2021-04-23 21:13:09 +02:00
|
|
|
#!/bin/bash
|
2009-08-26 17:00:38 +02:00
|
|
|
#
|
|
|
|
# rc.6 This file is executed by init when it goes into runlevel
|
|
|
|
# 0 (halt) or runlevel 6 (reboot). It kills all processes,
|
|
|
|
# unmounts file systems and then either halts or reboots.
|
|
|
|
#
|
2021-11-11 21:36:12 +01:00
|
|
|
# Version: @(#)/etc/rc.d/rc.6 15.0 Wed Nov 10 21:19:42 UTC 2021
|
2009-08-26 17:00:38 +02:00
|
|
|
#
|
|
|
|
# Author: Miquel van Smoorenburg <miquels@drinkel.nl.mugnet.org>
|
|
|
|
# Modified by: Patrick J. Volkerding, <volkerdi@slackware.com>
|
|
|
|
|
|
|
|
# Set the path.
|
2018-05-28 21:12:29 +02:00
|
|
|
PATH=/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin
|
2009-08-26 17:00:38 +02:00
|
|
|
|
2021-11-11 21:36:12 +01:00
|
|
|
# If we are in an lxc container, set $container to skip parts of the script.
|
|
|
|
# Thanks to Matteo Bernardini <ponce@slackbuilds.org> and Chris Willing for
|
|
|
|
# the initial work making this script lxc compatible.
|
|
|
|
if grep -aq container=lxc /proc/1/environ 2> /dev/null ; then
|
|
|
|
container="lxc"
|
|
|
|
fi
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# If there are SystemV init scripts for this runlevel, run them.
|
|
|
|
if [ -x /etc/rc.d/rc.sysvinit ]; then
|
2018-05-28 21:12:29 +02:00
|
|
|
/etc/rc.d/rc.sysvinit
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Set linefeed mode to avoid staircase effect.
|
|
|
|
/bin/stty onlcr
|
|
|
|
|
|
|
|
echo "Running shutdown script $0:"
|
|
|
|
|
|
|
|
# Find out how we were called.
|
|
|
|
case "$0" in
|
|
|
|
*0)
|
2016-06-30 22:26:57 +02:00
|
|
|
shutdown_command="halt"
|
2009-08-26 17:00:38 +02:00
|
|
|
;;
|
|
|
|
*6)
|
2016-06-30 22:26:57 +02:00
|
|
|
shutdown_command=reboot
|
2009-08-26 17:00:38 +02:00
|
|
|
;;
|
|
|
|
*)
|
|
|
|
echo "$0: call me as \"rc.0\" or \"rc.6\" please!"
|
|
|
|
exit 1
|
|
|
|
;;
|
|
|
|
esac
|
|
|
|
|
2018-06-13 07:43:00 +02:00
|
|
|
# Restart init. This prevents init from hanging on to file handles for removed
|
|
|
|
# glibc shared libraries in the case that those were upgraded or reinstalled.
|
|
|
|
/sbin/telinit u
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# Save the system time to the hardware clock using hwclock --systohc.
|
2016-06-30 22:26:57 +02:00
|
|
|
# This will also create or update the timestamps in /etc/adjtime.
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -x /sbin/hwclock -a -z "$container" ]; then
|
2009-08-26 17:00:38 +02:00
|
|
|
# Check for a broken motherboard RTC clock (where ioports for rtc are
|
|
|
|
# unknown) to prevent hwclock causing a hang:
|
2016-06-30 22:26:57 +02:00
|
|
|
if ! grep -q " : rtc" /proc/ioports ; then
|
2009-08-26 17:00:38 +02:00
|
|
|
CLOCK_OPT="--directisa"
|
|
|
|
fi
|
2016-06-30 22:26:57 +02:00
|
|
|
if [ /etc/adjtime -nt /etc/hardwareclock ]; then
|
|
|
|
if grep -q "^LOCAL" /etc/adjtime ; then
|
|
|
|
echo "Saving system time to the hardware clock (localtime)."
|
|
|
|
else
|
|
|
|
echo "Saving system time to the hardware clock (UTC)."
|
|
|
|
fi
|
|
|
|
/sbin/hwclock $CLOCK_OPT --systohc
|
|
|
|
elif grep -q "^UTC" /etc/hardwareclock 2> /dev/null ; then
|
2009-08-26 17:00:38 +02:00
|
|
|
echo "Saving system time to the hardware clock (UTC)."
|
2016-06-30 22:26:57 +02:00
|
|
|
if [ ! -r /etc/adjtime ]; then
|
|
|
|
echo "Creating system time correction file /etc/adjtime."
|
|
|
|
fi
|
2009-08-26 17:00:38 +02:00
|
|
|
/sbin/hwclock $CLOCK_OPT --utc --systohc
|
|
|
|
else
|
|
|
|
echo "Saving system time to the hardware clock (localtime)."
|
2016-06-30 22:26:57 +02:00
|
|
|
if [ ! -r /etc/adjtime ]; then
|
|
|
|
echo "Creating system time correction file /etc/adjtime."
|
|
|
|
fi
|
|
|
|
/sbin/hwclock $CLOCK_OPT --localtime --systohc
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Run any local shutdown scripts:
|
|
|
|
if [ -x /etc/rc.d/rc.local_shutdown ]; then
|
|
|
|
/etc/rc.d/rc.local_shutdown stop
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Stop the Apache web server:
|
|
|
|
if [ -x /etc/rc.d/rc.httpd ]; then
|
|
|
|
/etc/rc.d/rc.httpd stop
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Stop the MySQL database:
|
2018-05-28 21:12:29 +02:00
|
|
|
if [ -x /etc/rc.d/rc.mysqld -a -r /var/run/mysql/mysql.pid ]; then
|
|
|
|
/etc/rc.d/rc.mysqld stop
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Stop the Samba server:
|
|
|
|
if [ -x /etc/rc.d/rc.samba ]; then
|
2018-05-28 21:12:29 +02:00
|
|
|
/etc/rc.d/rc.samba stop
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Shut down the NFS server:
|
|
|
|
if [ -x /etc/rc.d/rc.nfsd ]; then
|
|
|
|
/etc/rc.d/rc.nfsd stop
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Shut down the SSH server:
|
|
|
|
if [ -x /etc/rc.d/rc.sshd ]; then
|
|
|
|
/etc/rc.d/rc.sshd stop
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Shut down the SASL authentication daemon:
|
|
|
|
if [ -x /etc/rc.d/rc.saslauthd ]; then
|
|
|
|
/etc/rc.d/rc.saslauthd stop
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Shut down OpenLDAP:
|
|
|
|
if [ -x /etc/rc.d/rc.openldap ]; then
|
|
|
|
/etc/rc.d/rc.openldap stop
|
|
|
|
fi
|
|
|
|
|
2018-06-15 02:03:49 +02:00
|
|
|
# Stop the haveged entropy daemon:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -x /etc/rc.d/rc.haveged -a -z "$container" ]; then
|
2018-06-15 02:03:49 +02:00
|
|
|
/etc/rc.d/rc.haveged stop
|
|
|
|
fi
|
|
|
|
|
2011-04-25 15:37:00 +02:00
|
|
|
# Kill any processes (typically gam) that would otherwise prevent
|
|
|
|
# unmounting NFS volumes:
|
|
|
|
unset FUSER_DELAY
|
2019-08-28 23:29:41 +02:00
|
|
|
for dir in $(/bin/mount | grep -e 'type nfs ' -e 'type nfs4 ' | sed -e 's|.* on ||g' | cut -d ' ' -f 1) ; do
|
2011-04-25 15:37:00 +02:00
|
|
|
echo "Killing processes holding NFS mount $dir open..."
