committing changes in /etc after apt run

author mhoellein <mhoellein@freenet.de>

Thu, 28 May 2020 05:39:00 +0000 (07:39 +0200)

committer mhoellein <mhoellein@freenet.de>

Thu, 28 May 2020 05:39:00 +0000 (07:39 +0200)
author mhoellein <mhoellein@freenet.de>
Thu, 28 May 2020 05:39:00 +0000 (07:39 +0200)
committer mhoellein <mhoellein@freenet.de>
Thu, 28 May 2020 05:39:00 +0000 (07:39 +0200)
diff --git a/.etckeeper b/.etckeeper

index c40162240c02db90fb2c374b07d2f277a81d7907..30510ca7e4a999c9a493b2747ddb0332778f06e4 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -410,6 +410,7 @@ maybe chmod 0644 'apache2/mods-available/slotmem_plain.load'
  maybe chmod 0644 'apache2/mods-available/slotmem_shm.load'
  maybe chmod 0644 'apache2/mods-available/socache_dbm.load'
  maybe chmod 0644 'apache2/mods-available/socache_memcache.load'
+maybe chmod 0644 'apache2/mods-available/socache_redis.load'
  maybe chmod 0644 'apache2/mods-available/socache_shmcb.load'
  maybe chmod 0644 'apache2/mods-available/speling.load'
  maybe chmod 0644 'apache2/mods-available/ssl.conf'
@@ -5310,6 +5311,7 @@ maybe chmod 0644 'letsencrypt/csr/1935_csr-certbot.pem'
  maybe chmod 0644 'letsencrypt/csr/1936_csr-certbot.pem'
  maybe chmod 0644 'letsencrypt/csr/1937_csr-certbot.pem'
  maybe chmod 0644 'letsencrypt/csr/1938_csr-certbot.pem'
+maybe chmod 0644 'letsencrypt/csr/1939_csr-certbot.pem'
  maybe chmod 0700 'letsencrypt/keys'
  maybe chmod 0600 'letsencrypt/keys/0000_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/0001_key-certbot.pem'
@@ -7250,6 +7252,7 @@ maybe chmod 0600 'letsencrypt/keys/1935_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/1936_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/1937_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/1938_key-certbot.pem'
+maybe chmod 0600 'letsencrypt/keys/1939_key-certbot.pem'
  maybe chmod 0755 'letsencrypt/live'
  maybe chmod 0755 'letsencrypt/live/ccu.hoellein.online'
  maybe chmod 0644 'letsencrypt/live/ccu.hoellein.online/README'
diff --git a/apache2/mods-available/dav.load b/apache2/mods-available/dav.load

index 6f6d1bb07bf71be1eafef5269a3196ef224bb8d7..a5867fff37a28f717b8e04c9caf245574f055bb1 100644 (file)
--- a/apache2/mods-available/dav.load
+++ b/apache2/mods-available/dav.load
@@ -1 +1,3 @@
-LoadModule dav_module /usr/lib/apache2/modules/mod_dav.so
+<IfModule !mod_dav.c>
+       LoadModule dav_module /usr/lib/apache2/modules/mod_dav.so
+</IfModule>
diff --git a/apache2/mods-available/socache_redis.load b/apache2/mods-available/socache_redis.load

new file mode 100644 (file)

index 0000000..b1a8de2
--- /dev/null
+++ b/apache2/mods-available/socache_redis.load
@@ -0,0 +1 @@
+LoadModule socache_redis_module /usr/lib/apache2/modules/mod_socache_redis.so
diff --git a/apparmor.d/usr.bin.firefox b/apparmor.d/usr.bin.firefox

index 9768fa47085ceac5f98e8ff7196f04dc4c67c747..7cc1f5f12bafe5fcad514aa2b5dddc603028af14 100644 (file)
--- a/apparmor.d/usr.bin.firefox
+++ b/apparmor.d/usr.bin.firefox
@@ -11,7 +11,7 @@
  #  /usr/lib/firefox/firefox
  # but not:
  #  /usr/lib/firefox/firefox.sh
-/usr/lib/firefox/firefox{,*[^s][^h]} {
+profile firefox /usr/lib/firefox/firefox{,*[^s][^h]} {
    #include <abstractions/audio>
    #include <abstractions/cups-client>
    #include <abstractions/dbus-strict>
diff --git a/chromium-browser/customizations/10-flash b/chromium-browser/customizations/10-flash

