To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to debian/changelog
- browse files at revision 839
- compare with another revision
- download diff
- download tarball
- view history from revision 839
- Committer: Teddy Hogeborn
- Date: 2016-03-19 04:21:00 UTC
- Revision ID: teddy@recompile.se-20160319042100-i581cfv65r934dnl
Client: Make plugin helper override directory mode u=rwx,go=
Even though it currently is not used, a local administrator might use
setuid (or setcap) executables as plugin helpers. Thus, the plugin
helper override directory (/etc/mandos/plugin-helpers) must be
secured, just as the plugin override directory (/etc/mandos/plugins.d)
is.
* Makefile (install-client-nokey): Install plugin-helper directory as
mode u=rwx.
* debian/mandos-client.lintian-overrides: Do not warn about
permissions on plugin helper directory.
* debian/mandos-client.postinst (configure): Fix permissions on plugin
helper local override directory (/etc/mandos/plugin-helpers), but
only if not listed by "dpkg-statoverride".
Even though it currently is not used, a local administrator might use
setuid (or setcap) executables as plugin helpers. Thus, the plugin
helper override directory (/etc/mandos/plugin-helpers) must be
secured, just as the plugin override directory (/etc/mandos/plugins.d)
is.
* Makefile (install-client-nokey): Install plugin-helper directory as
mode u=rwx.
* debian/mandos-client.lintian-overrides: Do not warn about
permissions on plugin helper directory.
* debian/mandos-client.postinst (configure): Fix permissions on plugin
helper local override directory (/etc/mandos/plugin-helpers), but
only if not listed by "dpkg-statoverride".
- files added:
- DBUS-API
- debian/source
- debian/upstream
- network-hooks.d
- plugin-helpers
- files modified:
- .bzrignore
added
removed
debian/changelog
1
mandos (1.7.6-1) unstable; urgency=medium
2
3
* New upstream release.
4
* debian/control (Source: mandos/Build-Depends-Indep): Remove
5
"python-avahi".
6
(Source: mandos/Build-Depends-Indep): Change "python-gi |
7
python-gobject" to "python-gi"; i.e. remove "python-gobject".
8
9
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
10
11
mandos (1.7.5-1) unstable; urgency=high
12
13
* New upstream release.
14
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
15
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
16
root.
17
18
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
19
20
mandos (1.7.4-1) unstable; urgency=medium
21
22
* New upstream release.
23
* initramfs-tools-script: Fix "Call to configure_network in initramfs
24
script broken due to set -e" by surrounding call by "set +x" and "set
25
-e" (Closes: #816513)
26
* debian/control: (Source: mandos/Build-Depends-Indep): Change
27
"python-gobject | python-gi" to "python-gi | python-gobject"
28
(Package: mandos/Depends): - '' -
29
30
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
31
32
mandos (1.7.3-1) unstable; urgency=medium
33
34
* New upstream release.
35
36
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
37
38
mandos (1.7.2-1) unstable; urgency=medium
39
40
* New upstream release.
41
* Fix "Uses unneeded and obsolete version specific python packages"
42
by removing version-specific dependencies (Closes: #811159)
43
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
44
"libgnutls28-dev" and "gnutls-dev".
45
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
46
"python2.7", "python2.7-dbus", "python2.7-avahi", and
47
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
48
"python-dbus", "python-avahi", "python-gobject | python-gi".
49
(Package: mandos/Depends): Remove "python-gnutls" and
50
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
51
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
52
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
53
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
54
(<< 2)" with "gnupg".
55
(Package: mandos-client/Depends): Replace
56
"gnupg (<< 2)" with "gnupg".
57
(Source: mandos/Standards-Version): Change to 3.9.7.
58
* debian/copyright (Copyright): Update copyright year.
