* Merge with Debian; remaining changes:
- Add autopkgtests
- Include clock_gettime64 in the autopkgtests in addition to
clock_gettime, required on armhf.
* New upstream release.
* Drop patches that have been applied upstream:
- tests-rely-on-__SNR_xxx-instead-of-__NR_xxx-for-sysc.patch
- api_define__SNR_ppoll_again.patch
* Cherry-pick support for the riscv64 architecture. (Closes: #952386)
- Add riscv64_support.patch
* Include clock_gettime64 in the autopkgtests in addition to
clock_gettime, required on armhf.
* New upstream version.
* No-change rebuild to drop python3.7.
* No-change rebuild to generate dependencies on python2.
* Merge with Debian unstable (LP: 1849785). Remaining changes:
* Add autopkgtests
* Dropped changes (in upstream now):
- db-properly-reset-attribute-state.patch
- Updated to new upstream 2.4.1 version to fix security issue.
- add-log-action.patch: Minimal backport to support the
SECCOMP_RET_LOG action that was released in Linux kernel version
4.14.
* Dropped changes (in Debian now):
- debian/tests/testsuite-live:
- build utils with -pthread
- build tools/scmp_api_level
- debian/control: add valgrind to Build-Depends to get more unit tests.
- debian/*.install: change python paths.
- debian/libseccomp2.symbols: added new symbols.
- debian/rules: add dh_auto_configure before dh_auto_install to pick up
all the python versions.
- debian/patches/*: removed, all included in new version.
[ Christian Ehrhardt ]
* d/rules: fix potential FTFBS after full python3 switch
* d/t/control: drop python2 test following the removal of the package
[ Felix Geyer ]
* Remove build-dependency on valgrind for mips64el as it's broken there.
* Backport patch to define __SNR_ppoll again.
- Add api_define__SNR_ppoll_again.patch
* Replace custom patch for cython3 with the upstream fix.
[ Christian Ehrhardt ]
* New upstream release 2.4.2 for compatibility with newer kernels and
fixing FTBFS (LP: #1849785).
- drop d/p/python_install_dir.patch (now upstream)
- d/rules: adapt to python 3.8 lacking the m modifier on includes
see https://wiki.debian.org/Python/Python3.8
- d/p/tests-rely-on-__SNR_xxx-instead-of-__NR_xxx-for-sysc.patch: fix
build time test on arm64
[ Felix Geyer ]
* Drop Python 2 bindings. (Closes: #936917)
- Add cython3.patch to use the Python 3 cython variant.
* Remove build-dependency on valgrind for mipsel and x32 as it's broken
on those archs.
* Set Rules-Requires-Root: no.
* New upstream release.
- Addresses CVE-2019-9893 (Closes: #924646)
* Drop all patches for parisc arch support, merged upstream.
* Build-depend on valgrind to run more unit tests.
* Run dh_auto_configure for every python 3 version to install the extension
in the correct path.
* Update the symbols file.
* Adapt autopkgtest to new upstream version:
- Build against pthread
- Build scmp_api_level tool
* Upgrade to debhelper compat level 12.
- Add d/not-installed file
* Fix install path of the python module.
- Add python_install_dir.patch
* Add autopkgtest for python packages.
* db-properly-reset-attribute-state.patch: db: properly reset the attribute
state in db_col_reset()
* debian/tests/testsuite-live:
- build utils with -pthread
- build tools/scmp_api_level
* debian/tests/src/test-seccomp.c: #include <ctype.h>
[ Marc Deslauriers ]
* Updated to new upstream 2.4.1 version to fix security issue.
- CVE-2019-9893
* debian/patches/*: removed, all included in new version.
* debian/control: add valgrind to Build-Depends to get more unit tests.
* debian/*.install: change python paths.
* debian/libseccomp2.symbols: added new symbols.
* debian/rules: add dh_auto_configure before dh_auto_install to pick up
all the python versions.
