/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to dbus-mandos.conf

  • Committer: Teddy Hogeborn
  • Date: 2011-11-26 20:59:56 UTC
  • mto: (518.1.8 mandos-persistent)
  • mto: This revision was merged to the branch mainline in revision 524.
  • Revision ID: teddy@recompile.se-20111126205956-vft6g0z2i6my0165
Use GPG to encrypt instead of AES.

* Makefile (run-server): Use "--no-restore" option.
* debian/control (mandos/Depends): Added "python-gnupginterface".
* mandos: (CryptoError, Crypto): New; uses GPG.
  (Client.encrypt_secret, Client.decrypt_secret): Removed.
  (ClientHandler.fingerprint): Use binascii.hexlify().
  (main): Use Crypto class to decrypt.
  (main/cleanup): Use Crypto class to encrypt.  Handle EACCES.

Show diffs side-by-side

added added

removed removed

Lines of Context:
dbus-mandos.conf
 
1
<!DOCTYPE busconfig PUBLIC
 
2
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 
3
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 
4
<busconfig>
 
5
 
 
6
  <policy group="_mandos">
 
7
    <allow own="se.bsnet.fukt.Mandos"/>
 
8
    <allow send_destination="se.bsnet.fukt.Mandos"/>
 
9
    <allow receive_sender="se.bsnet.fukt.Mandos"/>
 
10
    <allow own="se.recompile.Mandos"/>
 
11
    <allow send_destination="se.recompile.Mandos"/>
 
12
    <allow receive_sender="se.recompile.Mandos"/>
 
13
  </policy>
 
14
  
 
15
  <policy user="root">
 
16
    <allow own="se.bsnet.fukt.Mandos"/>
 
17
    <allow send_destination="se.bsnet.fukt.Mandos"/>
 
18
    <allow receive_sender="se.bsnet.fukt.Mandos"/>
 
19
    <allow own="se.recompile.Mandos"/>
 
20
    <allow send_destination="se.recompile.Mandos"/>
 
21
    <allow receive_sender="se.recompile.Mandos"/>
 
22
  </policy>
 
23
 
 
24
</busconfig>