From 2c7c25ff2f458758fdb2b6573bdcf0ada9b445635524878f5b7aaea35ddc7d78 Mon Sep 17 00:00:00 2001 From: YaST Team Bot Date: Wed, 2 Oct 2024 08:05:49 +0000 Subject: [PATCH] - Drop obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD in /etc/login.defs.d/70-yast.defs (bsc#1231006) - 5.0.2 OBS-URL: https://build.opensuse.org/package/show/YaST:Head/yast2-security?expand=0&rev=297 --- .gitattributes | 23 + .gitignore | 1 + yast2-security-5.0.1.tar.bz2 | 3 + yast2-security-5.0.2.tar.bz2 | 3 + yast2-security.changes | 1643 ++++++++++++++++++++++++++++++++++ yast2-security.spec | 120 +++ 6 files changed, 1793 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 yast2-security-5.0.1.tar.bz2 create mode 100644 yast2-security-5.0.2.tar.bz2 create mode 100644 yast2-security.changes create mode 100644 yast2-security.spec diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/yast2-security-5.0.1.tar.bz2 b/yast2-security-5.0.1.tar.bz2 new file mode 100644 index 0000000..8eb3123 --- /dev/null +++ b/yast2-security-5.0.1.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2b20005ee86e46ca470d863ba590f5a501dd93c7041d73cda5565f89de504873 +size 99699 diff --git a/yast2-security-5.0.2.tar.bz2 b/yast2-security-5.0.2.tar.bz2 new file mode 100644 index 0000000..5ed57e8 --- /dev/null +++ b/yast2-security-5.0.2.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:64c506b60b11d87cc4fcd42accae2ca33f6b8779668b82e0e87a712de6764bba +size 99430 diff --git a/yast2-security.changes b/yast2-security.changes new file mode 100644 index 0000000..0bdb48d --- /dev/null +++ b/yast2-security.changes @@ -0,0 +1,1643 @@ +------------------------------------------------------------------- +Mon Sep 30 14:36:10 UTC 2024 - Stefan Hundhammer + +- Drop obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD in + /etc/login.defs.d/70-yast.defs (bsc#1231006) +- 5.0.2 + +------------------------------------------------------------------- +Tue Aug 6 11:34:20 UTC 2024 - Knut Anderssen + +- Do not load the security settings from the security policy until + needed (bsc#1216615). +- 5.0.1 + +------------------------------------------------------------------- +Wed Aug 30 20:16:10 UTC 2023 - Josef Reidinger + +- 5.0.0 (bsc#1185510) + +------------------------------------------------------------------- +Fri Mar 03 14:44:07 UTC 2023 - Ladislav Slezák + +- Bump version to 4.6.0 (bsc#1208913) + +------------------------------------------------------------------- +Wed Feb 22 17:28:54 UTC 2023 - Michal Filka + +- bsc#1208492 + - do not store empty values in CFA login.defs empty value to + avoid crash when parsing according to login.defs lens +- 4.5.6 + +------------------------------------------------------------------- +Tue Dec 20 10:21:49 UTC 2022 - Imobach Gonzalez Sosa + +- AutoYaST: export security policy settings (related to + jsc#SLE-24764). +- Always write the ssg-apply configuration if a security policy + is enabled, even if the action is 'none' (related to + jsc#SLE-24764). +- 4.5.5 + +------------------------------------------------------------------- +Thu Dec 1 14:56:43 UTC 2022 - Stefan Hundhammer + +- Fixed wrong steps count causing a crash during saving (bsc#1205918) +- 4.5.4 + +------------------------------------------------------------------- +Tue Nov 8 17:40:12 UTC 2022 - Imobach Gonzalez Sosa + +- Add support for DISA STIG security policy validation + (jsc#SLE-24764). +- Disable the ssg-apply service if the selected SCAP action is + "do nothing" (related to jsc#SLE-24764). +- 4.5.3 + +------------------------------------------------------------------- +Wed Nov 2 15:46:44 UTC 2022 - Martin Vidner + +- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871) +- 4.5.2 + +------------------------------------------------------------------- +Tue Aug 23 08:41:45 UTC 2022 - David Diaz + +- Do not crash when reading active LSM modules returns nil + (related to jsc#SLE-22069) +- 4.5.1 + +------------------------------------------------------------------- +Wed Apr 06 13:24:58 UTC 2022 - Ladislav Slezák + +- Bump version to 4.5.0 (bsc#1198109) + +------------------------------------------------------------------- +Fri Mar 11 13:13:09 UTC 2022 - Imobach Gonzalez Sosa + +- Always check for the package in the underlying system when + trying to detect if running on systemd (bsc#1196963). +- 4.4.13 + +------------------------------------------------------------------- +Tue Feb 22 08:08:56 UTC 2022 - David Diaz + +- Stop using 'lsm' kernel boot parameter even for the + "None" Major Linux Security Module (bsc#1194332, bsc#1196274). +- 4.4.12 + +------------------------------------------------------------------- +Fri Feb 4 09:19:19 UTC 2022 - Knut Anderssen + +- Fixed Export unit test (related to jsc#SLE-22069). +- 4.4.11 + +------------------------------------------------------------------- +Wed Jan 26 14:01:57 UTC 2022 - Knut Alejandro Anderssen González + +Related to jsc#SLE-22069: + - AutoYaST LSM: only allow to select the desired LSM and the + SELinux mode. +- 4.4.10 + +------------------------------------------------------------------- +Tue Jan 25 15:43:01 UTC 2022 - Imobach Gonzalez Sosa + +- Use Package module instead of PackageSystem (bsc#1194886). +- 4.4.9 + +------------------------------------------------------------------- +Mon Jan 24 09:45:55 UTC 2022 - Knut Anderssen + +- Related to jsc#SLE-22069: + - Fix import of 'none' and 'apparmor' options from the profile + when declared +- 4.4.8 + +------------------------------------------------------------------- +Tue Jan 11 00:06:20 UTC 2022 - Knut Anderssen + +Related to jsc#SLE-22069: + - Autoyast LSM section: added "none" section in order to mark it + as not selectable during the installation. +- 4.4.7 + +------------------------------------------------------------------- +Mon Jan 10 10:08:44 UTC 2022 - Knut Anderssen + +- Fix security_auto client selinux requirement (bsc#1194449) +- 4.4.6 + +------------------------------------------------------------------- +Fri Jan 7 12:37:08 UTC 2022 - Knut Anderssen + +- Do not use the 'lsm' kernel boot parameter by now as it could + need other modules to be pecified like the integrity one + (bsc#1194332). +- 4.4.5 + +------------------------------------------------------------------- +Tue Jan 4 12:06:48 UTC 2022 - Knut Anderssen + +- Related to jsc#SLE-22069: + - Autoyast LSM section: added "selectable" option to the section + - Do not propose a default LSM configuration when it is declared + as not configurable in the control file or AutoYaST +- 4.4.4 + +------------------------------------------------------------------- +Wed Dec 29 11:47:15 UTC 2021 - Knut Anderssen + +- Added back the selinux boot parameter when selinux is selected + and not disabled in order to switch on SELinux (jsc#SLE-22069) +- 4.4.3 + +------------------------------------------------------------------- +Wed Dec 22 23:06:57 UTC 2021 - Knut Anderssen + +- Add support for selecting and configuring the desired Linux + Security