To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to debian/changelog
- browse files at revision 1138
- compare with another revision
- download diff
- download tarball
- view history from revision 1138
- Committer: Teddy Hogeborn
- Date: 2019-08-02 22:16:53 UTC
- Revision ID: teddy@recompile.se-20190802221653-ic1iko9hbefzwsk7
Fix bug in server Debian package: Fails to start on first install
There has been a very long-standing bug where installation of the
server (the "mandos" Debian package) would fail to start the server
properly right after installation. It would work on manual (re)start
after installation, or after reboot, and even after package purge and
reinstall, it would then work the first time. The problem, it turns
out, is when the new "_mandos" user (and corresponding group) is
created, the D-Bus server is not reloaded, and is therefore not aware
of that user, and does not recognize the user and group name in the
/etc/dbus-1/system.d/mandos.conf file. The Mandos server, when it
tries to start and access the D-Bus, is then not permitted to connect
to its D-Bus bus name, and disables D-Bus use as a fallback measure;
i.e. the server works, but it is not controllable via D-Bus commands
(via mandos-ctl or mandos-monitor). The next time the D-Bus daemon is
reloaded for any reason, the new user & group would become visible to
the D-Bus daemon and after that, any restart of the Mandos server
would succeed and it would bind to its D-Bus name properly, and
thereby be visible and controllable by mandos-ctl & mandos-monitor.
This was mostly invisible when using sysvinit, but systemd makes the
problem visible since the systemd service file for the Mandos server
is configured to not consider the Mandos server "started" until the
D-Bus name has been bound; this makes the starting of the service wait
for 90 seconds and then fail with a timeout error.
Fixing this should also make the Debian CI autopkgtest tests work.
* debian/mandos.postinst (configure): After creating (or renaming)
user & group, reload D-Bus
daemon (if present).
There has been a very long-standing bug where installation of the
server (the "mandos" Debian package) would fail to start the server
properly right after installation. It would work on manual (re)start
after installation, or after reboot, and even after package purge and
reinstall, it would then work the first time. The problem, it turns
out, is when the new "_mandos" user (and corresponding group) is
created, the D-Bus server is not reloaded, and is therefore not aware
of that user, and does not recognize the user and group name in the
/etc/dbus-1/system.d/mandos.conf file. The Mandos server, when it
tries to start and access the D-Bus, is then not permitted to connect
to its D-Bus bus name, and disables D-Bus use as a fallback measure;
i.e. the server works, but it is not controllable via D-Bus commands
(via mandos-ctl or mandos-monitor). The next time the D-Bus daemon is
reloaded for any reason, the new user & group would become visible to
the D-Bus daemon and after that, any restart of the Mandos server
would succeed and it would bind to its D-Bus name properly, and
thereby be visible and controllable by mandos-ctl & mandos-monitor.
This was mostly invisible when using sysvinit, but systemd makes the
problem visible since the systemd service file for the Mandos server
is configured to not consider the Mandos server "started" until the
D-Bus name has been bound; this makes the starting of the service wait
for 90 seconds and then fail with a timeout error.
Fixing this should also make the Debian CI autopkgtest tests work.
* debian/mandos.postinst (configure): After creating (or renaming)
user & group, reload D-Bus
daemon (if present).
- files added:
- DBUS-API
- debian/po
- debian/source
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- etc-plugins.d-README
- files modified:
- .bzrignore
added
removed
debian/changelog
1
mandos (1.0) unstable; urgency=low
2
3
* Initial Release.
4
5
-- Mandos Maintainers <mandos@fukt.bsnet.se> Sun, 07 Sep 2008 11:55:51 +0200
1
mandos (1.8.5-1) unstable; urgency=medium
2
3
* New upstream release.
4
* Fix "does not reap children" by reaping children (Closes: #933387)
5
* debian/mandos-client.README.Debian: Use new-style interface name.
6
* debian/tests/control: New file; implements autopkgtest support.
7
* debian/mandos-client.lintian-overrides
8
(manpage-has-errors-from-man): Remove; unnecessary.
9
* debian/mandos.lintian-overrides
10
(init.d-script-needs-depends-on-lsb-base): - '' -
11
* debian/mandos-client.postinst (update_initramfs): Upstream now
12
supports dracut(8), so update commands here to and run the correct
13
command to update initramfs.
14
* debian/control (Build-Depends): Add GLib -dev package.
15
(mandos-client/Depends): Add dracut(8) as an alternative dependency to
16
initramfs-tools.
17
(mandos-client/Conflicts): New; set to "dracut-config-generic".
18
(debian/mandos-client.README.Debian): Update for dracut(8) support.
19
* debian/mandos-client.templates: Reflowed by debconf-gettextize(1).
20
* debian/mandos.templates: - '' -
21
* debian/po/POTFILES.in: New.
