Maintainer Paul Wolneykien in the sisyphus branch: Information
Maintainer name: Paul Wolneykien (manowar)
Built source packages in this branch: 98
Last changes
Jun 10, 2024, 06:55 PM
#350789 sent by Paul Wolneykien
Network monitoring application
June 10, 2024 Paul Wolneykien:
- Additionally, pre-define "global-commands" zone with node setup CLI command. - Added script "icinga2-register-host" to setup the node via Icinga2 Director self-service API.
Jun 6, 2024, 07:02 PM
#350476 sent by Paul Wolneykien
Network monitoring application
June 6, 2024 Paul Wolneykien:
- Fix: Package common doc files into the main package. - Include files from icinga2-bin package into the main package. - Pre-define the "global-commands" zone (patch).
Jun 6, 2024, 06:55 PM
#350489 sent by Paul Wolneykien
A daemon to synchronize ApiUser entries with Host agents on an Icinga 2 instance
March 30, 2024 Paul Wolneykien:
- Initial build for Sisyphus.
Jun 3, 2024, 01:37 PM
#350255 sent by Paul Wolneykien
Osec-based integrity checking script and settings
June 3, 2024 Paul Wolneykien:
- Add new sender.conf to define logging properties. - Generate and install logrotate configuration (100 weekly). - Add profile name to log tag. - Write last log to /var/log/integalert/lastlog and continuous log to /var/log/integalert/integalert.log - Install and package the special failing targets.
May 30, 2024, 10:26 PM
#349982 sent by Paul Wolneykien
IMA/EVM integrity check
May 30, 2024 Paul Wolneykien:
- Use 0x80000002 as the default EVM mode. - Automatically enable --with-evm for integrity-sign --verify if EVM is enabled in the kernel. - Fix: Disable autoreq for integrity initrd script. - Added notes about new features (README and man). - Pass explicit EVM option via state file to Stage II. - Fix: Reconfigure bootloader on each stage. - Fix: Delete old /var/lib/integrity_update/default. - Don't touch filesystem immutable bit in EVM mode. - Added option --without-evm. - Run make-initrd with normal log output. - Allow to cancel loading the system if IMA policy fails to load. - Check loading of IMA and EVM policy at system boot (ima-check.service). - Load IMA policy at initrd stage only when ima_appraise=enforce. - Run make-initrd with normal log output. - Fixed OpenSSL GOST module path when copying to initrd. - Fix: Abort on some make-initrd errors.
May 27, 2024, 01:59 PM
#349533 sent by Paul Wolneykien
IMA/EVM integrity check
May 27, 2024 Paul Wolneykien:
- Fix file signing log output: stderr or file. - Fix log of errors when signing the files. - Write log to /var/log/integrity-sign.log by default. - Add --log-stderr option.
May 23, 2024, 01:25 PM
#348721 sent by Paul Wolneykien
A wrapper to run tests against ClickHouse server
April 18, 2024 Paul Wolneykien:
- Add support to test UDFs and with UDFs. - Add configuration parameters to the ClickHouseTestServer() constructor.
May 22, 2024, 04:27 PM
#348527 sent by Paul Wolneykien
Integrity event notifier
May 22, 2024 Paul Wolneykien:
- Switch to multilog(8) for log rotation.
May 22, 2024, 02:34 PM
#348652 sent by Paul Wolneykien
IMA/EVM integrity check
May 22, 2024 Paul Wolneykien:
- Fix: Combine x509 certificate and private key in one file for signing.
May 21, 2024, 11:21 PM
#348610 sent by Paul Wolneykien
Daemontools by DJB
May 21, 2024 Paul Wolneykien:
- Move all programs and manual pages to the separate 'daemontools-utils' package. - Use %_unitdir macro to install and package unit files.
May 17, 2024, 05:04 PM
#348308 sent by Paul Wolneykien
IMA/EVM integrity check
May 17, 2024 Paul Wolneykien:
- Fixed manpage sections. - Fix: Explicitly insert GOST kernel modules for Streebog hashes. - Fix: Require /usr/bin/chattr. - Added GOST_PARAMSET option (undocumented). - Fix and secure shell code mostly related to ignoring -e option. - Fix: Output file names to file log. - Fixed notes about /var/log/integrity-sign.log.
