/mandos/trunk : changes

» Changes to client-cert.pem from revision 1285

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1285 to 1266

expand all

Rev	Summary	Authors	Date
1285	Prefer the systemd-dev package as a build dependency Prefer the systemd-dev package as a build dependency When building, we only need the systemd.pc pkgconfig file, and systemd-dev is a new package which, if available, contains that file without bringing in the whole of systemd. So prefer using that package as a build dependency. * debian/control (Source: mandos/Build-Depends): Change "systemd" to "systemd-dev \| systemd". Closes: #1060546 Reported-By: Michael Biebl <biebl@debian.org>	Teddy Hogeborn	23 minutes ago
1284	Be more tolerant when a client is misconfigured in clients.c... Be more tolerant when a client is misconfigured in clients.conf * mandos (Client/config_parser): If a client config section in clients.conf lacks both a fingerprint= and a key_id= setting, show an error and skip that client instead of crashing.	Teddy Hogeborn	44 minutes ago
1283	Fix file permissions when installing a new kernel, with drac... Fix file permissions when installing a new kernel, with dracut * debian/mandos-client.postinst (update_initramfs): When using dracut, but the initramfs image file does not yet exist (due to the kernel package not having been configured), create a new empty file with the correct permissions, so that dracut will use the correct permissions when creating the initramfs image file.	Teddy Hogeborn	48 minutes ago
1282	Remove obsolete "gnupg2" dependency (Debian bug #1055402) Remove obsolete "gnupg2" dependency (Debian bug #1055402) * debian/control (Package: mandos/Depends): Remove "gnupg2 \|". Closes: #1055402 Reported-By: Andreas Metzler <ametzler@bebt.de>	Teddy Hogeborn	55 minutes ago
1281	Fix Y2038 Fix Y2038 * Makefile (CPPFLAGS): Add "-D_TIME_BITS=64".	Teddy Hogeborn	2 hours ago
1280	Very minor security improvement when uninstalling package Very minor security improvement when uninstalling package * debian/mandos-client.postrm: Also shred(1) tls-privkkey.pem.	Teddy Hogeborn	2 hours ago
1279	Document how to add options to mandos-client when using drac... Document how to add options to mandos-client when using dracut * debian/mandos-client.README.Debian: Remove unnecessary word "simply". Also add instructions on how to add the --connect= options to mandos-client when using dracut. * dracut-module/ask-password-mandos.service ([Service]): Add comments that this file should not be modified, and explicit instructions on how to instead add extra options, like --debug, to mandos-client: using a systemd override unit file to set an environment variable.	Teddy Hogeborn	2 hours ago
1278	Minor documentation improvements Minor documentation improvements * TODO (mandos-applet): Add link. * debian/mandos-client.README.Debian: Fix spelling.	Teddy Hogeborn	2 hours ago
1277	Improve documentation Improve documentation * mandos.conf.xml (DESCRIPTION): Remove the unnecessary word "simple". * plugin-runner.xml (PLUGINS): Remove the unnecessary word "simply", and add the "executable" qualifier to the description of plugins. * mandos-client.xml (DESCRIPTION, OPTIONS): Do not refer to "plugin-runner"; instead refer to the section "OVERVIEW". (OVERVIEW): Don't only describe plugin-runner; also describe how password-agent can start mandos-client. (EXAMPLE): Do not refer to "plugin-runner"; instead refer to the section "OVERVIEW". (SEE ALSO): Replace reference to "password-prompt" with "password-agent".	Teddy Hogeborn	2 hours ago
1276	Improve formatting in mandos-ctl; no code changes Improve formatting in mandos-ctl; no code changes * mandos-ctl: Add empty lines, break long lines, remove superflous empty lines, spaces and dead code.	Teddy Hogeborn	3 hours ago
