Scientific Linux Fermi 6.2 x86_64

Update: slf-release-notes-6.2-1

Wed, 02 May 2012 14:50:36 +0000

Package: slf-release-notes
Summary: Release Notes for Scientific Linux Fermi 6.2

Description:
Scientific Linux Fermi 6.2 release notes. As well as the Upstream Vendors release notes (English).

Changes:

slf-release-notes-6.2-1.noarch [126 KiB]

Changelog by Pat Riehecky (2012-05-02):

- SLF 6.2 final release notes.

Update: yum-autoupdate-2-6.2.3.slf

Wed, 02 May 2012 14:46:55 +0000

Package: yum-autoupdate
Summary: Automatically update your machine daily via yum

Description:
Automatically update your machine daily via yum. If anything is updated, it is logged in the yum.log and you are sent an email. The configuration file is in /etc/sysconfig/yum-autoupdate and most behavior can be customized.

Changes:

yum-autoupdate-2-6.2.3.slf.noarch [8 KiB]

Changelog by Pat Riehecky (2012-04-26):

- Fixed typo

Update: ocsinventory-fermi-0.9.9-16

Thu, 26 Apr 2012 18:49:02 +0000

Package: ocsinventory-fermi
Summary: OCS Inventory NG - Customized for Fermilab

Description:
Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computer configuration and software installed on the network. This version has been customized for Fermilab

Changes:

ocsinventory-fermi-0.9.9-16.noarch [21 KiB]

Changelog by Pat Riehecky (2012-04-25):

- made /etc/sysconfig/ocsinventory-fermi for control values
- merged Connie's 'ip addr' patch for the cronjob
- added requirement for iproute and iputils
- added extra check for DNS resolution
- added syntax check for cronjob at build time

Update: krb5-fermi-krb5.conf-4.4-6

Tue, 17 Apr 2012 20:43:38 +0000

Package: krb5-fermi-krb5.conf
Summary: Fermilab configuration scripts for your Kerberos Machine

Description:
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. This rpm gives you a krb5.conf file setup to work with the FNAL.GOV kerberos realm. If you already have a krb5.conf, it saves it off.

Changes:

krb5-fermi-krb5.conf-4.4-6.noarch [15 KiB]

Changelog by Frank Nagy (2012-04-17):

* Cleanup after debugging config-krb5.conf

Update: krb5-fermi-addons-1.3-1.slf6

Tue, 17 Apr 2012 15:58:43 +0000

Package: krb5-fermi-addons
Summary: Additional Fermilab Kerberos utilities

Description:
This package adds additional Fermilab-specific utilities to your system in addition to the standard MIT Kerberos package from the up-stream vendor. You must have already installed the Fermilab Kerberos base configuration package.

Changes:

krb5-fermi-addons-1.3-1.slf6.i386 [152 KiB]

Changelog by Frank Nagy (2012-04-17):

- Replace aklog symlink with executable in preparation for
- upgrade of server code to support compound principals

Update: slf-release-6.2-1.2

Mon, 16 Apr 2012 19:07:04 +0000

Package: slf-release
Summary: Scientific Linux Fermi release file

Description:
Scientific Linux Fermi release files

Changes:

slf-release-6.2-1.2.x86_64 [38 KiB]

Changelog by Pat Riehecky (2012-04-16):

- point to non-rolling
- added the fermi-addons.repo for more automated repo path management

Update: zz_fermi_ssh_config-1.1-3.1

Tue, 10 Apr 2012 14:52:04 +0000

Package: zz_fermi_ssh_config
Summary: Change ssh_config to work best with Fermilab

Description:
This modifies the /etc/ssh/ssh_config file using augeas so that your ssh connections use the FermiLab defaults. These defaults include X11Forwarding and GSSAPI.

Changes:

zz_fermi_ssh_config-1.1-3.1.noarch [6 KiB]

Changelog by Pat Riehecky (2012-04-10):

- added GSSAPIKeyExchange=yes to defaults

Update: zz_fermi_sshd_config-5.3-3.1

Tue, 10 Apr 2012 14:47:39 +0000

Package: zz_fermi_sshd_config
Summary: Change sshd_config to meet Fermilab's standards

Description:
The openssh server configuration is normally not fully kerberized out of the box. This rpm configures /etc/ssh/sshd_config with Fermilab defaults. These defaults include X11Forwarding and GSSAPI.

Changes:

zz_fermi_sshd_config-5.3-3.1.noarch [4 KiB]

Changelog by Pat Riehecky (2012-04-10):

- added GSSAPIKeyExchange=yes to settings

Update: zz_enable_firewall_fnal-2.0-0

Mon, 09 Apr 2012 18:57:13 +0000

Package: zz_enable_firewall_fnal
Summary: This will turn on iptables and configure to fnal.gov only

Description:
This will turn on iptables and configure to allow NEW inbound tcp/udp traffic to fnal.gov only. To customize modify /etc/sysconfig/iptables . This rpm will NOT remove/modify a existing iptables config on install, in that case it will create a new file called /etc/sysconfig/iptables.rpmnew . If you want the iptables config file provided in this rpm to be installed either remove /etc/sysconfig/iptables before installing this rpm or move /etc/sysconfig/iptables.rpmnew to /etc/sysconfig/iptables. For the special case of ftp the /etc/sysconfig/iptables-config file requires that "ip_conntrack_ftp" module be defined in the "IPTABLES_MODULES" definition. This option allows for the use of "active" ftp without the need for other tcp ports to be defined. The pre existing /etc/sysconfig/iptables-config is saved off as /etc/sysconfig/iptables-config.<date>.

Changes:

zz_enable_firewall_fnal-2.0-0.noarch [5 KiB]

Changelog by Connie Sieh (2012-04-09):

- turn on iptables and configure to fnal.gov only except for approved ports

Update: zz_ntp_configure-4.2.6-4

Mon, 09 Apr 2012 18:56:59 +0000

Package: zz_ntp_configure
Summary: This will configure the ntpd config files for Fermilab.

Description:
This package configures the ntp time daemon correctly for use at Fermilab. It sets the initial time from the default time servers and configures ntpd to listen to time broadcasts from the local router of the subdomain that the machine is on. At this time the default time servers are listed as: 131.225.8.127 131.225.17.127

Changes:

zz_ntp_configure-4.2.6-4.noarch [13 KiB]

Changelog by Pat Riehecky (2012-03-16):

- switched to a define based ntp server list
- updated ntp server list
- made version independent, now works on SLF5 and SLF6
- added comments to help explain the configuration options

Update: atrpms-repo-6-5.el6.1.slf

Tue, 13 Mar 2012 19:12:37 +0000

Package: atrpms-repo
Summary: Configuration files for package managers.

Description:
This package contains configuration files for yum, smart and apt.

Changes:

atrpms-repo-6-5.el6.1.slf.x86_64 [7 KiB]

Changelog by Pat Riehecky (2012-03-12):

- require yum-plugin-protectbase, set protect=0

Update: elrepo-release-6-4.el6.1.slf

Mon, 12 Mar 2012 17:05:04 +0000

Package: elrepo-release
Summary: ELRepo.org Community Enterprise Linux Repository release file

Description:
This package contains yum configuration for the ELRepo.org Community Enterprise Linux Repository, as well as the public GPG keys used to sign packages.

Changes:

elrepo-release-6-4.el6.1.slf.noarch [7 KiB]

Changelog by Pat Riehecky (2012-03-12):

- require yum-plugin-protectbase, set protect=0

Update: epel-release-6-5.1.slf

Mon, 12 Mar 2012 17:04:46 +0000

Package: epel-release
Summary: Extra Packages for Enterprise Linux repository configuration

Description:
This package contains the Extra Packages for Enterprise Linux (EPEL) repository GPG key as well as configuration for yum and up2date.

Changes:

epel-release-6-5.1.slf.noarch [13 KiB]

Changelog by Pat Riehecky (2012-03-12):

- require yum-plugin-protectbase, set protect=0

Update: rpmforge-release-0.5.2-2.el6.1.slf

Mon, 12 Mar 2012 17:04:31 +0000

Package: rpmforge-release
Summary: RPMforge release file and RPM repository configuration

Description:
RPMforge.net release file. This package contains apt, yum and smart configuration for the RPMforge RPM Repository, as well as the public GPG keys used to sign them.

Changes:

rpmforge-release-0.5.2-2.el6.1.slf.x86_64 [13 KiB]

Changelog by Pat Riehecky (2012-03-12):

- require yum-plugin-protectbase, set protect=0

Update: redhat-logos-60.0.14-2.slf6.2.1

Wed, 22 Feb 2012 21:50:08 +0000

Package: redhat-logos
Summary: Scientific Linux Fermi logos and artwork.

Description:
Scientific Linux Fermi artwork and branding See the included COPYING file for information on copying and redistribution.

