To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to debian/changelog
- browse files at revision 237.7.366
- compare with another revision
- download diff
- download tarball
- view history from revision 237.7.366
- Committer: Teddy Hogeborn
- Date: 2016-03-04 22:07:35 UTC
- mto: (237.7.594 trunk)
- mto: This revision was merged to the branch mainline in revision 335.
- Revision ID: teddy@recompile.se-20160304220735-4xeeqt5p4nhw5cuh
Restrict the Mandos server daemon in the systemd service file.
* mandos.service ([Service]/ProtectSystem): Set to "full".
([Service]/PrivateTmp, [Service]/PrivateDevices,
[Service]/ProtectHome): Set to "yes".
([Service]/CapabilityBoundingSet): Set to "CAP_SETUID
CAP_DAC_OVERRIDE CAP_NET_RAW".
* mandos.service ([Service]/ProtectSystem): Set to "full".
([Service]/PrivateTmp, [Service]/PrivateDevices,
[Service]/ProtectHome): Set to "yes".
([Service]/CapabilityBoundingSet): Set to "CAP_SETUID
CAP_DAC_OVERRIDE CAP_NET_RAW".
- files added:
- debian/mandos-client.examples
- debian/upstream
- network-hooks.d
- plugin-helpers
- files modified:
- .bzrignore
added
removed
debian/changelog
1
mandos (1.7.3-1) unstable; urgency=medium
2
3
* New upstream release.
4
5
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
6
7
mandos (1.7.2-1) unstable; urgency=medium
8
9
* New upstream release.
10
* Fix "Uses unneeded and obsolete version specific python packages"
11
by removing version-specific dependencies (Closes: #811159)
12
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
13
"libgnutls28-dev" and "gnutls-dev".
14
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
15
"python2.7", "python2.7-dbus", "python2.7-avahi", and
16
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
17
"python-dbus", "python-avahi", "python-gobject | python-gi".
18
(Package: mandos/Depends): Remove "python-gnutls" and
19
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
20
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
21
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
22
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
23
(<< 2)" with "gnupg".
24
(Package: mandos-client/Depends): Replace
25
"gnupg (<< 2)" with "gnupg".
26
(Source: mandos/Standards-Version): Change to 3.9.7.
27
* debian/copyright (Copyright): Update copyright year.
28
29
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
30
31
mandos (1.7.1-2) unstable; urgency=medium
32
33
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
34
dependency on initscripts package" by removing initscripts dependency
35
(Closes: #804967)
36
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
37
dpkg-buildpackage -A (No such file or directory)" by splitting into
38
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
39
(Closes: #806073)
40
41
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
42
43
mandos (1.7.1-1) unstable; urgency=medium
44
45
* New upstream release.
46
47
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
48
49
mandos (1.7.0-1) unstable; urgency=medium
50
51
* New upstream release.
52
* debian/control (Standards-Version): Updated to "3.9.6".
53
(Build-Depends): Add "libnl-route-3-dev".
54
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
55
the generating of DH parameters.
56
* debian/mandos-client.README.Debian: Update example command line to use
57
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
58
dhparams.pem file.
59
* debian/mandos-client.postinst: Create DH parameters file.
60
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
61
* debian/mandos-client.postinst: Don't use absolute paths to commands.
62
* debian/mandos-client.postrm: Don't use absolute paths to commands.
63
Also remove dhparams.pem file.
64
* debian/copyright (Copyright): Update copyright year.
65
* Upstream changed systemd service file to implicitly be of
66
"Type=dbus". (Closes: #786845)
67
68
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
69
70
mandos (1.6.9-1) unstable; urgency=medium
71
72
* New upstream release.
73
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
74
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
75
(Closes: #762349)
76
77
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
78
79
mandos (1.6.8-1) unstable; urgency=medium
80
81
* New upstream release.
82
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
83
now requires Python 2.7, depend on exactly the python2.7 package and
84
all the Python 2.7 versions of the python modules.
85
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
86
and the generic versions of the Python modules; this is for mandos-ctl
87
and mandos-monitor, both of which are compatible with Python 3, and
88
use #!/usr/bin/python.
89
90
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
91
92
mandos (1.6.7-1) unstable; urgency=medium
93
94
* New upstream release.
95
96
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
97
98
mandos (1.6.6-1) unstable; urgency=medium
99
100
* New upstream release.
