From: root Date: Thu, 25 Apr 2019 06:46:02 +0000 (+0200) Subject: committing changes in /etc after apt run X-Git-Url: https://git.hoellein.online/?a=commitdiff_plain;h=62fefd76ec2de51554fef4362a0ef6e0294ca599;p=zenbook committing changes in /etc after apt run Package changes: -adobe-flash-properties-gtk 1:20190312.1-0ubuntu0.18.04.1 amd64 -adobe-flashplugin 1:20190312.1-0ubuntu0.18.04.1 amd64 +adobe-flash-properties-gtk 1:20190409.1-0ubuntu0.18.04.1 amd64 +adobe-flashplugin 1:20190409.1-0ubuntu0.18.04.1 amd64 -android-tools-adb 1:7.0.0+r33-2 all -ant 1.10.3-1ubuntu0.1 all -ant-optional 1.10.3-1ubuntu0.1 all +android-tools-adb 1:8.1.0+r23-5~18.04 all +ant 1.10.5-3~18.04 all +ant-optional 1.10.5-3~18.04 all -chromium-codecs-ffmpeg-extra 73.0.3683.75-0ubuntu0.18.04.1 amd64 +chromium-codecs-ffmpeg-extra 73.0.3683.86-0ubuntu0.18.04.1 amd64 -console-setup 1.178ubuntu2.7 all -console-setup-linux 1.178ubuntu2.7 all +console-setup 1.178ubuntu2.8 all +console-setup-linux 1.178ubuntu2.8 all -default-jdk 2:1.10-63ubuntu1~02 amd64 -default-jdk-headless 2:1.10-63ubuntu1~02 amd64 -default-jre 2:1.10-63ubuntu1~02 amd64 -default-jre-headless 2:1.10-63ubuntu1~02 amd64 +default-jdk 2:1.11-68ubuntu1~18.04.1 amd64 +default-jdk-headless 2:1.11-68ubuntu1~18.04.1 amd64 +default-jre 2:1.11-68ubuntu1~18.04.1 amd64 +default-jre-headless 2:1.11-68ubuntu1~18.04.1 amd64 -distro-info-data 0.37ubuntu0.3 all +distro-info-data 0.37ubuntu0.4 all -firefox 66.0.2+build1-0ubuntu0.18.04.1 amd64 -firefox-locale-de 66.0.2+build1-0ubuntu0.18.04.1 amd64 +firefox 66.0.3+build1-0ubuntu0.18.04.1 amd64 +firefox-locale-de 66.0.3+build1-0ubuntu0.18.04.1 amd64 -fonts-liberation2 2.00.1-7~18.04.1 all +fonts-liberation2 2.00.1-7~18.04.2 all -fonts-opensymbol 2:102.10+LibO6.0.7-0ubuntu0.18.04.2 all +fonts-opensymbol 2:102.10+LibO6.0.7-0ubuntu0.18.04.5 all -fwupdate 10-3 amd64 -fwupdate-signed 1.18+10-3 amd64 +fwupdate 12-3bionic2 amd64 +fwupdate-signed 1.19bionic2+12-3bionic2 amd64 -geth 1.8.23+build17682+bionic amd64 -gettext 0.19.8.1-6ubuntu0.1 amd64 -gettext-base 0.19.8.1-6ubuntu0.1 amd64 +geth 1.8.27+build18537+bionic amd64 +gettext 0.19.8.1-6ubuntu0.3 amd64 +gettext-base 0.19.8.1-6ubuntu0.3 amd64 -gir1.2-javascriptcoregtk-4.0 2.22.6-0ubuntu0.18.04.1 amd64 +gir1.2-javascriptcoregtk-4.0 2.24.1-0ubuntu0.18.04.1 amd64 -gir1.2-lokdocview-0.1 1:6.0.7-0ubuntu0.18.04.2 amd64 +gir1.2-lokdocview-0.1 1:6.0.7-0ubuntu0.18.04.5 amd64 -gir1.2-polkit-1.0 0.105-20ubuntu0.18.04.4 amd64 +gir1.2-polkit-1.0 0.105-20ubuntu0.18.04.5 amd64 -gir1.2-snapd-1 1.43-0ubuntu0.18.04.1 amd64 +gir1.2-snapd-1 1.47-0ubuntu0.18.04.0 amd64 -gir1.2-upowerglib-1.0 0.99.7-2 amd64 +gir1.2-upowerglib-1.0 0.99.7-2ubuntu0.18.04.1 amd64 -gir1.2-webkit2-4.0 2.22.6-0ubuntu0.18.04.1 amd64 +gir1.2-webkit2-4.0 2.24.1-0ubuntu0.18.04.1 amd64 -gnome-control-center 1:3.28.2-0ubuntu0.18.04.2 amd64 -gnome-control-center-data 1:3.28.2-0ubuntu0.18.04.2 all -gnome-control-center-faces 1:3.28.2-0ubuntu0.18.04.2 all +gnome-control-center 1:3.28.2-0ubuntu0.18.04.3 amd64 +gnome-control-center-data 1:3.28.2-0ubuntu0.18.04.3 all +gnome-control-center-faces 1:3.28.2-0ubuntu0.18.04.3 all -gnome-software-common 3.28.1-0ubuntu4.18.04.8 all +gnome-software-common 3.28.1-0ubuntu4.18.04.9 all -groovy 2.4.15-1ubuntu1 all +groovy 2.4.16-1ubuntu1~18.04.1 all -grub-common 2.02-2ubuntu8.12 amd64 -grub-efi-amd64-bin 2.02-2ubuntu8.12 amd64 -grub2-common 2.02-2ubuntu8.12 amd64 +grub-common 2.02-2ubuntu8.13 amd64 +grub-efi-amd64-bin 2.02-2ubuntu8.13 amd64 +grub2-common 2.02-2ubuntu8.13 amd64 -im-config 0.34-1ubuntu1.2 all +im-config 0.34-1ubuntu1.3 all -java-common 0.63ubuntu1~02 all +java-common 0.68ubuntu1~18.04.1 all -junit4 4.12-6 all +junit4 4.12-8~18.04 all -keyboard-configuration 1.178ubuntu2.7 all +keyboard-configuration 1.178ubuntu2.8 all -language-selector-common 0.188.1 all -language-selector-gnome 0.188.1 all +language-selector-common 0.188.2 all +language-selector-gnome 0.188.2 all -libaio1 0.3.110-5 amd64 +libaio1 0.3.110-5ubuntu0.1 amd64 -libasm-java 6.0-1 all +libasm-java 7.0-1~18.04 all -libasprintf-dev 0.19.8.1-6ubuntu0.1 amd64 -libasprintf0v5 0.19.8.1-6ubuntu0.1 amd64 +libasprintf-dev 0.19.8.1-6ubuntu0.3 amd64 +libasprintf0v5 0.19.8.1-6ubuntu0.3 amd64 -libbatik-java 1.9-3 all +libbatik-java 1.10-2~18.04 all -libcommons-lang3-java 3.5-2ubuntu1 all +libcommons-lang3-java 3.8-1~18.04.2 all -libequinox-osgi-java 3.9.1-1 all +libequinox-osgi-java 3.9.1-4~18.04 all -libfwup1 10-3 amd64 +libfwup1 12-3bionic2 amd64 -libgettextpo-dev 0.19.8.1-6ubuntu0.1 amd64 -libgettextpo0 0.19.8.1-6ubuntu0.1 amd64 +libgettextpo-dev 0.19.8.1-6ubuntu0.3 amd64 +libgettextpo0 0.19.8.1-6ubuntu0.3 amd64 -libgpars-groovy-java 1.2.1-7 all +libgpars-groovy-java 1.2.1-10~18.04.1 all -libidn11 1.33-2.1ubuntu1.1 amd64 -libidn11 1.33-2.1ubuntu1.1 i386 +libidn11 1.33-2.1ubuntu1.2 amd64 +libidn11 1.33-2.1ubuntu1.2 i386 -libjava3d-java 1.5.2+dfsg-14 all -libjava3d-jni 1.5.2+dfsg-14 amd64 +libjava3d-java 1.5.2+dfsg-16~18.04.2 all +libjava3d-jni 1.5.2+dfsg-16~18.04.2 amd64 -libjavascriptcoregtk-4.0-18 2.22.6-0ubuntu0.18.04.1 amd64 +libjavascriptcoregtk-4.0-18 2.24.1-0ubuntu0.18.04.1 amd64 -libjcommander-java 1.71-1 all +libjcommander-java 1.71-3~18.04 all -libjdom1-java 1.1.3-1 all +libjdom1-java 1.1.3-2~18.04 all -liblibreofficekitgtk 1:6.0.7-0ubuntu0.18.04.2 amd64 +liblibreofficekitgtk 1:6.0.7-0ubuntu0.18.04.5 amd64 -libmail-java 1.6.1-2 all +libmail-java 1.6.2-1~18.04 all -libmaven-parent-java 27-2 all -libmaven-resolver-java 1.1.0-3 all -libmaven-shared-utils-java 3.1.0-2 all -libmaven3-core-java 3.5.2-2 all +libmaven-parent-java 31-2~18.04 all +libmaven-resolver-java 1.3.1-1~18.04 all +libmaven-shared-utils-java 3.3.0-1~18.04 all +libmaven3-core-java 3.6.0-1~18.04.1 all -libnb-org-openide-util-java 8.1+dfsg1-7 all -libnb-org-openide-util-lookup-java 8.1+dfsg1-7 all +libnb-org-openide-util-java 10.0-2~18.04.1 all +libnb-org-openide-util-lookup-java 10.0-2~18.04.1 all -libneon27-gnutls 0.30.2-2build1 amd64 +libneon27-gnutls 0.30.2-3~ubuntu18.04.1 amd64 -libnss-myhostname 237-3ubuntu10.19 amd64 -libnss-systemd 237-3ubuntu10.15 amd64 +libnss-myhostname 237-3ubuntu10.21 amd64 +libnss-systemd 237-3ubuntu10.21 amd64 -libntfs-3g88 1:2017.3.23-2ubuntu0.18.04.1 amd64 +libntfs-3g88 1:2017.3.23-2ubuntu0.18.04.2 amd64 -libpam-systemd 237-3ubuntu10.15 amd64 +libpam-systemd 237-3ubuntu10.21 amd64 -libplymouth4 0.9.3-1ubuntu7.18.04.1 amd64 +libplymouth4 0.9.3-1ubuntu7.18.04.2 amd64 -libpolkit-agent-1-0 0.105-20ubuntu0.18.04.4 amd64 -libpolkit-backend-1-0 0.105-20ubuntu0.18.04.4 amd64 -libpolkit-gobject-1-0 0.105-20ubuntu0.18.04.4 amd64 +libpolkit-agent-1-0 0.105-20ubuntu0.18.04.5 amd64 +libpolkit-backend-1-0 0.105-20ubuntu0.18.04.5 amd64 +libpolkit-gobject-1-0 0.105-20ubuntu0.18.04.5 amd64 -libpq5 10.6-0ubuntu0.18.04.1 amd64 +libpq5 10.7-0ubuntu0.18.04.1 amd64 -libreoffice-avmedia-backend-gstreamer 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-base-core 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-calc 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-common 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-core 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-draw 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-gnome 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-gtk 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-gtk2 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-gtk3 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-help-de 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-help-en-us 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-impress 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-l10n-de 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-math 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-ogltrans 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreoffice-pdfimport 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-style-breeze 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-style-galaxy 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-style-tango 1:6.0.7-0ubuntu0.18.04.2 all -libreoffice-writer 1:6.0.7-0ubuntu0.18.04.2 amd64 -libreofficekit-data 1:6.0.7-0ubuntu0.18.04.2 all +libreoffice-avmedia-backend-gstreamer 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-base-core 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-calc 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-common 