cron (3.0pl1-72) unstable; urgency=low * Add type usbdevfs to skipped "file systems" (this is /proc/bus/usb) (closes: #113186,#113187) * Removed 'xfs' from list of skipped file system types. Unfortunately, it appears to be used by both the arla network file system and the SGI XFS filesystem, and I must make the conservative choice. (closes: #113234) * Remove extra diff in checksecurity. (closes: 113950) * Add type none to skipped "file systems" (--bind mounts) (closes: #111395) -- Steve Greenland Mon, 1 Oct 2001 07:46:34 -0500 cron (3.0pl1-71) unstable; urgency=medium * Fixed nasty typo in checksecurity. (closes: #112156) * Note to release manager: either -71 should go into woody, or only -69. -- Steve Greenland Thu, 13 Sep 2001 16:39:25 -0500 cron (3.0pl1-70) unstable; urgency=medium * Catch full disk when writing new crontab. (closes: #110612) * Don't modify backup file modes if no change (to prevent misleading time mods). (closes: #104093) * Remove obsolete reference to /bin/mail in crontab.5. (closes: #110962) * Add Marc Merlin's checksecurity patches with more configuration options. (closes: #89547, #63445) * Make all setuid.{today,yesterday,etc.} files group adm. (closes: #109520) -- Steve Greenland Fri, 7 Sep 2001 18:27:37 -0500 cron (3.0pl1-69) unstable; urgency=low * Don't run checksecurity on any partition mount nosuid or noexec. (closes:#98160) * Don't run on devpts, either. -- Steve Greenland Sun, 20 May 2001 13:48:15 -0500 cron (3.0pl1-68) unstable; urgency=low * Finally tracked down the problem with @{reboot,hourly,etc.} commands in the root crontabs (/etc/crontab, /etc/cron.d/*) (closes:#62141, #84727) * Minor cosmetic cleanup in lost+found output, from Matthijs Melchior (closes:#88861) -- Steve Greenland Sat, 19 May 2001 17:37:52 -0500 cron (3.0pl1-67) unstable; urgency=high * With crontab -e, don't give uid root on re-edit. -- Steve Greenland Sun, 6 May 2001 11:41:50 -0500 cron (3.0pl1-66) unstable; urgency=low * The "Julian Gilbey has been spending too much time proofreading" release. Remove hyphens in cron.init (closes:#91323) * change log_it() to open and close syslog every time, remove SIGPIPE catcher, etc., all in attempt to keep PAM happy. * Added original location to copyright file (closes:#88507) * Allocate username dynamically in crontab.c (closes:#89040,#62268) * Remove pam_limits.so from cron.pam file. -- Steve Greenland Tue, 27 Mar 2001 18:04:16 -0600 cron (3.0pl1-65) unstable; urgency=high * Close reboot file /var/run/crond.reboot after creating it, duh. Leaving it open allowed possible writes from cron jobs. -- Steve Greenland Mon, 26 Feb 2001 09:47:34 -0600 cron (3.0pl1-64) unstable; urgency=high * The "President's Birthday" release. * Add checks for setuid() failures, to avoid running user jobs as root. (closes:#85609, #86775) * Add portability flag -P to df (in /etc/cron.daily/standard) to avoid problem with long device names. (closes:#86851) * Convert from suidmanager to dpkg --statoverride. * Remove unnecessary dependency on bsdutils (it's Essential) * Change compat.h to not cause inclusion of sys/time.h (instead of time.h), due to recent change in glibc. Why it was doing this, I have no idea. -- Steve Greenland Wed, 21 Feb 2001 16:26:57 -0600 cron (3.0pl1-63) unstable; urgency=medium * Fix mistaken diagnostic in crontab ("Reached end of file while reading environment"). * Fix "Too many arguments to [" error in postinst. (closes:#79725) -- Steve Greenland Sun, 28 Jan 2001 12:00:55 -0600 cron (3.0pl1-62) unstable; urgency=medium * Change tracking of crontab directory mod times to deal with directories with mtimes in the future. Thanks to Florian Lohoff for tracking down the cause of this rare yet long-standing bug. (closes:#51202, #57356, #64198, #77353) * Run @reboot jobs only on reboot instead of cron restart. (closes:#74762, #77563) * Clarify which directory the lost+found files are in. * Protect against reading other people's crontabs via temp file symlink in crontab -e. -- Steve Greenland Sat, 27 Jan 2001 17:01:43 -0600 cron (3.0pl1-61) unstable; urgency=high * Fix usage message in cron.init. * Use pam only on non-Hurd. (closes:#75408) * Move dpkg status backups to /var/backups. * Apply security fix for temp file attack, thanks to Daniel Jacobowitz. * Made /etc/pam.d/cron a conffile. -- Steve Greenland Fri, 17 Nov 2000 16:06:03 -0600 cron (3.0pl1-60) unstable; urgency=low * Re-set log to LOG_CRON after PAM changes it to LOG_AUTH.