changelog 71 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988
  1. qubes-core-agent (4.0.36-1) unstable; urgency=medium
  2. * rpm: add workaround for Fedora's systemd package bug
  3. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 13 Sep 2018 14:32:02 +0200
  4. qubes-core-agent (4.0.35-1) unstable; urgency=medium
  5. [ 0brand ]
  6. * Comments to use qubes onion repository
  7. * Comments to use qubes onion repository
  8. [ Marek Marczykowski-Górecki ]
  9. * Fix detection of root device resize
  10. * Drop https from onion update repository urls
  11. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 12 Sep 2018 04:04:14 +0200
  12. qubes-core-agent (4.0.34-1) unstable; urgency=medium
  13. [ Marta Marczykowska-Górecka ]
  14. * Add proper help text to qvm-copy tools and fix incorrect behavior
  15. for qvm-move
  16. * Avoid leaking VM name in qvm-copy usage text
  17. [ Rusty Bird ]
  18. * qfile-agent.c: exit on EPIPE after gui progress write
  19. * Unify qvm-{copy,move}-to-vm.{gnome,kde} and fix some bugs
  20. [ unman ]
  21. * Install qubes control files for services in Ubuntu templates
  22. [ Marek Marczykowski-Górecki ]
  23. * rpm: use build flags provided by the distribution
  24. * travis: add fc28 and buster
  25. [ Olivier MEDOC ]
  26. * archlinux: ensure /usr/local is present in fstab (fix issue
  27. https://github.com/QubesOS/qubes-issues/issues/4196)
  28. [ fepitre ]
  29. * Handle CentOS vm repo
  30. [ unman ]
  31. * Add bionic, remove old Ubuntu versions
  32. * Remove user from sudo group on removing passwordless-root.
  33. [ Marek Marczykowski-Górecki ]
  34. * debian: do not add user to sudo group, lock root account
  35. [ Rusty Bird ]
  36. * misc/qubes-run-terminal: which -> type
  37. [ unman ]
  38. * Install debian version of qrexec pam in Ubuntu templates
  39. [ Marek Marczykowski-Górecki ]
  40. * Slightly simplify @DIST@ substitution in repository definition
  41. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 03 Sep 2018 11:17:14 +0200
  42. qubes-core-agent (4.0.33-1) unstable; urgency=medium
  43. [ Reynir Björnsson ]
  44. * bind mount /usr/local
  45. [ Marek Marczykowski-Górecki ]
  46. * Convert /usr/local from a symlink to a mount point on upgrade
  47. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 17 Jul 2018 11:37:35 +0200
  48. qubes-core-agent (4.0.32-1) unstable; urgency=medium
  49. [ awokd ]
  50. * grub: add noresume to kernel cmdline Under R4.0, when Debian HVMs
  51. are created from the debian-9 template, they hang on boot for 30
  52. seconds without this option.
  53. [ Marek Marczykowski-Górecki ]
  54. * rpm: add R: tar, for qubes-dom0-update
  55. [ Peter Gerber ]
  56. * setup-rwdev.sh: Only check first 1 GiB for zeros
  57. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 08 Jul 2018 03:48:51 +0200
  58. qubes-core-agent (4.0.31-1) unstable; urgency=medium
  59. * debian: add Depends: qubesdb-vm
  60. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 Jun 2018 14:32:23 +0200
  61. qubes-core-agent (4.0.30-1) wheezy; urgency=medium
  62. [ Christopher Laprise ]
  63. * Fixes issue #3939
  64. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 05 Jun 2018 01:39:04 +0200
  65. qubes-core-agent (4.0.29-1) unstable; urgency=medium
  66. * Drop leftovers of qubes-netwatcher service
  67. * qrexec: fix handling remote domain death
  68. * network: use iptables-restore --wait if available
  69. * rpm: add BR: systemd for pre/post install macros
  70. * qubes-rpc: fix code style - indent with spaces
  71. * qvm-open-in-vm: implement --view-only option
  72. * qvm-open-in-vm: mark file as read-only if opened with --view-only
  73. * Add file managers integration for qvm-open-in-dvm --view-only
  74. * Add build-time assert for filename buffer size
  75. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 29 May 2018 00:40:11 +0200
  76. qubes-core-agent (4.0.28-1) wheezy; urgency=medium
  77. [ Peter Gerber ]
  78. * Qubes firewall: correct syntax for icmpv6 rejects
  79. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 10 May 2018 12:21:39 +0200
  80. qubes-core-agent (4.0.27-1) unstable; urgency=medium
  81. [ X4lldux ]
  82. * Move/Copy many files in one step via nautilus extension
  83. [ Marek Marczykowski-Górecki ]
  84. * centos: exclude only dconf user profile, keep dpi config
  85. * travis: add centos7
  86. * Fix packaging: 'user' group, BACKEND_VMM var
  87. * Create /etc/dconf/profile/user dynamically, if not present
  88. * Require dconf utility to (re)build /etc/dconf/db/local
  89. * Fix make clean
  90. * qubes-firewall: reject packets instead of dropping
  91. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 02 May 2018 05:05:33 +0200
  92. qubes-core-agent (4.0.26-1) unstable; urgency=medium
  93. * Change repository URLs to https
  94. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 22 Apr 2018 00:29:02 +0200
  95. qubes-core-agent (4.0.25-1) unstable; urgency=medium
  96. [ Marek Marczykowski-Górecki ]
  97. * debian: don't call dconf if it isn't installed
  98. * qrexec: add qrexec-client-vm --buffer-size option
  99. [ unman ]
  100. * Add missing services in Ubuntu templates.
  101. [ Simon Gaiser ]
  102. * qrexec-fork-server: Always initialize addrlen argument of accept()
  103. [ Marek Marczykowski-Górecki ]
  104. * qrexec: fix arguments handling
  105. * Move 'qubesxdg' into qubesagent python package
  106. * Fix shell calls in Makefile
  107. * Fix waiting for application exit in qubesagent.xdg.launch
  108. * Load only test_* files when looking for tests (python)
  109. * qubes-session-autostart: do not wait for applications exit
  110. * Do not start dkms.service
  111. * network: do not assume IPv6 gateway is a link-local address
  112. * qubes-firewall: handle only traffic originating from VMs
  113. * network: make sure static NM configuration is created before NM
  114. start
  115. [ Davíð Steinn Geirsson ]
  116. * Add misc/qubes-run-terminal to launch any available terminal
  117. emulator
  118. [ Frédéric Pierret ]
  119. * Create .spec.in and Source0
  120. * Remove _builddir
  121. * spec.in: add changelog placeholder
  122. * spec.in: fix %if expressions and remove useless conditions
  123. [ Vladimir Lushnikov ]
  124. * Problem: Unable to use pkg.install with Salt in dom0 when using
  125. UpdateVM that has only yum due to incorrect options passed by Salt
  126. assuming dnf presence
  127. [ Marek Marczykowski-Górecki ]
  128. * Use only /etc/skel to provision user's home directory of new VM
  129. * Update gitignore and make clean target
  130. * qubes-firewall: signal service readiness only after initial scripts
  131. [ Frédéric Pierret ]
  132. * Fix GCC8 warnings
  133. * Add missing python-setuptools dependency
  134. * Use %{python3_pkgversion} instead of duplicating python3 targets
  135. [ Marek Marczykowski-Górecki ]
  136. * travis: update Fedora versions
  137. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 21 Apr 2018 15:10:20 +0200
  138. qubes-core-agent (4.0.24-1) unstable; urgency=medium
  139. [ Marek Marczykowski-Górecki ]
  140. * Drop Fedora < 22 support
  141. * Call qubes.PostInstall service to notify dom0 about all
  142. apps/features
  143. * dom0-updates: refactor for ease adding new actions with old yum
  144. * dom0-update: add some approximation of 'list', 'search' and
  145. 'reinstall'
  146. * Drop fakeroot for list/search actions on Debian
  147. [ Rusty Bird ]
  148. * Really enable qubes-sync-time.timer
  149. [ Frédéric Pierret ]
  150. * centos: fix conflict with dconf
  151. [ Marek Marczykowski-Górecki ]
  152. * Speed up initial /rw setup
  153. [ awokd ]
  154. * reinstal -> reinstall
  155. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 27 Feb 2018 15:17:51 +0100
  156. qubes-core-agent (4.0.23-1) unstable; urgency=medium
  157. * qrexec: launch services in login shell
  158. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 22 Feb 2018 12:43:55 +0100
  159. qubes-core-agent (4.0.22-1) unstable; urgency=medium
  160. [ Marek Marczykowski-Górecki ]
  161. * Wait for user session as X session owner
  162. [ Christopher Laprise ]
  163. * Add qubes-firewall.d feature
  164. * Add /etc/qubes path
  165. [ Marek Marczykowski-Górecki ]
  166. * qrexec: use exec_qubes_rpc_if_requested() from qubes-utils
  167. * qrexec: translate keywords in target specification on the client
  168. side
  169. * rpm: adjust dependencies
  170. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 20 Feb 2018 01:04:55 +0100
  171. qubes-core-agent (4.0.21-1) unstable; urgency=medium
  172. [ Marek Marczykowski-Górecki ]
  173. * Fix systemd-timesyncd.service startup
  174. * Do not sync VM time with clockvm if it's set to network time sync
  175. * network: reload DNS only on "up" event from NetworkManager
  176. [ Rusty Bird ]
  177. * bind-dirs.sh: don't fail on empty configuration directory
  178. [ unman ]
  179. * Stop Debian templates from forwarding by default.