1:6.0.7-0ubuntu0.18.04.5 all +libreoffice-core 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-draw 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-gnome 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-gtk 1:6.0.7-0ubuntu0.18.04.5 all +libreoffice-gtk2 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-gtk3 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-help-de 1:6.0.7-0ubuntu0.18.04.4 all +libreoffice-help-en-us 1:6.0.7-0ubuntu0.18.04.4 all +libreoffice-impress 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-l10n-de 1:6.0.7-0ubuntu0.18.04.4 all +libreoffice-math 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-ogltrans 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreoffice-pdfimport 1:6.0.7-0ubuntu0.18.04.5 all +libreoffice-style-breeze 1:6.0.7-0ubuntu0.18.04.5 all +libreoffice-style-galaxy 1:6.0.7-0ubuntu0.18.04.5 all +libreoffice-style-tango 1:6.0.7-0ubuntu0.18.04.5 all +libreoffice-writer 1:6.0.7-0ubuntu0.18.04.5 amd64 +libreofficekit-data 1:6.0.7-0ubuntu0.18.04.5 all -libruby2.5 2.5.1-1ubuntu1.1 amd64 +libruby2.5 2.5.1-1ubuntu1.2 amd64 -libsmbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.6 amd64 +libsmbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.9 amd64 -libsnapd-glib1 1.43-0ubuntu0.18.04.1 amd64 +libsnapd-glib1 1.47-0ubuntu0.18.04.0 amd64 -libsystemd0 237-3ubuntu10.15 amd64 -libsystemd0 237-3ubuntu10.15 i386 +libsystemd0 237-3ubuntu10.21 amd64 +libsystemd0 237-3ubuntu10.21 i386 -libudev-dev 237-3ubuntu10.15 amd64 +libudev-dev 237-3ubuntu10.21 amd64 -libudev1 237-3ubuntu10.15 amd64 -libudev1 237-3ubuntu10.15 i386 +libudev1 237-3ubuntu10.21 amd64 +libudev1 237-3ubuntu10.21 i386 -libunistring2 0.9.9-0ubuntu1 amd64 -libunistring2 0.9.9-0ubuntu1 i386 +libunistring2 0.9.9-0ubuntu2 amd64 +libunistring2 0.9.9-0ubuntu2 i386 -libupower-glib3 0.99.7-2 amd64 +libupower-glib3 0.99.7-2ubuntu0.18.04.1 amd64 -libwbclient0 2:4.7.6+dfsg~ubuntu-0ubuntu2.6 amd64 +libwbclient0 2:4.7.6+dfsg~ubuntu-0ubuntu2.9 amd64 -libwebkit2gtk-4.0-37 2.22.6-0ubuntu0.18.04.1 amd64 -libwebkit2gtk-4.0-37-gtk2 2.22.6-0ubuntu0.18.04.1 amd64 +libwebkit2gtk-4.0-37 2.24.1-0ubuntu0.18.04.1 amd64 +libwebkit2gtk-4.0-37-gtk2 2.24.1-0ubuntu0.18.04.1 amd64 -libxslt1.1 1.1.29-5 amd64 -libxslt1.1 1.1.29-5 i386 +libxslt1.1 1.1.29-5ubuntu0.1 amd64 +libxslt1.1 1.1.29-5ubuntu0.1 i386 -libxstream-java 1.4.10-1 all +libxstream-java 1.4.11.1-1~18.04 all -linux-libc-dev 4.15.0-46.49 amd64 +linux-libc-dev 4.15.0-48.51 amd64 -maven 3.5.2-2 all +maven 3.6.0-1~18.04.1 all -metasploit-framework 5.0.15+20190401102418~1rapid7-1 amd64 +metasploit-framework 5.0.19+20190424170114.git.7.b9e2e14~1rapid7-1 amd64 -mongodb-clients 1:3.6.3-0ubuntu1 amd64 -mongodb-server 1:3.6.3-0ubuntu1 all -mongodb-server-core 1:3.6.3-0ubuntu1 amd64 +mongodb-clients 1:3.6.3-0ubuntu1.1 amd64 +mongodb-server 1:3.6.3-0ubuntu1.1 all +mongodb-server-core 1:3.6.3-0ubuntu1.1 amd64 -ntfs-3g 1:2017.3.23-2ubuntu0.18.04.1 amd64 +ntfs-3g 1:2017.3.23-2ubuntu0.18.04.2 amd64 -openjdk-11-jdk 10.0.2+13-1ubuntu0.18.04.4 amd64 -openjdk-11-jdk-headless 10.0.2+13-1ubuntu0.18.04.4 amd64 -openjdk-11-jre 10.0.2+13-1ubuntu0.18.04.4 amd64 -openjdk-11-jre-headless 10.0.2+13-1ubuntu0.18.04.4 amd64 +openjdk-11-jdk 11.0.2+9-3ubuntu1~18.04.3 amd64 +openjdk-11-jdk-headless 11.0.2+9-3ubuntu1~18.04.3 amd64 +openjdk-11-jre 11.0.2+9-3ubuntu1~18.04.3 amd64 +openjdk-11-jre-headless 11.0.2+9-3ubuntu1~18.04.3 amd64 -php7.2-cli 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-common 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-curl 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-gd 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-json 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-mbstring 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-opcache 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-readline 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-xml 7.2.15-0ubuntu0.18.04.2 amd64 -php7.2-zip 7.2.15-0ubuntu0.18.04.2 amd64 +php7.2-cli 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-common 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-curl 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-gd 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-json 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-mbstring 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-opcache 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-readline 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-xml 7.2.17-0ubuntu0.18.04.1 amd64 +php7.2-zip 7.2.17-0ubuntu0.18.04.1 amd64 -plymouth 0.9.3-1ubuntu7.18.04.1 amd64 -plymouth-label 0.9.3-1ubuntu7.18.04.1 amd64 +plymouth 0.9.3-1ubuntu7.18.04.2 amd64 +plymouth-label 0.9.3-1ubuntu7.18.04.2 amd64 -plymouth-theme-ubuntu-logo 0.9.3-1ubuntu7.18.04.1 amd64 -plymouth-theme-ubuntu-text 0.9.3-1ubuntu7.18.04.1 amd64 +plymouth-theme-ubuntu-logo 0.9.3-1ubuntu7.18.04.2 amd64 +plymouth-theme-ubuntu-text 0.9.3-1ubuntu7.18.04.2 amd64 -policykit-1 0.105-20ubuntu0.18.04.4 amd64 +policykit-1 0.105-20ubuntu0.18.04.5 amd64 -python3-distupgrade 1:18.04.30 all +python3-distupgrade 1:18.04.31 all -python3-httplib2 0.9.2+dfsg-1 all +python3-httplib2 0.9.2+dfsg-1ubuntu0.1 all -python3-uno 1:6.0.7-0ubuntu0.18.04.2 amd64 -python3-update-manager 1:18.04.11.9 all +python3-uno 1:6.0.7-0ubuntu0.18.04.5 amd64 +python3-update-manager 1:18.04.11.10 all -resolvconf 1.79ubuntu10.18.04.2 all +resolvconf 1.79ubuntu10.18.04.3 all -ruby2.5 2.5.1-1ubuntu1.1 amd64 +ruby2.5 2.5.1-1ubuntu1.2 amd64 -samba-libs 2:4.7.6+dfsg~ubuntu-0ubuntu2.6 amd64 +samba-libs 2:4.7.6+dfsg~ubuntu-0ubuntu2.9 amd64 -snapd 2.37.4+18.04.1 amd64 +snapd 2.38+18.04 amd64 -sweethome3d 5.7+dfsg-2 all +sweethome3d 6.1.2+dfsg-1~18.04.1 all -systemd 237-3ubuntu10.15 amd64 -systemd-sysv 237-3ubuntu10.15 amd64 +systemd 237-3ubuntu10.21 amd64 +systemd-sysv 237-3ubuntu10.21 amd64 -teamviewer 14.2.2558 amd64 +teamviewer 14.2.8352 amd64 -tzdata 2018i-0ubuntu0.18.04 all +tzdata 2019a-0ubuntu0.18.04 all -ubuntu-core-launcher 2.37.4+18.04.1 amd64 +ubuntu-core-launcher 2.38+18.04 amd64 -ubuntu-drivers-common 1:0.5.2.2 amd64 +ubuntu-drivers-common 1:0.5.2.3 amd64 -ubuntu-minimal 1.417 amd64 +ubuntu-minimal 1.417.1 amd64 -ubuntu-release-upgrader-core 1:18.04.30 all -ubuntu-release-upgrader-gtk 1:18.04.30 all +ubuntu-release-upgrader-core 1:18.04.31 all +ubuntu-release-upgrader-gtk 1:18.04.31 all -ubuntu-standard 1.417 amd64 +ubuntu-standard 1.417.1 amd64 -udev 237-3ubuntu10.15 amd64 +udev 237-3ubuntu10.21 amd64 -ufw 0.35-5 all +ufw 0.36-0ubuntu0.18.04.1 all -unattended-upgrades 1.1ubuntu1.18.04.9 all +unattended-upgrades 1.1ubuntu1.18.04.10 all -uno-libs3 6.0.7-0ubuntu0.18.04.2 amd64 +uno-libs3 6.0.7-0ubuntu0.18.04.5 amd64 -update-manager 1:18.04.11.9 all -update-manager-core 1:18.04.11.9 all +update-manager 1:18.04.11.10 all +update-manager-core 1:18.04.11.10 all -upower 0.99.7-2 amd64 +upower 0.99.7-2ubuntu0.18.04.1 amd64 -ure 6.0.7-0ubuntu0.18.04.2 amd64 -ureadahead 0.100.0-20 amd64 +ure 6.0.7-0ubuntu0.18.04.5 amd64 +ureadahead 0.100.0-21 amd64 -wget 1.19.4-1ubuntu2.1 amd64 +wget 1.19.4-1ubuntu2.2 amd64 -wpagui 2:2.6-15ubuntu2.1 amd64 -wpasupplicant 2:2.6-15ubuntu2.1 amd64 +wpagui 2:2.6-15ubuntu2.2 amd64 +wpasupplicant 2:2.6-15ubuntu2.2 amd64 -xsltproc 1.1.29-5 amd64 +xsltproc 1.1.29-5ubuntu0.1 amd64 --- diff --git a/.etckeeper b/.etckeeper index 257dae8..c57be8e 100755 --- a/.etckeeper +++ b/.etckeeper @@ -598,7 +598,6 @@ maybe chmod 0644 'bash_completion.d/git-prompt' maybe chmod 0644 'bash_completion.d/grub' maybe chmod 0644 'bash_completion.d/insserv' maybe chmod 0644 'bash_completion.d/libreoffice.sh' -maybe chmod 0644 'bash_completion.d/maven' maybe chmod 0644 'bash_completion.d/openvpn' maybe chmod 0644 'bindresvport.blacklist' maybe chmod 0755 'binfmt.d' @@ -1820,6 +1819,9 @@ maybe chmod 0644 'issue.net' maybe chmod 0755 'java' maybe chmod 0755 'java-11-openjdk' maybe chmod 0644 'java-11-openjdk/accessibility.properties' +maybe chmod 0755 'java-11-openjdk/jfr' +maybe chmod 0644 'java-11-openjdk/jfr/default.jfc' +maybe chmod 0644 'java-11-openjdk/jfr/profile.jfc' maybe chmod 0644 'java-11-openjdk/jvm-amd64.cfg' maybe chmod 0644 'java-11-openjdk/logging.properties' maybe chmod 0755 'java-11-openjdk/management' @@ -1843,6 +1845,7 @@ maybe chmod 0644 'java-11-openjdk/security/policy/limited/exempt_local.policy' maybe chmod 0755 'java-11-openjdk/security/policy/unlimited' maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_US_export.policy' maybe chmod 0644 'java-11-openjdk/security/policy/unlimited/default_local.policy' +maybe chmod 0644 'java-11-openjdk/security/public_suffix_list.dat' maybe chmod 0644 'java-11-openjdk/sound.properties' maybe chmod 0644 'java-11-openjdk/swing.properties' maybe chmod 0755 'java-8-oracle' diff --git a/apparmor.d/usr.lib.snapd.snap-confine.real b/apparmor.d/usr.lib.snapd.snap-confine.real index 71c287e..835e366 100644 --- a/apparmor.d/usr.lib.snapd.snap-confine.real +++ b/apparmor.d/usr.lib.snapd.snap-confine.real @@ -67,6 +67,13 @@ /sys/fs/cgroup/freezer/snap.