# changelog

author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.0-3
changelog:
  - Use global instead of define as per Packaging Guidelines
  - Fix tab/space mixup.
  - Remove obsolete (and commented-out) keyboard_drv files.
  - Remove traces from building from git


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add vino-2.8.1-sanity-check-fb-update.patch
    Fix for CVE-2011-0904 and CVE-2011-0904
    - Bugs #694456, #694455


author: Soren Sandmann <ssp@redhat.com> - 2.28.1-5
changelog:
  - Add reachability.patch
    Remove UI about whether the is only reachable locally or not.
    Fix for CVE-2011-1164
    - Bug #553477


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-11
changelog:
  - Don't switch page every time lxc guest is updated (bz 796570)
  - Don't blacklist disk device if we grab stats for shutdown guest (bz
    796092)
  - Add QED to disk format list (bz 795323)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-12
changelog:
  - Fix reopening a remote graphical console (bz 811316)
  - Fix app crash when deleting multiple storage volumes (bz 803600)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.0-15
changelog:
  - Only reboot VM if it had an install phase (rhbz#824275)
  - Match usb device with vendorID, productID, bus, device (rhbz#820303)
  - Change Mbps to MB/s in migration dialog (rhbz#802639)


author: Martin Kletzander <mkletzan@redhat.com> - 0.9.0-19
changelog:
  - Fix changing cirrus->QXL for active VM (rhbz#985184)
  - Top level windows shouldn't be visible by default (rhbz#990507)
  - The bus, device values of USB device is decimal rather than hex (rhbz#820303)
  - Don't fail on selecting network without IP (rhbz#869474)
  - Differentiate duplicate usb devices by bus/addr (rhbz#820303)
  - Remove address when changing watchdog models (rhbz#869206)
  - Add 'pre-startup' signal and do nodedevs checking (rhbz#820303)
  - Create: s/Gb/GB/ for storage units (rhbz#873142)
  - Add support for security relabeling (rhbz#907399)
  - Always show toolbar in customize dialog (rhbz#981628)


author: Adam Jackson <ajax@redhat.com> 2.3.0-1
changelog:
  - vesa 2.3.0
  - vesa-avoid-24bpp.patch: Avoid 24bpp if 16bpp is available, ugly workaround
    for an xserver crash with virt (#555221)


author: Adam Jackson <ajax@redhat.com> 2.3.2-4
changelog:
  - vesa-2.3.0-no-virt-shadowfb.patch: Don't bother with a shadowfb on known
    virtual machine GPUs, it won't help. (#795686)


author: Adam Jackson <ajax@redhat.com> 1.6.0-18
changelog:
  - Silence amazing amounts of log spam in the i2c code (#888607)
  - Fix a crash in DDC fetch (#888607)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.6-8
changelog:
  - xproto 7.0.21
  - 0001-Add-XF86XK_TouchpadOn-Off.patch: drop, 5d3428de974d
  - 0001-Add-defines-for-Unicode-Sinhala-to-keysymdef.h.patch: drop,
    423f5faddbb1023d


author: Thomas Wörner <twoerner@redhat.com> 0.2.19-5
changelog:
  - fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
  - fixed device type determination (rhbz#707079)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-7
changelog:
  - fix: apply scheduler settings to vd* devices (#725497)
  - enhancement: add virtual-host profile (#740976)
  - enhancement: add virtual-guest profile (#740977)
  - fix: diskdevstat and netdevstat command line error handling (#747210)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-8
changelog:
  - fix: poor ping latency in 'latency-performance' profile (#714180)
  - fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
  - fix: should not disable barriers on devices with write back cache (#801561)
  - fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-12
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#905077
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#904062


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-13
changelog:
  - add support for upstream THP
    resolves: rhbz#912788
  - added sap profile, backported features it needs
    resolves: rhbz#910838
  - made elevator settings customizable
    resolves: rhbz#987547
  - fixed usb_autosuspend and bluetooth functions
    resolves: rhbz#982756
  - increased kernel.sched_migration_cost in virtual-host profile
    resolves: rhbz#969491
  - documented virtual-guest and virtual-host profiles
    resolves: rhbz#964187
  - fixed typo in tuned-adm help
    resolves: rhbz#963821
  - modified latency-performance profile to lock CPU to C1
    resolves: rhbz#961792
  - added support for /etc/sysctl.d
    resolves: rhbz#959732
  - fixed permissions of /var/run/tuned/pmqos-static.pid
    resolves: CVE-2013-1820
  - fixed diskdevstat labels
    resolves: rhbz#885080
  - quiet errors when remounting FS with nobarriers
    resolves: rhbz#838512


author: Matěj Cepl <mcepl@redhat.com> - 7.5-7
changelog:
  - Fix BuildRequires ... xbitmaps-devel does not exist anymore (RHBZ #744751)
  - Upgrade to the latest upstream iceauth, rgb, sessreg, and xrandr


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-7
changelog:
  - xkbcomp 1.0.5
  - Remove xkbcomp-1.0.4-open-less.patch.
  - xkbcomp-1.0.5-dont-overwrite.patch: Don't overwrite groups unnecessarily.


