core-agent-linux/debian/changelog

513 lines
19 KiB
Plaintext
Raw Normal View History

2015-06-23 20:06:23 +02:00
qubes-core-agent (3.0.12-1) wheezy; urgency=medium
* dom0-updates: make the tool working on Debian
* fedora, debian: make sure that default locale is generated
* rpm: improve setting iptables rules
* Do not override file pointed by /etc/localtime symlink
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 23 Jun 2015 20:06:22 +0200
2015-06-11 04:06:26 +02:00
qubes-core-agent (3.0.11-1) wheezy; urgency=medium
[ Marek Marczykowski-Górecki ]
* debian: fix apt sources.list generation (missing debian version
field)
[ Jason Mehring ]
* Set a default locale if missing
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 11 Jun 2015 04:06:26 +0200
2015-06-02 11:20:18 +02:00
qubes-core-agent (3.0.10-1) wheezy; urgency=medium
* rpm: ensure that all the services are enabled after upgrade
* qrexec: do not show message about missing fork-sever - it isn't an
error
* rpm: add missing dependencies
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 02 Jun 2015 11:20:18 +0200
2015-05-15 03:27:58 +02:00
qubes-core-agent (3.0.9-1) wheezy; urgency=medium
[ Jason Mehring ]
* debian: Only notify dom0 on apt-get post hook; don't update package
index
* debian: Allow apt-get post hook to fail gracefully (won't work in
chroot)
[ Marek Marczykowski-Górecki ]
* appmenus: hide message about missing /usr/local/share/applications
* qrexec: prefer VM-local service file (if present) over default one
* rpm: mark service files as configuration to not override user
changes
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 May 2015 03:27:58 +0200
2015-04-28 12:51:48 +02:00
qubes-core-agent (3.0.8-1) wheezy; urgency=medium
[ Marek Marczykowski-Górecki ]
* Use iptables --wait only when it is supported
[ Jason Mehring ]
* debian: Update notification now notifies dom0 when an upgrade is
completed
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 28 Apr 2015 12:51:48 +0200
2015-04-25 02:36:55 +02:00
qubes-core-agent (3.0.7-1) wheezy; urgency=medium
[ Marek Marczykowski-Górecki ]
* debian: install qubes-download-dom0-updates.sh
* prepare-dvm: fix bashism
* network: wait for iptables lock instead of aborting
* rpm: cleanup R2->R3.0 transitional package
[ Jason Mehring ]
* whonix: Added protected-files file used to prevent scripts from
modifying files that need to be protected
* Changed location of PROTECTED_FILE_LIST to /etc/qubes/protected-
files.d
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 25 Apr 2015 02:36:55 +0200
2015-04-11 03:40:57 +02:00
qubes-core-agent (3.0.6-1) wheezy; urgency=medium
* qrexec: do not reset umask to 077 for every started process
* rpm/systemd: do not use preset-all during package upgrade
* systemd: disable avahi-daemon and dnf-makecache
* dispvm: do not start GUI apps during prerun
* Fix resizing of /rw partition (private.img)
* Minor fixes in mount-home.sh
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 11 Apr 2015 03:40:57 +0200
2015-04-07 14:58:36 +02:00
qubes-core-agent (3.0.5-1) wheezy; urgency=medium
* systemd: use presets to enable services, call preset-all
* systemd: install overridden unit file for chronyd
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 07 Apr 2015 14:58:36 +0200
2015-04-02 00:55:09 +02:00
qubes-core-agent (3.0.4-1) wheezy; urgency=medium
[ Marek Marczykowski-Górecki ]
* qrexec: try to recover from fork-server communication error
* rpm: add missing BuildRequires: libX11-devel
* debian: fix handling SysV units in disableSystemdUnits
* debian: update NetworkManager configuration
