From fe0676d8805eb4e3c5382c80a9cbdc4d345c3f8f Mon Sep 17 00:00:00 2001
From: Joshua Dye <joshua@natalieandjoshua.com>
Date: Mon, 6 May 2019 08:44:04 -0400
Subject: [PATCH] committing changes in /etc made by "apt full-upgrade"

Package changes:
-alsa-utils 1.1.8-1 armhf
+alsa-utils 1.1.8-2 armhf
-bash 5.0-2 armhf
+bash 5.0-4 armhf
-bind9 1:9.11.5.P4+dfsg-1 armhf
-bind9-host 1:9.11.5.P4+dfsg-1 armhf
-bind9utils 1:9.11.5.P4+dfsg-1 armhf
-binutils 2.31.1-15+rpi1 armhf
-binutils-arm-linux-gnueabihf 2.31.1-15+rpi1 armhf
-binutils-common 2.31.1-15+rpi1 armhf
+bind9 1:9.11.5.P4+dfsg-5 armhf
+bind9-host 1:9.11.5.P4+dfsg-5 armhf
+bind9utils 1:9.11.5.P4+dfsg-5 armhf
+binutils 2.31.1-16+rpi1 armhf
+binutils-arm-linux-gnueabihf 2.31.1-16+rpi1 armhf
+binutils-common 2.31.1-16+rpi1 armhf
-cpio 2.12+dfsg-6 armhf
+cpio 2.12+dfsg-9 armhf
-cpp-8 8.3.0-5+rpi1 armhf
+cpp-8 8.3.0-6+rpi1 armhf
-diffutils 1:3.7-2 armhf
+diffutils 1:3.7-3 armhf
-distro-info-data 0.39 all
+distro-info-data 0.40 all
-dnsutils 1:9.11.5.P4+dfsg-1 armhf
+dnsutils 1:9.11.5.P4+dfsg-5 armhf
-g++-8 8.3.0-5+rpi1 armhf
+g++-8 8.3.0-6+rpi1 armhf
-gcc-8 8.3.0-5+rpi1 armhf
-gcc-8-base 8.3.0-5+rpi1 armhf
+gcc-8 8.3.0-6+rpi1 armhf
+gcc-8-base 8.3.0-6+rpi1 armhf
-libasan5 8.3.0-5+rpi1 armhf
+libasan5 8.3.0-6+rpi1 armhf
-libatomic1 8.3.0-5+rpi1 armhf
+libatomic1 8.3.0-6+rpi1 armhf
-libaudiofile1 0.3.6-4 armhf
-libaudit-common 1:2.8.4-2 all
-libaudit1 1:2.8.4-2+b1 armhf
+libaudiofile1 0.3.6-5 armhf
+libaudit-common 1:2.8.4-3 all
+libaudit1 1:2.8.4-3 armhf
-libbind9-161 1:9.11.5.P4+dfsg-1 armhf
+libbind9-161 1:9.11.5.P4+dfsg-5 armhf
-libbinutils 2.31.1-15+rpi1 armhf
+libbinutils 2.31.1-16+rpi1 armhf
-libcc1-0 8.3.0-5+rpi1 armhf
+libcc1-0 8.3.0-6+rpi1 armhf
-libcryptsetup12 2:2.1.0-2 armhf
+libcryptsetup12 2:2.1.0-3 armhf
-libcups2 2.2.10-5 armhf
+libcups2 2.2.10-6 armhf
-libdns-export1104 1:9.11.5.P4+dfsg-1 armhf
+libdns-export1104 1:9.11.5.P4+dfsg-5 armhf
-libdns1104 1:9.11.5.P4+dfsg-1 armhf
+libdns1104 1:9.11.5.P4+dfsg-5 armhf
-libfaad2 2.8.8-1 armhf
+libfaad2 2.8.8-2 armhf
-libgcc-8-dev 8.3.0-5+rpi1 armhf
-libgcc1 1:8.3.0-5+rpi1 armhf
+libgcc-8-dev 8.3.0-6+rpi1 armhf
+libgcc1 1:8.3.0-6+rpi1 armhf
-libgfortran5 8.3.0-5+rpi1 armhf
+libgfortran5 8.3.0-6+rpi1 armhf
-libgomp1 8.3.0-5+rpi1 armhf
+libgomp1 8.3.0-6+rpi1 armhf
-libirs-export161 1:9.11.5.P4+dfsg-1 armhf
-libirs161 1:9.11.5.P4+dfsg-1 armhf
-libisc-export1100 1:9.11.5.P4+dfsg-1 armhf
+libirs-export161 1:9.11.5.P4+dfsg-5 armhf
+libirs161 1:9.11.5.P4+dfsg-5 armhf
+libisc-export1100 1:9.11.5.P4+dfsg-5 armhf
-libisc1100 1:9.11.5.P4+dfsg-1 armhf
-libisccc161 1:9.11.5.P4+dfsg-1 armhf
-libisccfg-export163 1:9.11.5.P4+dfsg-1 armhf
-libisccfg163 1:9.11.5.P4+dfsg-1 armhf
+libisc1100 1:9.11.5.P4+dfsg-5 armhf
+libisccc161 1:9.11.5.P4+dfsg-5 armhf
+libisccfg-export163 1:9.11.5.P4+dfsg-5 armhf
+libisccfg163 1:9.11.5.P4+dfsg-5 armhf
-libjs-jquery 3.3.1~dfsg-1 all
+libjs-jquery 3.3.1~dfsg-3 all
-liblwres161 1:9.11.5.P4+dfsg-1 armhf
+liblwres161 1:9.11.5.P4+dfsg-5 armhf
-libparted2 3.2-24 armhf
+libparted2 3.2-25 armhf
-libplymouth4 0.9.4-1 armhf
+libplymouth4 0.9.4-1.1 armhf
