[pkg-bacula-commits] [bacula] 03/07: build bacula with capabilities(7) support

Carsten Leonhardt leo at moszumanska.debian.org
Wed Jul 20 10:57:38 UTC 2016


This is an automated email from the git hooks/post-receive script.

leo pushed a commit to tag development/wheezy-2012-11-25
in repository bacula.

commit 66c064bc90bba23caee34f12bee51399c842bd84
Author: Alexander Golovko <alexandro at ankalagon.ru>
Date:   Thu Nov 8 01:05:53 2012 +0400

    build bacula with capabilities(7) support
    
    Backported commits:
      c6b51c2c010ae82f73d8cdce2eecbfbe52e6bbec (partially)
      74198182c2fa9e2567077356e345ff5251e26bf1
      6e1fab3c304fa73b9c6801a07290ce48b7cadb24
---
 debian/README.Debian | 10 +++++++---
 debian/changelog     |  4 ++++
 debian/control       |  2 +-
 3 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/debian/README.Debian b/debian/README.Debian
index 11c9936..1b003f8 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -83,9 +83,13 @@ Make sure you customize the passwords in the files in /etc/bacula.
 
 The installation will create a bacula user on the system, and the
 daemons and RunBefore/RunAfter jobs will run as that user.  However,
-the file director must run as root, as will your ClientRunBefore/After
-jobs.  Installation of a director will ask you for a database user to
-use.
+the file daemon run as root, as will your ClientRunBefore/After
+jobs. File daemon can use linux capabilities(7) for drop root
+privileges, but it require root privileges for correctly restore
+original files permissions. For run file daemon without root 
+privileges you can add ARGS="-k -u <username>" into
+/etc/default/bacula-fd. This is linux specific feature. Installation 
+of a director will ask you for a database user to use.
 
 You can run Bacula consoles as any user, but the user you use will
 need to be able to read the console config files.  These files are, by
diff --git a/debian/changelog b/debian/changelog
index e19947c..43d16d5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -32,6 +32,10 @@ bacula (5.2.6+dfsg-2+deb7u1) testing; urgency=high
   * debian/patches/fix_dump_resources_acl.patch, debian/rules:
     + Fix console ACL's bypass with dump_resource, SA CVE-2012-4430
       (Closes: #687923).
+  * debian/control:
+    + Add build-depends for read-all capability support (Closes: #683080).
+  * debian/README.Debian:
+    + Add information about file daemon without root privileges.
 
   [ Bart Swedrowski ]
   * debian/bacula-console.postinst,debian/bacula-console-qt.postinst,
diff --git a/debian/control b/debian/control
index 1dfab6e..e1f40d2 100644
--- a/debian/control
+++ b/debian/control
@@ -7,7 +7,7 @@ Build-Depends: autotools-dev, autoconf, debhelper (>= 8.1.3), po-debconf,
  zlib1g-dev, libreadline-dev, libsqlite3-dev, libmysqlclient-dev, libpq-dev
  (>= 9.1), postgresql-server-dev-all, libwrap0-dev, python-dev, libgtk2.0-dev,
  libgnome2-dev, libacl1-dev, libkrb5-dev, libgnomeui-dev, libx11-dev, mtx, bc,
- libxt-dev, libqt4-dev, libssl-dev
+ libxt-dev, libqt4-dev, libssl-dev, libcap-dev [linux-any]
 Build-Conflicts: python2.4
 Standards-Version: 3.9.2
 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=summary

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-bacula/bacula.git



More information about the pkg-bacula-commits mailing list