Changes:

redhat-logos-60.0.14-2.slf6.2.1.noarch [9.3 MiB]

Changelog by Pat Riehecky (2012-02-22):

- Added slf-logos to the Provides field for completeness sake

Update: yum-conf-slf6x-1-3.slf6

Wed, 22 Feb 2012 17:04:04 +0000

Package: yum-conf-slf6x
Summary: SLF6x yum configuration files

Description:
Yum repository config files that point to Scientific Linux Fermi 6x, which is always the latest release. With this installed your system will automatically be updated to the latest SLF6 release as soon as it is released.

Changes:

yum-conf-slf6x-1-3.slf6.noarch [3 KiB]

Changelog by Pat Riehecky (2012-02-16):

- updated GPG key list

Update: krb5-fermi-config-4.4-2

Thu, 09 Feb 2012 14:55:12 +0000

Package: krb5-fermi-config
Summary: Configuration scripts make your Kerberos Installation Fermilab-compatible

Description:
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. The config set's up config files so that a machine is ready to be in Fermilab's kerberos realm

Changes:

krb5-fermi-config-4.4-2.noarch [33 KiB]

Changelog by Frank Nagy (2012-02-09):

- Correctted version number in config-krb5.conf

Update: kmod-drbd83-8.3.12-1.el6

Mon, 06 Feb 2012 15:11:49 +0000

Package: kmod-drbd83
Summary: drbd83 kernel module(s)

Description:
This package provides the drbd83 kernel module(s) built for the Linux kernel using the x86_64 family of processors.

Changes:

kmod-drbd83-8.3.12-1.el6.x86_64 [172 KiB]

Changelog by Pat Riehecky (2012-02-03):

- rebuilt srpm without 'elrepo' in the name.  No other changes made.

Update: clamav-0.97.3-3.el6

Fri, 03 Feb 2012 19:51:14 +0000

Package: clamav
Summary: Anti-virus software

Description:
Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. Most importantly, the virus database is kept up to date

Changes:

clamav-0.97.3-3.el6.x86_64 [10.3 MiB]

Changelog by Nick Bebout (2012-01-01):

- Revert patch from 0.97.3-2

Update: clamav-db-0.97.3-3.el6

Fri, 03 Feb 2012 19:51:14 +0000

Package: clamav-db
Summary: Virus database for clamav

Description:
The actual virus database for clamav

Changes:

clamav-db-0.97.3-3.el6.x86_64 [29.6 MiB]

Changelog by Nick Bebout (2012-01-01):

- Revert patch from 0.97.3-2

Update: clamav-devel-0.97.3-3.el6

Fri, 03 Feb 2012 19:51:14 +0000

Package: clamav-devel
Summary: Header files, libraries and development documentation for clamav

Description:
This package contains the header files, static libraries and development documentation for clamav. If you like to develop programs using clamav, you will need to install clamav-devel.

Changes:

clamav-devel-0.97.3-3.el6.x86_64 [14 KiB]

Changelog by Nick Bebout (2012-01-01):

- Revert patch from 0.97.3-2

Update: clamav-milter-0.97.3-3.el6

Fri, 03 Feb 2012 19:51:14 +0000

Package: clamav-milter
Summary: The Clam AntiVirus sendmail-milter Daemon

Description:
The Clam AntiVirus sendmail-milter Daemon

Changes:

clamav-milter-0.97.3-3.el6.x86_64 [76 KiB]

Changelog by Nick Bebout (2012-01-01):

- Revert patch from 0.97.3-2

Update: clamd-0.97.3-3.el6

Fri, 03 Feb 2012 19:51:14 +0000

Package: clamd
Summary: The Clam AntiVirus Daemon

Description:
The Clam AntiVirus Daemon

Changes:

clamd-0.97.3-3.el6.x86_64 [129 KiB]

Changelog by Nick Bebout (2012-01-01):

- Revert patch from 0.97.3-2

Update: clamav-unofficial-sigs-3.7.1-6.el6

Fri, 03 Feb 2012 19:48:55 +0000

Package: clamav-unofficial-sigs
Summary: Scripts to download unoffical clamav signatures

Description:
This package contains scripts and configuration files that provide the capability to download, test, and update the 3rd-party signature databases provide by Sanesecurity, SecuriteInfo, MalwarePatrol, OITC, INetMsg and ScamNailer.

