/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to mandos.conf.xml

First version of a somewhat complete D-Bus server interface.  Also
change user/group name to "_mandos".

* debian/mandos.postinst: Rename old "mandos" user and group to
                          "_mandos"; create "_mandos" user and group
                          if none exist.
* debian/mandos-client.postinst: - '' -

* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
                        group name.

* mandos (_datetime_to_dbus_struct): New; was previously local.
  (Client.started): Renamed to "last_started".  All users changed.
  (Client.started): New; boolean.
  (Client.dbus_object_path): New.
  (Client.check_command): Renamed to "checker_command".  All users
                          changed.
  (Client.__init__): Set and use "self.dbus_object_path".  Set
                     "self.started".
  (Client.start): Update "self.started".  Emit "self.PropertyChanged"
                  signals for both "started" and "last_started".
  (Client.stop): Update "self.started".  Emit "self.PropertyChanged"
                 signal for "started".
  (Client.checker_callback): Take additional "command" argument.  All
                             callers changed. Emit
                             "self.PropertyChanged" signal.
  (Client.bump_timeout): Emit "self.PropertyChanged" signal for
                         "last_checked_ok".
  (Client.start_checker): Emit "self.PropertyChanged" signal for
                          "checker_running".
  (Client.stop_checker): Emit "self.PropertyChanged" signal for
                         "checker_running".
  (Client.still_valid): Bug fix: use "getattr(self, started, False)"
                        instead of "self.started" in case this client
                        object is so new that the "started" attribute
                        has not been created yet.
  (Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
  Client.GetCreated, Client.GetFingerprint, Client.GetHost,
  Client.GetInterval, Client.GetName, Client.GetStarted,
  Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
  Removed; all callers changed.
  (Client.CheckerCompleted): Add "condition" and "command" arguments.
                             All callers changed.
  (Client.GetAllProperties, Client.PropertyChanged): New.
  (Client.StillValid): Renamed to "IsStillValid".
  (Client.StartChecker): Changed to its own function to avoid the
                         return value from "Client.start_checker()".
  (Client.Stop): Changed to its own function to avoid the return value
                 from "Client.stop()".
  (main): Try "_mandos" before "mandos" as user and group name.
          Removed inner function "remove_from_clients".  New inner
          class "MandosServer".

Show diffs side-by-side

added added

removed removed

Lines of Context:
3
3
        "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
4
<!ENTITY CONFNAME "mandos.conf">
5
5
<!ENTITY CONFPATH "<filename>/etc/mandos/mandos.conf</filename>">
6
 
<!ENTITY TIMESTAMP "2018-02-08">
 
6
<!ENTITY TIMESTAMP "2008-09-30">
7
7
<!ENTITY % common SYSTEM "common.ent">
8
8
%common;
9
9
]>
20
20
        <firstname>Björn</firstname>
21
21
        <surname>Påhlsson</surname>
22
22
        <address>
23
 
          <email>belorn@recompile.se</email>
 
23
          <email>belorn@fukt.bsnet.se</email>
24
24
        </address>
25
25
      </author>
26
26
      <author>
27
27
        <firstname>Teddy</firstname>
28
28
        <surname>Hogeborn</surname>
29
29
        <address>
30
 
          <email>teddy@recompile.se</email>
 
30
          <email>teddy@fukt.bsnet.se</email>
31
31
        </address>
32
32
      </author>
33
33
    </authorgroup>
34
34
    <copyright>
35
35
      <year>2008</year>
36
 
      <year>2009</year>
37
 
      <year>2010</year>
38
 
      <year>2011</year>
39
 
      <year>2012</year>
40
 
      <year>2013</year>
41
 
      <year>2014</year>
42
 
      <year>2015</year>
43
 
      <year>2016</year>
44
 
      <year>2017</year>
45
 
      <year>2018</year>
46
36
      <holder>Teddy Hogeborn</holder>
47
37
      <holder>Björn Påhlsson</holder>
48
38
    </copyright>
140
130
        </listitem>
141
131
      </varlistentry>
142
132
      