|
|
|
|
# Background this to prevent fuser from also blocking shutdown:
|
2018-07-25 05:50:17 +02:00
|
|
|
/usr/bin/fuser -k -M -m "$dir" &
|
2011-04-25 15:37:00 +02:00
|
|
|
FUSER_DELAY=5
|
|
|
|
done
|
|
|
|
# If fuser was run, let it have some delay:
|
|
|
|
if [ ! -z "$FUSER_DELAY" ]; then
|
|
|
|
sleep $FUSER_DELAY
|
|
|
|
fi
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# Unmount any NFS, SMB, or CIFS filesystems:
|
2016-06-30 22:26:57 +02:00
|
|
|
echo "Unmounting remote filesystems:"
|
2019-08-28 23:29:41 +02:00
|
|
|
/bin/umount -v -a -l -f -r -t nfs,nfs4,smbfs,cifs | tr -d ' ' | grep successfully | sed "s/:successfullyunmounted/ has been successfully unmounted./g"
|
2022-08-02 01:30:59 +02:00
|
|
|
# Update PATH hashes:
|
|
|
|
hash -r
|
2009-08-26 17:00:38 +02:00
|
|
|
|
2021-09-17 06:17:57 +02:00
|
|
|
# Stop D-Bus:
|
|
|
|
if [ -x /etc/rc.d/rc.messagebus ]; then
|
|
|
|
/etc/rc.d/rc.messagebus stop
|
|
|
|
fi
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# Try to shut down pppd:
|
|
|
|
PS="$(ps ax)"
|
2022-08-02 01:30:59 +02:00
|
|
|
if echo "$PS" | grep -q -w pppd ; then
|
2009-08-26 17:00:38 +02:00
|
|
|
if [ -x /usr/sbin/ppp-off ]; then
|
|
|
|
/usr/sbin/ppp-off
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
2012-09-26 03:10:42 +02:00
|
|
|
# Shut down YP services:
|
|
|
|
if [ -x /etc/rc.d/rc.yp ]; then
|
|
|
|
if grep -wq stop /etc/rc.d/rc.yp ; then
|
|
|
|
/etc/rc.d/rc.yp stop
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# Bring down the networking system, but first make sure that this
|
|
|
|
# isn't a diskless client with the / partition mounted via NFS:
|
2022-08-02 01:30:59 +02:00
|
|
|
if ! /bin/mount | grep -q -e 'on / type nfs' -e 'on / type nfs4' ; then
|
2009-08-26 17:00:38 +02:00
|
|
|
if [ -x /etc/rc.d/rc.inet1 ]; then
|
2018-05-28 21:12:29 +02:00
|
|
|
/etc/rc.d/rc.inet1 stop
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
|
|
|
# In case dhcpcd might have been manually started on the command line,
|
|
|
|
# look for the .pid file, and shut dhcpcd down if it's found:
|
|
|
|
if /bin/ls /etc/dhcpc/*.pid 1> /dev/null 2> /dev/null ; then
|
|
|
|
/sbin/dhcpcd -k 1> /dev/null 2> /dev/null
|
|
|
|
# A little time for /etc/resolv.conf and/or other files to
|
|
|
|
# restore themselves.
|
|
|
|
sleep 2
|
|
|
|
fi
|
|
|
|
|
2022-12-22 04:40:55 +01:00
|
|
|
# If there is a firewall_shutdown script, run it. Most firewall setups
|
|
|
|
# will not need to be formally shut down, but in case yours needs that
|
|
|
|
# (perhaps to do some shutdown-time cleanup or to save the state), then
|
|
|
|
# create an /etc/rc.d/rc.firewall_shutdown script to do these things.
|
|
|
|
# If your rc.firewall script supports a "stop" parameter, you might only
|
|
|
|
# need this in your rc.firewall_shutdown script:
|
|
|
|
#
|
|
|
|
# /etc/rc.d/rc.firewall stop
|
|
|
|
#
|
|
|
|
# Or in that case you could also just make rc.firewall_shutdown a symlink
|
|
|
|
# to the rc.firewall script, since we also provide the stop parameter here.
|
|
|
|
if [ -x /etc/rc.d/rc.firewall_shutdown ]; then
|
|
|
|
/etc/rc.d/rc.firewall_shutdown stop
|
|
|
|
fi
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# Shut down PCMCIA devices:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -x /etc/rc.d/rc.pcmcia -a -z "$container" ]; then
|
2018-05-28 21:12:29 +02:00
|
|
|
/etc/rc.d/rc.pcmcia stop
|
2009-08-26 17:00:38 +02:00
|
|
|
# The cards might need a little extra time here to deactivate:
|
|
|
|
/bin/sleep 5
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Turn off process accounting:
|
|
|
|
if [ -x /sbin/accton -a -r /var/log/pacct ]; then
|
|
|
|
/sbin/accton off
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Terminate acpid before syslog:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -x /etc/rc.d/rc.acpid -a -r /var/run/acpid.pid -a -z "$container" ]; then # quit
|
2018-05-28 21:12:29 +02:00
|
|
|
/etc/rc.d/rc.acpid stop
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
2012-09-26 03:10:42 +02:00
|
|
|
# Stop udev:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -x /etc/rc.d/rc.udev -a -z "$container" ]; then
|
2018-05-28 21:12:29 +02:00
|
|
|
/etc/rc.d/rc.udev force-stop
|
2012-09-26 03:10:42 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Kill all remaining processes.
|
2016-06-30 22:26:57 +02:00
|
|
|
OMITPIDS="$(for p in $(pgrep mdmon); do echo -o $p; done)" # Don't kill mdmon
|
2012-09-26 03:10:42 +02:00
|
|
|
if [ ! "$1" = "fast" ]; then
|
|
|
|
echo "Sending all processes the SIGTERM signal."
|
2016-06-30 22:26:57 +02:00
|
|
|
/sbin/killall5 -15 $OMITPIDS
|
2009-08-26 17:00:38 +02:00
|
|
|
/bin/sleep 5
|
2012-09-26 03:10:42 +02:00
|
|
|
echo "Sending all processes the SIGKILL signal."
|
2016-06-30 22:26:57 +02:00
|
|
|
/sbin/killall5 -9 $OMITPIDS
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Try to turn off quota.
|
2022-08-02 01:30:59 +02:00
|
|
|
if grep -q quota /etc/fstab ; then
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -x /sbin/quotaoff -a -z "$container" ]; then
|
2009-08-26 17:00:38 +02:00
|
|
|
echo "Turning off filesystem quotas."
|
|
|
|
/sbin/quotaoff -a
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Carry a random seed between reboots.
|
Wed Apr 6 20:23:46 UTC 2022
a/haveged-1.9.17-x86_64-2.txz: Rebuilt.