59
60
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
61
62
mandos (1.7.1-2) unstable; urgency=medium
63
64
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
65
dependency on initscripts package" by removing initscripts dependency
66
(Closes: #804967)
67
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
68
dpkg-buildpackage -A (No such file or directory)" by splitting into
69
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
70
(Closes: #806073)
71
72
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
73
74
mandos (1.7.1-1) unstable; urgency=medium
75
76
* New upstream release.
77
78
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
79
80
mandos (1.7.0-1) unstable; urgency=medium
81
82
* New upstream release.
83
* debian/control (Standards-Version): Updated to "3.9.6".
84
(Build-Depends): Add "libnl-route-3-dev".
85
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
86
the generating of DH parameters.
87
* debian/mandos-client.README.Debian: Update example command line to use
88
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
89
dhparams.pem file.
90
* debian/mandos-client.postinst: Create DH parameters file.
91
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
92
* debian/mandos-client.postinst: Don't use absolute paths to commands.
93
* debian/mandos-client.postrm: Don't use absolute paths to commands.
94
Also remove dhparams.pem file.
95
* debian/copyright (Copyright): Update copyright year.
96
* Upstream changed systemd service file to implicitly be of
97
"Type=dbus". (Closes: #786845)
98
99
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
100
101
mandos (1.6.9-1) unstable; urgency=medium
102
103
* New upstream release.
104
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
105
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
106
(Closes: #762349)
107
108
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
109
110
mandos (1.6.8-1) unstable; urgency=medium
111
112
* New upstream release.
113
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
114
now requires Python 2.7, depend on exactly the python2.7 package and
115
all the Python 2.7 versions of the python modules.
116
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
117
and the generic versions of the Python modules; this is for mandos-ctl
118
and mandos-monitor, both of which are compatible with Python 3, and
119
use #!/usr/bin/python.
120
121
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
122
123
mandos (1.6.7-1) unstable; urgency=medium
124
125
* New upstream release.
126
127
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
128
129
mandos (1.6.6-1) unstable; urgency=medium
130
131
* New upstream release.
132
* debian/mandos.postinst: Fix typo in comment.
133
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
134
(mandos-client/Recommends): New; set to "ssh".
135
136
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
137
138
mandos (1.6.5-3) unstable; urgency=medium
139
140
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
141
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
142
(Closes: #750221)
143
144
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
145
146
mandos (1.6.5-2) unstable; urgency=medium
147
148
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
149
FTBFS for build-indep.
150
151
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
152
153
mandos (1.6.5-1) unstable; urgency=medium
154
155
* New upstream release.
156
* debian/copyright: Change year to "2014".
157
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
158
dependencies of "mandos" package to "Build-Depends-Indep".
159
* debian/upstream/signing-key.asc: New; upstream source public key.
160
* debian/control (Standards-Version): Updated to "3.9.5".
161
* debian/control (mandos/Depends): Remove the dependency on
162
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
163
since we have a workaround in debian/mandos.postinst anyway.
164
165
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
166
167
mandos (1.6.4-1) unstable; urgency=medium
168
169
* New upstream release.
170
* debian/control (Build-Depends): Add Python dependencies to
171
successfully run self-tests.
172
* debian/copyright: GPLv3 now has its own license file - use it.
173
* debian/watch: Set PGP signature URL.
174
175
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
176
177
mandos (1.6.3-1) unstable; urgency=low
178
179
* New upstream release.
180
* debian/control (Build-Depends): Added "systemd".
181
* debian/mandos.dirs (lib/systemd/system): New.
182
* debian/mandos-client.README.Debian: Refer to architecture libdir.
183
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
184
systemd-sysv".
185
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
186
edit /etc/init.d script headers Required-Start
187
and Required-Stop to have "avahi" instead of
188
"avahi-daemon", before insserv(8) sees it.
189
* debian/mandos-client.lintian-overrides: Libdir changes.
190
* debian/rules (override_dh_fixperms): - '' -
191
192
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
193
194
mandos (1.6.2-1) unstable; urgency=low
195
196
* New upstream release.
