Changelog for
cfengine-3.5.1-62.1.x86_64.rpm :
* Fri Aug 02 2013 kkaempfAATTsuse.com- Fix SLE 11 build Add remove-am_subst_notmake.patch
* Thu Jul 11 2013 kkaempfAATTsuse.com- Update to 3.5.1 Core Changes: - the CFEngine Standard Library in masterfiles/libraries is now split into promise-type specific policy files, and lives in a version-specific directory. This should have no impact on current code, but allows more granular include of needed stdlib elements (Redmine #3044) - file changes are logged with log level Notice, not Error Bug fixes: - fix recursive copying of files (Redmine #2965) - respect classes in templates (Redmine ##2928) - fix timestamps on Windows (Redmine #2933) - fix non-root cf-agent flooding syslog (Redmine #2980) - fix email flood from cf-execd due to timestamps in agent output (Redmine #3011) - Preserve security context when editing or copying local files (Redmine #2728) - fix path for sys.crontab on redhat systems (Redmine #2553) - prevent incorrect \"insert_lines promise uses the same select_line_matching anchor\" warning (Redmine #2778) - Fix regression of setting VIPADDRESS to 127.0.0.1 (Redmine #3010) - Fix \"changes\" promise not receiving status when file is missing (Redmine #2820) - Fix symlinks being destroyed when editing them (Redmine #2363) - Fix missing \"promise kept\" status for the last line in a file (Redmine #2943)
* Tue Jul 09 2013 kkaempfAATTsuse.com- explicitly enable postgres, pthreads, openssl, pcre, libvirt and libacl- add libacl-headers.patch to adapt to libacl-devel packaging
* Thu Jun 13 2013 kkaempfAATTsuse.com- Update to 3.5.0 - Final See http://cfengine.com/docs/3.5/whats-new.html
* Fri Jun 07 2013 kkaempfAATTsuse.com- Update to 3.5.0 - Release Candidate
* Wed May 15 2013 kkaempfAATTsuse.com- add rpmlintrc file
* Tue Apr 16 2013 kkaempfAATTsuse.com- Build with libvirt- run cf-key on first install
* Mon Apr 15 2013 kkaempfAATTsuse.com- Update to 3.5.0 - Beta 1
* Mon Mar 18 2013 kkaempfAATTsuse.com- Update to 3.5.0 - Alpha 2 New features: - new built-in functions: classesmatching, strftime, filestat, ifelse, maparray - cf-promises flag --parse-tree is replaced by --policy-output-format=, requiring the user to specify the output format (none, cf, json) - cf-promises allows partial check of policy (without body common control) without integrity check; - -full-check enforces integrity check - agent binaries support JSON input format (.json file as generated by cf-promises) - cf-key: new options --trust-key/-t and --print-digest/-p - Class \"failsafe_fallback\" is defined in failsafe.cf when main policy contains errors and failsafe is run because of this - add scope attribute for body classes (Redmine #2013) Changes: - action_policy => \"warn\" causes not_kept classes to be set on promise needing repair. - command line option version (-V) now prints a shorter parsable version without graphic - implicit execution of server and common bundles taking arguments is skipped in cf-serverd. - WARNING: option --policy-server removed, require option to - -bootstrap instead - process promises don\'t log if processes are out of range unless you run in verbose mode - reports promises are now allowed in any context (Redmine #2005) - cf-report has been removed - cf-execd: --once implies --no-fork Bugfixes: - ifvarclass checked from classes promises in common bundles - do not wait for splaytime when executing only once - disable xml editing functionality when libxml2 doesn\'t provide necessary APIs (Redmine #1937)
