committing changes in /etc after apt run

author mhoellein <mhoellein@freenet.de>

Fri, 17 May 2019 12:08:50 +0000 (14:08 +0200)

committer mhoellein <mhoellein@freenet.de>

Fri, 17 May 2019 12:08:50 +0000 (14:08 +0200)
author mhoellein <mhoellein@freenet.de>
Fri, 17 May 2019 12:08:50 +0000 (14:08 +0200)
committer mhoellein <mhoellein@freenet.de>
Fri, 17 May 2019 12:08:50 +0000 (14:08 +0200)
diff --git a/alternatives/clhsdb b/alternatives/clhsdb

new file mode 120000 (symlink)

index 0000000..567a929
--- /dev/null
+++ b/alternatives/clhsdb
@@ -0,0 +1 @@
+/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/clhsdb
+\ No newline at end of file
diff --git a/alternatives/hsdb b/alternatives/hsdb

new file mode 120000 (symlink)

index 0000000..855fe86
--- /dev/null
+++ b/alternatives/hsdb
@@ -0,0 +1 @@
+/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/hsdb
+\ No newline at end of file
diff --git a/alternatives/orbd b/alternatives/orbd

index b8843b44b234fbe1b275f130d5328a91306e215c..becb31e08b5cf7c557fc562aa5bc77a39939ff6f 120000 (symlink)
--- a/alternatives/orbd
+++ b/alternatives/orbd
@@ -1 +1 @@
-/usr/lib/jvm/java-11-openjdk-amd64/bin/orbd
-\ No newline at end of file
+/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/orbd
+\ No newline at end of file
diff --git a/alternatives/orbd.1.gz b/alternatives/orbd.1.gz

index 0deaa68737c4e51c194062dc0c63d53506aeba36..c52991d93a460a32f88df0617b86091cc3006282 120000 (symlink)
--- a/alternatives/orbd.1.gz
+++ b/alternatives/orbd.1.gz
@@ -1 +1 @@
-/usr/lib/jvm/java-11-openjdk-amd64/man/man1/orbd.1.gz
-\ No newline at end of file
+/usr/lib/jvm/java-8-openjdk-amd64/jre/man/man1/orbd.1.gz
+\ No newline at end of file
diff --git a/alternatives/servertool b/alternatives/servertool

index f3d2469cfd012569edf2c9a30354c96871a3217a..6dab3a1cc6c8df10c7f3ada8251f9233706e524d 120000 (symlink)
--- a/alternatives/servertool
+++ b/alternatives/servertool
@@ -1 +1 @@
-/usr/lib/jvm/java-11-openjdk-amd64/bin/servertool
-\ No newline at end of file
+/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/servertool
+\ No newline at end of file
diff --git a/alternatives/servertool.1.gz b/alternatives/servertool.1.gz

index 1a29d2085bf09ff52dc1a78266429b0e771e739a..3d175f814b7d62bc8cd13c15a7feec3d27994a38 120000 (symlink)
--- a/alternatives/servertool.1.gz
+++ b/alternatives/servertool.1.gz
@@ -1 +1 @@
-/usr/lib/jvm/java-11-openjdk-amd64/man/man1/servertool.1.gz
-\ No newline at end of file
+/usr/lib/jvm/java-8-openjdk-amd64/jre/man/man1/servertool.1.gz
+\ No newline at end of file
diff --git a/alternatives/tnameserv b/alternatives/tnameserv

index eb5330ecf9a092d735e26f58507ea1a9467cb88d..be38dca8ac8e7ab3f08b25d787855133f1338b57 120000 (symlink)
--- a/alternatives/tnameserv
+++ b/alternatives/tnameserv
@@ -1 +1 @@
-/usr/lib/jvm/java-11-openjdk-amd64/bin/tnameserv
-\ No newline at end of file
+/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/tnameserv
+\ No newline at end of file
diff --git a/alternatives/tnameserv.1.gz b/alternatives/tnameserv.1.gz

