=== modified file 'Makefile' --- Makefile 2008-09-12 19:12:40 +0000 +++ Makefile 2008-09-13 15:36:18 +0000 @@ -172,7 +172,7 @@ $(PREFIX)/lib/mandos/plugins.d if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \ install --mode=u=rwx \ - --directory "$(CONFDIR)/plugins.d"; \ + --directory "$(CONFDIR)/plugins.d" && \ install --mode=u=rw,go=r etc-plugins.d-README \ $(CONFDIR)/plugins.d/README ; \ fi === modified file 'README' --- README 2008-09-05 07:11:24 +0000 +++ README 2008-09-13 15:36:18 +0000 @@ -3,15 +3,15 @@ * Mandos - Have your cake and eat it too! - You know how it is. You've heard of it happening. The Man comes - and takes away your servers, your friends' servers, the servers of + You know how it is. You’ve heard of it happening. The Man comes + and takes away your servers, your friends’ servers, the servers of everybody in the same hosting facility. The servers of their - neighbors, and their neighbors' friends. The servers of people who - owe them money. And like *that*, they're gone. And you doubt - you'll ever see them again. + neighbors, and their neighbors’ friends. The servers of people who + owe them money. And like *that*, they’re gone. And you doubt + you’ll ever see them again. That is why your servers have encrypted root file systems. However, - there's a downside. There's no going around it: rebooting is a + there’s a downside. There’s no going around it: rebooting is a pain. Dragging out that rarely-used keyboard and screen and unraveling cables behind your servers to plug them in to type in that password is messy, especially if you have many servers. There @@ -23,7 +23,7 @@ have to be on hand and manually type in the password at boot time. Otherwise the server just sits there, waiting for a password. - Wouldn't it be great if you could have the security of encrypted + Wouldn’t it be great if you could have the security of encrypted root file systems and still have servers that could boot up automatically if there was a short power outage while you were asleep? That you could reboot at will, without having someone run @@ -129,3 +129,24 @@ focused, and competent attacks, but against the early morning knock on your door and the sudden absence of all the servers in your server room. Which it does nicely. + +* Copyright + + Copyright (C) 2008 Teddy Hogeborn + 2008 Björn Påhlsson + +** License: + + This program is free software: you can redistribute it and/or + modify it under the terms of the GNU General Public License as + published by the Free Software Foundation, either version 3 of the + License, or (at your option) any later version. + + This program is distributed in the hope that it will be useful, but + WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see + . === modified file 'TODO' --- TODO 2008-09-12 19:12:40 +0000 +++ TODO 2008-09-13 15:36:18 +0000 @@ -67,9 +67,7 @@ * TODO Web site * Mailing list -** TODO mandos-dev -*** TODO http://gmane.org/subscribe.php -** TODO mandos-user +** DONE mandos-dev *** TODO http://gmane.org/subscribe.php * TODO Announce project on news === removed directory 'debian' === modified file 'overview.xml' --- overview.xml 2008-09-12 19:12:40 +0000 +++ overview.xml 2008-09-13 15:36:18 +0000 @@ -6,10 +6,12 @@ encrypted root file systems and at the same time be capable of remote and/or unattended reboots. The computers run a small client program in the initial RAM disk environment which - will communicate with a server over a network. The clients are - identified by the server using an OpenPGP key; each client has one - unique to it. The server sends the clients an encrypted password. - The encrypted password is decrypted by the clients using the same - OpenPGP key, and the password is then used to unlock the root file - system, whereupon the computers can continue booting normally. + will communicate with a server over a network. All network + communication is encrypted using TLS. The + clients are identified by the server using an OpenPGP key; each + client has one unique to it. The server sends the clients an + encrypted password. The encrypted password is decrypted by the + clients using the same OpenPGP key, and the password is then used to + unlock the root file system, whereupon the computers can continue + booting normally.