# # ChangeLog for trunk/server # # Generated by Trac 1.0.2 # Mar 28, 2024, 5:50:18 PM Mon, 05 Nov 2012 19:08:51 GMT achernya [2334] * trunk/server/fedora/config/etc/pki/tls/certs/ashdown.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ec.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/listmon.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sayno.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/swe.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/techfair.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tf.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/whatsnext.pem (modified) Certificate renewal fixup ashdown, ec, listmon, sayno, swe, techfair, ... Mon, 05 Nov 2012 19:05:28 GMT achernya [2333] * trunk/server/fedora/config/etc/httpd/vhosts.d/ashdown.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/ec.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/listmon.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/sayno.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/swe.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/techfair.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/tf.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/whatsnext.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ashdown.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ec.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/listmon.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sayno.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/swe.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/techfair.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tf.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/whatsnext.pem (modified) Certificate renewal for ashdown, ec, listmon, sayno, swe, techfair, ... Wed, 31 Oct 2012 05:19:41 GMT achernya [2332] * trunk/server/fedora/config/etc/httpd/vhosts.d/hmmt.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/hmmt.pem (modified) Certificate renewal for hmmt Thu, 11 Oct 2012 16:18:35 GMT achernya [2331] * trunk/server/fedora/config/etc/httpd/vhosts.d/barnowl.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/fridget.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/maseeh.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/signup.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/sipb.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/twentytwelve.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/ua.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/barnowl.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/fridget.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/maseeh.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/signup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sipb.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/twentytwelve.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ua.pem (modified) Certificate renewal for barnowl, fridget, maseeh, signup, sipb, ... Sat, 06 Oct 2012 19:46:19 GMT quentin [2330] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Partially revert r2329, and set postfix's inet_protocols to the ... Fri, 05 Oct 2012 02:25:42 GMT glasgall [2329] * trunk/server/fedora/config/etc/httpd/vhosts.d/westgate.conf (added) * trunk/server/fedora/config/etc/postfix/main.cf (modified) re-enable westgate vhost Tue, 02 Oct 2012 00:45:25 GMT achernya [2328] * trunk/lvs/debian/config/etc/aliases (modified) * trunk/server/fedora/config/etc/aliases (modified) Add glasgall to aliases for root Sun, 30 Sep 2012 02:43:55 GMT achernya [2327] * trunk/server/fedora/config/etc/httpd/vhosts.d/cdsa.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/cdsa.pem (deleted) Remove cdsa certificate; no longer hosted on scripts Mon, 24 Sep 2012 22:15:40 GMT achernya [2326] * trunk/server/fedora/config/etc/httpd/vhosts.d/westgate.conf (deleted) Remove westgate configuration Mon, 24 Sep 2012 21:26:02 GMT achernya [2325] * trunk/server/fedora/config/etc/httpd/vhosts.d/rpl.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/stalk.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/rpl.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/stalk.pem (modified) Certificate renewal for rpl and stalk Mon, 24 Sep 2012 20:25:22 GMT achernya [2324] * trunk/server/fedora/config/etc/httpd/vhosts.d/crosslinks.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/crosslinks.pem (deleted) Remove certificate and configuration for crosslinks, no longer on Scripts Mon, 24 Sep 2012 20:13:01 GMT achernya [2323] * trunk/server/fedora/config/etc/httpd/vhosts.d/bluechips.emergent-studios.com.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bluechips.emergent-studios.com.pem (modified) Certificate renewal for bluechips.emergent-studios.com Sat, 15 Sep 2012 22:17:09 GMT quentin [2322] * trunk/server/fedora/config/etc/httpd/vhosts.d/conner4.conf (added) * trunk/server/fedora/config/etc/httpd/vhosts.d/webathena.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/conner4.pem (added) * trunk/server/fedora/config/etc/pki/tls/certs/debathena.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/webathena.pem (added) Add certs for webathena, conner4, and update cert for debathena. Thu, 13 Sep 2012 01:08:54 GMT geofft [2321] * trunk/server/common/patches/httpd-SSLCompression.patch (added) * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) Disable SSL compression to defend against rumored side-channel attack Sun, 09 Sep 2012 18:48:22 GMT andersk [2320] * trunk/server/fedora/ref-prepatch (deleted) Remove ref-prepatch We’ve never updated this, and it’s not how ... Thu, 06 Sep 2012 03:41:51 GMT ezyang [2318] * trunk/server/doc/install-howto.sh (modified) * trunk/server/doc/install-xvm (modified) Notes for setting up XVM test server. Wed, 05 Sep 2012 04:41:23 GMT adehnert [2317] * trunk/server/doc/install-xvm (modified) We're well past F9, and the filename should reflect that Wed, 05 Sep 2012 04:39:22 GMT adehnert [2316] * trunk/server/doc/install-howto.sh (modified) Minor updates to the install instructions Wed, 05 Sep 2012 04:11:51 GMT ezyang [2315] * trunk/server/doc/install-xvm (modified) Updated XVM instructions plus kickstarter. Sat, 01 Sep 2012 14:30:45 GMT ezyang [2313] * trunk/server/common/oursrc/accountadm/cronload (modified) More robust error handling for cronload, by btidor. Wed, 29 Aug 2012 15:34:05 GMT achernya [2308] * trunk/server/fedora/config/etc/pki/tls/certs/luke.wf.pem (modified) Add intermediate certificates for luke.wf Mon, 20 Aug 2012 03:25:40 GMT quentin [2307] * trunk/server/common/oursrc/accountadm/get-homedirs (modified) Only dump real user accounts, and not LDAP-only users. Sat, 18 Aug 2012 17:03:46 GMT ezyang [2306] * trunk/server/common/oursrc/hsparfind/hsparfind.hs (modified) Don't starve non-find commands, handle concurrent writes to file. Sat, 18 Aug 2012 16:33:33 GMT ezyang [2305] * trunk/server/common/oursrc/hsparfind (added) * trunk/server/common/oursrc/hsparfind/hsparfind.hs (added) Haskell version of parallel-find. Fri, 17 Aug 2012 20:44:02 GMT ezyang [2304] * trunk/server/fedora/config/etc/sudoers (modified) Allow user list generation to access LDAP credentials. Fri, 17 Aug 2012 20:35:01 GMT ezyang [2303] * trunk/locker/sbin/get-homedirs.sh (deleted) * trunk/server/doc/install-howto.sh (modified) Revert previous commit. Fri, 17 Aug 2012 20:30:48 GMT ezyang [2302] * trunk/server/doc/install-howto.sh (modified) A note for the next maintainer to mailbomb us. Fri, 17 Aug 2012 04:10:39 GMT ezyang [2301] * trunk/server/fedora/specs/krb5.spec.patch (modified) Bump Kerberos version and fix fuzz. Fri, 17 Aug 2012 04:08:53 GMT ezyang [2300] * trunk/server/fedora/specs/accountadm.spec (modified) List get-homedirs in files list for accountadm Fri, 17 Aug 2012 01:13:15 GMT ezyang [2299] * trunk/server/common/oursrc/accountadm/Makefile.in (modified) * trunk/server/common/oursrc/accountadm/get-homedirs (copied) Make get-homedirs part of accountadm package, so that we can ... Thu, 16 Aug 2012 14:46:28 GMT ezyang [2298] * trunk/server/doc/install-howto.sh (modified) More updates from Wizard install. Tue, 14 Aug 2012 08:04:50 GMT geofft [2296] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update to Postfix 2.9.4 Tue, 14 Aug 2012 07:19:32 GMT geofft [2295] * trunk/server/fedora/config/etc/httpd/vhosts.d/ai6034.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/classof2014.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ai6034.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/classof2014.pem (modified) Certificate renewals for ai6034 and classof2014 Wed, 08 Aug 2012 15:17:06 GMT ezyang [2294] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Message no long occurs due to upstream fix ... Wed, 08 Aug 2012 15:15:29 GMT ezyang [2293] * trunk/server/fedora/config/etc/cron.d/check-filecaps (modified) File capabilities respect nosuid too ... Wed, 08 Aug 2012 13:50:47 GMT ezyang [2292] * trunk/server/fedora/config/etc/cron.d/check-setugid (modified) Ignore setuid binaries in /var/lib/mock, which are nosuid'd Tue, 07 Aug 2012 10:46:24 GMT ezyang [2291] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/var-lib-mock.service (added) * trunk/server/fedora/config/etc/systemd/system/var-lib-mock.service (added) Remount /var/lib/mock as nosuid Tue, 07 Aug 2012 06:30:28 GMT achernya [2290] * trunk/server/fedora/config/etc/pki/tls/certs/mitchief.org.pem (added) Really add the mitchief cert. Tue, 07 Aug 2012 06:21:29 GMT achernya [2289] * trunk/server/fedora/config/etc/httpd/vhosts.d/mitchief.org.conf (added) Certificate and configuration for mitchief.org Sun, 05 Aug 2012 14:26:57 GMT ezyang [2288] * trunk/server/common/patches/openafs-linux-3.4-end-writeback.patch (added) * trunk/server/common/patches/openafs-linux-3.5-encode-fh.