-
Notifications
You must be signed in to change notification settings - Fork 14
Expand file tree
/
Copy pathyast2-security.changes
More file actions
1667 lines (1157 loc) · 50.7 KB
/
Copy pathyast2-security.changes
File metadata and controls
1667 lines (1157 loc) · 50.7 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
-------------------------------------------------------------------
Wed May 20 08:40:15 UTC 2026 - Ali Abdallah <ali.abdallah@suse.com>
- Change minimum UID from 500 to 1000 (bsc#1262458).
-------------------------------------------------------------------
Tue Mar 10 09:00:28 UTC 2026 - Michal Filka <mfilka@suse.com>
- jsc#PED-14507
- Removed reference to update-desktop-files from spec file
- 5.0.5
-------------------------------------------------------------------
Thu Feb 5 13:18:03 UTC 2026 - Robert Frohl <rfrohl@suse.com>
- write proper /etc/selinux/config according to expected format
(bsc#1257752)
- 5.0.4
-------------------------------------------------------------------
Wed Apr 9 08:12:01 UTC 2025 - Josef Reidinger <jreidinger@suse.com>
- Do not write selinux mode to kernel command line and keep it only
in /etc/selinux/config (jsc#PED-12400)
- 5.0.3
-------------------------------------------------------------------
Mon Sep 30 14:36:10 UTC 2024 - Stefan Hundhammer <shundhammer@suse.com>
- Drop obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD in
/etc/login.defs.d/70-yast.defs (bsc#1231006)
- 5.0.2
-------------------------------------------------------------------
Tue Aug 6 11:34:20 UTC 2024 - Knut Anderssen <kanderssen@suse.com>
- Do not load the security settings from the security policy until
needed (bsc#1216615).
- 5.0.1
-------------------------------------------------------------------
Wed Aug 30 20:16:10 UTC 2023 - Josef Reidinger <jreidinger@suse.cz>
- 5.0.0 (bsc#1185510)
-------------------------------------------------------------------
Fri Mar 03 14:44:07 UTC 2023 - Ladislav Slezák <lslezak@suse.cz>
- Bump version to 4.6.0 (bsc#1208913)
-------------------------------------------------------------------
Wed Feb 22 17:28:54 UTC 2023 - Michal Filka <mfilka@suse.com>
- bsc#1208492
- do not store empty values in CFA login.defs empty value to
avoid crash when parsing according to login.defs lens
- 4.5.6
-------------------------------------------------------------------
Tue Dec 20 10:21:49 UTC 2022 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
- AutoYaST: export security policy settings (related to
jsc#SLE-24764).
- Always write the ssg-apply configuration if a security policy
is enabled, even if the action is 'none' (related to
jsc#SLE-24764).
- 4.5.5
-------------------------------------------------------------------
Thu Dec 1 14:56:43 UTC 2022 - Stefan Hundhammer <shundhammer@suse.com>
- Fixed wrong steps count causing a crash during saving (bsc#1205918)
- 4.5.4
-------------------------------------------------------------------
Tue Nov 8 17:40:12 UTC 2022 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
- Add support for DISA STIG security policy validation
(jsc#SLE-24764).
- Disable the ssg-apply service if the selected SCAP action is
"do nothing" (related to jsc#SLE-24764).
- 4.5.3
-------------------------------------------------------------------
Wed Nov 2 15:46:44 UTC 2022 - Martin Vidner <mvidner@suse.com>
- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.2
-------------------------------------------------------------------
Tue Aug 23 08:41:45 UTC 2022 - David Diaz <dgonzalez@suse.com>
- Do not crash when reading active LSM modules returns nil
(related to jsc#SLE-22069)
- 4.5.1
-------------------------------------------------------------------
Wed Apr 06 13:24:58 UTC 2022 - Ladislav Slezák <lslezak@suse.cz>
- Bump version to 4.5.0 (bsc#1198109)
-------------------------------------------------------------------
Fri Mar 11 13:13:09 UTC 2022 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
- Always check for the package in the underlying system when
trying to detect if running on systemd (bsc#1196963).
- 4.4.13
-------------------------------------------------------------------
Tue Feb 22 08:08:56 UTC 2022 - David Diaz <dgonzalez@suse.com>
- Stop using 'lsm' kernel boot parameter even for the
"None" Major Linux Security Module (bsc#1194332, bsc#1196274).
