pool/cfengine
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
f503ada28b
cfengine/cfengine.changes

742 lines
25 KiB
Plaintext
Raw Blame History

-------------------------------------------------------------------
Wed May 15 11:58:21 UTC 2013 - kkaempf@suse.com
- add rpmlintrc file
-------------------------------------------------------------------
Tue Apr 16 14:41:48 UTC 2013 - kkaempf@suse.com
- Build with libvirt
- run cf-key on first install
-------------------------------------------------------------------
Mon Apr 15 07:12:33 UTC 2013 - kkaempf@suse.com
- Update to 3.5.0 - Beta 1
-------------------------------------------------------------------
Mon Mar 18 08:12:52 UTC 2013 - kkaempf@suse.com
- Update to 3.5.0 - Alpha 2
New features:
- new built-in functions: classesmatching, strftime, filestat,
ifelse, maparray
- cf-promises flag --parse-tree is replaced by --policy-output-format=,
requiring the user to specify the output format (none, cf, json)
- cf-promises allows partial check of policy (without body common
control) without integrity check;
--full-check enforces integrity check
- agent binaries support JSON input format (.json file as generated
by cf-promises)
- cf-key: new options --trust-key/-t and --print-digest/-p
- Class "failsafe_fallback" is defined in failsafe.cf when main
policy contains errors and failsafe is run because of this
- add scope attribute for body classes (Redmine #2013)
Changes:
- action_policy => "warn" causes not_kept classes to be set on
promise needing repair.
- command line option version (-V) now prints a shorter
parsable version without graphic
- implicit execution of server and common bundles taking
arguments is skipped in cf-serverd.
- WARNING: option --policy-server removed, require option to
--bootstrap instead
- process promises don't log if processes are out of range unless
you run in verbose mode
- reports promises are now allowed in any context (Redmine #2005)
- cf-report has been removed
- cf-execd: --once implies --no-fork
Bugfixes:
- ifvarclass checked from classes promises in common bundles
- do not wait for splaytime when executing only once
- disable xml editing functionality when libxml2 doesn't provide
necessary APIs (Redmine #1937)
-------------------------------------------------------------------
Fri Feb 1 20:21:09 UTC 2013 - kkaempf@suse.com
- Update to 3.5.0 - Alpha 1
New Features:
- Enable zeroconf-discovery of policy hubs for automatic bootstrapping
if Avahi is present
- Support for sys.cpus on more platforms than Linux & HPUX
Changes:
- Make parser output in GCC compatible format the only supported format
(remove --gcc-brief-format flag)
- Silence license warnings in Enterprise Free25 installations
Bugfixes:
- Allocate memory dynamically to avoid out-of-buffer or out-of-hash
situations
- fix edit_xml update of existing attributes (Redmine #2034)
- use failsafe policy from compile-time specified workdir (Redmine #1991)
- Update to 3.4.2 (Bugfix and Stability release)
Bugfixes:
- Fixes to policies in masterfiles (see masterfiles/Changelog for details)
- Fixes for OpenBSD (GitHub #278)
- Do not canonify values specified in abortbundleclasses/abortclasses (Redmine #1786)
- Fix build issues on NetBSD, SLES 12.2
- Improve error message when libxml2 support is not compiled (Redmine #1799)
- fix potential segmentation fault when trimming network socket data (GitHub #233)
- fix potential segmentation fault when address-lookups in lastseen db failed (GitHub #233)
- execute background promise serially when max_children was reached, rather
than skipping them (GitHub #233)
- fix segmentation fault in cf-promises when invoked with --reports (Redmine #1931)
- fix compilation with Sun Studio 12 (Redmine #1901)