22
* debian/po/templates.pot: - '' -
23
* debian/source/lintian-overrides: New.
24
* debian/control (Standards-Version): Update to "4.4.0".
25
26
-- Teddy Hogeborn <teddy@recompile.se> Tue, 30 Jul 2019 20:41:29 +0200
27
28
mandos (1.8.4-1) unstable; urgency=medium
29
30
* Fix "dirs in initrd are not accessible by mandos plugin-runner" by
31
making sure UMASK is set, no matter what other packages have installed
32
in "/usr/share/initramfs-tools/conf-hooks.d". (Closes: #926641)
33
* Fix "LeakSanitizer: detected memory leaks, fails to decrypt"
34
by fixing memory leak in plugin-runner. (Closes: #926643)
35
* debian/mandos-client.dirs: Add
36
"usr/share/initramfs-tools/conf-hooks.d", needed by fix for #926641.
37
38
-- Teddy Hogeborn <teddy@recompile.se> Tue, 09 Apr 2019 22:05:39 +0200
39
40
mandos (1.8.3-3) unstable; urgency=medium
41
42
* Fix "src:mandos: modifies d/control during build" by not doing that
43
anymore. (Closes: #922202)
44
* debian/rules (override_dh_shlibdeps-arch): Commented out.
45
46
-- Teddy Hogeborn <teddy@recompile.se> Wed, 13 Feb 2019 09:52:39 +0100
47
48
mandos (1.8.3-2) unstable; urgency=medium
49
50
* debian/rules (override_dh_shlibdeps-arch): New; conditionally edit
51
debian/control before running dh_shlibdeps.
52
53
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 12:49:57 +0100
54
55
mandos (1.8.3-1) unstable; urgency=medium
56
57
* New upstream release.
58
* debian/watch: Make the ".orig" file name suffix non-optional;
59
otherwise uscan thinks that ".orig" is part of the version number.
60
* debian/control (Build-Depends): Changed GnuTLS dependencies; move
61
3.6.6 alternative to first in list, and remove dependencies on the
62
virtual package "gnutls-dev", since we need the version restrictions.
63
(Package: mandos/Depends): Remove dependency on libgnutls28-dev
64
package.
65
(Package: mandos/Suggests): New; set to "libc6-dev, c-compiler". (Used
66
to find value of "SO_BINDTODEVICE").
67
(Package: mandos-client/Depends): Don't depend on openssl anymore;
68
instead depend on either a gnutls-bin (>= 3.6.6) (in which case TLS
69
key generation will work), or on libgnutls30 (<< 3.6.0) (in which case
70
TLS key generation will not be needed).
71
72
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 07:30:32 +0100
73
74
mandos (1.8.2-1) unstable; urgency=medium
75
76
* New upstream release.
77
* debian/mandos-client.postinst (create_keys): Ignore failure to remove
78
bad keys.
79
80
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 11:44:56 +0100
81
82
mandos (1.8.1-1) unstable; urgency=high
83
84
* New upstream release.
85
* debian/mandos-client.postinst (create_keys): Remove any bad keys
86
created by 1.8.0-1. Only create TLS keys if certtool succeeds.
87
* debian/mandos.postinst (configure): Remove any bad keys from
88
clients.conf, and inform the user if any were found.
89
* debian/mandos.templates (mandos/removed_bad_key_ids): New message.
90
91
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 10:00:21 +0100
92
93
mandos (1.8.0-1) unstable; urgency=medium
94
95
* New upstream release.
96
* Fix "(tries to) use GnuTLS OpenPGP support" by using raw public keys
97
when available (Closes: #879538)
98
* Fix "mandos : Depends: libgnutls30 (< 3.6.0) but 3.6.5-2 is to be
99
installed" by now also allowing GnuTLS >= 3.6.6 (Closes: #916673)
100
* debian/control (Standards-Version): Update to "4.3.0".
101
(Package: mandos-client/Depends): Change from "cryptsetup" to
102
"cryptsetup (<< 2:2.0.3-1) | cryptsetup-initramfs". Add "debconf (>=
103
1.5.5) | debconf-2.0".
104
(Source: mandos/Build-Depends): Also allow libgnutls30 (>= 3.6.6).
105
(Package: mandos/Depends): - '' - and add debconf (>= 1.5.5) |
106
debconf-2.0".
107
(Package: mandos/Description): Alter description to match new design.
108
(Package: mandos-client/Description): - '' -
109
(Package: mandos-client/Depends): Move "gnutls-bin | openssl" to here
110
from "Recommends".
111
* debian/mandos-client.README.Debian: Add --tls-privkey and --tls-pubkey
112
options to test command.
113
* debian/mandos-client.postinst (create_key): Renamed to "create_keys"
114
- all callers changed - and also create TLS key files. Show notice if
115
new TLS key files were created.
116
* debian/mandos-client.postrm (purge): Also remove TLS key files.