101
* debian/mandos.postinst: Fix typo in comment.
102
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
103
(mandos-client/Recommends): New; set to "ssh".
104
105
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
106
107
mandos (1.6.5-3) unstable; urgency=medium
108
109
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
110
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
111
(Closes: #750221)
112
113
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
114
115
mandos (1.6.5-2) unstable; urgency=medium
116
117
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
118
FTBFS for build-indep.
119
120
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
121
122
mandos (1.6.5-1) unstable; urgency=medium
123
124
* New upstream release.
125
* debian/copyright: Change year to "2014".
126
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
127
dependencies of "mandos" package to "Build-Depends-Indep".
128
* debian/upstream/signing-key.asc: New; upstream source public key.
129
* debian/control (Standards-Version): Updated to "3.9.5".
130
* debian/control (mandos/Depends): Remove the dependency on
131
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
132
since we have a workaround in debian/mandos.postinst anyway.
133
134
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
135
136
mandos (1.6.4-1) unstable; urgency=medium
137
138
* New upstream release.
139
* debian/control (Build-Depends): Add Python dependencies to
140
successfully run self-tests.
141
* debian/copyright: GPLv3 now has its own license file - use it.
142
* debian/watch: Set PGP signature URL.
143
144
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
145
146
mandos (1.6.3-1) unstable; urgency=low
147
148
* New upstream release.
149
* debian/control (Build-Depends): Added "systemd".
150
* debian/mandos.dirs (lib/systemd/system): New.
151
* debian/mandos-client.README.Debian: Refer to architecture libdir.
152
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
153
systemd-sysv".
154
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
155
edit /etc/init.d script headers Required-Start
156
and Required-Stop to have "avahi" instead of
157
"avahi-daemon", before insserv(8) sees it.
158
* debian/mandos-client.lintian-overrides: Libdir changes.
159
* debian/rules (override_dh_fixperms): - '' -
160
161
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
162
163
mandos (1.6.2-1) unstable; urgency=low
164
165
* New upstream release.
166
* debian/compat: Changed to "9".
167
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
168
(Standards-Version): Updated to "3.9.4".
169
(DM-Upload-Allowed): Removed.
170
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
171
use the "/run" directory (for mandos.pid).
172
* debian/copyright (Copyright): Update year.
173
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
174
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
175
176
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
177
178
mandos (1.6.1-1) unstable; urgency=low
179
180
* New upstream release.
181
* debian/control (mandos/Depends): No longer depends on
182
python-gnupginterface, but does
183
depend on gnupg (<< 2).
184
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
185
and "override-*-indep" targets in debian/rules.
186
* debian/mandos-client.README: Update Linux documentation link.
187
* debian/rules: Completely rewritten to use debhelper v7.
188
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
189
copied into the initramfs image. Always assume that GPGME is used to
190
avoid searching for it since the path might not be /usr/lib. Thanks
191
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
192
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
193
debugging. (Closes: #721903)
194
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
195
196
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
197
198
mandos (1.6.0-1) unstable; urgency=low
199
200
* New upstream release.
201
* debian/copyright (Copyright): Join the two lines to a single line.
202
* debian/mandos-client.README.Debian: Update to refer to the new
203
location of the example network hooks, and the new feature of using
204
all network interfaces.
205
* debian/mandos-client.docs (network-hooks.d): Removed.
206
* debian/mandos-client.examples (network-hooks.d): New.
207
* debian/rules (binary-common): Added "dh_installexamples".
208
(binary-common/dh_fixperms): Exclude new location of
209
"network-hooks.d".
210
211
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
212
213
mandos (1.5.5-1) unstable; urgency=low
214
215
* New upstream release.
216
* debian/copyright (Format): Updated to
217
"http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/".
218
* debian/control (Build-Depends): Removed "man, locales-all".
219
220
-- Teddy Hogeborn <teddy@recompile.se> Fri, 01 Jun 2012 20:30:41 +0200
221
222
mandos (1.5.4-1) unstable; urgency=low
223
224
* New upstream release.
225
226
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 May 2012 15:38:34 +0200
227
228
mandos (1.5.3-1.2) unstable; urgency=low
229
230
* Non-maintainer upload.
231
* Set Architecture to linux-any. (Closes: #647670)
232
233
-- Robert Millan <rmh@debian.org> Sun, 22 Apr 2012 16:22:01 +0200
234
235
mandos (1.5.3-1.1) unstable; urgency=low
236
237
* Non-maintainer upload.
