debian/0000775000000000000000000000000012454525451007177 5ustar debian/nsd.lintian-overrides0000664000000000000000000000013212273737260013341 0ustar nsd: extra-license-file usr/share/doc/nsd/contrib/bind2nsd/COPYING nsd: no-debconf-config debian/nsd3.postinst0000664000000000000000000000103012273737260011647 0ustar #!/bin/sh -e #DEBHELPER# DOCDIR=/usr/share/doc/nsd3 DOCLINK=nsd if [ -d $DOCDIR ] && [ ! -L $DOCDIR ]; then rmdir $DOCDIR ln -s $DOCLINK $DOCDIR fi # Source debconf library. . /usr/share/debconf/confmodule if test -d "/etc/nsd3"; then # cleanup a backup cruft for ext in '~' '%' .bak; do rm -f /etc/nsd/nsd.conf$ext done # try to remove config directory rmdir "/etc/nsd3" >/dev/null 2>/dev/null || true if test -d "/etc/nsd3"; then db_input high nsd3/old_confdir_exists || true db_go fi fi debian/nsd.links0000664000000000000000000000011612273737260011025 0ustar usr/share/man/man8/nsd-control.8.gz usr/share/man/man8/nsd-control-setup.8.gz debian/po/0000775000000000000000000000000012273737260007617 5ustar debian/po/templates.pot0000664000000000000000000000237612273737260012351 0ustar # SOME DESCRIPTIVE TITLE. # Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER # This file is distributed under the same license as the PACKAGE package. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: nsd\n" "Report-Msgid-Bugs-To: nsd@packages.debian.org\n" "POT-Creation-Date: 2013-11-12 16:56+0100\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "Language: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=CHARSET\n" "Content-Transfer-Encoding: 8bit\n" #. Type: note #. Description #: ../templates:1001 msgid "Configuration directory for NSD has been changed" msgstr "" #. Type: note #. Description #: ../templates:1001 msgid "WARNING: Your old NSD 3 configuration directory is not empty." msgstr "" #. Type: note #. Description #: ../templates:1001 msgid "" "Please note that configuration directory has changed from /etc/nsd3 to /etc/" "nsd in NSD 4. The new nsd (>= 4.0.0-1) package will automatically move your " "configuration file from /etc/nsd3/nsd.conf to /etc/nsd/nsd.conf, but it will " "not migrate everything under /etc/nsd3, so you need to check and move your " "configuration snippets and zone files by hand." msgstr "" debian/po/POTFILES.in0000664000000000000000000000004412273737260011372 0ustar [type: gettext/rfc822deb] templates debian/nsd.postinst0000664000000000000000000000347312454525445011602 0ustar #!/bin/sh set -e if test "$1" = "configure"; then # Move /etc/nsd3/nsd.conf to /etc/nsd/nsd.conf on first install of NSD 4 OLDCONFFILE=/etc/nsd3/nsd.conf NEWCONFFILE=/etc/nsd/nsd.conf if [ -z "$2" ] && [ -f "$OLDCONFFILE" ]; then echo "Preserving user changes to $NEWCONFFILE (renamed from $OLDCONFFILE)..." mv -f "$NEWCONFFILE" "$NEWCONFFILE.dpkg-new" mv -f "$OLDCONFFILE" "$NEWCONFFILE" fi # Create nsd user and group if ! getent passwd nsd > /dev/null; then adduser --quiet --system --group --no-create-home --home /var/lib/nsd nsd fi # Make /var/lib/nsd writeable by nsd:nsd user if ! dpkg-statoverride --list /var/lib/nsd >/dev/null; then dpkg-statoverride --update --add nsd nsd 0755 /var/lib/nsd >/dev/null 2>/dev/null || true fi # Cleanup some cruft from prior NSD 4 packaging (it can go away before release) if [ -n "$2" ] && dpkg --compare-versions 4.0.0-1~ gt "$2"; then dpkg-statoverride --remove /etc/nsd/nsd.conf >/dev/null 2>/dev/null || true dpkg-statoverride --remove /etc/nsd >/dev/null 2>/dev/null || true fi # Remove the old statoverrides from nsd3 package for f in /var/lib/nsd3 /etc/nsd3/nsd.conf /etc/nsd3; do if dpkg-statoverride --list "$f" >/dev/null; then dpkg-statoverride --remove "$f" >/dev/null 2>/dev/null || true fi done # Generate the control certificates if needed if ! [ -f /etc/nsd/nsd_control.key ]; then nsd-control-setup >/dev/null 2>&1 || true fi # This is a remedy for purging already removed nsd3 after nsd installation nsd3_postrm=$(dpkg-query --control-path nsd3 postrm 2>/dev/null || true) if [ -n "$nsd3_postrm" ] && [ -f "$nsd3_postrm" ] && grep -q deluser "$nsd3_postrm"; then sed -i -e "/deluser --quiet nsd/ d" "$nsd3_postrm" fi fi #DEBHELPER# exit 0 debian/examples0000664000000000000000000000002012273737260010732 0ustar nsd.conf.sample debian/copyright0000664000000000000000000001060112273737260011132 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: NSD Source: http://www.nlnetlabs.nl/nsd/ Files: debian/* Copyright: 2006-2007, Pierre Habouzit . 