  180. [ Marek Marczykowski-Górecki ]
  181. * qubes-firewall: call firewall-user-script at service startup
  182. * tests: check if qubes-firewall-user-script is called
  183. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 13 Feb 2018 04:56:43 +0100
  184. qubes-core-agent (4.0.20-1) unstable; urgency=medium
  185. * Add intel wifi drivers to suspend-module-blacklist
  186. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 29 Jan 2018 21:57:11 +0100
  187. qubes-core-agent (4.0.19-1) unstable; urgency=medium
  188. * Mount root fs with 'discard' option by default
  189. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 24 Jan 2018 01:46:25 +0100
  190. qubes-core-agent (4.0.18-1) unstable; urgency=medium
  191. * Place list of loaded modules in /var/run directly
  192. * Detach all drivers from PCI devices before suspend
  193. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 23 Jan 2018 14:17:05 +0100
  194. qubes-core-agent (4.0.17-1) unstable; urgency=medium
  195. [ Rusty Bird ]
  196. * Set 'wait-for-session=1' for 'qubes.VMShell+WaitForSession'
  197. * qvm-run-vm: appease ShellCheck without comment
  198. * qvm-run-vm: wait for X11 in DispVM case
  199. * Remove stranded block-snapshot script
  200. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 18 Jan 2018 19:30:32 +0100
  201. qubes-core-agent (4.0.16-1) unstable; urgency=medium
  202. * firewall: don't crash the whole qubes-firewall service on DNS fail
  203. * firewall: allow also related traffic
  204. * qrexec: fix infinite loop when multiple services are waiting for GUI
  205. * Fix kdialog --progressbar usage
  206. * Install KDE actions for KDE5
  207. * Enable gnome settings daemon xsettings plugin
  208. * Disable automatic scaling in GNOME/GTK applications
  209. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 12 Jan 2018 06:18:51 +0100
  210. qubes-core-agent (4.0.15-1) unstable; urgency=medium
  211. [ MB ]
  212. * Fall back to direct execution when dbus is not installed or running
  213. [ Marek Marczykowski-Górecki ]
  214. * qrexec: setup process environment when not using fork server
  215. [ Patrick Schleizer ]
  216. * make apt-get apt-transport-tor broken in Qubes non-networked
  217. TemplateVMs
  218. [ Marek Marczykowski-Górecki ]
  219. * qubes.GetImageRGBA: fix handling '-' path without explicit type
  220. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 23 Dec 2017 02:53:43 +0100
  221. qubes-core-agent (4.0.14-1) unstable; urgency=medium
  222. [ Marek Marczykowski-Górecki ]
  223. * Disable cups-browsed service together with cups
  224. [ Olivier Médoc ]
  225. * Makefile: split network install target from core agent install
  226. target
  227. * Makefile: ensure that everything is installed by default for rh
  228. based agents
  229. * archlinux: split core-agent from netvm-agent
  230. [ Olivier MEDOC ]
  231. * Makefile: add basic networking to the new install-corevm target
  232. * Makefile: fix typo created when spliting the install targets
  233. * Makefile: add network install targets to install-deb
  234. * archlinux: create a keyring package to install binary repository
  235. automatically
  236. * archlinux: fix shellcheck issues
  237. * Makefile: remove invalid reference to network dropins install target
  238. * archlinux: fix incorrect keyring being populated
  239. * archlinux: add recently splitted packages as optional dependencies
  240. of qubes-vm-core
  241. * Makefile: install-netvm shouldn't be a dependency of itself.
  242. * archlinux fix .service added twice in networking install script
  243. [ Marek Marczykowski-Górecki ]
  244. * network: configure IPv6 when enabled
  245. * network: IPv6-enabled firewall
  246. * network: drop unsolicited IPv6 neighbor advertisements by default
  247. * Fix IPv6 support in qubes-firewall
  248. * Add hint to use qvm-copy/qvm-move instead of qvm-*-to-vm
  249. [ Frédéric Pierret ]
  250. * Add support for Thunar Qubes VM tools
  251. * Disable Thunar thumbnails
  252. * Add debian package support
  253. * Fix ShellCheck comments
  254. * Fix UCA mistake and qvm-actions script
  255. [ TomZ ]
  256. * Fix language issues and usability issue
  257. [ Rusty Bird ]
  258. * qvm-{copy,move}: fix spurious deprecation message
  259. [ unman ]
  260. * Disable wpa_supplicant@.service
  261. [ Marek Marczykowski-Górecki ]
  262. * debian: use systemd-preset logic from rpm package
  263. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 Dec 2017 09:23:22 +0100
  264. qubes-core-agent (4.0.13-1) unstable; urgency=medium
  265. [ Marek Marczykowski-Górecki ]
  266. * Fix starting time synchronization service
  267. [ Nedyalko Andreev ]
  268. * Disable dnf plugins when downloading dom0 updates in sys-firewall
  269. * Update the arch PKGBUILD script for QubesOS 4.0
  270. * Fix the makefile for archlinux - SBINDIR is already /usr/bin
  271. * Restore the binary pacman repo and update it for QubesOS 4.0
  272. * Add the 4.0 repo to the PKGBUILD sources list
  273. [ Olivier MEDOC ]
  274. * archlinux: remove deprecated setup of pam since v4.0.3
  275. * archlinux: remove pam configuration for su and su-l
  276. * archlinux: do not mess with locales in post-install script
  277. * archlinux: ship pam.d/qrexec as a replacement of using su
  278. * archlinux: create user 'user' using bash by default instead of zsh
  279. * Makefile: avoid using python interpreter as a static name
  280. * archlinux: enforce usage of python2 in all scripts
  281. * archlinux: ensure [options] section is present in all pacman drop-
  282. ins
  283. * archlinux: remove python3 dependency
  284. * archlinux: restore setup of pam.d/su-l
  285. [ unman ]
  286. * Allow build for Xenial in 4.0
  287. [ Paul Holcomb ]
  288. * Fix Ubuntu template builds
  289. [ Marek Marczykowski-Górecki ]
  290. * network: have safe fallback in case of qubes-firewall crash/error
  291. * Dumb down meminfo-writer enabling logic
  292. * Enable qubes-firewall also in "NetVM"
  293. [ Nedyalko Andreev ]
  294. * Fix the Archlinux template update proxy to work for HTTPS URLs as
  295. well
  296. [ Rusty Bird ]
  297. * Add iptables dep to qubes-core-agent-networking RPM spec
  298. [ Marek Marczykowski-Górecki ]
  299. * network: order qubes-firewall service before enabling IP forwarding
  300. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 21 Nov 2017 04:51:27 +0100
  301. qubes-core-agent (4.0.12-1) unstable; urgency=medium
  302. * Add support for new root volume partition layout to qubes.ResizeDisk
  303. * Resize root filesystem at VM startup if needed
  304. * debian: disable timer-based apt-get
  305. * network: fix rules for network setup on new udev
  306. * Fix removing temporary file after editing in (Disp)VM
  307. * debian: cleanup after splitting qubes-core-agent
  308. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 19 Oct 2017 17:28:27 +0200
  309. qubes-core-agent (4.0.11-1) unstable; urgency=medium
  310. [ Tray Torrance ]
  311. * Add archlinux support to upgrade checker
  312. [ Nedyalko Andreev ]
  313. * Fix an incorrect grep usage in archlinux upgrade check
  314. * Simplify archlinux upgrade check
  315. [ Marek Marczykowski-Górecki ]
  316. * Add convenient wrappers for qvm-copy-to-vm and qvm-move-to-vm
  317. * qrexec: code style fix - use spaces for indentation
  318. * qrexec: use user shell instead of hardcoded /bin/sh
  319. * qubes.ResizeDisk: handle dmroot being a symlink
  320. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 07 Oct 2017 02:35:42 +0200
  321. qubes-core-agent (4.0.10-1) unstable; urgency=medium
  322. [ Marek Marczykowski-Górecki ]
  323. * centos: add package signing key, setup repository
  324. * network: fix issues found by shellcheck
  325. * qubes-rpc: fix issues found by shellcheck
  326. * init: fix issues found by shellcheck in init scripts
  327. * debian: fix shellcheck warnings in debian packaging
  328. * Fix shellcheck warnings in block-snapshot script
  329. * Fix shellcheck warnings in download-dom0-updates.sh
  330. * Few more shellcheck warnings fixes/ignores
  331. * Hint shellcheck where to look for sourced files, if in repository
  332. * travis: add shellcheck call for all scripts in the repository
  333. [ Nedyalko Andreev ]
  334. * Fix the archlinux package, use correct DROPIN dirs
  335. * Disable Oliver's binary pacman repo by default
  336. * Fix indentation and shellcheck issues for archlinux
  337. * Fix the install script after the shellcheck "fixes"
  338. * Fix the previous shellcheck-related "fixes" again
  339. [ Jussi Timperi ]
  340. * archlinux: add correct section to qubes-noupgrade.conf
  341. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 04 Oct 2017 15:19:35 +0200
  342. qubes-core-agent (4.0.9-1) unstable; urgency=medium
  343. [ Frédéric Pierret ]
  344. * dnf-qubes-hooks: handle newer DNF >= 2.x
  345. [ Marek Marczykowski-Górecki ]
  346. * travis: add fc26 build
  347. * Look for applications also in subdirectories of .../applications
  348. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 26 Sep 2017 23:09:45 +0200
  349. qubes-core-agent (4.0.8-1) unstable; urgency=medium
  350. [ Marek Marczykowski-Górecki ]
  351. * dom0-updates: do not modify yum.conf
  352. [ Frederic Pierret (Epitre) ]
  353. * Add CENTOS/RHEL support (drop fedora-release dependancy as template
  354. builder will install it anyway and here it only make harder to
  355. support non-fedora builds)
  356. * Handle fallthrough with attribute(noreturn) for consistancy and
  357. compatiblity with older GCC
  358. [ Marek Marczykowski-Górecki ]
  359. * (redo) updates-proxy: explicitly block connection looping back to
  360. the proxy IP
  361. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 Sep 2017 13:44:17 +0200
  362. qubes-core-agent (4.0.7-1) unstable; urgency=medium
  363. * qrexec: add configurable waiting for session before starting service
  364. * document /etc/qubes/rpc-config
  365. * qubes-rpc: add 'wait-for-session=1' option for some services
  366. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 11 Aug 2017 13:33:35 +0200
  367. qubes-core-agent (4.0.6-1) unstable; urgency=medium
  368. * Announce if qubes-firewall service is supported+enabled in this
  369. template
