Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | added 0.30 changes | Frederic Lepied | 2002-07-27 | 1 | -0/+6 |
| | |||||
* | finalized no security lowering feature. | Frederic Lepied | 2002-07-27 | 1 | -28/+68 |
| | |||||
* | corrected last argument processing. | Frederic Lepied | 2002-07-27 | 1 | -2/+2 |
| | |||||
* | corrected splitted functions. | Frederic Lepied | 2002-07-27 | 1 | -2/+7 |
| | |||||
* | * (more functions): don't lower security when not changing secure level. | Frederic Lepied | 2002-07-27 | 1 | -154/+424 |
| | |||||
* | * (set_zero_one_variable): factorize sysctl.conf manipulation functions. | Frederic Lepied | 2002-07-24 | 1 | -60/+137 |
| | | | | | | | | | | | | | | * (accept_broadcasted_icmp_echo): split from accept_icmp_echo. * (set_umask): factorize set_root_umask and set_user_umask. * (enable_dns_spoofing_protection): split from enable_ip_spoofing_protection. * (allow_remote_root_login): split from allow_root_login. * (allow_autologin set_umask set_zero_one_variable allow_remote_root_login): don't lower security when not changing security level. * (allow_xserver_to_listen): split from allow_x_connections for better granularity. * (enable_ip_spoofing_protection): when disabling ip spoofing protection put back net.ipv4.conf.all.rp_filter to 0 (David Harris). | ||||
* | call splitted function with the same args. | Frederic Lepied | 2002-07-24 | 1 | -4/+13 |
| | |||||
* | * (ConfigFile.get_match): return the whole line if replace is None. | Frederic Lepied | 2002-07-24 | 1 | -3/+6 |
| | |||||
* | if sysctl.conf is modified reload its content with sysctl but do not restart | Frederic Lepied | 2002-07-06 | 1 | -1/+1 |
| | | | | | network. | ||||
* | allow_root_login: corrected regexp to avoid adding the string at every run. | Frederic Lepied | 2002-07-04 | 1 | -2/+2 |
| | |||||
* | insert changes when no match is found for logindefs and sshd_config. | Frederic Lepied | 2002-07-04 | 1 | -3/+3 |
| | |||||
* | pass -c to Perms.py if the level is given on the command line. | Frederic Lepied | 2002-06-27 | 1 | -1/+2 |
| | |||||
* | if we don't change the security level, try not to lower the security | Frederic Lepied | 2002-06-27 | 1 | -6/+13 |
| | | | | | if the user has changed it manually (added -c option). | ||||
* | corrected typo | Christian Belisle | 2002-06-04 | 1 | -1/+1 |
| | |||||
* | report more complete error messages. | Frederic Lepied | 2002-05-31 | 2 | -10/+10 |
| | |||||
* | check that the root is running the process | Frederic Lepied | 2002-05-31 | 1 | -0/+5 |
| | |||||
* | corrected typo | Frederic Lepied | 2002-05-29 | 1 | -1/+1 |
| | |||||
* | added no_password_aging_for | Frederic Lepied | 2002-05-29 | 1 | -1/+9 |
| | |||||
* | load the config file using the context of mseclib. | Frederic Lepied | 2002-04-19 | 1 | -4/+31 |
| | |||||
* | allow_reboot: only touch the shutdown, poweroff, reboot and halt files if | Frederic Lepied | 2002-03-27 | 1 | -1/+2 |
| | | | | | they don't exist. | ||||
* | added *.flog | Frederic Lepied | 2002-03-26 | 1 | -0/+1 |
| | |||||
* | handle ignore case. | Frederic Lepied | 2002-03-26 | 1 | -1/+3 |
| | |||||
* | document ignore argument. | Frederic Lepied | 2002-03-26 | 1 | -4/+4 |