*/tasks w, /sys/fs/cgroup/freezer/snap.*/cgroup.procs r, + # cgroup: pids + # allow creating per snap-security-tag hierarchy and adding snap command (task) + # invocations to the controller. + /sys/fs/cgroup/pids/ r, + /sys/fs/cgroup/pids/snap.*/ w, + /sys/fs/cgroup/pids/snap.*/tasks w, + # querying udev /etc/udev/udev.conf r, /sys/**/uevent r, diff --git a/bash_completion.d/maven b/bash_completion.d/maven deleted file mode 100644 index f8a6aa7..0000000 --- a/bash_completion.d/maven +++ /dev/null @@ -1,816 +0,0 @@ -# Programmable completion for the Maven mvn command under bash. Source -# this file (or on some systems add it to ~/.bash_completion and start a new -# shell) and bash's completion mechanism will know all about mvn's options! -# -# Copyright (C) 2009, Ludovic Claude -# Base on git completion script, Copyright (C) 2006,2007 Shawn O. Pearce -# Distributed under the GNU General Public License, version 2.0. - -# Customization: you can always edit this file (as root) and add or remove plugins and options in the lists defined below. -# If you have some interesting changes, please send patches to ludovic.claude@laposte.net -# Alternatively, you can create a file called bash_completion in your ~/.m2 directory. -# This file can override any of the variables defined below (__mvnopts, __mvnoptsWithArg __mvnparams, __mvnpackaging, -# __mvnclassifiers, __mvndefault_phases, __mvnclean_phases, __mvnsite_phases, __mvncore_plugins, __mvnpackaging_plugins, -# __mvnreporting_plugins, __mvntools_plugins, __mvnide_plugins, __mvnother_plugins, __mvncustom_plugins) -# __mvncustom_plugins is the best variable to use to add new plugins and goals -# - -__mvnopts="--also-make --also-make-dependents --file --debug --batch-mode --lax-checksums --strict-checksums --check-plugin-updates --define - --errors --encrypt-master-password --encrypt-password --fail-at-end --fail-fast --fail-never --help --non-recursive --no-plugin-registry - --no-plugin-updates --offline --activate-profiles --projects --quiet --reactor --resume-from --settings --global-settings --update-snapshots - --update-plugins --version --show-version" - -__mvnoptsWithArg="--file|--define|--encrypt-master-password|--encrypt-password|--resume-from|--settings|--global-settings|--activate-profiles|--projects" - -__mvnparams="-Dmaven.test.skip=true -Dsurefire.useFile=false -Dmaven.surefire.debug -Xdebug -Xnoagent -Djava.compiler=NONE - -Xrunjdwp:transport=dt_socket,address=5005,server=y,suspend=y -Dverbose -Dmaven.test.failure.ignore=true" - -__mvnpackaging="pom jar maven-plugin ejb war ear rar par" -__mvnclassifiers="sources test-jar" - -# phases for the default lifecycle -__mvndefault_phases="validate - initialize - generate-sources - process-sources - generate-resources - process-resources - compile - process-classes - generate-test-sources - process-test-sources - generate-test-resources - process-test-resources - test-compile - process-test-classes - test - package - pre-integration-test - integration-test - post-integration-test - verify - install - deploy" - -# phases for the clean lifecycle -__mvnclean_phases="pre-clean - clean - post-clean" - -# phases for the site lifecycle -__mvnsite_phases="pre-site - site - post-site - site-deploy" - -# core plugin targets -__mvncore_plugins="clean:clean - clean:help - compiler:compile - compiler:testCompile - compiler:help - deploy:deploy - deploy:deploy-file - deploy:help - install:install - install:install-file - install:help - resources:resources - resources:testResources - resources:copy-resources - resources:help - site:site - site:deploy - site:run - site:stage - site:stage-deploy - site:attach-descriptor - site:jar - site:help - surefire:test - surefire:help - verifier:verify - verifier:help" - -# packaging plugin targets -__mvnpackaging_plugins="ear:ear - ear:generate-application-xml - ear:help - jar:jar - jar:test-jar - jar:sign - jar:sign-verify - jar:help - rar:rar - rar:help - war:war - war:exploded - war:inplace - war:manifest - war:help - shade:shade - shade:help" - -# reporting plugin targets -__mvnreporting_plugins="changelog:changelog - changelog:dev-activity - changelog:file-activity - changelog:help - changes:announcement-mail - changes:announcement-generate - changes:changes-report - changes:jira-report - changes:changes-validate - changes:help - checkstyle:checkstyle - checkstyle:check - checkstyle:help - doap:generate - doap:help - docck:check - docck:help - javadoc:javadoc - javadoc:test-javadoc - javadoc:aggregate - javadoc:test-aggregate - javadoc:jar - javadoc:test-jar - javadoc:help - jxr:jxr - jxr:test-jxr - jxr:help - pmd:pmd - pmd:cpd - pmd:check - pmd:cpd-check - pmd:help - project-info-reports:cim - project-info-reports:dependencies - project-info-reports:dependency-convergence - project-info-reports:dependency-management - project-info-reports:index - project-info-reports:issue-tracking - project-info-reports:license - project-info-reports:mailing-list - project-info-reports:plugin-management - project-info-reports:project-team - project-info-reports:scm - project-info-reports:summary - project-info-reports:help - surefire-report:report - surefire-report:report-only - surefire-report:help" - -# tools plugin targets -__mvntools_plugins="ant:ant - ant:clean - ant:help - antrun:run - antrun:help - archetype:create - archetype:generate - archetype:create-from-project - archetype:crawl - archetype:help - assembly:assembly - assembly:directory - assembly:directory-single - assembly:single - assembly:help - dependency:copy - dependency:copy-dependencies - dependency:unpack - dependency:unpack-dependencies - dependency:resolve - dependency:list - dependency:sources - dependency:resolve-plugins - dependency:go-offline - dependency:purge-local-repository - dependency:build-classpath - dependency:analyze - dependency:analyze-dep-mgt - dependency:tree - dependency:help - enforcer:enforce - enforcer:display-info - enforcer:help - gpg:sign - gpg:sign-and-deploy-file - gpg:help - help:active-profiles - help:all-profiles - help:describe - help:effective-pom - help:effective-settings - help:evaluate - help:expressions - help:system - invoker:install - invoker:run - invoker:help - one:convert - one:deploy-maven-one-repository - one:install-maven-one-repository - one:maven-one-plugin - one:help - patch:apply - patch:help - pdf:pdf - pdf:help - plugin:descriptor - plugin:report - plugin:updateRegistry - plugin:xdoc - plugin:addPluginArtifactMetadata - plugin:helpmojo - plugin:help - release:clean - release:prepare - release:rollback - release:perform - release:stage - release:branch - release:help - reactor:resume - reactor:make - reactor:make-dependents - reactor:make-scm-changes - reactor:help - remote-resources:bundle - remote-resources:process - remote-resources:help - repository:bundle-create - repository:bundle-pack - repository:help - scm:branch - scm:validate - scm:add - scm:unedit - scm:export - scm:bootstrap - scm:changelog - scm:list - scm:checkin - scm:checkout - scm:status - scm:update - scm:diff - scm:update-subprojects - scm:edit - scm:tag - scm:help - source:aggregate - source:jar - source:test-jar - source:jar-no-fork - source:test-jar-no-fork - source:help - stage:copy - stage:help" - -# IDE plugin targets -__mvnide_plugins="eclipse:clean - eclipse:configure-workspace - eclipse:eclipse - eclipse:help - eclipse:install-plugins - eclipse:m2eclipse - eclipse:make-artifacts - eclipse:myeclipse - eclipse:myeclipse-clean - eclipse:rad - eclipse:rad-clean - eclipse:remove-cache - eclipse:to-maven - idea:clean - idea:help - idea:idea - idea:module - idea:project - idea:workspace" - -__mvnother_plugins=" - plexus:app plexus:bundle-application plexus:bundle-runtime plexus:descriptor plexus:runtime plexus:service - jetty:run-war jetty:run - cargo:start