From: Frank Brehm <frank@brehm-online.com>
Date: Mon, 11 Jul 2022 08:07:14 +0000 (+0200)
Subject: committing changes in /etc made by "apt dist-upgrade -y"
X-Git-Url: https://git.uhu-banane.net/?a=commitdiff_plain;h=ea54191935bf26c6f9bdecdfeb04ba8ba23d6828;p=config%2Fns3%2Fetc.git

committing changes in /etc made by "apt dist-upgrade -y"

Packages with configuration changes:
-base-files 11.1+deb11u3 amd64
+base-files 11.1+deb11u4 amd64
-postfix 3.5.6-1+b1 amd64
+postfix 3.5.13-0+deb11u1 amd64
-tcpdump 4.99.0-2 amd64
+tcpdump 4.99.0-2+deb11u1 amd64

Package changes:
-apache2 2.4.53-1~deb11u1 amd64
-apache2-bin 2.4.53-1~deb11u1 amd64
-apache2-data 2.4.53-1~deb11u1 all
-apache2-utils 2.4.53-1~deb11u1 amd64
+apache2 2.4.54-1~deb11u1 amd64
+apache2-bin 2.4.54-1~deb11u1 amd64
+apache2-data 2.4.54-1~deb11u1 all
+apache2-utils 2.4.54-1~deb11u1 amd64
-base-files 11.1+deb11u3 amd64
+base-files 11.1+deb11u4 amd64
-bash 5.1-2+b3 amd64
+bash 5.1-2+deb11u1 amd64
-distro-info-data 0.51+deb11u1 all
+distro-info-data 0.51+deb11u2 all
-dpkg 1.20.10 amd64
-dpkg-dev 1.20.10 all
+dpkg 1.20.11 amd64
+dpkg-dev 1.20.11 all
-gnutls-bin 3.7.1-5 amd64
+gnutls-bin 3.7.1-5+deb11u1 amd64
-libapache2-mod-php7.4 7.4.28-1+deb11u1 amd64
+libapache2-mod-php7.4 7.4.30-1+deb11u1 amd64
-libdpkg-perl 1.20.10 all
+libdpkg-perl 1.20.11 all
-libfreetype6 2.10.4+dfsg-1 amd64
-libfribidi0 1.0.8-2 amd64
+libfreetype6 2.10.4+dfsg-1+deb11u1 amd64
+libfribidi0 1.0.8-2+deb11u1 amd64
-libgnutls-dane0 3.7.1-5 amd64
-libgnutls-openssl27 3.7.1-5 amd64
-libgnutls30 3.7.1-5 amd64
+libgnutls-dane0 3.7.1-5+deb11u1 amd64
+libgnutls-openssl27 3.7.1-5+deb11u1 amd64
+libgnutls30 3.7.1-5+deb11u1 amd64
-libintl-perl 1.26-3 all
-libintl-xs-perl 1.26-3 amd64
+libintl-perl 1.26-3+deb11u1 all
+libintl-xs-perl 1.26-3+deb11u1 amd64
-linux-image-amd64 5.10.120-1 amd64
-linux-libc-dev 5.10.120-1 amd64
+linux-image-5.10.0-16-amd64 5.10.127-1 amd64
+linux-image-amd64 5.10.127-1 amd64
+linux-libc-dev 5.10.127-1 amd64
-logrotate 3.18.0-2 amd64
+logrotate 3.18.0-2+deb11u1 amd64
-nano 5.4-2 amd64
+nano 5.4-2+deb11u1 amd64
-needrestart 3.5-4+deb11u1 all
+needrestart 3.5-4+deb11u2 all
-openssh-client 1:8.4p1-5 amd64
-openssh-server 1:8.4p1-5 amd64
-openssh-sftp-server 1:8.4p1-5 amd64
+openssh-client 1:8.4p1-5+deb11u1 amd64
+openssh-server 1:8.4p1-5+deb11u1 amd64
+openssh-sftp-server 1:8.4p1-5+deb11u1 amd64
-php7.4 7.4.28-1+deb11u1 all
-php7.4-cli 7.4.28-1+deb11u1 amd64
-php7.4-common 7.4.28-1+deb11u1 amd64
-php7.4-gd 7.4.28-1+deb11u1 amd64
-php7.4-json 7.4.28-1+deb11u1 amd64
-php7.4-ldap 7.4.28-1+deb11u1 amd64
-php7.4-opcache 7.4.28-1+deb11u1 amd64
-php7.4-readline 7.4.28-1+deb11u1 amd64
+php7.4 7.4.30-1+deb11u1 all
+php7.4-cli 7.4.30-1+deb11u1 amd64
+php7.4-common 7.4.30-1+deb11u1 amd64
+php7.4-gd 7.4.30-1+deb11u1 amd64
+php7.4-json 7.4.30-1+deb11u1 amd64
+php7.4-ldap 7.4.30-1+deb11u1 amd64
+php7.4-opcache 7.4.30-1+deb11u1 amd64
+php7.4-readline 7.4.30-1+deb11u1 amd64
-postfix 3.5.6-1+b1 amd64
-postfix-pcre 3.5.6-1+b1 amd64
-postfix-sqlite 3.5.6-1+b1 amd64
-procmail 3.22-26 amd64
+postfix 3.5.13-0+deb11u1 amd64
+postfix-pcre 3.5.13-0+deb11u1 amd64
+postfix-sqlite 3.5.13-0+deb11u1 amd64
+procmail 3.22-26+deb11u1 amd64
-tcpdump 4.99.0-2 amd64
+tcpdump 4.99.0-2+deb11u1 amd64
---