[ Wojtek Porczyk ]
* qubes-rpc-multiplexer: deprecate /etc/qubes_rpc, allow /usr/local
* sudoers: do not require TTY
[ Marek Marczykowski-Górecki ]
* Update repository definition: r3 -> r3.0
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 02 Apr 2015 00:55:09 +0200
2015-03-27 01:24:43 +01:00
qubes-core-agent (3.0.3-1) wheezy; urgency=medium
* Enable updates repos by default
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 27 Mar 2015 01:24:43 +0100
2015-03-26 23:56:25 +01:00
qubes-core-agent (3.0.2-1) wheezy; urgency=medium
[ Marek Marczykowski-Górecki ]
* debian: fix version number
* backup: fix qubes.Restore service - do not send garbage as backup
data
[ Jason Mehring ]
* debian: Add extend-diff-ignore options to debian packager
[ Marek Marczykowski-Górecki ]
* qrexec: fork into background after setting up qrexec-fork-server
socket
* Fix "backup: fix qubes.Restore service - do not send garbage as
backup data"
[ Jason Mehring ]
* Switched qvm-move-to-vm.{gnome,kde} scripts to use bash not sh
* Removed nautilus-actions depend and replaced with nautilus-python
* Removed code that deleted original nautilus actions
[ Marek Marczykowski-Górecki ]
* fc21: fix DispVM preparation - Xorg has new name
* dispvm: kill all process after populating caches
* dispvm: start gui agent early, do not kill Xorg
* dispvm: close only visible windows during DispVM preparation
* Move mounting /rw and /home to separate service
* dispvm: use qubes.WaitForSession to wait for gui-agent startup
* dispvm: include memory caches in "used memory" notification
* dispvm: do not restart qubesdb-daemon, use watch instead
* qrexec: simplify makefile
* qrexec: handle data vchan directly from qrexec-client-vm
* qrexec: return remote process status as qrexec-client-vm exit code
* qrexec: better handle remote process termination
* qrexec: do not break connection on duplicated SIGUSR1
* qrexec: minor readability fix
* qrexec: process vchan data queue (esp MSG_EXIT_CODE) before sending
anything
* qrexec: add option to use real stdin/out of qrexec-client-vm
* qrexec: do not leak FDs to logger process
* qrexec: execute RPC service directly (without a shell) if it has
executable bit set
* qrexec: get rid of shell in services using EOF for any signaling
* qrexec: move qrexec-client-vm to /usr/bin
* Add support for comments in qubes-suspend-module-blacklist
* Create filesystem if the private.img is empty
* Provide stub files in /rw/config
* qrexec: fix compile warning
* qrexec: do not wait for local process if no one exists
* qrexec: enable compiler optimization
* Do not load xen-usbfront automatically
* fedora: override iptables configuration on initial installation
* Update comments and xenbus intf in startup scripts regarding vchan
requirements
* dom0-update: allow to specify custom yum action
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 26 Mar 2015 23:56:25 +0100
2015-02-17 16:25:01 +01:00
qubes-core-agent (3.0.1-1) jessie; urgency=medium
2015-02-17 14:14:16 +01:00
[ Marek Marczykowski-Górecki ]
* Reenable imsettings service
* systemd: fix xenstore-ls path
[ Jason Mehring ]
* Allow hyphenated distro names in tinyproxy filter
* Change condition test to compare to a link "-L"
* debian: add xen-utils-common as a dependancy to allow Debian proxies
* debian: Added maintainers scripts (pre / postinit + rm) - Currently
in debug mode
* debian: preinst needs a group and force no password entry on adduser
* debian: Added less restrictive filter option for debian packages
Sites like sourceforge append ?downloadxxx to end
* debian: added new depends
