/mandos/release : changes

» Changes from revision 237.7.383

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/release

From Revision 237.7.383 to 237.7.364

expand all

Rev	Summary	Authors	Date
237.7.383	Client: Document default directories more clearly Client: Document default directories more clearly Document default plugin directory and default plugin helper directory also in the FILES section of the manual. * plugin-runner.xml (FILES): Add "/lib/mandos/plugins.d" and "/lib/mandos/plugin-helpers".	Teddy Hogeborn	8 years ago
237.7.382	Client: Remove dead code in plugin-runner Client: Remove dead code in plugin-runner WCOREDUMP is always a subset of WTERMSIG; ignore WCOREDUMP. * plugin-runner.c (main): Remove WCOREDUMP clause.	Teddy Hogeborn	8 years ago
237.7.381	Client: Fix plymouth agent; broken since 1.7.2. Client: Fix plymouth agent; broken since 1.7.2. Fix an very old memory bug in the plymouth agent (which has been present since its apperance in version 1.2), but which was only recently detected at run time due to the new -fsanitize=address compile- time flag, which has been used since version 1.7.2. This detection of a memory access violation causes the program to abort, making the Plymouth graphical boot system unable to accept interactive input of passwords when using the Mandos client. * plugins.d/plymouth.c (exec_and_wait): Fix memory allocation bug when allocating new_argv. Also tolerate a zero-length argv.	Teddy Hogeborn	8 years ago
237.7.380	Merge from release branch Merge from release branch	Teddy Hogeborn	8 years ago
237.7.379	Server: Fix bug where it did not exit timely on signals Server: Fix bug where it did not exit timely on signals Use GLib.unix_signal_add() instead of signal.signal() to catch signals; this will allow GLib to do its internal magic with signal file descriptors. (GLib does not handle signals properly otherwise.) The function unix_signal_add() requires GLib 2.30 or later, which was not required by PyGobject until version 3.7.1, so depend on this. * INSTALL (Mandos Server): Document dependency on PyGObject 3.7.1 * mandos (main): Use GLib.unix_signal_add instead of signal.signal. * init.d-mandos (do_stop): Remove workaround. * mandos.service ([Service]): - '' -	Teddy Hogeborn	8 years ago
237.7.378	Server: Use python-gi instead of old python-gobject Server: Use python-gi instead of old python-gobject The python-gobject module is old, deprecated, and replaced with the python-gi (GObject Introspection) module; use that instead. * debian/control (Source: mandos/Build-Depends-Indep): Change "python-gi \| python-gobject" to "python-gi". * mandos: Import "GLib" instead of "GObject"; change all users. * mandos-monitor: - '' -	Teddy Hogeborn	8 years ago
237.7.377	Server: Fix minor thing with Python 3 compatibility Server: Fix minor thing with Python 3 compatibility Fix another small thing with unpickling string values. * mandos (main): When restoring pickled client data, only decode byte string for "host" key if it really is a byte string.	Teddy Hogeborn	8 years ago
237.7.376	Server: Add Python 3 compatibility Server: Add Python 3 compatibility Add Python 3 compatibility by not using the python-avahi module. Also fix miscellaneous things which differs in Python 3. Especially hard to fix is loading and saving clients data between Python 3 and 2, since pickle formats have problems with strings. * INSTALL: Remove python-avahi (and change python-gobject to python-gi, which is preferred now). * debian/control (Source: mandos/Build-Depends-Indep): Remove "python-avahi". * mandos: Wrap future_builtins import in try-except clause. Do not import avahi module. Use codecs.decode(..., "base64) instead of .decode("base64). Use .keys(), .values(), and .items() instead of .iterkeys(), .itervalues(), and .iteritems(). (alternate_dbus_interfaces/wrapper): Python 3 still requires the "black magic", but luckily it still works. The Python 3 type() constructor requires first argument to be a string, not a byte string. (copy_function): New. Use throughout. (Avahi, avahi): New class and global variable. (GnuTLS._need_version): Changed to be a byte string. (main): Decode byte strings loaded from pickle file. (main/cleanup): Dump using pickle prototoc 2 which Python 2 can read.	Teddy Hogeborn	8 years ago