[ Ondřej Nový ]
* d/copyright: Change Format URL to correct one
[ Helmut Grohne ]
* Fix FTCBFS: (Closes: #903556)
+ Multiarchify python Build-Depends.
+ Annotate cython dependencies with :native for now.
+ Drop noop dh_auto_build invocations.
+ Pass a suitable PYTHONPATH for python2.
+ Pass _PYTHON_SYSCONFIGDATA_NAME for python3.
* No-change rebuild to build without python3.6 support.
* Merge from Debian testing. Remaining changes:
- add-log-action.patch: Minimal backport to support the
SECCOMP_RET_LOG action that was released in Linux kernel version
4.14.
- Add autopkgtests.
* Fix FTBFS: Adapt to renamed README file. (Closes: #902767)
[ Helmut Grohne ]
* Support the nopython build profile. (Closes: #897057)
[ Felix Geyer ]
* Run upstream "live" tests in an autopkgtest.
* New upstream release. (Closes: #895417)
- Adds pkey_mprotect syscall. (Closes: #893722)
* Refresh parisc patch.
* Move libseccomp2 back to /usr/lib. (Closes: #894988)
* Make test failures cause the build to fail. (Closes: 877901)
* Build python bindings. (Closes: #810712)
* Switch to debhelper compat level 10.
* Move git repo to salsa.debian.org
* Add myself to Uploaders.
* debian/tests/data/open.fail_filter: The libseccomp autopkgtests were
failing with glibc 2.27 due to changes in glibc which resulted in
openat() exclusively being used, without any calls to open(). This
resulted in the test process exiting normally instead of being
killed, as was expected. Fix the test failure by removing openat()
from the list of whitelisted syscalls so that the process is killed.
* debian/rules: Make test failures cause the build to fail (LP: #1657425)
* add-log-action.patch: Minimal backport to support the SECCOMP_RET_LOG
action that will be released in Linux kernel version 4.14. (LP: #1567597)
* Merge with Debian unstable. Remaining Ubuntu changes:
- Add autopkgtests.
[ Martin Pitt ]
* Non-maintainer upload with Kees' consent.
[ Laurent Bigonville ]
* Ensure strict enough generated dependencies (Closes: #844496)
* Fix autopkgtest, seccomp resolution now returns negative syscall
numbers for multiplexed calls, thus direct access symbols roundtrip is
via negative numbers. E.g. 373 -> shutdown -> -113 -> shutdown.
* Merge with Debian unstable LP: #1580558. Remaining Ubuntu changes:
- Add autopkgtests. (Closes: #788577)
* Add hppa (parisc) support (Closes: #820501)
* New upstream release
* control: add Vcs-* fields
* New upstream release
+ drop all patches, applied upstream
* libseccomp2: update symbols file
* control: add myself to uploaders
* control: bump policy version
* Fix FTBFS.
* Cherrypick git-d2ca11b7cdddbba3782b1e306ceacf19e898faee.diff. (LP:
#1554098)
* Merge with Debian unstable. Remaining Ubuntu changes:
- Add autopkgtests. (Closes: #788577)
[ Martin Pitt ]
* debian/patches/add-x86-32bit-socket-calls.patch: add the newly
connected direct socket calls. (Closes: #809556)
* debian/add-membarrier.patch: add membarrier syscall.
* Backport patches for ppc/ppc64 and s390x. (Closes: #800818)
* debian/patches/add-x86-32bit-socket-calls.patch: add the newly
connected direct socket calls. (LP: #1526358)
* debian/add-membarrier.patch: add membarrier syscall. This can be dropped
once libseccomp is synced with 4.3 or higher
* Merge with Debian; remaining changes:
- add autopkgtests
* debian/control: Build on linux-any.
* Backport patches for ppc/ppc64. LP: #1427076.
* Backport patches for s390x.
* debian/control: enable mips64, mips64el, and x32 architectures,
thanks to Helmut Grohne (Closes: 797383).
