To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to debian/changelog
- browse files at revision 825
- compare with another revision
- download diff
- download tarball
- view history from revision 825
- Committer: Teddy Hogeborn
- Date: 2016-03-07 23:39:36 UTC
- Revision ID: teddy@recompile.se-20160307233936-mhgpxhggamde443n
Server bug fix: Include CAP_SETGID so it does not run as root
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
root.
* mandos (main): Print debug info about setuid() and setgid()
* mandos.service ([Service]/CapabilityBoundingSet): Add "CAP_KILL
CAP_SETGID"; the latter is needed for setgid() to be allowed.
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
root.
* mandos (main): Print debug info about setuid() and setgid()
* mandos.service ([Service]/CapabilityBoundingSet): Add "CAP_KILL
CAP_SETGID"; the latter is needed for setgid() to be allowed.
- files added:
- DBUS-API
- debian/source
- debian/upstream
- network-hooks.d
- plugin-helpers
- files modified:
- .bzrignore
added
removed
debian/changelog
1
mandos (1.7.4-1) unstable; urgency=medium
2
3
* New upstream release.
4
* initramfs-tools-script: Fix "Call to configure_network in initramfs
5
script broken due to set -e" by surrounding call by "set +x" and "set
6
-e" (Closes: #816513)
7
* debian/control: (Source: mandos/Build-Depends-Indep): Change
8
"python-gobject | python-gi" to "python-gi | python-gobject"
9
(Package: mandos/Depends): - '' -
10
11
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
12
13
mandos (1.7.3-1) unstable; urgency=medium
14
15
* New upstream release.
16
17
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
18
19
mandos (1.7.2-1) unstable; urgency=medium
20
21
* New upstream release.
22
* Fix "Uses unneeded and obsolete version specific python packages"
23
by removing version-specific dependencies (Closes: #811159)
24
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
25
"libgnutls28-dev" and "gnutls-dev".
26
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
27
"python2.7", "python2.7-dbus", "python2.7-avahi", and
28
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
29
"python-dbus", "python-avahi", "python-gobject | python-gi".
30
(Package: mandos/Depends): Remove "python-gnutls" and
31
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
32
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
33
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
34
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
35
(<< 2)" with "gnupg".
36
(Package: mandos-client/Depends): Replace
37
"gnupg (<< 2)" with "gnupg".
38
(Source: mandos/Standards-Version): Change to 3.9.7.
39
* debian/copyright (Copyright): Update copyright year.
40
41
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
42
43
mandos (1.7.1-2) unstable; urgency=medium
44
45
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
46
dependency on initscripts package" by removing initscripts dependency
47
(Closes: #804967)
48
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
49
dpkg-buildpackage -A (No such file or directory)" by splitting into
50
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
51
(Closes: #806073)
52
53
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
54
55
mandos (1.7.1-1) unstable; urgency=medium
56
57
* New upstream release.
58
59
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
60
61
mandos (1.7.0-1) unstable; urgency=medium
62
63
* New upstream release.
64
* debian/control (Standards-Version): Updated to "3.9.6".
65
(Build-Depends): Add "libnl-route-3-dev".
66
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
67
the generating of DH parameters.
68
* debian/mandos-client.README.Debian: Update example command line to use
69
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
70
dhparams.pem file.
71
* debian/mandos-client.postinst: Create DH parameters file.
72
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
73
* debian/mandos-client.postinst: Don't use absolute paths to commands.
74
* debian/mandos-client.postrm: Don't use absolute paths to commands.
75
Also remove dhparams.pem file.
76
* debian/copyright (Copyright): Update copyright year.
77
* Upstream changed systemd service file to implicitly be of
78
"Type=dbus". (Closes: #786845)
79
80
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
81
82
mandos (1.6.9-1) unstable; urgency=medium
83
84
* New upstream release.
85
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
86
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
87
(Closes: #762349)
88
89
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
90
91
mandos (1.6.8-1) unstable; urgency=medium
92
93
* New upstream release.
94
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
95
now requires Python 2.7, depend on exactly the python2.7 package and
96
all the Python 2.7 versions of the python modules.
97
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
98
and the generic versions of the Python modules; this is for mandos-ctl
99
and mandos-monitor, both of which are compatible with Python 3, and
100
use #!/usr/bin/python.
101
102
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
103
104
mandos (1.6.7-1) unstable; urgency=medium
105
106
* New upstream release.
