/mandos/trunk : changes

» Changes from revision 722

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 722 to 703

expand all

Rev	Summary	Authors	Date
722	mandos-monitor: Bug fix: Make Ctrl-L actually redraw the scr... mandos-monitor: Bug fix: Make Ctrl-L actually redraw the screen. * mandos-monitor (UserInterface.process_input): Bug fix: Look for key "ctrl l", not "\f". Also, add call to "self.screen.clear()" in order to actually force repainting.	Teddy Hogeborn	11 years ago
721	Fix two mutually cancelling bugs. Fix two mutually cancelling bugs. * mandos (rfc3339_duration_to_delta): Set "token_duration" to be a token (and not a tuple) by removing the final comma. Construct the needed tuple later when initializing the "followers" variable. * mandos-ctl (rfc3339_duration_to_delta): - '' -	Teddy Hogeborn	11 years ago
720	Merge from release branch. Merge from release branch.	Teddy Hogeborn	11 years ago
719	Update non-package install instructions. Update non-package install instructions. * INSTALL: Update package names, URLs and versions. Remove discussion of adjusting network device name. Adjust minimum reboot time to reflect new default timeout value.	Teddy Hogeborn	11 years ago
718	mandos-ctl: Make it work in Python 3. mandos-ctl: Make it work in Python 3. * mandos-ctl: Tolerate failure of importing future_builtins. If Python 2, override "str" with "unicode". (print_clients): Use "str" instead of "unicode". (main): Use 'type=argparse.FileType(mode="rb")' instead of 'type=file', and use the items() method instead of iteritems().	Teddy Hogeborn	11 years ago
717	mandos-client: Fix bug with GPGME 1.5.0. mandos-client: Fix bug with GPGME 1.5.0. * initramfs-tools-hook: If GPGME is 1.5.0 or later, copy "gpgconfig" to RAM file system and do what GPGME does: run "gpgconfig" to find GnuPG binary.	Teddy Hogeborn	11 years ago
716	plugin-runner: Bug Fix: Fix some memory leaks. plugin-runner: Bug Fix: Fix some memory leaks. * plugin-runner.c (main): Free the individual direntries.	Teddy Hogeborn	11 years ago
715	mandos-client: Bug Fix: Fix some memory leaks. mandos-client: Bug Fix: Fix some memory leaks. * plugins.d/mandos-client.c (resolve_callback): Always free resolver. (run_network_hooks): Free the individual direntries. (main): When listing network interfaces and when removing the GPGME temp directory, free the individual direntries.	Teddy Hogeborn	11 years ago
714	mandos-client: Fix mem free bug. mandos-client: Fix mem free bug. * plugins.d/mandos-client.c (add_server): Hide warning. (main): Free server->ip too, not just the server struct.	Teddy Hogeborn	11 years ago
713	mandos-monitor: New "verbose" mode to see less important log... mandos-monitor: New "verbose" mode to see less important log messages. * mandos-monitor (MandosClientWidget.__init__): Log client creation. (MandosClientWidget.checker_completed): Log a successful checker. (MandosClientWidget.checker_started): Log starting of a checker. (UserInterface.__init__): New optional "log_level" argument. (UserInterface.log_message, UserInterface.log_message_raw): Take optional "level" arg. (UserInterface.toggle_log_display): Log visibility change. (UserInterface.change_log_display): Log wrap mode change. (UserInterface.process_input): Show new "v" key in help message and process "v" key if pressed. * mandos-monitor.xml (KEYS): Document new "v" key.	Teddy Hogeborn	11 years ago
712	mandos.lsm: Fix white space. mandos.lsm: Fix white space.	Teddy Hogeborn	11 years ago
711	Merge from release branch. Merge from release branch.	Teddy Hogeborn	11 years ago
710	mandos-client: Fix minor memory leak on memory full or clock... mandos-client: Fix minor memory leak on memory full or clock failure. * plugins.d/mandos-client.c (add_server): On any errors, free new_server and its contents before returning.	Teddy Hogeborn	11 years ago
