[Pkg-samba-maint] [Git][samba-team/samba][master] 11 commits: d/rules: install pam.d/samba with mode 0644, not 0755
Michael Tokarev (@mjt)
gitlab at salsa.debian.org
Wed Oct 26 20:50:02 BST 2022
Michael Tokarev pushed to branch master at Debian Samba Team / samba
Commits:
e1b48965 by Michael Tokarev at 2022-10-26T21:17:21+03:00
d/rules: install pam.d/samba with mode 0644, not 0755
- - - - -
3bd08ed7 by Michael Tokarev at 2022-10-26T21:34:15+03:00
d/source/lintian-overrides: ctdb/doc/*.html actually has sources
- - - - -
7cffc007 by Michael Tokarev at 2022-10-26T21:34:20+03:00
d/source/lintian-overrides: very-long-line-length-in-source-file *
- - - - -
d207aadc by Michael Tokarev at 2022-10-26T21:56:58+03:00
d/*.lintian-overrides: update some overrides for new lintian
- - - - -
f4891f0f by Michael Tokarev at 2022-10-26T21:57:14+03:00
d/libpam-winbind.lintian-overrides: +spare-manual-page pam_winbind.8
- - - - -
fba998ee by Michael Tokarev at 2022-10-26T21:57:14+03:00
move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz to winbind
- - - - -
52e8ac77 by Michael Tokarev at 2022-10-26T22:46:56+03:00
d/winbind.lintian-overrides: +spare-manual-page winbind_krb5_locator.8
- - - - -
d22d7147 by Michael Tokarev at 2022-10-26T22:46:59+03:00
d/libldb2.lintian-overrides: +package-contains-empty-directory .../ldb/modules/ldb/
- - - - -
b9515e54 by Michael Tokarev at 2022-10-26T22:46:59+03:00
d/source/lintian-overrides: +debian-control-has-unusual-field-spacing Breaks
- - - - -
e40fdc39 by Michael Tokarev at 2022-10-26T22:47:13+03:00
d/*.lintian-overrides: +hardening-no-fortify-functions for some simple shared libs
- - - - -
dcf3cc45 by Michael Tokarev at 2022-10-26T22:48:59+03:00
update changelog; upload 4.16.6+dfsg-5 to unstable
- - - - -
19 changed files:
- debian/changelog
- debian/control
- debian/libldb2.lintian-overrides
- + debian/libpam-winbind.lintian-overrides
- − debian/libwbclient0.lintian-overrides
- debian/python3-ldb-dev.lintian-overrides
- debian/python3-ldb.lintian-overrides
- debian/python3-samba.lintian-overrides
- debian/rules
- debian/samba-common-bin.lintian-override
- debian/samba-libs.install
- debian/samba-libs.lintian-overrides
- debian/samba-vfs-modules.lintian-overrides
- debian/samba.install
- debian/samba.lintian-overrides
- debian/smbclient.lintian-overrides
- + debian/source/lintian-overrides
- debian/winbind.install
- debian/winbind.lintian-overrides
Changes:
=====================================
debian/changelog
=====================================
@@ -1,3 +1,21 @@
+samba (2:4.16.6+dfsg-5) unstable; urgency=medium
+
+ * move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz manpages to
+ winbind package where they belong and where actual idmap modules lives.
