/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to initramfs-tools-conf

  • Committer: Teddy Hogeborn
  • Date: 2008-09-26 04:54:35 UTC
  • Revision ID: teddy@fukt.bsnet.se-20080926045435-0thnnqops1kzclag
* debian/mandos-client.postinst: Change home directory to
                                 "/nonexistent".
* debian/mandos.postinst: - '' -

* plugin-runner.c (main): Bug fix: Block signals while modifying
                          "plugin_list".

* plugins.d/usplash.c (usplash_write): New function.
  (main): Use "usplash_write" to write "INPUTQUIET" command.  Also
          write "TIMEOUT 0" before it, and write "TIMEOUT 15" and
          "PULSATE" if starting a new usplash process.  Kill old
          usplash before forking.  Bug fix: do setuid(geteuid()) to
          preserve genuine rootness.  Better interrupted/error logic
          overall.

* debian/mandos-client.lintian-overrides: Ignore setuid
                                          "plugins.d/usplash".

Show diffs side-by-side

added added

removed removed

Lines of Context:
initramfs-tools-conf
1
 
# -*- shell-script -*-
2
 
 
3
 
# Since the initramfs image will contain key files, we need to
4
 
# restrict permissions on it by setting UMASK here.
5
 
# 
6
 
# The proper place to set UMASK is (according to
7
 
# /etc/cryptsetup-initramfs/conf-hook), in
8
 
# /etc/initramfs-tools/initramfs.conf, which we shouldn't edit.  The
9
 
# corresponding directory for drop-in files from packages is
10
 
# /usr/share/initramfs-tools/conf.d, and this file will be installed
11
 
# there as "mandos-conf".
12
 
# 
13
 
# This setting of UMASK will have unfortunate unintended side effects
14
 
# on the files *inside* the initramfs, but these are later fixed by
15
 
# "initramfs-tools-hook", installed as
16
 
# "/usr/share/initramfs-tools/hooks/mandos".
17
 
UMASK=0027