(closes:#70028) -- Steve Greenland Thu, 31 Aug 2000 14:37:44 -0500 cron (3.0pl1-59) unstable; urgency=low * Fixed typo of @cmp in standard.daily (closes:#69921,#69937,#69956) * Add /etc/pam.d/cron, using standard Unix authorizations (closes:#69939) -- Steve Greenland Fri, 25 Aug 2000 14:02:47 -0500 cron (3.0pl1-58) unstable; urgency=low * Fix use of PATH_MAX/MAXPATHLEN in database.c and other HURD issues (closes:#64382) * Look in all (ext2) lost+found directories, not just /lost+found (closes:#66629) * Cosmetic changes to daily/standard (closes:#65078) * Use diff -u0 in checksecurity to avoid useless context (closes:#60919) * Note uppercasing of child processes in cron.8 (closes:#62103) * Added Topi Mitterands PAM support patch - Thanks! (closes:#68366,#67586) * Fix segfault in crontab -l (closes:#53735) * Added Build-Depends. * Added support for DEB_BUILD_OPTIONS, changed default compile to '-02 -Wall' * Fixed various complaints generated by -Wall :-), except 'rcsid unused' -- Steve Greenland Wed, 23 Aug 2000 16:20:39 -0500 cron (3.0pl1-57) frozen unstable; urgency=low * Release Manager: 61296 is RC bug; * Change lockfile-progs "Depends" to "Suggests" (policy violation), only try to use lockfile-create in /etc/cron.daily/standard if it is installed (closes:#61296) -- Steve Greenland Wed, 29 Mar 2000 20:12:06 -0600 cron (3.0pl1-56) frozen unstable; urgency=medium * Release Manager: 59115 is RC bug. * set backup password files to root-only rw (closes:#59115) * Fixed missing ntfs in checksecurity.conf (closes:#56939) -- Steve Greenland Mon, 28 Feb 2000 19:16:20 -0600 cron (3.0pl1-55) unstable; urgency=low * Changed __linux feature checks to __linux__ (closes:#50240) * Added '-u' to diff in checksecurity (closes:#51679) * Moved checksecurity LOGDIR (formerly LOG) setting to config file (closes:#49683) * Fixed removal of lockfile in cron.daily/standard. -- Steve Greenland Sat, 18 Dec 1999 18:53:29 -0600 cron (3.0pl1-54) unstable; urgency=low * Fixed spelling in checksecurity.8 (closes:#45281) * Only look in /lost+found if it exists (closes:#46389) * Only run @weekly jobs once a week (was looking at dom with OR rather than AND.) (closes:#49437) * Don't run more than one instance of /etc/cron.daily/standard (closes:#45487) * Removed extra generation of TSTP in crontab -e. (closes:#48542) -- Steve Greenland Sun, 7 Nov 1999 15:09:48 -0600 cron (3.0pl1-53) unstable; urgency=medium * Applied OpenBSD patches supplied Topi Miettinen. Big change is better handling of timekeeping (in particular, changes to/from daylight savings time) (closes:#8499). * Redirect stdin, stdout, and stderr to /dev/null. (closes:#37189, #23231, #30653). * Fixed bit_set()/bit_nset() confusion that caused @hourly to not work, so that functionality is now documented (closes:#43282). * Changed warrantee to warranty in debian/copyright (but it's still misspelled in the source files) (closes:#40312) * Adjust checksecurity and cron_daily/standard to get consistent owner/perms on /var/log/setuid* files. (closes:#15295) * Add 'coda' to the list of nfs/afs like file systems in checksecurity.conf (closes:#29909) * Fix version comparison to use dpkg --compare-versions, which is what I should have done in the first place (closes:#42454) * Add 'xfs' to the list of nfs/afs like file systems in checksecurity.conf, as it appears that xfs==arla and arla==xfs. If there are other file systems that show up as 'xfs', please let me know (closes:#37523) * Don't rotate wtmp and btmp (closes:#42301). -- Steve Greenland Sat, 11 Sep 1999 18:42:37 -0500 cron (3.0pl1-52) unstable; urgency=high * Patch to fix "Reverse DoS": user could send arbitrary options to sendmail via MAILTO variable. Fix by not allowing spaces or leading dashes in MAILTO, and run sendmail as user, not root. -- Steve Greenland Sun, 29 Aug 1999 21:50:28 -0500 cron (3.0pl1-51) unstable; urgency=low * Changed default of "crontab -l" to NOT list the extra header lines. May obtain original behaviour by setting "CRONTAB_NOHEADER=N". * Fixed comment in misc.c that accidentally cause the SIGPIPE handler to be reset more often than necessary. * Don't checksecurity on ntfs file systems (closes:#33079) * Added '-i' flag to sendmail command (closes:#36338) * Added check for files in /lost+found (closes:#29791) * Added preferential invocation of anacron for cron.