197
* debian/compat: Changed to "9".
198
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
199
(Standards-Version): Updated to "3.9.4".
200
(DM-Upload-Allowed): Removed.
201
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
202
use the "/run" directory (for mandos.pid).
203
* debian/copyright (Copyright): Update year.
204
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
205
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
206
207
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
208
209
mandos (1.6.1-1) unstable; urgency=low
210
211
* New upstream release.
212
* debian/control (mandos/Depends): No longer depends on
213
python-gnupginterface, but does
214
depend on gnupg (<< 2).
215
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
216
and "override-*-indep" targets in debian/rules.
217
* debian/mandos-client.README: Update Linux documentation link.
218
* debian/rules: Completely rewritten to use debhelper v7.
219
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
220
copied into the initramfs image. Always assume that GPGME is used to
221
avoid searching for it since the path might not be /usr/lib. Thanks
222
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
223
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
224
debugging. (Closes: #721903)
225
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
226
227
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
228
229
mandos (1.6.0-1) unstable; urgency=low
230
231
* New upstream release.
232
* debian/copyright (Copyright): Join the two lines to a single line.
233
* debian/mandos-client.README.Debian: Update to refer to the new
234
location of the example network hooks, and the new feature of using
235
all network interfaces.
236
* debian/mandos-client.docs (network-hooks.d): Removed.
237
* debian/mandos-client.examples (network-hooks.d): New.
238
* debian/rules (binary-common): Added "dh_installexamples".
239
(binary-common/dh_fixperms): Exclude new location of
240
"network-hooks.d".
241
242
-- Teddy Hogeborn <teddy@recompile.se> Mon, 18 Jun 2012 00:15:23 +0200
243
244
mandos (1.5.5-1) unstable; urgency=low
245
246
* New upstream release.
247
* debian/copyright (Format): Updated to
248
"http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/".
249
* debian/control (Build-Depends): Removed "man, locales-all".
250
251
-- Teddy Hogeborn <teddy@recompile.se> Fri, 01 Jun 2012 20:30:41 +0200
252
253
mandos (1.5.4-1) unstable; urgency=low
254
255
* New upstream release.
256
257
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 May 2012 15:38:34 +0200
258
259
mandos (1.5.3-1.2) unstable; urgency=low
260
261
* Non-maintainer upload.
262
* Set Architecture to linux-any. (Closes: #647670)
263
264
-- Robert Millan <rmh@debian.org> Sun, 22 Apr 2012 16:22:01 +0200
265
266
mandos (1.5.3-1.1) unstable; urgency=low
267
268
* Non-maintainer upload.
269
* Fix "mandos FTBFS on buildds": add build-dependency on locales-all and
270
pass LC_ALL to dh_auto_build to make sure we have and use the en_US.UTF-8
271
locale for manpage creation.
272
(Closes: #656178)
273
274
-- gregor herrmann <gregoa@debian.org> Tue, 31 Jan 2012 17:56:05 +0100
275
276
mandos (1.5.3-1) unstable; urgency=low
277
278
* New upstream release.
279
280
-- Teddy Hogeborn <teddy@recompile.se> Sun, 15 Jan 2012 22:05:54 +0100
281
282
mandos (1.5.2-1) unstable; urgency=low
283
284
* New upstream release.
285
286
-- Teddy Hogeborn <teddy@recompile.se> Sun, 08 Jan 2012 11:17:20 +0100
287
288
mandos (1.5.1-1) unstable; urgency=low
289
290
* New upstream release.
291
292
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 21:53:31 +0100
293
294
mandos (1.5.0-1) unstable; urgency=low
295
296
* New upstream release.
297
* debian/control (mandos-client/Depends): Added "initramfs-tools".
298
* debian/mandos-client.README.Debian: Corrected mail address and adjust
299
wording.
300
* debian/rules (binary-common): Exclude new nework-hooks.d directory
301
from dh_fixperms.
