Format: 1.8 Date: Thu, 22 Nov 2018 23:49:34 -0500 Source: lxc Binary: lxc lxc1 lxc-dev lxc-utils liblxc-common liblxc-dev liblxc1 libpam-cgfs Architecture: s390x Version: 3.0.3-0ubuntu1~18.04.1 Distribution: bionic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Stéphane Graber Description: liblxc-common - Linux Containers userspace tools (common tools) liblxc-dev - Linux Containers userspace tools (development) liblxc1 - Linux Containers userspace tools (library) libpam-cgfs - PAM module for managing cgroups for LXC lxc - Transitional package - lxc -> lxc-utils lxc-dev - Transitional package - lxc-dev -> liblxc-dev lxc-utils - Linux Containers userspace tools lxc1 - Transitional package - lxc1 -> lxc-utils Launchpad-Bugs-Fixed: 1804755 Changes: lxc (3.0.3-0ubuntu1~18.04.1) bionic; urgency=medium . * New upstream bugfix release (LP: #1804755): - CONTRIBUTING: Update reference to kernel coding style - CONTRIBUTING: Link to latest online kernel docs - CONTRIBUTING: Direct readers to CODING_STYLE.md - CODING_STYLE: Mention kernel style in introduction - CONTRIBUTING: Add 'be' to fix grammar - CODING_STLYE: Simplify explanation for use of 'extern' - CODING_STLYE: Remove sections implied by 'kernel style' - CODING_STYLE: Fix non-uniform heading level - CODING_STYLE: Update section header format - cmd: Use parenthesis around complex macro - cmd: Use 'void' instead of empty parameter list - cmd: Do not use braces for single statement block - cmd: Fix whitespace issues - cmd: Use 'const' for static string constant. - cmd: Remove unnecessary whitespace in string - cmd: Put trailing */ on a separate line - cmd: Remove typo'd semicolon - cmd: Do not use comparison to NULL - lxc_init: s/SYSDEBUG()/SYSERROR()/g in remove_self - tools: lxc-attach: add default log priority & cleanups - tools: lxc-cgroup: add default log priority & cleanups - tools: lxc-checkpoint: add default log priority & cleanups - tools: lxc-console: add default log priority & cleanups - tools: lxc-create: add default log priority & cleanups - tools: lxc-destroy: add default log priority & cleanups - tools: lxc-device: add default log priority & cleanups - tools: lxc-execute: add default log priority & cleanups - tools: lxc-start: add default log priority & cleanups - tools: lxc-stop: add default log priority & cleanups - tools: lxc-freeze: add default log priority & cleanups - tools: lxc-unfreeze: add default log priority & cleanups - storage_utils: move duplicated function from tools - tools: fix lxc-execute command parsing - lseek - integer overflow - cmd: lxc-user-nic: change log macro & cleanups - cmd: lxc-usernsexec reorder includes - cmd: move declarations to macro.h - cmd: use utils.{c,h} helpers in lxc-usernsexec - cmd: simplify lxc-usernsexec - cmd: use safe number parsers in lxc-usernsexec - macro: add missing headers - macro: add macvlan properties - tools: Indicate container startup failure - storage: exit() => _exit(). when exec is failed - tools: lxc-wait: add default log priority & cleanups - conf: fix path/lxcpath mixups in tty setup - cmd: use goto for cleanup in lxc-usernsexec - cmd: Do not reassign variable before it is used - cmd: Reduce scope of 'count' variable - cmd: Fix format issues found by clang-format - list: fix indent - utils: split into {file,string}_utils.