diff -Nru maas-1.5.4+bzr2294/debian/changelog maas-1.5.4+bzr2294/debian/changelog --- maas-1.5.4+bzr2294/debian/changelog 2014-09-19 20:53:28.000000000 +0000 +++ maas-1.5.4+bzr2294/debian/changelog 2014-12-04 18:59:56.000000000 +0000 @@ -1,3 +1,11 @@ +maas (1.5.4+bzr2294-0ubuntu1.2) trusty-security; urgency=medium + + * Fix compatibility with mod-wsgi security update (LP: #1399016) + - debian/patches/home-directory.patch: specify a valid home directory + for the maas user, since mod-wsgi no longer works without one. + + -- Marc Deslauriers Thu, 04 Dec 2014 13:59:56 -0500 + maas (1.5.4+bzr2294-0ubuntu1.1) trusty-proposed; urgency=medium * Add hardware enablement for armhf/keystone (LP: #1350103) diff -Nru maas-1.5.4+bzr2294/debian/patches/home-directory.patch maas-1.5.4+bzr2294/debian/patches/home-directory.patch --- maas-1.5.4+bzr2294/debian/patches/home-directory.patch 1970-01-01 00:00:00.000000000 +0000 +++ maas-1.5.4+bzr2294/debian/patches/home-directory.patch 2014-12-04 18:59:51.000000000 +0000 @@ -0,0 +1,13 @@ +Description: Fix compatibility with mod-wsgi security update +Bug-Ubuntu: https://bugs.launchpad.net/maas/+bug/1399016 + +Index: maas-1.7.0~beta8+bzr3272/contrib/maas-http.conf +=================================================================== +--- maas-1.7.0~beta8+bzr3272.orig/contrib/maas-http.conf 2014-10-22 12:55:39.000000000 -0400 ++++ maas-1.7.0~beta8+bzr3272/contrib/maas-http.conf 2014-12-04 13:56:05.790551266 -0500 +@@ -1,4 +1,4 @@ +-WSGIDaemonProcess maas user=maas group=maas processes=2 threads=1 display-name=%{GROUP} ++WSGIDaemonProcess maas user=maas group=maas home=/var/lib/maas/ processes=2 threads=1 display-name=%{GROUP} + + # Without this, defining a tag as a malformed xpath expression will hang + # the region controller. diff -Nru maas-1.5.4+bzr2294/debian/patches/series maas-1.5.4+bzr2294/debian/patches/series --- maas-1.5.4+bzr2294/debian/patches/series 2014-09-19 20:39:01.000000000 +0000 +++ maas-1.5.4+bzr2294/debian/patches/series 2014-12-04 18:59:51.000000000 +0000 @@ -2,3 +2,4 @@ 02-pserv-config.patch 03-txlongpoll-config.patch 04-enable-armhf-keystone.patch +home-directory.patch