* Fri Feb 01 2013 kkaempfAATTsuse.com- Update to 3.5.0 - Alpha 1 New Features: - Enable zeroconf-discovery of policy hubs for automatic bootstrapping if Avahi is present - Support for sys.cpus on more platforms than Linux & HPUX Changes: - Make parser output in GCC compatible format the only supported format (remove --gcc-brief-format flag) - Silence license warnings in Enterprise Free25 installations Bugfixes: - Allocate memory dynamically to avoid out-of-buffer or out-of-hash situations - fix edit_xml update of existing attributes (Redmine #2034) - use failsafe policy from compile-time specified workdir (Redmine #1991)- Update to 3.4.2 (Bugfix and Stability release) Bugfixes: - Fixes to policies in masterfiles (see masterfiles/Changelog for details) - Fixes for OpenBSD (GitHub #278) - Do not canonify values specified in abortbundleclasses/abortclasses (Redmine #1786) - Fix build issues on NetBSD, SLES 12.2 - Improve error message when libxml2 support is not compiled (Redmine #1799) - fix potential segmentation fault when trimming network socket data (GitHub #233) - fix potential segmentation fault when address-lookups in lastseen db failed (GitHub #233) - execute background promise serially when max_children was reached, rather than skipping them (GitHub #233) - fix segmentation fault in cf-promises when invoked with --reports (Redmine #1931) - fix compilation with Sun Studio 12 (Redmine #1901) - silence type-pun warning when building on HP-UX (GitHub #287)
* Sat Jan 12 2013 cooloAATTsuse.com- remove suse_update_config
* Fri Dec 14 2012 kkaempfAATTsuse.com- update to 3.4.1 final remove cfengine-3.4.0.patch, was accepted upstream 3.4.1 (Bugfix and Stability release) New feature/behavior: - cf-execd terminates agent processes that are not responsive for a configurable amount of time (see agent_expireafter in body executor control), defaulting to 1 week Bugfixes: - fix regression of classmatch() failing with hard classes (Redmine #1834) - create promise-defined and persistent classes in correct namespace (Redmine #1836) - several fixes to namespace support - fix several crash bugs caused by buffer overflow and race conditions in cf-serverd - regenerate time classes in cf-execd for each run (Redmine #1838) - edit_xml: fix select_xpath implementation and update documentation NOTE: code that uses select_xpath_region needs to be changed to select_xpath - edit_xml: make sure that text-modification functions don\'t overwrite child nodes - edit_xml: improve error logging
* Thu Nov 29 2012 kkaempfAATTsuse.com- update to 3.4.0 final
* Sun Oct 21 2012 kkaempfAATTsuse.com- fix systemd check (use systemd for openSUSE 12.1 too)
* Mon Oct 08 2012 kkaempfAATTsuse.com- workaround for potential buffer overflow
* Thu Oct 04 2012 kkaempfAATTsuse.com- honor filesystem hierachy standard (FHS): - build with --enable-fhs- honor documentation - install in /var/cfengine- support systemd where applicable- update to 3.0.4b2 New features: - XML editing capabilities. See the documentation for edit_xml body. Note the new dependency: libxml2. - Implement inheritance of local classes by bundles called using \"usebundle\". By default classes are not inherited. See the examples/unit_inherit.cf for an example. - Moved from Nova/Enterprise: - POSIX ACL support, - \"outputs\" promise type, - remote syslog support. - packages_default_arch_command hook in packages promises, to specify default architecture of the packages on the system. - packages_version_less_command / packages_version_equal_command hooks in packages promises, to specify external command for native package manager versions comparison - Running in Solaris zone is now detected and classes \"zone\" and \"zone_
\" are created in this case. - VirtualBox support added to guest_environment promises. - guest_environment promises are supported under OS X. - The \"depends_on\" attribute is now active, for the partal ordering of promises. If a promise depends on another (referred by handle) it will only be considered if the depends_on list is either kept or repaired already.
*
* WARNING: When upgrading, make sure that any existing use of depends_on does not make some promises being unintentionally ignored. This can happen if you are currently refering to non-existant or never-run handles in depends_on attributes. - methods return values, initial implementation - New format for cf-key -s, includes timestamp of last connection Changed functionality: - cf-execd -F switch no longer implies \'run once\'. New -O/--once option is added to achieve this behaviour. This makes cf-execd easier to run from systemd, launchd and other supervision systems.
