diff --git a/dnscrypt-proxy.changes b/dnscrypt-proxy.changes index 4b29f70..e4192aa 100644 --- a/dnscrypt-proxy.changes +++ b/dnscrypt-proxy.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Sep 6 08:51:47 UTC 2017 - jengelh@inai.de + +- Errors from user creation from pre scriptlet must not be ignored. +- Ensure neutrality of description. + ------------------------------------------------------------------- Sat Aug 5 13:44:34 UTC 2017 - sebix+novell.com@sebix.at diff --git a/dnscrypt-proxy.spec b/dnscrypt-proxy.spec index b5947ea..0c36bca 100644 --- a/dnscrypt-proxy.spec +++ b/dnscrypt-proxy.spec @@ -46,8 +46,8 @@ dnscrypt-proxy provides local service which can be used directly as your local r encrypting and authenticating requests using the DNSCrypt protocol and passing them to an upstream server, by default Cisco who run this on their resolvers. (It used to be OpenDNS.) -The DNSCrypt protocol uses high-speed high-security elliptic-curve cryptography and is very similar to -DNSCurve, but focuses on securing communications between a client and its first-level resolver. +The DNSCrypt protocol uses elliptic-curve cryptography and is similar to DNSCurve, but focuses on +securing communications between a client and its first-level resolver. While not providing end-to-end security, it protects the local network, which is often the weakest point of the chain, against man-in-the-middle attacks. It also provides some confidentiality to DNS queries. @@ -93,11 +93,11 @@ mv %{buildroot}%{_sysconfdir}/%{name}.conf %{buildroot}%{_sysconfdir}/%{name}.co %pre if ! %{_bindir}/getent group dnscrypt >/dev/null; then - %{_sbindir}/groupadd -r dnscrypt 2>/dev/null || : + %{_sbindir}/groupadd -r dnscrypt fi if ! %{_bindir}/getent passwd dnscrypt >/dev/null; then %{_sbindir}/useradd -c "DNSCrypt daemon" -d %{_localstatedir}/lib/empty -g dnscrypt \ - -r -s /bin/false dnscrypt 2>/dev/null || : + -r -s /bin/false dnscrypt fi %if 0%{?suse_version} >= 1210 %service_add_pre %{name}@.service