Changelog for msec-gui-0.60.25-1.1mdv2009.1.i586.rpm :
Fri Feb 12 23:00:00 2010 Eugeni Dodonov 0.60.25-1.1mdv2009.1
- built for updates

Thu Jan 28 23:00:00 2010 Eugeni Dodonov 0.60.25-1mdv2009.1
+ Revision: 497634
- 0.60.25:
- properly handle cases when chkrootkit is not installed when running chkrootkit check (#51309).

Tue Dec 1 23:00:00 2009 Security Team 0.60.24-1.1mdv2009.1
+ Revision: 472415
- built for updates

+ Eugeni Dodonov
- 0.60.24:
- Fix error shown when a file is found on ignored partition (#55869)
- Prevent crashes when empty lines are found in configuration file
- 0.60.23
- Updated translations
- Properly handling NOTIFY_WARN variables (#51364, #51464)
- Properly handle unicode strings in terminal (#50869)

Fri Apr 24 00:00:00 2009 Eugeni Dodonov 0.60.22-1mdv2009.1
+ Revision: 368833
- 0.60.22
- Changed default WIN_PARTS_UMASK to be with sync with diskdrake.

Thu Apr 23 00:00:00 2009 Eugeni Dodonov 0.60.21-1mdv2009.1
+ Revision: 368763
- 0.60.21
- Properly handle invalid WIN_PARTS_UMASK parameters.
- Fixed command inversion between DNS_SPOOFING_PROTECTION and
IP_SPOOFING_PROTECTION.
- Cleaning up duplicated variables on upgrade.

Wed Apr 22 00:00:00 2009 Eugeni Dodonov 0.60.20-1mdv2009.1
+ Revision: 368520
- 0.60.20:
Using correct locale when available (#44561).

Tue Apr 21 00:00:00 2009 Eugeni Dodonov 0.60.19-1mdv2009.1
+ Revision: 368440
- 0.60.19
- Properly support NTFS-3G partitions permissions (#50125).

Thu Apr 16 00:00:00 2009 Thierry Vignaud 0.60.18-2mdv2009.1
+ Revision: 367538
- translation updates

+ Eugeni Dodonov
- Do not create duplicate entries.
- Use right file when upgrading configuration.

Thu Apr 2 00:00:00 2009 Eugeni Dodonov 0.60.17-2mdv2009.1
+ Revision: 363410
- Installing with right permissions on /etc/X11/xinit.d/msec

Tue Mar 31 00:00:00 2009 Thierry Vignaud 0.60.17-1mdv2009.1
+ Revision: 362419
- translation updates

Tue Mar 24 23:00:00 2009 Eugeni Dodonov 0.60.16-1mdv2009.1
+ Revision: 360832
- 0.60.16:
- Added support for desktop notifications on msec periodic checks.
- Using correct logger for syslog messages.
- Updated gui layout to better fit on small displays (netbooks).

Thu Mar 12 23:00:00 2009 Eugeni Dodonov 0.60.15-1mdv2009.1
+ Revision: 354242
- 0.60.15
- Added specific permission for /var/log/btmp and wtmp (#48604)
- Do not run chkrootkit on NFS partitions (#37753).
- Changed CREATE_SERVER_LINK functionality to allow/deny presets of local and
remote services, enabling it on secure level only by default.
- Added portreserve to list of safe remote services.
- Updated list of files that should not be world-writable or not user-owned.
- Running rpm database check with \"--noscripts\" (#42849).

Thu Mar 5 23:00:00 2009 Eugeni Dodonov 0.60.14-1mdv2009.1
+ Revision: 349059
- 0.60.14
- Modularization: moved pam-related functionality to pam plugin.
- Updated list of safe services (#47460).

Tue Mar 3 23:00:00 2009 Eugeni Dodonov 0.60.13-1mdv2009.1
+ Revision: 347875
- 0.60.13
- Added banner for msecgui.
- Moved PolicyKit code to plugin.
- Changed default ENABLE_STARTUP parameters to be in sync with
crontab settings.
- Correctly handling parameter name changes on upgrade.

