File seccheck.changes of Package seccheck
-------------------------------------------------------------------
Sun Dec 13 20:10:59 UTC 2020 - <d_werner@gmx.net>
- libexec_move_1178617.patch: update paths after move to /usr/libexec
- security_announce_url_1178617.patch: update url for security
announcements to suse (boo#1178617)
-------------------------------------------------------------------
Sun Dec 29 10:40:47 UTC 2019 - d_werner@gmx.net
- update package description: no longer started by cron
-------------------------------------------------------------------
Sun Sep 8 16:06:16 UTC 2019 - d_werner@gmx.net
- adapt WantedBy so the timers are actually started at boot
time when enabled (#1132919)
added patch: timers_wanted_by_1132919.patch
- correct indentation of SECCHK_FROM (#985802) for the
weekly and monthly mails so that the mail header lines
are recognised by the receiving mail client
added patch: mail_headerlines_985802.patch
-------------------------------------------------------------------
Sat Mar 16 11:13:27 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
- Combine %service_* calls to reduce generated boilerplate.
-------------------------------------------------------------------
Thu Mar 7 09:00:47 UTC 2019 - abergmann@suse.com
- Move seccheck to systemd timers (bsc#1115415).
-------------------------------------------------------------------
Mon May 7 06:38:36 UTC 2018 - vpereira@microfocus.com
- fixes proposed by the bsc#1084449:
+ introduction of SECCHK_FROM
+ deletion of empty file
-------------------------------------------------------------------
Thu Nov 23 13:44:28 UTC 2017 - rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
-------------------------------------------------------------------
Tue Aug 15 13:39:22 UTC 2017 - vpereira@suse.com
- fixed: bsc#1033244: john integration were broken
-------------------------------------------------------------------
Mon Mar 6 13:38:00 UTC 2017 - vpereira@suse.com
- fixed: bsc#1021036: mute stderr on sysctl -a
-------------------------------------------------------------------
Sun Jul 24 21:10:23 UTC 2016 - vpereira@suse.com
- fixed bnc#985802: security monthly reports were broken
-------------------------------------------------------------------
Wed Oct 7 09:25:59 UTC 2015 - vpereira@suse.com
- fixed bnc#942846: seccheck does not collect the same data in
SLES 12 and SLES 11 sp3
- seccheck-3.0-fix-bashisms.patch and daily-mailer.patch were merged into upstream
-------------------------------------------------------------------
Mon Oct 5 15:09:43 UTC 2015 - vpereira@suse.com
- use upstream version of code
-------------------------------------------------------------------
Mon Apr 27 08:33:33 UTC 2015 - vpereira@suse.com
- added patch: emails-without-subject.patch to fix bnc#923688
-------------------------------------------------------------------
Tue Feb 3 15:41:45 UTC 2015 - vpereira@suse.com
- bnc#914656: fixed function guessable_password_email definition
-------------------------------------------------------------------
Wed Dec 17 19:19:00 UTC 2014 - Led <ledest@gmail.com>
- fix bashisms in scripts
- fix chebang of autologout.sh script than contains bash-specific
constructions
- add patches:
* seccheck-3.0-fix-bashisms.patch
-------------------------------------------------------------------
Tue Dec 16 08:31:31 UTC 2014 - vpereira@suse.com
- daily-mailer.patch: applied patch suggested in bnc#904544
-------------------------------------------------------------------
Wed Sep 3 12:35:19 UTC 2014 - vpereira@suse.com
- refactoring: each security test, has its own helper
- ran spec-clean
-------------------------------------------------------------------
Thu Aug 14 15:11:37 UTC 2014 - vpereira@suse.com
- New version 3.0
- refactored codebase
- added new security tests
- moved the upstream to https://github.com/vpereira/seccheck
- Upstreamed patches:
seccheck-2.0.diff
seccheck-2.0-misc.patch
seccheck-2.0-nisfix.patch
seccheck-2.0-grep.patch
seccheck-2.0-sort.patch
seccheck-2.0-newpromisccheck.patch
seccheck-2.0-filesystems_added.patch
seccheck-2.0_john-path.diff
seccheck-2.0_withoutmedia-bug47024.diff
seccheck-2.0_update-datafiles-regexfix-bug51004.diff
seccheck-2.0_fix-ls-output-local.diff
seccheck-2.0_find_mount_arg.diff
seccheck-2.0_find_with_dev.diff
seccheck-2.0_dont_run_xarg_on_empty_input.diff
seccheck-2.0-john.patch
seccheck-2.0-website.patch
seccheck-2.0_new_rpm_output_handle_more_filesystems_bnc746042.diff
seccheck-2.0_daily_uid_bnc769770.diff
seccheck-2.0-autologout.patch
-------------------------------------------------------------------
Wed Feb 19 07:12:39 UTC 2014 - abergmann@suse.com
- Disable autologout as default (bnc#864534).
