Accepted cryptsetup 2:2.0.3-5 (source amd64 all) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 07 Jul 2018 01:47:57 +0200
Source: cryptsetup
Binary: cryptsetup-run cryptsetup-bin cryptsetup-initramfs cryptsetup libcryptsetup12 libcryptsetup-dev cryptsetup-udeb libcryptsetup12-udeb
Architecture: source amd64 all
Version: 2:2.0.3-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel@alioth-lists.debian.net>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
cryptsetup - transitional dummy package for cryptsetup-{run,initramfs}
cryptsetup-bin - disk encryption support - command line tools
cryptsetup-initramfs - disk encryption support - initramfs integration
cryptsetup-run - disk encryption support - startup scripts
cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
libcryptsetup-dev - disk encryption support - development files
libcryptsetup12 - disk encryption support - shared library
libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb)
Closes: 902733 902879 902943
Changes:
cryptsetup (2:2.0.3-5) unstable; urgency=medium
.
[ Jonas Meurer ]
* debian/askpass.c, debian/scripts/passdev.c, debian/rules:
+ Drop _BSD_SOURCE in favor of _DEFAULT_SOURCE
+ Drop c99 std, as the default is now higher than that
* debian/control:
+ Drop explicit dependencies on libgcrypt20 and libgpg-error0 from
libcryptsetup12. They're pulled in by ${shlibs:Depends} automatically.
.
[ Guilhem Moulin ]
* debian/initramfs/cryptroot-unlock: Keep looping forever (as long as the
disk is locked) if the CRYPTTAB_OPTION_tries variable is set to 0, cf.
crypttab(5).
* debian/doc/crypttab.xml: Clarify that the 'readonly' flag sets up a
read-only mapping. Cf. `cryptsetup --readonly`.
* debian/initramfs/hooks/cryptroot:
+ Fix generation of initrd crypttab(5) with `update-initramfs -u -v` for
key files matching $KEYFILE_PATTERN, or when a 'keyscript' is specified
in the crypttab options. Regression since 2:2.0.3-2. (Closes: #902733.)
+ Avoid processing entries multiple times in get_crypttab_entry(), which
could happen with 'keyscript=decrypt_derived' for instance.
+ Don't complain that the sysfs dir can't be found when the hook failed to
normalize the device (another warning is shown already).
+ If source device is mapped (for instance if it's a logical volume), put
its dm name into the initrd crypttab. LVM2's local-block script doesn't
work with UUIDs, and giving it a VG+LV is better anyway as we avoid to
activate all volumes at initramfs stage. (Closes: #902943.)
* debian/initramfs/conf-hook: Clarify that if KEYFILE_PATTERN if null or
unset then no key file is copied.
* debian/initramfs/*, debian/functions, debian/cryptdisks-functions:
+ Use major:minor device IDs internally, as this facilitate discovery of
sysfs directories, and we don't have to take care of the udev mangling.
+ Decode octal sequences when reading /etc/crypttab or /etc/fstab. This
means that key files and option values can contain blanks and special
characters encoded as octal sequences.
+ Refactor crypttab(5) parsing logic, to avoid duplication of boilerplate
code.
* debian/functions: If the key file is a symlink, warn about insecure
permissions of the target, not the link itself.
* debian/scripts/decrypt_derived: For devices with keys in the kernel
keyring (e.g., LUKS2 by default), refuse to derive anything.
* debian/patches/disable-internal-tests.patch: Add configure option
'--disable-internal-tests' to disable the internal test suite.
* debian/rules: Don't run upstream's internal test suite if
$DEB_BUILD_OPTIONS contains the string "skip-internal-tests". (Tests are
still run by default.)
* debian/cryptdisks-functions: Restore support for crypttab(5) entries with
regular files as source device. Regression since 2:2.0.3-2.
(Closes: #902879.)
* debian/control: Bump Standards-Version to 4.1.5 (no changes necessary).
