/mandos/trunk : changes

» Changes from revision 1332

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1332 to 1313

expand all

Rev	Summary	Authors	Date
1332	Add copyright entry for the COPYRIGHT file itself Add copyright entry for the COPYRIGHT file itself * debian/copyright (Files: COPYRIGHT): New.	Teddy Hogeborn	6 hours ago
1331	Remove white space at end of most lines Remove white space at end of most lines Remove white space at end of most lines. Except for where it is significant, like in shell script "here documents" where the delimiter word is prefixed by "-", in block comments, and in config file example settings. Also not in README files, the INSTALL file, the DBUS-API file, or the COPYING file (the last of which was copied verbatim from FSF). * dbus-mandos.conf: Remove white space at end of lines. * debian/mandos-client.postinst: - '' - * debian/mandos-client.templates: - '' - * debian/mandos.postinst: - '' - * dracut-module/password-agent.c: - '' - * dracut-module/password-agent.xml: - '' - * intro.xml: - '' - * legalnotice.xml: - '' - * mandos-clients.conf.xml: - '' - * mandos-ctl.xml: - '' - * mandos-keygen: - '' - * mandos-keygen.xml: - '' - * mandos-monitor.xml: - '' - * mandos-options.xml: - '' - * mandos.conf.xml: - '' - * mandos.xml: - '' - * network-hooks.d/wireless: - '' - * plugin-helpers/mandos-client-iprouteadddel.c: - '' - * plugin-runner.c: - '' - * plugin-runner.xml: - '' - * plugins.d/askpass-fifo.c: - '' - * plugins.d/askpass-fifo.xml: - '' - * plugins.d/mandos-client.c: - '' - * plugins.d/mandos-client.xml: - '' - * plugins.d/password-prompt.c: - '' - * plugins.d/password-prompt.xml: - '' - * plugins.d/plymouth.c: - '' - * plugins.d/plymouth.xml: - '' - * plugins.d/splashy.c: - '' - * plugins.d/splashy.xml: - '' - * plugins.d/usplash.c: - '' - * plugins.d/usplash.xml: - '' -	Teddy Hogeborn	6 hours ago
1330	Add systemd dependency on dbus.socket Add systemd dependency on dbus.socket If the Mandos server is installed at the exact same time that the D-Bus daemon is being installed, it is possible that the D-Bus daemon is installed, but, crucially, not configured or started, when the Mandos server is started. This makes the Mandos server fail to start, since it can't connect to the D-Bus system bus. This is only a problem at that first install time; if the system is restarted, everything works. I.e. it is not a problem in the most common case where the Mandos server is installed after the D-Bus server has already been installed and is running. However, it can sometimes be a problem. In particular, this seems to be a problem on the Debian CI servers, which installs all required packages at the same time. For Debian packages, for strict dependencies, there is a solution for this in the "Pre-Depends" header in the Debian package "control" file (deb-control(5)). There is, however, no such analogous thing for non-strict dependencies. The Mandos server does not have a strict dependency on a D-Bus daemon (since a Mandos server can be configured to run without using D-Bus at all), so we do not want to introduce such a dependency. Debian package dependencies are hard for system administrators to override, but a systemd service options are relatively easy to overide. Therefore, as far as I know, adding this systemd dependency is all we can do, currently. * mandos.service ([Unit]/After): Add "dbus.socket".	Teddy Hogeborn	7 hours ago
1329	Add some missing documentation Add some missing documentation Add missing documentation of "foreground" and "zeroconf" options in mandos.conf(5). * mandos.conf.xml (OPTIONS): Add links to "foreground" and "zeroconf" options in mandos-options.xml.	Teddy Hogeborn	9 hours ago
1328	Use "IFS= read" in shell scripts Use "IFS= read" in shell scripts In shell scripts, when using the "read" built-in, prefix it with IFS= whenever we want to avoid stripping white space from start and end of input. * initramfs-tools-hook: Use "IFS= read" when reading file names from network hooks.	Teddy Hogeborn	10 hours ago
1327	Fix spelling Fix spelling Fix name of the "Guile-GnuTLS" project. * plugins.d/mandos-client.c (start_mandos_communication): In comment, fix name of "Guile-GnuTLS" project.	Teddy Hogeborn	10 hours ago
1326	Fix kernel command line option "mandos=connect:<ip>:<port>" ... Fix kernel command line option "mandos=connect:<ip>:<port>" with dracut When using dracut, the kernel command line option "mandos=connect:<ip>:<port>" is ignored entirely. Fix this. * Makefile (install-client-nokey, uninstall-client): Install (and uninstall) "dracut-module/cmdline-mandos-systemd.sh". * debian/mandos-client.lintian-overrides (mandos-client binary): Added "executable-in-usr-lib [usr/lib/dracut/modules.d/90mandos/cmdline-mandos-systemd.sh]" * dracut-module/ask-password-mandos.service ([Service]/ExecStart): Append "$MANDOS_CLIENT_CONNECT". * dracut-module/cmdline-mandos-systemd.sh: New file. * dracut-module/cmdline-mandos.sh: If the "mandos=connect:<ip>:<port>" kernel command line option is used, append suitable options to /etc/mandos/plugin-runner.conf. * dracut-module/module-setup.sh: Install dracut "cmdline" hook "cmdline-mandos-systemd.sh".	Teddy Hogeborn	16 days ago
