/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to INSTALL

  • Committer: Teddy Hogeborn
  • Date: 2019-07-14 22:39:15 UTC
  • mto: This revision was merged to the branch mainline in revision 384.
  • Revision ID: teddy@recompile.se-20190714223915-aqjkms3t3taa6tye
Only use sanitizing options when debugging

The C compiler's sanitizing options introduce code in the output
binary which is fragile and not very security conscious.  It has
become clear that sanitizing is only really meant for use while
debugging.

As a side effect, this makes compilation faster, as the Makefile, for
production builds, no longer runs the compiler repeatedly to find all
its currently supported sanitizing options.

* Makefile (DEBUG): Add "$(SANITIZE)".
  (SANITIZE): Comment out.
  (CFLAGS): Remove "$(SANITIZE)".
  (plugins.d/mandos-client): Revert back to use plain $(LINK.c), since
                             we no longer need to remove the leak
                             sanitizer by overriding CFLAGS.

Show diffs side-by-side

added added

removed removed

Lines of Context:
INSTALL
39
39
    
40
40
*** Mandos Server
41
41
    + GnuTLS 3.3          https://www.gnutls.org/
 
42
      (but not 3.6.0 or later, until 3.6.6, which works)
42
43
    + Avahi 0.6.16        http://www.avahi.org/
43
44
    + Python 2.7          https://www.python.org/
44
45
    + dbus-python 0.82.4 https://dbus.freedesktop.org/doc/dbus-python/
60
61
    + initramfs-tools 0.85i
61
62
                        https://tracker.debian.org/pkg/initramfs-tools
62
63
    + GnuTLS 3.3        https://www.gnutls.org/
 
64
      (but not 3.6.0 or later, until 3.6.6 which works)
63
65
    + Avahi 0.6.16      http://www.avahi.org/
64
66
    + GnuPG 1.4.9       https://www.gnupg.org/
65
67
    + GPGME 1.1.6       https://www.gnupg.org/related_software/gpgme/
69
71
    + OpenSSH           http://www.openssh.com/
70
72
    
71
73
    Package names:
72
 
    initramfs-tools libgnutls-dev libavahi-core-dev gnupg
 
74
    initramfs-tools libgnutls-dev gnutls-bin libavahi-core-dev gnupg
73
75
    libgpgme11-dev pkg-config ssh
74
76
 
75
77
* Installing the Mandos server
123
125
     
124
126
        # /usr/lib/mandos/plugins.d/mandos-client \
125
127
                --pubkey=/etc/keys/mandos/pubkey.txt \
126
 
                --seckey=/etc/keys/mandos/seckey.txt; echo
 
128
                --seckey=/etc/keys/mandos/seckey.txt \
 
129
                --tls-privkey=/etc/keys/mandos/tls-privkey.pem \
 
130
                --tls-pubkey=/etc/keys/mandos/tls-pubkey.pem; echo
127
131
     
128
132
     This command should retrieve the password from the server,
129
133
     decrypt it, and output it to standard output.