0 ]; then

   /usr/sbin/bind-chroot-admin --enable > /dev/null 2>&1;

fi;

:;

%posttrans chroot

if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled && \

   [ -x /sbin/restorecon ]; then

	/sbin/restorecon %{chroot_prefix}/dev/* > /dev/null 2>&1;

fi;

:;

%preun chroot

if [ "$1" -eq 0 ]; then

   /usr/sbin/bind-chroot-admin --disable > /dev/null 2>&1;

fi

:;

%clean

rm -rf ${RPM_BUILD_ROOT}

:;

%files

%defattr(0640,root,named,0750)

%dir %{_localstatedir}/named

%config(noreplace) %verify(not link) %{_sysconfdir}/named.conf

%config(noreplace) %verify(not link) %{_sysconfdir}/named.rfc1912.zones

%config %verify(not link) %{_localstatedir}/named/named.ca

%config %verify(not link) %{_localstatedir}/named/named.localhost

%config %verify(not link) %{_localstatedir}/named/named.loopback

%config %verify(not link) %{_localstatedir}/named/named.empty

%defattr(0644,root,root,0755)

%doc Copyright

%doc rfc1912.txt

%defattr(0660,named,named,0770)

%dir %{_localstatedir}/named/slaves

%dir %{_localstatedir}/named/data

%dir %{_localstatedir}/named/dynamic

%dir %{_localstatedir}/run/named

%ghost %{_localstatedir}/log/named.log

%defattr(0754,root,root,0750)

%config %{_sysconfdir}/rc.d/init.d/named

%defattr(0640,root,named,0750)

%config(noreplace) %{_sysconfdir}/sysconfig/named

%ghost %config(noreplace) %{_sysconfdir}/rndc.key

# ^- rndc.key now created on first install only if it does not exist

# %verify(not size,not md5) %config(noreplace) %attr(0640,root,named) /etc/rndc.conf

# ^- Let the named internal default rndc.conf be used -

#    rndc.conf not required unless it differs from default.

%ghost %config(noreplace) %{_sysconfdir}/rndc.conf

# ^- The default rndc.conf which uses rndc.key is in named's default internal config -

#    so rndc.conf is not necessary.

%config(noreplace) %{_sysconfdir}/logrotate.d/named

%defattr(-,root,root)

%{_sbindir}/dnssec*

%{_sbindir}/named-check*

%{_sbindir}/dns-keygen

%defattr(0750,root,root,0755)

%{_sbindir}/lwresd

%{_sbindir}/named

%{_sbindir}/named-bootconf

%{_sbindir}/rndc*

%{_sbindir}/named-compilezone

%defattr(0644,root,root,0755)

%{_mandir}/man5/named.conf.5*

%{_mandir}/man5/rndc.conf.5*

%{_mandir}/man8/rndc.8*

%{_mandir}/man8/named.8*

%{_mandir}/man8/lwresd.8*

%{_mandir}/man8/dnssec*.8*

%{_mandir}/man8/named-checkconf.8*

%{_mandir}/man8/named-checkzone.8*

%{_mandir}/man8/named-compilezone.8*

%{_mandir}/man8/rndc-confgen.8*

%doc CHANGES COPYRIGHT README

%doc doc/arm doc/misc

%doc sample/

%if %{WITH_DBUS}

%doc contrib/dbus/README.DBUS

%attr(644,root,root) %config %{_sysconfdir}/dbus-1/system.d/named.conf

%attr(644,root,root) %config %{_datadir}/dbus-1/services/named.service

%attr(750,root,root) %{_sbindir}/namedGetForwarders

%attr(750,root,root) %{_sbindir}/namedSetForwarders

%endif

%if %{SDB}

%files sdb

%defattr(0644,root,root,0755)

%{_mandir}/man1/zone2ldap.1*

%doc contrib/sdb/ldap/README.ldap contrib/sdb/ldap/INSTALL.ldap contrib/sdb/pgsql/README.sdb_pgsql

