File seccheck.changes of Package seccheck

Overview Repositories Revisions Requests Users Attributes Meta

File seccheck.changes of Package seccheck (Revision e04e1f74d65305b283e9aac9664da49b)

Currently displaying revision e04e1f74d65305b283e9aac9664da49b , Show latest

-------------------------------------------------------------------
Wed Sep  3 12:35:19 UTC 2014 - vpereira@suse.com

- refactoring: each security test, has its own helper
- ran spec-clean

-------------------------------------------------------------------
Thu Aug 14 15:11:37 UTC 2014 - vpereira@suse.com

- New version 3.0
- refactored codebase
- added new security tests
- moved the upstream to https://github.com/vpereira/seccheck
- Upstreamed patches:
  seccheck-2.0.diff
  seccheck-2.0-misc.patch
  seccheck-2.0-nisfix.patch
  seccheck-2.0-grep.patch
  seccheck-2.0-sort.patch
  seccheck-2.0-newpromisccheck.patch
  seccheck-2.0-filesystems_added.patch
  seccheck-2.0_john-path.diff
  seccheck-2.0_withoutmedia-bug47024.diff
  seccheck-2.0_update-datafiles-regexfix-bug51004.diff
  seccheck-2.0_fix-ls-output-local.diff
  seccheck-2.0_find_mount_arg.diff
  seccheck-2.0_find_with_dev.diff
  seccheck-2.0_dont_run_xarg_on_empty_input.diff
  seccheck-2.0-john.patch
  seccheck-2.0-website.patch
  seccheck-2.0_new_rpm_output_handle_more_filesystems_bnc746042.diff
  seccheck-2.0_daily_uid_bnc769770.diff
  seccheck-2.0-autologout.patch

-------------------------------------------------------------------
Wed Feb 19 07:12:39 UTC 2014 - abergmann@suse.com

- Disable autologout as default (bnc#864534).
  (seccheck-2.0-autologout.patch)

-------------------------------------------------------------------
Fri Feb 14 13:20:19 UTC 2014 - abergmann@suse.com

- Extended autologout functionality in seccheck-2.0-autologout.patch
  with SSH. See autologout.conf file for configuration details. 
- Fixed issue if no user is logged on in seccheck-2.0-autologout.patch.

-------------------------------------------------------------------
Thu Feb 13 08:29:15 UTC 2014 - abergmann@suse.com

- Added new autologout functionality. (FATE#312303)
  (added seccheck-2.0-autologout.patch)

-------------------------------------------------------------------
Wed Jul  4 13:30:34 UTC 2012 - thomas@suse.com

- fixed bnc#769770 to improve reporting of account names
  with equal UIDs.
- change tmp fie handling and removed obsolete code

-------------------------------------------------------------------
Thu May 31 14:18:35 UTC 2012 - thomas@suse.com

- bnc#746042 handle new "rpm -Va" output for md5 sums and don't
  limit the mount point detection to special filesystems

-------------------------------------------------------------------
Thu Feb  9 06:36:40 UTC 2012 - thomas@suse.com

- fixed typo in seccheck-2.0_dont_run_xarg_on_empty_input.diff
  bnc#741737

-------------------------------------------------------------------
Tue Nov  3 19:09:45 UTC 2009 - coolo@novell.com

- updated patches to apply with fuzz=0

-------------------------------------------------------------------
Tue Sep 22 10:07:25 CEST 2009 - thomas@novell.com

- fixed patch seccheck-2.0_dont_run_xarg_on_empty_input.diff
  (bnc#540017)

-------------------------------------------------------------------
Wed Jan 14 11:52:03 CET 2009 - thomas@suse.de

- changed compression from gz to bz2

-------------------------------------------------------------------
Wed Jan 14 11:48:58 CET 2009 - thomas@suse.de

- improved patch seccheck-2.0-john.patch (bnc#465939)

-------------------------------------------------------------------
Sun Feb 11 12:18:03 CET 2007 - ro@suse.de

- fix build as non-root

-------------------------------------------------------------------
Wed Oct 11 12:31:51 CEST 2006 - lrupp@suse.de

- point the user to the right place for security informations

-------------------------------------------------------------------
Wed Sep 13 19:18:38 CEST 2006 - lrupp@suse.de

- find location of john automatically

-------------------------------------------------------------------
Mon Jul 24 15:12:05 CEST 2006 - thomas@suse.de

- fixed bug #188579 (seccheck-2.0_dont_run_xarg_on_empty_input.diff)

-------------------------------------------------------------------
Mon Mar  6 13:50:37 CET 2006 - thomas@suse.de

- This update fixes the parameters for the 'find' command.
  (bug #154639)

-------------------------------------------------------------------
Wed Jan 25 21:47:43 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Wed Jan 11 14:43:44 CET 2006 - thomas@suse.de

- removed seccheck-2.0_john-path.diff (bug #142053)

-------------------------------------------------------------------
Mon Aug  8 11:27:05 CEST 2005 - thomas@suse.de

- fixed ls' time output regarding differnt locale settings
  bug #51004

-------------------------------------------------------------------
Wed Jul 27 17:17:49 CEST 2005 - thomas@suse.de

- changed path to john to reflect new john packaging
- fixed some regex' (bug #51004)
- try to keep data files uptodate (bug #51004)
- avoid looking into /media directory (bug #47024)

-------------------------------------------------------------------
Mon Sep  6 11:27:30 CEST 2004 - thomas@suse.de

- added patch to support more filesystems (Bug #44719)

-------------------------------------------------------------------
Tue Sep 30 15:38:37 CEST 2003 - thomas@suse.de

- added new promisc mode check

-------------------------------------------------------------------
Tue Sep  2 09:14:07 CEST 2003 - kukuk@suse.de

- Add sysconfig metadata [Bug #28935]

-------------------------------------------------------------------
Sun Aug  3 21:21:49 CEST 2003 - poeml@suse.de

- sort was using obsolete syntax +1, replaced by -k2 [#28429]

-------------------------------------------------------------------
Fri Jun  6 12:55:37 CEST 2003 - okir@suse.de

- grep -C was using obsolete syntax [#27258]

-------------------------------------------------------------------
Sat Feb 22 00:20:46 CET 2003 - mmj@suse.de

- Add sysconfig metadata [#22684]

-------------------------------------------------------------------
Wed Feb  5 17:57:41 CET 2003 - okir@suse.de

- do not complain about +joedoe NIS accounts (previously,
  we just ignored + and -) (#23146)

-------------------------------------------------------------------
Mon Nov 18 17:04:20 CET 2002 - okir@suse.de

- removed residual rc.config references
- START_SECCHECK now really works
- cleaned up the general blurb included in the mail messages
- daily sec check would incorrectly flag random home directories
  and dot files as owned by another user/group (#20720)
- use long-iso format in ls output (#21863)
- corrected spelling of sysconfig variable
  (SECCH*C*K_USER -> SECCHK_USER) (#15866, 16623)
- avoid different seccheck scripts from stepping on each others'
  toes when using a local copy of /etc/passwd (#16810)
- Stop warning about + and - lines in /etc/{shadow,passwd} (#21496)
- Allow user/group names of up to 32 characters (#21496 too)

-------------------------------------------------------------------
Mon Nov 11 09:52:46 CET 2002 - kukuk@suse.de

- Use sysconfig/seccheck, not rc.config

-------------------------------------------------------------------
Thu Aug  1 01:25:04 CEST 2002 - ro@suse.de

- move to sysconfig, use prereq

-------------------------------------------------------------------
Fri Jul 13 16:01:31 MEST 2001 - garloff@suse.de