Module (jsc#SLE-22069) +- 4.4.2 + +------------------------------------------------------------------- +Wed Jul 14 13:51:18 UTC 2021 - José Iván López González + +- Add Security#SafeRead to allow detecting read errors when calling + it from perl modules (related to bsc#1177183). +- 4.4.1 + +------------------------------------------------------------------- +Tue Apr 20 13:51:55 UTC 2021 - Ladislav Slezák + +- 4.4.0 (bsc#1185510) + +------------------------------------------------------------------- +Thu Mar 18 11:43:42 UTC 2021 - David Diaz + +- Do not set SELinux mode when it is not configurable (bsc#1182940) +- 4.3.16 + +------------------------------------------------------------------- +Wed Mar 3 16:09:26 UTC 2021 - David Diaz + +- Make SELinux not configurable when running on WSL (bsc#1182940) +- 4.3.15 + +------------------------------------------------------------------- +Tue Mar 2 17:47:22 UTC 2021 - David Diaz + +- Ensure defined SELinux patterns are set (bsc#1182543). +- 4.3.14 + +------------------------------------------------------------------- +Tue Mar 2 15:31:39 UTC 2021 - David Diaz + +- Do not write bootloader in insts-sys (bsc#1182894). +- 4.3.13 + +------------------------------------------------------------------- +Mon Mar 1 11:33:59 UTC 2021 - David Diaz + +- Change the SELinux resolvable unique id used in auto-installation + to be consistent with the one used by normal installation + (related to jsc#SLE-17342). +- 4.3.12 + +------------------------------------------------------------------- +Mon Mar 1 10:21:28 UTC 2021 - Josef Reidinger + +- Move security_finish client to yast2-installation (bsc#1182821) +- 4.3.11 + +------------------------------------------------------------------- +Tue Feb 23 15:04:15 UTC 2021 - David Diaz + +- Move SELinux .autorelabel file from / to /etc/selinux if root + filesystem will be mounted as read only (jsc#SLE-17307). +- 4.3.10 + +------------------------------------------------------------------- +Tue Feb 16 13:36:34 UTC 2021 - David Diaz + +- jsc#SMO-20, jsc#SLE-17342: + - Add class for managing SELinux configuration. + - AutoYaST: add support for SELinux configuration. +- 4.3.9 + +------------------------------------------------------------------- + +Mon Feb 15 11:35:59 UTC 2021 - Josef Reidinger + +- Adapted unit test to recent changes in Yast::Report (related to + bsc#1179893). +- 4.3.8 + +------------------------------------------------------------------- +Tue Dec 15 12:33:52 UTC 2020 - schubi + +- Removed old code for sysvinit configuration (bsc#1175494). +- 4.3.7 + +------------------------------------------------------------------- +Mon Dec 14 14:49:26 UTC 2020 - schubi + +- Removed obsolete setting DISPLAYMANAGER_SHUTDOWN from + /etc/sysconfig/displaymanager (bsc#1175495). +- 4.3.6 + +------------------------------------------------------------------- +Fri Dec 11 11:24:05 UTC 2020 - schubi + +- Removed handling of obsolete entry SYSTOHC in /etc/sysconfig/clock + (bsc#1175496) +- 4.3.5 + +------------------------------------------------------------------- +Tue Oct 27 13:26:57 CET 2020 - schubi@suse.de + +- AY-Import: Translate setting to + with the correct value format (bsc#1177720). +- 4.3.4 + +------------------------------------------------------------------- +Thu Aug 13 10:00:58 UTC 2020 - Ladislav Slezák + +- Fixed randomly failing unit tests, do not query the installed + PAM modules in the testing system (related to bsc#1171318) +- 4.3.3 + +------------------------------------------------------------------- +Mon Aug 10 17:40:01 CEST 2020 - schubi@suse.de + +- AutoYaST: Added supplements: autoyast(security) into the spec file + in order to install this packages if the section has been defined + in the AY configuration file (bsc#1146494). +- 4.3.2 + +------------------------------------------------------------------- +Tue Jul 28 13:52:52 CEST 2020 - aschnell@suse.com + +- Use pam_pwquality instead of pam_cracklib depending on + availability (bsc#1171318) +- Fix setting dictpath for pam_pwquality (bsc#1174619) +- 4.3.1 + +------------------------------------------------------------------- +Tue May 12 15:16:34 UTC 2020 - josef Reidinger + +- Autoyast schema: Allow optional types for string and map objects + (bsc#1170886) +- 4.3.0 + +------------------------------------------------------------------- +Tue Mar 31 17:41:17 UTC 2020 - Knut Anderssen + +- Apply sysctl changes to the running system when the YaST sysctl + configuration file is modified (bsc#1167234) +- 4.2.12 + +------------------------------------------------------------------- +Mon Feb 3 16:02:35 CET 2020 - schubi@suse.de + +- Using SysctlConfig class: Handle sysctl entries in different + directories (bsc#1151649). +- 4.2.11 + +------------------------------------------------------------------- +Thu Jan 23 13:04:04 UTC 2020 - Steffen Winterfeldt + +- don't use /bin/systemctl compat symlink (bsc#1160890) +- 4.2.10 + +------------------------------------------------------------------- +Mon Jan 13 12:22:00 UTC 2020 - Josef Reidinger + +- convert old init.d to systemd (jsc#SLE-10976) +- 4.2.9 + +------------------------------------------------------------------- +Thu Dec 12 12:01:35 CET 2019 - schubi@suse.de + +- Added to rnc file: sys_gid_max, sys_gid_min, sys_uid_max, + sys_uid_min, hibernate_system, kernel.sysrq, mandatory_services, + net.ipv4.ip_forward, net.ipv4.tcp_syncookies, + net.ipv6.conf.all.forwarding (bsc#1158301). +- 4.2.8 + +------------------------------------------------------------------- +Mon Nov 25 11:27:11 UTC 2019 - Imobach Gonzalez Sosa + +- bsc#1155735, bsc#1157541: + - Read /usr/etc/login.defs. + - Write login.defs configuration to /etc/login.defs.d/. +- 4.2.7 + +------------------------------------------------------------------- +Fri Nov 22 12:21:59 UTC 2019 - Imobach Gonzalez Sosa + +- Change default encryption method from DES to SHA512 (bsc#1157541, + CVE-2019-3700). +- 4.2.6 + +------------------------------------------------------------------- +Fri Oct 18 13:06:46 CEST 2019 - schubi@suse.de + +- Added extra_services to security.rnc file (bsc#1153623). +- 4.2.5 + +------------------------------------------------------------------- +Thu Oct 3 16:28:06 UTC 2019 - Imobach Gonzalez Sosa + +- Place sysctl settings in /etc/sysctl.d/ (jsc#SLE-9077). +- 4.2.4 + +------------------------------------------------------------------- +Fri Sep 27 13:10:44 CEST 2019 - schubi@suse.de + +- AY: Settings have not been exported. "console_shutdown" entry + has not been evaluated (bsc#1150821). +- 4.2.3 + +------------------------------------------------------------------- +Thu Sep 5 10:22:29 CEST 2019 - schubi@suse.de + +- AY: Supporting user defined permission files like + "/etc/permissions.ultra". (bsc#1147173) +- 4.2.2 + +------------------------------------------------------------------- +Thu Aug 22 15:52:45 CEST 2019 - schubi@suse.de + +- Using rb_default_ruby_abi tag in the spec file in order to + handle several ruby versions (bsc#1146403). +- 4.2.1 + +------------------------------------------------------------------- +Fri May 31 12:38:27 UTC 2019 - Stasiek Michalski + +- Add metainfo (fate#319035) +- Revamp spec +- Replace GenericName with Comment +- 4.2.0 + +------------------------------------------------------------------- +Mon Nov 26 02:49:10 UTC 2018 - Noah Davis + +- Provide icon with module (boo#1109310) +- 4.1.2 + +------------------------------------------------------------------- +Fri Nov 2 13:19:01 UTC 2018 - schubi@suse.de + +- Writing security settings in first AY installation stage. + So other modules (e.g. users) can rely on these settings now. + (bnc#1112769) +- 4.1.1 + +------------------------------------------------------------------- +Tue Oct 16 16:18:09 CEST 2018 - schubi@suse.de + +- Added license file to spec. + +------------------------------------------------------------------- +Thu Aug 23 10:25:21 UTC 2018 - dgonzalez@suse.com + +- Upate calls to YaST2 systemd classes (related to fate#319428) +- 4.1.0 + +------------------------------------------------------------------- +Mon Aug 20 13:58:44 CEST 2018 - schubi@suse.de + +- Switched license in spec file from SPDX2 to SPDX3 format. + +------------------------------------------------------------------- +Fri Apr 6 18:53:46 UTC 2018 - mfilka@suse.com + +- bnc#1087957 - version bump +- 4.0.0 + +------------------------------------------------------------------- +Wed Aug 31 11:37:52 UTC 2016 - jreidinger@suse.com + +- mark string "Security" translatable (bnc#988764) +- 3.2.3 + +------------------------------------------------------------------- +Mon Mar 7 09:51:41 UTC 2016 - knut.anderssen@suse.com + +- Added support for multiple display managers (bnc#946889). +- Replaced testsuite tests by rspec tests. +- Removed autotools. +- Updated yast2 dependency for cfg_mail.scr +- 3.2.2 + +------------------------------------------------------------------- +Fri Feb 26 12:40:29 UTC 2016 - knut.anderssen@suse.com + +- Removed "Boot permissions - Interpretation of Ctrl + Alt + Del" + combo box "Reboot" entry for s390 architecture. (fate#319711) +- 3.2.1 + +------------------------------------------------------------------- +Thu Sep 24 14:50:20 UTC 2015 - ancor@suse.com + +- Bumped version number in order to branch the SLE version due to + different display manager behavior (bnc#946889). +- 3.2.0 + +------------------------------------------------------------------- +Wed Aug 19 14:55:48 UTC 2015 - ancor@suse.com + +- Added some entries to the list of optional services (bnc#942379) +- 3.1.11 + +------------------------------------------------------------------- +Fri Jun 19 15:26:45 UTC 2015 - ancor@suse.com + +- Settings of security levels moved to YAML files +- Redefined security levels (last part of fate#318425) +- 3.1.10 + +------------------------------------------------------------------- +Mon Jun 15 15:22:38 UTC 2015 - ancor@suse.com + +- Updated list of mandatory and optional services (part of + fate#318425) +- 3.1.9 + +------------------------------------------------------------------- +Fri Jun 12 16:27:53 UTC 2015 - ancor@suse.com + +- When checking services, systemd aliases are now taken into + account (so, for example, rsyslog is accounted as syslog). + +------------------------------------------------------------------- +Thu Jun 11 16:00:10 UTC 2015 - ancor@suse.com + +- Removed references to runlevels (obsolete). Only current systemd + target is analyzed. (fate#318425, bnc#941620) +- List of mandatory and optional services moved to a YAML file. + +------------------------------------------------------------------- +Tue Jan 13 13:24:28 UTC 2015 - ancor@suse.com + +- Fixed an error setting the shutdown behaviour of KDM (bnc#907907) +- YaST agents moved to the right location in the source tree +- 3.1.8 + +------------------------------------------------------------------- +Thu Jan 8 15:30:20 CET 2015 - jsuchome@suse.cz + +- fix paths for systemd target links (bnc#911523) +- 3.1.7 + +------------------------------------------------------------------- +Mon Dec 22 17:18:56 UTC 2014 - ancor@suse.com + +- Fixed the interface to show and process correctly values from + sysctl.conf. +- Source code cleanup, including some minor fixes and new tests. + +------------------------------------------------------------------- +Thu Dec 4 09:51:32 UTC 2014 - jreidinger@suse.com + +- remove X-KDE-Library from desktop file (bnc#899104) + +------------------------------------------------------------------- +Mon Oct 27 08:00:30 UTC 2014 - mvidner@suse.com + +- Removed CWD_IN_ROOT_PATH, CWD_IN_USER_PATH also from the UI where + they showed as empty lines in the overview (FATE#100011, + boo#900829), by Antoine Belvire. +- 3.1.5 + +------------------------------------------------------------------- +Tue Aug 5 12:58:39 UTC 2014 - ancor@suse.com + +- Speedup Security.ReadServiceSettings (bnc#890349) +- Drop obsolete runlevel parameter from some methods +- 3.1.4 + +------------------------------------------------------------------- +Fri Mar 28 10:09:46 UTC 2014 - vmoravec@suse.com + +- Fix failing testsuite +- 3.1.3 + +------------------------------------------------------------------- +Thu Jan 30 16:04:59 UTC 2014 - jreidinger@suse.com + +- Remove writting to dropped /etc/sysconfig/suseconfig + (FATE#100011) +- 3.1.2 + +------------------------------------------------------------------- +Wed Nov 13 15:56:18 UTC 2013 - jreidinger@suse.com + +- Add explicit COPYING file + +------------------------------------------------------------------- +Thu Sep 19 16:04:32 UTC 2013 - lslezak@suse.cz + +- do not use *.spec.in template, use *.spec file with RPM macros + instead +- 3.1.0 + +------------------------------------------------------------------- +Wed Jul 31 08:39:17 UTC 2013 - yast-devel@opensuse.org + +- converted from YCP to Ruby by YCP Killer + (https://github.com/yast/ycp-killer) +- version 3.0.0 + +------------------------------------------------------------------- +Thu Apr 25 14:15:59 CEST 2013 - jsuchome@suse.cz + +- ignore case for encryption method names (bnc#810600) +- 2.23.6 + +------------------------------------------------------------------- +Fri Mar 8 14:04:48 CET 2013 - jsuchome@suse.cz + +- remove broken LASTLOG_ENAB entry from /etc/login.defs (bnc#807099) +- 2.23.5 + +------------------------------------------------------------------- +Thu Mar 7 07:37:49 CET 2013 - jsuchome@suse.cz + +- drop unused LASTLOG_ENAB support (bnc#807099) +- drop obsoleted GROUP_ENCRYPTION (bnc#802006) +- if key is not present in config file, do not write new value + (bnc#807099) +- 2.23.4 + +------------------------------------------------------------------- +Wed Mar 6 16:19:20 CET 2013 - jsuchome@suse.cz + +- added missing etc_polkit-default-privs_local.scr +- 2.23.3 + +------------------------------------------------------------------- +Wed Feb 6 15:46:02 CET 2013 - jsuchome@suse.cz + +- /etc/default/useradd is dropped (bnc#802006) +- adapted to changes of /etc/login.defs (bnc#802006) +- 2.23.2 + +------------------------------------------------------------------- +Mon Feb 4 14:53:25 CET 2013 - jsuchome@suse.cz + +- testsuite adapted to last changes (SuSEconfig removal) +- 2.23.1 + +------------------------------------------------------------------- +Wed Oct 24 11:08:58 CEST 2012 - jsuchome@suse.cz + +- remove SuSEconfig calls (fate#100011) +- 2.23.0 + +------------------------------------------------------------------- +Mon Apr 2 10:27:53 CEST 2012 - jsuchome@suse.cz + +- testsuite: explicitely set the output of target.stat +- 2.22.5 + +------------------------------------------------------------------- +Thu Mar 29 15:59:20 CEST 2012 - jsuchome@suse.cz + +- merge proofread texts +- 2.22.4 + +------------------------------------------------------------------- +Mon Mar 26 10:26:38 CEST 2012 - jsuchome@suse.cz + +- testsuite adapted to changes in FileUtils.ycp +- 2.22.3 + +------------------------------------------------------------------- +Mon Feb 20 08:39:15 CET 2012 - jsuchome@suse.cz + +- corectly read/write ctrl-alt-delete behavior when systemd is used + (bnc#742783) +- 2.22.2 + +------------------------------------------------------------------- +Tue Jan 31 15:48:21 CET 2012 - jsuchome@suse.cz + +- use sha512 as default encryption value, not 'des' (bnc#743715) +- 2.22.1 + +------------------------------------------------------------------- +Wed Jan 25 13:45:22 CET 2012 - jsuchome@suse.cz + +- confirmed license +- 2.22.0 + +------------------------------------------------------------------- +Mon Oct 10 09:40:21 CEST 2011 - jsuchome@suse.cz + +- include etc_polkit-default-privs_local.scr in rpm +- 2.21.6 + +------------------------------------------------------------------- +Mon Sep 26 14:58:39 CEST 2011 - visnov@suse.cz + +- set dialog title +- 2.21.5 + +------------------------------------------------------------------- +Mon Sep 19 14:55:57 CEST 2011 - jsuchome@suse.cz + +- fixed testsuite +- 2.21.4 + +------------------------------------------------------------------- +Fri Sep 16 10:38:59 CEST 2011 - jsuchome@suse.cz + +- added option to tune system hibernation rights (bnc#704997) +- 2.21.3 + +------------------------------------------------------------------- +Thu Sep 8 15:43:35 CEST 2011 - jsuchome@suse.cz + +- sysctl settings now in /etc/sysctl.conf (bnc#714405) +- 2.21.2 + +------------------------------------------------------------------- +Fri Aug 5 12:35:05 CEST 2011 - tgoettlicher@suse.de + +- fixed .desktop file (bnc #681249) + +------------------------------------------------------------------- +Wed Jul 20 11:04:03 CEST 2011 - jsuchome@suse.cz + +- remove blowfish hash from selections (fate#312321) +- 2.21.1 + +------------------------------------------------------------------- +Tue Apr 5 11:03:35 CEST 2011 - jsuchome@suse.cz + +- added support for SHA-2 based crypto methods (fate309705) +- 2.21.0 + +------------------------------------------------------------------- +Wed Nov 10 14:19:15 CET 2010 - jsuchome@suse.cz + +- remember the default value of CRACKLIB_DICT_PATH (bnc#650425) +- 2.20.2 + +------------------------------------------------------------------- +Mon Aug 16 13:30:29 CEST 2010 - jsuchome@suse.cz + +- removed 'disable' from descriptions of settings (bnc#610944) +- 2.20.1 + +------------------------------------------------------------------- +Fri Aug 6 11:07:49 CEST 2010 - jsuchome@suse.cz + +- testsuite adapted to changes in yast2-pam +- 2.20.0 + +------------------------------------------------------------------- +Fri Mar 12 08:05:50 CET 2010 - jsrain@suse.cz + +- renamed the to Security Center and Hardening (fate#309121) + +------------------------------------------------------------------- +Fri Feb 5 11:45:27 CET 2010 - jsuchome@suse.cz + +- DISPLAYMANAGER_SHUTDOWN is not for GDM (bnc#570656) +- 2.19.1 + +------------------------------------------------------------------ +Wed Jan 13 18:56:03 CET 2010 - kmachalkova@suse.cz + +- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su + where root privileges are needed, removed X-KDE-SubstituteUID key + (bnc#540627) + +------------------------------------------------------------------- +Mon Dec 21 15:10:36 CET 2009 - jsuchome@suse.cz + +- new help text for PASS_MIN_LEN (bnc#535617) +- 2.19.0 + +------------------------------------------------------------------- +Thu Oct 1 13:40:49 CEST 2009 - jsuchome@suse.cz + +- do not save PASS_MIN_LEN if cracklib is disabled +- ensure polkit privileges are applied (bnc#541393) +- 2.18.3 + +------------------------------------------------------------------- +Thu Sep 3 14:41:44 CEST 2009 - jsuchome@suse.cz + +- added keywords to desktop file +- 2.18.2 + +------------------------------------------------------------------- +Mon Jun 22 07:55:26 CEST 2009 - coolo@novell.com + +- fix uild with automake 1.11 +- 2.18.1 + +------------------------------------------------------------------- +Tue Jun 2 22:26:15 CEST 2009 - jsuchome@suse.cz + +- pam_pwcheck calls replaced with pam_cracklib/pam_pwhistory, + removed obsolete "obscure checks" settings (fate#305468) +- 2.18.0 + +------------------------------------------------------------------- +Mon Feb 9 11:58:17 CET 2009 - lslezak@suse.cz + +- added "SuSEfirewall" and "earlysyslog" service to ignore list + of extra services in runlevel 3 and 5 (bnc#473345) + +------------------------------------------------------------------- +Wed Jan 21 10:09:02 CET 2009 - jsuchome@suse.cz + +- removed progress dialog during read (bnc#447584) + +------------------------------------------------------------------- +Fri Nov 28 13:29:35 CET 2008 - ug@suse.de + +- conflict in rnc file fixed +- 2.17.12 + +------------------------------------------------------------------- +Thu Nov 13 15:29:31 CET 2008 - ug@suse.de + +- rnc file fixed +- 2.17.11 + +------------------------------------------------------------------- +Mon Nov 10 07:55:54 CET 2008 - jsuchome@suse.cz + +- testsuite adapted to previous changes +- 2.17.10 + +------------------------------------------------------------------- +Fri Nov 7 15:56:03 CET 2008 - jsuchome@suse.cz + +- fixes for bnc#442552: +- missing check for `finish +- check more carefuly pam-config output, correctly remove values +- remove GROUP_ENRYPTION from levels +- do not check service values against levels +- 2.17.9 + +------------------------------------------------------------------- +Fri Nov 7 10:04:30 CET 2008 - jsuchome@suse.cz + +- fixed testsuite +- 2.17.8 + +------------------------------------------------------------------- +Thu Oct 30 15:39:10 CET 2008 - lslezak@suse.cz + +- better check enabled mail services (bnc#437363) +- do not check "consolekit" service, it's started automatically + (bnc#436797), added "boot.clock" as an optional service +- fixed location of "DISABLE_RESTART_ON_UPDATE" and + "DISABLE_STOP_ON_REMOVAL" variables - they are in + /etc/sysconfig/services now +- 2.17.7 + +------------------------------------------------------------------- +Fri Oct 24 09:45:10 CEST 2008 - lslezak@suse.cz + +- Disable "Change Status" button when the current value is + "Unknown" (bnc#436796) + +------------------------------------------------------------------- +Mon Oct 13 12:00:11 CEST 2008 - lslezak@suse.cz + +- fixed the label for option DISPLAYMANAGER_ROOT_LOGIN_REMOTE + (bnc#434273) +- 2.17.6 + +------------------------------------------------------------------- +Wed Oct 8 08:16:33 CEST 2008 - jsuchome@suse.cz + +- unified help texts for IP forwarding (bnc#432186) +- use Table instead of RichText also for GTK UI (bnc#432446) +- 2.17.5 + +------------------------------------------------------------------- +Fri Sep 26 10:02:20 CEST 2008 - lslezak@suse.cz + +- fixed the Security Overview dialog in ncurses mode (use a table + widget instead of richtext) (bnc#429965) +- 2.17.4 + +------------------------------------------------------------------- +Tue Sep 23 13:16:26 CEST 2008 - jsrain@suse.cz + +- fixed incorrect tags in helps (bnc #429063) + +------------------------------------------------------------------- +Tue Sep 16 17:33:18 CEST 2008 - lslezak@suse.cz + +- check enabled services in runlevel 3 and 5, activate changes + in Security::Write() (bnc#425864) +- testsuite update +- 2.17.3 + +------------------------------------------------------------------- +Mon Sep 15 16:13:46 CEST 2008 - lslezak@suse.cz + +- added new variables to the predefined security levels +- fixed build: updated the testsuite - added new variables +- 2.17.2 + +------------------------------------------------------------------- +Mon Sep 15 14:08:16 CEST 2008 - lslezak@suse.cz + +- overview dialog - display a warning in the help popup when the + option could not be read + +------------------------------------------------------------------- +Fri Sep 12 14:01:30 CEST 2008 - lslezak@suse.cz + +- added more options in the security overview dialog, added "Help" + links (fate#303598) +- 2.17.1 + +------------------------------------------------------------------- +Tue Aug 12 12:12:58 CEST 2008 - lslezak@suse.cz + +- added security overview dialog (part of fate#303598) +- 2.17.0 + +------------------------------------------------------------------- +Mon Aug 11 16:32:06 CEST 2008 - lslezak@suse.cz + +- display tree navigationon on the left side, display only one + dialog instead of the long workflow (part of fate#303598) + +------------------------------------------------------------------- +Fri May 16 16:40:22 CEST 2008 - jsrain@suse.cz + +- added categories Settings and System into desktop file + (bnc #382778) + +------------------------------------------------------------------- +Wed Apr 30 13:07:33 CEST 2008 - jsuchome@suse.cz + +- new defaults in security levels (bnc#385159): + CWD_IN_ROOT_PATH, CWD_IN_USER_PATH always "no", + ENABLE_SYSRQ "yes" for Home Workstation + RUN_UPDATEDB_AS always "nobody" + OBSCURE_CHECKS_ENAB, PASSWD_USE_CRACKLIB always "yes" +- 2.16.1 + +------------------------------------------------------------------- +Mon Apr 14 10:18:13 CEST 2008 - jsuchome@suse.cz + +- 2.16.0 + +------------------------------------------------------------------- +Mon Mar 17 12:43:32 CET 2008 - jsrain@suse.cz + +- added 'StartupNotify=true' to the desktop file (bnc #304964) + +------------------------------------------------------------------- +Mon Dec 3 15:29:53 CET 2007 - jsuchome@suse.cz + +- merged texts from proofread + +------------------------------------------------------------------- +Thu Aug 23 15:16:42 CEST 2007 - jsuchome@suse.cz + +- check the output of tointeger before using it as integer (#295494) +- 2.15.1 + +------------------------------------------------------------------- +Thu Jun 21 17:41:03 CEST 2007 - adrian@suse.de + +- fix changelog entry order + +------------------------------------------------------------------- +Fri May 25 13:30:04 CEST 2007 - jsrain@suse.cz + +- removed outdated translations from .desktop-files (#271209) + +------------------------------------------------------------------- +Wed Jan 17 11:01:08 CET 2007 - jsuchome@suse.cz + +- fixed help text to mention GDM (#216915) +- 2.15.0 + +------------------------------------------------------------------- +Thu Oct 26 16:00:43 CEST 2006 - jsuchome@suse.cz + +- schema file moved from autoyast package (#215249) +- 2.14.2 + +------------------------------------------------------------------- +Thu Sep 21 12:58:04 CEST 2006 - jsuchome@suse.cz + +- write correct SuSEconfig module for display manager (#205979) +- 2.14.1 + +------------------------------------------------------------------- +Fri Aug 25 13:44:55 CEST 2006 - jsuchome@suse.cz + +- adapted for pam-config usage (F300956) +- API of PamSettings module is obsolete +- 2.14.0 + +------------------------------------------------------------------- +Mon Aug 21 12:45:46 CEST 2006 - jsuchome@suse.cz + +- adapted layout to fit in 80x40 xterm (#200382) +- 2.13.5 + +------------------------------------------------------------------- +Tue Jun 13 08:57:19 CEST 2006 - jsuchome@suse.cz + +- use DISPLAYMANAGER_SHUTDOWN instead of KDM_SHUTDOWN (#183844) +- 2.13.4 + +------------------------------------------------------------------- +Mon Jun 12 11:36:34 CEST 2006 - mvidner@suse.cz + +- Moved cfg_security.scr from yast2-security.rpm to yast2.rpm +- 2.13.3 + +------------------------------------------------------------------- +Mon Feb 20 09:28:33 CET 2006 - jsuchome@suse.cz + +- reduced BuildRequires +- 2.13.2 + +------------------------------------------------------------------- +Mon Dec 19 12:57:52 CET 2005 - jsuchome@suse.cz + +- merged proofread texts +- 2.13.1 + +------------------------------------------------------------------- +Wed Nov 23 13:28:20 CET 2005 - jsuchome@suse.cz + +- added option to store user password history (F300154) +- 2.13.0 + +------------------------------------------------------------------- +Thu Jun 9 10:28:34 CEST 2005 - jsuchome@suse.cz + +- text fixes from proofreader +- fixed wrong description of PASS_MAX_DAYS, PASS_MIN_DAYS +- 2.12.2 + +------------------------------------------------------------------- +Fri May 13 15:53:15 CEST 2005 - jsuchome@suse.cz + +- tell init to re-examine the /etc/inittab after modification (#83480) +- 2.12.1 + +------------------------------------------------------------------- +Mon Apr 18 15:44:26 CEST 2005 - jsuchome@suse.cz + +- removed support for FAILLOG_ENAB (feature 2669) +- 2.12.0 + +------------------------------------------------------------------- +Wed Mar 2 09:19:11 CET 2005 - jsuchome@suse.cz + +- merged texts from proofreading + +------------------------------------------------------------------- +Mon Feb 7 17:15:02 CET 2005 - jsuchome@suse.cz + +- merged texts from proofreading +- 2.11.3 + +------------------------------------------------------------------- +Fri Jan 21 15:27:47 CET 2005 - jsuchome@suse.cz + +- handle both "cracklib" and "use_cracklib" values in pam_pwcheck.conf + (#49621) +- 2.11.2 + +------------------------------------------------------------------- +Fri Dec 17 14:40:18 CET 2004 - jsuchome@suse.cz + +- removed select's and lookup's +- 2.11.1 + +------------------------------------------------------------------- +Tue Nov 2 09:34:50 CET 2004 - jsuchome@suse.cz + +- do not set maximum password length (#29112) +- 2.11.0 + +------------------------------------------------------------------- +Tue Aug 31 00:53:45 CEST 2004 - nashif@suse.de + +- use modified flag (#43904) in auto clients +- 2.10.5 + +------------------------------------------------------------------- +Thu Aug 19 10:47:37 CEST 2004 - jsuchome@suse.cz + +- commandline function: "set" +- 2.10.3 + +------------------------------------------------------------------- +Wed Aug 18 17:33:04 CEST 2004 - jsuchome@suse.cz + +- fix: check correctly which security level is in use +- fix: read correctly value for password encryption +- commandline functions: summary, level + +------------------------------------------------------------------- +Tue Jul 27 11:47:50 CEST 2004 - jsuchome@suse.cz + +- read also group encryption from /etc/default/passwd +- 2.10.2 + +------------------------------------------------------------------- +Mon Jun 28 15:07:42 CEST 2004 - jsuchome@suse.cz + +- updated to current yast2-pam usage + (/etc/default/passwd used for storing password encryption) +- 2.10.1 + +------------------------------------------------------------------- +Tue Jun 15 15:06:28 CEST 2004 - msvec@suse.cz + +- updated testsuite +- 2.10.0 + +------------------------------------------------------------------- +Sun Apr 4 17:22:38 CEST 2004 - msvec@suse.cz + +- changed minimum UID from 500 to 1000 (#38181) +- 2.9.14 + +------------------------------------------------------------------- +Fri Apr 2 16:17:28 CEST 2004 - msvec@suse.cz + +- changed license to GPL +- 2.9.13 + +------------------------------------------------------------------- +Wed Mar 17 16:35:19 CET 2004 - jsuchome@suse.cz + +- fixed testsuite (forced by change of PamSettings::Write) +- 2.9.12 + +------------------------------------------------------------------- +Fri Mar 12 15:11:12 CET 2004 - jsuchome@suse.cz + +- flush changes of pam configuration (#35721) +- 2.9.11 + +------------------------------------------------------------------- +Thu Mar 11 11:31:07 CET 2004 - msvec@suse.cz + +- enabled the testsuite again +- 2.9.10 + +------------------------------------------------------------------- +Wed Mar 10 10:04:29 CET 2004 - jsuchome@suse.de + +- disabled testsuite +- 2.9.9 + +------------------------------------------------------------------- +Wed Mar 10 01:57:11 CET 2004 - nashif@suse.de + +- Adapted for new wizard + +------------------------------------------------------------------- +Mon Mar 8 17:22:12 CET 2004 - msvec@suse.cz + +- set title icons +- 2.9.8 + +------------------------------------------------------------------- +Fri Mar 5 11:02:37 CET 2004 - msvec@suse.cz + +- more strict type casts +- 2.9.7 + +------------------------------------------------------------------- +Mon Mar 1 13:11:00 CET 2004 - msvec@suse.cz + +- proof-read messages +- 2.9.6 + +------------------------------------------------------------------- +Tue Feb 24 12:48:18 CET 2004 - msvec@suse.cz + +- fix enabling of the remote XDM access (#34879) +- 2.9.5 + +------------------------------------------------------------------- +Fri Feb 6 14:33:48 CET 2004 - msvec@suse.cz + +- use Sequencer module +- drop y2cc config file +- 2.9.4 + +------------------------------------------------------------------- +Mon Jan 26 15:38:33 CET 2004 - msvec@suse.cz + +- updates for the new interpreter +- 2.9.3 + +------------------------------------------------------------------- +Fri Jan 23 00:23:45 CET 2004 - msvec@suse.cz + +- NI updates +- 2.9.2 + +------------------------------------------------------------------- +Wed Oct 22 12:55:30 CEST 2003 - msvec@suse.cz + +- routines cleanup +- 2.9.1 + +------------------------------------------------------------------- +Fri Sep 26 13:04:30 CEST 2003 - jsuchome@suse.cz + +- read new settings from /etc/login.defs (SYSTEM_UID_MAX, USERADD_CMD etc.) +- 2.9.0 + +------------------------------------------------------------------- +Thu Sep 11 12:56:14 CEST 2003 - msvec@suse.cz + +- changed "UNIX system" to "UNIX like system" in helps (#30495) +- 2.8.6 + +------------------------------------------------------------------- +Thu Sep 11 06:50:45 CEST 2003 - nashif@suse.de + +- #30291: return list of required packages for autoinstallation + +------------------------------------------------------------------- +Tue Sep 9 16:57:43 CEST 2003 - msvec@suse.cz + +- show correctly the current level (#30320) +- 2.8.5 + +------------------------------------------------------------------- +Fri Sep 5 09:06:22 CEST 2003 - msvec@suse.cz + +- proof read help texts +- 2.8.4 + +------------------------------------------------------------------- +Thu Aug 21 14:20:06 CEST 2003 - msvec@suse.cz + +- don't modify files when nothing changed (#28999) +- 2.8.3 + +------------------------------------------------------------------- +Wed Aug 20 15:30:32 CEST 2003 - jsuchome@suse.de + +- removed redundant "initialization dialog" (#28779) +- 2.8.2 + +------------------------------------------------------------------- +Mon Aug 11 10:51:50 CEST 2003 - jsuchome@suse.de + +- proofread texts (1st round) + +------------------------------------------------------------------- +Tue Jul 22 14:38:30 CEST 2003 - msvec@suse.cz + +- simplify autoinstallation client +- updated testsuite +- 2.8.1 + +------------------------------------------------------------------- +Wed Jul 16 15:09:03 CEST 2003 - jsuchome@suse.de + +- updated to new Pam/PamSettings interface + +------------------------------------------------------------------- +Sun May 11 00:04:54 CEST 2003 - msvec@suse.de + +- maximum password length is related to encryption method (#13291) +- support for enabling of SysRq keys +- define password lengths (#13291) +- improved documentation +- better help texts (#26791) +- updates for the new wizard functions +- 2.8.0 + +------------------------------------------------------------------- +Mon Mar 3 11:25:24 CET 2003 - msvec@suse.de + +- autoinstallation fixes by nashif +- 2.7.8 + +------------------------------------------------------------------- +Sun Feb 16 04:08:54 CET 2003 - nashif@suse.de + +- Set modified true when importing +- 2.7.7 + +------------------------------------------------------------------- +Sat Feb 15 16:54:06 CET 2003 - nashif@suse.de + +- convert case when importing/exporting in autoinst mode +- _auto.ycp Result ->Export +- 2.7.6 + +------------------------------------------------------------------- +Mon Feb 10 13:29:14 CET 2003 - msvec@suse.de + +- proofread texts +- 2.7.5 + +------------------------------------------------------------------- +Mon Feb 3 16:42:56 CET 