# # ChangeLog for trunk/server # # Generated by Trac 1.0.2 # Mar 28, 2024, 4:36:22 AM Fri, 17 Aug 2012 04:10:39 GMT ezyang [2301] * trunk/server/fedora/specs/krb5.spec.patch (modified) Bump Kerberos version and fix fuzz. Fri, 17 Aug 2012 04:08:53 GMT ezyang [2300] * trunk/server/fedora/specs/accountadm.spec (modified) List get-homedirs in files list for accountadm Fri, 17 Aug 2012 01:13:15 GMT ezyang [2299] * trunk/server/common/oursrc/accountadm/Makefile.in (modified) * trunk/server/common/oursrc/accountadm/get-homedirs (copied) Make get-homedirs part of accountadm package, so that we can ... Thu, 16 Aug 2012 14:46:28 GMT ezyang [2298] * trunk/server/doc/install-howto.sh (modified) More updates from Wizard install. Tue, 14 Aug 2012 08:04:50 GMT geofft [2296] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update to Postfix 2.9.4 Tue, 14 Aug 2012 07:19:32 GMT geofft [2295] * trunk/server/fedora/config/etc/httpd/vhosts.d/ai6034.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/classof2014.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ai6034.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/classof2014.pem (modified) Certificate renewals for ai6034 and classof2014 Wed, 08 Aug 2012 15:17:06 GMT ezyang [2294] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Message no long occurs due to upstream fix ... Wed, 08 Aug 2012 15:15:29 GMT ezyang [2293] * trunk/server/fedora/config/etc/cron.d/check-filecaps (modified) File capabilities respect nosuid too ... Wed, 08 Aug 2012 13:50:47 GMT ezyang [2292] * trunk/server/fedora/config/etc/cron.d/check-setugid (modified) Ignore setuid binaries in /var/lib/mock, which are nosuid'd Tue, 07 Aug 2012 10:46:24 GMT ezyang [2291] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/var-lib-mock.service (added) * trunk/server/fedora/config/etc/systemd/system/var-lib-mock.service (added) Remount /var/lib/mock as nosuid Tue, 07 Aug 2012 06:30:28 GMT achernya [2290] * trunk/server/fedora/config/etc/pki/tls/certs/mitchief.org.pem (added) Really add the mitchief cert. Tue, 07 Aug 2012 06:21:29 GMT achernya [2289] * trunk/server/fedora/config/etc/httpd/vhosts.d/mitchief.org.conf (added) Certificate and configuration for mitchief.org Sun, 05 Aug 2012 14:26:57 GMT ezyang [2288] * trunk/server/common/patches/openafs-linux-3.4-end-writeback.patch (added) * trunk/server/common/patches/openafs-linux-3.5-encode-fh.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) OpenAFS for Linux 3.5 Wed, 01 Aug 2012 09:23:33 GMT geofft [2283] * trunk/server/fedora/config/etc/httpd/vhosts.d/asa.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/axo.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/crew.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/familynet.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/mitsoc.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/next.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/random-hall.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/wakeup.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/westgate.conf (modified) Add SSLCertificateChainFile for the renewals from r2282 Wed, 01 Aug 2012 09:21:09 GMT geofft [2282] * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/axo.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crew.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/familynet.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/mitsoc.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/next.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/random-hall.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/wakeup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/westgate.pem (modified) A pile of certificate renewals Tue, 31 Jul 2012 13:36:32 GMT achernya [2273] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) Actually chmod the files, too Tue, 31 Jul 2012 13:31:35 GMT achernya [2272] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) /sbin moved too Tue, 31 Jul 2012 13:29:58 GMT achernya [2271] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) Update statoveride post-action for /bin -> /usr/bin transition Sat, 28 Jul 2012 20:56:14 GMT ezyang [2270] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Add Scripts-IP for debugging purposes (identify real server, no X- ... Sat, 28 Jul 2012 04:43:05 GMT ezyang [2268] * trunk/server/doc/cutover (modified) Cutover updates Fri, 27 Jul 2012 19:35:56 GMT andersk [2267] * trunk/server/fedora/config/etc/php.ini (modified) * trunk/server/fedora/config/etc/tmpfiles.d (added) * trunk/server/fedora/config/etc/tmpfiles.d/scripts-php-sessions.conf (added) Move php sessions to /var/lib/scripts-php-sessions Fri, 27 Jul 2012 17:47:41 GMT achernya [2266] * trunk/server/fedora/config/etc/httpd/vhosts.d/metu.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/metu.pem (modified) Certificate renewal for metu.mit.edu Tue, 24 Jul 2012 23:00:29 GMT andersk [2265] * trunk/server/common/oursrc/accountadm/mbash.in (modified) mbash: exec bash This is far from ideal—we still lose the login ... Sun, 22 Jul 2012 01:39:42 GMT adehnert [2264] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Switch to upstream cipher suites Sat, 21 Jul 2012 23:46:37 GMT geofft [2263] * trunk/server/fedora/config/etc/httpd/vhosts.d/luke.wf.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/luke.wf.pem (added) Certificate and configuration for luke.wf and www.luke.wf Fri, 06 Jul 2012 16:49:42 GMT achernya [2258] * trunk/server/fedora/config/etc/httpd/vhosts.d/ailg-bdf.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/nudelta.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ailg-bdf.pem (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/nudelta.pem (modified) Certificate renewal for nudelta; remove ailg-bdf as it is not configured Sun, 01 Jul 2012 10:37:58 GMT adehnert [2257] * trunk/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) Serve Django 1.4 admin media Django 1.4 relocated the admin media ... Fri, 29 Jun 2012 04:23:15 GMT quentin [2256] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Add a NRPE command for monitoring SMTP on localhost Fri, 29 Jun 2012 03:32:19 GMT quentin [2255] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Partially revert r2254, and allow postfix to calculate its own ... Fri, 29 Jun 2012 03:18:55 GMT achernya [2254] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update to postfix 2.9.3 Thu, 28 Jun 2012 15:11:46 GMT achernya [2252] * trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified) Add m-c and l-s to known hosts Thu, 28 Jun 2012 15:02:08 GMT achernya [2251] * trunk/server/fedora/config/etc/ssh/shosts.equiv (modified) * trunk/server/fedora/config/etc/ssh/sshd_config (modified) Enable hostbased to m-c and l-s Thu, 28 Jun 2012 02:29:47 GMT ezyang [2246] * trunk (modified) * trunk/host/credit-card/host.py (modified) * trunk/locker (modified) * trunk/server/common/oursrc/php_scripts/php_scripts.h (modified) * trunk/server/common/oursrc/sql-signup/sql-signup-pam (modified) * trunk/server/common/oursrc/tokensys/scripts-afsagent-startup.in (modified) * trunk/server/common/patches/httpd-sysv-deps.patch (deleted) * trunk/server/doc/install-howto.sh (modified) * trunk/server/doc/install-ldap (modified) * trunk/server/doc/upgrade-tips (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/config/etc/default (copied) * trunk/server/fedora/config/etc/hosts (modified) * trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) * trunk/server/fedora/config/etc/mock/scripts-fc17-i386.cfg (copied) * trunk/server/fedora/config/etc/mock/scripts-fc17-x86_64.cfg (copied) * trunk/server/fedora/config/etc/modules-load.d/binfmt_misc.conf (copied) * trunk/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) * trunk/server/fedora/config/etc/sysconfig/dirsrv (copied) * trunk/server/fedora/config/etc/sysconfig/dirsrv-scripts (copied) * trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified) * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) * trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (modified) * trunk/server/fedora/specs/ghc-MonadCatchIO-mtl.spec (deleted) * trunk/server/fedora/specs/ghc-cgi.spec (modified) * trunk/server/fedora/specs/ghc-unix-handle.spec (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) * trunk/server/fedora/specs/krb5.spec.patch (modified) * trunk/server/fedora/specs/openssh.spec.patch (modified) * trunk/server/fedora/specs/redland-bindings.spec.patch (deleted) * trunk/server/fedora/specs/rubygems.spec.patch (modified) * trunk/server/fedora/specs/scripts-static-cat.spec (modified) Reintegrate Fedora 17 development branch into trunk. Tue, 26 Jun 2012 18:02:16 GMT achernya [2237] * trunk/server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (modified) Reify eastgate.conf to bring it in sync with ldap, again Mon, 25 Jun 2012 16:02:37 GMT achernya [2234] * trunk/server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (modified) Reify eastgate.conf to bring it in sync with ldap Thu, 21 Jun 2012 15:23:44 GMT quentin [2233] * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Block raskar from sending mail; he has been unresponsive to our ... Wed, 06 Jun 2012 19:44:13 GMT geofft [2229] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/tours.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tours.pem (modified) Certificate renewals for tours and scripts-cert Includes the ... Wed, 06 Jun 2012 19:38:38 GMT geofft [2228] * trunk/server/fedora/config/etc/httpd/vhosts.d/blog.gregbrockman.com.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (modified) Canonicalize SSLCertificateChainFile location to match r2227 Wed, 06 Jun 2012 19:33:48 GMT geofft [2227] * trunk/server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (modified) reify-vhost: Add SSLCertificateChainFile by default It makes the ... Fri, 25 May 2012 19:23:00 GMT ezyang [2214] * trunk/server/doc/install-howto.sh (modified) Let Fedora dynamically allocate the UID. Fri, 25 May 2012 19:22:30 GMT ezyang [2213] * trunk/server/fedora/Makefile (modified) Fix path to zephyr. Fri, 25 May 2012 05:53:04 GMT ezyang [2209] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/zephyr.spec (modified) Upgrade zephyr to 3.0.2 Fri, 25 May 2012 04:29:12 GMT ezyang [2203] * trunk/server/common/patches/php-cve-2012-1823.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (deleted) Remove PHP from repository. Thu, 24 May 2012 23:43:31 GMT ezyang [2201] * trunk/server/fedora/Makefile (modified) Do not fetch Cabal dependencies. Thu, 24 May 2012 23:33:30 GMT ezyang [2200] * trunk/server/common/patches/openafs-linux-3.1-fsync.patch (deleted) * trunk/server/common/patches/openafs-linux-3.1-rcu.patch (deleted) * trunk/server/common/patches/openafs-linux-3.1-zalloc.patch (deleted) * trunk/server/common/patches/openafs-linux-3.2-nlink.patch (deleted) * trunk/server/common/patches/openafs-systemd-remote-fs.patch (added) * trunk/server/common/patches/openafs-systemd.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs-include-xstat.spec.patch (deleted) * trunk/server/fedora/specs/openafs-systemd.spec.patch (deleted) * trunk/server/fedora/specs/openafs.spec.patch (modified) Upgrade OpenAFS to 1.6.1 (undeployed) Thu, 24 May 2012 23:32:36 GMT ezyang [2199] * trunk/server/fedora/specs/php.spec.patch (modified) PHP version bump (undeployed) Wed, 16 May 2012 17:27:00 GMT achernya [2194] * trunk/server/fedora/config/etc/pki/tls/certs/ties.pem (modified) Certificate renewal for ties Wed, 16 May 2012 17:26:27 GMT achernya [2193] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update postfix to 2.8.10 Wed, 09 May 2012 17:04:50 GMT adehnert [2192] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Ping sql.mit.edu on the backend network Wed, 09 May 2012 17:03:34 GMT adehnert [2191] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Update monitoring servers to syn, c-t, and sipb-noc Wed, 09 May 2012 05:58:39 GMT adehnert [2190] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Define check_backend NRPE check Sat, 05 May 2012 23:32:04 GMT ezyang [2189] * trunk/server/fedora/specs/rubygems.spec.patch (modified) Bump rubygems version. Sat, 05 May 2012 23:02:03 GMT ezyang [2188] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Ignore oom_score_adj too. Sat, 05 May 2012 21:41:27 GMT ezyang [2187] * trunk/server/fedora/specs/krb5.spec.patch (modified) Bump version for krb5. Sat, 05 May 2012 21:40:12 GMT ezyang [2186] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) Another mitigation to the PHP command line flags vulnerability. Sat, 05 May 2012 21:39:28 GMT ezyang [2185] * trunk/server/fedora/specs/openssh.spec.patch (modified) Actually patch in SSH_GSSAPI_NAME (as best as I can tell, this has ... Sat, 05 May 2012 21:32:24 GMT ezyang [2184] * trunk/server/common/patches/php-cve-2012-1823.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (added) Scriptsify PHP, patch CVE 2012-1823. Sat, 28 Apr 2012 05:21:19 GMT ezyang [2183] * trunk/server/fedora/config/etc/cron.d/slapdagent (deleted) * trunk/server/fedora/config/etc/sysconfig/dirsrv (modified) Revert disk ccache hack, upstream has fixed the bug. Fri, 27 Apr 2012 04:22:47 GMT geofft [2182] * trunk/server/fedora/config/etc/pki/tls/certs/courseroad.pem (moved) Put courseroad cert in right directory Fri, 27 Apr 2012 04:19:17 GMT geofft [2181] * trunk/server/fedora/config/etc/httpd/vhosts.d/courseroad.conf (added) * trunk/server/fedora/config/etc/pki/tls/courseroad.pem (added) Certificate and configuration for courseroad [help.mit.edu #1967114] Thu, 12 Apr 2012 15:38:23 GMT achernya [2179] * trunk/server/fedora/config/etc/httpd/vhosts.d/finance.