-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Time for another cifs-utils release! Highlights: * binaries are now built by default with PIE and RELRO support for better protection against exploits * better debugging and warnings for cifs.upcall and cifscreds * better integration with systemd by having mount.cifs use systemd-ask-password if it's appropriate and available webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils tarball: ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ git: git://git.samba.org/cifs-utils.git gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary Detailed list of changes since 5.5: commit df561d40947e0b520deb48e1a4749afe9787949a Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Fri Jun 1 13:56:21 2012 -0400 autoconf: set version to 5.5.1 for interim builds Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> commit 74edf24d9780900f3ce15d2403c6e331b031d454 Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Thu Jun 14 10:59:18 2012 -0400 automake: revert -Werror by default I think in hindsight, that adding -Werror by default was a mistake. cifs-utils is built in a wide range of environments and tools, and it's very difficult to eliminate all of the possible warnings. Let's go ahead and remove it and reduce the steady trickle of patches that are simply to silence obscure warnings. Cc: Suresh Jayaraman <sjayaraman@xxxxxxxx> Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> commit 0eb3daa4b17ee64b464594f1a5d413ecb364957c Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Thu Jun 14 10:59:18 2012 -0400 mount.cifs: set rc to 0 in libcap toggle_dac_capability Thus spake Jochen: The mount.cifs program from the cifs-utils package 5.5 did not work on my Linux system. It just exited without an error message and did not mount anything. [...] I think, when this variable rc is now used in this function, it has also to be properly initialized there. Reported-by: Jochen Roderburg <roderburg@xxxxxxxxxxxx> Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> commit b7bea5254443cb121b0cf03a64b123b85d7f9fbb Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Thu Jun 14 11:05:43 2012 -0400 cifs.upcall: more debug logging for krb5 upcalls While helping to track down a configuration problem, I found this little bit of extra debug logging to be helpful. Might as well make it part of the stock binary. Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> commit a8611e25d44211cd57a91dce4fe7d7a7ad7534d4 Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Fri Jul 6 11:48:18 2012 -0400 replace: remove bzero() redefinition from replace.h I borrowed replace.h from samba when I split off the package, and we have a ton of definitions in there that we don't really need. This is one of them and it causes a warning when we build on RHEL5. Reported-by: Andreas Schneider <asn@xxxxxxxxx> Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> commit 233e17db8ef7edba1fea660e076a03a56b0117d2 Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Mon Jul 9 14:12:33 2012 -0400 autoconf: add --enable-pie and --enable-relro -pie and -fpie enable the building of position-independent executables, and -Wl,-z,relro turns on read-only relocation support in gcc. These options are important for security purposes to guard against possible buffer overflows that lead to exploits. Follow the example of samba here and enable these by default, but add configure options that allow people to turn them off at build-time if necessary. We may also want to eventually add checks to ensure that the compiler and linker understand these options, but I'll wait until we have some evidence that it's needed before I expend the effort. Reported-by: Andreas Schneider <asn@xxxxxxxxx> Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> commit ced19dedc0fa7b36087b8eaeef6a6a9dc76aa55e Author: Andreas Schneider <asn@xxxxxxxxxxxxxx> Date: Mon Jul 9 22:21:04 2012 -0400 autoconf: Fix building with autoconf version older than 2.60. AC_PROG_SED is only avaliable in recent autoconf versions. Use AC_CHECK_PROG instead if AC_PROG_SED is not present. Signed-off-by: Andreas Schneider <asn@xxxxxxxxxxxxxx> commit 4e264031d0da7d3f2a287337e86b623e814f5c56 Author: Ankit Jain <jankit@xxxxxxx> Date: Wed Jul 18 06:47:07 2012 -0400 mount.cifs: Use systemd's mechanism for getting password, if present. If systemd is running and /bin/systemd-ask-password if available, then use that else fallback on getpass(..). And add a --enable-systemd configure option, which defaults to yes. Signed-off-by: Ankit Jain <jankit@xxxxxxxx> commit 877701f3cc23df3cb2a293c060bdbf05a87bff6a Author: Luk Claes <luk@xxxxxxxxxx> Date: Thu Jul 19 09:27:01 2012 -0400 mount.cifs: Use errno instead of having unknown error When access() fails, use errno for a sensible error message. Signed-off-by: Luk Claes <luk@xxxxxxxxxx> commit c44d290f3b5f221e7617bdb409bb8e44ceafef3e Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Fri Jul 20 10:30:50 2012 -0400 cifscreds: add a check and warnings for session keyring problems Many distros do not call into pam_keyinit to set up the session keyring properly at login time. When cifscreds add is used in such a session, the kernel will spawn a new session keyring in which to install the credentials. That keyring will then go away once the cifscreds process exits. Check for this situation by looking to see if the session and user-session keyrings are the same. Throw a warning if so, and add some verbiage to the cifscreds manpage that explains the issue. Also, if the session keyring can't be queried for any reason, then cause the program to error out. Acked-by: David Howells <dhowells@xxxxxxxxxx> Reported-by: Milan Knížek <knizek.confy@xxxxxxxxx> Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> commit 9449c2ac7419ef45fc08f7d4a654c100ee26fa17 Author: Jeff Layton <jlayton@xxxxxxxxx> Date: Thu Jul 26 10:41:24 2012 -0400 autoconf: set version to 5.6 Signed-off-by: Jeff Layton <jlayton@xxxxxxxxx> -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) iQIcBAEBAgAGBQJQEVp8AAoJEAAOaEEZVoIVMmcP/jbcysz6rrxOPpdMgGzgttIl YeBY/vpcmDE/lR68WK+NjeC26AkcNAyYcuMw9HzwtGxdo8Ni1ygRYB69BwdHkuLq aeRwdDgJ5A7JzQCQmCj5HDrHyucuDrr5PZIcfokh4OZ0ivED1IUqS1lDruVZwn73 r5JWJ96gX9XNj7uP/fLfWu2QrOL/+YGhefMmKk2ja7BuA36AuP5G2d/h9nniAOza fHPrmtKwp6wcGKDyzyIIsc0qwL+rvcAs2kc4h5Bt+Go0IJhlwyDccU90vBNoynhP OaiRyf7H0NjcNIeqAMknqaJWapAWr4XssiPHUXXAeXXkcZsoF3jAbhQDiYpda2bv I1Zi/7N+qHLU18ygjfEPqimXPmelX9Nj4aK9+7G6rMJUTSPprmu5ScEHJLsoqfR6 THfmBPlqgZsenHx36THL2IXSkAT/T5nPxAkwOAsUeJPSu/9spBdBnpcnPUUfOda2 BmNJ5GSf3Ytz1fWO1PY+BjzN3p4Y5KV9HhifeyIPuI/0BE9jW65Y6mG4Fn7BKxEF P97jMZORdSd9IxWYAwuDXKo53Qi162vYFypHtxIfbNvc5tmDQP1zcrU6hCpKLBha JY1lNDOeNH+hEBa4J+vCzBu5WY8YzMH3p5vZrveicn2LydSsyxpqtgasYFD1h/hj bPWmTZBqPCW/CI+Iy9q+ =FkTM -----END PGP SIGNATURE----- ��.n��������+%������w��{.n�����{�����ܨ}���Ơz�j:+v�����w����ޙ��&�)ߡ�a����z�ޗ���ݢj��w�f
