Ubuntu

lp:~yofel/ubuntu/lucid/samba/lp-623798

Created by Philip Muškovac on 2010-09-04 and last modified on 2010-09-04
Get this branch:
bzr branch lp:~yofel/ubuntu/lucid/samba/lp-623798
Only Philip Muškovac can upload to this branch. If you are Philip Muškovac please log in for upload directions.

Related bugs

Related blueprints

Branch information

Owner:
Philip Muškovac
Status:
Mature

Recent revisions

103. By Philip Muškovac on 2010-09-04

Fix typo in apport hook

102. By Thierry Carrez on 2010-04-09

debian/winbind.pam-config: Fix potential breakage with stacking of
lower-priority modules in common-passwd (LP: #556996)

101. By Thierry Carrez on 2010-04-06

* debian/winbind.pam-config: Fix password PAM profile for winbind, thanks to
  Steve Langasek for investigation and fix (LP: #546874)
* debian/winbind.prerm, debian/winbind.postinst: Enable and disable winbind
  PAM profile on package install/removal (LP: #556342)

100. By Chuck Short on 2010-03-19

* Merge from debian testing. Remaining changes:
  + debian/patches/VERSION.patch:
    - set SAMBA_VERSION_SUFFIX to Ubuntu.
  + debian/smb.conf:
    - Add "(Samba, Ubuntu)" to server string.
    - Comment out the default [homes] share, and add a comment about "valid users = %s"
      to show users how to restrict access to \\server\username to only username.
    - Set 'usershare allow guests', so that usershare admins are allowed to create
      public shares in additon to authenticated ones.
    - add map to guest = Bad user, maps bad username to gues access.
  + debian/samba-common.conf:
    - Do not change priority to high if dhclient3 is installed.
    - Use priority medium instead of high for the workgroup question.
  + debian/mksambapasswd.awk:
    - Do not add user with UID less than 1000 to smbpasswd.
  + debian/control:
    - Make libswbclient0 replace/conflict with hardy's likewise-open.
    - Don't build against ctdb, since its not in main yet.
  + debian/rules:
    - Enable "native" PIE hardening.
    - Add BIND_NOW to maximize benefit of RELRO hardening.
  + Add ufw integration:
    - Created debian/samba.ufw.profile.
    - debian/rules, debian/samba.dirs, debian/samba.files: install
  + Add apport hook:
    - Created debian/source_samba.py.
    - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install
  + debian/control: Recommend keyutils for smbfs (LP: #493565)
  + debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported from Samba 3.5.x (LP: #182572)
  + debian/samba.postinst: Avoid scary pdbedit warnings on first import. (LP: #24741)
  + debian/samba.logrotate: Make it upstart compatible (LP: #529290)
  + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. (LP: #507374)
  + Dropped:
    debian/patches/debian/patches/security-CVE-2010-0728.patch: Included upstream.

99. By Thierry Carrez on 2010-03-11

[Thierry Carrez]
* debian/samba.postinst: Avoid scary pdbedit warnings on first import
  (LP: #24741)

[Chuck Short]
* debian/samba.logrotate: Make it upstart compatible (LP: #529290)
* debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. (LP: #507374)

98. By Marc Deslauriers on 2010-03-08

* SECURITY UPDATE: permission bypass via incorrect CAP_DAC_OVERRIDE
  handling.
  - debian/patches/security-CVE-2010-0728.patch: fix capability handling
    in source3/{include/smb.h,lib/system.c,smbd/server.c}.
  - CVE-2010-0728
* Removed patches:
  - debian/patches/debian-changes-2:3.4.5~dfsg-2ubuntu2: merge error
  - debian/patches/debian-changes-2:3.4.6~dfsg-1ubuntu1: merge error

97. By Chuck Short on 2010-03-03

  * Merge from debian unstable. Remaining changes:
  + debian/patches/VERSION.patch:
    - set SAMBA_VERSION_SUFFIX to Ubuntu.
  + debian/smb.conf:
    - Add "(Samba, Ubuntu)" to server string.
    - Comment out the default [homes] share, and add a comment about "valid users = %s"
      to show users how to restrict access to \\server\username to only username.
    - Set 'usershare allow guests', so that usershare admins are allowed to create
      public shares in additon to authenticated ones.
    - add map to guest = Bad user, maps bad username to gues access.
  + debian/samba-common.conf:
    - Do not change priority to high if dhclient3 is installed.
    - Use priority medium instead of high for the workgroup question.
  + debian/mksambapasswd.awk:
    - Do not add user with UID less than 1000 to smbpasswd.
  + debian/control:
    - Make libswbclient0 replace/conflict with hardy's likewise-open.
    - Don't build against ctdb, since its not in main yet.
  + debian/rules:
    - Enable "native" PIE hardening.
    - Add BIND_NOW to maximize benefit of RELRO hardening.
  + Add ufw integration:
    - Created debian/samba.ufw.profile.
    - debian/rules, debian/samba.dirs, debian/samba.files: install
  + Add apport hook:
    - Created debian/source_samba.py.
    - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install
  + debian/control: Recommend keyutils for smbfs (LP: #493565)
  + Switch to upstart:
    - Switch smbd and nmbd over to upstart jobs, to ensure nmbd starts reliably
      after the network is up. LP: #523868.
  + debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported
    from Samba 3.5.x. (LP: #182572)
  + debian/patches/security-CVE-2009-3297.patch: validate mount point and perform mount in "."
    to prevent race in source3/client/mount.cifs.c (CVE-2009-3297)

96. By Chuck Short on 2010-03-03

debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported
from Samba 3.5.x. (LP: #182572)

95. By Chuck Short on 2010-02-26

* debian/source_samba.py:
  - Fixed crashing apport hook. (LP: #526663)
  - Add more options to list of samba client (LP: #526666)

94. By Steve Langasek on 2010-02-18

* Switch smbd and nmbd over to upstart jobs, to ensure nmbd starts reliably
  after the network is up. LP: #523868.
* Remove /etc/network/if-up.d/samba on upgrade, superseded by the above.

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/maverick/samba
This branch contains Public information 
Everyone can see this information.

Subscribers