summaryrefslogtreecommitdiff
path: root/debian/vyatta-cfg-system.postinst.in
AgeCommit message (Collapse)Author
2008-11-14Fix 3918: Operator level users require sudo permission for ipv6 clearStig Thormodsrud
commands
2008-11-10make 'show interfaces wirelessmodem <wlm(num)> stats' work from operator modeMohit Mehta
2008-11-06rmeove ddclient script from ppp ip-up directory as we configureMohit Mehta
DDNS for an interface using the CLI
2008-10-27Allow more ethtool commandsStephen Hemminger
Bugfix 3832 Need to allow ethtool statistics for operator
2008-10-22Fix Bug 3567 Debug messages are not logged by default on upgraded systemMohit Mehta
- copy over default islavista syslog.conf during upgrade from hollywood
2008-10-15Revert "Block remote access to rpc-bind port"Stephen Hemminger
This change isn't needed. This reverts commit 25438666015dc5ea9695f5172b0f4925c3ae2d9a.
2008-10-15Block remote access to rpc-bind portStephen Hemminger
Use hosts.deny to block access to portmapper Bugfix 3767
2008-10-14Bugfix: 3744Bob Gilligan
When a new member is added to a RAID group that holds the root filesystem, we need to re-install grub so that the new disk will be bootable. But this can only be done after the RAID set has completed rebuilding. Added mechanism that uses the event notification infrastructure of "mdadm" to trigger the re-installation of grub after the rebuild completes.
2008-10-13remove unused filesAn-Cheng Huang
2008-10-13add ssh key blacklistsAn-Cheng Huang
2008-10-10Don't allow operator to reboot systemStephen Hemminger
Remove privledge to reboot system via sudo for operator
2008-10-03Merge branch 'islavista' of git:/git/vyatta-cfg-system into islavistarbalocca
2008-10-03Fix for bug http://bugzilla.vyatta.com/show_bug.cgi?id=3735rbalocca
2008-10-02Fix Bug 3609 - "show tech-support" does not display open file information ↵Mohit Mehta
for operator level user - add lsof to sudoers file for use by an operator level user
2008-10-01Bugfix: 3572Bob Gilligan
In the postinstall step, change the PAM configuration for login so that the user is prompted for password even if the username entered is invalid. This prevents people from easily determining whether a username exists or not.
2008-08-30- get ddclient package for Dynamic DNSMohit Mehta
- get libio-socket-ssl-perl package for Dynamic DNS ssl updates - disable init for ddclient
2008-07-25Merge branch 'islavista' of mohit@git.vyatta.com:/git/vyatta-cfg-system into ↵Mohit Mehta
islavista
2008-07-30Fix for http://bugzilla.vyatta.com/show_bug.cgi?id=3225Rick Balocca
2008-07-30Partial fix for http://bugzilla.vyatta.com/show_bug.cgi?id=3225Rick Balocca
2008-07-28Since this packages changes the bash-completion conf file, it must be ↵rbalocca
installed after bash-completion
2008-07-25add dnsmasq package to be included in the buildMohit Mehta
2008-07-22The postinst was printing a '?'rbalocca
2008-07-12fix for bug 3459: make bash-completion use "builtin set".An-Cheng Huang
2008-07-07purge any old entries from sudoersStephen Hemminger
Make sure to cleanup any leftover vyatta entries
2008-07-04Modify upgrade procedure for /etc/sudoersStephen Hemminger
0) make backup of file 1) remove old glendale entries 2) put all vyatta entries in one block 3) remove vyatta entries on package removal
2008-07-01Missing -e causes sudoers problemStephen Hemminger
Missing -e on echo causes unparsable sudoers
2008-07-01get rid of extra fi from last commitStephen Hemminger
mismatch
2008-06-30Change syslogging of authorization related commandsStephen Hemminger
For sucessful sudo, just log it at info level. Capture any security failures/changes into /var/log/auth.log but skip normal CLI commands Turn off the builtin sync after each write to /var/log/messages by putting - before file name; the sync causes a disk write each time and therefore can be a performance hit during boot.
2008-06-09Allow operator to run wanpipemonStephen Hemminger
Add entry to sudoers to allow wanpipemon command
2008-05-14Change dependancy from keepalived to vyatta-keepalived.Stig Thormodsrud
2008-05-07Merge branch 'glendale' into hollywoodrbalocca
Conflicts: debian/vyatta-cfg-system.postinst.in
2008-05-05fix for bug 3225: only insert sudoers if not present.An-Cheng Huang
2008-04-03Fix Bug 1059 Feature Request: integrate 'tcpdump' and 'tethereal' into ↵Mohit Mehta
Vyatta CLI - added tshark to sudoers list
2008-03-25Bugfix: 3021Bob Gilligan
Allow operators to bring pppoe connections up and down.
2008-03-21Allow operator to run ntpdateStephen Hemminger
Fix for Bug 3018, allow operator to run ntpdate.
2008-03-18Allow operator to set date.Stephen Hemminger
Bugfix: 3018 Put proper path in for date command.
2008-03-10fix for bug 2083: add radius authentication support.An-Cheng Huang
2008-03-07allow non-root to clear nat countersStephen Hemminger
Part of bugfix 2698
2008-03-01Fix parse error in /etc/sudoersStig Thormodsrud
2008-02-29add explicit list of commands in sudoersStephen Hemminger
Rather than open access to commands in sudo-users, restrict commands to a more limited set explicitly listed in /etc/sudoers. This allows administrator to change security policy by just examining/changing the file. This addresses infrastructure needed for fixing bugs where operator mode needs to be secure and not ask for password.
2008-02-25vyatta-cfg-system postinst was clobbering version filerbalocca
2008-02-21debian's latest update to "bash" (3.1dfsg-9) broke the completion mechanism.An-Cheng Huang
workaround is to source in our completion scripts directly.
2008-01-23fix /etc/crontab: logrotatedebian/0.1Tom Grennan
2008-01-04move quagga.deb config file munging to vyatta-cfg-quaggaTom Grennan
2008-01-03Merge branch 'glendale' of http://suva.vyatta.com/vyatta-cfg-system into ↵Tom Grennan
glendale
2008-01-03work w/ either quagga (debian) or vyatta-quagga packagesTom Grennan
2007-12-19Merge branch 'master' into glendalerbalocca
2007-12-19Revert "add init script to force udev settle before itf configured"Tom Grennan
This is unnecessary if the config.boot file is available before udevd starts. This reverts commit a9cd192305b779cb62aecd858ad9a4e5a1fbcad4.
2007-12-19Change temporary version string to glendale instead of eureka.Stig Thormodsrud
2007-12-17add init script to force udev settle before itf configuredTom Grennan