* debian: force shell to be bash since its default is dash and many
qubes scripts rely on bash and will break in dash and added
tinyproxy user
[ HW42 ]
* move fedora specific stuff to install-rh target
* don't track debina/files (since it is autogenerated)
* use systemd in debian
* install iptables/forwarding for debian
* various patches for debian
* improve update of /etc/hosts
* make source.list multiarch compatible
* add xserver-xorg-video-dummy to the dependencies list of qubes-core-
agent
* dispvm-presun.sh needs bash
* use sleep instead os usleep since it is more portable
* debian: chown /home_volatile/user in posinst
* fix xenstore-read path in network-proxy-setup.sh for debian
* debian: add dependency on xen-utils since it's needed for
proxy/netvm
* debian: add support for qubes appmenus
[ Marek Marczykowski-Górecki ]
* debian: fix initialization of /etc/hosts
[ Jason Mehring ]
* debian: set -e added in place of set -x
* debian: Made debian proxy filter rules more restrictive
* debian: Cleanup
* debian: Prepend package name to maintainers scripts
* debian: Add qubes-update-check for Debian
* debian: Revert back to original NetworkManager, ModemManager service
names
* debian: apt-get needs to update first
* debian: Remove absolute path to xenstore-*
* debian: Added more dependancies
* debian: Added postrm disable of other Qubes packages
* debian: Added all other outstanding triggers contained in rpm_spec
as well as triggers if other packages get installed at a later date
the configurations will run on them
* debian: removed commented out depends
* debian: Added more error reporting to track down any missing
dependancies
* debian: More depends for debian as netvm and some configuration
tweaks.
[ Marek Marczykowski-Górecki ]
* network: do not use ifcfg-rh NM plugin
* network: fix NM uplink config permissions
[ Jason Mehring ]
* debian: Add new notification agent depends; remove other
* debian: Added functionality to move desktop entry config files to
/usr/share/qubes/xdg/autostart to preserve originals
* debian: Wrong variable name was used to create
/usr/share/qubes/xdg/autostart
[ Marek Marczykowski-Górecki ]
* Fix compile flags order (-lX11 moved to the end)
[ Jason Mehring ]
* debian: Updated tinyproxy filter rules
* debian: Don't display systemd info in chroot since systemd show does
not work in chroot
[ Marek Marczykowski-Górecki ]
* network: fix indentation
* Fix disabling nm-applet when NM is disabled
* debian: create tinyproxy as system user
* debian: fix generation of apt sources list file
* debian: add missing python-gi to dependencies
* debian: remove obsolete code from postinst script
* debian: fix service name in postinst script
* Update update-proxy rules for debian security fixes repo
[ HW42 ]
* debian: move not strictly required packages to Recommends-Section.
* debian: remove unneeded acpid dependency
[ Marek Marczykowski-Górecki ]
* network: set uplink configuration based on MAC (NetworkManager)
* network: fix NM config preparation
[ Jason Mehring ]
* fc21: iptables configurations conflict with fc21 yum package manager
* fc21: Remove left-over code comment
[ Marek Marczykowski-Górecki ]
* fedora: Add security-testing repo definition
* filecopy: prevent files/dirs movement outside incoming directory
during transfer
* fedora: Fix iptables config install script
* fedora: Fix iptables config installation one more time
[ HW42 ]
* don't ignore asprintf() return value
[ Marek Marczykowski-Górecki ]
* network: support for not setting DNS and/or default gateway
[ Olivier MEDOC ]
* archlinux: fix new packaging requirements related to sbin, lib64,
run ...