238
* Fix "mandos FTBFS on buildds": add build-dependency on locales-all and
239
pass LC_ALL to dh_auto_build to make sure we have and use the en_US.UTF-8
240
locale for manpage creation.
241
(Closes: #656178)
242
243
-- gregor herrmann <gregoa@debian.org> Tue, 31 Jan 2012 17:56:05 +0100
244
245
mandos (1.5.3-1) unstable; urgency=low
246
247
* New upstream release.
248
249
-- Teddy Hogeborn <teddy@recompile.se> Sun, 15 Jan 2012 22:05:54 +0100
250
251
mandos (1.5.2-1) unstable; urgency=low
252
253
* New upstream release.
254
255
-- Teddy Hogeborn <teddy@recompile.se> Sun, 08 Jan 2012 11:17:20 +0100
256
257
mandos (1.5.1-1) unstable; urgency=low
258
259
* New upstream release.
260
261
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 21:53:31 +0100
262
263
mandos (1.5.0-1) unstable; urgency=low
264
265
* New upstream release.
266
* debian/control (mandos-client/Depends): Added "initramfs-tools".
267
* debian/mandos-client.README.Debian: Corrected mail address and adjust
268
wording.
269
* debian/rules (binary-common): Exclude new nework-hooks.d directory
270
from dh_fixperms.
271
* debian/mandos-client.README.Debian: Document network hook facility.
272
* debian/mandos-client.docs (network-hooks.d): Added.
273
* debian/mandos.dirs (var/lib/mandos): Added.
274
* debian/mandos.postinst: Fix ownership of /var/lib/mandos.
275
* debian/control (mandos/Depends): Added "python-gnupginterface".
276
277
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 05:58:11 +0100
278
279
mandos (1.4.1-1) unstable; urgency=low
280
281
* New upstream release.
282
* debian/control (Build-Depends): Added "man".
283
* debian/control (Conflicts): Changed to "Breaks:".
284
* debian/copyright: Updated format.
285
* debian/mandos-client.postinst: Use "set -e" instead of "#!/bin/sh -e".
286
* debian/mandos-client.postrm: - '' -
287
* debian/mandos.postinst: - '' -
288
* debian/mandos.prerm: Consistent magic.
289
290
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 15 Oct 2011 18:18:52 +0200
291
292
mandos (1.4.0-1) unstable; urgency=low
293
294
* New upstream release.
295
* Fix "FTBFS with binutils-gold": Added "-Xlinker --as-needed" to
296
LDFLAGS in Makefile. (Closes: #632145)
297
* Fix "/run transition: uses obsolete /dev/.initramfs": Try both old and
298
new PID file locations. (Closes: #643554)
299
* debian/source/local-options: New; contains "--single-debian-patch".
300
* debian/control (Standards-Version): Upgraded to "3.9.2".
301
(DM-Upload-Allowed): New; set to "yes".
302
* debian/control: Changed domain from "fukt.bsnet.se" to "recompile.se".
303
* debian/copyright: - '' -
304
* debian/mandos-client.README.Debian: - '' -
305
* debian/mandos.README.Debian: - '' -
306
* debian/watch: - '' -
307
* debian/control (mandos/Description): Fix language to placate lintian.
308
309
-- Teddy Hogeborn <teddy@recompile.se> Sun, 09 Oct 2011 19:15:08 +0200
310
311
mandos (1.3.1-1) unstable; urgency=low
312
313
* New upstream release.
314
* Conflict with correct version of dropbear.
315
* New version uses argparse; depend on python (<=2.7) | python-argparse.
316
317
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Wed, 27 Jul 2011 19:47:17 +0200
318
319
mandos (1.3.0-1) unstable; urgency=low
320
321
* New upstream release.
322
* debian/control (mandos): Depend on Python 2.6, remove dependency on
323
python-multiprocessing.
324
(mandos-client): Conflict with dropbear (<< 0.52-5).
325
* debian/mandos-client.postrm (purge): Bug fix: update initramfs also on
326
purge.
327
* debian/mandos-client.lintian-overrides: Added plugins.d/plymouth.
328
329
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 08 Mar 2011 20:22:57 +0100
330
1
331
mandos (1.2.3-1) experimental; urgency=low
2
332
3
333
* New upstream release.
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0