117
* debian/mandos-client.lintian-overrides: Override warnings.
118
* debian/mandos-client.templates: New.
119
* debian/mandos.lintian-overrides: Override warnings.
120
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
121
detected, show an important notice (once) about the new key_id option
122
required in clients.conf.
123
* debian/mandos.templates: New.
124
* debian/copyright: Update copyright year to 2019.
125
126
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 05:52:49 +0100
127
128
mandos (1.7.20-1) unstable; urgency=medium
129
130
* New upstream release.
131
* Fix "[tethys] mandos-client: Mandos client fails while booting but
132
works from chroot into unpacked initramfs" by setting system clock if
133
necessary (Closes: #894495)
134
* Fix "initramfs boot script assumes internal cryptsetup implementation
135
details and is now broken" by only using documented
136
interfaces (Closes: #904899)
137
* debian/mandos-client.dirs: Add
138
"usr/share/initramfs-tools/scripts/local-premount" and
139
"usr/share/initramfs-tools/conf.d", and remove
140
"usr/share/initramfs-tools/conf-hooks.d".
141
* debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency
142
on "initramfs-tools".
143
* debian/control (Source: mandos/Rules-Requires-Root): New; set to
144
"binary-targets".
145
(Standards-Version): Update to "4.2.0".
146
147
-- Teddy Hogeborn <teddy@recompile.se> Sun, 19 Aug 2018 22:14:04 +0200
148
149
mandos (1.7.19-1) unstable; urgency=medium
150
151
* New upstream release.
152
* Fix "fails with "LeakSanitizer has encountered a fatal error"" by not
153
using LeakSanitizer in affected binary (Closes: #886595)
154
155
-- Teddy Hogeborn <teddy@recompile.se> Thu, 22 Feb 2018 19:47:59 +0100
156
157
mandos (1.7.18-1) unstable; urgency=medium
158
159
* New upstream release.
160
161
-- Teddy Hogeborn <teddy@recompile.se> Mon, 12 Feb 2018 16:00:11 +0100
162
163
mandos (1.7.17-1) unstable; urgency=medium
164
165
* New upstream release.
166
* Fix "fails with "LeakSanitizer has encountered a fatal error""
167
by fixing memory leak in plugin-runner (Closes: #886595)
168
* debian/control (Build-Depends): Also depend on "libgnutls28-dev (<<
169
3.6.0) | libgnutls30 (<< 3.6.0)".
170
(Package: mandos/Depends): - '' -
171
* debian/compat: Change to "10".
172
* debian/watch (version): Change to "4".
173
(opts/pgpsigurlmangle): Remove.
174
(opts/pgpmode): New; set to "auto".
175
(URL): Change to "https://ftp.recompile.se/pub/@PACKAGE@/@PACKAGE@
176
@ANY_VERSION@(?:\.orig)?@ARCHIVE_EXT@".
177
* debian/copyright: Update copyright year to 2018.
178
* debian/rules: Support the "noopt" and "parallel" DEB_BUILD_OPTIONS.
179
(override_dh_fixperms-arch): Use the DEB_HOST_MULTIARCH
180
variable directly instead of shelling out to "dpkg-architecture".
181
* debian/control (Standards-Version): Update to "4.1.3".
182
(Build-Depends): Change version of debhelper dependency to ">= 10".
183
* debian/mandos.lintian-overrides
184
(init.d-script-needs-depends-on-lsb-base): Change line number to "46".
185
186
-- Teddy Hogeborn <teddy@recompile.se> Sat, 10 Feb 2018 19:09:50 +0100
187
188
mandos (1.7.16-1) unstable; urgency=medium
189
190
* New upstream release.
191
* debian/copyright (License): Use program name explicitly.
192
(Format): Use https in URL.
193
* debian/control (Priority): Change from "extra" to "optional".
194
(Standards-Version): Update to "4.0.1".
195
196
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 Aug 2017 21:05:26 +0200
197
198
mandos (1.7.15-1) unstable; urgency=medium
199
200
* New upstream release.
201
* Upstream release fixes "Seems not to be honoring zeroconf option at
202
mandos.conf" (Closes: #855589)
203
* debian/mandos.lintian-overrides (mandos): Add new line
204
"init.d-script-needs-depends-on-lsb-base etc/init.d/mandos (line 49)".
205
* debian/copyright: Update copyright year to 2017.
206
207
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Feb 2017 21:29:36 +0100
208
209
mandos (1.7.14-1) unstable; urgency=medium
210
211
* New upstream release.
212
* debian/mandos-client.postinst (create_key): Stop GPG agent after
213
running mandos-keygen.
214
* debian/control (Package: mandos/Depends): Add "systemd-sysv | lsb-base
215
(>= 3.0-6)", change "gnupg" to "gnupg2 | gnupg", and change
216
"libgpgme11-dev" to "libgpgme-dev | libgpgme11-dev".
