newpid (15) unstable; urgency=medium

  * Start commands in their own process group (setpgid(0, 0)) so that
    background processes started inside cannot signal the caller's process
    group, e.g. an invoking shell or test harness.
    When no standard stream is a terminal, start a new session (setsid(2))
    instead, for maximum isolation from the caller's session and host.
    Interactive use keeps the caller's session and terminal: the command runs
    in its own process group and claims the foreground terminal group when
    started as the terminal's foreground process, so shells inside keep full
    job control.
    Add -s to force setsid(2) even when a terminal is present.
    Add a regression test to make check that a kill(0, SIGTERM) issued inside
    the sandbox cannot reach the test harness.
  * newpid -N: reject namespace names containing '/', and open them with
    openat() relative to /var/run/netns instead of building a full path, so a
    name can only ever refer to a single entry inside that directory and the
    PATH_MAX buffer on the small clone stack is gone.
  * newpid: retry waitpid() on EINTR in main() and don't fall back on an
    uninitialized exit status when it fails.
  * Forward SIGHUP/SIGINT/SIGQUIT/SIGTERM received by newpid to the command
    (main() -> run() -> command), so aborting newpid also stops the sandbox,
    which now runs in its own session/process group and is otherwise
    unreachable by process-group kills; on a hard kill (SIGKILL) the command
    is notified via the parent-death signal instead. Add a check-signal
    regression test to make check.
  * debian/copyright: DEP-5.

 -- Christoph Berg <myon@debian.org>  Tue, 13 Oct 2026 23:14:50 +0200

newpid (14) unstable; urgency=medium

  * ping is no longer suid root; run autopkgtest with sudo.
    Thanks Noah Meyerhans! (Closes: #1086014)

 -- Christoph Berg <myon@debian.org>  Sun, 10 Nov 2024 15:35:27 +0100

newpid (13) unstable; urgency=medium

  * Disable stackprotector on arm64, breaks clone().
  * debian/tests: Use Test-Command.

 -- Christoph Berg <myon@debian.org>  Tue, 07 Apr 2020 16:42:44 +0200

newpid (12) unstable; urgency=medium

  [ Balint Reczey ]
  * test: Ignore space changes in ps' output.

  [ Christoph Berg ]
  * debian/gitlab-ci.yml: Use standard Salsa CI pipeline.

 -- Christoph Berg <myon@debian.org>  Mon, 15 Jul 2019 16:11:01 +0200

newpid (11) unstable; urgency=medium

  * Update testsuite for changed "ping" output in iputils-ping 3:20190515-2.
    Closes: #931648

 -- Christoph Berg <myon@debian.org>  Mon, 15 Jul 2019 15:17:16 +0200

newpid (10) unstable; urgency=medium

  * newnet.pod: Fix typo "netpid".

 -- Christoph Berg <christoph.berg@credativ.de>  Mon, 18 Feb 2019 14:11:35 +0100

newpid (9) unstable; urgency=medium

  [ James Clarke ]
  * Use __clone2 on ia64 as it has no clone.

  [ Christoph Berg ]
  * Bump to DH 11.

 -- Christoph Berg <christoph.berg@credativ.de>  Tue, 09 Jan 2018 10:41:56 +0100

newpid (8) unstable; urgency=medium

  * If setcap fails (because the filesystem or namespace lacks support for
    capabilities), fall back to setuid, so the installation doesn't fail.
    Thanks to Adam Conrad for the patch! Closes: #860031
  * newpid: More verbose usage output.
  * newnet: Guard arguments with --.
  * README: Note required kernel and glibc version.
  * Bump Standards-Version.

 -- Christoph Berg <myon@debian.org>  Mon, 01 May 2017 18:15:30 +0200

newpid (7) unstable; urgency=medium

  * Add support for joining network namespaces (newpid -N).

 -- Christoph Berg <christoph.berg@credativ.de>  Wed, 23 Dec 2015 11:33:12 +0100

newpid (6) unstable; urgency=medium

  * Add support for CLONE_NEWIPC and CLONE_NEWUTS (newpid -iu), and have
    newnet use it.

 -- Christoph Berg <myon@debian.org>  Sat, 10 Oct 2015 15:38:21 +0200

newpid (5) unstable; urgency=medium

  * newpid -n uses CLONE_NEWNET to start a new network namespace.
  * Add "newnet" wrapper for "newpid -n".
  * Use setcap "CAP_SYS_ADMIN,CAP_NET_ADMIN=pe" /usr/bin/newpid.
  * Change license to GPL2+.

 -- Christoph Berg <christoph.berg@credativ.de>  Wed, 30 Sep 2015 16:26:55 +0200

newpid (4) unstable; urgency=medium

  * Make /proc a slave mount as suggested by Lennart Poettering.

 -- Christoph Berg <christoph.berg@credativ.de>  Wed, 12 Mar 2014 13:30:05 +0100

newpid (3) unstable; urgency=medium

  * Remount /proc to be private so it doesn't break when running under systemd.
    Patch by Michael Stapelberg, thanks! (See #739593)
  * Use Arch: linux-any.

 -- Christoph Berg <christoph.berg@credativ.de>  Mon, 10 Mar 2014 15:18:41 +0100

newpid (2) unstable; urgency=low

  * Add autopkgtest.
  * Enable build hardening.
  * Ignore errors on umount("/proc"), it could be busy.
  * Add manpage.

 -- Christoph Berg <christoph.berg@credativ.de>  Thu, 16 Jan 2014 12:51:32 +0100

newpid (1) UNRELEASED; urgency=low

  * Initial release.

 -- Christoph Berg <myon@debian.org>  Mon, 21 Jan 2013 22:48:32 +0100