- 4.4.12
-------------------------------------------------------------------
Fri Feb 4 09:19:19 UTC 2022 - Knut Anderssen <kanderssen@suse.com>
- Fixed Export unit test (related to jsc#SLE-22069).
- 4.4.11
-------------------------------------------------------------------
Wed Jan 26 14:01:57 UTC 2022 - Knut Alejandro Anderssen González <kanderssen@suse.com>
Related to jsc#SLE-22069:
- AutoYaST LSM: only allow to select the desired LSM and the
SELinux mode.
- 4.4.10
-------------------------------------------------------------------
Tue Jan 25 15:43:01 UTC 2022 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.9
-------------------------------------------------------------------
Mon Jan 24 09:45:55 UTC 2022 - Knut Anderssen <kanderssen@suse.com>
- Related to jsc#SLE-22069:
- Fix import of 'none' and 'apparmor' options from the profile
when declared
- 4.4.8
-------------------------------------------------------------------
Tue Jan 11 00:06:20 UTC 2022 - Knut Anderssen <kanderssen@suse.com>
Related to jsc#SLE-22069:
- Autoyast LSM section: added "none" section in order to mark it
as not selectable during the installation.
- 4.4.7
-------------------------------------------------------------------
Mon Jan 10 10:08:44 UTC 2022 - Knut Anderssen <kanderssen@suse.com>
- Fix security_auto client selinux requirement (bsc#1194449)
- 4.4.6
-------------------------------------------------------------------
Fri Jan 7 12:37:08 UTC 2022 - Knut Anderssen <kanderssen@suse.com>
- Do not use the 'lsm' kernel boot parameter by now as it could
need other modules to be pecified like the integrity one
(bsc#1194332).
- 4.4.5
-------------------------------------------------------------------
Tue Jan 4 12:06:48 UTC 2022 - Knut Anderssen <kanderssen@suse.com>
- Related to jsc#SLE-22069:
- Autoyast LSM section: added "selectable" option to the section
- Do not propose a default LSM configuration when it is declared
as not configurable in the control file or AutoYaST
- 4.4.4
-------------------------------------------------------------------
Wed Dec 29 11:47:15 UTC 2021 - Knut Anderssen <kanderssen@suse.com>
- Added back the selinux boot parameter when selinux is selected
and not disabled in order to switch on SELinux (jsc#SLE-22069)
- 4.4.3
-------------------------------------------------------------------
Wed Dec 22 23:06:57 UTC 2021 - Knut Anderssen <kanderssen@suse.com>
- Add support for selecting and configuring the desired Linux
Security Module (jsc#SLE-22069)
- 4.4.2
-------------------------------------------------------------------
Wed Jul 14 13:51:18 UTC 2021 - José Iván López González <jlopez@suse.com>
- Add Security#SafeRead to allow detecting read errors when calling
it from perl modules (related to bsc#1177183).
- 4.4.1
-------------------------------------------------------------------
Tue Apr 20 13:51:55 UTC 2021 - Ladislav Slezák <lslezak@suse.cz>
- 4.4.0 (bsc#1185510)
-------------------------------------------------------------------
Thu Mar 18 11:43:42 UTC 2021 - David Diaz <dgonzalez@suse.com>
- Do not set SELinux mode when it is not configurable (bsc#1182940)
- 4.3.16
-------------------------------------------------------------------
Wed Mar 3 16:09:26 UTC 2021 - David Diaz <dgonzalez@suse.com>
- Make SELinux not configurable when running on WSL (bsc#1182940)
- 4.3.15
-------------------------------------------------------------------
Tue Mar 2 17:47:22 UTC 2021 - David Diaz <dgonzalez@suse.com>
- Ensure defined SELinux patterns are set (bsc#1182543).
- 4.3.14
-------------------------------------------------------------------
Tue Mar 2 15:31:39 UTC 2021 - David Diaz <dgonzalez@suse.com>
- Do not write bootloader in insts-sys (bsc#1182894).
- 4.3.13
-------------------------------------------------------------------
Mon Mar 1 11:33:59 UTC 2021 - David Diaz <dgonzalez@suse.com>
- Change the SELinux resolvable unique id used in auto-installation
to be consistent with the one used by normal installation
(related to jsc#SLE-17342).
