To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
- Committer: Teddy Hogeborn
- Date: 2016-03-04 22:07:35 UTC
- mto: (237.7.594 trunk)
- Revision ID: teddy@recompile.se-20160304220735-4xeeqt5p4nhw5cuh
Restrict the Mandos server daemon in the systemd service file.
* mandos.service ([Service]/ProtectSystem): Set to "full".
([Service]/PrivateTmp, [Service]/PrivateDevices,
[Service]/ProtectHome): Set to "yes".
([Service]/CapabilityBoundingSet): Set to "CAP_SETUID
CAP_DAC_OVERRIDE CAP_NET_RAW".
* mandos.service ([Service]/ProtectSystem): Set to "full".
([Service]/PrivateTmp, [Service]/PrivateDevices,
[Service]/ProtectHome): Set to "yes".
([Service]/CapabilityBoundingSet): Set to "CAP_SETUID
CAP_DAC_OVERRIDE CAP_NET_RAW".
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
.bzr-builddeb
|
185 | 16 years ago | Teddy Hogeborn | * .bzr-builddeb/default.conf: New. * Makefile (in |
|
||
|
debian
|
185 | 16 years ago | Teddy Hogeborn | * .bzr-builddeb/default.conf: New. * Makefile (in |
|
||
|
network-hooks.d
|
237.16.10 | 13 years ago | Teddy Hogeborn | * network-hooks.d: New directory. * network-hooks. |
|
||
|
plugin-helpers
|
237.25.1 | 9 years ago | Teddy Hogeborn | Add a plugin helper directory, available to all pl |
|
||
|
plugins.d
|
13 | 16 years ago | Björn Påhlsson | Added following support: Pluginbased client handle |
|
||
.bzrignore |
237.7.133 | 12 years ago | Teddy Hogeborn | * .bzrignore (statedir): Added. | 188 bytes |
|
|
|
clients.conf |
237.7.157 | 12 years ago | Teddy Hogeborn | * clients.conf: Convert all time intervals to new | 3.1 KB |
|
|
|
common.ent |
334 | 8 years ago | Teddy Hogeborn | * Makefile (version): Changed to "1.7.3". * NEWS ( | 93 bytes |
|
|
|
COPYING |
24.1.51 | 16 years ago | Björn Påhlsson | Added configuration files support for mandos-clien | 34.2 KB |
|
|
|
DBUS-API |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 5.8 KB |
|
|
|
dbus-mandos.conf |
24.1.186 | 13 years ago | Björn Påhlsson | transitional stuff actually working documented cha | 820 bytes |
|
|
|
default-mandos |
185 | 16 years ago | Teddy Hogeborn | * .bzr-builddeb/default.conf: New. * Makefile (in | 174 bytes |
|
|
|
init.d-mandos |
237.7.196 | 10 years ago | Teddy Hogeborn | Update init script to modern standards. * init.d- | 4.3 KB |
|
|
initramfs-tools-hook |
237.7.337 | 9 years ago | Teddy Hogeborn | * initramfs-tools-hook: Don't try to chmod symlink | 7.3 KB |
|
|
|
initramfs-tools-hook-conf |
256 | 15 years ago | Teddy Hogeborn | * initramfs-tools-hook-conf: Security bug fix: Add | 407 bytes |
|
|
|
initramfs-tools-script |
237.7.363 | 8 years ago | Teddy Hogeborn | Ignore any error from initramfs-tools' "configure_ | 3.7 KB |
|
|
|
initramfs-unpack |
237.7.172 | 11 years ago | Teddy Hogeborn | * initramfs-unpack: Bug fix: Made executable. | 2.2 KB |
|
|
|
INSTALL |
237.7.358 | 8 years ago | Teddy Hogeborn | Depend on the GNU C Library 2.16 or later * INST | 5.2 KB |
|
|
|
intro.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 16 KB |
|
|
|
legalnotice.xml |
174 | 16 years ago | Teddy Hogeborn | * legalnotice.xml: Copy DocBook 4.4-formatted text | 1 KB |
|
|
|
Makefile |
237.7.365 | 8 years ago | Teddy Hogeborn | Only use -fsanitize=... options if they work. * M | 17.6 KB |
|
|
|
mandos |
237.7.364 | 8 years ago | Teddy Hogeborn | Use "nogroup" as a fallback group, not "nobody". | 135 KB |
|
|
|
mandos-clients.conf.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 18.6 KB |
|
|
|
mandos-ctl |
334 | 8 years ago | Teddy Hogeborn | * Makefile (version): Changed to "1.7.3". * NEWS ( | 18.7 KB |
|
|
|
mandos-ctl.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 16.4 KB |
|
|
|
mandos-keygen |
334 | 8 years ago | Teddy Hogeborn | * Makefile (version): Changed to "1.7.3". * NEWS ( | 10.5 KB |
|
|
|
mandos-keygen.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 15.3 KB |
|
|
|
mandos-monitor |
334 | 8 years ago | Teddy Hogeborn | * Makefile (version): Changed to "1.7.3". * NEWS ( | 30.6 KB |
|
|
|
mandos-monitor.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 6.2 KB |
|
|
|
mandos-options.xml |
237.7.325 | 9 years ago | Teddy Hogeborn | Bug fix for GnuTLS 3: be compatible with old 2048- | 4.8 KB |
|
|
|
mandos.conf |
237.7.325 | 9 years ago | Teddy Hogeborn | Bug fix for GnuTLS 3: be compatible with old 2048- | 1.6 KB |
|
|
|
mandos.conf.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 8.8 KB |
|
|
|
mandos.lsm |
334 | 8 years ago | Teddy Hogeborn | * Makefile (version): Changed to "1.7.3". * NEWS ( | 906 bytes |
|
|
|
mandos.service |
237.7.366 | 8 years ago | Teddy Hogeborn | Restrict the Mandos server daemon in the systemd s | 1.1 KB |
|
|
|
mandos.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 23.7 KB |
|
|
|
NEWS |
334 | 8 years ago | Teddy Hogeborn | * Makefile (version): Changed to "1.7.3". * NEWS ( | 14.4 KB |
|
|
|
overview.xml |
183 | 16 years ago | Teddy Hogeborn | * Makefile (install-client-nokey): Do "&&" instead | 926 bytes |
|
|
|
plugin-runner.c |
237.7.358 | 8 years ago | Teddy Hogeborn | Depend on the GNU C Library 2.16 or later * INST | 34.7 KB |
|
|
|
plugin-runner.conf |
237.2.105 | 15 years ago | Teddy Hogeborn | * initramfs-tools-hook: Bug fix: Add "--userid" an | 380 bytes |
|
|
|
plugin-runner.xml |
237.7.355 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 21.9 KB |
|
|
|
README |
237.7.98 | 12 years ago | Teddy Hogeborn | * README: Hint that the intro(8mandos) manual page | 409 bytes |
|
|
|
TODO |
237.7.337 | 9 years ago | Teddy Hogeborn | * initramfs-tools-hook: Don't try to chmod symlink | 5.3 KB |
|
|