271 lines
7.5 KiB
RPMSpec
271 lines
7.5 KiB
RPMSpec
%global raw_version 0.9.0
|
|
|
|
Name: kpatch
|
|
Version: 2.0
|
|
Release: 3.1.26
|
|
Summary: A Linux dynamic kernel patching infrastructure
|
|
|
|
License: GPLv2
|
|
URL: https://github.com/dynup/kpatch
|
|
Source0: https://github.com/dynup/kpatch/archive/%{name}-%{raw_version}.tar.gz
|
|
|
|
Source1: os_hotpatch
|
|
Source2: livepatch
|
|
Source3: make_hotpatch
|
|
|
|
Patch0001:0001-support-compile-kpatch-on-aarch64.patch
|
|
Patch0002:0002-kpatch-build-support-build-patch-for-aarch64.patch
|
|
Patch0003:0003-create-diff-object-new-static-var-should-be-included.patch
|
|
Patch0004:0004-livepatch-fix-use-THIS-modname-as-the-name-of-ddebug.patch
|
|
Patch0005:0005-create-diff-object-fix-correlate-static-local-variab.patch
|
|
Patch0006:0006-create-diff-object-don-t-create-dynamic-reloc-for-sy.patch
|
|
Patch0007:0007-create-diff-object-create-dynamic-relocs-for-changed.patch
|
|
Patch0008:0008-fix-rodata.str-problem.patch
|
|
Patch0009:0009-livepatch-patch-hook-don-t-active-patch-when-insmod.patch
|
|
Patch0010:0010-kpatch-build-enhance-for-out-of-tree-module.patch
|
|
Patch0011:0011-support-c-plus-kernel-module.patch
|
|
Patch0012:0012-symbol-lookup-enhancement.patch
|
|
Patch0013:0013-Add-running-kernel-symbol-table-to-help-symbol-looku.patch
|
|
Patch0014:0014-livepatch-patch-hook-support-force-enable-disable.patch
|
|
Patch0015:0015-kpatch-build-ignore-debuginfo-in-patch.patch
|
|
Patch0016:0016-add-object-in-kpatch.patch
|
|
Patch0017:0017-create-diff-object-fix-.orc_unwind_ip-error.patch
|
|
Patch0018:0018-use-orignal-reloc-for-symbols-from-modules.patch
|
|
Patch0019:0019-create-diff-object-add-jump-label-support.patch
|
|
Patch0020:0020-kpatch-build-add-compile-flag-fno-reorder-functions.patch
|
|
Patch0021:0021-kpatch-build-don-t-copy-.config-for-out-of-tree-modu.patch
|
|
|
|
BuildRequires: gcc elfutils-libelf-devel uname-build-checks kernel kernel-devel
|
|
Requires: bc
|
|
|
|
%description
|
|
kpatch is a Linux dynamic kernel patching infrastructure which allows you to patch
|
|
a running kernel without rebooting or restarting any processes. It enables sysadmins
|
|
to apply critical security patches to the kernel immediately, without having to wait
|
|
for long-running tasks to complete, for users to log off, or for scheduled reboot
|
|
windows. It gives more control over uptime without sacrificing security or stability.
|
|
|
|
%package runtime
|
|
Summary: Dynamic kernel patching
|
|
Requires: tar bash kmod
|
|
BuildArch: noarch
|
|
%description runtime
|
|
Dynamic kernel patching
|
|
|
|
%package_help
|
|
|
|
%prep
|
|
%autosetup -n %{name}-%{raw_version} -p1
|
|
|
|
%build
|
|
export CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS"
|
|
%make_build
|
|
|
|
%install
|
|
%make_install PREFIX=%{_prefix}
|
|
|
|
install -Dm 0500 -t %{buildroot}/%{_bindir} %{SOURCE1} %{SOURCE2}
|
|
install -Dm 0500 -t %{buildroot}/opt/patch_workspace/ %{SOURCE3}
|
|
pushd %{buildroot}/opt/patch_workspace
|
|
mkdir hotpatch package
|
|
popd
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%doc COPYING README.md
|
|
%{_bindir}/*
|
|
%{_prefix}/lib/systemd/system/*
|
|
%{_libexecdir}/kpatch
|
|
%{_prefix}/sbin/kpatch
|
|
%{_datadir}/%{name}/*
|
|
%{_sysconfdir}/init/*
|
|
/opt/patch_workspace/*
|
|
%exclude %{_bindir}/livepatch
|
|
%exclude %{_bindir}/os_hotpatch
|
|
|
|
%files runtime
|
|
%defattr(-,root,root)
|
|
%{_bindir}/livepatch
|
|
%{_bindir}/os_hotpatch
|
|
|
|
%files help
|
|
%{_mandir}/man1/*.1.gz
|
|
|
|
%changelog
|
|
* Thu Mar 12 2020 Zhipeng Xie<xiezhipeng1@huawei.com> -2.0-3.1.26
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:use orignal reloc for export symbols in all modules
|
|
|
|
* Thu Mar 12 2020 Zhipeng Xie<xiezhipeng1@huawei.com> -2.0-3.1.25
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:change livepatch and os_hotpatch to permission and exclude in main package
|
|
|
|
* Wed Feb 26 2020 Zhipeng Xie<xiezhipeng1@huawei.com> -2.0-3.1.24
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:rebase from upstream version v0.9.0
|
|
|
|
* Mon Feb 17 2020 openEuler Buildteam <buildteam@openeuler.org> -2.0-3.1.23
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:add subpackage kpatch-runtime
|
|
|
