Timeline


and

Aug 26, 2011:

8:50 AM Changeset [1960] by achernya
Disable syslog-ng stats logs syslog-ng by default prints a stats message every 600 seconds. These message don't provide any useful information to us, and make logwatch longer. This change prevents them from ever being printed, so they no longer clutter the logs.

Aug 25, 2011:

8:31 PM Changeset [1959] by achernya
Remove krb4 configuration files We use krb5, there's no need to pollute /etc with unused configuration files.
10:27 AM Changeset [1958] by achernya
Specify full path to getcap /usr/sbin/ is not in PATH when run from crond
12:18 AM Ticket #173 (Zephyr messages to ldap error log) closed by achernya
invalid: Zephyr discussion has concluded that this will do more harm than good, …
12:11 AM Ticket #207 (/etc/rc.d/rc.local is not executable) closed by achernya
fixed: Fixed in r1953, this was a blocker for systemd-based Fedora 15.

Aug 24, 2011:

10:17 PM Changeset [1957] by achernya
ping and ping6 now use capabilities ping and ping6 have been changed to use capabilities, and are no longer setuid. Therefore, they are being moved between whitelists.
10:08 PM Changeset [1956] by achernya
Create check-filecaps cronjob and and yum post-actions override This cronjob and yum post-action are complements of the set[ug]id tasks. Some binaries are no longer set[ug]id, but instead use file capabilities. We still need to be able to find them and disable them.
9:25 PM Changeset [1955] by geofft
Remove /etc/ldap.conf This was only needed for nss_ldap, which we no longer use. (We now care about /etc/nslcd.conf, and might care about /etc/openldap/ldap.conf, but currently don't need to customize it.)

Aug 21, 2011:

11:14 PM Changeset [1954] by achernya
Make ssh executable in locker. Because we actually want to run it.
11:12 PM Changeset [1953] by achernya
Make rc.local executable. systemd runs rc.local, it doesn't source it. It gets very sad if there is no executable bit on it.
4:27 PM Changeset [1952] by achernya
Make httpd.spec.patch have versioned Provides httpdmods uses a versioned Requires on scripts-httpd, but scripts-httpd was previously unversioned. RPM and friends treat this as "provides any version" (as opposed to version 0), satisfying the Requires without actually doing any useful checks.

Aug 19, 2011:

9:43 AM Changeset [1951] by achernya
Certificate and configuration for classof2014.mit.edu [help.mit.edu #1702218]
9:39 AM Changeset [1950] by achernya
Certificate renewal for ai6034.mit.edu
8:39 AM Changeset [1949] by achernya
Update httpd.spec.patch for httpd 2.2.19

Aug 13, 2011:

5:05 PM Changeset [1948] by achernya
Fix path to kinit.

Aug 2, 2011:

12:59 AM Changeset [1947] by achernya
Merge r r1938-r1946 from trunk to branches/fc15-dev

Aug 1, 2011:

11:36 PM Changeset [1946] by achernya
Certificate renewal for westgate.mit.edu
11:35 PM Changeset [1945] by achernya
Certificate renewal for wakeup.mit.edu
11:35 PM Changeset [1944] by achernya
Certificate renewal for random-hall.mit.edu
11:34 PM Changeset [1943] by achernya
Certificate renewal for next.mit.edu
11:34 PM Changeset [1942] by achernya
Certificate renewal for mitsoc.mit.edu
11:33 PM Changeset [1941] by achernya
Certificate renewal for familynet.mit.edu
11:32 PM Changeset [1940] by achernya
Certificate renewal for crew.mit.edu
11:30 PM Changeset [1939] by achernya
Certificate renewal for axo.mit.edu

Jul 31, 2011:

12:32 AM Changeset [1938] by achernya
Merge r1878-r1937 from trunk to branches/fc15-dev

Jul 30, 2011:

11:45 PM Changeset [1937] by adehnert
Disable dont_blame_nrpe on the directors This is made possible by r1935 and sipb-noc changes to take advantage of it.
11:43 PM Changeset [1936] by adehnert
Remove deprecated commands Now that sipb-noc has been updated, we can remove the commands that we deprecated in r1934. We can also now disable dont_blame_nrpe, which was admittedly the main goal of r1934 in the first place...
10:45 PM Changeset [1935] by adehnert
Move nagios/NRPE parameters to live on scripts This is the director version of r1934.
10:42 PM Changeset [1934] by adehnert
Move nagios/NRPE parameters to live on scripts This gives us increased flexibility to change our own configuration without bothering the sipb-noc team (which has significant overlap, but eh). A future commit will punt the "deprecated" options once sipb-noc is no longer trying to use them.
9:08 PM Changeset [1933] by adehnert
Bump the alert threshold for POSTFIX-MAILQ
Note: See TracTimeline for information about the timeline view.