diff --git a/apparmor.d/usr.bin.tcpdump b/apparmor.d/usr.bin.tcpdump
index 38b2a35..732a691 100644
--- a/apparmor.d/usr.bin.tcpdump
+++ b/apparmor.d/usr.bin.tcpdump
@@ -54,6 +54,10 @@ profile tcpdump /usr/bin/tcpdump {
 
   # for -r, -F and -w
   /**.[pP][cC][aA][pP] rw,
+  /**.[cC][aA][pP] rw,
+  # -W adds a numerical suffix
+  /**.[pP][cC][aA][pP][0-9]* rw,
+  /**.[cC][aA][pP][0-9]* rw,
 
   # for convenience with -r (ie, read pcap files from other sources)
   /var/log/snort/*log* r,
diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels
index bede81d..b5b32b9 100644
--- a/apt/apt.conf.d/01autoremove-kernels
+++ b/apt/apt.conf.d/01autoremove-kernels
@@ -1,2 +1,2 @@
 // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal
-APT::LastInstalledKernel "5.10.0-15-amd64";
+APT::LastInstalledKernel "5.10.0-16-amd64";
diff --git a/debian_version b/debian_version
index 8bb4222..1c7134d 100644
--- a/debian_version
+++ b/debian_version
@@ -1 +1 @@
-11.3
+11.4
diff --git a/network/if-up.d/postfix b/network/if-up.d/postfix
index f1203ff..49581b0 100755
--- a/network/if-up.d/postfix
+++ b/network/if-up.d/postfix
@@ -38,6 +38,7 @@ fi
 # hanging around.  Yes, sendmail is a symlink...
 if [ -n "$RUNNING" ]; then
 	if [ -x /usr/sbin/sendmail ]; then
-		/usr/sbin/sendmail -q >/dev/null 2>&1
+		# Don't propagate the exit code on failure; cf. #959864
+		/usr/sbin/sendmail -q >/dev/null 2>&1 || true
 	fi
 fi
diff --git a/postfix/postfix-script b/postfix/postfix-script
index 9a90720..d9b72bf 100755
--- a/postfix/postfix-script
+++ b/postfix/postfix-script
@@ -346,7 +346,10 @@ check-warn)
 	    -exec $WARN group or other writable: {} \;
 
 	find $todo -type l | while read f; do \
-	    readlink "$f" | grep -q / && $WARN symlink leaves directory: "$f"; \
+	    # makedefs out known to be a symlink and OK
+	    if [ "$f" != "/etc/postfix/./makedefs.out" ]; then \
+	      readlink "$f" | grep -q / && $WARN symlink leaves directory: "$f"; \
+	    fi \
 	done; \
 
 	# Check Postfix mail_owner-owned directory tree owner/permissions.
diff --git a/ppp/ip-up.d/postfix b/ppp/ip-up.d/postfix
index f1203ff..49581b0 100755
--- a/ppp/ip-up.d/postfix
+++ b/ppp/ip-up.d/postfix
@@ -38,6 +38,7 @@ fi
 # hanging around.  Yes, sendmail is a symlink...
 if [ -n "$RUNNING" ]; then
 	if [ -x /usr/sbin/sendmail ]; then
-		/usr/sbin/sendmail -q >/dev/null 2>&1
+		# Don't propagate the exit code on failure; cf. #959864
+		/usr/sbin/sendmail -q >/dev/null 2>&1 || true
 	fi
 fi