  370. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 29 Jul 2017 05:31:13 +0200
  371. qubes-core-agent (4.0.5-1) unstable; urgency=medium
  372. [ Marek Marczykowski-Górecki ]
  373. * qrexec: ship pam configuration for debian
  374. * rpm: add services enabling/disabling logic
  375. * qrexec: start process in a login shell
  376. [ Marta Marczykowska-Górecka ]
  377. * clock synchronization rewrite
  378. * minor amends to clock synchronization
  379. [ Marek Marczykowski-Górecki ]
  380. * clock sync: drop untrusted_ prefix after value validation, fix error
  381. msg
  382. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 12 Jul 2017 23:40:54 +0200
  383. qubes-core-agent (4.0.4-1) unstable; urgency=medium
  384. * grub: add console=tty0 to kernel cmdline
  385. * rpm: do not mess with locales in post-install script
  386. * Don't use 'su' in qubes.WaitForSession if not needed
  387. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 05 Jul 2017 14:02:22 +0200
  388. qubes-core-agent (4.0.3-1) unstable; urgency=medium
  389. [ unman ]
  390. * Enable build for Zesty
  391. [ Marek Marczykowski-Górecki ]
  392. * Do not load 'dummy-hcd' kernel module
  393. [ Vincent Penquerc'h ]
  394. * core-agent-linux: misc const fixups
  395. [ Marek Marczykowski-Górecki ]
  396. * qrexec: use PAM directly instead of calling su to setup the session
  397. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 05 Jul 2017 02:37:51 +0200
  398. qubes-core-agent (4.0.2-1) unstable; urgency=medium
  399. * Ship grub configuration
  400. * Ship Qubes 4.0 repository definition and keys
  401. * Update grub configuration
  402. * debian: install man pages
  403. * Add qrexec-client-vm man page
  404. * qrexec: exit with code 126 when service request was refused
  405. * qrexec: fix reporting exit code in qrexec-client-vm
  406. * qrexec: do not shutdown stdout socket inherited from parent
  407. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 24 Jun 2017 02:19:14 +0200
  408. qubes-core-agent (4.0.1-1) unstable; urgency=medium
  409. * Switch qubes.UpdatesProxy to socat
  410. * rpm,deb: fix dependencies
  411. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 11 Jun 2017 00:02:49 +0200
  412. qubes-core-agent (4.0.0-1) unstable; urgency=medium
  413. [ Marek Marczykowski-Górecki ]
  414. * qvm-copy-to-vm: fix handling empty target VM
  415. * Rename qubes.xdg python module to qubesxdg
  416. * Disable meminfo-writer if there is any PCI device attached
  417. [ Wojtek Porczyk ]
  418. * misc: add qvm-features-request
  419. [ Marek Marczykowski-Górecki ]
  420. * Add qubes.ResizeDisk service to adjust filesystem size
  421. * network: rewrite qubes-firewall daemon
  422. * network: remove qubes-netwatcher
  423. [ qubesuser ]
  424. * network: add vif-route-qubes-nat for IP address anonymization
  425. [ Marek Marczykowski-Górecki ]
  426. * network: reformat vif-route-qubes-nat
  427. * network: change vif-route-qubes-nat parameters
  428. * network: integrate vif-route-qubes-nat into vif-route-qubes
  429. * network: keep the same MAC on vif interfaces
  430. * network: properly handle DNS addresses in vif-qubes-nat.sh
  431. * network: use /32 netmask on internal IPs in NAT providing namespace
  432. * travis: drop debootstrap workaround
  433. * Add qubes.StartApp service
  434. * dom0-updates: restructure the script to not update metadata twice
  435. * tests: make firewall tests working regardless of python version
  436. * firewall: switch to python 3
  437. * tests: add run-tests script, plug it into travis
  438. * Apply gschema overrides also to debian, rename according to
  439. guidelines
  440. * fedora,debian: update python3-daemon dependency
  441. * Remove duplicated 'close' button from titlebar of gnome applications
  442. * Ask for target VM for file-copy in dom0
  443. * travis: update to Qubes 4.0 repositories
  444. * debian: fix qubes-firewall python packaging, make it more verbose
  445. * debian,fedora: split nautilus integration into separate package
  446. * Revert "firewall: switch to python 3"
  447. * Revert "fedora,debian: update python3-daemon dependency"
  448. * debian: add missing Build-Depends: python-setuptools
  449. * debian: make haveged.service patch less intrusive...
  450. * Rename qvm-run to qvm-run-vm
  451. * Implement qrexec-based connection to updates proxy
  452. * Implement qubes.PostInstall service
  453. * Fix detection of PCI passthrough
  454. * rpm: rename qubes-core-vm to qubes-core-agent
  455. * Rename qubes-nautilus to qubes-core-agent-nautilus
  456. * Split dom0-updates handling into subpackage
  457. * rpm: make file list more verbose to ease splitting the package
  458. * Split network-related files to -networking and -network-manager
  459. packages
  460. * Remove DisposableVM savefile related files
  461. * rpm: integrate documentation into main package
  462. * Adjust dependencies for clean upgrade
  463. * rpm: drop dependency on desktop-notification-daemon
  464. * Do not report spurious failure of qubes.WaitForSession service
  465. * deb,rpm: split passwordless root access configs into separate
  466. package
  467. * Remove old vusb scripts
  468. * debian: update basic metadata of package
  469. * rpm,deb: split qrexec-agent into separate subpackage
  470. * debian: drop explicit dependency on sudo
  471. * Cleanup kernel modules loading configuration
  472. * Add qubes.VMRootShell service
  473. * Make all scripts in qubes-rpc executable
  474. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 09 Jun 2017 23:30:10 +0200
  475. qubes-core-agent (3.2.18-1) unstable; urgency=medium
  476. * debian,fedora: drop gnome-packagekit from dependencies
  477. * systemd: fix race condition between qubes-db and qubes-early-vm-
  478. config
  479. * dispvm: don't use perl to decode base64-encoded script
  480. * rpm: don't "append" to not existing /etc/yum.conf
  481. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 16 May 2017 00:54:18 +0200
  482. qubes-core-agent (3.2.17-1) unstable; urgency=medium
  483. [ Jean-Philippe Ouellet ]
  484. * Remove dates from man pages
  485. [ Robin Schneider ]
  486. * bind-dirs: Create ro if bind target exists
  487. * Fix handling of binds containing spaces
  488. * Fix more shellcheck warnings
  489. [ unman ]
  490. * If there is only 1 DNS server make both DNAT rules point to it
  491. [ Daniel Moerner ]
  492. * network: Properly handle comments in NetworkManager.conf (#2584)
  493. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 01 Apr 2017 21:45:29 +0200
  494. qubes-core-agent (3.2.16-1) unstable; urgency=medium
  495. [ Andrew David Wong ]
  496. * Update Xen bug count in sudoers comment
  497. [ Nicklaus McClendon ]
  498. * Copied needed sources to build root
  499. [ Patrick Schleizer ]
  500. * comment
  501. [ Olivier MEDOC ]
  502. * archlinux: fix community repositories URL
  503. [ Lorenzo ]
  504. * Shut down after update only if it's a template.
  505. * Shut down after update only if it's a template.
  506. [ Olivier MEDOC ]
  507. * archlinux: fix lsb_release missing
  508. * archlinux: update installer script to use systemd preset file
  509. * archlinux: fix bash syntax errors
  510. * Makefile: enforce mode 750 for directories /etc/sudoers.d and
  511. /etc/polkit-1/rules.d
  512. * archlinux: fix pacman.d dropin not activated if pacman.conf does not
  513. already contains qubes markers
  514. * archlinux: add missing qubes-rpc dependencies
  515. [ Gregorio Guidi ]
  516. * Restore functionality of disable-default-route and disable-dns-
  517. server.
  518. [ unman ]
  519. * Stop anacron from starting in Debian using existing constraint on
  520. cron
  521. * Constrain cron and anacron in Ubuntu also
  522. * Reset iptables ACCEPT rule for updates proxy if service is running
  523. * Fix build for trusty - locales-all not available
  524. * Move trusty check and locales-all fix inside source-debian-quilt-
  525. copy-in
  526. * Apply gschema override preventing previews in nautilus in Debian
  527. [ Marek Marczykowski-Górecki ]
  528. * debian: fix lintian warning - command-with-path-in-maintainer-script
  529. * debian: don't fail the upgrade if glib-compile-schemas fails
  530. [ unman ]
  531. * Stop unnecessary services in Debian
  532. [ Marek Marczykowski-Górecki ]
  533. * systemd: place user dropins in /usr/lib instead of /lib
  534. * Use online resize2fs, and run filesystem check only when needed
  535. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 07 Mar 2017 23:04:47 +0100
  536. qubes-core-agent (3.2.15-1) wheezy; urgency=medium
  537. * Fix detection of dom0 updates
  538. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 04 Dec 2016 22:39:01 +0100
  539. qubes-core-agent (3.2.14-1) wheezy; urgency=medium
  540. [ unman ]
  541. * Add systemd override for haveged in xenial and stretch. (#2161)
  542. Reenable haveged.service after debian package installation
  543. [ Marek Marczykowski-Górecki ]
  544. * travis: drop debootstrap workaround
  545. [ Rusty Bird ]
  546. * v2: (vm) qvm-move-to-vm: don't "rm -rf" vm name argument
  547. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 04 Dec 2016 21:57:10 +0100
  548. qubes-core-agent (3.2.13-1) wheezy; urgency=medium
  549. [ Manuel Amador (Rudd-O) ]
  550. * Make signing optional for testing, and add program checks.
  551. * Clean up early initialization and setup of /rw
  552. * Better private.img size management.
  553. * Invert logic of systemd_version_changed.
  554. * Fix VM settings running while / is readonly.
  555. * Clean up specfile unit activation aspect.
  556. * Invert logic of SKIP_SIGNING.
  557. [ Marek Marczykowski-Górecki ]
  558. * Revert "network: disable proxy_arp"
  559. [ Jean-Philippe Ouellet ]
  560. * Keep Makefile DRY
  561. [ Marek Marczykowski-Górecki ]
  562. * Refactor qubes.InstallUpdatesGUI to reduce code duplication
  563. * Ask to shutdown the template after performing update
  564. * Prefer powerpill to update Archlinux VM
  565. [ Patrick Schleizer ]
  566. * fix reload_random_seed error handling
  567. [ Marek Marczykowski-Górecki ]
  568. * Write random seed directly to /dev/urandom
  569. [ Manuel Amador (Rudd-O) ]
  570. * Initialize home_volatile for disposable VMs.
