To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to debian/changelog
- browse files at revision 1315
- compare with another revision
- download diff
- download tarball
- view history from revision 1315
- Committer: Teddy Hogeborn
- Date: 2024-11-24 00:44:25 UTC
- Revision ID: teddy@recompile.se-20241124004425-6k3y0ir1ksyjq3c4
mandos-keygen: Show warning about old OpenSSH versions
When generating a config file snippet on the Mandos client system
using mandos-keygen, and the default ssh-keyscan checker is used, and
if the OpenSSH version is 9.8 or later, the "checker" command
generated for the config file on the Mandos server will include the
"-q" option for ssh-keyscan. This option did not exist on ssh-keyscan
from OpenSSH older than version 9.8. Therefore, if the Mandos
*server* is running an older version of OpenSSH, where ssh-keyscan
does not support the "-q" option, this option must be removed from the
generated "checker" setting. Since we cannot know if this is the case
when running mandos-keygen on the Mandos client system, we print this
information as a comment above the generated "checker" setting.
* mandos-keygen: Show warning if the new "-q" options was used with
ssh-keyscan in the generated "checker" setting.
When generating a config file snippet on the Mandos client system
using mandos-keygen, and the default ssh-keyscan checker is used, and
if the OpenSSH version is 9.8 or later, the "checker" command
generated for the config file on the Mandos server will include the
"-q" option for ssh-keyscan. This option did not exist on ssh-keyscan
from OpenSSH older than version 9.8. Therefore, if the Mandos
*server* is running an older version of OpenSSH, where ssh-keyscan
does not support the "-q" option, this option must be removed from the
generated "checker" setting. Since we cannot know if this is the case
when running mandos-keygen on the Mandos client system, we print this
information as a comment above the generated "checker" setting.
* mandos-keygen: Show warning if the new "-q" options was used with
ssh-keyscan in the generated "checker" setting.
- files added:
- bugs.xml
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
debian/changelog
1
mandos (1.8.17-1) unstable; urgency=medium
2
3
* New upstream release.
4
* debian/control (Package: mandos/Depends): Fix "mandos: Depends on
5
transition package gnupg2" by removing "gnupg2 |". (Closes: #1055402)
6
* debian/control (Source: mandos/Build-Depends): Fix "Please switch
7
Build-Depends to systemd-dev" by preferring systemd-dev to older
8
systemd (Closes: #1060546)
9
* Fix "reportbug: mandos-client does not include gpg-agent in initramfs"
10
by first trying the new library name, libgpgme11t64 (Closes: #1077927)
11
* Fix "mandos-client postrm purge can mysteriously fail" by making sure
12
that the maintainer scripts do not output anything to standard output
13
(Closes: #1079588)
14
* debian/mandos-client.postinst (update_initramfs): Add "1>&2" to
15
invocations of update-initramfs and /etc/kernel/postinst.d/dracut.
16
(add_mandos_user): Add "1>&2" to invocations of usermod, groupmod, and
17
adduser.
18
(create_keys): Add "1>&2" to invocations of mandos-keygen,
19
gpg-connect-agent, certtool, and openssl.
20
(create_dh_params): Add "1>&2" to invocations of certtool and openssl.
21
Add "--force" option to "rm".
22
* debian/mandos-client.postrm (update_initramfs): Add "1>&2" to
23
invocations of update-initramfs and /etc/kernel/postinst.d/dracut.
24
* Fix "mandos lost mandos.service systemd unit" by getting the correct
25
directory names from pkg-config (Closes: #1069689)
26
* debian/mandos-client.dirs (usr/lib/sysusers.d): Removed.
27
* debian/mandos.dirs (lib/systemd/system, usr/lib/tmpfiles.d,
28
usr/lib/sysusers.d): Removed.
29
* debian/rules (PKG_CONFIG): New; copied from Makefile.
30
* (override_dh_installdirs-indep): New; run dh_installdirs twice: first
31
normally, and again for the systemd unit file directory and the
32
directories for the "tmpfilesdir" and "sysusersdir" variables from
33
pkg-config.
34
(override_dh_installdirs-arch): New; create directory for the
35
"sysusersdir" variable from pkg-config.
36
* debian/mandos.dirs: Change D-Bus policy directory
37
"/etc/dbus-1/session.d" to "/usr/share/dbus-1/session.d".
38
* debian/mandos.maintscript: New; remove the old D-Bus policy file.
39
* debian/mandos-client.README.Debian: Fix spelling.
40
* debian/mandos-client.README.Debian: Remove unnecessary word "simply".
41
Also add instructions on how to add the --connect= options to
42
mandos-client when using dracut.
43
* debian/mandos-client.postrm: Also shred(1) tls-privkkey.pem, just like
44
with seckey.txt.
45
* debian/mandos-client.postinst (update_initramfs): When using dracut,
46
but the initramfs image file does not yet exist (due to the kernel
47
package not having been configured), create a new empty file with the
48
correct permissions, so that dracut will use the correct permissions
49
when creating the initramfs image file.
