| Age | Commit message (Collapse) | Author |
|---|
|
Bug 8279
Put prefix table in /opt/vyatta/etc/netdevice
|
|
The previous implementation of log rotation used an hourly cron job to
check log file size and possibly perform a rotation. If the logging
rate is high, this interval may allow for root file system space
exhustion.
Utilizing rsyslog's outchannel mechanism enables log rotation to be
initiated as soon as the log file becomes larger than its configured
size.
Fixes Bug 7807.
|
|
Bug 6526
Disable ctrl-alt-del where all the other system changes happen
on installation.
|
|
|
|
|
|
Bug 7720
If post config script does not exist, then silently
ignore it.
The user may have accidentally deleted the post config script.
|
|
vyatta-cfg-system package installation caused warning:
update-rc.d: using dependency based boot sequencing
update-rc.d: warning: vyatta-config-reboot-params start runlevel arguments (2 3 4 5) do not match LSB Default-Start values (S)
update-rc.d: warning: vyatta-config-reboot-params stop runlevel arguments (0 1 6) do not match LSB Default-Stop values (none)
|
|
Don't start RAID (md) unless root device is configured for RAID.
|
|
Needs to be read only
|
|
Bug 6916
Rather than editing /etc/sudoers which can lead to package conflicts,
put Vyatta specific changes into a separate file.
|
|
Fix build warning on debian testing (more restrictive)
W: vyatta-cfg-system: deprecated-chown-usage postinst:176 'chown -R root.vyattacfg'
|
|
operator.
|
|
(cherry picked from commit 9b0151b1d51617e969807d75b00eed998bf8f294)
|
|
(cherry picked from commit 697affbbcbfaf8b8b253b3ce1a5f312db8069238)
|
|
Don't call 'update-rc.d vyatta-keepalived remove' since we still need to stop
the daemon on shutdown/reboot.
|
|
|
|
The PC speaker driver has changed name, and the sound blacklist
file does not exist in Debian Squeeze. Just remove the steps
from the package install.
|
|
* added /config/scripts/vyatta-postconfig-bootup.script that gets called from
/etc/rc.local. Users/Support can put in any workarounds in the script for
unfixed bugs and enhancements that are not in Vyatta yet. Placing the
script under /config makes sure that changes to the script will be
preserved for the new image
|
|
This script executes scripts lying in the following directory:
/opt/vyatta/bin/sudo-users/check-params-on-reboot.d
Scripts in check-params-on-reboot.d are intended for parameters
that require a reboot to take effect after they are set/changed.
Because of the reboot requirement, underlying value and related
config paramter value can become out-of-sync in couple of cases:
1. change parameter value, don't save config, reboot. Underlying
value is different than the value in config file.
2. install new image; when new image boots, underlying value is
the default Vyatta shipped value not the value in config file.
More info: http://bugzilla.vyatta.com/show_bug.cgi?id=6915#c1
This check-in also adds ipv6_disable_blacklist script in
check-params-on-reboot.d to fix the above mentioned problem
for 'system ipv6 disable' and 'system ipv6 blacklist'
|
|
to push users towards putting scripts in /config/scripts
|
|
Bug 6715
Vyatta configures syslog, and does not use the same files as
Debian (typically). The logrotate file in the distribution assumes there
are files like auth.log etc which Vyatta doesn't have.
|
|
Bug 6705
(cherry picked from commit 00466b9a779647047ce432b971bf8329b2255126)
|
|
(cherry picked from commit d09218920b376f65c69bda2b8b571a7611731463)
|
|
SSH config file is based off of Debian distributed version
which does not have SSH protocol version 1 key path.
|
|
If cpufrequtils is installed, then want the default to be full performance.
|
|
Bug 4970
New CLI control of UseDNS option to sshd_config
set service ssh disable-host-validation
|
|
In Debian Squeeze ethtool is in /sbin
|
|
By default, turn console screenblanking off.
If user wants to enable it, they can use:
set system console powersave
|
|
Configuration file is /etc/rsyslog.conf and it is supports
directory of include parameters so do not need to edit
rsyslog.conf directly
|
|
Udev rules have moved from /etc/udev to /lib/udev on Debian Squeeze
|
|
|
|
|
|
The sound blacklist should be in a seprate file, and check for
entry before creating
|
|
In squeeze, modprobe wants config files named .conf or it will
generate warning.
|
|
For upgrade, don't touch root password.
For new installation, root password is reset during build-iso
Bug 6066
|
|
For serviceablity put core files in /var/core.
But core file will still not be created unless process is running
with permission to write there, and has ulimit permission.
|
|
Unionfs should copyup the xattr automatically, but it doesn't
so use touch to force a copyup before setting attributes.
|
|
|
|
This sets file capability attributes during package
installation (and build) to allow better security models.
|
|
The pam-config mechanism will insert Radius pam module if it is
in /usr/share/pam-configs. Therefore hold off installing file until
Radius really needed.
|
|
|
|
This reverts commit 59cae244d055a7b5ba9de460d3ebbb5700d6ab17.
Don't want to do this this way.
|
|
This sets extended capablities on some common utilities
|
|
* move fix to vyatta-ravpn to make sure init script stays
modified even if xl2tpd gets installed after vyatta-cfg-sytem
during full-upgrade
(cherry picked from commit bdc317666828bad9dac2edef20d3919d943a5e9e)
|
|
Bug 5386
Since vyatta-cfg-system is the place where Vyatta does lots
of busted package fixups; fix xl2tpd init script there.
|
|
The upgrade process doesn't always remove old vyatta-ofr init script
|
|
Bug 5301
Need to setup sshd_config during install to allow configure later
|
|
Instead of white-listing special system users, just go with the
Debian policy that all users with uid < 1000 are system accounts
|
|
|
|
|