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) OpenAFS for Linux 3.5 Wed, 01 Aug 2012 09:23:33 GMT geofft [2283] * trunk/server/fedora/config/etc/httpd/vhosts.d/asa.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/axo.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/crew.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/familynet.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/mitsoc.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/next.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/random-hall.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/wakeup.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/westgate.conf (modified) Add SSLCertificateChainFile for the renewals from r2282 Wed, 01 Aug 2012 09:21:09 GMT geofft [2282] * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/axo.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crew.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/familynet.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/mitsoc.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/next.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/random-hall.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/wakeup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/westgate.pem (modified) A pile of certificate renewals Tue, 31 Jul 2012 13:36:32 GMT achernya [2273] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) Actually chmod the files, too Tue, 31 Jul 2012 13:31:35 GMT achernya [2272] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) /sbin moved too Tue, 31 Jul 2012 13:29:58 GMT achernya [2271] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) Update statoveride post-action for /bin -> /usr/bin transition Sat, 28 Jul 2012 20:56:14 GMT ezyang [2270] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Add Scripts-IP for debugging purposes (identify real server, no X- ... Sat, 28 Jul 2012 04:43:05 GMT ezyang [2268] * trunk/server/doc/cutover (modified) Cutover updates Fri, 27 Jul 2012 19:35:56 GMT andersk [2267] * trunk/server/fedora/config/etc/php.ini (modified) * trunk/server/fedora/config/etc/tmpfiles.d (added) * trunk/server/fedora/config/etc/tmpfiles.d/scripts-php-sessions.conf (added) Move php sessions to /var/lib/scripts-php-sessions Fri, 27 Jul 2012 17:47:41 GMT achernya [2266] * trunk/server/fedora/config/etc/httpd/vhosts.d/metu.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/metu.pem (modified) Certificate renewal for metu.mit.edu Tue, 24 Jul 2012 23:00:29 GMT andersk [2265] * trunk/server/common/oursrc/accountadm/mbash.in (modified) mbash: exec bash This is far from ideal—we still lose the login ... Sun, 22 Jul 2012 01:39:42 GMT adehnert [2264] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Switch to upstream cipher suites Sat, 21 Jul 2012 23:46:37 GMT geofft [2263] * trunk/server/fedora/config/etc/httpd/vhosts.d/luke.wf.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/luke.wf.pem (added) Certificate and configuration for luke.wf and www.luke.wf Fri, 06 Jul 2012 16:49:42 GMT achernya [2258] * trunk/server/fedora/config/etc/httpd/vhosts.d/ailg-bdf.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/nudelta.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ailg-bdf.pem (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/nudelta.pem (modified) Certificate renewal for nudelta; remove ailg-bdf as it is not configured Sun, 01 Jul 2012 10:37:58 GMT adehnert [2257] * trunk/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) Serve Django 1.4 admin media Django 1.4 relocated the admin media ... Fri, 29 Jun 2012 04:23:15 GMT quentin [2256] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Add a NRPE command for monitoring SMTP on localhost Fri, 29 Jun 2012 03:32:19 GMT quentin [2255] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Partially revert r2254, and allow postfix to calculate its own ... Fri, 29 Jun 2012 03:18:55 GMT achernya [2254] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update to postfix 2.9.3 Thu, 28 Jun 2012 15:11:46 GMT achernya [2252] * trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified) Add m-c and l-s to known hosts Thu, 28 Jun 2012 15:02:08 GMT achernya [2251] * trunk/server/fedora/config/etc/ssh/shosts.equiv (modified) * trunk/server/fedora/config/etc/ssh/sshd_config (modified) Enable hostbased to m-c and l-s Thu, 28 Jun 2012 02:29:47 GMT ezyang [2246] * trunk (modified) * trunk/host/credit-card/host.py (modified) * trunk/locker (modified) * trunk/server/common/oursrc/php_scripts/php_scripts.h (modified) * trunk/server/common/oursrc/sql-signup/sql-signup-pam (modified) * trunk/server/common/oursrc/tokensys/scripts-afsagent-startup.in (modified) * trunk/server/common/patches/httpd-sysv-deps.patch (deleted) * trunk/server/doc/install-howto.sh (modified) * trunk/server/doc/install-ldap (modified) * trunk/server/doc/upgrade-tips (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/config/etc/default (copied) * trunk/server/fedora/config/etc/hosts (modified) * trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) * trunk/server/fedora/config/etc/mock/scripts-fc17-i386.cfg (copied) * trunk/server/fedora/config/etc/mock/scripts-fc17-x86_64.cfg (copied) * trunk/server/fedora/config/etc/modules-load.d/binfmt_misc.conf (copied) * trunk/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) * trunk/server/fedora/config/etc/sysconfig/dirsrv (copied) * trunk/server/fedora/config/etc/sysconfig/dirsrv-scripts (copied) * trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified) * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) * trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (modified) * trunk/server/fedora/specs/ghc-MonadCatchIO-mtl.spec (deleted) * trunk/server/fedora/specs/ghc-cgi.spec (modified) * trunk/server/fedora/specs/ghc-unix-handle.spec (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) * trunk/server/fedora/specs/krb5.spec.patch (modified) * trunk/server/fedora/specs/openssh.spec.patch (modified) * trunk/server/fedora/specs/redland-bindings.spec.patch (deleted) * trunk/server/fedora/specs/rubygems.spec.patch (modified) * trunk/server/fedora/specs/scripts-static-cat.spec (modified) Reintegrate Fedora 17 development branch into trunk. Tue, 26 Jun 2012 18:02:16 GMT achernya [2237] * trunk/server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (modified) Reify eastgate.conf to bring it in sync with ldap, again Mon, 25 Jun 2012 16:02:37 GMT achernya [2234] * trunk/server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (modified) Reify eastgate.conf to bring it in sync with ldap Thu, 21 Jun 2012 15:23:44 GMT quentin [2233] * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Block raskar from sending mail; he has been unresponsive to our ... Wed, 06 Jun 2012 19:44:13 GMT geofft [2229] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/tours.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tours.pem (modified) Certificate renewals for tours and scripts-cert Includes the ... Wed, 06 Jun 2012 19:38:38 GMT geofft [2228] * trunk/server/fedora/config/etc/httpd/vhosts.d/blog.gregbrockman.com.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (modified) Canonicalize SSLCertificateChainFile location to match r2227 Wed, 06 Jun 2012 19:33:48 GMT geofft [2227] * trunk/server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (modified) reify-vhost: Add SSLCertificateChainFile by default It makes the ... Fri, 25 May 2012 19:23:00 GMT ezyang [2214] * trunk/server/doc/install-howto.sh (modified) Let Fedora dynamically allocate the UID. Fri, 25 May 2012 19:22:30 GMT ezyang [2213] * trunk/server/fedora/Makefile (modified) Fix path to zephyr. Fri, 25 May 2012 05:53:04 GMT ezyang [2209] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/zephyr.spec (modified) Upgrade zephyr to 3.0.2 Fri, 25 May 2012 04:29:12 GMT ezyang [2203] * trunk/server/common/patches/php-cve-2012-1823.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (deleted) Remove PHP from repository. Thu, 24 May 2012 23:43:31 GMT ezyang [2201] * trunk/server/fedora/Makefile (modified) Do not fetch Cabal dependencies. Thu, 24 May 2012 23:33:30 GMT ezyang [2200] * trunk/server/common/patches/openafs-linux-3.1-fsync.patch (deleted) * trunk/server/common/patches/openafs-linux-3.1-rcu.patch (deleted) * trunk/server/common/patches/openafs-linux-3.1-zalloc.patch (deleted) * trunk/server/common/patches/openafs-linux-3.2-nlink.patch (deleted) * trunk/server/common/patches/openafs-systemd-remote-fs.patch (added) * trunk/server/common/patches/openafs-systemd.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs-include-xstat.spec.patch (deleted) * trunk/server/fedora/specs/openafs-systemd.spec.patch (deleted) * trunk/server/fedora/specs/openafs.spec.patch (modified) Upgrade OpenAFS to 1.6.1 (undeployed) Thu, 24 May 2012 23:32:36 GMT ezyang [2199] * trunk/server/fedora/specs/php.spec.patch (modified) PHP version bump (undeployed) Wed, 16 May 2012 17:27:00 GMT achernya [2194] * trunk/server/fedora/config/etc/pki/tls/certs/ties.pem (modified) Certificate renewal for ties Wed, 16 May 2012 17:26:27 GMT achernya [2193] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update postfix to 2.8.10 Wed, 09 May 2012 17:04:50 GMT adehnert [2192] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Ping sql.mit.edu on the backend network Wed, 09 May 2012 17:03:34 GMT adehnert [2191] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Update