- silence type-pun warning when building on HP-UX (GitHub #287)
-------------------------------------------------------------------
Sat Jan 12 19:06:06 UTC 2013 - coolo@suse.com
- remove suse_update_config
-------------------------------------------------------------------
Fri Dec 14 08:06:06 UTC 2012 - kkaempf@suse.com
- update to 3.4.1 final
remove cfengine-3.4.0.patch, was accepted upstream
3.4.1 (Bugfix and Stability release)
New feature/behavior:
- cf-execd terminates agent processes that are not responsive
for a configurable amount of time (see agent_expireafter in
body executor control), defaulting to 1 week
Bugfixes:
- fix regression of classmatch() failing with hard classes
(Redmine #1834)
- create promise-defined and persistent classes in correct
namespace (Redmine #1836)
- several fixes to namespace support
- fix several crash bugs caused by buffer overflow and race
conditions in cf-serverd
- regenerate time classes in cf-execd for each run
(Redmine #1838)
- edit_xml: fix select_xpath implementation and update
documentation
NOTE: code that uses select_xpath_region needs to be changed
to select_xpath
- edit_xml: make sure that text-modification functions don't
overwrite child nodes
- edit_xml: improve error logging
-------------------------------------------------------------------
Thu Nov 29 07:48:20 UTC 2012 - kkaempf@suse.com
- update to 3.4.0 final
-------------------------------------------------------------------
Sun Oct 21 10:07:18 UTC 2012 - kkaempf@suse.com
- fix systemd check (use systemd for openSUSE 12.1 too)
-------------------------------------------------------------------
Mon Oct 8 14:31:23 UTC 2012 - kkaempf@suse.com
- workaround for potential buffer overflow
-------------------------------------------------------------------
Thu Oct 4 08:48:10 UTC 2012 - kkaempf@suse.com
- honor filesystem hierachy standard (FHS):
- build with --enable-fhs
- honor documentation
- install in /var/cfengine
- support systemd where applicable
- update to 3.0.4b2
New features:
- XML editing capabilities. See the documentation for edit_xml
body. Note the new dependency: libxml2.
- Implement inheritance of local classes by bundles called using
"usebundle". By default classes are not inherited. See the
examples/unit_inherit.cf for an example.
- Moved from Nova/Enterprise:
- POSIX ACL support,
- "outputs" promise type,
- remote syslog support.
- packages_default_arch_command hook in packages promises, to
specify default architecture of the packages on the system.
- packages_version_less_command / packages_version_equal_command hooks
in packages promises, to specify external command for native package
manager versions comparison
- Running in Solaris zone is now detected and classes "zone" and
"zone_<name>" are created in this case.
- VirtualBox support added to guest_environment promises.
- guest_environment promises are supported under OS X.
- The "depends_on" attribute is now active, for the partal ordering
of promises. If a promise depends on another (referred by handle)
it will only be considered if the depends_on list is either kept
or repaired already.
** WARNING: When upgrading, make sure that any existing use
of depends_on does not make some promises being
unintentionally ignored.
This can happen if you are currently refering to non-existant or
never-run handles in depends_on attributes.
- methods return values, initial implementation
- New format for cf-key -s, includes timestamp of last connection
Changed functionality:
- cf-execd -F switch no longer implies 'run once'. New -O/--once
option is added to achieve this behaviour. This makes cf-execd
easier to run from systemd, launchd and other supervision
systems.
-------------------------------------------------------------------
Wed Feb 15 13:49:18 UTC 2012 - chris@computersalat.de
- update to 3.2.4
* Fixed failure in network transfer in case of misbehaving peer
* A few tiny memory leaks on error paths fixed
- fix post/-un for SLE_10 (install_info)
- fix deps for SLE_10
* {libsoname} Req glibc
- provide default *.cf files in inputs DIR
otherwise init scripts will fail
-------------------------------------------------------------------
Wed Feb 8 15:03:01 UTC 2012 - chris@computersalat.de
- fix pre/post scripts
* RHEL/CentOS does not know "SuSE macros" :(
-------------------------------------------------------------------
Tue Feb 7 12:20:19 UTC 2012 - chris@computersalat.de
- fix deps for CentOS/RHEL (cron)
* Req vixie-cron
-------------------------------------------------------------------
Mon Jan 30 09:26:01 UTC 2012 - chris@computersalat.de
- fix cron file
-------------------------------------------------------------------
Wed Jan 25 15:52:31 UTC 2012 - chris@computersalat.de
- change workdir to /var/lib/cfengine/work
* adapt init scripts
* add new dirs
o /var/lib/cfengine/{backup,failsafe,config}
- add cron file as Source10
-------------------------------------------------------------------
Tue Jan 24 14:27:49 UTC 2012 - chris@computersalat.de
- move "server" stuff to subpkg
-------------------------------------------------------------------
Fri Jan 13 13:34:32 UTC 2012 - chris@computersalat.de
- fix init scripts
* check for existing "promises.cf, failsafe.cf"
- create symlinks for sbin_PROGRAMS
-------------------------------------------------------------------
Tue Nov 15 15:02:19 UTC 2011 - chris@computersalat.de
- update to 3.2.3
* A few tiny memory leaks fixed
* Improved performance of cf-serverd under heavy load with
TokyoCabinet database
* Full list of issues fixed is available on
https://cfengine.com/bugtracker/changelog_page.php
- fix License: GPLv2+ -> GPLv3
-------------------------------------------------------------------
Tue Oct 11 09:24:22 UTC 2011 - chris@computersalat.de
- update to 3.2.1
* ATM no "uptodate" ChangeLog available :(
-------------------------------------------------------------------
Fri Sep 30 20:07:48 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to make the spec file more reliable
-------------------------------------------------------------------
Sat Sep 17 22:48:09 UTC 2011 - jengelh@medozas.de
- Remove redundant tags/sections from specfile
-------------------------------------------------------------------
Wed Aug 31 17:42:52 UTC 2011 - chris@computersalat.de
- lib pkging policy
* new subpkg: libpromises1, devel
* disable-static lib
- rpmlint
* incorrect-fsf-address
* run-level 4, init scripts
- subpkg doc
* documentation
* added cf3-Reference.pdf as {S:1}
-------------------------------------------------------------------
Mon Aug 29 09:24:29 UTC 2011 - chris@computersalat.de
- update to 3.2.0
* New bootstrap method with single-command bootstrapping:
- cf-agent --bootstrap --policy-server 123.456.789.123
- Associated policy template files are added, partially maintained
by CFEngine
- See <FIXME> for upgrade procedure
* Bug fixes for file-editing, package versioning, and embedded
database corruption (We recommend using TokyoCabinet instead of
BerkeleyDB if building from source).
* Improved upgrade path for Nova.
* Patches for improved run-agent concurrency
* Reorganization of documentation and community resources
* 100% on regression test suite on 3 operating systems
(Ubuntu, Debian, SuSE on x86-64 hardware)
* Support for multiple release environments
* package_policy update and addupdate now check if user-supplied
version is larger than currently installed - updates only if so
* Help text of cf-report -r corrected - a list of key hashes is
required, not ip addresses.
* New Emacs mode for CFEngine policy files (thanks to Ted Zlatanov!)
- After beta 1:
* Warnings are on edit_line changes can now give greater degree of information
without spamming promise logs
* Class expressions parser accepts '||' as an alias for '|' again.
* Invalidation of package list cache on installation/removal of
packages.
- After beta 2:
* New option cf-key -r to remove host key by IP or hostname.
* Added detection of network interfaces which belong to BSD jails.
* Improve robustness of multi-threaded code, in particular fix
problems with spurious acces denials in server and losing of
authentication rules after policy reload.
* cf-promises accepts option -b matching cf-agent, which causes it
to do not complain about missing bundlesequence.
* New functions and(), not(), or() and concat() to ease use of
ifvarclass() clause.
* Full list of issues fixed is available on
https://cfengine.com/bugtracker/changelog_page.php
- some cleanup
* ./configure .... -> %configure with default datadir
* macro usage
* use default install to docdir, add missing AUTHORS, LICENSE
-------------------------------------------------------------------
Wed Aug 24 15:07:33 UTC 2011 - chris@computersalat.de
- fix init scripts
o RH, CentOS: fix return of checkproc, start_daemon
-------------------------------------------------------------------
Tue Aug 9 15:56:24 UTC 2011 - chris@computersalat.de
- update init scripts
o complete rewrite, used skeleton.compat
-------------------------------------------------------------------
Mon Aug 8 15:52:16 UTC 2011 - chris@computersalat.de
- update to 3.1.5
* New class parser, '||' is no longer allowed in expressions (use '|').
