changelog 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341
  1. qubes-core-agent (3.0.1-1) jessie; urgency=medium
  2. [ Marek Marczykowski-Górecki ]
  3. * Reenable imsettings service
  4. * systemd: fix xenstore-ls path
  5. [ Jason Mehring ]
  6. * Allow hyphenated distro names in tinyproxy filter
  7. * Change condition test to compare to a link "-L"
  8. * debian: add xen-utils-common as a dependancy to allow Debian proxies
  9. * debian: Added maintainers scripts (pre / postinit + rm) - Currently
  10. in debug mode
  11. * debian: preinst needs a group and force no password entry on adduser
  12. * debian: Added less restrictive filter option for debian packages
  13. Sites like sourceforge append ?downloadxxx to end
  14. * debian: added new depends
  15. * debian: force shell to be bash since its default is dash and many
  16. qubes scripts rely on bash and will break in dash and added
  17. tinyproxy user
  18. [ HW42 ]
  19. * move fedora specific stuff to install-rh target
  20. * don't track debina/files (since it is autogenerated)
  21. * use systemd in debian
  22. * install iptables/forwarding for debian
  23. * various patches for debian
  24. * improve update of /etc/hosts
  25. * make source.list multiarch compatible
  26. * add xserver-xorg-video-dummy to the dependencies list of qubes-core-
  27. agent
  28. * dispvm-presun.sh needs bash
  29. * use sleep instead os usleep since it is more portable
  30. * debian: chown /home_volatile/user in posinst
  31. * fix xenstore-read path in network-proxy-setup.sh for debian
  32. * debian: add dependency on xen-utils since it's needed for
  33. proxy/netvm
  34. * debian: add support for qubes appmenus
  35. [ Marek Marczykowski-Górecki ]
  36. * debian: fix initialization of /etc/hosts
  37. [ Jason Mehring ]
  38. * debian: set -e added in place of set -x
  39. * debian: Made debian proxy filter rules more restrictive
  40. * debian: Cleanup
  41. * debian: Prepend package name to maintainers scripts
  42. * debian: Add qubes-update-check for Debian
  43. * debian: Revert back to original NetworkManager, ModemManager service
  44. names
  45. * debian: apt-get needs to update first
  46. * debian: Remove absolute path to xenstore-*
  47. * debian: Added more dependancies
  48. * debian: Added postrm disable of other Qubes packages
  49. * debian: Added all other outstanding triggers contained in rpm_spec
  50. as well as triggers if other packages get installed at a later date
  51. the configurations will run on them
  52. * debian: removed commented out depends
  53. * debian: Added more error reporting to track down any missing
  54. dependancies
  55. * debian: More depends for debian as netvm and some configuration
  56. tweaks.
  57. [ Marek Marczykowski-Górecki ]
  58. * network: do not use ifcfg-rh NM plugin
  59. * network: fix NM uplink config permissions
  60. [ Jason Mehring ]
  61. * debian: Add new notification agent depends; remove other
  62. * debian: Added functionality to move desktop entry config files to
  63. /usr/share/qubes/xdg/autostart to preserve originals
  64. * debian: Wrong variable name was used to create
  65. /usr/share/qubes/xdg/autostart
  66. [ Marek Marczykowski-Górecki ]
  67. * Fix compile flags order (-lX11 moved to the end)
  68. [ Jason Mehring ]
  69. * debian: Updated tinyproxy filter rules
  70. * debian: Don't display systemd info in chroot since systemd show does
  71. not work in chroot
  72. [ Marek Marczykowski-Górecki ]
  73. * network: fix indentation
  74. * Fix disabling nm-applet when NM is disabled
  75. * debian: create tinyproxy as system user
  76. * debian: fix generation of apt sources list file
  77. * debian: add missing python-gi to dependencies
  78. * debian: remove obsolete code from postinst script
  79. * debian: fix service name in postinst script
  80. * Update update-proxy rules for debian security fixes repo
  81. [ HW42 ]
  82. * debian: move not strictly required packages to Recommends-Section.
  83. * debian: remove unneeded acpid dependency
  84. [ Marek Marczykowski-Górecki ]
  85. * network: set uplink configuration based on MAC (NetworkManager)
  86. * network: fix NM config preparation
  87. [ Jason Mehring ]
  88. * fc21: iptables configurations conflict with fc21 yum package manager
  89. * fc21: Remove left-over code comment
  90. [ Marek Marczykowski-Górecki ]
  91. * fedora: Add security-testing repo definition
  92. * filecopy: prevent files/dirs movement outside incoming directory
  93. during transfer
  94. * fedora: Fix iptables config install script
  95. * fedora: Fix iptables config installation one more time
  96. [ HW42 ]
  97. * don't ignore asprintf() return value
  98. [ Marek Marczykowski-Górecki ]
  99. * network: support for not setting DNS and/or default gateway
  100. [ Olivier MEDOC ]
  101. * archlinux: fix new packaging requirements related to sbin, lib64,
  102. run ...
