/mandos/trunk : changes

» Changes from revision 1316

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 304 to 285

expand all

Rev	Summary	Authors	Date
304	Four new interrelated features: Four new interrelated features: 1. Support using a different network interface via both initramfs.conf (the DEVICE setting) and the kernel command line (sixth field of the "ip=" option as in Linux' Documentation/nfsroot.txt). 2. Support connecting to a specified Mandos server directly using a kernel command line option ("mandos=connect:<ADDRESS>:<PORT>"). 3. Support connecting directly to an IPv4 address (and port) using the "--connect" option of mandos-client. 4. Support an empty string to the --interface option to mandos-client. * Makefile (WARN): Increase strictness by changing to "-Wstrict-aliasing=1". * debian/mandos-client.README.Debian (Use the Correct Network Interface): Changed to refer to initramfs.conf and nfsroot.txt. (Test the Server): Improve wording. (Non-local Connection): New section. * initramfs-tools-script: Obey DEVICE environment variable and setting from "/conf/initramfs.conf". Also let any "ip=" kernel command line option override it. Support new "mandos=connect" option. Call "configure_networking" to set up IP address on interface if necessary. * plugin-runner.conf: Change example. * plugins.d/mandos-client.c: Some whitespace and comment changes. (start_mandos_communication): Take an additional argument for address family, all callers changed. Connect to an IPv4 address if address family is AF_INET. Only set IPv6 scope_id for link-local addresses. (main): Accept empty interface name; this will not bring up any interface and leave the interface as unspecified. Also do not restore kernel log level if lowering it failed. * plugins.d/mandos-client.xml (OPTIONS): Document that the "--interface" option accepts an empty string. (EXAMPLE): Change example IPv6 address to a link-local address.	Teddy Hogeborn	16 years ago
303	* initramfs-tools-hook: Add extra newline to plugin-runner.c... * initramfs-tools-hook: Add extra newline to plugin-runner.conf to guard against a possible comment character without a newline.	Teddy Hogeborn	16 years ago
302	* Makefile (install-client-nokey): Move "initramfs-tools-scr... * Makefile (install-client-nokey): Move "initramfs-tools-script" from "/scripts/local-top/mandos" to "/scripts/init-premount/mandos". (uninstall-client): - '' - * debian/mandos-client.dirs: - '' - * initramfs-tools-script (PREREQ): Added "udev".	Teddy Hogeborn	16 years ago
301	* plugin-runner.c (main): If debugging, print name of failed... * plugin-runner.c (main): If debugging, print name of failed plugins.	Teddy Hogeborn	16 years ago
300	* initramfs-tools-hook: Also fix /lib<qual> and /usr/lib<qua... * initramfs-tools-hook: Also fix /lib<qual> and /usr/lib<qual> directories.	Teddy Hogeborn	16 years ago
299	* plugin-runner.c (main): Bug fix: Do setgid before setuid. * plugin-runner.c (main): Bug fix: Do setgid before setuid.	Teddy Hogeborn	16 years ago
298	* plugin-runner.c (handle_sigchld): Bug fix: Save and restor... * plugin-runner.c (handle_sigchld): Bug fix: Save and restore "errno".	Teddy Hogeborn	16 years ago
297	* plugin-runner.c (struct plugin.status): Changed type to "i... * plugin-runner.c (struct plugin.status): Changed type to "int". (main): Check "proc->completed" before "proc->eof", since "completed" is of type "sig_atomic_t".	Teddy Hogeborn	16 years ago
296	* plugin-runner.c (struct plugin.completed): Changed type to... * plugin-runner.c (struct plugin.completed): Changed type to "volatile sig_atomic_t"; all uses changed.	Teddy Hogeborn	16 years ago
295	* plugin-runner.c (handle_sigchld): Clarify logic. * plugin-runner.c (handle_sigchld): Clarify logic.	Teddy Hogeborn	16 years ago
294	* plugins.d/password-prompt.c (quit_now): Changed type to "v... * plugins.d/password-prompt.c (quit_now): Changed type to "volatile sig_atomic_t". All uses changed.	Teddy Hogeborn	16 years ago
293	* plugin-runner.c: Whitespace changes only. * plugin-runner.c: Whitespace changes only. * plugins.d/mandos-client.c: Wrap calls to klogctl() inside "#ifdef __linux__". Detect and show any error from nanosleep. * plugins.d/password-prompt.c: Whitespace changes only.	Teddy Hogeborn	16 years ago
292	* Makefile (run-server): Use "--no-dbus" unconditionally. * Makefile (run-server): Use "--no-dbus" unconditionally. * initramfs-tools-script: Correct tests for writable "/conf/conf.d". * mandos: Add process ID number to logging messages. (IPv6_TCPServer.server_bind): Use plain "raise". (main): Do not try to handle SIGSEGV; it does not work. Use plain "raise". Log KeyboardInterrupt and server exit.	Teddy Hogeborn	16 years ago
291	Merge from Björn: Merge from Björn: * mandos-ctl: New option "--remove-client". Only default to listing clients if no clients were given on the command line. * plugins.d/mandos-client.c: Lower kernel log level while bringing up network interface. New option "--delay" to control the maximum delay to wait for running interface. * plugins.d/mandos-client.xml (SYNOPSIS, OPTIONS): New option "--delay".	Teddy Hogeborn	16 years ago
290	* mandos (main): Bug fix: Do setgid before setuid. Add verb... * mandos (main): Bug fix: Do setgid before setuid. Add verbose GnuTLS debugging messages. * plugins.d/mandos-client.c (main): Bug fix: Do setgid before setuid.	Teddy Hogeborn	16 years ago
289	* mandos (main): Catch SIGSEGV and raise RuntimeError. * mandos (main): Catch SIGSEGV and raise RuntimeError.	Björn Påhlsson	16 years ago
288	* plugins.d/mandos-client.c (main): Use separate bool variab... * plugins.d/mandos-client.c (main): Use separate bool variable instead of clumsy NUL character in "tempdir". Bug fix: Don't try to remove temp directory if it was never created.	Teddy Hogeborn	16 years ago
287	* INSTALL (Prerequisites/Mandos Server): Added "PyGObject". * INSTALL (Prerequisites/Mandos Server): Added "PyGObject".	Teddy Hogeborn	16 years ago
286	* debian/control (mandos/Depends): Added "python-gobject". * debian/control (mandos/Depends): Added "python-gobject".	Teddy Hogeborn	16 years ago
285	* plugins.d/mandos-client.c (main): Use remove() instead of ... * plugins.d/mandos-client.c (main): Use remove() instead of unlink(), and use it on everything in the temporary directory, not just files. * plugins.d/mandos-client.xml (DESCRIPTION): Better wording. (OPTIONS): For the "--interface" option, document the unsuitability of pseudo-interfaces which will not exist in the initrd.	Teddy Hogeborn	16 years ago