-librsvg2-2 2.44.10-1+rpi1 armhf
-librsvg2-common 2.44.10-1+rpi1 armhf
+librsvg2-2 2.44.10-2.1+rpi1 armhf
+librsvg2-common 2.44.10-2.1+rpi1 armhf
-libsasl2-2 2.1.27+dfsg-1 armhf
-libsasl2-modules 2.1.27+dfsg-1 armhf
-libsasl2-modules-db 2.1.27+dfsg-1 armhf
+libsasl2-2 2.1.27+dfsg-1+b1 armhf
+libsasl2-modules 2.1.27+dfsg-1+b1 armhf
+libsasl2-modules-db 2.1.27+dfsg-1+b1 armhf
-libssl1.1 1.1.1b-1 armhf
-libstdc++-8-dev 8.3.0-5+rpi1 armhf
-libstdc++6 8.3.0-5+rpi1 armhf
+libssl1.1 1.1.1b-2 armhf
+libstdc++-8-dev 8.3.0-6+rpi1 armhf
+libstdc++6 8.3.0-6+rpi1 armhf
-libubsan1 8.3.0-5+rpi1 armhf
+libubsan1 8.3.0-6+rpi1 armhf
-libv4l-0 1.16.3-1 armhf
-libv4l2rds0 1.16.3-1 armhf
-libv4lconvert0 1.16.3-1 armhf
+libv4l-0 1.16.3-3 armhf
+libv4l2rds0 1.16.3-3 armhf
+libv4lconvert0 1.16.3-3 armhf
-libwavpack1 5.1.0-5 armhf
+libwavpack1 5.1.0-6 armhf
-linux-base 4.5 all
+linux-base 4.6 all
-openssh-client 1:7.9p1-9 armhf
-openssh-server 1:7.9p1-9 armhf
-openssh-sftp-server 1:7.9p1-9 armhf
-openssl 1.1.1b-1 armhf
+openssh-client 1:7.9p1-10 armhf
+openssh-server 1:7.9p1-10 armhf
+openssh-sftp-server 1:7.9p1-10 armhf
+openssl 1.1.1b-2 armhf
-parted 3.2-24 armhf
+parted 3.2-25 armhf
-pinentry-curses 1.1.0-1 armhf
+pinentry-curses 1.1.0-2 armhf
-plymouth 0.9.4-1 armhf
+plymouth 0.9.4-1.1 armhf
-python3-tz 2018.9-1 all
+python3-tz 2019.1-1 all
-raspi-config 20190219 all
+raspi-config 20190423 all
-ssh 1:7.9p1-9 all
+ssh 1:7.9p1-10 all
-tar 1.30+dfsg-5 armhf
-tasksel 3.50 all
-tasksel-data 3.50 all
+tar 1.30+dfsg-6 armhf
+tasksel 3.52 all
+tasksel-data 3.52 all
-usb.ids 2019.02.23-1 all
+usb.ids 2019.04.23-1 all
-v4l-utils 1.16.3-1 armhf
+v4l-utils 1.16.3-3 armhf
-wget 1.20.1-1 armhf
+wget 1.20.1-1.1 armhf
-wpasupplicant 2:2.7+git20190128+0c1e29f-3 armhf
+wpasupplicant 2:2.7+git20190128+0c1e29f-5 armhf
---
 apparmor.d/usr.sbin.named | 13 +++++++++++--
 plymouth/plymouthd.conf   |  2 +-
 2 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/apparmor.d/usr.sbin.named b/apparmor.d/usr.sbin.named
index 9e6deb84..a4622da8 100644
--- a/apparmor.d/usr.sbin.named
+++ b/apparmor.d/usr.sbin.named
@@ -75,10 +75,19 @@
   /usr/lib/bind/*.so rm,
 
   # Samba DLZ
-  /var/lib/samba/private/dns.keytab r,
+  /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm,
+  /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm,
+  /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm,
+  /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm,
+  /var/lib/samba/bind-dns/dns.keytab rk,
+  /var/lib/samba/bind-dns/named.conf r,
+  /var/lib/samba/bind-dns/dns/** rwk,
+  /var/lib/samba/private/dns.keytab rk,
   /var/lib/samba/private/named.conf r,
   /var/lib/samba/private/dns/** rwk,
-  /etc/smb.conf r,
+  /etc/samba/smb.conf r,
+  /dev/urandom rwmk,
+  owner /var/tmp/krb5_* rwk,
 
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.sbin.named>
diff --git a/plymouth/plymouthd.conf b/plymouth/plymouthd.conf
index 4a9a0c85..75b9a056 100644
--- a/plymouth/plymouthd.conf
+++ b/plymouth/plymouthd.conf
@@ -1,4 +1,4 @@
 # Administrator customizations go in this file
 #[Daemon]
-#Theme=text
+#Theme=futureprototype
 #ShowDelay=0