/mandos/trunk : changes

» Changes from revision 1316

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1212 to 1193

expand all

Rev	Summary	Authors	Date
1212	Merge from release branch Merge from release branch	Teddy Hogeborn	4 years ago
1211	Update Debian Policy version to 4.5.0; no other changes nece... Update Debian Policy version to 4.5.0; no other changes necessary. * debian/control (Standards-Version): Change to "4.5.0".	teddy at recompile	4 years ago
1210	dracut-module/password-agent.c: Skip flaky test on non-AMD64 dracut-module/password-agent.c: Skip flaky test on non-AMD64 It is difficult to find a suitable buffer size large enough to predictably make send() fail with EMSGSIZE on a PF_LOCAL socket, while still being small enough to reliably malloc() twice on any platform and in any environment. The existing size was experimentally determined on AMD64; skip the test for all other platforms. * dracut-module/password-agent.c (test_send_password_to_socket_EMSGSIZE): Skip this test on non-AMD64 platforms. Closes: 953799 Reported-by: Michael Biebl <biebl@debian.org>	teddy at recompile	4 years ago
1209	Check for fork() returning -1 Check for fork() returning -1 * dracut-module/password-agent.c (start_mandos_client): Check for fork() returning -1. (is_privileged): - '' -	teddy at recompile	4 years ago
1208	initramfs-tools-hook: Properly quote argument to test -n initramfs-tools-hook: Properly quote argument to test -n * initramfs-tools-hook: Quote output from subshell so that test -n always get exactly one argument, never more than one.	teddy at recompile	4 years ago
1207	Makefile: fix targets run-server & run-client with GnuTLS 3.... Makefile: fix targets run-server & run-client with GnuTLS 3.5.9 * Makefile (keydir/tls-privkey.pem keydir/tls-pubkey.pem): If the TLS session keys were not generated by mandos-keygen (which will happen with GnuTLS version 3.5.9 or older), create dummy empty unused files to avoid confusing make(1), which would otherwise re-run this target and create new OpenPGP key files which would not match the key fingerprint in the confdir/clients.conf file.	teddy at recompile	4 years ago
1206	Update formatting in TODO file Update formatting in TODO file * TODO: Add markup, links and a file-wide tag.	teddy at recompile	4 years ago
1205	Use reallocarray() if available, or check for overflow Use reallocarray() if available, or check for overflow * dracut-module/password-agent.c (add_to_queue): Check for overflow. (test_add_to_queue_overflow): New test. * plugin-runner.c (add_to_char_array, main): Use reallocarray(). * plugins.d/plymouth.c (exec_and_wait): - '' -	teddy at recompile	4 years ago
1204	mandos: If possible, use shlex.quote() instead of re.escape(... mandos: If possible, use shlex.quote() instead of re.escape() * mandos: Make sure shlex.quote() exists (falling back to assigning re.escape to it). (Client.start_checker): Use shlex.quote() instead of re.escape().	teddy at recompile	4 years ago
1203	Allow users to more easily alter mandos.service Allow users to more easily alter mandos.service The sysvinit script uses /etc/default/mandos as an environment file, and supports adding additional server options to a DAEMON_ARGS environment variable. This should be supported by the systemd service, too. * mandos.service ([Service]/EnvironmentFile): New; set to "/etc/default/mandos ". ([Service]/ExecStart): Append "$DAEMON_ARGS".	teddy at recompile	4 years ago
1202	Use collections.abc.Callable instead of collections.Callable Use collections.abc.Callable instead of collections.Callable In Python 3.7, collections.Callable (among others) was moved to collections.abc.Callable, and its old location deprecated. * mandos: Create "collections.abc.Callable" if it does not exist, and only use the new name.	Teddy Hogeborn	4 years ago
1201	Allow users to alter ask-password-mandos.service Allow users to alter ask-password-mandos.service If a user uses dracut with systemd and wishes to modify the options passed to password-agent(8mandos) or mandos-client(8mandos), they should be able to do so by simply creating a file /etc/systemd/system/ask-password-mandos.service.d/override.conf, containing, for instance: [Service] Environment=MANDOS_CLIENT_OPTIONS=--debug Adding PASSWORD_AGENT_OPTIONS should also be possible (but should not normally be needed). * dracut-module/ask-password-mandos.service ([Service]/ExecStart): Add $PASSWORD_AGENT_OPTIONS before "--" and "$MANDOS_CLIENT_OPTIONS" to end of line. * dracut-module/module-setup.sh (install): Install all files named /etc/systemd/system/ask-password-mandos.service.d/*.conf if any exists. Also add --dh-params before $MANDOS_CLIENT_OPTIONS instead of at end of line.	teddy at recompile	4 years ago
1200	Server: Stagger checker runs when creating clients Server: Stagger checker runs when creating clients To avoid checkers for all clients all running at the same time periodically, schedule every initially scheduled future checker to run at a time in the future a random amount of the interval, from the current time. * mandos (Client.init_checker): Schedule the first scheduled future run of a checker to be a randomly chosen amount of this client's "interval" (instead of a full interval).	teddy at recompile	4 years ago
1199	Minor code cleanup by renaming a local variable Minor code cleanup by renaming a local variable * dracut-module/password-agent.c (should_only_run_tests): Rename local variable "run_tests" to avoid confusion with global function run_tests().	Teddy Hogeborn	4 years ago
1198	DBUS-API: Order properties alphabetically DBUS-API: Order properties alphabetically In the documentation for the D-Bus API, list the client object properties in alphabetical order.	teddy at recompile	4 years ago
1197	mandos-ctl: Fix minor bug in tests mandos-ctl: Fix minor bug in tests Fix two tests, the last assert of which would always erroneously succeed. (No change in non-test code needed.) * mandos-ctl (Test_dbus_python_adapter_SystemBus): In the test_call_method_handles_exception() method, fix check for dbus.ConnectFailed exception. (Test_pydbus_adapter_SystemBus): - '' -	teddy at recompile	4 years ago
1196	mandos-ctl: Minor code clarification mandos-ctl: Minor code clarification * mandos-ctl (dbus.SystemBus.call_method): New virtual method, for clarity only.	teddy at recompile	4 years ago
1195	mandos-ctl: Add DBussy support mandos-ctl: Add DBussy support Add support in mandos-ctl for the "DBussy" Python D-Bus module. Use it by default, if it is available. * mandos-ctl: Try to import the "dbussy" and its high-level module "ravel". (main): Use DBussy if import succeeded. (dbussy_adapter): New. (Test_dbussy_adapter_SystemBus): New test class.	teddy at recompile	4 years ago
1194	From: Frans Spiesschaert <Frans.Spiesschaert@yucom.be> From: Frans Spiesschaert <Frans.Spiesschaert@yucom.be> Add Dutch debconf translation * debian/po/nl.po: New. Acked-by: Teddy Hogeborn <teddy@recompile.se>	teddy at recompile	5 years ago
1193	Remove non-project-specific pattern from .bzrignore Remove non-project-specific pattern from .bzrignore Only project-specific patterns should be in the .bzrignore file. Other generic patterns should be in the ~/.config/breezy/ignore and ~/.bazaar/ignore files. * .bzrignore (.tramp_history): Remove.	teddy at recompile	5 years ago