committing changes in /etc after apt run

Package changes:
-apt 1.6.6 amd64
+apt 1.6.6ubuntu0.1 amd64
-apt-transport-https 1.6.6 all
-apt-utils 1.6.6 amd64
+apt-transport-https 1.6.6ubuntu0.1 all
+apt-utils 1.6.6ubuntu0.1 amd64
-bsdutils 1:2.31.1-0.4ubuntu3.2 amd64
+bsdutils 1:2.31.1-0.4ubuntu3.3 amd64
-code-brand 3.4-1 all
+code-brand 4.0-2 all
-dirmngr 2.2.4-1ubuntu1.1 amd64
+dirmngr 2.2.4-1ubuntu1.2 amd64
-e2fsprogs 1.44.1-1 amd64
+e2fsprogs 1.44.1-1ubuntu1 amd64
-fdisk 2.31.1-0.4ubuntu3.2 amd64
+fdisk 2.31.1-0.4ubuntu3.3 amd64
-gnupg 2.2.4-1ubuntu1.1 amd64
-gnupg-l10n 2.2.4-1ubuntu1.1 all
-gnupg-utils 2.2.4-1ubuntu1.1 amd64
-gpg 2.2.4-1ubuntu1.1 amd64
-gpg-agent 2.2.4-1ubuntu1.1 amd64
-gpg-wks-client 2.2.4-1ubuntu1.1 amd64
-gpg-wks-server 2.2.4-1ubuntu1.1 amd64
-gpgconf 2.2.4-1ubuntu1.1 amd64
-gpgsm 2.2.4-1ubuntu1.1 amd64
-gpgv 2.2.4-1ubuntu1.1 amd64
+gnupg 2.2.4-1ubuntu1.2 amd64
+gnupg-l10n 2.2.4-1ubuntu1.2 all
+gnupg-utils 2.2.4-1ubuntu1.2 amd64
+gpg 2.2.4-1ubuntu1.2 amd64
+gpg-agent 2.2.4-1ubuntu1.2 amd64
+gpg-wks-client 2.2.4-1ubuntu1.2 amd64
+gpg-wks-server 2.2.4-1ubuntu1.2 amd64
+gpgconf 2.2.4-1ubuntu1.2 amd64
+gpgsm 2.2.4-1ubuntu1.2 amd64
+gpgv 2.2.4-1ubuntu1.2 amd64
-initramfs-tools 0.130ubuntu3.5 all
-initramfs-tools-bin 0.130ubuntu3.5 amd64
-initramfs-tools-core 0.130ubuntu3.5 all
+initramfs-tools 0.130ubuntu3.6 all
+initramfs-tools-bin 0.130ubuntu3.6 amd64
+initramfs-tools-core 0.130ubuntu3.6 all
-irqbalance 1.3.0-0.1 amd64
+irqbalance 1.3.0-0.1ubuntu0.18.04.1 amd64
-krb5-locales 1.16-2build1 all
+krb5-locales 1.16-2ubuntu0.1 all
-libapt-inst2.0 1.6.6 amd64
+libapt-inst2.0 1.6.6ubuntu0.1 amd64
-libapt-pkg5.0 1.6.6 amd64
+libapt-pkg5.0 1.6.6ubuntu0.1 amd64
-libblkid1 2.31.1-0.4ubuntu3.2 amd64
+libblkid1 2.31.1-0.4ubuntu3.3 amd64
-libcharon-standard-plugins 5.6.2-1ubuntu2.3 amd64
+libcharon-standard-plugins 5.6.2-1ubuntu2.4 amd64
-libcom-err2 1.44.1-1 amd64
+libcom-err2 1.44.1-1ubuntu1 amd64
-libcups2 2.2.7-1ubuntu2.1 amd64
+libcups2 2.2.7-1ubuntu2.3 amd64
-libext2fs2 1.44.1-1 amd64
+libext2fs2 1.44.1-1ubuntu1 amd64
-libfdisk1 2.31.1-0.4ubuntu3.2 amd64
+libfdisk1 2.31.1-0.4ubuntu3.3 amd64
-libgssapi-krb5-2 1.16-2build1 amd64
+libgssapi-krb5-2 1.16-2ubuntu0.1 amd64
-libk5crypto3 1.16-2build1 amd64
+libk5crypto3 1.16-2ubuntu0.1 amd64
-libkrb5-3 1.16-2build1 amd64
-libkrb5support0 1.16-2build1 amd64
+libkrb5-3 1.16-2ubuntu0.1 amd64
+libkrb5support0 1.16-2ubuntu0.1 amd64
-libmount1 2.31.1-0.4ubuntu3.2 amd64
+libmount1 2.31.1-0.4ubuntu3.3 amd64
-libmysqlclient20 5.7.24-0ubuntu0.18.04.1 amd64
+libmysqlclient20 5.7.25-0ubuntu0.18.04.2 amd64
-libnss-systemd 237-3ubuntu10.9 amd64
+libnss-systemd 237-3ubuntu10.11 amd64
