/mandos/trunk : changes

» Changes from revision 717

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 178 to 159

expand all

Rev	Summary	Authors	Date
178	* initramfs-tools-script: Fix permissions of "/tmp" in initr... * initramfs-tools-script: Fix permissions of "/tmp" in initrd. * plugin-runner.c (parse_opt): Ignore empty argument strings.	Teddy Hogeborn	17 years ago
177	* Makefile (CONFDIR): Changed to be the same ("/etc/mandos")... * Makefile (CONFDIR): Changed to be the same ("/etc/mandos") in both a /usr/local install and a package install. (KEYDIR): Changed /usr/local install value to be "/etc/mandos/keys". (INITRAMFSTOOLS): Use $(DESTDIR) in /usr/local value too. * initramfs-tools-hook: Look in "/etc/mandos/keys" too.	Teddy Hogeborn	17 years ago
176	Merge & resolve. Merge & resolve.	Teddy Hogeborn	17 years ago
175	* Makefile: Clearly separate "local" install variable settin... * Makefile: Clearly separate "local" install variable settings from "package" variable settings. (INITRAMFSTOOLS): New variable. (install-server): Use $(DESTDIR) to install init script and /etc/default file. (install-client): Use $(INITRAMFSTOOLS). (uninstall-client): - '' - (purge-server): Use $(DESTDIR).	Teddy Hogeborn	17 years ago
174	* legalnotice.xml: Copy DocBook 4.4-formatted text from * legalnotice.xml: Copy DocBook 4.4-formatted text from <http://www.gnu.org/licenses/gpl-3.0.dbk>.	Teddy Hogeborn	17 years ago
173	* .bzrignore: Rename "password-request" to "mandos-client". * .bzrignore: Rename "password-request" to "mandos-client".	Teddy Hogeborn	17 years ago
172	* plugins.d/mandos-client.xml (NAME, OVERVIEW, EXIT STATUS):... * plugins.d/mandos-client.xml (NAME, OVERVIEW, EXIT STATUS): Improved wording.	Teddy Hogeborn	17 years ago
171	Renamed "password-request" to "mandos-client". Renamed "password-request" to "mandos-client". * Makefile: - '' - * mandos-keygen.xml: - '' - * mandos-options.xml: - '' - * mandos.xml: - '' - * plugin-runner.conf: - '' - * plugin-runner.xml: - '' - * plugins.d/password-prompt.xml: - '' - * plugins.d/password-request.c: Renamed to "mandos-client.c". * plugins.d/password-request.xml: Renamed to "mandos-client.xml".	Teddy Hogeborn	17 years ago
170	* Makefile (install-client): Add "/etc/plugins.d/README". * Makefile (install-client): Add "/etc/plugins.d/README". (uninstall-client): Remove "/etc/plugins.d/README". * etc-plugins.d-README: New file.	Teddy Hogeborn	17 years ago
169	* plugin-runner.c (main): Bug fix: use built-in default valu... * plugin-runner.c (main): Bug fix: use built-in default value if "--plugin-dir" was not used.	Teddy Hogeborn	17 years ago
168	* initramfs-tools-hook: Use long options where available. U... * initramfs-tools-hook: Use long options where available. Use only one "test" invocation instead of several. * mandos-keygen: Use only one "test" invocation instead of several. Use long options where available. Strip newline from entered password. * plugin-runner.c (print_out_password): Do not strip trailing newline. (fallback): Strip trailing newline from getpass(). * plugin-runner.xml (PLUGINS): Plugins should not print trailing newlines. * plugins.d/password-prompt.c (main): Strip trailing newline. * plugins.d/password-request.c (main): Bug fix: Read "pubkey.txt", not "pupkey.txt".	Teddy Hogeborn	17 years ago
167	* plugins.d/password-prompt.c (main): If successful, output ... * plugins.d/password-prompt.c (main): If successful, output an extra newline to the console before exiting, to change to a new line away from the prompt. * plugins.d/password-request.c (main): Bug fix: Moved calls to "init_gnutls_global()", "mkdtemp()", and "init_gpgme()" to after changing user & group.	Teddy Hogeborn	17 years ago