- 4.3.12
-------------------------------------------------------------------
Mon Mar 1 10:21:28 UTC 2021 - Josef Reidinger <jreidinger@suse.com>
- Move security_finish client to yast2-installation (bsc#1182821)
- 4.3.11
-------------------------------------------------------------------
Tue Feb 23 15:04:15 UTC 2021 - David Diaz <dgonzalez@suse.com>
- Move SELinux .autorelabel file from / to /etc/selinux if root
filesystem will be mounted as read only (jsc#SLE-17307).
- 4.3.10
-------------------------------------------------------------------
Tue Feb 16 13:36:34 UTC 2021 - David Diaz <dgonzalez@suse.com>
- jsc#SMO-20, jsc#SLE-17342:
- Add class for managing SELinux configuration.
- AutoYaST: add support for SELinux configuration.
- 4.3.9
-------------------------------------------------------------------
Mon Feb 15 11:35:59 UTC 2021 - Josef Reidinger <jreidinger@suse.com>
- Adapted unit test to recent changes in Yast::Report (related to
bsc#1179893).
- 4.3.8
-------------------------------------------------------------------
Tue Dec 15 12:33:52 UTC 2020 - schubi <schubi@localhost>
- Removed old code for sysvinit configuration (bsc#1175494).
- 4.3.7
-------------------------------------------------------------------
Mon Dec 14 14:49:26 UTC 2020 - schubi <schubi@intern>
- Removed obsolete setting DISPLAYMANAGER_SHUTDOWN from
/etc/sysconfig/displaymanager (bsc#1175495).
- 4.3.6
-------------------------------------------------------------------
Fri Dec 11 11:24:05 UTC 2020 - schubi <schubi@localhost>
- Removed handling of obsolete entry SYSTOHC in /etc/sysconfig/clock
(bsc#1175496)
- 4.3.5
-------------------------------------------------------------------
Tue Oct 27 13:26:57 CET 2020 - schubi@suse.de
- AY-Import: Translate <enable_sysrq> setting to <kernel.sysrq>
with the correct value format (bsc#1177720).
- 4.3.4
-------------------------------------------------------------------
Thu Aug 13 10:00:58 UTC 2020 - Ladislav Slezák <lslezak@suse.cz>
- Fixed randomly failing unit tests, do not query the installed
PAM modules in the testing system (related to bsc#1171318)
- 4.3.3
-------------------------------------------------------------------
Mon Aug 10 17:40:01 CEST 2020 - schubi@suse.de
- AutoYaST: Added supplements: autoyast(security) into the spec file
in order to install this packages if the section has been defined
in the AY configuration file (bsc#1146494).
- 4.3.2
-------------------------------------------------------------------
Tue Jul 28 13:52:52 CEST 2020 - aschnell@suse.com
- Use pam_pwquality instead of pam_cracklib depending on
availability (bsc#1171318)
- Fix setting dictpath for pam_pwquality (bsc#1174619)
- 4.3.1
-------------------------------------------------------------------
Tue May 12 15:16:34 UTC 2020 - josef Reidinger <jreidinger@localhost>
- Autoyast schema: Allow optional types for string and map objects
(bsc#1170886)
- 4.3.0
-------------------------------------------------------------------
Tue Mar 31 17:41:17 UTC 2020 - Knut Anderssen <kanderssen@suse.com>
- Apply sysctl changes to the running system when the YaST sysctl
configuration file is modified (bsc#1167234)
- 4.2.12
-------------------------------------------------------------------
Mon Feb 3 16:02:35 CET 2020 - schubi@suse.de
- Using SysctlConfig class: Handle sysctl entries in different
directories (bsc#1151649).
- 4.2.11
-------------------------------------------------------------------
Thu Jan 23 13:04:04 UTC 2020 - Steffen Winterfeldt <snwint@suse.com>
- don't use /bin/systemctl compat symlink (bsc#1160890)
- 4.2.10
-------------------------------------------------------------------
Mon Jan 13 12:22:00 UTC 2020 - Josef Reidinger <jreidinger@suse.com>
- convert old init.d to systemd (jsc#SLE-10976)
- 4.2.9
-------------------------------------------------------------------
Thu Dec 12 12:01:35 CET 2019 - schubi@suse.de
- Added to rnc file: sys_gid_max, sys_gid_min, sys_uid_max,
sys_uid_min, hibernate_system, kernel.sysrq, mandatory_services,
net.ipv4.ip_forward, net.ipv4.tcp_syncookies,
net.ipv6.conf.all.forwarding (bsc#1158301).
