[Pkg-voip-commits] r6055 - in /asterisk-gui/trunk/debian: README.Debian copyright rules

[tzafrir-guest at alioth.debian.org]

Author: tzafrir-guest
Date: Sat Aug 23 23:15:45 2008
New Revision: 6055

URL: http://svn.debian.org/wsvn/pkg-voip/?sc=1&rev=6055
Log:
Documentation updates, mostly.

Modified:
    asterisk-gui/trunk/debian/README.Debian
    asterisk-gui/trunk/debian/copyright
    asterisk-gui/trunk/debian/rules

Modified: asterisk-gui/trunk/debian/README.Debian
URL: http://svn.debian.org/wsvn/pkg-voip/asterisk-gui/trunk/debian/README.Debian?rev=6055&op=diff
==============================================================================
--- asterisk-gui/trunk/debian/README.Debian (original)
+++ asterisk-gui/trunk/debian/README.Debian Sat Aug 23 23:15:45 2008
@@ -56,6 +56,22 @@
 (naturally you should set your own).
 
 
+Security
+--------
+The manager interface relies on allowing the manager user to run
+arbitrary shell commands as the user 'asterisk'. Note that even without 
+the extra extension that the manager adds to asterisk for that, a manager
+interface user with the 'call' write permissions can issue such arbitrary 
+commands anyway (by originating a call to the application System).
+
+This means you should not let untrusted users have access to the GUI and 
+similar access to the manager interface in general.
+
+If you want to avoid authenticating in clear text over the network, you 
+can use a proxy server as described blow to pass the connection on top of 
+https.
+
+
 Supported Browsers
 ------------------
 Seems to be better. Most browsers with decent JavaScript support should 

Modified: asterisk-gui/trunk/debian/copyright
URL: http://svn.debian.org/wsvn/pkg-voip/asterisk-gui/trunk/debian/copyright?rev=6055&op=diff
==============================================================================
--- asterisk-gui/trunk/debian/copyright (original)
+++ asterisk-gui/trunk/debian/copyright Sat Aug 23 23:15:45 2008
@@ -4,9 +4,11 @@
 It was downloaded from the subversion reposiory at 
 http://svn.digium.com/svn/asterisk-gui/trunk
 
-Upstream Author: 
+Upstream Authors: 
+  Pari Nannapaneni <pari at digium.com>
+  Mark Spenser <marster at digium.com>
 
-Copyright: 2006 Digium, Inc.
+Copyright: 2006-2008 Digium, Inc.
 
 License:
 
@@ -52,30 +54,12 @@
 Asterisk-GUI uses two components (prototype.js and rico.js) which come with 
 their own licenses, specifically:
 
-prototype.js:
 
-/*  Prototype JavaScript framework, version 1.4.0
- *  (c) 2005 Sam Stephenson <sam at conio.net>
+config/js/jquery.js:
+ * jQuery 1.2.2 - New Wave Javascript
  *
- *  Prototype is freely distributable under the terms of an MIT-style license.
- *  For details, see the Prototype web site: http://prototype.conio.net/
- *
-/*--------------------------------------------------------------------------*/
+ * Copyright (c) 2007 John Resig (jquery.com)
+ * Dual licensed under the MIT (MIT-LICENSE.txt)
+ * and GPL (GPL-LICENSE.txt) licenses.
 
 
-rico.js:
-
-/**
-  *
-  *  Copyright 2005 Sabre Airline Solutions
-  *
-  *  Licensed under the Apache License, Version 2.0 (the "License"); you may not use this
-  *  file except in compliance with the License. You may obtain a copy of the License at
-  *
-  *         http://www.apache.org/licenses/LICENSE-2.0
-  *
-  *  Unless required by applicable law or agreed to in writing, software distributed under the
-  *  License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
-  *  either express or implied. See the License for the specific language governing permissions
-  *  and limitations under the License.
-  **/

Modified: asterisk-gui/trunk/debian/rules
URL: http://svn.debian.org/wsvn/pkg-voip/asterisk-gui/trunk/debian/rules?rev=6055&op=diff
==============================================================================
--- asterisk-gui/trunk/debian/rules (original)
+++ asterisk-gui/trunk/debian/rules Sat Aug 23 23:15:45 2008
@@ -49,7 +49,7 @@
 	@echo "Upstream version:    $(UPVERSION)"
 	@echo "Subversion revision: $(SVN_REV)"
 
-TARBALL_DIR=../tarballs/zaptel-$(UPVERSION).tmp
+TARBALL_DIR=../tarballs/$(PACKAGE)-$(UPVERSION).tmp
 get-orig-source:
 	@dh_testdir
 	@[ -d $(TARBALL_DIR) ]||mkdir -p $(TARBALL_DIR)