# ChangeLog for sys-apps/firejail # Copyright 1999-2016 Gentoo Foundation; Distributed under the GPL v2 # (auto-generated from git log) *firejail-0.9.36 (05 Jan 2016) 05 Jan 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +firejail-0.9.36.ebuild, +metadata.xml: Add new package Package-Manager: portage-2.2.26 07 Jan 2016; Justin Lecher <jlec@gentoo.org> metadata.xml: Update remote-ids in metadata.xml Signed-off-by: Justin Lecher <jlec@gentoo.org> 24 Jan 2016; Michał Górny <mgorny@gentoo.org> metadata.xml: Unify quoting in metadata.xml files for machine processing Force unified quoting in all metadata.xml files since lxml does not preserve original use of single and double quotes. Ensuring unified quoting before the process allows distinguishing the GLEP 67-related metadata.xml changes from unrelated quoting changes. 24 Jan 2016; Michał Górny <mgorny@gentoo.org> metadata.xml: Set appropriate maintainer types in metadata.xml (GLEP 67) *firejail-0.9.38 (12 Feb 2016) 12 Feb 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +firejail-0.9.38.ebuild: Bump version Gentoo-Bug: 574258 Package-Manager: portage-2.2.27 12 Feb 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> firejail-0.9.36.ebuild, firejail-0.9.38.ebuild: Downgrade EAPI to 5 Ebuild with EAPI 6 cannot be stabilized. Package-Manager: portage-2.2.27 20 Apr 2016; Mike Frysinger <vapier@gentoo.org> +files/firejail-0.9.38-sysmacros.patch, firejail-0.9.38.ebuild: fix build w/newer glibc #580390 20 Apr 2016; Mike Frysinger <vapier@gentoo.org> firejail-0.9.38.ebuild: respect build settings *firejail-0.9.40 (03 Jun 2016) 03 Jun 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +files/firejail-0.9.40-sysmacros.patch, +firejail-0.9.40.ebuild: Bump version Package-Manager: portage-2.3.0_rc1 *firejail-0.9.40-r1 (04 Jun 2016) 04 Jun 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +firejail-0.9.40-r1.ebuild, metadata.xml: Allow compile time configuration Networking features and most Linux kernel security features require root privileges during configuration. Firejail (as a SUID binary) opens the access to these features therefore it may be desired to turn off some of the features on compile time. Bump EAPI to 6. Depend on x11-wm/xpra for X11 sandboxing feature. Package-Manager: portage-2.3.0_rc1 *firejail-0.9.40-r2 (04 Jun 2016) 04 Jun 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -firejail-0.9.40-r1.ebuild, +firejail-0.9.40-r2.ebuild: Correct deps for X11 It requires xpra both server and client. Package-Manager: portage-2.3.0_rc1 06 Jun 2016; Agostino Sarubbo <ago@gentoo.org> firejail-0.9.38.ebuild: amd64 stable wrt bug #584376 Package-Manager: portage-2.2.28 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> *firejail-0.9.38.2 (14 Sep 2016) 14 Sep 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +firejail-0.9.38.2.ebuild: Add version 0.9.38.2 It comes with security fixes. 0.9.38 is stable there this one should be stabilized ASAP. Package-Manager: portage-2.3.0 14 Sep 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +files/firejail-0.9.38.2-sysmacros.patch: Add missing patch for 0.9.38.2 Package-Manager: portage-2.3.0 *firejail-0.9.42 (19 Sep 2016) 19 Sep 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +files/firejail-0.9.42-libstdc++.patch, +files/firejail-0.9.42-sysmacros.patch, +firejail-0.9.42.ebuild, metadata.xml: Bump version to 0.9.42 Package-Manager: portage-2.3.0 26 Sep 2016; Agostino Sarubbo <ago@gentoo.org> firejail-0.9.40-r2.ebuild: amd64 stable wrt bug #588258 Package-Manager: portage-2.2.28 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> 26 Sep 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -firejail-0.9.36.ebuild: Remove oldest version Package-Manager: portage-2.3.1 26 Sep 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -firejail-0.9.40.ebuild: Remove older revision