rsbac-admin (1.5.6~10aatgv1) unstable; urgency=low

  * Change version to contain mp string

 -- Amon Ott <ao@m-privacy.de>  Wed, 18 Jun 2025 12:31:00 +0200

rsbac-admin (1.5.6~10) unstable; urgency=low

  * Rebuild with separate SBOM packages

 -- Amon Ott <ao@m-privacy.de>  Thu, 16 Jan 2025 13:30:00 +0100

rsbac-admin (1.5.6~9) unstable; urgency=low

  * Rebuild with sbom data

 -- Amon Ott <ao@m-privacy.de>  Tue, 07 Jan 2025 15:01:00 +0100

rsbac-admin (1.5.6~8) unstable; urgency=low

  * RSBAC git commit 636104ce2efab7bad0b0e4527ad2e9dccc7c1a52
    Add missing R_APPEND_OPEN to RSBAC_IPC_REQUEST_VECTOR

 -- Amon Ott <ao@m-privacy.de>  Fri, 06 Dec 2024 09:44:00 +0100

rsbac-admin (1.5.6~7) unstable; urgency=low

  * debian/rules:
    - no longer build with gcc-9
  * debian/control:
    - do not Build-Depend on libctf0, gcc-9
  * RSBAC git commit b7e995a7696bf5782e54e320862f095ffa01fd5d
    main/tools/Makefile: put $(LIBS) last in CC line to fix linker problems
  * RSBAC git commit 275a3ea62ff0767f852a9abc3f7cf7e0010f1391
    Fix compile warnings in acl_rights, acl_tlist, rc_get_eff_rights_fd, rsbac_useradd
  * RSBAC git commit 026a14672cb30d3656224bfe98b1cab43f07269f
    Extend RSBAC_IPC_REQUEST_VECTOR with TRACE, TRUNCATE, MAP_EXEC
  * RSBAC git commit 60c80c5d38a5bb03a12bc4e889f125eb5b13fe64
    In nss and pam Makefile, put $(LIBS) last in CC line to fix linker problems

 -- Amon Ott <ao@m-privacy.de>  Thu, 14 Nov 2024 12:02:00 +0100

rsbac-admin (1.5.6~6) unstable; urgency=low

  * RSBAC git commit c38afa51f698ea2eac6f17b150f3ffcb8de983eb
    Add request types GET_XATTR and MODIFY_XATTR for FD targets.

 -- Amon Ott <ao@m-privacy.de>  Mon, 28 Oct 2024 13:17:00 +0100

rsbac-admin (1.5.6~5) unstable; urgency=low

  * RSBAC git commit beae8d86826fcbee62fcd91d3f7b2538861715ff
    rc_set_item: avoid dead loop when last param in a stdin line is empty.
    Also, improve verbose output in stdin mode.

 -- Amon Ott <ao@m-privacy.de>  Fri, 21 Apr 2023 11:09:00 +0200

rsbac-admin (1.5.6~4) unstable; urgency=low

  * debian/rules:
    - remove obsolete programs
  * New debian/rsbac-admin.postinst:
    - rm -f /usr/bin/backup_all_no_acl
  * debian/rsbac-admin.install:
    - comment backup_all, *acl*, mac_*, user_aci
  * debian/rsbac-admin.links:
    - comment backup_all, *acl*, mac_*, user_aci

 -- Amon Ott <ao@m-privacy.de>  Thu, 16 Feb 2023 12:24:00 +0100

rsbac-admin (1.5.6~3) unstable; urgency=low

  * debian/rsbac.conf:
    - RSBACMOD="GEN FF RC AUTH CAP JAIL RES UDF"

 -- Amon Ott <ao@m-privacy.de>  Wed, 16 Feb 2022 09:49:00 +0100

rsbac-admin (1.5.6~2) unstable; urgency=low

  * RSBAC git commit 8271d7d0d537009b3ad68a483246cfa9a19959e6
    Remove broken rklogd.
  * RSBAC git commit f9184a30fff803044cca4a3ff522c238bc32e13a
    Always build against in-tree libs, add TRACE request for FD and DEV targets.
  * RSBAC git commit be7aee5afb87ed65196187223f926637993642dd
    Remove leftovers of RSBAC klogd.
  * debian/rules:
    - ln -sf gcc-9 /usr/bin/gcc
  * debian/control:
    - Build-Depend on gcc-9

 -- Amon Ott <ao@m-privacy.de>  Mon, 06 Dec 2021 14:48:00 +0100

rsbac-admin (1.5.6~1) unstable; urgency=low

  * RSBAC git commit 42da9abc5a63143c1b463aea2ca89846cfc9e04d
    Add IPC memfd target and bump version to 1.5.6 to reflect that.
    Add RENAME to IPC request group.

 -- Amon Ott <ao@m-privacy.de>  Wed, 22 Sep 2021 08:20:00 +0200

rsbac-admin (1.5.5~10) unstable; urgency=low

  * debian/control:
    - explicitely depend some packages on librsbac1 (= ${binary:Version})

 -- Amon Ott <ao@m-privacy.de>  Tue, 22 Jun 2021 12:26:00 +0200

rsbac-admin (1.5.5~9) unstable; urgency=low

  * debian/control:
    - build package rsbac-admin for amd64 only

 -- Amon Ott <ao@m-privacy.de>  Mon, 21 Jun 2021 08:21:00 +0200

rsbac-admin (1.5.5~8) unstable; urgency=low

  * RSBAC git commit 6ebe6a622cd277e9472234b339a73fcb9531fafc
    attr_get_user: add param -Z to truncate names at first invalid UTF-8 char

 -- Amon Ott <ao@m-privacy.de>  Wed, 16 Jun 2021 11:28:00 +0200

rsbac-admin (1.5.5~7) unstable; urgency=low

  * RSBAC git commit 557743b2f3b925dc672997731ddb977645e8e727
    rsbac_usershow: add param -Z to truncate all names at first invalid UTF-8 char
    Also skip users with invalid usernames in lists.

