[ubuntu/focal-proposed] adsys 0.9.2~20.04 (Accepted)

Gabriel Nagy gabriel.nagy at canonical.com
Wed Sep 21 09:45:35 UTC 2022


adsys (0.9.2~20.04) focal; urgency=medium

  * Backport to focal
    - Build with Go 1.16
    - Move debhelper compat to 12
    - Do not recommends ubuntu-advantage-desktop-daemon as it’s not available
      on focal yet.

adsys (0.9.2) kinetic; urgency=medium

  * Update generators to fix FTBFS
    - shell out to mkdir instead of go's os.Mkdir which can bypass fakeroot's
      filesystem hijacking and cause unexpected behavior
  * Update dependencies to latest:
    - github.com/golangci/golangci-lint
    - google.golang.org/protobuf

adsys (0.9.1) kinetic; urgency=medium

  [ Didier Roche ]
  [ Gabriel Nagy ]
  * Fix loading policy content from uppercase folders (LP: #1982330)
  * Add GSettings power management keys (LP: #1982349)
  * Allow parsing policy entries with empty values (LP: #1982342)
  * Allow parsing policies with unsupported types (LP: #1982343)
  * Allow parsing policy entries with no data (LP: #1982345)
  * Lowercase target name when normalizing (LP: #1982347)
  * Annotate policies that require Ubuntu Pro (LP: #1982348)
  * Update dependencies to latest:
    - github.com/spf13/cobra
    - github.com/spf13/viper
    - github.com/stretchr/testify
    - github.com/charmbracelet/bubbletea
    - github.com/charmbracelet/bubbles
    - google.golang.org/grpc
    - github.com/golangci/golangci-lint
    - github.com/sirupsen/logrus

adsys (0.9.0) kinetic; urgency=medium

  [ Jean-Baptiste Lallement ]
  [ Didier Roche ]
  [ Gabriel Nagy ]
  * Add Active Directory Watch Daemon - adwatchd: (LP: #1982351)
    - Implement a Windows daemon that watches a list of configured directories
      for changes and bumps the relevant GPT.INI files.
    - Add adsys-windows binary package which includes the Windows daemon
      executable and the admx/adml policies.
  * Config detection now includes current executable directory
  * Fixes in generator build race
  * Update dependencies to latest:
    - github.com/spf13/cobra
    - github.com/stretchr/testify
  * CI updates:
    - switch to Go setup v3
    - bump to really build with Golang 1.18

adsys (0.8.6) kinetic; urgency=medium

  * Fix new build failures on 32 bits due to libsmbclient-dev no longer sets
    the large file support cflags in libsmbclient.h.
    Update to latest libsmbclient-go.
  * Update dependencies to latest:
    - google.golang.org/grpc
    - gopkg.in/ini.v1
    - github.com/golangci/golangci-lint
    - github.com/spf13/viper
    - github.com/stretchr/testify

adsys (0.8.5) kinetic; urgency=medium

  [ Jean-Baptiste Lallement ]
  [ Didier Roche ]
  * Rename chapters to be in correct ascii order when viewed online.
    Thanks to Anton Drastrup-Fjordbak.
  * Include 22.04 in admx/adml for lts only releases. (LP: #1973745)
  * Bump embedeed dependencies minor versions for both bug fixes and minor
    security enhancements.
  * Fix dconf keys not being readable by user after applying policy.
    (LP: #1973748)
  * Ensure we can execute machine and user scripts:
    /run is now noexec on Ubuntu. Ensure that we can execute the scripts in
    /run/adsys subdirectories. The scripts mechanism has been reviewed by the
    security team, so we can reset them as executable. (LP: #1973751)
  * Move integration tests under cmd/adsysd and admxgen binary to cmd/admxgen
    to prepare future adwatchd daemon under cmd/ which will be SRUed with an
    exception in next update. This is a no-op in the finale deploy binaries,
    apart from admxgen which is now using Cobra. This binary though is not
    shipped in any package and only used in CI.
  * Fix privilege permission which can not be set to disabled. (LP: #1973752)
  * Adaptation or new tests for all above changes.
  * Add fuzz tests and include new potential crash fixes on invalid files
    generated by Windows AD.
  * CI fixes and changes (not impacting finale package):
    - Move CI to Go 1.18 (package is already building with 1.18 in jammy).
    - Fixes due to new github.
    - Fix to generate all LTS releases in admx/adml (see above).