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.1-7
changelog:
  - Translation updates for Red Hat Supported Languages (RH bug #575674).
  - This also includes the fix for the or_IN crasher (RH bug #578094).


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-21
changelog:
  - Added signalstate patch, which fixes compilation with
    NetworkManaged-devel headers installed. Resolves 537064.
    Related: rhbz#543948


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-22
changelog:
  - Rewrote initscript to become closer to Packaging:SysVInitScript
    Fedora guildeline. The change also fixes bug 523913


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-25
changelog:
  - Moved /sbin/ypbind to /usr/sbin/ypbind, as the package
    depends on several utilities from /usr (selinuxenabled,
    rpcinfo, ypwhich), and /usr/lib/libdbus-glib-1.so
    Resolves: #593271
  - Fixed previous ChangeLog entry header


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-26
changelog:
  - Fix "dereferencing type-punned pointer will break strict-aliasing rules"
    GCC warning
    Resolves #596221


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-30
changelog:
  - Modified the chkconfig priorities from 27/73 to 24/76, to move ypbind
    before netfs. This is useful for hosts that mount NFS file systems
    that reside on a server which is resolvable through NIS.
    Resolves: #647495


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.2.29-29
changelog:
  - Ignore time skew when ordering transactions.
  - Resolves: rhbz#809373
  - Fix _conv_pkg_state
  - Resolves: rhbz#809392


author: James Antill <james.antill@redhat.com> - 3.2.29-31
changelog:
  - new obs. code, for localpkgs etc.
  - Resolves: rhbz#674756
  - plugins can now set a "failure" exit-code, on "success".
  - Resolves: rhbz#684859
  - rebase skip-broken code.
  - Resolves: rhbz#727553
  - merge "identical" updateinfo errata from different repos.
  - Resolves: rhbz#737173
  - Add man page documentation for yum-cron.
  - Resolves: rhbz#744335
  - new installonly provides, for kernel/vms.
  - Resolves: rhbz#748054
  - history stats traceback on empty file.
  - Resolves: rhbz#802462
  - yum man pages typo fixes.
  - Resolves: rhbz#809117
  - updateinfo cache fix.
  - Resolves: rhbz#815568
  - reinstall args. bad.
  - Resolves: rhbz#819522
  - Fix confusion when we try to restore N kernels at once.
  - Resolves: rhbz#820674
  - Fix printing the obsoleters message.
  - Resolves: rhbz#834159
  - Multilib upgrade failure message.
  - Resolves: rhbz#840543
  - Verify options before doing anything.
  - Resolves: rhbz#880968
  - Fix problem with ui_nevra_dict and too many args for format string.
  - Resolves: rhbz#858844


author: James Antill <james.antill@redhat.com> - 3.2.29-36
changelog:
  - Speedup to_xml, and thus. createrepo.
  - Resolves: rhbz#878335
  - Don't throw an error with yum history list when there is no history.
  - Resolves: rhbz#802462
  - Verify options before doing anything (fix BZ references).
  - Resolves: rhbz#880968


author: James Antill <james.antill@redhat.com> - 3.2.29-37
changelog:
  - Move basename checking for nss snafu.
  - Resolves: rhbz#885159
  - Merge "identical" updateinfo errata from different repos.
  - Resolves: rhbz#737173


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.9.gite9db007b
changelog:
  - Add a timestamp to the metrics.
  - Fix a typo in MemoryAllocatedToVirtualServers metric
    (https://bugzilla.redhat.com/show_bug.cgi?id=532070#c7)
  - /etc/sysconfig/vhostmd: Use libvirt default URI
    (https://bugzilla.redhat.com/show_bug.cgi?id=537828)
  - /etc/init.d/vhostmd: If using libvirt's default URI, then pass
    the root URI to vhostmd (the default URI changes in some circumstances
    when vhostmd switches to the non-root user).


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-2
changelog:
  - Fix the PagedOutMemory and PagedInMemory stats to report MB instead
    of pages (fixes supplied by Joachim Schneider).