May 16, 2024, 02:22 PM
#348177 sent by Paul Wolneykien
ALT Linux configurator engine
May 15, 2024 Paul Wolneykien:
- Allow a hostname to start with a digit (RFC 1123).
May 6, 2024, 05:50 PM
#343962 sent by Paul Wolneykien
Replace
Python Icinga 2 API
April 2, 2024 Paul Wolneykien:
- Wrap the event stream generator into a function in order to run the initialization code immediately (patch).
Nagios status monitor for the desktop
deleted python3-module-icinga2api
May 6, 2024 Paul Wolneykien:
- package removed
Apr 30, 2024, 01:45 PM
#347209 sent by Paul Wolneykien
GnuPG Made Easy is a library designed to make access to GnuPG easier for applications
April 30, 2024 Paul Wolneykien:
- Enable tests.
Apr 30, 2024, 01:25 PM
#345850 sent by Paul Wolneykien
GnuPG Made Easy is a library designed to make access to GnuPG easier for applications
April 30, 2024 Paul Wolneykien:
- Fixed FTBFS by adding python3(setuptools) to build dependencies.
Apr 4, 2024, 04:51 AM
#344323 sent by Paul Wolneykien
A wrapper to run tests against ClickHouse server
April 4, 2024 Paul Wolneykien:
- Disable build test on arches where clickhouse-server is not available.
A lightweight plugin for auditd daemon to send audit data to a Clickhouse database
April 4, 2024 Paul Wolneykien:
- Disable database build test on arches where clickhouse-server is not available.
Mar 28, 2024, 07:27 PM
#343850 sent by Paul Wolneykien
Osec-based integrity checking script and settings
March 28, 2024 Paul Wolneykien:
- Use 'qm block' command in PVE triggers.
Mar 19, 2024, 02:00 PM
#343042 sent by Paul Wolneykien
IMA/EVM integrity check
March 19, 2024 Paul Wolneykien:
- Updated README.
Mar 19, 2024, 01:52 PM
#342514 sent by Paul Wolneykien
Replaced_by_ima-evm-integrity-check
Makefile-style config file editing shell library
March 18, 2024 Paul Wolneykien:
- Fixed argument checking in the functions. - Fixed the code as suggested by shellcheck.
deleted ima-integrity-check
IMA/EVM integrity check
March 19, 2024 Paul Wolneykien:
- Make integalert dependency optional. - Fixed exit when integalert is disabled.
Mar 12, 2024, 06:31 PM
#342576 sent by Paul Wolneykien
A reference implementation of the Russian GOST crypto algorithms for OpenSSL
March 12, 2024 Paul Wolneykien:
- Fix: Require OpenSSL >= 3.0.0 to build.
Mar 12, 2024, 02:12 PM
#342552 sent by Paul Wolneykien
Osec-based integrity checking script and settings
March 12, 2024 Paul Wolneykien:
- Check and lock only the nodes in /etc/pve/qemu-server. - Don't exit a trigger if some nodes failed to stop. - Be tolerant to spaces in osec report. - Install the triggers in overwrite mode. - Added lrm_status.tmp.* to exclude list. - Fixed errors in VM triggers.
Feb 21, 2024, 05:02 PM
#341175 sent by Paul Wolneykien
alterator on rails
Feb. 20, 2024 Paul Wolneykien:
- Fixed a typo in the ahttpd.acl.conf(5) manual page. - Configure ahttpd to use TLSv1.3 or higher (closes: 44991).
Feb 15, 2024, 12:26 AM
#340729 sent by Paul Wolneykien
Nagios watch daemon
Feb. 15, 2024 Paul Wolneykien:
- Fix: Added missing 'd-nagwad-nodes' host group.
Feb 14, 2024, 03:51 PM
#340689 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Feb. 14, 2024 Paul Wolneykien:
- Make integalert_vm.service and timer depend on pvedaemon.service and libvirtd.service.
Nagios watch daemon
Feb. 14, 2024 Paul Wolneykien:
- Fixed integalert.regexp: React to messages of different integalert profiles. - signal.md: Fixed reference to `icinga2-doc`.
Feb 13, 2024, 03:05 PM
#340569 sent by Paul Wolneykien
Icinga Web
Feb. 13, 2024 Paul Wolneykien:
- Make icingaweb2-php-pgsql depend on php-pgsql (thx Elena Mishina).
Feb 12, 2024, 10:27 PM
#340535 sent by Paul Wolneykien
JSON for Modern C++ (c++11) ("single header file")
Feb. 12, 2024 Paul Wolneykien:
- Saved upstream URL to the package repo.
Feb 12, 2024, 05:51 PM
#340503 sent by Paul Wolneykien
Icinga Web
Feb. 12, 2024 Paul Wolneykien:
- Fix: Require php-fileinfo (thx Elena Mishina).
Feb 12, 2024, 12:57 PM
#340464 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Feb. 12, 2024 Paul Wolneykien:
- Fix: Make sysinit.target weakly depend on integalert service by default.
Feb 8, 2024, 07:55 PM
#340116 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Feb. 8, 2024 Paul Wolneykien:
- Update: On service failure isolate 'integ-check-failed.target'.
Feb 8, 2024, 05:01 PM
#340010 sent by Paul Wolneykien
An implementation of the Double Ratchet cryptographic ratchet
JSON for Modern C++ (c++11) ("single header file")
A simple async wrapper around CURL for C++
Client API library for the Matrix protocol, built on top of Boost.Asio
Desktop client (QT) for the Matrix protocol
Feb. 7, 2024 Paul Wolneykien:
- New version 0.11.3. - Added ZSH site-functions. - Build with libre2.
Feb 7, 2024, 10:49 PM
#340057 sent by Paul Wolneykien
Nagios watch daemon
Feb. 7, 2024 Paul Wolneykien:
- Updated signal.md: host template names and new packages for installation. - signal.md: Added a note about agent configuration in Icinga Director. - Fix: Automatically added 'icinga' user to the 'nagwad' group ('nagwad-icinga' now depends on 'icinga2' package). - Fix Icinga Director basket: added Icinga Agent settings.
Feb 6, 2024, 05:15 PM
#339939 sent by Paul Wolneykien
Feb 6, 2024, 04:48 PM
#339935 sent by Paul Wolneykien
Nagios watch daemon
Feb. 6, 2024 Paul Wolneykien:
- Fixed template name in signal.md. - Fixed Icinga nagwad templates: run checks with agent (on local or remote hosts).
Feb 6, 2024, 03:04 PM
#339914 sent by Paul Wolneykien
Nagios watch daemon
Feb. 6, 2024 Paul Wolneykien:
- Save copies of events to /run/nagwad/events. - New version of signal.md documentation (Russian). - Minor fix of login.sed. - Package Icinga Director basket as a doc. - Added nagwad Icinga Director basket in JSON format. - Improved description of host group "nagwad-nodes". - Improved display name: "Printing policy violation attempt". - Rename 'audit' filter (and all related files) to 'eperm'. - Remove deprecated 'osec' check. - Added "nagwad-host" host template for Icinga. - Fix: Don't copy README and signal.* manual to the `-nagios` package. - Updated README. - Monitor integrity of file access audit rules. - Fixed audit.regexp: Only SYSCALL messages. - Updated audit.regexp: Added nagwad- prefix. - Skip access errors to /proc/1/environ by default. - Added 10-audit post-process filter which skips events for particular files listed in audit-skip.d. - Allow post-filters to add text to messages. - Match each event with previously registered events and ignore duplicates. - Support event post-processing filters in /etc/nagwad/process-event.d. - Process the journal starting from the current boot. - Process the message with no leading whitespace by default. - check_nagwad: Don't print minor accidental errors.
Feb 2, 2024, 03:31 PM
#339624 sent by Paul Wolneykien
Config module for Icinga 2
Feb. 2, 2024 Paul Wolneykien:
- Removed extra file dependency on /etc/sysconfig/icinga2.
Jan 26, 2024, 02:29 PM
#339075 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Jan. 26, 2024 Paul Wolneykien:
- Cosmetic improvement in the sender script. - Fixed possible errors in the packaged default configuration files (there was a race condition).