 -- Amon Ott <ao@m-privacy.de>  Wed, 16 Jun 2021 09:45:00 +0200

rsbac-admin (1.5.5~6) unstable; urgency=low

  * RSBAC git commit 8d4952bbf7178706d7bc41d7d407c75ed241ea85
    rsbac_usershow: add parameter -d to count all users to be listed

 -- Amon Ott <ao@m-privacy.de>  Fri, 04 Jun 2021 07:49:00 +0200

rsbac-admin (1.5.5~5) unstable; urgency=low

  * RSBAC git commit a5d5fb1980502f3145e83db09a5f60e929745d3a
    rsbac_usershow: add "-i string" to only list users with string in name or fullname

 -- Amon Ott <ao@m-privacy.de>  Wed, 02 Jun 2021 13:55:00 +0200

rsbac-admin (1.5.5~4) unstable; urgency=low

  * debian/rules:
    - do not build rklogd
  * RSBAC git b52c7c94c7fa57ee033cbe77685f96c883192e16
    rklogd, rklogd-viewer: compile fixes
  * RSBAC git 908e48b15d29f69ef181b08abfd89e6dd3070d81
    rsbac_usershow: add parameters -c and -C for partial or full CSV lists of users.
    Add parameter -o to append :pseudo to CSV list.
    Add parameters -n and -x to set min and max uids to list.
    Add parameter -X n to set extra uid to list, can be set max. 20 times
  * RSBAC git a5e2244073b2dc5ee45d874b6e8167df187070bd
    rsbac_usershow: add parameter -Y to skip uids from all user list

 -- Amon Ott <ao@m-privacy.de>  Wed, 02 Jun 2021 12:42:00 +0200

rsbac-admin (1.5.5~3) unstable; urgency=low

  * RSBAC git afff3b74be800a8213b27a895d7a35bbae34e7f8
    Also support very old CAP bitstring length 29 for backwards compatibility.

 -- Amon Ott <ao@m-privacy.de>  Wed, 24 Mar 2021 09:43:00 +0100

rsbac-admin (1.5.5~2) unstable; urgency=low

  * RSBAC git aefcf0da5f0ecab4ad61556cffddd654c26e4cb2
    Support capabilities up to CHECKPOINT_RESTORE.

 -- Amon Ott <ao@m-privacy.de>  Mon, 22 Mar 2021 09:32:00 +0100

rsbac-admin (1.5.5~1) unstable; urgency=low

  * debian/rules:
    - export VERBOSE = 1
    - export CFLAGS += -mtune=corei7 -flto=8 -ffat-lto-objects
    - export CXXFLAGS += -mtune=corei7 -flto=8 -ffat-lto-objects
    - export LDFLAGS += -flto=8 -ffat-lto-objects
  * RSBAC git 695bc72e53f898ab4b635cb0f65c01b40190abcd
    Remove PAX and DAZ support. Bump version to 1.5.5 to reflect that.
  * RSBAC git 349c53ca619eeee9d2be39a0a857598e1ffd1140
    rsbac_usermod: show error if adding or removing of extra groups fails
  * RSBAC git 2a2041f7d97d131be87f01c9e8bf2a96b65cff8f
    In Makefiles, append CFLAGS etc, not overwrite, and use some existing values.

 -- Amon Ott <ao@m-privacy.de>  Fri, 29 Jan 2021 14:55:00 +0100

rsbac-admin (1.5.4~7) unstable; urgency=low

  * RSBAC git b6436c01ab89ec7519744f7efd0fcfbdfa4037f3
    Add SCD target perf.

 -- Amon Ott <ao@m-privacy.de>  Mon, 16 Mar 2020 10:09:00 +0100

rsbac-admin (1.5.4~6) unstable; urgency=low

  * RSBAC git ce4dd8fe7769900c09ca37e3d492943a7abe4633
    attr_back_user: do not backup RES default user separately, already convered.

 -- Amon Ott <ao@m-privacy.de>  Fri, 13 Dec 2019 12:05:00 +0100

rsbac-admin (1.5.4~5) unstable; urgency=low

  * RSBAC git 6ca3b8908d211462330c2fa4db40d9c718229792
    Fix ttl and RES limit value interpretation without suffix.

 -- Amon Ott <ao@m-privacy.de>  Wed, 11 Dec 2019 10:02:00 +0100

rsbac-admin (1.5.4~4) unstable; urgency=low

  * RSBAC git 31ffdfce689f906c15173695c64968016b361013
    Allow to specify ttls with h d and RES limits with k m g suffixes.
    Hours, days, kilo (1024), mega, giga respectively.

 -- Amon Ott <ao@m-privacy.de>  Wed, 11 Dec 2019 09:01:00 +0100

rsbac-admin (1.5.4~3) unstable; urgency=low

  * RSBAC git 463e84cc0fc0bf111e81f5dfe8ec4c688294bd3a
    Support all hash types for one-time passwords.
  * RSBAC git 799d42780aa76a366833985b47b8e5012e1e7f77
    Use new RES res_min and res_max syscall interfaces for users and files.
    If these are not available, fall back to old syscalls.
    Add ttl support for res_min and res_max.

 -- Amon Ott <ao@m-privacy.de>  Tue, 10 Dec 2019 15:01:00 +0100

rsbac-admin (1.5.4~2) unstable; urgency=low

  * RSBAC git e4c8e53c3fc480a3cbb580d35af2603dd4099209
    rsbac_process_menu: add AUTH capability support and show command line
  * RSBAC git c1b7f34ba45b06c68734390fca2198dea7ada41b
    rsbac_groupshow: only warn about fallback to old password, if verbose.