{c,h} - pam_cgfs: build from the same sources as liblxc - conf: fix devpts mounting when fully unprivileged - macro: s/rexit()/_exit()/g - attach: move struct declaration to top - macro: move macros from attach.c - Makefile: don't allow undefined symbols - autotools: check if compiler is new enough - log: handle strerror_r() versions - autotools: add --{disable,enable}-thread-safety - log: fail build on ENFORCE_THREAD_SAFETY error - {file,string}_utils: remove NO_LOG - initutils: remove useless comment - string_utils: remove unnecessary include - string_utils: remove unused headers - string_utils: add remove_trailing_slashes() - Makefile: remove last pam_cgfs special-casing - conf: add missing headers - Fix typo - ifaddrs: add safe implementation of getifaddrs() - Makefile: conditionalize ifaddrs.h inclusion - execute: skip lxc-init logging when unprivileged - execute: pass /proc/self/fd/ - tests: cleanup get_item.c - build: fix musl - configure: reorder header checks - compiler: add compiler.h header - commands: return -1 on lxc_cmd_get_init_pid() err - tests: add basic.c - tests: cleanup Makefile - commands: ensure -1 is sent on EPIPE for init pid - macro: add LXC_AUDS_ADDR_LEN - macro: move LXC_CMD_DATA_MAX from commands.h - macro: add PTR_TO_INT() and INT_TO_PTR() - macro: add INTTYPE_TO_STRLEN() - caps: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - cgfsng: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - confile: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - log: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - lsm: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - macro: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - lxccontainer: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - monitor: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - network: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - string_utils: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - utils: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - tools: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - conf: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - tests: s/LXC_NUMSTRLEN64/INTTYPE_TO_STRLEN()/ - macro: final INTTYPE_TO_STRLEN() related cleanups - macro: coding style fixes - Makefile: correctly add ifaddrs to noinst_HEADERS - start: remove duplicate macros - caps: move macros to macro header - string_utils: use UINT64_MAX macro - tree-wide: use sizeof on static arrays - Revert "tree-wide: use sizeof on static arrays" - commands: pass around intmax_t - commands: assign before converting to pointer - macro: calculate buffer lengths correctly - Revert "Revert "tree-wide: use sizeof on static arrays"" - macro: move MS_* macros - caps: fix illegal access to array bound - utils: defensive programming - nl: remove duplicated define - syntax error: mismatch brace - commands: better error message - file_utils: add lxc_recv_nointr() - commands: switch to setting errno and returning -1 - log: do not clobber errno - log: save errno on strerror_r() - tree-wide: s/recv()/lxc_recv_nointr()/g - file_utils: add lxc_send_nointr() - tree-wide: s/send()/lxc_send_nointr()/g - nl: save errno on lxc_netns_set_nsid() - log: log_append_logfile() add new error path - lxccontainer: fix dereferenced pointer - lxc: fix build with --disable-werror - utils: improve get_ns_uid() and add get_ns_gid() - utils: improve lxc_switch_uid_gid() - log: support dlog - attach: handle id switching smarter - start: avoid unnecessary syscalls - utils: make lxc_setgroups() return bool - utils: make lxc_switch_uid_gid() return bool - lxccontainer: use correct pid_t type - conf: remove extra MS_BIND with sysfs:mixed - network: use correct type in lxc_netns_set_nsid() - network: add lxc_netns_get_nsid() - remove unused variables - file_utils: remove unused function - network: minor tweaks - add compile flags for dlog - log: add common functions - log: add additional info of dlog - attach: don't shutdown ipc socket in child - security: fix too wide or inconsistent non-owner permissions - attach: report standard shell exit codes - af_unix: add function to remove duplicated codes for set sockaddr - lxccontainer: remove locks from set_cgroup_item() - lxccontainer: remove locks from get_cgroup_item() - apparmor: account for specified rootfs path (closes #2617) - conf: realpath() uses null as second parameter to prevent buffer overflow - start: s/backgrounded/daemonize/g - cgfsng: mark ops with \_\_cgfsng_ops\_\_ attribute - autotools: add -Wimplicit-fallthrough - cgroup: rename container specific cgroup functions - cgroups: s/fullcgpath/container_full_path/g - cgroups: add missing string.h include - cgroups: s/base_cgroup/container_base_path/g - autotools: fix wrong AX_CHECK_COMPILE_FLAG test - compiler: s/\_\_fallthrough\_\_/\_\_fallthrough/g - compiler: s/\_\_noreturn\_\_/\_\_noreturn/g - cgfsng: s/\_\_cgfsng_ops\_\_/\_\_cgfsng_ops/g - macro: add STRLITERALLEN() and STRARRAYLEN() - tree-wide: replace sizeof() with SIZEOF2STRLEN() - compiler: \_\_attribute\_\_((noreturn)) on bionic - autotools: support -Wcast-align - autotools: support -Wstrict-prototypes - network: add netns_getifaddrs() implementation - tree_wide: switch to netns_getifaddrs() - netns_ifaddrs: mark casts as safe - autotools: fix lxc_user_nic build - stop: Only freeze if freezer is available - doc: tweak documentation a little - cgfsng: set errno to ENOENT on get_hierarchy() - cgfsng: s/cgfsng_destroy/cgfsng_payload_destroy/g - cgfsng: s/25/INTTYPE_TO_STRLEN(pid_t)/g - compiler: fix \_\_noreturn on bionic - compiler: add \_\_hot attribute - netns_ifaddrs: fix missing include - autools: prevent dlog build on stable branch - tree-wide: fix includes to fix bionic builds - template: oci template supports for char user info - btrfs: fix btrfs containers - oci-template: Add logic for no /etc/passwd, group - configure: fix -Wimplicit-fallthrough check - utils: add lxc_setup_keyring() - autotools: support -z relro and -z now - netns_ifaddrs: handle IFLA_STATS{64} correctly - syscall_wrappers: add pivot_root() - raw_syscalls: add lxc_raw_execveat() - raw_syscalls: add lxc_raw_clone{_cb}() - raw_syscalls: add lxc_raw_getpid() - autotools: fix lxc init build - autotools: fix lxc-monitord build - autotools: fix lxc-user-nic build - autotools: fix lxc-usernsexec build - tests: add missing build dependencies - netns_ifaddrs: only use struct rtnl_link_stats64 - cgroups: remove unnecessary line - netns_iaddrs: remove unused functions - parse: prefault config file with MAP_POPULATE - cgfsng: avoid tiny race window - utils: fix lxc_set_death_signal() - cgfsng: handle v1 cpuset hierarchy first - syscall_wrappers: move memfd_create() - syscall_wrappers: move setns() - syscall_wrappers: move sethostname() - syscall_wrappers: move unshare() - syscall_wrappers: move signalfd() - raw_syscalls: move lxc_raw_gettid() - tools: lxc-start: remove unused argument - tools: lxc-unshare: remove unnecessary initialization - parse: remove access() check - parse: report errors when failing config parsing - macro: add PATH_MAX - cmd: s/MAXPATHLEN/PATH_MAX/g - conf: s/MAXPATHLEN/PATH_MAX/g - confile: s/MAXPATHLEN/PATH_MAX/g - log: s/MAXPATHLEN/PATH_MAX/g - lxccontainer: s/MAXPATHLEN/PATH_MAX/g - macro: s/MAXPATHLEN/PATH_MAX/g - network: s/MAXPATHLEN/PATH_MAX/g - pam: s/MAXPATHLEN/PATH_MAX/g - start: s/MAXPATHLEN/PATH_MAX/g - terminal: s/MAXPATHLEN/PATH_MAX/g - utils: s/MAXPATHLEN/PATH_MAX/g - storage: s/MAXPATHLEN/PATH_MAX/g - tools: s/MAXPATHLEN/PATH_MAX/g - attach: reset signal mask - start: change log level - file_utils: fix too wide or inconsistent non-owner permissions - attach: fix missing pthread.h include - macro: add NETLINK_DUMP_STRICT_CHK - macro: add SOL_NETLINK - netns_ifaddrs: check for NETLINK_DUMP_STRICT_CHK - parse: do not mask