2009-2012, Ondřej Surý . 2011-2012, Jeroen Schot . License: BSD-2-clause Files: compat/basename.c Copyright: N/A License: public-domain This file is in the public domain. Files: compat/fake-rfc2553.c compat/fake-rfc2553.h Copyright: 2000-2003, Damien Miller. All rights reserved. 1999, WIDE Project. All rights reserved. License: BSD-2-clause Files: compat/inet_aton.c Copyright: 1983, 1990, 1993, The Regents of the University of California. All rights reserved. License: BSD-2-clause Files: compat/b64_ntop.c compat/b64_pton.c Copyright: 1996, 1998, Internet Software Consortium. License: MIT Files: compat/strlcpy.c Copyright: 1998, Todd C. Miller . License: MIT Files: contrib/bind2nsd/* Copyright: 2007, Secure64 Software Corporation. License: BSD-2-clause Files: * Copyright: 2001-2011, NLnet Labs. All rights reserved. License: NSD-BSD-like License: BSD-2-clause Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: . The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. License: MIT Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. . THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. License: NSD-BSD-like This software is open source. . Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: . Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. . Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. . Neither the name of the NLNET LABS nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. . THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. debian/nsd3.postrm0000664000000000000000000000032012273737260011311 0ustar #!/bin/sh -e #DEBHELPER# if [ "$1" = "purge" -a -e /usr/share/debconf/confmodule ]; then # Source debconf library. . /usr/share/debconf/confmodule # Remove my changes to the db. db_purge fi debian/changelog0000664000000000000000000003656512454525432011067 0ustar nsd (4.0.1-1ubuntu0.1) trusty-proposed; urgency=low * Fix "invalid user: nsd" install error by moving auto-generated debhelper code to the end of the postinst script. (LP: #1311886) -- Evan Broder Sun, 11 Jan 2015 17:55:51 +0100 nsd (4.0.1-1) unstable; urgency=low * New upstream version 4.0.1 * Disable recvmmsg by default (Closes: #737540) -- Ondřej Surý Mon, 03 Feb 2014 17:07:05 +0100 nsd (4.0.0-5) unstable; urgency=high * Don't fail when nsd3 is not installed (Closes: #729612) -- Ondřej Surý Mon, 18 Nov 2013 14:19:30 +0100 nsd (4.0.0-4) unstable; urgency=high * Use 'dpkg-query --control-path nsd3 postrm' instead of hard-coded path * Set urgency to high since we need to push fix for nsd.conf migration to testing (forgot to do so in last upload). -- Ondřej Surý Wed, 13 Nov 2013 13:30:53 +0100 nsd (4.0.0-3) unstable; urgency=low * Add updated and fixed systemd service file (Closes: #729166) * Move /etc/nsd3/nsd.conf to /etc/nsd/nsd.conf manually since dpkg-maintscript-helper checks for ownership of moved config file (Closes: #729120) * Remove the old nsd.conf.example configfile on upgrade to nsd3 (4.0.0) and also remove /etc/init.d/nsd3 and /etc/cron.d/nsd3 * Cleanup nsd3 statoverrides in nsd.postinst * Don't remove system user in postrm * Link nsd-control-setup manpage to nsd-control * Add a hack^Hsolution to prevent nsd user removal when nsd3 was removed, but not purged, nsd installed and nsd3 purged after that (very rare case, but can happen) -- Ondřej Surý Tue, 12 Nov 2013 17:33:38 +0100 nsd (4.0.0-2) unstable; urgency=high * Drop the cronjob as it is no longer needed * Bump the urgency to high, so people don't install 4.0.0~rc3 from testing for too long -- Ondřej Surý Wed, 06 Nov 2013 23:41:55 +0100 nsd (4.0.0-1) unstable; urgency=low * New upstream version 4.0.0 * $PIDFILE in init script should be file and not a directory * lintian: transitional package should be oldlibs extra -- Ondřej Surý Wed, 06 Nov 2013 17:55:49 +0100 nsd (4.0.0~rc3-1) unstable; urgency=low * New upstream version 4.0.0~rc3 * Add nsd3 transitional package to finish the move from nsd3 to nsd package * Add nsd.maintscript to move the /etc/nsd3/nsd.conf from nsd3 to /etc/nsd/nsd.conf to nsd package -- Ondřej Surý Thu, 24 Oct 2013 21:04:45 +0200 nsd (4.0.0~rc2-1) unstable; urgency=low * New upstream version 4.0.0~rc2 * Cleanup build rules to debian/compat = 9 * Use master/pristine-tar/upstream branches * Add libevent-dev to B-D * Update init.d script, and add upstart and systemd support -- Ondřej Surý Mon, 21 Oct 2013 16:51:29 +0200 nsd (4.0.0~b5-1) unstable; urgency=low * New upstream version 4.0.0~b5 * Remove obsolete patches and update the ones still relevant -- Ondřej Surý Sun, 06 Oct 2013 00:26:57 +0200 nsd3 (3.2.16-1) unstable; urgency=low * New upstream version 3.2.16 -- Ondřej Surý Fri, 27 Sep 2013 08:44:02 +0200 nsd3 (3.2.15-1) unstable; urgency=low * New upstream version 3.2.15 (Closes: #711490) * Remove RRL patch as it is already included in new upstream version * Update patches for 3.2.15 release -- Ondřej Surý Thu, 27 Jun 2013 15:55:53 +0200 nsd3 (3.2.12-3) unstable; urgency=low * Cleanup autoreconf -fi stuff in dh_auto_clean target -- Ondřej Surý Tue, 19 Feb 2013 13:11:59 +0100 nsd3 (3.2.12-2) unstable; urgency=low * Add Response Rate Limiting patch (Courtesy of Matthijs Mekking of NLnet Labs) * Regenerate configure due to RRL patch and ./configure with --enable-ratelimit -- Ondřej Surý Wed, 06 Feb 2013 14:09:36 +0100 nsd3 (3.2.12-1) unstable; urgency=low * Imported Upstream version 3.2.12 - Fix for VU#624931 CVE-2012-2978: NSD denial of service vulnerability from non-standard DNS packet from any host on the internet as discovered by Marek Vavrusa and Lubos Slovak from CZ.NIC Labs http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt -- Ondřej Surý Thu, 19 Jul 2012 15:06:15 +0200 nsd3 (3.2.11-1) unstable; urgency=low * Imported Upstream version 3.2.11 - Fallback to AXFR if IXFR is unknown at the primary. NSD considers IXFR unknown at the primary if there is a negative response for the IXFR RRtype. This does not override the value for 'allow-axfr-fallback'. - Allow for reading in new DNSKEY algorithm mnemonics (RFC5155, RFC5702, RFC5933, and RFC6605 (ECDSA)). - Zone statistics, enable with --enable-zone-stats. This stores the BIND8 stats per zone in a configurable statistics file. This option does not scale and should therefore not be enabled when serving many zones. - Support for TLSA RRtype (DANE). - Fix for qtype ANY for a wildcard domain in NSEC signed zone: Don't add the wildcard domain NSEC into the answer section. Instead, put the wildcard expanded NSEC into the answer section and keep the wildcard domain NSEC in the authority section. - Fix for accept spinning reported by OpenBSD. - Fix restart failed due to bad ixfr packet because of zone removed from nsd.conf. - Bugfix #453: typo in nsdc man page. - NSD uses the query name for dname compression again (Fix #235 had as side effect that this didn't happen anymore and is hereby undone). -- Ondřej Surý Thu, 19 Jul 2012 13:04:56 +0200 nsd3 (3.2.10-1) unstable; urgency=low [ Jeroen Schot ] * Imported Upstream version 3.2.10 -- Ondřej Surý Wed, 15 Feb 2012 21:23:02 +0100 nsd3 (3.2.9-3) unstable; urgency=low [ Jeroen Schot ] * Sync long description of nsd with nsd3 * Drop 0007-Fix-spelling-errors-in-manpage.patch, applied upstream * Move transitional nsd package to oldlibs/extra * Add minimal DEP3 headers to patches * Use Breaks instead of Conflicts with old nsd * Switch from hardening-wrapper to (hardened) dpkg-buildflags [ Ondřej Surý ] * Use nsd3 version and not php5 version in postinst :) * Don't break the build when buildflags.mk is not found [ Jeroen Schot ] * Call 'nsdc rebuild' via init script to handle new and unconfigured installations without nsd.conf -- Ondřej Surý Tue, 31 Jan 2012 16:03:31 +0100 nsd3 (3.2.9-2) unstable; urgency=medium * Rebuild nsd.db database if upgrading from pre-3.2.9 version -- Ondřej Surý Tue, 31 Jan 2012 12:38:36 +0100 nsd3 (3.2.9-1) unstable; urgency=low [ Ondřej Surý ] * Update Vcs-* links * Bump standards to 3.9.2 [ Jeroen Schot ] * Install real upstream changelog (instead of README) * Drop unneeded quilt stuff, handled by dpkg-source * Add hostmaster alias to /etc/aliases in postinst (Closes: #625810) * Fix spelling errors in nsd.conf.5.in. [ Ondřej Surý ] * Imported Upstream version 3.2.9 * Update verbose patch * Add NSEC3 wildcard Bind 9 compatibility patch (See upstream bug 390) -- Ondřej Surý Mon, 28 Nov 2011 19:37:06 +0100 nsd3 (3.2.8-3) unstable; urgency=low [ Jeroen Schot ] * Install upstream changelog * Replace '#!