%dir %{_sysconfdir}/openldap/schema

%config(noreplace) %{_sysconfdir}/openldap/schema/dnszone.schema

%defattr(0750,root,root,0755)

%{_sbindir}/named-sdb

%{_sbindir}/zone2ldap

%{_sbindir}/ldap2zone

%{_sbindir}/zonetodb

%{_sbindir}/zone2sqlite

%endif

%files libs

%defattr(-,root,root,0755)

%{_libdir}/*so.*

%files utils

%defattr(0755,root,root,0755)

%{_bindir}/dig

%{_bindir}/host

%{_bindir}/nslookup

%{_bindir}/nsupdate

%defattr(0644,root,root,0755)

%{_mandir}/man1/host.1*

%{_mandir}/man1/nsupdate.1*

%{_mandir}/man1/dig.1*

%{_mandir}/man1/nslookup.1*

%files devel

%defattr(-,root,root,0755)

%{_libdir}/libbind9.a

%{_libdir}/libdns.a

%{_libdir}/libisc.a

%{_libdir}/libisccc.a

%{_libdir}/libisccfg.a

%{_libdir}/liblwres.a

%{_libdir}/*so

%{_includedir}/bind9

%{_includedir}/dns

%{_includedir}/dst

%{_includedir}/isc

%{_includedir}/isccc

%{_includedir}/isccfg

%{_includedir}/lwres

%{_mandir}/man3/lwres*

%{_bindir}/isc-config.sh

%doc doc/draft doc/rfc

%if %{LIBBIND}

%{_libdir}/libbind.a

%{_libdir}/pkgconfig/libbind.pc

%{_includedir}/bind

%{_mandir}/man3/libbind-*

%{_mandir}/man7/libbind-*

%{_mandir}/man5/libbind-*

%endif

%files chroot

%defattr(0640,root,named,0750)

%dir %{chroot_prefix}

%dir %{chroot_prefix}/dev

%dir %{chroot_prefix}/etc

%ghost %config(noreplace) %{chroot_prefix}/etc/named.conf

%ghost %config(noreplace) %{chroot_prefix}/etc/named.rfc1912.zones

%ghost %config(noreplace) %{chroot_prefix}/etc/rndc.key

%dir %{chroot_prefix}/var

%dir  %{chroot_prefix}/var/run

%dir  %{chroot_prefix}/var/named

%ghost  %config %{chroot_prefix}/var/named/named.ca

%ghost  %config %{chroot_prefix}/var/named/named.localhost

%ghost  %config %{chroot_prefix}/var/named/named.loopback

%ghost  %config %{chroot_prefix}/var/named/named.empty

%defattr(0660,named,named,0770)

%dir %{chroot_prefix}/var/named/slaves

%dir %{chroot_prefix}/var/named/data

%dir %{chroot_prefix}/var/named/dynamic

%dir %{chroot_prefix}/var/run/named

%dir %{chroot_prefix}/var/tmp

%dir %{chroot_prefix}/var/log

%ghost %{chroot_prefix}/var/log/named.log

%ghost %{chroot_prefix}/dev/null

%ghost %{chroot_prefix}/dev/random

%ghost %{chroot_prefix}/dev/zero

%defattr(0750,root,root,0755)

%{_sbindir}/bind-chroot-admin

%changelog

* Mon Mar 23 2009 Adam Tkac <atkac redhat com> 32:9.5.1-2.P2

- 9.5.1-P2 release (handle unknown DLV algorithms well)

* Thu Jan 08 2009 Adam Tkac <atkac redhat com> 32:9.5.1-1.P1

- 9.5.1-P1 release (CVE-2009-0025)

- patches merged

  - bind95-rh454783.patch

  - bind-9.5-recv-race.patch

  - bind-9.5-edns.patch

  - bind95-rh457175.patch

* Tue Dec 02 2008 Adam Tkac <atkac redhat com> 32:9.5.0-35.1.P2

- fixed rare use-after-free problem in host utility (#452060)