failed parse - test: test invalid config keys - confile: remove unused variable - parse: fix uninitialized pointer access - fix rpm packaging error for static library - fix post section script error for rpm install - conf: log prlimit setup - conf: verify_start_hooks() after lxc.mount.entry - checkpoint: fix running do_dump() - monitor: log cleanups - monitor: checking name too long to make monitor sock name - commands_utils: improve code redundancy to make abstract unix socket name - monitor: fix coding standard - autools: use -fno-strict-aliasing - checkconfig: Handle missing kernel version - lxc-init: log to /dev/console - autotools: fix --disable-commands builds - string_utils: fix global buffer overflow issue - include: simplify strlcpy() - raw_syscalls: ensure function always returns value - confile: fix append_unexp_config_line() - parse: protect against config updates during parse - parse: fix uninitialized value - tree-wide: coding style fixes - start: simplify - autotools: compiler based hardening - coverity: update .travis.yml - coverity: update .travis.yml - coverity: update .travis.yml - coverity: update .travis.yml - coverity: update .travis.yml - confile: do not overwrite global variable - commands: simplify - cgfsng: move increment out of branch - monitord: do not hide global variable - tools/lxc_copy: do not hide global variable - tools/lxc_top: do not hide global variable - tools/lxc_info: do not hide global variable - state: remove tautological check - conf: remove tautological check - conf: use O_CLOEXEC in lxc_pivot_root() - conf: remove tautological check - lxccontainer: remove check from goto target - start: prevent values smaller 0 - tools/lxc_stop: use correct check - cmd/lxc_init: do not hide global variable - coverity: #1440391 - coverity: #1440389 - coverity: #1426130 - storage_utils: add error handling - storage_utils: cleanups - storage_utils: use _exit() instead of exit() in child process - parse: cleanups - dlog: inherit dlog fds - spelling: allocate - spelling: ambiguous - spelling: answer - spelling: architecture - spelling: array - spelling: asynchronous - spelling: backingstorage - spelling: capabilities - spelling: character - spelling: checkpoint - spelling: comma - spelling: command - spelling: committer - spelling: configuration - spelling: constant - spelling: container - spelling: control - spelling: convenience - spelling: could - spelling: describing - spelling: device - spelling: exiting - spelling: explicitly - spelling: feature - spelling: github - spelling: hierarchy - spelling: hoops - spelling: ifindices - spelling: implementations - spelling: inherited - spelling: initialize - spelling: javascript - spelling: keepdata - spelling: libraries - spelling: loglevel - spelling: namespace - spelling: otherwise - spelling: output - spelling: overlayfs - spelling: overridden - spelling: override - spelling: passphrase - spelling: perhaps - spelling: pertains - spelling: portion - spelling: potentially - spelling: returns - spelling: root - spelling: securityfs - spelling: snapshotting - spelling: specified - spelling: specify - spelling: subtracting - spelling: successfully - spelling: syscall - spelling: timeout - spelling: unsigned - spelling: userns - spelling: without - lxcmntent: coding rules - string_utils: coding rules - log: fix too wide or inconsistent non-owner permissions - coverity: move to separate branch - include: correctly include macro.h - Fix spacing error in namespace.c - caps: replace read with lxc_read_nointr - log: replace write with lxc_write_nointr - dlog: move match_dlog_fds() - conf: s/ty/tty/g - pam_cgfs: remove redundancy file utils - cgfs: remove redundancy utils - pam_cgfs: remove dependency from cap & log - utils: fix coding styles - utils: add errno logs for exception case - Adds -qq flags to lvcreate commands - utils: make keyring allocation failure non-fatal - autotools: fix lxc-{create,copy} build - cgfsng: remove freezer requirement - start: don't call cgroup_exit() twice . * Bump standards to 4.2.0 - Update lintian overrides Checksums-Sha1: ae7593185252b8f8ae067a6a5e2b44c295fda507 395204 liblxc-common-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 8b455dd30b82cc31bb4bc41f9c4cd15c50d4251e 346632 liblxc-common_3.0.3-0ubuntu1~18.04.1_s390x.deb 0affa9d20867375b7b00f908d18d5c624c7cfd0b 275160 liblxc-dev_3.0.3-0ubuntu1~18.04.1_s390x.deb 3ad31c5d3a69dc2ac977d954522ab5c7139a3f1b 863544 liblxc1-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb a2a354fe3c248c25fbf9b43b348c017fbd6d4ac0 234920 liblxc1_3.0.3-0ubuntu1~18.04.1_s390x.deb 557fca6a491a8d72a0ddeb880c25e8fb1c3d296b 52688 libpam-cgfs-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 9684f01ff5bd3faf153177961726aa85f381c292 28512 libpam-cgfs_3.0.3-0ubuntu1~18.04.1_s390x.deb b6fc6b5d006f621b85cf3e2a4f83de3ec06ebad2 659420 lxc-utils-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb ba2ccf91b8cf10640d7a2522e9036d84c6cfb249 345740 lxc-utils_3.0.3-0ubuntu1~18.04.1_s390x.deb 824cd3c54317d33011311271ac9a15d5b95a977b 10021 lxc_3.0.3-0ubuntu1~18.04.1_s390x.buildinfo Checksums-Sha256: 65bc0f2a3b518e331543bc410758c83368880a4776df610a64ca370334562b96 395204 liblxc-common-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 3092a51167f3c048dc7d61b29455523b528c03c7d5186fda8cfa7e4dea2a69f7 346632 liblxc-common_3.0.3-0ubuntu1~18.04.1_s390x.deb 0194e8ccf99e9547b17a5497b660875624092d1ebcf1c0ac97c3e1bd6b41d8a7 275160 liblxc-dev_3.0.3-0ubuntu1~18.04.1_s390x.deb d88aadaf057b312a719ef87de9f75135266b4b53c977e9c73d709042d9b78c21 863544 liblxc1-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb db11814a4ebb741489a4e539476b7b87e8464c18f8336d056df8169b268eafd9 234920 liblxc1_3.0.3-0ubuntu1~18.04.1_s390x.deb 6b6603b45184400e07c46afd70ba685922380745b73e15b350ebaeb097e943d2 52688 libpam-cgfs-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 9bea516e03f9017a600dc08a90dea22bd0449af3eb68b09c88a0fb6132b5df67 28512 libpam-cgfs_3.0.3-0ubuntu1~18.04.1_s390x.deb bb538954863f8de92d63fb79f03617dafc18c0341272c170761a8f393f3dcf0c 659420 lxc-utils-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 4e475ef9e9342e60601b7d8cda71be58de91b560c057dc417ef06952c612e49f 345740 lxc-utils_3.0.3-0ubuntu1~18.04.1_s390x.deb 49dd810fbc9978001672557da2a44405d20582027aa385ee944ae7f35e804674 10021 lxc_3.0.3-0ubuntu1~18.04.1_s390x.buildinfo Files: 4429121158dba2b41cb077fcac0d75e5 395204 debug optional liblxc-common-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 9a69b8c8e562422a88b7515f2dd60668 346632 admin optional liblxc-common_3.0.3-0ubuntu1~18.04.1_s390x.deb ec84ae8eddfd3aeaaa560d2b9dd8b85e 275160 libdevel optional liblxc-dev_3.0.3-0ubuntu1~18.04.1_s390x.deb eb4df331fd86f1df4883572c6d050944 863544 debug optional liblxc1-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 28beb7116e9593d6bcfb4e773b7981b8 234920 libs optional liblxc1_3.0.3-0ubuntu1~18.04.1_s390x.deb a9964e3fd192585a0af8b76721433d09 52688 debug optional libpam-cgfs-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 17bb156c910f06e590228277dc896c5d 28512 admin optional libpam-cgfs_3.0.3-0ubuntu1~18.04.1_s390x.deb 01301b0e85f72d2bdea87b62006f1414 659420 debug optional lxc-utils-dbgsym_3.0.3-0ubuntu1~18.04.1_s390x.ddeb 85d6d89a8f2878e0eff187807b58df1e 345740 admin optional lxc-utils_3.0.3-0ubuntu1~18.04.1_s390x.deb 05eb956115b5ae651f2b420da32c39cc 10021 admin optional lxc_3.0.3-0ubuntu1~18.04.1_s390x.buildinfo