+ (install all idmap_*.8 manpages to winbind package)
+ * d/rules: install pam.d/samba with mode 0644, not 0755
+ * many lintian-override updates:
+ - source: ctdb/doc/*.html actually has sources
+ - source: +very-long-line-length-in-source-file * (for generated files)
+ - source: +debian-control-has-unusual-field-spacing Breaks
+ - winbind: +spare-manual-page for module manpages
+ - *: update some overrides for new lintian
+ - libpam-winbind: +spare-manual-page pam_winbind.8
+ - libldb2: +package-contains-empty-directory .../ldb/modules/ldb/
+ - *: +hardening-no-fortify-functions for some simple shared libs
+
+ -- Michael Tokarev <mjt at tls.msk.ru> Wed, 26 Oct 2022 22:27:00 +0300
+
samba (2:4.16.6+dfsg-4) unstable; urgency=medium
* poptGetArg-misuse-fixes-1022826.diff: fix poptGetArg() misuse
=====================================
debian/control
=====================================
@@ -354,6 +354,9 @@ Depends: lsb-base (>= 3.0-6),
${shlibs:Depends}
Enhances: libkrb5-26-heimdal
Suggests: libnss-winbind, libpam-winbind
+# 4.16.6+dfsg-5 idmap_{script,rfc2307}.8 moved samba{,-libs} => winbind
+Breaks: samba (<< 2:4.16.6+dfsg-5~), samba-libs (<< 2:4.16.6+dfsg-5~),
+Replaces: samba (<< 2:4.16.6+dfsg-5~), samba-libs (<< 2:4.16.6+dfsg-5~),
Description: service to resolve user and group information from Windows NT servers
Samba is an implementation of the SMB/CIFS protocol for Unix systems,
providing support for cross-platform file sharing with Microsoft Windows, OS X,
=====================================
debian/libldb2.lintian-overrides
=====================================
@@ -1,2 +1,3 @@
-libldb2: shared-library-lacks-prerequisites usr/lib/x86_64-linux-gnu/samba/*.so.0
-libldb2: repeated-path-segment ldb usr/lib/x86_64-linux-gnu/ldb/modules/ldb/
+libldb2: shared-library-lacks-prerequisites */samba/lib*.so.0*
+libldb2: repeated-path-segment ldb */ldb/modules/ldb/*
+libldb2: package-contains-empty-directory */ldb/modules/ldb/*
=====================================
debian/libpam-winbind.lintian-overrides
=====================================
@@ -0,0 +1 @@
+libpam-winbind: spare-manual-page */man/man8/pam_winbind.8*
=====================================
debian/libwbclient0.lintian-overrides deleted
=====================================
@@ -1 +0,0 @@
-libwbclient0: library-not-linked-against-libc usr/lib/x86_64-linux-gnu/samba/libgenrand-samba4.so.0
=====================================
debian/python3-ldb-dev.lintian-overrides
=====================================
@@ -1,2 +1,2 @@
# This is actually a -dev package
-python3-ldb-dev: wrong-section-according-to-package-name python3-ldb-dev => python
+python3-ldb-dev: wrong-section-according-to-package-name * => python
=====================================
debian/python3-ldb.lintian-overrides
=====================================
@@ -1,3 +1,2 @@
python3-ldb: package-name-doesnt-match-sonames libpyldb-util.cpython-*
-python3-ldb: library-not-linked-against-libc usr/lib/*/libpyldb-util.*.so.*
-python3-ldb: no-symbols-control-file usr/lib/*/libpyldb-util.*.so.*
+python3-ldb: library-not-linked-against-libc */libpyldb-util.*.so.*
=====================================
debian/python3-samba.lintian-overrides
=====================================
@@ -1,5 +1,6 @@
# False positives, see #896012
python3-samba: library-not-linked-against-libc *
python3-samba: package-name-doesnt-match-sonames libsamba-policy.cpython-*0
-python3-samba: shared-library-lacks-prerequisites usr/lib/python3/dist-packages/samba/*.so
+python3-samba: shared-library-lacks-prerequisites */samba/*.cpython*.so*
python3-samba: no-symbols-control-file usr/lib/*/libsamba-policy.*.so.*
+python3-samba: hardening-no-fortify-functions */libsamba-policy.cpython*.so.*
=====================================
debian/rules
=====================================
