|
|
@2321
|
12 years |
geofft |
Disable SSL compression to defend against rumored side-channel attack
|
|
|
@2320
|
12 years |
andersk |
Remove ref-prepatch
We’ve never updated this, and it’s not how ...
|
|
|
@2318
|
12 years |
ezyang |
Notes for setting up XVM test server.
|
|
|
@2317
|
12 years |
adehnert |
We're well past F9, and the filename should reflect that
|
|
|
@2316
|
12 years |
adehnert |
Minor updates to the install instructions
|
|
|
@2315
|
12 years |
ezyang |
Updated XVM instructions plus kickstarter.
|
|
|
@2313
|
12 years |
ezyang |
More robust error handling for cronload, by btidor.
|
|
|
@2308
|
12 years |
achernya |
Add intermediate certificates for luke.wf
|
|
|
@2307
|
12 years |
quentin |
Only dump real user accounts, and not LDAP-only users.
|
|
|
@2306
|
12 years |
ezyang |
Don't starve non-find commands, handle concurrent writes to file.
|
|
|
@2305
|
12 years |
ezyang |
Haskell version of parallel-find.
|
|
|
@2304
|
12 years |
ezyang |
Allow user list generation to access LDAP credentials.
|
|
|
@2303
|
12 years |
ezyang |
Revert previous commit.
|
|
|
@2302
|
12 years |
ezyang |
A note for the next maintainer to mailbomb us.
|
|
|
@2301
|
12 years |
ezyang |
Bump Kerberos version and fix fuzz.
|
|
|
@2300
|
12 years |
ezyang |
List get-homedirs in files list for accountadm
|
|
|
@2299
|
12 years |
ezyang |
Make get-homedirs part of accountadm package, so that we can reference ...
|
|
|
@2298
|
12 years |
ezyang |
More updates from Wizard install.
|
|
|
@2296
|
12 years |
geofft |
Update to Postfix 2.9.4
|
|
|
@2295
|
12 years |
geofft |
Certificate renewals for ai6034 and classof2014
|
|
|
@2294
|
12 years |
ezyang |
Message no long occurs due to upstream fix ...
|
|
|
@2293
|
12 years |
ezyang |
File capabilities respect nosuid too ...
|
|
|
@2292
|
12 years |
ezyang |
Ignore setuid binaries in /var/lib/mock, which are nosuid'd
|
|
|
@2291
|
12 years |
ezyang |
Remount /var/lib/mock as nosuid
|
|
|
@2290
|
12 years |
achernya |
Really add the mitchief cert.
|
|
|
@2289
|
12 years |
achernya |
Certificate and configuration for mitchief.org
|
|
|
@2288
|
12 years |
ezyang |
OpenAFS for Linux 3.5
|
|
|
@2283
|
12 years |
geofft |
Add SSLCertificateChainFile for the renewals from r2282
|
|
|
@2282
|
12 years |
geofft |
A pile of certificate renewals
|
|
|
@2273
|
12 years |
achernya |
Actually chmod the files, too
|
|
|
@2272
|
12 years |
achernya |
/sbin moved too
|
|
|
@2271
|
12 years |
achernya |
Update statoveride post-action for /bin -> /usr/bin transition
|
|
|
@2270
|
12 years |
ezyang |
Add Scripts-IP for debugging purposes (identify real server, no X- ...
|
|
|
@2268
|
12 years |
ezyang |
Cutover updates
|
|
|
@2267
|
12 years |
andersk |
Move php sessions to /var/lib/scripts-php-sessions
|
|
|
@2266
|
12 years |
achernya |
Certificate renewal for metu.mit.edu
|
|
|
@2265
|
12 years |
andersk |
mbash: exec bash
This is far from ideal—we still lose the login shell ...
|
|
|
@2264
|
12 years |
adehnert |
Switch to upstream cipher suites
|
|
|
@2263
|
12 years |
geofft |
Certificate and configuration for luke.wf and www.luke.wf
|
|
|
@2258
|
12 years |
achernya |
Certificate renewal for nudelta; remove ailg-bdf as it is not configured
|
|
|
@2257
|
12 years |
adehnert |
Serve Django 1.4 admin media
Django 1.4 relocated the admin media in ...
|
|
|
@2256
|
12 years |
quentin |
Add a NRPE command for monitoring SMTP on localhost
|
|
|
@2255
|
12 years |
quentin |
Partially revert r2254, and allow postfix to calculate its own mynetworks.
|
|
|
@2254
|
12 years |
achernya |
Update to postfix 2.9.3
|
|
|
@2252
|
12 years |
achernya |
Add m-c and l-s to known hosts
|
|
|
@2251
|
12 years |
achernya |
Enable hostbased to m-c and l-s
|
|
|
@2246
|
12 years |
ezyang |
Reintegrate Fedora 17 development branch into trunk.
|
|
|
@2237
|
12 years |
achernya |
Reify eastgate.conf to bring it in sync with ldap, again
|
|
|
@2234
|
12 years |
achernya |
Reify eastgate.conf to bring it in sync with ldap
|
|
|
@2233
|
12 years |
quentin |
Block raskar from sending mail; he has been unresponsive to our ...
