Merge ~mirespace/ubuntu/+source/postfix:lp18885403-sru-hirsute-postfix-bsymbolic-functions into ubuntu/+source/postfix:ubuntu/hirsute-devel

[Miriam España Acebal]

Hello team,

SRU of LP#18885403 (if posttls-finger is not used within /var/spool/postfix, the private/tlmsgr socket is not found and TLS is disabled) for hirsute, doing cherry-pick from an existing fix for Impish 4b6a0b7b:

* d/rules: Removed LDFLAG -Bsymbolic-functions (LP: #1885403). Reported
  upstream at https://marc.info/?l=postfix-users&m=163094641524790&w=2

PPA: ppa:mirespace/sru-hirsute-postfix-lp1885403-bsymbolic-functions

Autopackage Tests:
autopkgtest -U -s -B ../postfix_3.5.6-1ubuntu0.2.dsc --apt-pocket=proposed -- lxd images:ubuntu/hirsute/amd64

---------------------------------------------------------------------
Ran 15 tests in 71.943s

OK
autopkgtest [11:59:46]: test postfix: -----------------------]
autopkgtest [11:59:47]: test postfix: - - - - - - - - - - results - - - - - - - - - -
postfix PASS
autopkgtest [11:59:47]: @@@@@@@@@@@@@@@@@@@@ summary
postfix PASS

The bad response is described in SRU template, the good one for testing outside /var/spool/postfix is:

ubuntu@hirsute:~$ posttls-finger mx.dmz.tait.net.nz
posttls-finger: Connected to mx.dmz.tait.net.nz[114.23.142.178]:25
posttls-finger: < 220-mx.tait.net.nz ESMTP Postfix (Ubuntu)
posttls-finger: < 220 mx.tait.net.nz ESMTP Postfix (Ubuntu)
posttls-finger: > EHLO develop
posttls-finger: < 250-mx.tait.net.nz
posttls-finger: < 250-PIPELINING
posttls-finger: < 250-SIZE 20480000
posttls-finger: < 250-STARTTLS
posttls-finger: < 250-ENHANCEDSTATUSCODES
posttls-finger: < 250-8BITMIME
posttls-finger: < 250-SMTPUTF8
posttls-finger: < 250 CHUNKING
posttls-finger: > STARTTLS
posttls-finger: < 220 2.0.0 Ready to start TLS
posttls-finger: mx.dmz.tait.net.nz[114.23.142.178]:25: subjectAltName: mx.tait.net.nz
posttls-finger: mx.dmz.tait.net.nz[114.23.142.178]:25 CommonName mx.tait.net.nz
posttls-finger: certificate verification failed for mx.dmz.tait.net.nz[114.23.142.178]:25: untrusted issuer /CN=Nick's Domain CA
posttls-finger: mx.dmz.tait.net.nz[114.23.142.178]:25: subject_CN=mx.tait.net.nz, issuer_CN=Nick's Domain CA, fingerprint=FD:88:18:3D:9D:33:4C:0B:B8:F9:E8:64:4B:23:D6:05:F1:DB:8D:21, pkey_fingerprint=03:6B:E4:D3:73:82:D5:B4:EB:98:96:BB:56:77:A2:48:C2:73:A0:03
posttls-finger: Untrusted TLS connection established to mx.dmz.tait.net.nz[114.23.142.178]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256
posttls-finger: > EHLO develop
posttls-finger: < 250-mx.tait.net.nz
posttls-finger: < 250-PIPELINING
posttls-finger: < 250-SIZE 20480000
posttls-finger: < 250-ENHANCEDSTATUSCODES
posttls-finger: < 250-8BITMIME
posttls-finger: < 250-SMTPUTF8
posttls-finger: < 250 CHUNKING
posttls-finger: > QUIT
posttls-finger: < 221 2.0.0 Bye
ubuntu@focal:~$ pwd
/home/ubuntu

Thanks for your time!

[Christian Ehrhardt  (paelzer)]

Discussions happened on other MRs, this one is good.
Uploading ...

Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading postfix_3.5.6-1ubuntu0.2.dsc: done.
  Uploading postfix_3.5.6-1ubuntu0.2.debian.tar.xz: done.
  Uploading postfix_3.5.6-1ubuntu0.2_source.buildinfo: done.
  Uploading postfix_3.5.6-1ubuntu0.2_source.changes: done.
Successfully uploaded packages.

review: Approve

diff --git a/debian/changelog b/debian/changelog
index b4ced17..26a4234 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+postfix (3.5.6-1ubuntu0.2) hirsute; urgency=medium
+
+  * d/rules: Removed LDFLAG -Bsymbolic-functions (LP: #1885403).
+
+ -- Miriam España Acebal <[e-mail]>  Tue, 07 Sep 2021 11:36:44 +0200
+
 postfix (3.5.6-1ubuntu0.1) hirsute; urgency=medium
 
   * d/postfix.postinst: tolerate search domain with a leading dot
diff --git a/debian/rules b/debian/rules
index 2c28830..1cd22f6 100755
--- a/debian/rules
+++ b/debian/rules
@@ -15,6 +15,7 @@ PACKAGE=postfix
 DISTRO:=$(shell (lsb_release -is 2>/dev/null || echo Debian) | sed s:Debian:Debian/GNU:)
 
 export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+export DEB_LDFLAGS_MAINT_STRIP = -Wl,-Bsymbolic-functions
 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/buildflags.mk