Install /etc/rc.d/rc.haveged as non-executable. For existing installations
running a recent kernel, it is safe to turn this off.
Back when we added the haveged package we were using the 4.4 kernel, but
since Linux 5.4 this same entropy generating algorithm has been built into
the kernel, so there's no reason to also run it in userspace. We'll keep
the package around (for now, anyway) in case someone might be running an
old kernel. Thanks to Jason A. Donenfeld.
a/sysvinit-scripts-15.0-noarch-10.txz: Rebuilt.
rc.S, rc.6: use the seedrng utility to seed and initialize the kernel
random number generator and generate a new seed.
If seedrng is missing, we'll attempt to do these things with scripting.
Thanks to Jason A. Donenfeld for hints about how to make a modest
improvement in that regard (blame me for any problems with my own changes),
but because you can't force the kernel RNG to initialize with a script
(it needs an ioctl), you won't get the same guarantees that you do when
using the new seedrng utility.
a/util-linux-2.38-x86_64-2.txz: Rebuilt.
Added seedrng utility, used to seed and initialize the kernel random number
generator and to generate new seeds for carrying entropy across reboots.
Thanks to Jason A. Donenfeld.
n/libmnl-1.0.5-x86_64-1.txz: Upgraded.
n/libnfnetlink-1.0.2-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-91.8.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/91.8.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-15/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289
(* Security fix *)
2022-04-06 22:23:46 +02:00
|
|
|
# Doing this properly requires the seedrng utility.
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -z "$container" ]; then
|
Wed Apr 6 20:23:46 UTC 2022
a/haveged-1.9.17-x86_64-2.txz: Rebuilt.
Install /etc/rc.d/rc.haveged as non-executable. For existing installations
running a recent kernel, it is safe to turn this off.
Back when we added the haveged package we were using the 4.4 kernel, but
since Linux 5.4 this same entropy generating algorithm has been built into
the kernel, so there's no reason to also run it in userspace. We'll keep
the package around (for now, anyway) in case someone might be running an
old kernel. Thanks to Jason A. Donenfeld.
a/sysvinit-scripts-15.0-noarch-10.txz: Rebuilt.
rc.S, rc.6: use the seedrng utility to seed and initialize the kernel
random number generator and generate a new seed.
If seedrng is missing, we'll attempt to do these things with scripting.
Thanks to Jason A. Donenfeld for hints about how to make a modest
improvement in that regard (blame me for any problems with my own changes),
but because you can't force the kernel RNG to initialize with a script
(it needs an ioctl), you won't get the same guarantees that you do when
using the new seedrng utility.
a/util-linux-2.38-x86_64-2.txz: Rebuilt.
Added seedrng utility, used to seed and initialize the kernel random number
generator and to generate new seeds for carrying entropy across reboots.
Thanks to Jason A. Donenfeld.
n/libmnl-1.0.5-x86_64-1.txz: Upgraded.
n/libnfnetlink-1.0.2-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-91.8.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/91.8.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-15/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289
(* Security fix *)
2022-04-06 22:23:46 +02:00
|
|
|
# Any old seed that exists here shall be deemed useless:
|
|
|
|
if [ -f /etc/random-seed ]; then
|
|
|
|
rm -f /etc/random-seed
|
Mon Apr 11 20:49:27 UTC 2022
a/aaa_libraries-15.1-x86_64-3.txz: Rebuilt.
Upgraded: libz.so.1.2.12, libexpat.so.1.8.8, libcap.so.2.64,
libicudata.so.70.1, libicui18n.so.70.1, libicuio.so.70.1,
libicutest.so.70.1, libicutu.so.70.1, libicuuc.so.70.1.
The icu4c libraries are from the previous package (for temporary
compatibility) and will be removed in a month or so.
Removed: liblber-2.4.so.2.11.7, libldap-2.4.so.2.11.7.
a/haveged-1.9.18-x86_64-1.txz: Upgraded.
I've decided to turn this back on by default in light of comments in
README.md. It doesn't hurt to have an additional source of entropy
(especially in early boot), and the overhead from running this daemon is
negligible.
a/sysvinit-scripts-15.0-noarch-11.txz: Rebuilt.
rc.S, rc.6: use a temporary umask and more syncing to avoid any races when
creating the random seed directory and files. Use the poolsize rather than
a hardcoded 512 bytes when creating a non-creditable seed in the fallback
scripts. Thanks to Jason A. Donenfeld.
a/xfsprogs-5.13.0-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
ap/inxi-3.3.15_1-noarch-1.txz: Upgraded.
ap/sqlite-3.38.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
d/help2man-1.49.2-x86_64-1.txz: Upgraded.
kde/attica-5.93.0-x86_64-1.txz: Upgraded.
kde/baloo-5.93.0-x86_64-1.txz: Upgraded.
kde/bluez-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/breeze-icons-5.93.0-noarch-1.txz: Upgraded.
kde/extra-cmake-modules-5.93.0-x86_64-1.txz: Upgraded.
kde/frameworkintegration-5.93.0-x86_64-1.txz: Upgraded.
kde/kactivities-5.93.0-x86_64-1.txz: Upgraded.
kde/kactivities-stats-5.93.0-x86_64-1.txz: Upgraded.
kde/kapidox-5.93.0-x86_64-1.txz: Upgraded.
kde/karchive-5.93.0-x86_64-1.txz: Upgraded.
kde/kauth-5.93.0-x86_64-1.txz: Upgraded.
kde/kbookmarks-5.93.0-x86_64-1.txz: Upgraded.
kde/kcalendarcore-5.93.0-x86_64-1.txz: Upgraded.
kde/kcmutils-5.93.0-x86_64-1.txz: Upgraded.
kde/kcodecs-5.93.0-x86_64-1.txz: Upgraded.
kde/kcompletion-5.93.0-x86_64-1.txz: Upgraded.
kde/kconfig-5.93.0-x86_64-1.txz: Upgraded.
kde/kconfigwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kcontacts-5.93.0-x86_64-1.txz: Upgraded.
kde/kcoreaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kcrash-5.93.0-x86_64-1.txz: Upgraded.
