SecureDrop 0.4.2

changelog.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.4.2
+
+* Explicitly enables DAC override capability in Apache AppArmor profile (#2105)
+
+The issues for this release were tracked in the 0.4.2 milestone on Github:
+https://github.com/freedomofpress/securedrop/milestones/0.4.2.
+
 ## 0.4.1
 
 * Fixes a bug in one of the Tails scripts used to set up the Desktop

docs/conf.py

@@ -59,9 +59,9 @@
 # built documents.
 #
 # The short X.Y version.
-version = '0.4.1'
+version = '0.4.2'
 # The full version, including alpha/beta/rc tags.
-release = '0.4.1'
+release = '0.4.2'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

docs/set_up_admin_tails.rst

@@ -107,8 +107,8 @@ key:
 .. code:: sh
 
     cd ~/Persistent/securedrop/
-    git checkout 0.4.1
-    git tag -v 0.4.1
+    git checkout 0.4.2
+    git tag -v 0.4.2
 
 You should see ``Good signature from "SecureDrop Release Signing Key"`` in the
 output of that last command.

install_files/ansible-base/group_vars/all/securedrop

@@ -2,7 +2,7 @@
 # Variables that apply to both the app and monitor server go in this file
 # If the monitor or app server need different values define the variable in
 # hosts_vars/app.yml or host_vars/mon.yml host_vars/development.yml
-securedrop_app_code_version: "0.4.1"
+securedrop_app_code_version: "0.4.2"
 
 grsecurity: true
 install_local_packages: false

install_files/securedrop-app-code/DEBIAN/control

@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-app-code
-Version: 0.4.1
+Version: 0.4.2
 Architecture: amd64
 Depends: python-pip,apparmor-utils,gnupg2,haveged,python,python-pip,secure-delete,sqlite,apache2-mpm-worker,libapache2-mod-wsgi,libapache2-mod-xsendfile,redis-server,supervisor,securedrop-keyring
 Description: Packages the SecureDrop application code pip dependencies and apparmor profiles. This package will put the apparmor profiles in enforce mode. This package does use pip to install the pip wheelhouse

install_files/securedrop-app-code/usr/share/doc/securedrop-app-code/changelog.Debian

@@ -1,3 +1,9 @@
+securedrop-app-code (0.4.2) trusty; urgency=medium
+
+  * See changelog.md
+
+ -- SecureDrop Team <[email protected]>  Mon, 14 Aug 2017 23:09:30 +0000
+
 securedrop-app-code (0.4.1) trusty; urgency=medium
 
   * See changelog.md

install_files/securedrop-keyring/DEBIAN/control

@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-keyring
-Version: 0.1.0+0.4.1
+Version: 0.1.0+0.4.2
 Architecture: amd64
 Depends: gnupg
 Description: Provides an apt keyring for SecureDrop-related packages, so the master signing key used for SecureDrop packages can be updated via apt.

install_files/securedrop-ossec-agent/DEBIAN/control

@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-ossec-agent
-Version: 2.8.2+0.4.1
+Version: 2.8.2+0.4.2
 Architecture: amd64
 Depends: ossec-agent,securedrop-keyring
 Replaces: ossec-agent

install_files/securedrop-ossec-server/DEBIAN/control

@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-ossec-server
-Version: 2.8.2+0.4.1
+Version: 2.8.2+0.4.2
 Architecture: amd64
 Depends: ossec-server,securedrop-keyring
 Replaces: ossec-server

securedrop/version.py

@@ -1 +1 @@
-__version__ = '0.4.1'
+__version__ = '0.4.2'

testinfra/vars/build.yml

@@ -1,5 +1,5 @@
 ---
-securedrop_version: "0.4.1"
+securedrop_version: "0.4.2"
 ossec_version: "2.8.2"
 keyring_version: "0.1.0"