Package: keyutils / 1.6-6

Metadata

Package Version Patches format
keyutils 1.6-6 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
cifs.patch | (download)

request-key.conf | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 added 2 cifs helpers to request-key.conf

For CIFS DFS support

cflags.patch | (download)

Makefile | 2 0 + 2 - 0 !
1 file changed, 2 deletions(-)

 avoid setting intel architecture specific cflags

Bug-Debian: http://bugs.debian.org/638925
hardening.patch | (download)

Makefile | 12 8 + 4 - 0 !
1 file changed, 8 insertions(+), 4 deletions(-)

 use build flags from environment (dpkg-buildflags)

Necessary for hardening flags. Also strip -pie/-fPIE from CFLAGS/LDFLAGS when
used to link libraries. It conflicts with -fPIC.

Bug-Debian: http://bugs.debian.org/661393
Debian specific kernel feature tests.patch | (download)

tests/keyctl/padd/useradd/runtest.sh | 5 1 + 4 - 0 !
tests/keyctl/session/valid/runtest.sh | 15 0 + 15 - 0 !
tests/keyctl/show/valid/runtest.sh | 3 1 + 2 - 0 !
tests/prepare.inc.sh | 12 3 + 9 - 0 !
4 files changed, 5 insertions(+), 30 deletions(-)

 debian-specific kernel feature tests

Upstream assumes features based on the kernel version, but some of these
features aren't available in the Debian kernel, or were only enabled at a later
point. Also, the release number comparison used by upstream breaks with sid's
non-numeric release number of "unstable".

This adjust the feature tests to reflect Debian's kernels:
  * Drop $OSRELEASE tests
  * Drop ancient RedHat-specific test
  * Debian's kernel generally lacks CONFIG_BIG_KEYS
  * Debian's kernel has CONFIG_KEY_DH_OPERATIONS since 4.19~exp1

Make build reproducible.patch | (download)

Makefile | 3 2 + 1 - 0 !
1 file changed, 2 insertions(+), 1 deletion(-)

 make build reproducible

Make the build reproducible by making it possible to set the build date,
instead of embedding the current date.

endianness and PIE.patch | (download)

tests/toolbox.inc.sh | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 fix regexp match against `file /proc/$$/exe` for -fpie bash
 Now that bash is built with PIE enabled, keyutils' check for endianness
 fails because file no longer returns "executable", but instead returns
 "shared object" for file << 5.33 and "pie executable" for file >= 5.33.
pkg config install tweaks.patch | (download)

Makefile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 pkg-config install tweaks

man page fixes.patch | (download)

man/keyctl_pkey_verify.3 | 2 1 + 1 - 0 !
man/request-key.8 | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

 man page fixes