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-2.6
changelog:
  - Security: Set supplemental groups correctly when dropping privileges
    resolves: rhbz#741289
  - Remove pagerate.pl Perl script (749875).
  - Delete PID file in stop action
    resolves: rhbz#766674


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-9
changelog:
  - Resolves: #785084 - vsftpd can not handle square brackets in ls
  - Resolves: #785061 - vsftpd child terminates when listing files with UID/GID larger than signed in
  - Resolves: #717411 - Connection failures during upload using PORT not handled cleanly
  - Resolves: #752954 - Disabling Reverse DNS lookups in VSFTPd
  - Resolves: #745133 - vsftpd: documentation for 'max_per_ip' default setting is wrong
  - Resolves: #765757 - SITE HELP offers CHMOD even when it is disabled/unavailable
  - Resolves: #701300 - vsftpd.conf lists incorrect default value for xferlog_file
  - Resolvse: #785642 - Invalid error recovery in vsf_privop_pasv_listen()


author: Lon Hohberger <lhh@redhat.com> - 5.5-8
changelog:
  - Add watchdog.d handling
    (bz657750-1-add-watchdog-d.patch)
    This makes the scripts in /etc/watchdog.d behave slightly differently
    (bz657750-2-script-handling.patch)
    Add test-directory to configuration file
    (bz657750-3-add_test_directory_to_configuration_file.patch)
    Log which binaries fail
    (bz657750-4-Log-binary-names.patch)
    Resolves: rhbz#657750


author: Lon Hohberger <lhh@redhat.com> - 5.5-9
changelog:
  - Add man page information on test-directory
    (bz657750-5-man_page_information_for_test_directory.patch)
    Resolves: rhbz#657750


author: Richard W.M. Jones <rjones@redhat.com> - 5.5-10
changelog:
  - Import watchdog initscript from Rawhide, includes some LSB-compliance
    fixes.
    Resolves: rhbz#584701


author: Matthias Clasen <mclasen@redhat.com> - 1.1.15.3-1
changelog:
  - Update to 1.1.15.3, more crash fixes and important media player fixes
  - See https://lists.webkit.org/pipermail/webkit-gtk/2009-October/000047.html


author: Peter Hatina <phatina@redhat.com> 1.8.8-6
changelog:
  - security patches
  - Resolves: CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-3557


author: Peter Hatina <phatina@redhat.com> 1.8.10-1
changelog:
  - upgrade to 1.8.10
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.8.10.html
  - Related: #711024


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-7
changelog:
  - Fix xfs_metadump hang (#730886)
  - mkfs.xfs: don't increase agblocks past maximum (#738279)
  - Fix double reporting of quota values (#749435)
  - xfs_quota: handle malformed entries in mtab (749434)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-8
changelog:
  - mkfs.xfs: better handle misaligned 4k devices (#836433)
  - mkfs.xfs: default to physical sectorsize (#836433)
  - mkfs.xfs: clarify errors when specified AG size is too large (#730433)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-11
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#961501)
  - xfs_io: Update  man page to include chproj, lsproj (#962394)
  - xfs_io: Remove broken setfl command (#962394)
  - xfs_logprint: Handle multiply-logged fields (#962397)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#964216)
  - xfs_repair: avoid segfault with ag_stride (#93904)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.4.1567-2
changelog:
  - updated to 1.16.4
  - rediffed/updated patches
  - splitted some subpackages (c++, client) out of main package as they
    introduce additional dependencies (c++, curl)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.24-1200.1840
changelog:
  - updated to 1.16.24
  - rediffed patches
  - added patch fix handling of wrong certificates (Nikola Pajkovsky)
  - added support for $XMLRPC_TRACE_CURL env (John Dennis)
  - fixed 'xmlrpc-c-config --help' output (#531910)
  - build xmlrpc_pstream tool


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.2
changelog:
  - backported GSSAPI delegation from upstream version 1.27.04 with strong attention
    to libxmlrpc++ client ABI backward compatibility (#719945)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1200.1840.3
changelog:
  - Fix memory leak in libxmlrpc_client.so (#741641)
  - Remove autoconf variables from pkgconfig files that are not used (#653702)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.16.24-1209.1840
changelog:
  - fixed various RpmDiff warning messages about missing sub-packages requires
  - added Requires libcurl to the client/apps packages (.so libraries needed)
  - specified BuildRequires curl-devel version for CURLOPT_GSSAPI_DELEGATION option
  - fix & increase release number (svnrev should be after N-V-R)


author: Adam Jackson <ajax@redhat.com> 6.9.3-4
changelog:
  - Disable EXA and DRI, use ShadowFB by default, and don't gratuitously disable
    Render when using ShadowFB. (#860676)


author: Adam Jackson <ajax@redhat.com> 1.4.13-6
changelog:
  - Fix rendering corruption on RANDR-enabled setups (#814381)
  - Fix display setup on G200ER (#810224)


author: Adam Jackson <ajax@redhat.com> 1.6.1-10
changelog:
  - mga-1.6.1-char-cell-modes.patch: Filter out modes whose horizontal timings
    aren't character-cell aligned on G200SE and friends (#894959)


author: Ben Skeggs <bskeggs@redhat.com> 0.0.16-9.20110107gitb795ca6
changelog:
  - rebase to today's git snapshot
  - nouveau-exa-no-pa_fa.patch: dropped, upstream
  - nouveau-zfill-fallback: dropped, upstream
  - nouveau-server-regen: dropped, upstream
  - Resolves: rhbz#633226


