-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 28 Apr 2022 19:15:23 +0300 Source: unbound Architecture: source Version: 1.15.0-5 Distribution: unstable Urgency: medium Maintainer: unbound packagers <unbound@packages.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 1010271 Changes: unbound (1.15.0-5) unstable; urgency=medium . * use unix-domain socket /run/unbound.ctl for the control interface instead of tcp localhost socket. This makes the keys/certs files for the remote contol to be unnecessary, so stop running unbound-control-setup in postinst too. (Closes: #1010271) * move remote-control section out of main unbound.conf file into unbound.conf.d/remote-control.conf. Main file now becomes the same as before version 1.15. There was no need to mess with the main config file since the NEWS file already gives the user enough information. * do-not-chown-control-socket.patch: stop chowning control socket to the unprivileged user, only group ownership is needed. * do-not-look-at-pidfile.patch: stop messing up with the pidfile. Unbound does not need to look at its pid file for the previous instance, since it will not be able to open listening sockets if the daemon is already running. Remove whole reading of the pid file, and especially remove setting ownership of the pid file to the unprivileged user (done in order to be able to clean it up), since this is a potential security issue. * unbound.postrm: stop removing the unbound system user * fix wording and reformat the previous unbound.NEWS entry, and merge old NEWS file into unbound.NEWS, since all news in there are actually about the unbound package, not about all other binary packages we build. * a few more tweaks for d/unbound-helper, in do_resolvconf_{start|stop}. Thank you Simon Deziel for the ideas. Checksums-Sha1: 3ad8db9bf9f2213c979051b50d09b01565c28a86 2774 unbound_1.15.0-5.dsc cc1d2b4491945f4ca9fda5a75981ed3c738ee23b 26588 unbound_1.15.0-5.debian.tar.xz 21c296ae5784a0b4524aee9eae512009a618da5f 7669 unbound_1.15.0-5_source.buildinfo Checksums-Sha256: dcb0ad41f6a8b2d9b6375d2ec6bf3f3854819d5553352f3959029f3724bdabc0 2774 unbound_1.15.0-5.dsc c19ea7123bda0ca50d9a2a9b91eddf5018fa94fcc6cb309d5adc8433ebd97d10 26588 unbound_1.15.0-5.debian.tar.xz 985d6578f8b1c2a8ffb358c2a261baf5feda35cf5cc641938f21194f63f2382b 7669 unbound_1.15.0-5_source.buildinfo Files: 46042394d2703670ebd2228814d84599 2774 net optional unbound_1.15.0-5.dsc b1d402f3cb62a9ef7414af23c502596b 26588 net optional unbound_1.15.0-5.debian.tar.xz 9c716d471aa1203d6430ea7a6b6f723a 7669 net optional unbound_1.15.0-5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmJqvdQPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZimcH/1G5b91YUbpF079IDBI2k5845NLaHe2hSp1W AnCFvrlwwz5eeUkUfXZtInv0uE7crrXxY/Jd35Qf0nCkeJUiBwSfZ3RZWoZvgtOr f2GZ1DkGPpVDmL7g3gVcKKqfmzptE/kb7lP1f7+dK3frzPMzGeQWTrrZV2nnhBgj NGVxO7h+AXrvxprWzHaR2p0lo3sOM+WRC3+Xn5A0VIgkLbtnrXrlYjkyNgBa6GGV XA3+o74n3zEYX8PtLSREaHh2190XHt2HB0yyeDVQb2Y6vXd1oN1y6FjkZ/UPMBjQ n5C28dAF7/S3uBpTPrpUGPEqnbhDYLfstt8tdA2o7UUt9a5os34= =hMmV -----END PGP SIGNATURE-----