kde/kdav-5.93.0-x86_64-1.txz: Upgraded.
kde/kdbusaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kdeclarative-5.93.0-x86_64-1.txz: Upgraded.
kde/kded-5.93.0-x86_64-1.txz: Upgraded.
kde/kdelibs4support-5.93.0-x86_64-1.txz: Upgraded.
kde/kdesignerplugin-5.93.0-x86_64-1.txz: Upgraded.
kde/kdesu-5.93.0-x86_64-1.txz: Upgraded.
kde/kdewebkit-5.93.0-x86_64-1.txz: Upgraded.
kde/kdnssd-5.93.0-x86_64-1.txz: Upgraded.
kde/kdoctools-5.93.0-x86_64-1.txz: Upgraded.
kde/kemoticons-5.93.0-x86_64-1.txz: Upgraded.
kde/kfilemetadata-5.93.0-x86_64-1.txz: Upgraded.
kde/kglobalaccel-5.93.0-x86_64-1.txz: Upgraded.
kde/kguiaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kholidays-5.93.0-x86_64-1.txz: Upgraded.
kde/khtml-5.93.0-x86_64-1.txz: Upgraded.
kde/ki18n-5.93.0-x86_64-1.txz: Upgraded.
kde/kiconthemes-5.93.0-x86_64-1.txz: Upgraded.
kde/kidletime-5.93.0-x86_64-1.txz: Upgraded.
kde/kimageformats-5.93.0-x86_64-1.txz: Upgraded.
kde/kinit-5.93.0-x86_64-1.txz: Upgraded.
kde/kio-5.93.0-x86_64-1.txz: Upgraded.
kde/kirigami2-5.93.0-x86_64-1.txz: Upgraded.
kde/kitemmodels-5.93.0-x86_64-1.txz: Upgraded.
kde/kitemviews-5.93.0-x86_64-1.txz: Upgraded.
kde/kjobwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kjs-5.93.0-x86_64-1.txz: Upgraded.
kde/kjsembed-5.93.0-x86_64-1.txz: Upgraded.
kde/kmediaplayer-5.93.0-x86_64-1.txz: Upgraded.
kde/knewstuff-5.93.0-x86_64-1.txz: Upgraded.
kde/knotifications-5.93.0-x86_64-1.txz: Upgraded.
kde/knotifyconfig-5.93.0-x86_64-1.txz: Upgraded.
kde/kpackage-5.93.0-x86_64-1.txz: Upgraded.
kde/kparts-5.93.0-x86_64-1.txz: Upgraded.
kde/kpeople-5.93.0-x86_64-1.txz: Upgraded.
kde/kplotting-5.93.0-x86_64-1.txz: Upgraded.
kde/kpty-5.93.0-x86_64-1.txz: Upgraded.
kde/kquickcharts-5.93.0-x86_64-1.txz: Upgraded.
kde/kross-5.93.0-x86_64-1.txz: Upgraded.
kde/krunner-5.93.0-x86_64-1.txz: Upgraded.
kde/kservice-5.93.0-x86_64-1.txz: Upgraded.
kde/ktexteditor-5.93.0-x86_64-1.txz: Upgraded.
kde/ktextwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kunitconversion-5.93.0-x86_64-1.txz: Upgraded.
kde/kwallet-5.93.0-x86_64-1.txz: Upgraded.
kde/kwayland-5.93.0-x86_64-1.txz: Upgraded.
kde/kwidgetsaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kwindowsystem-5.93.0-x86_64-1.txz: Upgraded.
kde/kxmlgui-5.93.0-x86_64-1.txz: Upgraded.
kde/kxmlrpcclient-5.93.0-x86_64-1.txz: Upgraded.
kde/modemmanager-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/networkmanager-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/oxygen-icons5-5.93.0-noarch-1.txz: Upgraded.
kde/plasma-framework-5.93.0-x86_64-1.txz: Upgraded.
kde/prison-5.93.0-x86_64-1.txz: Upgraded.
kde/purpose-5.93.0-x86_64-1.txz: Upgraded.
kde/qqc2-desktop-style-5.93.0-x86_64-1.txz: Upgraded.
kde/solid-5.93.0-x86_64-1.txz: Upgraded.
kde/sonnet-5.93.0-x86_64-1.txz: Upgraded.
kde/syndication-5.93.0-x86_64-1.txz: Upgraded.
kde/syntax-highlighting-5.93.0-x86_64-1.txz: Upgraded.
kde/threadweaver-5.93.0-x86_64-1.txz: Upgraded.
l/boost-1.78.0-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/harfbuzz-4.2.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/icu4c-71.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libcap-2.64-x86_64-1.txz: Upgraded.
l/libical-3.0.14-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/libqalculate-4.1.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/libvisio-0.1.7-x86_64-9.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/nodejs-16.14.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/qt5-5.15.3_20220407_9b1efa0e-x86_64-1.txz: Upgraded.
Compiled against icu4c-71.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-9.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/vte-0.66.2-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/dovecot-2.3.18-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/links-2.26-x86_64-1.txz: Upgraded.
n/openssh-9.0p1-x86_64-1.txz: Upgraded.
This update contains some potentially incompatible changes regarding the
scp utility. For more information, see:
https://www.openssh.com/releasenotes.html#9.0
n/php-7.4.28-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/postfix-3.7.0-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/samba-4.16.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/tin-2.6.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
t/texlive-2021.210418-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
x/xclock-1.1.1-x86_64-1.txz: Upgraded.
x/xdpyinfo-1.3.3-x86_64-1.txz: Upgraded.
extra/brltty/brltty-6.4-x86_64-5.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/php80/php80-8.0.17-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/php81/php81-8.1.4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/sendmail/sendmail-8.17.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/sendmail/sendmail-cf-8.17.1-noarch-3.txz: Rebuilt.
2022-04-11 22:49:27 +02:00
|
|
|
sync /etc
|
Wed Apr 6 20:23:46 UTC 2022
a/haveged-1.9.17-x86_64-2.txz: Rebuilt.
Install /etc/rc.d/rc.haveged as non-executable. For existing installations
running a recent kernel, it is safe to turn this off.
Back when we added the haveged package we were using the 4.4 kernel, but
since Linux 5.4 this same entropy generating algorithm has been built into
the kernel, so there's no reason to also run it in userspace. We'll keep
the package around (for now, anyway) in case someone might be running an
old kernel. Thanks to Jason A. Donenfeld.
a/sysvinit-scripts-15.0-noarch-10.txz: Rebuilt.
rc.S, rc.6: use the seedrng utility to seed and initialize the kernel
random number generator and generate a new seed.
If seedrng is missing, we'll attempt to do these things with scripting.
Thanks to Jason A. Donenfeld for hints about how to make a modest
improvement in that regard (blame me for any problems with my own changes),
but because you can't force the kernel RNG to initialize with a script
(it needs an ioctl), you won't get the same guarantees that you do when
using the new seedrng utility.
a/util-linux-2.38-x86_64-2.txz: Rebuilt.
