[chrony-dev] [GIT] chrony/chrony.git branch, master, updated. 2.2-83-ga592d82 |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-dev Archives
]
This is an automated email from git. It was enerated because a ref
change was pushed to the repository "chrony/chrony.git".
The branch, master has been updated
via a592d82ad9bf0e6cdce707618128e0bbe09f4232 (commit)
via 7fcf69ce5f37136f974fbe8256e132e4fb418d15 (commit)
via 32ac6ffa2662bb08fcaf2288176d6cafc9c62e4f (commit)
via 0d12410eaa8cef99d1a3e3472749c54a1f163b9d (commit)
via 54c8732c460c585ae3ad59f52317168c6fa193c2 (commit)
via 9b9d6ab15090fdb97e0c9759082676358accac05 (commit)
via c6554bfd30fa7c62ad5148a0d601a84a96d4f22d (commit)
from 83cd8ae39b9df39b61e968a4040c8f7a474b9c5c (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit a592d82ad9bf0e6cdce707618128e0bbe09f4232
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Thu Jan 14 14:21:34 2016 +0100
client: improve waitsync help text
commit 7fcf69ce5f37136f974fbe8256e132e4fb418d15
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Thu Jan 14 14:20:54 2016 +0100
client: add keygen command
Add a new command that will generate a random key from /dev/urandom with
given ID, hash function and length.
commit 32ac6ffa2662bb08fcaf2288176d6cafc9c62e4f
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Wed Jan 13 11:57:36 2016 +0100
util: add UTI_GetRandomBytesUrandom()
This function always uses /dev/urandom, even if arc4random() is
available, and is intended for generating long-term keys.
commit 0d12410eaa8cef99d1a3e3472749c54a1f163b9d
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Wed Jan 13 19:29:15 2016 +0100
keys: warn when loaded key is shorter than 80 bits
Consider 80 bits as the absolute minimum for a secure symmetric key. If
a loaded key is shorter, send a warning to the system log to encourage
the admin to replace it with a longer key.
commit 54c8732c460c585ae3ad59f52317168c6fa193c2
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Tue Jan 12 17:52:34 2016 +0100
sys_linux: use privops helper when running with seccomp filter
Enable the PRV_Name2IPAddress() function with seccomp support and start
the helper process before loading the seccomp filter (but after dropping
root privileges). This will move the getaddrinfo() call outside the
seccomp filter and should make it more reliable as the list of required
system calls won't depend on what glibc NSS modules are used on the
system.
commit 9b9d6ab15090fdb97e0c9759082676358accac05
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Tue Jan 12 17:50:25 2016 +0100
privops: add support for privileged DNS_Name2IPAddress()
commit c6554bfd30fa7c62ad5148a0d601a84a96d4f22d
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Tue Jan 12 15:29:53 2016 +0100
nameserv: return at most 16 addresses from DNS_Name2IPAddress()
This is the same limit as in the asynchronous resolver. Use common macro
for all buffers storing IP addresses.
-----------------------------------------------------------------------
Summary of changes:
chrony.texi.in | 33 ++++++++++++++++++++++++++
chronyd.8.in | 7 ++++++
client.c | 50 ++++++++++++++++++++++++++++++++++-----
configure | 4 ++++
doc/faq.adoc | 13 ++++++-----
keys.c | 5 ++++
nameserv.c | 6 ++++-
nameserv.h | 3 +++
nameserv_async.c | 9 ++++----
privops.c | 68 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
privops.h | 6 +++++
stubs.c | 9 ++++----
sys_linux.c | 9 +++++++-
util.c | 17 ++++++++++----
util.h | 7 +++++-
15 files changed, 217 insertions(+), 29 deletions(-)
hooks/post-receive
--
chrony/chrony.git
--
To unsubscribe email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "unsubscribe" in the subject.
For help email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.