/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to plugins.d/mandos-client.xml

* debian/watch: New file.

* debian/mandos-client.README.Debian (Emergency Escape): New section;
                                                         document the
                                                         "mandos=off"
                                                         kernel
                                                         parameter.
* initramfs-tools-script: Exit if kernel has parameter "mandos=off".

Show diffs side-by-side

added added

removed removed

Lines of Context:
plugins.d/mandos-client.xml
1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
        "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
 
<!ENTITY VERSION "1.0">
5
4
<!ENTITY COMMANDNAME "mandos-client">
6
 
<!ENTITY TIMESTAMP "2008-09-06">
 
5
<!ENTITY TIMESTAMP "2009-01-04">
 
6
<!ENTITY % common SYSTEM "../common.ent">
 
7
%common;
7
8
]>
8
9
 
9
10
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
10
11
  <refentryinfo>
11
12
    <title>Mandos Manual</title>
12
 
    <!-- Nwalsh’s docbook scripts use this to generate the footer: -->
 
13
    <!-- NWalsh’s docbook scripts use this to generate the footer: -->
13
14
    <productname>Mandos</productname>
14
 
    <productnumber>&VERSION;</productnumber>
 
15
    <productnumber>&version;</productnumber>
15
16
    <date>&TIMESTAMP;</date>
16
17
    <authorgroup>
17
18
      <author>
31
32
    </authorgroup>
32
33
    <copyright>
33
34
      <year>2008</year>
 
35
      <year>2009</year>
34
36
      <holder>Teddy Hogeborn</holder>
35
37
      <holder>Björn Påhlsson</holder>
36
38
    </copyright>
37
39
    <xi:include href="../legalnotice.xml"/>
38
40
  </refentryinfo>
39
 
 
 
41
  
40
42
  <refmeta>
41
43
    <refentrytitle>&COMMANDNAME;</refentrytitle>
42
44
    <manvolnum>8mandos</manvolnum>
48
50
      Client for <application>Mandos</application>
49
51
    </refpurpose>
50
52
  </refnamediv>
51
 
 
 
53
  
52
54
  <refsynopsisdiv>
53
55
    <cmdsynopsis>
54
56
      <command>&COMMANDNAME;</command>
113
115
      </group>
114
116
    </cmdsynopsis>
115
117
  </refsynopsisdiv>
116
 
 
 
118
  
117
119
  <refsect1 id="description">
118
120
    <title>DESCRIPTION</title>
119
121
    <para>
215
217
          </para>
216
218
        </listitem>
217
219
      </varlistentry>
218
 
 
 
220
      
219
221
      <varlistentry>
220
222
        <term><option>--seckey=<replaceable
221
223
        >FILE</replaceable></option></term>
238
240
                      xpointer="priority"/>
239
241
        </listitem>
240
242
      </varlistentry>
241
 
 
 
243
      
242
244
      <varlistentry>
243
245
        <term><option>--dh-bits=<replaceable
244
246
        >BITS</replaceable></option></term>
284
286
          </para>
285
287
        </listitem>
286
288
      </varlistentry>
287
 
 
 
289
      
288
290
      <varlistentry>
289
291
        <term><option>--version</option></term>
290
292
        <term><option>-V</option></term>
296
298
      </varlistentry>
297
299
    </variablelist>
298
300
  </refsect1>
299
 
 
 
301
  
300
302
  <refsect1 id="overview">
301
303
    <title>OVERVIEW</title>
302
304
    <xi:include href="../overview.xml"/>
343
345
    </para>
344
346
  </refsect1>
345
347
  
346
 
  <refsect1 id="file">
 
348
  <refsect1 id="files">
347
349
    <title>FILES</title>
348
350
    <variablelist>
349
351
      <varlistentry>
368
370
<!--     <para> -->
369
371
<!--     </para> -->
370
372
<!--   </refsect1> -->
371
 
 
 
373
  
372
374
  <refsect1 id="example">
373
375
    <title>EXAMPLE</title>
374
376
    <para>
423
425
      </para>
424
426
    </informalexample>
425
427
  </refsect1>
426
 
 
 
428
  
427
429
  <refsect1 id="security">
428
430
    <title>SECURITY</title>
429
431
    <para>
449
451
      The only remaining weak point is that someone with physical
450
452
      access to the client hard drive might turn off the client
451
453
      computer, read the OpenPGP keys directly from the hard drive,
452
 
      and communicate with the server.  The defense against this is
453
 
      that the server is supposed to notice the client disappearing
454
 
      and will stop giving out the encrypted data.  Therefore, it is
455
 
      important to set the timeout and checker interval values tightly
456
 
      on the server.  See <citerefentry><refentrytitle
 
454
      and communicate with the server.  To safeguard against this, the
 
455
      server is supposed to notice the client disappearing and stop
 
456
      giving out the encrypted data.  Therefore, it is important to
 
457
      set the timeout and checker interval values tightly on the
 
458
      server.  See <citerefentry><refentrytitle
457
459
      >mandos</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
458
460
    </para>
459
461
    <para>
470
472
      confidential.
471
473
    </para>
472
474
  </refsect1>
473
 
 
 
475
  
474
476
  <refsect1 id="see_also">
475
477
    <title>SEE ALSO</title>
476
478
    <para>
601
603
      </varlistentry>
602
604
    </variablelist>
603
605
  </refsect1>
604
 
 
605
606
</refentry>
 
607
 
606
608
<!-- Local Variables: -->
607
609
<!-- time-stamp-start: "<!ENTITY TIMESTAMP [\"']" -->
608
610
<!-- time-stamp-end: "[\"']>" -->