* Fri Oct 27 2023 Otto Hollmann <otto.hollmann@suse.com>
- Remove haveged-switch-root.service because it's implemented incorrectly and
neither upstream don't know how to fix it (#77). On the other hand, without
this service haveged will be started from scratch after switch root so it's
hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
as a security threat because of creating fixed name file in world-writable
directory. [jsc#PED-6184, bsc#1206699]
* Remove
- haveged-switch-root.service
- haveged-switch-root.patch
* Fri Dec 02 2022 Otto Hollmann <otto.hollmann@suse.com>
- Synchronize haveged instances during switching root (bsc#1203079)
* Add haveged-switch-root.patch
* Sun Apr 24 2022 Dirk Müller <dmueller@suse.com>
- update to 1.9.18:
* Round bits up and target full pool size [Jason A. Donenfeld]
* Specify right kernel commit in README [Jason A. Donenfeld]
* Tue Feb 15 2022 Otto Hollmann <otto.hollmann@suse.com>
- Update to v1.9.17:
* Added new verbose mode [Jirka Hladky]
* haveged-once.service - use @SBIN_DIR@ instead of hard-coded path [Jirka Hladky]
- Changes for version v1.9.16:
* Allow newuname syscall [Jirka Hladky]
* Fix: haveged cannot be run as an application if also running as a daemon [Günther Brunthaler]
* Add entropy unconditionally at the start and then every 60 seconds [Jirka Hladky]
* New parameter --once to refill entropy once and quit immediately [Jirka Hladky]
* Added haveged-once.service to provide entropy once (intended for initramfs) [Jirka Hladky]
- Changes for version v1.9.15:
* Check for sys/auxv.h before using it. [Peter Seiderer]
* fix build on uclibc (origin/pr/58) [Pierre-Jean Texier]
* Improved make check tests [Jirka Hladky]
* Removed old init.d files. Configs are under contrib directory [Jirka Hladky]
* Support for Linux kernel LRNG patch set
* Mon Nov 22 2021 Johannes Segitz <jsegitz@suse.com>
- Remove ProtectKernelTunables hardening, causes the service to fail
(boo#1192921)
* Tue Nov 02 2021 Marcus Meissner <meissner@suse.com>
- revert last change, e.g. for VMs where we are not being fed entropy
from the host or similar setups.
* Mon Oct 11 2021 Cristian Rodríguez <crrodriguez@opensuse.org>
- Improvements on the linux kernel random subsystem have made
the haveged service/daemon obsolete, remove the service files,
initrd modules and udev rules, the other components
are still useful.
* Tue Sep 21 2021 Johannes Segitz <jsegitz@suse.com>
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_haveged.service.patch
Modified:
* haveged-switch-root.service
* haveged.service
* Mon Jan 04 2021 Paolo Stivanin <info@paolostivanin.com>
- Update to 1.9.14:
* made enttest configurable
* havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch
* Tue Jun 30 2020 Paolo Stivanin <info@paolostivanin.com>
- Update to 1.9.13:
* added support for --version [Jirka Hladky]
* updated systemd service file [Jirka Hladky]
* fix a memory leak in havege_destroy [Anakin Zhang]
* updated version reported by program [Jirka Hladky]
* fix ordering cycle with private tmp [Christian Hesse]
* Updated systemd service file [Nicolas Braud-Santoni]
* Bump soname [Nicolas Braud-Santoni]
* Fix crash on shutdown in threaded mode [Sergei Trofimovich]
* Fix compilation with --enable-threads [Lars Wendler]