* Class setting in the promise types insert_lines, delete_lines,
replace_patterns, field_edits, vars, classes is restored.
* suspiciousnames implemented.
* New function getvalues().
* New functions parse{read,int,string}array to match
read{read,int,string}array.
* Testsuite added to check for core functionality.
* Syslog prefix is fixed to say 'cf3' instead of 'community'.
- see ChangeLog file for more info
- {name} macro
- add BuildReq postgresql-devel (PostgreSQL connector)
- remove Author from desc
- no autoreconf
- keep libs
- build support for CentOS, RHEL
-------------------------------------------------------------------
Mon Aug 23 15:10:03 CEST 2010 - anicka@suse.cz
- update to 3.05p1
* bugfixes
-------------------------------------------------------------------
Mon Dec 14 14:30:46 CET 2009 - anicka@suse.cz
- update to 3.02
* cfengine3 is a major rewrite, much simpler but with many
new features
- added new init scripts
- remove all the patches
-------------------------------------------------------------------
Mon Sep 7 20:53:22 CEST 2009 - anicka@suse.cz
- fixed resource leak (bnc#533579)
-------------------------------------------------------------------
Mon Aug 10 17:03:52 CEST 2009 - anicka@suse.cz
- fixed memory leak (bnc#523789)
-------------------------------------------------------------------
Fri Apr 10 17:33:15 CEST 2009 - anicka@suse.cz
- fix %preun script (bnc#487781)
-------------------------------------------------------------------
Mon Oct 27 12:30:53 CET 2008 - anicka@suse.cz
- fix bad printf specifier (bnc#439040)
-------------------------------------------------------------------
Thu Sep 11 17:27:12 CEST 2008 - anicka@suse.cz
- update to 2.2.8
* Patch for cfservd serving wrong data when link->copy
* Checksum changes now trigger persistent class "checksum_alerts"
and log to WORKDIR/state/file_hash_event_history
* Threading error fix for cfexecd
* Windows compilation fixes
-------------------------------------------------------------------
Fri Jun 27 17:14:56 CEST 2008 - anicka@suse.cz
- update to 2.2.7
* Xen detection
* Sensor code added for linux cfenvd
* Documentation is no longer distributed in the tarball
* rxdirs= added to files. Default is false. If set to true,
cfengine will not assume that x-bits should be set when r is
set on directory permissions.
* Group initialization to popen, so shellcommands groups are
consistent with uid login id
* bugfixes
-------------------------------------------------------------------
Tue Jan 15 14:37:49 CET 2008 - anicka@suse.cz
- update to 2.2.3
* minor tweaks and bug fixes
* IgnoreInterfaceRegex( "vm.*" ) added to control
function added for removing data from special interfaces
from class data
* Option checkroot=true/false added to copy directive.
* Can escape colons in the strings now to avoid confusion with
expansion separator.
* cfenvgraph --erasehistory users,www_in etc will now set the
average and variance of learned cfenvd data to zero.
* audit=true/false flag added to most actions
-------------------------------------------------------------------
Mon Nov 26 11:24:07 CET 2007 - anicka@suse.cz
- remove .a and .la file from the package, fix
debuginfo package building
-------------------------------------------------------------------
Wed Nov 21 14:54:35 CET 2007 - anicka@suse.cz
- update to 2.2.2
* changes in build procedure, libtoolizing
* beginning of an integrated auditing system added
* SCLI interface modifications
- fix init scripts (remove X-United-Linux headers,
add dependency to $remote_fs)
-------------------------------------------------------------------
Tue Jul 3 08:43:03 CEST 2007 - anicka@suse.cz
- add %insserv_cleanup to %postun
-------------------------------------------------------------------
Tue Jun 12 15:16:50 CEST 2007 - anicka@suse.cz
- update to 2.2.1
* scli: type section added.