- 4.2.8
-------------------------------------------------------------------
Mon Nov 25 11:27:11 UTC 2019 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
- bsc#1155735, bsc#1157541:
- Read /usr/etc/login.defs.
- Write login.defs configuration to /etc/login.defs.d/.
- 4.2.7
-------------------------------------------------------------------
Fri Nov 22 12:21:59 UTC 2019 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
- Change default encryption method from DES to SHA512 (bsc#1157541,
CVE-2019-3700).
- 4.2.6
-------------------------------------------------------------------
Fri Oct 18 13:06:46 CEST 2019 - schubi@suse.de
- Added extra_services to security.rnc file (bsc#1153623).
- 4.2.5
-------------------------------------------------------------------
Thu Oct 3 16:28:06 UTC 2019 - Imobach Gonzalez Sosa <igonzalezsosa@suse.com>
- Place sysctl settings in /etc/sysctl.d/ (jsc#SLE-9077).
- 4.2.4
-------------------------------------------------------------------
Fri Sep 27 13:10:44 CEST 2019 - schubi@suse.de
- AY: Settings have not been exported. "console_shutdown" entry
has not been evaluated (bsc#1150821).
- 4.2.3
-------------------------------------------------------------------
Thu Sep 5 10:22:29 CEST 2019 - schubi@suse.de
- AY: Supporting user defined permission files like
"/etc/permissions.ultra". (bsc#1147173)
- 4.2.2
-------------------------------------------------------------------
Thu Aug 22 15:52:45 CEST 2019 - schubi@suse.de
- Using rb_default_ruby_abi tag in the spec file in order to
handle several ruby versions (bsc#1146403).
- 4.2.1
-------------------------------------------------------------------
Fri May 31 12:38:27 UTC 2019 - Stasiek Michalski <hellcp@mailbox.org>
- Add metainfo (fate#319035)
- Revamp spec
- Replace GenericName with Comment
- 4.2.0
-------------------------------------------------------------------
Mon Nov 26 02:49:10 UTC 2018 - Noah Davis <noahadvs@gmail.com>
- Provide icon with module (boo#1109310)
- 4.1.2
-------------------------------------------------------------------
Fri Nov 2 13:19:01 UTC 2018 - schubi@suse.de
- Writing security settings in first AY installation stage.
So other modules (e.g. users) can rely on these settings now.
(bnc#1112769)
- 4.1.1
-------------------------------------------------------------------
Tue Oct 16 16:18:09 CEST 2018 - schubi@suse.de
- Added license file to spec.
-------------------------------------------------------------------
Thu Aug 23 10:25:21 UTC 2018 - dgonzalez@suse.com
- Upate calls to YaST2 systemd classes (related to fate#319428)
- 4.1.0
-------------------------------------------------------------------
Mon Aug 20 13:58:44 CEST 2018 - schubi@suse.de
- Switched license in spec file from SPDX2 to SPDX3 format.
-------------------------------------------------------------------
Fri Apr 6 18:53:46 UTC 2018 - mfilka@suse.com
- bnc#1087957 - version bump
- 4.0.0
-------------------------------------------------------------------
Wed Aug 31 11:37:52 UTC 2016 - jreidinger@suse.com
- mark string "Security" translatable (bnc#988764)
- 3.2.3
-------------------------------------------------------------------
Mon Mar 7 09:51:41 UTC 2016 - knut.anderssen@suse.com
- Added support for multiple display managers (bnc#946889).
- Replaced testsuite tests by rspec tests.
- Removed autotools.
- Updated yast2 dependency for cfg_mail.scr
- 3.2.2
-------------------------------------------------------------------
Fri Feb 26 12:40:29 UTC 2016 - knut.anderssen@suse.com
- Removed "Boot permissions - Interpretation of Ctrl + Alt + Del"
combo box "Reboot" entry for s390 architecture. (fate#319711)
- 3.2.1
-------------------------------------------------------------------
Thu Sep 24 14:50:20 UTC 2015 - ancor@suse.com
- Bumped version number in order to branch the SLE version due to
different display manager behavior (bnc#946889).
- 3.2.0
-------------------------------------------------------------------
Wed Aug 19 14:55:48 UTC 2015 - ancor@suse.com
- Added some entries to the list of optional services (bnc#942379)
- 3.1.11
-------------------------------------------------------------------
Fri Jun 19 15:26:45 UTC 2015 - ancor@suse.com
- Settings of security levels moved to YAML files
- Redefined security levels (last part of fate#318425)
- 3.1.10
-------------------------------------------------------------------
Mon Jun 15 15:22:38 UTC 2015 - ancor@suse.com
- Updated list of mandatory and optional services (part of
fate#318425)
- 3.1.9
-------------------------------------------------------------------
Fri Jun 12 16:27:53 UTC 2015 - ancor@suse.com
- When checking services, systemd aliases are now taken into
account (so, for example, rsyslog is accounted as syslog).
-------------------------------------------------------------------
Thu Jun 11 16:00:10 UTC 2015 - ancor@suse.com
- Removed references to runlevels (obsolete). Only current systemd
target is analyzed. (fate#318425, bnc#941620)
- List of mandatory and optional services moved to a YAML file.
-------------------------------------------------------------------
Tue Jan 13 13:24:28 UTC 2015 - ancor@suse.com
- Fixed an error setting the shutdown behaviour of KDM (bnc#907907)
- YaST agents moved to the right location in the source tree
- 3.1.8
-------------------------------------------------------------------
Thu Jan 8 15:30:20 CET 2015 - jsuchome@suse.cz
- fix paths for systemd target links (bnc#911523)
- 3.1.7
-------------------------------------------------------------------
Mon Dec 22 17:18:56 UTC 2014 - ancor@suse.com
- Fixed the interface to show and process correctly values from
sysctl.conf.
- Source code cleanup, including some minor fixes and new tests.
-------------------------------------------------------------------
Thu Dec 4 09:51:32 UTC 2014 - jreidinger@suse.com
- remove X-KDE-Library from desktop file (bnc#899104)
-------------------------------------------------------------------
Mon Oct 27 08:00:30 UTC 2014 - mvidner@suse.com
- Removed CWD_IN_ROOT_PATH, CWD_IN_USER_PATH also from the UI where
they showed as empty lines in the overview (FATE#100011,
boo#900829), by Antoine Belvire.
- 3.1.5
-------------------------------------------------------------------
Tue Aug 5 12:58:39 UTC 2014 - ancor@suse.com
- Speedup Security.ReadServiceSettings (bnc#890349)
- Drop obsolete runlevel parameter from some methods
- 3.1.4
-------------------------------------------------------------------
Fri Mar 28 10:09:46 UTC 2014 - vmoravec@suse.com
- Fix failing testsuite
- 3.1.3
-------------------------------------------------------------------
Thu Jan 30 16:04:59 UTC 2014 - jreidinger@suse.com
- Remove writting to dropped /etc/sysconfig/suseconfig
(FATE#100011)
- 3.1.2
-------------------------------------------------------------------
Wed Nov 13 15:56:18 UTC 2013 - jreidinger@suse.com
- Add explicit COPYING file
-------------------------------------------------------------------
Thu Sep 19 16:04:32 UTC 2013 - lslezak@suse.cz
- do not use *.spec.in template, use *.spec file with RPM macros
instead
- 3.1.0
-------------------------------------------------------------------
Wed Jul 31 08:39:17 UTC 2013 - yast-devel@opensuse.org
- converted from YCP to Ruby by YCP Killer
(https://github.com/yast/ycp-killer)
- version 3.0.0
-------------------------------------------------------------------
Thu Apr 25 14:15:59 CEST 2013 - jsuchome@suse.cz
- ignore case for encryption method names (bnc#810600)
- 2.23.6
-------------------------------------------------------------------
Fri Mar 8 14:04:48 CET 2013 - jsuchome@suse.cz
- remove broken LASTLOG_ENAB entry from /etc/login.defs (bnc#807099)
- 2.23.5
-------------------------------------------------------------------
Thu Mar 7 07:37:49 CET 2013 - jsuchome@suse.cz
- drop unused LASTLOG_ENAB support (bnc#807099)
- drop obsoleted GROUP_ENCRYPTION (bnc#802006)
- if key is not present in config file, do not write new value
(bnc#807099)
- 2.23.4
