vyos-strongswan.git/debian/rules, branch 1.3.2 (mirror of https://github.com/vyos/vyos-strongswan.git) https://git.amelek.net/vyos/vyos-strongswan.git/atom?h=1.3.2 2019-01-10T09:42:40+00:00 Disable building the charon-nm package, which we do not use. 2019-01-10T09:42:40+00:00 Kim Hagen kim.sidney@gmail.com 2019-01-10T09:42:40+00:00 urn:sha1:5db01ad9badcea69bbab2006859ab16d7a5e5213 The practical reason for removing it completely for the time being is that libnm is not in jessie. enable chapoly plugin 2018-10-01T10:02:45+00:00 Yves-Alexis Perez corsac@debian.org 2018-09-24T20:45:08+00:00 urn:sha1:37dae128e0447b89302577a7479eb6bc9e887f9d closes: #814927 d/rules: Remove trailing whitespaces 2018-10-01T08:21:50+00:00 Ondřej Nový onovy@debian.org 2018-10-01T08:21:50+00:00 urn:sha1:aebc61cb39283f2d4c471c18823ca6fcdfea5d79 d/rules: drop parallel and autoreconf from dh, done with compat 10 2018-04-11T16:02:04+00:00 Yves-Alexis Perez corsac@debian.org 2018-04-11T16:02:04+00:00 urn:sha1:f2399b852c3bc5757570b1376a807de6f93cd5a3 strongswan-libcharon: add bypass-lan plugin 2018-01-03T11:00:48+00:00 Yves-Alexis Perez corsac@corsac.net 2018-01-03T09:44:25+00:00 urn:sha1:fd2deca589bc3d067f1cbfe59a25d3a90625e02b not loaded by default debian/rules: explicitly enable tpm plugin 2017-11-21T11:12:10+00:00 Yves-Alexis Perez corsac@corsac.net 2017-11-21T10:18:22+00:00 urn:sha1:c5043bccb2f23b6fb6143335d25d89c1ebe97679 only use dh_missing --fail-missing when doing an architecture dependent 2017-09-03T17:24:49+00:00 Yves-Alexis Perez corsac@corsac.net 2017-09-03T17:24:23+00:00 urn:sha1:4d2531e4e5a1c4aa11ffc7a51cea4ff1c2591694 packages. replace DEB_BUILD_* by DEB_HOST_* when needed, fix FTCBFS, for example when building for ppc64el on x86. Thanks Helmut Grohne. closes: #866669 2017-06-30T19:46:59+00:00 Yves-Alexis Perez corsac@corsac.net 2017-06-30T19:46:59+00:00 urn:sha1:debb2443d93d74388b2330341a787e5ba420909d Install AppArmor profiles for /usr/sbin/swanctl and /usr/sbin/charon-systemd. 2017-06-30T11:52:01+00:00 Gerald Turner gturner@unzane.com 2017-05-12T00:15:09+00:00 urn:sha1:b8ac1d49802dbadecb1805baf4d6ca0ac7735ef0 The AppArmor profile for charon-systemd was copied from the existing profile for /usr/lib/ipsec/charon without much scrutiny other than testing basic IPsec tunnels (no fancy plugin options were tested). It appears that the team at Canonical that had written the /usr/lib/ipsec/charon policy had done extensive testing with several plugins, and it seems likely that applying the same profile to charon-systemd will allow those plugins to continue to work. The AppArmor profile for swanctl was written from scratch and well tested. It turns out that swanctl unnecessarily loads plugins by default, so a bit of frivolous access has been granted. restrict permissions on swanctl folder containing private material 2017-06-30T11:10:32+00:00 Yves-Alexis Perez corsac@corsac.net 2017-06-30T11:10:32+00:00 urn:sha1:60d600ad7af636d2177eda3870c9964405a11617