-libpam-systemd 237-3ubuntu10.9 amd64
+libpam-systemd 237-3ubuntu10.11 amd64
-libpolkit-gobject-1-0 0.105-20ubuntu0.18.04.1 amd64
+libpolkit-gobject-1-0 0.105-20ubuntu0.18.04.4 amd64
-libsmartcols1 2.31.1-0.4ubuntu3.2 amd64
+libsmartcols1 2.31.1-0.4ubuntu3.3 amd64
-libss2 1.44.1-1 amd64
+libss2 1.44.1-1ubuntu1 amd64
-libstrongswan 5.6.2-1ubuntu2.3 amd64
-libstrongswan-standard-plugins 5.6.2-1ubuntu2.3 amd64
+libstrongswan 5.6.2-1ubuntu2.4 amd64
+libstrongswan-standard-plugins 5.6.2-1ubuntu2.4 amd64
-libsystemd0 237-3ubuntu10.9 amd64
+libsystemd0 237-3ubuntu10.11 amd64
-libtiff5 4.0.9-5 amd64
+libtiff5 4.0.9-5ubuntu0.1 amd64
-libudev1 237-3ubuntu10.9 amd64
+libudev1 237-3ubuntu10.11 amd64
-libuuid1 2.31.1-0.4ubuntu3.2 amd64
+libuuid1 2.31.1-0.4ubuntu3.3 amd64
-linux-firmware 1.173.2 all
+linux-firmware 1.173.3 all
-linux-libc-dev 4.15.0-42.45 amd64
+linux-libc-dev 4.15.0-43.46 amd64
-mount 2.31.1-0.4ubuntu3.2 amd64
+mount 2.31.1-0.4ubuntu3.3 amd64
-mysql-client-5.7 5.7.24-0ubuntu0.18.04.1 amd64
-mysql-client-core-5.7 5.7.24-0ubuntu0.18.04.1 amd64
+mysql-client-5.7 5.7.25-0ubuntu0.18.04.2 amd64
+mysql-client-core-5.7 5.7.25-0ubuntu0.18.04.2 amd64
-mysql-server 5.7.24-0ubuntu0.18.04.1 all
-mysql-server-5.7 5.7.24-0ubuntu0.18.04.1 amd64
-mysql-server-core-5.7 5.7.24-0ubuntu0.18.04.1 amd64
+mysql-server 5.7.25-0ubuntu0.18.04.2 all
+mysql-server-5.7 5.7.25-0ubuntu0.18.04.2 amd64
+mysql-server-core-5.7 5.7.25-0ubuntu0.18.04.2 amd64
-nplan 0.40.1~18.04.3 all
+nplan 0.40.1~18.04.4 all
-php-pear 1:1.10.5+submodules+notgz-1ubuntu1 all
+php-pear 1:1.10.5+submodules+notgz-1ubuntu1.18.04.1 all
-postfix 3.3.0-1ubuntu0.1 amd64
-postfix-mysql 3.3.0-1ubuntu0.1 amd64
+postfix 3.3.0-1ubuntu0.2 amd64
+postfix-mysql 3.3.0-1ubuntu0.2 amd64
-psmisc 23.1-1 amd64
+psmisc 23.1-1ubuntu0.1 amd64
-python3-update-manager 1:18.04.11.7 all
+python3-update-manager 1:18.04.11.8 all
-strongswan 5.6.2-1ubuntu2.3 all
-strongswan-charon 5.6.2-1ubuntu2.3 amd64
-strongswan-libcharon 5.6.2-1ubuntu2.3 amd64
-strongswan-starter 5.6.2-1ubuntu2.3 amd64
+strongswan 5.6.2-1ubuntu2.4 all
+strongswan-charon 5.6.2-1ubuntu2.4 amd64
+strongswan-libcharon 5.6.2-1ubuntu2.4 amd64
+strongswan-starter 5.6.2-1ubuntu2.4 amd64
-systemd 237-3ubuntu10.9 amd64
-systemd-sysv 237-3ubuntu10.9 amd64
+systemd 237-3ubuntu10.11 amd64
+systemd-sysv 237-3ubuntu10.11 amd64
-tzdata 2018g-0ubuntu0.18.04 all
+tzdata 2018i-0ubuntu0.18.04 all
-udev 237-3ubuntu10.9 amd64
+udev 237-3ubuntu10.11 amd64
-update-manager-core 1:18.04.11.7 all
+update-manager-core 1:18.04.11.8 all
-util-linux 2.31.1-0.4ubuntu3.2 amd64
-uuid-runtime 2.31.1-0.4ubuntu3.2 amd64
+util-linux 2.31.1-0.4ubuntu3.3 amd64
+uuid-runtime 2.31.1-0.4ubuntu3.3 amd64