217
218
-- Teddy Hogeborn <teddy@recompile.se> Wed, 25 Jan 2017 20:36:03 +0100
219
220
mandos (1.7.13-1) unstable; urgency=medium
221
222
* New upstream release.
223
* Fix "fails to install noninteractively" by using the "%no-protection"
224
statement in the GnuPG batch parameter file. (Closes: #840001)
225
226
-- Teddy Hogeborn <teddy@recompile.se> Sat, 08 Oct 2016 06:31:07 +0200
227
228
mandos (1.7.12-1) unstable; urgency=medium
229
230
* New upstream release.
231
232
-- Teddy Hogeborn <teddy@recompile.se> Wed, 05 Oct 2016 22:06:55 +0200
233
234
mandos (1.7.11-1) unstable; urgency=high
235
236
* New upstream release.
237
* debian/control (Source: mandos/Vcs-Bzr): Change to use HTTPS.
238
(Vcs-Browser): - '' -
239
240
-- Teddy Hogeborn <teddy@recompile.se> Sat, 01 Oct 2016 16:20:48 +0200
241
242
mandos (1.7.10-1) unstable; urgency=high
243
244
* New upstream release.
245
* debian/rules (override_dh_fixperms-arch): Also exclude
246
"etc/mandos/plugin-helpers" from changes by dh_fixperms.
247
* debian/mandos-client.postinst: Fix the permissions of
248
"/etc/mandos/plugin-helpers" for those systems which had a fresh
249
install of an older version.
250
251
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Jun 2016 22:00:29 +0200
252
253
mandos (1.7.9-1) unstable; urgency=medium
254
255
* New upstream release.
256
257
-- Teddy Hogeborn <teddy@recompile.se> Wed, 22 Jun 2016 07:30:12 +0200
258
259
mandos (1.7.8-1) unstable; urgency=medium
260
261
* New upstream release.
262
* Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." by copying
263
/usr/bin/gpg-agent into initramfs (Closes: #819982)
264
* debian/control (Homepage): Change URL to use HTTPS.
265
(Standards-Version): Update to 3.9.8.
266
* debian/copyright (Source): Change URL to HTTPS.
267
* debian/mandos-client.README.Debian: Change wording to match updated
268
capabilities.
269
270
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jun 2016 21:36:10 +0200
271
272
mandos (1.7.7-1) unstable; urgency=medium
273
274
* New upstream release.
275
* debian/mandos-client.postinst (configure): If older version, fix
276
permissions on plugin helper directory. Also fix permissions on
277
plugin helper local override directory (/etc/mandos/plugin-helpers),
278
but only if not listed by "dpkg-statoverride".
279
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
280
directory from dh_fixperms.
281
* debian/mandos.postinst (configure): Fix state directory permissions,
282
but only if not listed by "dpkg-statoverride".
283
* debian/mandos-client.lintian-overrides: Do not warn about permissions
284
on plugin helper directory.
285
* debian/mandos.dirs (usr/lib/tmpfiles.d): Added.
286
287
-- Teddy Hogeborn <teddy@recompile.se> Sat, 19 Mar 2016 22:58:49 +0100
288
289
mandos (1.7.6-1) unstable; urgency=medium
290
291
* New upstream release.
292
* debian/control (Source: mandos/Build-Depends-Indep): Remove
293
"python-avahi".
294
(Source: mandos/Build-Depends-Indep): Change "python-gi |
295
python-gobject" to "python-gi"; i.e. remove "python-gobject".
296
297
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
298
299
mandos (1.7.5-1) unstable; urgency=high
300
301
* New upstream release.
302
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
303
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
304
root.
305
306
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
307
308
mandos (1.7.4-1) unstable; urgency=medium
309
310
* New upstream release.
311
* initramfs-tools-script: Fix "Call to configure_network in initramfs
312
script broken due to set -e" by surrounding call by "set +x" and "set
313
-e" (Closes: #816513)
314
* debian/control: (Source: mandos/Build-Depends-Indep): Change
315
"python-gobject | python-gi" to "python-gi | python-gobject"
316
(Package: mandos/Depends): - '' -
317
318
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
319
320
mandos (1.7.3-1) unstable; urgency=medium
321
322
* New upstream release.
323
324
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
325
326
mandos (1.7.2-1) unstable; urgency=medium
327
328
* New upstream release.
329
* Fix "Uses unneeded and obsolete version specific python packages"
330
by removing version-specific dependencies (Closes: #811159)
331
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
332
"libgnutls28-dev" and "gnutls-dev".
333
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
334
"python2.7", "python2.7-dbus", "python2.7-avahi", and
335
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
336
"python-dbus", "python-avahi", "python-gobject | python-gi".
337
(Package: mandos/Depends): Remove "python-gnutls" and
338
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
339
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
340
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
341
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
342
(<< 2)" with "gnupg".