* archlinux: align with fedora changes related to imsettings
[ Marek Marczykowski-Górecki ]
* fedora: reduce code duplication in systemd triggers
* fedora: reload systemd only once
* systemd: allow to start cron daemon (#909)
* filecopy: fallback to "open(..., 000)" method when /proc
inaccessible
* network: support for not setting DNS and/or default gateway (v2)
* rpm: add missing R: pygobject3-base
[ HW42 ]
* debian: fix for QSB #014 requires up to date qubes-utils
* debian: postinst: use systemctl mask
* debian: postinst: use dpkg-divert
* debian: don't generate regular conf files in postinst
* debian: postinst: don't remove /etc/udev/rules.d/*
* debian: postinst: don't create /rw - it is already part of the
package
* debian: postinst: use systemctl to set default target
* debian: postinst: remove fedora specific code
* debian: postinst: enable netfilter-persistent service
* debian: postinst: cleanup
* debian: postinst: don't start systemd services
* debian: postinst: enable haveged only if installed
* debian: postinst: remove redundant and misleading trigger output
* debian: install fstab as normal config file
* debian: preinst: remove modification of /etc/modules
* remove 'bashisms' or explicit use bash
* debian: preinst: don't force the default shell to bash
* debian: prerm: remove obsolete code
* debian: preinst: cleanup user creation
[ Wojtek Porczyk ]
* spec: require linux-utils-3.0.1
[ Matt McCutchen ]
* Switch to preset file for systemd units to disable.
* Make qvm-run bidirectional and document its limitations.
[ Marek Marczykowski-Górecki ]
* debian: change systemctl set-default back to manual symlink
* network: fix handling newline in firewall rules
* qrexec: use sockets instead of pipes to communicate with child
process
* qrexec: reorganise code for upcoming change
* qrexec: add simple "fork server" to spawn new processes inside user
session
* Adjust permissions of /var/run/qubes
[ Jason Mehring ]
* debian: Remove 'exit 0' in maintainer section scripts to all other
debhelpers (if any) to also execute
* Add a qubes group and then add the user 'user' to the group
* Remove 'xen.evtchn' udev rule
* Set permissions to /proc/xen/privcmd, so a user in qubes group can
access
* debian: Converted debian package to a quilt package to allow patches
* debian: Refactor Debian quilt packaging for xen
* debian: Remove 'exit 0' in maintainer section scripts to all other
debhelpers (if any) to also execute
* Add a qubes group and then add the user 'user' to the group
* Remove 'xen.evtchn' udev rule
* Set permissions to /proc/xen/privcmd, so a user in qubes group can
access
* debian: Converted debian package to a quilt package to allow patches
* debian: Revert depends back to use libxen-dev
* debian: Move creation of directories into debian.dirs configuration
file
* debian: Remove dist target from Makefile as copy-in is now being
used
* debian: Remove unneeded patch file and README
* Make sure when user is added to qubes group that the group is
appended
[ Marek Marczykowski-Górecki ]
* qrexec: fix compile warning
* debian: reenable -Werror, mentioned warning already fixed
* debian: exclude binary packages from source archive
* updates-proxy: allow xz compressed metadata (fc21)
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 17 Feb 2015 14:14:16 +0100
2015-02-17 16:25:01 +01:00
qubes-core-agent (3.0.0-1) jessie; urgency=medium
2014-11-22 16:24:18 +01:00
[ Marek Marczykowski-Górecki ]
* Improve handling of .desktop files
* suspend: do not disable network frontend devices
* Handle tabs in /etc/hosts
[ Marek Marczykowski ]
* Update for new vchan API
* spec: add dependencies on vchan package (both R: and BR:)
* load xen-gntalloc module required by libxenvchan
* spec: get backend_vmm from env variable
* rpm: fix typo
* Use Qubes DB instead of Xenstore
* systemd: fix qubes-service handling
* dispvm: restart qubesdb at DispVM start
[ Marek Marczykowski-Górecki ]
* qrexec: remove dom0 targets from makefile
* code style: replace tabs with spaces
* qrexec: new protocol - direct data vchan connections
* Use xenstore.h instead of xs.h
* qrexec: register exec function
