Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-10-17 | login: 2fa: T874: fix PAM string during ISO build | Christian Poessinger | |
Turns out a local installation of a package using "dpkg -i" differs when assembling an ISO using live-build. The previous version worked when using "dpkg -i" but it failed hard (no login possible) during ISO build. This has been fixed by using double quotes. | |||
2022-10-16 | login: 2fa: T874: fix PAM string generation on multiple package installations | Christian Poessinger | |
Commit da535ef5 ("login: 2fa: T874: fix Google authenticator issues") used different strings for grep and sed resulting in the same line beeing added on every installation of the package. This is only disturbing during development not during ISO build. | |||
2022-10-14 | login: 2fa: T874: fix Google authenticator issues | Christian Poessinger | |
Move default values of TOTP configuration from a global to a per user setting. This makes the entire code easier as no global configuration must be blended into the per user config dict. Also it should be possible to set the authentication window "multiple concurrent keys" individual per user. set system login user vyos authentication otp key 'gzkmajid7na2oltajs4kbuq7lq' set system login user vyos authentication plaintext-password 'vyos' | |||
2022-10-12 | system login: T874: add 2FA support for local and ssh authentication. Bugfix | goodNETnick | |
2022-10-11 | system login: T874: add 2FA support for local and ssh authentication | goodNETnick | |
2022-07-22 | ssh: T3212: cleanup deprecated /etc/default/ssh file | Christian Poessinger | |
2022-07-22 | dns-forwarding: T2185: cleanup deprecated /etc/powerdns files - now living ↵ | Christian Poessinger | |
in /run/powerdns | |||
2022-07-22 | ntp: T2185: cleanup deprecated /etc/ntp.conf - now living in /run/ntpd | Christian Poessinger | |
2022-07-22 | fastnetmon: T2659: also clean /etc/networks_whitelist | Christian Poessinger | |
2022-07-21 | fastnetmon: T2659: move configuration files to /run | Christian Poessinger | |
2022-07-17 | login: T4536: add all accounts to frr group | Christian Poessinger | |
2022-03-07 | logrotate: T4250: Fixed logrotate config generation | zsdc | |
* Removed `/var/log/auth.log` and `/var/log/messages` from `/etc/logrotate.d/rsyslog`, because they conflict with VyOS-controlled items what leads to service error. * Removed generation config file for `/var/log/messages` from `system-syslog.py` - this should be done from `syslom logs` now. * Generate each logfile from `system syslog file` to a dedicated logrotate config file. * Fixed logrotate config file names in `/etc/rsyslog.d/vyos-rsyslog.conf`. * Added default logrotate settins for `/var/log/messages` | |||
2022-03-05 | flow-accounting: T4277: delete Debian common configs | Christian Poessinger | |
2022-03-05 | conntrackd: T4259: fix daemon configuration path | Christian Poessinger | |
2021-08-08 | Debian: T3641: drop dead symlink file in /etc/init.d | Christian Poessinger | |
2021-07-03 | ipsec: T2816: Remove legacy vyatta code that references Openswan | sarthurdev | |
2021-06-26 | Debian: disable systemd salt-minion configuration - all handled in vyos-build | Christian Poessinger | |
2021-06-26 | Debian: ensure path for vyos-postconfig-bootup.script exists | Christian Poessinger | |
2021-06-26 | Debian: drop ipsec key removal from postinst script - done on every system boot | Christian Poessinger | |
2021-06-26 | Import vyos-postconfig-bootup.script from vyatta-cfg-system | Christian Poessinger | |
2021-06-26 | Debian: no need to disable salt-minion in postinst script | Christian Poessinger | |
This is already done in systemd service disable hook from vyos-build. | |||
2021-06-26 | Import sudoers configuration from vyatta-cfg-system | Christian Poessinger | |
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-02 | radius: T3510: authenticated users must use /sbin/radius_shell as shell | Christian Poessinger | |
2021-01-20 | Debian: add openvpn user via postinstall | Christian Poessinger | |
Migrated from vyatta-cfg-system. | |||
2021-01-20 | Debian: add radius_user and radius_priv_user via postinstall | Christian Poessinger | |
2020-12-28 | webproxy: T563: squidguard: support default ruleset | Christian Poessinger | |
2020-06-11 | dhcp(v6)-server: T2583: run as 'dhcpd' user | Jernej Jakob | |
Add a 'dhcpd' system user that is a member of hostsd group and can connect to vyos-hostsd. Run dhcpd as this user. | |||
2020-06-11 | vyos-hostsd: T2583: add hostsd group | Jernej Jakob | |
To better control access from other daemons that may not be running as root, create a new group 'hostsd' to which the other daemons running users can be added. Run vyos-hostsd as root:hostsd to create the socket file with correct user and group. | |||
2020-04-26 | salt: T2382: run as user minion | Christian Poessinger | |