* Code refactoring for package management.
* Bug fixes for problems introduced in 2.2.0.
* structural internal changes that ease the eventual
confluence with cfengine 3
- fix overflowing buffer, uninitialized variable and
other minor problems
- remove -configure.diff, fixed in upstream
-------------------------------------------------------------------
Fri Apr 20 18:58:28 CEST 2007 - aj@suse.de
- Cleanup build requires.
-------------------------------------------------------------------
Fri Mar 30 16:59:45 CEST 2007 - stbinner@suse.de
- add bison and flex to build requires
-------------------------------------------------------------------
Fri Feb 2 12:01:24 CET 2007 - anicka@suse.cz
- update to 2.1.22
* cfshow output formatting changes
* database internal format changes
* rewritten the checksum code, no caching anymore
* ShowState(rootprocs), ShowState(otherprocs) added for
better process reporting
* General code reorganization for better separation of concerns,
looking towards cfengine 3.
* cfconvert removed. Change of future strategy for cfengine 3
migration.
* Support for old Berkeley DB APIs abandoned.
* Encryption level added for full encryption of opendir traffic.
Must set FullEncryption = ( true ) in control for compatability
* bugfixes
-------------------------------------------------------------------
Wed Oct 18 10:28:12 CEST 2006 - anicka@suse.cz
- fix array subscript out of range (#211160)
-------------------------------------------------------------------
Thu Sep 21 09:47:44 CEST 2006 - anicka@suse.cz
- update to 2.1.21
* copy action now supports this $(this) variable
* PH support removed from cfenvd during code rationalization
* ReturnsZeroShell function added
* Cfenvd code rationalization and channge in database format
* bugfixes
-------------------------------------------------------------------
Fri Jun 16 14:38:13 CEST 2006 - schwab@suse.de
- Fix syntax error in configure script.
-------------------------------------------------------------------
Fri May 19 15:00:23 CEST 2006 - anicka@suse.cz
- update to 2.1.20:
- various minor bugfixes added
-------------------------------------------------------------------
Wed Jan 25 21:34:55 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Thu Jan 5 15:44:53 CET 2006 - anicka@suse.cz
- update to 2.1.17
-------------------------------------------------------------------
Tue Nov 15 11:05:32 CET 2005 - anicka@suse.cz
- update to 2.1.17
- remove CAN-2005-2960 patch (affected file removed by upstream)
-------------------------------------------------------------------
Fri Oct 7 17:47:09 CEST 2005 - schwab@suse.de
- Don't strip binaries.
-------------------------------------------------------------------
Wed Oct 5 16:36:15 CEST 2005 - anicka@suse.cz
- fix too few arguments to a *printf function
-------------------------------------------------------------------
Tue Oct 4 19:46:07 CEST 2005 - anicka@suse.cz
- fix CAN-2005-2960 vulnerability (#120075)
- update to 2.1.16
-------------------------------------------------------------------
Mon Aug 1 15:52:43 CEST 2005 - anicka@suse.cz
- update to 2.1.15
-------------------------------------------------------------------
Fri Apr 22 13:09:06 CEST 2005 - postadal@suse.cz
- updated to version 2.1.14
-------------------------------------------------------------------
Sun Feb 13 17:14:03 CET 2005 - ro@suse.de
- added libpng to nfb (for tetex)
-------------------------------------------------------------------
Thu Feb 03 10:52:13 CET 2005 - postadal@suse.cz
- updated to version 2.1.13
- added init scripts (cfenvd, cfexecd, cfservd)
-------------------------------------------------------------------
Tue Aug 17 14:22:41 CEST 2004 - postadal@suse.cz
- updated to version 2.1.9
-------------------------------------------------------------------
Wed Feb 18 14:44:28 CET 2004 - postadal@suse.cz
- updated to version 2.1.3
- removed obsoleted patch db.dif
- fixed code that broke strict aliasing
-------------------------------------------------------------------
Fri Jan 23 00:00:02 CET 2004 - ro@suse.de
- fix build with current automake
