ANNOUNCE: cifs-utils release 5.6 is ready for download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Time for another cifs-utils release!

Highlights:

* binaries are now built by default with PIE and RELRO support for better protection against exploits

* better debugging and warnings for cifs.upcall and cifscreds

* better integration with systemd by having mount.cifs use systemd-ask-password if it's appropriate and available

webpage:    https://wiki.samba.org/index.php/LinuxCIFS_utils
tarball:    ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/
git:        git://git.samba.org/cifs-utils.git
gitweb:     http://git.samba.org/?p=cifs-utils.git;a=summary

Detailed list of changes since 5.5:

commit df561d40947e0b520deb48e1a4749afe9787949a

Author: Jeff Layton <[email protected]>
Date:   Fri Jun 1 13:56:21 2012 -0400

autoconf: set version to 5.5.1 for interim builds

commit 74edf24d9780900f3ce15d2403c6e331b031d454

Author: Jeff Layton <[email protected]>
Date:   Thu Jun 14 10:59:18 2012 -0400

automake: revert -Werror by default

I think in hindsight, that adding -Werror by default was a mistake. cifs-utils is built in a wide range of environments and tools, and it's very difficult to eliminate all of the possible warnings.

Let's go ahead and remove it and reduce the steady trickle of patches that are simply to silence obscure warnings.

commit 0eb3daa4b17ee64b464594f1a5d413ecb364957c

Author: Jeff Layton <[email protected]>
Date:   Thu Jun 14 10:59:18 2012 -0400

mount.cifs: set rc to 0 in libcap toggle_dac_capability

Thus spake Jochen:

The mount.cifs program from the cifs-utils package 5.5 did not work on my Linux system. It just exited without an error message and did not mount anything.

[...]

I think, when this variable rc is now used in this function, it has also to be properly initialized there.

commit b7bea5254443cb121b0cf03a64b123b85d7f9fbb

Author: Jeff Layton <[email protected]>
Date:   Thu Jun 14 11:05:43 2012 -0400

cifs.upcall: more debug logging for krb5 upcalls

While helping to track down a configuration problem, I found this little bit of extra debug logging to be helpful. Might as well make it part of the stock binary.

commit a8611e25d44211cd57a91dce4fe7d7a7ad7534d4

Author: Jeff Layton <[email protected]>
Date:   Fri Jul 6 11:48:18 2012 -0400

replace: remove bzero() redefinition from replace.h

I borrowed replace.h from samba when I split off the package, and we have a ton of definitions in there that we don't really need. This is one of them and it causes a warning when we build on RHEL5.

commit 233e17db8ef7edba1fea660e076a03a56b0117d2

Author: Jeff Layton <[email protected]>
Date:   Mon Jul 9 14:12:33 2012 -0400

autoconf: add --enable-pie and --enable-relro

-pie and -fpie enable the building of position-independent executables, and -Wl,-z,relro turns on read-only relocation support in gcc. These options are important for security purposes to guard against possible buffer overflows that lead to exploits.

Follow the example of samba here and enable these by default, but add configure options that allow people to turn them off at build-time if necessary.

We may also want to eventually add checks to ensure that the compiler and linker understand these options, but I'll wait until we have some evidence that it's needed before I expend the effort.

commit ced19dedc0fa7b36087b8eaeef6a6a9dc76aa55e

Author: Andreas Schneider <[email protected]>
Date:   Mon Jul 9 22:21:04 2012 -0400

autoconf: Fix building with autoconf version older than 2.60.

AC_PROG_SED is only avaliable in recent autoconf versions. Use AC_CHECK_PROG instead if AC_PROG_SED is not present.

commit 4e264031d0da7d3f2a287337e86b623e814f5c56

Author: Ankit Jain <[email protected]>
Date:   Wed Jul 18 06:47:07 2012 -0400

mount.cifs: Use systemd's mechanism for getting password, if present.

If systemd is running and /bin/systemd-ask-password if available, then use that else fallback on getpass(..).

And add a --enable-systemd configure option, which defaults to yes.

commit 877701f3cc23df3cb2a293c060bdbf05a87bff6a

Author: Luk Claes <[email protected]>
Date:   Thu Jul 19 09:27:01 2012 -0400

mount.cifs: Use errno instead of having unknown error

When access() fails, use errno for a sensible error message.

commit c44d290f3b5f221e7617bdb409bb8e44ceafef3e

Author: Jeff Layton <[email protected]>
Date:   Fri Jul 20 10:30:50 2012 -0400

cifscreds: add a check and warnings for session keyring problems

Many distros do not call into pam_keyinit to set up the session keyring properly at login time. When cifscreds add is used in such a session, the kernel will spawn a new session keyring in which to install the credentials. That keyring will then go away once the cifscreds process exits.

Check for this situation by looking to see if the session and user-session keyrings are the same. Throw a warning if so, and add some verbiage to the cifscreds manpage that explains the issue. Also, if the session keyring can't be queried for any reason, then cause the program to error out.

commit 9449c2ac7419ef45fc08f7d4a654c100ee26fa17

Author: Jeff Layton <[email protected]>
Date:   Thu Jul 26 10:41:24 2012 -0400

autoconf: set version to 5.6

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)

iQIcBAEBAgAGBQJQEVp8AAoJEAAOaEEZVoIVMmcP/jbcysz6rrxOPpdMgGzgttIl YeBY/vpcmDE/lR68WK+NjeC26AkcNAyYcuMw9HzwtGxdo8Ni1ygRYB69BwdHkuLq aeRwdDgJ5A7JzQCQmCj5HDrHyucuDrr5PZIcfokh4OZ0ivED1IUqS1lDruVZwn73 r5JWJ96gX9XNj7uP/fLfWu2QrOL/+YGhefMmKk2ja7BuA36AuP5G2d/h9nniAOza fHPrmtKwp6wcGKDyzyIIsc0qwL+rvcAs2kc4h5Bt+Go0IJhlwyDccU90vBNoynhP OaiRyf7H0NjcNIeqAMknqaJWapAWr4XssiPHUXXAeXXkcZsoF3jAbhQDiYpda2bv I1Zi/7N+qHLU18ygjfEPqimXPmelX9Nj4aK9+7G6rMJUTSPprmu5ScEHJLsoqfR6 THfmBPlqgZsenHx36THL2IXSkAT/T5nPxAkwOAsUeJPSu/9spBdBnpcnPUUfOda2 BmNJ5GSf3Ytz1fWO1PY+BjzN3p4Y5KV9HhifeyIPuI/0BE9jW65Y6mG4Fn7BKxEF P97jMZORdSd9IxWYAwuDXKo53Qi162vYFypHtxIfbNvc5tmDQP1zcrU6hCpKLBha JY1lNDOeNH+hEBa4J+vCzBu5WY8YzMH3p5vZrveicn2LydSsyxpqtgasYFD1h/hj bPWmTZBqPCW/CI+Iy9q+
=FkTM
-----END PGP SIGNATURE-----