Wed Feb 25 23:00:00 2009 Eugeni Dodonov 0.60.12-1mdv2009.1
+ Revision: 344963
- 0.60.12
- Correctly handle wheel group authentication (#19091)
- Correctly handling CHECK_RPM and CHECK_CHKROOTKIT parameters.
- Updating permissions on logs changed by logrotate (#47997).
- Added support for plugins.
- Added sample plugin.
- Added MSEC init script (#21270), controlled by ENABLE_STARTUP_MSEC and
ENABLE_STARTUP_PERMS variables, and enabled by default on \'secure\' level.

Thu Feb 5 23:00:00 2009 Eugeni Dodonov 0.60.11-1mdv2009.1
+ Revision: 337983
- 0.60.11
- Added quiet mode (for use within installer).

Thu Feb 5 23:00:00 2009 Eugeni Dodonov 0.60.10-1mdv2009.1
+ Revision: 337809
- 0.6.10
- Updated spec file to better work with Mandriva installer.
- Updated spec file to show urpmi notice.
- Level name changes: \'default\' to \'standard\'.
- Added support for running in chroot.
- Added initial support for plugins.

Thu Jan 29 23:00:00 2009 Eugeni Dodonov 0.60.9-1mdv2009.1
+ Revision: 335395
- 0.60.9
- Reviewed description text for options (#47240)
- Added localization for msec.

Mon Jan 26 23:00:00 2009 Eugeni Dodonov 0.60.8-1mdv2009.1
+ Revision: 333777
- 0.60.8
- Changed without_password to without-password to prevent bogus errors.
- Running expensive msec_find only when required.
- Fixing permissions on msec-created files (#27820 #47059)
- Handling network settings as in previous msec versions (#47240).
- Added default response to msecgui \'Save\' dialog.
- Implemented support for custom paths checks in msecperms.

Wed Jan 21 23:00:00 2009 Eugeni Dodonov 0.60.7-1mdv2009.1
+ Revision: 332291
- 0.60.7
- Now correctly integrating with MCC.

Tue Jan 20 23:00:00 2009 Eugeni Dodonov 0.60.6-2mdv2009.1
+ Revision: 331887
- Fixed a typo in upgrade check.
- 0.60.6
- Removed Authentication tab (now handled by a separate application)
- Now it is possible to save settings without quitting.
- Better detection for file modifications (such as symlinks, moves, etc)
- Now asking to save changes before quitting when necessary.
- Highlighting default option value according to current level.
- Level selection improvements.
- Checking for $DISPLAY variable.
- Added HAL to list of safe services.
- Now highlighting options which are different from default values for level.
- Improved GUI spacing between options.
- Removed Notifications tab (merged with initial screen and periodic
checks screen).
- Better handling of non-existent files (inittab and sysctl).
(SPEC file improvements)
- Added an URPMI note for msec.
- Do not run msec after upgrade anymore, as it could break the install.
- Change the way the old files are upgraded.

Mon Jan 19 23:00:00 2009 Frederic Crozat 0.60.5-3mdv2009.1
+ Revision: 331178
- Do not limit services by default, was preventing hal to be started

Fri Jan 16 23:00:00 2009 Frederic Crozat 0.60.5-2mdv2009.1
+ Revision: 330251
- Workaround msec creating sysctl.conf / inittab files too early at install time

Wed Jan 14 23:00:00 2009 Eugeni Dodonov 0.60.5-1mdv2009.1
+ Revision: 329458
- 0.60.5
- Fix for wrong msec permission enforcing (msecperms -e), which would
enforce all permissions when changing to a different level.

Wed Jan 14 23:00:00 2009 Eugeni Dodonov 0.60.4-1mdv2009.1
+ Revision: 329241
- 0.60.4
- Updated gui to allow immediate preview of options on level change.
- New permissions control GUI.
- Added support for custom security levels.