* Wed Aug 06 2008 Adam Tkac <atkac redhat com> 32:9.5.0-35.P2

- 9.5.0-P2 release

  - bind95-rh450995.patch was merged

- disable transfer stats on DLZ zones (#454783)

* Thu Jul 31 2008 Adam Tkac <atkac redhat com> 32:9.5.0-34.1.P1

- IP acls weren't merged correctly (#457175)

* Fri Jul 18 2008 Dennis Gilmore <dennis@ausil.us> 32:9.5.0-34.P1

- use fPIE on sparcv9/sparc64

- add sparc64 to list of 64bit arches in spec

* Tue Jul 08 2008 Adam Tkac <atkac redhat com> 32:9.5.0-33.P1

- 9.5.0-P1 release (CVE-2008-1447)

- fixed typo in bind-sdb summary (#454436)

* Wed Jun 18 2008 Adam Tkac <atkac redhat com> 32:9.5.0-32.2

- parse inner acls correctly (#450995)

* Thu May 29 2008 Adam Tkac <atkac redhat com> 32:9.5.0-32.1

- 9.5.0 final

- bind-9.5-initialize.patch merged to upstream

* Thu May 22 2008 Adam Tkac <atkac redhat com> 32:9.5.0-32.rc1

- 9.5.0rc1 release

- bind-9.5-libcap.patch merged to upstream

- initialize memory in ACL code correctly (#446848)

* Tue May 20 2008 Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3

- bind-chroot now depends on bind (#446477)

* Tue May 13 2008 Adam Tkac <atkac redhat com> 32:9.5.0-31.b3

- reverted "any" patch, upstream says not needed

- log EDNS failure only when we really switch to plain EDNS (#275091)

- detect configuration file better

* Tue May 06 2008 Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3

- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)

* Mon May 05 2008 Adam Tkac <atkac redhat com> 32:9.5.0-30.b3

- 9.5.0b3 release

- dropped patches (upstream)

  - bind-9.5.0-generate-xml.patch

  - bind-9.5-transfer-segv.patch

  - bind-9.5-mudflap.patch

- updated bind-9.5-libcap.patch

- added bind-9.5-recv-race.patch from F8 branch (#400461)

* Wed Apr 02 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2

- fixed named.conf.sample file (#437569)

* Fri Mar 14 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2

- fixed URLs

* Mon Feb 25 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2

- BuildRequires cleanup

* Sun Feb 24 2008 Adam Tkac <atkac redhat com> 32:9.5.0-29.b2

- rebuild without mudflap (#434159)

* Wed Feb 20 2008 Adam Tkac <atkac redhat com> 32:9.5.0-28.b2

- port named to use libcap library, enable threads (#433102)

- removed some unneeded Requires

* Tue Feb 19 2008 Adam Tkac <atkac redhat com> 32:9.5.0-27.b2

- removed conditional build with libefence (use -fmudflapth instead)

- fixed building of DLZ stuff (#432497)

- do not build Berkeley DB DLZ backend

- temporary build with --disable-linux-caps and without threads (#433102)

- update named.ca file to affect IPv6 changes in root zone

* Mon Feb 11 2008 Adam Tkac <atkac redhat com> 32:9.5.0-26.b2

- build with -D_GNU_SOURCE (#431734)

- improved fix for #253537, posttrans script is now used

- improved fix for #400461

- 9.5.0b2

  - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch

    - only named, named-sdb and lwresd are PIE

  - bind-9.5-sdb.patch has been updated

  - bind-9.5-libidn.patch has been updated

  - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch

  - removed bind-9.5-gssapi-header.patch (upstream)

  - removed bind-9.5-CVE-2008-0122.patch (upstream)

- removed bind-9.2.2-nsl.patch

- improved sdb_tools Makefile.in

* Mon Feb 04 2008 Adam Tkac <atkac redhat com> 32:9.5.0-25.b1

- fixed segfault during sending notifies (#400461)