  571. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 18 Nov 2016 01:59:25 +0100
  572. qubes-core-agent (3.2.12-1) wheezy; urgency=medium
  573. [ unman ]
  574. * Remove custom mount when starting cron, in favour of bind-dirs
  575. * use bind-dirs to handle crontab persistence
  576. * Revert version and correct unit files
  577. * Remove entry in changelog as version not bumped
  578. [ Rudd-O ]
  579. * Eliminate race condition with qubes-setup-dnat-to-ns
  580. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 18 Oct 2016 15:55:40 +0200
  581. qubes-core-agent (3.2.11-1) wheezy; urgency=medium
  582. [ HW42 ]
  583. * bind-dirs: copy from ro only if bind target doesn't exists
  584. [ Marek Marczykowski-Górecki ]
  585. * network: minor setup-ip fix
  586. * Configure NetworkManager to keep /etc/resolv.conf as plain file
  587. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 03 Oct 2016 11:32:40 +0200
  588. qubes-core-agent (3.2.10-1) wheezy; urgency=medium
  589. [ HW42 ]
  590. * systemd: fix qubes-mount-home path in cleanup script
  591. * systemd: remove obsolete symlinks with rm instead of systemctl
  592. [ Marek Marczykowski-Górecki ]
  593. * network: reload NM connection after setting it up
  594. * systemd: fix syntax error in preset file
  595. [ Patrick Schleizer ]
  596. * comment legacy function
  597. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 08 Aug 2016 05:23:02 +0200
  598. qubes-core-agent (3.2.9-1) wheezy; urgency=medium
  599. [ Marek Marczykowski-Górecki ]
  600. * systemd: cleanup removed services
  601. * systemd: order qubes-mount-dirs.service before local-fs.target
  602. * systemd: load xen-privcmd module
  603. * systemd: include tor-disabling drop-ins in the package
  604. * systemd: improve ordering of systemd units
  605. [ Patrick Schleizer ]
  606. * add /usr/lib/qubes/bind-dirs.sh compatibility symlink
  607. * empty legacy function
  608. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 27 Jul 2016 06:08:56 +0200
  609. qubes-core-agent (3.2.8-1) wheezy; urgency=medium
  610. * dom0-updates: fix cleaning downloaded packages
  611. * Revert "systemd: preset xendriverdomain on update"
  612. * systemd: don't mark updates check service failed
  613. * systemd: plug random seed loading into systemd-random-seed
  614. * Include Qubes Master Key in the VM template
  615. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 17 Jul 2016 04:27:04 +0200
  616. qubes-core-agent (3.2.7-1) wheezy; urgency=medium
  617. [ Marek Marczykowski-Górecki ]
  618. * systemd: preset xendriverdomain on update
  619. * rpm: fix misleading systemd warnings during upgrade
  620. [ Olivier MEDOC ]
  621. * archlinux: switch to usage of pacman.d drop-ins
  622. * archlinux: Setup default package repository
  623. * archlinux: ensure repositories are the last pacman.d files included
  624. * archlinux: fix update-proxy-configs to use pacman.d drop-ins
  625. [ Patrick Schleizer ]
  626. * fixed qubes-core-agent upgrading double package manager lock
  627. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 13 Jul 2016 22:43:06 +0200
  628. qubes-core-agent (3.2.6-1) wheezy; urgency=medium
  629. [ Patrick Schleizer ]
  630. * Do not start tor@default service in TemplateVM.
  631. [ Marek Marczykowski-Górecki ]
  632. * dom0-updates: use dnf --best --allowerasing
  633. [ Rusty Bird ]
  634. * Order network management units after network-pre.target
  635. * dvm, then xendriverdomain, then qrexec-agent
  636. * *Do* block until good random is available again
  637. * Remove 'if true' wrapper from
  638. 06a0d30d50ce4ea266532c06ef24880bf5363c1b
  639. * Enable xendriverdomain.service in 75-qubes-vm.preset
  640. [ Patrick Schleizer ]
  641. * add comment
  642. * add comment
  643. [ Olivier MEDOC ]
  644. * archlinux: update installer script in prevision of pacman.d drop-ins
  645. * archlinux: provide automatic qubes-trigger-sync-appmenus through
  646. pacman hooks
  647. * archlinux: remove unnecessary glib-compile-scheme
  648. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 13 Jul 2016 04:38:17 +0200
  649. qubes-core-agent (3.2.5-1) wheezy; urgency=medium
  650. * travis: add fc24 build
  651. * debian: add missing pkg-config build depends
  652. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 06 Jun 2016 00:18:54 +0200
  653. qubes-core-agent (3.2.4-1) wheezy; urgency=medium
  654. [ Patrick Schleizer ]
  655. * fix indent
  656. [ Marek Marczykowski-Górecki ]
  657. * dom0-updates: use dnf when available
  658. * Prefer 'dnf' over 'yum' for template update
  659. [ unman ]
  660. * Fall back to gnome utilities if kdialog not present
  661. [ Marek Marczykowski-Górecki ]
  662. * travis: initial version
  663. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 05 Jun 2016 22:10:58 +0200
  664. qubes-core-agent (3.2.3-1) wheezy; urgency=medium
  665. * Cleanup R3.1->R3.2 transitional package
  666. * Update repository definitions for R3.2
  667. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 18 May 2016 23:43:22 +0200
  668. qubes-core-agent (3.2.2-1) wheezy; urgency=medium
  669. * systemd: order units checking for qubes-service after qubes-sysinit
  670. * qvm-open-in-vm: escape URL when wrapping it in HTML
  671. * Implement qubes.OpenURL service instead of wrapping URLs in HTML
  672. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 18 May 2016 03:00:12 +0200
  673. qubes-core-agent (3.2.1-1) wheezy; urgency=medium
  674. [ Marek Marczykowski-Górecki ]
  675. * qubes-rpc: fix SVG icon scaling
  676. * Fix bind-dirs.sh path
  677. [ Olivier MEDOC ]
  678. * archlinux: fix remaining loginctl privilege issues with invalid
  679. pam.d configuration
  680. [ Marek Marczykowski-Górecki ]
  681. * Remove obsolete policy files
  682. [ Patrick Schleizer ]
  683. * fixed bind-dirs legacy import function
  684. * fixed sh syntax error
  685. * minor debug xtrace output
  686. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 05 May 2016 00:05:13 +0200
  687. qubes-core-agent (3.2.0-1) wheezy; urgency=medium
  688. [ Patrick Schleizer ]
  689. * disable systemd-timesyncd
  690. [ Marek Marczykowski-Górecki ]
  691. * qrexec: write service stderr to both syslog and caller
  692. * qrexec: hide timing debug messages in vm-file-editor
  693. [ Patrick Schleizer ]
  694. * do not start the Tor service inside Qubes TemplateVMs
  695. * work on bind-dirs https://phabricator.whonix.org/T414
  696. * work on bind-dirs
  697. * work on bind-dirs
  698. * renamed: misc/bind-dirs -> vm-systemd/bind-dirs
  699. * renamed: bind-dirs -> bind-dirs.sh
  700. * run /usr/lib/qubes/bind-dirs.sh from mount-dirs.sh
  701. * use symlink_level_max rather than hardcoding 10; comment
  702. * also exit from bind-directories if file /var/run/qubes-service/qubes-
  703. dvm exists
  704. * fixed broken file copy for files in multi level directories
  705. * refactoring / code simplification
  706. [ Rusty Bird ]
  707. * qvm-move-to-vm: Remove duplicated code
  708. * qvm-move-to-vm: Use '--' before file arguments
  709. * Use && in qvm-move-to-vm
  710. [ Andrew ]
  711. * Use proper space-expanded tabs, as per the coding guidelines.
  712. * Move usage information printing to separate function, and print
  713. usage to stderr; also added some spacing.
  714. * Use proper quoting around variables.
  715. * Properly handle case of empty domain name.
  716. [ Marek Marczykowski-Górecki ]
  717. * rpm: Add bind-dirs.sh to spec file
  718. * qubes.SuspendPreAll and qubes.SuspendPostAll services
  719. * qrexec: unify service environment preparation
  720. [ Patrick Schleizer ]
  721. * use 'true' rather than ':' for consistency
  722. * minor indent
  723. [ Rusty Bird ]
  724. * Remove exec in last line of qvm-copy-to-vm
  725. [ Marek Marczykowski-Górecki ]
  726. * qrexec: add service argument support
  727. * network: run setup-ip only on xen frontend interfaces
  728. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 29 Mar 2016 14:41:34 +0200
  729. qubes-core-agent (3.1.14-1) wheezy; urgency=medium
  730. * network: use `qubes-primary-dns` QubesDB entry if present
  731. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 07 Mar 2016 13:47:01 +0100
  732. qubes-core-agent (3.1.13-1) wheezy; urgency=medium
  733. [ Marek Marczykowski-Górecki ]
  734. * sysinit: Accept also old xenbus kernel interface
  735. [ adrianx64 ]
  736. * Proposed solution for issue #1657
  737. [ Marek Marczykowski-Górecki ]
  738. * Move opening file viewer/editor into separate shell script
  739. * qubes-open: switch from mimeopen to xdg-open
  740. [ Olivier MEDOC ]
  741. * update qubes.InstallUpdateGUI to support archlinux
  742. * archlinux: add gcc and make as make dependencies
  743. * implement update proxy support for archlinux
  744. * archlinux: add Qubes Markers in pacman.conf so that changes done by
  745. qubes scripts are not inserted at the end of pacman.conf
  746. * archlinux: properly add qubes markers in pacman.conf
  747. * update-proxy: use curl instead of wget in archlinux in order to
  748. limit additional dependencies
  749. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 08 Feb 2016 05:07:39 +0100
  750. qubes-core-agent (3.1.12-1) wheezy; urgency=medium
  751. * Unload USB controllers drivers in USB VM before going to sleep
  752. * Do not try to signal NetworkManager before suspend if it isn't
  753. running
  754. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 11 Jan 2016 21:59:34 +0100
  755. qubes-core-agent (3.1.11-1) wheezy; urgency=medium
  756. [ Marek Marczykowski-Górecki ]
  757. * dom0-updates: add a message explaining yum deprecated warning
  758. [ noname ]
  759. * archlinux: Added python{2,3} as dependency. Solved python22 bug.
