[Forensics-changes] [volatility-profiles] 03/03: * New upstream release. * Cryptographic signature verification: the upstream is providing a GPG signature that allows the tarball verification. Consequently: - Added the debian/upstream-signing-key.pgp file. - Added the debian/source/include-binaries to allow the debian/upstream-signing-key.pgp file use. - Removed the debian/source/lintian-overrides file. - Updated the debian/watch file. * debian/control: added volatility-tools as suggestion in binary. * debian/copyright: updated the upstream copyright and packaging years. * debian/source/lintian-overrides: removed as requested by Paul Wise. Thanks to Paul for explanations about the idea of the GPG sign check.

Eriberto Mota eriberto-guest at moszumanska.debian.org
Thu Jan 30 20:41:32 UTC 2014


This is an automated email from the git hooks/post-receive script.

eriberto-guest pushed a commit to branch debian
in repository volatility-profiles.

commit 70a115a162a0d30e9fdbfcd57b8bd1960372ad96
Author: Joao Eriberto Mota Filho <eriberto at eriberto.pro.br>
Date:   Thu Jan 30 18:40:44 2014 -0200

      * New upstream release.
      * Cryptographic signature verification: the upstream is providing a GPG
        signature that allows the tarball verification. Consequently:
          - Added the debian/upstream-signing-key.pgp file.
          - Added the debian/source/include-binaries to allow the
            debian/upstream-signing-key.pgp file use.
          - Removed the debian/source/lintian-overrides file.
          - Updated the debian/watch file.
      * debian/control: added volatility-tools as suggestion in binary.
      * debian/copyright: updated the upstream copyright and packaging years.
      * debian/source/lintian-overrides: removed as requested by Paul Wise. Thanks
        to Paul for explanations about the idea of the GPG sign check.
---
 debian/changelog                |  17 +++++++++++++++++
 debian/control                  |   1 +
 debian/copyright                |   4 ++--
 debian/source/include-binaries  |   1 +
 debian/source/lintian-overrides |   2 --
 debian/upstream-signing-key.pgp | Bin 0 -> 46199 bytes
 debian/watch                    |   1 +
 7 files changed, 22 insertions(+), 4 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 94ce9a6..287c665 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,20 @@
+volatility-profiles (20140109-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Cryptographic signature verification: the upstream is providing a GPG
+    signature that allows the tarball verification. Consequently:
+      - Added the debian/upstream-signing-key.pgp file.
+      - Added the debian/source/include-binaries to allow the
+        debian/upstream-signing-key.pgp file use.
+      - Removed the debian/source/lintian-overrides file.
+      - Updated the debian/watch file.
+  * debian/control: added volatility-tools as suggestion in binary.
+  * debian/copyright: updated the upstream copyright and packaging years.
+  * debian/source/lintian-overrides: removed as requested by Paul Wise. Thanks
+    to Paul for explanations about the idea of the GPG sign check.
+
+ -- Joao Eriberto Mota Filho <eriberto at eriberto.pro.br>  Thu, 09 Jan 2014 16:36:07 -0200
+
 volatility-profiles (20131121-1) unstable; urgency=low
 
   * Initial release (Closes: #730120)
diff --git a/debian/control b/debian/control
index b0aede9..bc3637a 100644
--- a/debian/control
+++ b/debian/control
@@ -12,6 +12,7 @@ Vcs-Browser: http://anonscm.debian.org/gitweb/?p=forensics/volatility-profiles.g
 Package: volatility-profiles
 Architecture: all
 Depends: ${misc:Depends}, volatility
+Suggests: volatility-tools
 Description: Linux profiles to Volatility
  This package provides some profiles to be used with Volatility to analyse
  Linux memory dumps.
diff --git a/debian/copyright b/debian/copyright
index e6a0255..14db3bf 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -3,11 +3,11 @@ Upstream-Name: volatility-profiles
 Source: http://eriberto.pro.br/forense
 
 Files: *
-Copyright: 2013 Joao Eriberto Mota Filho <eriberto at eriberto.pro.br>
+Copyright: 2013-2014 Joao Eriberto Mota Filho <eriberto at eriberto.pro.br>
 License: GPL-3.0+
 
 Files: debian/*
-Copyright: 2013 Joao Eriberto Mota Filho <eriberto at eriberto.pro.br>
+Copyright: 2013-2014 Joao Eriberto Mota Filho <eriberto at eriberto.pro.br>
 License: GPL-3.0+
 
 License: GPL-3.0+
diff --git a/debian/source/include-binaries b/debian/source/include-binaries
new file mode 100644
index 0000000..95a390b
--- /dev/null
+++ b/debian/source/include-binaries
@@ -0,0 +1 @@
+debian/upstream-signing-key.pgp
diff --git a/debian/source/lintian-overrides b/debian/source/lintian-overrides
deleted file mode 100644
index 9fe5e82..0000000
--- a/debian/source/lintian-overrides
+++ /dev/null
@@ -1,2 +0,0 @@
-# The upstream didn't provide a PGP/GPG signature.
-volatility-profiles source: debian-watch-may-check-gpg-signature
diff --git a/debian/upstream-signing-key.pgp b/debian/upstream-signing-key.pgp
new file mode 100644
index 0000000..abb2de3
Binary files /dev/null and b/debian/upstream-signing-key.pgp differ
diff --git a/debian/watch b/debian/watch
index e750072..7b88beb 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,2 +1,3 @@
 version=3
+opts="pgpsigurlmangle=s/$/.asc/" \
 http://eriberto.pro.br/files/volatility/volatility-profiles-(\d\S*)\.tar\.gz

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/volatility-profiles.git



More information about the forensics-changes mailing list