@@ -241,7 +241,7 @@ endif
install -Dp -m0644 debian/gdbcommands -t debian/samba-common/etc/samba/
install -Dp -m0755 debian/samba-common.dhcp debian/samba-common/etc/dhcp/dhclient-enter-hooks.d/samba
# we wrongly have pam file in samba-common instead of samba
- install -Dp -m0755 debian/samba.pam debian/samba-common/etc/pam.d/samba
+ install -Dp -m0644 debian/samba.pam debian/samba-common/etc/pam.d/samba
override_dh_installpam:
=====================================
debian/samba-common-bin.lintian-override
=====================================
@@ -1,2 +1,2 @@
# deliberate, a synonym for misspelled parameter
-samba-common-bin: typo-in-manual-page usr/share/man/man5/smb.conf.5.gz line * prefered preferred
+samba-common-bin: typo-in-manual-page prefered preferred */man/man5/smb.conf.5*
=====================================
debian/samba-libs.install
=====================================
@@ -125,4 +125,3 @@ usr/lib/*/samba/libutil-tdb-samba4.so.0
usr/lib/*/samba/libwind-samba4.so.0
usr/lib/*/samba/libxattr-tdb-samba4.so.0
usr/lib/*/samba/process_model/*.so
-usr/share/man/man8/idmap_rfc2307.8
=====================================
debian/samba-libs.lintian-overrides
=====================================
@@ -3,19 +3,24 @@
# result in circular dependencies
samba-libs: package-name-doesnt-match-sonames libdcerpc-binding0 libdcerpc-samr0 libdcerpc-server-core0 libdcerpc-server0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr2 libnetapi1 libsamba-credentials1 libsamba-errors1 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbconf0 libsmbldap2 libtevent-util0
# Embedded Heimdal is patched
-samba-libs: embedded-library heimdal usr/lib/*/samba/libgssapi-samba4.so.0
+samba-libs: embedded-library heimdal */samba/libgssapi-samba4.so.0*
# False positives, see #896012
samba-libs: library-not-linked-against-libc *
-samba-libs: shared-library-lacks-prerequisites usr/lib/*/libdcerpc-samr.so.*
+samba-libs: shared-library-lacks-prerequisites */libdcerpc-samr.so.*
# unofficial APIs
-samba-libs: no-symbols-control-file usr/lib/*/libdcerpc*.so.*
-samba-libs: no-symbols-control-file usr/lib/*/libndr*.so.*
-samba-libs: no-symbols-control-file usr/lib/*/libnetapi.so.*
-samba-libs: no-symbols-control-file usr/lib/*/libsamba-*.so*
-samba-libs: no-symbols-control-file usr/lib/*/libsamdb.so.*
-samba-libs: no-symbols-control-file usr/lib/*/libsmbconf.so.*
+samba-libs: no-symbols-control-file */libsamba-*.so*
+samba-libs: no-symbols-control-file */libdcerpc*.so.*
+samba-libs: no-symbols-control-file */libndr*.so.*
+samba-libs: no-symbols-control-file */libnetapi.so.*
+samba-libs: no-symbols-control-file */libsamdb.so.*
+samba-libs: no-symbols-control-file */libsmbconf.so.*
# FIXME: libsmbldap actually has ABI file
-#samba-libs: no-symbols-control-file usr/lib/*/libsmbldap.so.*
+#samba-libs: no-symbols-control-file */libsmbldap.so.*
samba-libs: no-symbols-control-file usr/lib/*/libtevent-util.so.*
# deliberate, a synonym for misspelled parameter
-samba-libs: spelling-error-in-binary usr/lib/*/libsamba-hostconfig.so.* prefered preferred
+samba-libs: spelling-error-in-binary prefered preferred */libsamba-hostconfig.so.*
+# simple libs:
+samba-libs: hardening-no-fortify-functions */samba/libauth-samba4.so.*
+samba-libs: hardening-no-fortify-functions */samba/libcli-ldap-samba4.so.*
+samba-libs: hardening-no-fortify-functions */samba/libsmb-transport-samba4.so.*
+samba-libs: hardening-no-fortify-functions */samba/libsys-rw-samba4.so.*
=====================================
debian/samba-vfs-modules.lintian-overrides
=====================================
@@ -1,6 +1,8 @@
# False positives, see #896012
samba-vfs-modules: library-not-linked-against-libc *
# manpages describing vfs modules:
-samba-vfs-modules: spare-manual-page usr/share/man/man8/vfs_*.8.gz