107
108
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
109
110
mandos (1.6.6-1) unstable; urgency=medium
111
112
* New upstream release.
113
* debian/mandos.postinst: Fix typo in comment.
114
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
115
(mandos-client/Recommends): New; set to "ssh".
116
117
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
118
119
mandos (1.6.5-3) unstable; urgency=medium
120
121
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
122
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
123
(Closes: #750221)
124
125
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
126
127
mandos (1.6.5-2) unstable; urgency=medium
128
129
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
130
FTBFS for build-indep.
131
132
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
133
134
mandos (1.6.5-1) unstable; urgency=medium
135
136
* New upstream release.
137
* debian/copyright: Change year to "2014".
138
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
139
dependencies of "mandos" package to "Build-Depends-Indep".
140
* debian/upstream/signing-key.asc: New; upstream source public key.
141
* debian/control (Standards-Version): Updated to "3.9.5".
142
* debian/control (mandos/Depends): Remove the dependency on
143
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
144
since we have a workaround in debian/mandos.postinst anyway.
145
146
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
147
148
mandos (1.6.4-1) unstable; urgency=medium
149
150
* New upstream release.
151
* debian/control (Build-Depends): Add Python dependencies to
152
successfully run self-tests.
153
* debian/copyright: GPLv3 now has its own license file - use it.
154
* debian/watch: Set PGP signature URL.
155
156
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
157
158
mandos (1.6.3-1) unstable; urgency=low
159
160
* New upstream release.
161
* debian/control (Build-Depends): Added "systemd".
162
* debian/mandos.dirs (lib/systemd/system): New.
163
* debian/mandos-client.README.Debian: Refer to architecture libdir.
164
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
165
systemd-sysv".
166
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
167
edit /etc/init.d script headers Required-Start
168
and Required-Stop to have "avahi" instead of
169
"avahi-daemon", before insserv(8) sees it.
170
* debian/mandos-client.lintian-overrides: Libdir changes.
171
* debian/rules (override_dh_fixperms): - '' -
172
173
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
174
175
mandos (1.6.2-1) unstable; urgency=low
176
177
* New upstream release.
178
* debian/compat: Changed to "9".
179
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
180
(Standards-Version): Updated to "3.9.4".
181
(DM-Upload-Allowed): Removed.
182
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
183
use the "/run" directory (for mandos.pid).
184
* debian/copyright (Copyright): Update year.
185
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
186
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
187
188
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
189
190
mandos (1.6.1-1) unstable; urgency=low
191
192
* New upstream release.
193
* debian/control (mandos/Depends): No longer depends on
194
python-gnupginterface, but does
195
depend on gnupg (<< 2).
196
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
197
and "override-*-indep" targets in debian/rules.
198
* debian/mandos-client.README: Update Linux documentation link.
199
* debian/rules: Completely rewritten to use debhelper v7.
200
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
201
copied into the initramfs image. Always assume that GPGME is used to
202
avoid searching for it since the path might not be /usr/lib. Thanks
203
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
204
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
205
debugging. (Closes: #721903)
206
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
207
208
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
209
210
mandos (1.6.0-1) unstable; urgency=low
211
212
* New upstream release.
213
* debian/copyright (Copyright): Join the two lines to a single line.
214
* debian/mandos-client.README.Debian: Update to refer to the new
215
location of the example network hooks, and the new feature of using
216
all network interfaces.
217
* debian/mandos-client.docs (network-hooks.d): Removed.
218
* debian/mandos-client.examples (network-hooks.d): New.
219
* debian/rules (binary-common): Added "dh_installexamples".
220
(binary-common/dh_fixperms): Exclude new location of
221
"network-hooks.d".
222
223
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
224
225
mandos (1.5.5-1) unstable; urgency=low
226
227
* New upstream release.
228
* debian/copyright (Format): Updated to
229
"http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/".
230
* debian/control (Build-Depends): Removed "man, locales-all".
231
232
-- Teddy Hogeborn <teddy@recompile.se> Fri, 01 Jun 2012 20:30:41 +0200
233
234
mandos (1.5.4-1) unstable; urgency=low
235
236
* New upstream release.
237
238
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 May 2012 15:38:34 +0200
239
240
mandos (1.5.3-1.2) unstable; urgency=low
241
242
* Non-maintainer upload.
243
* Set Architecture to linux-any. (Closes: #647670)
244
245
-- Robert Millan <rmh@debian.org> Sun, 22 Apr 2012 16:22:01 +0200
246
247
mandos (1.5.3-1.1) unstable; urgency=low
248
249
* Non-maintainer upload.
