Changelog
apt-listchanges (3.1) experimental; urgency=medium
* Drop root privileges when running commands spawned by browser,
xterm-browser, and xterm-pager frontends (closes: #456454):
+ a non-privileged user is selected by examining the APT_LISTCHANGES_USER,
SUDO_USER, and USERNAME environment variables;
+ if temporary directory name ends with '/0', then it is modified to end
with '/<uid-of-new-user>';
+ a few environment variables (HOME, SHELL, LOGNAME, TMPDIR, etc.)
are updated;
+ os.spawnl() call was replaced with subprocess.Popen() with its env, and
preexec_fn params set properly (BTW. this also mean that shell is no
longer involved in running the commands).
All the above steps are needed, because `su -c' cannot be used, because it
detaches from the controlling terminal...
The pager frontend still runs its command as root, so that it can be usable
in case of any errors in the implementation of the above logic.
* Update man page for the above change. Apply some other minor fixes to it.
* Close temporary files explicitly to have a chance to ignore an error when
the file has been removed already (closes: #772663).
* Exit with an error when invalid command line option is given.
* Permit '+' character in e-mail address while converting output to html.
* Move the code responsible for handling the seen database to new ALSeenDb.py
module and:
+ handle the fact that ndbm in python3 adds the '.db' extension by itself,
and update the postinst script to rename the spurious '.db.db' file
created by version 3.0 (closes: #820732);
+ increase reliability of saving database changes, and store the previous
version of the database in 'listchanges-old.db', also update the postrm
script for the new file;
+ add '--dump-seen' option to display the contents of the database to
stdout, and mention NFS-sharing in README.Debian (closes: #658444).
* Mention `NEWS and/or changelog' in README.Debian (closes: #743366), and
update the description of both the algorithm and recovery procedure.
* Standards-Version: 3.9.8.
-- Robert Luberda <email address hidden> Sun, 17 Apr 2016 23:29:25 +0200