Added seedrng utility, used to seed and initialize the kernel random number
generator and to generate new seeds for carrying entropy across reboots.
Thanks to Jason A. Donenfeld.
n/libmnl-1.0.5-x86_64-1.txz: Upgraded.
n/libnfnetlink-1.0.2-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-91.8.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/91.8.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-15/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289
(* Security fix *)
2022-04-06 22:23:46 +02:00
|
|
|
fi
|
|
|
|
if [ -x /usr/sbin/seedrng ]; then
|
|
|
|
/usr/sbin/seedrng
|
|
|
|
else # we have to fall back on the old method:
|
Mon Apr 11 20:49:27 UTC 2022
a/aaa_libraries-15.1-x86_64-3.txz: Rebuilt.
Upgraded: libz.so.1.2.12, libexpat.so.1.8.8, libcap.so.2.64,
libicudata.so.70.1, libicui18n.so.70.1, libicuio.so.70.1,
libicutest.so.70.1, libicutu.so.70.1, libicuuc.so.70.1.
The icu4c libraries are from the previous package (for temporary
compatibility) and will be removed in a month or so.
Removed: liblber-2.4.so.2.11.7, libldap-2.4.so.2.11.7.
a/haveged-1.9.18-x86_64-1.txz: Upgraded.
I've decided to turn this back on by default in light of comments in
README.md. It doesn't hurt to have an additional source of entropy
(especially in early boot), and the overhead from running this daemon is
negligible.
a/sysvinit-scripts-15.0-noarch-11.txz: Rebuilt.
rc.S, rc.6: use a temporary umask and more syncing to avoid any races when
creating the random seed directory and files. Use the poolsize rather than
a hardcoded 512 bytes when creating a non-creditable seed in the fallback
scripts. Thanks to Jason A. Donenfeld.
a/xfsprogs-5.13.0-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
ap/inxi-3.3.15_1-noarch-1.txz: Upgraded.
ap/sqlite-3.38.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
d/help2man-1.49.2-x86_64-1.txz: Upgraded.
kde/attica-5.93.0-x86_64-1.txz: Upgraded.
kde/baloo-5.93.0-x86_64-1.txz: Upgraded.
kde/bluez-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/breeze-icons-5.93.0-noarch-1.txz: Upgraded.
kde/extra-cmake-modules-5.93.0-x86_64-1.txz: Upgraded.
kde/frameworkintegration-5.93.0-x86_64-1.txz: Upgraded.
kde/kactivities-5.93.0-x86_64-1.txz: Upgraded.
kde/kactivities-stats-5.93.0-x86_64-1.txz: Upgraded.
kde/kapidox-5.93.0-x86_64-1.txz: Upgraded.
kde/karchive-5.93.0-x86_64-1.txz: Upgraded.
kde/kauth-5.93.0-x86_64-1.txz: Upgraded.
kde/kbookmarks-5.93.0-x86_64-1.txz: Upgraded.
kde/kcalendarcore-5.93.0-x86_64-1.txz: Upgraded.
kde/kcmutils-5.93.0-x86_64-1.txz: Upgraded.
kde/kcodecs-5.93.0-x86_64-1.txz: Upgraded.
kde/kcompletion-5.93.0-x86_64-1.txz: Upgraded.
kde/kconfig-5.93.0-x86_64-1.txz: Upgraded.
kde/kconfigwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kcontacts-5.93.0-x86_64-1.txz: Upgraded.
kde/kcoreaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kcrash-5.93.0-x86_64-1.txz: Upgraded.
kde/kdav-5.93.0-x86_64-1.txz: Upgraded.
kde/kdbusaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kdeclarative-5.93.0-x86_64-1.txz: Upgraded.
kde/kded-5.93.0-x86_64-1.txz: Upgraded.
kde/kdelibs4support-5.93.0-x86_64-1.txz: Upgraded.
kde/kdesignerplugin-5.93.0-x86_64-1.txz: Upgraded.
kde/kdesu-5.93.0-x86_64-1.txz: Upgraded.
kde/kdewebkit-5.93.0-x86_64-1.txz: Upgraded.
kde/kdnssd-5.93.0-x86_64-1.txz: Upgraded.
kde/kdoctools-5.93.0-x86_64-1.txz: Upgraded.
kde/kemoticons-5.93.0-x86_64-1.txz: Upgraded.
kde/kfilemetadata-5.93.0-x86_64-1.txz: Upgraded.
kde/kglobalaccel-5.93.0-x86_64-1.txz: Upgraded.
kde/kguiaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kholidays-5.93.0-x86_64-1.txz: Upgraded.
kde/khtml-5.93.0-x86_64-1.txz: Upgraded.
kde/ki18n-5.93.0-x86_64-1.txz: Upgraded.
kde/kiconthemes-5.93.0-x86_64-1.txz: Upgraded.
kde/kidletime-5.93.0-x86_64-1.txz: Upgraded.
kde/kimageformats-5.93.0-x86_64-1.txz: Upgraded.
kde/kinit-5.93.0-x86_64-1.txz: Upgraded.
kde/kio-5.93.0-x86_64-1.txz: Upgraded.
kde/kirigami2-5.93.0-x86_64-1.txz: Upgraded.
kde/kitemmodels-5.93.0-x86_64-1.txz: Upgraded.
kde/kitemviews-5.93.0-x86_64-1.txz: Upgraded.
kde/kjobwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kjs-5.93.0-x86_64-1.txz: Upgraded.
kde/kjsembed-5.93.0-x86_64-1.txz: Upgraded.
kde/kmediaplayer-5.93.0-x86_64-1.txz: Upgraded.
kde/knewstuff-5.93.0-x86_64-1.txz: Upgraded.
kde/knotifications-5.93.0-x86_64-1.txz: Upgraded.
kde/knotifyconfig-5.93.0-x86_64-1.txz: Upgraded.
kde/kpackage-5.93.0-x86_64-1.txz: Upgraded.
kde/kparts-5.93.0-x86_64-1.txz: Upgraded.
kde/kpeople-5.93.0-x86_64-1.txz: Upgraded.
kde/kplotting-5.93.0-x86_64-1.txz: Upgraded.
kde/kpty-5.93.0-x86_64-1.txz: Upgraded.
kde/kquickcharts-5.93.0-x86_64-1.txz: Upgraded.
kde/kross-5.93.0-x86_64-1.txz: Upgraded.
kde/krunner-5.93.0-x86_64-1.txz: Upgraded.
kde/kservice-5.93.0-x86_64-1.txz: Upgraded.
kde/ktexteditor-5.93.0-x86_64-1.txz: Upgraded.
kde/ktextwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kunitconversion-5.93.0-x86_64-1.txz: Upgraded.
