The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system.
License: GNU General Public License v3
Changes:
The server now tries to change to user and group"_mandos" before falling back to trying the oldvalues "mandos", "nobody:nogroup", and "65534".Server startup no longer aborts even if no clientsare defined in clients.conf. Plugins named"*.dpkg-bak" are now ignored by the client. Acompilation failure on some architectures wherethe C compiler does not recognize the "-z" optionas a linker option was hopefully fixed.
More...
01-06-2009
