From foo@bar Fri May 22 12:30:05 2026 Format: 1.8 Date: Sun, 17 May 2026 17:00:00 +1000 Source: nagios4 Binary: nagios4 nagios4-cgi nagios4-cgi-dbgsym nagios4-core nagios4-core-dbgsym Architecture: sh4 Version: 4.5.12+ds-1 Distribution: sid Urgency: low Maintainer: sh4 Build Daemon (sh4-gandi-01) Changed-By: Russell Stuart Description: nagios4 - host/service/network monitoring and management system nagios4-cgi - cgi files for nagios4 nagios4-core - host/service/network monitoring and management system core files Changes: nagios4 (4.5.12+ds-1) unstable; urgency=low . * New upstream release (4.5.12). * Repack upstream tarball via uscan/mk-origtargz, per Developer's Reference "The standard for repacked tarballs". Files-Excluded: in debian/copyright strips - html/js/jquery-*.min.js (replaced by a symlink to libjs-jquery's /usr/share/javascript/jquery/jquery.min.js at install time, so we never actually ship the bundled minified blob) - base/wpres-phash.h, base/wp-phash.c (gperf output; the former is regenerated from base/wpres.gperf at build time, the latter is upstream cruft no longer referenced by any build target). debian/watch grows `opts="repacksuffix=+ds,dversionmangle=auto"`. . * Bump Standards-Version to 4.7.4. Declare Rules-Requires-Root: binary-targets to match the chown/chmod in debian/rules. . * Build-Depends: - migrate `debhelper (>= 10)` to `debhelper-compat (= 13)` (drops debian/compat) - add libssl-dev (upstream 4.5.x now hard-requires OpenSSL headers at configure time) - add gperf (needed at build time to regenerate base/wpres-phash.h from base/wpres.gperf, since we stripped the pre-generated file via Files-Excluded:) . * Audit upstream for phone-home / marketing / upsell content and rewrite the patches against 4.5.12: - 80_no_phone_home.patch (refreshed): strip the YouTube page-tour vidbox, "Check for updates" link, mainsplash CSP marketing div with utm_ tracking, and updateversioninfo block from html/main.php. - 81_no_update_api.patch (new): disable the daemon's 22-hour HTTP POST to api.nagios.org. Flips DEFAULT_CHECK_FOR_UPDATES to 0, sets check_for_updates=0 in sample nagios.cfg.in, and stubs query_update_api() in base/utils.c so no socket is opened regardless of config. - 82_no_tour_videos.patch (new): drop the "Nagios Core 4 Tour" YouTube vidbox emitted by cgi/tac.c, cgi/extinfo.c and cgi/status.c. The non-marketing #top_page_numbers append logic in status.c is kept. - 83_strip_marketing_links.patch (new): drop the navbar logo hyperlink to nagios.org in html/side.php; remove the library.nagios.com / support.nagios.com pointers from the Makefile.in install banner. - 84_replace_docs_index.patch (new): replace upstream's html/docs/index.html (a 534-char-paragraph redirect page to assets.nagios.com docs) with a small plain stub that points readers at the manpages. . * nagios4-common: - drop the now-obsolete lsb-base (>= 3.0-6) dependency; /lib/lsb/init-functions is provided by sysvinit-utils on bookworm/trixie/sid. - add Pre-Depends: ${misc:Pre-Depends} for the systemd helper maintainer-script snippets generated by dh_installsystemd. - wire up dh_installsystemd --name nagios4 in debian/rules so the nagios4.service unit file is actually installed (it had been silently ignored under the explicit-dh_* rules). - harden nagios4.service: ProtectSystem=full, ProtectHome=true, PrivateTmp=true, ProtectKernelTunables/Modules/ControlGroups, RestrictSUIDSGID, LockPersonality, RestrictRealtime, RestrictNamespaces, SystemCallArchitectures=native. NoNewPrivileges is deliberately *not* set -- plugins like check_ping rely on /bin/ping's cap_net_raw file capability. . * debian/copyright cleanup: - drop html/angularjs/* stanza (upstream removed angularjs) - drop lib/pqueue.