/mandos/trunk : changes

» Changes to ca.pem from revision 1291

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1291 to 1272

expand all

Rev	Summary	Authors	Date
1291	Require correct version of systemd-dev or systemd Require correct version of systemd-dev or systemd The systemd.pc file (for use by pkg-config) was moved from the systemd package to the systemd-dev package in version 256~rc2-1. Therefore, require either systemd-dev or a version of systemd before that version, in order to be guaranteed the presence of the systemd.pc file. * debian/control (Source: mandos/Build-Depends): Add version qualifier "(< 256~rc2-1)" to "systemd".	Teddy Hogeborn	9 hours ago
1290	Minor fix for manual Makefile uninstallations Minor fix for manual Makefile uninstallations If the Mandos systemd unit file was not installed, it was still removed by the "purge-server" target. If systemd is not installed, this could mean removal of "mandos.service" from the root directory. (Note: this was not used by the Debian package as a method of uninstallation; this was only ever done by the Makefile if "make purge-server" was called by hand. And a "mandos.service" file was presumably also unlikely to exist in the root directory.) * Makefile (purge-server): Only remove systemd service file "mandos.service" if the same conditions exist which permitted its initial installation in the "install-server" target.	Teddy Hogeborn	9 hours ago
1289	Fix #1069689 by using pkg-config in debian/rules Fix #1069689 by using pkg-config in debian/rules The directory for systemd unit files (output of "pkg-config systemd --variable=systemdsystemunitdir") has changed. But there was a hardcoded instance of this directory in debian/mandos.dirs. Fix this by removing the directory from debian/mandos.dirs, and instead creating the correct directory explicitly in debian/rules. * debian/mandos.dirs (lib/systemd/system): Removed. * debian/rules (PKG_CONFIG): New; copied from Makefile. (override_dh_installdirs-indep): New; run dh_installdirs twice: first normally, and again for the systemd unit file directory. Closes: #1069689 Reported-By: Helmut Grohne <helmut@subdivi.de> Thanks: Helmut Grohne <helmut@subdivi.de> for report and analysis	Teddy Hogeborn	10 hours ago
1288	Fix #1079588 by not outputting to stdout in maintainer scrip... Fix #1079588 by not outputting to stdout in maintainer scripts From The Debconf Programmer's Tutorial: "Anything your maintainer scripts output to standard output is passed into the frontend as a command". We must make sure to redirect stdout to stderr for every command in the postinst and postrm scripts which might output to stdout. * debian/mandos-client.postinst (update_initramfs): Add "1>&2" to invocations of update-initramfs and /etc/kernel/postinst.d/dracut. (add_mandos_user): Add "1>&2" to invocations of usermod, groupmod, and adduser. (create_keys): Add "1>&2" to invocations of mandos-keygen, gpg-connect-agent, certtool, and openssl. (create_dh_params): Add "1>&2" to invocations of certtool and openssl. Add "--force" option to "rm". * debian/mandos-client.postrm (update_initramfs): Add "1>&2" to invocations of update-initramfs and /etc/kernel/postinst.d/dracut. Closes: #1079588 Reported-By: Ben Hutchings <ben@decadent.org.uk>	Teddy Hogeborn	12 hours ago
1287	Use new package name "libgpgme11t64" when available Use new package name "libgpgme11t64" when available * initramfs-tools-hook (libgpgme11_version): Add "libgpgme11t64" as an alternative to libgpgme11. Closes: #1077927 Reported-By: Aaron D. Johnson <debbugreporter@fnord.greeley.co.us> Suggested-by: Aaron D. Johnson <debbugreporter@fnord.greeley.co.us> Closes-Bug: #2068014 Reported-By: Christian Rusa <christian@rusa.at> Suggested-by: Christian Rusa <christian@rusa.at>	Teddy Hogeborn	13 hours ago
1286	Use new package name "libgnutls30t64" when available Use new package name "libgnutls30t64" when available * debian/control (Package: mandos/Depends): Add "libgnutls30t64" as an alternative to libgnutls30. Reported-By: Bastian Germann <Bastian.Germann@gmx.de> Suggested-by: Bastian Germann <Bastian.Germann@gmx.de>	Teddy Hogeborn	13 hours ago
1285	Prefer the systemd-dev package as a build dependency Prefer the systemd-dev package as a build dependency When building, we only need the systemd.pc pkgconfig file, and systemd-dev is a new package which, if available, contains that file without bringing in the whole of systemd. So prefer using that package as a build dependency. * debian/control (Source: mandos/Build-Depends): Change "systemd" to "systemd-dev \| systemd". Closes: #1060546 Reported-By: Michael Biebl <biebl@debian.org>	Teddy Hogeborn	14 hours ago