/bin/sh -e' with separate 'set -e' * Add newline to lintian-override file [ Ondřej Surý ] * Conditionally define MAXHOSTNAMELEN to allow hurd build -- Ondřej Surý Sun, 15 May 2011 16:43:06 +0200 nsd3 (3.2.8-2) unstable; urgency=low * Fix statoverride file breakage (Closes: #621071) -- Ondřej Surý Thu, 07 Apr 2011 16:14:29 +0200 nsd3 (3.2.8-1) unstable; urgency=low * Imported Upstream version 3.2.8 (Closes: #619495) * Add reload option to nsd3.init (Closes: #616404) -- Ondřej Surý Wed, 16 Mar 2011 11:58:03 +0100 nsd3 (3.2.7-1) unstable; urgency=low * Imported Upstream version 3.2.7 * Refreshed patch for new release * Remove 0006-fix_manpages.patch; merged upstream -- Ondřej Surý Mon, 24 Jan 2011 14:26:57 +0100 nsd3 (3.2.6-3) unstable; urgency=low * Don't run init script if config file is missing (Closes: #603383) -- Ondřej Surý Thu, 02 Dec 2010 16:00:19 +0100 nsd3 (3.2.6-2) unstable; urgency=high * Install files into the package (urgency high, because it's unusable) -- Ondřej Surý Fri, 13 Aug 2010 16:12:34 +0200 nsd3 (3.2.6-1) unstable; urgency=low * New upstream version * Add transitional nsd package to obsolete nsd 2.x * Add debian/NEWS file with instructions for nsd 2.x users * Update copyright file to include files in contrib/ * Fix errors in manpages * debian/control changes: + Bump standards version to 3.9.1 + Update VCS links in debian/control -- Ondřej Surý Wed, 04 Aug 2010 17:06:27 +0200 nsd3 (3.2.5-1) unstable; urgency=low * New upstream version 3.2.5 -- Ondřej Surý Thu, 15 Apr 2010 11:43:30 +0200 nsd3 (3.2.5~rc1-1) unstable; urgency=low * New upstream RC version * Merge 3.2.4-1.1 NMU changes * Enable experimental mmap support * Enable hardened build -- Ondřej Surý Wed, 07 Apr 2010 16:36:56 +0200 nsd3 (3.2.4-1.1) unstable; urgency=low * Non-maintainer upload. * Fix "Installation fails because of missing /etc/nsd3/nsd.conf"; apply patch from martin f krafft (closes: #570160). * Fix lintian errors: add $remote_fs to required-start and -stop in the init script. (The other lintian error about /var/run/nsd3/ looks bogus as this directory is re-created in the init script anyway.) -- gregor herrmann Mon, 08 Mar 2010 22:30:10 +0100 nsd3 (3.2.4-1) unstable; urgency=low * New upstream version 3.2.4 * New maintainer * Convert to 3.0 (quilt) source package * Convert to new debhelper (>= 7) * Refreshed debian/patches/0005-Force-dbdir-to-be-var-lib-nsd3-by- patching-configure.patch * Fix small typo s/diffile/difffile/ in configure call -- Ondřej Surý Mon, 25 Jan 2010 15:18:26 +0100 nsd3 (3.2.3-5) unstable; urgency=low * init: remove spurious and bogus -- argument to nsdc. -- Pierre Habouzit Tue, 10 Nov 2009 21:45:02 +0100 nsd3 (3.2.3-4) unstable; urgency=low * add debian/gbp.conf to be able to use git-dch. * Rename README.packaging, and s/tokyocabinet/nsd3/ in it * postinst: do not remove user-provided statoverrides. -- Pierre Habouzit Mon, 09 Nov 2009 21:12:27 +0100 nsd3 (3.2.3-3) unstable; urgency=low * Simplify init script wrt nsdc calls. * Ignore chrooted, as it seems that db paths must be absolute relative to the host environment and not the chroot, IOW the db rebuilds from init work. * Fix permission issue wrt nsd.conf that should be nsd:nsd 640. -- Pierre Habouzit Sun, 08 Nov 2009 19:27:49 +0100 nsd3 (3.2.3-2) unstable; urgency=low * Rework how directories are chowned nsd:root: - use dpkg-statoverride for /usr/lib/nsd3 and /etc/nsd3. - use chown (no -R) for /var/run/nsd3 (Closes: #554893). * Do not rebuild db from postinst, init.d will do it. * Move packaging to collab-maint. * Move standards version to 3.8.3. -- Pierre Habouzit Sun, 08 Nov 2009 