committing changes in /etc made by "apt-get upgrade"

author root <root@localhost>

Tue, 4 Aug 2020 06:56:03 +0000 (08:56 +0200)

committer root <root@localhost>

Tue, 4 Aug 2020 06:56:03 +0000 (08:56 +0200)
author root <root@localhost>
Tue, 4 Aug 2020 06:56:03 +0000 (08:56 +0200)
committer root <root@localhost>
Tue, 4 Aug 2020 06:56:03 +0000 (08:56 +0200)
diff --git a/issue b/issue

index bb89dcc30021c2dd79caa889f78d4e1ad5645197..0178cca5649e47eb40581f878d7f1329fe07b0d0 100644 (file)
--- a/issue
+++ b/issue
@@ -1,2 +1,2 @@
-Ubuntu 20.04 LTS \n \l
+Ubuntu 20.04.1 LTS \n \l
  
diff --git a/issue.net b/issue.net

index 6f9b4d2c57a9124756ff96bbc8fd0732a060a3ed..2fedbef074eafb46c1dc55679e94f2e0cdc06c07 100644 (file)
--- a/issue.net
+++ b/issue.net
@@ -1 +1 @@
-Ubuntu 20.04 LTS
+Ubuntu 20.04.1 LTS
diff --git a/java-11-openjdk/security/default.policy b/java-11-openjdk/security/default.policy

index 2c11f4665cfd5e521f35396230a2481a4d335fd6..694e403dd5c9b75eb9d7eb851c63c9f5f74e81ec 100644 (file)
--- a/java-11-openjdk/security/default.policy
+++ b/java-11-openjdk/security/default.policy
@@ -162,10 +162,14 @@ grant codeBase "jrt:/jdk.internal.vm.compiler" {
  };
  
  grant codeBase "jrt:/jdk.internal.vm.compiler.management" {
-    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.hotspot";
+    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.vm.compiler.collections";
      permission java.lang.RuntimePermission "accessClassInPackage.jdk.vm.ci.runtime";
-    permission java.lang.RuntimePermission "accessClassInPackage.sun.management.spi";
-    permission java.lang.RuntimePermission "sun.management.spi.PlatformMBeanProvider.subclass";
+    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.core.common";
+    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.debug";
+    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.hotspot";
+    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.options";
+    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.phases.common.jmx";
+    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.serviceprovider";
  };
  
  grant codeBase "jrt:/jdk.jsobject" {
diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security

index e922ef3e5be9d76d5e854387fb6e0d6c73dc7c94..788ee8431e5db698731ba69e93b94beef43b7bd2 100644 (file)
--- a/java-11-openjdk/security/java.security
+++ b/java-11-openjdk/security/java.security
@@ -1195,3 +1195,15 @@ jdk.io.permissionsUseCanonicalPath=false
  #
  #jdk.security.krb5.default.initiate.credential=always-impersonate
  
+#
+# Trust Anchor Certificates - CA Basic Constraint check
+#
+# X.509 v3 certificates used as Trust Anchors (to validate signed code or TLS
+# connections) must have the cA Basic Constraint field set to 'true'. Also, if
+# they include a Key Usage extension, the keyCertSign bit must be set. These
+# checks, enabled by default, can be disabled for backward-compatibility
+# purposes with the jdk.security.allowNonCaAnchor System and Security
+# properties. In the case that both properties are simultaneously set, the
+# System value prevails. The default value of the property is "false".
+#
+#jdk.security.allowNonCaAnchor=true
diff --git a/lsb-release b/lsb-release

index 5de4df74e81a7acc7eeb9305ab80c146a5c8722a..7551cc41c8c919a0fe7e8ab29decef130db05e59 100644 (file)
--- a/lsb-release
+++ b/lsb-release
@@ -1,4 +1,4 @@
  DISTRIB_ID=Ubuntu
  DISTRIB_RELEASE=20.04
  DISTRIB_CODENAME=focal
-DISTRIB_DESCRIPTION="Ubuntu 20.04 LTS"
+DISTRIB_DESCRIPTION="Ubuntu 20.04.1 LTS"
diff --git a/update-motd.d/91-release-upgrade b/update-motd.d/91-release-upgrade

index f00f48940c8ddf562cc1036f36c53ecb0747959d..dc2ae1029a8fc49e06e8084ec111e31287a7ac08 100755 (executable)
--- a/update-motd.d/91-release-upgrade
+++ b/update-motd.d/91-release-upgrade
@@ -4,6 +4,12 @@
  if [ "$(lsb_release -sd | cut -d' ' -f4)" = "(development" ]; then
      exit 0
  fi
+
+# if it is non-root user, skip
+if [ $(id -u) -ne 0 ]; then
+    exit 0
+fi
+
  if [ -x /usr/lib/ubuntu-release-upgrader/release-upgrade-motd ]; then
      exec /usr/lib/ubuntu-release-upgrader/release-upgrade-motd
  fi
author	root <root@localhost>
	Tue, 4 Aug 2020 06:56:03 +0000 (08:56 +0200)
committer	root <root@localhost>
	Tue, 4 Aug 2020 06:56:03 +0000 (08:56 +0200)
issue		patch \| blob \| history
issue.net		patch \| blob \| history
java-11-openjdk/security/default.policy		patch \| blob \| history
java-11-openjdk/security/java.security		patch \| blob \| history
lsb-release		patch \| blob \| history
update-motd.d/91-release-upgrade		patch \| blob \| history