1325	debian/copyright: Describe files' copyright and licencing debian/copyright: Describe files' copyright and licencing Some example scripts are offered not under the GNU GPL, but instead under the GNU All-Permissive License (licence code FSFAP, compatible with the GNU GPL). Also, some contributed translations, while still licenced under the same licence as Mandos itself, i.e. GPL-3+, were contributed having their own copyright holders. This was not described in the debian/copyright file, * debian/copyright: Describe files' copyright and licencing. Closes: #1134602 Reported-By: Bastian Germann <bage@debian.org>	Teddy Hogeborn	25 days ago
1324	mandos-monitor: Improve checker result messages in log mandos-monitor: Improve checker result messages in log * mandos-monitor (MandosClientWidget.checker_completed): Move verb to beginning of line so that is still visible when text lines are not wrapped.	Teddy Hogeborn	1 month ago
1323	mandos-keygen: Do not strip whitespace from beginning and en... mandos-keygen: Do not strip whitespace from beginning and end of password * mandos-keygen (password): Use empty IFS when reading password. * mandos-keygen.xml (BUGS): Remove documentation of bug.	Teddy Hogeborn	6 months ago
1322	From: Carles Pina i Estany <carles@pina.cat> From: Carles Pina i Estany <carles@pina.cat> Add Catalan debconf translation * debian/po/ca.po: New. Closes: #1118977 Acked-by: Teddy Hogeborn <teddy@recompile.se>	Teddy Hogeborn	6 months ago
1321	Merge from release branch Merge from release branch	Teddy Hogeborn	10 months ago
1320	Update Debian Policy version to 4.7.2; no other changes nece... Update Debian Policy version to 4.7.2; no other changes necessary. * debian/control (Standards-Version): Change to "4.7.2".	Teddy Hogeborn	10 months ago
1319	Update copyright year Update copyright year * dracut-module/ask-password-mandos.service: Update copyright year to 2024. * dracut-module/password-agent.c: Update copyright year to 2023. * initramfs-unpack: Update copyright year to 2024. * mandos: - '' - * mandos-clients.conf.xml: Update copyright year to 2023. * mandos-ctl: Update copyright year to 2024. * mandos-keygen: - '' - * mandos-monitor: - '' - * mandos.conf.xml: - '' - * mandos.xml: Update copyright year to 2022. * plugin-runner.xml: Update copyright year to 2024. * plugins.d/mandos-client.xml: - '' - * plugins.d/plymouth.c: - '' -	Teddy Hogeborn	10 months ago
1318	debian/control: Require cryptsetup support in systemd debian/control: Require cryptsetup support in systemd * debian/control (Package: mandos-client/Depends): Add dependency on "systemd-cryptsetup" (for newer systemd), or "systemd (<< 256-2)" for when cryptsetup support was included in the systemd package itself, or "sysvinit-core" for installations without systemd.	Teddy Hogeborn	11 months ago
1317	debian/control: Remove suggestion of Python 2.6 debian/control: Remove suggestion of Python 2.6 * debian/control (Package: mandos/Suggests) Remove suggestion of old Python 2.6 (for IN.SO_BINDTODEVICE); it upsets package analysis tools to see references to Python 2. Closes: #1107761 Reported-By: Alexandre Detiste <alexandre.detiste@gmail.com> Suggested-By: Alexandre Detiste <alexandre.detiste@gmail.com>	Teddy Hogeborn	11 months ago
1316	Merge from release branch Merge from release branch	Teddy Hogeborn	1 year ago
1315	mandos-keygen: Show warning about old OpenSSH versions mandos-keygen: Show warning about old OpenSSH versions When generating a config file snippet on the Mandos client system using mandos-keygen, and the default ssh-keyscan checker is used, and if the OpenSSH version is 9.8 or later, the "checker" command generated for the config file on the Mandos server will include the "-q" option for ssh-keyscan. This option did not exist on ssh-keyscan from OpenSSH older than version 9.8. Therefore, if the Mandos server is running an older version of OpenSSH, where ssh-keyscan does not support the "-q" option, this option must be removed from the generated "checker" setting. Since we cannot know if this is the case when running mandos-keygen on the Mandos client system, we print this information as a comment above the generated "checker" setting. * mandos-keygen: Show warning if the new "-q" options was used with ssh-keyscan in the generated "checker" setting.	Teddy Hogeborn	1 year ago
1314	mandos-monitor: avoid deprecation warnings from urwid mandos-monitor: avoid deprecation warnings from urwid The urwid.FlowWidget class is deprecated. Replace it with inheriting from urwid.Widget, and setting the appropriate class attribute. * mandos-monitor: Replace any mentions of urwid.FlowWidget with urwid.Widget. (MandosClientWidget): Inherit from "urwid.Widget" instead of "urwid.FlowWidget". Also, move MandosClientPropertyCache to first in inheritance list so that its __init__ method can absorb the "proxy_object" and "properties" keyword arguments. (MandosClientWidget._sizing): New class attribute; set to "frozenset(["flow"])". (Thanks to an anonymous contributor for reporting this.)	Teddy Hogeborn	1 year ago
1313	mandos-monitor: Avoid debug messages from urwid mandos-monitor: Avoid debug messages from urwid Avoid debug messages from urwid. Any logging output before the screen has been set up will mangle the screen. * mandos-monitor: When setting up logging, set urwid to only show log messages of level INFO or above. (Thanks to an anonymous contributor for reporting this.)	Teddy Hogeborn	1 year ago

Older »