  760. [ Marek Marczykowski-Górecki ]
  761. * Fix time sync service
  762. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 07 Jan 2016 05:52:35 +0100
  763. qubes-core-agent (3.1.10-1) wheezy; urgency=medium
  764. * network: use more strict policy about incoming traffic
  765. * debian: add missing python-gtk2 dependency
  766. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 31 Dec 2015 02:58:29 +0100
  767. qubes-core-agent (3.1.9-1) wheezy; urgency=medium
  768. * dnf: drop shebang, it isn't standalone script
  769. * Package DNF plugin for both python2 and python3
  770. * dom0-updates: fix reporting when no updates are available
  771. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 26 Dec 2015 14:24:00 +0100
  772. qubes-core-agent (3.1.8-1) wheezy; urgency=medium
  773. [ Marek Marczykowski-Górecki ]
  774. * open-in-vm: Fix path to mimeinfo database
  775. [ Olivier MEDOC ]
  776. * archlinux: fix invalid systemd path in make install directive
  777. * archlinux: remove quotes when checking system locales (in case it
  778. has been user defined)
  779. [ MB ]
  780. * [network-proxy-setup] Permit !CONFIG_MODuLES
  781. [ Rusty Bird ]
  782. * repo description: updates-testing -> security-testing
  783. [ Marek Marczykowski-Górecki ]
  784. * debian: add security-testing repository
  785. [ Olivier MEDOC ]
  786. * archlinux: ensure systemctl reset preset correctly (need to be
  787. started twice)
  788. [ Marek Marczykowski-Górecki ]
  789. * updates-proxy: restart on network configuration change to reload DNS
  790. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 20 Dec 2015 03:12:39 +0100
  791. qubes-core-agent (3.1.7-1) wheezy; urgency=medium
  792. * updates-proxy: explicitly block connection looping back to the proxy
  793. IP
  794. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 04 Dec 2015 15:32:14 +0100
  795. qubes-core-agent (3.1.6-1) wheezy; urgency=medium
  796. * Revert "network: use drop-ins for NetworkManager configuration
  797. (#1176)"
  798. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 29 Nov 2015 00:34:34 +0100
  799. qubes-core-agent (3.1.5-1) wheezy; urgency=medium
  800. [ Patrick Schleizer ]
  801. * clean up /etc/tinyproxy/filter-updates
  802. [ Olivier MEDOC ]
  803. * updates-proxy: remove remaining traces of proxy filtering file from
  804. Makefile
  805. * rpm_spec: declare InstallUpdateGUI qrexec_service
  806. * archlinux: enforce minimum versionning of qubes-utils
  807. [ Patrick Schleizer ]
  808. * Prevent services from being accidentally restarted by `needrestart`.
  809. * Have qubes-sysinit create /var/run/qubes VM type files.
  810. [ Marek Marczykowski-Górecki ]
  811. * Package needrestart config only for Debian
  812. * debian: reformat Build-Depends:
  813. * debian: update build-depends for split qubes-utils package
  814. * backup: Use 'type' instead of 'which' to prevent unnecessary
  815. dependency
  816. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 28 Nov 2015 14:48:33 +0100
  817. qubes-core-agent (3.1.4-1) wheezy; urgency=medium
  818. [ Marek Marczykowski-Górecki ]
  819. * Minor improvements to packaging (based on rpmlint)
  820. [ Patrick Schleizer ]
  821. * removed confusing comments
  822. * minor indent
  823. * No longer start /etc/init.d/tinyproxy by default anymore.
  824. [ Marek Marczykowski-Górecki ]
  825. * Revert "preset disable tinyproxy by default"
  826. [ Patrick Schleizer ]
  827. * minor, removed trailing space
  828. * Improved upgrade notifications sent to QVMM.
  829. * fixed inverted logic issue in upgrades-installed-check
  830. * misc/upgrades-installed-check: handle apt-get errors
  831. [ Marek Marczykowski-Górecki ]
  832. * Explicitly fail upgrades-installed-check on other distributions
  833. [ qubesuser ]
  834. * Allow to provide customized DispVM home directly in the template VM
  835. [ Marek Marczykowski-Górecki ]
  836. * network: let NetworkManager configure VM uplink, if enabled
  837. * Use improved update-notify script also in Fedora
  838. * Implement qubes.InstallUpdatesGUI qrexec service
  839. * Really fix update-proxy rules for debian security fixes repo
  840. * updates-proxy: disable filtering at all
  841. * network: disable proxy_arp
  842. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 15 Nov 2015 04:29:29 +0100
  843. qubes-core-agent (3.1.3-1) wheezy; urgency=medium
  844. [ Marek Marczykowski-Górecki ]
  845. * network: forward TCP DNS queries
  846. [ Patrick Schleizer ]
  847. * removed trailing spaces
  848. * Renamed qubes-mount-home to qubes-mount-dirs.
  849. [ Marek Marczykowski-Górecki ]
  850. * qrexec: implement buffered write to a child stdin
  851. [ Olivier MEDOC ]
  852. * archlinux: update packaging and install script to use systemd
  853. DROPINs
  854. * archlinux: force running scripts with python2 even when /usr/bin/env
  855. is used
  856. * archlinux: readd notification-daemon as a dependency
  857. * archlinux: readd lines removed by error during merge
  858. [ Patrick Schleizer ]
  859. * disable leaking TCP timestamps by default
  860. [ Marek Marczykowski-Górecki ]
  861. * rpm: add /etc/sysctl.d/20_tcp_timestamps.conf
  862. * rpm: remove duplicated entry
  863. [ Patrick Schleizer ]
  864. * cleanup /etc/apt/apt.conf.d/00notiy-hook on existing systems
  865. [ erihe251 ]
  866. * Small language fixes
  867. * Update qubes.sudoers
  868. [ Marek Marczykowski-Górecki ]
  869. * Require new enough qubes-utils package for updated libqrexec-utils
  870. * debian: install locales-all instead of custom locales generation
  871. * makefile: cleanup help message
  872. * Setup updates proxy in dnf and PackageKit
  873. * backup: fix handling backup filename with spaces
  874. * backup: improve exit code reporting
  875. [ Rusty Bird ]
  876. * qfile-unpacker: Avoid data loss by checking for child errors
  877. [ Marek Marczykowski-Górecki ]
  878. * appmenus: ignore entries with NoDisplay=true
  879. * qfile-agent: move data handling code to libqubes-rpc-filecopy
  880. [ yaqu ]
  881. * Replacing "sleep 365d" with "sleep inf"
  882. [ Marek Marczykowski-Górecki ]
  883. * No longer disable auditd
  884. * dom0-updates: prefer yum-deprecated over dnf
  885. * fedora: Add skip_if_unavailable=False to Qubes repositories
  886. [ Olivier MEDOC ]
  887. * add DROPINS for org.cups.cupsd systemd files.
  888. * dropins: make current systemd dropins specific to systemd-system in
  889. order to introduce dropins for systemd-user
  890. * dropins: implement dropins for systemd user starting with pulseaudio
  891. systemd service and socket masking
  892. [ Marek Marczykowski-Górecki ]
  893. * qrexec: add some comments, minor improvement in readability
  894. * qrexec: use #define for protocol-specified strings
  895. * dracut: disable hostonly mode
  896. * dom0-updates: use yum-deprecated instead of dnf in all calls
  897. * updates-proxy-setup: use temporary file for config snippet
  898. * Implement dnf hooks for post-update actions
  899. * fedora: do not require/use yum-plugin-post-transaction-actions in
  900. F>=22
  901. * Get rid of qubes-core-vm-kernel-placeholder
  902. * systemd: make sure that update check is started only after qrexec-
  903. agent
  904. * dom0-updates: do not use 'yum check-update -q'
  905. * Bump qubes-utils version requirement
  906. [ Patrick Schleizer ]
  907. * preset disable tinyproxy by default
  908. [ Marek Marczykowski-Górecki ]
  909. * updates-proxy: use separate directory for PID file
  910. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 11 Nov 2015 06:29:21 +0100
  911. qubes-core-agent (3.1.2-1) wheezy; urgency=medium
  912. [ Marek Marczykowski-Górecki ]
  913. * Enlarge /tmp and /dev/shm
  914. * network: use own iptables service instead of repurposing existing
  915. one
  916. [ Patrick Schleizer ]
  917. * removed iptables-persistent from Depends to improve usablity (avoid
  918. redundant debconf question)
  919. [ Marek Marczykowski-Górecki ]
  920. * debian: disable netfilter-persistent.service
  921. * Adjust progress message on file move operation
  922. * Run 'ldconfig' to update /usr/local/lib* cache, if applicable
  923. * updates-proxy: Disable 'Via: tinyproxy' header
  924. * Cleanup R3.0->R3.1 transitional package
  925. * network: use drop-ins for NetworkManager configuration (#1176)
  926. * network: fix 'qubes-uplink-eth0' NetworkManager connection (#1280)
  927. [ Patrick Schleizer ]
  928. * minor
  929. [ HW42 ]
  930. * qubes-random-seed: feed kernel rng with randomness from dom0
  931. * reload qubes-random-seed when restoring DispVM
  932. [ Marek Marczykowski-Górecki ]
  933. * systemd: actually enable qubes-random-seed service
  934. * sysvinit: load random seed from dom0 provided data
  935. * Use 'type' instead of 'which' to prevent unnecessary dependency
  936. * Add missing R: dconf to hide nm-applet when not used
  937. * dom0-updates: Fix showing package list when --check-only option was
  938. used
  939. * dom0-updates: check "yum check-update" exit code, not only its
  940. output
  941. * dom0-updates: fix hostname in error message
  942. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sun, 11 Oct 2015 03:00:00 +0200
  943. qubes-core-agent (3.1.1-1) wheezy; urgency=medium
  944. * Update repository definition for r3.1
  945. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 29 Sep 2015 16:55:35 +0200
  946. qubes-core-agent (3.1.0-1) wheezy; urgency=medium
  947. [ Patrick Schleizer ]
  948. * Allow passwordless login for user "user" (when using 'sudo xl
  949. console').
