[ubuntu/trusty-proposed] pollen 3.7-0ubuntu1 (Accepted)

Wed Jan 15 17:08:15 UTC 2014

pollen (3.7-0ubuntu1) trusty; urgency=low

  * debian/control:
    - demote haveged to suggests, based on feedback from Seth Arnold
      in LP: #1246098
  * pollinate:
    - ensure both -c and -i can be used, without losing CURL_OPTS,
      as identified by Seth Arnold in LP: #1246098
  * pollinate:
    - drop unused IPV6 variable, per review by Seth Arnold in LP: #1246098
  * debian/pollen.postinst:
    - use pollen as our fake email address, suggested by Seth Arnold
      in LP: #1246098
  * debian/pollinate.cron.d:
    - add notes in the comments about NIST DRBG Special Publication 800-90A
      recommendations on reseeding
    - add notes in the comments about why we choose a random minute
    - fix a bug, that was causing the cronjob to run far more frequently
      than desired
    - Addresses some issues raised by Seth Arnold in LP: #1246098
  * debian/pollen.upstart, pollen.8, pollen.go:
    - add DEVICE as the 3rd argument to the pollen server in the upstart
      script
    - test that DEVICE is a special in upstart
    - document that the DEVICE is now a required argument
  * debian/pollen.install, Makefile, pollen:
    - build static binary at package build time, rather than dynamically
      compiling at each run, per feedback from Seth Arnold in LP: #1246098
    - use a very simple, basic Makefile
  * debian/control:
    - move golang-go to a build-dependency, rather than a runtime dependency
  * debian/control, debian/pollen.postinst, debian/pollen.postrm,
    debian/pollen.upstart:
    - create a new user, pollen:daemon, in the postinst, remove in postrm
    - depend on libcap2-bin, which provides setcap
    - use setcap to allow the pollen binary to bind to privileged ports
    - run the pollen daemon as the pollen user
    - per feedback from Seth Arnold in LP: #1246098
  * debian/pollen.upstart:
    - use setuid in upstart to run the pollen daemon as the pollen user
  * debian/pollen.postinst:
    - change pollen user's shell to /bin/false
  * debian/control, debian/pollen.install, debian/pollen.postinst,
    debian/rules, usr.bin.pollen:
    - add an apparmor profile for the pollen server, per suggestion
      by Seth Arnold in LP: #1246098
    - big thanks to Jamie Strandboge and Seth Arnold for assistance
  * debian/pollinate.postinst:
    - these chowns are not necessary; thanks for catching Michael Terry
      in LP: #1246098
  * debian/control: LP: #1259014
    - have the pollen server depend on ent, which is used by the
      check_pollen nagios script

Date: Fri, 08 Nov 2013 09:59:37 -0600
Changed-By: Dustin Kirkland <kirkland at ubuntu.com>
https://launchpad.net/ubuntu/trusty/+source/pollen/3.7-0ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 Nov 2013 09:59:37 -0600
Source: pollen
Binary: pollen pollinate
Architecture: source
Version: 3.7-0ubuntu1
Distribution: trusty
Urgency: low
Maintainer: Dustin Kirkland <kirkland at ubuntu.com>
Changed-By: Dustin Kirkland <kirkland at ubuntu.com>
Description: 
 pollen     - Entropy-as-a-Service web server
 pollinate  - Entropy-as-a-Service client
Launchpad-Bugs-Fixed: 1246098 1259014
Changes: 
 pollen (3.7-0ubuntu1) trusty; urgency=low
 .
   * debian/control:
     - demote haveged to suggests, based on feedback from Seth Arnold
       in LP: #1246098
   * pollinate:
     - ensure both -c and -i can be used, without losing CURL_OPTS,
       as identified by Seth Arnold in LP: #1246098
   * pollinate:
     - drop unused IPV6 variable, per review by Seth Arnold in LP: #1246098
   * debian/pollen.postinst:
     - use pollen as our fake email address, suggested by Seth Arnold
       in LP: #1246098
   * debian/pollinate.cron.d:
     - add notes in the comments about NIST DRBG Special Publication 800-90A
       recommendations on reseeding
     - add notes in the comments about why we choose a random minute
     - fix a bug, that was causing the cronjob to run far more frequently
       than desired
     - Addresses some issues raised by Seth Arnold in LP: #1246098
   * debian/pollen.upstart, pollen.8, pollen.go:
     - add DEVICE as the 3rd argument to the pollen server in the upstart
       script
     - test that DEVICE is a special in upstart
     - document that the DEVICE is now a required argument
   * debian/pollen.install, Makefile, pollen:
     - build static binary at package build time, rather than dynamically
       compiling at each run, per feedback from Seth Arnold in LP: #1246098
     - use a very simple, basic Makefile
   * debian/control:
     - move golang-go to a build-dependency, rather than a runtime dependency
   * debian/control, debian/pollen.postinst, debian/pollen.postrm,
     debian/pollen.upstart:
     - create a new user, pollen:daemon, in the postinst, remove in postrm
     - depend on libcap2-bin, which provides setcap
     - use setcap to allow the pollen binary to bind to privileged ports
     - run the pollen daemon as the pollen user
     - per feedback from Seth Arnold in LP: #1246098
   * debian/pollen.upstart:
     - use setuid in upstart to run the pollen daemon as the pollen user
   * debian/pollen.postinst:
     - change pollen user's shell to /bin/false
   * debian/control, debian/pollen.install, debian/pollen.postinst,
     debian/rules, usr.bin.pollen:
     - add an apparmor profile for the pollen server, per suggestion
       by Seth Arnold in LP: #1246098
     - big thanks to Jamie Strandboge and Seth Arnold for assistance
   * debian/pollinate.postinst:
     - these chowns are not necessary; thanks for catching Michael Terry
       in LP: #1246098
   * debian/control: LP: #1259014
     - have the pollen server depend on ent, which is used by the
       check_pollen nagios script
Checksums-Sha1: 
 c2033cd2b6a5b3b6cc654213b15a72661c99c616 1831 pollen_3.7-0ubuntu1.dsc
 8d2955bc3c7d5435ba6086d67be09b328de8dd58 120061 pollen_3.7.orig.tar.gz
 86c7fbcd00ecdc07318cea9ba6c6b5d4ad4c783d 9934 pollen_3.7-0ubuntu1.debian.tar.gz
Checksums-Sha256: 
 3f3c3e84476f1a1036b8da9b26755afb94862b2823b96a0993bfd4dfb40ae992 1831 pollen_3.7-0ubuntu1.dsc
 d76ec04c70a4d094dfb0c20401199fae322a25910ef9b49a19f4d230fdd84577 120061 pollen_3.7.orig.tar.gz
 5f0b86cfe68b529b5545b3a895ab12ca88085d7197ae4d72fe9f186f486b7e0e 9934 pollen_3.7-0ubuntu1.debian.tar.gz
Files: 
 3efbd9d42efabefd992d84d8e6341253 1831 admin optional pollen_3.7-0ubuntu1.dsc
 d08da53ec16a602931beb1f9923c254d 120061 admin optional pollen_3.7.orig.tar.gz
 a229a1269a1ea2c92239b012473b71f8 9934 admin optional pollen_3.7-0ubuntu1.debian.tar.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=YpF8
-----END PGP SIGNATURE-----