343
(Package: mandos-client/Depends): Replace
344
"gnupg (<< 2)" with "gnupg".
345
(Source: mandos/Standards-Version): Change to 3.9.7.
346
* debian/copyright (Copyright): Update copyright year.
347
348
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
349
350
mandos (1.7.1-2) unstable; urgency=medium
351
352
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
353
dependency on initscripts package" by removing initscripts dependency
354
(Closes: #804967)
355
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
356
dpkg-buildpackage -A (No such file or directory)" by splitting into
357
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
358
(Closes: #806073)
359
360
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
361
362
mandos (1.7.1-1) unstable; urgency=medium
363
364
* New upstream release.
365
366
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
367
368
mandos (1.7.0-1) unstable; urgency=medium
369
370
* New upstream release.
371
* debian/control (Standards-Version): Updated to "3.9.6".
372
(Build-Depends): Add "libnl-route-3-dev".
373
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
374
the generating of DH parameters.
375
* debian/mandos-client.README.Debian: Update example command line to use
376
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
377
dhparams.pem file.
378
* debian/mandos-client.postinst: Create DH parameters file.
379
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
380
* debian/mandos-client.postinst: Don't use absolute paths to commands.
381
* debian/mandos-client.postrm: Don't use absolute paths to commands.
382
Also remove dhparams.pem file.
383
* debian/copyright (Copyright): Update copyright year.
384
* Upstream changed systemd service file to implicitly be of
385
"Type=dbus". (Closes: #786845)
386
387
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
388
389
mandos (1.6.9-1) unstable; urgency=medium
390
391
* New upstream release.
392
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
393
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
394
(Closes: #762349)
395
396
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
397
398
mandos (1.6.8-1) unstable; urgency=medium
399
400
* New upstream release.
401
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
402
now requires Python 2.7, depend on exactly the python2.7 package and
403
all the Python 2.7 versions of the python modules.
404
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
405
and the generic versions of the Python modules; this is for mandos-ctl
406
and mandos-monitor, both of which are compatible with Python 3, and
407
use #!/usr/bin/python.
408
409
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
410
411
mandos (1.6.7-1) unstable; urgency=medium
412
413
* New upstream release.
414
415
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
416
417
mandos (1.6.6-1) unstable; urgency=medium
418
419
* New upstream release.
420
* debian/mandos.postinst: Fix typo in comment.
421
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
422
(mandos-client/Recommends): New; set to "ssh".
423
424
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
425
426
mandos (1.6.5-3) unstable; urgency=medium
427
428
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
429
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
430
(Closes: #750221)
431
432
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
433
434
mandos (1.6.5-2) unstable; urgency=medium
435
436
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
437
FTBFS for build-indep.
438
439
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
440
441
mandos (1.6.5-1) unstable; urgency=medium
442
443
* New upstream release.
444
* debian/copyright: Change year to "2014".
445
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
446
dependencies of "mandos" package to "Build-Depends-Indep".
447
* debian/upstream/signing-key.asc: New; upstream source public key.
448
* debian/control (Standards-Version): Updated to "3.9.5".
449
* debian/control (mandos/Depends): Remove the dependency on
450
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
451
since we have a workaround in debian/mandos.postinst anyway.
452
453
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
454
455
mandos (1.6.4-1) unstable; urgency=medium
456
457
* New upstream release.
458
* debian/control (Build-Depends): Add Python dependencies to
459
successfully run self-tests.
460
* debian/copyright: GPLv3 now has its own license file - use it.
461
* debian/watch: Set PGP signature URL.
462
463
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
464
465
mandos (1.6.3-1) unstable; urgency=low
466
467
* New upstream release.
468
* debian/control (Build-Depends): Added "systemd".
469
* debian/mandos.dirs (lib/systemd/system): New.
470
* debian/mandos-client.README.Debian: Refer to architecture libdir.
471
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
472
systemd-sysv".
473
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
474
edit /etc/init.d script headers Required-Start
475
and Required-Stop to have "avahi" instead of
476
"avahi-daemon", before insserv(8) sees it.
477
* debian/mandos-client.lintian-overrides: Libdir changes.
478
* debian/rules (override_dh_fixperms): - '' -
479
480
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
481
482
mandos (1.6.2-1) unstable; urgency=low
483
484
* New upstream release.
485
* debian/compat: Changed to "9".
486
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
487
(Standards-Version): Updated to "3.9.4".
488
(DM-Upload-Allowed): Removed.
489
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
490
use the "/run" directory (for mandos.pid).
491
* debian/copyright (Copyright): Update year.
492
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
493
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
494
495
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
496
497
mandos (1.6.1-1) unstable; urgency=low
498
499
* New upstream release.
500
* debian/control (mandos/Depends): No longer depends on
501
python-gnupginterface, but does
502
depend on gnupg (<< 2).