|
|
|
@2229
|
13 years |
geofft |
Certificate renewals for tours and scripts-cert
Includes the InCommon ...
|
|
|
@2228
|
13 years |
geofft |
Canonicalize SSLCertificateChainFile location to match r2227
|
|
|
@2227
|
13 years |
geofft |
reify-vhost: Add SSLCertificateChainFile by default
It makes the case ...
|
|
|
@2214
|
13 years |
ezyang |
Let Fedora dynamically allocate the UID.
|
|
|
@2213
|
13 years |
ezyang |
Fix path to zephyr.
|
|
|
@2209
|
13 years |
ezyang |
Upgrade zephyr to 3.0.2
|
|
|
@2203
|
13 years |
ezyang |
Remove PHP from repository.
|
|
|
@2201
|
13 years |
ezyang |
Do not fetch Cabal dependencies.
|
|
|
@2200
|
13 years |
ezyang |
Upgrade OpenAFS to 1.6.1 (undeployed)
|
|
|
@2199
|
13 years |
ezyang |
PHP version bump (undeployed)
|
|
|
@2194
|
13 years |
achernya |
Certificate renewal for ties
|
|
|
@2193
|
13 years |
achernya |
Update postfix to 2.8.10
|
|
|
@2192
|
13 years |
adehnert |
Ping sql.mit.edu on the backend network
|
|
|
@2191
|
13 years |
adehnert |
Update monitoring servers to syn, c-t, and sipb-noc
|
|
|
@2190
|
13 years |
adehnert |
Define check_backend NRPE check
|
|
|
@2189
|
13 years |
ezyang |
Bump rubygems version.
|
|
|
@2188
|
13 years |
ezyang |
Ignore oom_score_adj too.
|
|
|
@2187
|
13 years |
ezyang |
Bump version for krb5.
|
|
|
@2186
|
13 years |
ezyang |
Another mitigation to the PHP command line flags vulnerability.
|
|
|
@2185
|
13 years |
ezyang |
Actually patch in SSH_GSSAPI_NAME (as best as I can tell, this has ...
|
|
|
@2184
|
13 years |
ezyang |
Scriptsify PHP, patch CVE 2012-1823.
|
|
|
@2183
|
13 years |
ezyang |
Revert disk ccache hack, upstream has fixed the bug.
|
|
|
@2182
|
13 years |
geofft |
Put courseroad cert in right directory
|
|
|
@2181
|
13 years |
geofft |
Certificate and configuration for courseroad [help.mit.edu #1967114]
|
|
|
@2179
|
13 years |
achernya |
Remove blue-sun-corp certificate and configuration, long expired
|
|
|
@2178
|
13 years |
achernya |
Certificate renewal for finboard and carepackages
|
|
|
@2177
|
13 years |
geofft |
Revert r2176
We should allow SSLProxy* to be configurable in ...
|
|
|
@2176
|
13 years |
geofft |
Enable SSLProxyEngine
This allows you to mod_proxy (e.g., RewriteRule ...
|
|
|
@2173
|
13 years |
achernya |
fping now has capabilities
|
|
|
@2172
|
13 years |
achernya |
Certificate renewal for asa and bc
|
|
|
@2171
|
13 years |
ezyang |
Enable yum-updatesd.service
|
|
|
@2170
|
13 years |
ezyang |
Port csdb patch to systemd, and include mousetrap db.
|
|
|
@2169
|
13 years |
ezyang |
Split up cellServDB into mousetrap and local.
|
|
|
@2168
|
13 years |
ezyang |
Update crond systemd patch.
|
|
|
@2167
|
13 years |
ezyang |
Add fuse-better-mousetrapfs to scripts-base.
|
|
|
@2166
|
13 years |
ezyang |
Add enabled services that we definitely want.
|
|
|
@2165
|
13 years |
ezyang |
Add OpenAFS to the dependencies of remote-fs.
|
|
|
@2164
|
13 years |
ezyang |
Bind this mount more closely to the AFS service.
|
|
|
@2163
|
13 years |
ezyang |
Don't use local for better-mousetrapfs.
|
|
|
@2162
|
13 years |
ezyang |
Don't store better-mousetrapfs in local.
|
|
|
@2161
|
13 years |
ezyang |
Remove pointless race checking; kernel doesn't preserve old proc ...
|
|
|
@2160
|
13 years |
ezyang |
Avoid races if /proc directory goes away
|
|
|
@2159
|
13 years |
ezyang |
s/AUTH/AUTHPRIV/ and report cwd too.
|
|
|
@2158
|
13 years |
ezyang |
Log to AUTH so we get zephyrs.
|
|
|
@2157
|
13 years |
ezyang |
Latest httpd fixes CVEs we were patching.
|
|
|
@2156
|
13 years |
ezyang |
CellServDB entry for the mousetrap directory, so it can be mounted.
|
|
|
@2155
|
13 years |
ezyang |
Configuration for setting the mousetrap.
|
|
|
@2154
|
13 years |
ezyang |
Make better-mousetrapfs actually build.
|
|
|
@2153
|
13 years |
ezyang |
Version bump for httpd.
|
|
|
@2152
|
13 years |
adehnert |
Split out AFS nagios checks
|
|
|