18:03:20 +0100 nsd3 (3.2.3-1) unstable; urgency=low * New upstream release. * Pass SHELL=/bin/bash to make so that nsdc.sh gets the proper shebang (Closes: #535878). * Disable largefile as it breaks architectures not allowing unaligned 8-bytes access, and it's likely to be a problem for nsd3 (Closes: #539979). * Make init.d read more values from the actual configuration using nsd-checkconf -o, and do less stuff if people are using chrooted stuff, because we probably aren't doing it right (Closes: #543580). -- Pierre Habouzit Sun, 30 Aug 2009 00:21:05 +0200 nsd3 (3.2.2-1) unstable; urgency=low * New upstream release (Closes: #529418). * Fix bashism in nsdc.sh (Closes: #530152). * Add 0005-Force-dbdir-to-be-var-lib-nsd3-by-patching-configure.patch to fix the use of /var/db. -- Pierre Habouzit Sat, 30 May 2009 11:47:17 +0200 nsd3 (3.2.1-1) unstable; urgency=low * New upstream release. * Use Martin F. Krafft patch to rebuild databases if none exists at startup time (Closes: #523898). * patches/0004-be-sure-nsdc-drops-privilegies-properly-for-anything.patch: drops privileges in nsdc when doing anything else than start/stop (Closes: #500806). -- Pierre Habouzit Mon, 13 Apr 2009 17:53:26 +0200 nsd3 (3.2.0-1) unstable; urgency=low * New upstream release. * update patches/0003-Be-silent-if-there-is-nothing-to-patch.patch to silent nsdc patch even more (Closes: #479222). -- Pierre Habouzit Thu, 15 Jan 2009 14:23:42 +0100 nsd3 (3.1.1-1) unstable; urgency=low * New upstream release. * Add patches/0003-Be-silent-if-there-is-nothing-to-patch.patch to make patch cron silent if there is nothing to patch (Closes: #479222). * Remove reload action fro the init script (Closes: #491883). -- Pierre Habouzit Fri, 15 Aug 2008 16:02:57 +0200 nsd3 (3.0.7-3) unstable; urgency=low * Remove useless docs (Closes: 463527). * Don't compress pdf files either. * Bump Standards-Version to 3.7.3, no changes required. -- Pierre Habouzit Sun, 10 Feb 2008 17:41:53 +0100 nsd3 (3.0.7-2~bpo40+1) etch-backports; urgency=low * Rebuild for Etch backports. -- Pierre Habouzit Wed, 02 Jan 2008 16:23:45 +0100 nsd3 (3.0.7-2) unstable; urgency=low * debian/control: fix Description typos, thanks to Thijs Kinkhorst (Closes: #458645). -- Pierre Habouzit Wed, 02 Jan 2008 16:20:25 +0100 nsd3 (3.0.7-1) unstable; urgency=low * New upstream release. * debian/control: + XS-Vcs-* -> Vcs-*. + Have a real Homepage field. * rework how packaging is done: + use pristine-tar to store the tarballs. + have a debian/patches/ directory. * drop Fix-manpages.patch: obsolete. * make debian/copyright machine-parseable. -- Pierre Habouzit Sat, 24 Nov 2007 18:43:02 +0100 nsd3 (3.0.6-1) unstable; urgency=low * New upstream release. -- Pierre Habouzit Mon, 08 Oct 2007 15:51:00 +0200 nsd3 (3.0.5-3) unstable; urgency=high * (debian/cron.d): add MAILTO=hostmaster so that the proper user gets the mail. * Set urgency to high as it's the sole change, and that for now it fills /var/mail/nsd3 for no good reason. -- Pierre Habouzit Tue, 21 Aug 2007 09:58:43 +0200 nsd3 (3.0.5-2) unstable; urgency=high * (debian/cron.d): + fix sillyness in the way nsdc is called, set urgency to high as it's an RC bug. + set cron date to 4:17 to avoid load surge. -- Pierre Habouzit Fri, 03 Aug 2007 18:01:26 +0200 nsd3 (3.0.5-1~bpo.1) etch-backports; urgency=low * Backport for backports.org. -- Pierre Habouzit Sun, 22 Jul 2007 11:11:06 +0200 nsd3 (3.0.5-1) unstable; urgency=low * Initial release (Closes: 430335). * Pull upstream bugfixes from the NSD_3_0 branch. -- Pierre Habouzit Sun, 24 Jun 2007 15:59:09 +0200 debian/nsd.conf0000664000000000000000000000053512273737260010637 0ustar # NSD configuration file for Debian. # # See the nsd.conf(5) man page. # # See /usr/share/doc/nsd/examples/nsd.conf for a commented # reference config file. # # The following line includes additional configuration files from the # /etc/nsd/nsd.conf.d directory. # WARNING: The glob style doesn't work yet... # include: "/etc/nsd/nsd.conf.d/*.conf" debian/nsd.docs0000664000000000000000000000024312273737260010636 0ustar doc/CREDITS doc/differences.pdf doc/NSD-DATABASE doc/NSD-DIFFFILE