{daily,weekly,monthly} -- Steve Greenland Thu, 27 May 1999 17:37:54 -0500 cron (3.0pl1-50) frozen unstable; urgency=low * Fixed rules file *again* so that crontab suidness doesn't get stepped on by debhelper under certain kernel versions. -- Steve Greenland Sat, 9 Jan 1999 14:17:09 -0600 cron (3.0pl1-49) frozen unstable; urgency=low * Check for /etc/shadow and /etc/gshadow separately (closes:Bug#30232) -- Steve Greenland Wed, 2 Dec 1998 21:30:00 -0600 cron (3.0pl1-48) frozen unstable; urgency=low * Fixed rules file so that crontab doesn't get suid bit removed by latest version of debhelper. (closes:Bug#29683) -- Steve Greenland Mon, 30 Nov 1998 21:10:00 -0600 cron (3.0pl1-47) frozen unstable; urgency=high * Removed close of {stdin,stdout,stderr}, as it appears that some cron users expect it. -- Steve Greenland Mon, 2 Nov 1998 09:25:44 -0600 Cron (3.0pl1-46) frozen unstable; urgency=medium * changed mention of /var/spool/crontabs to /var/spool/cron/crontabs, and added example /etc/crontab. (closes:Bug#28458,Bug#23101) * Incorporated buffer overflow patches. (closes:Bug#26705,Bug#26749) * Added backup of /etc/shadow and /etc/gshadow in cron.daily/standard. (closes:Bug#25853) * Better daemonization (close stdin,stdout,stderr). (closes:Bug#23231) * Do cron.daily a little earlier, try to avoid overlap with cron.weekly. (closes:Bug#23023) * Added note in crontab.1 and crontab.5 about trailing newline requirement. (closes:Bug#16132) -- Steve Greenland Sun, 1 Nov 1998 19:10:45 -0600 cron (3.0pl1-45) frozen unstable; urgency=high * Updated README and README.Debian w.r.t. file locations. * Updated crontab.1 w.r.t. location of allow and deny files. * Fixed problem in postinst when new install (instead of upgrade) (closes:Bug#21426) * Smarter algorithm for checking /etc/cron.d for changes, no longer spins up laptop disks every minute. Thanks to Alexander "Shurik" Shumakovitch for the fix. * Re-did checksecurity to only report NFS/AFS insecure mounts instead of running find on them (suggestion from Gregory Stark). -- Steve Greenland Sun, 26 Apr 1998 13:41:51 -0500 cron (3.0pl1-44) unstable; urgency=low * Fixed standards version reference. * Fixed init script "comment", sigh. Let this be a warning to you: NEVER EVER change a file with doing a complete test, even if it is "just a comment". (closes:Bug#19466,Bug#19492,Bug#19479,Bug#19595,Bug#19725,Bug#19840, Bug#19845,Bug19852). Sheesh. -- Steve Greenland Tue, 17 Mar 1998 21:55:03 -0600 cron (3.0pl1-43) unstable; urgency=medium * Removed support for TMPDIR. This is due to the problem it causes with emacs -- emacs does different things with it's backup files depending on whether or not the file is in /tmp. Emacs probably ought to use TMPDIR instead of /tmp in its check. I've opened a "wishlist" bug for crontab to support TMPDIR. (closes: Bug#15985) * When USE_SIGCHLD is defined, before running user process, set handling for SIGCHLD to SIG_DFL, not SIG_IGN. Despite documentation that the default for SIGCHLD is ignore, the behaviour is different. (closes:Bug#17564,Bug#9075,Bug#16436,Bug#17814) * Moved allow and deny files from /var/spool/cron to /etc/cron.