50
* debian/control (Package: mandos/Depends): Add "libgnutls30t64" as an
51
alternative to libgnutls30.
52
* debian/mandos-client.lintian-overrides: Change to new lintian "pointed
53
hints" syntax.
54
* debian/mandos.lintian-overrides: - '' -
55
* debian/control (Standards-Version): Change to "4.7.0".
56
57
-- Teddy Hogeborn <teddy@recompile.se> Thu, 12 Sep 2024 18:59:04 +0200
58
59
mandos (1.8.16-1.2) unstable; urgency=medium
60
61
* Non-maintainer upload.
62
* Install mandos.service again. (Closes: #1069689)
63
64
-- Helmut Grohne <helmut@subdivi.de> Mon, 22 Apr 2024 21:13:43 +0200
65
66
mandos (1.8.16-1.1) unstable; urgency=medium
67
68
* Non-maintainer upload.
69
* Depend only on gnupg instead of transitional gnupg2 (Closes: #1055402).
70
* Build-Depend on systemd-dev instead of systemd (Closes: #1060546).
71
* Build-Depend on pkgconf instead of pkg-config.
72
* (Build-)Depend on current libgnutls.
73
74
-- Bastian Germann <bage@debian.org> Fri, 19 Apr 2024 13:08:30 +0200
75
76
mandos (1.8.16-1) unstable; urgency=medium
77
78
* New upstream release.
79
* debian/rules (override_dh_fixperms-arch): Make sure dh_fixperms also
80
is applied to the directory
81
/usr/share/doc/mandos-client/examples/network-hooks.d (but still not
82
to the files therein).
83
* debian/po/pt_BR.po: Add Brazilian Portuguese translation of the
84
debconf template (Closes: #1026400).
85
* debian/po/fr.po: Add missing whitespace to the id and translation
86
for msgid " key_id = <HEXSTRING>".
87
* debian/control (Standards-Version): Change to "4.6.2".
88
89
-- Teddy Hogeborn <teddy@recompile.se> Wed, 08 Feb 2023 00:58:24 +0100
90
91
mandos (1.8.15-1) unstable; urgency=medium
92
93
* New upstream release.
94
* debian/po/fr.po: Add missing whitespace to the id and translation
95
for msgid " ${key_id}".
96
* debian/mandos-client.lintian-overrides: Remove all empty commented
97
lines. Rename "setuid-binary" tag to "elevated-privileges".
98
* debian/control (Standards-Version): Change to "4.6.0".
99
* debian/copyright: Update copyright year to 2022.
100
* debian/po/es.po: Add Spanish translation of the debconf template
101
(Closes: #987595).
102
103
-- Teddy Hogeborn <teddy@recompile.se> Mon, 25 Apr 2022 20:43:27 +0200
104
105
mandos (1.8.14-1) unstable; urgency=medium
106
107
* New upstream release. Includes workaround for #981302
108
* debian/po/fr.po: Fix msgid to match template.
109
110
-- Teddy Hogeborn <teddy@recompile.se> Wed, 03 Feb 2021 09:53:29 +0100
111
112
mandos (1.8.13-1) unstable; urgency=medium
113
114
* New upstream release.
115
* Fix "password-agent autopkgtest does not seem to be reliable"
116
by making the test more reliable (Closes: #975457)
117
* debian/mandos-client.templates: Rename "_description" header to
118
"_Description".
119
* debian/control (Standards-Version): Change to "4.5.1".
120
121
-- Teddy Hogeborn <teddy@recompile.se> Mon, 30 Nov 2020 19:15:43 +0100
122
123
mandos (1.8.12-1) unstable; urgency=medium
124
125
* New upstream release.
126
* Fix "FTBFS with glibc 2.31 (uses removed stime function)" by using
127
clock_settime() instead. (Closes: #964226)
128
* debian/copyright: Update copyright year to 2020.
129
130
-- Teddy Hogeborn <teddy@recompile.se> Sat, 04 Jul 2020 14:58:26 +0200
131
132
mandos (1.8.11-1) unstable; urgency=medium
133
134
* New upstream release.
135
136
-- Teddy Hogeborn <teddy@recompile.se> Wed, 08 Apr 2020 20:37:32 +0200
137
138
mandos (1.8.10-1) unstable; urgency=medium
139
140
* Fix "[INTL:pt] Updated Portuguese translation - debconf messages"
141
by including the contributed translation (Closes: #942595)
142
* Fix "[INTL:nl] Dutch translation of debconf messages" by including the
143
contributed translation (Closes: #946006)
144
* Fix "flaky autopkgtest on arm64" by skipping the flaky test on
145
non-amd64 (Closes: #953799)
146
* debian/control (Standards-Version): Update to "4.5.0".
147
148
-- Teddy Hogeborn <teddy@recompile.se> Sat, 21 Mar 2020 17:45:01 +0100
149
150
mandos (1.8.9-2) unstable; urgency=medium
151
152
* Fix failing autopkgtest.
153
* debian/tests/control (mandos-check/Restrictions): Add "allow-stderr".