  103. * archlinux: align with fedora changes related to imsettings
  104. [ Marek Marczykowski-Górecki ]
  105. * fedora: reduce code duplication in systemd triggers
  106. * fedora: reload systemd only once
  107. * systemd: allow to start cron daemon (#909)
  108. * filecopy: fallback to "open(..., 000)" method when /proc
  109. inaccessible
  110. * network: support for not setting DNS and/or default gateway (v2)
  111. * rpm: add missing R: pygobject3-base
  112. [ HW42 ]
  113. * debian: fix for QSB #014 requires up to date qubes-utils
  114. * debian: postinst: use systemctl mask
  115. * debian: postinst: use dpkg-divert
  116. * debian: don't generate regular conf files in postinst
  117. * debian: postinst: don't remove /etc/udev/rules.d/*
  118. * debian: postinst: don't create /rw - it is already part of the
  119. package
  120. * debian: postinst: use systemctl to set default target
  121. * debian: postinst: remove fedora specific code
  122. * debian: postinst: enable netfilter-persistent service
  123. * debian: postinst: cleanup
  124. * debian: postinst: don't start systemd services
  125. * debian: postinst: enable haveged only if installed
  126. * debian: postinst: remove redundant and misleading trigger output
  127. * debian: install fstab as normal config file
  128. * debian: preinst: remove modification of /etc/modules
  129. * remove 'bashisms' or explicit use bash
  130. * debian: preinst: don't force the default shell to bash
  131. * debian: prerm: remove obsolete code
  132. * debian: preinst: cleanup user creation
  133. [ Wojtek Porczyk ]
  134. * spec: require linux-utils-3.0.1
  135. [ Matt McCutchen ]
  136. * Switch to preset file for systemd units to disable.
  137. * Make qvm-run bidirectional and document its limitations.
  138. [ Marek Marczykowski-Górecki ]
  139. * debian: change systemctl set-default back to manual symlink
  140. * network: fix handling newline in firewall rules
  141. * qrexec: use sockets instead of pipes to communicate with child
  142. process
  143. * qrexec: reorganise code for upcoming change
  144. * qrexec: add simple "fork server" to spawn new processes inside user
  145. session
  146. * Adjust permissions of /var/run/qubes
  147. [ Jason Mehring ]
  148. * debian: Remove 'exit 0' in maintainer section scripts to all other
  149. debhelpers (if any) to also execute
  150. * Add a qubes group and then add the user 'user' to the group
  151. * Remove 'xen.evtchn' udev rule
  152. * Set permissions to /proc/xen/privcmd, so a user in qubes group can
  153. access
  154. * debian: Converted debian package to a quilt package to allow patches
  155. * debian: Refactor Debian quilt packaging for xen
  156. * debian: Remove 'exit 0' in maintainer section scripts to all other
  157. debhelpers (if any) to also execute
  158. * Add a qubes group and then add the user 'user' to the group
  159. * Remove 'xen.evtchn' udev rule
  160. * Set permissions to /proc/xen/privcmd, so a user in qubes group can
  161. access
  162. * debian: Converted debian package to a quilt package to allow patches
  163. * debian: Revert depends back to use libxen-dev
  164. * debian: Move creation of directories into debian.dirs configuration
  165. file
  166. * debian: Remove dist target from Makefile as copy-in is now being
  167. used
  168. * debian: Remove unneeded patch file and README
  169. * Make sure when user is added to qubes group that the group is
  170. appended
  171. [ Marek Marczykowski-Górecki ]
  172. * qrexec: fix compile warning
  173. * debian: reenable -Werror, mentioned warning already fixed
  174. * debian: exclude binary packages from source archive
  175. * updates-proxy: allow xz compressed metadata (fc21)
  176. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 17 Feb 2015 14:14:16 +0100
  177. qubes-core-agent (3.0.0-1) jessie; urgency=medium
  178. [ Marek Marczykowski-Górecki ]
  179. * Improve handling of .desktop files
  180. * suspend: do not disable network frontend devices
  181. * Handle tabs in /etc/hosts
  182. [ Marek Marczykowski ]
  183. * Update for new vchan API
  184. * spec: add dependencies on vchan package (both R: and BR:)
  185. * load xen-gntalloc module required by libxenvchan
  186. * spec: get backend_vmm from env variable
  187. * rpm: fix typo
  188. * Use Qubes DB instead of Xenstore
  189. * systemd: fix qubes-service handling
  190. * dispvm: restart qubesdb at DispVM start
  191. [ Marek Marczykowski-Górecki ]
  192. * qrexec: remove dom0 targets from makefile
  193. * code style: replace tabs with spaces
  194. * qrexec: new protocol - direct data vchan connections
  195. * Use xenstore.h instead of xs.h
  196. * qrexec: register exec function