diff --git a/.etckeeper b/.etckeeper
index 3da1e4cf80ff98a1ef91b7ffb9317d53a06b11a4..9279283775e1dbc79cc7e5b62ecc8046efe39f67 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -45,6 +45,7 @@ mkdir -p './opt'
 mkdir -p './perl/CPAN'
 mkdir -p './phpmyadmin/conf.d'
 mkdir -p './postfix/dynamicmaps.cf.d'
+mkdir -p './postfix/sasl'
 mkdir -p './security/limits.d'
 mkdir -p './security/namespace.d'
 mkdir -p './spamassassin/sa-update-keys/private-keys-v1.d'
@@ -1505,6 +1506,7 @@ maybe chmod 0755 'postfix/postfix-files.d'
 maybe chmod 0644 'postfix/postfix-files.d/mysql.files'
 maybe chmod 0755 'postfix/postfix-script'
 maybe chmod 0644 'postfix/postscreen_access'
+maybe chmod 0755 'postfix/sasl'
 maybe chmod 0660 'postfix/sql'
 maybe chmod 0640 'postfix/sql/accounts.cf'
 maybe chmod 0640 'postfix/sql/aliases.cf'

diff --git a/apparmor.d/usr.lib.ipsec.charon b/apparmor.d/usr.lib.ipsec.charon
index 9e24c744d2ea8f07f2f48bb9b751cef36e424f00..c5dba27d3df2f606d1257d35dd843f7987c13e67 100644 (file)
--- a/apparmor.d/usr.lib.ipsec.charon
+++ b/apparmor.d/usr.lib.ipsec.charon
@@ -71,6 +71,10 @@
 
   /var/lib/strongswan/*     r,
 
+  # for using the ha plugin (LP: #1773956)
+  @{PROC}/@{pid}/net/ipt_CLUSTERIP/ r,
+  @{PROC}/@{pid}/net/ipt_CLUSTERIP/* rw,
+
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.lib.ipsec.charon>
 }

diff --git a/apparmor.d/usr.lib.ipsec.stroke b/apparmor.d/usr.lib.ipsec.stroke
index 9d20ee7c9d2ea2c1ad622d5568cb3b407be26580..af9cdccd821d11cb56dee27b67f4da195b7ad983 100644 (file)
--- a/apparmor.d/usr.lib.ipsec.stroke
+++ b/apparmor.d/usr.lib.ipsec.stroke
@@ -17,6 +17,8 @@
 
   capability dac_override,
 
+  /usr/lib/ipsec/stroke         rmix,
+
   /etc/strongswan.conf          r,
   /etc/strongswan.d/            r,
   /etc/strongswan.d/**          r,

