-
Committer:
Bazaar Package Importer
-
Author(s):
Kees Cook
-
Date:
2009-02-06 08:22:44 UTC
-
mfrom:
(2.1.2 lenny)
-
Revision ID:
james.westby@ubuntu.com-20090206082244-gbv64qfmvr2pkys3
Tags: 1:3.2.7-11ubuntu1
* Merge from debian unstable, remaining changes:
- debian/{postinst,rules}: init script to priority 17, remove on upgrade.
- debian/rules (Ubuntu-specific):
- install sysctl files from new sysctl.d directory.
- append debian/sysctl.d/*.conf.$DEB_HOST_ARCH to 10-arch-specific.conf
- debian/sysctl.d (Ubuntu-specific):
- 10-console-messages.conf: stop low-level kernel messages on console.
- 10-network-security.conf: enable "rp_filter" by default.
- 10-process-security.conf: block lower 64k allocations to protect
kernel from NULL deref attacks.
- 10-keyboard.conf.powerpc: mouse button emulation on PowerPC.
* procps-3.2.7/debian/{preinst,postinst,postrm}: drop
sysctl.d/10-tcp-timestamps-workaround.conf again now that we have a
fixed kernel, and make sure it gets removed on upgrade to this version
(LP: #264019, duplicated from 1:3.2.7-9ubuntu2.1).
* debian/sysctl.d/10-network-security.conf: enable SYN-flood protection
by default (LP: #57091).