debian-edu-config_2.12.16_source.changes ACCEPTED into unstable
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Feb 2022 13:06:25 +0100
Source: debian-edu-config
Architecture: source
Version: 2.12.16
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 613167 815042 971780 1003560 1003727 1004605 1004949
Changes:
debian-edu-config (2.12.16) unstable; urgency=medium
.
[ Wolfgang Schweer ]
* etc/exim4/exim-ldap-server-v4.conf: Accept incoming mail from internal
network sent to root@<mynetwork-names>. (Closes: #1003727).
.
[ Mike Gabriel ]
* share/glib-2.0/schemas/31_debian-edu+mate.gschema.override: Add various
long-term-used MATE settings overrides (some from Ubuntu MATE).
* MATE screensaver: Offer "logout user" button on screensaver dialog after
40min of inactivity and allow other users to salvage a workstation from
an idle user (session).
* share/debian-edu-config/tools/setup-freeradius-server: Fix integer
comparison in run-by-root check. Script was not executable fully (not even
as root).
* etc/apache2/mods-available/debian-edu-userdir.conf:
- White-space cleanup (tabs and spaces mixed).
- CVE-2021-20001: Disable built-in PHP engine.
- Add warning to not re-enable PHP interpretation in user dirs (with
reference to our README).
* README.public_html_with_PHP-CGI+suExec.md:
- Provide documentation on how to enable suExec support in Apache2 userdirs
(i.e. ~/public_html).
* debian/NEWS:
+ Add file, inform about PHP being disabled in Apache2 user directories.
* debian/debian-edu-config.fetch-ldap-cert: Drop retrieval of
Debian-Edu_rootCA from this script. This now is the task of the
fetch-rootca-cert script. (Closes: #971780).
* debian/debian-edu-config.fetch-rootca-cert: Ensure proper symlinking of
Debian-Edu_rootCA.crt in /usr/local/share/ca-certificates/ to
Debian-Edu_rootCA.crt in /etc/ssl/ca-certificates. Forced symlinking is
required, because earlier versions of the fetch-ldap-cert init script put
Debian-Edu_rootCA.crt into /etc/ssl/ca-certificates/ as a file. Forced
symlinking replaces files by the wanted symlink. The -n option (no-
dereference) is required to make sure we don't follow any already existing
symlink. (This relates to #971780).
* Support krb5i on Diskless Workstations (aka LTSP FAT Clients):
- ldap-bootstrap/netgroup.ldif: Add diskless-workstation-hosts NIS netgroup
during LDAP bootstrap.
- debian/debian-edu-config.{postinst,postrm}: Create non-privileged
debian-edu system user account on Debian Edu mainserver (for distribution
of host keytabs to diskless workstations aka LTSP fat clients).
- share/debian-edu-config/tools/: Add new update-dlw-krb5-keytabs script and
call it (with delay) from gosa-modify-host and gosa-remove-host hook
scripts.
- (Closes: #613167).
* debian/control:
+ Add D: adduser.
* share/debian-edu-config/tools/update-proxy-from-wpad:
- Fix typo (wrong protocol) in APT proxy config creation.
- Create a Debian Edu specific proxy configuration in /etc/apt/apt.conf.d/
named 03debian-edu-config rather than meddling with /etc/apt/apt.conf
directly. Clean up any earlier meddling from apt.conf, as well. (Closes:
#1003560).
* share/debian-edu-config/tools/setup-roaming: Assure libsss-sudo is installed
on Roaming Workstation. (Closes: #1004605).
* share/debian-edu-config/tools/gosa-remove: Capture removals of GOsa² user
templates and ignore them. (Closes: #815042).
* ldap-schemas/: Update schema files from Debian's latest GOsa² list of
schemas. (Closes: #1004949).
* debian/debian-edu-config.postinst:
+ Replace calling 'service' by calling 'invoke-rc.d'. Thanks, lintian.
* debian/debian-edu-config.lintian-overrides:
+ Adjust line number references in lintian overrides.
Checksums-Sha1:
6ed120541428866a14733a5ac2a5c58500c9e3cc 2055 debian-edu-config_2.12.16.dsc
d080c10d9261cd18837f2c19cd61d5f7fa451a58 351112 debian-edu-config_2.12.16.tar.xz
b56416142a84f156688288f541ce963e8bc5e96b 6154 debian-edu-config_2.12.16_source.buildinfo
Checksums-Sha256:
899766505c5b371dbbe6df4be66e049fd6ea4aa6eeed1602a3ca8c035543fcb1 2055 debian-edu-config_2.12.16.dsc
6272b2cae49fbba1861183e720a7fe403a06ce48745637cecf9ad2f4ccf42780 351112 debian-edu-config_2.12.16.tar.xz
768846b410f2f2de480ea4b62b2fc9341a5bf03dff0b69ce73f0f928ae7bc604 6154 debian-edu-config_2.12.16_source.buildinfo
Files:
9df213918d9c2076626573941c46126c 2055 misc optional debian-edu-config_2.12.16.dsc
94409d0d282285832f1e3e53897288e7 351112 misc optional debian-edu-config_2.12.16.tar.xz
0590af982bfb07a63592b0d03822f71c 6154 misc optional debian-edu-config_2.12.16_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=vphn
-----END PGP SIGNATURE-----
Thank you for your contribution to Debian.
Reply to: