/mandos/trunk : changes

» Changes from revision 1329

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1329 to 1310

expand all

Rev	Summary	Authors	Date
1329	Add some missing documentation Add some missing documentation Add missing documentation of "foreground" and "zeroconf" options in mandos.conf(5). * mandos.conf.xml (OPTIONS): Add links to "foreground" and "zeroconf" options in mandos-options.xml.	Teddy Hogeborn	1 hour ago
1328	Use "IFS= read" in shell scripts Use "IFS= read" in shell scripts In shell scripts, when using the "read" built-in, prefix it with IFS= whenever we want to avoid stripping white space from start and end of input. * initramfs-tools-hook: Use "IFS= read" when reading file names from network hooks.	Teddy Hogeborn	2 hours ago
1327	Fix spelling Fix spelling Fix name of the "Guile-GnuTLS" project. * plugins.d/mandos-client.c (start_mandos_communication): In comment, fix name of "Guile-GnuTLS" project.	Teddy Hogeborn	2 hours ago
1326	Fix kernel command line option "mandos=connect:<ip>:<port>" ... Fix kernel command line option "mandos=connect:<ip>:<port>" with dracut When using dracut, the kernel command line option "mandos=connect:<ip>:<port>" is ignored entirely. Fix this. * Makefile (install-client-nokey, uninstall-client): Install (and uninstall) "dracut-module/cmdline-mandos-systemd.sh". * debian/mandos-client.lintian-overrides (mandos-client binary): Added "executable-in-usr-lib [usr/lib/dracut/modules.d/90mandos/cmdline-mandos-systemd.sh]" * dracut-module/ask-password-mandos.service ([Service]/ExecStart): Append "$MANDOS_CLIENT_CONNECT". * dracut-module/cmdline-mandos-systemd.sh: New file. * dracut-module/cmdline-mandos.sh: If the "mandos=connect:<ip>:<port>" kernel command line option is used, append suitable options to /etc/mandos/plugin-runner.conf. * dracut-module/module-setup.sh: Install dracut "cmdline" hook "cmdline-mandos-systemd.sh".	Teddy Hogeborn	15 days ago
1325	debian/copyright: Describe files' copyright and licencing debian/copyright: Describe files' copyright and licencing Some example scripts are offered not under the GNU GPL, but instead under the GNU All-Permissive License (licence code FSFAP, compatible with the GNU GPL). Also, some contributed translations, while still licenced under the same licence as Mandos itself, i.e. GPL-3+, were contributed having their own copyright holders. This was not described in the debian/copyright file, * debian/copyright: Describe files' copyright and licencing. Closes: #1134602 Reported-By: Bastian Germann <bage@debian.org>	Teddy Hogeborn	25 days ago
1324	mandos-monitor: Improve checker result messages in log mandos-monitor: Improve checker result messages in log * mandos-monitor (MandosClientWidget.checker_completed): Move verb to beginning of line so that is still visible when text lines are not wrapped.	Teddy Hogeborn	1 month ago
1323	mandos-keygen: Do not strip whitespace from beginning and en... mandos-keygen: Do not strip whitespace from beginning and end of password * mandos-keygen (password): Use empty IFS when reading password. * mandos-keygen.xml (BUGS): Remove documentation of bug.	Teddy Hogeborn	6 months ago
1322	From: Carles Pina i Estany <carles@pina.cat> From: Carles Pina i Estany <carles@pina.cat> Add Catalan debconf translation * debian/po/ca.po: New. Closes: #1118977 Acked-by: Teddy Hogeborn <teddy@recompile.se>	Teddy Hogeborn	6 months ago
1321	Merge from release branch Merge from release branch	Teddy Hogeborn	10 months ago
1320	Update Debian Policy version to 4.7.2; no other changes nece... Update Debian Policy version to 4.7.2; no other changes necessary. * debian/control (Standards-Version): Change to "4.7.2".	Teddy Hogeborn	10 months ago
1319	Update copyright year Update copyright year * dracut-module/ask-password-mandos.service: Update copyright year to 2024. * dracut-module/password-agent.c: Update copyright year to 2023. * initramfs-unpack: Update copyright year to 2024. * mandos: - '' - * mandos-clients.conf.xml: Update copyright year to 2023. * mandos-ctl: Update copyright year to 2024. * mandos-keygen: - '' - * mandos-monitor: - '' - * mandos.conf.xml: - '' - * mandos.xml: Update copyright year to 2022. * plugin-runner.xml: Update copyright year to 2024. * plugins.d/mandos-client.xml: - '' - * plugins.d/plymouth.c: - '' -	Teddy Hogeborn	10 months ago
