Bug#991602: unblock: freeradius/3.0.21+dfsg-2.2
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package freeradius
[ Reason ]
freeradius-ldap fails to install if freeradius is stopped (#991561).
[ Impact ]
Upgrading with a stopped freeradius breaks.
[ Tests ]
None.
[ Risks ]
This only changes the postinst to ignore if the restart fails, I don't
see a risk.
[ Checklist ]
[X] all changes are documented in the d/changelog
[X] I reviewed all changes and I approve them
[X] attach debdiff against the package in testing
[ Other info ]
This includes the changes already acked in #991432, they almost made
it to testing.. :)
unblock freeradius/3.0.21+dfsg-2.2
diff --git a/debian/changelog b/debian/changelog
index 53910a5..fed7e9f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,20 @@
+freeradius (3.0.21+dfsg-2.2) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Don't fail postinst if daemon is not running (Closes: #991561, #932113)
+
+ -- Jochen Sprickerhof <jspricke@debian.org> Wed, 28 Jul 2021 12:28:32 +0200
+
+freeradius (3.0.21+dfsg-2.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Fix capabilities in service file.
+ As freeradius is not run as root we need to request extra capabilities
+ wiht AmbientCapabilities instead of limiting the set with
+ CapabilityBoundingSet. (Closes: #985967)
+
+ -- Jochen Sprickerhof <jspricke@debian.org> Fri, 23 Jul 2021 13:19:03 +0200
+
freeradius (3.0.21+dfsg-2) unstable; urgency=medium
* Cherry-Pick upstream fixes to build with Python3.8 (Closes: #966860)
diff --git a/debian/freeradius-dhcp.postinst b/debian/freeradius-dhcp.postinst
index af32395..b8f2c7c 100644
--- a/debian/freeradius-dhcp.postinst
+++ b/debian/freeradius-dhcp.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
if [ -z "$2" ]; then
for module in dhcp; do
diff --git a/debian/freeradius-iodbc.postinst b/debian/freeradius-iodbc.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-iodbc.postinst
+++ b/debian/freeradius-iodbc.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-krb5.postinst b/debian/freeradius-krb5.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-krb5.postinst
+++ b/debian/freeradius-krb5.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-ldap.postinst b/debian/freeradius-ldap.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-ldap.postinst
+++ b/debian/freeradius-ldap.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-memcached.postinst b/debian/freeradius-memcached.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-memcached.postinst
+++ b/debian/freeradius-memcached.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-mysql.postinst b/debian/freeradius-mysql.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-mysql.postinst
+++ b/debian/freeradius-mysql.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-postgresql.postinst b/debian/freeradius-postgresql.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-postgresql.postinst
+++ b/debian/freeradius-postgresql.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-python3.postinst b/debian/freeradius-python3.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-python3.postinst
+++ b/debian/freeradius-python3.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-redis.postinst b/debian/freeradius-redis.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-redis.postinst
+++ b/debian/freeradius-redis.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-rest.postinst b/debian/freeradius-rest.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-rest.postinst
+++ b/debian/freeradius-rest.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius-yubikey.postinst b/debian/freeradius-yubikey.postinst
index eacd565..6a7608d 100644
--- a/debian/freeradius-yubikey.postinst
+++ b/debian/freeradius-yubikey.postinst
@@ -5,7 +5,7 @@ set -e
case "$1" in
configure)
- invoke-rc.d freeradius force-reload
+ invoke-rc.d freeradius force-reload || true
;;
esac
diff --git a/debian/freeradius.service b/debian/freeradius.service
index 085a551..3e2f2fd 100644
--- a/debian/freeradius.service
+++ b/debian/freeradius.service
@@ -41,7 +41,7 @@ ExecReload=/bin/kill -HUP $MAINPID
NoNewPrivileges=true
# Allow binding to secure ports, broadcast addresses, and raw interfaces.
-#CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN CAP_DAC_OVERRIDE
+#AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN CAP_DAC_OVERRIDE
# Private /tmp that isn't shared by other processes
PrivateTmp=true
Reply to: