/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to intro.xml

  • Committer: Teddy Hogeborn
  • Date: 2015-07-01 20:01:26 UTC
  • mto: (237.7.307 trunk)
  • mto: This revision was merged to the branch mainline in revision 325.
  • Revision ID: teddy@recompile.se-20150701200126-qb3f6c3jcas2f4og
mandos-client: Try to start a plugin to add and remove a local route.

* debian/mandos-client.README.Debian: Add setting of environment
                                      variable MANDOSPLUGINHELPERDIR
                                      to command line testing
                                      mandos-client.
* mandos-client.c (raise_privileges): Moved to top of file.
                  (raise_privileges_permanently): - '' -
                  (lower_privileges): - '' -
                  (lower_privileges_permanently): - '' -
  (add_remove_local_route, add_local_route, remove_local_route): New.
  (start_mandos_communication): Set SOCK_CLOEXEC flag on socket.  Run
                                the above functions to add (and
                                remove) local route, if the conditions
                                indicates it could help.
  (run_network_hooks): Use O_DIRECTORY, O_PATH, and O_CLOEXEC flags
                       when opening network hook directory. Do
                       TEMP_FAILURE_RETRY around opening of /dev/null
                       and network hook executables.  Move redirecting
                       of stdout and stderr to as late as possible
                       before fexecve().
  (main): Use O_DIRECTORY and O_PATH when opening temporary directory.
* plugins.d/mandos-client.xml (ENVIRONMENT): Document usage of the
                                             MANDOSPLUGINHELPERDIR
                                             environment variable.

Show diffs side-by-side

added added

removed removed

Lines of Context:
intro.xml
1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
 
<!ENTITY TIMESTAMP "2018-02-08">
 
4
<!ENTITY TIMESTAMP "2014-06-22">
5
5
<!ENTITY % common SYSTEM "common.ent">
6
6
%common;
7
7
]>
32
32
    <copyright>
33
33
      <year>2011</year>
34
34
      <year>2012</year>
35
 
      <year>2013</year>
36
 
      <year>2014</year>
37
 
      <year>2015</year>
38
 
      <year>2016</year>
39
 
      <year>2017</year>
40
 
      <year>2018</year>
41
35
      <holder>Teddy Hogeborn</holder>
42
36
      <holder>Björn Påhlsson</holder>
43
37
    </copyright>
79
73
  <refsect1 id="introduction">
80
74
    <title>INTRODUCTION</title>
81
75
    <para>
82
 
      <!-- This paragraph is a combination and paraphrase of two
83
 
           quotes from the 1995 movie “The Usual Suspects”. -->
84
76
      You know how it is.  You’ve heard of it happening.  The Man
85
77
      comes and takes away your servers, your friends’ servers, the
86
78
      servers of everybody in the same hosting facility. The servers
205
197
      </para>
206
198
    </refsect2>
207
199
    
208
 
    <refsect2 id="sniff">
209
 
      <title>How about sniffing the network traffic and decrypting it
210
 
      later by physically grabbing the Mandos client and using its
211
 
      key?</title>
212
 
      <para>
213
 
        We only use <acronym>PFS</acronym> (Perfect Forward Security)
214
 
        key exchange algorithms in TLS, which protects against this.
215
 
      </para>
216
 
    </refsect2>
217
 
    
218
200
    <refsect2 id="physgrab">
219
201
      <title>Physically grabbing the Mandos server computer?</title>
220
202
      <para>
383
365
    </para>
384
366
  </refsect1>
385
367
  
386
 
  <refsect1 id="bugs">
387
 
    <title>BUGS</title>
388
 
    <xi:include href="bugs.xml"/>
389
 
  </refsect1>
390
 
  
391
368
  <refsect1 id="see_also">
392
369
    <title>SEE ALSO</title>
393
370
    <para>
421
398
    <variablelist>
422
399
      <varlistentry>
423
400
        <term>
424
 
          <ulink url="https://www.recompile.se/mandos">Mandos</ulink>
 
401
          <ulink url="http://www.recompile.se/mandos">Mandos</ulink>
425
402
        </term>
426
403
        <listitem>
427
404
          <para>