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.1-1
changelog:
  - synaptics 1.4.1 (#713861)
  - drop patches, all merged upstream
  - Revert coasting enabled by default. This is a behaviour change.
  - Revert two-finger emulation by default. Behaviour change.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-7
changelog:
  - Merge from F18 (#835257)
    - disable xorg.conf, enable HAL files instead
    - disable smooth scrolling
    - disable coasting by default to maintain RHEL6.0 behavior


author: Peter Hutterer <peter.hutterer@redhat.com> 0.13.0-2
changelog:
  - Re-add hal as Requires (related #752642)
  - Update util-macros requirement to 1.8, that's really what we need.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.13.0-3
changelog:
  - Initialize the right number of button properties.
  - Allow -1 as pressure threshod reset value. 
  - Remove now unused patches


author: Peter Hutterer <peter.hutterer@redhat.com> 0.16.1-2
changelog:
  - Fix crash for xorg.conf devices with same device node (#862939)
  - Fix spurious cursor jump when using I5 express keys (#859851)


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-2.20130401git81aadb8
changelog:
  - Silence rpmlint warning about ldconfig
  - Only install libglamor.so in devel package.
  - Adding COPYING and README as doc


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-3.20130401git81aadb8
changelog:
  - Remove comment rather than investigating Xorg mess as running ldconfig can't be harmfull.
  - Fix devel package dependency.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-19
changelog:
  - Fix bad mouse offset when crossing Xephyr screens (#991077)
  - Fix doubling of mouse coords in multi-screen setups (#1004241)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-20
changelog:
  - Fix broken Xorg -configure (#1016854)
  - CVE-2013-1940: Fix xf86FlushInput() to drain evdev events too (#950438)
  - CVE-2013-4396: Fix use-after free in ImageText requests (#1014561)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: xorg-x11-server.ini
  -->  Config file for automated patch script
  - Added Source: xorg-x11-server-SPEC-remove-TUV.patch
  -->  Redirect support requests to SL
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl6\2
  -->  Modify release string to note changes


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Martin Stransky <stransky@redhat.com> - 17.0.9-2
changelog:
  - Added patch for rhbz#983488 - Resizing window changes window
    size to 0 with third party window manager.


author: Honza Horak <hhorak@redhat.com> - 2.19-19
changelog:
  - Added passwd.adjunct support in yppasswdd to recognize 
    password format correctly when changing password using yppasswd
    Resolves: #699667
  - Fix strcat on uninitialized memory in yppasswdd
    Resolves: #699675


author: Honza Horak <hhorak@redhat.com> - 2.19-20
changelog:
  - changed shadow patch to allow different number of columns 
    in passwd.adjunct file than in shadow file
    Resolves: #699667


author: Honza Horak <hhorak@redhat.com> - 2.19-22
changelog:
  - hide passwords in syslog when using external script
    to update user's data using yppasswdd
    Resolves: #734494


author: Honza Horak <hhorak@redhat.com> - 2.19-23
changelog:
  - fix memory leak when malformed request is received
    Resolves: #845283
  - Fixed returned value when all entries requested and no such
    map exists
    Resolves: #790812


author: Pat Riehecky <riehecky@fnal.gov> 2-4.3
changelog:
  - The temporary config file generated by the script is now used
    more safely
  - An augeas lense is now provided
  - A sample notification script is provided to aid in informing specific users
    of particular changes


author: Pat Riehecky <riehecky@fnal.gov> 2-6.2
changelog:
  - Bugfix from Phil at UNIXADM for extra '\n' causing unwanted emails
  - now with consistent use of [[ and ]] in the script


author: Pat Riehecky <riehecky@fnal.gov> - 6-3
changelog:
  - Switched out the gpg key lines for our current key list
     - added sl6 key
     - added CERN
     - removed Troy


author: James Antill <james.antill@redhat.com> - 4.3.10-5
changelog:
  - Change invocation as "zsh foo" to search the path by default.
  - Add new option PATH_SCRIPT for old behaviour.
  - Resolves: rhbz#612685
  - Solve defect in emulation of ksh with math substituion.
  - Resolves: rhbz#657300


author: James Antill <james.antill@redhat.com> - 4.3.10-7
changelog:
  - Change {NAME:OFFSET:LENGTH} substitution feature to ignore KSH_ARRAYS option.
  - Fixup tests.
  - Resolves: rhbz#820530


author: Frank Nagy <nagy@fnal.gov> 4.0-1
changelog:
  - Changed to krb5.conf V4.0 with expanded KDC list, removed
  - Kerberos4 ticket generation from login/pam sections and
  - other minor changes.


