-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 04 Feb 2022 13:06:25 +0100 Source: debian-edu-config Architecture: source Version: 2.12.16 Distribution: unstable Urgency: medium Maintainer: Debian Edu Developers <debian-edu@lists.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 613167 815042 971780 1003560 1003727 1004605 1004949 Changes: debian-edu-config (2.12.16) unstable; urgency=medium . [ Wolfgang Schweer ] * etc/exim4/exim-ldap-server-v4.conf: Accept incoming mail from internal network sent to root@<mynetwork-names>. (Closes: #1003727). . [ Mike Gabriel ] * share/glib-2.0/schemas/31_debian-edu+mate.gschema.override: Add various long-term-used MATE settings overrides (some from Ubuntu MATE). * MATE screensaver: Offer "logout user" button on screensaver dialog after 40min of inactivity and allow other users to salvage a workstation from an idle user (session). * share/debian-edu-config/tools/setup-freeradius-server: Fix integer comparison in run-by-root check. Script was not executable fully (not even as root). * etc/apache2/mods-available/debian-edu-userdir.conf: - White-space cleanup (tabs and spaces mixed). - CVE-2021-20001: Disable built-in PHP engine. - Add warning to not re-enable PHP interpretation in user dirs (with reference to our README). * README.public_html_with_PHP-CGI+suExec.md: - Provide documentation on how to enable suExec support in Apache2 userdirs (i.e. ~/public_html). * debian/NEWS: + Add file, inform about PHP being disabled in Apache2 user directories. * debian/debian-edu-config.fetch-ldap-cert: Drop retrieval of Debian-Edu_rootCA from this script. This now is the task of the fetch-rootca-cert script. (Closes: #971780). * debian/debian-edu-config.fetch-rootca-cert: Ensure proper symlinking of Debian-Edu_rootCA.crt in /usr/local/share/ca-certificates/ to Debian-Edu_rootCA.crt in /etc/ssl/ca-certificates. Forced symlinking is required, because earlier versions of the fetch-ldap-cert init script put Debian-Edu_rootCA.crt into /etc/ssl/ca-certificates/ as a file. Forced symlinking replaces files by the wanted symlink. The -n option (no- dereference) is required to make sure we don't follow any already existing symlink. (This relates to #971780). * Support krb5i on Diskless Workstations (aka LTSP FAT Clients): - ldap-bootstrap/netgroup.ldif: Add diskless-workstation-hosts NIS netgroup during LDAP bootstrap. - debian/debian-edu-config.{postinst,postrm}: Create non-privileged debian-edu system user account on Debian Edu mainserver (for distribution of host keytabs to diskless workstations aka LTSP fat clients). - share/debian-edu-config/tools/: Add new update-dlw-krb5-keytabs script and call it (with delay) from gosa-modify-host and gosa-remove-host hook scripts. - (Closes: #613167). * debian/control: + Add D: adduser. * share/debian-edu-config/tools/update-proxy-from-wpad: - Fix typo (wrong protocol) in APT proxy config creation. - Create a Debian Edu specific proxy configuration in /etc/apt/apt.conf.d/ named 03debian-edu-config rather than meddling with /etc/apt/apt.conf directly. Clean up any earlier meddling from apt.conf, as well. (Closes: #1003560). * share/debian-edu-config/tools/setup-roaming: Assure libsss-sudo is installed on Roaming Workstation. (Closes: #1004605). * share/debian-edu-config/tools/gosa-remove: Capture removals of GOsa² user templates and ignore them. (Closes: #815042). * ldap-schemas/: Update schema files from Debian's latest GOsa² list of schemas. (Closes: #1004949). * debian/debian-edu-config.postinst: + Replace calling 'service' by calling 'invoke-rc.d'. Thanks, lintian. * debian/debian-edu-config.lintian-overrides: + Adjust line number references in lintian overrides. Checksums-Sha1: 6ed120541428866a14733a5ac2a5c58500c9e3cc 2055 debian-edu-config_2.12.16.dsc d080c10d9261cd18837f2c19cd61d5f7fa451a58 351112 debian-edu-config_2.12.16.tar.xz b56416142a84f156688288f541ce963e8bc5e96b 6154 debian-edu-config_2.12.16_source.buildinfo Checksums-Sha256: 899766505c5b371dbbe6df4be66e049fd6ea4aa6eeed1602a3ca8c035543fcb1 2055 debian-edu-config_2.12.16.dsc 6272b2cae49fbba1861183e720a7fe403a06ce48745637cecf9ad2f4ccf42780 351112 debian-edu-config_2.12.16.tar.xz 768846b410f2f2de480ea4b62b2fc9341a5bf03dff0b69ce73f0f928ae7bc604 6154 debian-edu-config_2.12.16_source.buildinfo Files: 9df213918d9c2076626573941c46126c 2055 misc optional debian-edu-config_2.12.16.dsc 94409d0d282285832f1e3e53897288e7 351112 misc optional debian-edu-config_2.12.16.tar.xz 0590af982bfb07a63592b0d03822f71c 6154 misc optional debian-edu-config_2.12.16_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmH9FtcVHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxjxQP/1Qo7Y7gKBXK1nBK5xH6gYTbrgqg 4WRlgjOicBuhFGQdF1N7kU65tCmRwJjiROzbBzRQpETO/ZNRjBWsZ99JvqNfeKid ai8deyzGQtTXa+jUyXJRXGXWyUOaadnGoYW8qtefW2qJ6OZi3zpYpQv5cn4XoQT/ O3nXZDgS73bOz1aLMOnPbnp/Ke7NmuXOCG1D6PeuMKdLko42hb9tOc4t4kQObIDw QrgSCfmmgZ6e6TXZ5vAk8kKqHMNbRI4FX66vnOdWY+IfzHpVkocyYiGXgwDjrbxc j9V1nQK1UYpJg3WB4FRvj9a3OF6PXjj0xU3tAjOFCDeH7DDX0gvjzunw9Rd2yUAY EO0bcsSDOHVM0mkCfejhEE4uKEiAJ51P17MPvRXYITLh/WOuV9uZXrjjswrcjHhY JH1ExeoL3UpIyEcatuBT2E/t3Fya1P20zxMuOidRtAZsokUi1l/YxiuwLiSFDb4U xcmFKXQB9FAdUALk5oGYm2YVKSycTpayT3Vr4SylAojlU4y3zoF1PNKDPzWOyjGU jp2XCZdgLromeTQYIZ5G7bz9tYCseHdMB6v9/xQBaNUzZI/hhiYWPl3LBiFhuqld 3+AgKcEG9bU8307xQ8NPu41p/h4MwNTMtlPDTAl18IndpsrqtU55TzD8zH/RsUVn jCDWuU5sTqCC0k9x =vphn -----END PGP SIGNATURE-----