2003 - msvec@suse.cz + +- autoinst and texts fixes +- 2.7.4 + +------------------------------------------------------------------- +Thu Jan 30 09:57:52 CET 2003 - msvec@suse.de + +- proofread texts +- 2.7.3 + +------------------------------------------------------------------- +Wed Jan 22 15:23:23 CET 2003 - msvec@suse.cz + +- added missing module to the package +- 2.7.2 + +------------------------------------------------------------------- +Tue Jan 21 23:05:24 EST 2003 - nashif@suse.de + +- Added import function to _auto client +- switch case to lower when exporting/upper when importing + +------------------------------------------------------------------- +Tue Jan 21 11:13:46 CET 2003 - msvec@suse.de + +- fixed some error popups (and added some more) +- fixed the autoinstallation client +- 2.7.1 + +------------------------------------------------------------------- +Tue Oct 22 16:51:54 CEST 2002 - msvec@suse.cz + +- completely rewritten internals +- major cleanup, simplification and speedup +- don't ask for save if nothing was changed +- support for CWD in user's path (#18274) +- complete support for blowfish (#12758) +- 2.7.0 + +------------------------------------------------------------------- +Thu Sep 5 14:19:35 CEST 2002 - msvec@suse.cz + +- fix the Next|Finish behavior (#18937) +- provide more old translations (y2t_sec) +- 2.6.10 + +------------------------------------------------------------------- +Tue Aug 27 20:00:00 CEST 2002 - jsuchome@suse.cz + +- provide/obsolete old translation packages (bug #18691) + +------------------------------------------------------------------- +Wed Aug 14 12:42:47 CEST 2002 - mvidner@suse.cz + +- Merged proofread texts for the second translation round. +- 2.6.8 + +------------------------------------------------------------------- +Mon Jul 29 11:08:47 CEST 2002 - msvec@suse.cz + +- some general purpose agents moved to yast2 +- blowfish password encryption (#17039) +- 2.6.7 + +------------------------------------------------------------------- +Wed Jul 24 19:22:16 CEST 2002 - msvec@suse.cz + +- fixed some error messages +- 2.6.6 + +------------------------------------------------------------------- +Mon Jul 22 16:41:56 CEST 2002 - jsrain@suse.cz + +- merged proofread texts +- version 2.6.5 + +------------------------------------------------------------------- +Mon Jul 15 18:08:02 EDT 2002 - nashif@suse.de + +- adapted for use with the autoinstallation configuration system +- security_auto now exports lower case values + +------------------------------------------------------------------- +Fri Jul 12 15:03:59 CEST 2002 - arvin@suse.de + +- use proper namespace for Args and CallFunction (#16776) + +------------------------------------------------------------------- +Mon Jul 8 19:56:03 CEST 2002 - msvec@suse.cz + +- use Wizard and other predefined functions +- drastic reduction and simplification of UI code +- split adduser dialog +- 2.6.3 + +------------------------------------------------------------------- +Thu Jul 04 20:51:37 CEST 2002 - arvin@suse.de + +- moved non binary files to /usr/share/YaST2 + +------------------------------------------------------------------- +Mon Jul 1 15:20:42 CEST 2002 - msvec@suse.cz + +- package renamed to yast2-security +- preliminary autoinstallation support +- 2.6.1 + +------------------------------------------------------------------- +Mon Jun 3 10:10:07 CEST 2002 - msvec@suse.cz + +- testsuite update +- shortened label (#15089) +- removed outdated docs #15875 +- implement CONSOLE SHUTDOWN fully in yast2 +- don't run full SuSEconfig +- use y2autoconf, create-spe +- 2.6.0 + +------------------------------------------------------------------- +Wed Feb 27 10:51:05 CET 2002 - msvec@suse.cz + +- use buildroot (via y2spec) +- include the locate agent in the package +- 2.5.11 + +------------------------------------------------------------------- +Mon Feb 25 15:03:33 CET 2002 - msvec@suse.cz + +- use proper sysconfig files (#13619) +- minor fix of permissions writing +- added agent for sysconfig/locate +- updated testsuite +- 2.5.10 + +------------------------------------------------------------------- +Mon Feb 18 19:28:01 CET 2002 - msvec@suse.cz + +- fixed shortcuts +- fixed permissions reading and writing (#13106) +- updated testsuite +- 2.5.9 + +------------------------------------------------------------------- +Mon Feb 11 16:58:42 CET 2002 - mvidner@suse.cz + +- Fixed login.defs agent to handle quoted values. +- Fixed test suite. +- 2.5.8 + +------------------------------------------------------------------- +Tue Feb 5 18:14:17 CET 2002 - kukuk@suse.de + +- Add support for global pam_unix2 and pam_pwcheck config files +- Version 2.5.7 + +------------------------------------------------------------------- +Sat Jan 26 19:49:14 CET 2002 - nashif@suse.de + +- Added agents to file list +- 2.5.6 + +------------------------------------------------------------------- +Wed Jan 16 20:24:11 CET 2002 - msvec@suse.cz + +- added pam_unix2 and rlogin|gdm to MD5 settings (md5 is #9543) +- use_cracklib is now via pam (PASSWD_USE_CRACKLIB) +- drop telnet for root checkbox (ROOT_LOGIN_REMOTE) +- added /etc/login.defs agent (using ini agent right now) +- added /etc/sysconfig/security agent +- updated testsuite +- 2.5.5 + +------------------------------------------------------------------- +Thu Dec 20 11:16:04 CET 2001 - msvec@suse.cz + +- new menuentry file format +- 2.5.3 + +------------------------------------------------------------------- +Tue Dec 4 14:40:26 CET 2001 - msvec@suse.cz + +- 3rd params to select +- 2.5.2 + +------------------------------------------------------------------- +Wed Nov 21 17:40:17 CET 2001 - msvec@suse.cz + +- added DISPLAYMANAGER_REMOTE_ACCESS setting (#10824) +- updated testsuite +- 2.5.1 + +------------------------------------------------------------------- +Mon Nov 19 14:18:52 CET 2001 - msvec@suse.cz + +- fixed lookup 3rd parameters +- migration to yast2-devtools +- minor makefiles fixes +- 2.5.0 + +------------------------------------------------------------------- +Tue Aug 28 16:55:36 CEST 2001 - msvec@suse.cz + +- enlarge max uid to 32 bit (#9871) +- parseycp during check +- version 2.4.5 + +------------------------------------------------------------------- +Wed Aug 22 17:54:00 CEST 2001 - msvec@suse.cz + +- added requires (rcconfig and pam agents, wizard library) +- version 2.4.4 + +------------------------------------------------------------------- +Wed Aug 15 17:10:55 CEST 2001 - msvec@suse.cz + +- added MD5 password encryption suuport +- testsuite for the above +- removed Finish function +- removed UI(_(...)) +- use of UI:: and SCR:: +- version 2.4.3 + +------------------------------------------------------------------- +Thu Aug 9 16:44:14 CEST 2001 - msvec@suse.cz + +- use common_messages for button labels +- version 2.4.2 + +------------------------------------------------------------------- +Mon Jul 30 11:34:24 CEST 2001 - msvec@suse.cz + +- new libycp fixes +- minor variable fixes +- updated testsuite +- adapt to the new translator (locale useless) +- version 2.4.1 + +------------------------------------------------------------------- +Tue Jul 10 01:35:53 CEST 2001 - ro@suse.de + +- removed yast2-core-translator from neededforbuild + +------------------------------------------------------------------- +Tue Jul 3 13:08:02 CEST 2001 - msvec@suse.cz + +- adapted to the system agent split +- added missing shortcuts (#9017) +- version 2.4.0 + +------------------------------------------------------------------- +Wed May 2 10:32:28 CEST 2001 - msvec@suse.cz + +- fix menuentry file +- version 2.3.5 + +------------------------------------------------------------------- +Mon Apr 23 12:39:43 CEST 2001 - msvec@suse.cz + +- removed isnils +- no more quick SuSEconfig +- help fix (#6912) +- version 2.3.4 + +------------------------------------------------------------------- +Fri Apr 13 09:52:36 CEST 2001 - msvec@suse.cz + +- enabled abuild checking +- fixed help text (#6190) +- version 2.3.3 + +------------------------------------------------------------------- +Wed Apr 4 10:32:29 CEST 2001 - msvec@suse.cz + +- updated comments and docs +- version 2.3.2 + +------------------------------------------------------------------- +Fri Mar 30 13:49:41 CEST 2001 - msvec@suse.cz + +- support for "auto" KDM setting +- new libycp adaptation +- autobuild checking +- removed 7.1 hacks +- source cleanup +- version 2.3.1 + +------------------------------------------------------------------- +Wed Mar 7 10:50:57 CET 2001 - msvec@suse.cz + +- package rename +- version 2.3.0 + +------------------------------------------------------------------- +Mon Jan 15 10:47:44 CET 2001 - msvec@suse.cz + +- minimal UID should be 500 (#5643) +- updated comments for translators +- Next button translatable and shortcut + +------------------------------------------------------------------- +Fri Jan 12 04:48:40 CET 2001 - msvec@suse.de + +- root telnet enabled means disabled and vice versa +- minor gui update +- saving fixed + +------------------------------------------------------------------- +Wed Jan 10 23:47:20 CET 2001 - msvec@suse.de + +- Translatable strings bugfix + +------------------------------------------------------------------- +Fri Jan 5 11:16:49 CET 2001 - kkaempf@suse.de + +- provide keyboard shortcuts for buttons + +------------------------------------------------------------------- +Fri Jan 5 11:13:55 CET 2001 - kkaempf@suse.de + +- mark strings as translatable + +------------------------------------------------------------------- +Fri Dec 15 13:26:24 CET 2000 - msvec@suse.cz + +- help text for the main screen added (#4619) +- check the minimum <= maximum (#4682) + +------------------------------------------------------------------- +Wed Dec 13 19:12:30 CET 2000 - mike@suse.de + +- new menuentry file + +------------------------------------------------------------------- +Wed Dec 13 08:45:08 CET 2000 - msvec@suse.cz + +- menuentry updated + +------------------------------------------------------------------- +Tue Dec 12 15:28:32 CET 2000 - msvec@suse.cz + +- helps +- GUI update +- version 1.1.3 + +------------------------------------------------------------------- +Mon Dec 11 10:34:20 CET 2000 - msvec@suse.cz + +- minor GUI update +- fix the Custom writing +- ``Something() -> ``(Something()) +- version 1.1.2 + +------------------------------------------------------------------- +Sat Dec 9 20:04:03 CET 2000 - kukuk@suse.de + +- Add group tag + +------------------------------------------------------------------- +Fri Dec 8 17:45:22 CET 2000 - msvec@suse.cz + +- also update the source + +------------------------------------------------------------------- +Fri Dec 8 17:26:54 CET 2000 - msvec@suse.cz + +- minor layout and functional updates +- version 1.1.1 + +------------------------------------------------------------------- +Wed Nov 29 13:59:15 CET 2000 - msvec@suse.cz + +- new layout +- version 1.1.0 + +------------------------------------------------------------------- +Wed Oct 25 13:37:10 CEST 2000 - msvec@suse.cz + +- initial version +------------------------------------------------------------------- +Thu Jan 2 05:31:21 CET 1997 - msvec@suse.de + +- bugfixes + diff --git a/yast2-security.spec b/yast2-security.spec new file mode 100644 index 0000000..eba9ef7 --- /dev/null +++ b/yast2-security.spec @@ -0,0 +1,120 @@ +# +# spec file for package yast2-security +# +# Copyright (c) 2024 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +Name: yast2-security +Version: 5.0.2 +Release: 0 +Group: System/YaST +License: GPL-2.0-only +Summary: YaST2 - Security Configuration +URL: https://github.com/yast/yast-security + +Source0: %{name}-%{version}.tar.bz2 + +BuildRequires: doxygen +BuildRequires: perl-XML-Writer +BuildRequires: pkg-config +BuildRequires: update-desktop-files +# Pam.List +BuildRequires: yast2-pam >= 4.3.1 +BuildRequires: yast2-devtools >= 4.2.2 +# Y2Security::Selinux requires Yast::Bootloader +BuildRequires: yast2-bootloader +BuildRequires: rubygem(%{rb_default_ruby_abi}:rspec) +BuildRequires: rubygem(%{rb_default_ruby_abi}:yast-rake) >= 0.2.5 +# :target option in Package.Installed +BuildRequires: yast2 >= 4.4.47 +# CFA::Selinux +BuildRequires: augeas-lenses +# Y2Storage::StorageManager +BuildRequires: yast2-storage-ng +# Yast::Lan and Y2Network +BuildRequires: yast2-network +# Unfortunately we cannot move this to macros.yast, +# bcond within macros are ignored by osc/OBS. +%bcond_with yast_run_ci_tests +%if %{with yast_run_ci_tests} +BuildRequires: rubygem(%{rb_default_ruby_abi}:yast-rake-ci) +%endif + +# new Pam.ycp API +Requires: yast2-pam >= 2.14.0 +# :target option in Package.Installed +Requires: yast2 >= 4.4.47 +Requires: yast2-ruby-bindings >= 1.0.0 +# Pam.List +Requires: yast2-pam >= 4.3.1 +# Y2Security::Selinux requires Yast::Bootloader +Requires: yast2-bootloader +# CFA::Selinux +Requires: augeas-lenses +# Y2Storage::StorageManager +Requires: yast2-storage-ng +# Yast::Lan and Y2Network +Requires: yast2-network + +Provides: y2c_sec +Provides: y2t_sec +Provides: yast2-config-security +Provides: yast2-trans-security + +Obsoletes: y2c_sec +Obsoletes: y2t_sec +Obsoletes: yast2-config-security +Obsoletes: yast2-trans-security + +Supplements: autoyast(security) + +BuildArch: noarch + +%description +The YaST2 component for security settings configuration. + +%prep +%setup -q + +%build + +%check +%yast_check + +%install +%yast_install +%yast_metainfo + +%post +# remove broken entry in /etc/login.defs, introduced during installation (bnc#807099) +if [ -f /etc/login.defs ] ; then + sed -e '/^[ \t]*LASTLOG_ENAB[ \t]*\"\"/d' -i /etc/login.defs +fi + +%files +%{yast_yncludedir} +%{yast_desktopdir} +%{yast_metainfodir} +%{yast_clientdir} +%{yast_moduledir} +%{yast_scrconfdir} +%{yast_schemadir} +%{yast_ydatadir} +%{yast_libdir} +%{yast_icondir} +%doc %{yast_docdir} +%license COPYING + +%changelog