 -- Amon Ott <ao@m-privacy.de>  Tue, 03 Dec 2019 09:33:00 +0100

rsbac-admin (1.5.4~1) unstable; urgency=low

  * RSBAC git caa55ff39601302feade948c5b1cdaa3293492e5
    Support different password hashes with extra parameter -A hash-algo.
    Change version to 1.5.4 for new functionality.
    The code tries to stay backwards compatible while adding better security for
    passwords. As long as passwords are hashed with sha1, older RSBAC versions can
    still use them.
  * RSBAC git 682620788c214eb8c3359a33e4f98a3fbd7d49b8
    rsbac_usershow: only warn about fallback to old password, if verbose.
    Also bump debian/changelog version to 1.5.4 for new password code.

 -- Amon Ott <ao@m-privacy.de>  Mon, 02 Dec 2019 09:22:00 +0100

rsbac-admin (1.5.3~3) unstable; urgency=low

  * RSBAC git 7f4b66ac27a475092393524ee1c7c49f894a5557
    Add udf_do_check value "remoteonly" to only check, if process has remote_ip set.

 -- Amon Ott <ao@m-privacy.de>  Wed, 23 Oct 2019 12:48:00 +0200

rsbac-admin (1.5.3~2) unstable; urgency=low

  * RSBAC git f679e0653c6a6d8915158165526efa258eca25b6
    attr_get_file_dir: add missing sys/sysmacros.h include
    Thanks to igraltist again.
  * RSBAC git 71849b4770fe900685c5b8a99e32ff482fdad848
    rc_set_item: add batch mode with parameter -
    Now you can pipe the result of "rc_get_item -p backup" into "rc_set_item -"
    for an enormous speedup with big policies. It also accepts an additional "-v"
    for verbose output.

 -- Amon Ott <ao@m-privacy.de>  Wed, 14 Aug 2019 14:56:00 +0200

rsbac-admin (1.5.3~1aammp1) unstable; urgency=low

  * RSBAC git f986b6bf9c31f0b3236eddfcbfa94424c6b845fb
    net_temp: support INET6/IPv6 addresses.
  * RSBAC git f66befb896007cfdac339b7685b0626933971680
    Change version to 1.5.3 for IPv6 support.
  * RSBAC git f0f17b0a0ee2e815db956ec4a74258a22dcab55d
    Update main/tools/Changes to 1.5.3
  * RSBAC git 3c5c4980766a83111ec793583c5303ef64817670
    Add SCD target bpf.
  * RSBAC git 1f0d16a28f7cfbd026d9da26e7cee479e24ee4d2
    Update debian/* and fix indentation and Makefile to build cleanly on Debian stretch
  * RSBAC git 279b36098ec2979d8a1077c62cb82f7382540037
    rsbac_write: now only triggers disk writing, success return value is always 0.
  * RSBAC git 181505734c773f5fc1c8d1abc02562b4db8461ed
    Fix some compiler warnings by gcc 8.

 -- Amon Ott <ao@m-privacy.de>  Wed, 06 Mar 2019 12:43:00 +0100

rsbac-admin (1.5.2~1aammp1) unstable; urgency=low

  * Rebuild against new libpam

 -- Amon Ott <ao@m-privacy.de>  Fri, 24 Aug 2018 15:13:00 +0200

rsbac-admin (1.5.2~1aajmp2) unstable; urgency=low

  * RSBAC git deaf059b586ff6c090563a79d58398522277b7d6
    rc_get_item: in backup and print mode, handle syscall errors correctly.
    Do not report never and always value syscall error.

 -- Amon Ott <ao@m-privacy.de>  Tue, 07 Nov 2017 11:13:00 +0100

rsbac-admin (1.5.2~1aajmp1) unstable; urgency=low

  * RSBAC git 748d48f71d7a3d2d8f094d90710af4da355cd396
    Support RC log force feature to request logging per role, type, request.
    Change version to 1.5.2.

 -- Amon Ott <ao@m-privacy.de>  Wed, 11 Oct 2017 11:41:00 +0200

rsbac-admin (1.5.1+1aajmp3) unstable; urgency=low

  * RSBAC git f6e42463230ab9b5bf8050fa0fde4f95b8be5896
    pam: only use errno after syscall, if usable, otherwise result itself.

 -- Amon Ott <ao@m-privacy.de>  Fri, 07 Jul 2017 13:08:00 +0200

rsbac-admin (1.5.1-1aajmp2) unstable; urgency=low

  * RSBAC git bf394fd9bba335ae858d6aa5dccad1c52e678cfd
    If rsbac_um_auth_name() returns non-0, errno == 0 also means unknown user.

 -- Amon Ott <ao@m-privacy.de>  Thu, 13 Apr 2017 11:04:00 +0200

rsbac-admin (1.5.1-1aajmp1) unstable; urgency=low

  * RSBAC git 61da147bdd7cecf81b669bb541788a9ccd87fe7c
    Add rsbac_jail parameter -T to set flag JAIL_allow_process_by_parent.
  * RSBAC git 7240c19af2c5f7af4dd65cf627d695e0c491122c
    pam_rsbac: also handle error ENOENT.

 -- Amon Ott <ao@m-privacy.de>  Fri, 07 Apr 2017 13:06:00 +0200

rsbac-admin (1.5.1-1aahmp1) unstable; urgency=low

  * control: remove Conflicts: kernel-tightgate-pro (< 4.4.20-2)
  * RSBAC git ca3ceb0db5bf28f10cbe1349153054e4ec7b9492
    Call RSBAC syscalls with API version, not tools version.
    To let these tools run correctly with kernel RSBAC versions 1.4 and 1.5.0,
    we use API version 1.4.10.
    Add new syscalls rsbac_api_min_version() and rsbac_api_max_version() to
    see what the kernel supports. Assume 1.4.0 resp. 1.5.0, if not avalaible.
    Extend rsbac_version tool to show all these numbers.
  * RSBAC git bfde077a63e50394de10d919acab4496c03808fd
    Change RSBAC version to 1.5.1 to reflect API version support.