143
 
      <varlistentry>
144
 
        <term><option>use_dbus<literal> = </literal>{ <literal
145
 
          >1</literal> | <literal>yes</literal> | <literal
146
 
          >true</literal> | <literal>on</literal> | <literal
147
 
          >0</literal> | <literal>no</literal> | <literal
148
 
          >false</literal> | <literal>off</literal> }</option></term>
149
 
        <listitem>
150
 
          <xi:include href="mandos-options.xml" xpointer="dbus"/>
151
 
        </listitem>
152
 
      </varlistentry>
153
 
      
154
 
      <varlistentry>
155
 
        <term><option>use_ipv6<literal> = </literal>{ <literal
156
 
          >1</literal> | <literal>yes</literal> | <literal
157
 
          >true</literal> | <literal>on</literal> | <literal
158
 
          >0</literal> | <literal>no</literal> | <literal
159
 
          >false</literal> | <literal>off</literal> }</option></term>
160
 
        <listitem>
161
 
          <xi:include href="mandos-options.xml" xpointer="ipv6"/>
162
 
        </listitem>
163
 
      </varlistentry>
164
 
      
165
 
      <varlistentry>
166
 
        <term><option>restore<literal> = </literal>{ <literal
167
 
          >1</literal> | <literal>yes</literal> | <literal
168
 
          >true</literal> | <literal>on</literal> | <literal
169
 
          >0</literal> | <literal>no</literal> | <literal
170
 
          >false</literal> | <literal>off</literal> }</option></term>
171
 
        <listitem>
172
 
          <xi:include href="mandos-options.xml" xpointer="restore"/>
173
 
        </listitem>
174
 
      </varlistentry>
175
 
      
176
 
      <varlistentry>
177
 
        <term><option>statedir<literal> = </literal><replaceable
178
 
        >DIRECTORY</replaceable></option></term>
179
 
        <listitem>
180
 
          <xi:include href="mandos-options.xml" xpointer="statedir"/>
181
 
        </listitem>
182
 
      </varlistentry>
183
 
      
184
 
      <varlistentry>
185
 
        <term><option>socket<literal> = </literal><replaceable
186
 
        >NUMBER</replaceable></option></term>
187
 
        <listitem>
188
 
          <xi:include href="mandos-options.xml" xpointer="socket"/>
189
 
        </listitem>
190
 
      </varlistentry>
191
 
      
192
133
    </variablelist>
193
134
  </refsect1>
194
135
  
206
147
      built-in module <systemitem class="library">ConfigParser</systemitem>
207
148
      requires it.
208
149
    </para>
209
 
    <xi:include href="bugs.xml"/>
210
150
  </refsect1>
211
151
  
212
152
  <refsect1 id="example">
227
167
[DEFAULT]
228
168
# A configuration example
229
169
interface = eth0
230
 
address = fe80::aede:48ff:fe71:f6f2
 
170
address = 2001:db8:f983:bd0b:30de:ae4a:71f2:f672
231
171
port = 1025
232
 
debug = True
233
 
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP:!RSA
 
172
debug = true
 
173
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
234
174
servicename = Daena
235
 
use_dbus = False
236
 
use_ipv6 = True
237
 
restore = True
238
 
statedir = /var/lib/mandos
239
175
      </programlisting>
240
176
    </informalexample>
241
177
  </refsect1>
243
179
  <refsect1 id="see_also">
244
180
    <title>SEE ALSO</title>
245
181
    <para>
246
 
      <citerefentry><refentrytitle>intro</refentrytitle>
247
 
      <manvolnum>8mandos</manvolnum></citerefentry>,
248
182
      <citerefentry><refentrytitle>gnutls_priority_init</refentrytitle
249
183
      ><manvolnum>3</manvolnum></citerefentry>,
250
184
      <citerefentry><refentrytitle>mandos</refentrytitle>
278
212
              <para>
279
213
                The clients use IPv6 link-local addresses, which are
280
214
                immediately usable since a link-local addresses is
281
 
                automatically assigned to a network interface when it
 
215
                automatically assigned to a network interfaces when it
282
216
                is brought up.
283
217
              </para>
284
218
            </listitem>