|
|
@2375
|
12 years |
andersk |
Tighten scripts vhost mail security
Broken MTAs such as MIT’s will ...
|
|
|
@2374
|
12 years |
achernya |
Certificate renewal for dchang; new certificate for cons
|
|
|
@2373
|
12 years |
achernya |
Certificate renewal for gsc
|
|
|
@2372
|
12 years |
achernya |
Block unresponsive spam-y user
|
|
|
@2365
|
12 years |
andersk |
New CellServDB from ops
|
|
|
@2364
|
12 years |
achernya |
Certificate renewal for classmates, psetcentral, schuh
|
|
|
@2360
|
12 years |
achernya |
Certificate renewal for blog.gregbrockman.com
|
|
|
@2359
|
12 years |
andersk |
/etc/ntp.conf: Refresh from Fedora 17
This enables queries on ::1, ...
|
|
|
@2358
|
12 years |
andersk |
/etc/named.conf: Add stub zones for mit.edu and 18.in-addr.arpa
|
|
|
@2357
|
12 years |
andersk |
/etc/hosts: Add not-backward
|
|
|
@2355
|
12 years |
achernya |
Certificate renewal for cs6090 and isawyou
|
|
|
@2354
|
12 years |
achernya |
Update postfix for version 2.9.5
|
|
|
@2353
|
12 years |
achernya |
Also add www.davidben.net
|
|
|
@2352
|
12 years |
achernya |
Clean up other similarly affected certificate chains
|
|
|
@2351
|
12 years |
achernya |
Remove InCommon Root CA from certificate chain
MIT recently switched ...
|
|
|
@2350
|
12 years |
achernya |
Certificate and configuration for davidben.net
|
|
|
@2347
|
12 years |
achernya |
Certificate renewal for eastgate, picker, pickr
|
|
|
@2346
|
12 years |
achernya |
Blacklist mount.nfs and netreport setuid binaries
|
|
|
@2345
|
12 years |
achernya |
Certificate renewal for impact; new certificate for crush
|
|
|
@2344
|
12 years |
andersk |
Disable mirrors for fedora.repo better.
|
|
|
@2343
|
12 years |
andersk |
Disable mirrors for fedora.repo
|
|
|
@2342
|
12 years |
andersk |
Import pristine upstream /etc/yum.repos.d/fedora.repo
|
|
|
@2341
|
12 years |
andersk |
Add SSLCertificateChainFile to debathena.conf
|
|
|
@2338
|
12 years |
achernya |
Certificate renewal for bakerfoundation, peoplesearch; initial ...
|
|
|
@2336
|
12 years |
quentin |
Add maoting as a blocked mail sender
|
|
|
@2334
|
12 years |
achernya |
Certificate renewal fixup ashdown, ec, listmon, sayno, swe, techfair, ...
|
|
|
@2333
|
12 years |
achernya |
Certificate renewal for ashdown, ec, listmon, sayno, swe, techfair, ...
|
|
|
@2332
|
12 years |
achernya |
Certificate renewal for hmmt
|
|
|
@2331
|
12 years |
achernya |
Certificate renewal for barnowl, fridget, maseeh, signup, sipb, ...
|
|
|
@2330
|
12 years |
quentin |
Partially revert r2329, and set postfix's inet_protocols to the ...
|
|
|
@2329
|
12 years |
glasgall |
re-enable westgate vhost
|
|
|
@2328
|
12 years |
achernya |
Add glasgall to aliases for root
|
|
|
@2327
|
12 years |
achernya |
Remove cdsa certificate; no longer hosted on scripts
|
|
|
@2326
|
12 years |
achernya |
Remove westgate configuration
|
|
|
@2325
|
12 years |
achernya |
Certificate renewal for rpl and stalk
|
|
|
@2324
|
12 years |
achernya |
Remove certificate and configuration for crosslinks, no longer on Scripts
|
|
|
@2323
|
12 years |
achernya |
Certificate renewal for bluechips.emergent-studios.com
|
|
|
@2322
|
12 years |
quentin |
Add certs for webathena, conner4, and update cert for debathena.
|
|
|
@2321
|
12 years |
geofft |
Disable SSL compression to defend against rumored side-channel attack
|
|
|
@2308
|
12 years |
achernya |
Add intermediate certificates for luke.wf
|
|
|
@2304
|
12 years |
ezyang |
Allow user list generation to access LDAP credentials.
|
|
|
@2296
|
12 years |
geofft |
Update to Postfix 2.9.4
|
|
|
@2295
|
12 years |
geofft |
Certificate renewals for ai6034 and classof2014
|
|
|
@2294
|
12 years |
ezyang |
Message no long occurs due to upstream fix ...
|
|
|
@2293
|
12 years |
ezyang |
File capabilities respect nosuid too ...
|
|
|
@2292
|
12 years |
ezyang |
Ignore setuid binaries in /var/lib/mock, which are nosuid'd
|
|
|
@2291
|
12 years |
ezyang |
Remount /var/lib/mock as nosuid
|
|
|
@2290
|
12 years |
achernya |
Really add the mitchief cert.