adsys (0.8.4) jammy; urgency=medium

  * Sync refresh timer with Windows
  * Some lint fixes due to Go 1.18
  * Fix image reference in documentation

adsys (0.8.3) jammy; urgency=medium

  [ Jean-Baptiste Lallement ]
  [ Didier Roche ]
  * Use ua attached instead of a specific ua feature to gate optional
    features.
  * Added and updated documentation for privilege escalation and scripts
    support.
  * New linter version trigger fix.
  * Dependencies update for latest bug fixes:
    - github.com/golangci/golangci-lint
    - github.com/spf13/cobra-1.4.0
    - github.com/stretchr/testify-1.7.1
    - google.golang.org/protobuf-1.28.0
    - google.golang.org/grpc-1.45.0

adsys (0.8.2) jammy; urgency=medium

  * Fix flaky "pick up config changes" tests on armhf and arm64

adsys (0.8.1) jammy; urgency=medium

  * Change chown logic on script directory and parents to avoid potential
    vulnerability. (LP: #1961458)
  * Separate readiness from session running to avoid unrefreshed user script
    directories after a logout without any new logins.
  * pam_adsys: Fix memory leak and identation. (LP: #1961459)
  * Adapt to newer samba, while keeping backward compatilibity for CI.
    Thanks Michael. (LP: #1962170)
  * Try to stabilize configuration detection change test by calling sync() to
    sync FHS to disk, and then, hoping we get the inotify update. Seems to fix
    flakyness on armhf. (LP: #1962510)
  * Enforce closing stderr on ppcel64 in tests with new samba to avoid hangs
    in race.
  * Fix linting issues discovered by new golangci-lint.
  * Misc syntax polish.
  * Dependencies update:
    - github.com/godbus/dbus/v5
    - github.com/golangci/golangci-lint
    - gopkg.in/ini.v1