(seccheck-2.0-autologout.patch)
-------------------------------------------------------------------
Fri Feb 14 13:20:19 UTC 2014 - abergmann@suse.com
- Extended autologout functionality in seccheck-2.0-autologout.patch
with SSH. See autologout.conf file for configuration details.
- Fixed issue if no user is logged on in seccheck-2.0-autologout.patch.
-------------------------------------------------------------------
Thu Feb 13 08:29:15 UTC 2014 - abergmann@suse.com
- Added new autologout functionality. (FATE#312303)
(added seccheck-2.0-autologout.patch)
-------------------------------------------------------------------
Wed Jul 4 13:30:34 UTC 2012 - thomas@suse.com
- fixed bnc#769770 to improve reporting of account names
with equal UIDs.
- change tmp fie handling and removed obsolete code
-------------------------------------------------------------------
Thu May 31 14:18:35 UTC 2012 - thomas@suse.com
- bnc#746042 handle new "rpm -Va" output for md5 sums and don't
limit the mount point detection to special filesystems
-------------------------------------------------------------------
Thu Feb 9 06:36:40 UTC 2012 - thomas@suse.com
- fixed typo in seccheck-2.0_dont_run_xarg_on_empty_input.diff
bnc#741737
-------------------------------------------------------------------
Tue Nov 3 19:09:45 UTC 2009 - coolo@novell.com
- updated patches to apply with fuzz=0
-------------------------------------------------------------------
Tue Sep 22 10:07:25 CEST 2009 - thomas@novell.com
- fixed patch seccheck-2.0_dont_run_xarg_on_empty_input.diff
(bnc#540017)
-------------------------------------------------------------------
Wed Jan 14 11:52:03 CET 2009 - thomas@suse.de
- changed compression from gz to bz2
-------------------------------------------------------------------
Wed Jan 14 11:48:58 CET 2009 - thomas@suse.de
- improved patch seccheck-2.0-john.patch (bnc#465939)
-------------------------------------------------------------------
Sun Feb 11 12:18:03 CET 2007 - ro@suse.de
- fix build as non-root
-------------------------------------------------------------------
Wed Oct 11 12:31:51 CEST 2006 - lrupp@suse.de
- point the user to the right place for security informations
-------------------------------------------------------------------
Wed Sep 13 19:18:38 CEST 2006 - lrupp@suse.de
- find location of john automatically
-------------------------------------------------------------------
Mon Jul 24 15:12:05 CEST 2006 - thomas@suse.de
- fixed bug #188579 (seccheck-2.0_dont_run_xarg_on_empty_input.diff)
-------------------------------------------------------------------
Mon Mar 6 13:50:37 CET 2006 - thomas@suse.de
- This update fixes the parameters for the 'find' command.
(bug #154639)
-------------------------------------------------------------------
Wed Jan 25 21:47:43 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Wed Jan 11 14:43:44 CET 2006 - thomas@suse.de
- removed seccheck-2.0_john-path.diff (bug #142053)
-------------------------------------------------------------------
Mon Aug 8 11:27:05 CEST 2005 - thomas@suse.de
- fixed ls' time output regarding differnt locale settings
bug #51004
-------------------------------------------------------------------
Wed Jul 27 17:17:49 CEST 2005 - thomas@suse.de
- changed path to john to reflect new john packaging
- fixed some regex' (bug #51004)
- try to keep data files uptodate (bug #51004)
- avoid looking into /media directory (bug #47024)
-------------------------------------------------------------------
Mon Sep 6 11:27:30 CEST 2004 - thomas@suse.de
- added patch to support more filesystems (Bug #44719)
-------------------------------------------------------------------
Tue Sep 30 15:38:37 CEST 2003 - thomas@suse.de
- added new promisc mode check
-------------------------------------------------------------------
Tue Sep 2 09:14:07 CEST 2003 - kukuk@suse.de
- Add sysconfig metadata [Bug #28935]
-------------------------------------------------------------------
Sun Aug 3 21:21:49 CEST 2003 - poeml@suse.de
- sort was using obsolete syntax +1, replaced by -k2 [#28429]
-------------------------------------------------------------------
Fri Jun 6 12:55:37 CEST 2003 - okir@suse.de
- grep -C was using obsolete syntax [#27258]
-------------------------------------------------------------------
Sat Feb 22 00:20:46 CET 2003 - mmj@suse.de
- Add sysconfig metadata [#22684]
-------------------------------------------------------------------
Wed Feb 5 17:57:41 CET 2003 - okir@suse.de
- do not complain about +joedoe NIS accounts (previously,
we just ignored + and -) (#23146)
-------------------------------------------------------------------
Mon Nov 18 17:04:20 CET 2002 - okir@suse.de
- removed residual rc.config references
- START_SECCHECK now really works
- cleaned up the general blurb included in the mail messages
- daily sec check would incorrectly flag random home directories
and dot files as owned by another user/group (#20720)
- use long-iso format in ls output (#21863)
- corrected spelling of sysconfig variable
(SECCH*C*K_USER -> SECCHK_USER) (#15866, 16623)
- avoid different seccheck scripts from stepping on each others'
toes when using a local copy of /etc/passwd (#16810)
- Stop warning about + and - lines in /etc/{shadow,passwd} (#21496)
- Allow user/group names of up to 32 characters (#21496 too)
-------------------------------------------------------------------
Mon Nov 11 09:52:46 CET 2002 - kukuk@suse.de
- Use sysconfig/seccheck, not rc.config
-------------------------------------------------------------------
Thu Aug 1 01:25:04 CEST 2002 - ro@suse.de
- move to sysconfig, use prereq
-------------------------------------------------------------------
Fri Jul 13 16:01:31 MEST 2001 - garloff@suse.de
- Added START_SECCHK variable to control whether the script will
be run by cron. (see discussion @ bugzilla #5413).
START_SECCHK defaults to "yes".
- Update to seccheck-2.0:
* fixed an egrep bug - which was reported looooong time ago :-(
* workarounds for Redhat ... they should update the mktempa and
provide pidof ... duh ... (thanks to weutzing@exozet.com)
- Update to seccheck-1.9:
* finally fixed the output of the weekly changes to prevent
unnecessary lines
* Added small fix to prevent "undisclosed receipent" msg in
mailers
-------------------------------------------------------------------
Tue May 8 15:28:03 CEST 2001 - garloff@suse.de
- Update to seccheck-1.8:
* rewrote the mail header message for the change reports
* added LICENCE (GPLv2) - required by SuSE policy
- Update to seccheck-1.7:
* fixed a check for /etc/shadow password field contents
-------------------------------------------------------------------
Tue Apr 24 02:39:02 MEST 2001 - garloff@suse.de
- Move it back to cron.d/seccheck. Otherwise users who use their
machine only occasionally would see a significant performance
hit.
-------------------------------------------------------------------
Wed Feb 21 15:50:10 MET 2001 - garloff@suse.de
- Start seccheck via cron.daily,weekly,monthly instead of
cron.d/seccheck. The latter does not work, if the computer is not
running at the specified time. (Bugzilla #5413, Ivory@SerNet.de)
-------------------------------------------------------------------
Tue Jan 9 18:22:03 MET 2001 - garloff@suse.de
- Add SECCHK_USER to /etc/rc.config (fillup-template), bug #5349
- Remove double sourcing of /etc/rc.config from security-control.sh
script.
-------------------------------------------------------------------
Tue Dec 19 16:10:02 CET 2000 - garloff@suse.de
- Oops: Used %{_tmpdir} instead of %{_tmppath} in BuildRoot:
-------------------------------------------------------------------
Tue Dec 19 14:27:22 CET 2000 - garloff@suse.de
- seccheck-1.6:
* Fix some DoS possibilities
* Exlcude for NFS/cdrom was missing at one place in weekly
* closed a hole against possibility of a backdoor trying
to hide from lsof output
-------------------------------------------------------------------
Fri Sep 29 18:28:33 MEST 2000 - garloff@suse.de
- seccheck-1.4: lsof fix and other minor fixes.
-------------------------------------------------------------------
Tue Jul 25 14:06:28 CEST 2000 - garloff@suse.de
- egrep check for \\+ sign was missing the quoting \\ (#3461)
-------------------------------------------------------------------
Sun Jul 9 22:54:46 CEST 2000 - garloff@suse.de
- Report version number properly (was erroneously set to 1.2)
-------------------------------------------------------------------
Fri Jun 30 21:55:54 CEST 2000 - garloff@suse.de
- Update to version 1.3:
* checkneverlogin
* reiserfs support (suid/writable)
* better output routines
* some checks added
- Use BuildRoot.
-------------------------------------------------------------------
Wed Feb 16 00:29:55 CET 2000 - garloff@suse.de
- Version 0.9. Use install in spec-file instead of crufty
cp/mkdir, chown, chmod sequences.
-------------------------------------------------------------------
Tue Oct 19 17:33:29 CEST 1999 - bs@suse.de
- changed from /etc/cron.daily to /etc/cron.d with hardcoded starting times.
-------------------------------------------------------------------
Fri Oct 1 21:17:19 CEST 1999 - bs@suse.de
- new version 0.8
-------------------------------------------------------------------
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
- ran old prepare_spec on spec file to switch to new prepare_spec.
-------------------------------------------------------------------
Tue Apr 13 22:13:09 MEST 1999 - bs@suse.de
- set version properly
-------------------------------------------------------------------
Tue Mar 30 12:46:18 MEST 1999 - ro@suse.de
- new package
