/mandos/trunk : changes

» Changes from revision 654

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 167 to 148

expand all

Rev	Summary	Authors	Date
167	* plugins.d/password-prompt.c (main): If successful, output ... * plugins.d/password-prompt.c (main): If successful, output an extra newline to the console before exiting, to change to a new line away from the prompt. * plugins.d/password-request.c (main): Bug fix: Moved calls to "init_gnutls_global()", "mkdtemp()", and "init_gpgme()" to after changing user & group.	Teddy Hogeborn	17 years ago
166	* Makefile (confdir/clients.conf): Tighten permissions to "u... * Makefile (confdir/clients.conf): Tighten permissions to "u=rw". (install-server): Set mode of "/etc/mandos/clients.conf" to "u=rw". (install-client): Set mode of "/etc/mandos/plugins.d" to "u=rwx". (uninstall-client): Also remove "/usr/lib/mandos/plugins.d/usplash", "/usr/share/initramfs-tools/scripts/local-top/mandos", and "/etc/keys/mandos". (purge-server): Also remove "/var/run/mandos.pid". * initramfs-tools-hook: Use "install" instead of "mkdir". Change owner of "/lib/mandos/plugins.d" and key files. Bug fix: do not repair permissions of "/lib/mandos/plugins.d". Bug fix: Really avoid deliberately unreadable files and/or directories. * mandos-keygen (umask): Changed to "077".	Teddy Hogeborn	17 years ago
165	* mandos (main): Use EAFP with pidfile. * mandos (main): Use EAFP with pidfile.	Teddy Hogeborn	17 years ago
164	* mandos: Open the PID file before daemonizing, but write to... * mandos: Open the PID file before daemonizing, but write to it afterwards. * plugin-runner.xml (SECURITY): Improved grammar. Also merge.	Teddy Hogeborn	17 years ago
163	* Makefile (PIDDIR, USER, GROUP): Removed. * Makefile (PIDDIR, USER, GROUP): Removed. (install-server): Do not create $(PIDDIR). (uninstall-server): Do not remove $(PIDDIR). * init.d-mandos (PIDFILE): Changed to "/var/run/$NAME.pid". * mandos (IPv6_TCPServer.enabled): New attribute. (IPv6_TCPServer.server_activate): Only call method of superclass if "self.enabled". (IPv6_TCPServer.enable): Set "self.enabled" to True. (main): Create client Set() early. Create IPv6_TCPServer object early. Switch to user and group "mandos", "nobody" or 65534, if possible. Enable IPv6_TCPServer after switching user. * mandos-keygen (KEYDIR): Changed to "/etc/keys/mandos". * mandos.xml (FILES): Changed PID file. (SECURITY): The server does need to be privileged, but switches to a non-privileged user. * plugin-runner.xml (EXAMPLE): Changed long example to something more realistic.	Teddy Hogeborn	17 years ago
162	* Makefile (PIDDIR, USER, GROUP): New variables. * Makefile (PIDDIR, USER, GROUP): New variables. (install-server): Create $(PIDDIR). Copy "init.d-mandos" and "default-mandos" into place. Install init script using "update-rc.d". (uninstall-server): Remove links to init script using "update-rc.d". (purge-server): Remove /etc/init.d/mandos and /etc/default/mandos. * default-mandos: New file. Will install as "/etc/default/mandos". * init.d-mandos: - '' - "/etc/init.d/mandos".	Teddy Hogeborn	17 years ago
161	* Makefile (purge-client): Also remove "plugin-runner.conf". * Makefile (purge-client): Also remove "plugin-runner.conf".	Teddy Hogeborn	17 years ago