  950. * Allow passwordless login for user "user" (when using 'sudo xl
  951. console') for images being upgraded.
  952. * show error msg if qubes.ReceiveUpdates failed
  953. [ qubesuser ]
  954. * qubes-rpc: fix broken temporary file deletion in qubes.GetImageRGBA
  955. [ Patrick Schleizer ]
  956. * added missing dependency python-dbus to 'Depends:'
  957. [ Marek Marczykowski-Górecki ]
  958. * rpm: add dbus-python dependency
  959. [ qubesuser ]
  960. * qubes-rpc: fix broken temporary file deletion in qubes.GetImageRGBA
  961. * qubes-rpc: fix icon selection using pyxdg and support SVG icons
  962. [ Patrick Schleizer ]
  963. * fixed 'Debian 8 apt.config.d misconfiguration'
  964. * added missing dependency xserver-xorg-dev
  965. * - Prevent 'su -' from asking for password in Debian [based]
  966. templates. Thanks to @unman and @marmarek for suggesting the fix!
  967. Fixes https://github.com/QubesOS/qubes-issues/issues/1128. - Changed
  968. 'ifeq (1,${DEBIANBUILD})' to 'ifeq ($(shell lsb_release -is),
  969. Debian)' to make the build work outside of Qubes Builder as well.
  970. * Fixed /etc/pam.d/su.qubes. (Moved line 'auth sufficient
  971. pam_permit.so' up. May not be low '@include' lines.)
  972. * fix typo
  973. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 29 Sep 2015 16:39:55 +0200
  974. qubes-core-agent (3.0.16-1) wheezy; urgency=medium
  975. [ Marek Marczykowski-Górecki ]
  976. * debian: remove SELinux disabling code
  977. * Revert "qubes-desktop-run: Activate via DBUS when desktop file
  978. contains DBusActivatable"
  979. * qubes-desktop-run: start the Dbus service (if needed)
  980. [ Patrick Schleizer ]
  981. * added pulseaudio-kde and spice-vdagent to qubes-trigger-desktop-
  982. file-install
  983. [ Jason Mehring ]
  984. * debian: Move python-xdg to depends section in debian/control
  985. * sudoers.d: Stops QT from using the MIT-SHM X11 Shared Memory
  986. Extension
  987. [ Rusty Bird ]
  988. * Mount /dev/xvdb with fs type "auto"
  989. [ Marek Marczykowski-Górecki ]
  990. * Move .desktop launching code to python moules so it can be reused
  991. * Implement dropins for /etc/xdg/autostart (#1151)
  992. * Remove dynamically generated autostart desktop files
  993. * qubes-session-autostart: do not abort the whole process on invalid
  994. file
  995. * qubes-desktop-run: don't crash on Debian wheezy (glib < 2.36)
  996. * debian: fix /dev permissions on upgrade
  997. * systemd: fix starting cups
  998. * debian: depend on gawk
  999. * Fix show-hide-nm-applet.desktop - use OnlyShowIn=X-QUBES
  1000. [ Patrick Schleizer ]
  1001. * moved python-xdg from Recommends to Depends
  1002. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 03 Sep 2015 02:45:30 +0200
  1003. qubes-core-agent (3.0.15-1) wheezy; urgency=medium
  1004. * debian: remove `Recommends: chrony`
  1005. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 08 Aug 2015 23:23:38 +0200
  1006. qubes-core-agent (3.0.14-1) wheezy; urgency=medium
  1007. [ Marek Marczykowski-Górecki ]
  1008. * kernel-placeholder: prevent xl2tpd from pulling kernel packages
  1009. * qubes-core-vm-kernel-placeholder 1.0-3
  1010. [ Olivier MEDOC ]
  1011. * archlinux: update dependency list based on .spec file
  1012. * archlinux: reorganize install script to make it more easily
  1013. compareable with the .spec file
  1014. * archlinux: fix syntax errors in install file
  1015. [ Marek Marczykowski-Górecki ]
  1016. * debian: fix permissions of /var/lib/qubes/dom0-updates
  1017. [ Patrick Schleizer ]
  1018. * also inform in cli if no new updates are available
  1019. [ Olivier MEDOC ]
  1020. * archlinux: pulseaudio should be configured in gui agent and will
  1021. break installation of pulseaudio if installed in core-agent-linux
  1022. * archlinux: enabled configuration of all core agent dependencies
  1023. * archlinux: ensure python2 is used for all scripts and fix
  1024. dependencies for qubes-desktop-run
  1025. [ Jason Mehring ]
  1026. * debian: Renamed incorrect filename: 00notiy-hook -> 00notify-hook
  1027. * debian: Comment out deb-src line in qubes-r3.list
  1028. * Use 'which' to locate fuser since fuser path is different in Fedora
  1029. and Debian
  1030. * debian: Change triggers to use `interest-await` (execute triggers
  1031. after all packages installed)
  1032. * Remove '.service' from systemd enable loop as unit_name already
  1033. contains .service in name
  1034. * debian: remove cups/print-applet triggers
  1035. * debian: Added cups, system-config-printer to Recommends
  1036. * Makefile: Add systemd drop-in support which include conditionals to
  1037. prevent services from starting
  1038. * fedora: Add systemd drop-in support which include conditionals to
  1039. prevent services from starting
  1040. * debian: Add systemd drop-in support which include conditionals to
  1041. prevent services from starting
  1042. * Re-aranged qubes-vm.preset to indicate which services are specificly
  1043. for Fedora only
  1044. * vm-systemd: Add systemd drop-in support which include conditionals
  1045. to prevent services from starting
  1046. [ Marek Marczykowski-Górecki ]
  1047. * archlinux: remove installOverridenServices as now handled by systemd
  1048. dropins
  1049. * fedora: do not own dropins directories
  1050. * fedora: simulate preset-all only on first install, not upgrade
  1051. * fedora: fix default locale generation
  1052. * qrexec: fix exit code from qrexec-client-vm
  1053. * qrexec: make sure that all the pipes/sockets are closed on cleanup
  1054. [ Jason Mehring ]
  1055. * qubes-desktop-file-install: Manages xdg desktop entry files
  1056. * debian: Reformat depends in control for better readability
  1057. * debian: qubes-desktop-file-install: Add misssing depend to contol
  1058. * debian: Switch to using org.mate.NotificationDaemon by default to
  1059. eliminate popups not closing
  1060. * fedora: Use 'slider' org.mate.NotificationDaemon theme
  1061. * qubes-desktop-run: Activate via DBUS when desktop file contains
  1062. DBusActivatable
  1063. [ Marek Marczykowski-Górecki ]
  1064. * Move `/usr/share/qubes/xdg` to `/var/lib/qubes/xdg`
  1065. [ Patrick Schleizer ]
  1066. * fixed "in place upgrade issue - base-passwd debconf interative
  1067. question asks 'Remove group "qubes"'"
  1068. * fixed "in place upgrade issue - base-passwd debconf interative
  1069. questi…on asks 'Remove group "qubes"'" for existing users
  1070. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 08 Aug 2015 04:16:52 +0200
  1071. qubes-core-agent (3.0.13-1) wheezy; urgency=medium
  1072. * fedora: ensure that /etc/sysconfig/iptables exists (Fedora 20)
  1073. * fedora/systemd: fix service enabling code
  1074. * network: use iptables-restore instead of iptables --wait
  1075. * network: guard iptables call with manual lock
  1076. * network: disable tx csum offload on vif interfaces
  1077. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Wed, 01 Jul 2015 07:05:53 +0200
  1078. qubes-core-agent (3.0.12-1) wheezy; urgency=medium
  1079. * dom0-updates: make the tool working on Debian
  1080. * fedora, debian: make sure that default locale is generated
  1081. * rpm: improve setting iptables rules
  1082. * Do not override file pointed by /etc/localtime symlink
  1083. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 23 Jun 2015 20:06:22 +0200
  1084. qubes-core-agent (3.0.11-1) wheezy; urgency=medium
  1085. [ Marek Marczykowski-Górecki ]
  1086. * debian: fix apt sources.list generation (missing debian version
  1087. field)
  1088. [ Jason Mehring ]
  1089. * Set a default locale if missing
  1090. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 11 Jun 2015 04:06:26 +0200
  1091. qubes-core-agent (3.0.10-1) wheezy; urgency=medium
  1092. * rpm: ensure that all the services are enabled after upgrade
  1093. * qrexec: do not show message about missing fork-sever - it isn't an
  1094. error
  1095. * rpm: add missing dependencies
  1096. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 02 Jun 2015 11:20:18 +0200
  1097. qubes-core-agent (3.0.9-1) wheezy; urgency=medium
  1098. [ Jason Mehring ]
  1099. * debian: Only notify dom0 on apt-get post hook; don't update package
  1100. index
  1101. * debian: Allow apt-get post hook to fail gracefully (won't work in
  1102. chroot)
  1103. [ Marek Marczykowski-Górecki ]
  1104. * appmenus: hide message about missing /usr/local/share/applications
  1105. * qrexec: prefer VM-local service file (if present) over default one
  1106. * rpm: mark service files as configuration to not override user
  1107. changes
  1108. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 May 2015 03:27:58 +0200
  1109. qubes-core-agent (3.0.8-1) wheezy; urgency=medium
  1110. [ Marek Marczykowski-Górecki ]
  1111. * Use iptables --wait only when it is supported
  1112. [ Jason Mehring ]
  1113. * debian: Update notification now notifies dom0 when an upgrade is
  1114. completed
  1115. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 28 Apr 2015 12:51:48 +0200
  1116. qubes-core-agent (3.0.7-1) wheezy; urgency=medium
  1117. [ Marek Marczykowski-Górecki ]
  1118. * debian: install qubes-download-dom0-updates.sh
  1119. * prepare-dvm: fix bashism
  1120. * network: wait for iptables lock instead of aborting
  1121. * rpm: cleanup R2->R3.0 transitional package
  1122. [ Jason Mehring ]
  1123. * whonix: Added protected-files file used to prevent scripts from
  1124. modifying files that need to be protected
  1125. * Changed location of PROTECTED_FILE_LIST to /etc/qubes/protected-