author: Frank Nagy <nagy@fnal.gov> 4.1-1
changelog:
  - Added permitted_enctypes line to [libdefaults] section
  - Removed obsolete AD nodes from [domain_realms]


author: Frank Nagy <nagy@fnal.gov> 4.3-1
changelog:
  - V4.2 added PSC.EDU and EXTENCI.ORG realms to the [realms] section
  - and V4.3 changed the KDC defintions for the CERN.CN realm


author: Frank Nagy <nagy@fnal.gov> 4.4-1
changelog:
  - Correct spellings and phrasing in this file, config-xinetd and
  - config-services.  Fixed order of paramter statements in the
  - [capaths] section of v4.4 of krb5.conf


author: Frank Nagy <nagy@fnal.gov> 4.5-1
changelog:
  - Added Nova Far Detector KDC to search list, edit and re-format
  - SysAdmin HowTo instructions for a local KDC search list and
  - set so krb5-fermi-config and krb5-fermi-krb5.conf conflict with
  - each other so only one gets installed


author: Frank Nagy <nagy@fnal.gov> 4.6-1
changelog:
  - Update krb5.conf to v4.6 updating list of Accelerator Division servers
  - Fixed bug in make-cron-keytab so it will take error exit if run
  - in shared account via ksu rather than ssh into the account.


author: Troy Dawson <dawson@fnal.gov> 1.1-1
changelog:
  - Putting the changes at the beginning of the config file
  - Changed the host to have 131.225.* *.fnal.gov *soudan.org


author: Pat Riehecky <riehecky@fnal.gov> 3-0.0
changelog:
  - Almost totally re-written because of bugs with virtulization
  - Moved NetworkManager to trigger
  - Moved dhclient to trigger
  - Added dnsmasq trigger
    this rpm enables bind, but if you want instead dnsmasq it should be configured
  - Now requires selinux packages, selinux enforcement is however optional
    more info in README.selinux
  - Using links to help make it obvious which file bind is reading
  - Modified config to use views to help reduce possible non localhost use in bind
  - Switched from a dynamic config to a static one for deploy and copy to 'doc'
    it is configured after the style of SLF5 caching-nameserver but with
    the approach from SLF6 bind.  It ballences security and readibility.
  - Obsolete caching-nameserver for 5.x its not in 6.x and integration was messy
     this lets us unify between 5 and 6
  - Set sane looking defaults rather than ad-hoc creation of forwarder list
     + 131.225.0.254
     + 8.8.8.8


author: Pat Riehecky <riehecky@fnal.gov> 3-0.1
changelog:
  - fixed a minor chmod problem
  - switched search from /etc/sysconfig/network-scripts/ifcfg-eth* to /etc/sysconfig/network-scripts/ifcfg-*|grep -v ifcfg-lo to account for strangly named cards


author: Pat Riehecky <riehecky@fnal.gov> 3-0.2
changelog:
  - try and hardlink /etc/named.rfc1912.zones before soft link
  - moved the blocks which actually start the named server to the 'fresh install only' space
  - made the /etc/resolv.conf edit smarter so that it doesn't do anything if named isn't running


author: Pat Riehecky <riehecky@fnal.gov> 3-0.3
changelog:
  - clean up stray /etc/named.conf link
  - added nscd restart
  - made smarter about when it starts bind and when it doesn't


author: Pat Riehecky <riehecky@fnal.gov> 3-1
changelog:
  - moved most of the config work to a trigger on 'bind'
    this way the config is validated on each update.  This should
    keep things working longer through updates
  - made nscd restart silent (oops)


author: Pat Riehecky <riehecky@fnal.gov> 3-1.1
changelog:
  - Yet another check on nscd, this really shouldn't start it unless you want it
  - Standardized the trigger interface a bit further
  - Updated grep checks, thanks Steve Timm


author: Pat Riehecky <riehecky@fnal.gov> 3-1.2
changelog:
  - nscd process searches now seach by process ownership.
  - resolv.conf settings are more accuratly preserved.