* Update repos and keys for Qubes R3
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 22 Nov 2014 16:24:17 +0100
2014-10-25 01:49:58 +02:00
qubes-core-agent (2.1.42) jessie; urgency=medium
* firewall: show error message only on actual error
* Avoid 100MB reserved space in private ext4 partition
* gui-fatal: do not run as root
* fedora: workaround slow system shutdown (#852)
* Rename qubes-yum-proxy service to qubes-updates-proxy
* Rename yum-proxy-setup service to updates-proxy-setup
* updates-proxy: add rules for debian repositories (#887)
* qrexec: check for setuid() error when calling zenity/kdialog
* Use systemd mechanism for loading kernel modules (when available)
* Add missing u2mfn module load
* archlinux: modules-load.d handled now in generic files
* debian: migrate to native systemd services
* updates-proxy-setup: support setting proxy for apt (#887)
* Introduce qubes.SetDateTime service for time synchronization
* systemd: fix 'service' path
* Include /rw in the package
* debian: custom dh_auto_clean no longer needed
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 25 Oct 2014 01:49:58 +0200
2014-08-15 17:45:15 +02:00
qubes-core-agent (2.1.41) jessie; urgency=medium
[ Marek Marczykowski-Górecki ]
* dispvm: slow down "spinlock" while waiting for save/restore
[ Olivier MEDOC ]
* archlinux: add notification daemon
* archlinux: follow fedora20 qubes agent improvement
* archlinux: follow fedora20 qubes agent improvement
* archlinux: enable/disable services when corresponding packages got
installed
[ Marek Marczykowski-Górecki ]
* network: use the same gateway IP generation method as backend
* Revert "network: use the same gateway IP generation method as
backend"
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 Aug 2014 17:45:15 +0200
2014-07-28 02:38:59 +02:00
qubes-core-agent (2.1.40) jessie; urgency=medium
[ Marek Marczykowski-Górecki ]
* Fix compiler warnings.
* Enable compiler optimization.
* rpm: do not disable abrt-applet autostart
* systemd: relax qubes-sysinit dependencies
* systemd: reexec systemd to ensure right version is running
* rpm: fix notification-daemon setup
* archlinux: do not fail mount /usr/lib/modules if already mounted
* version 2.1.34
* suspend: fix dbus-send invocation
* qubes-rpc: log service stderr to syslog instead of sending to dom0
(#842)
* version 2.1.35
[ Wojciech Zygmunt Porczyk ]
* misc: do not display file preview by default (#813)
[ Vincent Penquerc'h ]
* vm-file-editor: remove temporary file on exit
[ Marek Marczykowski-Górecki ]
* rpm: remove /lib/firmware/updates link
* Hide nm-applet icon earlier (#857)
* Configure only installed programs
* network: setup NM connection when its active in the ProxyVM
* version 2.1.36
* Add --dispvm to qvm-run documentation
* Fix formating
* Do not start nm-applet at all when no NetworkManager running (#857)
* version 2.1.37
* rpm: require generic "desktop-notification-daemon" not a specific
one
* rpm: enable haveged service by default (#673)
* Do not start nm-applet at all when no NetworkManager running -
update (#857)
* rpm: enable/disable services when corresponding packages got
installed
* dispvm: close all windows after apps prerun (#872)
* version 2.1.38
* systemd: do not reexec when not necessary
* version 2.1.39
* rpm: mark config files with %config(noreplace)
[ Davíð Steinn Geirsson ]
* Split install target into install-common and install-rh, and add all
target
* Fix make clean target
* Check for xenstore-read in /usr/sbin as well (default on debian)
* Use xenstore.h instead of xs.h when xen >= 4.2
* Explicitly specify /bin/bash for Makefile SHELL, since it's
required.
* Initial debian packaging
[ Marek Marczykowski-Górecki ]
* debian: update deps
* qrexec: fix loop bounds
* gitignore
* Fix bashism
* gitignore: fix binary packages declaration
* debian: add updates repo definition and key
* debian: fix qfile-unpacker perms
-- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 28 Jul 2014 02:38:59 +0200
2014-05-02 01:47:52 +02:00
qubes-core-agent (2.1.33) jessie; urgency=low
* Initial Release.
-- Davíð Steinn Geirsson <david@dsg.is> Mon, 21 Apr 2014 01:31:55 +0000