-------------------------------------------------------------------
Wed Mar 6 16:19:20 CET 2013 - jsuchome@suse.cz
- added missing etc_polkit-default-privs_local.scr
- 2.23.3
-------------------------------------------------------------------
Wed Feb 6 15:46:02 CET 2013 - jsuchome@suse.cz
- /etc/default/useradd is dropped (bnc#802006)
- adapted to changes of /etc/login.defs (bnc#802006)
- 2.23.2
-------------------------------------------------------------------
Mon Feb 4 14:53:25 CET 2013 - jsuchome@suse.cz
- testsuite adapted to last changes (SuSEconfig removal)
- 2.23.1
-------------------------------------------------------------------
Wed Oct 24 11:08:58 CEST 2012 - jsuchome@suse.cz
- remove SuSEconfig calls (fate#100011)
- 2.23.0
-------------------------------------------------------------------
Mon Apr 2 10:27:53 CEST 2012 - jsuchome@suse.cz
- testsuite: explicitely set the output of target.stat
- 2.22.5
-------------------------------------------------------------------
Thu Mar 29 15:59:20 CEST 2012 - jsuchome@suse.cz
- merge proofread texts
- 2.22.4
-------------------------------------------------------------------
Mon Mar 26 10:26:38 CEST 2012 - jsuchome@suse.cz
- testsuite adapted to changes in FileUtils.ycp
- 2.22.3
-------------------------------------------------------------------
Mon Feb 20 08:39:15 CET 2012 - jsuchome@suse.cz
- corectly read/write ctrl-alt-delete behavior when systemd is used
(bnc#742783)
- 2.22.2
-------------------------------------------------------------------
Tue Jan 31 15:48:21 CET 2012 - jsuchome@suse.cz
- use sha512 as default encryption value, not 'des' (bnc#743715)
- 2.22.1
-------------------------------------------------------------------
Wed Jan 25 13:45:22 CET 2012 - jsuchome@suse.cz
- confirmed license
- 2.22.0
-------------------------------------------------------------------
Mon Oct 10 09:40:21 CEST 2011 - jsuchome@suse.cz
- include etc_polkit-default-privs_local.scr in rpm
- 2.21.6
-------------------------------------------------------------------
Mon Sep 26 14:58:39 CEST 2011 - visnov@suse.cz
- set dialog title
- 2.21.5
-------------------------------------------------------------------
Mon Sep 19 14:55:57 CEST 2011 - jsuchome@suse.cz
- fixed testsuite
- 2.21.4
-------------------------------------------------------------------
Fri Sep 16 10:38:59 CEST 2011 - jsuchome@suse.cz
- added option to tune system hibernation rights (bnc#704997)
- 2.21.3
-------------------------------------------------------------------
Thu Sep 8 15:43:35 CEST 2011 - jsuchome@suse.cz
- sysctl settings now in /etc/sysctl.conf (bnc#714405)
- 2.21.2
-------------------------------------------------------------------
Fri Aug 5 12:35:05 CEST 2011 - tgoettlicher@suse.de
- fixed .desktop file (bnc #681249)
-------------------------------------------------------------------
Wed Jul 20 11:04:03 CEST 2011 - jsuchome@suse.cz
- remove blowfish hash from selections (fate#312321)
- 2.21.1
-------------------------------------------------------------------
Tue Apr 5 11:03:35 CEST 2011 - jsuchome@suse.cz
- added support for SHA-2 based crypto methods (fate309705)
- 2.21.0
-------------------------------------------------------------------
Wed Nov 10 14:19:15 CET 2010 - jsuchome@suse.cz
- remember the default value of CRACKLIB_DICT_PATH (bnc#650425)
- 2.20.2
-------------------------------------------------------------------
Mon Aug 16 13:30:29 CEST 2010 - jsuchome@suse.cz
- removed 'disable' from descriptions of settings (bnc#610944)
- 2.20.1
-------------------------------------------------------------------
Fri Aug 6 11:07:49 CEST 2010 - jsuchome@suse.cz
- testsuite adapted to changes in yast2-pam
- 2.20.0
-------------------------------------------------------------------
Fri Mar 12 08:05:50 CET 2010 - jsrain@suse.cz
- renamed the to Security Center and Hardening (fate#309121)
-------------------------------------------------------------------
Fri Feb 5 11:45:27 CET 2010 - jsuchome@suse.cz
- DISPLAYMANAGER_SHUTDOWN is not for GDM (bnc#570656)
- 2.19.1
------------------------------------------------------------------