* Wed Feb 15 2012 chrisAATTcomputersalat.de- update to 3.2.4
* Fixed failure in network transfer in case of misbehaving peer
* A few tiny memory leaks on error paths fixed- fix post/-un for SLE_10 (install_info)- fix deps for SLE_10
* {libsoname} Req glibc- provide default
*.cf files in inputs DIR otherwise init scripts will fail
* Wed Feb 08 2012 chrisAATTcomputersalat.de- fix pre/post scripts
* RHEL/CentOS does not know \"SuSE macros\" :(
* Tue Feb 07 2012 chrisAATTcomputersalat.de- fix deps for CentOS/RHEL (cron)
* Req vixie-cron
* Mon Jan 30 2012 chrisAATTcomputersalat.de- fix cron file
* Wed Jan 25 2012 chrisAATTcomputersalat.de- change workdir to /var/lib/cfengine/work
* adapt init scripts
* add new dirs o /var/lib/cfengine/{backup,failsafe,config}- add cron file as Source10
* Tue Jan 24 2012 chrisAATTcomputersalat.de- move \"server\" stuff to subpkg
* Fri Jan 13 2012 chrisAATTcomputersalat.de- fix init scripts
* check for existing \"promises.cf, failsafe.cf\"- create symlinks for sbin_PROGRAMS
* Tue Nov 15 2011 chrisAATTcomputersalat.de- update to 3.2.3
* A few tiny memory leaks fixed
* Improved performance of cf-serverd under heavy load with TokyoCabinet database
* Full list of issues fixed is available on https://cfengine.com/bugtracker/changelog_page.php- fix License: GPLv2+ -> GPLv3
* Tue Oct 11 2011 chrisAATTcomputersalat.de- update to 3.2.1
* ATM no \"uptodate\" ChangeLog available :(
* Fri Sep 30 2011 cooloAATTsuse.com- add libtool as buildrequire to make the spec file more reliable
* Sat Sep 17 2011 jengelhAATTmedozas.de- Remove redundant tags/sections from specfile
* Wed Aug 31 2011 chrisAATTcomputersalat.de- lib pkging policy
* new subpkg: libpromises1, devel
* disable-static lib- rpmlint
* incorrect-fsf-address
* run-level 4, init scripts- subpkg doc
* documentation
* added cf3-Reference.pdf as {S:1}
* Mon Aug 29 2011 chrisAATTcomputersalat.de- update to 3.2.0
* New bootstrap method with single-command bootstrapping: - cf-agent --bootstrap --policy-server 123.456.789.123 - Associated policy template files are added, partially maintained by CFEngine - See for upgrade procedure
* Bug fixes for file-editing, package versioning, and embedded database corruption (We recommend using TokyoCabinet instead of BerkeleyDB if building from source).
* Improved upgrade path for Nova.
* Patches for improved run-agent concurrency
* Reorganization of documentation and community resources
* 100% on regression test suite on 3 operating systems (Ubuntu, Debian, SuSE on x86-64 hardware)
* Support for multiple release environments
* package_policy update and addupdate now check if user-supplied version is larger than currently installed - updates only if so
* Help text of cf-report -r corrected - a list of key hashes is required, not ip addresses.
* New Emacs mode for CFEngine policy files (thanks to Ted Zlatanov!) - After beta 1:
* Warnings are on edit_line changes can now give greater degree of information without spamming promise logs
* Class expressions parser accepts \'||\' as an alias for \'|\' again.
* Invalidation of package list cache on installation/removal of packages. - After beta 2:
* New option cf-key -r to remove host key by IP or hostname.
* Added detection of network interfaces which belong to BSD jails.
* Improve robustness of multi-threaded code, in particular fix problems with spurious acces denials in server and losing of authentication rules after policy reload.
* cf-promises accepts option -b matching cf-agent, which causes it to do not complain about missing bundlesequence.
* New functions and(), not(), or() and concat() to ease use of ifvarclass() clause.
* Full list of issues fixed is available on https://cfengine.com/bugtracker/changelog_page.php- some cleanup
* ./configure .... -> %configure with default datadir
* macro usage
* use default install to docdir, add missing AUTHORS, LICENSE
* Wed Aug 24 2011 chrisAATTcomputersalat.de- fix init scripts o RH, CentOS: fix return of checkproc, start_daemon
* Tue Aug 09 2011 chrisAATTcomputersalat.de- update init scripts o complete rewrite, used skeleton.compat
* Mon Aug 08 2011 chrisAATTcomputersalat.de- update to 3.1.5
* New class parser, \'||\' is no longer allowed in expressions (use \'|\').
* Class setting in the promise types insert_lines, delete_lines, replace_patterns, field_edits, vars, classes is restored.
* suspiciousnames implemented.
* New function getvalues().
* New functions parse{read,int,string}array to match read{read,int,string}array.
* Testsuite added to check for core functionality.
* Syslog prefix is fixed to say \'cf3\' instead of \'community\'.- see ChangeLog file for more info- {name} macro- add BuildReq postgresql-devel (PostgreSQL connector)- remove Author from desc- no autoreconf- keep libs- build support for CentOS, RHEL
* Mon Aug 23 2010 anickaAATTsuse.cz- update to 3.05p1
* bugfixes
* Mon Dec 14 2009 anickaAATTsuse.cz- update to 3.02
* cfengine3 is a major rewrite, much simpler but with many new features- added new init scripts- remove all the patches
* Mon Sep 07 2009 anickaAATTsuse.cz- fixed resource leak (bnc#533579)
* Mon Aug 10 2009 anickaAATTsuse.cz- fixed memory leak (bnc#523789)
* Fri Apr 10 2009 anickaAATTsuse.cz- fix %preun script (bnc#487781)
* Mon Oct 27 2008 anickaAATTsuse.cz- fix bad printf specifier (bnc#439040)
* Thu Sep 11 2008 anickaAATTsuse.cz- update to 2.2.8
* Patch for cfservd serving wrong data when link->copy
* Checksum changes now trigger persistent class \"checksum_alerts\" and log to WORKDIR/state/file_hash_event_history
* Threading error fix for cfexecd
* Windows compilation fixes
* Fri Jun 27 2008 anickaAATTsuse.cz- update to 2.2.7
* Xen detection
* Sensor code added for linux cfenvd
* Documentation is no longer distributed in the tarball
* rxdirs= added to files. Default is false. If set to true, cfengine will not assume that x-bits should be set when r is set on directory permissions.
* Group initialization to popen, so shellcommands groups are consistent with uid login id
* bugfixes
* Tue Jan 15 2008 anickaAATTsuse.cz- update to 2.2.3
* minor tweaks and bug fixes
* IgnoreInterfaceRegex( \"vm.
*\" ) added to control function added for removing data from special interfaces from class data
* Option checkroot=true/false added to copy directive.
* Can escape colons in the strings now to avoid confusion with expansion separator.
* cfenvgraph --erasehistory users,www_in etc will now set the average and variance of learned cfenvd data to zero.
* audit=true/false flag added to most actions
* Mon Nov 26 2007 anickaAATTsuse.cz- remove .a and .la file from the package, fix debuginfo package building
* Wed Nov 21 2007 anickaAATTsuse.cz- update to 2.2.2
* changes in build procedure, libtoolizing
* beginning of an integrated auditing system added
* SCLI interface modifications- fix init scripts (remove X-United-Linux headers, add dependency to $remote_fs)
* Tue Jul 03 2007 anickaAATTsuse.cz- add %insserv_cleanup to %postun
* Tue Jun 12 2007 anickaAATTsuse.cz- update to 2.2.1
* scli: type section added.
* Code refactoring for package management.
* Bug fixes for problems introduced in 2.2.0.
* structural internal changes that ease the eventual confluence with cfengine 3- fix overflowing buffer, uninitialized variable and other minor problems- remove -configure.diff, fixed in upstream
* Fri Apr 20 2007 ajAATTsuse.de- Cleanup build requires.
* Fri Mar 30 2007 stbinnerAATTsuse.de- add bison and flex to build requires
* Fri Feb 02 2007 anickaAATTsuse.cz- update to 2.1.22
* cfshow output formatting changes
* database internal format changes
* rewritten the checksum code, no caching anymore
* ShowState(rootprocs), ShowState(otherprocs) added for better process reporting
* General code reorganization for better separation of concerns, looking towards cfengine 3.
* cfconvert removed. Change of future strategy for cfengine 3 migration.
* Support for old Berkeley DB APIs abandoned.
* Encryption level added for full encryption of opendir traffic. Must set FullEncryption = ( true ) in control for compatability
* bugfixes
* Wed Oct 18 2006 anickaAATTsuse.cz- fix array subscript out of range (#211160)
* Thu Sep 21 2006 anickaAATTsuse.cz- update to 2.1.21
* copy action now supports this $(this) variable
* PH support removed from cfenvd during code rationalization
* ReturnsZeroShell function added
* Cfenvd code rationalization and channge in database format
* bugfixes
* Fri Jun 16 2006 schwabAATTsuse.de- Fix syntax error in configure script.