author: Pat Riehecky <riehecky@fnal.gov> 3-1.3
changelog:
  - yet another update to the resolv.conf preservation
  - fixed the NetworkManager scripts so that they correctly clean up upon removal


author: Pat Riehecky <riehecky@fnal.gov> 3-1.3.1
changelog:
  - better checks for upgrades of various things
  - clearer doc on what triggers are running off of which events and why
  - fixed the NetworkManager scripts to only modify controlled interfaces


author: Pat Riehecky <riehecky@fnal.gov> 3-1.3.2
changelog:
  - yet another update to the resolv.conf preservation
  - documentation better distributed for 'FRESH install' checks


author: Troy Dawson <dawson@fnal.gov> 4.2.6-1
changelog:
  - added ntpdate to the requirements
  - Changed the step-tickers section to trigger on ntpdate
  - Removed the change that added -A to /etc/sysconfig/ntpd


author: Tyler Parsons <tparsons@fnal.gov> 4.2.6-2
changelog:
  - added secondary and tertiary time servers to ntp.conf (131.225.17.150 and 131.225.8.120)
  - changed references to servers from (131.225.8.200 and 131.225.17.200) to (131.225.17.150 and 131.225.8.120)


author: Connie Sieh <csieh@fnal.gov> 4.2.6-3
changelog:
  - Modified ntpd-fermi code from "RH-Firewall-1-INPUT" to "INPUT" as TUV
    Does not use "RH-Firewall-1-INPUT" anymore.


author: Pat Riehecky <riehecky@fnal.gov> 4.2.6-4
changelog:
  - switched to a define based ntp server list
  - updated ntp server list
  - made version independent, now works on SLF5 and SLF6
  - added comments to help explain the configuration options


author: Pat Riehecky <riehecky@fnal.gov> 4.2.6-5
changelog:
  - switched to 'bash' for triggers and post to avoid errors
  - updated requires list to get things more in order


author: Troy Dawson <dawson@fnal.gov> 0.9.9-1
changelog:
  - Client now points to fortytwo as the server
  - cronjob now moved to z_... to get a more random time


author: Troy Dawson <dawson@fnal.gov> 0.9.9-6
changelog:
  - Turned off debugging, check to see if we're on fermilab networks
  - Write to a log, and do logrotate
  - Minor fixes to the client to now do --local --xml


author: Troy Dawson <dawson@fnal.gov> 0.9.9-7
changelog:
  - Updated cron to check to see if it can access the server
    and goes through a list of domains to see if it's at Fermilab


author: Connie Sieh <csieh@fnal.gov> 0.9.9-14
changelog:
  - replaced "ifconfig" to "ip addr" in z_ocs.inventory.client.cron
  - ifconfig did not work with infiniband


author: Pat Riehecky <riehecky@fnal.gov> 0.9.9-15
changelog:
  - added missing dependency on /bin/mail
  - added /usr/lib/perl5/vendor_perl to @INC for non SLF systems (patch)
  - added /usr/share/perl5/vendor_perl to @INC for non SLF systems (patch)


author: Pat Riehecky <riehecky@fnal.gov> 0.9.9-16
changelog:
  - made /etc/sysconfig/ocsinventory-fermi for control values
  - merged Connie's 'ip addr' patch for the cronjob
  - added requirement for iproute and iputils
  - added extra check for DNS resolution
  - added syntax check for cronjob at build time


author: Troy Dawson (dawson@fnal.gov) 1.0-3
changelog:
  - First round - Changed everything over from zz_pine_user_domain
  - changed the sed's to the more compact way of doing things.


author: Pat Riehecky <riehecky@fnal.gov> 5.3-2
changelog:
  - added policycoreutils dependency (for restorecon)
  - added restorecon on /root/.k5login to get selinux context right
      should be krb5_home_t


author: Pat Riehecky <riehecky@fnal.gov> 5.3-3
changelog:
  - added xorg-x11-xauth dependency so X11 forwarding works out of the box
  - returned UsePrivilegeSeparation to default (yes), since we've no cryptocard for 6
  - moved to augeas based configuration to preserve some user options


author: Pat Riehecky <riehecky@fnal.gov> 2.1-2
changelog:
  - fixed typo where on reinstall of the rpm, the sed statement didn't match and therefore nothing happened


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-11
changelog:
  - Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
  - clamav-milter config cleanups.