1318	debian/control: Require cryptsetup support in systemd debian/control: Require cryptsetup support in systemd * debian/control (Package: mandos-client/Depends): Add dependency on "systemd-cryptsetup" (for newer systemd), or "systemd (<< 256-2)" for when cryptsetup support was included in the systemd package itself, or "sysvinit-core" for installations without systemd.	Teddy Hogeborn	11 months ago
1317	debian/control: Remove suggestion of Python 2.6 debian/control: Remove suggestion of Python 2.6 * debian/control (Package: mandos/Suggests) Remove suggestion of old Python 2.6 (for IN.SO_BINDTODEVICE); it upsets package analysis tools to see references to Python 2. Closes: #1107761 Reported-By: Alexandre Detiste <alexandre.detiste@gmail.com> Suggested-By: Alexandre Detiste <alexandre.detiste@gmail.com>	Teddy Hogeborn	11 months ago
1316	Merge from release branch Merge from release branch	Teddy Hogeborn	1 year ago
1315	mandos-keygen: Show warning about old OpenSSH versions mandos-keygen: Show warning about old OpenSSH versions When generating a config file snippet on the Mandos client system using mandos-keygen, and the default ssh-keyscan checker is used, and if the OpenSSH version is 9.8 or later, the "checker" command generated for the config file on the Mandos server will include the "-q" option for ssh-keyscan. This option did not exist on ssh-keyscan from OpenSSH older than version 9.8. Therefore, if the Mandos server is running an older version of OpenSSH, where ssh-keyscan does not support the "-q" option, this option must be removed from the generated "checker" setting. Since we cannot know if this is the case when running mandos-keygen on the Mandos client system, we print this information as a comment above the generated "checker" setting. * mandos-keygen: Show warning if the new "-q" options was used with ssh-keyscan in the generated "checker" setting.	Teddy Hogeborn	1 year ago
1314	mandos-monitor: avoid deprecation warnings from urwid mandos-monitor: avoid deprecation warnings from urwid The urwid.FlowWidget class is deprecated. Replace it with inheriting from urwid.Widget, and setting the appropriate class attribute. * mandos-monitor: Replace any mentions of urwid.FlowWidget with urwid.Widget. (MandosClientWidget): Inherit from "urwid.Widget" instead of "urwid.FlowWidget". Also, move MandosClientPropertyCache to first in inheritance list so that its __init__ method can absorb the "proxy_object" and "properties" keyword arguments. (MandosClientWidget._sizing): New class attribute; set to "frozenset(["flow"])". (Thanks to an anonymous contributor for reporting this.)	Teddy Hogeborn	1 year ago
1313	mandos-monitor: Avoid debug messages from urwid mandos-monitor: Avoid debug messages from urwid Avoid debug messages from urwid. Any logging output before the screen has been set up will mangle the screen. * mandos-monitor: When setting up logging, set urwid to only show log messages of level INFO or above. (Thanks to an anonymous contributor for reporting this.)	Teddy Hogeborn	1 year ago
1312	Debian package: Avoid suggesting a C compiler unnecessarily Debian package: Avoid suggesting a C compiler unnecessarily The list of suggested packages, meant to enable the "mandos" program to find the correct value of SO_BINDTODEVICE by using a C compiler, are not necessary when Python 3.3 or later is used, since it has the SO_BINDTODEVICE constant defined in the "socket" module. Also, Python 2.6 or older has the same constant in the old "IN" module. Therefore, we should suggest these Python versions as alternatives to a C compiler, so that a C compiler is not installed unnecessarily. debian/control (Package: mandos/Suggests): Add "python3 (>= 3.3)" and "python (<= 2.6)" as alternatives to "libc6-dev \| libc-dev" and "c-compiler".	Teddy Hogeborn	1 year ago
1311	mandos: Make configured network socket non-inheritable mandos: Make configured network socket non-inheritable If we are passed a pre-created created network socket as a file descriptor, we should make it non-inheritable to checkers and other subprocesses.	Teddy Hogeborn	1 year ago
1310	mandos: Avoid closing configured server network socket mandos: Avoid closing configured server network socket If we are passed a pre-created created network socket as a file descriptor, we must avoid later closing it (when stdin, stdout and stderr are dup2()ed over with /dev/null) by making sure that the network file descriptor is not 0, 1, or 2, by creating a new file descriptor if necessary. However, when we create a new file descriptor we must check that the new file descriptor is not 0, 1, or 2 either, and try again until we get a suitable file descriptor.	Teddy Hogeborn	1 year ago

Older »