Changelog for
msec-0.50.1-1mdv2007.0.i586.rpm :
Fri Aug 11 12:00:00 2006 Olivier Thauvin
+ 08/11/06 14:37:15 (55666)
- 0.50.1
Fri Aug 4 12:00:00 2006 Nicolas L�cureuil
+ 08/04/06 16:27:57 (52735)
- Fix manpages (close ticket #17430)
Fri Aug 4 12:00:00 2006 Olivier Thauvin
+ 08/04/06 14:27:41 (52699)
- 0.50.0
Fri Aug 4 12:00:00 2006 Olivier Thauvin
+ 08/04/06 14:12:26 (52696)
Import msec
Fri Nov 18 11:00:00 2005 Frederic Lepied 0.49.1-1mdk
- fix bug #17921
Mon Nov 14 11:00:00 2005 Frederic Lepied 0.49-1mdk
- scripts in /etc/profile.d no more config files
- fix bug #19206 by really generating /var/lib/msec/security.conf
Mon Sep 19 12:00:00 2005 Frederic Lepied 0.48-1mdk
- enable_pam_root_from_wheel: fixed too laxist config in level 2 (bug #18403).
Fri Sep 9 12:00:00 2005 Frederic Lepied 0.47.5-1mdk
- remove debugging output
Thu Sep 8 12:00:00 2005 Frederic Lepied 0.47.4-1mdk
- fixed security.conf path (bug #18271).
- security.sh fix parsing of rpm -Va (bug #18326 , Michael Reinsch).
- security.sh: don\'t check sysfs and usbfs file system (bug #14359).
- make msec.sh bourne shell compatible.
- allow_xserver_to_listen: adapt to new way of specifying X server
arguments for kdm (bug #15759).
Thu Sep 1 12:00:00 2005 Frederic Lepied 0.47.3-1mdk
- make /etc/rc.d/init.d/functions always readable (bug #18080)
Wed Aug 17 12:00:00 2005 Frederic Lepied 0.47.2-1mdk
- another fix for bug #17477
Tue Aug 16 12:00:00 2005 Frederic Lepied 0.47.1-1mdk
- really fix bug #17477
Fri Aug 12 12:00:00 2005 Frederic Lepied 0.47-1mdk
- security_check.sh: fix user or homedir with spaces in
(bug #16237).
- perm.
*: o /etc/rc.d/init.d/xprint exception
o manage apache files (Guillaume Rousse) (bug #12183)
- allow_user_list: fixed kdmrc settings.
- support new inittab syntax for single user mode.
- fix parsing of new chage output (bug #17477).
- Perms.py: more robust parsing
- fixed wrong kdmrc values (bug #16268).
- follow new Single user need in inittab.
Fri Jun 17 12:00:00 2005 Frederic Lepied 0.46-1mdk
- Mandriva
- new function enable_pam_root_from_wheel to allow transparent root
access for the wheel group members.
Mon Mar 21 11:00:00 2005 Frederic Lepied 0.45.1-1mdk
- allow to use the variable CHKROOTKIT_OPTION as an argument to
chkrootkit (Michael, bug #12687).
- fixed documentation of the use of the current keyword (bug #12866).
- fixed password_history.
Mon Feb 21 11:00:00 2005 Frederic Lepied 0.45-1mdk
- requires mailx (bug #13497).
- fixed the permissions of sendmail symlinks (bug #13515).
- allow to put an EXCLUDE_REGEXP variable in
/etc/security/msec/security.conf to be used in msec_find (bug #508).
Thu Sep 30 12:00:00 2004 Frederic Lepied 0.44.2-1mdk
- fix allow_reboot
Fri Jul 30 12:00:00 2004 Frederic Lepied 0.44.1-1mdk
- fix directory creation code
Fri Jul 30 12:00:00 2004 Frederic Lepied 0.44-1mdk
- new function allow_xauth_from_root
- the perm.local config file is now forcing permissions even if it\'s lowering the security.
- install translated man pages
- Mandrakelinux/Mandrakesoft
Wed Jul 7 12:00:00 2004 Frederic Lepied 0.43-1mdk
- fixed again mailman permissions for mailman in level 3 (bug #9319)
- use getent to parse the passwd database (bug #9904)
- fix msec.csh (Pixel)
- more servers in level 4 (Florin)
Fri Apr 23 12:00:00 2004 Frederic Lepied 0.42.2-1mdk
- corrected mailman log permissions (Guillaume Rousse bug #9319)
Sun Mar 21 11:00:00 2004 Frederic Lepied 0.42.1-1mdk
- check files on / in the daily check (workaround strange ntfw bug #9121)
Fri Feb 27 11:00:00 2004 Frederic Lepied 0.42-1mdk
- fix mailman log perm (Guillaume Rousse) [bug #8158]
- allow to specify only group or user in perm files (Bill Shirley)
- allow the force keyword in perm files to be able to lower security (Bill Shirley)
- document perl files syntax in README
Sat Feb 14 11:00:00 2004 Frederic Lepied 0.41.1-1mdk
- allow % in file names [bug #6144] (Sven Hoexter)
- fixed system-auth growing line forever [bug #7853] (Michael Scherer)
Thu Feb 12 11:00:00 2004 Frederic Lepied 0.41-1mdk
- make it lib64 aware wrt pam files rewriting
- more csh-ish msec.csh (Pixel)
- msec.csh: only set SECURE_LEVEL whenever it already exists
locally
- conf/: perm.0, perm.1, perm.2, perm.3, perm.4, perm.5: fixed typo
rpp => rpm
- share/libmsec.py: allow_xserver_to_listen: corrected startx
modifications (Gavin Porter)
- cron-sh/security.sh: removed xfs from remote filesystems and
added hfs in foreign filesystems (Stefaan Simoens)
- conf/: perm.0, perm.1, perm.2, perm.3, perm.4, perm.5: handle
/var/lib/rpm/Packages
- AUTHORS, README, TODO: fix #6145 (list current maintainer instead
of old one) (Thierry)
- share/shadow.py: Added local_config to say that the calls are now
coming from the config file. Call force_val in indirect to store
that the arguments of the function need to be used even if the
security is lowered.
- share/libmsec.py: Rework same_level to be able to put the
priority on the config file. This is realized by inspecting the
stack trace and using a global associative array.
- man/cs/msec.8: updated Czech man page (Pablo)
Wed Sep 3 12:00:00 2003 Frederic Lepied 0.40-1mdk
- corrected strange permission settings in /var/log (bug #4854)
- allow set_shell_history_size(-1) in level.local (bug #4392)
Fri Aug 22 12:00:00 2003 Frederic Lepied 0.39-1mdk
- don\'t write True or False in sysctl.conf (bug #4629)
- don\'t use apply anymore (Olivier Blin) (bug #4632)
- better documentation for no_password_aging_for (bug #1629)
- support passing arg as a number in set_root_umask, set_user_umask (bug #3640)
- better support for symlinks