250
* Fix "mandos FTBFS on buildds": add build-dependency on locales-all and
251
pass LC_ALL to dh_auto_build to make sure we have and use the en_US.UTF-8
252
locale for manpage creation.
253
(Closes: #656178)
254
255
-- gregor herrmann <gregoa@debian.org> Tue, 31 Jan 2012 17:56:05 +0100
256
257
mandos (1.5.3-1) unstable; urgency=low
258
259
* New upstream release.
260
261
-- Teddy Hogeborn <teddy@recompile.se> Sun, 15 Jan 2012 22:05:54 +0100
262
263
mandos (1.5.2-1) unstable; urgency=low
264
265
* New upstream release.
266
267
-- Teddy Hogeborn <teddy@recompile.se> Sun, 08 Jan 2012 11:17:20 +0100
268
269
mandos (1.5.1-1) unstable; urgency=low
270
271
* New upstream release.
272
273
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 21:53:31 +0100
274
275
mandos (1.5.0-1) unstable; urgency=low
276
277
* New upstream release.
278
* debian/control (mandos-client/Depends): Added "initramfs-tools".
279
* debian/mandos-client.README.Debian: Corrected mail address and adjust
280
wording.
281
* debian/rules (binary-common): Exclude new nework-hooks.d directory
282
from dh_fixperms.
283
* debian/mandos-client.README.Debian: Document network hook facility.
284
* debian/mandos-client.docs (network-hooks.d): Added.
285
* debian/mandos.dirs (var/lib/mandos): Added.
286
* debian/mandos.postinst: Fix ownership of /var/lib/mandos.
287
* debian/control (mandos/Depends): Added "python-gnupginterface".
288
289
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 05:58:11 +0100
290
291
mandos (1.4.1-1) unstable; urgency=low
292
293
* New upstream release.
294
* debian/control (Build-Depends): Added "man".
295
* debian/control (Conflicts): Changed to "Breaks:".
296
* debian/copyright: Updated format.
297
* debian/mandos-client.postinst: Use "set -e" instead of "#!/bin/sh -e".
298
* debian/mandos-client.postrm: - '' -
299
* debian/mandos.postinst: - '' -
300
* debian/mandos.prerm: Consistent magic.
301
302
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 15 Oct 2011 18:18:52 +0200
303
304
mandos (1.4.0-1) unstable; urgency=low
305
306
* New upstream release.
307
* Fix "FTBFS with binutils-gold": Added "-Xlinker --as-needed" to
308
LDFLAGS in Makefile. (Closes: #632145)
309
* Fix "/run transition: uses obsolete /dev/.initramfs": Try both old and
310
new PID file locations. (Closes: #643554)
311
* debian/source/local-options: New; contains "--single-debian-patch".
312
* debian/control (Standards-Version): Upgraded to "3.9.2".
313
(DM-Upload-Allowed): New; set to "yes".
314
* debian/control: Changed domain from "fukt.bsnet.se" to "recompile.se".
315
* debian/copyright: - '' -
316
* debian/mandos-client.README.Debian: - '' -
317
* debian/mandos.README.Debian: - '' -
318
* debian/watch: - '' -
319
* debian/control (mandos/Description): Fix language to placate lintian.
320
321
-- Teddy Hogeborn <teddy@recompile.se> Sun, 09 Oct 2011 19:15:08 +0200
322
323
mandos (1.3.1-1) unstable; urgency=low
324
325
* New upstream release.
326
* Conflict with correct version of dropbear.
327
* New version uses argparse; depend on python (<=2.7) | python-argparse.
328
329
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Wed, 27 Jul 2011 19:47:17 +0200
330
331
mandos (1.3.0-1) unstable; urgency=low
332
333
* New upstream release.
334
* debian/control (mandos): Depend on Python 2.6, remove dependency on
335
python-multiprocessing.
336
(mandos-client): Conflict with dropbear (<< 0.52-5).
337
* debian/mandos-client.postrm (purge): Bug fix: update initramfs also on
338
purge.
339
* debian/mandos-client.lintian-overrides: Added plugins.d/plymouth.
340
341
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 08 Mar 2011 20:22:57 +0100
342
343
mandos (1.2.3-1) experimental; urgency=low
344
345
* New upstream release.
346
347
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Mon, 11 Oct 2010 19:37:31 +0200
348
349
mandos (1.2.2-1) experimental; urgency=low
350
351
* New upstream release.
