- Wed Sep 19 2001 Christian Belisle <cbelisle@mandrakesoft.com> 1.2.0-2mdk
- s/pop-3/pop3 (Fabrice).
- Mon Sep 17 2001 Christian Belisle <cbelisle@mandrakesoft.com> 1.2.0-1.3mdk
- Fixed log level bug. (Thanks Fabrice)
- Mon Sep 17 2001 Christian Belisle <cbelisle@mandrakesoft.com> 1.2.0-1.2mdk
- Fixed bug, now Bastille should work.
- Thu Jun 14 2001 Jay Beale <jay@bastille-linux.org> 1.2.0-1.1mdk
- backed out a last-minute bugfix for something that wasn't a bug.
- Tue Jun 12 2001 Jay Beale <jay@bastille-linux.org> 1.2.0-1.0mdk
- fixed libwrap problem to accomodate Red Hat 7.x
- Wed Jun 6 2001 Jay Beale <jay@bastille-linux.org> 1.2.0-0.2mdk
- small bugfix: a run-twice bug
- added preun and postun section to spec file - Wed May 9 2001 Jay Beale <jay@bastille-linux.org> 1.2.0-0.1mdk
- rc6 was stable -- releasing as 1.2.0!
- Note: previous versions were stable for MDK8.0 -- most corrections were
specific to Red Hat - Mon Apr 30 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc6-0.1mdk
- Minor tweak in firewall to get Internal services working properly under
2.4 kernel.
- Fixed mknod to do correct return value. - Mon Apr 23 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc5-0.1mdk
- Additional Red Hat fix for xinetd
- xinetd/tcpd interaction tweaked - Fri Apr 20 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc4-0.1mdk
- Added Red Hat 7.1 fixes
- Mon Apr 9 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc3-0.1mdk
- Integrated PeterW's additional "play nice with drakgw" code
- Urged PeterW and gc@mandrakesoft.com to get some sleep. - Mon Apr 9 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc2-0.4mdk
- Integrated code so Bastille plays nice with drakgw under 2.2 kernel
- Mon Apr 9 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc2-0.3mdk
- Moved bastille-firewall-early.sh to /etc/Bastille
- Fixed minor warning: pop-3 isn't in /etc/services - change to pop3 - Mon Apr 9 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc2-0.2mdk
- Enhanced bastille firewalling code to cooperate intelligently with
drakgw's Internet Connection Sharing - Sun Apr 8 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc2-0.1mdk
- Fixed named bug: we weren't modifying recent distro's init script right.
- Fixed question flow oversight.
- Replaced GLOBAL_FILE hash lookup with GLOBAL_DIR in ConfigureMiscPAM
- Added bastille-firewall to list of init scripts to NOT deactivate - Thu Apr 5 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.rc1-0.1mdk
- Added netfilter code to handle NetBIOS cases
- Fixed an escape bug on an @ sign
- Implemented SKIP_CHILD label to skip a couple more questions
- added find_bastille_affected_files.pl investigative script - Tue Mar 27 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre22-0.3mdk
- Fixed a stupid bug: we were writing LEVEL_SECURE instead of SECURE_LEVEL.
- Mon Mar 26 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre22-0.2mdk
- Fixed PATH bug -- do export PATH=foo
- Fixed bug in adding the security scripts: added a \n to the end of the
/etc/crontab lines.
- fixed logging bug where *.* /dev/tty12 is appended without a newline.
- fixed peterw's bastille-tmpdir-defense bugs -- bash2 is incompatible
with bash 1.14 - Mon Mar 26 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre22-0.1mdk
- Fixed chkconfig_off to create K__ symlinks in place of the ones that it
removes.
- Cleaned up questions.txt, so user is told they can select any umask, in
addition to the ones provided my security levels.
- Fixed stupid bug in Logging.pm : s/B_append_file/B_append_line/
- Fixed PATH to include /usr/games and not include quotes.
- Incremented security level number set by the prewritten configurations,
such that Lax=2, Moderate=3, Paranoia=4.
- Fixed all the double quote bugs based on pixel's grep. - Sun Mar 25 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre21-0.1mdk
- Modified specfile to place BastilleChooser in separate package.
- Sun Mar 25 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre21-0.1mdk
- Minor oversight correction -- disallowed root logins via [gkx]dm via PAM.
- Switched " into ' signs in two regeps in BootSecurity.pm,SecureInetd.pm.
- Fixed requires-bug that was stopping sendmail from getting called.
- Set the default configurations to not use pam filesize/process number limits.
- Bugfix: when you wanted root login denied on console, it was allowed and v/v.
- Fixed quoting bug in /etc/profile PATH-setting : Mandrake specific
- Finished adding all new questions to pre-writtens configs/"security levels" - Fri Mar 23 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre20-0.1mdk
- Fixed Matt's BastilleChooser bug -- if you selected "lax" then you
didn't get a configuration written -- totally terminal bug.
- Fixed Questions.txt bug -- question "foo"!
- Fixed /etc/securetty bug -- the question was reversed from the
corresponding action
- Fixed bug: export SECURELEVEL was only in /etc/profile -- added in
/etc/zprofile as well.