 -- Amon Ott <ao@m-privacy.de>  Mon, 19 Sep 2016 10:36:00 +0200

rsbac-admin (1.5.0-1aahmp1) unstable; urgency=low

  * control: Conflicts: kernel-tightgate-pro (< 4.4.20-2)
  * RSBAC git 21cdbcb5ef03369562907c281db559ba30cc303e
    Fix typo in German translation.
  * RSBAC git e1fa798de0ec0634a93ddb2374ee8e090b90f699
    Change RSBAC version to 1.5.0.

 -- Amon Ott <ao@m-privacy.de>  Tue, 13 Sep 2016 15:36:00 +0200

rsbac-admin (1.4.10-1aahmp1) unstable; urgency=low

  * RSBAC git ffe386faa8de7bf846a14c443b5a3aaa2c3b4c7c
    Remove dac_disable, add allow_write_exec attribute.
  * RSBAC git 1d6d20639ed61f7d513d66042e4696753860a85c
    Update version to 1.4.10.
  * RSBAC git d56d9db202252197bd9c44b33707748548c27dad
    Add allow_write_exec value relocate.
  * RSBAC git abdbd7d42973323d8ec9c2667044357f7a5d3b05
    rsbac_process_menu: also show allow_write_exec

 -- Amon Ott <ao@m-privacy.de>  Wed, 03 Aug 2016 12:17:00 +0200

rsbac-admin (1.4.9-1aahmp3) unstable; urgency=low

  * control: mark rsbac-admin as Multi-Arch: foreign

 -- Amon Ott <ao@m-privacy.de>  Wed, 06 Apr 2016 11:15:00 +0200

rsbac-admin (1.4.9-1aahmp2) unstable; urgency=low

  * RSBAC git 7d4e0d58f4491cc66455ebea198d11f866e92458
    nss: clear allocated memory and unions before use.
  * RSBAC git 06835c1f1c3b5fccb429cb211c87b673acddc7d1
    Use const char * for syscall parameters.

 -- Amon Ott <ao@m-privacy.de>  Tue, 29 Mar 2016 09:03:00 +0200

rsbac-admin (1.4.9-1aahmp1) unstable; urgency=low

  * rules: CFLAGS += -D_FILE_OFFSET_BITS=64
  * control: Build-Depend on libtool-bin
  * RSBAC git c7421ec2b1ea28af078ce0c93670b2770488f781
    Update version to 1.4.9.
  * RSBAC git 882ba3c5b29d70413999ea95354d104789ef4927
    pam_rsbac.c: check conv function pointer returned from PAM.
    Thanks to Frank LENORMAND for the detailed analysis.
  * RSBAC git 9a46dd8c6c8a39bdfe72f207339917a995e2074d
    Fix some compiler warnings.
  * RSBAC git 698b578f418d586305958467285df914654f3a1d
    Build with -D_FILE_OFFSET_BITS=64

 -- Amon Ott <ao@m-privacy.de>  Tue, 26 Jan 2016 08:58:00 +0100

rsbac-admin (1.4.8-1aahmp3) unstable; urgency=low

  * Change to Multi-Arch

 -- Amon Ott <ao@m-privacy.de>  Thu, 17 Sep 2015 15:23:00 +0200

rsbac-admin (1.4.8-1aahmp2) unstable; urgency=low

  * RSBAC git e8d5b9adbdaef2987d74f1b945e01c2637dd7083
    helpers.c: check nonumeric in both cases of rsbac_get_uid_name().

 -- Amon Ott <ao@m-privacy.de>  Mon, 08 Dec 2014 15:13:00 +0100

rsbac-admin (1.4.8-1aahmp1) unstable; urgency=low

  * Rebuild for 2.0

 -- Amon Ott <ao@m-privacy.de>  Thu, 06 Nov 2014 12:55:00 +0100

rsbac-admin (1.4.8-1aaemp11) unstable; urgency=low

  * main/pam/pam_rsbac.c: do not log session info

 -- Amon Ott <ao@m-privacy.de>  Tue, 28 Oct 2014 14:16:00 +0100

rsbac-admin (1.4.8-1aaemp10) unstable; urgency=low

  * RSBAC git 71ea94d205636b50578c54504f2c7af61636300c
    Add parameter -z to not accept uids for usernames to various other tools.
    Remove some unused variables on the fly.

 -- Amon Ott <ao@m-privacy.de>  Thu, 16 Oct 2014 12:01:00 +0200

rsbac-admin (1.4.8-1aaemp9) unstable; urgency=low

  * RSBAC git 7d938184b77820de7df5c5a36bf0c7dbc1cc43ad
    rsbac_usershow etc: add parameter -z to not accept uids for usernames.

 -- Amon Ott <ao@m-privacy.de>  Wed, 15 Oct 2014 14:13:00 +0200

rsbac-admin (1.4.8-1aaemp8) unstable; urgency=low

  * RSBAC git 42e22619de0df4fd4aba8fa10acefad0cdbe3a04
    attr_set_user: when setting RES positional value, get old array with
    inherit.
  * RSBAC git f20a4bfdb92e7d0b4c871aba82cc7eeebf0f8ec0
    attr_get_user: when getting RES positional value, use inherit value (-e).

 -- Amon Ott <ao@m-privacy.de>  Thu, 25 Sep 2014 16:01:00 +0200

rsbac-admin (1.4.8-1aaemp7) unstable; urgency=low

  * RSBAC git a6eb2febc574da2209e975629eda7822d07bfce2
    helpers.c: strcaptokcap(): initialize vector before filling.

 -- Amon Ott <ao@m-privacy.de>  Wed, 10 Sep 2014 12:05:00 +0200

rsbac-admin (1.4.8-1aaemp6) unstable; urgency=low

  * RSBAC git a7486df22afdb8fed9c275ea3e9d78641abe8563
    rsbac_jail flag -F (JAIL_allow_netdev_mod_system), MODIFY_SYSTEM_DATA on
    NETDEV.