154
155
-- Teddy Hogeborn <teddy@recompile.se> Wed, 04 Sep 2019 23:14:06 +0200
156
157
mandos (1.8.9-1) unstable; urgency=medium
158
159
* New upstream release.
160
* Fix "Python2 removal in sid/bullseye" by using Python 3 instead
161
(Closes: #936987)
162
* debian/control (Build-Depends, Build-Depends-Indep): Move "systemd"
163
from indep to regular build-depends.
164
(Build-Depends-Indep, Package: mandos/Depends): Depend on Python 3 and
165
Python 3 modules instead of Python 2.
166
167
-- Teddy Hogeborn <teddy@recompile.se> Tue, 03 Sep 2019 20:58:27 +0200
168
169
mandos (1.8.8-1) unstable; urgency=medium
170
171
* New upstream release.
172
* debian/po/de.po: New; Fix "[INTL:de] Initial German debconf
173
translation" by including the contributed translation (Closes:
174
#934373)
175
* debian/po/fr.po: New; Fix "[INTL:fr] French debconf templates
176
translation" by including the contributed translation (Closes:
177
#934888)
178
* debian/po/sv.po: New Swedish translation.
179
* debian/mandos.postinst: Only reload D-Bus daemon if new user was
180
created.
181
* debian/mandos.dirs (usr/lib/sysusers.d): New.
182
* debian/mandos-client.dirs (usr/lib/sysusers.d): - '' -
183
184
-- Teddy Hogeborn <teddy@recompile.se> Sun, 18 Aug 2019 22:01:13 +0200
185
186
mandos (1.8.7-1) unstable; urgency=medium
187
188
* New upstream release.
189
* debian/upstream/metadata: New.
190
* debian/mandos-client.postrm: Use the same logic as the
191
update_initramfs function in debian/mandos-client.postinst.
192
* debian/mandos-client.templates (mandos-client/key_id): Line which
193
should not be wrapped should be prefixed by a space.
194
* debian/mandos.templates (mandos/key_id): - '' -
195
* debian/po/en_US.po: New "translation" from ASCII to UTF-8.
196
* debian/po/templates.pot: Updated.
197
* debian/source/lintian-overrides
198
(package-uses-old-debhelper-compat-version): New; set to "10".
199
* debian/mandos-client.lintian-overrides
200
(maintainer-script-supports-ancient-package-version): New.
201
debian/mandos.lintian-overrides
202
(maintainer-script-supports-ancient-package-version): - '' -
203
204
-- Teddy Hogeborn <teddy@recompile.se> Mon, 05 Aug 2019 23:22:00 +0200
205
206
mandos (1.8.6-1) unstable; urgency=medium
207
208
* New upstream release.
209
* Fix "mandos FTCBFS: hard codes build architecture pkg-config"
210
by making pkg-config overridable (Closes: #933701)
211
* debian/mandos.postinst (configure): After creating (or renaming) user
212
& group, reload D-Bus daemon (if present).
213
214
-- Teddy Hogeborn <teddy@recompile.se> Sat, 03 Aug 2019 14:51:01 +0200
215
216
mandos (1.8.5-1) unstable; urgency=medium
217
218
* New upstream release.
219
* Fix "does not reap children" by reaping children (Closes: #933387)
220
* debian/mandos-client.README.Debian: Use new-style interface name.
221
* debian/tests/control: New file; implements autopkgtest support.
222
* debian/mandos-client.lintian-overrides
223
(manpage-has-errors-from-man): Remove; unnecessary.
224
* debian/mandos.lintian-overrides
225
(init.d-script-needs-depends-on-lsb-base): - '' -
226
* debian/mandos-client.postinst (update_initramfs): Upstream now
227
supports dracut(8), so update commands here to and run the correct
228
command to update initramfs.
229
* debian/control (Build-Depends): Add GLib -dev package.
230
(mandos-client/Depends): Add dracut(8) as an alternative dependency to
231
initramfs-tools.
232
(mandos-client/Conflicts): New; set to "dracut-config-generic".
233
(debian/mandos-client.README.Debian): Update for dracut(8) support.
234
* debian/mandos-client.templates: Reflowed by debconf-gettextize(1).
235
* debian/mandos.templates: - '' -
236
* debian/po/POTFILES.in: New.
237
* debian/po/templates.pot: - '' -
238
* debian/source/lintian-overrides: New.
239
* debian/control (Standards-Version): Update to "4.4.0".
240
241
-- Teddy Hogeborn <teddy@recompile.se> Tue, 30 Jul 2019 20:41:29 +0200
242
243
mandos (1.8.4-1) unstable; urgency=medium
244
245
* Fix "dirs in initrd are not accessible by mandos plugin-runner" by
246
making sure UMASK is set, no matter what other packages have installed
247
in "/usr/share/initramfs-tools/conf-hooks.d". (Closes: #926641)
248
* Fix "LeakSanitizer: detected memory leaks, fails to decrypt"
249
by fixing memory leak in plugin-runner. (Closes: #926643)
250
* debian/mandos-client.dirs: Add
251
"usr/share/initramfs-tools/conf-hooks.d", needed by fix for #926641.
