Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | added missing "not" | Frederic Lepied | 2002-08-19 | 1 | -1/+1 |
| | |||||
* | replace 0 => no and 1 => yes. | Frederic Lepied | 2002-08-11 | 1 | -35/+38 |
| | | | | | call password_history according to the levels. | ||||
* | corrected without_password | Frederic Lepied | 2002-08-11 | 1 | -1/+1 |
| | |||||
* | added without_password | Frederic Lepied | 2002-08-11 | 1 | -0/+1 |
| | |||||
* | password_length use system-auth instead of passwd pam file. | Frederic Lepied | 2002-08-11 | 1 | -17/+148 |
| | | | | | new function: password_history. | ||||
* | do not change non local files/directories. | Frederic Lepied | 2002-08-11 | 1 | -5/+51 |
| | |||||
* | correct the test for processing level.local. | Frederic Lepied | 2002-07-31 | 1 | -1/+1 |
| | |||||
* | added level.* | Frederic Lepied | 2002-07-30 | 1 | -0/+1 |
| | |||||
* | added fields to describe how arguments are used (to be used by shadow.py) | Frederic Lepied | 2002-07-30 | 1 | -6/+61 |
| | |||||
* | added print and nolocal options | Frederic Lepied | 2002-07-30 | 1 | -11/+15 |
| | |||||
* | added print_changes and get_translation | Frederic Lepied | 2002-07-30 | 1 | -1/+26 |
| | |||||
* | added rules for level.* | Frederic Lepied | 2002-07-30 | 1 | -1/+5 |
| | |||||
* | fixed typo in allow_root_login | Frederic Lepied | 2002-07-29 | 1 | -1/+1 |
| | |||||
* | (set_zero_one_variable): corrected bug when the variable doesn't exist before | Frederic Lepied | 2002-07-28 | 1 | -1/+3 |
| | | | | | setting it. | ||||
* | added 0.30 changes | Frederic Lepied | 2002-07-27 | 1 | -0/+6 |
| | |||||
* | finalized no security lowering feature. | Frederic Lepied | 2002-07-27 | 1 | -28/+68 |
| | |||||
* | corrected last argument processing. | Frederic Lepied | 2002-07-27 | 1 | -2/+2 |
| | |||||
* | corrected splitted functions. | Frederic Lepied | 2002-07-27 | 1 | -2/+7 |
| | |||||
* | * (more functions): don't lower security when not changing secure level. | Frederic Lepied | 2002-07-27 | 1 | -154/+424 |
| | |||||
* | * (set_zero_one_variable): factorize sysctl.conf manipulation functions. | Frederic Lepied | 2002-07-24 | 1 | -60/+137 |
| | | | | | | | | | | | | | | * (accept_broadcasted_icmp_echo): split from accept_icmp_echo. * (set_umask): factorize set_root_umask and set_user_umask. * (enable_dns_spoofing_protection): split from enable_ip_spoofing_protection. * (allow_remote_root_login): split from allow_root_login. * (allow_autologin set_umask set_zero_one_variable allow_remote_root_login): don't lower security when not changing security level. * (allow_xserver_to_listen): split from allow_x_connections for better granularity. * (enable_ip_spoofing_protection): when disabling ip spoofing protection put back net.ipv4.conf.all.rp_filter to 0 (David Harris). | ||||
* | call splitted function with the same args. | Frederic Lepied | 2002-07-24 | 1 | -4/+13 |
| | |||||
* | * (ConfigFile.get_match): return the whole line if replace is None. | Frederic Lepied | 2002-07-24 | 1 | -3/+6 |
| | |||||
* | if sysctl.conf is modified reload its content with sysctl but do not restart | Frederic Lepied | 2002-07-06 | 1 | -1/+1 |
| | | | | | network. | ||||
* | allow_root_login: corrected regexp to avoid adding the string at every run. | Frederic Lepied | 2002-07-04 | 1 | -2/+2 |
| | |||||
* | insert changes when no match is found for logindefs and sshd_config. | Frederic Lepied | 2002-07-04 | 1 | -3/+3 |
| | |||||
* | pass -c to Perms.py if the level is given on the command line. | Frederic Lepied | 2002-06-27 | 1 | -1/+2 |
| | |||||
* | if we don't change the security level, try not to lower the security | Frederic Lepied | 2002-06-27 | 1 | -6/+13 |
| | | | | | if the user has changed it manually (added -c option). | ||||
* | corrected typo | Christian Belisle | 2002-06-04 | 1 | -1/+1 |
| | |||||
* | report more complete error messages. | Frederic Lepied | 2002-05-31 | 2 | -10/+10 |
| | |||||
* | check that the root is running the process | Frederic Lepied | 2002-05-31 | 1 | -0/+5 |
| | |||||
* | corrected typo | Frederic Lepied | 2002-05-29 | 1 | -1/+1 |
| | |||||
* | added no_password_aging_for | Frederic Lepied | 2002-05-29 | 1 | -1/+9 |
| | |||||
* | load the config file using the context of mseclib. | Frederic Lepied | 2002-04-19 | 1 | -4/+31 |
| | |||||
* | allow_reboot: only touch the shutdown, poweroff, reboot and halt files if | Frederic Lepied | 2002-03-27 | 1 | -1/+2 |
| | | | | | they don't exist. | ||||
* | added *.flog | Frederic Lepied | 2002-03-26 | 1 | -0/+1 |
| | |||||
* | handle ignore case. | Frederic Lepied | 2002-03-26 | 1 | -1/+3 |
| | |||||
* | document ignore argument. | Frederic Lepied | 2002-03-26 | 1 | -4/+4 |
| | |||||
* | removed yes/no declarations as they are used only from mseclib.py. | Frederic Lepied | 2002-03-26 | 1 | -4/+1 |
| | | | | | Maximum password aging can be -1. | ||||
* | export yes/no to be in sync with libmsec. | Frederic Lepied | 2002-03-08 | 1 | -0/+3 |
| | |||||
* | document the value of arguments. | Frederic Lepied | 2002-03-08 | 1 | -2/+3 |
| | |||||
* | added yes and no to be used as argument to the functions. | Frederic Lepied | 2002-03-08 | 1 | -0/+5 |
| | |||||
* | don't run twice | Frederic Lepied | 2002-03-06 | 1 | -0/+20 |
| | |||||
* | use 127.0.0.1 instead of localhost in hosts.deny | Frederic Lepied | 2002-03-04 | 1 | -3/+3 |
| | |||||
* | don't restart network on sysctl.conf change. | Frederic Lepied | 2002-02-25 | 1 | -1/+1 |
| | |||||
* | do not use enable_libsafe anymore. | Frederic Lepied | 2002-02-22 | 1 | -2/+0 |
| | |||||
* | implement no password in level 0 | Frederic Lepied | 2002-02-20 | 1 | -1/+6 |
| | | | | | X listens to tcp connections in level 3 | ||||
* | added enable_password | Frederic Lepied | 2002-02-20 | 1 | -0/+13 |
| | |||||
* | documented changes in versions 0.18 and 0.19 | Frederic Lepied | 2002-02-20 | 1 | -0/+22 |
| | |||||
* | added insert_before. | Frederic Lepied | 2002-02-20 | 1 | -0/+21 |
| | |||||
* | /etc/security/msec/security.conf => /var/lib/msec/security.conf | Frederic Lepied | 2002-02-19 | 1 | -5/+48 |
| | | | | | | | enhanced documentation. catch inconsistency between /etc/shadow and /etc/passwd. |