  1126. files.d
  1127. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 25 Apr 2015 02:36:55 +0200
  1128. qubes-core-agent (3.0.6-1) wheezy; urgency=medium
  1129. * qrexec: do not reset umask to 077 for every started process
  1130. * rpm/systemd: do not use preset-all during package upgrade
  1131. * systemd: disable avahi-daemon and dnf-makecache
  1132. * dispvm: do not start GUI apps during prerun
  1133. * Fix resizing of /rw partition (private.img)
  1134. * Minor fixes in mount-home.sh
  1135. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 11 Apr 2015 03:40:57 +0200
  1136. qubes-core-agent (3.0.5-1) wheezy; urgency=medium
  1137. * systemd: use presets to enable services, call preset-all
  1138. * systemd: install overridden unit file for chronyd
  1139. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 07 Apr 2015 14:58:36 +0200
  1140. qubes-core-agent (3.0.4-1) wheezy; urgency=medium
  1141. [ Marek Marczykowski-Górecki ]
  1142. * qrexec: try to recover from fork-server communication error
  1143. * rpm: add missing BuildRequires: libX11-devel
  1144. * debian: fix handling SysV units in disableSystemdUnits
  1145. * debian: update NetworkManager configuration
  1146. [ Wojtek Porczyk ]
  1147. * qubes-rpc-multiplexer: deprecate /etc/qubes_rpc, allow /usr/local
  1148. * sudoers: do not require TTY
  1149. [ Marek Marczykowski-Górecki ]
  1150. * Update repository definition: r3 -> r3.0
  1151. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 02 Apr 2015 00:55:09 +0200
  1152. qubes-core-agent (3.0.3-1) wheezy; urgency=medium
  1153. * Enable updates repos by default
  1154. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 27 Mar 2015 01:24:43 +0100
  1155. qubes-core-agent (3.0.2-1) wheezy; urgency=medium
  1156. [ Marek Marczykowski-Górecki ]
  1157. * debian: fix version number
  1158. * backup: fix qubes.Restore service - do not send garbage as backup
  1159. data
  1160. [ Jason Mehring ]
  1161. * debian: Add extend-diff-ignore options to debian packager
  1162. [ Marek Marczykowski-Górecki ]
  1163. * qrexec: fork into background after setting up qrexec-fork-server
  1164. socket
  1165. * Fix "backup: fix qubes.Restore service - do not send garbage as
  1166. backup data"
  1167. [ Jason Mehring ]
  1168. * Switched qvm-move-to-vm.{gnome,kde} scripts to use bash not sh
  1169. * Removed nautilus-actions depend and replaced with nautilus-python
  1170. * Removed code that deleted original nautilus actions
  1171. [ Marek Marczykowski-Górecki ]
  1172. * fc21: fix DispVM preparation - Xorg has new name
  1173. * dispvm: kill all process after populating caches
  1174. * dispvm: start gui agent early, do not kill Xorg
  1175. * dispvm: close only visible windows during DispVM preparation
  1176. * Move mounting /rw and /home to separate service
  1177. * dispvm: use qubes.WaitForSession to wait for gui-agent startup
  1178. * dispvm: include memory caches in "used memory" notification
  1179. * dispvm: do not restart qubesdb-daemon, use watch instead
  1180. * qrexec: simplify makefile
  1181. * qrexec: handle data vchan directly from qrexec-client-vm
  1182. * qrexec: return remote process status as qrexec-client-vm exit code
  1183. * qrexec: better handle remote process termination
  1184. * qrexec: do not break connection on duplicated SIGUSR1
  1185. * qrexec: minor readability fix
  1186. * qrexec: process vchan data queue (esp MSG_EXIT_CODE) before sending
  1187. anything
  1188. * qrexec: add option to use real stdin/out of qrexec-client-vm
  1189. * qrexec: do not leak FDs to logger process
  1190. * qrexec: execute RPC service directly (without a shell) if it has
  1191. executable bit set
  1192. * qrexec: get rid of shell in services using EOF for any signaling
  1193. * qrexec: move qrexec-client-vm to /usr/bin
  1194. * Add support for comments in qubes-suspend-module-blacklist
  1195. * Create filesystem if the private.img is empty
  1196. * Provide stub files in /rw/config
  1197. * qrexec: fix compile warning
  1198. * qrexec: do not wait for local process if no one exists
  1199. * qrexec: enable compiler optimization
  1200. * Do not load xen-usbfront automatically
  1201. * fedora: override iptables configuration on initial installation
  1202. * Update comments and xenbus intf in startup scripts regarding vchan
  1203. requirements
  1204. * dom0-update: allow to specify custom yum action
  1205. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Thu, 26 Mar 2015 23:56:25 +0100
  1206. qubes-core-agent (3.0.1-1) jessie; urgency=medium
  1207. [ Marek Marczykowski-Górecki ]
  1208. * Reenable imsettings service
  1209. * systemd: fix xenstore-ls path
  1210. [ Jason Mehring ]
  1211. * Allow hyphenated distro names in tinyproxy filter
  1212. * Change condition test to compare to a link "-L"
  1213. * debian: add xen-utils-common as a dependancy to allow Debian proxies
  1214. * debian: Added maintainers scripts (pre / postinit + rm) - Currently
  1215. in debug mode
  1216. * debian: preinst needs a group and force no password entry on adduser
  1217. * debian: Added less restrictive filter option for debian packages
  1218. Sites like sourceforge append ?downloadxxx to end
  1219. * debian: added new depends
  1220. * debian: force shell to be bash since its default is dash and many
  1221. qubes scripts rely on bash and will break in dash and added
  1222. tinyproxy user
  1223. [ HW42 ]
  1224. * move fedora specific stuff to install-rh target
  1225. * don't track debina/files (since it is autogenerated)
  1226. * use systemd in debian
  1227. * install iptables/forwarding for debian
  1228. * various patches for debian
  1229. * improve update of /etc/hosts
  1230. * make source.list multiarch compatible
  1231. * add xserver-xorg-video-dummy to the dependencies list of qubes-core-
  1232. agent
  1233. * dispvm-presun.sh needs bash
  1234. * use sleep instead os usleep since it is more portable
  1235. * debian: chown /home_volatile/user in posinst
  1236. * fix xenstore-read path in network-proxy-setup.sh for debian
  1237. * debian: add dependency on xen-utils since it's needed for
  1238. proxy/netvm
  1239. * debian: add support for qubes appmenus
  1240. [ Marek Marczykowski-Górecki ]
  1241. * debian: fix initialization of /etc/hosts
  1242. [ Jason Mehring ]
  1243. * debian: set -e added in place of set -x
  1244. * debian: Made debian proxy filter rules more restrictive
  1245. * debian: Cleanup
  1246. * debian: Prepend package name to maintainers scripts
  1247. * debian: Add qubes-update-check for Debian
  1248. * debian: Revert back to original NetworkManager, ModemManager service
  1249. names
  1250. * debian: apt-get needs to update first
  1251. * debian: Remove absolute path to xenstore-*
  1252. * debian: Added more dependancies
  1253. * debian: Added postrm disable of other Qubes packages
  1254. * debian: Added all other outstanding triggers contained in rpm_spec
  1255. as well as triggers if other packages get installed at a later date
  1256. the configurations will run on them
  1257. * debian: removed commented out depends
  1258. * debian: Added more error reporting to track down any missing
  1259. dependancies
  1260. * debian: More depends for debian as netvm and some configuration
  1261. tweaks.
  1262. [ Marek Marczykowski-Górecki ]
  1263. * network: do not use ifcfg-rh NM plugin
  1264. * network: fix NM uplink config permissions
  1265. [ Jason Mehring ]
  1266. * debian: Add new notification agent depends; remove other
  1267. * debian: Added functionality to move desktop entry config files to
  1268. /usr/share/qubes/xdg/autostart to preserve originals
  1269. * debian: Wrong variable name was used to create
  1270. /usr/share/qubes/xdg/autostart
  1271. [ Marek Marczykowski-Górecki ]
  1272. * Fix compile flags order (-lX11 moved to the end)
  1273. [ Jason Mehring ]
  1274. * debian: Updated tinyproxy filter rules
  1275. * debian: Don't display systemd info in chroot since systemd show does
  1276. not work in chroot
  1277. [ Marek Marczykowski-Górecki ]
  1278. * network: fix indentation
  1279. * Fix disabling nm-applet when NM is disabled
  1280. * debian: create tinyproxy as system user
  1281. * debian: fix generation of apt sources list file
  1282. * debian: add missing python-gi to dependencies
  1283. * debian: remove obsolete code from postinst script
  1284. * debian: fix service name in postinst script
  1285. * Update update-proxy rules for debian security fixes repo
  1286. [ HW42 ]
  1287. * debian: move not strictly required packages to Recommends-Section.
  1288. * debian: remove unneeded acpid dependency
  1289. [ Marek Marczykowski-Górecki ]
  1290. * network: set uplink configuration based on MAC (NetworkManager)
  1291. * network: fix NM config preparation
  1292. [ Jason Mehring ]
  1293. * fc21: iptables configurations conflict with fc21 yum package manager
  1294. * fc21: Remove left-over code comment
  1295. [ Marek Marczykowski-Górecki ]
  1296. * fedora: Add security-testing repo definition
  1297. * filecopy: prevent files/dirs movement outside incoming directory
  1298. during transfer
  1299. * fedora: Fix iptables config install script
  1300. * fedora: Fix iptables config installation one more time
  1301. [ HW42 ]
  1302. * don't ignore asprintf() return value
  1303. [ Marek Marczykowski-Górecki ]
  1304. * network: support for not setting DNS and/or default gateway
  1305. [ Olivier MEDOC ]
  1306. * archlinux: fix new packaging requirements related to sbin, lib64,
  1307. run ...
