1
1
This NEWS file records noteworthy changes, very tersely.
2
2
See the manual for detailed information.
4
Version 1.8.18 (2024-11-24)
6
** Detect GPGME version correctly when building initramfs.
8
** Only connect D-Bus when necessary.
9
** If a network socket is externally configured, avoid closing it, and
10
also make it non-inheritable.
11
** mandos-keygen: Support ssh-keyscan from OpenSSH 9.8 or later.
12
** mandos-monitor: Avoid debug messages and deprecation warnings from
15
Version 1.8.17 (2024-09-12)
16
* Improve documentation slightly, especially how to add extra options
17
to mandos-client when using dracut with systemd.
18
* Make life easier for distribution packagers by making sure that
19
"make install" creates all required directories.
21
** When seeing clients.conf entries lacking both fingerprint and
22
key_id, show a warning and ignore them instead of crashing,
24
** Suppress most spurious compiler warnings.
26
** In initramfs-tools-hook, be aware of new name of GPGME library,
28
** In password-agent(8mandos), look for a Plymouth process in
29
alphabetical order, not in reverse alphabetical order. This is
30
technically a user-visible change, but should never matter in
33
Version 1.8.16 (2023-02-08)
35
** Bug fix: Start client checkers after a random delay
37
Version 1.8.15 (2022-04-25)
39
** Bug fix: When running "mandos-keygen --password" to read a password
40
interactively (to save in a section in the clients.conf file),
41
backslashes in the password are no longer interpreted as backslash
43
** GnuTLS debug output no longer has a "b'" prefix.
45
Version 1.8.14 (2021-02-03)
47
** Create /dev/fd symlink (if necessary) in plugin-runner(8mandos) and
48
mandos-client(8mandos) (Workaround for Debian bug #981302)
50
Version 1.8.13 (2020-11-30)
52
** Fix unreliable test in password-agent(8mandos).
54
Version 1.8.12 (2020-07-04)
56
** Fix compatibility with the GNU C Library version 2.31.
57
** In initramfs-tools boots, only use setsid(1) when available.
59
Version 1.8.11 (2020-04-08)
61
** Fix file descriptor leak when adding or removing local routes to
62
unreachable hosts on the local network.
64
Version 1.8.10 (2020-03-21)
66
** Fix bug when setting a client's D-Bus "Secret" property
67
** Start client checkers after a random delay
68
** When using systemd, allow easier modification of server options
69
** Better log messages in mandos-monitor
71
** When using dracut & systemd, allow easier modification of options
73
Version 1.8.9 (2019-09-03)
74
* No user-visible changes
76
Version 1.8.8 (2019-08-18)
77
* No user-visible changes
79
Version 1.8.7 (2019-08-05)
81
** Always compile with LFS (Large File Support) enabled.
83
** Improve intro(8mandos) manual page to cover dracut(8) support.
85
Version 1.8.6 (2019-08-03)
87
** dracut support: In password-agent, properly ignore deleted and
88
renamed question files, and also fix memory alignment issue.
90
Version 1.8.5 (2019-07-30)
92
** Support dracut(8) as well as initramfs-tools(7).
93
** Minor bug fix: Allow the mandos-keygen --passfile option to use
94
passfiles with names starting with "-".
95
** Document known limitation of mandos-keygen --password; it strips
96
white space from start and end of the password.
98
** Bug fix: The server used to fail to restart if the "port" setting
99
was used. This has been fixed.
100
** Minor bug fix: Reap zombies left over from checker runs. (Debian
103
Version 1.8.4 (2019-04-09)
105
** Fix minor memory leak in plugin-runner.
107
** mandos-ctl now has a --debug option to show D-Bus calls.
109
Version 1.8.3 (2019-02-11)
110
* No user-visible changes.
112
Version 1.8.2 (2019-02-10)
114
** In mandos-keygen, ignore failures to remove files in some cases.
116
Version 1.8.1 (2019-02-10)
118
** Only generate TLS keys using GnuTLS' certtool, of sufficient
119
version. Key generation of TLS keys will not happen until a
120
version of GnuTLS is installed with support for raw public keys.
121
** Remove any bad keys created by 1.8.0 and openssl.
123
** On installation, edit clients.conf and remove the same bad key ID
124
which was erroneously reported by all 1.8.0 clients. Also do not
125
trust this key ID in the server.
127
4
Version 1.8.0 (2019-02-10)
129
6
** Use new TLS keys for server communication and identification.
added
removed
NEWS