index bf733a60e482caff8e7b46e540e5138949df1d99..5c7558bd9952a4ad01c60f9202b8767334b63931 120000 (symlink)
--- a/alternatives/tnameserv.1.gz
+++ b/alternatives/tnameserv.1.gz
@@ -1 +1 @@
-/usr/lib/jvm/java-11-openjdk-amd64/man/man1/tnameserv.1.gz
-\ No newline at end of file
+/usr/lib/jvm/java-8-openjdk-amd64/jre/man/man1/tnameserv.1.gz
+\ No newline at end of file
diff --git a/chromium-browser/customizations/10-flash b/chromium-browser/customizations/10-flash

index 803df0e0d129dcd99f77a0cf829b0e9611809878..5d81f3e296c9508b8b0f793b5bdc4f56e4e3fe1e 100644 (file)
--- a/chromium-browser/customizations/10-flash
+++ b/chromium-browser/customizations/10-flash
@@ -1,6 +1,6 @@
  flashso="/usr/lib/adobe-flashplugin/libpepflashplayer.so"
  if test -f "$flashso"; then
-       CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.171"
+       CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.192"
         echo "Using PPAPI flash."
  else
         echo "PPAPI flash has config file in /etc, but library does not exist and won't be used. Package is uninstalled, not purged."
diff --git a/java-11-openjdk/jvm-amd64.cfg b/java-11-openjdk/jvm-amd64.cfg

index 76516d10e4fe8ec5a817952477b010abe2fc058f..cf721fd84643a9e80c0283490ff3a3fe7e1eb31a 100644 (file)
--- a/java-11-openjdk/jvm-amd64.cfg
+++ b/java-11-openjdk/jvm-amd64.cfg
@@ -1,3 +1,4 @@
  -server KNOWN
  -client IGNORE
  -zero KNOWN
+-dcevm KNOWN
diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security

index f07aacfb8678d8757014990e8d59d0508f943e3c..c6a2c2e9474c6abb24d57a10a9842454ba1fdd0b 100644 (file)
--- a/java-11-openjdk/security/java.security
+++ b/java-11-openjdk/security/java.security
@@ -1063,3 +1063,34 @@ jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep
  # the same name, with the same syntax and possible values.
  #
  #jdk.includeInExceptions=hostInfo
+
+#
+# Policies for distrusting Certificate Authorities (CAs).
+#
+# This is a comma separated value of one or more case-sensitive strings, each
+# of which represents a policy for determining if a CA should be distrusted.
+# The supported values are:
+#
+#   SYMANTEC_TLS : Distrust TLS Server certificates anchored by a Symantec
+#   root CA and issued after April 16, 2019 unless issued by one of the
+#   following subordinate CAs which have a later distrust date:
+#     1. Apple IST CA 2 - G1, SHA-256 fingerprint:
+#        AC2B922ECFD5E01711772FEA8ED372DE9D1E2245FCE3F57A9CDBEC77296A424B
+#        Distrust after December 31, 2019.
+#     2. Apple IST CA 8 - G1, SHA-256 fingerprint:
+#        A4FE7C7F15155F3F0AEF7AAA83CF6E06DEB97CA3F909DF920AC1490882D488ED
+#        Distrust after December 31, 2019.
+#
+# Leading and trailing whitespace surrounding each value are ignored.
+# Unknown values are ignored. If the property is commented out or set to the
+# empty String, no policies are enforced.
+#
+# Note: This property is currently used by the JDK Reference implementation.
+# It is not guaranteed to be supported by other SE implementations. Also, this
+# property does not override other security properties which can restrict
+# certificates such as jdk.tls.disabledAlgorithms or
+# jdk.certpath.disabledAlgorithms; those restrictions are still enforced even
+# if this property is not enabled.
+#
+jdk.security.caDistrustPolicies=SYMANTEC_TLS
+
diff --git a/java-8-openjdk/calendars.properties b/java-8-openjdk/calendars.properties

index 49f68aca4920a424498aa33fdf3da8c09a721a25..6007d7a57df3394d2e699497c47879bc377ada04 100644 (file)
--- a/java-8-openjdk/calendars.properties
+++ b/java-8-openjdk/calendars.properties
@@ -29,12 +29,14 @@
  #   Taisho since 1912-07-30 00:00:00 local time (Gregorian)
  #   Showa  since 1926-12-25 00:00:00 local time (Gregorian)
  #   Heisei since 1989-01-08 00:00:00 local time (Gregorian)
+#   Reiwa  since 2019-05-01 00:00:00 local time (Gregorian)
  calendar.japanese.type: LocalGregorianCalendar
  calendar.japanese.eras: \
         name=Meiji,abbr=M,since=-3218832000000;  \
         name=Taisho,abbr=T,since=-1812153600000; \
         name=Showa,abbr=S,since=-1357603200000;  \
-       name=Heisei,abbr=H,since=600220800000
+       name=Heisei,abbr=H,since=600220800000;   \
+       name=Reiwa,abbr=R,since=1556668800000
  
