/mandos/trunk : changes

» Changes from revision 738.1.6

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 738.1.6 to 725

expand all

Rev	Summary	Authors	Date
738.1.6	Fix minor bugs and typos and add some more debug output. Fix minor bugs and typos and add some more debug output. * Makefile (install-client-nokey): Create plugin-helpers directory and the mandos-client-iprouteadddel helper program. * initramfs-tools-hook (PLUGINHELPERDIR): Fix typo. * plugins.d/mandos-client.c: Change terminology; routes are "deleted", not "removed". All occurences changed. (add_remove_local_route): Renamed to "add_delete_local_route". All callers changed. Also pass "--debug" flag to helper if in debug mode. (add_local_route): Add debugging output. (remove_local_route): Renamed to "delete_local_route". All callers changed. Also pass "--debug" flag to helper if in debug mode. (start_mandos_communication): Add debug output when adding route.	Teddy Hogeborn	10 years ago
738.1.5	plugin-helpers/mandos-client-iprouteadddel.c: Fix #include l... plugin-helpers/mandos-client-iprouteadddel.c: Fix #include lines. (main): Fix minor typo in error message.	Teddy Hogeborn	10 years ago
738.1.4	Add plugin for mandos-client to add and delete local routes. Add plugin for mandos-client to add and delete local routes. * Makefile (LIBNL3_CFLAGS, LIBNL3_LIBS): New; add for netlink library. (PLUGIN_HELPERS): Add "plugin-helpers/mandos-client-iprouteadddel". (plugin-helpers/mandos-client-iprouteadddel): New. * plugin-helpers/mandos-client-iprouteadddel.c: New. * plugins.d/mandos_client (add_remove_local_route): Rename "remove_arg" to "delete_arg". All users changed.	Teddy Hogeborn	10 years ago
738.1.3	mandos-client: Minor changes to check for more error conditi... mandos-client: Minor changes to check for more error conditions. * mandos-client.c (add_remove_local_route): Do TEMP_FAILURE_RETRY around closing of /dev/null. Check return value when opening helper directory and helper executable. (run_network_hooks): Cast return value of TEMP_FAILURE_RETRY to int. Do TEMP_FAILURE_RETRY around closing of /dev/null.	Teddy Hogeborn	10 years ago
738.1.2	mandos-client: Try to start a plugin to add and remove a loc... mandos-client: Try to start a plugin to add and remove a local route. * debian/mandos-client.README.Debian: Add setting of environment variable MANDOSPLUGINHELPERDIR to command line testing mandos-client. * mandos-client.c (raise_privileges): Moved to top of file. (raise_privileges_permanently): - '' - (lower_privileges): - '' - (lower_privileges_permanently): - '' - (add_remove_local_route, add_local_route, remove_local_route): New. (start_mandos_communication): Set SOCK_CLOEXEC flag on socket. Run the above functions to add (and remove) local route, if the conditions indicates it could help. (run_network_hooks): Use O_DIRECTORY, O_PATH, and O_CLOEXEC flags when opening network hook directory. Do TEMP_FAILURE_RETRY around opening of /dev/null and network hook executables. Move redirecting of stdout and stderr to as late as possible before fexecve(). (main): Use O_DIRECTORY and O_PATH when opening temporary directory. * plugins.d/mandos-client.xml (ENVIRONMENT): Document usage of the MANDOSPLUGINHELPERDIR environment variable.	Teddy Hogeborn	10 years ago
738.1.1	Add a plugin helper directory, available to all plugins. Add a plugin helper directory, available to all plugins. * Makefile (PLUGIN_HELPERS): New; list of plugin helpers. (CPROGS): Appended "$(PLUGIN_HELPERS)". * initramfs-tools-hook: Create new plugin helper directory, and copy plugin helpers provided by the system and/or by the local administrator. (PLUGINHELPERDIR): New. * plugin-runner.c: Take new --plugin-helper-dir option and provide environment variable to all plugins. (PHDIR): New; set to "/lib/mandos/plugin-helpers". (main/pluginhelperdir): New. (main/options): New option "--plugin-helper-dir". (main/parse_opt, main/parse_opt_config_file): Accept new option. (main): Use new option to set MANDOSPLUGINHELPERDIR environment variable as if using --global-env MANDOSPLUGINHELPERDIR=... * plugin-runner.xml: Document new --plugin-helper-dir option. (SYNOPSIS, OPTIONS): Add "--plugin-helper-dir" option. (PLUGINS/WRITING PLUGINS): Document new environment variable available to plugins. (ENVIRONMENT): Document new environment variable "MANDOSPLUGINHELPERDIR" affected by the new --plugin-helper-dir option.	Teddy Hogeborn	10 years ago
738	Handle local Zeroconf service name collisions. Handle local Zeroconf service name collisions. Service name collisions from other servers have always been handled, but not local name collisions from services on the same host. * mandos (AvahiService/rename): Handle local Zeroconf service name collision. (AvahiServiceToSyslog.rename): Pass on any extra arguments.	Teddy Hogeborn	11 years ago
