/mandos/trunk : changes

» Changes from revision 1123

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 333 to 314

expand all

Rev	Summary	Authors	Date
333	Minor code cleanup; one minor bug fix. Minor code cleanup; one minor bug fix. * initramfs-tools-hook: Bug fix: Use the primary group of the first suitable user found, do not look for a group separately. * mandos: Unconditionally import "struct" and "fcntl". Use unicode strings everywhere possible. (Client._datetime_to_milliseconds): New static method. (Client.timeout_milliseconds, Client.interval_milliseconds): Use above method. (ClientDBus.CheckedOK, ClientDBus.Enable, ClientDBus.StopChecker): Define normally. (if_nametoindex): Document non-acceptance of unicode strings. All callers adjusted. Do not import "struct" or "fcntl". Log warning message if if_nametoindex cannot be found using ctypes modules. (main): Bug fix: Do not look for user named "nogroup".	Teddy Hogeborn	16 years ago
332	* debian/mandos-client.README.Debian: Added text about non-u... * debian/mandos-client.README.Debian: Added text about non-usability of pseudo-network interfaces.	Teddy Hogeborn	16 years ago
331	Minor code cleanup, and a bug fix. Minor code cleanup, and a bug fix. * mandos: Added blank second line in doc strings. (SO_BINDTODEVICE): New global constant. (TCP_handler): Renamed to "ClientHandler". All users changed. (ClientHandler.handle): Get GnuTLS priority directly from server.gnutls_priority instead of server.settings["priority"]. (IPv6_TCPServer): Do not use super() anywhere. (IPv6_TCPServer.__init__) Do not receive "settings" dict, get all the relevant settings separately as keyword arguments. All callers changed. (IPv6_TCPServer.server_bind): Use global SO_BINDTODEVICE. Bug fix: add NUL character to interface name. Use "self.interface" directly instead of "self.settings['interface']". (IPv6_TCPServer.handle_ipc): Use "self.use_dbus" directly instead of "self.settings['use_dbus']".	Teddy Hogeborn	16 years ago
330	* mandos (peer_certificate, fingerprint): Moved into "TCP_ha... * mandos (peer_certificate, fingerprint): Moved into "TCP_handler" class. (TCP_handler.peer_certificate, TCP_handler.fingerprint): Moved here. (TCP_handler.handle): Do not log conditions also sent via IPC. (IPv6_TCPServer.handle_ipc): Bug fix: Remove extra newline from IPC command log message. Bug fix: Strip CR and NL from IPC line. Log conditions recieved via IPC. Log error if IPC recieved about unknown client.	Teddy Hogeborn	16 years ago
329	* mandos (ClientDBus.__del__): Bug fix: Correct mispasted co... * mandos (ClientDBus.__del__): Bug fix: Correct mispasted code, and do not try to call dbus.service.Object.__del__() if it does not exist. (ClientDBus.start_checker): Simplify logic.	Teddy Hogeborn	16 years ago
328	* mandos (Client): Move all D-Bus code to new "ClientDBus" c... * mandos (Client): Move all D-Bus code to new "ClientDBus" class. (Client.start_checker): Bug fix: update "current_checker_command" in all cases. (ClientDBus): New class. (main): Use Client or ClientDBus depending on "use_dbus". (main/MandosDBusService.RemoveClient): Bug fix: make sure the client is removed from the D-Bus.	Teddy Hogeborn	16 years ago
327	Merge from pipe IPC branch. Merge from pipe IPC branch. * mandos (AvahiService.rename, main): Include PID in log messages when using a different service name. (Client.ReceivedSecret, Client.Rejected): New D-Bus signals. (TCP_handler.handle): Send IPC to parent process. (ForkingMixInWithPipe): New mixin class. (IPv6_TCPServer): Inherit from ForkingMixInWithPipe instead of SocketServer.ForkingMixIn. (IPv6_TCPServer.handle_ipc): New method. (main/mandos_server): Renamed to "mandos_dbus_service" and made global. (main/MandosServer): Renamed to "MandosDBusService". (main/MandosDBusService.ClientNotFound): New D-Bus signal.	Teddy Hogeborn	16 years ago
326	* initramfs-tools-hook: Deal better with empty plugin direct... * initramfs-tools-hook: Deal better with empty plugin directories.	Teddy Hogeborn	16 years ago
325	* plugins.d/mandos-client.c (start_mandos_communication): "s... * plugins.d/mandos-client.c (start_mandos_communication): "sin6_family" in the "sockaddr_in6" struct is a "sa_family_t", not "uint16_t".	Teddy Hogeborn	16 years ago
324	Merge from release branch. Merge from release branch.	Teddy Hogeborn	16 years ago
323	* initramfs-tools-hook: Add missing terminating `" when sett... * initramfs-tools-hook: Add missing terminating `" when setting mandos_user and mandos_group. * mandos.conf.xml (SEE ALSO): Improved grammar.	Teddy Hogeborn	16 years ago
322	Merge from release branch. Merge from release branch.	Teddy Hogeborn	16 years ago
321	* README (The Plugin System): Improve wording. * README (The Plugin System): Improve wording.	Teddy Hogeborn	16 years ago
320	* initramfs-tools-hook: Changed to use "cut" instead of depe... * initramfs-tools-hook: Changed to use "cut" instead of depending on "awk" being GNU awk. * mandos.xml (BUGS): Improved grammar.	Teddy Hogeborn	16 years ago
319	* INSTALL: Changed "Python 2.4" to "Python 2.5". * INSTALL: Changed "Python 2.4" to "Python 2.5". * mandos.lsm: - '' -	Teddy Hogeborn	16 years ago
318	* Makefile (common.ent): Update "version" entity correctly. * Makefile (common.ent): Update "version" entity correctly. * mandos-clients.conf.xml (OPTIONS): Corrected old mistake.	Teddy Hogeborn	16 years ago
317	Use "getconf" to get correct LFS compile and link flags. Use "getconf" to get correct LFS compile and link flags. * Makefile (GPGME_CFLAGS): Added output of "getconf LFS_CFLAGS". (GPGME_LIBS): Added output of "getconf LFS_LIBS" and "getconf LFS_LDFLAGS". * plugins.d/mandos-client.c: Only define "_LARGEFILE_SOURCE" and "_FILE_OFFSET_BITS" if they are not already defined.	Teddy Hogeborn	16 years ago
316	Merge from release branch. Merge from release branch.	Teddy Hogeborn	16 years ago
315	* mandos (Client.current_checker_command): New attribute. * mandos (Client.current_checker_command): New attribute. (Client.start_checker): Make sure the running checker process is not a zombie, just in case.	Teddy Hogeborn	16 years ago
314	Support not using IPv6 in server: Support not using IPv6 in server: * mandos (AvahiService.__init__): Take new "protocol" parameter. All callers changed. (IPv6_TCPServer.__init__): Take new "use_ipv6" parameter. All callers changed. (IPv6_TCPServer.server_bind): Create IPv4 socket if not using IPv6. (main): New "--no-ipv6" command line option. New "use_ipv6" config option. * mandos-options.xml ([@id="address"]): Document conditional IPv4 address support. ([@id="ipv6"]): New paragraph. * mandos.conf (use_ipv6): New config option. * mandos.conf.xml (OPTIONS): Document new "use_dbus" option. (EXAMPLE): Changed to use IPv6 link-local address. Added "use_ipv6" option. * mandos.xml (SYNOPSIS): New "--no-ipv6" option. (OPTIONS): Document new "--no-ipv6" option.	Teddy Hogeborn	16 years ago