use ConfigObj for config file management

implement privilege dropping
test script added

pythonrewrite/bin2/cryptobox.conf

@@ -0,0 +1,51 @@
+[Main]
+
+# comma separated list of possible prefixes for accesible devices
+# beware: .e.g "/dev/hd" grants access to _all_ harddisks
+AllowedDevices	= /dev/loop
+
+# the default prefix of not yet named containers
+
+DefaultVolumePrefix	 = "Data "
+
+# where should we put the local configuration and the mountpoints?
+# this directory must be accessible by the cryptobox user (see below)
+#DataDir			= /var/cache/cryptobox
+DataDir			= .
+
+# the name-database file - inside of DataDir
+NameDatabase	= cryptobox_names.db
+
+
+[System]
+# most actions of the cryptobox are not executed as root - choose a limited
+# user here - for now only numeric ids are allowed
+User			= 1000
+
+# where should we mount volumes?
+# this directory must be writeable by the cryptobox user (see above)
+MountParentDir	= /var/cache/cryptobox/mnt
+
+# which cipher should cryptsetup-luks use?
+DefaultCipher	= aes-cbc-essiv:sha256
+
+
+[Log]
+# possible values are "debug", "info", "warn" and "error" or numbers from
+# 0 (debug) to 9 (error)
+Level		= debug
+
+# where to write the log messages to?
+# possible values are: file
+# syslog support will be added later
+Facility	= file
+
+# depending on the choosen facility (see above) you may select a
+# destination. Possible values for the different facilities are:
+#  file:	$FILENAME
+#  syslog:	$LOG_FACILITY
+# The log file will get created as root and then handed over to the
+# cryptobox user 8see above)
+#Destination	= /var/log/cryptobox.log
+Destination	= ./cryptobox.log
+