  197. * Update repos and keys for Qubes R3
  198. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 22 Nov 2014 16:24:17 +0100
  199. qubes-core-agent (2.1.42) jessie; urgency=medium
  200. * firewall: show error message only on actual error
  201. * Avoid 100MB reserved space in private ext4 partition
  202. * gui-fatal: do not run as root
  203. * fedora: workaround slow system shutdown (#852)
  204. * Rename qubes-yum-proxy service to qubes-updates-proxy
  205. * Rename yum-proxy-setup service to updates-proxy-setup
  206. * updates-proxy: add rules for debian repositories (#887)
  207. * qrexec: check for setuid() error when calling zenity/kdialog
  208. * Use systemd mechanism for loading kernel modules (when available)
  209. * Add missing u2mfn module load
  210. * archlinux: modules-load.d handled now in generic files
  211. * debian: migrate to native systemd services
  212. * updates-proxy-setup: support setting proxy for apt (#887)
  213. * Introduce qubes.SetDateTime service for time synchronization
  214. * systemd: fix 'service' path
  215. * Include /rw in the package
  216. * debian: custom dh_auto_clean no longer needed
  217. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 25 Oct 2014 01:49:58 +0200
  218. qubes-core-agent (2.1.41) jessie; urgency=medium
  219. [ Marek Marczykowski-Górecki ]
  220. * dispvm: slow down "spinlock" while waiting for save/restore
  221. [ Olivier MEDOC ]
  222. * archlinux: add notification daemon
  223. * archlinux: follow fedora20 qubes agent improvement
  224. * archlinux: follow fedora20 qubes agent improvement
  225. * archlinux: enable/disable services when corresponding packages got
  226. installed
  227. [ Marek Marczykowski-Górecki ]
  228. * network: use the same gateway IP generation method as backend
  229. * Revert "network: use the same gateway IP generation method as
  230. backend"
  231. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 Aug 2014 17:45:15 +0200
  232. qubes-core-agent (2.1.40) jessie; urgency=medium
  233. [ Marek Marczykowski-Górecki ]
  234. * Fix compiler warnings.
  235. * Enable compiler optimization.
  236. * rpm: do not disable abrt-applet autostart
  237. * systemd: relax qubes-sysinit dependencies
  238. * systemd: reexec systemd to ensure right version is running
  239. * rpm: fix notification-daemon setup
  240. * archlinux: do not fail mount /usr/lib/modules if already mounted
  241. * version 2.1.34
  242. * suspend: fix dbus-send invocation
  243. * qubes-rpc: log service stderr to syslog instead of sending to dom0
  244. (#842)
  245. * version 2.1.35
  246. [ Wojciech Zygmunt Porczyk ]
  247. * misc: do not display file preview by default (#813)
  248. [ Vincent Penquerc'h ]
  249. * vm-file-editor: remove temporary file on exit
  250. [ Marek Marczykowski-Górecki ]
  251. * rpm: remove /lib/firmware/updates link
  252. * Hide nm-applet icon earlier (#857)
  253. * Configure only installed programs
  254. * network: setup NM connection when its active in the ProxyVM
  255. * version 2.1.36
  256. * Add --dispvm to qvm-run documentation
  257. * Fix formating
  258. * Do not start nm-applet at all when no NetworkManager running (#857)
  259. * version 2.1.37
  260. * rpm: require generic "desktop-notification-daemon" not a specific
  261. one
  262. * rpm: enable haveged service by default (#673)
  263. * Do not start nm-applet at all when no NetworkManager running -
  264. update (#857)
  265. * rpm: enable/disable services when corresponding packages got
  266. installed
  267. * dispvm: close all windows after apps prerun (#872)
  268. * version 2.1.38
  269. * systemd: do not reexec when not necessary
  270. * version 2.1.39
  271. * rpm: mark config files with %config(noreplace)
  272. [ Davíð Steinn Geirsson ]
  273. * Split install target into install-common and install-rh, and add all
  274. target
  275. * Fix make clean target
  276. * Check for xenstore-read in /usr/sbin as well (default on debian)
  277. * Use xenstore.h instead of xs.h when xen >= 4.2
  278. * Explicitly specify /bin/bash for Makefile SHELL, since it's
  279. required.
  280. * Initial debian packaging
  281. [ Marek Marczykowski-Górecki ]
  282. * debian: update deps
  283. * qrexec: fix loop bounds
  284. * gitignore
  285. * Fix bashism
  286. * gitignore: fix binary packages declaration
  287. * debian: add updates repo definition and key
  288. * debian: fix qfile-unpacker perms
  289. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 28 Jul 2014 02:38:59 +0200
  290. qubes-core-agent (2.1.33) jessie; urgency=low
  291. * Initial Release.
  292. -- Davíð Steinn Geirsson <david@dsg.is> Mon, 21 Apr 2014 01:31:55 +0000