- rebuild with gcc 4.3 series

* Tue Jan 22 2008 Adam Tkac <atkac redhat com> 32:9.5.0-24.b1

- removed bind-9.3.2-prctl_set_dumpable.patch (upstream)

- allow parallel building of libdns library

- CVE-2008-0122

* Thu Dec 27 2007 Adam Tkac <atkac redhat com> 32:9.5.0-23.b1

- fixed initscript wait loop (#426382)

- removed dependency on policycoreutils and libselinux (#426515)

* Thu Dec 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-22.b1

- fixed regression caused by libidn2 patch (#426348)

* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-21.b1

- fixed typo in post section (CVE-2007-6283)

* Wed Dec 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-20.b1

- removed obsoleted triggers

- CVE-2007-6283

* Wed Dec 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1

- added dst/gssapi.h to -devel subpackage (#419091)

- improved fix for (#417431)

* Mon Dec 10 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1

- fixed shutdown with initscript when rndc doesn't work (#417431)

- fixed IDN patch (#412241)

* Thu Dec 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-19.b1

- 9.5.0b1 (#405281, #392491)

* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7

- Rebuild for deps

* Wed Dec 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7

- build with -O0

* Mon Dec 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7

- bind-9.5-random_ports.patch was removed because upstream doesn't

  like it. query-source{,v6} options are sufficient (#391931)

- bind-chroot-admin called restorecon on /proc filesystem (#405281)

* Mon Nov 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7

- removed edns patch to keep compatibility with vanilla bind

  (#275091, comment #20)

* Wed Nov 21 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7

- use system port selector instead ISC's (#391931)

* Mon Nov 19 2007 Adam Tkac <atkac redhat com> 32:9.5.0-18.a7

- removed statement from initscript which passes -D to named

* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-17.a7

- 9.5.0a7

- dropped patches (upstream)

  - bind-9.5-update.patch

  - bind-9.5-pool_badfree.patch

  - bind-9.5-_res_errno.patch

* Thu Nov 15 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6

- added bind-sdb again, contains SDB modules and DLZ modules

- bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch

* Mon Nov 12 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6

- removed Requires: openldap, postgresql, mysql, db4, unixODBC

- new L.ROOT-SERVERS.NET address

* Mon Oct 29 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6

- completely disable DBUS

* Fri Oct 26 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6

- minor cleanup in bind-chroot-admin

* Wed Oct 25 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6

- fixed typo in initscript

* Tue Oct 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-16.a6

- disabled DBUS (dhcdbd doesn't exist & #339191)

* Wed Oct 18 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6

- fixed missing va_end () functions (#336601)

- fixed memory leak when dbus initialization fails

* Tue Oct 16 2007 Adam Tkac <atkac redhat com> 32:9.5.0-15.a6

- corrected named.5 SDB statement (#326051)

* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-14.a6

- added edns patch again (#275091)

* Mon Sep 24 2007 Adam Tkac <atkac redhat com> 32:9.5.0-13.a6

- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)

* Thu Sep 20 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6

- build with O2

- removed "autotools" patch

- bugfixing in bind-chroot-admin (#279901)

* Thu Sep 06 2007 Adam Tkac <atkac redhat com> 32:9.5.0-12.a6

- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are

  obsoleted by upstream bind-9.5-_res_errno.patch

* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6

- fixed wrong resolver's dispatch pool cleanup (#275011, patch from 

  tmraz redhat com)

* Wed Sep 05 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6

- initscript failure message is now printed correctly (#277981,

  Quentin Armitage (quentin armitage org uk) )

* Mon Sep 03 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6

- temporary revert ISC 2119 change and add "libbind-errno" patch

  (#254501) again

* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6

- removed end dots from Summary sections (skasal@redhat.com)

- fixed wrong file creation by autotools patch (skasal@redhat.com)

* Thu Aug 23 2007 Adam Tkac <atkac redhat com> 32:9.5.0-11.a6

- start using --disable-isc-spnego configure option

  - remove bind-9.5-spnego-memory_management.patch (source isn't

    compiled)