=== modified file 'Makefile' --- Makefile 2016-03-05 22:12:12 +0000 +++ Makefile 2016-03-08 00:14:50 +0000 @@ -40,7 +40,7 @@ OPTIMIZE=-Os -fno-strict-aliasing LANGUAGE=-std=gnu11 htmldir=man -version=1.7.4 +version=1.7.5 SED=sed USER=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534))) === modified file 'NEWS' --- NEWS 2016-03-05 22:12:12 +0000 +++ NEWS 2016-03-08 00:14:50 +0000 @@ -1,6 +1,11 @@ This NEWS file records noteworthy changes, very tersely. See the manual for detailed information. +Version 1.7.5 (2016-03-08) +* Server +** Fix security restrictions in systemd service file. +** Work around bug where stopping server would time out + Version 1.7.4 (2016-03-05) * Client ** Bug fix: Tolerate errors from configure_networking (Debian Bug === modified file 'common.ent' --- common.ent 2016-03-05 22:12:12 +0000 +++ common.ent 2016-03-08 00:14:50 +0000 @@ -1,3 +1,3 @@ - + === modified file 'debian/changelog' --- debian/changelog 2016-03-05 22:12:12 +0000 +++ debian/changelog 2016-03-08 00:14:50 +0000 @@ -1,3 +1,12 @@ +mandos (1.7.5-1) unstable; urgency=high + + * New upstream release. + * debian/mandos.postinst (configure): If old version was 1.7.4-1 or + 1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by + root. + + -- Teddy Hogeborn Tue, 08 Mar 2016 01:09:55 +0100 + mandos (1.7.4-1) unstable; urgency=medium * New upstream release. === modified file 'mandos' --- mandos 2016-03-07 23:39:36 +0000 +++ mandos 2016-03-08 00:14:50 +0000 @@ -98,7 +98,7 @@ if sys.version_info.major == 2: str = unicode -version = "1.7.4" +version = "1.7.5" stored_state_file = "clients.pickle" logger = logging.getLogger() === modified file 'mandos-ctl' --- mandos-ctl 2016-03-05 22:12:12 +0000 +++ mandos-ctl 2016-03-08 00:14:50 +0000 @@ -72,7 +72,7 @@ server_path = "/" server_interface = domain + ".Mandos" client_interface = domain + ".Mandos.Client" -version = "1.7.4" +version = "1.7.5" try: === modified file 'mandos-keygen' --- mandos-keygen 2016-03-05 22:12:12 +0000 +++ mandos-keygen 2016-03-08 00:14:50 +0000 @@ -21,7 +21,7 @@ # Contact the authors at . # -VERSION="1.7.4" +VERSION="1.7.5" KEYDIR="/etc/keys/mandos" KEYTYPE=RSA === modified file 'mandos-monitor' --- mandos-monitor 2016-03-05 22:12:12 +0000 +++ mandos-monitor 2016-03-08 00:14:50 +0000 @@ -60,7 +60,7 @@ domain = 'se.recompile' server_interface = domain + '.Mandos' client_interface = domain + '.Mandos.Client' -version = "1.7.4" +version = "1.7.5" try: dbus.OBJECT_MANAGER_IFACE === modified file 'mandos.lsm' --- mandos.lsm 2016-03-05 22:12:12 +0000 +++ mandos.lsm 2016-03-08 00:14:50 +0000 @@ -1,7 +1,7 @@ Begin4 Title: Mandos -Version: 1.7.4 -Entered-date: 2016-03-05 +Version: 1.7.5 +Entered-date: 2016-03-08 Description: The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote and/or unattended reboots. @@ -12,9 +12,9 @@ Maintained-by: teddy@recompile.se (Teddy Hogeborn), belorn@recompile.se (Björn Påhlsson) Primary-site: http://www.recompile.se/mandos - 171K mandos_1.7.4.orig.tar.gz + 171K mandos_1.7.5.orig.tar.gz Alternate-site: ftp://ftp.recompile.se/pub/mandos - 171K mandos_1.7.4.orig.tar.gz + 171K mandos_1.7.5.orig.tar.gz Platforms: Requires GCC, GNU libC, Avahi, GnuPG, Python 2.7, and various other libraries. While made for Debian GNU/Linux, it is probably portable to other