cargo:stop - dbunit:export dbunit:operation - hibernate3:hbm2cfgxml hibernate3:hbm2ddl hibernate3:hbm2doc hibernate3:hbm2hbmxml hibernate3:hbm2java hibernate3:schema-export - hibernate3:schema-update - groovy:compile groovy:console groovy:execute groovy:generateStubs groovy:generateTestStubs groovy:help groovy:providers groovy:shell - groovy:testCompile - gwt:compile gwt:eclipse gwt:eclipseTest gwt:generateAsync gwt:help gwt:i18n gwt:test - javacc:help javacc:javacc javacc:jjdoc javacc:jjtree javacc:jjtree-javacc javacc:jtb javacc:jtb-javacc - jboss:configure jboss:deploy jboss:harddeploy jboss:start jboss:stop jboss:undeploy - jboss-packaging:esb jboss-packaging:esb-exploded jboss-packaging:har jboss-packaging:har-exploded jboss-packaging:sar jboss-packaging:sar-exploded - jboss-packaging:sar-inplace jboss-packaging:spring - jpox:enhance jpox:schema-create jpox:schema-dbinfo jpox:schema-delete jpox:schema-info jpox:schema-validate - make:autoreconf make:chmod make:chown make:compile make:configure make:help make:make-clean make:make-dist make:make-install make:test - make:validate-pom - nbm:autoupdate nbm:branding nbm:cluster nbm:directory nbm:jar nbm:nbm nbm:populate-repository nbm:run-ide nbm:run-platform - tomcat:deploy tomcat:exploded tomcat:info tomcat:inplace tomcat:list tomcat:redeploy tomcat:resources tomcat:roles tomcat:run tomcat:run-war - tomcat:sessions tomcat:start tomcat:stop tomcat:undeploy - wagon:copy wagon:download wagon:download-single wagon:help wagon:list wagon:merge-maven-repos wagon:upload wagon:upload-single - was6:clean was6:ejbdeploy was6:help was6:installApp was6:wsAdmin was6:wsDefaultBindings was6:wsListApps was6:wsStartApp was6:wsStartServer - was6:wsStopApp was6:wsStopServer was6:wsUninstallApp - weblogic:appc weblogic:clientgen weblogic:clientgen9 weblogic:deploy weblogic:jwsc weblogic:listapps weblogic:redeploy weblogic:servicegen - weblogic:start weblogic:stop weblogic:undeploy weblogic:wsdlgen" - -__mvncustom_plugins="" - -### End of customizable area - -if [ -e ~/.m2/bash_completion ]; then - source ~/.m2/bash_completion -fi - -__mvnphases="${__mvndefault_phases} ${__mvnclean_phases} ${__mvnsite_phases}" - -__mvnall_plugin_and_goals="${__mvncore_plugins} ${__mvnpackaging_plugins} ${__mvnreporting_plugins} ${__mvntools_plugins} - ${__mvnide_plugins} ${__mvnother_plugins} ${__mvncustom_plugins}" - -__mvnplugins=$(echo ${__mvnall_plugin_and_goals} | sed -re 's/:[^ \t]+/:\n/g' | sort -u | sed 's/[\s\n]//g') - -__mvncomp_1 () -{ - local c IFS=' '$'\t'$'\n' - for c in $1; do - case "$c$2" in - --*=*) printf %s$'\n' "$c$2" ;; - *.) printf %s$'\n' "$c$2" ;; - *) printf %s$'\n' "$c$2 " ;; - esac - done -} - -__mvncomp () -{ - local genOpt= - if [ "$1" == "-nospace" ]; then - genOpt="true" - shift - fi - local cur="${COMP_WORDS[COMP_CWORD]}" - if [ $# -gt 2 ]; then - cur="$3" - fi - case "$cur" in - -*=) - COMPREPLY=() - ;; - *) - local IFS=$'\n' - COMPREPLY=($(compgen -P "$2" \ - -W "$(__mvncomp_1 "$1" "$4")" \ - -- "$cur")) - ;; - esac -} - -__mvnlist_projects () -{ - local poms=$(find . -name pom.xml -print) - echo $poms | while read -d ' ' POM; do - local DIR=$(dirname "$POM") - if [[ "$DIR" != "." ]]; then - echo "${DIR#./}" - fi - done -} - -__mvnlist_goals () -{ - local plugin=$1 - local pfx="" - if [[ "$2" ]]; then - pfx=$2 - fi - echo ${__mvnall_plugin_and_goals} | tr ' ' '\n' | grep "$plugin" | sed "s/.*:/${pfx}/g" -} - -__mvnlist_poms () -{ - for x in `find -type f -name pom.xml -or -name *.pom` ; do echo ${x#./} ; done -} - -__mvnlist_jars () -{ - for x in `find -type f -name *.jar` ; do echo ${x#./} ; done -} - -__mvnlist_prefix () -{ - local pfx=$1 IFS=' '$'\t'$'\n' - shift - local list=$@ - for c in $list; do - echo "$pfx$c" - done -} - -__mvnprefix_equals () -{ - local cur=$1 - local pfx="" - case "$COMP_WORDBREAKS" in - *=*) : great ;; - *) pfx="${cur%%=*}=" ;; - esac - echo $pfx -} - -__mvnprefix_colon () -{ - local cur=$1 - local pfx="" - case "$COMP_WORDBREAKS" in - *:*) : great ;; - *) pfx="${cur%%:*}:" ;; - esac - echo $pfx -} - -__mvnprefix_comma () -{ - local cur=$1 - local pfx="" - case "$COMP_WORDBREAKS" in - *,*) : great ;; - *) pfx="${cur%%,*}," ;; - esac - echo $pfx -} - -__mvnplugin_help () -{ - local plugin=$1 - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - goal=*) - __mvncomp "$(__mvnlist_goals $plugin)" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - __mvncomp "detail lineLength= indentSize= $(__mvnlist_goals $plugin 'goal=')" "-D" "${cur}" - ;; - esac -} - -__mvnhelp_describe () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - cmd=*:*) - local plugin="${cur#*=}" - plugin="${plugin%%:*}:" - __mvncomp "$(__mvnlist_goals $plugin)" "$(__mvnprefix_colon $cur)" "${cur#*:}" - ;; - cmd=*) - __mvncomp "${__mvnphases} ${__mvnall_plugin_and_goals}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - plugin=*) - __mvncomp "org.apache.maven.plugins:maven-" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - groupId=*) - __mvncomp "org.apache.maven.plugins" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - artifactId=*) - __mvncomp "" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - # present several cmd= options to block full completion and insertion of a space - __mvncomp "detail cmd=press cmd=tab plugin= groupId= artifactId=" "-D" "${cur}" - ;; - esac -} - -__mvndeploy_deploy () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - __mvncomp "altDeploymentRepository= skip=true updateReleaseInfo=true" "-D" "${cur}" -} - -__mvndeploy_deploy_file () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - file=*) - COMPREPLY=( $( compgen -f -P "$(__mvnprefix_equals $cur)" -- "${cur#*=}" ) ) - ;; - pomFile=*) - __mvncomp "$(__mvnlist_poms)" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - packaging=*) - __mvncomp "${__mvnpackaging}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - local options="artifactId= classifier= description= file=press file=tab generatePom=true groupId= pomFile=press pomFile=tab repositoryId= - repositoryLayout=legacy uniqueVersion=false url= version=" - options="$options $(__mvnlist_prefix 'packaging=' ${__mvnpackaging} )" - __mvncomp "$options" "-D" "${cur}" - ;; - esac -} - -__mvninstall_install_file () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - file=*) - COMPREPLY=( $( compgen -f -P "$(__mvnprefix_equals $cur)" -- "${cur#*=}" ) ) - ;; - pomFile=*) - __mvncomp "$(__mvnlist_poms)" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - sources=*) - __mvncomp "$(__mvnlist_jars)" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - javadoc=*) - __mvncomp "$(__mvnlist_jars)" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - packaging=*) - __mvncomp "${__mvnpackaging}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - local options="artifactId= classifier= file=press file=tab generatePom=true groupId= pomFile=press pomFile=tab - createChecksum=true url= version= sources=press sources=tab javadoc=press javadoc=tab" - options="$options $(__mvnlist_prefix 'packaging=' ${__mvnpackaging} )" - __mvncomp "$options" "-D" "${cur}" - ;; - esac -} - -__mvnarchetype_generate () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - __mvncomp "archetypeArtifactId= archetypeCatalog= archetypeGroupId= archetypeRepository= archetypeVersion= basedir= goals= interactiveMode=" \ - "-D" "${cur}" -} - -__mvndependency_x_dependencies () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - classifier=*) - __mvncomp "${__mvnclassifiers}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - __mvncomp "$(__mvnlist_prefix 'classifier=' ${__mvnclassifiers})" "-D" "${cur}" - ;; - esac -} - -__mvndependency_resolve () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - classifier=*) - __mvncomp "${__mvnclassifiers}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - __mvncomp "$(__mvnlist_prefix 'classifier=' ${__mvnclassifiers}) excludeArtifactIds= excludeClassifiers= excludeGroupIds= - excludeScope= excludeTransitive=true excludeTypes= includeArtifactIds= includeClassifiers= includeGroupIds= includeScope= - includeTypes= markersDirectory= outputAbsoluteArtifactFilename= outputFile= outputScope=false overWriteIfNewer=false - overWriteReleases=true overWriteSnapshots=true silent=true type=" - "-D" "${cur}" - ;; - esac -} - -__mvndependency_purge_local_repository () -{ - local fuzziness="file version artifactId groupId" - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - resolutionFuzziness=*) - __mvncomp "${fuzziness}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - __mvncomp "actTransitively=false exclude= reResolve=false verbose=true - $(__mvnlist_prefix 'resolutionFuzziness=' ${fuzziness})" - "-D" "${cur}" - ;; - esac -} - -__mvndependency_analyze () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - __mvncomp "ignoreNonCompile=true outputXML=true scriptableFlag= scriptableOutput=true verbose=true" "-D" "${cur}" -} - -__mvndependency_analyze_dep_mgt () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - __mvncomp "ignoreDirect=false" "-D" "${cur}" -} - -__mvndependency_tree () -{ - local tokens="whitespace standard extended" - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - tokens=*) - __mvncomp "${tokens}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - __mvncomp "excludes= includes= outputFile= scope= verbose=true - $(__mvnlist_prefix 'tokens=' ${tokens})" - "-D" "${cur}" - ;; - esac -} - -__mvnrelease_prepare () -{ - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - __mvncomp "username= dryRun=true" "-D" "${cur}" -} - -__mvnscm_checkin () -{ - local versionType="branch tag revision" - local cur="${COMP_WORDS[COMP_CWORD]}" - cur="${cur#-D}" - case "${cur}" in - scmVersionType=*) - __mvncomp "${versionType}" "$(__mvnprefix_equals $cur)" "${cur#*=}" - ;; - *) - __mvncomp "username= message= passphrase= password= scmVersion= $(__mvnlist_prefix 'scmVersionType=' ${versionType})" "-D" "${cur}" - ;; - esac -} - -_mvn () -{ - local i prev c=1 cmd option optionArg=0 cmdcomplete=0 - local cur="${COMP_WORDS[COMP_CWORD]}" - COMPREPLY=() - - #echo " cur $cur" - - # discover the options and the command - while [ $c -le $COMP_CWORD ]; do - prev=$i - i="${COMP_WORDS[c]}" - c=$((++c)) - optionArg=0 - # skip option argument - if [[ $prev == @(${__mvnoptsWithArg}) ]]; then - optionArg=1 - continue; - fi - - #echo "c $c i '$i'" - - if [[ $cmdcomplete == -3 ]]; then - cmdcomplete=1 # complete command - break; - fi - - if [[ "$i" == "" ]]; then - if [[ $cmd ]]; then - cmdcomplete=1 # complete command - break; - fi - continue - fi - - if [[ "$i" == ":" ]]; then - if [[ $cmd ]]; then - cmdcomplete=$((cmdcomplete-1)) - cmd="${cmd}:" - fi - continue - fi - - case "$i" in - --version|--help) return ;; - -*) option="$i" ;; - *) if [[ ! $cmd ]]; then - # incomplete command - cmdcomplete=$((cmdcomplete-1)) - cmd="$i" - local next=$c - if [[ $next -lt $COMP_CWORD ]]; then - #echo "next ${COMP_WORDS[next]}" - if [[ "${COMP_WORDS[next]}" != ":" ]]; then - break - fi - fi - else - cmdcomplete=$((cmdcomplete-1)) - cmd="$cmd$i" - fi - ;; - esac - done - - #echo "cmd $cmd cmdcomplete $cmdcomplete" - - if [[ ! $cmd && $option && ($optionArg == 0) ]]; then - case "$option" in - --file) - __mvncomp "$(__mvnlist_poms)" - return - ;; - --define) - __mvncomp "maven.test.skip=true" - return - ;; - --resume-from) - __mvncomp "$(__mvnlist_projects)" - return - ;; - --projects) - case "${cur}" in - *,*) - __mvncomp "$(__mvnlist_projects)" "$(__mvnprefix_comma $cur)" "${cur#*,}" - ;; - *) __mvncomp "$(__mvnlist_projects)" - ;; - esac - return - ;; - --settings|--global-settings) - COMPREPLY=( $( compgen -f -- $cur ) ) - return - ;; - --*) - COMPREPLY=() - ;; - esac - fi - - if [ $cmdcomplete -lt 0 ]; then - #echo "incomplete cmd $cmd" - case "${cmd}" in - *:) - local plugin="${cmd%%:}:" - #echo "plugin $plugin" - __mvncomp "$(__mvnlist_goals $plugin)" "$(__mvnprefix_colon $cmd)" "" - ;; - *:*) - local plugin="${cmd%%:*}:" - #echo "plugin $plugin" - __mvncomp "$(__mvnlist_goals $plugin)" "$(__mvnprefix_colon $cmd)" "${cmd#*:}" - ;; - *) __mvncomp "${__mvnphases} ${__mvnall_plugin_and_goals}" ;; - esac - return - fi - - if [ -z "$cmd" ]; then - #echo "empty cmd cur $cur" - case "${cur}" in - -D*=*) COMPREPLY=() ;; - -*) __mvncomp "${__mvnopts} ${__mvnparams}" ;; - --*) __mvncomp "${__mvnopts}" ;; - *) __mvncomp "${__mvnphases} ${__mvnall_plugin_and_goals}" ;; - esac - return - fi - - #echo "cmd $cmd" - - case "$cmd" in - *:help) - local plugin="${cmd%%:*}:" - __mvnplugin_help $plugin - ;; - help:describe) __mvnhelp_describe ;; - deploy:deploy) __mvndeploy_deploy ;; - deploy:deploy-file) __mvndeploy_deploy_file ;; - archetype:generate) __mvnarchetype_generate ;; - dependency:copy-dependencies) __mvndependency_x_dependencies ;; - dependency:unpack-dependencies) __mvndependency_x_dependencies ;; - dependency:resolve) __mvndependency_resolve ;; - dependency:resolve-plugins) __mvndependency_resolve ;; - dependency:source) __mvndependency_resolve ;; - dependency:go-offline) __mvndependency_resolve ;; - dependency:purge-local-repository) __mvndependency_purge_local_repository ;; - dependency:analyze) __mvndependency_analyze ;; - dependency:analyze-dep-mgt) __mvndependency_analyze_dep_mgt ;; - install:install-file) __mvninstall_install_file ;; - release:prepare) __mvnrelease_prepare ;; - scm:checkin) __mvnscm_checkin ;; - *) - ;; - esac -} - -complete -o default -o nospace -F _mvn mvn mvnDebug - diff --git a/chromium-browser/customizations/10-flash b/chromium-browser/customizations/10-flash index 0a94fd5..803df0e 100644 --- a/chromium-browser/customizations/10-flash +++ b/chromium-browser/customizations/10-flash @@ -1,6 +1,6 @@ flashso="/usr/lib/adobe-flashplugin/libpepflashplayer.so" if test -f "$flashso"; then - CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.156" + CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.171" echo "Using PPAPI flash." else echo "PPAPI flash has config file in /etc, but library does not exist and won't be used. Package is uninstalled, not purged." diff --git a/console-setup/cached_setup_keyboard.sh b/console-setup/cached_setup_keyboard.sh index 60b56bb..c9789f7 100755 --- a/console-setup/cached_setup_keyboard.sh +++ b/console-setup/cached_setup_keyboard.sh @@ -10,4 +10,4 @@ kbd_mode '-u' < '/dev/tty3' kbd_mode '-u' < '/dev/tty4' kbd_mode '-u' < '/dev/tty5' kbd_mode '-u' < '/dev/tty6' -loadkeys '/tmp/tmpkbd.MEEThG' > '/dev/null' +loadkeys '/run/tmpkbd.qNXdGM' > '/dev/null' diff --git a/cups/printers.conf.O b/cups/printers.conf.O index baacd10..c766d1c 100644 --- a/cups/printers.conf.O +++ b/cups/printers.conf.O @@ -37,3 +37,23 @@ KLimit 0 OpPolicy default ErrorPolicy retry-job + +UUID urn:uuid:548bca5a-9233-3c41-6f7e-8bb4a63a59e7 +Info TEST +Location +MakeModel Remote printer: Generic postscript printer +DeviceURI implicitclass:TEST_linux_a5xv +State Idle +StateTime 1556172411 +ConfigTime 1556172411 +Type 4182 +Accepting Yes +Shared No +JobSheets none none +QuotaPeriod 0 +PageLimit 0 +KLimit 0 +OpPolicy default +ErrorPolicy retry-job +Option cups-browsed true + diff --git a/default/ufw b/default/ufw index 665806f..83c9ac3 100644 --- a/default/ufw +++ b/default/ufw @@ -41,5 +41,6 @@ IPT_SYSCTL=/etc/ufw/sysctl.conf # nf_conntrack_pptp, nf_nat_pptp: PPTP over stateful firewall/NAT # nf_conntrack_ftp, nf_nat_ftp: active FTP support # nf_conntrack_tftp, nf_nat_tftp: TFTP support (server side) +# nf_conntrack_sane: sane support IPT_MODULES="nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns" diff --git a/fonts/conf.avail/69-language-selector-ja.conf b/fonts/conf.avail/69-language-selector-ja.conf index 216a1a6..d562429 100644 --- a/fonts/conf.avail/69-language-selector-ja.conf +++ b/fonts/conf.avail/69-language-selector-ja.conf @@ -2,11 +2,22 @@ - - Noto + + Noto Sans CJK JP - - JP + + 18 + + + false + + + hintnone + + + + + Noto Serif CJK JP 18 diff --git a/java-11-openjdk/jfr/default.jfc b/java-11-openjdk/jfr/default.jfc new file mode 100644 index 0000000..6164a4e --- /dev/null +++ b/java-11-openjdk/jfr/default.jfc @@ -0,0 +1,826 @@ + + + + + + + + true + everyChunk + + + + true + 1000 ms + + + + true + everyChunk + + + + true + 1000 ms + + + + true + + + + true + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + false + true + 20 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + + + + false + true + 0 ms + + + + false + true + + + + false + + + + true + beginChunk + + + + true + beginChunk + + + + true + 20 ms + + + + true + 20 ms + + + + true + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + false + 10 ms + + + + true + 10 ms + + + + true + true + + + + true + everyChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + everyChunk + + + + true + everyChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + false + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + true + + + + true + true + + + + true + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + true + 0 ms + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + + + + false + + + + true + + + + false + true + + + + true + + + + false + everyChunk + + + + false + + + + true + false + 0 ns + + + + true + beginChunk + + + + true + 1000 ms + + + + true + 1000 ms + + + + true + 60 s + + + + false + + + + false + + + + true + beginChunk + + + + true + everyChunk + + + + true + 100 ms + + + + true + beginChunk + + + + true + everyChunk + + + + true + + + + true + beginChunk + + + + true + beginChunk + + + + true + 10 s + + + + true + 1000 ms + + + + true + 10 s + + + + true + beginChunk + + + + true + endChunk + + + + true + 5 s + + + + true + beginChunk + + + + true + everyChunk + + + + false + true + + + + false + true + + + + true + everyChunk + + + + true + endChunk + + + + true + endChunk + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + true + true + 20 ms + + + + false + true + + + + true + true + + + + true + 1000 ms + + + + true + + + + true + + + + true + + + + true + + + + true + 10 ms + + + + true + 0 ms + + + + true + 10 ms + + + + true + 10 ms + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 20 ms + + 20 ms + + 20 ms + + false + + + + diff --git a/java-11-openjdk/jfr/profile.jfc b/java-11-openjdk/jfr/profile.jfc new file mode 100644 index 0000000..267064a --- /dev/null +++ b/java-11-openjdk/jfr/profile.jfc @@ -0,0 +1,827 @@ + + + + + + + + true + everyChunk + + + + true + 1000 ms + + + + true + everyChunk + + + + true + 1000 ms + + + + true + + + + true + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + 0 ms + + + + true + true + + + + false + true + 0 ms + + + + false + true + + + + false + + + + true + beginChunk + + + + true + beginChunk + + + + true + 10 ms + + + + true + 10 ms + + + + true + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + true + 0 ms + + + + true + true + + + + true + 60 s + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + everyChunk + + + + true + everyChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + true + beginChunk + + + + false + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + true + + + + true + true + + + + true + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + true + 0 ms + + + + false + 0 ms + + + + false + 0 ms + + + + true + 0 ms + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + true + + + + false + true + + + + true + + + + false + everyChunk + + + + false + + + + true + true + 0 ns + + + + true + beginChunk + + + + true + 1000 ms + + + + true + 100 ms + + + + true + 10 s + + + + true + + + + false + + + + true + beginChunk + + + + true + everyChunk + + + + true + 100 ms + + + + true + beginChunk + + + + true + everyChunk + + + + true + + + + true + beginChunk + + + + true + beginChunk + + + + true + 10 s + + + + true + 1000 ms + + + + true + 10 s + + + + true + beginChunk + + + + true + endChunk + + + + true + 5 s + + + + true + beginChunk + + + + true + everyChunk + + + + true + true + + + + true + true + + + + true + everyChunk + + + + true + endChunk + + + + true + endChunk + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + true + true + 10 ms + + + + false + true + + + + true + true + + + + true + 1000 ms + + + + true + + + + true + + + + true + + + + true + + + + true + 10 ms + + + + true + 0 ms + + + + 10 ms + true + + + + true + 10 ms + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 10 ms + + 10 ms + + 10 ms + + false + + + + diff --git a/java-11-openjdk/jvm-amd64.cfg b/java-11-openjdk/jvm-amd64.cfg index 6cebec3..76516d1 100644 --- a/java-11-openjdk/jvm-amd64.cfg +++ b/java-11-openjdk/jvm-amd64.cfg @@ -1,35 +1,3 @@ -# Copyright (c) 2003, 2013, Oracle and/or its affiliates. All rights reserved. -# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. -# -# This code is free software; you can redistribute it and/or modify it -# under the terms of the GNU General Public License version 2 only, as -# published by the Free Software Foundation. Oracle designates this -# particular file as subject to the "Classpath" exception as provided -# by Oracle in the LICENSE file that accompanied this code. -# -# This code is distributed in the hope that it will be useful, but WITHOUT -# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or -# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License -# version 2 for more details (a copy is included in the LICENSE file that -# accompanied this code). -# -# You should have received a copy of the GNU General Public License version -# 2 along with this work; if not, write to the Free Software Foundation, -# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. -# -# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA -# or visit www.oracle.com if you need additional information or have any -# questions. -# -# List of JVMs that can be used as an option to java, javac, etc. -# Order is important -- first in this list is the default JVM. -# NOTE that both this file and its format are UNSUPPORTED and -# WILL GO AWAY in a future release. -# -# You may also select a JVM in an arbitrary location with the -# "-XXaltjvm=" option, but that too is unsupported -# and may not be available in a future release. -# -server KNOWN -client IGNORE -zero KNOWN diff --git a/java-11-openjdk/management/management.properties b/java-11-openjdk/management/management.properties index 1f8d86e..0c14bd6 100644 --- a/java-11-openjdk/management/management.properties +++ b/java-11-openjdk/management/management.properties @@ -5,7 +5,6 @@ # The Management Configuration file (in java.util.Properties format) # will be read if one of the following system properties is set: # -Dcom.sun.management.jmxremote.port= -# or -Dcom.sun.management.snmp.port= # or -Dcom.sun.management.config.file= # # The default Management Configuration file is: @@ -26,8 +25,6 @@ # For setting the JMX RMI agent port use the following line # com.sun.management.jmxremote.port= # -# For setting the SNMP agent port use the following line -# com.sun.management.snmp.port= ##################################################################### # Optional Instrumentation @@ -49,82 +46,6 @@ # To enable thread contention monitoring, uncomment the following line # com.sun.management.enableThreadContentionMonitoring -##################################################################### -# SNMP Management Properties -##################################################################### -# -# If the system property -Dcom.sun.management.snmp.port= -# is set then -# - The SNMP agent (with the Java virtual machine MIB) is started -# that listens on the specified port for incoming SNMP requests. -# - the following properties for read for SNMP management. -# -# The configuration can be specified only at startup time. -# Later changes to the above system property (e.g. via setProperty method), this -# config file, or the ACL file has no effect to the running SNMP agent. -# - -# -# ##################### SNMP Trap Port ######################### -# -# com.sun.management.snmp.trap= -# Specifies the remote port number at which managers are expected -# to listen for trap. For each host defined in the ACL file, -# the SNMP agent will send traps at : -# Default for this property is 162. -# - -# To set port for sending traps to a different port use the following line -# com.sun.management.snmp.trap= - -# -# ################ SNMP listen interface ######################### -# -# com.sun.management.snmp.interface= -# Specifies the local interface on which the SNMP agent will bind. -# This is useful when running on machines which have several -# interfaces defined. It makes it possible to listen to a specific -# subnet accessible through that interface. -# Default for this property is "localhost". -# -# The format of the value for that property is any string accepted -# by java.net.InetAddress.getByName(String). -# - -# For restricting the port on which SNMP agent listens use the following line -# com.sun.management.snmp.interface= - -# -# #################### SNMP ACL file ######################### -# -# com.sun.management.snmp.acl=true|false -# Default for this property is true. (Case for true/false ignored) -# If this property is specified as false then the ACL file -# is not checked: all manager hosts are allowed all access. -# - -# For SNMP without checking ACL file uncomment the following line -# com.sun.management.snmp.acl=false - -# -# com.sun.management.snmp.acl.file=filepath -# Specifies location for ACL file -# This is optional - default location is -# $JRE/conf/management/snmp.acl -# -# If the property "com.sun.management.snmp.acl" is set to false, -# then this property and the ACL file are ignored. -# Otherwise the ACL file must exist and be in the valid format. -# If the ACL file is empty or non existent then no access is allowed. -# -# The SNMP agent will read the ACL file at startup time. -# Modification to the ACL file has no effect to any running SNMP -# agents which read that ACL file at startup. -# - -# For a non-default acl file location use the following line -# com.sun.management.snmp.acl.file=filepath - ##################################################################### # RMI Management Properties ##################################################################### diff --git a/java-11-openjdk/net.properties b/java-11-openjdk/net.properties index ac94b30..d95715d 100644 --- a/java-11-openjdk/net.properties +++ b/java-11-openjdk/net.properties @@ -1,5 +1,5 @@ ############################################################ -# Default Networking Configuration File +# Default Networking Configuration File # # This file may contain default values for the networking system properties. # These values are only used when the system properties are not specified @@ -14,7 +14,7 @@ # Note that the system properties that do explicitly set proxies # (like http.proxyHost) do take precedence over the system settings # even if java.net.useSystemProxies is set to true. - + java.net.useSystemProxies=false #------------------------------------------------------------------------ @@ -66,8 +66,8 @@ ftp.nonProxyHosts=localhost|127.*|[::1] # socksProxyPort=1080 # # HTTP Keep Alive settings. remainingData is the maximum amount of data -# in kilobytes that will be cleaned off the underlying socket so that it -# can be reused (default value is 512K), queuedConnections is the maximum +# in kilobytes that will be cleaned off the underlying socket so that it +# can be reused (default value is 512K), queuedConnections is the maximum # number of Keep Alive connections to be on the queue for clean up (default # value is 10). # http.KeepAlive.remainingData=512 @@ -99,3 +99,23 @@ ftp.nonProxyHosts=localhost|127.*|[::1] #jdk.http.auth.proxying.disabledSchemes= jdk.http.auth.tunneling.disabledSchemes=Basic +# +# Transparent NTLM HTTP authentication mode on Windows. Transparent authentication +# can be used for the NTLM scheme, where the security credentials based on the +# currently logged in user's name and password can be obtained directly from the +# operating system, without prompting the user. This property has three possible +# values which regulate the behavior as shown below. Other unrecognized values +# are handled the same as 'disabled'. Note, that NTLM is not considered to be a +# strongly secure authentication scheme and care should be taken before enabling +# this mechanism. +# +# Transparent authentication never used. +#jdk.http.ntlm.transparentAuth=disabled +# +# Enabled for all hosts. +#jdk.http.ntlm.transparentAuth=allHosts +# +# Enabled for hosts that are trusted in Windows Internet settings +#jdk.http.ntlm.transparentAuth=trustedHosts +# +jdk.http.ntlm.transparentAuth=disabled diff --git a/java-11-openjdk/security/default.policy b/java-11-openjdk/security/default.policy index 6495d08..b0ffc99 100644 --- a/java-11-openjdk/security/default.policy +++ b/java-11-openjdk/security/default.policy @@ -8,16 +8,27 @@ // ${java.home}/conf/security/java.policy. // -grant codeBase "jrt:/java.activation" { - permission java.security.AllPermission; -}; grant codeBase "jrt:/java.compiler" { permission java.security.AllPermission; }; -grant codeBase "jrt:/java.corba" { - permission java.security.AllPermission; + +grant codeBase "jrt:/java.net.http" { + permission java.lang.RuntimePermission "accessClassInPackage.sun.net"; + permission java.lang.RuntimePermission "accessClassInPackage.sun.net.util"; + permission java.lang.RuntimePermission "accessClassInPackage.sun.net.www"; + permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc"; + permission java.net.SocketPermission "*","connect,resolve"; + permission java.net.URLPermission "http:*","*:*"; + permission java.net.URLPermission "https:*","*:*"; + permission java.net.URLPermission "ws:*","*:*"; + permission java.net.URLPermission "wss:*","*:*"; + permission java.net.URLPermission "socket:*","CONNECT"; // proxy + // For request/response body processors, fromFile, asFile + permission java.io.FilePermission "<>","read,write,delete"; + permission java.util.PropertyPermission "*","read"; + permission java.net.NetPermission "getProxySelector"; }; grant codeBase "jrt:/java.scripting" { @@ -65,9 +76,6 @@ grant codeBase "jrt:/java.sql.rowset" { permission java.security.AllPermission; }; -grant codeBase "jrt:/java.xml.bind" { - permission java.security.AllPermission; -}; grant codeBase "jrt:/java.xml.crypto" { permission java.lang.RuntimePermission @@ -90,9 +98,6 @@ grant codeBase "jrt:/java.xml.crypto" { "accessClassInPackage.com.sun.org.apache.xpath.internal.*"; }; -grant codeBase "jrt:/java.xml.ws" { - permission java.security.AllPermission; -}; grant codeBase "jrt:/jdk.accessibility" { permission java.lang.RuntimePermission "accessClassInPackage.sun.awt"; diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security index 5a857b9..f07aacf 100644 --- a/java-11-openjdk/security/java.security +++ b/java-11-openjdk/security/java.security @@ -653,8 +653,8 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \ # # Example: # jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048 -jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, \ - EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC +jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \ + EC keySize < 224, 3DES_EDE_CBC, anon, NULL # # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS) @@ -777,6 +777,40 @@ jdk.tls.legacyAlgorithms= \ # EE386BFB 5A899FA5 AE9F2411 7C4B1FE6 49286651 ECE65381 \ # FFFFFFFF FFFFFFFF, 2} +# +# TLS key limits on symmetric cryptographic algorithms +# +# This security property sets limits on algorithms key usage in TLS 1.3. +# When the amount of data encrypted exceeds the algorithm value listed below, +# a KeyUpdate message will trigger a key change. This is for symmetric ciphers +# with TLS 1.3 only. +# +# The syntax for the property is described below: +# KeyLimits: +# " KeyLimit { , KeyLimit } " +# +# WeakKeyLimit: +# AlgorithmName Action Length +# +# AlgorithmName: +# A full algorithm transformation. +# +# Action: +# KeyUpdate +# +# Length: +# The amount of encrypted data in a session before the Action occurs +# This value may be an integer value in bytes, or as a power of two, 2^29. +# +# KeyUpdate: +# The TLS 1.3 KeyUpdate handshake process begins when the Length amount +# is fulfilled. +# +# Note: This property is currently used by OpenJDK's JSSE implementation. It +# is not guaranteed to be examined and used by other implementations. +# +jdk.tls.keyLimits=AES/GCM/NoPadding KeyUpdate 2^37 + # # Cryptographic Jurisdiction Policy defaults # @@ -790,14 +824,14 @@ jdk.tls.legacyAlgorithms= \ # limited: These policy files contain more restricted cryptographic # strengths # -# The default setting is determined by the value of the ���crypto.policy��� +# The default setting is determined by the value of the "crypto.policy" # Security property below. If your country or usage requires the -# traditional restrictive policy, the ���limited��� Java cryptographic +# traditional restrictive policy, the "limited" Java cryptographic # policy is still available and may be appropriate for your environment. # # If you have restrictions that do not fit either use case mentioned # above, Java provides the capability to customize these policy files. -# The ���crypto.policy��� security property points to a subdirectory +# The "crypto.policy" security property points to a subdirectory # within /conf/security/policy/ which can be customized. # Please see the /conf/security/policy/README.txt file or consult # the Java Security Guide/JCA documentation for more information. @@ -971,10 +1005,10 @@ jdk.xml.dsig.secureValidationPolicy=\ # # An IOR type check filter, if configured, is used by an ORB during # an ORB::string_to_object invocation to check the veracity of the type encoded -# in the ior string. +# in the ior string. # # The filter pattern consists of a semi-colon separated list of class names. -# The configured list contains the binary class names of the IDL interface types +# The configured list contains the binary class names of the IDL interface types # corresponding to the IDL stub class to be instantiated. # As such, a filter specifies a list of IDL stub classes that will be # allowed by an ORB when an ORB::string_to_object is invoked. @@ -1003,3 +1037,29 @@ jdk.xml.dsig.secureValidationPolicy=\ # and javax.crypto.spec.SecretKeySpec and rejects all the others. jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep;\ java.base/java.security.KeyRep$Type;java.base/javax.crypto.spec.SecretKeySpec;!