252
253
-- Teddy Hogeborn <teddy@recompile.se> Tue, 09 Apr 2019 22:05:39 +0200
254
255
mandos (1.8.3-3) unstable; urgency=medium
256
257
* Fix "src:mandos: modifies d/control during build" by not doing that
258
anymore. (Closes: #922202)
259
* debian/rules (override_dh_shlibdeps-arch): Commented out.
260
261
-- Teddy Hogeborn <teddy@recompile.se> Wed, 13 Feb 2019 09:52:39 +0100
262
263
mandos (1.8.3-2) unstable; urgency=medium
264
265
* debian/rules (override_dh_shlibdeps-arch): New; conditionally edit
266
debian/control before running dh_shlibdeps.
267
268
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 12:49:57 +0100
269
270
mandos (1.8.3-1) unstable; urgency=medium
271
272
* New upstream release.
273
* debian/watch: Make the ".orig" file name suffix non-optional;
274
otherwise uscan thinks that ".orig" is part of the version number.
275
* debian/control (Build-Depends): Changed GnuTLS dependencies; move
276
3.6.6 alternative to first in list, and remove dependencies on the
277
virtual package "gnutls-dev", since we need the version restrictions.
278
(Package: mandos/Depends): Remove dependency on libgnutls28-dev
279
package.
280
(Package: mandos/Suggests): New; set to "libc6-dev, c-compiler". (Used
281
to find value of "SO_BINDTODEVICE").
282
(Package: mandos-client/Depends): Don't depend on openssl anymore;
283
instead depend on either a gnutls-bin (>= 3.6.6) (in which case TLS
284
key generation will work), or on libgnutls30 (<< 3.6.0) (in which case
285
TLS key generation will not be needed).
286
287
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 07:30:32 +0100
288
289
mandos (1.8.2-1) unstable; urgency=medium
290
291
* New upstream release.
292
* debian/mandos-client.postinst (create_keys): Ignore failure to remove
293
bad keys.
294
295
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 11:44:56 +0100
296
297
mandos (1.8.1-1) unstable; urgency=high
298
299
* New upstream release.
300
* debian/mandos-client.postinst (create_keys): Remove any bad keys
301
created by 1.8.0-1. Only create TLS keys if certtool succeeds.
302
* debian/mandos.postinst (configure): Remove any bad keys from
303
clients.conf, and inform the user if any were found.
304
* debian/mandos.templates (mandos/removed_bad_key_ids): New message.
305
306
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 10:00:21 +0100
307
308
mandos (1.8.0-1) unstable; urgency=medium
309
310
* New upstream release.
311
* Fix "(tries to) use GnuTLS OpenPGP support" by using raw public keys
312
when available (Closes: #879538)
313
* Fix "mandos : Depends: libgnutls30 (< 3.6.0) but 3.6.5-2 is to be
314
installed" by now also allowing GnuTLS >= 3.6.6 (Closes: #916673)
315
* debian/control (Standards-Version): Update to "4.3.0".
316
(Package: mandos-client/Depends): Change from "cryptsetup" to
317
"cryptsetup (<< 2:2.0.3-1) | cryptsetup-initramfs". Add "debconf (>=
318
1.5.5) | debconf-2.0".
319
(Source: mandos/Build-Depends): Also allow libgnutls30 (>= 3.6.6).
320
(Package: mandos/Depends): - '' - and add debconf (>= 1.5.5) |
321
debconf-2.0".
322
(Package: mandos/Description): Alter description to match new design.
323
(Package: mandos-client/Description): - '' -
324
(Package: mandos-client/Depends): Move "gnutls-bin | openssl" to here
325
from "Recommends".
326
* debian/mandos-client.README.Debian: Add --tls-privkey and --tls-pubkey
327
options to test command.
328
* debian/mandos-client.postinst (create_key): Renamed to "create_keys"
329
- all callers changed - and also create TLS key files. Show notice if
330
new TLS key files were created.
331
* debian/mandos-client.postrm (purge): Also remove TLS key files.
332
* debian/mandos-client.lintian-overrides: Override warnings.
333
* debian/mandos-client.templates: New.
334
* debian/mandos.lintian-overrides: Override warnings.
335
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
336
detected, show an important notice (once) about the new key_id option
337
required in clients.conf.
338
* debian/mandos.templates: New.
339
* debian/copyright: Update copyright year to 2019.
340
341
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 05:52:49 +0100
342
343
mandos (1.7.20-1) unstable; urgency=medium
344
345
* New upstream release.
346
* Fix "[tethys] mandos-client: Mandos client fails while booting but
347
works from chroot into unpacked initramfs" by setting system clock if
348
necessary (Closes: #894495)
349
* Fix "initramfs boot script assumes internal cryptsetup implementation
350
details and is now broken" by only using documented
351
interfaces (Closes: #904899)
352
* debian/mandos-client.dirs: Add
353
"usr/share/initramfs-tools/scripts/local-premount" and
354
"usr/share/initramfs-tools/conf.d", and remove
355
"usr/share/initramfs-tools/conf-hooks.d".
