Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-10-13 | remove unused files | An-Cheng Huang | |
2008-10-13 | add ssh key blacklists | An-Cheng Huang | |
2008-08-06 | Merge from islavista | Rick Balocca | |
2008-07-07 | purge any old entries from sudoers | Stephen Hemminger | |
Make sure to cleanup any leftover vyatta entries | |||
2008-07-04 | Modify upgrade procedure for /etc/sudoers | Stephen Hemminger | |
0) make backup of file 1) remove old glendale entries 2) put all vyatta entries in one block 3) remove vyatta entries on package removal | |||
2008-07-01 | Missing -e causes sudoers problem | Stephen Hemminger | |
Missing -e on echo causes unparsable sudoers | |||
2008-07-01 | get rid of extra fi from last commit | Stephen Hemminger | |
mismatch | |||
2008-06-30 | Change syslogging of authorization related commands | Stephen Hemminger | |
For sucessful sudo, just log it at info level. Capture any security failures/changes into /var/log/auth.log but skip normal CLI commands Turn off the builtin sync after each write to /var/log/messages by putting - before file name; the sync causes a disk write each time and therefore can be a performance hit during boot. | |||
2008-06-09 | Allow operator to run wanpipemon | Stephen Hemminger | |
Add entry to sudoers to allow wanpipemon command | |||
2008-05-14 | Change dependancy from keepalived to vyatta-keepalived. | Stig Thormodsrud | |
2008-05-07 | Merge branch 'glendale' into hollywood | rbalocca | |
Conflicts: debian/vyatta-cfg-system.postinst.in | |||
2008-05-05 | fix for bug 3225: only insert sudoers if not present. | An-Cheng Huang | |
2008-04-03 | Fix Bug 1059 Feature Request: integrate 'tcpdump' and 'tethereal' into ↵ | Mohit Mehta | |
Vyatta CLI - added tshark to sudoers list | |||
2008-03-25 | Bugfix: 3021 | Bob Gilligan | |
Allow operators to bring pppoe connections up and down. | |||
2008-03-21 | Allow operator to run ntpdate | Stephen Hemminger | |
Fix for Bug 3018, allow operator to run ntpdate. | |||
2008-03-18 | Allow operator to set date. | Stephen Hemminger | |
Bugfix: 3018 Put proper path in for date command. | |||
2008-03-10 | fix for bug 2083: add radius authentication support. | An-Cheng Huang | |
2008-03-07 | allow non-root to clear nat counters | Stephen Hemminger | |
Part of bugfix 2698 | |||
2008-03-01 | Fix parse error in /etc/sudoers | Stig Thormodsrud | |
2008-02-29 | add explicit list of commands in sudoers | Stephen Hemminger | |
Rather than open access to commands in sudo-users, restrict commands to a more limited set explicitly listed in /etc/sudoers. This allows administrator to change security policy by just examining/changing the file. This addresses infrastructure needed for fixing bugs where operator mode needs to be secure and not ask for password. | |||
2008-02-25 | vyatta-cfg-system postinst was clobbering version file | rbalocca | |
2008-02-21 | debian's latest update to "bash" (3.1dfsg-9) broke the completion mechanism. | An-Cheng Huang | |
workaround is to source in our completion scripts directly. | |||
2008-01-23 | fix /etc/crontab: logrotatedebian/0.1 | Tom Grennan | |
2008-01-04 | move quagga.deb config file munging to vyatta-cfg-quagga | Tom Grennan | |
2008-01-03 | Merge branch 'glendale' of http://suva.vyatta.com/vyatta-cfg-system into ↵ | Tom Grennan | |
glendale | |||
2008-01-03 | work w/ either quagga (debian) or vyatta-quagga packages | Tom Grennan | |
2007-12-19 | Merge branch 'master' into glendale | rbalocca | |
2007-12-19 | Revert "add init script to force udev settle before itf configured" | Tom Grennan | |
This is unnecessary if the config.boot file is available before udevd starts. This reverts commit a9cd192305b779cb62aecd858ad9a4e5a1fbcad4. | |||
2007-12-19 | Change temporary version string to glendale instead of eureka. | Stig Thormodsrud | |
2007-12-17 | add init script to force udev settle before itf configured | Tom Grennan | |
2007-12-13 | process device persistence through udev rules rather than init script | Tom Grennan | |
2007-12-04 | Merge branch 'master' of phuket.vyatta.com:/usr/local/git/vyatta-cfg-system | An-Cheng Huang | |
2007-12-04 | add sudo entry for "users" level | An-Cheng Huang | |
2007-12-04 | - Only start supported daemons (zebra, ripd, ospfd, bgpd) | Stig Thormodsrud | |
- Add temporary version file | |||
2007-12-04 | fix for bug 2511: create empty resolv.conf in postinst. | An-Cheng Huang | |
2007-12-04 | * change "user group" to "user level". | An-Cheng Huang | |
* "admin" => "users", "quaggavty", "vyattacfg", "sudo". * "users" => "users", "quaggavty" * use "sudo" group for sudo permissions. * don't add "root" to /etc/group. | |||
2007-11-29 | Set syslog logging for all daemons to warning level | Justin Fletcher | |
2007-11-06 | don't need to change /etc/hosts in postinst | An-Cheng Huang | |
2007-11-06 | Add quagga messages to syslog. | Stig Thormodsrud | |
2007-11-05 | remove saved logrotate.d files (to avoid duplicate). | An-Cheng Huang | |
2007-11-04 | Add vrrp to eureka. | Stig Thormodsrud | |
2007-11-01 | touch /etc/environment | An-Cheng Huang | |
2007-10-31 | Fix snmp such that it can be configured by non-root user. | Stig Thormodsrud | |
2007-10-24 | start quagga daemons by default with empty config files | An-Cheng Huang | |
(if vyatta-cfg-system package is installed). | |||
2007-10-23 | * add non-root users to 'quaggavty' group. | An-Cheng Huang | |
* set up sudo for 'quaggavty' group. | |||
2007-10-22 | add service/ssh configuration. | An-Cheng Huang | |
2007-10-18 | * import system config files from fairfield/xorp/sysconf. | An-Cheng Huang | |
* add dependencies and postinst actions. | |||
2007-10-18 | add dependency and postinst | An-Cheng Huang | |