kde/kwallet-5.93.0-x86_64-1.txz: Upgraded.
kde/kwayland-5.93.0-x86_64-1.txz: Upgraded.
kde/kwidgetsaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kwindowsystem-5.93.0-x86_64-1.txz: Upgraded.
kde/kxmlgui-5.93.0-x86_64-1.txz: Upgraded.
kde/kxmlrpcclient-5.93.0-x86_64-1.txz: Upgraded.
kde/modemmanager-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/networkmanager-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/oxygen-icons5-5.93.0-noarch-1.txz: Upgraded.
kde/plasma-framework-5.93.0-x86_64-1.txz: Upgraded.
kde/prison-5.93.0-x86_64-1.txz: Upgraded.
kde/purpose-5.93.0-x86_64-1.txz: Upgraded.
kde/qqc2-desktop-style-5.93.0-x86_64-1.txz: Upgraded.
kde/solid-5.93.0-x86_64-1.txz: Upgraded.
kde/sonnet-5.93.0-x86_64-1.txz: Upgraded.
kde/syndication-5.93.0-x86_64-1.txz: Upgraded.
kde/syntax-highlighting-5.93.0-x86_64-1.txz: Upgraded.
kde/threadweaver-5.93.0-x86_64-1.txz: Upgraded.
l/boost-1.78.0-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/harfbuzz-4.2.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/icu4c-71.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libcap-2.64-x86_64-1.txz: Upgraded.
l/libical-3.0.14-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/libqalculate-4.1.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/libvisio-0.1.7-x86_64-9.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/nodejs-16.14.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/qt5-5.15.3_20220407_9b1efa0e-x86_64-1.txz: Upgraded.
Compiled against icu4c-71.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-9.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/vte-0.66.2-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/dovecot-2.3.18-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/links-2.26-x86_64-1.txz: Upgraded.
n/openssh-9.0p1-x86_64-1.txz: Upgraded.
This update contains some potentially incompatible changes regarding the
scp utility. For more information, see:
https://www.openssh.com/releasenotes.html#9.0
n/php-7.4.28-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/postfix-3.7.0-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/samba-4.16.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/tin-2.6.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
t/texlive-2021.210418-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
x/xclock-1.1.1-x86_64-1.txz: Upgraded.
x/xdpyinfo-1.3.3-x86_64-1.txz: Upgraded.
extra/brltty/brltty-6.4-x86_64-5.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/php80/php80-8.0.17-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/php81/php81-8.1.4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/sendmail/sendmail-8.17.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/sendmail/sendmail-cf-8.17.1-noarch-3.txz: Rebuilt.
2022-04-11 22:49:27 +02:00
|
|
|
OLD_UMASK="$(umask)"
|
|
|
|
umask 077
|
|
|
|
mkdir -p /var/lib/seedrng
|
Wed Apr 6 20:23:46 UTC 2022
a/haveged-1.9.17-x86_64-2.txz: Rebuilt.
Install /etc/rc.d/rc.haveged as non-executable. For existing installations
running a recent kernel, it is safe to turn this off.
Back when we added the haveged package we were using the 4.4 kernel, but
since Linux 5.4 this same entropy generating algorithm has been built into
the kernel, so there's no reason to also run it in userspace. We'll keep
the package around (for now, anyway) in case someone might be running an
old kernel. Thanks to Jason A. Donenfeld.
a/sysvinit-scripts-15.0-noarch-10.txz: Rebuilt.
rc.S, rc.6: use the seedrng utility to seed and initialize the kernel
random number generator and generate a new seed.
If seedrng is missing, we'll attempt to do these things with scripting.
Thanks to Jason A. Donenfeld for hints about how to make a modest
improvement in that regard (blame me for any problems with my own changes),
but because you can't force the kernel RNG to initialize with a script
(it needs an ioctl), you won't get the same guarantees that you do when
using the new seedrng utility.
a/util-linux-2.38-x86_64-2.txz: Rebuilt.
Added seedrng utility, used to seed and initialize the kernel random number
generator and to generate new seeds for carrying entropy across reboots.
Thanks to Jason A. Donenfeld.
n/libmnl-1.0.5-x86_64-1.txz: Upgraded.
n/libnfnetlink-1.0.2-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-91.8.0-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/91.8.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-15/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1097
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28281
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1197
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1196
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28282
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28285
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24713
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28289
(* Security fix *)
2022-04-06 22:23:46 +02:00
|
|
|
echo "The SeedRNG utility was not found. Generating a non-creditable and"
|
|
|
|
echo "inferior RNG seed: /var/lib/seedrng/seed.no-credit"
|
Mon Apr 11 20:49:27 UTC 2022
a/aaa_libraries-15.1-x86_64-3.txz: Rebuilt.
Upgraded: libz.so.1.2.12, libexpat.so.1.8.8, libcap.so.2.64,
libicudata.so.70.1, libicui18n.so.70.1, libicuio.so.70.1,
libicutest.so.70.1, libicutu.so.70.1, libicuuc.so.70.1.
The icu4c libraries are from the previous package (for temporary
compatibility) and will be removed in a month or so.
Removed: liblber-2.4.so.2.11.7, libldap-2.4.so.2.11.7.
a/haveged-1.9.18-x86_64-1.txz: Upgraded.
I've decided to turn this back on by default in light of comments in
README.md. It doesn't hurt to have an additional source of entropy
(especially in early boot), and the overhead from running this daemon is
negligible.
a/sysvinit-scripts-15.0-noarch-11.txz: Rebuilt.
rc.S, rc.6: use a temporary umask and more syncing to avoid any races when
creating the random seed directory and files. Use the poolsize rather than
a hardcoded 512 bytes when creating a non-creditable seed in the fallback
scripts. Thanks to Jason A. Donenfeld.
a/xfsprogs-5.13.0-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
ap/inxi-3.3.15_1-noarch-1.txz: Upgraded.
ap/sqlite-3.38.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
d/help2man-1.49.2-x86_64-1.txz: Upgraded.
kde/attica-5.93.0-x86_64-1.txz: Upgraded.
kde/baloo-5.93.0-x86_64-1.txz: Upgraded.
kde/bluez-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/breeze-icons-5.93.0-noarch-1.txz: Upgraded.
kde/extra-cmake-modules-5.93.0-x86_64-1.txz: Upgraded.
kde/frameworkintegration-5.93.0-x86_64-1.txz: Upgraded.
kde/kactivities-5.93.0-x86_64-1.txz: Upgraded.
kde/kactivities-stats-5.93.0-x86_64-1.txz: Upgraded.
kde/kapidox-5.93.0-x86_64-1.txz: Upgraded.
kde/karchive-5.93.0-x86_64-1.txz: Upgraded.
kde/kauth-5.93.0-x86_64-1.txz: Upgraded.
kde/kbookmarks-5.93.0-x86_64-1.txz: Upgraded.
