Group :: Other
RPM: settings-s
Main Changelog Spec Patches Sources Download Gear Bugs e FR Repocop
25 abril 2023 Paul Wolneykien <manowar at altlinux.org> 0.4.2-alt1
- Provide the default dirs.conf for 'integalert' profile as a part of
the 'integ' package. - Output a warning and exit if dirs.conf is empty.
- Support for 'container' and 'vm' profiles.
- Set integalert service state from its preset after system
installation.
- Setup OSEC for full journal output after integrity database
initialization after install. - Update: Make integ inself require osec-controls.
- Moved postinstall.d/90-integrity-init.sh to the new stage2 package.
- Use "IMMUTABLE_DATABASE" configuration option for read-only osec runs.
This requires osec-cronjob >= 1.3.1-alt2. - Don't modify the main pipe.conf file after 'integ' package
installation. - Always create /var/log/lastosec_logs.
- Don't display a warning in "fix" mode.
- Run osec using 'integalert' and 'integalert_fix' sub-configs.
- Initialize OSEC after install, don't initialize it at first boot.
- Setup osec.cron for read-only use and full journal output after
install.
- added missing requires, set control of osec to journal
(essential).
- revert direct execution of osec from integalert,
lastosec data is needed too.
- update systemd unit
- not requires plymouth
- improve failure output
- direct execute osec for check integrity in integalert
- reenable service (to switch from required to wanted from sysinit)
only when it is an upgrade, not on initial install.
- force systemd reconfigure dependencies, fix archiving of osec messages
- force plymouth quit on integrity error
- integalert wanted, not required for sysinit by default
- fix integalert behavour, see nagwad package for modified osec.pipe. Also
disabled interruption of boot by default
- Fixed wrong separator in Conflicts line. Also fixed permissions on a unit.
- latest update to sisyphus
- fixed dependencies for integalert service, avoiding loops.
- do not start service, it is needed only on boot.
- fixes on integ integalert service
- grub is modified adding option in some other place. Removed
addition of duplicated entry
- fixed delimiters
- removed perl parts of settings
- fixed place of postinstall.d
- moved to postinstall.d, added features from branding
- separated to two packets: general settings and integrity service
Removed rhosts from skel: it harms selinux settings.
- integrity check strictly before user login now
- added "Before" to unit to make it start before DM
- changed wanted to required in unit
- added alerting on integrity checks on boot
- added fixed rhosts, added dependency to custom settings checker
- Updated settings
- fixed permissions
- Initial release
- backport to c8