/mandos/trunk : changes

» Changes from revision 1294

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 857 to 838

expand all

Rev	Summary	Authors	Date
857	Merge from release branch Merge from release branch	Teddy Hogeborn	9 years ago
856	Client: Do not install intro(8mandos) manual page Client: Do not install intro(8mandos) manual page When installing client, do not include the intro(8mandos) manual page to avoid a conflict with the files from a server install. * Makefile (install-client-nokey): Do not install intro.8mandos.	Teddy Hogeborn	9 years ago
855	Merge from release branch Merge from release branch	Teddy Hogeborn	9 years ago
854	Fix typo in README.Debian for mandos-client package. Fix typo in README.Debian for mandos-client package. * debian/mandos.README.Debian: Replace "it it" with "it is", and make lintian warning tag "spelling-error-in-readme-debian" go away.	Teddy Hogeborn	9 years ago
853	Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." on boo... Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." on boot. * initramfs-tools-hook: Also copy_exec gpg-agent if it exists. Closes: 819982 Reported-by: Felix Koop <fdp@fkoop.de> Suggested-by: Anonymous	Teddy Hogeborn	9 years ago
852	mandos: Bug fix for Python 2.7 and the "--interface" option mandos: Bug fix for Python 2.7 and the "--interface" option * mandos: Try harder at program start to find correct value of SO_BINDTODEVICE, even if it is missing from the Python standard libraries. (IPv6_TCPServer.server_bind): If SO_BINDTODEVICE was not found, fall back to a hard-coded value (and emit warning). Reported-by: Valerio Bellizzomi <valerio@selnet.org>	Teddy Hogeborn	9 years ago
851	mandos: Minor bug fix for Python 3 mandos: Minor bug fix for Python 3 * mandos (ClientHandler.handle): The GnuTLS priority string needs to be encoded to a byte string Reported-by: Valerio Bellizzomi <valerio@selnet.org>	Teddy Hogeborn	9 years ago
850	mandos: Bug fix: Do multiprocessing cleanup correctly on exi... mandos: Bug fix: Do multiprocessing cleanup correctly on exit * mandos (main): Save module "multiprocessing" and open file "wnull" as scope variables accessible by function cleanup(), since the module and global variable may not be accessible when the cleanup() function is run as scheduled by atexit().	Teddy Hogeborn	9 years ago
849	mandos: Bug fix: Only use the --no-use-agent option for GPG ... mandos: Bug fix: Only use the --no-use-agent option for GPG 1 * mandos (PGPEngine.__init__): Only use option "--no-use-agent" with GPG 1, as GPG 2 does not support it.	Teddy Hogeborn	9 years ago
848	mandos-keygen: Try to use ECDSA keys with ssh-keyscan(1) by ... mandos-keygen: Try to use ECDSA keys with ssh-keyscan(1) by default. * mandos-keygen (password): Add "ecdsa-sha2-nistp256" first in list of SSH key types to try to scan for.	Teddy Hogeborn	9 years ago
847	Minor documentation fix. Minor documentation fix. * debian/mandos-client.README.Debian (Specifying a Client Network Interface): Change word "interface" to "interfaces" since the client uses more than one interface since version 1.6.	Teddy Hogeborn	9 years ago
846	debian/control: Update Standards-Version to 3.9.8 debian/control: Update Standards-Version to 3.9.8 * debian/control (Standards-Version): Update to 3.9.8	Teddy Hogeborn	9 years ago
845	Client: Install intro(8mandos) manual page Client: Install intro(8mandos) manual page When installing client, include the intro(8mandos) manual page so that it is available even if the server is not installed. * Makefile (install-client-nokey): Also install intro.8mandos.	Teddy Hogeborn	9 years ago
844	Use HTTPS in home page links Use HTTPS in home page links Since we have a real certificate now, change all links to the home page to use HTTPS. * README: Use HTTPS in home page links * debian/control (Source: mandos/Homepage): - '' - * debian/copyright (Source): - '' - * intro.xml (SEE ALSO): - '' - * mandos.lsm (Primary-site): - '' -	Teddy Hogeborn	9 years ago
843	Merge from release branch Merge from release branch	Teddy Hogeborn	9 years ago
842	Server: Do not set execute bit on tmpfiles.d/mandos.conf Server: Do not set execute bit on tmpfiles.d/mandos.conf * Makefile (install-server): Install tmpfiles.d/mandos.conf with "u=rw,go=r" instead of "u=rwx,go=r".	Teddy Hogeborn	9 years ago
841	Server: Debian package bug fix: Include /usr/lib/tmpfiles.d ... Server: Debian package bug fix: Include /usr/lib/tmpfiles.d dir The Debian package for the server needs the /usr/lib/tmpfiles.d directory in its .dirs file in order for the directory to exist when the Makefile "install-server" rule is run, otherwise the tmpfiles.d-mandos.conf file will not be installed. * debian/mandos.dirs (usr/lib/tmpfiles.d): Added.	Teddy Hogeborn	9 years ago
840	Client: Make plugin helper directory in initramfs image mode... Client: Make plugin helper directory in initramfs image mode u=rwx,go= Make the plugin helper directory was secure in the initramfs image just as it is in the normal file system. * initramfs-tools-hook: Install plugin-helper directory into initramfs image as mode u=rwx.	Teddy Hogeborn	9 years ago
839	Client: Make plugin helper override directory mode u=rwx,go= Client: Make plugin helper override directory mode u=rwx,go= Even though it currently is not used, a local administrator might use setuid (or setcap) executables as plugin helpers. Thus, the plugin helper override directory (/etc/mandos/plugin-helpers) must be secured, just as the plugin override directory (/etc/mandos/plugins.d) is. * Makefile (install-client-nokey): Install plugin-helper directory as mode u=rwx. * debian/mandos-client.lintian-overrides: Do not warn about permissions on plugin helper directory. * debian/mandos-client.postinst (configure): Fix permissions on plugin helper local override directory (/etc/mandos/plugin-helpers), but only if not listed by "dpkg-statoverride".	Teddy Hogeborn	9 years ago
838	Server: New tmpfiles.d file for persistent state directory Server: New tmpfiles.d file for persistent state directory Provide a tmpfiles.d(5) file for systemd to create persistent state directory on so-called "volatile" systems. * Makefile (TMPFILES): New. (install-server): Also install "tmpfiles.d-mandos.conf" file as "/usr/lib/tmpfiles.d/mandos.conf". * tmpfiles.d-mandos.conf: New.	Teddy Hogeborn	9 years ago