/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to debian/mandos-client.lintian-overrides

  • Committer: Teddy Hogeborn
  • Date: 2014-06-22 02:19:30 UTC
  • Revision ID: teddy@recompile.se-20140622021930-icl7h4cm97blhjml
mandos-keygen: Generate "checker" option to use SSH fingerprints.

To turn this off, use a new "--no-ssh" option to mandos-keygen.

* INSTALL (Mandos Server, Mandos Client): Document new suggested
                                          installation of SSH.
* Makefile (confdir/clients.conf): Use new "--no-ssh" option to
                                   "mandos-keygen".
* debian/control (mandos/Depends): Changed to "fping | ssh-client".
  (mandos-client/Recommends): New; set to "ssh".
* intro.xml (FREQUENTLY ASKED QUESTIONS): Rename and rewrite section
                                          called "Faking ping
                                          replies?" to address new
                                          default behavior.
* mandos-clients.conf.xml (OPTIONS/checker): Briefly discuss new
                                             behavior of
                                             mandos-keygen.
* mandos-keygen: Bug fix: Suppress failure output of "shred" to remove
                 "sec*", since no such files may exist.
 (password mode): Scan for SSH key fingerprints and output as new
                  "checker" and "ssh_fingerprint" options, unless new
                  "--no-ssh" option is given.
* mandos-keygen.xml (SYNOPSIS/--force): Bug fix: Document short form.
  (OPTIONS/--no-ssh): New.
  (SEE ALSO): Add reference "ssh-keyscan(1)".
* plugins.d/mandos-client.xml (SECURITY): Briefly mention the
                                          possibility of using SSH key
                                          fingerprints for checking.

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/mandos-client.lintian-overrides
8
8
# allow anyone to run them.
9
9
#
10
10
mandos-client binary: non-standard-dir-perm usr/lib/*/mandos/plugins.d/ 0700 != 0755
11
 
# Likewise for helper executables for plugins
12
 
mandos-client binary: non-standard-dir-perm usr/lib/*/mandos/plugin-helpers/ 0700 != 0755
13
11
 
14
12
# These binaries must be setuid root, since they need root powers, but
15
13
# are started by plugin-runner(8mandos), which runs all plugins as
28
26
# /usr/lib/<arch>/mandos/plugins.d, and must be likewise protected.
29
27
#
30
28
mandos-client binary: non-standard-dir-perm etc/mandos/plugins.d/ 0700 != 0755
31
 
# Likewise for plugin-helpers directory
32
 
mandos-client binary: non-standard-dir-perm etc/mandos/plugin-helpers/ 0700 != 0755
33
 
 
34
 
# The debconf templates is only used for displaying information
35
 
# detected in the postinst, not for saving answers to questions, so we
36
 
# don't need a .config file.
37
 
mandos-client binary: no-debconf-config
38
 
 
39
 
# The notice displayed from the postinst script really is critical
40
 
mandos-client binary: postinst-uses-db-input
41
 
 
42
 
# These are very important to work around bugs or changes in the old
43
 
# versions, and there is no pressing need to remove them.
44
 
mandos-client binary: maintainer-script-supports-ancient-package-version *