356
* debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency
357
on "initramfs-tools".
358
* debian/control (Source: mandos/Rules-Requires-Root): New; set to
359
"binary-targets".
360
(Standards-Version): Update to "4.2.0".
361
362
-- Teddy Hogeborn <teddy@recompile.se> Sun, 19 Aug 2018 22:14:04 +0200
363
364
mandos (1.7.19-1) unstable; urgency=medium
365
366
* New upstream release.
367
* Fix "fails with "LeakSanitizer has encountered a fatal error"" by not
368
using LeakSanitizer in affected binary (Closes: #886595)
369
370
-- Teddy Hogeborn <teddy@recompile.se> Thu, 22 Feb 2018 19:47:59 +0100
371
372
mandos (1.7.18-1) unstable; urgency=medium
373
374
* New upstream release.
375
376
-- Teddy Hogeborn <teddy@recompile.se> Mon, 12 Feb 2018 16:00:11 +0100
377
378
mandos (1.7.17-1) unstable; urgency=medium
379
380
* New upstream release.
381
* Fix "fails with "LeakSanitizer has encountered a fatal error""
382
by fixing memory leak in plugin-runner (Closes: #886595)
383
* debian/control (Build-Depends): Also depend on "libgnutls28-dev (<<
384
3.6.0) | libgnutls30 (<< 3.6.0)".
385
(Package: mandos/Depends): - '' -
386
* debian/compat: Change to "10".
387
* debian/watch (version): Change to "4".
388
(opts/pgpsigurlmangle): Remove.
389
(opts/pgpmode): New; set to "auto".
390
(URL): Change to "https://ftp.recompile.se/pub/@PACKAGE@/@PACKAGE@
391
@ANY_VERSION@(?:\.orig)?@ARCHIVE_EXT@".
392
* debian/copyright: Update copyright year to 2018.
393
* debian/rules: Support the "noopt" and "parallel" DEB_BUILD_OPTIONS.
394
(override_dh_fixperms-arch): Use the DEB_HOST_MULTIARCH
395
variable directly instead of shelling out to "dpkg-architecture".
396
* debian/control (Standards-Version): Update to "4.1.3".
397
(Build-Depends): Change version of debhelper dependency to ">= 10".
398
* debian/mandos.lintian-overrides
399
(init.d-script-needs-depends-on-lsb-base): Change line number to "46".
400
401
-- Teddy Hogeborn <teddy@recompile.se> Sat, 10 Feb 2018 19:09:50 +0100
402
403
mandos (1.7.16-1) unstable; urgency=medium
404
405
* New upstream release.
406
* debian/copyright (License): Use program name explicitly.
407
(Format): Use https in URL.
408
* debian/control (Priority): Change from "extra" to "optional".
409
(Standards-Version): Update to "4.0.1".
410
411
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 Aug 2017 21:05:26 +0200
412
413
mandos (1.7.15-1) unstable; urgency=medium
414
415
* New upstream release.
416
* Upstream release fixes "Seems not to be honoring zeroconf option at
417
mandos.conf" (Closes: #855589)
418
* debian/mandos.lintian-overrides (mandos): Add new line
419
"init.d-script-needs-depends-on-lsb-base etc/init.d/mandos (line 49)".
420
* debian/copyright: Update copyright year to 2017.
421
422
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Feb 2017 21:29:36 +0100
423
424
mandos (1.7.14-1) unstable; urgency=medium
425
426
* New upstream release.
427
* debian/mandos-client.postinst (create_key): Stop GPG agent after
428
running mandos-keygen.
429
* debian/control (Package: mandos/Depends): Add "systemd-sysv | lsb-base
430
(>= 3.0-6)", change "gnupg" to "gnupg2 | gnupg", and change
431
"libgpgme11-dev" to "libgpgme-dev | libgpgme11-dev".
432
433
-- Teddy Hogeborn <teddy@recompile.se> Wed, 25 Jan 2017 20:36:03 +0100
434
435
mandos (1.7.13-1) unstable; urgency=medium
436
437
* New upstream release.
438
* Fix "fails to install noninteractively" by using the "%no-protection"
439
statement in the GnuPG batch parameter file. (Closes: #840001)
440
441
-- Teddy Hogeborn <teddy@recompile.se> Sat, 08 Oct 2016 06:31:07 +0200
442
443
mandos (1.7.12-1) unstable; urgency=medium
444
445
* New upstream release.
446
447
-- Teddy Hogeborn <teddy@recompile.se> Wed, 05 Oct 2016 22:06:55 +0200
448
449
mandos (1.7.11-1) unstable; urgency=high
450
451
* New upstream release.
452
* debian/control (Source: mandos/Vcs-Bzr): Change to use HTTPS.