doc/NSD-FOR-BIND-USERS doc/README doc/RELNOTES doc/REQUIREMENTS doc/TODO doc/UPGRADING contrib/ debian/templates0000664000000000000000000000102312273737260011116 0ustar Template: nsd3/old_confdir_exists Type: note _Description: Configuration directory for NSD has been changed WARNING: Your old NSD 3 configuration directory is not empty. . Please note that configuration directory has changed from /etc/nsd3 to /etc/nsd in NSD 4. The new nsd (>= 4.0.0-1) package will automatically move your configuration file from /etc/nsd3/nsd.conf to /etc/nsd/nsd.conf, but it will not migrate everything under /etc/nsd3, so you need to check and move your configuration snippets and zone files by hand. debian/nsd.init.d0000664000000000000000000000712712273737260011103 0ustar #!/bin/sh ### BEGIN INIT INFO # Provides: nsd # Required-Start: $network $local_fs $remote_fs $syslog # Required-Stop: $remote_fs $syslog # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: authoritative domain name server # Description: NSD is a authoritative-only domain name server ### END INIT INFO # Author: Ondřej Surý # PATH should only include /usr/* if it runs after the mountnfs.sh script PATH=/sbin:/usr/sbin:/bin:/usr/bin DESC="Name Server Daemon" # Introduce a short description here NAME=nsd # Introduce the short server's name here DAEMON=/usr/sbin/$NAME # Introduce the server's location here CONFFILE=/etc/nsd/nsd.conf DAEMON_ARGS="-c $CONFFILE" SCRIPTNAME=/etc/init.d/nsd NSDC=/usr/sbin/nsd-control # Exit if the package is not installed [ -x $DAEMON ] || exit 0 PIDFILE=$(nsd-checkconf -o pidfile $CONFFILE) # Define LSB log_* functions. # Depend on lsb-base (>= 3.0-6) to ensure that this file is present. . /lib/lsb/init-functions # Don't run if we are running upstart if init_is_upstart; then case "$1" in stop) exit 0 ;; *) exit 1 ;; esac fi prepare_environment() { mkdir -p "$(dirname "$(/usr/sbin/nsd-checkconf -o pidfile $CONFFILE)")" chown "$(/usr/sbin/nsd-checkconf -o username $CONFFILE)" "$(dirname "$(/usr/sbin/nsd-checkconf -o pidfile $CONFFILE)")" mkdir -p "$(dirname "$(/usr/sbin/nsd-checkconf -o database $CONFFILE)")" chown "$(/usr/sbin/nsd-checkconf -o username $CONFFILE)" "$(dirname "$(/usr/sbin/nsd-checkconf -o database $CONFFILE)")" } # # Function that starts the daemon/service # do_start() { # Return # 0 if daemon has been started # 1 if daemon was already running # 2 if daemon could not be started $NSDC status >/dev/null 2>/dev/null \ && return 1 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \ || return 1 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \ $DAEMON_ARGS \ || return 2 } # # Function that stops the daemon/service # do_stop() { # Return # 0 if daemon has been stopped # 1 if daemon was already stopped # 2 if daemon could not be stopped # other if a failure occurred $NSDC status >/dev/null 2>/dev/null \ || return 1 $NSDC stop >/dev/null RETVAL="$?" [ $? = 1 ] && return 2 # Many daemons don't delete their pidfiles when they exit. rm -f $PIDFILE return 0 } do_reload() { $NSDC reload >/dev/null return $? } case "$1" in start) prepare_environment log_daemon_msg "Starting $DESC " "$NAME" do_start case "$?" in 0|1) log_end_msg 0 ;; 2) log_end_msg 1 ;; esac ;; stop) log_daemon_msg "Stopping $DESC" "$NAME" do_stop case "$?" in 0|1) log_end_msg 0 ;; 2) log_end_msg 1 ;; esac ;; status) STATUS=$($NSDC status 2>&1 >/dev/null) RETVAL=$? if [ $RETVAL = 0 ]; then log_success_msg "$NAME is running" else log_failure_msg "$NAME is not running ($STATUS)" fi exit $RETVAL ;; reload|force-reload) log_daemon_msg "Reloading $DESC" "$NAME" do_reload log_end_msg $? ;; restart) log_daemon_msg "Restarting $DESC" "$NAME" do_stop case "$?" in 0|1) do_start case "$?" in 0) log_end_msg 0 ;; 1) log_end_msg 1 ;; # Old process is still running *) log_end_msg 1 ;; # Failed to start esac ;; *) # Failed to stop log_end_msg 1 ;; esac ;; *) echo "Usage: $SCRIPTNAME {start|stop|status|restart|reload|force-reload}" >&2 exit 3 ;; esac : debian/compat0000664000000000000000000000000212273737260010377 0ustar 9 debian/nsd.postrm0000664000000000000000000000040212273737260011227 0ustar #!