kde/kcalendarcore-5.93.0-x86_64-1.txz: Upgraded.
kde/kcmutils-5.93.0-x86_64-1.txz: Upgraded.
kde/kcodecs-5.93.0-x86_64-1.txz: Upgraded.
kde/kcompletion-5.93.0-x86_64-1.txz: Upgraded.
kde/kconfig-5.93.0-x86_64-1.txz: Upgraded.
kde/kconfigwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kcontacts-5.93.0-x86_64-1.txz: Upgraded.
kde/kcoreaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kcrash-5.93.0-x86_64-1.txz: Upgraded.
kde/kdav-5.93.0-x86_64-1.txz: Upgraded.
kde/kdbusaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kdeclarative-5.93.0-x86_64-1.txz: Upgraded.
kde/kded-5.93.0-x86_64-1.txz: Upgraded.
kde/kdelibs4support-5.93.0-x86_64-1.txz: Upgraded.
kde/kdesignerplugin-5.93.0-x86_64-1.txz: Upgraded.
kde/kdesu-5.93.0-x86_64-1.txz: Upgraded.
kde/kdewebkit-5.93.0-x86_64-1.txz: Upgraded.
kde/kdnssd-5.93.0-x86_64-1.txz: Upgraded.
kde/kdoctools-5.93.0-x86_64-1.txz: Upgraded.
kde/kemoticons-5.93.0-x86_64-1.txz: Upgraded.
kde/kfilemetadata-5.93.0-x86_64-1.txz: Upgraded.
kde/kglobalaccel-5.93.0-x86_64-1.txz: Upgraded.
kde/kguiaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kholidays-5.93.0-x86_64-1.txz: Upgraded.
kde/khtml-5.93.0-x86_64-1.txz: Upgraded.
kde/ki18n-5.93.0-x86_64-1.txz: Upgraded.
kde/kiconthemes-5.93.0-x86_64-1.txz: Upgraded.
kde/kidletime-5.93.0-x86_64-1.txz: Upgraded.
kde/kimageformats-5.93.0-x86_64-1.txz: Upgraded.
kde/kinit-5.93.0-x86_64-1.txz: Upgraded.
kde/kio-5.93.0-x86_64-1.txz: Upgraded.
kde/kirigami2-5.93.0-x86_64-1.txz: Upgraded.
kde/kitemmodels-5.93.0-x86_64-1.txz: Upgraded.
kde/kitemviews-5.93.0-x86_64-1.txz: Upgraded.
kde/kjobwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kjs-5.93.0-x86_64-1.txz: Upgraded.
kde/kjsembed-5.93.0-x86_64-1.txz: Upgraded.
kde/kmediaplayer-5.93.0-x86_64-1.txz: Upgraded.
kde/knewstuff-5.93.0-x86_64-1.txz: Upgraded.
kde/knotifications-5.93.0-x86_64-1.txz: Upgraded.
kde/knotifyconfig-5.93.0-x86_64-1.txz: Upgraded.
kde/kpackage-5.93.0-x86_64-1.txz: Upgraded.
kde/kparts-5.93.0-x86_64-1.txz: Upgraded.
kde/kpeople-5.93.0-x86_64-1.txz: Upgraded.
kde/kplotting-5.93.0-x86_64-1.txz: Upgraded.
kde/kpty-5.93.0-x86_64-1.txz: Upgraded.
kde/kquickcharts-5.93.0-x86_64-1.txz: Upgraded.
kde/kross-5.93.0-x86_64-1.txz: Upgraded.
kde/krunner-5.93.0-x86_64-1.txz: Upgraded.
kde/kservice-5.93.0-x86_64-1.txz: Upgraded.
kde/ktexteditor-5.93.0-x86_64-1.txz: Upgraded.
kde/ktextwidgets-5.93.0-x86_64-1.txz: Upgraded.
kde/kunitconversion-5.93.0-x86_64-1.txz: Upgraded.
kde/kwallet-5.93.0-x86_64-1.txz: Upgraded.
kde/kwayland-5.93.0-x86_64-1.txz: Upgraded.
kde/kwidgetsaddons-5.93.0-x86_64-1.txz: Upgraded.
kde/kwindowsystem-5.93.0-x86_64-1.txz: Upgraded.
kde/kxmlgui-5.93.0-x86_64-1.txz: Upgraded.
kde/kxmlrpcclient-5.93.0-x86_64-1.txz: Upgraded.
kde/modemmanager-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/networkmanager-qt-5.93.0-x86_64-1.txz: Upgraded.
kde/oxygen-icons5-5.93.0-noarch-1.txz: Upgraded.
kde/plasma-framework-5.93.0-x86_64-1.txz: Upgraded.
kde/prison-5.93.0-x86_64-1.txz: Upgraded.
kde/purpose-5.93.0-x86_64-1.txz: Upgraded.
kde/qqc2-desktop-style-5.93.0-x86_64-1.txz: Upgraded.
kde/solid-5.93.0-x86_64-1.txz: Upgraded.
kde/sonnet-5.93.0-x86_64-1.txz: Upgraded.
kde/syndication-5.93.0-x86_64-1.txz: Upgraded.
kde/syntax-highlighting-5.93.0-x86_64-1.txz: Upgraded.
kde/threadweaver-5.93.0-x86_64-1.txz: Upgraded.
l/boost-1.78.0-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/harfbuzz-4.2.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/icu4c-71.1-x86_64-1.txz: Upgraded.
Shared library .so-version bump.
l/libcap-2.64-x86_64-1.txz: Upgraded.
l/libical-3.0.14-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/libqalculate-4.1.1-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/libvisio-0.1.7-x86_64-9.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/nodejs-16.14.2-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/qt5-5.15.3_20220407_9b1efa0e-x86_64-1.txz: Upgraded.
Compiled against icu4c-71.1.
l/qt5-webkit-5.212.0_alpha4-x86_64-9.txz: Rebuilt.
Recompiled against icu4c-71.1.
l/vte-0.66.2-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/dovecot-2.3.18-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/links-2.26-x86_64-1.txz: Upgraded.
n/openssh-9.0p1-x86_64-1.txz: Upgraded.
This update contains some potentially incompatible changes regarding the
scp utility. For more information, see:
https://www.openssh.com/releasenotes.html#9.0
n/php-7.4.28-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/postfix-3.7.0-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/samba-4.16.0-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
n/tin-2.6.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
t/texlive-2021.210418-x86_64-4.txz: Rebuilt.
Recompiled against icu4c-71.1.
x/xclock-1.1.1-x86_64-1.txz: Upgraded.
x/xdpyinfo-1.3.3-x86_64-1.txz: Upgraded.
extra/brltty/brltty-6.4-x86_64-5.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/php80/php80-8.0.17-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/php81/php81-8.1.4-x86_64-2.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/sendmail/sendmail-8.17.1-x86_64-3.txz: Rebuilt.