 -- Amon Ott <ao@m-privacy.de>  Tue, 27 May 2014 16:00:00 +0200

rsbac-admin (1.4.8-1aaemp5) unstable; urgency=low

  * RSBAC git 40fcac41b684b3336ed554ef94d25f2fc5dccb7c
    attr_back_user: pseudo must not be shown as negative
  * RSBAC git c88c80bf43a0fa14fd81bf5a948aded78aca8eb4
    attr_back_user: only backup RES attributes, if RES module is enabled.

 -- Amon Ott <ao@m-privacy.de>  Tue, 04 Mar 2014 15:05:00 +0100

rsbac-admin (1.4.8-1aaemp4) unstable; urgency=low

  * RSBAC git aa035bb8481bfdc6769fefdb9fe14a167cdfaa98
    rsbac_usershow: add -P = short list all users with pseudo and full names

 -- Amon Ott <ao@m-privacy.de>  Mon, 03 Mar 2014 14:12:00 +0100

rsbac-admin (1.4.8-1aaemp3) unstable; urgency=low

  * RSBAC git 0af7f1f3caf43a642d5f0fa16b64991e0a538c3c
    Add RC and ACL target and RC special right for UDF protection.

 -- Amon Ott <ao@m-privacy.de>  Wed, 27 Nov 2013 12:10:00 +0100

rsbac-admin (1.4.8-1aaemp2) unstable; urgency=low

  * Add UDF to rsbac.conf

 -- Amon Ott <ao@m-privacy.de>  Mon, 25 Nov 2013 16:29:00 +0100

rsbac-admin (1.4.8-1aaemp1) unstable; urgency=low

  * Update to RSBAC 1.4.8 git c3134853ef35052a79231d6d4680bfdfad4c61c5

 -- Amon Ott <ao@m-privacy.de>  Thu, 21 Nov 2013 12:20:00 +0100

rsbac-admin (1.4.5-1aaemp5) unstable; urgency=low

  * git 26811cdb30281ae0d007b2df91fbd72bf0b5ef55
    Add WRITE_OPEN to IPC request groups.

 -- Amon Ott <a.ott@m-privacy.de>  Fri, 19 Jul 2013 13:41:00 +0200

rsbac-admin (1.4.5-1aaemp4) unstable; urgency=low

  * git 88520bc6fe6027d398b08efeda678a93e09b6a3c
    Ensure that user parameters takes as numeric really on contain chars
    0-9.

 -- Amon Ott <ao@m-privacy.de>  Thu, 12 Apr 2012 12:29:00 +0200

rsbac-admin (1.4.5-1aaemp3) unstable; urgency=low

  * git 2019f00bbbc46380a3e77dc4bd443ba16f231faf:
    Improve given user parameter value check: Only use as numeric, if it
    really is.

 -- Amon Ott <ao@m-privacy.de>  Tue, 11 Oct 2011 10:55:00 +0200

rsbac-admin (1.4.5-1aaemp2) unstable; urgency=low

  * RSBAC repo git b41d52c35efdbdc7c40a86c2a0e07d4916886bd2:
    Fix user listings in rsbac_usershow and add new -B parameter for
    shell+full name.
    Update German translations.

 -- Amon Ott <ao@m-privacy.de>  Thu, 25 Aug 2011 10:44:00 +0200

rsbac-admin (1.4.5-1aaemp1) unstable; urgency=low

  * Update to current RSBAC repo git
    573e59162cfc77235286dd90ffd1c9ee73b5bd64

 -- Amon Ott <ao@m-privacy.de>  Fri, 19 Aug 2011 14:29:00 +0200

rsbac-admin (1.4.3-1aaemp4) unstable; urgency=low

  * git 357935ab340239ed16aef20e157cb51e4c64f6a7:
    Support password history length settings in rsbac_user* tools with -i.

 -- Amon Ott <ao@m-privacy.de>  Tue, 26 Apr 2011 12:19:00 +0200

rsbac-admin (1.4.3-1aaemp3) unstable; urgency=low

  * git c17c150d2615d95302999ad02bf320455fe4c3c6:
    Fix off-by-one string allocation size errors in useradd and usermod.

 -- Amon Ott <ao@m-privacy.de>  Wed, 02 Mar 2011 12:08:00 +0100

rsbac-admin (1.4.3-1aaemp2) unstable; urgency=low

  * Call startrsbacrestore in new debian/libnss-rsbac2.postinst

 -- Amon Ott <ao@m-privacy.de>  Fri, 28 Jan 2011 08:48:00 +0100

rsbac-admin (1.4.3-1aaemp1) unstable; urgency=low

  * git 64b13042a2e0333c8752b14e28b0c4742114ff61:
    Fix pseudo output.

 -- Amon Ott <ao@m-privacy.de>  Wed, 05 Jan 2010 10:29:00 +0100

rsbac-admin (1.4.3-1aacmp8) unstable; urgency=low

  * git 76bb6844d416d4f29a33ef7de189945f408e4710:
    Add rsbac_jail parameter -K for allow_netlink flag.

 -- Amon Ott <ao@m-privacy.de>  Mon, 13 Sep 2010 13:18:00 +0200

rsbac-admin (1.4.3-1aacmp7) unstable; urgency=low

  * git 6511a2feaed27415272ee489fe753cd2ffb958cc:
    Follow pam_*_session flag PAM_SILENT.

 -- Amon Ott <ao@m-privacy.de>  Wed, 08 Sep 2010 16:04:00 +0200

rsbac-admin (1.4.3-1aacmp6) unstable; urgency=low

  * git c92320fc14b4049e786b4e2facafad7638490e20:
    Make -G, -H and -I work in rsbac_useradd and rsbac_usermod with multiple
    users.
  * git d6271b36b12587d573c64812a231cc6ee8603297:
    Correct string name in usermod -I.
  * git df29ce624b1a8ee3c567a12ffc1f95b03da17ea8:
    Fix double use of iterator i, use j.
  * git de2700285cfde2dd7111cfbac192e7f5b8e24d12:
    New rsbac_usershow option to list users with full name or with shell.
    Update German translations.
  * git d63ce55707b0ad452eb461f94525eced7b8c7a2f:
    Sort group member list and extra group membership list.
  * git d4ddad439edac26bd8d3f40f778596f35c5537b1:
    Allow to limit attr_back_user to some modules with -M.