index 9c4e7ffa19aa88aeef04423b9d32f2f4836e348b..21e573ea71bfbd75437c63b8dce88d0268178fed 100644 (file)
--- a/chromium-browser/customizations/10-flash
+++ b/chromium-browser/customizations/10-flash
@@ -1,6 +1,6 @@
  flashso="/usr/lib/adobe-flashplugin/libpepflashplayer.so"
  if test -f "$flashso"; then
-       CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.344"
+       CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.371"
         echo "Using PPAPI flash."
  else
         echo "PPAPI flash has config file in /etc, but library does not exist and won't be used. Package is uninstalled, not purged."
diff --git a/java-11-openjdk/security/default.policy b/java-11-openjdk/security/default.policy

index ca795d0cad24d237724b622a3c45951d45628a57..2c11f4665cfd5e521f35396230a2481a4d335fd6 100644 (file)
--- a/java-11-openjdk/security/default.policy
+++ b/java-11-openjdk/security/default.policy
@@ -200,6 +200,7 @@ grant codeBase "jrt:/jdk.security.jgss" {
  grant codeBase "jrt:/jdk.zipfs" {
      permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
      permission java.lang.RuntimePermission "fileSystemProvider";
+    permission java.lang.RuntimePermission "accessUserInformation";
      permission java.util.PropertyPermission "os.name", "read";
  };
  
diff --git a/java-11-openjdk/security/public_suffix_list.dat b/java-11-openjdk/security/public_suffix_list.dat

index 9fbf809350c6ed28587ca4095b4b88c71a9daa3e..e8ef7a72d5f757d82f9ccb927ad179cd2b8927bc 100644 (file)

Binary files a/java-11-openjdk/security/public_suffix_list.dat and b/java-11-openjdk/security/public_suffix_list.dat differ
diff --git a/java-8-openjdk/security/java.security b/java-8-openjdk/security/java.security

index b78f07d9d5cd871d06c1c0a43af9e13dcdda6f82..bf77d5ffcada5d37706850cef1e8f147d122929a 100644 (file)
--- a/java-8-openjdk/security/java.security
+++ b/java-8-openjdk/security/java.security
@@ -1009,6 +1009,34 @@ jdk.xml.dsig.secureValidationPolicy=\
  jceks.key.serialFilter = java.lang.Enum;java.security.KeyRep;\
    java.security.KeyRep$Type;javax.crypto.spec.SecretKeySpec;!*
  
+# The iteration count used for password-based encryption (PBE) in JCEKS
+# keystores. Values in the range 10000 to 5000000 are considered valid.
+# If the value is out of this range, or is not a number, or is unspecified;
+# a default of 200000 is used.
+#
+# If the system property jdk.jceks.iterationCount is also specified, it
+# supersedes the security property value defined here.
+#
+#jdk.jceks.iterationCount = 200000
+
+#
+# Disabled mechanisms for the Simple Authentication and Security Layer (SASL)
+#
+# Disabled mechanisms will not be negotiated by both SASL clients and servers.
+# These mechanisms will be ignored if they are specified in the "mechanisms"
+# argument of "Sasl.createSaslClient" or the "mechanism" argument of
+# "Sasl.createSaslServer".
+#
+# The value of this property is a comma-separated list of SASL mechanisms.
+# The mechanisms are case-sensitive. Whitespaces around the commas are ignored.
+#
+# Note: This property is currently used by the JDK Reference implementation.
+# It is not guaranteed to be examined and used by other implementations.
+#
+# Example:
+#   jdk.sasl.disabledMechanisms=PLAIN, CRAM-MD5, DIGEST-MD5
+jdk.sasl.disabledMechanisms=
+
  #
  # Policies for distrusting Certificate Authorities (CAs).
  #
diff --git a/letsencrypt/csr/1939_csr-certbot.pem b/letsencrypt/csr/1939_csr-certbot.pem

