/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to intro.xml

  • Committer: Teddy Hogeborn
  • Date: 2016-03-07 23:39:36 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 337.
  • Revision ID: teddy@recompile.se-20160307233936-mhgpxhggamde443n
Server bug fix: Include CAP_SETGID so it does not run as root

* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
  1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
  root.
* mandos (main): Print debug info about setuid() and setgid()
* mandos.service ([Service]/CapabilityBoundingSet): Add "CAP_KILL
  CAP_SETGID"; the latter is needed for setgid() to be allowed.

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
 
<!ENTITY TIMESTAMP "2016-11-27">
 
4
<!ENTITY TIMESTAMP "2016-03-05">
5
5
<!ENTITY % common SYSTEM "common.ent">
6
6
%common;
7
7
]>
77
77
  <refsect1 id="introduction">
78
78
    <title>INTRODUCTION</title>
79
79
    <para>
80
 
      <!-- This paragraph is a combination and paraphrase of two
81
 
           quotes from the 1995 movie “The Usual Suspects”. -->
82
80
      You know how it is.  You’ve heard of it happening.  The Man
83
81
      comes and takes away your servers, your friends’ servers, the
84
82
      servers of everybody in the same hosting facility. The servers
419
417
    <variablelist>
420
418
      <varlistentry>
421
419
        <term>
422
 
          <ulink url="https://www.recompile.se/mandos">Mandos</ulink>
 
420
          <ulink url="http://www.recompile.se/mandos">Mandos</ulink>
423
421
        </term>
424
422
        <listitem>
425
423
          <para>