bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
229
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.1". |
1 |
This NEWS file records noteworthy changes, very tersely. |
2 |
See the manual for detailed information. |
|
3 |
||
237.2.28
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.12". |
4 |
Version 1.0.12 (2009-09-17) |
5 |
* Client |
|
6 |
** Bug fix: Allow network interface renaming by "udev" by taking down |
|
7 |
the network interface after using it. |
|
8 |
** Bug fix: User-supplied plugins are now installed correctly. |
|
9 |
** Bug fix: If usplash was used but the password was instead provided |
|
10 |
by the Mandos server, the usplash daemon used to ignore the first |
|
11 |
command passed to it. This has been fixed. |
|
12 |
** Bug fix: Make the "--userid" and "--groupid" options in |
|
13 |
"plugin-runner.conf" work. |
|
14 |
* Server |
|
15 |
** Bug fix: Fix the LSB header in the init.d script to make dependency |
|
16 |
based booting work. |
|
17 |
** A client receiving its password now also counts as if a checker was |
|
18 |
run successfully (i.e. the timeout timer is reset). |
|
19 |
||
237.2.26
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.11". |
20 |
Version 1.0.11 (2009-05-23) |
21 |
* Client |
|
22 |
** Bug fix: Use "pkg-config" instead of old "libgnutls-config". |
|
23 |
||
237.2.23
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.10". |
24 |
Version 1.0.10 (2009-05-17) |
25 |
* Client |
|
26 |
** Security bug fix: Fix permissions on initrd.img-*.bak files when |
|
27 |
upgrading from older versions. |
|
28 |
||
237.2.20
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.9". |
29 |
Version 1.0.9 (2009-05-17) |
30 |
* Client |
|
31 |
** Security bug fix: Fix permissions on initrd.img file when |
|
32 |
installing new linux-image-* packages calling mkinitramfs-kpkg (all |
|
33 |
version lower than 2.6.28-1-* does this). |
|
34 |
||
237.2.18
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.8". |
35 |
Version 1.0.8 (2009-02-25) |
36 |
* Client |
|
37 |
** Bug fix: Fix missing quote characters in initramfs-tools-hook. |
|
38 |
||
237.2.16
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.7". |
39 |
Version 1.0.7 (2009-02-24) |
40 |
* Client |
|
41 |
** Bug fix: Do not depend on GNU awk. |
|
42 |
||
237.2.14
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.6". |
43 |
Version 1.0.6 (2009-02-13) |
44 |
* Server |
|
45 |
** Fix bug where server would stop responding, with a zombie checker |
|
46 |
** Support for disabling IPv6 (only for advanced users) |
|
47 |
** Fix bug which made server not change group ID |
|
48 |
||
49 |
* Client |
|
50 |
** Bug fix: Fix permission for /lib64 (on relevant architechtures). |
|
51 |
** Add support for IPv4 addresses. |
|
52 |
** Add support in mandos-client for not bringing up a network |
|
53 |
interface by specifying an empty string to "--interface". |
|
54 |
** Make password prompt on boot not be mangled by kernel log messages |
|
55 |
about network interface. |
|
56 |
** Get network interface from initramfs.conf and/or from kernel |
|
57 |
command line. |
|
58 |
** If set by "ip=" kernel command line, configure network on boot. |
|
59 |
** Support connecting directly using "mandos=connect" kernel command. |
|
60 |
line option, provided network is configured using "ip=". |
|
61 |
** Fix bug which made plugin-runner and mandos-client not change group |
|
62 |
ID. |
|
63 |
** Fix bug where the "--options-for" option of plugin-runner would |
|
64 |
truncate the value at the first colon character. |
|
65 |
** Fix bug where plugin-runner would not go to fallback if all plugins |
|
66 |
failed. |
|
67 |
** Fix bug where mandos-client would not clean temporary directory on |
|
68 |
a signal or on certain file systems. |
|
69 |
** Bug fix: remove bashism in /bin/sh script "mandos-keygen". |
|
70 |
||
237.2.11
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.5". |
71 |
Version 1.0.5 (2009-01-17) |
72 |
* Client |
|
73 |
** Fix small memory leak in plugin-runner. |
|
74 |
||
237.2.9
by Teddy Hogeborn
* debian/changelog (1.0.4-1): New entry. |
75 |
Version 1.0.4 (2009-01-15) |
76 |
* Server |
|
77 |
** Only find matched user/group pairs when searching for suitable |
|
78 |
nonprivileged user/group to switch to. |
|
79 |
||
80 |
* Client |
|
81 |
** New kernel parameter "mandos=off" makes client not run at boot. |
|
82 |
** Fix linking errors and compilation warnings on AMD64. |
|
83 |
** Parse numbers in command line options better. |
|
84 |
** The splashy and usplash plugins are more robust while traversing |
|
85 |
/proc, and will not abort if a process suddenly disappears. |
|
86 |
||
237.2.2
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.3". |
87 |
Version 1.0.3 (2009-01-06) |
88 |
* Server |
|
89 |
** Now tries to change to user and group "_mandos" before falling back |
|
90 |
to trying the old values "mandos", "nobody:nogroup", and "65534". |
|
91 |
** Now does not abort on startup even if no clients are defined in |
|
92 |
clients.conf. |
|
93 |
||
94 |
* Client |
|
95 |
** Plugins named "*.dpkg-bak" are now ignored. |
|
96 |
** Hopefully fixed compilation failure on some architectures where the |
|
97 |
C compiler does not recognize the "-z" option as a linker option. |
|
98 |
||
232
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.2". |
99 |
Version 1.0.2 (2008-10-17) |
100 |
* mandos-keygen now signs the encrypted key blobs. This signature is |
|
101 |
not currently verified by mandos-client, but this may change in the |
|
102 |
future. |
|
103 |
||
229
by Teddy Hogeborn
* Makefile (version): Changed to "1.0.1". |
104 |
Version 1.0.1 (2008-10-07) |
105 |
* Server |
|
106 |
** Expand environment variables and ~user in clients.conf's "secfile" |
|
107 |
The "secfile" option in /etc/mandos/clients.conf now expands
|
|
108 |
"~user/foo" and "$ENVVAR" strings.
|
|
109 |
||
110 |
* Client (plugin-runner, plugins, etc.)
|
|
111 |
** Manual pages for the usplash, splashy, and askpass-fifo plugins.
|
|
112 |
All plugins now have man pages.
|
|
113 |
** More secure compilation and linking flags.
|
|
114 |
All programs are now compiled with "-fstack-protector-all -fPIE
|
|
115 |
-pie", and linked using "-z relro -pie" for additional security.
|
|
116 |
||
117 |
* There is now a "NEWS" file (this one), giving a history of
|
|
118 |
noteworthy changes.
|