Timeline
Aug 25, 2011:
- 8:31 PM Changeset [1959] by
- Remove krb4 configuration files We use krb5, there's no need to pollute /etc with unused configuration files.
- 10:27 AM Changeset [1958] by
- Specify full path to getcap /usr/sbin/ is not in PATH when run from crond
- 12:18 AM Ticket #173 (Zephyr messages to ldap error log) closed by
- invalid: Zephyr discussion has concluded that this will do more harm than good, …
- 12:11 AM Ticket #207 (/etc/rc.d/rc.local is not executable) closed by
- fixed: Fixed in r1953, this was a blocker for systemd-based Fedora 15.
Aug 24, 2011:
- 10:17 PM Changeset [1957] by
- ping and ping6 now use capabilities ping and ping6 have been changed to use capabilities, and are no longer setuid. Therefore, they are being moved between whitelists.
- 10:08 PM Changeset [1956] by
- Create check-filecaps cronjob and and yum post-actions override This cronjob and yum post-action are complements of the set[ug]id tasks. Some binaries are no longer set[ug]id, but instead use file capabilities. We still need to be able to find them and disable them.
- 9:25 PM Changeset [1955] by
- Remove /etc/ldap.conf This was only needed for nss_ldap, which we no longer use. (We now care about /etc/nslcd.conf, and might care about /etc/openldap/ldap.conf, but currently don't need to customize it.)
Aug 21, 2011:
- 11:14 PM Changeset [1954] by
- Make ssh executable in locker. Because we actually want to run it.
- 11:12 PM Changeset [1953] by
- Make rc.local executable. systemd runs rc.local, it doesn't source it. It gets very sad if there is no executable bit on it.
- 4:27 PM Changeset [1952] by
- Make httpd.spec.patch have versioned Provides httpdmods uses a versioned Requires on scripts-httpd, but scripts-httpd was previously unversioned. RPM and friends treat this as "provides any version" (as opposed to version 0), satisfying the Requires without actually doing any useful checks.
Aug 19, 2011:
- 9:43 AM Changeset [1951] by
- Certificate and configuration for classof2014.mit.edu [help.mit.edu #1702218]
- 9:39 AM Changeset [1950] by
- Certificate renewal for ai6034.mit.edu
- 8:39 AM Changeset [1949] by
- Update httpd.spec.patch for httpd 2.2.19
Aug 13, 2011:
- 5:05 PM Changeset [1948] by
- Fix path to kinit.
Aug 2, 2011:
- 12:59 AM Changeset [1947] by
- Merge r r1938-r1946 from trunk to branches/fc15-dev
Aug 1, 2011:
- 11:36 PM Changeset [1946] by
- Certificate renewal for westgate.mit.edu
- 11:35 PM Changeset [1945] by
- Certificate renewal for wakeup.mit.edu
- 11:35 PM Changeset [1944] by
- Certificate renewal for random-hall.mit.edu
- 11:34 PM Changeset [1943] by
- Certificate renewal for next.mit.edu
- 11:34 PM Changeset [1942] by
- Certificate renewal for mitsoc.mit.edu
- 11:33 PM Changeset [1941] by
- Certificate renewal for familynet.mit.edu
- 11:32 PM Changeset [1940] by
- Certificate renewal for crew.mit.edu
- 11:30 PM Changeset [1939] by
- Certificate renewal for axo.mit.edu
Jul 31, 2011:
- 12:32 AM Changeset [1938] by
- Merge r1878-r1937 from trunk to branches/fc15-dev
Jul 30, 2011:
- 11:45 PM Changeset [1937] by
- Disable dont_blame_nrpe on the directors This is made possible by r1935 and sipb-noc changes to take advantage of it.
- 11:43 PM Changeset [1936] by
- Remove deprecated commands Now that sipb-noc has been updated, we can remove the commands that we deprecated in r1934. We can also now disable dont_blame_nrpe, which was admittedly the main goal of r1934 in the first place...
- 10:45 PM Changeset [1935] by
- Move nagios/NRPE parameters to live on scripts This is the director version of r1934.
- 10:42 PM Changeset [1934] by
- Move nagios/NRPE parameters to live on scripts This gives us increased flexibility to change our own configuration without bothering the sipb-noc team (which has significant overlap, but eh). A future commit will punt the "deprecated" options once sipb-noc is no longer trying to use them.
- 9:08 PM Changeset [1933] by
- Bump the alert threshold for POSTFIX-MAILQ
Note: See TracTimeline
for information about the timeline view.