- Fixed problem in ServerLax -- some settings were too tight.
- Fixed problem in ServerLax -- it was set to write LILO changes to disk.
- Changed method of deactivating telnet+ftp in xinetd.d/ use "disable" lines.
- Corrected oversight in disabling root tty access -- we now also disable root
xdm-based login.
- Removed libsafe question -- libsafe 1.3 would introduce instability because
of omit-frame-pointer compiler flag and libsafe 2.0 is too new. - Wed Mar 21 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre19-0.2mdk
- lots of bugfixes
- Tue Mar 20 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre19-0.1mdk
- Added syslogging *.* to /dev/tty12, as msec compatibility feature
- Added PATH adjustments to Bastille, as msec compatibility feature
- Added export SECURE_LEVEL in /etc/profile, as msec compat feature.
- Added feature to disable kdm/gdm user listing, as msec compat feature.
- Added libsafe functionality to maintain compatibility with msec.
- Moved Curses-specific files into Bastille-Curses-module
- Moved Tk-specific files into Bastille-Tk-module - Tue Mar 20 2001 Vincent Danen <vdanen@mandrakesoft.com 1.2.0.pre18-0.3mdk
- specfile cleanups; macros
- Mon Mar 19 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre18-0.2mdk
- bugfixes in requirements code
- Sun Mar 18 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre18-0.1mdk
- added remaining msec functions
- re-worked inetd/xinetd module
- more bugfixes - Sat Mar 17 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre17-0.1mdk
- added msec fileperms support
- cleaned up requires code - several bugfixes
- more bugfixes
- enhanced API.pm functions to support globbing - Tue Mar 13 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre15-0.1mdk
- added Spong's hack to BastilleChooser to let you specify
security/paranoia level on the command line. - Mon Mar 12 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre14-0.1mdk
- Added more pre-written configuration templates
- added Spong's BastilleChooser program to choose/modify the templates based on user input
- added Paul's hack to Curses interface so it reads in previously-written
configuration if one exists. - Sun Mar 11 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre13-0.1mdk
- applied PeterW's "make question pruning optional" patch
- applied a whole lot of other PeterW changes (details coming) - Sat Mar 10 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre12-0.1mdk
- Fixed requirements bugs
- Updated Questions database: suid questions won't get asked if
requisite binaries aren't suid - Sat Mar 10 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre11-0.1mdk
- Re-worked requirements language
- Wed Feb 21 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre9-0.4mdk
- Fixed stupid date error in spec file
- Wed Feb 21 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre9-0.3mdk
- removed the specs for Bastille-perl-Tk and Bastille-perl-Curses and
wrote the virtual provide/require rpm The Right Way. - Wed Feb 21 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre9-0.2mdk
- added a virtual rpm to require perl-Tk OR perl-Curses
- Mon Feb 19 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre9-0.1mdk
- fixed firewall bug by hacking Questions.txt.
- Sun Feb 18 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre8-0.1mdk
- refixed BastilleBackEnd @INC bug ...
- fixed bug where Bastille fails to properly detect Mandrake and Immunix versions.
Longstanding, stupid and dependent on ordering.
- changed API::B_place to suit the new file locations
- fixed tiny bug in API::B_hash_comment and uncomment.
- updated Pete's scripts, modules and Questions.txt.
- fixed bug where Bastille fails to account for MandrakeSoft's weird naming scheme for
their distro (Linux Mandrake)
- other misc bugs - Sun Feb 18 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre7-0.1mdk
- Fixed InteractiveBastille bug
- Forced X (tk) mode on Interface unless user specifically uses -c flag.
- -c flag on GUI/TUI checks for perl-Curses module. - Sun Feb 18 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre6-0.1mdk
- Removed .pl's from program names and changed BackEnd script name
- Sun Feb 18 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre5-0.1mdk
- Bugfixes from Keith Buck.
- Changed README to be more appropriate to new system.
- Added PeterW's netfilter script, so bastille-firewall loads the "right"
script for the given kernel.
- Fixed AutomatedBastille so it works! - Thu Feb 15 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre4-0.1mdk
- Added install script (so developers can hack without dealing with RPM's.
- Added Greg K's diff to support Immunix OS's.
- Altered specfile to not require Curses. Thus, force people to use X
interface for now. - Thu Feb 15 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre3-0.1mdk
- Added Peter's IPCHAINS compatibility diff, to support 2.4 kernels until we
get true Netfilter support
- Added perl-Tk requires code
- Fixed UndoBastille problems -- it runs now. Darn it Sweth!!!! - Wed Feb 14 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre2-0.1mdk
- Fit to RPM, hacked file system locations (1.2.0.pre2)
- Wed Feb 14 2001 Jay Beale <jay@mandrakesoft.com> 1.2.0.pre1-0.1mdk
- Built the first alpha-quality RPM to allow cooker testing.
-
- Bastille Linux's "real" changelog can be found at
- http://www.bastille-linux.org/Changelog
-
- This Changelog is specific to this RPM.