352
* plugins.d/splashy.c: Only use ELIBBAD if defined. (Closes: #599256)
353
354
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 07 Oct 2010 20:27:54 +0200
355
356
mandos (1.2.1-3) experimental; urgency=low
357
358
* debian/changelog: Include entry for NMU of version 1.0.14-1.1.
359
360
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 05 Oct 2010 20:58:38 +0200
361
362
mandos (1.2.1-2) unstable; urgency=low
363
364
* debian/source/format: New; contains "3.0 (quilt)". Really.
365
366
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 02 Oct 2010 19:46:59 +0200
367
368
mandos (1.2.1-1) unstable; urgency=low
369
370
* New upstream release.
371
* debian/source/format: New; contains "3.0 (quilt)".
372
373
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 02 Oct 2010 19:03:58 +0200
374
375
mandos (1.2-1) unstable; urgency=low
376
377
* New upstream release.
378
* Makefile (LINK_FORTIFY_LD): Remove "-fPIE". (Closes: #557076)
379
* debian/control: Add gnupg dependency to "mandos-client" and removed it
380
from "mandos". Added dependency on "python-urwid" "mandos" since the
381
new "mandos-monitor" utility needs it, and on "python (>=2.6) |
382
python-multiprocessing" since the Mandos server now uses it.
383
* debian/rules: Set BROKEN_PIE on mips and mipsel if a known buggy
384
version of binutils is used.
385
* debian/mandos.docs: Also install "/usr/share/doc/mandos/DBUS-API".
386
* debian/mandos.dirs: Added "etc/dbus-1/system.d".
387
* debian/mandos-client.README.Debian: Update info about DEVICE setting
388
of initramfs.conf.
389
* debian/mandos-client.README.Debian: Remove warning about --connect not
390
looping, since it now does.
391
392
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 28 Sep 2010 20:46:11 +0200
393
394
mandos (1.0.14-1.1) unstable; urgency=low
395
396
* Non-maintainer upload.
397
* Rebuild against libavahi-core-dev (>= 0.6.26-1).
398
399
-- Michael Biebl <biebl@debian.org> Mon, 12 Jul 2010 16:34:34 +0200
400
401
mandos (1.0.14-1) unstable; urgency=low (HIGH on mips and mipsel)
402
403
* New upstream release.
404
* debian/rules: Build with BROKEN_PIE set on mips and mipsel
405
architectures - fixes FTBFS there.
406
407
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 25 Oct 2009 20:10:09 +0100
408
409
mandos (1.0.13-1) unstable; urgency=high
410
411
* New upstream release.
412
* Do not copy unnecessary files to initrd (Closes: #551907)
413
414
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 22 Oct 2009 00:53:21 +0200
415
416
mandos (1.0.12-1) unstable; urgency=low
417
418
* New upstream release.
419
* init.d-mandos: Correct dependencies (Closes: #546928)
420
* debian/control (Standards-Version): Changed to "3.8.3".
421
* debian/mandos-client.README.Debian: Improved wording and formatting.
422
Updated location of nfsroot.txt.
423
* debian/mandos.README.Debian: Improved wording and formatting.
424
* debian/mandos-client.postinst (configure): Don't look for user and
425
group with the old name if upgrading from a new enough version.
426
* debian/mandos.postinst (configure): - '' -
427
* debian/mandos-client.README.Debian: Added text about non-usability of
428
pseudo-network interfaces.
429
430
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 17 Sep 2009 15:03:59 +0200
431
432
mandos (1.0.11-1) unstable; urgency=low
433
434
* debian/control (Standards-Version): Changed to "3.8.1".
435
* Makefile (GNUTLS_CFLAGS, GNUTLS_CFLAGS): Use "pkg-config" instead of
436
the old "libgnutls-config" script. (Closes: #529836)
437
438
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sat, 23 May 2009 07:12:20 +0200
439
440
mandos (1.0.10-1) unstable; urgency=low
441
442
* New upstream release.
443
* debian/mandos-client.postinst (update_initramfs): Fix permissions of
444
old initrd.img-*.bak files.
445
446
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 17 May 2009 04:56:35 +0200
447
448
mandos (1.0.9-1) unstable; urgency=low
449
450
* New upstream release.
451
452
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 17 May 2009 02:59:45 +0200
453
1
454
mandos (1.0.8-1) unstable; urgency=low
2
455
3
456
* New upstream release.
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0