/bin/sh set -e #DEBHELPER# if test "$1" = "purge"; then spool=/var/lib/nsd rm -f $spool/nsd.db $spool/ixfr.db $spool/xfrd.state rmdir $spool 2>/dev/null || true dpkg-statoverride --remove $spool >/dev/null 2>/dev/null || true fi exit 0 debian/control0000664000000000000000000000277112273737260010613 0ustar Source: nsd Section: net Priority: optional Maintainer: Ondřej Surý Build-Depends: debhelper (>= 9), dpkg-dev (>= 1.16.1.1~), dh-autoreconf, bison, flex, libssl-dev, libevent-dev, openssl, po-debconf Standards-Version: 3.9.4 Vcs-Browser: http://git.debian.org/?p=pkg-nlnetlabs/nsd.git Vcs-Git: git://git.debian.org/pkg-nlnetlabs/nsd.git Homepage: http://www.nlnetlabs.nl/nsd/ Package: nsd Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends}, lsb-base (>= 3.0-10), adduser Replaces: nsd3 (<= 4.0.0-1~) Breaks: nsd3 (<= 4.0.0-1~) Description: authoritative domain name server NSD is a fast, authoritative only, high performance, simple and open source name server. . NSD was primarily developed by NLnet Labs on request from and in close cooperation with RIPE NCC, as an alternative name server software to be run on the root name server RIPE NCC operates. Package: nsd3 Architecture: all Section: oldlibs Priority: extra Depends: nsd (>= 4.0.0-1~), ${misc:Depends}, debconf Description: authoritative domain name server [transitional package] NSD is a fast, authoritative only, high performance, simple and open source name server. . NSD was primarily developed by NLnet Labs on request from and in close cooperation with RIPE NCC, as an alternative name server software to be run on the root name server RIPE NCC operates. . This is a transitional dummy package. It can safely be removed. debian/gbp.conf0000664000000000000000000000016012273737260010615 0ustar [DEFAULT] debian-branch = master debian-tag = debian/%(version)s pristine-tar = True upstream-branch = upstream debian/source/0000775000000000000000000000000012273737260010501 5ustar debian/source/format0000664000000000000000000000001412273737260011707 0ustar 3.0 (quilt) debian/nsd.service0000664000000000000000000000137412273737260011354 0ustar [Unit] Description=Name Server Daemon After=network.target [Service] Type=simple Restart=always Environment=CONFFILE=/etc/nsd/nsd.conf ExecStartPre=/bin/sh -c '/bin/mkdir -p "$(dirname "$(/usr/sbin/nsd-checkconf -o pidfile $CONFFILE)")"' ExecStartPre=/bin/sh -c '/bin/chown "$(/usr/sbin/nsd-checkconf -o username $CONFFILE)" "$(dirname "$(/usr/sbin/nsd-checkconf -o pidfile $CONFFILE)")"' ExecStartPre=/bin/sh -c '/bin/mkdir -p "$(dirname "$(/usr/sbin/nsd-checkconf -o database $CONFFILE)")"' ExecStartPre=/bin/sh -c '/bin/chown "$(/usr/sbin/nsd-checkconf -o username $CONFFILE)" "$(dirname "$(/usr/sbin/nsd-checkconf -o database $CONFFILE)")"' ExecStart=/usr/sbin/nsd -d -c $CONFFILE ExecReload=/usr/sbin/nsd-control reload [Install] WantedBy=multi-user.target debian/patches/0000775000000000000000000000000012273737260010630 5ustar debian/patches/0005-Force-dbdir-to-be-var-lib-nsd-by-patching-configure.patch0000664000000000000000000000125012273737260023653 0ustar From 1d048e09c6937edd7ffd155051848822ca8066a2 Mon Sep 17 00:00:00 2001 From: Pierre Habouzit Date: Sat, 30 May 2009 12:10:24 +0200 Subject: [PATCH 5/5] Force dbdir to be /var/lib/nsd by patching configure.ac since it's not configureable... Signed-off-by: Pierre Habouzit --- configure | 2 +- configure.ac | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) --- nsd4.orig/configure.ac +++ nsd4/configure.ac @@ -60,7 +60,7 @@ AC_SUBST(logfile) # # Database directory # -dbdir=${localstatedir}/db/nsd +dbdir=${localstatedir}/lib/nsd # # Determine the pidfile location. Check if /var/run exists, if so set pidfile debian/patches/enable-control-by-default.patch0000664000000000000000000000227212273737260016612 0ustar --- nsd.orig/nsd-control-setup.sh.in +++ nsd/nsd-control-setup.sh.in @@ -155,6 +155,6 @@ chmod o-rw $SVR_BASE.pem $SVR_BASE.key $ rm -f request.cfg rm -f $CTL_BASE"_trust.pem" $SVR_BASE"_trust.pem" $SVR_BASE"_trust.srl" -echo "Setup success. Certificates created. Enable in nsd.conf file to use" +echo "Setup success. Certificates created." exit 