* New upstream release (Closes: 793032).
* debian/control: update Homepage (Closes: 793033).
* Merge with Debian unstable. Remaining Ubuntu changes:
- Add autopkgtest (Debian #788577)
* debian/{rules,*.install}: move to /lib, thanks to Michael Biebl
(Closes: 788923).
* Merge from Debian unstable. Dropped following patches (included in
upstream):
- add-finit-module.patch
- update-x86-syscall-table.patch
- update-x86_64-syscall-table.patch
- update-arm-syscall-table.patch
- update-x32-syscall-table.patch
- sync-syscall-table-entries.patch
- sync-syscall-table-entries-fixtypo.patch
- sync-syscall-table-entries-3.17.patch
- sync-syscall-table-entries-3.19.patch
- fix-segfault-with-unknown.patch
- add-missing-arm-private-syscalls.patch
* Remaining changes:
- add autopkgtests
* New upstream release (Closes: 785428).
- debian/patches dropped: incorporated upstream.
* debian/libseccomp2.symbols: include only documented symbols.
* debian/libseccomp-dev.install: include static library (Closes: 698508).
* debian/control:
- add newly supported arm64, mips, and mipsel.
- bump standards version, no changes needed.
* add-finit-module.patch: add finit_module syscalls to x86 and x86-64
syscall tables
* update syscalls for modern kernels (skipping MIPS)
- update syscalls for 3.16:
+ update-x86-syscall-table.patch
+ update-x86_64-syscall-table.patch
+ update-arm-syscall-table.patch
+ update-x32-syscall-table.patch
+ sync-syscall-table-entries.patch
+ sync-syscall-table-entries-fixtypo.patch
- update syscalls for 3.17:
+ sync-syscall-table-entries-3.17.patch
- update syscalls for 3.19:
+ sync-syscall-table-entries-3.19.patch
- LP: #1450642
* fix-segfault-with-unknown.patch: fix segfault when find unknown syscall
* debian/patches/add-missing-arm-private-syscalls.path: add missing private
ARM syscalls
* add autopkgtests for scmp_sys_resolver and filter testing and
SYS_getrandom() testing
* New upstream release (Closes: 733293).
* copyright: add a few missed people.
* rules: adjusted for new test target.
* libseccomp2.symbols: drop accidentally exported functions.
* control:
- bump standards, no changes needed.
- add armel target
* Rebuild source package without accidental binaries (Closes: 725617).
- debian/watch: mangle upstream version check.
* debian/rules: make tests non-fatal while upstream fixes them
(Closes: 721292).
* New upstream release (Closes: 718398):
- dropped debian/patches/manpage-dashes.patch: taken upstream.
- dropped debian/patches/include-unistd.patch: not needed.
- debian/patches/testsuite-x86-write.patch: taken upstream.
- ABI bump: moved from libseccomp1 to libseccomp2.
* debian/control:
- added Arch: armhf, now supported upstream.
- added seccomp binary package for helper tools.
* Added debian/patches/manpage-typo.patch: spelling fix.
* Added debian/patches/build-ldflags.patch: fix LDFLAGS handling.
* debian/rules: enable testsuite at build time, thanks to
Stéphane Graber (Closes: 698803).
* Added debian/patches/include-unistd.patch: detect location of
asm/unistd.h correctly.
* Added debian/patches/testsuite-x86-write.patch: skip the "write"
syscall correctly on x86.
* debian/control: bump standards to 3.9.4, no changes needed.
* New upstream release.
* debian/control: only build on amd64 and i386 (Closes: 687368).
* New upstream release.
- bump ABI.
- drop build verbosity patch, use upstream V=1 instead.
* libseccomp-dev.manpages: fix build location (Closes: 682152, 682471).
* debian/patches/pkgconfig-macro.patch: use literals for macro.
* New upstream release.
- drop patches taken upstream:
- libexecdir.patch
- pass-flags.patch
* Initial release (Closes: #676257).