Resolve this Lintian error:
E: softether: possible-gpl-code-linked-with-openssl
The OpenSSL license exception is implied by official upstream binary releases
that contain a statically linked libssl.
Resolve these Lintian warning:
W: softether: package-name-doesnt-match-sonames libsoftether
W: softether: shlib-without-versioned-soname usr/lib/x86_64-linux-gnu/libsoftether.so libsoftether.so
The library interface is entirely private and provided only for build
convenience and runtime optimization. The sonames are not versioned
because the interface is not contracted.
The debhelper package has a dh-apparmor dependency on Ubuntu, but not on
Debian. Add dh-apparmor to the Build-Depends control so that this package
compiles cleanly on vanilla Debian platforms.
Install a mandatory access control for restricing SoftEther to network
facilities only. This reduces the vulnerability surface of any softetherd
exploit, which is an important because SoftEther currently runs as a fully
privileged process.
The check for an upstart configuration in the sysv script is reverted because
upstart and start-stop-daemon can both control the same softetherd instance.
Create a softether.upstart file in the Debian overlay for systems that use
the upstart init subsystem. This lets the operator control the SoftEther
daemon with commands like:
# start softether
# stop softether
# status softether
# restart softether
Also modify the softether.init file to exit early if the /etc/init/softether
file is installed. Although the dh_installinit debhelper prefers an upstart
configuration for automatic control, it will also install the sysv script.