use another method to pass flags to MAKEINFOHTML
-------------------------------------------------------------------
Sat Jan 10 16:25:19 CET 2004 - adrian@suse.de
- build as user
-------------------------------------------------------------------
Wed Aug 06 15:00:01 CEST 2003 - postadal@suse.cz
- updated to version 2.0.7p3
- removed obsoleted patch (info.diff)
-------------------------------------------------------------------
Mon May 12 00:39:22 CEST 2003 - ro@suse.de
- fix build with db-4.1
- fix compile: chflags function available does not mean
struct stat has st_flags
-------------------------------------------------------------------
Thu Apr 24 12:20:23 CEST 2003 - ro@suse.de
- fix install_info --delete call and move from preun to postun
-------------------------------------------------------------------
Wed Feb 26 13:30:23 CET 2003 - postadal@suse.cz
- used install-info macros
- fixed Anomalies.texinfo (dir entry)
-------------------------------------------------------------------
Tue Sep 17 17:34:28 CEST 2002 - ro@suse.de
- removed bogus self-provides
-------------------------------------------------------------------
Wed Jul 31 22:45:49 CEST 2002 - postadal@suse.cz
- update to version 2.0.3
* Hpux config changes
* new options
* new list in cfservd.conf
* a lot of fixes
-------------------------------------------------------------------
Fri Nov 23 15:00:54 CET 2001 - cihlar@suse.cz
- added Url:
-------------------------------------------------------------------
Mon Nov 5 16:37:18 CET 2001 - cihlar@suse.cz
- fixed to compile with automake 1.5
-------------------------------------------------------------------
Mon Apr 23 13:18:29 CEST 2001 - cihlar@suse.cz
- fixed warnings on ia64
-------------------------------------------------------------------
Tue Mar 6 09:01:41 CET 2001 - cihlar@suse.cz
- update to version 1.6.3
-------------------------------------------------------------------
Mon Oct 30 13:56:17 CET 2000 - cihlar@suse.cz
- update to version 1.6.0.a13
- bzipped sources
-------------------------------------------------------------------
Tue Oct 3 10:41:28 CEST 2000 - cihlar@suse.cz
- update to version 1.6.0.a11
-------------------------------------------------------------------
Mon May 15 11:19:05 CEST 2000 - cihlar@suse.cz
- Group sorted
- %{_defaultdocdir} instead of /usr/doc/packages
-------------------------------------------------------------------
Mon Apr 10 22:04:05 CEST 2000 - bk@suse.de
- added suse update config macro
-------------------------------------------------------------------
Tue Apr 4 14:02:01 CEST 2000 - cihlar@suse.cz
- upgrade to version 1.5.4
- added BuildRoot
-------------------------------------------------------------------
Mon Jan 17 18:29:29 CET 2000 - ro@suse.de
- update to 1.5.3 , man, info to /usr/share
-------------------------------------------------------------------
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
- ran old prepare_spec on spec file to switch to new prepare_spec.
-------------------------------------------------------------------
Wed Sep 1 11:03:55 CEST 1999 - ro@suse.de
- update to 1.5.1 / specfile cleanup
-------------------------------------------------------------------
Tue Sep 22 11:54:31 MEST 1998 - ro@suse.de
- update to 1.4.12
----------------------------------------------------------------------------
Mon Mar 2 17:17:52 MET 1998 - florian@suse.de
- update to release 1.4.10
----------------------------------------------------------------------------
Fri Oct 10 11:43:37 MEST 1997 - florian@suse.de
- update to release 1.4.8a
----------------------------------------------------------------------------
Mon Jul 7 13:17:08 CEST 1997 - florian@suse.de
- update to release 1.4.0
----------------------------------------------------------------------------
Sat Nov 16 20:28:43 CET 1996 - florian@suse.de
- update to newest version 1.3.16
----------------------------------------------------------------------------
Thu Oct 17 16:05:09 CEST 1996 - florian@suse.de
- Update auf neue Version 1.3.12.
Reference in New Issue View Git Blame Copy Permalink