 -- Amon Ott <ao@m-privacy.de>  Thu, 10 Jun 2010 12:55:00 +0200

rsbac-admin (1.4.3-1aacmp5) unstable; urgency=low

  * git b24d8c877038cdbb349514aebca04905dbee4982:
    - Fix locking in NSS lib: lockups in getpwent() etc. without setpwent() etc.
  * git 68530201c77993e1f23469a10c75059071119db1:
    - Compile with -Wall and fix several compile warnings.

 -- Amon Ott <ao@m-privacy.de>  Tue, 04 May 2010 11:04:00 +0200

rsbac-admin (1.4.3-1aacmp4) unstable; urgency=low

  * Add RSBAC git d5f0ed8569f500a0cbae49cff684ce9ea3f62798:
    Support new request type MOVETO on DIR targets: Move FD object into this dir

 -- Amon Ott <ao@m-privacy.de>  Fri, 16 Apr 2010 10:24:00 +0200

rsbac-admin (1.4.3-1aacmp3) unstable; urgency=low

  * Update to RSBAC git 0e8a0163eff1c4b831aeff185d193c08b5890424:
    - Add -- flag to most tools to stop flag processing.
    - Update German translations.
    - pam_rsbac: check old password before asking for new one.

 -- Amon Ott <ao@m-privacy.de>  Wed, 07 Apr 2010 14:17:00 +0200

rsbac-admin (1.4.3-1aacmp2) unstable; urgency=low

  * Update to RSBAC svn 379:
    - Add syscall list_ta_begin_name() to begin an named transaction.
    - Use new syscall, if name was given for new transaction.
    - Add ACL group backup to backup_all.
    - Give more precise PAM error message for RSBAC_EEXPIRED.

 -- Amon Ott <ao@m-privacy.de>  Mon, 07 Dec 2009 16:37:00 +0100

rsbac-admin (1.4.3-1aacmp1) unstable; urgency=low

  * Update to RSBAC svn 375:
    - nss: only require 10 extra bytes, if virtual set, and add missing buflen
      check.
    - Bump to 1.4.3

 -- Amon Ott <ao@m-privacy.de>  Thu, 12 Nov 2009 17:37:00 +0100

rsbac-admin (1.4.2aacmp6) unstable; urgency=low

  * Update to RSBAC svn revision 373:
    - Fix subrole / subtype number read in rc_get_item.
    - Sort assign_roles etc. list in rsbac_rc_role_menu.

 -- Amon Ott <ao@m-privacy.de>  Wed, 26 Aug 2009 09:14:00 +0200

rsbac-admin (1.4.2aacmp5) unstable; urgency=low

  * Update to RSBAC svn revision 371:
    - Add gid replacement code to rsbac_groupadd and rsbac_groupshow.
    - Small verbose output fixes.

 -- Amon Ott <ao@m-privacy.de>  Wed, 08 Jul 2009 15:22:00 +0200

rsbac-admin (1.4.2aacmp4) unstable; urgency=low

  * Update to RSBAC svn revision 370:
    - Also backup empty extra group list.

 -- Amon Ott <ao@m-privacy.de>  Tue, 07 Jul 2009 17:17:00 +0200

rsbac-admin (1.4.2aacmp3) unstable; urgency=low

  * Update to RSBAC svn revision 369:
    - New rsbac_usermod parameter -I to set a list of extra groups.
    - Use -I to backup extra groups in rsbac_usershow backup mode.

 -- Amon Ott <ao@m-privacy.de>  Tue, 07 Jul 2009 16:15:00 +0200

rsbac-admin (1.4.2aacmp2) unstable; urgency=low

  * Really update to RSBAC svn 367.

 -- Amon Ott <ao@m-privacy.de>  Wed, 01 Jul 2009 16:30:00 +0200

rsbac-admin (1.4.2aacmp1) unstable; urgency=low

  * Update to RSBAC svn 367.

 -- Amon Ott <ao@m-privacy.de>  Wed, 24 Jun 2009 16:30:00 +0200

rsbac-admin (1.4.1aacmp2) unstable; urgency=low

  * Complete copy of RSBAC svn 357.

 -- Amon Ott <ao@m-privacy.de>  Fri, 13 Feb 2009 17:22:00 +0100

rsbac-admin (1.4.1-aacmp1) unstable; urgency=low

  * Bump version to current release
  * Copy rc_get_current_role.c from rsbac svn 356:
    Add script mode with -s to rc_get_current_role.

 -- Amon Ott <ao@m-privacy.de>  Tue, 10 Feb 2009 12:17:00 +0100

rsbac-admin (1.4.0+aacmp4) unstable; urgency=low

  * Include libpam-rsbac .mo files
  * Fix gettext domain
  * Add #!/bin/bash to debian/librsbac1.postinst
  * Port rsbac svn rev. 336:
    Add SCD target videomem

 -- Amon Ott <ao@m-privacy.de>  Thu, 05 Feb 2009 15:38:00 +0100

rsbac-admin (1.4.0+aacmp3) unstable; urgency=low

  * Copy rc_get_item.c from svn rev. 341

 -- Amon Ott <ao@m-privacy.de>  Tue, 27 Jan 2009 09:58:00 +0100

rsbac-admin (1.4.0+aacmp2) unstable; urgency=low

  * Port svn revisions 339:
    - Fix rc_get_item -0 backup: Really print lines without rights.