709	mandos: The Debian package should prefer "ssh-client" over "... mandos: The Debian package should prefer "ssh-client" over "fping". * debian/control (mandos/Recommends): List "ssh-client" before "fping".	Teddy Hogeborn	11 years ago
708	mandos-keygen: Generate "checker" option to use SSH fingerpr... mandos-keygen: Generate "checker" option to use SSH fingerprints. To turn this off, use a new "--no-ssh" option to mandos-keygen. * INSTALL (Mandos Server, Mandos Client): Document new suggested installation of SSH. * Makefile (confdir/clients.conf): Use new "--no-ssh" option to "mandos-keygen". * debian/control (mandos/Depends): Changed to "fping \| ssh-client". (mandos-client/Recommends): New; set to "ssh". * intro.xml (FREQUENTLY ASKED QUESTIONS): Rename and rewrite section called "Faking ping replies?" to address new default behavior. * mandos-clients.conf.xml (OPTIONS/checker): Briefly discuss new behavior of mandos-keygen. * mandos-keygen: Bug fix: Suppress failure output of "shred" to remove "sec", since no such files may exist. (password mode): Scan for SSH key fingerprints and output as new "checker" and "ssh_fingerprint" options, unless new "--no-ssh" option is given. mandos-keygen.xml (SYNOPSIS/--force): Bug fix: Document short form. (OPTIONS/--no-ssh): New. (SEE ALSO): Add reference "ssh-keyscan(1)". * plugins.d/mandos-client.xml (SECURITY): Briefly mention the possibility of using SSH key fingerprints for checking.	Teddy Hogeborn	11 years ago
707	mandos: New "--no-zeroconf" option. Also make "--socket=0" ... mandos: New "--no-zeroconf" option. Also make "--socket=0" work. * mandos (main): New "--no-zeroconf" option. Also do not interpret socket=0 as no socket. * mandos-options.xml (zeroconf): New. * mandos.conf (socket, zeroconf): New. * mandos.xml (SYNOPSIS, OPTIONS): Added "--no-zeroconf".	Teddy Hogeborn	11 years ago
706	mandos-client: Better error messages. mandos-client: Better error messages. * Makefile (run-client): Update message to match current messages. Also set GNOME_KEYRING_CONTROL to empty string to block pam_gnome_keyring. * plugins.d/mandos-client (raise_privileges): Do not print errors. (raise_privileges_permanently): - '' - (lower_privileges): - '' - (lower_privileges_permanently): - '' - (run_network_hooks): Print errors from above functions correctly. (bring_up_interface, take_down_interface, main): - '' -	Teddy Hogeborn	11 years ago
705	plugin-runner: Release memory and close FD's correctly in al... plugin-runner: Release memory and close FD's correctly in all cases. * plugins.d/mandos-client.c (main): Init "direntries" to NULL. Close "dir_fd" at fallback label. Do not free "direntries" if scandirat() or scandir() failed. Do free(direntries) at fallback label.	Teddy Hogeborn	11 years ago
704	mandos-client: Fix some bugs on error conditions. mandos-client: Fix some bugs on error conditions. * plugins.d/mandos-client.c (run_network_hooks): Init "dirent" to NULL and, later, always free() it unless scandirat() or scandir() failed. (main): Fix free() of uninitalized memory in case scandirat() or scandir() of "/sys/class/net" failed. Also, when cleaning up, even if GPGME temp directory is empty, do free(direntries) and remove the directory.	Teddy Hogeborn	11 years ago
703	In plugin-runner, do scandirat() or scandir() instead of rea... In plugin-runner, do scandirat() or scandir() instead of readdir(). * plugin-runner.c (set_cloexec_flag): Only define if O_CLOEXEC is not defined, it is not called otherwise. (main): Remove variables "dir" and "dirst"; new variable "dir_fd". Use scandirat() if available, scandir() otherwise, both using new filter function "good_name". Removed checking of plugin file name patterns; this is now done by "good_name". Do not set FD_CLOEXEC flag on plugin_fd, since fexecve() will not work with it. Use pipe2() to set O_CLOEXEC on pipe FD's (if possible). (main/good_name): New filter function for scandirat() or scandir().	Teddy Hogeborn	11 years ago

Older »