{allow,deny} (closes:Bug#14970) * filenames in /etc/cron.d must comply with run-parts naming convention - alpha-numeric, underscore, or hyphen. This ensures that conffile remains (e.g. package.dpkg-dist) files don't get run. * removed cronanacron command from /etc/crontab and distribution -- replaced by /etc/cron.d/anacron file (from anacron package, not cron). * Documented /etc/cron.d dir in manpage and readme.debian * modified checksecurity.conf to not check auto file systems. (closes:Bug#8702) * crontab -u `whoami` now works. (closes:Bug#8702) * documented CRONTAB_NOHEADER in crontab.1 * /etc/crontab now uses run-parts(8) --report switch. (closes:Bug#18273) * fixed initialization of oact in misc.c. (closes:Bug#17134) * converted to use debhelper rather than debmake. * changed date format in checksecurity so that we don't get false positives after six months. (closes:Bug#19025) * remove /etc/cron.{allow,deny} on purge -- Steve Greenland Mon, 9 Mar 1998 01:31:13 -0600 cron (3.0pl1-42) unstable; urgency=low * Don't output header on 'crontab -l' if CRONTAB_NOHEADER is 'Y' (Bug#15642) * Read files in /etc/cron.d in addition to /etc/crontab (Bug#16628, Bug#16617) -- Steve Greenland Sun, 11 Jan 1998 18:32:26 -0600 cron (3.0pl1-41) unstable; urgency=low * Updated crontab to use /usr/bin/editor if EDITOR and VISUAL undefined. * Added support for TMPDIR from crontab (Bug#9309) * Compress /usr/doc/cron/changelog.Debian -- this time for sure! (Bug#15296) -- Steve Greenland Fri, 28 Nov 1997 13:47:03 -0600 cron (3.0pl1-40) unstable; urgency=low * Correct directory reference in standard.monthly to /var/log (Bug#12315, Bug#13466) * Added -DUSE_SIGCHLD to defs, needed for alpha (Bug#12855,Bug#8611). May also fix Bug#9075. * Changed check for suidmanager (Bug#9326) * Checksecurity no longer checks fat or vfat filesystems (Bug#8845, Bug#13574) * Changed spaces in crontab to , appearance only (Bug#13369) * Removed bashism from standard.daily and checksecurity (Bug#9908, Bug#9909) * Added CHECKSECURITY_DISABLE flag to checksecurity.conf. * Get the changelog names correct (Bug#14618) * Correct day-of-month and month ranges in crontab.5 (Bug#15073) -- Steve Greenland Sun, 23 Nov 1997 22:58:05 -0600 cron (3.0pl1-39) unstable; urgency=low * Added configuration variable to eliminate error messages from checksecurity's find command * Better integration with anacron: suggest anacron, call anacron on a regular basis so that it can keeps it's status up-to-date. New file /usr/sbin/cronanacron. * Call savelog for /var/adm/btmp from /etc/cron.monthly/standard. -- Steve Greenland Sun, 24 Aug 1997 18:52:55 -0500 cron (3.0pl1-38) stable unstable; urgency=low * When upgrading from -36 or -36.1, stop old cron daemon in preinst, because the prerm's in those versions doesn't. * Follow console message standard. -- Steve Greenland Sat, 18 Jan 1997 15:34:42 -0600 cron (3.0pl1-37) stable unstable; urgency=medium * Corrected postinst,prerm, and postrm scripts -- Installs and removes rc.d links, and re-starts cron after install. * More fixes from the BSD crew, sent to me by Marek Michalkiewicz: mostly checks for null pointers, but also a few Makefile fixes, and at least one potential buffer overrun (but I know of no exploits). * Left in suidmanager stuff, but corrected default permission to 4755, per Debian standards. * Added CHANGES file (as /usr/doc/cron/changelog.upstream.gz) to distribution. Added upstream README to distribution. * Moved files out of ./debian/extra into ./debian because dpkg-source cannot deal with createing directories. Hmmph. * Removed filereaper reference from standard.daily -- Steve Greenland Sun, 5 Jan 1997 18:23:14 -0600 cron (3.0pl1-36.1) stable unstable; urgency=HIGH * Mended `find' invocation in debian/rules. * Serious security hole (buffer overrun) fixed. * Silly suidmanager stuff added by debmake. Pah. -- Jon Rabone Wed, 18 Dec 1996 21:38:33 +0000 cron (3.0pl1-36) frozen unstable; urgency=low * Removed DEBUG logging about SIGPIPE -- it's generated by every child once syslogd has been restarted. -- Steve Greenland Mon, 2 Dec 1996 01:41:16 -0600 cron (3.0pl1-35) frozen unstable; urgency=low * Converted to new source format * Added code in misc.c to catch SIGPIPE and re-open syslog. This is all in #if defined(DEBIAN), and should be removed when syslog(3) is fixed. Also added -DDEBIAN to build commands in Makefile. -- Steve Greenland Sun, 1 Dec 1996 16:21:52 -0600