Thu Jan 8 23:00:00 2009 Eugeni Dodonov 0.60.3-1mdv2009.1
+ Revision: 327003
- 0.60.3
- Fixed gdm X permissions checking.
- Now using /etc/security/shell instead of /etc/sysconfig/msec for
shell variables.
- Implemented authentication tab in msecgui.
- More verbose screen on security level selection.

Wed Jan 7 23:00:00 2009 Eugeni Dodonov 0.60.2-1mdv2009.1
+ Revision: 326499
- 0.60.2
- Correctly handling kdmrc X server permissions.
- Updated documentation.

Wed Jan 7 23:00:00 2009 Eugeni Dodonov 0.60.1-1mdv2009.1
+ Revision: 326453
- Complete msec redesign for Mandriva 2009.1.

Tue Dec 16 23:00:00 2008 Eugeni Dodonov 0.50.11-1mdv2009.1
+ Revision: 314809
- 0.50.10
- Correctly handle permit_root_login in sshd_config on level change
(#19726).
- Handle multibyte characters in msec reports (#26773).

Wed Oct 1 00:00:00 2008 Thierry Vignaud 0.50.10-1mdv2009.0
+ Revision: 290111
- cron entry:
o blacklist cifs instead of only smbfs for samba
o exclude /media from searching like /mnt is
o run with idle IOnice priority (#42795)

Wed Jun 18 00:00:00 2008 Thierry Vignaud 0.50.9-2mdv2009.0
+ Revision: 223324
- rebuild

Tue Mar 25 23:00:00 2008 Pixel 0.50.9-1mdv2008.1
+ Revision: 189939
- 0.50.9: do not allow msec to mess with umask=xxx for vfat in level 3 (#37222)

Fri Mar 7 23:00:00 2008 Thierry Vignaud 0.50.8-1mdv2008.1
+ Revision: 181183
- use ionice to reduce I/O pressure when running msec_find and rpm -Va
- packaging cleanups

Fri Jan 25 23:00:00 2008 Andreas Hasenack 0.50.7-1mdv2008.1
+ Revision: 157928
- 0.50.7: build msec_find with large file support (#36047)

Fri Jan 25 23:00:00 2008 Andreas Hasenack 0.50.6-1mdv2008.1
+ Revision: 157908
- 0.50.6: strip binary chars from report email (#36848)

Fri Jan 11 23:00:00 2008 Andreas Hasenack 0.50.5-1mdv2008.1
+ Revision: 148730
- fix infinitely growing kdmrc with set variable AllowShutdown to None (#12821)

Fri Jan 11 23:00:00 2008 Andreas Hasenack 0.50.4-1mdv2008.1
+ Revision: 148599
- updated to version 0.50.4, which fixes the following:
- Argument list too long (#36656)
- msec_find should exclude pipes and sockets when
reporting writable files (#27530)
- msec diff (diff_check.sh) does not take into
account the chkrootkit reports (#21369)
- netstat check for open ports doesnt pick up ports
on ipv6 addr (#19486)
- need to resolve symlinks before testing for local
filesystems (#14387)

+ Olivier Blin
- restore BuildRoot

+ Thierry Vignaud
- kill re-definition of %buildroot on Pixel\'s request

Tue Nov 13 23:00:00 2007 Adam Williamson 0.50.3-2mdv2008.1
+ Revision: 108377
- requires python (#35485)
- new license policy

Mon Mar 5 23:00:00 2007 Guillaume Rousse 0.50.3-1mdv2007.0
+ Revision: 132893
- drop useless and redundant file dependencies
- new version
spec cleanup

Mon Mar 5 23:00:00 2007 Olivier Thauvin 0.50.2-1mdv2007.1
+ Revision: 132772
- 0.50.2: fix (#27956 and #12353)

Sun Aug 13 00:00:00 2006 Olivier Thauvin 0.50.1-1mdv2007.0
+ Revision: 55666
- 0.50.1

+ Nicolas Lécureuil
- Fix manpages (close ticket #17430)

Sun Aug 6 00:00:00 2006 Olivier Thauvin 0.50.0-1mdv2007.0
+ Revision: 52699
- 0.50.0
- Import msec

Fri Nov 18 23:00:00 2005 Frederic Lepied 0.49.1-1mdk
- fix bug #17921

Mon Nov 14 23:00:00 2005 Frederic Lepied 0.49-1mdk
- scripts in /etc/profile.d no more config files
- fix bug #19206 by really generating /var/lib/msec/security.conf

Wed Sep 21 00:00:00 2005 Frederic Lepied 0.48-1mdk
- enable_pam_root_from_wheel: fixed too laxist config in level 2 (bug #18403).