Checksums-Sha1:
ff67746a3a5978379a59e9348bd2d696161c456f 2800 cryptsetup_2.0.3-5.dsc
8cd02591524d81d5ee6b20e423e37d022a6182ba 97660 cryptsetup_2.0.3-5.debian.tar.xz
883b9aebc572e9bdfb84fbdf23129790a07ae3c9 164876 cryptsetup-bin-dbgsym_2.0.3-5_amd64.deb
b328661ade9a8384d3d71bd3be815fc89acbbe88 245308 cryptsetup-bin_2.0.3-5_amd64.deb
574b81a7f9d2a3ec6002e22643f814a5c72ecc8e 63368 cryptsetup-initramfs_2.0.3-5_all.deb
397792124b4a88b15b5e9b3eb7517056c972cdc3 17116 cryptsetup-run-dbgsym_2.0.3-5_amd64.deb
98cd67535ea3bf421810aec642449a77b5c5c002 179744 cryptsetup-run_2.0.3-5_amd64.deb
75bc8659c77385cdc5778fef45f743c669716f08 48476 cryptsetup-udeb_2.0.3-5_amd64.udeb
fa329f774cc87229a7701b408b079b4c537ff5c5 47600 cryptsetup_2.0.3-5_all.deb
2d94d5b67a96d346ac870e7cd01f99740872a1f5 9189 cryptsetup_2.0.3-5_amd64.buildinfo
6c9607e8ef5364ffa123dea7d51ade477e964190 62816 libcryptsetup-dev_2.0.3-5_amd64.deb
bd33e2ed44147d6cc2752c550aec97d3dc24cb4f 340020 libcryptsetup12-dbgsym_2.0.3-5_amd64.deb
24519cf41098938a8dc4c04d28629863e2af58ca 129400 libcryptsetup12-udeb_2.0.3-5_amd64.udeb
17f388f8470131b44fa01e52a55920eaea4c2379 175536 libcryptsetup12_2.0.3-5_amd64.deb
Checksums-Sha256:
694e1af3b7a406aa4f9a987b90183a97a2d79c73524d5bad2bf35a27ecb27f4d 2800 cryptsetup_2.0.3-5.dsc
59a5ab6285de95f68b0cd76cec8ba5557031ed3e472188347422f8322a94a55b 97660 cryptsetup_2.0.3-5.debian.tar.xz
d66cc10e0f27c4af6df637400b12deb593ce40bc735faaf21f5a94239b460339 164876 cryptsetup-bin-dbgsym_2.0.3-5_amd64.deb
fd1db5baf78df178417ef0b3313cb895a9d3bcfbd8e461318589a48f62d2838d 245308 cryptsetup-bin_2.0.3-5_amd64.deb
87ef528741cb56b83e122e24923d8a22a768e6df7b575f89682c7e0b956730d3 63368 cryptsetup-initramfs_2.0.3-5_all.deb
edc7ee6a3172b770089d45caaf7a3ab9aaaea7d4dc1d23713f8cccb7efd3b94a 17116 cryptsetup-run-dbgsym_2.0.3-5_amd64.deb
925000d236d6b7ef1a991a9b8aff6c8781017a7dada4a9a8ffa5a0a45949a04c 179744 cryptsetup-run_2.0.3-5_amd64.deb
9faf95cfc410125bece003287371f2ee85ef925c3d490249d33a42bbe5f36573 48476 cryptsetup-udeb_2.0.3-5_amd64.udeb
b3b538748ff7f959b1154c2503ba06044a13f0b72dc274c93d96367a2cbfe5a7 47600 cryptsetup_2.0.3-5_all.deb
9f8ad040d7bdcba80125a9d93795e63cd619dc1c43ae64300c91d5102345658a 9189 cryptsetup_2.0.3-5_amd64.buildinfo
35f72258950d25f67ead6f015631c7710d6d7f01d81574f9a9e7915b576a70d3 62816 libcryptsetup-dev_2.0.3-5_amd64.deb
