/mandos/trunk : changes

» Changes from revision 1275

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1156 to 1137

expand all

Rev	Summary	Authors	Date
1156	From: Grégoire Scano <gregoire.scano@malloc.fr> From: Grégoire Scano <gregoire.scano@malloc.fr> Add French debconf translation * debian/po/fr.po: New. Acked-by: Teddy Hogeborn <teddy@recompile.se>	Teddy Hogeborn	5 years ago
1155	From: Chris Leick <c.leick@vollbio.de> From: Chris Leick <c.leick@vollbio.de> Add German debconf translation * debian/po/de.po: New. Acked-by: Teddy Hogeborn <teddy@recompile.se>	Teddy Hogeborn	5 years ago
1154	Simplification of Python 3 compatibility code Simplification of Python 3 compatibility code Normally, "class Foo:" in Python 2 creates a "classic" class, but in Python 3, all classes are "new-style" classes, which you can get in Python 2 by doing "class Foo(object):", i.e. inheriting from "object". But, you can also get a new-style classes from "class Foo:" in Python 2 by setting the global "__metaclass__" variable to "type", which makes the code less cluttered. Note: it is still necessary to inherit from "object" in Python 2 to get a new-style class if the class is otherwise inheriting only from "classic" classes. * mandos: Set "__metaclass__ = type" globally for Python 2, and remove inheriting from "object" in all places possible. * mandos-ctl: - '' -	Teddy Hogeborn	5 years ago
1153	Merge from release branch Merge from release branch	Teddy Hogeborn	5 years ago
1152	Override lintian warnings about upgrading from old versions Override lintian warnings about upgrading from old versions There are some really things which are imperative that we fix in case someone were to upgrade from a really old version. We want to keep these fixes in the postinst maintainer scripts, even though lintian complains about such old upgrades not being supported by Debian in general. We prefer the code being there, for the sake of the users. * debian/mandos-client.lintian-overrides (maintainer-script-supports-ancient-package-version): New. debian/mandos.lintian-overrides (maintainer-script-supports-ancient-package-version): - '' -	Teddy Hogeborn	5 years ago
1151	Override lintian warning about old debhelper format Override lintian warning about old debhelper format * debian/source/lintian-overrides (package-uses-old-debhelper-compat-version): New; set to "10".	Teddy Hogeborn	5 years ago
1150	Create a debconf translation file Create a debconf translation file * debian/mandos-client.templates (mandos-client/key_id): Line which should not be wrapped should be prefixed by a space. * debian/mandos.templates (mandos/key_id): - '' - * debian/po/en_US.po: New "translation" from ASCII to UTF-8. * debian/po/templates.pot: Updated.	Teddy Hogeborn	5 years ago
1149	Client: Debian package fix: Make uninstall when using dracut... Client: Debian package fix: Make uninstall when using dracut(8) work Use the same logic to rebuild the initramfs image when uninstalling as when installing the package. * debian/mandos-client.postrm (update_initramfs): Use the same logic as the update_initramfs function in debian/mandos-client.postinst.	Teddy Hogeborn	5 years ago
1148	Describe role of password-agent(8mandos) in intro(8mandos) Describe role of password-agent(8mandos) in intro(8mandos) Describe the role of password-agent(8mandos) in the intro(8mandos) manual. * intro.xml (SYSTEMD): New section. (SEE ALSO): Add reference to password-agent(8mandos).	Teddy Hogeborn	5 years ago
1147	Add Debian DEP 12 upstream metadata file Add Debian DEP 12 upstream metadata file See DEP 12: https://dep-team.pages.debian.net/deps/dep12/ * debian/upstream/metadata: New.	Teddy Hogeborn	5 years ago
1146	Client: Always build with LFS enabled Client: Always build with LFS enabled * Makefile (FEATURES): New; set to "-D_FILE_OFFSET_BITS=64". (CFLAGS): Add "$(FEATURES)".	Teddy Hogeborn	5 years ago
1145	Merge from release branch Merge from release branch	Teddy Hogeborn	5 years ago
1144	dracut-module/password-agent.c: Update #include comments dracut-module/password-agent.c: Update #include comments * dracut-module/password-agent.c: Update #include comments to add "ENOTDIR", "O_NOFOLLOW", "IN_MOVED_FROM", "IN_EXCL_UNLINK", and "IN_ONLYDIR".	Teddy Hogeborn	5 years ago
1143	dracut-module/password-agent.c: Use O_NOCTTY dracut-module/password-agent.c: Use O_NOCTTY Whenever a file is opened using open(), use the O_NOCTTY flag, just to be safe. * dracut-module/password-agent.c (test_start_mandos_client_execv): Use O_NOCTTY. (test_wait_for_mandos_client_exit_failure): - '' - (test_wait_for_mandos_client_exit_killed): - '' - (test_read_mandos_client_output_readerror): - '' - (test_read_inotify_event_readerror): - '' - (test_connect_question_socket_bad_epoll): - '' - (test_send_password_to_socket_bad_epoll): - '' - (assert_add_existing_questions_to_devnull): - '' -	Teddy Hogeborn	5 years ago
1142	dracut-module/password-agent.c: Require agent directory dracut-module/password-agent.c: Require agent directory Require the --agent-directory (by default "/run/systemd/ask-password") to be an actual directory; fail otherwise. * dracut-module/password-agent.c (main): Make ENOTDIR from add_inotify_dir_watch() result in EX_OSFILE. (add_inotify_dir_watch): Add "IN_ONLYDIR" flag to inotify_add_watch(). (test_add_inotify_dir_watch_nondir): New test. (run_tests): Add new test.	Teddy Hogeborn	5 years ago
1141	dracut-module/password-agent.c: Bug fix: Ignore deleted file... dracut-module/password-agent.c: Bug fix: Ignore deleted files If a question file ("ask.") is opened, deleted, and then closed, we still get an IN_CLOSE_WRITE ievent after the IN_DELETE ievent. We should pass the IN_EXCL_UNLINK flag to inotify_add_watch() to avoid this. dracut-module/password-agent.c (add_inotify_dir_watch): Add "IN_EXCL_UNLINK" flag to inotify_add_watch(). (test_add_inotify_dir_watch_IN_EXCL_UNLINK): New test. (run_tests): Add new test.	Teddy Hogeborn	5 years ago
1140	dracut-module/password-agent.c: Bug fix: Handle IN_MOVED_FRO... dracut-module/password-agent.c: Bug fix: Handle IN_MOVED_FROM If a question file ("ask.") is moved away from the question directory or is renamed in it, treat this the same as IN_DELETE. If it was a simple rename within the question directory from, say, "ask.foo" to "ask.bar", the separate IN_MOVED_TO ievent will get the "ask.bar" name and add it, so we don't need to consider this as a special case. dracut-module/password-agent.c (add_inotify_dir_watch): Add "IN_MOVED_FROM" to flags. (read_inotify_event): Treat IN_MOVED_FROM the same as IN_DELETE. (test_add_inotify_dir_watch_IN_MOVED_FROM): New test. (test_read_inotify_event_IN_MOVED_FROM): - '' - (test_read_inotify_event_IN_MOVED_FROM_badname): - '' - (run_tests): Add new tests.	Teddy Hogeborn	5 years ago
1139	Update Python 3 compatibility Update Python 3 compatibility When running the server on Python 3, get rid of a few deprecation warnings. * mandos (main): Use only "configparser.Configparser", and only fall back to configparser.SafeConfigParser on Python versions lower than 3.2. Also, only call GLib.threads_init() when using a PyGObject version lower than 3.10.2.	Teddy Hogeborn	5 years ago
1138	Fix bug in server Debian package: Fails to start on first in... Fix bug in server Debian package: Fails to start on first install There has been a very long-standing bug where installation of the server (the "mandos" Debian package) would fail to start the server properly right after installation. It would work on manual (re)start after installation, or after reboot, and even after package purge and reinstall, it would then work the first time. The problem, it turns out, is when the new "_mandos" user (and corresponding group) is created, the D-Bus server is not reloaded, and is therefore not aware of that user, and does not recognize the user and group name in the /etc/dbus-1/system.d/mandos.conf file. The Mandos server, when it tries to start and access the D-Bus, is then not permitted to connect to its D-Bus bus name, and disables D-Bus use as a fallback measure; i.e. the server works, but it is not controllable via D-Bus commands (via mandos-ctl or mandos-monitor). The next time the D-Bus daemon is reloaded for any reason, the new user & group would become visible to the D-Bus daemon and after that, any restart of the Mandos server would succeed and it would bind to its D-Bus name properly, and thereby be visible and controllable by mandos-ctl & mandos-monitor. This was mostly invisible when using sysvinit, but systemd makes the problem visible since the systemd service file for the Mandos server is configured to not consider the Mandos server "started" until the D-Bus name has been bound; this makes the starting of the service wait for 90 seconds and then fail with a timeout error. Fixing this should also make the Debian CI autopkgtest tests work. * debian/mandos.postinst (configure): After creating (or renaming) user & group, reload D-Bus daemon (if present).	Teddy Hogeborn	5 years ago
1137	Makefile: "pkg-config" is now overrideable by PKG_CONFIG Makefile: "pkg-config" is now overrideable by PKG_CONFIG * Makefile (PKG_CONFIG): New. (SYSTEMD, TMPFILES): Use $(PKG_CONFIG) instead of "pkg-config". (GNUTLS_CFLAGS, GNUTLS_LIBS, AVAHI_CFLAGS, AVAHI_LIBS): - '' - (LIBNL3_CFLAGS, LIBNL3_LIBS, GLIB_CFLAGS, GLIB_LIBS): - '' - Closes: 933701 Reported-by: Helmut Grohne <helmut@subdivi.de> Suggested-by: Helmut Grohne <helmut@subdivi.de> Thanks: Helmut Grohne <helmut@subdivi.de> for bug report and patch	Teddy Hogeborn	5 years ago