Wed Jan 13 18:56:03 CET 2010 - kmachalkova@suse.cz
- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
where root privileges are needed, removed X-KDE-SubstituteUID key
(bnc#540627)
-------------------------------------------------------------------
Mon Dec 21 15:10:36 CET 2009 - jsuchome@suse.cz
- new help text for PASS_MIN_LEN (bnc#535617)
- 2.19.0
-------------------------------------------------------------------
Thu Oct 1 13:40:49 CEST 2009 - jsuchome@suse.cz
- do not save PASS_MIN_LEN if cracklib is disabled
- ensure polkit privileges are applied (bnc#541393)
- 2.18.3
-------------------------------------------------------------------
Thu Sep 3 14:41:44 CEST 2009 - jsuchome@suse.cz
- added keywords to desktop file
- 2.18.2
-------------------------------------------------------------------
Mon Jun 22 07:55:26 CEST 2009 - coolo@novell.com
- fix uild with automake 1.11
- 2.18.1
-------------------------------------------------------------------
Tue Jun 2 22:26:15 CEST 2009 - jsuchome@suse.cz
- pam_pwcheck calls replaced with pam_cracklib/pam_pwhistory,
removed obsolete "obscure checks" settings (fate#305468)
- 2.18.0
-------------------------------------------------------------------
Mon Feb 9 11:58:17 CET 2009 - lslezak@suse.cz
- added "SuSEfirewall" and "earlysyslog" service to ignore list
of extra services in runlevel 3 and 5 (bnc#473345)
-------------------------------------------------------------------
Wed Jan 21 10:09:02 CET 2009 - jsuchome@suse.cz
- removed progress dialog during read (bnc#447584)
-------------------------------------------------------------------
Fri Nov 28 13:29:35 CET 2008 - ug@suse.de
- conflict in rnc file fixed
- 2.17.12
-------------------------------------------------------------------
Thu Nov 13 15:29:31 CET 2008 - ug@suse.de
- rnc file fixed
- 2.17.11
-------------------------------------------------------------------
Mon Nov 10 07:55:54 CET 2008 - jsuchome@suse.cz
- testsuite adapted to previous changes
- 2.17.10
-------------------------------------------------------------------
Fri Nov 7 15:56:03 CET 2008 - jsuchome@suse.cz
- fixes for bnc#442552:
- missing check for `finish
- check more carefuly pam-config output, correctly remove values
- remove GROUP_ENRYPTION from levels
- do not check service values against levels
- 2.17.9
-------------------------------------------------------------------
Fri Nov 7 10:04:30 CET 2008 - jsuchome@suse.cz
- fixed testsuite
- 2.17.8
-------------------------------------------------------------------
Thu Oct 30 15:39:10 CET 2008 - lslezak@suse.cz
- better check enabled mail services (bnc#437363)
- do not check "consolekit" service, it's started automatically
(bnc#436797), added "boot.clock" as an optional service
- fixed location of "DISABLE_RESTART_ON_UPDATE" and
"DISABLE_STOP_ON_REMOVAL" variables - they are in
/etc/sysconfig/services now
- 2.17.7
-------------------------------------------------------------------
Fri Oct 24 09:45:10 CEST 2008 - lslezak@suse.cz
- Disable "Change Status" button when the current value is
"Unknown" (bnc#436796)
-------------------------------------------------------------------
Mon Oct 13 12:00:11 CEST 2008 - lslezak@suse.cz
- fixed the label for option DISPLAYMANAGER_ROOT_LOGIN_REMOTE
(bnc#434273)
- 2.17.6
-------------------------------------------------------------------
Wed Oct 8 08:16:33 CEST 2008 - jsuchome@suse.cz
- unified help texts for IP forwarding (bnc#432186)
- use Table instead of RichText also for GTK UI (bnc#432446)
- 2.17.5
-------------------------------------------------------------------
Fri Sep 26 10:02:20 CEST 2008 - lslezak@suse.cz
- fixed the Security Overview dialog in ncurses mode (use a table
widget instead of richtext) (bnc#429965)
- 2.17.4
-------------------------------------------------------------------
Tue Sep 23 13:16:26 CEST 2008 - jsrain@suse.cz
- fixed incorrect tags in helps (bnc #429063)
-------------------------------------------------------------------
Tue Sep 16 17:33:18 CEST 2008 - lslezak@suse.cz
- check enabled services in runlevel 3 and 5, activate changes
in Security::Write() (bnc#425864)
