aboutsummaryrefslogtreecommitdiffstats
path: root/share/CHANGES
diff options
context:
space:
mode:
authorEugeni Dodonov <eugeni@mandriva.org>2009-01-06 21:31:46 +0000
committerEugeni Dodonov <eugeni@mandriva.org>2009-01-06 21:31:46 +0000
commitff31c9236b1fd7465ea9687fc735e8af882e780e (patch)
treeeec89033b4ad0b2459fbb91fa6dd39077eeaf407 /share/CHANGES
parentab984707253940bf5ced3a379699e8d0dc757fa6 (diff)
downloadmsec-ff31c9236b1fd7465ea9687fc735e8af882e780e.tar
msec-ff31c9236b1fd7465ea9687fc735e8af882e780e.tar.gz
msec-ff31c9236b1fd7465ea9687fc735e8af882e780e.tar.bz2
msec-ff31c9236b1fd7465ea9687fc735e8af882e780e.tar.xz
msec-ff31c9236b1fd7465ea9687fc735e8af882e780e.zip
Updated to working version of new msec.
Conflicts: Makefile cron-sh/security_check.sh share/msec.py
Diffstat (limited to 'share/CHANGES')
-rw-r--r--share/CHANGES73
1 files changed, 0 insertions, 73 deletions
diff --git a/share/CHANGES b/share/CHANGES
deleted file mode 100644
index 22e546a..0000000
--- a/share/CHANGES
+++ /dev/null
@@ -1,73 +0,0 @@
-changes in version 0.30
-=======================
-
- * don't lower security if the admin has already augmented it (when called without argument).
- * splitted functions that worked on multiple levels.
-
-changes between version 0.18 and 0.19
-=====================================
-
-msec utility changes:
-
- * no password in level 0
-
-Periodic security checks changes:
-
- * config file is now in /var/lib/msec/security.conf and can
-be overriden by /etc/security/msec/security.conf.
-
-changes between version 0.17 and 0.18
-=====================================
-
-msec utility changes:
-
- * allow /etc/security/msec/level.local to override the default
-setting of the level.
- * promisc_check.sh works now.
- * added mseclib man page.
-
-changes between version 0.16 and 0.17
-=====================================
-
-msec utility changes:
-
- * handle shell timeout (level 4 and 5)
- * limit shell history (level 4 and 5)
- * su only for wheel group (level 5)
- * sulogin for single user mode (level 4 and 5)
- * various sysctl.conf settings for icmp and network parameters
- * password aging (level 4 and 5)
- * suppress /etc/issue.net (level 4 and 5) and /etc/issue (level 5)
- * removed manipulation of the groups of users
- * removed removal of services
- * logging in syslog according to the guideline for explanations in tools
- * more correct prevention of direct root logins
- * rewritten in python
-
-msec can be used to change level and it's also run hourly by cron to
-maintain the security level on the system. Only the minimum of changes
-on the filesystem are applied and the minimum of programs started.
-
-Periodic security checks changes:
-
- * added rpm database checks (rpm -va and rpm -qa)
- * report when a user other than root is at uid 0
- * diff_check reports even when the log is empty
- * use chkrootkit if present.
-
-Permissions settings changes:
-
- * /
- * removed audio group handling because it has always conflicted with pam_console
- * handle /var/log sub-directories in a generic manner
- * /etc/rc.d/init.d/*
- * corrected ssh and ping related paths
- * /etc/sysconfig
- * /proc
- * corrected gcc files
- * rpm related files to avoid exposing what is installed
- * /var/lock/subsys
- * added a local.perm to allow modifications without modifying level perms
- * corrected all the inconsistencies between levels to be able to change and come back
-without problem
- * rewritten in python