pollen 3.7-0ubuntu1 source package in Ubuntu
Changelog
pollen (3.7-0ubuntu1) trusty; urgency=low * debian/control: - demote haveged to suggests, based on feedback from Seth Arnold in LP: #1246098 * pollinate: - ensure both -c and -i can be used, without losing CURL_OPTS, as identified by Seth Arnold in LP: #1246098 * pollinate: - drop unused IPV6 variable, per review by Seth Arnold in LP: #1246098 * debian/pollen.postinst: - use pollen as our fake email address, suggested by Seth Arnold in LP: #1246098 * debian/pollinate.cron.d: - add notes in the comments about NIST DRBG Special Publication 800-90A recommendations on reseeding - add notes in the comments about why we choose a random minute - fix a bug, that was causing the cronjob to run far more frequently than desired - Addresses some issues raised by Seth Arnold in LP: #1246098 * debian/pollen.upstart, pollen.8, pollen.go: - add DEVICE as the 3rd argument to the pollen server in the upstart script - test that DEVICE is a special in upstart - document that the DEVICE is now a required argument * debian/pollen.install, Makefile, pollen: - build static binary at package build time, rather than dynamically compiling at each run, per feedback from Seth Arnold in LP: #1246098 - use a very simple, basic Makefile * debian/control: - move golang-go to a build-dependency, rather than a runtime dependency * debian/control, debian/pollen.postinst, debian/pollen.postrm, debian/pollen.upstart: - create a new user, pollen:daemon, in the postinst, remove in postrm - depend on libcap2-bin, which provides setcap - use setcap to allow the pollen binary to bind to privileged ports - run the pollen daemon as the pollen user - per feedback from Seth Arnold in LP: #1246098 * debian/pollen.upstart: - use setuid in upstart to run the pollen daemon as the pollen user * debian/pollen.postinst: - change pollen user's shell to /bin/false * debian/control, debian/pollen.install, debian/pollen.postinst, debian/rules, usr.bin.pollen: - add an apparmor profile for the pollen server, per suggestion by Seth Arnold in LP: #1246098 - big thanks to Jamie Strandboge and Seth Arnold for assistance * debian/pollinate.postinst: - these chowns are not necessary; thanks for catching Michael Terry in LP: #1246098 * debian/control: LP: #1259014 - have the pollen server depend on ent, which is used by the check_pollen nagios script -- Dustin Kirkland <email address hidden> Fri, 08 Nov 2013 09:59:37 -0600
Upload details
- Uploaded by:
- Dustin Kirkland
- Uploaded to:
- Trusty
- Original maintainer:
- Dustin Kirkland
- Architectures:
- amd64 armel armhf i386 x32 all
- Section:
- admin
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
pollen_3.7.orig.tar.gz | 117.2 KiB | d76ec04c70a4d094dfb0c20401199fae322a25910ef9b49a19f4d230fdd84577 |
pollen_3.7-0ubuntu1.debian.tar.gz | 9.7 KiB | 5f0b86cfe68b529b5545b3a895ab12ca88085d7197ae4d72fe9f186f486b7e0e |
pollen_3.7-0ubuntu1.dsc | 1.8 KiB | 3f3c3e84476f1a1036b8da9b26755afb94862b2823b96a0993bfd4dfb40ae992 |
Available diffs
- diff from 3.6-0ubuntu1 to 3.7-0ubuntu1 (4.6 KiB)
Binary packages built by this source
- pollen: Entropy-as-a-Service web server
Pollen is an Entropy-
as-a-Service web server, providing random seeds.
This can be performed over both cleartext http and encrypted
https TLS connections.
- pollinate: seed the pseudo random number generator
This client will connect to one or more Pollen (entropy-
as-a-service)
servers over an (optionally) encrypted connection and retrieve a random
seed over HTTP or HTTPS.
This is particularly useful at the first boot of cloud images and in
virtual machines, to seed a system's random number generator at
genesis, and is intended to supplement the /etc/init.d/urandom init script.
It can be used on physical machines, as well, to supplement the seeding
of the psuedo random number generator.