237.7.375	Merge from release branch Merge from release branch	Teddy Hogeborn	8 years ago
237.7.374	Server bug fix: Work around bug when stopping server Server bug fix: Work around bug when stopping server * init.d-mandos (do_stop): Work around SIGTERM ignoring bug by doing "mandos-ctl >/dev/null 2>&1" after sending signal. * mandos.service (ExecStop): New; set to "/bin/kill -TERM $MAINPID ; /usr/sbin/mandos-ctl >/dev/null 2>&1" to work around SIGTERM ignoring bug.	Teddy Hogeborn	8 years ago
237.7.373	Server bug fix: Include CAP_SETGID so it does not run as roo... Server bug fix: Include CAP_SETGID so it does not run as root * debian/mandos.postinst (configure): If old version was 1.7.4-1 or 1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by root. * mandos (main): Print debug info about setuid() and setgid() * mandos.service ([Service]/CapabilityBoundingSet): Add "CAP_KILL CAP_SETGID"; the latter is needed for setgid() to be allowed.	Teddy Hogeborn	8 years ago
237.7.372	Remove empty comment Remove empty comment * mandos: Remove empty comment.	Teddy Hogeborn	8 years ago
237.7.371	Merge from release branch. Merge from release branch.	Teddy Hogeborn	8 years ago
237.7.370	Fix incorrect documentation of minor limitation Fix incorrect documentation of minor limitation * mandos-monitor.xml (BUGS): The name which is hard-coded is the D-Bus bus name, not the service name. Fix the documentation.	Teddy Hogeborn	8 years ago
237.7.369	Add bug reporting information to manual pages Add bug reporting information to manual pages * bugs.xml: New file. * intro.xml (BUGS): New section; include "bugs.xml". * mandos-clients.conf.xml (BUGS): Include "bugs.xml". * mandos-ctl.xml (BUGS): Uncommented; include "bugs.xml". * mandos-keygen.xml (BUGS): - '' - * mandos-monitor.xml (BUGS): Include "bugs.xml". * mandos.conf.xml (BUGS): - '' - * mandos.xml (BUGS): - '' - * plugin-runner.xml (BUGS): - '' - * plugins.d/askpass-fifo.xml (BUGS): New section; include "../bugs.xml". * plugins.d/mandos-client.xml (BUGS): Uncommented; include "../bugs.xml". * plugins.d/password-prompt.xml (BUGS): Include "../bugs.xml". * plugins.d/plymouth.xml (BUGS): - '' - * plugins.d/splashy.xml (BUGS): - '' - * plugins.d/usplash.xml (BUGS): - '' -	Teddy Hogeborn	8 years ago
237.7.368	Rename "gobject" to "GObject"; prefer the new python-gi Rename "gobject" to "GObject"; prefer the new python-gi * debian/control (Source: mandos/Build-Depends-Indep): Change "python-gobject \| python-gi" to "python-gi \| python-gobject" (Package: mandos/Depends): - '' - * mandos: Prefer "gi" module over "gobject" module. Import "gobject" as "GObject"; change spelling throughout. * mandos-monitor: - '' -	Teddy Hogeborn	8 years ago
237.7.367	errno is of type int, not error_t errno is of type int, not error_t * plugins.d/mandos-client.c (raise_privileges, raise_privileges_permanently, lower_privileges, lower_privileges_permanently, bring_up_interface, take_down_interface, ): Change return type and all errno-containing variables to type "int". (get_flags): Change all errno-containing variables to type "int". (main): Change all errno-containing variables to type "int", except for values which are explicitly of type error_t.	Teddy Hogeborn	8 years ago
237.7.366	Restrict the Mandos server daemon in the systemd service fil... Restrict the Mandos server daemon in the systemd service file. * mandos.service ([Service]/ProtectSystem): Set to "full". ([Service]/PrivateTmp, [Service]/PrivateDevices, [Service]/ProtectHome): Set to "yes". ([Service]/CapabilityBoundingSet): Set to "CAP_SETUID CAP_DAC_OVERRIDE CAP_NET_RAW".	Teddy Hogeborn	8 years ago
237.7.365	Only use -fsanitize=... options if they work. Only use -fsanitize=... options if they work. * Makefile (ALL_SANITIZE_OPTIONS): New. (SANITIZE): Loop through all known sanitizing options and only use those which do not give an error.	Teddy Hogeborn	8 years ago
237.7.364	Use "nogroup" as a fallback group, not "nobody". Use "nogroup" as a fallback group, not "nobody". * Makefile (GROUP): Use "nogroup" as a fallback group, not "nobody". * mandos (main): - '' -	Teddy Hogeborn	8 years ago

Older »