453
(Vcs-Browser): - '' -
454
455
-- Teddy Hogeborn <teddy@recompile.se> Sat, 01 Oct 2016 16:20:48 +0200
456
457
mandos (1.7.10-1) unstable; urgency=high
458
459
* New upstream release.
460
* debian/rules (override_dh_fixperms-arch): Also exclude
461
"etc/mandos/plugin-helpers" from changes by dh_fixperms.
462
* debian/mandos-client.postinst: Fix the permissions of
463
"/etc/mandos/plugin-helpers" for those systems which had a fresh
464
install of an older version.
465
466
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Jun 2016 22:00:29 +0200
467
468
mandos (1.7.9-1) unstable; urgency=medium
469
470
* New upstream release.
471
472
-- Teddy Hogeborn <teddy@recompile.se> Wed, 22 Jun 2016 07:30:12 +0200
473
474
mandos (1.7.8-1) unstable; urgency=medium
475
476
* New upstream release.
477
* Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." by copying
478
/usr/bin/gpg-agent into initramfs (Closes: #819982)
479
* debian/control (Homepage): Change URL to use HTTPS.
480
(Standards-Version): Update to 3.9.8.
481
* debian/copyright (Source): Change URL to HTTPS.
482
* debian/mandos-client.README.Debian: Change wording to match updated
483
capabilities.
484
485
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jun 2016 21:36:10 +0200
486
487
mandos (1.7.7-1) unstable; urgency=medium
488
489
* New upstream release.
490
* debian/mandos-client.postinst (configure): If older version, fix
491
permissions on plugin helper directory. Also fix permissions on
492
plugin helper local override directory (/etc/mandos/plugin-helpers),
493
but only if not listed by "dpkg-statoverride".
494
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
495
directory from dh_fixperms.
496
* debian/mandos.postinst (configure): Fix state directory permissions,
497
but only if not listed by "dpkg-statoverride".
498
* debian/mandos-client.lintian-overrides: Do not warn about permissions
499
on plugin helper directory.
500
* debian/mandos.dirs (usr/lib/tmpfiles.d): Added.
501
502
-- Teddy Hogeborn <teddy@recompile.se> Sat, 19 Mar 2016 22:58:49 +0100
503
504
mandos (1.7.6-1) unstable; urgency=medium
505
506
* New upstream release.
507
* debian/control (Source: mandos/Build-Depends-Indep): Remove
508
"python-avahi".
509
(Source: mandos/Build-Depends-Indep): Change "python-gi |
510
python-gobject" to "python-gi"; i.e. remove "python-gobject".
511
512
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
513
514
mandos (1.7.5-1) unstable; urgency=high
515
516
* New upstream release.
517
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
518
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
519
root.
520
521
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
522
523
mandos (1.7.4-1) unstable; urgency=medium
524
525
* New upstream release.
526
* initramfs-tools-script: Fix "Call to configure_network in initramfs
527
script broken due to set -e" by surrounding call by "set +x" and "set
528
-e" (Closes: #816513)
529
* debian/control: (Source: mandos/Build-Depends-Indep): Change
530
"python-gobject | python-gi" to "python-gi | python-gobject"
531
(Package: mandos/Depends): - '' -
532
533
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
534
535
mandos (1.7.3-1) unstable; urgency=medium
536
537
* New upstream release.
538
539
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
540
541
mandos (1.7.2-1) unstable; urgency=medium
542
543
* New upstream release.
544
* Fix "Uses unneeded and obsolete version specific python packages"
545
by removing version-specific dependencies (Closes: #811159)
546
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
547
"libgnutls28-dev" and "gnutls-dev".
548
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
549
"python2.7", "python2.7-dbus", "python2.7-avahi", and
550
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
551
"python-dbus", "python-avahi", "python-gobject | python-gi".
552
(Package: mandos/Depends): Remove "python-gnutls" and
553
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
554
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
555
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
556
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
557
(<< 2)" with "gnupg".
558
(Package: mandos-client/Depends): Replace
559
"gnupg (<< 2)" with "gnupg".
560
(Source: mandos/Standards-Version): Change to 3.9.7.
561
* debian/copyright (Copyright): Update copyright year.
562
563
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
564
565
mandos (1.7.1-2) unstable; urgency=medium
566
567
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
568
dependency on initscripts package" by removing initscripts dependency
569
(Closes: #804967)
570
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
571
dpkg-buildpackage -A (No such file or directory)" by splitting into
572
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
573
(Closes: #806073)
574
575
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
576
577
mandos (1.7.1-1) unstable; urgency=medium
578
579
* New upstream release.
580
581
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
582
583
mandos (1.7.0-1) unstable; urgency=medium
584
585
* New upstream release.
586
* debian/control (Standards-Version): Updated to "3.9.6".
587
(Build-Depends): Add "libnl-route-3-dev".
588
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
589
the generating of DH parameters.
590
* debian/mandos-client.README.Debian: Update example command line to use
591
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
592
dhparams.pem file.
593
* debian/mandos-client.postinst: Create DH parameters file.