Recompiled against icu4c-71.1.
extra/sendmail/sendmail-cf-8.17.1-noarch-3.txz: Rebuilt.
2022-04-11 22:49:27 +02:00
|
|
|
SEED="$(cat /var/lib/seedrng/seed.* 2>/dev/null | base64)"
|
|
|
|
rm -f /var/lib/seedrng/seed.*
|
|
|
|
sync /var/lib/seedrng
|
|
|
|
POOLSIZE=$(expr $(cat /proc/sys/kernel/random/poolsize 2> /dev/null || echo 4096) / 8)
|
|
|
|
{
|
|
|
|
head -c $POOLSIZE /dev/urandom
|
|
|
|
echo "$SEED" | base64 -d
|
|
|
|
} | sha512sum | cut -d ' ' -f 1 > /var/lib/seedrng/seed.no-credit
|
|
|
|
umask "$OLD_UMASK"
|
|
|
|
unset OLD_UMASK
|
|
|
|
unset SEED
|
2021-11-11 21:36:12 +01:00
|
|
|
fi
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Before unmounting file systems write a reboot or halt record to wtmp.
|
2016-06-30 22:26:57 +02:00
|
|
|
$shutdown_command -w
|
2009-08-26 17:00:38 +02:00
|
|
|
|
|
|
|
# Turn off swap:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ ! "$(cat /proc/swaps | wc -l)" = "1" -a -z "$container" ]; then
|
2020-08-13 21:46:50 +02:00
|
|
|
echo "Turning off swap."
|
|
|
|
/sbin/swapoff -a
|
|
|
|
/bin/sync
|
|
|
|
fi
|
2009-08-26 17:00:38 +02:00
|
|
|
|
2018-12-30 21:33:37 +01:00
|
|
|
# Umount all tmpfs mounts except /dev/shm and under /run:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -z "$container" ]; then
|
|
|
|
cat /proc/mounts | grep " tmpfs " | grep -v -e " /run " -e " /run/" -e " /dev/shm " | while read mount ; do
|
|
|
|
umount --recursive -v $(echo $mount | cut -f 2 -d ' ') 2> /dev/null
|
|
|
|
done
|
|
|
|
fi
|
2018-12-30 21:33:37 +01:00
|
|
|
|
2018-11-22 06:56:56 +01:00
|
|
|
# Unmount local file systems:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -z "$container" ]; then
|
|
|
|
echo "Unmounting local file systems:"
|
|
|
|
/bin/umount -v -a -t no,proc,sysfs,devtmpfs,fuse.gvfsd-fuse,tmpfs
|
2022-08-02 01:30:59 +02:00
|
|
|
# Update PATH hashes:
|
|
|
|
hash -r
|
2021-11-11 21:36:12 +01:00
|
|
|
# JFS needs a sync here or the / partition cannot be remounted read-only.
|
|
|
|
# In spite of this, it seems that a JFS root partition will always be checked
|
|
|
|
# (and found to be clean) at boot:
|
|
|
|
/bin/sync
|
|
|
|
echo "Remounting root filesystem read-only:"
|
2024-05-28 20:08:19 +02:00
|
|
|
/bin/mount -v -o remount,ro /
|
2021-11-11 21:36:12 +01:00
|
|
|
fi
|
2009-08-26 17:00:38 +02:00
|
|
|
|
|
|
|
# This never hurts:
|
|
|
|
/bin/sync
|
|
|
|
|
2024-10-13 21:49:05 +02:00
|
|
|
# In case part of the $PATH was umounted:
|
|
|
|
hash -r
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# Close any volumes opened by cryptsetup:
|
2023-07-08 21:46:10 +02:00
|
|
|
if [ -x /etc/rc.d/rc.luks ]; then
|
|
|
|
/etc/rc.d/rc.luks stop
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Deactivate LVM volume groups:
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ -z "$container" ]; then
|
|
|
|
if [ -r /etc/lvmtab -o -d /etc/lvm/backup ]; then
|
|
|
|
echo "Deactivating LVM volume groups:"
|
|
|
|
/sbin/vgchange -an
|
|
|
|
fi
|
2009-08-26 17:00:38 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
# This never hurts again (especially since root-on-LVM always fails
|
|
|
|
# to deactivate the / logical volume... but at least it was
|
|
|
|
# remounted as read-only first)
|
|
|
|
/bin/sync
|
|
|
|
|
|
|
|
# sleep 3 fixes problems with some hard drives that don't
|
|
|
|
# otherwise finish syncing before reboot or poweroff
|
|
|
|
/bin/sleep 3
|
|
|
|
|
|
|
|
# This is to ensure all processes have completed on SMP machines:
|
|
|
|
wait
|
|
|
|
|
2021-11-11 21:36:12 +01:00
|
|
|
if [ "$container" = "lxc" ]; then
|
|
|
|
# Confirm successful shutdown of the container:
|
|
|
|
echo "LXC container stopped."
|
|
|
|
fi
|
|
|
|
|
2024-04-05 22:11:23 +02:00
|
|
|
# NUT UPS inverter shutdown support:
|
|
|
|
# If we see a file /etc/killpower, that means we want to shut off the UPS
|
|
|
|
# inverter on the way down. This will save as much battery power as possible
|
|
|
|
# and avoid unnecessary full-drain/full-recharge cycles.
|
|
|
|
if [ -e /etc/killpower -a -z "$container" ]; then
|
|
|
|
# First we need to restart udev or we won't be able to contact the UPS:
|
|
|
|
echo "Restarting udev to be able to shut the UPS inverter off..."
|
|
|
|
/etc/rc.d/rc.udev start
|
|
|
|
# Wasting precious battery power:
|
|
|
|
sleep 10
|
|
|
|
echo "Shutting down UPS inverter..."
|
|
|
|
upsdrvctl shutdown
|
|
|
|
# The power should shut off during the following sleep, but we'll give a
|
|
|
|
# bit of notice otherwise. Also, be sure to set your machine to start when
|
|
|
|
# the power resumes in the BIOS settings so that it doesn't stay off.
|
|
|
|
sleep 45
|
|
|
|
echo "The UPS power should have stopped by now, but has not."
|
|
|
|
echo "It's possible that the power came back during the shutdown process."
|
|
|
|
echo "Otherwise, check communication with the UPS."
|
|
|
|
sleep 15
|
|
|
|
fi
|
|
|
|
|
2009-08-26 17:00:38 +02:00
|
|
|
# Now halt (poweroff with APM or ACPI enabled kernels) or reboot.
|
2016-06-30 22:26:57 +02:00
|
|
|
if [ "$shutdown_command" = "reboot" ]; then
|
2009-08-26 17:00:38 +02:00
|
|
|
echo "Rebooting."
|
|
|
|
/sbin/reboot
|
|
|
|
else
|
|
|
|
/sbin/poweroff
|
|
|
|
fi
|