Sun Sep 11 00:00:00 2005 Frederic Lepied 0.47.5-1mdk
- remove debugging output

Sat Sep 10 00:00:00 2005 Frederic Lepied 0.47.4-1mdk
- fixed security.conf path (bug #18271).
- security.sh fix parsing of rpm -Va (bug #18326 , Michael Reinsch).
- security.sh: don\'t check sysfs and usbfs file system (bug #14359).
- make msec.sh bourne shell compatible.
- allow_xserver_to_listen: adapt to new way of specifying X server
arguments for kdm (bug #15759).

Sat Sep 3 00:00:00 2005 Frederic Lepied 0.47.3-1mdk
- make /etc/rc.d/init.d/functions always readable (bug #18080)

Fri Aug 19 00:00:00 2005 Frederic Lepied 0.47.2-1mdk
- another fix for bug #17477

Thu Aug 18 00:00:00 2005 Frederic Lepied 0.47.1-1mdk
- really fix bug #17477

Sun Aug 14 00:00:00 2005 Frederic Lepied 0.47-1mdk
- security_check.sh: fix user or homedir with spaces in
(bug #16237).
- perm.
*: o /etc/rc.d/init.d/xprint exception
o manage apache files (Guillaume Rousse) (bug #12183)
- allow_user_list: fixed kdmrc settings.
- support new inittab syntax for single user mode.
- fix parsing of new chage output (bug #17477).
- Perms.py: more robust parsing
- fixed wrong kdmrc values (bug #16268).
- follow new Single user need in inittab.

Sun Jun 19 00:00:00 2005 Frederic Lepied 0.46-1mdk
- Mandriva
- new function enable_pam_root_from_wheel to allow transparent root
access for the wheel group members.

Mon Mar 21 23:00:00 2005 Frederic Lepied 0.45.1-1mdk
- allow to use the variable CHKROOTKIT_OPTION as an argument to
chkrootkit (Michael, bug #12687).
- fixed documentation of the use of the current keyword (bug #12866).
- fixed password_history.

Mon Feb 21 23:00:00 2005 Frederic Lepied 0.45-1mdk
- requires mailx (bug #13497).
- fixed the permissions of sendmail symlinks (bug #13515).
- allow to put an EXCLUDE_REGEXP variable in
/etc/security/msec/security.conf to be used in msec_find (bug #508).

Sat Oct 2 00:00:00 2004 Frederic Lepied 0.44.2-1mdk
- fix allow_reboot

Sun Aug 1 00:00:00 2004 Frederic Lepied 0.44.1-1mdk
- fix directory creation code

Sun Aug 1 00:00:00 2004 Frederic Lepied 0.44-1mdk
- new function allow_xauth_from_root
- the perm.local config file is now forcing permissions even if it\'s lowering the security.
- install translated man pages
- Mandrakelinux/Mandrakesoft

Fri Jul 9 00:00:00 2004 Frederic Lepied 0.43-1mdk
- fixed again mailman permissions for mailman in level 3 (bug #9319)
- use getent to parse the passwd database (bug #9904)
- fix msec.csh (Pixel)
- more servers in level 4 (Florin)

Sun Apr 25 00:00:00 2004 Frederic Lepied 0.42.2-1mdk
- corrected mailman log permissions (Guillaume Rousse bug #9319)

Sun Mar 21 23:00:00 2004 Frederic Lepied 0.42.1-1mdk
- check files on / in the daily check (workaround strange ntfw bug #9121)