Date: Thu, 04 Aug 2022 12:25:29 +0300
Changed-By: Gabriel Nagy <gabriel.nagy at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Łukasz Zemczak <lukasz.zemczak at canonical.com>
https://launchpad.net/ubuntu/+source/adsys/0.9.2~20.04
-------------- next part --------------
Format: 1.8
Date: Thu, 04 Aug 2022 12:25:29 +0300
Source: adsys
Built-For-Profiles: noudeb
Architecture: source
Version: 0.9.2~20.04
Distribution: focal
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Gabriel Nagy <gabriel.nagy at canonical.com>
Launchpad-Bugs-Fixed: 1961458 1961459 1962170 1962510 1973745 1973748 1973751 1973752 1982330 1982342 1982343 1982345 1982347 1982348 1982349 1982351
Changes:
 adsys (0.9.2~20.04) focal; urgency=medium
 .
   * Backport to focal
     - Build with Go 1.16
     - Move debhelper compat to 12
     - Do not recommends ubuntu-advantage-desktop-daemon as it’s not available
       on focal yet.
 .
 adsys (0.9.2) kinetic; urgency=medium
 .
   * Update generators to fix FTBFS
     - shell out to mkdir instead of go's os.Mkdir which can bypass fakeroot's
       filesystem hijacking and cause unexpected behavior
   * Update dependencies to latest:
     - github.com/golangci/golangci-lint
     - google.golang.org/protobuf
 .
 adsys (0.9.1) kinetic; urgency=medium
 .
   [ Didier Roche ]
   [ Gabriel Nagy ]
   * Fix loading policy content from uppercase folders (LP: #1982330)
   * Add GSettings power management keys (LP: #1982349)
   * Allow parsing policy entries with empty values (LP: #1982342)
   * Allow parsing policies with unsupported types (LP: #1982343)
   * Allow parsing policy entries with no data (LP: #1982345)
   * Lowercase target name when normalizing (LP: #1982347)
   * Annotate policies that require Ubuntu Pro (LP: #1982348)
   * Update dependencies to latest:
     - github.com/spf13/cobra
     - github.com/spf13/viper
     - github.com/stretchr/testify
     - github.com/charmbracelet/bubbletea
     - github.com/charmbracelet/bubbles
     - google.golang.org/grpc
     - github.com/golangci/golangci-lint
     - github.com/sirupsen/logrus
 .
 adsys (0.9.0) kinetic; urgency=medium
 .
   [ Jean-Baptiste Lallement ]
   [ Didier Roche ]
   [ Gabriel Nagy ]
   * Add Active Directory Watch Daemon - adwatchd: (LP: #1982351)
     - Implement a Windows daemon that watches a list of configured directories
       for changes and bumps the relevant GPT.INI files.
     - Add adsys-windows binary package which includes the Windows daemon
       executable and the admx/adml policies.
   * Config detection now includes current executable directory
   * Fixes in generator build race
   * Update dependencies to latest:
     - github.com/spf13/cobra
     - github.com/stretchr/testify
   * CI updates:
     - switch to Go setup v3
     - bump to really build with Golang 1.18
 .
 adsys (0.8.6) kinetic; urgency=medium
 .
   * Fix new build failures on 32 bits due to libsmbclient-dev no longer sets
     the large file support cflags in libsmbclient.h.
     Update to latest libsmbclient-go.
   * Update dependencies to latest:
     - google.golang.org/grpc
     - gopkg.in/ini.v1
     - github.com/golangci/golangci-lint
     - github.com/spf13/viper
     - github.com/stretchr/testify
 .
 adsys (0.8.5) kinetic; urgency=medium
 .
   [ Jean-Baptiste Lallement ]
   [ Didier Roche ]
   * Rename chapters to be in correct ascii order when viewed online.
     Thanks to Anton Drastrup-Fjordbak.
   * Include 22.04 in admx/adml for lts only releases. (LP: #1973745)
   * Bump embedeed dependencies minor versions for both bug fixes and minor
     security enhancements.
   * Fix dconf keys not being readable by user after applying policy.
     (LP: #1973748)
   * Ensure we can execute machine and user scripts:
     /run is now noexec on Ubuntu. Ensure that we can execute the scripts in
     /run/adsys subdirectories. The scripts mechanism has been reviewed by the
     security team, so we can reset them as executable. (LP: #1973751)
   * Move integration tests under cmd/adsysd and admxgen binary to cmd/admxgen
     to prepare future adwatchd daemon under cmd/ which will be SRUed with an
     exception in next update. This is a no-op in the finale deploy binaries,
     apart from admxgen which is now using Cobra. This binary though is not
     shipped in any package and only used in CI.
   * Fix privilege permission which can not be set to disabled. (LP: #1973752)
   * Adaptation or new tests for all above changes.
   * Add fuzz tests and include new potential crash fixes on invalid files
     generated by Windows AD.
   * CI fixes and changes (not impacting finale package):
     - Move CI to Go 1.18 (package is already building with 1.18 in jammy).
     - Fixes due to new github.
     - Fix to generate all LTS releases in admx/adml (see above).
 .
 adsys (0.8.4) jammy; urgency=medium
 .
   * Sync refresh timer with Windows
   * Some lint fixes due to Go 1.18
   * Fix image reference in documentation
 .
 adsys (0.8.3) jammy; urgency=medium
 .
   [ Jean-Baptiste Lallement ]
   [ Didier Roche ]
   * Use ua attached instead of a specific ua feature to gate optional
     features.
   * Added and updated documentation for privilege escalation and scripts
     support.
   * New linter version trigger fix.
   * Dependencies update for latest bug fixes:
     - github.com/golangci/golangci-lint
     - github.com/spf13/cobra-1.4.0
     - github.com/stretchr/testify-1.7.1
     - google.golang.org/protobuf-1.28.0
     - google.golang.org/grpc-1.45.0
 .
 adsys (0.8.2) jammy; urgency=medium
 .
   * Fix flaky "pick up config changes" tests on armhf and arm64
 .
 adsys (0.8.1) jammy; urgency=medium
 .
   * Change chown logic on script directory and parents to avoid potential
     vulnerability. (LP: #1961458)
   * Separate readiness from session running to avoid unrefreshed user script
     directories after a logout without any new logins.
   * pam_adsys: Fix memory leak and identation. (LP: #1961459)
   * Adapt to newer samba, while keeping backward compatilibity for CI.
     Thanks Michael. (LP: #1962170)
   * Try to stabilize configuration detection change test by calling sync() to
     sync FHS to disk, and then, hoping we get the inotify update. Seems to fix
     flakyness on armhf. (LP: #1962510)
   * Enforce closing stderr on ppcel64 in tests with new samba to avoid hangs
     in race.
   * Fix linting issues discovered by new golangci-lint.
   * Misc syntax polish.
   * Dependencies update:
     - github.com/godbus/dbus/v5
     - github.com/golangci/golangci-lint
     - gopkg.in/ini.v1
Checksums-Sha1:
 a5e860c111341199f8f19480535d7b4d5e6485a6 1679 adsys_0.9.2~20.04.dsc
 6db0c0924b7ba4770de77400cb1fccb5886b5321 7595780 adsys_0.9.2~20.04.tar.xz
 db2bbd2877913939ca8cee91410e7754243c5508 7119 adsys_0.9.2~20.04_source.buildinfo
Checksums-Sha256:
 a9c20dfd0301a675e1fb8057347c2eeb19c906c5e517ec3d9a3f29e0d9b48f22 1679 adsys_0.9.2~20.04.dsc
 0aac573f964f40039c0572e2cccf4d966116e7b16e5f9ee66a5b047c36764bbe 7595780 adsys_0.9.2~20.04.tar.xz
 4cbe08b998a93058ac8184419ca218fa81778328fb402d063692fba468a1cf58 7119 adsys_0.9.2~20.04_source.buildinfo
Files:
 0612eaf1d5f9eac07d19ae10da472930 1679 admin optional adsys_0.9.2~20.04.dsc
 514dd475264e72f06ef704a7db4691d4 7595780 admin optional adsys_0.9.2~20.04.tar.xz
 ec32be4c5316fad6a6a75ea6c7495cbb 7119 admin optional adsys_0.9.2~20.04_source.buildinfo


More information about the Focal-changes mailing list