302
* debian/mandos-client.README.Debian: Document network hook facility.
303
* debian/mandos-client.docs (network-hooks.d): Added.
304
* debian/mandos.dirs (var/lib/mandos): Added.
305
* debian/mandos.postinst: Fix ownership of /var/lib/mandos.
306
* debian/control (mandos/Depends): Added "python-gnupginterface".
307
308
-- Teddy Hogeborn <teddy@recompile.se> Sun, 01 Jan 2012 05:58:11 +0100
309
310
mandos (1.4.1-1) unstable; urgency=low
311
312
* New upstream release.
313
* debian/control (Build-Depends): Added "man".
314
* debian/control (Conflicts): Changed to "Breaks:".
315
* debian/copyright: Updated format.
316
* debian/mandos-client.postinst: Use "set -e" instead of "#!/bin/sh -e".
317
* debian/mandos-client.postrm: - '' -
318
* debian/mandos.postinst: - '' -
319
* debian/mandos.prerm: Consistent magic.
320
321
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 15 Oct 2011 18:18:52 +0200
322
323
mandos (1.4.0-1) unstable; urgency=low
324
325
* New upstream release.
326
* Fix "FTBFS with binutils-gold": Added "-Xlinker --as-needed" to
327
LDFLAGS in Makefile. (Closes: #632145)
328
* Fix "/run transition: uses obsolete /dev/.initramfs": Try both old and
329
new PID file locations. (Closes: #643554)
330
* debian/source/local-options: New; contains "--single-debian-patch".
331
* debian/control (Standards-Version): Upgraded to "3.9.2".
332
(DM-Upload-Allowed): New; set to "yes".
333
* debian/control: Changed domain from "fukt.bsnet.se" to "recompile.se".
334
* debian/copyright: - '' -
335
* debian/mandos-client.README.Debian: - '' -
336
* debian/mandos.README.Debian: - '' -
337
* debian/watch: - '' -
338
* debian/control (mandos/Description): Fix language to placate lintian.
339
340
-- Teddy Hogeborn <teddy@recompile.se> Sun, 09 Oct 2011 19:15:08 +0200
341
342
mandos (1.3.1-1) unstable; urgency=low
343
344
* New upstream release.
345
* Conflict with correct version of dropbear.
346
* New version uses argparse; depend on python (<=2.7) | python-argparse.
347
348
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Wed, 27 Jul 2011 19:47:17 +0200
349
350
mandos (1.3.0-1) unstable; urgency=low
351
352
* New upstream release.
353
* debian/control (mandos): Depend on Python 2.6, remove dependency on
354
python-multiprocessing.
355
(mandos-client): Conflict with dropbear (<< 0.52-5).
356
* debian/mandos-client.postrm (purge): Bug fix: update initramfs also on
357
purge.
358
* debian/mandos-client.lintian-overrides: Added plugins.d/plymouth.
359
360
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 08 Mar 2011 20:22:57 +0100
361
362
mandos (1.2.3-1) experimental; urgency=low
363
364
* New upstream release.
365
366
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Mon, 11 Oct 2010 19:37:31 +0200
367
368
mandos (1.2.2-1) experimental; urgency=low
369
370
* New upstream release.
371
* plugins.d/splashy.c: Only use ELIBBAD if defined. (Closes: #599256)
372
373
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 07 Oct 2010 20:27:54 +0200
374
375
mandos (1.2.1-3) experimental; urgency=low
376
377
* debian/changelog: Include entry for NMU of version 1.0.14-1.1.
378
379
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 05 Oct 2010 20:58:38 +0200
380
381
mandos (1.2.1-2) unstable; urgency=low
382
383
* debian/source/format: New; contains "3.0 (quilt)". Really.
384
385
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 02 Oct 2010 19:46:59 +0200
386
387
mandos (1.2.1-1) unstable; urgency=low
388
389
* New upstream release.
