Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-11-14 | Fix 3918: Operator level users require sudo permission for ipv6 clear | Stig Thormodsrud | |
commands | |||
2008-11-10 | make 'show interfaces wirelessmodem <wlm(num)> stats' work from operator mode | Mohit Mehta | |
2008-11-06 | rmeove ddclient script from ppp ip-up directory as we configure | Mohit Mehta | |
DDNS for an interface using the CLI | |||
2008-10-27 | Allow more ethtool commands | Stephen Hemminger | |
Bugfix 3832 Need to allow ethtool statistics for operator | |||
2008-10-22 | Fix Bug 3567 Debug messages are not logged by default on upgraded system | Mohit Mehta | |
- copy over default islavista syslog.conf during upgrade from hollywood | |||
2008-10-15 | Revert "Block remote access to rpc-bind port" | Stephen Hemminger | |
This change isn't needed. This reverts commit 25438666015dc5ea9695f5172b0f4925c3ae2d9a. | |||
2008-10-15 | Block remote access to rpc-bind port | Stephen Hemminger | |
Use hosts.deny to block access to portmapper Bugfix 3767 | |||
2008-10-14 | Bugfix: 3744 | Bob Gilligan | |
When a new member is added to a RAID group that holds the root filesystem, we need to re-install grub so that the new disk will be bootable. But this can only be done after the RAID set has completed rebuilding. Added mechanism that uses the event notification infrastructure of "mdadm" to trigger the re-installation of grub after the rebuild completes. | |||
2008-10-13 | remove unused files | An-Cheng Huang | |
2008-10-13 | add ssh key blacklists | An-Cheng Huang | |
2008-10-10 | Don't allow operator to reboot system | Stephen Hemminger | |
Remove privledge to reboot system via sudo for operator | |||
2008-10-03 | Merge branch 'islavista' of git:/git/vyatta-cfg-system into islavista | rbalocca | |
2008-10-03 | Fix for bug http://bugzilla.vyatta.com/show_bug.cgi?id=3735 | rbalocca | |
2008-10-02 | Fix Bug 3609 - "show tech-support" does not display open file information ↵ | Mohit Mehta | |
for operator level user - add lsof to sudoers file for use by an operator level user | |||
2008-10-01 | Bugfix: 3572 | Bob Gilligan | |
In the postinstall step, change the PAM configuration for login so that the user is prompted for password even if the username entered is invalid. This prevents people from easily determining whether a username exists or not. | |||
2008-08-30 | - get ddclient package for Dynamic DNS | Mohit Mehta | |
- get libio-socket-ssl-perl package for Dynamic DNS ssl updates - disable init for ddclient | |||
2008-07-25 | Merge branch 'islavista' of mohit@git.vyatta.com:/git/vyatta-cfg-system into ↵ | Mohit Mehta | |
islavista | |||
2008-07-30 | Fix for http://bugzilla.vyatta.com/show_bug.cgi?id=3225 | Rick Balocca | |
2008-07-30 | Partial fix for http://bugzilla.vyatta.com/show_bug.cgi?id=3225 | Rick Balocca | |
2008-07-28 | Since this packages changes the bash-completion conf file, it must be ↵ | rbalocca | |
installed after bash-completion | |||
2008-07-25 | add dnsmasq package to be included in the build | Mohit Mehta | |
2008-07-22 | The postinst was printing a '?' | rbalocca | |
2008-07-12 | fix for bug 3459: make bash-completion use "builtin set". | An-Cheng Huang | |
2008-07-07 | purge any old entries from sudoers | Stephen Hemminger | |
Make sure to cleanup any leftover vyatta entries | |||
2008-07-04 | Modify upgrade procedure for /etc/sudoers | Stephen Hemminger | |
0) make backup of file 1) remove old glendale entries 2) put all vyatta entries in one block 3) remove vyatta entries on package removal | |||
2008-07-01 | Missing -e causes sudoers problem | Stephen Hemminger | |
Missing -e on echo causes unparsable sudoers | |||
2008-07-01 | get rid of extra fi from last commit | Stephen Hemminger | |
mismatch | |||
2008-06-30 | Change syslogging of authorization related commands | Stephen Hemminger | |
For sucessful sudo, just log it at info level. Capture any security failures/changes into /var/log/auth.log but skip normal CLI commands Turn off the builtin sync after each write to /var/log/messages by putting - before file name; the sync causes a disk write each time and therefore can be a performance hit during boot. | |||
2008-06-09 | Allow operator to run wanpipemon | Stephen Hemminger | |
Add entry to sudoers to allow wanpipemon command | |||
2008-05-14 | Change dependancy from keepalived to vyatta-keepalived. | Stig Thormodsrud | |
2008-05-07 | Merge branch 'glendale' into hollywood | rbalocca | |
Conflicts: debian/vyatta-cfg-system.postinst.in | |||
2008-05-05 | fix for bug 3225: only insert sudoers if not present. | An-Cheng Huang | |
2008-04-03 | Fix Bug 1059 Feature Request: integrate 'tcpdump' and 'tethereal' into ↵ | Mohit Mehta | |
Vyatta CLI - added tshark to sudoers list | |||
2008-03-25 | Bugfix: 3021 | Bob Gilligan | |
Allow operators to bring pppoe connections up and down. | |||
2008-03-21 | Allow operator to run ntpdate | Stephen Hemminger | |
Fix for Bug 3018, allow operator to run ntpdate. | |||
2008-03-18 | Allow operator to set date. | Stephen Hemminger | |
Bugfix: 3018 Put proper path in for date command. | |||
2008-03-10 | fix for bug 2083: add radius authentication support. | An-Cheng Huang | |
2008-03-07 | allow non-root to clear nat counters | Stephen Hemminger | |
Part of bugfix 2698 | |||
2008-03-01 | Fix parse error in /etc/sudoers | Stig Thormodsrud | |
2008-02-29 | add explicit list of commands in sudoers | Stephen Hemminger | |
Rather than open access to commands in sudo-users, restrict commands to a more limited set explicitly listed in /etc/sudoers. This allows administrator to change security policy by just examining/changing the file. This addresses infrastructure needed for fixing bugs where operator mode needs to be secure and not ask for password. | |||
2008-02-25 | vyatta-cfg-system postinst was clobbering version file | rbalocca | |
2008-02-21 | debian's latest update to "bash" (3.1dfsg-9) broke the completion mechanism. | An-Cheng Huang | |
workaround is to source in our completion scripts directly. | |||
2008-01-23 | fix /etc/crontab: logrotatedebian/0.1 | Tom Grennan | |
2008-01-04 | move quagga.deb config file munging to vyatta-cfg-quagga | Tom Grennan | |
2008-01-03 | Merge branch 'glendale' of http://suva.vyatta.com/vyatta-cfg-system into ↵ | Tom Grennan | |
glendale | |||
2008-01-03 | work w/ either quagga (debian) or vyatta-quagga packages | Tom Grennan | |
2007-12-19 | Merge branch 'master' into glendale | rbalocca | |
2007-12-19 | Revert "add init script to force udev settle before itf configured" | Tom Grennan | |
This is unnecessary if the config.boot file is available before udevd starts. This reverts commit a9cd192305b779cb62aecd858ad9a4e5a1fbcad4. | |||
2007-12-19 | Change temporary version string to glendale instead of eureka. | Stig Thormodsrud | |
2007-12-17 | add init script to force udev settle before itf configured | Tom Grennan | |