1284	Be more tolerant when a client is misconfigured in clients.c... Be more tolerant when a client is misconfigured in clients.conf * mandos (Client/config_parser): If a client config section in clients.conf lacks both a fingerprint= and a key_id= setting, show an error and skip that client instead of crashing.	Teddy Hogeborn	14 hours ago
1283	Fix file permissions when installing a new kernel, with drac... Fix file permissions when installing a new kernel, with dracut * debian/mandos-client.postinst (update_initramfs): When using dracut, but the initramfs image file does not yet exist (due to the kernel package not having been configured), create a new empty file with the correct permissions, so that dracut will use the correct permissions when creating the initramfs image file.	Teddy Hogeborn	14 hours ago
1282	Remove obsolete "gnupg2" dependency (Debian bug #1055402) Remove obsolete "gnupg2" dependency (Debian bug #1055402) * debian/control (Package: mandos/Depends): Remove "gnupg2 \|". Closes: #1055402 Reported-By: Andreas Metzler <ametzler@bebt.de>	Teddy Hogeborn	15 hours ago
1281	Fix Y2038 Fix Y2038 * Makefile (CPPFLAGS): Add "-D_TIME_BITS=64".	Teddy Hogeborn	16 hours ago
1280	Very minor security improvement when uninstalling package Very minor security improvement when uninstalling package * debian/mandos-client.postrm: Also shred(1) tls-privkkey.pem.	Teddy Hogeborn	16 hours ago
1279	Document how to add options to mandos-client when using drac... Document how to add options to mandos-client when using dracut * debian/mandos-client.README.Debian: Remove unnecessary word "simply". Also add instructions on how to add the --connect= options to mandos-client when using dracut. * dracut-module/ask-password-mandos.service ([Service]): Add comments that this file should not be modified, and explicit instructions on how to instead add extra options, like --debug, to mandos-client: using a systemd override unit file to set an environment variable.	Teddy Hogeborn	16 hours ago
1278	Minor documentation improvements Minor documentation improvements * TODO (mandos-applet): Add link. * debian/mandos-client.README.Debian: Fix spelling.	Teddy Hogeborn	17 hours ago
1277	Improve documentation Improve documentation * mandos.conf.xml (DESCRIPTION): Remove the unnecessary word "simple". * plugin-runner.xml (PLUGINS): Remove the unnecessary word "simply", and add the "executable" qualifier to the description of plugins. * mandos-client.xml (DESCRIPTION, OPTIONS): Do not refer to "plugin-runner"; instead refer to the section "OVERVIEW". (OVERVIEW): Don't only describe plugin-runner; also describe how password-agent can start mandos-client. (EXAMPLE): Do not refer to "plugin-runner"; instead refer to the section "OVERVIEW". (SEE ALSO): Replace reference to "password-prompt" with "password-agent".	Teddy Hogeborn	17 hours ago
1276	Improve formatting in mandos-ctl; no code changes Improve formatting in mandos-ctl; no code changes * mandos-ctl: Add empty lines, break long lines, remove superflous empty lines, spaces and dead code.	Teddy Hogeborn	17 hours ago
1275	Move D-Bus policy file to /usr/share/dbus-1/session.d Move D-Bus policy file to /usr/share/dbus-1/session.d According to dbus-daeemon(1), the correct place for D-Bus policy files is not "/etc/dbus-1/session.d" but "/usr/share/dbus-1/session.d" (and Lintian 2.116.0 warns about this). Therefore, move the file. * Makefile (DBUSPOLICYDIR): New; set to "$(DESTDIR)/usr/share/dbus-1/system.d". (install-server): Use $(DBUSPOLICYDIR). * debian/mandos.dirs (etc/dbus-1/system.d): Remove. (usr/share/dbus-1/system.d): New. * debian/mandos.maintscript: New.	Teddy Hogeborn	1 year ago
1274	Suppress warnings Suppress warnings Suppress warnings about mlock()ing uninitialized memory and reading an ievent struct. * dracut-module/password-agent.c (send_password_to_socket): Suppress "-Wmaybe-uninitialized" when mlock()ing password send buffer. (test_read_inotify_event_IN_DELETE_badname): When reading from a struct ievent, suppress "-Wstringop-overread".	Teddy Hogeborn	1 year ago
1273	Really enable FORTIFY_SOURCE=3 Really enable FORTIFY_SOURCE=3 Use -DFORTIFY_SOURCE=3 by appending it to CPPFLAGS directly instead of adding it indirectly to CFLAGS. * Makefile (FORTIFY): Remove "-D_FORTIFY_SOURCE=3". (Fortify section/CPPFLAGS): New; append "-D_FORTIFY_SOURCE=3". (FEATURES): Remove. Contents moved to CPPFLAGS. (CPPFLAGS): New; append "-D_FILE_OFFSET_BITS=64". (CFLAGS): Do not use "$(FEATURES)".	Teddy Hogeborn	1 year ago
1272	Merge from release branch Merge from release branch	Teddy Hogeborn	1 year ago

Older »