503
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
504
and "override-*-indep" targets in debian/rules.
505
* debian/mandos-client.README: Update Linux documentation link.
506
* debian/rules: Completely rewritten to use debhelper v7.
507
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
508
copied into the initramfs image. Always assume that GPGME is used to
509
avoid searching for it since the path might not be /usr/lib. Thanks
510
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
511
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
512
debugging. (Closes: #721903)
513
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
514
515
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
516
517
mandos (1.6.0-1) unstable; urgency=low
518
519
* New upstream release.
520
* debian/copyright (Copyright): Join the two lines to a single line.
521
* debian/mandos-client.README.Debian: Update to refer to the new
522
location of the example network hooks, and the new feature of using
523
all network interfaces.
524
* debian/mandos-client.docs (network-hooks.d): Removed.
525
* debian/mandos-client.examples (network-hooks.d): New.
526
* debian/rules (binary-common): Added "dh_installexamples".
527
(binary-common/dh_fixperms): Exclude new location of
528
"network-hooks.d".
529
530
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
531
532
mandos (1.5.5-1) unstable; urgency=low
533
534
* New upstream release.
535
* debian/copyright (Format): Updated to
536
"http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/".
537
* debian/control (Build-Depends): Removed "man, locales-all".
538
539
-- Teddy Hogeborn <teddy@recompile.se> Fri, 01 Jun 2012 20:30:41 +0200
540
541
mandos (1.5.4-1) unstable; urgency=low
542
543
* New upstream release.
544
545
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 May 2012 15:38:34 +0200
546
547
mandos (1.5.3-1.2) unstable; urgency=low
548
549
* Non-maintainer upload.
550
* Set Architecture to linux-any. (Closes: #647670)
551
552
-- Robert Millan <rmh@debian.org> Sun, 22 Apr 2012 16:22:01 +0200
553
554
mandos (1.5.3-1.1) unstable; urgency=low
555
556
* Non-maintainer upload.
557
* Fix "mandos FTBFS on buildds": add build-dependency on locales-all and
558
pass LC_ALL to dh_auto_build to make sure we have and use the en_US.UTF-8
559
locale for manpage creation.
560
(Closes: #656178)
561
562
-- gregor herrmann <gregoa@debian.org> Tue, 31 Jan 2012 17:56:05 +0100
563
564
mandos (1.5.3-1) unstable; urgency=low
565
566
* New upstream release.
567
568
-- Teddy Hogeborn <teddy@recompile.se> Sun, 15 Jan 2012 22:05:54 +0100
569
570
mandos (1.5.2-1) unstable; urgency=low
571
572
* New upstream release.
573
574
-- Teddy Hogeborn <teddy@recompile.se> Sun, 08 Jan 2012 11:17:20 +0100
575
576
mandos (1.5.1-1) unstable; urgency=low
577
578
* New upstream release.
579
580
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 21:53:31 +0100
581
582
mandos (1.5.0-1) unstable; urgency=low
583
584
* New upstream release.
585
* debian/control (mandos-client/Depends): Added "initramfs-tools".
586
* debian/mandos-client.README.Debian: Corrected mail address and adjust
587
wording.
588
* debian/rules (binary-common): Exclude new nework-hooks.d directory
589
from dh_fixperms.
590
* debian/mandos-client.README.Debian: Document network hook facility.
591
* debian/mandos-client.docs (network-hooks.d): Added.
592
* debian/mandos.dirs (var/lib/mandos): Added.
593
* debian/mandos.postinst: Fix ownership of /var/lib/mandos.
594
* debian/control (mandos/Depends): Added "python-gnupginterface".
595
596
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 05:58:11 +0100
597
598
mandos (1.4.1-1) unstable; urgency=low
599
600
* New upstream release.
601
* debian/control (Build-Depends): Added "man".
602
* debian/control (Conflicts): Changed to "Breaks:".
603
* debian/copyright: Updated format.
604
* debian/mandos-client.postinst: Use "set -e" instead of "#!/bin/sh -e".
605
* debian/mandos-client.postrm: - '' -
606
* debian/mandos.postinst: - '' -
607
* debian/mandos.prerm: Consistent magic.
608
609
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 15 Oct 2011 18:18:52 +0200
610
611
mandos (1.4.0-1) unstable; urgency=low
612
613
* New upstream release.
614
* Fix "FTBFS with binutils-gold": Added "-Xlinker --as-needed" to
615
LDFLAGS in Makefile. (Closes: #632145)
616
* Fix "/run transition: uses obsolete /dev/.initramfs": Try both old and
617
new PID file locations. (Closes: #643554)
618
* debian/source/local-options: New; contains "--single-debian-patch".
619
* debian/control (Standards-Version): Upgraded to "3.9.2".
620
(DM-Upload-Allowed): New; set to "yes".