594
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
595
* debian/mandos-client.postinst: Don't use absolute paths to commands.
596
* debian/mandos-client.postrm: Don't use absolute paths to commands.
597
Also remove dhparams.pem file.
598
* debian/copyright (Copyright): Update copyright year.
599
* Upstream changed systemd service file to implicitly be of
600
"Type=dbus". (Closes: #786845)
601
602
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
603
604
mandos (1.6.9-1) unstable; urgency=medium
605
606
* New upstream release.
607
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
608
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
609
(Closes: #762349)
610
611
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
612
613
mandos (1.6.8-1) unstable; urgency=medium
614
615
* New upstream release.
616
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
617
now requires Python 2.7, depend on exactly the python2.7 package and
618
all the Python 2.7 versions of the python modules.
619
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
620
and the generic versions of the Python modules; this is for mandos-ctl
621
and mandos-monitor, both of which are compatible with Python 3, and
622
use #!/usr/bin/python.
623
624
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
625
626
mandos (1.6.7-1) unstable; urgency=medium
627
628
* New upstream release.
629
630
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
631
632
mandos (1.6.6-1) unstable; urgency=medium
633
634
* New upstream release.
635
* debian/mandos.postinst: Fix typo in comment.
636
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
637
(mandos-client/Recommends): New; set to "ssh".
638
639
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
640
641
mandos (1.6.5-3) unstable; urgency=medium
642
643
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
644
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
645
(Closes: #750221)
646
647
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
648
649
mandos (1.6.5-2) unstable; urgency=medium
650
651
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
652
FTBFS for build-indep.
653
654
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
655
656
mandos (1.6.5-1) unstable; urgency=medium
657
658
* New upstream release.
659
* debian/copyright: Change year to "2014".
660
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
661
dependencies of "mandos" package to "Build-Depends-Indep".
662
* debian/upstream/signing-key.asc: New; upstream source public key.
663
* debian/control (Standards-Version): Updated to "3.9.5".
664
* debian/control (mandos/Depends): Remove the dependency on
665
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
666
since we have a workaround in debian/mandos.postinst anyway.
667
668
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
669
670
mandos (1.6.4-1) unstable; urgency=medium
671
672
* New upstream release.
673
* debian/control (Build-Depends): Add Python dependencies to
674
successfully run self-tests.
675
* debian/copyright: GPLv3 now has its own license file - use it.
676
* debian/watch: Set PGP signature URL.
677
678
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
679
680
mandos (1.6.3-1) unstable; urgency=low
681
682
* New upstream release.
683
* debian/control (Build-Depends): Added "systemd".
684
* debian/mandos.dirs (lib/systemd/system): New.
685
* debian/mandos-client.README.Debian: Refer to architecture libdir.
686
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
687
systemd-sysv".
688
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
689
edit /etc/init.d script headers Required-Start
690
and Required-Stop to have "avahi" instead of
691
"avahi-daemon", before insserv(8) sees it.
692
* debian/mandos-client.lintian-overrides: Libdir changes.
693
* debian/rules (override_dh_fixperms): - '' -
694
695
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
696
697
mandos (1.6.2-1) unstable; urgency=low
698
699
* New upstream release.
700
* debian/compat: Changed to "9".
701
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
702
(Standards-Version): Updated to "3.9.4".
703
(DM-Upload-Allowed): Removed.
704
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
705
use the "/run" directory (for mandos.pid).
706
* debian/copyright (Copyright): Update year.
707
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
708
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
709
710
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
711
712
mandos (1.6.1-1) unstable; urgency=low
713
714
* New upstream release.
715
* debian/control (mandos/Depends): No longer depends on
716
python-gnupginterface, but does
717
depend on gnupg (<< 2).
718
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
719
and "override-*-indep" targets in debian/rules.
720
* debian/mandos-client.README: Update Linux documentation link.
721
* debian/rules: Completely rewritten to use debhelper v7.
722
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
723
copied into the initramfs image. Always assume that GPGME is used to
724
avoid searching for it since the path might not be /usr/lib. Thanks
725
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
726
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
727
debugging. (Closes: #721903)
728
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
729
730
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
731
732
mandos (1.6.0-1) unstable; urgency=low
733
734
* New upstream release.
735
* debian/copyright (Copyright): Join the two lines to a single line.
736
* debian/mandos-client.README.Debian: Update to refer to the new
737
location of the example network hooks, and the new feature of using
738
all network interfaces.
739
* debian/mandos-client.docs (network-hooks.d): Removed.
740
* debian/mandos-client.examples (network-hooks.d): New.
741
* debian/rules (binary-common): Added "dh_installexamples".
742
(binary-common/dh_fixperms): Exclude new location of
743
"network-hooks.d".
744
745
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
746
747
mandos (1.5.5-1) unstable; urgency=low
748
749
* New upstream release.
750
* debian/copyright (Format): Updated to
751
"http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/".
752
* debian/control (Build-Depends): Removed "man, locales-all".