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-12
changelog:
  - Move deletion of /var/lib/clamav/mirrors.dat to db package.
  - Don't enable NotifyClamd in freshclam config and cronjob, as not
    everybody is running clamd. Running clamd's will anyway notice
    when db is updated.


author: Jan-Frode Myklebuust <janfrode@tanso.net> - 0.97.2-3
changelog:
  - include updated clamd-wrapper which get the PidFile setting from the
    service configuration file. 
  - updated to 0.97.2
  - Build-require xz
  - CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)


author: Nick Bebout <nb@fedoraproject.org> - 0.97.5-1
changelog:
  - Upgrade to 0.97.5
  - Fix CVE-2012-1419 clamav: specially-crafted POSIX tar files evade detection
  - Fix CVE-2012-1457 clamav: overly long length field in tar files evade detection
  - Fix CVE-2012-1443 clamav: specially-crafted RAR files evade detection
  - Fix CVE-2012-1458 clamav: specially-crafted CHM files evade detection
  - Fix CVE-2012-1459 clamav: specially-crafted length field in tar files evade detection
  - Ship local copy of virus database; it was removed by accident from 0.97.5 tarball


author: Troy Dawson <dawson@fnal.gov> 1.0-1
changelog:
  - First go round
  - Remove each part individually so that this can be more general and work 
    on more releases.


author: Pat Riehecky <riehecky@fnal.gov> 1.0-7
changelog:
  - Updated logic for states where LANG is an unknown to avoid
    saying the work is done when it actually isn't
  - Added extra logic for providing a notice when the config can't be parsed
  - Ensure permissions are what you would expect for /etc/sysconfig/i18n


author: Dag Wieers <dag@elrepo.org> - 8.3.8-2
changelog:
  - Create block devices in %post.
  - Unload module after stop to warn user that it may be used.
  - Better heartbeat integration (using group haclient).


author: Connie Sieh <csieh@fnal.gov> 1.0-0.6
changelog:
  - Added code to make sure the service was running before it was stopped
  - Added code to make sure the service is actually installed before chkconfiging


author: Pat Riehecky <riehecky@fnal.gov> 1.0-3
changelog:
  - Sets up mod_userdir with no indexes too
  - Now leaves a comment behind saying what it did
  - Now archives httpd.conf before making the edits


author: Pat Riehecky <riehecky@fnal.gov> 1.0-4
changelog:
  - Comment addition is now in its own block so that failure
     to leave a comment doesn't prevent the config changes
     from happening.


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.8.0-1
changelog:
  - Upstream 1.8.0 (new features)
  - Exchange Calendar integration
  - New and updated translations
  - Bugfixes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.9.0-1
changelog:
  - Upstream 1.9.0:
          - Contributed File transfer functionality. File encryption is supported.
          - NTLMv2 and NTLMv2 Session Security support
          - Implemented SIP Authentication Extensions protocol version 4 and 3
          - another shot at presence update problems
          - fix crash caused by uninitialized security contexts
          - Updated translations: ru, de, es, pt_BR
          - Bugfixes and crash fixes
  - BR libpurple >= 2.4.0
  - Split into purple-sipe and pidgin-sipe
  - Other spec fixes to match upstream's spec file


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.9.1-1
changelog:
  - Upstream 1.9.1:
          - Fix Kerberos authentication for unix platforms (broken in 1.9.0)
          - Bugfixes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.10.1-1
changelog:
  - Upstream 1.10.1:
          - Fixes to build against pidgin-2.7
          - Initial support for Office 2007+ "Access Levels"
          - SVG icon artwork
          - Miscellaneous bugfixes


author: Pat Riehecky <riehecky@fnal.gov> - 6.2-0.1.rolling
changelog:
  - Added EULA licence file
  - Removed Troy's key from the repos
  - Added CERN's key for if they start building packages for us
  - Added more abstraction to make making new release rpms easier


author: Connie Sieh (csieh@fnal.gov) 6.0
changelog:
  - First version for SLF 6 and thus changed the version to 6.0 series
  - By definition no upgrades from SLF 4 or 5 so new version should be ok
  - Since we are going to make everything immutable then just going to add the fil


author: Troy Dawson <dawson@fnal.gov> 5x-1-4.SL
changelog:
  - Added comments in yum.conf for installonlyn
  - Changed flash.repo to adobe.repo
  - Changed repo's to use http first, and then try ftp


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-0.3.b37cbb1b036c.hg
changelog:
  - Make use of the uname/gname variables
  - Use global instead of define for variables
  - Remove user/group creation.  This is handled in cluster-glue
  - Add obsoletes directive for gui subpackage which is no longer supplied
  - Move ldirectord subpackage to resource-agents
  - Use the full configure macro
  - Update to upstream version b37cbb1b036c
    + LVSSyncDaemonSwap syncid
    + remove the remaining OCF RA which live in the agents repository
    + High: RA: IPv6addr: support for new nic and cidr_netmask parameters in the OCF RA
    + Low: Build: findif moved to agents.
    + Low: Build: move ldirectord to agents.
    + Low: Build: remove a few hb_report artifacts.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-0.4.0daab7da36a8.hg
changelog:
  - Make use of the specversion variable
  - Add explicit dependancy on cluster-glue-libs to prevent yum from trying to use 
    the deprecated heartbeat-{pils|stonith} packages
  - Update to upstream version 0daab7da36a8
    + Clean up configure. Source most variables from cluster-glue to ensure build consistency


