[Python-apps-commits] r10818 - in packages/fookebox/trunk/debian (changelog control postinst)

[cockroach-guest at users.alioth.debian.org]

    Date: Thursday, May 1, 2014 @ 21:55:24
  Author: cockroach-guest
Revision: 10818

Generate a secure session secret, recommend javascript-common

Modified:
  packages/fookebox/trunk/debian/changelog
  packages/fookebox/trunk/debian/control
  packages/fookebox/trunk/debian/postinst

Modified: packages/fookebox/trunk/debian/changelog
===================================================================
--- packages/fookebox/trunk/debian/changelog	2014-05-01 07:20:59 UTC (rev 10817)
+++ packages/fookebox/trunk/debian/changelog	2014-05-01 21:55:24 UTC (rev 10818)
@@ -1,3 +1,10 @@
+fookebox (0.6.1-3) UNRELEASED; urgency=low
+
+  * debian/postinst: Generate a secure session secret		closes: #728871
+  * debian/control: Recommend javascript-common			closes: #731641
+
+ -- Stefan Ott <stefan at ott.net>  Thu, 01 May 2014 23:41:11 +0200
+
 fookebox (0.6.1-2) unstable; urgency=low
 
   [ Jakub Wilk ]

Modified: packages/fookebox/trunk/debian/control
===================================================================
--- packages/fookebox/trunk/debian/control	2014-05-01 07:20:59 UTC (rev 10817)
+++ packages/fookebox/trunk/debian/control	2014-05-01 21:55:24 UTC (rev 10818)
@@ -13,7 +13,7 @@
 Package: fookebox
 Architecture: all
 Depends: ${misc:Depends}, ${python:Depends}, libjs-prototype, libjs-scriptaculous, python-pylons, python-mpd, python-sqlalchemy
-Recommends: mpd, libapache2-mod-wsgi | httpd-wsgi
+Recommends: mpd, libapache2-mod-wsgi | httpd-wsgi, javascript-common
 Description: web-based jukebox frontend to mpd
  fookebox is a jukebox-style web-frontend to mpd. It can serve as a
  keyboard-less jukebox or as a generic mpd frontend, depending on your

Modified: packages/fookebox/trunk/debian/postinst
===================================================================
--- packages/fookebox/trunk/debian/postinst	2014-05-01 07:20:59 UTC (rev 10817)
+++ packages/fookebox/trunk/debian/postinst	2014-05-01 21:55:24 UTC (rev 10818)
@@ -19,6 +19,12 @@
 			chgrp www-data /etc/fookebox/fookebox.wsgi
 			chgrp www-data /etc/fookebox/config.ini
 		fi
+
+		# set a reasonable session secret
+		secret=$( cat /dev/urandom | tr -dc 'a-zA-Z0-9' | \
+						fold -w 32 | head -n 1 )
+		sed "/^beaker.session.secret/s/ somesecret$/ ${secret}/" \
+						-i /etc/fookebox/config.ini
 	;;
 
 	abort-upgrade|abort-remove|abort-deconfigure)