Mandos 1.0.4 (Default branch)


 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Software Releases - RSS News Mandos 1.0.4 (Default branch)
# 1  
Old 01-15-2009
Mandos 1.0.4 (Default branch)

The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system. License: GNU General Public License v3 Changes:
In the server, matched user/group pairs are only found when searching for a suitable nonprivileged user/group to switch to. In the client, the new kernel parameter "mandos=off" makes the client not run at boot. Linking errors and compilation warnings on AMD64 were fixed. Numbers in command line options are parsed better. The splashy and usplash plugins are more robust while traversing /proc, and will not abort if a process suddenly disappears. Image

Image

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
ASKPASS-FIFO(8mandos)						   Mandos Manual					     ASKPASS-FIFO(8mandos)

NAME
askpass-fifo - Mandos plugin to get a password from a FIFO. SYNOPSIS
askpass-fifo DESCRIPTION
This program reads a password from a FIFO and outputs it to standard output. This program is not very useful on its own. This program is really meant to run as a plugin in the Mandos client-side system, where it is used as a fallback and alternative to retrieving passwords from a Mandos server. This program is meant to be imitate a feature of the askpass program, so that programs written to interface with it can keep working under the Mandos system. OPTIONS
This program takes no options. EXIT STATUS
If exit status is 0, the output from the program is the password as it was read. Otherwise, if exit status is other than 0, the program was interrupted or encountered an error, and any output so far could be corrupt and/or truncated, and should therefore be ignored. FILES
/lib/cryptsetup/passfifo This is the FIFO where this program will read the password. If it does not exist, it will be created. EXAMPLE
Note that normally, this program will not be invoked directly, but instead started by the Mandos plugin-runner(8mandos). This program takes no options. askpass-fifo SECURITY
The only thing that could be considered worthy of note is this: This program is meant to be run by plugin-runner(8mandos), and will, when run standalone, outside, in a normal environment, immediately output on its standard output any presumably secret password it just received. Therefore, when running this program standalone (which should never normally be done), take care not to type in any real secret password by force of habit, since it would then immediately be shown as output. SEE ALSO
intro(8mandos), fifo(7), plugin-runner(8mandos) COPYRIGHT
Copyright (C) 2008-2009, 2011-2012 Teddy Hogeborn, Bjorn Pahlsson This manual page is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This manual page is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/. Mandos 1.5.5 2012-01-01 ASKPASS-FIFO(8mandos)