621
* debian/control: Changed domain from "fukt.bsnet.se" to "recompile.se".
622
* debian/copyright: - '' -
623
* debian/mandos-client.README.Debian: - '' -
624
* debian/mandos.README.Debian: - '' -
625
* debian/watch: - '' -
626
* debian/control (mandos/Description): Fix language to placate lintian.
627
628
-- Teddy Hogeborn <teddy@recompile.se> Sun, 09 Oct 2011 19:15:08 +0200
629
630
mandos (1.3.1-1) unstable; urgency=low
631
632
* New upstream release.
633
* Conflict with correct version of dropbear.
634
* New version uses argparse; depend on python (<=2.7) | python-argparse.
635
636
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Wed, 27 Jul 2011 19:47:17 +0200
637
638
mandos (1.3.0-1) unstable; urgency=low
639
640
* New upstream release.
641
* debian/control (mandos): Depend on Python 2.6, remove dependency on
642
python-multiprocessing.
643
(mandos-client): Conflict with dropbear (<< 0.52-5).
644
* debian/mandos-client.postrm (purge): Bug fix: update initramfs also on
645
purge.
646
* debian/mandos-client.lintian-overrides: Added plugins.d/plymouth.
647
648
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 08 Mar 2011 20:22:57 +0100
649
650
mandos (1.2.3-1) experimental; urgency=low
651
652
* New upstream release.
653
654
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Mon, 11 Oct 2010 19:37:31 +0200
655
656
mandos (1.2.2-1) experimental; urgency=low
657
658
* New upstream release.
659
* plugins.d/splashy.c: Only use ELIBBAD if defined. (Closes: #599256)
660
661
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 07 Oct 2010 20:27:54 +0200
662
663
mandos (1.2.1-3) experimental; urgency=low
664
665
* debian/changelog: Include entry for NMU of version 1.0.14-1.1.
666
667
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 05 Oct 2010 20:58:38 +0200
668
669
mandos (1.2.1-2) unstable; urgency=low
670
671
* debian/source/format: New; contains "3.0 (quilt)". Really.
672
673
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 02 Oct 2010 19:46:59 +0200
674
675
mandos (1.2.1-1) unstable; urgency=low
676
677
* New upstream release.
678
* debian/source/format: New; contains "3.0 (quilt)".
679
680
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 02 Oct 2010 19:03:58 +0200
681
682
mandos (1.2-1) unstable; urgency=low
683
684
* New upstream release.
685
* Makefile (LINK_FORTIFY_LD): Remove "-fPIE". (Closes: #557076)
686
* debian/control: Add gnupg dependency to "mandos-client" and removed it
687
from "mandos". Added dependency on "python-urwid" "mandos" since the
688
new "mandos-monitor" utility needs it, and on "python (>=2.6) |
689
python-multiprocessing" since the Mandos server now uses it.
690
* debian/rules: Set BROKEN_PIE on mips and mipsel if a known buggy
691
version of binutils is used.
692
* debian/mandos.docs: Also install "/usr/share/doc/mandos/DBUS-API".
693
* debian/mandos.dirs: Added "etc/dbus-1/system.d".
694
* debian/mandos-client.README.Debian: Update info about DEVICE setting
695
of initramfs.conf.
696
* debian/mandos-client.README.Debian: Remove warning about --connect not
697
looping, since it now does.
698
699
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 28 Sep 2010 20:46:11 +0200
700
701
mandos (1.0.14-1.1) unstable; urgency=low
702
703
* Non-maintainer upload.
704
* Rebuild against libavahi-core-dev (>= 0.6.26-1).
705
706
-- Michael Biebl <biebl@debian.org> Mon, 12 Jul 2010 16:34:34 +0200
707
708
mandos (1.0.14-1) unstable; urgency=low (HIGH on mips and mipsel)
709
710
* New upstream release.
711
* debian/rules: Build with BROKEN_PIE set on mips and mipsel
712
architectures - fixes FTBFS there.
713
714
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 25 Oct 2009 20:10:09 +0100
715
716
mandos (1.0.13-1) unstable; urgency=high
717
718
* New upstream release.
719
* Do not copy unnecessary files to initrd (Closes: #551907)
720
721
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 22 Oct 2009 00:53:21 +0200
722
723
mandos (1.0.12-1) unstable; urgency=low
724
725
* New upstream release.
726
* init.d-mandos: Correct dependencies (Closes: #546928)
727
* debian/control (Standards-Version): Changed to "3.8.3".
728
* debian/mandos-client.README.Debian: Improved wording and formatting.
729
Updated location of nfsroot.txt.
730
* debian/mandos.README.Debian: Improved wording and formatting.
731
* debian/mandos-client.postinst (configure): Don't look for user and
732
group with the old name if upgrading from a new enough version.
733
* debian/mandos.postinst (configure): - '' -
734
* debian/mandos-client.README.Debian: Added text about non-usability of
735
pseudo-network interfaces.
