# # ChangeLog for / # # Generated by Trac 1.0.2 # Mar 29, 2024, 4:38:41 AM Thu, 21 Jun 2012 15:23:44 GMT quentin [2233] * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Block raskar from sending mail; he has been unresponsive to our ... Mon, 18 Jun 2012 22:45:08 GMT achernya [2232] * branches/fc17-dev/server/fedora/specs/openssh.spec.patch (modified) Remove detrimental kuserok patches from openssh Mon, 18 Jun 2012 22:44:11 GMT achernya [2231] * branches/fc17-dev/server/fedora/specs/krb5.spec.patch (modified) Update to krb5 1.10.2 Sun, 10 Jun 2012 22:39:39 GMT ezyang [2230] * branches/fc17-dev/server/doc/install-howto.sh (modified) * branches/fc17-dev/server/doc/install-ldap (modified) Update instructions for F17. Wed, 06 Jun 2012 19:44:13 GMT geofft [2229] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/tours.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tours.pem (modified) Certificate renewals for tours and scripts-cert Includes the ... Wed, 06 Jun 2012 19:38:38 GMT geofft [2228] * trunk/server/fedora/config/etc/httpd/vhosts.d/blog.gregbrockman.com.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (modified) Canonicalize SSLCertificateChainFile location to match r2227 Wed, 06 Jun 2012 19:33:48 GMT geofft [2227] * trunk/server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (modified) reify-vhost: Add SSLCertificateChainFile by default It makes the ... Mon, 28 May 2012 18:41:12 GMT achernya [2226] * branches/fc17-dev/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * branches/fc17-dev/server/fedora/config/etc/scripts/allowed-setugid.list (modified) Account for the /{bin,sbin} -> /usr/{bin,sbin} transition for allows ... Sat, 26 May 2012 18:28:16 GMT ezyang [2225] * branches/fc17-dev/server/doc/install-howto.sh (modified) Note that Grub rebuild is necessary. Sat, 26 May 2012 18:27:32 GMT ezyang [2224] * branches/fc17-dev/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Punt selinux sandbox not useful message Sat, 26 May 2012 18:26:40 GMT ezyang [2223] * branches/fc17-dev/server/fedora/config/etc/default (added) * branches/fc17-dev/server/fedora/config/etc/default/grub (added) Version default/grub, primary change is remove /dev/ttyS0 from ... Sat, 26 May 2012 18:21:18 GMT ezyang [2222] * branches/fc17-dev/server/doc/install-howto.sh (modified) * branches/fc17-dev/server/doc/upgrade-tips (modified) Minor updates. Sat, 26 May 2012 17:04:27 GMT ezyang [2221] * branches/fc17-dev/server/common/oursrc/tokensys/scripts-afsagent-startup.in (modified) Remove linux33 sysname. Sat, 26 May 2012 16:26:36 GMT ezyang [2220] * branches/fc17-dev/server/fedora/config/etc/modules-load.d/binfmt_misc.conf (added) Load binfmt_misc kernel module. Sat, 26 May 2012 15:59:03 GMT ezyang [2219] * branches/fc17-dev/server/common/oursrc/tokensys/scripts-afsagent-startup.in (modified) Add Fedora 17 and Linux 3.3 to sysname. Fri, 25 May 2012 20:05:16 GMT ezyang [2218] * branches/fc17-dev/server/common/oursrc/php_scripts/php_scripts.h (modified) s/function_entry/zend_function_entry/ due to API change in PHP 5.4 Fri, 25 May 2012 20:04:48 GMT ezyang [2217] * branches/fc17-dev/server/fedora/specs/krb5.spec.patch (modified) Version update to krb5. Fri, 25 May 2012 19:39:12 GMT ezyang [2216] * branches/fc17-dev/server/fedora/config/etc/yum.repos.d/scripts.repo (modified) Actually use F17 repo. Fri, 25 May 2012 19:23:38 GMT ezyang [2215] * branches/fc17-dev (modified) * branches/fc17-dev/locker (modified) * branches/fc17-dev/server/doc/install-howto.sh (modified) * branches/fc17-dev/server/fedora/Makefile (modified) Merge r2210 through r2214 into '.' Fri, 25 May 2012 19:23:00 GMT ezyang [2214] * trunk/server/doc/install-howto.sh (modified) Let Fedora dynamically allocate the UID. Fri, 25 May 2012 19:22:30 GMT ezyang [2213] * trunk/server/fedora/Makefile (modified) Fix path to zephyr. Fri, 25 May 2012 08:27:20 GMT andersk [2212] * branches/fc17-dev/server/fedora/specs/scripts-static-cat.spec (modified) Update scripts-static-cat packaging Fri, 25 May 2012 08:09:12 GMT andersk [2211] * branches/fc17-dev/server/fedora/Makefile (modified) * branches/fc17-dev/server/fedora/specs/ghc-MonadCatchIO-mtl.spec (deleted) * branches/fc17-dev/server/fedora/specs/ghc-cgi.spec (modified) * branches/fc17-dev/server/fedora/specs/ghc-unix-handle.spec (modified) Update ghc-cgi, ghc-unix-handle; punt ghc-MonadCatchIO-mtl Fri, 25 May 2012 05:53:43 GMT ezyang [2210] * branches/fc17-dev (modified) * branches/fc17-dev/server/fedora/Makefile (modified) * branches/fc17-dev/server/fedora/specs/zephyr.spec (modified) Merge zephyr from trunk. Fri, 25 May 2012 05:53:04 GMT ezyang [2209] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/zephyr.spec (modified) Upgrade zephyr to 3.0.2 Fri, 25 May 2012 05:52:33 GMT ezyang [2208] * branches/fc17-dev (modified) * branches/fc17-dev/server/common/patches/php-cve-2012-1823.patch (deleted) * branches/fc17-dev/server/fedora/Makefile (modified) Merge changes from trunk. Fri, 25 May 2012 05:49:00 GMT ezyang [2207] * branches/fc17-dev/server/common/patches/httpd-sysv-deps.patch (deleted) * branches/fc17-dev/server/fedora/specs/httpd.spec.patch (modified) Punt httpd sysv patch. Fri, 25 May 2012 05:48:03 GMT ezyang [2206] * branches/fc17-dev/server/fedora/Makefile (modified) * branches/fc17-dev/server/fedora/specs/redland-bindings.spec.patch (deleted) redland-bindings is fixed in 1.0.14.1 ... Fri, 25 May 2012 04:55:16 GMT ezyang [2205] * branches/fc17-dev/host/credit-card/host.py (modified) Needs w flag. Fri, 25 May 2012 04:50:59 GMT ezyang [2204] * branches/fc17-dev/host/credit-card/host.py (modified) Drop page cache before and after futzing around with mounts. Fri, 25 May 2012 04:29:12 GMT ezyang [2203] * trunk/server/common/patches/php-cve-2012-1823.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (deleted) Remove PHP from repository. Thu, 24 May 2012 23:50:10 GMT ezyang [2202] * branches/fc17-dev (modified) * branches/fc17-dev/server/common/patches/openafs-linux-3.1-fsync.patch (deleted) * branches/fc17-dev/server/common/patches/openafs-linux-3.1-rcu.patch (deleted) * branches/fc17-dev/server/common/patches/openafs-linux-3.1-zalloc.patch (deleted) * branches/fc17-dev/server/common/patches/openafs-linux-3.2-nlink.patch (deleted) * branches/fc17-dev/server/common/patches/openafs-systemd-remote-fs.patch (copied) * branches/fc17-dev/server/common/patches/openafs-systemd.patch (deleted) * branches/fc17-dev/server/fedora/Makefile (modified) * branches/fc17-dev/server/fedora/specs/openafs-include-xstat.spec.patch (deleted) * branches/fc17-dev/server/fedora/specs/openafs-systemd.spec.patch (deleted) * branches/fc17-dev/server/fedora/specs/openafs.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/php.spec.patch (deleted) Merge in changes from trunk (punting php.spec) Thu, 24 May 2012 23:43:31 GMT ezyang [2201] * trunk/server/fedora/Makefile (modified) Do not fetch Cabal dependencies. Thu, 24 May 2012 23:33:30 GMT ezyang [2200] * trunk/server/common/patches/openafs-linux-3.1-fsync.patch (deleted) * trunk/server/common/patches/openafs-linux-3.1-rcu.patch (deleted) * trunk/server/common/patches/openafs-linux-3.1-zalloc.patch (deleted) * trunk/server/common/patches/openafs-linux-3.2-nlink.patch (deleted) * trunk/server/common/patches/openafs-systemd-remote-fs.patch (added) * trunk/server/common/patches/openafs-systemd.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs-include-xstat.spec.patch (deleted) * trunk/server/fedora/specs/openafs-systemd.spec.patch (deleted) * trunk/server/fedora/specs/openafs.spec.patch (modified) Upgrade OpenAFS to 1.6.1 (undeployed) Thu, 24 May 2012 23:32:36 GMT ezyang [2199] * trunk/server/fedora/specs/php.spec.patch (modified) PHP version bump (undeployed) Wed, 23 May 2012 04:48:29 GMT ezyang [2198] * branches/fc17-dev/server/fedora/specs/httpd.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/krb5.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/openssh.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/php.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/redland-bindings.