To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
- Committer: Teddy Hogeborn
- Date: 2016-03-19 04:21:00 UTC
- Revision ID: teddy@recompile.se-20160319042100-i581cfv65r934dnl
Client: Make plugin helper override directory mode u=rwx,go=
Even though it currently is not used, a local administrator might use
setuid (or setcap) executables as plugin helpers. Thus, the plugin
helper override directory (/etc/mandos/plugin-helpers) must be
secured, just as the plugin override directory (/etc/mandos/plugins.d)
is.
* Makefile (install-client-nokey): Install plugin-helper directory as
mode u=rwx.
* debian/mandos-client.lintian-overrides: Do not warn about
permissions on plugin helper directory.
* debian/mandos-client.postinst (configure): Fix permissions on plugin
helper local override directory (/etc/mandos/plugin-helpers), but
only if not listed by "dpkg-statoverride".
Even though it currently is not used, a local administrator might use
setuid (or setcap) executables as plugin helpers. Thus, the plugin
helper override directory (/etc/mandos/plugin-helpers) must be
secured, just as the plugin override directory (/etc/mandos/plugins.d)
is.
* Makefile (install-client-nokey): Install plugin-helper directory as
mode u=rwx.
* debian/mandos-client.lintian-overrides: Do not warn about
permissions on plugin helper directory.
* debian/mandos-client.postinst (configure): Fix permissions on plugin
helper local override directory (/etc/mandos/plugin-helpers), but
only if not listed by "dpkg-statoverride".
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 ..
|
|||||||
po
|
199 | 15 years ago | Teddy Hogeborn | * Makefile: Bug fix: fix syntax error. * debian/c |
|
||
|
source
|
452.1.1 | 13 years ago | Teddy Hogeborn | * debian/source/format: New; contains "3.0 (quilt) |
|
||
|
upstream
|
678 | 10 years ago | Teddy Hogeborn | Fix location and format of signing key file. * de |
|
||
changelog |
237.4.71 | 8 years ago | Teddy Hogeborn | Update version number to 1.7.6 * Makefile (versio | 21.4 KB |
|
|
|
compat |
626 | 10 years ago | Teddy Hogeborn | * Makefile (CFLAGS, LDFLAGS): Keep default flags f | 2 bytes |
|
|
|
control |
830 | 8 years ago | Teddy Hogeborn | Server: Use python-gi instead of old python-gobjec | 2.6 KB |
|
|
|
copyright |
807 | 8 years ago | Teddy Hogeborn | Update copyright year. * DBUS-API: Update copyrig | 1 KB |
|
|
|
mandos-client.dirs |
302 | 15 years ago | Teddy Hogeborn | * Makefile (install-client-nokey): Move "initramfs | 147 bytes |
|
|
|
mandos-client.docs |
594 | 11 years ago | Teddy Hogeborn | * debian/copyright (Copyright): Join the two lines | 17 bytes |
|
|
|
mandos-client.examples |
594 | 11 years ago | Teddy Hogeborn | * debian/copyright (Copyright): Join the two lines | 16 bytes |
|
|
|
mandos-client.links |
191 | 15 years ago | Teddy Hogeborn | * debian/mandos-client.docs: New. Add README and | 93 bytes |
|
|
|
mandos-client.lintian-overrides |
839 | 8 years ago | Teddy Hogeborn | Client: Make plugin helper override directory mode | 1.7 KB |
|
|
|
mandos-client.postinst |
839 | 8 years ago | Teddy Hogeborn | Client: Make plugin helper override directory mode | 3.1 KB |
|
|
|
mandos-client.postrm |
779 | 8 years ago | Teddy Hogeborn | Debian bug fix for mandos-client: Remove dhparams. | 1.2 KB |
|
|
|
mandos-client.README.Debian |
768 | 8 years ago | Teddy Hogeborn | debian/mandos-client.README.Debian: Document the d | 4.6 KB |
|
|
|
mandos.dirs |
639 | 10 years ago | Teddy Hogeborn | Bug fix: Make sure systemd service file is install | 124 bytes |
|
|
|
mandos.docs |
423 | 13 years ago | Teddy Hogeborn | Documentation changes: * DBUS-API: New file docum | 26 bytes |
|
|
|
mandos.lintian-overrides |
221 | 15 years ago | Teddy Hogeborn | * debian/changelog: New Debian revision. * debian | 203 bytes |
|
|
|
mandos.postinst |
837 | 8 years ago | Teddy Hogeborn | Server: Make persistent state directory mode u=rwx | 2.3 KB |
|
|
|
mandos.prerm |
770 | 8 years ago | Teddy Hogeborn | * debian/mandos.prerm: Don't run init script, use | 759 bytes |
|
|
|
mandos.README.Debian |
505.1.2 | 12 years ago | Teddy Hogeborn | Change "fukt.bsnet.se" to "recompile.se" throughou | 445 bytes |
|
|
rules |
836 | 8 years ago | Teddy Hogeborn | Client: Fix permissions on plugin helper directory | 1 KB |
|
|
|
watch |
654 | 10 years ago | Teddy Hogeborn | Fix running of self-tests. * debian/control (Buil | 132 bytes |
|
|