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/music.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/trac.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/blue-sun-corp.com.pem (deleted) Remove blue-sun-corp certificate and configuration, long expired Tue, 10 Apr 2012 17:30:09 GMT achernya [2178] * trunk/server/fedora/config/etc/pki/tls/certs/carepackages.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/finboard.pem (modified) Certificate renewal for finboard and carepackages Tue, 10 Apr 2012 05:25:23 GMT geofft [2177] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Revert r2176 We should allow SSLProxy* to be configurable in ... Mon, 09 Apr 2012 22:21:45 GMT geofft [2176] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Enable SSLProxyEngine This allows you to mod_proxy (e.g., ... Fri, 06 Apr 2012 18:29:43 GMT achernya [2173] * trunk/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) fping now has capabilities Fri, 06 Apr 2012 18:27:47 GMT achernya [2172] * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bc.pem (modified) Certificate renewal for asa and bc Tue, 27 Mar 2012 01:34:16 GMT ezyang [2171] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/yum-updatesd.service (added) Enable yum-updatesd.service Mon, 26 Mar 2012 22:01:11 GMT ezyang [2170] * trunk/server/common/patches/openafs-localcsdb.patch (deleted) * trunk/server/common/patches/openafs-systemd-csdb.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) Port csdb patch to systemd, and include mousetrap db. Mon, 26 Mar 2012 21:40:36 GMT ezyang [2169] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) * trunk/server/fedora/config/usr/vice/etc/CellServDB.mousetrap (added) * trunk/server/fedora/config/usr/vice/etc/README (added) Split up cellServDB into mousetrap and local. Mon, 26 Mar 2012 20:46:42 GMT ezyang [2168] * trunk/server/common/patches/openafs-systemd-crond.patch (modified) Update crond systemd patch. Mon, 26 Mar 2012 20:07:08 GMT ezyang [2167] * trunk/server/fedora/specs/scripts-base.spec (modified) Add fuse-better-mousetrapfs to scripts-base. Mon, 26 Mar 2012 19:48:39 GMT ezyang [2166] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/afs-000.mount (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/crond.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/ntpd.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/openafs-client.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/remote-fs.target (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent-startup.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.timer (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-whoisd.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/syslog-ng.service (added) Add enabled services that we definitely want. Mon, 26 Mar 2012 19:25:28 GMT ezyang [2165] * trunk/server/common/patches/openafs-systemd.patch (modified) Add OpenAFS to the dependencies of remote-fs. Mon, 26 Mar 2012 19:24:16 GMT ezyang [2164] * trunk/server/fedora/config/etc/systemd/system/afs-000.mount (modified) Bind this mount more closely to the AFS service. Mon, 26 Mar 2012 19:08:14 GMT ezyang [2163] * trunk/server/fedora/config/etc/systemd/system/afs-000.mount (modified) Don't use local for better-mousetrapfs. Mon, 26 Mar 2012 19:07:04 GMT ezyang [2162] * trunk/server/fedora/specs/fuse-better-mousetrapfs.spec (modified) Don't store better-mousetrapfs in local. Mon, 26 Mar 2012 18:40:15 GMT ezyang [2161] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) Remove pointless race checking; kernel doesn't preserve old proc ... Mon, 26 Mar 2012 18:38:54 GMT ezyang [2160] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) Avoid races if /proc directory goes away Mon, 26 Mar 2012 17:58:38 GMT ezyang [2159] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) s/AUTH/AUTHPRIV/ and report cwd too. Mon, 26 Mar 2012 17:47:43 GMT ezyang [2158] * trunk/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (modified) Log to AUTH so we get zephyrs. Mon, 26 Mar 2012 06:54:24 GMT ezyang [2157] * trunk/server/common/patches/httpd-2.2.x-CVE-2011-3607.patch (deleted) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0031.patch (deleted) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0053.patch (deleted) * trunk/server/fedora/specs/httpd.spec.patch (modified) Latest httpd fixes CVEs we were patching. Mon, 26 Mar 2012 06:52:45 GMT ezyang [2156] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) CellServDB entry for the mousetrap directory, so it can be mounted. Mon, 26 Mar 2012 06:49:57 GMT ezyang [2155] * trunk/server/fedora/config/etc/modules-load.d (added) * trunk/server/fedora/config/etc/modules-load.d/fuse.conf (added) * trunk/server/fedora/config/etc/systemd (added) * trunk/server/fedora/config/etc/systemd/system (added) * trunk/server/fedora/config/etc/systemd/system.conf (added) * trunk/server/fedora/config/etc/systemd/system/afs-000.mount (added) * trunk/server/fedora/config/etc/systemd/user (added) Configuration for setting the mousetrap. Mon, 26 Mar 2012 06:49:01 GMT ezyang [2154] * trunk/server/common/oursrc/fuse-better-mousetrapfs (moved) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/fuse-better-mousetrapfs.spec (modified) Make better-mousetrapfs actually build. Mon, 26 Mar 2012 05:35:00 GMT ezyang [2153] * trunk/server/fedora/specs/httpd.spec.patch (modified) Version bump for httpd. Mon, 26 Mar 2012 04:43:38 GMT adehnert [2152] * trunk/server/fedora/config/etc/nagios/check_afs (modified) * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Split out AFS nagios checks Mon, 26 Mar 2012 04:16:03 GMT ezyang [2151] * trunk/server/common/oursrc/better-mousetrapfs (added) * trunk/server/common/oursrc/better-mousetrapfs/better-mousetrapfs (added) * trunk/server/fedora/specs/fuse-better-mousetrapfs.spec (added) Package andersk's better-mousetrapfs Mon, 19 Mar 2012 17:28:44 GMT achernya [2148] * trunk/server/fedora/config/etc/pki/tls/certs/tibetforum.pem (modified) Certificate renewal for tibetforum Tue, 06 Mar 2012 16:43:16 GMT achernya [2147] * trunk/server/fedora/config/etc/httpd/vhosts.d/dchang.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/dchang.pem (added) Certificate and configuration for dchang Fri, 02 Mar 2012 05:50:20 GMT andersk [2145] * trunk/server/common/oursrc/accountadm/Makefile.in (modified) * trunk/server/common/oursrc/accountadm/configure.in (modified) * trunk/server/common/oursrc/accountadm/mrproper (modified) * trunk/server/common/oursrc/accountadm/signup-scripts-frontend.c (deleted) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) * trunk/server/fedora/specs/accountadm.spec (modified) Kill signup-scripts-frontend We don’t need this setuid binary ... Fri, 02 Mar 2012 05:47:58 GMT andersk [2144] * trunk/server/fedora/specs/openssh.spec.patch (modified) Fix openssh.spec.patch again Mon, 27 Feb 2012 18:52:17 GMT achernya [2143] * trunk/server/common/patches/openafs-linux-3.2-nlink.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) Update openafs to build against kernel 3.2 Sat, 25 Feb 2012 18:05:27 GMT ezyang [2142] * trunk/server/fedora/specs/krb5.spec.patch (modified) Version bump on krb5. Sat, 25 Feb 2012 18:05:07 GMT ezyang [2141] * trunk/server/fedora/specs/rubygems.spec.patch (modified) Version bump on rubygems. Thu, 23 Feb 2012 01:27:48 GMT geofft [2139] * trunk/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/ldpreload.com.pem (added) Certificate and configuration for ldpreload.com Wed, 22 Feb 2012 16:21:27 GMT achernya [2138] * trunk/server/fedora/config/etc/pki/tls/certs/gsc.pem (modified) Certificate renewal for gsc Mon, 20 Feb 2012 19:29:01 GMT achernya [2137] * trunk/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc13-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc13-x86_64.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc15-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc15-x86_64.cfg (modified) * trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (modified) * trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified) Switch from download3.fedora.redhat.com to dl.fedoraproject.org Tue, 14 Feb 2012 00:56:55 GMT ezyang [2136] * trunk/server/fedora/config/etc/pam.d/crond (modified) Don't load non-existent environment.cron Mon, 13 Feb 2012 23:53:31 GMT ezyang [2135] * trunk/server/fedora/config/etc/yum.conf (modified) Don't ever remove installonly packages. Mon, 13 Feb 2012 20:55:36 GMT achernya [2134] * trunk/server/common/patches/httpd-2.2.x-CVE-2011-3607.patch (added) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0031.patch (added) * trunk/server/common/patches/httpd-2.2.x-CVE-2012-0053.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) Patch httpd against some security vulnerabilities.