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/rubygems.spec.patch (modified) Untested version bumps for all spec files. Wed, 23 May 2012 03:03:49 GMT ezyang [2197] * branches/fc17-dev/server/fedora/Makefile (modified) Update mock invocations to be f17. Wed, 23 May 2012 03:02:45 GMT ezyang [2196] * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc17-i386.cfg (added) * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc17-x86_64.cfg (added) Mock configuration for F17. Wed, 23 May 2012 02:52:35 GMT ezyang [2195] * branches/fc17-dev (modified) * branches/fc17-dev/host/debian/scripts-syslog-ng-config/d_zroot.pl (modified) * branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/changelog (modified) * branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/control (modified) * branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/docs (deleted) * branches/fc17-dev/locker (modified) * branches/fc17-dev/locker/deploy/bin/git (modified) * branches/fc17-dev/locker/deploy/bin/rails (modified) * branches/fc17-dev/locker/sbin/delete-user (copied) * branches/fc17-dev/locker/sbin/scripts-createrepo (copied) * branches/fc17-dev/lvs/debian/config/etc/ha.d/ldirectord.cf (modified) * branches/fc17-dev/lvs/debian/config/etc/lighttpd/scripts-maint/index.html (modified) * branches/fc17-dev/server/common/oursrc/accountadm/Makefile.in (modified) * branches/fc17-dev/server/common/oursrc/accountadm/admof.c (modified) * branches/fc17-dev/server/common/oursrc/accountadm/configure.in (modified) * branches/fc17-dev/server/common/oursrc/accountadm/mrproper (modified) * branches/fc17-dev/server/common/oursrc/accountadm/signup-scripts-backend.in (modified) * branches/fc17-dev/server/common/oursrc/accountadm/signup-scripts-frontend.c (deleted) * branches/fc17-dev/server/common/oursrc/fuse-better-mousetrapfs (copied) * branches/fc17-dev/server/common/oursrc/whoisd/scripts-whoisd.service (modified) * branches/fc17-dev/server/common/patches/httpd-suexec-scripts.patch (modified) * branches/fc17-dev/server/common/patches/openafs-linux-3.2-nlink.patch (copied) * branches/fc17-dev/server/common/patches/openafs-localcsdb.patch (deleted) * branches/fc17-dev/server/common/patches/openafs-systemd-crond.patch (modified) * branches/fc17-dev/server/common/patches/openafs-systemd-csdb.patch (copied) * branches/fc17-dev/server/common/patches/openafs-systemd.patch (modified) * branches/fc17-dev/server/common/patches/php-cve-2012-1823.patch (copied) * branches/fc17-dev/server/doc/install-howto.sh (modified) * branches/fc17-dev/server/fedora/Makefile (modified) * branches/fc17-dev/server/fedora/config/etc/cron.d/slapdagent (deleted) * branches/fc17-dev/server/fedora/config/etc/environment.cron (deleted) * branches/fc17-dev/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/asa.conf (modified) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/bakerfoundation.conf (copied) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/blog.gregbrockman.com.conf (copied) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/cook.bluechi.ps.conf (deleted) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/courseroad.conf (copied) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/dchang.conf (copied) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/debathena.conf (modified) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/finance.blue-sun-corp.com.conf (deleted) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/impact.conf (modified) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (copied) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/music.blue-sun-corp.com.conf (deleted) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/peoplesearch.conf (copied) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/pickr.conf (copied) * branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/trac.blue-sun-corp.com.conf (deleted) * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (modified) * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (modified) * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-i386.cfg (modified) * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-x86_64.cfg (modified) * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-i386.cfg (modified) * branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-x86_64.cfg (modified) * branches/fc17-dev/server/fedora/config/etc/modules-load.d (copied) * branches/fc17-dev/server/fedora/config/etc/nagios/check_afs (modified) * branches/fc17-dev/server/fedora/config/etc/nagios/nrpe.cfg (modified) * branches/fc17-dev/server/fedora/config/etc/pam.d/crond (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bakerfoundation.pem (copied) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bc.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/blog.gregbrockman.com.pem (copied) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/blue-sun-corp.com.pem (deleted) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/carepackages.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/classmates.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/cook.bluechi.ps.pem (deleted) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/courseroad.pem (copied) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/cs6090.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/dchang.pem (copied) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/debathena.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/eastgate.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/finboard.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/gsc.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/impact.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/isawyou.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ldpreload.com.pem (copied) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/peoplesearch.pem (copied) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/picker.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/pickr.pem (copied) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/psetcentral.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/schuh.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/tibetforum.pem (modified) * branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ties.pem (modified) * branches/fc17-dev/server/fedora/config/etc/postfix/main.cf (modified) * branches/fc17-dev/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * branches/fc17-dev/server/fedora/config/etc/scripts/allowed-setugid.list (modified) * branches/fc17-dev/server/fedora/config/etc/sudoers (modified) * branches/fc17-dev/server/fedora/config/etc/sysconfig/dirsrv (modified) * branches/fc17-dev/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified) * branches/fc17-dev/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) * branches/fc17-dev/server/fedora/config/etc/syslog-ng/syslog-ng.conf (modified) * branches/fc17-dev/server/fedora/config/etc/systemd (copied) * branches/fc17-dev/server/fedora/config/etc/systemd/system (modified) * branches/fc17-dev/server/fedora/config/etc/yum.conf (modified) * branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (modified) * branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified) * branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.local (modified) * branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.mousetrap (copied) * branches/fc17-dev/server/fedora/config/usr/vice/etc/README (copied) * branches/fc17-dev/server/fedora/specs/accountadm.spec (modified) * branches/fc17-dev/server/fedora/specs/fuse-better-mousetrapfs.spec (copied) * branches/fc17-dev/server/fedora/specs/httpd.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/krb5.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/openafs-systemd.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/openafs.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/openssh.