/mandos/release : changes

» Changes from revision 237.7.373

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/release

From Revision 237.7.373 to 237.7.354

expand all

Rev	Summary	Authors	Date
237.7.373	Server bug fix: Include CAP_SETGID so it does not run as roo... Server bug fix: Include CAP_SETGID so it does not run as root * debian/mandos.postinst (configure): If old version was 1.7.4-1 or 1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by root. * mandos (main): Print debug info about setuid() and setgid() * mandos.service ([Service]/CapabilityBoundingSet): Add "CAP_KILL CAP_SETGID"; the latter is needed for setgid() to be allowed.	Teddy Hogeborn	8 years ago
237.7.372	Remove empty comment Remove empty comment * mandos: Remove empty comment.	Teddy Hogeborn	8 years ago
237.7.371	Merge from release branch. Merge from release branch.	Teddy Hogeborn	8 years ago
237.7.370	Fix incorrect documentation of minor limitation Fix incorrect documentation of minor limitation * mandos-monitor.xml (BUGS): The name which is hard-coded is the D-Bus bus name, not the service name. Fix the documentation.	Teddy Hogeborn	8 years ago
237.7.369	Add bug reporting information to manual pages Add bug reporting information to manual pages * bugs.xml: New file. * intro.xml (BUGS): New section; include "bugs.xml". * mandos-clients.conf.xml (BUGS): Include "bugs.xml". * mandos-ctl.xml (BUGS): Uncommented; include "bugs.xml". * mandos-keygen.xml (BUGS): - '' - * mandos-monitor.xml (BUGS): Include "bugs.xml". * mandos.conf.xml (BUGS): - '' - * mandos.xml (BUGS): - '' - * plugin-runner.xml (BUGS): - '' - * plugins.d/askpass-fifo.xml (BUGS): New section; include "../bugs.xml". * plugins.d/mandos-client.xml (BUGS): Uncommented; include "../bugs.xml". * plugins.d/password-prompt.xml (BUGS): Include "../bugs.xml". * plugins.d/plymouth.xml (BUGS): - '' - * plugins.d/splashy.xml (BUGS): - '' - * plugins.d/usplash.xml (BUGS): - '' -	Teddy Hogeborn	8 years ago
237.7.368	Rename "gobject" to "GObject"; prefer the new python-gi Rename "gobject" to "GObject"; prefer the new python-gi * debian/control (Source: mandos/Build-Depends-Indep): Change "python-gobject \| python-gi" to "python-gi \| python-gobject" (Package: mandos/Depends): - '' - * mandos: Prefer "gi" module over "gobject" module. Import "gobject" as "GObject"; change spelling throughout. * mandos-monitor: - '' -	Teddy Hogeborn	8 years ago
237.7.367	errno is of type int, not error_t errno is of type int, not error_t * plugins.d/mandos-client.c (raise_privileges, raise_privileges_permanently, lower_privileges, lower_privileges_permanently, bring_up_interface, take_down_interface, ): Change return type and all errno-containing variables to type "int". (get_flags): Change all errno-containing variables to type "int". (main): Change all errno-containing variables to type "int", except for values which are explicitly of type error_t.	Teddy Hogeborn	8 years ago
237.7.366	Restrict the Mandos server daemon in the systemd service fil... Restrict the Mandos server daemon in the systemd service file. * mandos.service ([Service]/ProtectSystem): Set to "full". ([Service]/PrivateTmp, [Service]/PrivateDevices, [Service]/ProtectHome): Set to "yes". ([Service]/CapabilityBoundingSet): Set to "CAP_SETUID CAP_DAC_OVERRIDE CAP_NET_RAW".	Teddy Hogeborn	8 years ago
237.7.365	Only use -fsanitize=... options if they work. Only use -fsanitize=... options if they work. * Makefile (ALL_SANITIZE_OPTIONS): New. (SANITIZE): Loop through all known sanitizing options and only use those which do not give an error.	Teddy Hogeborn	8 years ago