[ch] stanza (upstream removed in 4.5.x) - drop the deprecated 51 Franklin St FSF mailing address - Format URI: http:// -> https:// . * debian/nagios4-cgi.install: drop angularjs/, bootstrap-*, d3/ and spin/ paths (upstream removed those directories). . * debian/nagios4-cgi.lintian-overrides: drop -- current lintian no longer emits the tag the overrides were suppressing. . * debian/nagios4-common.lintian-overrides: rewrite using the current `tag detail [path]` syntax so the resource.cfg 0600 permissions override matches lintian's emission. . * debian/nagios4-common.examples: drop the sample-config/template-object/{commands,localhost}.cfg entries (they were also shipped under examples/template-object/ via the .install file). . * debian/{nagios4,nagios4stats}.8: rewrite the FILES section to drop the nested `.TP ; .IP path` sequence (sid's newer groff rejects nested .TP). . * Maintainer scripts: switch `#!/bin/sh -e` shebang to `#!/bin/sh` followed by an explicit `set -e`. . * Add a stub debian/upstream/metadata pointing at upstream's GitHub repository and issue tracker. . * Modernise debian/watch: HTTPS via sf.net shortcut. Note: pgpsigurlmangle is not used because upstream does not publish detached OpenPGP signatures on GitHub or SourceForge. . * debian/rules: strip trailing whitespace; delete base/wpres-phash.h in the configure step so make's `wpres-phash.h: wpres.gperf` rule fires (only matters for the now-extremely-unlikely case where some future Files-Excluded drift lets the file survive into the source). . * debian/README.Debian: refresh the Documentation section -- point at the canonical upstream docs URL (https on assets.nagios.com, no marketing redirector) and replace the long-deprecated nagios-users@lists.sourceforge.net mailing list with the GitHub issue tracker. Checksums-Sha1: cec0870d4d201b03ed39f8997ddd1baea998394d 6515284 nagios4-cgi-dbgsym_4.5.12+ds-1_sh4.deb 4fa561a79419f7aeb9772e8018b5932af8472609 860536 nagios4-cgi_4.5.12+ds-1_sh4.deb 1b74465780c6c96a942b1a7a6f05a5e8b05e7210 858120 nagios4-core-dbgsym_4.5.12+ds-1_sh4.deb 8f0282b64c80f1e331e3853768b76c526c11fd56 250596 nagios4-core_4.5.12+ds-1_sh4.deb c06c7a464a1a69547dd6d631c4691037d9aeada2 9621 nagios4_4.5.12+ds-1_sh4.buildinfo bfaf2508e63426251aa16cbda94d69b50e220a90 19780 nagios4_4.5.12+ds-1_sh4.deb Checksums-Sha256: a05b1e772c0ea4c377da1483620d820fde1f107997a1b5bf1c1fcc4133bc99a0 6515284 nagios4-cgi-dbgsym_4.5.12+ds-1_sh4.deb 121c09d9bf41a503a7e5d564bf4321c92b09d1ae97c9929a7196d5a57b5d81eb 860536 nagios4-cgi_4.5.12+ds-1_sh4.deb 35a807f4bd22432b8be5cec347341ad9f6a6c2a9ed59edbfb757d8c27b323ab1 858120 nagios4-core-dbgsym_4.5.12+ds-1_sh4.deb 06c08966b461509640cd0cd3a3aaa15c37413429abee457169a867f543921f1c 250596 nagios4-core_4.5.12+ds-1_sh4.deb ddd1db276f6d259e868ab8031c489ab9070f760f94077e17b24f2f938bc6b307 9621 nagios4_4.5.12+ds-1_sh4.buildinfo bed0091459b22d86be799bae7f7d483c892943e39d6c2aec3b2ca777b554ca9f 19780 nagios4_4.5.12+ds-1_sh4.deb Files: b38c1bec8f5f81392ce9c5b085bac0cc 6515284 debug optional nagios4-cgi-dbgsym_4.5.12+ds-1_sh4.deb e1eff3f280f9864d2130aa45f700f2b9 860536 net optional nagios4-cgi_4.5.12+ds-1_sh4.deb 03b2f76481552759d465142099fbeadd 858120 debug optional nagios4-core-dbgsym_4.5.12+ds-1_sh4.deb 2d8effee8773dd3c15285e261a0ca3e7 250596 net optional nagios4-core_4.5.12+ds-1_sh4.deb 945b651d9f43fc0ad72b150ce7a70815 9621 net optional nagios4_4.5.12+ds-1_sh4.buildinfo 94bae4085a183875d185531f2eae809f 19780 net optional nagios4_4.5.12+ds-1_sh4.deb Signed-By: Debian buildd autosigning key for sh4-gandi-01