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/php.spec.patch (copied) * branches/fc17-dev/server/fedora/specs/python-afs.spec (copied) * branches/fc17-dev/server/fedora/specs/rubygems.spec.patch (modified) * branches/fc17-dev/server/fedora/specs/scripts-base.spec (modified) * branches/fc17-dev/server/fedora/specs/scripts-static-cat.spec (modified) Merge changes from trunk. Wed, 16 May 2012 17:27:00 GMT achernya [2194] * trunk/server/fedora/config/etc/pki/tls/certs/ties.pem (modified) Certificate renewal for ties Wed, 16 May 2012 17:26:27 GMT achernya [2193] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update postfix to 2.8.10 Wed, 09 May 2012 17:04:50 GMT adehnert [2192] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Ping sql.mit.edu on the backend network Wed, 09 May 2012 17:03:34 GMT adehnert [2191] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Update monitoring servers to syn, c-t, and sipb-noc Wed, 09 May 2012 05:58:39 GMT adehnert [2190] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Define check_backend NRPE check Sat, 05 May 2012 23:32:04 GMT ezyang [2189] * trunk/server/fedora/specs/rubygems.spec.patch (modified) Bump rubygems version. Sat, 05 May 2012 23:02:03 GMT ezyang [2188] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Ignore oom_score_adj too. Sat, 05 May 2012 21:41:27 GMT ezyang [2187] * trunk/server/fedora/specs/krb5.spec.patch (modified) Bump version for krb5. Sat, 05 May 2012 21:40:12 GMT ezyang [2186] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) Another mitigation to the PHP command line flags vulnerability. Sat, 05 May 2012 21:39:28 GMT ezyang [2185] * trunk/server/fedora/specs/openssh.spec.patch (modified) Actually patch in SSH_GSSAPI_NAME (as best as I can tell, this has ... Sat, 05 May 2012 21:32:24 GMT ezyang [2184] * trunk/server/common/patches/php-cve-2012-1823.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (added) Scriptsify PHP, patch CVE 2012-1823. Sat, 28 Apr 2012 05:21:19 GMT ezyang [2183] * trunk/server/fedora/config/etc/cron.d/slapdagent (deleted) * trunk/server/fedora/config/etc/sysconfig/dirsrv (modified) Revert disk ccache hack, upstream has fixed the bug. Fri, 27 Apr 2012 04:22:47 GMT geofft [2182] * trunk/server/fedora/config/etc/pki/tls/certs/courseroad.pem (moved) Put courseroad cert in right directory Fri, 27 Apr 2012 04:19:17 GMT geofft [2181] * trunk/server/fedora/config/etc/httpd/vhosts.d/courseroad.conf (added) * trunk/server/fedora/config/etc/pki/tls/courseroad.pem (added) Certificate and configuration for courseroad [help.mit.edu #1967114] Mon, 23 Apr 2012 03:47:15 GMT quentin [2180] * trunk/lvs/debian/config/etc/ha.d/ldirectord.cf (modified) Uncomment s-a and b-m, yay! Thu, 12 Apr 2012 15:38:23 GMT achernya [2179] * trunk/server/fedora/config/etc/httpd/vhosts.d/finance.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/music.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/trac.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/blue-sun-corp.com.pem (deleted) Remove blue-sun-corp certificate and configuration, long expired Tue, 10 Apr 2012 17:30:09 GMT achernya [2178] * trunk/server/fedora/config/etc/pki/tls/certs/carepackages.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/finboard.pem (modified) Certificate renewal for finboard and carepackages Tue, 10 Apr 2012 05:25:23 GMT geofft [2177] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Revert r2176 We should allow SSLProxy* to be configurable in ... Mon, 09 Apr 2012 22:21:45 GMT geofft [2176] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Enable SSLProxyEngine This allows you to mod_proxy (e.g., ... Sun, 08 Apr 2012 20:25:54 GMT ezyang [2175] * trunk/locker/deploy/bin/git (modified) Force the PATH to be in front. Sun, 08 Apr 2012 20:23:23 GMT ezyang [2174] * trunk/locker/deploy/bin/git (modified) Add warning about Git version. Fri, 06 Apr 2012 18:29:43 GMT achernya [2173] * trunk/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) fping now has capabilities Fri, 06 Apr 2012 18:27:47 GMT achernya [2172] * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bc.pem (modified) Certificate renewal for asa and bc Tue, 27 Mar 2012 01:34:16 GMT ezyang [2171] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/yum-updatesd.service (added) Enable yum-updatesd.service Mon, 26 Mar 2012 22:01:11 GMT ezyang [2170] * trunk/server/common/patches/openafs-localcsdb.patch (deleted) * trunk/server/common/patches/openafs-systemd-csdb.