753
754
-- Teddy Hogeborn <teddy@recompile.se> Fri, 01 Jun 2012 20:30:41 +0200
755
756
mandos (1.5.4-1) unstable; urgency=low
757
758
* New upstream release.
759
760
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 May 2012 15:38:34 +0200
761
762
mandos (1.5.3-1.2) unstable; urgency=low
763
764
* Non-maintainer upload.
765
* Set Architecture to linux-any. (Closes: #647670)
766
767
-- Robert Millan <rmh@debian.org> Sun, 22 Apr 2012 16:22:01 +0200
768
769
mandos (1.5.3-1.1) unstable; urgency=low
770
771
* Non-maintainer upload.
772
* Fix "mandos FTBFS on buildds": add build-dependency on locales-all and
773
pass LC_ALL to dh_auto_build to make sure we have and use the en_US.UTF-8
774
locale for manpage creation.
775
(Closes: #656178)
776
777
-- gregor herrmann <gregoa@debian.org> Tue, 31 Jan 2012 17:56:05 +0100
778
779
mandos (1.5.3-1) unstable; urgency=low
780
781
* New upstream release.
782
783
-- Teddy Hogeborn <teddy@recompile.se> Sun, 15 Jan 2012 22:05:54 +0100
784
785
mandos (1.5.2-1) unstable; urgency=low
786
787
* New upstream release.
788
789
-- Teddy Hogeborn <teddy@recompile.se> Sun, 08 Jan 2012 11:17:20 +0100
790
791
mandos (1.5.1-1) unstable; urgency=low
792
793
* New upstream release.
794
795
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 21:53:31 +0100
796
797
mandos (1.5.0-1) unstable; urgency=low
798
799
* New upstream release.
800
* debian/control (mandos-client/Depends): Added "initramfs-tools".
801
* debian/mandos-client.README.Debian: Corrected mail address and adjust
802
wording.
803
* debian/rules (binary-common): Exclude new nework-hooks.d directory
804
from dh_fixperms.
805
* debian/mandos-client.README.Debian: Document network hook facility.
806
* debian/mandos-client.docs (network-hooks.d): Added.
807
* debian/mandos.dirs (var/lib/mandos): Added.
808
* debian/mandos.postinst: Fix ownership of /var/lib/mandos.
809
* debian/control (mandos/Depends): Added "python-gnupginterface".
810
811
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 05:58:11 +0100
812
813
mandos (1.4.1-1) unstable; urgency=low
814
815
* New upstream release.
816
* debian/control (Build-Depends): Added "man".
817
* debian/control (Conflicts): Changed to "Breaks:".
818
* debian/copyright: Updated format.
819
* debian/mandos-client.postinst: Use "set -e" instead of "#!/bin/sh -e".
820
* debian/mandos-client.postrm: - '' -
821
* debian/mandos.postinst: - '' -
822
* debian/mandos.prerm: Consistent magic.
823
824
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 15 Oct 2011 18:18:52 +0200
825
826
mandos (1.4.0-1) unstable; urgency=low
827
828
* New upstream release.
829
* Fix "FTBFS with binutils-gold": Added "-Xlinker --as-needed" to
830
LDFLAGS in Makefile. (Closes: #632145)
831
* Fix "/run transition: uses obsolete /dev/.initramfs": Try both old and
832
new PID file locations. (Closes: #643554)
833
* debian/source/local-options: New; contains "--single-debian-patch".
834
* debian/control (Standards-Version): Upgraded to "3.9.2".
835
(DM-Upload-Allowed): New; set to "yes".
836
* debian/control: Changed domain from "fukt.bsnet.se" to "recompile.se".
837
* debian/copyright: - '' -
838
* debian/mandos-client.README.Debian: - '' -
839
* debian/mandos.README.Debian: - '' -
840
* debian/watch: - '' -
841
* debian/control (mandos/Description): Fix language to placate lintian.
842
843
-- Teddy Hogeborn <teddy@recompile.se> Sun, 09 Oct 2011 19:15:08 +0200
844
845
mandos (1.3.1-1) unstable; urgency=low
846
847
* New upstream release.
848
* Conflict with correct version of dropbear.
849
* New version uses argparse; depend on python (<=2.7) | python-argparse.
850
851
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Wed, 27 Jul 2011 19:47:17 +0200
852
853
mandos (1.3.0-1) unstable; urgency=low
854
855
* New upstream release.
856
* debian/control (mandos): Depend on Python 2.6, remove dependency on
857
python-multiprocessing.
858
(mandos-client): Conflict with dropbear (<< 0.52-5).
859
* debian/mandos-client.postrm (purge): Bug fix: update initramfs also on
860
purge.
861
* debian/mandos-client.lintian-overrides: Added plugins.d/plymouth.
862
863
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 08 Mar 2011 20:22:57 +0100
864
865
mandos (1.2.3-1) experimental; urgency=low
866
867
* New upstream release.
868
869
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Mon, 11 Oct 2010 19:37:31 +0200
870
1
871
mandos (1.2.2-1) experimental; urgency=low
2
872
3
873
* New upstream release.
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0