461edcad67a535815fe7eea38b9f9a3d51d2b77d571ae5683038cfad39304733 340020 libcryptsetup12-dbgsym_2.0.3-5_amd64.deb
f0f02ea3f6cbb31038360f0a360a9d180d016a20972048221d75a6081acf2e62 129400 libcryptsetup12-udeb_2.0.3-5_amd64.udeb
2867ccf111edf162e0793b5daf2806593b0c63ca7a534630261d8d19bfba255d 175536 libcryptsetup12_2.0.3-5_amd64.deb
Files:
681e7da7b0264288932dfc6bdd80066e 2800 admin optional cryptsetup_2.0.3-5.dsc
fbca8d346a423cae08b4c587a5ea8bf1 97660 admin optional cryptsetup_2.0.3-5.debian.tar.xz
383ba4ee2a2c5cf28bc1dee268b77d25 164876 debug optional cryptsetup-bin-dbgsym_2.0.3-5_amd64.deb
5cc49debbd83d2aaee2ebcdc912d1692 245308 admin optional cryptsetup-bin_2.0.3-5_amd64.deb
5adb7da2dfa9f0e35a66b71d2983aa33 63368 admin optional cryptsetup-initramfs_2.0.3-5_all.deb
e7c495cb9ecdbc059da6cbbcf37efc62 17116 debug optional cryptsetup-run-dbgsym_2.0.3-5_amd64.deb
bf5310ba0dbf624bcc36176308c3445a 179744 admin optional cryptsetup-run_2.0.3-5_amd64.deb
471d3837cc00e147530ba111c1d1a691 48476 debian-installer optional cryptsetup-udeb_2.0.3-5_amd64.udeb
f30b7f2530f990f16f7134afb665fdbb 47600 oldlibs optional cryptsetup_2.0.3-5_all.deb
0d7693128545d783337e1e75be0526bd 9189 admin optional cryptsetup_2.0.3-5_amd64.buildinfo
2734ad0b46016612d54c5fe2f4c16a63 62816 libdevel optional libcryptsetup-dev_2.0.3-5_amd64.deb
c7256bf4df3b73d388df201aac31e384 340020 debug optional libcryptsetup12-dbgsym_2.0.3-5_amd64.deb
8432a1f8d79778e862f1cc85160bbcc4 129400 debian-installer optional libcryptsetup12-udeb_2.0.3-5_amd64.udeb
c1385fd7f1e471b40886f66e123d5a82 175536 libs optional libcryptsetup12_2.0.3-5_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAltAAlUACgkQ05pJnDwh
pVJDxA/9H2lWlNMfuHEMZPdoaT3nzDAxvB7Y6aWVGal/LzUrV+JPSECuAh6uVq5w
98G3UnYGGABa2ZCuFVcRGJmxmuwo8ORF2sCMys1S0pL2M9VJPZ7TrnRJDDM9ecZc
I3KISsX8rkQCvubd/P1zIK5qZ7dne04XVilCT8MdaUvBathOHi2HzKSYzNC4/n5R
ODSQxOEhCP+UxziwJLrCmyWcYbmRAAMC/K8kCc2BDWcgevY0etprk8b4DsD1CPBm
DVV8A1+0DVWaaJyOmTjsYJH3ToAQ1uo+XDVgSwCjTuQsJZRpcYVo90RhU6IRXEO8
UTEjoscwaVDgknSrHfl2To+c29MAMpQE30OvumE6fIp7DV752jBs4ZRrH4JnMVjS
mfZxB48dI0zz043Tj7hw3H1S96etKn62jb8pDOsL6QyfnlTJ1QbGUdt1DdT3CrWx
gtA2jb0nEPwxCehO4DzYdTo7GzRlUMDKlDD18K9fYBH7KbI+OWiW6/suvUQhng/f
2gspyJLKi+LxOoqDoTPYuntR6FlaK9R6CvYOS3btOSDDRSnvbZhNkAqGeqZWk5Pa
bmSX/94q6IRs2Oo+Ging5M4Ep8bhyjRwnF/vuStEk/AI1pe9UBMZfutIj5AaFhNb
gaDbs+W9QtFiv6WQywCeosMiIW5Sfd2yImAmffnGy/sJEzce0Qo=
=W8So
-----END PGP SIGNATURE-----