/mandos/trunk : changes

» Changes from revision 1190

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1134 to 1115

expand all

Rev	Summary	Authors	Date
1134	Merge from release branch Merge from release branch	Teddy Hogeborn	6 years ago
1133	Update Debian package standard-version to "4.4.0" Update Debian package standard-version to "4.4.0" * debian/control (Standards-Version): Update to "4.4.0".	Teddy Hogeborn	6 years ago
1132	Server: Reap zombies created by multiprocessing.Process() Server: Reap zombies created by multiprocessing.Process() When creating checkers as multiprocessing.Process() objects, the multiprocessing module also creates a parent process (for the call_pipe() function) to call the actual checker process, but this parent process is not reaped. This is not a huge problem, since the zombie is always reaped automatically the next time the multiprocess starts a new process, but the zombies can be up to as many as there have ever been simultaneous checker processes. To fix this, the process object must be join():ed when they report completion of the child checker process. * mandos (Client): Fix doc string to correctly state that Client.checker is a multiprocess.Process() and not a subprocess.Popen() object. (Client.checker_callback): After the returncode of the checker process has been read, wait for the self.checker Process object to finish by calling join() on it. Reported-by: Peter Palfrader <weasel@debian.org>	Teddy Hogeborn	6 years ago
1131	Make tests and man page examples match Make tests and man page examples match Make the tests test_manual_page_example[1-5] match exactly what is written in the manual page, and add comments to manual page as reminders to keep tests and manual page examples in sync. * mandos-ctl (Test_commands_from_options.test_manual_page_example_1): Remove "--verbose" option, since the manual does not have it as the first example, and change assertion to match. * mandos-ctl.xml (EXAMPLE): Add comments to all examples documenting which test function they correspond to. Also remove unnecessary quotes from option arguments in fourth example, and clarify language slightly in fifth example.	Teddy Hogeborn	6 years ago
1130	Update Python 3 compatibility Update Python 3 compatibility * mandos (gnutls.ClientSession.__init__): Use byte string argument to check_version() instead of a unicode string. (gnutls): - '' - (ClientHandler.handle): Change default values for "fpr" and "key_id" to be byte strings instead of unicode strings. (main): Use "key in dict" instead of "dict.has_key(key)". * mandos-ctl: Fix Emacs test runner to use "--check" instead of "--test". (rfc3339_duration_to_delta): Change doctest string to not depend on exact repr() string representation of values and instead do value comparisons. (parse_pre_1_6_1_interval): - '' -	Teddy Hogeborn	6 years ago
1129	Debian package: Override the last lintian warning Debian package: Override the last lintian warning * debian/source/lintian-overrides: New.	Teddy Hogeborn	6 years ago
1128	Add debconf translation support Add debconf translation support * debian/mandos-client.templates: Reformatted by debconf-gettextize(1). * debian/mandos.templates: - '' - * debian/po/POTFILES.in: New. * debian/po/templates.pot: - '' -	Teddy Hogeborn	6 years ago
1127	Add dracut(8) support Add dracut(8) support Add support for the dracut(8) system for generating initramfs image files; dracut is an alternative to the "initramfs-tools" package. * .bzrignore (dracut-module/password-agent): Ignore new binary file. * dracut-module: New directory for the dracut module. * INSTALL (Prerequisites/Libraries/Mandos Client): Add dracut as an alternative to initramfs-tools, and also add GLib. * Makefile (DRACUTMODULE, GLIB_CFLAGS, GLIB_LIBS): New. (CPROGS): Add "dracut-module/password-agent". (DOCS): Add "dracut-module/password-agent.8mandos". (dracut-module/password-agent.8mandos): New. (dracut-module/password-agent.8mandos.xhtml): - '' - (dracut-module/password-agent): - '' - (check): Add command to run tests of password-agent(8mandos). (install-client-nokey): Also install the dracut module directory, its files, and the password-agent(8mandos) manual page. (install-client): To update the initramfs image file, run update-initramfs or dracut depending on what is installed. (uninstall-client): - '' - and also uninstall the the files in the dracut module directory, that directory itself, and the password-agent(8mandos) manual page. * debian/control (Build-Depends): Add "libglib2.0-dev (>=2.40)". (Package: mandos-client/Depends): Add "dracut (>= 044+241-3)" as an alternative dependency to initramfs-tools. (Package: mandos-client/Conflicts): New; set to "dracut-config-generic". (debian/mandos-client.README.Debian): Document alternative commands to update the initramfs image for when dracut is used. * debian/mandos-client.postinst (update_initramfs): Use alternative commands to update the initramfs image for when dracut is used. * debian/tests/control (password-agent, password-agent-suid): Add two new tests. * dracut-module/ask-password-mandos.path: New. * dracut-module/ask-password-mandos.service: - '' - * dracut-module/cmdline-mandos.sh: - '' - * dracut-module/module-setup.sh: - '' - * dracut-module/password-agent.c: - '' - * dracut-module/password-agent.xml: - '' - * initramfs-unpack: Use the dracut "skipcpio" command, if available. Also be more flexible and try hard to detect where compressed data starts. * plugins.d/mandos-client.xml (SECURITY): Be more precise that the mandos-client binary might not always be setuid, but that the program assumes that it has been started that way. * plugins.d/password-prompt.c: Add new "--prompt" option. (conflict_detection): First try to detect the new PID file of plymouth. (main): Define and use new "prompt" variable. * plugins.d/password-prompt.xml (SYNOPSIS): Show new --prompt option. (DESCRIPTION): Describe new behavior of