summaryrefslogtreecommitdiff
path: root/debian
Commit message (Collapse)AuthorAgeFilesLines
* Bump library version to libapt-pkg4.14Michael Vogt2014-10-033-2/+2
|
* ensure world-readability for trusted.gpg in postinstDavid Kalnischkies2014-10-021-0/+4
| | | | | | | | | | apt-key creates trusted.gpg if it needs it with 644 nowadays, but before it ensured this, it was gpg creating it, which gives it by default 600. Not a problem as long as our gpgv is run as root, but now that we drop privileges we have to ensure that we can also read trusted.gpg files created by earlier apt-key versions. Closes: 647001
* debian/rules: add hardening=+allMichael Vogt2014-10-011-3/+6
| | | | | | | Because of dpkg-buildflags we already get most of the hardening features, +all adds -fPIE and ld -z now Thanks: Simon Ruderich, Markus Waldeck
* Merge remote-tracking branch 'donkult/debian/experimental' into ↵Michael Vogt2014-09-301-110/+302
|\ | | | | | | debian/experimental
| * support parsing of all hashes for pdiffDavid Kalnischkies2014-09-301-1/+2
| | | | | | | | | | | | | | | | | | | | | | The fileformat of a pdiff index stores currently only SHA1 hashes. With this change, we look for all other hashes we support as well and take what we get, so that we can work after the release of jessie to get right of SHA1 if we want to. Note that the completely patched file is and was checked against the hashes collected from the Release file, so this transition isn't mission critical.
| * mark private methods as hiddenDavid Kalnischkies2014-09-301-28/+3
| | | | | | | | | | | | | | | | | | | | We are the only possible users of private methods, so we are also the only users who can potentially export them via using them in inline methods. The point is: We don't need these symbols exported if we don't do this, so marking them as hidden removes some methods from the API without breaking anything as nobody could have used them. Git-Dch: Ignore
| * fix Configuration::FindVector APIDavid Kalnischkies2014-09-291-1/+0
| | | | | | | | Git-Dch: Ignore
| * update symbols fileDavid Kalnischkies2014-09-291-81/+298
| |
* | adjust version numbers for the planed uploadMichael Vogt2014-09-302-2/+2
|/
* Add missing "adduser" dependency (for the new _apt user)Michael Vogt2014-09-291-1/+1
| | | | | Closes: #763004 Thanks: Russ Allbery
* add gnupg and gnupg2 as test-dependencyDavid Kalnischkies2014-09-271-2/+2
| | | | | | | apt can work with both, so it has an or-dependency on them, but the tests want to play with both of them. Git-Dch: Ignore
* remove empty keyrings in trusted.gpg.d on upgradeDavid Kalnischkies2014-09-271-0/+9
| | | | | | Adding and deleting many repositories could cause (empty) keyring files to pill up in older apt-key versions, which in the end might cause gnupg to run into its internal limit of at most 40 keyrings
* add and use 'apt-key verify' which prefers gpgv over gpgDavid Kalnischkies2014-09-271-1/+1
| | | | | | | | | | | | | gnupg/gnupg2 can do verify just fine of course, so we don't need to use gpgv here, but it is what we always used in the past, so there might be scripts expecting a certain output and more importantly the output of apt-cdrom contains messages from gpg and even with all the settings we activate to prevent it, it still shows (in some versions) a quiet scary: "gpg: WARNING: Using untrusted key!" message. Keeping the use of gpgv is the simplest way to prevent it. We are increasing also the "Breaks: apt" version from libapt as it requires a newer apt-key than might be installed in partial upgrades.
* support gnupg2 as drop-in replacement for gnupgDavid Kalnischkies2014-09-271-1/+1
| | | | | | If both are available APT will still prefer gpg over gpg2 as it is a bit more lightweight, but it shouldn't be a problem to use one or the other (at least at the moment, who knows what will happen in the future).
* rename postrm to apt.postrmDavid Kalnischkies2014-09-273-39/+0
| | | | | | | | | | It helps in identifying its affiliation. Also removes the old postinst which was hidden by apt.postinst for a long time now and would just install a sources.list in edgecases which is probably not a good idea (e.g. on my system /etc/apt/sources.list does not exist). It is better done by the installer of the distro. Git-Dch: Ignore
* Use /var/empty as the homedir for _aptMichael Vogt2014-09-251-2/+2
| | | | Thanks to Axel Beckert
* releasing package apt version 1.1~exp3Michael Vogt2014-09-241-0/+19
|
* Use _apt as our unprivileged user nameJulian Andres Klode2014-09-241-2/+2
| | | | | | | Some people want to standardize on it, and BSDs do it too, so let's do the same. Reported-by: Paul Wise <pabs@debian.org>
* Drop Privileges to "Debian-apt" in most acquire methodsMichael Vogt2014-09-241-0/+7
| | | | | | | | | Add a new "Debian-apt" user that owns the /var/lib/apt/lists and /var/cache/apt/archive directories. The methods http, https, ftp, gpgv, gzip switch to this user when they start. Thanks to Julian and "ioerror" and tors "switch_id()" code.
* Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-232-0/+80
|\ | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h apt-pkg/cachefilter.h configure.ac debian/changelog
| * releasing package apt version 1.0.9.1Michael Vogt2014-09-171-0/+6
| |
| * prepare 1.0.9.1Michael Vogt2014-09-161-0/+15
| |
| * merge previous uploadMichael Vogt2014-09-161-0/+9
| |
| * prepare 1.0.8Michael Vogt2014-09-091-0/+48
| |
| * debian/gbp.conf: use export-dirMichael Vogt2014-09-091-0/+2
| |
* | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-053-2/+37
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc configure.ac debian/changelog doc/apt-verbatim.ent doc/po/apt-doc.pot doc/po/de.po doc/po/es.po doc/po/fr.po doc/po/it.po doc/po/ja.po doc/po/pt.po po/ar.po po/ast.po po/bg.po po/bs.po po/ca.po po/cs.po po/cy.po po/da.po po/de.po po/dz.po po/el.po po/es.po po/eu.po po/fi.po po/fr.po po/gl.po po/hu.po po/it.po po/ja.po po/km.po po/ko.po po/ku.po po/lt.po po/mr.po po/nb.po po/ne.po po/nl.po po/nn.po po/pl.po po/pt.po po/pt_BR.po po/ro.po po/ru.po po/sk.po po/sl.po po/sv.po po/th.po po/tl.po po/tr.po po/uk.po po/vi.po po/zh_CN.po po/zh_TW.po test/integration/test-ubuntu-bug-346386-apt-get-update-paywall
| * Run autopkgtest tests with "env -i" to avoid pollution from the host envMichael Vogt2014-09-031-1/+3
| | | | | | | | Closes: #759655
| * prepare 1.0.7Michael Vogt2014-08-271-0/+33
| |
| * Use @builddeps@ in the debian/tests/control fileMichael Vogt2014-07-171-1/+1
| |
* | restore breaks against libapt-inst1.5 (<< 0.9.9)Michael Vogt2014-07-101-1/+1
| |
* | prepare release 1.1~exp2Michael Vogt2014-07-101-0/+14
| |
* | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-07-101-0/+42
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.ac debian/changelog doc/apt-verbatim.ent doc/po/apt-doc.pot doc/po/fr.po po/ar.po po/ast.po po/bg.po po/bs.po po/ca.po po/cs.po po/cy.po po/de.po po/dz.po po/el.po po/es.po po/eu.po po/fi.po po/fr.po po/gl.po po/hu.po po/it.po po/ja.po po/km.po po/ko.po po/ku.po po/lt.po po/nb.po po/ne.po po/nl.po po/nn.po po/pl.po po/pt.po po/pt_BR.po po/ro.po po/ru.po po/sk.po po/sl.po po/sv.po po/th.po po/tl.po po/tr.po po/uk.po po/zh_CN.po po/zh_TW.po
| * releasing package apt version 1.0.6Michael Vogt2014-07-101-1/+1
| |
| * prepare 1.0.6Michael Vogt2014-07-101-0/+42
| |
* | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-07-083-8/+8
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/deb/deblistparser.cc doc/po/apt-doc.pot doc/po/de.po doc/po/es.po doc/po/fr.po doc/po/it.po doc/po/ja.po doc/po/pl.po doc/po/pt.po doc/po/pt_BR.po po/da.po po/mr.po po/vi.po
| * build: Convert from DebianDoc SGML to DocBook XMLGuillem Jover2014-07-083-8/+8
| |
* | increase libapt-inst to version 1.6Michael Vogt2014-07-083-3/+3
| |
* | Fix ar and tar code to be LFS-safeGuillem Jover2014-07-081-4/+4
| | | | | | | | | | | | This is an ABI break. Closes: #742882
* | Add new Base256ToNum long long overload functionGuillem Jover2014-07-081-0/+1
| |
* | releasing package apt version 1.1~exp11.1.exp1Michael Vogt2014-06-191-2/+2
| |
* | set gdb.conf branch to experimentalMichael Vogt2014-06-191-1/+1
| |
* | prepare releaseMichael Vogt2014-06-191-5/+48
| |
* | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-06-181-0/+32
|\| | | | | | | | | Conflicts: debian/changelog
| * releasing package apt version 1.0.5Michael Vogt2014-06-181-0/+32
| |
* | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-06-185-22/+76
|\| | | | | | | | | Conflicts: debian/changelog
| * fix test-apt-ftparchive-cachedb-lp1274466 and apt-internal-solver testsMichael Vogt2014-06-111-1/+1
| |
| * fix autopkgtest testsMichael Vogt2014-06-112-1/+2
| |
| * release 1.0.4Michael Vogt2014-06-101-1/+1
| |
| * use pkgSrcRecords::Step() instead of Next()Michael Vogt2014-06-101-1/+1
| |
| * prepare 1.0.4 uploadMichael Vogt2014-06-101-0/+41
| |