1275	Move D-Bus policy file to /usr/share/dbus-1/session.d Move D-Bus policy file to /usr/share/dbus-1/session.d According to dbus-daeemon(1), the correct place for D-Bus policy files is not "/etc/dbus-1/session.d" but "/usr/share/dbus-1/session.d" (and Lintian 2.116.0 warns about this). Therefore, move the file. * Makefile (DBUSPOLICYDIR): New; set to "$(DESTDIR)/usr/share/dbus-1/system.d". (install-server): Use $(DBUSPOLICYDIR). * debian/mandos.dirs (etc/dbus-1/system.d): Remove. (usr/share/dbus-1/system.d): New. * debian/mandos.maintscript: New.	Teddy Hogeborn	1 year ago
1274	Suppress warnings Suppress warnings Suppress warnings about mlock()ing uninitialized memory and reading an ievent struct. * dracut-module/password-agent.c (send_password_to_socket): Suppress "-Wmaybe-uninitialized" when mlock()ing password send buffer. (test_read_inotify_event_IN_DELETE_badname): When reading from a struct ievent, suppress "-Wstringop-overread".	Teddy Hogeborn	1 year ago
1273	Really enable FORTIFY_SOURCE=3 Really enable FORTIFY_SOURCE=3 Use -DFORTIFY_SOURCE=3 by appending it to CPPFLAGS directly instead of adding it indirectly to CFLAGS. * Makefile (FORTIFY): Remove "-D_FORTIFY_SOURCE=3". (Fortify section/CPPFLAGS): New; append "-D_FORTIFY_SOURCE=3". (FEATURES): Remove. Contents moved to CPPFLAGS. (CPPFLAGS): New; append "-D_FILE_OFFSET_BITS=64". (CFLAGS): Do not use "$(FEATURES)".	Teddy Hogeborn	1 year ago
1272	Merge from release branch Merge from release branch	Teddy Hogeborn	1 year ago
1271	Update Debian Policy version to 4.6.2; no other changes nece... Update Debian Policy version to 4.6.2; no other changes necessary. * debian/control (Standards-Version): Change to "4.6.2".	Teddy Hogeborn	1 year ago
1270	Fix issue with french translation Fix issue with french translation Initial white space was missing in both msgid and msgstr of the french translation, leading to checking tools reporing an incomplete translation. * debian/po/fr.po: Add missing whitespace to the id and translation for msgid " key_id = <HEXSTRING>".	Teddy Hogeborn	1 year ago
1269	From: Paulo Henrique de Lima Santana <phls@debian.org> From: Paulo Henrique de Lima Santana <phls@debian.org> Add Brazilian Portuguese debconf translation * debian/po/pt_BR.po: New. Closes: #1026400 Acked-by: Teddy Hogeborn <teddy@recompile.se>	Teddy Hogeborn	1 year ago
1268	Server: Bug fix: Stagger checker runs when creating clients Server: Bug fix: Stagger checker runs when creating clients * mandos (Client.enable()): Do not set self.expires here; move it to "init_checker". (Client.init_checker()): Take new "randomize_start" argument. If True, randomize delay before starting checker. Also, do not start checker right now, but instead extend expire time so that the scheduled checker always has time to run. (Checker.start_checker): Take new "start_was_randomized" argument. If True, reset scheduled checker runs to be 'interval' apart, instead of using the initial delay. (Bug fix) (main): On startup, pass argument randomize_start=True to client.init_checker() when initizlizing checkers for all enabled clients. Reported-by: Louis Charreau <Louis.Charreau@vadesecure.com> Suggested-by: Louis Charreau <Louis.Charreau@vadesecure.com> Fixes: 1200 ("Server: Stagger checker runs when creating clients")	Teddy Hogeborn	1 year ago
1267	Improve POSIX shell compatibility Improve POSIX shell compatibility * dracut-module/password-agent.c (test_start_mandos_client_helper_directory): Use the "printf" shell command instead of "echo".	Teddy Hogeborn	1 year ago
1266	Make builds reproducible Make builds reproducible * debian/rules (override_dh_fixperms-arch): Exclude from dh_fixperms only what is inside the /usr/share/doc/mandos-client/examples/network-hooks.d/ directory. That is, do not exclude (i.e. include in the normal dh_fixperms) the example/network-hooks.d directory itself.	Teddy Hogeborn	1 year ago

Older »