| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- remove unused variables
- rename get_(default|value as load_(default|value)s and alter them so
that config file are read only one time instead of one per option;
data is stocked in package variable
- thus get_default_checks() is quite a lot faster
- alter get_(check|function)_(value|default) to use new data structure
- fix check default reading
- group default values reading and current values reading
what's left: do the same thing for writing tomorow
|
|
|
|
|
|
|
| |
- no need to maintain dummy documentation about something which is
called only in one place
- simplify
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
merge any::get_secure_level() with
secure::msec::get_secure_level()
- move security level functions from secure::msec
to secure::level
- uses secure::level in install_steps
- fix duplication of security level labels
- draksec: use same strings in drakx, got nice
translations
- get_default_checks(): make it more readable
|
|
|
|
|
| |
put one that really works
|
| |
|
|
|
|
|
|
| |
- clean code
- simplify config_function()
|
|
|
|
|
| |
- remove unneeded parentheses for things like ... if (...)
|
| |
|
|
|
|
|
| |
- use "for" instead of "foreach" when used a la C
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
get_seclevel_list()
- use them in get_default()
- get_value() : don't assume a space between "function_name" and
"(parameters)"
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- security::msec :
o consolidate get_function_value() and get_value into get_value()
o really apply changes, aka save them :
* config_check() : use substInFile and setVarsInSh
* config_function() : use substInFile and append_to_file
* kill stupid and bogus config_option()
o don't overwrite previous changes, aka reread them :
* fix checks and functions current value loading
* fix checks and functions default loading
- security::main :
o simplify ui creation, make it more readable
o kill offuscating basic_secadmin_check(), basic_secadmin_entry(),
network_generate_page(), system_generate_page() and checks_generate_page()
o increase default height because of stupid "add_with_viewport" in
ugtk::createScrolledWindow
o consolidate network and system functions managment, they're all the same for
msec, splitting is only a draksec "feature"; all go in %options_values
- draksec :
o let standalone module configure standalone mode
o security::main already take care of initializing gtk
o security::main already take care of exiting
o don't play with embedded mode special variables
it overall looks better but big cleanups're still possible for mdk9.1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
o config_check: use MDK::Common to set option rather
than overwriting config file
o remove all stupid prefix that just ofuscate code
whereas it's always set to '',
$::prefix will be a lot better
o s/shift @_/shift/
o kill config_option()
o simplify get_default()
o get_secure_level() : replace if cascade by an array
o set_secure_level() :
* replace if cascade by an hash
* default to runlevel 3 if undefined
o get_functions() : simplify by merging code paths
- security::main :
o security::libsafe is unneeded
o don't pass useless prefix
o begin to read default values
|
|
|
|
|
|
|
|
| |
than overwriting config file
- remove all stupid prefix that just ofuscate code
whereas it's always set to '',
$::prefix will be a lot better
|
|
|
|
|
|
|
|
|
|
| |
- no ignore choice for periodic checks
- save functions in /etc/security/msec/level.local
and not security.conf
- "from mseclib import" is useless
- fix functions saving (an object method invocation
takes class name as argument)
|
| |
|
|
|
|
|
|
| |
advanced options too now
- mark some strings to be translated (mainly notebook pages titles)
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
- s/choose_options/choose_functions
- Added security checks page
|
|
|
|
|
| |
- move set_server_link in the ignore list temporary
|
| |
|
| |
|
|
|
|
|
|
| |
- remove useless expert_mode var
- add get_options(): will be used to get various options from msec
|
| |
|
| |
|
| |
|
|
|