- testsuite update
- 2.17.3
-------------------------------------------------------------------
Mon Sep 15 16:13:46 CEST 2008 - lslezak@suse.cz
- added new variables to the predefined security levels
- fixed build: updated the testsuite - added new variables
- 2.17.2
-------------------------------------------------------------------
Mon Sep 15 14:08:16 CEST 2008 - lslezak@suse.cz
- overview dialog - display a warning in the help popup when the
option could not be read
-------------------------------------------------------------------
Fri Sep 12 14:01:30 CEST 2008 - lslezak@suse.cz
- added more options in the security overview dialog, added "Help"
links (fate#303598)
- 2.17.1
-------------------------------------------------------------------
Tue Aug 12 12:12:58 CEST 2008 - lslezak@suse.cz
- added security overview dialog (part of fate#303598)
- 2.17.0
-------------------------------------------------------------------
Mon Aug 11 16:32:06 CEST 2008 - lslezak@suse.cz
- display tree navigationon on the left side, display only one
dialog instead of the long workflow (part of fate#303598)
-------------------------------------------------------------------
Fri May 16 16:40:22 CEST 2008 - jsrain@suse.cz
- added categories Settings and System into desktop file
(bnc #382778)
-------------------------------------------------------------------
Wed Apr 30 13:07:33 CEST 2008 - jsuchome@suse.cz
- new defaults in security levels (bnc#385159):
CWD_IN_ROOT_PATH, CWD_IN_USER_PATH always "no",
ENABLE_SYSRQ "yes" for Home Workstation
RUN_UPDATEDB_AS always "nobody"
OBSCURE_CHECKS_ENAB, PASSWD_USE_CRACKLIB always "yes"
- 2.16.1
-------------------------------------------------------------------
Mon Apr 14 10:18:13 CEST 2008 - jsuchome@suse.cz
- 2.16.0
-------------------------------------------------------------------
Mon Mar 17 12:43:32 CET 2008 - jsrain@suse.cz
- added 'StartupNotify=true' to the desktop file (bnc #304964)
-------------------------------------------------------------------
Mon Dec 3 15:29:53 CET 2007 - jsuchome@suse.cz
- merged texts from proofread
-------------------------------------------------------------------
Thu Aug 23 15:16:42 CEST 2007 - jsuchome@suse.cz
- check the output of tointeger before using it as integer (#295494)
- 2.15.1
-------------------------------------------------------------------
Thu Jun 21 17:41:03 CEST 2007 - adrian@suse.de
- fix changelog entry order
-------------------------------------------------------------------
Fri May 25 13:30:04 CEST 2007 - jsrain@suse.cz
- removed outdated translations from .desktop-files (#271209)
-------------------------------------------------------------------
Wed Jan 17 11:01:08 CET 2007 - jsuchome@suse.cz
- fixed help text to mention GDM (#216915)
- 2.15.0
-------------------------------------------------------------------
Thu Oct 26 16:00:43 CEST 2006 - jsuchome@suse.cz
- schema file moved from autoyast package (#215249)
- 2.14.2
-------------------------------------------------------------------
Thu Sep 21 12:58:04 CEST 2006 - jsuchome@suse.cz
- write correct SuSEconfig module for display manager (#205979)
- 2.14.1
-------------------------------------------------------------------
Fri Aug 25 13:44:55 CEST 2006 - jsuchome@suse.cz
- adapted for pam-config usage (F300956)
- API of PamSettings module is obsolete
- 2.14.0
-------------------------------------------------------------------
Mon Aug 21 12:45:46 CEST 2006 - jsuchome@suse.cz
- adapted layout to fit in 80x40 xterm (#200382)
- 2.13.5
-------------------------------------------------------------------
Tue Jun 13 08:57:19 CEST 2006 - jsuchome@suse.cz
- use DISPLAYMANAGER_SHUTDOWN instead of KDM_SHUTDOWN (#183844)
- 2.13.4
-------------------------------------------------------------------
Mon Jun 12 11:36:34 CEST 2006 - mvidner@suse.cz
- Moved cfg_security.scr from yast2-security.rpm to yast2.rpm
- 2.13.3
-------------------------------------------------------------------
Mon Feb 20 09:28:33 CET 2006 - jsuchome@suse.cz
- reduced BuildRequires
- 2.13.2
-------------------------------------------------------------------