-# this is intentional: it was a typo in old config parser so we allow old config to work
-samba-vfs-modules: spelling-error-in-binary usr/lib/*/samba/vfs/fruit.so ressource resource
+samba-vfs-modules: spare-manual-page */man/man8/vfs_*
+# intentional: was a typo in old config parser so we allow old config to work:
+samba-vfs-modules: spelling-error-in-binary ressource resource */vfs/fruit.so*
+samba-vfs-modules: hardening-no-fortify-functions */samba/vfs/expand_msdfs.so*
+samba-vfs-modules: hardening-no-fortify-functions */samba/vfs/fileid.so*
=====================================
debian/samba.install
=====================================
@@ -36,7 +36,6 @@ usr/share/man/man1/sharesec.1
usr/share/man/man1/smbcontrol.1
usr/share/man/man1/smbstatus.1
usr/share/man/man8/eventlogadm.8
-usr/share/man/man8/idmap_script.8
usr/share/man/man8/nmbd.8
usr/share/man/man8/pdbedit.8
usr/share/man/man8/samba-bgqd.8
=====================================
debian/samba.lintian-overrides
=====================================
@@ -1,2 +1,3 @@
# Standard path for [printers] section is world-writeable with sticky bit set
samba: non-standard-dir-perm var/spool/samba/ 1777 != 0755
+samba: hardening-no-fortify-functions */samba/libmscat-samba4.so.*
=====================================
debian/smbclient.lintian-overrides
=====================================
@@ -1,3 +1,4 @@
# As per CUPS's backend(7): "Backends without world read and execute permissions are run as the root usert"
# See also smbspool_krb5_wrapper(8) manpage
-smbclient: non-standard-executable-perm usr/libexec/samba/smbspool_krb5_wrapper 0700 != 0755
+smbclient: non-standard-executable-perm 0700 != 0755 [usr/libexec/samba/smbspool_krb5_wrapper]
+smbclient: executable-is-not-world-readable 0700 [usr/libexec/samba/smbspool_krb5_wrapper]
=====================================
debian/source/lintian-overrides
=====================================
@@ -0,0 +1,6 @@
+# the source is in *.xml
+samba source: source-is-missing [ctdb/doc/*.html]
+# there are many generated files with long lines in source
+samba source: very-long-line-length-in-source-file *
+# d/control has Breaks: aligned with Replaces: values:
+samba source: debian-control-has-unusual-field-spacing Breaks [debian/control:*]
=====================================
debian/winbind.install
=====================================
@@ -14,13 +14,6 @@ usr/lib/*/samba/nss_info/sfu20.so
usr/sbin/winbindd
usr/share/man/man1/ntlm_auth.1
usr/share/man/man1/wbinfo.1
-usr/share/man/man8/idmap_ad.8
-usr/share/man/man8/idmap_autorid.8
-usr/share/man/man8/idmap_hash.8
-usr/share/man/man8/idmap_ldap.8
-usr/share/man/man8/idmap_nss.8
-usr/share/man/man8/idmap_rid.8
-usr/share/man/man8/idmap_tdb.8
-usr/share/man/man8/idmap_tdb2.8
+usr/share/man/man8/idmap_*.8
usr/share/man/man8/winbind_krb5_locator.8
usr/share/man/man8/winbindd.8
=====================================
debian/winbind.lintian-overrides
=====================================
@@ -1,2 +1,7 @@
# manpages for idmap modules:
-winbind: spare-manual-page usr/share/man/man8/idmap_*.8.gz
+winbind: spare-manual-page */man/man8/idmap_*
+# more modules:
+winbind: spare-manual-page */man/man8/winbind_krb5_locator.8*
+winbind: hardening-no-fortify-functions */samba/idmap/hash.so*
+winbind: hardening-no-fortify-functions */samba/idmap/tdb2.so*
+winbind: hardening-no-fortify-functions */samba/nss_info/hash.so*
View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/2bd73416bb1d5ba03d4c36d3b321aca1daa0e46e...dcf3cc4585d1cfcb05acd6481311d33cf3678424
--
View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/2bd73416bb1d5ba03d4c36d3b321aca1daa0e46e...dcf3cc4585d1cfcb05acd6481311d33cf3678424
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20221026/1e4a2390/attachment-0001.htm>
More information about the Pkg-samba-maint
mailing list