of 0.9.40 Package-Manager: portage-2.3.1 27 Sep 2016; Agostino Sarubbo <ago@gentoo.org> firejail-0.9.38.2.ebuild: amd64 stable wrt bug #593710 Package-Manager: portage-2.2.28 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> 27 Sep 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -files/firejail-0.9.38-sysmacros.patch, -files/firejail-0.9.40-sysmacros.patch, -firejail-0.9.38.ebuild, -firejail-0.9.40-r2.ebuild: Remove versions with potential security failures See news from September 2016 at <https://firejail.wordpress.com/>. Package-Manager: portage-2.3.1 *firejail-0.9.38.4 (28 Oct 2016) 28 Oct 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +files/firejail-0.9.38.4-sysmacros.patch, +firejail-0.9.38.4.ebuild: Bump LTS version to 0.9.38.4 0.9.38.4 addresses CVE-2016-7545. Package-Manager: portage-2.3.2 *firejail-0.9.42-r1 (30 Oct 2016) 30 Oct 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -firejail-0.9.42.ebuild, +firejail-0.9.42-r1.ebuild, metadata.xml: Remove busybox flag Busybox workaround is only meant for busybox-based system. Gentoo-Bug: 597910 Package-Manager: portage-2.3.2 *firejail-0.9.44 (01 Dec 2016) 01 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +files/firejail-0.9.44-sysmacros.patch, +firejail-0.9.44.ebuild: Bump version Package-Manager: portage-2.3.2 *firejail-0.9.44.2 (08 Dec 2016) 08 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -files/firejail-0.9.44-sysmacros.patch, +files/firejail-0.9.44.2-sysmacros.patch, -firejail-0.9.44.ebuild, +firejail-0.9.44.2.ebuild: Bump version 0.9.44.2 is a maintenance and security release for version 0.9.44. Gentoo-Bug: 601994 Package-Manager: portage-2.3.2 08 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -files/firejail-0.9.42-libstdc++.patch, -files/firejail-0.9.42-sysmacros.patch, -firejail-0.9.42-r1.ebuild: Remove the vulnerable version Package-Manager: portage-2.3.2 13 Dec 2016; Agostino Sarubbo <ago@gentoo.org> firejail-0.9.44.2.ebuild: amd64 stable wrt bug #601994 Package-Manager: portage-2.3.0 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> 13 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -files/firejail-0.9.38.2-sysmacros.patch, -firejail-0.9.38.2.ebuild: Remove vulnerable stable version Gentoo-Bug: 601994 Package-Manager: portage-2.3.3 *firejail-0.9.38.4-r1 (15 Dec 2016) 15 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +files/firejail-0.9.38.4-0001-etc-resolv.conf-overwrite.patch, -firejail-0.9.38.4.ebuild, +firejail-0.9.38.4-r1.ebuild: Backport security fix to 0.9.38.4 Gentoo-Bug: 601994 Package-Manager: portage-2.3.3 *firejail-0.9.38.6 (18 Dec 2016) 18 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> +files/firejail-0.9.38.6-sysmacros.patch, +firejail-0.9.38.6.ebuild: Bump LTS version It includes security bug fix back-ported to 0.9.38.4. Package-Manager: Portage-2.3.3, Repoman-2.3.1 18 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -files/firejail-0.9.38.4-0001-etc-resolv.conf-overwrite.patch, -files/firejail-0.9.38.4-sysmacros.patch, -firejail-0.9.38.4-r1.ebuild: Remove older LTS version Package-Manager: Portage-2.3.3, Repoman-2.3.1 18 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> -files/firejail-0.9.38.6-sysmacros.patch, -firejail-0.9.38.6.ebuild, firejail-0.9.44.2.ebuild, metadata.xml: lts: Move LTS version to separate package Having it in a separate package makes it easier for users to follow LTS branch of firejail. Before that users had to mask older versions to test LTS. It's better than having it slotted because portage by default picks up latest version from any slot and user would have to explicitly install particular slot. Package-Manager: Portage-2.3.3, Repoman-2.3.1 18 Dec 2016; Amadeusz Żołnowski <aidecoe@gentoo.org> firejail-0.9.44.2.ebuild: Block firejail-lts rather than itself Package-Manager: Portage-2.3.3, Repoman-2.3.1