|
* Mon Dec 30 2019 openEuler Buildteam <buildteam@openeuler.org> -2.0-3.1.22
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:change some patch name and delete useless code
|
|
|
|
* Mon Dec 23 2019 openEuler Buildteam <buildteam@openeuler.org> -2.0-3.1.21
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:modify email adress
|
|
|
|
* Thu Dec 19 2019 chengquan<chengquan3@huawei.com> -2.0-3.1.20
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:remove useless description
|
|
|
|
* Thu Nov 28 2019 Yufa Fang<fangyufa1@huawei.com> - 2.0-3.1.19
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:fix compilation with CONFIG_HAVE_ARCH_PREL32_RELOCATIONS
|
|
|
|
* Thu Oct 10 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.18
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:add security compile flags
|
|
|
|
* Tue Sep 27 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.17
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:create-diff-object: allow changing subsections
|
|
|
|
* Tue Sep 24 2019 shenyangyang<shenyangyang4@huawei.com> -2.0-3.1.16
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:revise help package and subpackage
|
|
|
|
* Mon Aug 26 2019 openEuler Buildteam<buildteam@openeuler.org> -2.0-3.1.15
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:changelog some patch commit message
|
|
|
|
* Tue Aug 20 2019 openEuler Builteam <buildteam@openeuler.org> -2.0-3.1.14
|
|
- Type:NA
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:rewrite spec
|
|
|
|
* Fri Jul 16 2019 yangbin<robin.yb@huawei.com> - 2.0-3.1.13
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:add object in kpatch
|
|
|
|
* Fri Jul 5 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.12
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:fix ref static local symbol for longname symbol
|
|
|
|
* Mon Jul 1 2019 Enbo Kang<kangenbo@huawei.com> - 2.0-3.1.11
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:fix security problem
|
|
|
|
* Tue May 7 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.10
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:change some patch to backport prefix
|
|
|
|
* Sat Apr 13 2019 hezhanyu<hezhanyu@huawei.com> - 2.0-3.1.9
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:modify private key in sign-modules
|
|
|
|
* Thu Apr 4 2019 Enbo Kang<kangenbo@huawei.com> - 2.0-3.1.8
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:delete sensitive information
|
|
|
|
* Thu Mar 28 2019 Enbo Kang<kangenbo@huawei.com> - 2.0-3.1.7
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:add RELRO and PIE for create-kpatch-module, create-diff-object, create-klp-module
|
|
|
|
* Sat Mar 23 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.6
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:upgrade to upstream version 0.6.1
|
|
|
|
* Thu Mar 7 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.5
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:add find_special_section_data_arm64 for arm64
|
|
|
|
* Tue Feb 26 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.4
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:add packages required by kpatch and kpatch-runtime
|
|
|
|
* Mon Feb 25 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.3
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:adapt for native compile_env
|
|
|
|
* Mon Feb 11 2019 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.2
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:support kernel-4.19
|
|
|
|
* Thu Dec 20 2018 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.1
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:support c++ kernel module
|
|
|
|
* Wed Dec 19 2018 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-3.1.0
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:support compile kpatch on aarch64
|
|
|
|
* Fri Nov 23 2018 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-2.7.2
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:fix some kpatch-build fail cases
|
|
|
|
* Sat Nov 3 2018 Zhipeng Xie<xiezhipeng1@huawei.com> - 2.0-2.7.1
|
|
- Type:enhancement
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:rebase kpatch
|
|
|
|
* Thu Nov 16 2017 openEuler Builteam <buildteam@openeuler.org> 0.4.0-3
|
|
- Package init
|