160	* Makefile: Changed to use symbolic instead of octal modes t... * Makefile: Changed to use symbolic instead of octal modes throughout. (KEYDIR): New variable for the key directory. (install-server): Bug fix: remove "--parents" from install args. (install-client): Bug fix: - '' - Also create key directory. Do not chmod plugin dir. Create custom plugin directory if not the same as normal plugin directory. Add "--dir" option to "mandos-keygen". Add note about running "mandos-keygen --password". (uninstall-server): Do not depend on the installed server binary, since this made it impossible to do a purge after an uninstall. (purge-client): Shred seckey.txt. Use $(KEYDIR). * README: Improved wording. * initramfs-tools-hook: Use a loop to find prefix. Also find keydir. Remove "${DESTDIR}" from "copy_exec". Do not try to copy literal "" if no custom plugins are found. Copy key files from keydir, not config dir. Only repair mode on directories that actually exist. Do not run chmod if nothing needs repairing. plugin-runner.conf: New file.	Teddy Hogeborn	17 years ago
159	* Makefile (run-client): Do not depend on the key ring files... * Makefile (run-client): Do not depend on the key ring files. (keydir/secring.gpg, keydir/pubring.gpg): Removed. (confdir/mandos.conf): Install with proper mode. (confdir/clients.conf): - '' - * mandos-keygen: Use a temporary directory with key ring files instead of separate temporary key ring files. Removed "--no-random-seed" and "--no-permission-warning" from all gpg invocations.	Teddy Hogeborn	17 years ago
158	* plugins.d/password-request.xml (EXAMPLE): Improved wording... * plugins.d/password-request.xml (EXAMPLE): Improved wording.	Teddy Hogeborn	17 years ago
157	* plugin-runner.xml (BUGS): Document the non-recursiveness o... * plugin-runner.xml (BUGS): Document the non-recursiveness of the "--config-file" option.	Teddy Hogeborn	17 years ago
156	* mandos-clients.conf.xml (OPTIONS): Improved spelling. * mandos-clients.conf.xml (OPTIONS): Improved spelling. * mandos.conf.xml (BUGS): - '' - * mandos.xml (BUGS): - '' - * plugin-runner.xml (NAME): Fix spelling by changing wording. (OPTIONS): Improved spelling. (EXAMPLE): Do not use obsolete "--keydir" option. Improved wording. * plugins.d/password-prompt.xml (DESCRIPTION): Improved spelling. (EXAMPLE): Add <acronym> tag. (SECURITY): Improved spelling. * plugins.d/password-request.xml (SYNOPSIS): Changed replaceable to match OPTIONS section. (DESCRIPTION, OVERVIEW): Improved spelling.	Teddy Hogeborn	17 years ago
155	* README: Improved wording. * README: Improved wording. * initramfs-tools-hook: Do not copy auto-save files from "/etc/mandos/plugins.d". Do not create key ring files. Do not reset permissions on things like "$DESTDIR/lib/mandos/plugins.d", which should not be publicly accessible. * plugin-runner.xml (DESCRIPTION, PLUGINS): Improved grammar.	Teddy Hogeborn	17 years ago
154	* README: Improved spelling. * README: Improved spelling.	Teddy Hogeborn	17 years ago
153	* README: Improved wording. * README: Improved wording.	Teddy Hogeborn	17 years ago
152	* README: New file. * README: New file.	Teddy Hogeborn	17 years ago
151	* plugins.d/password-request.xml (SYNOPSYS): Removed "--keyd... * plugins.d/password-request.xml (SYNOPSYS): Removed "--keydir". (OPTIONS): Removed "--keydir" and changed text of "--pubkey" and "--seckey". (EXAMPLE): Altered not to use "--keydir" anymore.	Teddy Hogeborn	17 years ago
150	* mandos-clients.conf.xml (OPTIONS): Add info to all options... * mandos-clients.conf.xml (OPTIONS): Add info to all options about whether it is a required or optional.	Teddy Hogeborn	17 years ago
149	* mandos-keygen.xml (BUGS): Commented out. * mandos-keygen.xml (BUGS): Commented out. * mandos.xml (BUGS): Note non-checking of expire time of OpenPGP keys.	Teddy Hogeborn	17 years ago
148	* plugins.d/password-request.xml (OVERVIEW): Refer to * plugins.d/password-request.xml (OVERVIEW): Refer to password-prompt(8) by name. (SECURITY): Improved wording. Add paragraph about insecurity of ping. (SEE ALSO): Add references to cryptsetup(8) and crypttab(5). Changed to be a <variablelist> and added text.	Teddy Hogeborn	17 years ago