736
737
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 17 Sep 2009 15:03:59 +0200
738
739
mandos (1.0.11-1) unstable; urgency=low
740
741
* debian/control (Standards-Version): Changed to "3.8.1".
742
* Makefile (GNUTLS_CFLAGS, GNUTLS_CFLAGS): Use "pkg-config" instead of
743
the old "libgnutls-config" script. (Closes: #529836)
744
745
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sat, 23 May 2009 07:12:20 +0200
746
747
mandos (1.0.10-1) unstable; urgency=low
748
749
* New upstream release.
750
* debian/mandos-client.postinst (update_initramfs): Fix permissions of
751
old initrd.img-*.bak files.
752
753
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 17 May 2009 04:56:35 +0200
754
755
mandos (1.0.9-1) unstable; urgency=low
756
757
* New upstream release.
758
759
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 17 May 2009 02:59:45 +0200
760
761
mandos (1.0.8-1) unstable; urgency=low
762
763
* New upstream release.
764
765
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Wed, 25 Feb 2009 02:26:57 +0100
766
767
mandos (1.0.7-1) unstable; urgency=low
768
769
* New upstream release.
770
771
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 24 Feb 2009 12:58:06 +0100
772
773
mandos (1.0.6-1) unstable; urgency=low
774
775
* New upstream release.
776
* debian/mandos-client.postinst: Converted to Bourne shell. Also
777
minor message change.
778
* debian/mandos-client.postrm: Minor message change.
779
* debian/mandos.postinst: Converted to Bourne shell. Also minor
780
message change.
781
* debian/mandos.prerm: Minor message change.
782
* debian/rules (install-indep): Removed "--no-start" from
783
dh_installinit.
784
* debian/mandos-client.lintian-overrides: Remove obsolete override for
785
unbreakable line in plugin-runner manual page.
786
* debian/control (mandos/Depends): Added "python-gobject".
787
* debian/mandos-client.dirs: Change
788
"usr/share/initramfs-tools/scripts/local-top" to
789
"usr/share/initramfs-tools/scripts/init-premount".
790
* debian/mandos-client.README.Debian: Add reference to initramfs.conf
791
and nfsroot.txt. New section about the new non-local connection
792
feature.
793
794
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Fri, 13 Feb 2009 09:27:25 +0100
795
796
mandos (1.0.5-1) unstable; urgency=low
797
798
* New upstream release.
799
800
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sat, 17 Jan 2009 02:26:00 +0100
801
802
mandos (1.0.4-1) unstable; urgency=low
803
804
* New upstream release.
805
* debian/watch: New file.
806
* debian/mandos-client.README.Debian: Document new "mandos=off" kernel
807
parameter.
808
809
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 15 Jan 2009 05:49:22 +0100
810
811
mandos (1.0.3-2) unstable; urgency=low
812
813
* Removed some now-unused debconf files.
814
* Changed postinst scripts to not source debconf/confmodule.
815
* Removed po-debconf from build-depends.
816
817
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 06 Jan 2009 21:28:20 +0100
818
819
mandos (1.0.3-1) unstable; urgency=low
820
821
* New upstream release.
822
* Add -Xlinker to linker flags to fix FTBFS for some architectures.
823
Thanks to Thiemo Seufer <ths@networkno.de> for the report and
824
fix. (Closes: #509398)
825
* Remove debconf use altogether, thereby stopping debconf abuse. Thanks
826
to Christian Perrier <bubulle@debian.org>. (Closes: #509653)
827
* Add NEWS file to /usr/share/doc directories.
828
* Use and create "_mandos" user+group. Rename old user+group created by
829
older versions of this package.
830
* Fix manual pages by adding build-depend on "docbook-xml".
831
832
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 06 Jan 2009 01:21:20 +0100
833
834
mandos (1.0.2-1) unstable; urgency=low
835
836
* New upstream release.
837
* debian/copyright: Rewritten to conform to
838
<http://wiki.debian.org/Proposals/CopyrightFormat?action=recall&rev=233>.
839
840
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Fri, 17 Oct 2008 20:42:12 +0200
841
842
mandos (1.0.1-1) unstable; urgency=low
843
844
* New upstream release.
845
* Separate /usr/share/doc/mandos-client/README.Debian into sections with
846
headlines. Add instructions on how to test the server and verify the
847
password.
848
849
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 07 Oct 2008 23:07:23 +0200
850
851
mandos (1.0-2) unstable; urgency=low
852
853
* Added comments in debian/*.lintian-overrides files. Added Debian
854
revison number to version number.
855
856
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Wed, 01 Oct 2008 17:23:35 +0200
857
858
mandos (1.0-1) unstable; urgency=low
859
860
* Initial Release. (Closes: #500727).
861
862
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 30 Sep 2008 21:58:43 +0200
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0