|
|
|
@2289
|
12 years |
achernya |
Certificate and configuration for mitchief.org
|
|
|
@2283
|
12 years |
geofft |
Add SSLCertificateChainFile for the renewals from r2282
|
|
|
@2282
|
12 years |
geofft |
A pile of certificate renewals
|
|
|
@2273
|
12 years |
achernya |
Actually chmod the files, too
|
|
|
@2272
|
12 years |
achernya |
/sbin moved too
|
|
|
@2271
|
12 years |
achernya |
Update statoveride post-action for /bin -> /usr/bin transition
|
|
|
@2270
|
12 years |
ezyang |
Add Scripts-IP for debugging purposes (identify real server, no X- ...
|
|
|
@2267
|
12 years |
andersk |
Move php sessions to /var/lib/scripts-php-sessions
|
|
|
@2266
|
12 years |
achernya |
Certificate renewal for metu.mit.edu
|
|
|
@2264
|
12 years |
adehnert |
Switch to upstream cipher suites
|
|
|
@2263
|
12 years |
geofft |
Certificate and configuration for luke.wf and www.luke.wf
|
|
|
@2258
|
12 years |
achernya |
Certificate renewal for nudelta; remove ailg-bdf as it is not configured
|
|
|
@2257
|
12 years |
adehnert |
Serve Django 1.4 admin media
Django 1.4 relocated the admin media in ...
|
|
|
@2256
|
12 years |
quentin |
Add a NRPE command for monitoring SMTP on localhost
|
|
|
@2255
|
12 years |
quentin |
Partially revert r2254, and allow postfix to calculate its own mynetworks.
|
|
|
@2254
|
12 years |
achernya |
Update to postfix 2.9.3
|
|
|
@2252
|
12 years |
achernya |
Add m-c and l-s to known hosts
|
|
|
@2251
|
12 years |
achernya |
Enable hostbased to m-c and l-s
|
|
|
@2246
|
12 years |
ezyang |
Reintegrate Fedora 17 development branch into trunk.
|
|
|
@2237
|
12 years |
achernya |
Reify eastgate.conf to bring it in sync with ldap, again
|
|
|
@2234
|
12 years |
achernya |
Reify eastgate.conf to bring it in sync with ldap
|
|
|
@2233
|
12 years |
quentin |
Block raskar from sending mail; he has been unresponsive to our ...
|
|
|
@2229
|
13 years |
geofft |
Certificate renewals for tours and scripts-cert
Includes the InCommon ...
|
|
|
@2228
|
13 years |
geofft |
Canonicalize SSLCertificateChainFile location to match r2227
|
|
|
@2227
|
13 years |
geofft |
reify-vhost: Add SSLCertificateChainFile by default
It makes the case ...
|
|
|
@2194
|
13 years |
achernya |
Certificate renewal for ties
|
|
|
@2193
|
13 years |
achernya |
Update postfix to 2.8.10
|
|
|
@2192
|
13 years |
adehnert |
Ping sql.mit.edu on the backend network
|
|
|
@2191
|
13 years |
adehnert |
Update monitoring servers to syn, c-t, and sipb-noc
|
|
|
@2190
|
13 years |
adehnert |
Define check_backend NRPE check
|
|
|
@2188
|
13 years |
ezyang |
Ignore oom_score_adj too.
|
|
|
@2183
|
13 years |
ezyang |
Revert disk ccache hack, upstream has fixed the bug.
|
|
|
@2182
|
13 years |
geofft |
Put courseroad cert in right directory
|
|
|
@2181
|
13 years |
geofft |
Certificate and configuration for courseroad [help.mit.edu #1967114]
|
|
|
@2179
|
13 years |
achernya |
Remove blue-sun-corp certificate and configuration, long expired
|
|
|
@2178
|
13 years |
achernya |
Certificate renewal for finboard and carepackages
|
|
|
@2177
|
13 years |
geofft |
Revert r2176
We should allow SSLProxy* to be configurable in ...
|
|
|
@2176
|
13 years |
geofft |
Enable SSLProxyEngine
This allows you to mod_proxy (e.g., RewriteRule ...
|
|
|
@2173
|
13 years |
achernya |
fping now has capabilities
|
|
|
@2172
|
13 years |
achernya |
Certificate renewal for asa and bc
|
|
|
@2171
|
13 years |
ezyang |
Enable yum-updatesd.service
|
|
|
@2169
|
13 years |
ezyang |
Split up cellServDB into mousetrap and local.
|
|
|
@2166
|
13 years |
ezyang |
Add enabled services that we definitely want.
|
|
|
@2164
|
13 years |
ezyang |
Bind this mount more closely to the AFS service.
|
|
|
@2163
|
13 years |
ezyang |
Don't use local for better-mousetrapfs.
|
|
|
@2156
|
13 years |
ezyang |
CellServDB entry for the mousetrap directory, so it can be mounted.
|
|
|
@2155
|
13 years |
ezyang |
Configuration for setting the mousetrap.
|
|
|
@2152
|
13 years |
adehnert |
Split out AFS nagios checks
|
|
|
@2148
|
13 years |
achernya |
Certificate renewal for tibetforum
|
|
|
@2147
|
13 years |
achernya |
Certificate and configuration for dchang
|
|
|
@2145
|
13 years |
andersk |
Kill signup-scripts-frontend
We don’t need this setuid binary because ...
|
|
|
@2139
|
13 years |
geofft |
Certificate and configuration for ldpreload.com
|
|
|