monitoring servers to syn, c-t, and sipb-noc Wed, 09 May 2012 05:58:39 GMT adehnert [2190] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Define check_backend NRPE check Sat, 05 May 2012 23:32:04 GMT ezyang [2189] * trunk/server/fedora/specs/rubygems.spec.patch (modified) Bump rubygems version. Sat, 05 May 2012 23:02:03 GMT ezyang [2188] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Ignore oom_score_adj too. Sat, 05 May 2012 21:41:27 GMT ezyang [2187] * trunk/server/fedora/specs/krb5.spec.patch (modified) Bump version for krb5. Sat, 05 May 2012 21:40:12 GMT ezyang [2186] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) Another mitigation to the PHP command line flags vulnerability. Sat, 05 May 2012 21:39:28 GMT ezyang [2185] * trunk/server/fedora/specs/openssh.spec.patch (modified) Actually patch in SSH_GSSAPI_NAME (as best as I can tell, this has ... Sat, 05 May 2012 21:32:24 GMT ezyang [2184] * trunk/server/common/patches/php-cve-2012-1823.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (added) Scriptsify PHP, patch CVE 2012-1823. Sat, 28 Apr 2012 05:21:19 GMT ezyang [2183] * trunk/server/fedora/config/etc/cron.d/slapdagent (deleted) * trunk/server/fedora/config/etc/sysconfig/dirsrv (modified) Revert disk ccache hack, upstream has fixed the bug. Fri, 27 Apr 2012 04:22:47 GMT geofft [2182] * trunk/server/fedora/config/etc/pki/tls/certs/courseroad.pem (moved) Put courseroad cert in right directory Fri, 27 Apr 2012 04:19:17 GMT geofft [2181] * trunk/server/fedora/config/etc/httpd/vhosts.d/courseroad.conf (added) * trunk/server/fedora/config/etc/pki/tls/courseroad.pem (added) Certificate and configuration for courseroad [help.mit.edu #1967114] Thu, 12 Apr 2012 15:38:23 GMT achernya [2179] * trunk/server/fedora/config/etc/httpd/vhosts.d/finance.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/music.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/trac.blue-sun-corp.com.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/blue-sun-corp.com.pem (deleted) Remove blue-sun-corp certificate and configuration, long expired Tue, 10 Apr 2012 17:30:09 GMT achernya [2178] * trunk/server/fedora/config/etc/pki/tls/certs/carepackages.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/finboard.pem (modified) Certificate renewal for finboard and carepackages Tue, 10 Apr 2012 05:25:23 GMT geofft [2177] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Revert r2176 We should allow SSLProxy* to be configurable in ... Mon, 09 Apr 2012 22:21:45 GMT geofft [2176] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Enable SSLProxyEngine This allows you to mod_proxy (e.g., ... Fri, 06 Apr 2012 18:29:43 GMT achernya [2173] * trunk/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) fping now has capabilities Fri, 06 Apr 2012 18:27:47 GMT achernya [2172] * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bc.pem (modified) Certificate renewal for asa and bc Tue, 27 Mar 2012 01:34:16 GMT ezyang [2171] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/yum-updatesd.service (added) Enable yum-updatesd.service Mon, 26 Mar 2012 22:01:11 GMT ezyang [2170] * trunk/server/common/patches/openafs-localcsdb.patch (deleted) * trunk/server/common/patches/openafs-systemd-csdb.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) Port csdb patch to systemd, and include mousetrap db. Mon, 26 Mar 2012 21:40:36 GMT ezyang [2169] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) * trunk/server/fedora/config/usr/vice/etc/CellServDB.mousetrap (added) * trunk/server/fedora/config/usr/vice/etc/README (added) Split up cellServDB into mousetrap and local. Mon, 26 Mar 2012 20:46:42 GMT ezyang [2168] * trunk/server/common/patches/openafs-systemd-crond.patch (modified) Update crond systemd patch. Mon, 26 Mar 2012 20:07:08 GMT ezyang [2167] * trunk/server/fedora/specs/scripts-base.spec (modified) Add fuse-better-mousetrapfs to scripts-base. Mon, 26 Mar 2012 19:48:39 GMT ezyang [2166] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/afs-000.mount (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/crond.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/ntpd.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/openafs-client.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/remote-fs.target (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent-startup.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.timer (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-whoisd.service (added) * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/syslog-ng.service (added) Add enabled services that we definitely want. Mon, 26 Mar 2012 19:25:28 GMT ezyang [2165] * trunk/server/common/patches/openafs-systemd.patch (modified) Add OpenAFS to the dependencies of remote-fs.