new file mode 100644 (file)

index 0000000..1c025b6
--- /dev/null
+++ b/letsencrypt/csr/1939_csr-certbot.pem
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIICdTCCAV0CAQIwADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANcE
+6VjztAHYixN12my21n3hCiSzSCyi2zfPDqWmx/isvg17pHhI90DvLXx+uVtnjEWX
+vs+uIcNbdErRl9CtgfjIdIXqF6FbWZnYV3Vfi8AkttSjiedcZSadnTyq7zSznDlF
+gdwbDaDpqpz8dAsfva/00mEPWRcg6ZRPfFxN8OZBCx28WQDNClc5eUj036I9FcVZ
+ifCq7wGeDOalrXgFTXq4HWloeqOw2ot3whgbrpcjRzhokGP06zCvllF/3vKapVGU
+9J67fDHRe5pJLES5uYVmYBPht1djuG5YvCFUUckdwbDZBLQUsMjabbBV91f0Vfzo
+9MQELB3hG5XKS+wNB38CAwEAAaAwMC4GCSqGSIb3DQEJDjEhMB8wHQYDVR0RBBYw
+FIISdHYuaG9lbGxlaW4ub25saW5lMA0GCSqGSIb3DQEBCwUAA4IBAQBR2RzS1qIl
+uhr/DexTUiuoJC2RRyrUaXu5BPWn2xkGahO//ycxOHo1fK1btFa7HSNfgVB3Nmkd
+gfBCUXjC253L1fnR8BaVBNmLtzzFMdN75sLoAtdv3lzAZGq+0RAVhGy8L+6UwC6Z
+VmVtRN7cR43vkGKkFj7t2CcASl+G1o4PAqcn1tPdtZua9KbzSesUZ9gxGOD6JxVA
+mwTarvhZw+pZbj6wPCxe4f++97kBIMep18RCOorlRUBippLJBkMmvhHtPn+Y888b
+GI4i75uS0J2w/eG3ewvi0CGGSPBGOUG/dx2SA0XAI7ipdQPhsEJUOZ7h5aRAFkCX
+nLbv3bZdeGqC
+-----END CERTIFICATE REQUEST-----
diff --git a/letsencrypt/keys/1939_key-certbot.pem b/letsencrypt/keys/1939_key-certbot.pem

new file mode 100644 (file)

index 0000000..16e8da7
--- /dev/null
+++ b/letsencrypt/keys/1939_key-certbot.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/modprobe.d/blacklist-framebuffer.conf b/modprobe.d/blacklist-framebuffer.conf

index 59599adb20814524e884ad000eec3c1bc69caed4..9fd5eca9d6575f3f522ae3f4973e49983d59202b 100644 (file)
--- a/modprobe.d/blacklist-framebuffer.conf
+++ b/modprobe.d/blacklist-framebuffer.conf
@@ -3,7 +3,6 @@
  # never load them automatically.
  blacklist aty128fb
  blacklist atyfb
-blacklist bochs-drm
  blacklist radeonfb
  blacklist cirrusfb
  blacklist cyber2000fb
author	mhoellein <mhoellein@freenet.de>
	Thu, 28 May 2020 05:39:00 +0000 (07:39 +0200)
committer	mhoellein <mhoellein@freenet.de>
	Thu, 28 May 2020 05:39:00 +0000 (07:39 +0200)
.etckeeper		patch \| blob \| history
apache2/mods-available/dav.load		patch \| blob \| history
apache2/mods-available/socache_redis.load	[new file with mode: 0644]	patch \| blob
apparmor.d/usr.bin.firefox		patch \| blob \| history
chromium-browser/customizations/10-flash		patch \| blob \| history
java-11-openjdk/security/default.policy		patch \| blob \| history
java-11-openjdk/security/public_suffix_list.dat		patch \| blob \| history
java-8-openjdk/security/java.security		patch \| blob \| history
letsencrypt/csr/1939_csr-certbot.pem	[new file with mode: 0644]	patch \| blob
letsencrypt/keys/1939_key-certbot.pem	[new file with mode: 0644]	patch \| blob
modprobe.d/blacklist-framebuffer.conf		patch \| blob \| history