coverity_model.c

-/* Coverity Scan model
- *
- * This is a modeling file for Coverity Scan. Modeling helps to avoid false
- * positives.
- *
- * - A model file can't import any header files.
- * - Therefore only some built-in primitives like int, char and void are
- *   available but not wchar_t, NULL etc.
- * - Modeling doesn't need full structs and typedefs. Rudimentary structs
- *   and similar types are sufficient.
- * - An uninitialized local pointer is not an error. It signifies that the
- *   variable could be either NULL or have some data.
- *
- * Coverity Scan doesn't pick up modifications automatically. The model file
- * must be uploaded by an admin in the analysis settings of
- * http://scan.coverity.com/projects/200
- */
-
-/* empty modeling file for now */

distro/Makefile.am

+EXTRA_DIST =	\
+	common	\
+	config	\
+	pkg	\
+	tests

distro/common/cz.nic.knotd.conf

+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+  <policy user="knot">
+    <allow own="cz.nic.knotd" />
+  </policy>
+  <policy context="default">
+    <allow receive_sender="cz.nic.knotd" />
+  </policy>
+</busconfig>

distro/common/knot.service

+[Unit]
+Description=Knot DNS server
+Wants=network-online.target
+After=network-online.target
+Documentation=man:knotd(8) man:knot.conf(5) man:knotc(8)
+
+[Service]
+Type=notify
+User=knot
+Group=knot
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETPCAP
+AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_SETPCAP
+ExecStartPre=/usr/sbin/knotc conf-check
+ExecStart=/usr/sbin/knotd -m "$KNOT_CONF_MAX_SIZE"
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-abort
+LimitNOFILE=1048576
+TimeoutStopSec=300
+# Extend the systemd startup timeout by this value (seconds) for each zone
+Environment="KNOT_ZONE_LOAD_TIMEOUT_SEC=180"
+# Maximum size (MiB) of a configuration database
+Environment="KNOT_CONF_MAX_SIZE=512"
+
+# Expected systemd >= v239
+RuntimeDirectory=knot
+StateDirectory=knot
+NoNewPrivileges=yes
+
+[Install]
+WantedBy=multi-user.target

distro/common/system-local.conf

+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+  <listen>unix:path=/rundir/dbus.sock</listen>
+</busconfig>

distro/config/apkg.toml

+[project]
+name = "knot-dns"
+# needed for make-archive
+make_archive_script = "scripts/make_dev_archive.sh"
+
+[upstream]
+# needed for get-archive
+archive_url = "https://secure.nic.cz/files/knot-dns/knot-{{ version }}.tar.xz"
+signature_url = "https://secure.nic.cz/files/knot-dns/knot-{{ version }}.tar.xz.asc"
+
+[apkg]
+compat = 3
+
+[[distro.aliases]]
+name = "deb-nolibxdp"
+distro = ["debian == 11", "ubuntu == 20.04", "ubuntu == 22.04"]

distro/pkg/arch/knot.sysusers

+u knot - "Knot DNS Daemon User"

distro/pkg/arch/knot.tmpfiles.arch

+d /run/knot       0755 knot knot - -
+d /var/lib/knot   0700 knot knot - -

distro/pkg/deb-nolibxdp/changelog

+../deb/changelog
\ No newline at end of file

distro/pkg/deb-nolibxdp/clean

+../deb/clean
\ No newline at end of file

distro/pkg/deb-nolibxdp/compat

+../deb/compat
\ No newline at end of file

distro/pkg/deb-nolibxdp/copyright

+../deb/copyright
\ No newline at end of file

distro/pkg/deb-nolibxdp/cz.nic.knotd.conf

+../deb/cz.nic.knotd.conf
\ No newline at end of file

distro/pkg/deb-nolibxdp/docs

+../deb/docs
\ No newline at end of file

distro/pkg/deb-nolibxdp/knot-dnssecutils.install

+../deb/knot-dnssecutils.install
\ No newline at end of file

distro/pkg/deb-nolibxdp/knot-dnssecutils.manpages

+../deb/knot-dnssecutils.manpages
\ No newline at end of file

distro/pkg/deb-nolibxdp/knot-dnsutils.install

+../deb/knot-dnsutils.install
\ No newline at end of file