Changes:

clamav-unofficial-sigs-3.7.1-6.el6.noarch [38 KiB]

Changelog by Andrew Colin Kissa (2011-08-18):

- Fix moving signatures into clam directory

Update: clamsmtp-1.10-5.el6

Fri, 03 Feb 2012 19:44:39 +0000

Package: clamsmtp
Summary: A SMTP virus scanning system

Description:
ClamSMTP is an SMTP filter that allows you to check for viruses using the ClamAV anti-virus software. It accepts SMTP connections and forwards the SMTP commands and responses to another SMTP server. The 'DATA' email body is intercepted and scanned before forwarding. It aims to be lightweight, reliable, and simple rather than have a myriad of options. It's written in C without major dependencies. If you need more options then you could use something big like AMaViS which is written in PERL and can do almost anything. Written with the Postfix mail server in mind it can be configured as a Postfix Content Filter. It can also be used as a transparent proxy to filter an entire network's SMTP traffic at the router.

Changes:

clamsmtp-1.10-5.el6.x86_64 [40 KiB]

Changelog by Nathanael Noblet (2011-11-21):

- Fix log rotation

Update: drbd83-utils-8.3.12-1.el6

Fri, 03 Feb 2012 19:42:47 +0000

Package: drbd83-utils
Summary: Management utilities for DRBD

Description:
DRBD mirrors a block device over the network to another machine. Think of it as networked raid 1. It is a building block for setting up high availability (HA) clusters. This packages includes the DRBD administration tools and integration scripts for heartbeat, pacemaker, rgmanager and xen.

Changes:

drbd83-utils-8.3.12-1.el6.x86_64 [207 KiB]

Changelog by Pat Riehecky (2012-02-03):

- rebuilt srpm without 'elrepo' in the name.  No other changes made.

Update: libnet-1.1.5-1.el6

Fri, 03 Feb 2012 19:31:24 +0000

Package: libnet
Summary: C library for portable packet creation and injection

Description:
Libnet is an API to help with the construction and handling of network packets. It provides a portable framework for low-level network packet writing and handling (use libnet in conjunction with libpcap and you can write some really cool stuff). Libnet includes packet creation at the IP layer and at the link layer as well as a host of supplementary and complementary functionality.

Changes:

libnet-1.1.5-1.el6.x86_64 [52 KiB]

Changelog by Robert Scheck (2010-12-28):

- Upgrade to 1.1.5

Update: libnet-devel-1.1.5-1.el6

Fri, 03 Feb 2012 19:31:24 +0000

Package: libnet-devel
Summary: Development files for the libnet library

Description:
The libnet-devel package includes header files and libraries necessary for developing programs which use the libnet library. Libnet is very handy with which to write network tools and network test code. See the manpage and sample test code for more detailed information.

Changes:

libnet-devel-1.1.5-1.el6.x86_64 [156 KiB]

Changelog by Robert Scheck (2010-12-28):

- Upgrade to 1.1.5

Update: zz_tcp_wrappers_change-3.0-4

Wed, 01 Feb 2012 17:46:16 +0000

Package: zz_tcp_wrappers_change
Summary: Adds Fermi specific entries in /etc/hosts.allow and /etc/hosts.deny

Description:
This package will add entries in /etc/hosts.allow and /etc/hosts.deny which are Fermi specific. By limiting access to certain services to Fermi sites only, it increases security. Specifically, we disallow everyone outside of .fnal.gov all service on the machine and allow virtually everything within .fnal.gov domain. If you're at an off-site institution, you'll have to edit the hosts.allow file accordingly for your domain. The original files will be saved as /etc/hosts.allow(deny).rpmsave. This version includes the standard DOE security banners pre-enabled.

Changes:

zz_tcp_wrappers_change-3.0-4.noarch [6 KiB]

(no changelog entry)

Update: zz_local_dns_cache-3-0.3

Wed, 01 Feb 2012 16:55:05 +0000

Package: zz_local_dns_cache
Summary: This package configures a host do local dns caching with bind

Description:
Installing this package will reconfigure named to run as a caching nameserver which will only allow connections from localhost. Your /etc/resolv.conf will be modified to call on localhost as primary nameserver. The dhclient process will be configured to use this nameserver, if present. Network Manager will be configured to use this nameserver, if present. You should consider customizing the DNS server search list provided. When removed you will be restored to using 131.225.0.254 and 8.8.8.8 as SLF is used both on and off site. If this is not what you want, you will need to customize these. This package should work on SLF5 and SLF6

Changes:

zz_local_dns_cache-3-0.3.noarch [19 KiB]

Changelog by Pat Riehecky (2012-01-19):

- clean up stray /etc/named.conf link
- added nscd restart