- Added START_SECCHK variable to control whether the script will
  be run by cron. (see discussion @ bugzilla #5413).
  START_SECCHK defaults to "yes".
- Update to seccheck-2.0:
  * fixed an egrep bug - which was reported looooong time ago :-(
  * workarounds for Redhat ... they should update the mktempa and
    provide pidof ... duh ... (thanks to weutzing@exozet.com)
- Update to seccheck-1.9:
  * finally fixed the output of the weekly changes to prevent
    unnecessary lines
  * Added small fix to prevent "undisclosed receipent" msg in 
    mailers

-------------------------------------------------------------------
Tue May  8 15:28:03 CEST 2001 - garloff@suse.de

- Update to seccheck-1.8:
  * rewrote the mail header message for the change reports
  * added LICENCE (GPLv2) - required by SuSE policy
- Update to seccheck-1.7:
  * fixed a check for /etc/shadow password field contents

-------------------------------------------------------------------
Tue Apr 24 02:39:02 MEST 2001 - garloff@suse.de

- Move it back to cron.d/seccheck. Otherwise users who use their
  machine only occasionally would see a significant performance
  hit.

-------------------------------------------------------------------
Wed Feb 21 15:50:10 MET 2001 - garloff@suse.de

- Start seccheck via cron.daily,weekly,monthly instead of 
  cron.d/seccheck. The latter does not work, if the computer is not
  running at the specified time. (Bugzilla #5413, Ivory@SerNet.de)

-------------------------------------------------------------------
Tue Jan  9 18:22:03 MET 2001 - garloff@suse.de

- Add SECCHK_USER to /etc/rc.config (fillup-template), bug #5349
- Remove double sourcing of /etc/rc.config from security-control.sh
  script.

-------------------------------------------------------------------
Tue Dec 19 16:10:02 CET 2000 - garloff@suse.de

- Oops: Used %{_tmpdir} instead of %{_tmppath} in BuildRoot:

-------------------------------------------------------------------
Tue Dec 19 14:27:22 CET 2000 - garloff@suse.de

- seccheck-1.6:
  * Fix some DoS possibilities
  * Exlcude for NFS/cdrom was missing at one place in weekly
  * closed a hole against possibility of a backdoor trying 
    to hide from lsof output

-------------------------------------------------------------------
Fri Sep 29 18:28:33 MEST 2000 - garloff@suse.de

- seccheck-1.4: lsof fix and other minor fixes.

-------------------------------------------------------------------
Tue Jul 25 14:06:28 CEST 2000 - garloff@suse.de

- egrep check for \\+ sign was missing the quoting \\ (#3461)

-------------------------------------------------------------------
Sun Jul  9 22:54:46 CEST 2000 - garloff@suse.de

- Report version number properly (was erroneously set to 1.2)

-------------------------------------------------------------------
Fri Jun 30 21:55:54 CEST 2000 - garloff@suse.de

- Update to version 1.3:
  * checkneverlogin 
  * reiserfs support (suid/writable)
  * better output routines
  * some checks added
- Use BuildRoot.

-------------------------------------------------------------------
Wed Feb 16 00:29:55 CET 2000 - garloff@suse.de

- Version 0.9. Use install in spec-file instead of crufty
   cp/mkdir, chown, chmod sequences.

-------------------------------------------------------------------
Tue Oct 19 17:33:29 CEST 1999 - bs@suse.de

- changed from /etc/cron.daily to /etc/cron.d with hardcoded starting times.

-------------------------------------------------------------------
Fri Oct  1 21:17:19 CEST 1999 - bs@suse.de

- new version 0.8

-------------------------------------------------------------------
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de

- ran old prepare_spec on spec file to switch to new prepare_spec.

-------------------------------------------------------------------
Tue Apr 13 22:13:09 MEST 1999 - bs@suse.de

- set version properly

-------------------------------------------------------------------
Tue Mar 30 12:46:18 MEST 1999 - ro@suse.de

- new package

Places

File seccheck.changes of Package seccheck (Revision e04e1f74d65305b283e9aac9664da49b)

Places