author: Frank Nagy < nagy@fnal.gov > 2.1-9
changelog:
  - Another set of fixes for the permissions tests and fixes
  - Do stat and chmod on /usr/bin files, not symlinks
  - Correct kdestroy and v4rcp permissions (no setuid)


author: Frank Nagy < nagy@fnal.gov > 2.1-14
changelog:
  = Re-recorrect z_krb5.csh so path varialbe is setup with
  - correct word list.  Shell will automaintian PATH variable
  - to matxh


author: Pat Riehecky <riehecky@fnal.gov> 2-4.1
changelog:
  - added mailx dependency as it was missing
  - added /etc/cron.daily dependency as it should ensure cron is installed
     I doubt it would be missing, but since it is required may as well require it


author: Pat Riehecky <riehecky@fnal.gov> 2-4.2
changelog:
  - Added patch from Kevan Benson for the 'PRERUN' and 'POSTRUN' options
  - Added additional run option of ADDONRUN so that PRE and POST can be
    mirrors while ADDONRUN can be used for an un-paired script
  - Added yum-security-plugin as a requirement for the package, I don't
    know how else to ensure it is installed if the optional behavior is
    enabled by the end user
  - Added syntax test to the creation process so that we are confident it
    always has valid syntax
  - Added optional use of yum-security-plugin, if we get that working


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  For SLF we need fermi-addons added and installed
    Spec change: make sure the addons repo gets installed
  - Added patch yum-autoupdate-SPEC-add-addons-repo-to-install.patch
  - Added patch yum-autoupdate_add_addons_repo.patch
    create the addons repo
  - Added patch yum-autoupdate_install_from_addons.patch
    make sure we use the addons repo
  - Prevented application of patch yum-autoupdate-SPEC-add-addons-repo-to-install.patch


author: Frank Nagy <nagy@fnal.gov> 1.2-6.slf6
changelog:
  - Add test in %triggerun to prevent undoing what %triggerin
  - did when installing update of this package


author: Frank Nagy <nagy@fnal.gov> 1.3-1.slf6
changelog:
  - Replace aklog symlink with executable in preparation for
  - upgrade of server code to support compound principals


author: Frank Nagy <nagy@fnal.gov> 1.0-1
changelog:
  - created from krb5-getcert made by Troy Dawson and changed to be a
  - complete package with utilities from Mozilla and located in /usr/krb5


author: Frank Nagy <nagy@fnal.gov> 1.0-2
changelog:
  - Fixed file ownerships and permissions, new get-cert.sh script
  - puts password on .globus/*.pem files


author: Frank Nagy <nagy@fnal.gov> 1.1-2.slf6
changelog:
  - Remove the kx509-512bit client (not rebuilt) and added
  - (x86-32) to openssl, nspr and nss requirements


author: Frank Nagy <nagy@fnal.gov> 1.2-1.slf6
changelog:
  - Incorporated patch from Pat Riehecky to exit if auto-import is
  - selected and Firefox is running to avoid cert8.db corruption.
  - Extended code to check for Seamonkey running as well.


author: Frank Nagy <nagy@fnal.gov> 2.0-1.slf6
changelog:
  - Rebuild kx509 to write certificate directly to file as developed
  - under Mac OS X Lion and ported back to SLF5 and now SLF6.  Modified
  - get-cert.sh to remove call to kxlist


author: Frank Nagy <nagy@fnal.gov> 2.1-1.slf6
changelog:
  - Added -q (quiet) and -o (output file spec) options
  - to v2.1 of kx509.  Modified kxlist to just exit.


author: Philip J Perry <phil@elrepo.org> - 6-5
changelog:
  - Add requires for kernel to prevent installing on wrong dist.
  - Fix name of Extras repository
    [http://elrepo.org/bugs/view.php?id=339]


author: Pat Riehecky <riehecky@fnal.gov> - 6-5.1.slf6
changelog:
  - exclude openafs as it is in the release
  - exclude elrepo-release so we don't discard this for enabled repos
  - require yum-plugin-protectbase
  - disabled by default


author: Dag Wieers <dag@wieers.com> - 0.3.5-1
changelog:
  - Add 'protect = 0' by default to yum configuration.
  - Don't import GPG key for older distributions.


author: Nathanael Noblet <nathanael@gnat.ca> - 1.10-0.2
changelog:
  - Cleaned up the directories and init script names
  - Added Requires(postun)
  - Fixed logrotate script


author: Nathanael Noblet <nathanael@gnat.ca> - 1.10-1
changelog:
  - Use integer for release ver
  - Unified Requires(foo) style
  - Added missing Requires
  - Consistent macro useage
  - Remove dot from initscript filename