 -- Amon Ott <ao@m-privacy.de>  Fri, 23 Jan 2009 16:04:00 +0100

rsbac-admin (1.4.0+aacmp1) unstable; urgency=low

  * Add DAZ to module list in rsbac.conf
  * Release 1.4.0

 -- Amon Ott <ao@m-privacy.de>  Fri, 09 Jan 2009 08:56:00 +0100

rsbac-admin (1.4.0rc3aacmp2) unstable; urgency=low

  * Add RES to module list in rsbac.conf
  * Update to svn revision 330:
    - Change version in debian/changelog and types.h to 1.4.0.
    - If rsbac_get_attr() returned INVALIDMODULE, do not try for same module
      again.
    - attr_back_fd: allow to specify a single module with -M to backup for.
    - Allow multiple -M for attr_back_fd to backup for multiple modules.
    - Create system users and groups with rsbac_useradd -U and
      rsbac_groupadd -G.

 -- Amon Ott <ao@m-privacy.de>  Thu, 08 Jan 2009 12:23:00 +0100

rsbac-admin (1.4.0rc3aacmp1) unstable; urgency=low

  * Update to svn revision 325:
    - Define CAP_FS_MASK in types.h, if not defined in linux/capability.h.
    - open() takes mode argument if O_CREAT is specified, its enforced on newer
      libc6
    - argument to backup all user sets is -S all
    - Match kernel changes: Increase string lengths in user and group items
      significantly.

 -- Amon Ott <ao@m-privacy.de>  Thu, 30 Oct 2008 13:46:00 +0200

rsbac-admin (1.4.0rc1aacmp3) unstable; urgency=low

  * Update to svn revision 319:
    - Fix group password backup string.

 -- Amon Ott <ao@m-privacy.de>  Tue, 09 Sep 2008 08:56:00 +0200

rsbac-admin (1.4.0rc1aacmp2) unstable; urgency=low

  * Update to svn revision 318:
    - Fix min_caps/max_caps backup and restore for FD and USER targets.
    - Add printall / -p parameter to attr_back_fd and _user.
    - Fix printall min_caps output in attr_get_user.
    - Also set the new cap bits in the first byte when setting max_caps with
      old bitlen.
    - use bash in backup_all instead of sh
    - Use CAP_NONE_OLD as length in old strtou32cap conversion function.

 -- Amon Ott <ao@m-privacy.de>  Thu, 04 Sep 2008 15:29:00 +0200

rsbac-admin (1.4.0rc1aacmp1) unstable; urgency=low

  * Update to svn revision 313

 -- Amon Ott <ao@m-privacy.de>  Mon, 01 Sep 2008 15:30:00 +0200

rsbac-admin (1.4.0pre3aacmp1) unstable; urgency=low

  * Fix password backup string.
  * Change version

 -- Amon Ott <ao@m-privacy.de>  Thu, 03 Jul 2008 09:56:00 +0200

rsbac-admin (1.4.0pre2aacmp4) unstable; urgency=low

  * svn 308:
    - Sort sublists in rc_get_item backup.

 -- Amon Ott <ao@m-privacy.de>  Tue, 06 May 2008 11:24:00 +0200

rsbac-admin (1.4.0pre2aacmp3) unstable; urgency=low

  * Add LOCK to IPC request group

 -- Amon Ott <ao@m-privacy.de>  Thu, 27 Mar 2008 12:45:00 +0100

rsbac-admin (1.4.0pre2aacmp2) unstable; urgency=low

  * Update to svn revision 304: one-time pw support
  * libnss-rsbac2: Conflicts: rsbac-nss

 -- Amon Ott <ao@m-privacy.de>  Tue, 11 Mar 2008 15:45:00 +0100

rsbac-admin (1.4.0pre2aacmp1) unstable; urgency=low

  * Compiled for m-privacy
  * Added symlinks to old pam_de libraries

 -- Guillaume Destuynder <gd@m-privacy.de>  Wed, 20 Feb 2008 17:57:21 +0100

rsbac-admin (1.4.0pre2) gutsy; urgency=low

  * Bump to 1.4.0pre2

 -- kang <kang@rsbac.org>  Wed, 20 Feb 2008 12:44:50 +0100

rsbac-admin (1.3.7) unstable; urgency=low

  * Backported fixes from 1.3.6ubuntu0 (hardy)
  * Installs libtool archive files

 -- kang <kang@rsbac.org>  Tue, 12 Feb 2008 12:10:01 +0100

rsbac-admin (1.3.5debian-0ulteo0) ulteo; urgency=low

  * Remove debian/ dir from the orig.tar.gz
  * Use debhelper compat 5
  * debian/rules:
    - drop the configure target
    - remove commented out dh_*
    - use dh_install instead of dh_movefiles
  * debian/*files: switch to *.install
  * debian/control:
    - drop linux-headers from build depends
    - rsbac-pam -> libpam-rsbac
    - rsbac-dev -> librsbac-dev
    - provide transition packages

 -- Gauvain Pocentek <gauvain@ulteo.com>  Fri, 27 Jul 2007 06:58:05 +0200

rsbac-admin (1.3.5) unstable; urgency=low

  * 1.3.5
  * Move critical libs to /lib, symlink from /usr/lib for the rsbac-dev
    package

 -- Guillaume Destuynder <kang@rsbac.org>  Tue, 12 Jun 2007 17:14:00 +0200

rsbac-admin (1.3.4) unstable; urgency=low

  * 1.3.4
  * Fixed rsbac-pam.files install

 -- Guillaume Destuynder <kang@rsbac.org>  Mon, 14 May 2007 11:19:00 +0100


rsbac-admin (1.3.3) unstable; urgency=low

  * 1.3.3

 -- Guillaume Destuynder <kang@rsbac.org>  Wed, 2 May 2007 17:53:00 +0100

rsbac-admin (1.3.2) unstable; urgency=low

  * 1.3.2

 -- Guillaume Destuynder <kang@rsbac.org>  Wed, 14 Mar 2007 17:41:30 +0100

rsbac-admin (1.3.2~rc1) unstable; urgency=low

  * 1.3.2-rc1
  * Fix rsbac-admin file list
  * Fix shlib file. Now, deps are computed fine by dpkg-shlibdeps
  * Use dh_makeshlibs (so remove all .shlibs files)
  * Remove .so files from non -dev debs

