/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 706 to 687

expand all

collapse all

Rev		Summary	Authors	Date	Diff	Files
706		mandos-client: Better error messages. mandos-client: Better error messages. * Makefile (run-client): Update message to match current messages.                          Also set GNOME_KEYRING_CONTROL to empty                          string to block pam_gnome_keyring. * plugins.d/mandos-client (raise_privileges): Do not print errors.   (raise_privileges_permanently): - '' -   (lower_privileges): - '' -   (lower_privileges_permanently): - '' -   (run_network_hooks): Print errors from above functions correctly.   (bring_up_interface, take_down_interface, main): - '' -	Teddy Hogeborn	11 years ago
705		plugin-runner: Release memory and close FD's correctly in al... plugin-runner: Release memory and close FD's correctly in all cases. * plugins.d/mandos-client.c (main): Init "direntries" to NULL.  Close                                     "dir_fd" at fallback label.  Do                                     not free "direntries" if                                     scandirat() or scandir() failed.                                     Do free(direntries) at fallback                                     label.	Teddy Hogeborn	11 years ago
704		mandos-client: Fix some bugs on error conditions. mandos-client: Fix some bugs on error conditions. * plugins.d/mandos-client.c (run_network_hooks): Init "dirent" to NULL                                                  and, later, always                                                  free() it unless                                                  scandirat() or                                                  scandir() failed.   (main): Fix free() of uninitalized memory in case scandirat() or           scandir() of "/sys/class/net" failed.  Also, when cleaning           up, even if GPGME temp directory is empty, do           free(direntries) and remove the directory.	Teddy Hogeborn	11 years ago
703		In plugin-runner, do scandirat() or scandir() instead of rea... In plugin-runner, do scandirat() or scandir() instead of readdir(). * plugin-runner.c (set_cloexec_flag): Only define if O_CLOEXEC is not                                       defined, it is not called                                       otherwise.   (main): Remove variables "dir" and "dirst"; new variable "dir_fd".           Use scandirat() if available, scandir() otherwise, both           using new filter function "good_name".  Removed checking of           plugin file name patterns; this is now done by "good_name".           Do not set FD_CLOEXEC flag on plugin_fd, since fexecve()           will not work with it.  Use pipe2() to set O_CLOEXEC on pipe           FD's (if possible).   (main/good_name): New filter function for scandirat() or scandir().	Teddy Hogeborn	11 years ago
702		In plugin-runner, protect against a larger FD_SETSIZE than f... In plugin-runner, protect against a larger FD_SETSIZE than fd_set. * plugin-runner.c (main): Before forking, check that the first FD from                           pipe() does not exceed FD_SETSIZE.	Teddy Hogeborn	11 years ago
701		plugin-runner: Restore resources correctly if fork() fails. plugin-runner: Restore resources correctly if fork() fails. * plugin-runner.c (main): If fork() fails, close pipe FD's and restore                           signal mask for SIGCHLD.	Teddy Hogeborn	11 years ago
700		plugin-runner: Do not leak file descriptors on certain error... plugin-runner: Do not leak file descriptors on certain errors. * plugin-runner.c (main): If set_cloexec_flag fails, close pipe FD's.	Teddy Hogeborn	11 years ago
699		Fix free() of possibly uninitialized pointer in mandos-clien... Fix free() of possibly uninitialized pointer in mandos-client. * plugins.d/mandos-client (main): Initialize "direntries" to NULL so                                   it can be free()'d even if scandir()                                   fails.	Teddy Hogeborn	11 years ago
698		Fix mandos server "--servicename" option, broken since 1.6.4... Fix mandos server "--servicename" option, broken since 1.6.4. * mandos (initlogger): Make "syslogger" a global variable again.	Teddy Hogeborn	11 years ago
697		Address a very theoretical possible security issue in mandos... Address a very theoretical possible security issue in mandos-client. If there were to run some sort of "cleaner" process for /run/tmp (or /tmp), and mandos-client were to run for long enough for that cleaner process to remove the temporary directory for GPGME, there was a possibility that another unprivileged process could trick the (also unprivileged) mandos-client process to remove other files or symlinks which the unprivileged mandos-client process was allowed to remove. This is not currently known to have been exploitable, since there are no known initramfs environments running such cleaner processes. * plugins.d/mandos-client.c (main): Use O_NOFOLLOW when opening                                     tempdir for cleaning.	Teddy Hogeborn	11 years ago
696		Bug fix for mandos-client: Run the network hook, not the dir... Bug fix for mandos-client: Run the network hook, not the directory. * plugins.d/mandos-client.d (set_cloexec_flag): Removed.   (run_network_hooks): Do not set O_CLOEXEC on "hookdir_fd".                        Instead, open hook to new "hook_fd" and simply                        close(hookdir_fd) before fexecve().	Teddy Hogeborn	11 years ago
695		Make mandos-client use more scandirat(). Make mandos-client use more scandirat(). * plugins.d/mandos-client.d (main): Use scandirat() when removing                                     GPGME temp directory.	Teddy Hogeborn	11 years ago
694		Make mandos-client use unlinkat() instead of remove(). Make mandos-client use unlinkat() instead of remove(). * plugins.d/mandos-client.d (main): Replace remove() with unlinkat().	Teddy Hogeborn	11 years ago
693		Make mandos-client use fstatat(). Make mandos-client use fstatat(). * plugins.d/mandos-client.d (runnable_hook): Use fstatat().	Teddy Hogeborn	11 years ago
692		Make mandos-client use fexecve(). Make mandos-client use fexecve(). * plugins.d/mandos-client.d (run_network_hooks): Use fexecve().	Teddy Hogeborn	11 years ago
691		Make mandos-client use scandirat() if it exists. Make mandos-client use scandirat() if it exists. * plugins.d/mandos-client.d (hookdir_fd): File descriptor for hookdir.   (set_cloexec_flag): Define this function if O_CLOEXEC is undefined.   (run_network_hooks): Open hookdir_fd.  Use scandirat() if it exists.	Teddy Hogeborn	11 years ago
690		Fix typo in code comment. Fix typo in code comment. * debian/mandos.postinst: Fix typo in comment.	Teddy Hogeborn	11 years ago
689		Minor bug fix in mandos-client: Remove memory leak for netwo... Minor bug fix in mandos-client: Remove memory leak for network hooks. * plugins.d/mandos-client.c (runnable_hook): Call free() on full file                                              name of network hook.	Teddy Hogeborn	11 years ago
688		Minor bug fix in mandos-client: Allow periods in network hoo... Minor bug fix in mandos-client: Allow periods in network hook names. * plugins.d/mandos-client.c (runnable_hook): Add "." to strspn() call                                              to match documentation.	Teddy Hogeborn	11 years ago
687		White space fix only. White space fix only. * plugins.d/mandos-client.c (main): Indent unindented blank lines.	Teddy Hogeborn	11 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0