Accepted unbound 1.15.0-5 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 28 Apr 2022 19:15:23 +0300
Source: unbound
Architecture: source
Version: 1.15.0-5
Distribution: unstable
Urgency: medium
Maintainer: unbound packagers <unbound@packages.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Closes: 1010271
Changes:
unbound (1.15.0-5) unstable; urgency=medium
.
* use unix-domain socket /run/unbound.ctl for the control interface
instead of tcp localhost socket. This makes the keys/certs files
for the remote contol to be unnecessary, so stop running
unbound-control-setup in postinst too.
(Closes: #1010271)
* move remote-control section out of main unbound.conf file into
unbound.conf.d/remote-control.conf. Main file now becomes the
same as before version 1.15. There was no need to mess with the
main config file since the NEWS file already gives the user
enough information.
* do-not-chown-control-socket.patch: stop chowning control socket
to the unprivileged user, only group ownership is needed.
* do-not-look-at-pidfile.patch: stop messing up with the pidfile.
Unbound does not need to look at its pid file for the previous
instance, since it will not be able to open listening sockets
if the daemon is already running. Remove whole reading of the
pid file, and especially remove setting ownership of the pid file
to the unprivileged user (done in order to be able to clean it up),
since this is a potential security issue.
* unbound.postrm: stop removing the unbound system user
* fix wording and reformat the previous unbound.NEWS entry, and merge
old NEWS file into unbound.NEWS, since all news in there are actually
about the unbound package, not about all other binary packages we build.
* a few more tweaks for d/unbound-helper, in do_resolvconf_{start|stop}.
Thank you Simon Deziel for the ideas.
Checksums-Sha1:
3ad8db9bf9f2213c979051b50d09b01565c28a86 2774 unbound_1.15.0-5.dsc
cc1d2b4491945f4ca9fda5a75981ed3c738ee23b 26588 unbound_1.15.0-5.debian.tar.xz
21c296ae5784a0b4524aee9eae512009a618da5f 7669 unbound_1.15.0-5_source.buildinfo
Checksums-Sha256:
dcb0ad41f6a8b2d9b6375d2ec6bf3f3854819d5553352f3959029f3724bdabc0 2774 unbound_1.15.0-5.dsc
c19ea7123bda0ca50d9a2a9b91eddf5018fa94fcc6cb309d5adc8433ebd97d10 26588 unbound_1.15.0-5.debian.tar.xz
985d6578f8b1c2a8ffb358c2a261baf5feda35cf5cc641938f21194f63f2382b 7669 unbound_1.15.0-5_source.buildinfo
Files:
46042394d2703670ebd2228814d84599 2774 net optional unbound_1.15.0-5.dsc
b1d402f3cb62a9ef7414af23c502596b 26588 net optional unbound_1.15.0-5.debian.tar.xz
9c716d471aa1203d6430ea7a6b6f723a 7669 net optional unbound_1.15.0-5_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmJqvdQPHG1qdEB0bHMu
bXNrLnJ1AAoJEHAbT2saaT5ZimcH/1G5b91YUbpF079IDBI2k5845NLaHe2hSp1W
AnCFvrlwwz5eeUkUfXZtInv0uE7crrXxY/Jd35Qf0nCkeJUiBwSfZ3RZWoZvgtOr
f2GZ1DkGPpVDmL7g3gVcKKqfmzptE/kb7lP1f7+dK3frzPMzGeQWTrrZV2nnhBgj
NGVxO7h+AXrvxprWzHaR2p0lo3sOM+WRC3+Xn5A0VIgkLbtnrXrlYjkyNgBa6GGV
XA3+o74n3zEYX8PtLSREaHh2190XHt2HB0yyeDVQb2Y6vXd1oN1y6FjkZ/UPMBjQ
n5C28dAF7/S3uBpTPrpUGPEqnbhDYLfstt8tdA2o7UUt9a5os34=
=hMmV
-----END PGP SIGNATURE-----
Reply to: