/mandos/trunk : changes

» Changes from revision 1305

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1120 to 1101

expand all

Rev	Summary	Authors	Date
1120	Document bug in mandos-keygen which strips white space from ... Document bug in mandos-keygen which strips white space from passwords Passwords, as read by mandos-keygen when given the --password or -p options, are stripped of white space from the start and from the end of the password. This is because mandos-keygen is a shell script, and the Bourne Shell "read" builtin does not seem to have a way to avoid this. Document this bug. * manods-keygen.xml (OPTIONS): Document the white space-stripping nature of the --password/-p option, and also note in the description of --passfile and -F that they avoid this behavior. (BUGS): Again mention the problem with the --password and -p options, and suggest --passfile as a possible workaround.	Teddy Hogeborn	5 years ago
1119	mandos-keygen: Allow dashes at start of --passfile file name... mandos-keygen: Allow dashes at start of --passfile file names Bug fix: Allow file names passed as the argument of the --passfile/-F options to start with a dash (i.e. "-", a.k.a. 0x2D, the Unicode HYPHEN-MINUS character). * mandos-keygen (mode=password): Change "cat" to "cat --".	Teddy Hogeborn	5 years ago
1118	Client: Document requirement of libnl-route library Client: Document requirement of libnl-route library * INSTALL (Prerequisites/Libraries/Mandos Client): Add "libnl-route". * Makefile (plugin-helpers/mandos-client-iprouteadddel): Write comment explaining that the explicit target exists to add the libnl-route library.	Teddy Hogeborn	5 years ago
1117	Add another sanitizer option Add another sanitizer option * Makefile (ALL_SANITIZE_OPTIONS): Add "-fsanitize-address-use-after-scope".	Teddy Hogeborn	5 years ago
1116	Debian package change: Add autopkgtest support Debian package change: Add autopkgtest support * Makefile (check): Run a few more superficial tests. (debian/control/[Source: mandos]/Testsuite): New; set to "autopkgtest". (debian/tests/control): New.	Teddy Hogeborn	5 years ago
1115	Server bug fix: Allow restarts when using port= option Server bug fix: Allow restarts when using port= option If the Mandos server is configured to use a specific TCP port to listen to (by using the port= option in mandos.conf or the command line --port option), that port becomes unusable for a time when the Mandos server is restarted, making restarts fail. Avoid this by, if a port number is specified, using SO_REUSEADDR when binding the listening TCP socket to a port number. * mandos (IPv6_TCPServer.server_bind): Set self.allow_reuse_address if a port number is specified. Reported-by: Juan Miguel Alcarria Herrera <juanmi@arco2000.es>	Teddy Hogeborn	5 years ago
1114	Stop linking to librt Stop linking to librt Since we are using the clock_* functions from <time.h>, we now require the GNU C library version 2.17 or later (released in 2012), where linking to librt is no longer required in order to use the clock_* functions from <time.h>. This enables us to remove an otherwise unnecessary link to librt. * INSTALL (Mandos Client): Document new GNU C library version requirement. * Makefile (plugins.d/mandos-client): Remove "-lrt".	Teddy Hogeborn	5 years ago
1113	Grammar and documentation fix Grammar and documentation fix No code change. * debian/mandos.templates (mandos/key_id): Change "client" to "clients" and correct "reported" to "created". * plugins.d/mandos-client.xml (ENVIRONMENT/MANDOSPLUGINHELPERDIR): Change "purposefully" to "purposely".	Teddy Hogeborn	5 years ago
1112	Makefile: Break long lines Makefile: Break long lines * Makefile (USER, GROUP, LDFLAGS): Break long lines.	Teddy Hogeborn	5 years ago
1111	Only use sanitizing options when debugging Only use sanitizing options when debugging The C compiler's sanitizing options introduce code in the output binary which is fragile and not very security conscious. It has become clear that sanitizing is only really meant for use while debugging. As a side effect, this makes compilation faster, as the Makefile, for production builds, no longer runs the compiler repeatedly to find all its currently supported sanitizing options. * Makefile (DEBUG): Add "$(SANITIZE)". (SANITIZE): Comment out. (CFLAGS): Remove "$(SANITIZE)". (plugins.d/mandos-client): Revert back to use plain $(LINK.c), since we no longer need to remove the leak sanitizer by overriding CFLAGS.	Teddy Hogeborn	5 years ago
1110	plugins.d/password-prompt.c: Clear EOF from stdin plugins.d/password-prompt.c: Clear EOF from stdin * plugins.d/password-prompt.c (main): Starting with GNU C library 2.28, EOF must be cleared from a FILE * before reading again.	Teddy Hogeborn	5 years ago
1109	plugin-runner.c: Use a statement attribute only for GCC 7 or... plugin-runner.c: Use a statement attribute only for GCC 7 or later. * plugin-runner.c (main/parse_opt): Use __attribute__((fallthrough)) only on GCC 7 or later; otherwise use the old comment syntax.	Teddy Hogeborn	5 years ago
1108	plugin-runner.c: Switch to attribute to mark switch fallthro... plugin-runner.c: Switch to attribute to mark switch fallthrough * plugin-runner.c (main/parse_opt): Change /* FALLTHROUGH */ comment to __attribute__((fallthrough)), as required by -Wimplicit-fallthrough=5.	Teddy Hogeborn	5 years ago
1107	mandos-ctl: Update Emacs lisp test runner code mandos-ctl: Update Emacs lisp test runner code * mandos-ctl: Update Emacs lisp after-save-hook test runner to use file-local-name if available (i.e. Emacs 26), or to use file-remote-p if not (Emacs 25). Either should be more general than the tramp-* functions were. Also use process-file-shell-command instead of shell-command, which enables the use of the less intrusive display-buffer-in-side-window action function argument to display-buffer. This stops the takeover of buffers (and/or disappearance of windows) when saving.	Teddy Hogeborn	5 years ago
1106	Doc fix: Use new style interface names instead of "eth0" Doc fix: Use new style interface names instead of "eth0" * debian/mandos-client.README.Debian: Also use "enp1s0" as an example interface name. * mandos.conf.xml (EXAMPLE): Change "interface" to "enp1s0", and update priority string to new default.	Teddy Hogeborn	5 years ago
1105	.bzrignore: Add mandos-client-iprouteadddel and .tramp_histo... .bzrignore: Add mandos-client-iprouteadddel and .tramp_history * .bzrignore (plugin-helpers/mandos-client-iprouteadddel): Add. (.tramp_history): - '' -	Teddy Hogeborn	5 years ago
1104	mandos-ctl: Add tests for all examples in the manual page mandos-ctl: Add tests for all examples in the manual page * mandos-ctl (Test_commands_from_options.assert_command_from_args): Add "length" and "clients" arguments; use them. (Test_commands_from_options.assert_commands_from_args): New. (Test_commands_from_options.test_manual_page_example_1): - '' - (Test_commands_from_options.test_manual_page_example_2): - '' - (Test_commands_from_options.test_manual_page_example_3): - '' - (Test_commands_from_options.test_manual_page_example_4): - '' - (Test_commands_from_options.test_manual_page_example_5): - '' -	Teddy Hogeborn	5 years ago
1103	Improve language in intro(8mandos) manual page Improve language in intro(8mandos) manual page * intro.xml (INTRODUCTION): Replace "it" with "the data" to fix bad reference, and clarify that it is the client which continues booting.	Teddy Hogeborn	5 years ago
1102	Improve language in intro(8mandos) manual page Improve language in intro(8mandos) manual page * intro.xml (INTRODUCTION): Replace "it" with "the password" to improve clarity, and fix "root file" to "root file system".	Teddy Hogeborn	5 years ago
1101	Debian package: Fix backports package dependency adjuster Debian package: Fix backports package dependency adjuster * debian/rules (override_dh_shlibdeps-arch): Add "--in-place" to "sed" options.	Teddy Hogeborn	5 years ago