 -- Arnaud Patard <arnaud.patard@rtp-net.org>  Tue, 20 Feb 2007 23:27:30 +0100

rsbac-admin (1.3.1-0) unstable; urgency=low

  * Bump to 1.3.1

 -- Guillaume Destuynder <kang@rsbac.org>  Tue, 9 Jan 2007 11:00:00 +0100

rsbac-admin (1.3.0-4) unstable; urgency=low

  * Bump to 1.3.0

 -- Guillaume Destuynder <kang@rsbac.org>  Mon, 7 Oct 2006 16:16:00 +0100

rsbac-admin (1.3.0-3) unstable; urgency=low

  * Bump to 1.3.0rc1

 -- Guillaume Destuynder <kang@rsbac.org>  Thu, 11 Sep 2006 13:52:00 +0100

rsbac-admin (1.3.0-2) unstable; urgency=low

  * Bump to 1.3.0pre2, restarted from 1.2.7 with backports

 -- Amon Ott <ao@rsbac.org>  Fri, 09 Jun 2006 14:16:00 +0200

rsbac-admin (1.3.0-1) unstable; urgency=low

  * Bump to 1.3.0pre1 with 1.2 fixes

 -- Guillaume Destuynder <kang@rsbac.org>  Thu, 22 Feb 2005 11:49:00 +0100

rsbac-admin (1.2.5-4) stable; urgency=low

  * Lintianization. Thanks to rtp from Mandriva.

 -- Guillaume Destuynder <kang@rsbac.org>  Thu, 27 Oct 2005 10:06:00 +0100

rsbac-admin (1.2.5-3) stable; urgency=low

  * Updated version to v1.2.5

 -- Amon Ott <ao@rsbac.org>  Thu, 22 Sep 2005 11:24:26 +0100

rsbac-admin (1.2.5-2) unstable; urgency=low

  * Updated version to v1.2.5-rc2
  * Changed to new build system

 -- Amon Ott <ao@rsbac.org>  Thu, 25 Aug 2005 16:21:26 +0100

rsbac-admin (1.2.5-1) unstable; urgency=low

  * Updated version to v1.2.5-pre2

 -- Amon Ott <ao@rsbac.org>  Sat, 11 Jun 2005 12:29:26 +0100

rsbac-admin (1.2.3-5) testing; urgency=low

  * Split the shared library into a package of its own (librsbac1)

 -- Peter Busser <peter@adamantix.org>  Thu, 03 Feb 2005 15:38:26 +0100

rsbac-admin (1.2.3-4) testing; urgency=low

  * Added bugfix 5, which enables PaX support for the command line tools.

 -- Peter Busser <peter@adamantix.org>  Wed, 29 Sep 2004 10:34:20 +0200

rsbac-admin (1.2.3-3) unstable; urgency=low

  * Added DAZ to RSBACMOD in rsbac.conf

 -- Peter Busser <peter@adamantix.org>  Sun, 29 Aug 2004 19:12:55 +0200

rsbac-admin (1.2.3-2) unstable; urgency=low

  * Added librsbac.so to rsbac-admin, otherwise the binaries will not work.

 -- Peter Busser <peter@adamantix.org>  Thu, 26 Aug 2004 11:54:00 +0200

rsbac-admin (1.2.3-1) unstable; urgency=low

  * New upstream release.
  * Fixed the so account creation in rsbac-admin.postinst
  * Changed the /home/so path to /so.
  * Removed setting of AUTH CAP 400 on rklogd, this should be part of a
    security policy.

 -- Peter Busser <peter@adamantix.org>  Tue, 24 Aug 2004 17:21:30 +0200

rsbac-admin (1.2.2-7) unstable; urgency=low

  * Cleaned up rklogd code

 -- Peter Busser <peter@trusteddebian.org>  Mon, 28 Apr 2003 12:40:50 +0200

rsbac-admin (1.2.2-6) unstable; urgency=low

  * Fixed postinst/postrm not being installed problem
  * Added setting of CAP 400 on rklogd in postinst
  * Added examples/* to rsbac-doc
  * Added rsbac-admin to rsbac-klogd dependencies
  * Removed creation of /home/so from rsbac-klogd postinst

 -- Peter Busser <peter@trusteddebian.org>  Sun, 27 Apr 2003 22:33:52 +0200

rsbac-admin (1.2.2-5) stable; urgency=low

  * Added rsbac-dev, rsbac-doc and rsbac-rklogd packages

 -- Peter Busser <peter@trusteddebian.org>  Fri, 11 Apr 2003 16:20:04 +0200

rsbac-admin (1.2.2-4) unstable; urgency=low

  * Added rsbac.conf

 -- Peter Busser <peter@trusteddebian.org>  Mon,  7 Apr 2003 17:11:16 +0200

rsbac-admin (1.2.2-3) unstable; urgency=low

  * Added two patches to fix some backup problems

 -- Peter Busser <peter@trusteddebian.org>  Mon,  7 Apr 2003 14:27:17 +0200

rsbac-admin (1.2.2-2) unstable; urgency=low

  * Upgrade to v1.2.2-pre3, to accompany the kernel patch upgrade

 -- Peter Busser <peter@trusteddebian.org>  Mon,  7 Apr 2003 12:19:32 +0200

rsbac-admin (1.2.2-1) unstable; urgency=low

  * Upgrade to v1.2.2-pre3, to accompany the kernel patch upgrade
  * Compiled using the IBM stack smashing protector

 -- Peter Busser <peter@trusteddebian.org>  Tue, 11 Mar 2003 14:05:27 +0100

rsbac-admin (1.2.1-2) unstable; urgency=low

  * Added RSBAC v1.2.1 bugfix nr. 4

 -- Peter Busser <peter@trusteddebian.org>  Thu, 23 Jan 2003 14:12:49 +0100

rsbac-admin (1.2.1-1) unstable; urgency=low

  * Initial Release.

 -- Peter Busser <peter@trusteddebian.org>  Fri, 15 Nov 2002 18:40:29 +0100