237.7.364	Use "nogroup" as a fallback group, not "nobody". Use "nogroup" as a fallback group, not "nobody". * Makefile (GROUP): Use "nogroup" as a fallback group, not "nobody". * mandos (main): - '' -	Teddy Hogeborn	8 years ago
237.7.363	Ignore any error from initramfs-tools' "configure_networking... Ignore any error from initramfs-tools' "configure_networking". * initramfs-tools-script: Wrap call to "configure_networking" with "set +e" and "set -e", since configure_networking was not designed to run in a "set -e" environment. Closes: 816513 Thanks: Carlos Alberto Lopez Perez <clopez@igalia.com> Thanks: Ben Hutchings <ben@decadent.org.uk>	Teddy Hogeborn	8 years ago
237.7.362	Merge from release branch. Merge from release branch.	Teddy Hogeborn	8 years ago
237.7.361	Client: Remove new key directory introduced in GnuPG 2.1 Client: Remove new key directory introduced in GnuPG 2.1 * plugins.d/mandos-client.c (main/clean_dir_at): New function; calls itself for any known subdirectories which should also be removed. (main): Call clean_dir_at() to remove GPGME temp directory.	Teddy Hogeborn	8 years ago
237.7.360	Client: Remove calls to gnutls_global_init and gnutls_global... Client: Remove calls to gnutls_global_init and gnutls_global_deinit * plugins.d/mandos-client.c (init_gnutls_global, main): Don't call gnutls_global_init or gnutls_global_deinit anymore; these are unnecessary in GnuTLS 3.3.	Teddy Hogeborn	8 years ago
237.7.359	Client: Remove an incorrect "nonnull" attribute Client: Remove an incorrect "nonnull" attribute * plugins.d/mandos-client.c (init_gnutls_global): Remove "nonnull" attribute from "dhparamsfilename" argument.	Teddy Hogeborn	8 years ago
237.7.358	Depend on the GNU C Library 2.16 or later Depend on the GNU C Library 2.16 or later * INSTALL: Document dependency. * plugin-runner.c: Remove #ifdefs for scandirat() and adding of -Wsign-conversion for FD_SET, FD_CLR, and FD_ISSET. * plugins.d/mandos-client.c: - '' -	Teddy Hogeborn	8 years ago
237.7.357	Merge from release branch. Merge from release branch.	Teddy Hogeborn	8 years ago
237.7.356	Update Debian policy manual version. Update Debian policy manual version. * debian/control (Source: mandos/Standards-Version): Change to 3.9.7.	Teddy Hogeborn	8 years ago
237.7.355	Update copyright year. Update copyright year. * DBUS-API: Update copyright year. * debian/copyright: - '' - * intro.xml (COPYRIGHT): - '' - * mandos: - '' - * mandos-clients.conf.xml (COPYRIGHT): - '' - * mandos-ctl: - '' - * mandos-ctl.xml (COPYRIGHT): - '' - * mandos-keygen: - '' - * mandos-keygen.xml (COPYRIGHT): - '' - * mandos-monitor: - '' - * mandos-monitor.xml (COPYRIGHT): - '' - * mandos.conf.xml (COPYRIGHT): - '' - * mandos.xml (COPYRIGHT): - '' - * plugin-helpers/mandos-client-iprouteadddel.c: - '' - * plugin-runner.c: - '' - * plugin-runner.xml (COPYRIGHT): - '' - * plugins.d/askpass-fifo.c: - '' - * plugins.d/askpass-fifo.xml (COPYRIGHT): - '' - * plugins.d/mandos-client.c: - '' - * plugins.d/mandos-client.xml (COPYRIGHT): - '' - * plugins.d/password-prompt.c: - '' - * plugins.d/password-prompt.xml (COPYRIGHT): - '' * plugins.d/plymouth.c: - '' - * plugins.d/plymouth.xml (COPYRIGHT): - '' - * plugins.d/splashy.c: - '' - * plugins.d/splashy.xml (COPYRIGHT): - '' - * plugins.d/usplash.c: - '' - * plugins.d/usplash.xml (COPYRIGHT): - '' -	Teddy Hogeborn	8 years ago
237.7.354	Fix Debian dependency bugs and lintian checks. Fix Debian dependency bugs and lintian checks. * debian/control (Source: mandos/Build-Depends-Indep): Change "python (= 2.7)" to "python (>= 2.7), python (<< 3)". (Package: mandos/Depends): - '' - * mandos: Change "#!/usr/bin/python2.7" to "/usr/bin/python", since lintian otherwise complains about missing dependency on "python2.7".	Teddy Hogeborn	8 years ago

Older »