166	* Makefile (confdir/clients.conf): Tighten permissions to "u... * Makefile (confdir/clients.conf): Tighten permissions to "u=rw". (install-server): Set mode of "/etc/mandos/clients.conf" to "u=rw". (install-client): Set mode of "/etc/mandos/plugins.d" to "u=rwx". (uninstall-client): Also remove "/usr/lib/mandos/plugins.d/usplash", "/usr/share/initramfs-tools/scripts/local-top/mandos", and "/etc/keys/mandos". (purge-server): Also remove "/var/run/mandos.pid". * initramfs-tools-hook: Use "install" instead of "mkdir". Change owner of "/lib/mandos/plugins.d" and key files. Bug fix: do not repair permissions of "/lib/mandos/plugins.d". Bug fix: Really avoid deliberately unreadable files and/or directories. * mandos-keygen (umask): Changed to "077".	Teddy Hogeborn	17 years ago
165	* mandos (main): Use EAFP with pidfile. * mandos (main): Use EAFP with pidfile.	Teddy Hogeborn	17 years ago
164	* mandos: Open the PID file before daemonizing, but write to... * mandos: Open the PID file before daemonizing, but write to it afterwards. * plugin-runner.xml (SECURITY): Improved grammar. Also merge.	Teddy Hogeborn	17 years ago
163	* Makefile (PIDDIR, USER, GROUP): Removed. * Makefile (PIDDIR, USER, GROUP): Removed. (install-server): Do not create $(PIDDIR). (uninstall-server): Do not remove $(PIDDIR). * init.d-mandos (PIDFILE): Changed to "/var/run/$NAME.pid". * mandos (IPv6_TCPServer.enabled): New attribute. (IPv6_TCPServer.server_activate): Only call method of superclass if "self.enabled". (IPv6_TCPServer.enable): Set "self.enabled" to True. (main): Create client Set() early. Create IPv6_TCPServer object early. Switch to user and group "mandos", "nobody" or 65534, if possible. Enable IPv6_TCPServer after switching user. * mandos-keygen (KEYDIR): Changed to "/etc/keys/mandos". * mandos.xml (FILES): Changed PID file. (SECURITY): The server does need to be privileged, but switches to a non-privileged user. * plugin-runner.xml (EXAMPLE): Changed long example to something more realistic.	Teddy Hogeborn	17 years ago
162	* Makefile (PIDDIR, USER, GROUP): New variables. * Makefile (PIDDIR, USER, GROUP): New variables. (install-server): Create $(PIDDIR). Copy "init.d-mandos" and "default-mandos" into place. Install init script using "update-rc.d". (uninstall-server): Remove links to init script using "update-rc.d". (purge-server): Remove /etc/init.d/mandos and /etc/default/mandos. * default-mandos: New file. Will install as "/etc/default/mandos". * init.d-mandos: - '' - "/etc/init.d/mandos".	Teddy Hogeborn	17 years ago
161	* Makefile (purge-client): Also remove "plugin-runner.conf". * Makefile (purge-client): Also remove "plugin-runner.conf".	Teddy Hogeborn	17 years ago
160	* Makefile: Changed to use symbolic instead of octal modes t... * Makefile: Changed to use symbolic instead of octal modes throughout. (KEYDIR): New variable for the key directory. (install-server): Bug fix: remove "--parents" from install args. (install-client): Bug fix: - '' - Also create key directory. Do not chmod plugin dir. Create custom plugin directory if not the same as normal plugin directory. Add "--dir" option to "mandos-keygen". Add note about running "mandos-keygen --password". (uninstall-server): Do not depend on the installed server binary, since this made it impossible to do a purge after an uninstall. (purge-client): Shred seckey.txt. Use $(KEYDIR). * README: Improved wording. * initramfs-tools-hook: Use a loop to find prefix. Also find keydir. Remove "${DESTDIR}" from "copy_exec". Do not try to copy literal "" if no custom plugins are found. Copy key files from keydir, not config dir. Only repair mode on directories that actually exist. Do not run chmod if nothing needs repairing. plugin-runner.conf: New file.	Teddy Hogeborn	17 years ago
159	* Makefile (run-client): Do not depend on the key ring files... * Makefile (run-client): Do not depend on the key ring files. (keydir/secring.gpg, keydir/pubring.gpg): Removed. (confdir/mandos.conf): Install with proper mode. (confdir/clients.conf): - '' - * mandos-keygen: Use a temporary directory with key ring files instead of separate temporary key ring files. Removed "--no-random-seed" and "--no-permission-warning" from all gpg invocations.	Teddy Hogeborn	17 years ago