* + +# +# Enhanced exception message information +# +# By default, exception messages should not include potentially sensitive +# information such as file names, host names, or port numbers. This property +# accepts one or more comma separated values, each of which represents a +# category of enhanced exception message information to enable. Values are +# case-insensitive. Leading and trailing whitespaces, surrounding each value, +# are ignored. Unknown values are ignored. +# +# NOTE: Use caution before setting this property. Setting this property +# exposes sensitive information in Exceptions, which could, for example, +# propagate to untrusted code or be emitted in stack traces that are +# inadvertently disclosed and made accessible over a public network. +# +# The categories are: +# +# hostInfo - IOExceptions thrown by java.net.Socket and the socket types in the +# java.nio.channels package will contain enhanced exception +# message information +# +# The property setting in this file can be overridden by a system property of +# the same name, with the same syntax and possible values. +# +#jdk.includeInExceptions=hostInfo diff --git a/java-11-openjdk/security/policy/README.txt b/java-11-openjdk/security/policy/README.txt index e9138e7..fdf77d3 100644 --- a/java-11-openjdk/security/policy/README.txt +++ b/java-11-openjdk/security/policy/README.txt @@ -8,7 +8,7 @@ Import and export control rules on cryptographic software vary from country to country. The Java Cryptography Extension (JCE) architecture allows flexible cryptographic key strength to be configured via the -jurisdiction policy files which are referenced by the “crypto.policy” +jurisdiction policy files which are referenced by the "crypto.policy" security property in the /conf/security/java.security file. By default, Java provides two different sets of cryptographic policy @@ -20,8 +20,8 @@ files: limited: These policy files contain more restricted cryptographic strengths -These files reside in /conf/security/policy in the “unlimited” -or “limited” subdirectories respectively. +These files reside in /conf/security/policy in the "unlimited" +or "limited" subdirectories respectively. Each subdirectory contains a complete policy configuration, and subdirectories can be added/edited/removed to reflect your diff --git a/java-11-openjdk/security/public_suffix_list.dat b/java-11-openjdk/security/public_suffix_list.dat new file mode 100644 index 0000000..9b0f023 Binary files /dev/null and b/java-11-openjdk/security/public_suffix_list.dat differ diff --git a/php/7.2/cli/php.ini b/php/7.2/cli/php.ini index bdb75eb..737b619 100644 --- a/php/7.2/cli/php.ini +++ b/php/7.2/cli/php.ini @@ -993,8 +993,19 @@ cli_server.color = On ;intl.use_exceptions = 0 [sqlite3] +; Directory pointing to SQLite3 extensions +; http://php.net/sqlite3.extension-dir ;sqlite3.extension_dir = +; SQLite defensive mode flag (only available from SQLite 3.26+) +; When the defensive flag is enabled, language features that allow ordinary +; SQL to deliberately corrupt the database file are disabled. This forbids +; writing directly to the schema, shadow tables (eg. FTS data tables), or +; the sqlite_dbpage virtual table. +; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html +; (for older SQLite versions, this flag has no use) +sqlite3.defensive = 1 + [Pcre] ;PCRE library backtracking limit. ; http://php.net/pcre.backtrack-limit diff --git a/teamviewer/global.conf b/teamviewer/global.conf index 9319e04..2c5600d 100644 --- a/teamviewer/global.conf +++ b/teamviewer/global.conf @@ -18,4 +18,4 @@ TeamViewer Global Settings [bin ] PK = dc5641dcd04e9cd404982e9177002743a5c27b8b39636d56e6544f76061760dadad5227c7798c2e46a0599de6daf91d9da694796488d37b98703624538b74cfe0a080b5b2398fd060fabce96f30cf90fb93e1a65883ae78d72382d62916116116a6333c9dbba14f264e54d50f887f3ab554b41cd4b74f254531d5feb936a3f96d0fce25d27e2471f29aef9b52b87644d47b12df8e33c4aad1e95c8b41fb63781d8373b6a147145a173d3646ef888ee9f2ffb51e22a90afd2e547cd44fab80959e7cb7af12a9f994069c60cb39b23310320b37009ab2df1b33dce16946971755f9ada0e78a68882c9d767b1169ab9586452ea7b1287559517075052b487ca2b0a0a1777e800def7f97d0ed552d543d5b8a69021c2731583e800f713fc827034fcb9c5119a0bf785775475fe77c079b4aa0539d87f449556fbffe5e3cd16521ef0af5205b806e51f928062121752b024471ef7ee5ee9e828585bf7f2c982111ca6508c159b51bae4af7a574d0a763078e0a278b777cbc61bb17ac1bcfc6744e9153fea69bbb917cd7ee32ca349cb068f96fcbf5d17509e77f8b925be79e6d9bbe2116211e9edafe123e2f7921891519222eadd6c866deaa9ed200183c9e2c52185330b3a3d0a43b3dbede24d6d36a9de8878f457d9396662a53ff21c64a62297b99980fa1c8b2d360037546abc2449a19411406b8d5ab9b0e634aa2e124b7d996d79ee42caad221da70bdae5ce7fcaf4159ee393703f6ac831f50a60af1fe46179c2c6cb51301b2e947a7fd8fb31e6f7294ad4e3e5aae88b9358ce160da9f95189b23d385c051428552dfb2681dbf3ab2943b04a21b949b8b163b4bc6cacdb5c309b28907e671559d3d8b6305b784d829dca5b050ebb4333ef09b5e5475c71e7d2 [bin ] SK = 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 [bin ] SRPPasswordMachineIdentifier = 2331d140c7670af7230122a130323e7b0a4dc9af0d6179e2b247bad4eb1a272d30f7344d56e2a1aad0159a6eb0369ef70146854bf3a3b9d9da302aa3fb519f88c64cd7a190541e91a4d432ea891ca731b1e2cbc060bfbe624da88e3368aaf0fffd7ea4b8e3a8f5414047fa3ee2f6ed9d -[strng] Version = "14.2.2558 " +[strng] Version = "14.2.8352 " diff --git a/ufw/before.rules b/ufw/before.rules index 0addd54..23b384e 100644 --- a/ufw/before.rules +++ b/ufw/before.rules @@ -32,14 +32,12 @@ # ok icmp codes for INPUT -A ufw-before-input -p icmp --icmp-type destination-unreachable -j ACCEPT --A ufw-before-input -p icmp --icmp-type source-quench -j ACCEPT -A ufw-before-input -p icmp --icmp-type time-exceeded -j ACCEPT -A ufw-before-input -p icmp --icmp-type parameter-problem -j ACCEPT -A ufw-before-input -p icmp --icmp-type echo-request -j ACCEPT # ok icmp code for FORWARD -A ufw-before-forward -p icmp --icmp-type destination-unreachable -j ACCEPT --A ufw-before-forward -p icmp --icmp-type source-quench -j ACCEPT -A ufw-before-forward -p icmp --icmp-type time-exceeded -j ACCEPT -A ufw-before-forward -p icmp --icmp-type parameter-problem -j ACCEPT -A ufw-before-forward -p icmp --icmp-type echo-request -j ACCEPT diff --git a/ufw/before6.rules b/ufw/before6.rules index 30e90c7..abebbe7 100644 --- a/ufw/before6.rules +++ b/ufw/before6.rules @@ -30,6 +30,11 @@ -A ufw6-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A ufw6-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +# multicast ping replies are part of the ok icmp codes for INPUT (rfc4890, +# 4.4.1 and 4.4.2), but don't have an associated connection and are otherwise +# be marked INVALID, so allow here instead. +-A ufw6-before-input -p icmpv6 --icmpv6-type echo-reply -j ACCEPT + # drop INVALID packets (logs these in loglevel medium and higher) -A ufw6-before-input -m conntrack --ctstate INVALID -j ufw6-logging-deny -A ufw6-before-input -m conntrack --ctstate INVALID -j DROP @@ -39,10 +44,9 @@ -A ufw6-before-input -p icmpv6 --icmpv6-type packet-too-big -j ACCEPT # codes 0 and 1 -A ufw6-before-input -p icmpv6 --icmpv6-type time-exceeded -j ACCEPT -# codes 0-2 +# codes 0-2 (echo-reply needs to be before INVALID, see above) -A ufw6-before-input -p icmpv6 --icmpv6-type parameter-problem -j ACCEPT -A ufw6-before-input -p icmpv6 --icmpv6-type echo-request -j ACCEPT --A ufw6-before-input -p icmpv6 --icmpv6-type echo-reply -j ACCEPT -A ufw6-before-input -p icmpv6 --icmpv6-type router-solicitation -m hl --hl-eq 255 -j ACCEPT -A ufw6-before-input -p icmpv6 --icmpv6-type router-advertisement -m hl --hl-eq 255 -j ACCEPT -A ufw6-before-input -p icmpv6 --icmpv6-type neighbor-solicitation -m hl --hl-eq 255 -j ACCEPT