-
man-db (2.8.3-2ubuntu0.1) bionic; urgency=medium
* Backport seccomp sandbox improvements from 2.8.4 (LP: #1785414):
- Allow sched_getaffinity, used by xz in some cases.
- Allow some shared memory operations, required by preloaded libraries
such as the Astrill VPN.
- Improve ESET File Security compatibility further.
-- Colin Watson <email address hidden> Sat, 04 Aug 2018 20:16:12 +0100
-
man-db (2.8.3-2) unstable; urgency=medium
* AppArmor: Allow man_filter to read from anywhere, since there are no
real restrictions on where manual page files may be, and the worst this
can do is feed data to the invoking man process.
* AppArmor: Allow man and its related profiles to exchange signals.
-- Colin Watson <email address hidden> Sat, 07 Apr 2018 12:15:33 +0100
-
man-db (2.8.3-1) unstable; urgency=medium
* New upstream release:
- sandbox: Allow kill and tgkill unconditionally (closes: #892309).
- sandbox: Allow sibling architectures on x86/x86_64/x32 (closes:
#891267).
- man: Only change directory in child processes (closes: #894792).
* Switch debian/watch to HTTPS.
-- Colin Watson <email address hidden> Thu, 05 Apr 2018 13:09:43 +0100
-
man-db (2.8.2-1) unstable; urgency=medium
* New upstream release:
- sandbox: Work around snoopy (closes: #890861).
- sandbox: Handle qemu-user returning EFAULT (closes: #891109).
* Use HTTPS form of copyright-format URL.
-- Colin Watson <email address hidden> Wed, 28 Feb 2018 15:04:14 +0000
-
man-db (2.8.1-1) unstable; urgency=medium
* New upstream release.
* Use stacked profiles for subprocesses so that AppArmor realises that
they constitute a reduction in privileges and allows the transition even
after a seccomp filter has been installed.
* Build with seccomp again, now that it works in conjunction with
AppArmor.
* Breaks/Replaces manpages-tr (<< 1.0.5.1-3) (closes: #889805).
-- Colin Watson <email address hidden> Fri, 09 Feb 2018 13:32:41 +0000
-
man-db (2.8.0-2) unstable; urgency=medium
* Build without seccomp for now, until I work out how to make it play well
with AppArmor on recent kernels (closes: #889608, #889626).
-- Colin Watson <email address hidden> Mon, 05 Feb 2018 10:09:57 +0000
-
man-db (2.8.0-1) unstable; urgency=medium
[ Colin Watson ]
* New upstream release:
- If man adds prefixes to a page to handle such things as disabling
hyphenation, then take account of those when looking for a
preprocessor line at the start of the page (closes: #867857).
- Confine most subprocesses that handle untrusted data using seccomp
(closes: #877199).
* Move VCS to salsa.debian.org.
[ Benjamin Drung ]
* Fix malformed debian/changelog entry (closes: #886649).
-- Colin Watson <email address hidden> Sun, 04 Feb 2018 17:25:58 +0000
-
man-db (2.7.6.1-4build1) bionic; urgency=medium
* Rebuild against new libgdbm5.
-- Gianfranco Costamagna <email address hidden> Fri, 02 Feb 2018 15:25:38 +0100
-
man-db (2.7.6.1-4) unstable; urgency=medium
* Add missing AppArmor lock access.
* Recent kernels revalidate open FDs, and there are often some still open
on TTYs. Temporarily add <abstractions/consoles> to AppArmor groff and
filter child profiles until we have a chance to teach man to close
irrelevant open FDs before execve (closes: #882405).
-- Colin Watson <email address hidden> Wed, 22 Nov 2017 12:41:37 +0000
-
man-db (2.7.6.1-3) unstable; urgency=medium
* Add a simple AppArmor profile to confine groff-related programs,
decompressors, and other filters when run from man.
-- Colin Watson <email address hidden> Tue, 21 Nov 2017 11:46:44 +0000
-
man-db (2.7.6.1-2) unstable; urgency=medium
* Fix locale macro loading for Chinese.
-- Colin Watson <email address hidden> Tue, 13 Dec 2016 13:10:25 +0000