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) Port csdb patch to systemd, and include mousetrap db. Mon, 26 Mar 2012 21:40:36 GMT ezyang [2169] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) * trunk/server/fedora/config/usr/vice/etc/CellServDB.mousetrap (added) * trunk/server/fedora/config/usr/vice/etc/README (added) Split up cellServDB into mousetrap and local. Mon, 26 Mar 2012 20:46:42 GMT ezyang [2168] * trunk/server/common/patches/openafs-systemd-crond.patch (modified) Update crond systemd patch. Mon, 26 Mar 2012 20:07:08 GMT ezyang [2167] * trunk/server/fedora/specs/scripts-base.spec (modified) Add fuse-better-mousetrapfs to scripts-base. Mon, 26 Mar 2012 19:48:39 GMT ezyang [2166] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/afs-000.mount (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/crond.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/ntpd.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/openafs-client.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/remote-fs.target (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent-startup.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.timer (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-whoisd.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/syslog-ng.service (added) Add enabled services that we definitely want. Mon, 26 Mar 2012 19:25:28 GMT ezyang [2165] * trunk/server/common/patches/openafs-systemd.patch (modified) Add OpenAFS to the dependencies of remote-fs. Mon, 26 Mar 2012 19:24:16 GMT ezyang [2164] * trunk/server/fedora/config/etc/systemd/system/afs-000.mount (modified) Bind this mount more closely to the AFS service. Mon, 26 Mar 2012 19:08:14 GMT ezyang [2163] * trunk/server/fedora/config/etc/systemd/system/afs-000.mount (modified) Don't use local for better-mousetrapfs. Mon, 26 Mar 2012 19:07:04 GMT ezyang [2162] * trunk/server/fedora/specs/fuse-better-mousetrapfs.spec (modified) Don't store better-mousetrapfs in local. Mon, 26 Mar 2012 18:40:15 GMT ezyang [2161] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) Remove pointless race checking; kernel doesn't preserve old proc ... Mon, 26 Mar 2012 18:38:54 GMT ezyang [2160] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) Avoid races if /proc directory goes away Mon, 26 Mar 2012 17:58:38 GMT ezyang [2159] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) s/AUTH/AUTHPRIV/ and report cwd too. Mon, 26 Mar 2012 17:47:43 GMT ezyang [2158] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) Log to AUTH so we get zephyrs. Mon, 26 Mar 2012 06:54:24 GMT ezyang [2157] * trunk/server/common/patches/httpd-2.2.x-CVE-2011-3607.patch (deleted) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0031.patch (deleted) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0053.patch (deleted) * trunk/server/fedora/specs/httpd.spec.patch (modified) Latest httpd fixes CVEs we were patching. Mon, 26 Mar 2012 06:52:45 GMT ezyang [2156] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) CellServDB entry for the mousetrap directory, so it can be mounted. Mon, 26 Mar 2012 06:49:57 GMT ezyang [2155] * trunk/server/fedora/config/etc/modules-load.d (added) * trunk/server/fedora/config/etc/modules-load.d/fuse.conf (added) * trunk/server/fedora/config/etc/systemd (added) * trunk/server/fedora/config/etc/systemd/system (added) * trunk/server/fedora/config/etc/systemd/system.conf (added) * trunk/server/fedora/config/etc/systemd/system/afs-000.mount (added) * trunk/server/fedora/config/etc/systemd/user (added) Configuration for setting the mousetrap. Mon, 26 Mar 2012 06:49:01 GMT ezyang [2154] * trunk/server/common/oursrc/fuse-better-mousetrapfs (moved) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/fuse-better-mousetrapfs.spec (modified) Make better-mousetrapfs actually build. Mon, 26 Mar 2012 05:35:00 GMT ezyang [2153] * trunk/server/fedora/specs/httpd.spec.patch (modified) Version bump for httpd. Mon, 26 Mar 2012 04:43:38 GMT adehnert [2152] * trunk/server/fedora/config/etc/nagios/check_afs (modified) * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Split out AFS nagios checks Mon, 26 Mar 2012 04:16:03 GMT ezyang [2151] * trunk/server/common/oursrc/better-mousetrapfs (added) * trunk/server/common/oursrc/better-mousetrapfs/better-mousetrapfs (added) * trunk/server/fedora/specs/fuse-better-mousetrapfs.spec (added) Package andersk's better-mousetrapfs Sun, 25 Mar 2012 01:00:52 GMT ezyang [2150] * trunk/locker (modified) * trunk/locker/deploy/bin/rails (modified) Merge r2149: Make Rails autoinstaller work with Rails 3. Sun, 25 Mar 2012 00:40:26 GMT ezyang [2149] * branches/locker-dev/locker/deploy/bin/rails (modified) Make Rails autoinstaller work with Rails 3: - Rewrite the ... Mon, 19 Mar 2012 17:28:44 GMT achernya [2148] * trunk/server/fedora/config/etc/pki/tls/certs/tibetforum.pem (modified) Certificate renewal for tibetforum Tue, 06 Mar 2012 16:43:16 GMT achernya [2147] * trunk/server/fedora/config/etc/httpd/vhosts.d/dchang.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/dchang.pem (added) Certificate and configuration for dchang Fri, 02 Mar 2012 06:38:08 GMT andersk [2146] * trunk/locker/sbin/delete-user (modified) Synchronously delete records from ldap delete() might not actually ... Fri, 02 Mar 2012 05:50:20 GMT andersk [2145] * trunk/server/common/oursrc/accountadm/Makefile.in (modified) * trunk/server/common/oursrc/accountadm/configure.in (modified) * trunk/server/common/oursrc/accountadm/mrproper (modified) * trunk/server/common/oursrc/accountadm/signup-scripts-frontend.c (deleted) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) * trunk/server/fedora/specs/accountadm.spec (modified) Kill signup-scripts-frontend We don’t need this setuid binary ... Fri, 02 Mar 2012 05:47:58 GMT andersk [2144] * trunk/server/fedora/specs/openssh.spec.patch (modified) Fix openssh.spec.patch again Mon, 27 Feb 2012 18:52:17 GMT achernya [2143] * trunk/server/common/patches/openafs-linux-3.2-nlink.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) Update openafs to build against kernel 3.2 Sat, 25 Feb 2012 18:05:27 GMT ezyang [2142] * trunk/server/fedora/specs/krb5.spec.patch (modified) Version bump on krb5. Sat, 25 Feb 2012 18:05:07 GMT ezyang [2141] * trunk/server/fedora/specs/rubygems.spec.patch (modified) Version bump on rubygems. Fri, 24 Feb 2012 04:39:01 GMT achernya [2140] * trunk/locker/sbin/delete-user (added) Utility to delete a specified user, their group, and all of their ... Thu, 23 Feb 2012 01:27:48 GMT geofft [2139] * trunk/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/ldpreload.com.pem (added) Certificate and configuration for ldpreload.com Wed, 22 Feb 2012 16:21:27 GMT achernya [2138] * trunk/server/fedora/config/etc/pki/tls/certs/gsc.pem (modified) Certificate renewal for gsc Mon, 20 Feb 2012 19:29:01 GMT achernya [2137] * trunk/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc13-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc13-x86_64.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc15-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc15-x86_64.cfg (modified) * trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (modified) * trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified) Switch from download3.fedora.redhat.com to dl.fedoraproject.org Tue, 14 Feb 2012 00:56:55 GMT ezyang [2136] * trunk/server/fedora/config/etc/pam.d/crond (modified) Don't load non-existent environment.cron Mon, 13 Feb 2012 23:53:31 GMT ezyang [2135] * trunk/server/fedora/config/etc/yum.conf (modified) Don't ever remove installonly packages. Mon, 13 Feb 2012 20:55:36 GMT achernya [2134] * trunk/server/common/patches/httpd-2.2.x-CVE-2011-3607.patch (added) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0031.patch (added) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0053.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) Patch httpd against some security vulnerabilities.