  #
  # Taiwanese calendar
diff --git a/java-8-openjdk/security/java.security b/java-8-openjdk/security/java.security

index 8ca028835e989b9cd4b19811b36777ec03d06249..718f819aa0efa3c1bf19ada94464ed8271b0731d 100644 (file)
--- a/java-8-openjdk/security/java.security
+++ b/java-8-openjdk/security/java.security
@@ -621,7 +621,7 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, DSA keySize < 1024
  # Example:
  #   jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048
  jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
-    EC keySize < 224, 3DES_EDE_CBC
+    EC keySize < 224, 3DES_EDE_CBC, anon, NULL
  
  # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS)
  # processing in JSSE implementation.
@@ -982,3 +982,33 @@ jdk.xml.dsig.secureValidationPolicy=\
  # and javax.crypto.spec.SecretKeySpec and rejects all the others.
  jceks.key.serialFilter = java.lang.Enum;java.security.KeyRep;\
    java.security.KeyRep$Type;javax.crypto.spec.SecretKeySpec;!*
+
+#
+# Policies for distrusting Certificate Authorities (CAs).
+#
+# This is a comma separated value of one or more case-sensitive strings, each
+# of which represents a policy for determining if a CA should be distrusted.
+# The supported values are:
+#
+#
+#   SYMANTEC_TLS : Distrust TLS Server certificates anchored by a Symantec
+#   root CA and issued after April 16, 2019 unless issued by one of the
+#   following subordinate CAs which have a later distrust date:
+#     1. Apple IST CA 2 - G1, SHA-256 fingerprint:
+#        AC2B922ECFD5E01711772FEA8ED372DE9D1E2245FCE3F57A9CDBEC77296A424B
+#        Distrust after December 31, 2019.
+#     2. Apple IST CA 8 - G1, SHA-256 fingerprint:
+#        A4FE7C7F15155F3F0AEF7AAA83CF6E06DEB97CA3F909DF920AC1490882D488ED
+#        Distrust after December 31, 2019.
+# Leading and trailing whitespace surrounding each value are ignored.
+# Unknown values are ignored. If the property is commented out or set to the
+# empty String, no policies are enforced.
+#
+# Note: This property is currently used by the JDK Reference implementation.
+# It is not guaranteed to be supported by other SE implementations. Also, this
+# property does not override other security properties which can restrict
+# certificates such as jdk.tls.disabledAlgorithms or
+# jdk.certpath.disabledAlgorithms; those restrictions are still enforced even
+# if this property is not enabled.
+#
+jdk.security.caDistrustPolicies=SYMANTEC_TLS
author	mhoellein <mhoellein@freenet.de>
	Fri, 17 May 2019 12:08:50 +0000 (14:08 +0200)
committer	mhoellein <mhoellein@freenet.de>
	Fri, 17 May 2019 12:08:50 +0000 (14:08 +0200)
alternatives/clhsdb	[new symlink]	patch \| blob
alternatives/hsdb	[new symlink]	patch \| blob
alternatives/orbd		patch \| blob \| history
alternatives/orbd.1.gz		patch \| blob \| history
alternatives/servertool		patch \| blob \| history
alternatives/servertool.1.gz		patch \| blob \| history
alternatives/tnameserv		patch \| blob \| history
alternatives/tnameserv.1.gz		patch \| blob \| history
chromium-browser/customizations/10-flash		patch \| blob \| history
java-11-openjdk/jvm-amd64.cfg		patch \| blob \| history
java-11-openjdk/security/java.security		patch \| blob \| history
java-8-openjdk/calendars.properties		patch \| blob \| history
java-8-openjdk/security/java.security		patch \| blob \| history