0 --- nsd.orig/options.c +++ nsd/options.c @@ -79,7 +79,7 @@ nsd_options_create(region_type* region) #endif opt->zonefiles_check = 1; opt->xfrd_reload_timeout = 1; - opt->control_enable = 0; + opt->control_enable = 1; opt->control_interface = NULL; opt->control_port = NSD_CONTROL_PORT; opt->server_key_file = CONFIGDIR"/nsd_server.key"; --- nsd.orig/nsd-control.8.in +++ nsd/nsd-control.8.in @@ -139,8 +139,6 @@ these in the default run directory, or w If you change the access control permissions on the key files you can decide who can use nsd\-control, by default owner and group but not all users. The script preserves private keys present in the directory. -After running the script as root, turn on \fBcontrol\-enable\fR in -\fInsd.conf\fR. .SH "STATISTIC COUNTERS" The \fIstats\fR command shows a number of statistic counters. .TP debian/patches/series0000664000000000000000000000021712273737260012045 0ustar enable-control-by-default.patch 0005-Force-dbdir-to-be-var-lib-nsd-by-patching-configure.patch 0006-define_MAXHOSTNAMELEN_for_hurd_build.patch debian/patches/0006-define_MAXHOSTNAMELEN_for_hurd_build.patch0000664000000000000000000000061612273737260020743 0ustar Author: Ondřej Surý Description: Conditionally define MAXHOSTNAMELEN to allow hurd build Forwarded: no Last-Update: 2011-05-15 --- nsd4.orig/nsd.c +++ nsd4/nsd.c @@ -45,6 +45,10 @@ #include "tsig.h" #include "remote.h" +#ifndef MAXHOSTNAMELEN +#define MAXHOSTNAMELEN 256 +#endif + /* The server handler... */ static struct nsd nsd; static char hostname[MAXHOSTNAMELEN]; debian/nsd.dirs0000664000000000000000000000007512273737260010652 0ustar /var/lib/nsd /usr/share/doc/nsd/examples /etc/nsd/nsd.conf.d debian/nsd.upstart0000664000000000000000000000125612273737260011415 0ustar # nsd - Name Server Daemon description "Name Server Daemon" author "Ondřej Surý " start on runlevel [2345] stop on runlevel [016] env CONFFILE=/etc/nsd/nsd.conf respawn pre-start script # prepare environment mkdir -p "$(dirname "$(/usr/sbin/nsd-checkconf -o pidfile $CONFFILE)")" chown "$(/usr/sbin/nsd-checkconf -o username $CONFFILE)" "$(dirname "$(/usr/sbin/nsd-checkconf -o pidfile $CONFFILE)")" mkdir -p "$(dirname "$(/usr/sbin/nsd-checkconf -o database $CONFFILE)")" chown "$(/usr/sbin/nsd-checkconf -o username $CONFFILE)" "$(dirname "$(/usr/sbin/nsd-checkconf -o database $CONFFILE)")" end script exec /usr/sbin/nsd -d -c $CONFFILE debian/rules0000775000000000000000000000254012273737260010262 0ustar #!/usr/bin/make -f # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 DEB_BUILD_MAINT_OPTIONS = hardening=+all DEB_CFLAGS_MAINT_APPEND = -Wall -Wextra DEB_CPPFLAGS_MAINT_APPEND = -D_XOPEN_SOURCE=600 DPKG_EXPORT_BUILDFLAGS = 1 -include /usr/share/dpkg/buildflags.mk %: dh $@ --with=autoreconf override_dh_auto_configure: dh_auto_configure -- \ --with-configdir=/etc/nsd \ --with-nsd_conf_file=/etc/nsd/nsd.conf \ --with-pidfile=/run/nsd/nsd.pid \ --with-dbfile=/var/lib/nsd/nsd.db \ --with-zonesdir=/etc/nsd \ --with-difffile=/var/lib/nsd/ixfr.db \ --with-xfrdfile=/var/lib/nsd/xfrd.state \ --disable-largefile \ --disable-recvmmsg \ --enable-root-server \ --enable-mmap \ --enable-ratelimit override_dh_auto_clean: dh_auto_clean override_dh_auto_install: dh_auto_install -- DESTDIR=$(CURDIR)/debian/nsd rmdir $(CURDIR)/debian/nsd/run/nsd rmdir $(CURDIR)/debian/nsd/run mv $(CURDIR)/debian/nsd/etc/nsd/nsd.conf.sample $(CURDIR)/debian/nsd/usr/share/doc/nsd/examples/nsd.conf install -m 640 debian/nsd.conf $(CURDIR)/debian/nsd/etc/nsd/ override_dh_installchangelogs: dh_installchangelogs -pnsd doc/ChangeLog override_dh_compress: dh_compress -X/usr/share/doc/nsd/examples/nsd.conf override_dh_installdocs: dh_installdocs --link-doc=nsd debian/watch0000664000000000000000000000015712273737260010235 0ustar # Compulsory line, this is a version 3 file version=3 http://www.nlnetlabs.nl/downloads/nsd/nsd-(.*)\.tar\.gz debian/nsd3.maintscript0000664000000000000000000000024212273737260012325 0ustar rm_conffile /etc/nsd3/nsd.conf.sample 4.0.0~ nsd3 -- "$@" 0 rm_conffile /etc/cron.d/nsd3 4.0.0~ nsd3 -- "$@" 0 rm_conffile /etc/init.d/nsd3 4.0.0~ nsd3 -- "$@" 0