/mandos/trunk : changes

» Changes from revision 1291

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 827 to 808

expand all

Rev	Summary	Authors	Date
827	Merge from release branch Merge from release branch	Teddy Hogeborn	9 years ago
826	Server bug fix: Work around bug when stopping server Server bug fix: Work around bug when stopping server * init.d-mandos (do_stop): Work around SIGTERM ignoring bug by doing "mandos-ctl >/dev/null 2>&1" after sending signal. * mandos.service (ExecStop): New; set to "/bin/kill -TERM $MAINPID ; /usr/sbin/mandos-ctl >/dev/null 2>&1" to work around SIGTERM ignoring bug.	Teddy Hogeborn	9 years ago
825	Server bug fix: Include CAP_SETGID so it does not run as roo... Server bug fix: Include CAP_SETGID so it does not run as root * debian/mandos.postinst (configure): If old version was 1.7.4-1 or 1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by root. * mandos (main): Print debug info about setuid() and setgid() * mandos.service ([Service]/CapabilityBoundingSet): Add "CAP_KILL CAP_SETGID"; the latter is needed for setgid() to be allowed.	Teddy Hogeborn	9 years ago
824	Remove empty comment Remove empty comment * mandos: Remove empty comment.	Teddy Hogeborn	9 years ago
823	Merge from release branch. Merge from release branch.	Teddy Hogeborn	9 years ago
822	Fix incorrect documentation of minor limitation Fix incorrect documentation of minor limitation * mandos-monitor.xml (BUGS): The name which is hard-coded is the D-Bus bus name, not the service name. Fix the documentation.	Teddy Hogeborn	9 years ago
821	Add bug reporting information to manual pages Add bug reporting information to manual pages * bugs.xml: New file. * intro.xml (BUGS): New section; include "bugs.xml". * mandos-clients.conf.xml (BUGS): Include "bugs.xml". * mandos-ctl.xml (BUGS): Uncommented; include "bugs.xml". * mandos-keygen.xml (BUGS): - '' - * mandos-monitor.xml (BUGS): Include "bugs.xml". * mandos.conf.xml (BUGS): - '' - * mandos.xml (BUGS): - '' - * plugin-runner.xml (BUGS): - '' - * plugins.d/askpass-fifo.xml (BUGS): New section; include "../bugs.xml". * plugins.d/mandos-client.xml (BUGS): Uncommented; include "../bugs.xml". * plugins.d/password-prompt.xml (BUGS): Include "../bugs.xml". * plugins.d/plymouth.xml (BUGS): - '' - * plugins.d/splashy.xml (BUGS): - '' - * plugins.d/usplash.xml (BUGS): - '' -	Teddy Hogeborn	9 years ago
820	Rename "gobject" to "GObject"; prefer the new python-gi Rename "gobject" to "GObject"; prefer the new python-gi * debian/control (Source: mandos/Build-Depends-Indep): Change "python-gobject \| python-gi" to "python-gi \| python-gobject" (Package: mandos/Depends): - '' - * mandos: Prefer "gi" module over "gobject" module. Import "gobject" as "GObject"; change spelling throughout. * mandos-monitor: - '' -	Teddy Hogeborn	9 years ago
819	errno is of type int, not error_t errno is of type int, not error_t * plugins.d/mandos-client.c (raise_privileges, raise_privileges_permanently, lower_privileges, lower_privileges_permanently, bring_up_interface, take_down_interface, ): Change return type and all errno-containing variables to type "int". (get_flags): Change all errno-containing variables to type "int". (main): Change all errno-containing variables to type "int", except for values which are explicitly of type error_t.	Teddy Hogeborn	9 years ago
818	Restrict the Mandos server daemon in the systemd service fil... Restrict the Mandos server daemon in the systemd service file. * mandos.service ([Service]/ProtectSystem): Set to "full". ([Service]/PrivateTmp, [Service]/PrivateDevices, [Service]/ProtectHome): Set to "yes". ([Service]/CapabilityBoundingSet): Set to "CAP_SETUID CAP_DAC_OVERRIDE CAP_NET_RAW".	Teddy Hogeborn	9 years ago
817	Only use -fsanitize=... options if they work. Only use -fsanitize=... options if they work. * Makefile (ALL_SANITIZE_OPTIONS): New. (SANITIZE): Loop through all known sanitizing options and only use those which do not give an error.	Teddy Hogeborn	9 years ago
816	Use "nogroup" as a fallback group, not "nobody". Use "nogroup" as a fallback group, not "nobody". * Makefile (GROUP): Use "nogroup" as a fallback group, not "nobody". * mandos (main): - '' -	Teddy Hogeborn	9 years ago
815	Ignore any error from initramfs-tools' "configure_networking... Ignore any error from initramfs-tools' "configure_networking". * initramfs-tools-script: Wrap call to "configure_networking" with "set +e" and "set -e", since configure_networking was not designed to run in a "set -e" environment. Closes: 816513 Thanks: Carlos Alberto Lopez Perez <clopez@igalia.com> Thanks: Ben Hutchings <ben@decadent.org.uk>	Teddy Hogeborn	9 years ago
814	Merge from release branch. Merge from release branch.	Teddy Hogeborn	9 years ago
813	Client: Remove new key directory introduced in GnuPG 2.1 Client: Remove new key directory introduced in GnuPG 2.1 * plugins.d/mandos-client.c (main/clean_dir_at): New function; calls itself for any known subdirectories which should also be removed. (main): Call clean_dir_at() to remove GPGME temp directory.	Teddy Hogeborn	9 years ago
812	Client: Remove calls to gnutls_global_init and gnutls_global... Client: Remove calls to gnutls_global_init and gnutls_global_deinit * plugins.d/mandos-client.c (init_gnutls_global, main): Don't call gnutls_global_init or gnutls_global_deinit anymore; these are unnecessary in GnuTLS 3.3.	Teddy Hogeborn	9 years ago
811	Client: Remove an incorrect "nonnull" attribute Client: Remove an incorrect "nonnull" attribute * plugins.d/mandos-client.c (init_gnutls_global): Remove "nonnull" attribute from "dhparamsfilename" argument.	Teddy Hogeborn	9 years ago
810	Depend on the GNU C Library 2.16 or later Depend on the GNU C Library 2.16 or later * INSTALL: Document dependency. * plugin-runner.c: Remove #ifdefs for scandirat() and adding of -Wsign-conversion for FD_SET, FD_CLR, and FD_ISSET. * plugins.d/mandos-client.c: - '' -	Teddy Hogeborn	9 years ago
809	Merge from release branch. Merge from release branch.	Teddy Hogeborn	9 years ago
808	Update Debian policy manual version. Update Debian policy manual version. * debian/control (Source: mandos/Standards-Version): Change to 3.9.7.	Teddy Hogeborn	9 years ago