737	Update Debian package standards version to 3.9.6. Update Debian package standards version to 3.9.6. * debian/control (Standards-Version): Changed to "3.9.6".	Teddy Hogeborn	11 years ago
736	Merge from release branch. Merge from release branch.	Teddy Hogeborn	11 years ago
735	When building Debian package, prefer libgnutls28 to libgnutl... When building Debian package, prefer libgnutls28 to libgnutls26. This is part of the Debian "gnutls28" transition. * debian/control (Build-Depends): Change "libgnutls-dev" to "libgnutls28-dev \| gnutls-dev".	Teddy Hogeborn	11 years ago
734	* mandos.service ([Unit]/Documentation): New. * mandos.service ([Unit]/Documentation): New.	Teddy Hogeborn	11 years ago
733	mandos-client: Bug fix: Check fork() return value. mandos-client: Bug fix: Check fork() return value. When executing network hook scripts, check fork() return value. * plugins.d/mandos-client.c (run_network_hooks): Bug fix: check if fork() returns -1.	Teddy Hogeborn	11 years ago
732	Emit D-Bus "org.freedesktop.DBus.Properties.PropertiesChange... Emit D-Bus "org.freedesktop.DBus.Properties.PropertiesChanged" signal. This deprecates the "se.recompile.Mandos.Client.PropertyChanged" signal. The new signal also adds support for noticing changes to the "se.recompile.Mandos.Client.Secret" write-only property. * mandos (dbus_annotations): Fix usage example in doc string. (DBusObjectWithProperties.PropertiesChanged): New; from D-Bus standard. (ClientDBus._interface): Set early instead of later. (ClientDBus.notifychangeproperty): Take new "invalidate_only" parameter, and pass in _interface as a default keyword argument. (ClientDBus.notifychangeproperty/setter): Also emit PropertiesChanged signal; emit new value or invalidation depending on "invalidate_only". (ClientDBus.secret): Apply notifychangeproperty with "invalidate_only=True". (ClientDBus._foo): Removed defunct interface annotation. (ClientDBus.PropertyChanged): Add annotation; this method is now deprecated. (main/MandosDBusService.GetAllClientsWithProperties): Use dictionary comprehension. * DBUS-API (Mandos Client Interface/Signals/PropertyChanged): Removed. * mandos-monitor: Use standard "PropertiesChanged" signal instead of old signal "PropertyChanged". (MandosClientPropertyCache.__init__): Connect to signal PropertiesChanged instead of PropertyChanged. (MandosClientPropertyCache._property_changed): Removed. (MandosClientPropertyCache.property_changed): Renamed to "properties_changed" and adapted to new call signature. (MandosClientWidget.properties_changed): - '' -	Teddy Hogeborn	11 years ago
731	askpass-fifo: Lower privileges after opening FIFO. askpass-fifo: Lower privileges after opening FIFO. * plugins.d/askpass-fifo.c (main): Lower privileges after opening FIFO.	Teddy Hogeborn	11 years ago
730	mandos: Replace unicode() with str(). mandos: Replace unicode() with str(). This is in preparation for the coming Python 3 conversion. * mandos: Replace "str" with "unicode". All callers changed.	Teddy Hogeborn	11 years ago
729	mandos: Stop using str() and remove unnecessary unicode() ca... mandos: Stop using str() and remove unnecessary unicode() calls. * mandos (if_nametoindex): Use "bytes" literal instead of str(). (initlogger): Use a unicode string for log device. (AvahiError.__unicode__): Removed. (DBusPropertyException.__unicode__): - '' - (ClientDBus.Secret_dbus_property): Use bytes() instead of str(). (IPv6_TCPServer.server_bind): Use .encode() instead of str(). (string_to_delta): Removed unnecessary unicode() call. (main): Use "isinstance(x, bytes)" instead of "type(x) is str", use .decode() instead of unicode(), and use .encode() instead of str().	Teddy Hogeborn	11 years ago
728	Merge from release branch. Merge from release branch.	Teddy Hogeborn	11 years ago
727	Bug fix for mandos-keygen: Unquote escaped hostname in SSH c... Bug fix for mandos-keygen: Unquote escaped hostname in SSH checker. %%(host)s is already escaped by re.escape(), and should not be quoted. * mandos-keygen (password): When printing SSH key fingerprinting checker command of the client config section, do not quote %%(host)s.	Teddy Hogeborn	11 years ago
726	Do not set BusName in systemd service file for Mandos server... Do not set BusName in systemd service file for Mandos server. It was not documented what this did for non-"dbus" service types, but apparently systemd now shows a warning about this. * mandos.service (BusName): Commented out.	Teddy Hogeborn	11 years ago
725	Bug fix to allow Python 3; that is, version 3 of the "python... Bug fix to allow Python 3; that is, version 3 of the "python" package. * debian/control (Package: mandos/Depends): Bug fix: Change from "python (<= 2.7)" to "python (>= 2.7)", allowing "/usr/bin/python" to be Python 3.	Teddy Hogeborn	11 years ago

Older »