390
* debian/source/format: New; contains "3.0 (quilt)".
391
392
-- Björn Påhlsson <belorn@fukt.bsnet.se> Sat, 02 Oct 2010 19:03:58 +0200
393
394
mandos (1.2-1) unstable; urgency=low
395
396
* New upstream release.
397
* Makefile (LINK_FORTIFY_LD): Remove "-fPIE". (Closes: #557076)
398
* debian/control: Add gnupg dependency to "mandos-client" and removed it
399
from "mandos". Added dependency on "python-urwid" "mandos" since the
400
new "mandos-monitor" utility needs it, and on "python (>=2.6) |
401
python-multiprocessing" since the Mandos server now uses it.
402
* debian/rules: Set BROKEN_PIE on mips and mipsel if a known buggy
403
version of binutils is used.
404
* debian/mandos.docs: Also install "/usr/share/doc/mandos/DBUS-API".
405
* debian/mandos.dirs: Added "etc/dbus-1/system.d".
406
* debian/mandos-client.README.Debian: Update info about DEVICE setting
407
of initramfs.conf.
408
* debian/mandos-client.README.Debian: Remove warning about --connect not
409
looping, since it now does.
410
411
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Tue, 28 Sep 2010 20:46:11 +0200
412
413
mandos (1.0.14-1.1) unstable; urgency=low
414
415
* Non-maintainer upload.
416
* Rebuild against libavahi-core-dev (>= 0.6.26-1).
417
418
-- Michael Biebl <biebl@debian.org> Mon, 12 Jul 2010 16:34:34 +0200
419
420
mandos (1.0.14-1) unstable; urgency=low (HIGH on mips and mipsel)
421
422
* New upstream release.
423
* debian/rules: Build with BROKEN_PIE set on mips and mipsel
424
architectures - fixes FTBFS there.
425
426
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 25 Oct 2009 20:10:09 +0100
427
428
mandos (1.0.13-1) unstable; urgency=high
429
430
* New upstream release.
431
* Do not copy unnecessary files to initrd (Closes: #551907)
432
433
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 22 Oct 2009 00:53:21 +0200
434
435
mandos (1.0.12-1) unstable; urgency=low
436
437
* New upstream release.
438
* init.d-mandos: Correct dependencies (Closes: #546928)
439
* debian/control (Standards-Version): Changed to "3.8.3".
440
* debian/mandos-client.README.Debian: Improved wording and formatting.
441
Updated location of nfsroot.txt.
442
* debian/mandos.README.Debian: Improved wording and formatting.
443
* debian/mandos-client.postinst (configure): Don't look for user and
444
group with the old name if upgrading from a new enough version.
445
* debian/mandos.postinst (configure): - '' -
446
* debian/mandos-client.README.Debian: Added text about non-usability of
447
pseudo-network interfaces.
448
449
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Thu, 17 Sep 2009 15:03:59 +0200
450
451
mandos (1.0.11-1) unstable; urgency=low
452
453
* debian/control (Standards-Version): Changed to "3.8.1".
454
* Makefile (GNUTLS_CFLAGS, GNUTLS_CFLAGS): Use "pkg-config" instead of
455
the old "libgnutls-config" script. (Closes: #529836)
456
457
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sat, 23 May 2009 07:12:20 +0200
458
459
mandos (1.0.10-1) unstable; urgency=low
460
461
* New upstream release.
462
* debian/mandos-client.postinst (update_initramfs): Fix permissions of
463
old initrd.img-*.bak files.
464
465
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 17 May 2009 04:56:35 +0200
466
467
mandos (1.0.9-1) unstable; urgency=low
468
469
* New upstream release.
470
471
-- Teddy Hogeborn <teddy@fukt.bsnet.se> Sun, 17 May 2009 02:59:45 +0200
472
1
473
mandos (1.0.8-1) unstable; urgency=low
2
474
3
475
* New upstream release.
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0