Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: unblock
Please unblock package freeradius [ Reason ] freeradius-ldap fails to install if freeradius is stopped (#991561). [ Impact ] Upgrading with a stopped freeradius breaks. [ Tests ] None. [ Risks ] This only changes the postinst to ignore if the restart fails, I don't see a risk. [ Checklist ] [X] all changes are documented in the d/changelog [X] I reviewed all changes and I approve them [X] attach debdiff against the package in testing [ Other info ] This includes the changes already acked in #991432, they almost made it to testing.. :) unblock freeradius/3.0.21+dfsg-2.2
diff --git a/debian/changelog b/debian/changelog index 53910a5..fed7e9f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,20 @@ +freeradius (3.0.21+dfsg-2.2) unstable; urgency=medium + + * Non-maintainer upload. + * Don't fail postinst if daemon is not running (Closes: #991561, #932113) + + -- Jochen Sprickerhof <jspri...@debian.org> Wed, 28 Jul 2021 12:28:32 +0200 + +freeradius (3.0.21+dfsg-2.1) unstable; urgency=medium + + * Non-maintainer upload. + * Fix capabilities in service file. + As freeradius is not run as root we need to request extra capabilities + wiht AmbientCapabilities instead of limiting the set with + CapabilityBoundingSet. (Closes: #985967) + + -- Jochen Sprickerhof <jspri...@debian.org> Fri, 23 Jul 2021 13:19:03 +0200 + freeradius (3.0.21+dfsg-2) unstable; urgency=medium * Cherry-Pick upstream fixes to build with Python3.8 (Closes: #966860) diff --git a/debian/freeradius-dhcp.postinst b/debian/freeradius-dhcp.postinst index af32395..b8f2c7c 100644 --- a/debian/freeradius-dhcp.postinst +++ b/debian/freeradius-dhcp.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true if [ -z "$2" ]; then for module in dhcp; do diff --git a/debian/freeradius-iodbc.postinst b/debian/freeradius-iodbc.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-iodbc.postinst +++ b/debian/freeradius-iodbc.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-krb5.postinst b/debian/freeradius-krb5.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-krb5.postinst +++ b/debian/freeradius-krb5.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-ldap.postinst b/debian/freeradius-ldap.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-ldap.postinst +++ b/debian/freeradius-ldap.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-memcached.postinst b/debian/freeradius-memcached.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-memcached.postinst +++ b/debian/freeradius-memcached.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-mysql.postinst b/debian/freeradius-mysql.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-mysql.postinst +++ b/debian/freeradius-mysql.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-postgresql.postinst b/debian/freeradius-postgresql.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-postgresql.postinst +++ b/debian/freeradius-postgresql.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-python3.postinst b/debian/freeradius-python3.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-python3.postinst +++ b/debian/freeradius-python3.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-redis.postinst b/debian/freeradius-redis.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-redis.postinst +++ b/debian/freeradius-redis.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-rest.postinst b/debian/freeradius-rest.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-rest.postinst +++ b/debian/freeradius-rest.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius-yubikey.postinst b/debian/freeradius-yubikey.postinst index eacd565..6a7608d 100644 --- a/debian/freeradius-yubikey.postinst +++ b/debian/freeradius-yubikey.postinst @@ -5,7 +5,7 @@ set -e case "$1" in configure) - invoke-rc.d freeradius force-reload + invoke-rc.d freeradius force-reload || true ;; esac diff --git a/debian/freeradius.service b/debian/freeradius.service index 085a551..3e2f2fd 100644 --- a/debian/freeradius.service +++ b/debian/freeradius.service @@ -41,7 +41,7 @@ ExecReload=/bin/kill -HUP $MAINPID NoNewPrivileges=true # Allow binding to secure ports, broadcast addresses, and raw interfaces. -#CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN CAP_DAC_OVERRIDE +#AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN CAP_DAC_OVERRIDE # Private /tmp that isn't shared by other processes PrivateTmp=true