diff --git a/postfix/makedefs.out b/postfix/makedefs.out
index 8c19fb83cdc6a77a5a5cac3eb775511d859b8536..5ab05d61b4c8796437281adcd13425c8380e18d8 100644 (file)
--- a/postfix/makedefs.out
+++ b/postfix/makedefs.out
@@ -2,7 +2,7 @@
 #----------------------------------------------------------------
 # Start of summary of user-configurable 'make makefiles' options.
 # CCARGS=-DDEBIAN -DHAS_PCRE -DHAS_LDAP -DUSE_LDAP_SASL -DHAS_SQLITE -DMYORIGIN_FROM_FILE  -DHAS_CDB -DHAS_LMDB -DHAS_MYSQL -I/usr/include/mysql -DHAS_PGSQL -I/usr/include/postgresql -DHAS_SQLITE -I/usr/include -DHAS_SSL -I/usr/include/openssl -DUSE_SASL_AUTH -I/usr/include/sasl -DUSE_CYRUS_SASL -DUSE_TLS
-# AUXLIBS=-lssl -lcrypto -lsasl2 -lpthread -L/build/postfix-vXKYHw/postfix-3.3.0/debian
+# AUXLIBS=-lssl -lcrypto -lsasl2 -lpthread -L/build/postfix-jOnGTv/postfix-3.3.0/debian
 # AUXLIBS_CDB=-lcdb -L../../lib -L. -lpostfix-util
 # AUXLIBS_LMDB=-llmdb -L../../lib -L. -lpostfix-util
 # AUXLIBS_MYSQL=-lmysqlclient -L../../lib -L. -lpostfix-util -lpostfix-global
@@ -24,7 +24,7 @@ SYSTYPE       = LINUX4
 _AR    = ar
 ARFL   = rv
 _RANLIB        = ranlib
-SYSLIBS        = -pie -z relro -z now -lssl -lcrypto -lsasl2 -lpthread -L/build/postfix-vXKYHw/postfix-3.3.0/debian -ldb -lnsl -lresolv -ldl -L/usr/lib/x86_64-linux-gnu -licui18n -licuuc -licudata 
+SYSLIBS        = -pie -z relro -z now -lssl -lcrypto -lsasl2 -lpthread -L/build/postfix-jOnGTv/postfix-3.3.0/debian -ldb -lnsl -lresolv -ldl -L/usr/lib/x86_64-linux-gnu -licui18n -licuuc -licudata 
 AUXLIBS_CDB = -lcdb -L../../lib -L. -lpostfix-util
 AUXLIBS_LDAP = -lldap -llber -L../../lib -L. -lpostfix-util -lpostfix-global
 AUXLIBS_LMDB = -llmdb -L../../lib -L. -lpostfix-util
@@ -50,9 +50,9 @@ LIB_PREFIX = postfix-
 LIB_SUFFIX = .so
 SHLIB_CFLAGS = -fPIC
 SHLIB_DIR = /usr/lib/postfix
-SHLIB_ENV = LD_LIBRARY_PATH=/build/postfix-vXKYHw/postfix-3.3.0/lib
+SHLIB_ENV = LD_LIBRARY_PATH=/build/postfix-jOnGTv/postfix-3.3.0/lib
 SHLIB_LD = gcc -shared -Wl,-soname,${LIB}
-SHLIB_SYSLIBS = -lssl -lcrypto -lsasl2 -lpthread -L/build/postfix-vXKYHw/postfix-3.3.0/debian -ldb -lnsl -lresolv -ldl -L/usr/lib/x86_64-linux-gnu -licui18n -licuuc -licudata
+SHLIB_SYSLIBS = -lssl -lcrypto -lsasl2 -lpthread -L/build/postfix-jOnGTv/postfix-3.3.0/debian -ldb -lnsl -lresolv -ldl -L/usr/lib/x86_64-linux-gnu -licui18n -licuuc -licudata
 SHLIB_RPATH = -Wl,--enable-new-dtags -Wl,-rpath,${SHLIB_DIR}
 # Switch between dynamicmaps.cf plugins and hard-linked databases.
 NON_PLUGIN_MAP_OBJ =