looking for plymouth PID file. (OPTIONS): Document new "--prompt" option. (ENVIRONMENT): Clarify that the CRYPTTAB_SOURCE and CRYPTTAB_NAME environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the CRYPTTAB_SOURCE and CRYPTTAB_NAME comes from, since this can now be either initramfs-tools or dracut. (SEE ALSO): Remove superfluous crypttab(5) reference, and add commas to separate the other references. * plugins.d/plymouth.c: Add new "--prompt" and "--debug" options. (debug): New global flag. (fprintf_plus): New function, used for debug output. (exec_and_wait): Add extra "const" to "argv" argument. (main): Define and use new "prompt" variable. Add debug output. (main/options, main/parse_opt): New; used to parse options. * plugins.d/plymouth.xml (SYNOPSIS): Show new options. (OPTIONS): Document new options. (ENVIRONMENT): Clarify that the cryptsource and crypttarget environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the cryptsource and crypttarget comes from, since this can now be either initramfs-tools or dracut. (EXAMPLE): Add an example using an option. (SEE ALSO): Remove superfluous crypttab(5) reference. * plugins.d/splashy.xml (ENVIRONMENT): Clarify that the cryptsource and crypttarget environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the cryptsource and crypttarget comes from, since this can now be either initramfs-tools or dracut. (SEE ALSO): Remove superfluous crypttab(5) reference. * plugins.d/usplash.xml (ENVIRONMENT): Clarify that the cryptsource and crypttarget environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the cryptsource and crypttarget comes from, since this can now be either initramfs-tools or dracut. (SEE ALSO): Remove superfluous crypttab(5) reference.	Teddy Hogeborn	6 years ago
1126	Remove unused lintian override for Debian package Remove unused lintian override for Debian package * debian/mandos.lintian-overrides (init.d-script-needs-depends-on-lsb-base): Remove.	Teddy Hogeborn	6 years ago
1125	Remove unnecessary "Testsuite: autopkgtest" from debian/cont... Remove unnecessary "Testsuite: autopkgtest" from debian/control * debian/control (Testsuite): Remove.	Teddy Hogeborn	6 years ago
1124	Allow line breaks on long lines in plugin-runner manual Allow line breaks on long lines in plugin-runner manual * debian/mandos-client.lintian-overrides (manpage-has-errors-from-man): Remove. * plugin-runner.xml (EXAMPLE): Allow line breaks by adding ZERO WIDTH SPACE characters. Also correct description of example command line.	Teddy Hogeborn	6 years ago
1123	Use hexadecimal unicode character references, not decimal Use hexadecimal unicode character references, not decimal * mandos-options.xml (priority): Use "" instead of "" to make it slightly more clear that ZERO WIDTH SPACE is intended.	Teddy Hogeborn	6 years ago
1122	Fix bashisms: Use "command -v" instead of "type" Fix bashisms: Use "command -v" instead of "type" * Makefile (DOCBOOKTOMAN): Change "type" to "command -v". * mandos-to-cryptroot-unlock: - '' -	Teddy Hogeborn	6 years ago
1121	Change URL for Avahi to use HTTPS Change URL for Avahi to use HTTPS * INSTALL (Prerequisites/Libraries): Change URL for Avahi to "https://www.avahi.org/". * mandos.xml (SEE ALSO): - '' - * plugins.d/mandos-client.xml (SEE ALSO): - '' -	Teddy Hogeborn	6 years ago
1120	Document bug in mandos-keygen which strips white space from ... Document bug in mandos-keygen which strips white space from passwords Passwords, as read by mandos-keygen when given the --password or -p options, are stripped of white space from the start and from the end of the password. This is because mandos-keygen is a shell script, and the Bourne Shell "read" builtin does not seem to have a way to avoid this. Document this bug. * manods-keygen.xml (OPTIONS): Document the white space-stripping nature of the --password/-p option, and also note in the description of --passfile and -F that they avoid this behavior. (BUGS): Again mention the problem with the --password and -p options, and suggest --passfile as a possible workaround.	Teddy Hogeborn	6 years ago
1119	mandos-keygen: Allow dashes at start of --passfile file name... mandos-keygen: Allow dashes at start of --passfile file names Bug fix: Allow file names passed as the argument of the --passfile/-F options to start with a dash (i.e. "-", a.k.a. 0x2D, the Unicode HYPHEN-MINUS character). * mandos-keygen (mode=password): Change "cat" to "cat --".	Teddy Hogeborn	6 years ago
1118	Client: Document requirement of libnl-route library Client: Document requirement of libnl-route library * INSTALL (Prerequisites/Libraries/Mandos Client): Add "libnl-route". * Makefile (plugin-helpers/mandos-client-iprouteadddel): Write comment explaining that the explicit target exists to add the libnl-route library.	Teddy Hogeborn	6 years ago
1117	Add another sanitizer option Add another sanitizer option * Makefile (ALL_SANITIZE_OPTIONS): Add "-fsanitize-address-use-after-scope".	Teddy Hogeborn	6 years ago
1116	Debian package change: Add autopkgtest support Debian package change: Add autopkgtest support * Makefile (check): Run a few more superficial tests. (debian/control/[Source: mandos]/Testsuite): New; set to "autopkgtest". (debian/tests/control): New.	Teddy Hogeborn	6 years ago
1115	Server bug fix: Allow restarts when using port= option Server bug fix: Allow restarts when using port= option If the Mandos server is configured to use a specific TCP port to listen to (by using the port= option in mandos.conf or the command line --port option), that port becomes unusable for a time when the Mandos server is restarted, making restarts fail. Avoid this by, if a port number is specified, using SO_REUSEADDR when binding the listening TCP socket to a port number. * mandos (IPv6_TCPServer.server_bind): Set self.allow_reuse_address if a port number is specified. Reported-by: Juan Miguel Alcarria Herrera <juanmi@arco2000.es>	Teddy Hogeborn	6 years ago