| | |||||
* | removed yes/no declarations as they are used only from mseclib.py. | Frederic Lepied | 2002-03-26 | 1 | -4/+1 |
| | | | | | Maximum password aging can be -1. | ||||
* | export yes/no to be in sync with libmsec. | Frederic Lepied | 2002-03-08 | 1 | -0/+3 |
| | |||||
* | document the value of arguments. | Frederic Lepied | 2002-03-08 | 1 | -2/+3 |
| | |||||
* | added yes and no to be used as argument to the functions. | Frederic Lepied | 2002-03-08 | 1 | -0/+5 |
| | |||||
* | don't run twice | Frederic Lepied | 2002-03-06 | 1 | -0/+20 |
| | |||||
* | use 127.0.0.1 instead of localhost in hosts.deny | Frederic Lepied | 2002-03-04 | 1 | -3/+3 |
| | |||||
* | don't restart network on sysctl.conf change. | Frederic Lepied | 2002-02-25 | 1 | -1/+1 |
| | |||||
* | do not use enable_libsafe anymore. | Frederic Lepied | 2002-02-22 | 1 | -2/+0 |
| | |||||
* | implement no password in level 0 | Frederic Lepied | 2002-02-20 | 1 | -1/+6 |
| | | | | | X listens to tcp connections in level 3 | ||||
* | added enable_password | Frederic Lepied | 2002-02-20 | 1 | -0/+13 |
| | |||||
* | documented changes in versions 0.18 and 0.19 | Frederic Lepied | 2002-02-20 | 1 | -0/+22 |
| | |||||
* | added insert_before. | Frederic Lepied | 2002-02-20 | 1 | -0/+21 |
| | |||||
* | /etc/security/msec/security.conf => /var/lib/msec/security.conf | Frederic Lepied | 2002-02-19 | 1 | -5/+48 |
| | | | | | | | enhanced documentation. catch inconsistency between /etc/shadow and /etc/passwd. | ||||
* | use perm file from /usr/share/msec/ | Frederic Lepied | 2002-02-19 | 1 | -1/+1 |
| | |||||
* | added generated files | Frederic Lepied | 2002-02-15 | 1 | -0/+2 |
| | |||||
* | use the right string for the prog name | Frederic Lepied | 2002-02-15 | 1 | -3/+3 |
| | |||||
* | allow an extra arg to specify the log to do in enable_console_log | Frederic Lepied | 2002-02-15 | 1 | -4/+5 |
| | |||||
* | only reports an error for an empty wheel group when run interactively. | Frederic Lepied | 2002-02-14 | 1 | -1/+1 |
| | |||||
* | corrected warnings reported by pychecker | Frederic Lepied | 2002-02-14 | 3 | -36/+31 |
| | |||||
* | add a delay in passowrd change before desactiving. | Frederic Lepied | 2002-02-05 | 1 | -2/+2 |
| | |||||
* | handle allowed delay in password changing. | Frederic Lepied | 2002-02-05 | 1 | -6/+9 |
| | |||||
* | use true/false for Browser value in gdm.conf | Frederic Lepied | 2002-02-05 | 1 | -2/+2 |
| | |||||
* | (exists): add an extra arg to really test if the file exists (without testing | Frederic Lepied | 2002-02-05 | 1 | -2/+2 |
| | | | | | if the file + suffix exists). | ||||
* | handle the extra arg for allow_x_connections. | Frederic Lepied | 2002-02-05 | 1 | -5/+4 |
| | |||||
* | corrected issue moving (only when really present). | Frederic Lepied | 2002-02-05 | 1 | -12/+66 |
| | | | | | | | | add doc strings to be used in the man page. (allow_x_connections): add an extra argument to control if the X server listens on tcp port. | ||||
* | removed debugging trace. | Frederic Lepied | 2002-02-05 | 1 | -1/+0 |
| | |||||
* | pass the same options used for msec.py to Perms.py | Frederic Lepied | 2002-02-05 | 1 | -6/+17 |
| |