* debian/control:
- demote haveged to suggests, based on feedback from Seth Arnold
in LP: #1246098
* pollinate:
- ensure both -c and -i can be used, without losing CURL_OPTS,
as identified by Seth Arnold in LP: #1246098
* pollinate:
- drop unused IPV6 variable, per review by Seth Arnold in LP: #1246098
* debian/pollen.postinst:
- use pollen as our fake email address, suggested by Seth Arnold
in LP: #1246098
* debian/pollinate.cron.d:
- add notes in the comments about NIST DRBG Special Publication 800-90A
recommendations on reseeding
- add notes in the comments about why we choose a random minute
- fix a bug, that was causing the cronjob to run far more frequently
than desired
- Addresses some issues raised by Seth Arnold in LP: #1246098
* debian/pollen.upstart, pollen.8, pollen.go:
- add DEVICE as the 3rd argument to the pollen server in the upstart
script
- test that DEVICE is a special in upstart
- document that the DEVICE is now a required argument
* debian/pollen.install, Makefile, pollen:
- build static binary at package build time, rather than dynamically
compiling at each run, per feedback from Seth Arnold in LP: #1246098
- use a very simple, basic Makefile
* debian/control:
- move golang-go to a build-dependency, rather than a runtime dependency
* debian/control, debian/pollen.postinst, debian/pollen.postrm,
debian/pollen.upstart:
- create a new user, pollen:daemon, in the postinst, remove in postrm
- depend on libcap2-bin, which provides setcap
- use setcap to allow the pollen binary to bind to privileged ports
- run the pollen daemon as the pollen user
- per feedback from Seth Arnold in LP: #1246098
* debian/pollen.upstart:
- use setuid in upstart to run the pollen daemon as the pollen user
* debian/pollen.postinst:
- change pollen user's shell to /bin/false
* debian/control, debian/pollen.install, debian/pollen.postinst,
debian/rules, usr.bin.pollen:
- add an apparmor profile for the pollen server, per suggestion
by Seth Arnold in LP: #1246098
- big thanks to Jamie Strandboge and Seth Arnold for assistance
* debian/pollinate.postinst:
- these chowns are not necessary; thanks for catching Michael Terry
in LP: #1246098
* debian/control: LP: #1259014
- have the pollen server depend on ent, which is used by the
check_pollen nagios script
-- Dustin Kirkland <email address hidden> Fri, 08 Nov 2013 09:59:37 -0600
This bug was fixed in the package pollen - 3.7-0ubuntu1
---------------
pollen (3.7-0ubuntu1) trusty; urgency=low
* debian/control: pollen. postinst: pollinate. cron.d: ations on reseeding pollen. upstart, pollen.8, pollen.go: pollen. install, Makefile, pollen: pollen. postinst, debian/ pollen. postrm, pollen. upstart: pollen. upstart: pollen. postinst: pollen. install, debian/ pollen. postinst, pollinate. postinst:
- demote haveged to suggests, based on feedback from Seth Arnold
in LP: #1246098
* pollinate:
- ensure both -c and -i can be used, without losing CURL_OPTS,
as identified by Seth Arnold in LP: #1246098
* pollinate:
- drop unused IPV6 variable, per review by Seth Arnold in LP: #1246098
* debian/
- use pollen as our fake email address, suggested by Seth Arnold
in LP: #1246098
* debian/
- add notes in the comments about NIST DRBG Special Publication 800-90A
recommend
- add notes in the comments about why we choose a random minute
- fix a bug, that was causing the cronjob to run far more frequently
than desired
- Addresses some issues raised by Seth Arnold in LP: #1246098
* debian/
- add DEVICE as the 3rd argument to the pollen server in the upstart
script
- test that DEVICE is a special in upstart
- document that the DEVICE is now a required argument
* debian/
- build static binary at package build time, rather than dynamically
compiling at each run, per feedback from Seth Arnold in LP: #1246098
- use a very simple, basic Makefile
* debian/control:
- move golang-go to a build-dependency, rather than a runtime dependency
* debian/control, debian/
debian/
- create a new user, pollen:daemon, in the postinst, remove in postrm
- depend on libcap2-bin, which provides setcap
- use setcap to allow the pollen binary to bind to privileged ports
- run the pollen daemon as the pollen user
- per feedback from Seth Arnold in LP: #1246098
* debian/
- use setuid in upstart to run the pollen daemon as the pollen user
* debian/
- change pollen user's shell to /bin/false
* debian/control, debian/
debian/rules, usr.bin.pollen:
- add an apparmor profile for the pollen server, per suggestion
by Seth Arnold in LP: #1246098
- big thanks to Jamie Strandboge and Seth Arnold for assistance
* debian/
- these chowns are not necessary; thanks for catching Michael Terry
in LP: #1246098
* debian/control: LP: #1259014
- have the pollen server depend on ent, which is used by the
check_pollen nagios script
-- Dustin Kirkland <email address hidden> Fri, 08 Nov 2013 09:59:37 -0600