summaryrefslogtreecommitdiff
path: root/cfengine/cf.services.harden
AgeCommit message (Collapse)Author
2006-08-23Have integrit ignore /sys and /media.Jonas Smedegaard
2003-11-01Avoid using apt-get.Jonas Smedegaard
2003-07-28Update to post-woody logcheck (on workstations the server rules are ↵Jonas Smedegaard
included, so always install both).
2003-06-01Correct name of integrit configfile.Jonas Smedegaard
2003-06-01Update integrit handling to post-woody (giving up on bug#153420 and backport ↵Jonas Smedegaard
a newer integrit instead).
2002-10-26cfengine: Add new group name LtspServer and add artax, slamuf and saks. They ↵Jonas Smedegaard
behave like Workstation in harden (logcheck).
2002-10-26cfengine: Correct (again...) new destination for logcheck local-file.Jonas Smedegaard
2002-10-26cfengine: Correct (new) destination for logcheck local-file.Jonas Smedegaard
2002-10-25cfengine: Enable use of dirty hack logcheck local-file (until a better ↵Jonas Smedegaard
solution is written).
2002-10-14cfengine: Comment out all logcheck code - breaks with post-woody logcheck.Jonas Smedegaard
2002-10-14cfengine: Comments translated to english and proper end-of-file.Jonas Smedegaard
2002-10-08logcheck: New ignore lines for netatalk 1.5.5, and comment out symlinking ↵Jonas Smedegaard
(deprecated and in old versions should be done at install time).
2002-08-27Now checks what MTA the machine is running and copies the matchingMartin Skøtt
logcheck files. Currently supports Postfix, but can very easily be extended to other MTAs. Also fixed a minor spelling mistake in a comment.
2002-08-27Added logcheck support for servers in the SpamAssServer classMartin Skøtt
2002-08-27Moved almost everything in the links section into a copy section sinceMartin Skøtt
newer versions of logcheck does not appear to like links. This change will provoke some messages in the log about replacing links with files.
2002-08-26Bad boy, checked in untested code. Now the test for logcheck actuallyMartin Skøtt
works :-)
2002-08-26Now checks if logcheck is installed and installs it if not.Martin Skøtt
2002-08-23Added a section making links for logcheck.Martin Skøtt
Takes care of the most common server classes, but does VERY little for workstations or stand alone machines
2002-07-11cf.services.harden: Ignore /dev/cpu/mtrr. Add comment regarding m4 to TODO.Jonas Smedegaard
2002-04-02harden: Oops, ignore /initrd, not /initrc...Jonas Smedegaard
2002-04-02harden: Uncommenting works now! (solution: the hashmark needs to be included ↵Jonas Smedegaard
in the match string).
2002-04-02harden: Simplify integrit a bit, and make sure additions are made even if ↵Jonas Smedegaard
the above fails (grrr).
2002-03-30cfengine: Ignore journal and local files in integrit.Jonas Smedegaard
2002-03-15cfengine: Comment out cron part of Integrit code - it is impossible to solve ↵Jonas Smedegaard
using CFEngine it seems.
2002-03-09cfengine: harden: Ignore all logfiles (Aide does not handle rotation) and ↵Jonas Smedegaard
correctly ignore /dev Ctime.
2002-02-27cfengine: Correct errors in harden integrit rule makiing CFEngine fail ↵Jonas Smedegaard
(still a few corrections needed to make the rule actually work, though).
2002-02-27cfengine: Add knowledge about integrit to harden rule.Jonas Smedegaard
2001-12-14 * Added cf.services.fai and cf.services.dhcp - they're not enabled yet!Juri Jensen
2001-12-06cfengine: aide: Ignore /dev/ttyS*.Jonas Smedegaard
2001-09-12Initial revisionJuri Jensen