  1308. * archlinux: align with fedora changes related to imsettings
  1309. [ Marek Marczykowski-Górecki ]
  1310. * fedora: reduce code duplication in systemd triggers
  1311. * fedora: reload systemd only once
  1312. * systemd: allow to start cron daemon (#909)
  1313. * filecopy: fallback to "open(..., 000)" method when /proc
  1314. inaccessible
  1315. * network: support for not setting DNS and/or default gateway (v2)
  1316. * rpm: add missing R: pygobject3-base
  1317. [ HW42 ]
  1318. * debian: fix for QSB #014 requires up to date qubes-utils
  1319. * debian: postinst: use systemctl mask
  1320. * debian: postinst: use dpkg-divert
  1321. * debian: don't generate regular conf files in postinst
  1322. * debian: postinst: don't remove /etc/udev/rules.d/*
  1323. * debian: postinst: don't create /rw - it is already part of the
  1324. package
  1325. * debian: postinst: use systemctl to set default target
  1326. * debian: postinst: remove fedora specific code
  1327. * debian: postinst: enable netfilter-persistent service
  1328. * debian: postinst: cleanup
  1329. * debian: postinst: don't start systemd services
  1330. * debian: postinst: enable haveged only if installed
  1331. * debian: postinst: remove redundant and misleading trigger output
  1332. * debian: install fstab as normal config file
  1333. * debian: preinst: remove modification of /etc/modules
  1334. * remove 'bashisms' or explicit use bash
  1335. * debian: preinst: don't force the default shell to bash
  1336. * debian: prerm: remove obsolete code
  1337. * debian: preinst: cleanup user creation
  1338. [ Wojtek Porczyk ]
  1339. * spec: require linux-utils-3.0.1
  1340. [ Matt McCutchen ]
  1341. * Switch to preset file for systemd units to disable.
  1342. * Make qvm-run bidirectional and document its limitations.
  1343. [ Marek Marczykowski-Górecki ]
  1344. * debian: change systemctl set-default back to manual symlink
  1345. * network: fix handling newline in firewall rules
  1346. * qrexec: use sockets instead of pipes to communicate with child
  1347. process
  1348. * qrexec: reorganise code for upcoming change
  1349. * qrexec: add simple "fork server" to spawn new processes inside user
  1350. session
  1351. * Adjust permissions of /var/run/qubes
  1352. [ Jason Mehring ]
  1353. * debian: Remove 'exit 0' in maintainer section scripts to all other
  1354. debhelpers (if any) to also execute
  1355. * Add a qubes group and then add the user 'user' to the group
  1356. * Remove 'xen.evtchn' udev rule
  1357. * Set permissions to /proc/xen/privcmd, so a user in qubes group can
  1358. access
  1359. * debian: Converted debian package to a quilt package to allow patches
  1360. * debian: Refactor Debian quilt packaging for xen
  1361. * debian: Remove 'exit 0' in maintainer section scripts to all other
  1362. debhelpers (if any) to also execute
  1363. * Add a qubes group and then add the user 'user' to the group
  1364. * Remove 'xen.evtchn' udev rule
  1365. * Set permissions to /proc/xen/privcmd, so a user in qubes group can
  1366. access
  1367. * debian: Converted debian package to a quilt package to allow patches
  1368. * debian: Revert depends back to use libxen-dev
  1369. * debian: Move creation of directories into debian.dirs configuration
  1370. file
  1371. * debian: Remove dist target from Makefile as copy-in is now being
  1372. used
  1373. * debian: Remove unneeded patch file and README
  1374. * Make sure when user is added to qubes group that the group is
  1375. appended
  1376. [ Marek Marczykowski-Górecki ]
  1377. * qrexec: fix compile warning
  1378. * debian: reenable -Werror, mentioned warning already fixed
  1379. * debian: exclude binary packages from source archive
  1380. * updates-proxy: allow xz compressed metadata (fc21)
  1381. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Tue, 17 Feb 2015 14:14:16 +0100
  1382. qubes-core-agent (3.0.0-1) jessie; urgency=medium
  1383. [ Marek Marczykowski-Górecki ]
  1384. * Improve handling of .desktop files
  1385. * suspend: do not disable network frontend devices
  1386. * Handle tabs in /etc/hosts
  1387. [ Marek Marczykowski ]
  1388. * Update for new vchan API
  1389. * spec: add dependencies on vchan package (both R: and BR:)
  1390. * load xen-gntalloc module required by libxenvchan
  1391. * spec: get backend_vmm from env variable
  1392. * rpm: fix typo
  1393. * Use Qubes DB instead of Xenstore
  1394. * systemd: fix qubes-service handling
  1395. * dispvm: restart qubesdb at DispVM start
  1396. [ Marek Marczykowski-Górecki ]
  1397. * qrexec: remove dom0 targets from makefile
  1398. * code style: replace tabs with spaces
  1399. * qrexec: new protocol - direct data vchan connections
  1400. * Use xenstore.h instead of xs.h
  1401. * qrexec: register exec function
  1402. * Update repos and keys for Qubes R3
  1403. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 22 Nov 2014 16:24:17 +0100
  1404. qubes-core-agent (2.1.42) jessie; urgency=medium
  1405. * firewall: show error message only on actual error
  1406. * Avoid 100MB reserved space in private ext4 partition
  1407. * gui-fatal: do not run as root
  1408. * fedora: workaround slow system shutdown (#852)
  1409. * Rename qubes-yum-proxy service to qubes-updates-proxy
  1410. * Rename yum-proxy-setup service to updates-proxy-setup
  1411. * updates-proxy: add rules for debian repositories (#887)
  1412. * qrexec: check for setuid() error when calling zenity/kdialog
  1413. * Use systemd mechanism for loading kernel modules (when available)
  1414. * Add missing u2mfn module load
  1415. * archlinux: modules-load.d handled now in generic files
  1416. * debian: migrate to native systemd services
  1417. * updates-proxy-setup: support setting proxy for apt (#887)
  1418. * Introduce qubes.SetDateTime service for time synchronization
  1419. * systemd: fix 'service' path
  1420. * Include /rw in the package
  1421. * debian: custom dh_auto_clean no longer needed
  1422. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Sat, 25 Oct 2014 01:49:58 +0200
  1423. qubes-core-agent (2.1.41) jessie; urgency=medium
  1424. [ Marek Marczykowski-Górecki ]
  1425. * dispvm: slow down "spinlock" while waiting for save/restore
  1426. [ Olivier MEDOC ]
  1427. * archlinux: add notification daemon
  1428. * archlinux: follow fedora20 qubes agent improvement
  1429. * archlinux: follow fedora20 qubes agent improvement
  1430. * archlinux: enable/disable services when corresponding packages got
  1431. installed
  1432. [ Marek Marczykowski-Górecki ]
  1433. * network: use the same gateway IP generation method as backend
  1434. * Revert "network: use the same gateway IP generation method as
  1435. backend"
  1436. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fri, 15 Aug 2014 17:45:15 +0200
  1437. qubes-core-agent (2.1.40) jessie; urgency=medium
  1438. [ Marek Marczykowski-Górecki ]
  1439. * Fix compiler warnings.
  1440. * Enable compiler optimization.
  1441. * rpm: do not disable abrt-applet autostart
  1442. * systemd: relax qubes-sysinit dependencies
  1443. * systemd: reexec systemd to ensure right version is running
  1444. * rpm: fix notification-daemon setup
  1445. * archlinux: do not fail mount /usr/lib/modules if already mounted
  1446. * version 2.1.34
  1447. * suspend: fix dbus-send invocation
  1448. * qubes-rpc: log service stderr to syslog instead of sending to dom0
  1449. (#842)
  1450. * version 2.1.35
  1451. [ Wojciech Zygmunt Porczyk ]
  1452. * misc: do not display file preview by default (#813)
  1453. [ Vincent Penquerc'h ]
  1454. * vm-file-editor: remove temporary file on exit
  1455. [ Marek Marczykowski-Górecki ]
  1456. * rpm: remove /lib/firmware/updates link
  1457. * Hide nm-applet icon earlier (#857)
  1458. * Configure only installed programs
  1459. * network: setup NM connection when its active in the ProxyVM
  1460. * version 2.1.36
  1461. * Add --dispvm to qvm-run documentation
  1462. * Fix formating
  1463. * Do not start nm-applet at all when no NetworkManager running (#857)
  1464. * version 2.1.37
  1465. * rpm: require generic "desktop-notification-daemon" not a specific
  1466. one
  1467. * rpm: enable haveged service by default (#673)
  1468. * Do not start nm-applet at all when no NetworkManager running -
  1469. update (#857)
  1470. * rpm: enable/disable services when corresponding packages got
  1471. installed
  1472. * dispvm: close all windows after apps prerun (#872)
  1473. * version 2.1.38
  1474. * systemd: do not reexec when not necessary
  1475. * version 2.1.39
  1476. * rpm: mark config files with %config(noreplace)
  1477. [ Davíð Steinn Geirsson ]
  1478. * Split install target into install-common and install-rh, and add all
  1479. target
  1480. * Fix make clean target
  1481. * Check for xenstore-read in /usr/sbin as well (default on debian)
  1482. * Use xenstore.h instead of xs.h when xen >= 4.2
  1483. * Explicitly specify /bin/bash for Makefile SHELL, since it's
  1484. required.
  1485. * Initial debian packaging
  1486. [ Marek Marczykowski-Górecki ]
  1487. * debian: update deps
  1488. * qrexec: fix loop bounds
  1489. * gitignore
  1490. * Fix bashism
  1491. * gitignore: fix binary packages declaration
  1492. * debian: add updates repo definition and key
  1493. * debian: fix qfile-unpacker perms
  1494. -- Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Mon, 28 Jul 2014 02:38:59 +0200
  1495. qubes-core-agent (2.1.33) jessie; urgency=low
  1496. * Initial Release.
  1497. -- Davíð Steinn Geirsson <david@dsg.is> Mon, 21 Apr 2014 01:31:55 +0000