* Fri May 19 2006 anickaAATTsuse.cz- update to 2.1.20: - various minor bugfixes added
* Wed Jan 25 2006 mlsAATTsuse.de- converted neededforbuild to BuildRequires
* Thu Jan 05 2006 anickaAATTsuse.cz- update to 2.1.17
* Tue Nov 15 2005 anickaAATTsuse.cz- update to 2.1.17- remove CAN-2005-2960 patch (affected file removed by upstream)
* Fri Oct 07 2005 schwabAATTsuse.de- Don\'t strip binaries.
* Wed Oct 05 2005 anickaAATTsuse.cz- fix too few arguments to a
*printf function
* Tue Oct 04 2005 anickaAATTsuse.cz- fix CAN-2005-2960 vulnerability (#120075)- update to 2.1.16
* Mon Aug 01 2005 anickaAATTsuse.cz- update to 2.1.15
* Fri Apr 22 2005 postadalAATTsuse.cz- updated to version 2.1.14
* Sun Feb 13 2005 roAATTsuse.de- added libpng to nfb (for tetex)
* Thu Feb 03 2005 postadalAATTsuse.cz- updated to version 2.1.13- added init scripts (cfenvd, cfexecd, cfservd)
* Tue Aug 17 2004 postadalAATTsuse.cz- updated to version 2.1.9
* Wed Feb 18 2004 postadalAATTsuse.cz- updated to version 2.1.3- removed obsoleted patch db.dif- fixed code that broke strict aliasing
* Thu Jan 22 2004 roAATTsuse.de- fix build with current automake use another method to pass flags to MAKEINFOHTML
* Sat Jan 10 2004 adrianAATTsuse.de- build as user
* Wed Aug 06 2003 postadalAATTsuse.cz- updated to version 2.0.7p3- removed obsoleted patch (info.diff)
* Sun May 11 2003 roAATTsuse.de- fix build with db-4.1- fix compile: chflags function available does not mean struct stat has st_flags
* Thu Apr 24 2003 roAATTsuse.de- fix install_info --delete call and move from preun to postun
* Wed Feb 26 2003 postadalAATTsuse.cz- used install-info macros- fixed Anomalies.texinfo (dir entry)
* Tue Sep 17 2002 roAATTsuse.de- removed bogus self-provides
* Wed Jul 31 2002 postadalAATTsuse.cz- update to version 2.0.3
* Hpux config changes
* new options
* new list in cfservd.conf
* a lot of fixes
* Fri Nov 23 2001 cihlarAATTsuse.cz- added Url:
* Mon Nov 05 2001 cihlarAATTsuse.cz- fixed to compile with automake 1.5
* Mon Apr 23 2001 cihlarAATTsuse.cz- fixed warnings on ia64
* Tue Mar 06 2001 cihlarAATTsuse.cz- update to version 1.6.3
* Mon Oct 30 2000 cihlarAATTsuse.cz- update to version 1.6.0.a13- bzipped sources
* Tue Oct 03 2000 cihlarAATTsuse.cz- update to version 1.6.0.a11
* Mon May 15 2000 cihlarAATTsuse.cz- Group sorted- %{_defaultdocdir} instead of /usr/doc/packages
* Mon Apr 10 2000 bkAATTsuse.de- added suse update config macro
* Tue Apr 04 2000 cihlarAATTsuse.cz- upgrade to version 1.5.4- added BuildRoot
* Mon Jan 17 2000 roAATTsuse.de- update to 1.5.3 , man, info to /usr/share
* Mon Sep 13 1999 bsAATTsuse.de- ran old prepare_spec on spec file to switch to new prepare_spec.
* Wed Sep 01 1999 roAATTsuse.de- update to 1.5.1 / specfile cleanup
* Tue Sep 22 1998 roAATTsuse.de- update to 1.4.12
* Mon Mar 02 1998 florianAATTsuse.de- update to release 1.4.10
* Fri Oct 10 1997 florianAATTsuse.de- update to release 1.4.8a
* Mon Jul 07 1997 florianAATTsuse.de- update to release 1.4.0
* Thu Jan 02 1997 florianAATTsuse.de- update to newest version 1.3.16
* Thu Jan 02 1997 florianAATTsuse.de- Update auf neue Version 1.3.12.