Jan 25, 2024, 09:10 PM
#339002 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Jan. 24, 2024 Paul Wolneykien:
- Added migration %post script which makes backup copies of old integalert profiles. - Generate and package the default configuration files for the default ('main'), 'vm' and 'container' profiles. - Added 'configure' action which writes down the configuration files for the specified integalert profile. - Run 'integalert container' from integalert_vm.service.
Jan 25, 2024, 07:28 PM
#338982 sent by Paul Wolneykien
GnuPG Made Easy is a library designed to make access to GnuPG easier for applications
Jan. 25, 2024 Paul Wolneykien:
- Adapted Python packages for different versions of egg-info.
Jan 16, 2024, 01:56 PM
#338288 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Dec. 26, 2023 Paul Wolneykien:
- Make *-trigger-pve package exclusive arch: x86_64 aarch64.
Jan 16, 2024, 02:33 AM
#338255 sent by Paul Wolneykien
Nagios watch daemon
Jan. 15, 2024 Paul Wolneykien:
- Reflect the event status in the name of the signal file and check signal files in order of severity. - Make the signal files accessible by the members of 'nagwad' group. - Fixed %pre: %pre service. - /usr/sbin/nagwad: Source /etc/sysconfig/nagwad. - Make check_nagwad support status lines + the default status command-line argument. - Make nagwad support sed filters. - Removed the obsolete check_osec NRPE plugin. - Update the login.regexp to also support the 'pam_faillock' module. - Update check plugins to report detailed OK and CRITICAL statuses. - Extracted nsca-shell into the separate package. - Make 'nagwad-icinga' and 'nagwad-nagstamon' depend on 'nagwad-service'. - Make 'nagwad-nagios' depend on 'nagios-nrpe'. - Fix: Make 'nagwad-service' not depend on 'osec-cronjob' and 'nagios-nrpe'. - Make nagwad.service to restart on failure. - Make nagwad.service want auditd.service. - Rename 'nagwad-templates' to 'nagwad-nagios' and move nrpe-commands configuration to that package. - Added configuration file for Icinga-2 (package nagwad-icinga). - Rename package 'nagwad-actions' to 'nagwad-nagstamon'. - Make nagwad-service conflict with obsoleted package integ <= 0.4.2-alt2. - Added configuration files for integalert.
Jan 10, 2024, 12:06 PM
#337937 sent by Paul Wolneykien
Remove_deprecated_modules
Bleeding edge Icinga Web 2 libraries
Config module for Icinga 2
deleted icingaweb2-module-ipl
deleted icingaweb2-module-reactbundle
Jan. 10, 2024 Paul Wolneykien:
- package removed
Jan 10, 2024, 12:28 AM
#337918 sent by Paul Wolneykien
Bleeding edge Icinga Web 2 libraries
Config module for Icinga 2
Business Processes Icinga Web 2 module
ReactPHP-based 3rd party libraries
Jan. 9, 2024 Paul Wolneykien:
- Remove circular dependency on icingaweb2-module-director.
Dec 25, 2023, 04:33 PM
#337210 sent by Paul Wolneykien
Nagios watch daemon
Dec. 25, 2023 Paul Wolneykien:
- Fix: Use "usergroup-change" key in audit rules (to match the nagwad filter key).
Dec 7, 2023, 02:34 PM
#332618 sent by Paul Wolneykien
Aladdin JaCarta PKCS#11 library
Dec. 7, 2023 Paul Wolneykien:
- Added armh, i586 and mipsel arches. - Fix: update.sh: Delete old binaries before update. - Fix: Update with excess builds excluded. - Use chrpath to fix the binaries.
Nov 29, 2023, 03:02 PM
#334991 sent by Paul Wolneykien
New_version
GnuPG Made Easy is a library designed to make access to GnuPG easier for applications
Nov. 29, 2023 Paul Wolneykien:
- Refine file globs for python packages. - Workaround setuptools bug \#3143 (patch).
rebuild dnf-4.13.0-alt1
Package manager based on libdnf and libsolv. Replaces YUM.
Nov 23, 2023, 06:31 PM
#334925 sent by Paul Wolneykien
Network monitoring application
Nov. 23, 2023 Paul Wolneykien:
- Remove disabled 'selinux' subpackage from the spec. - Fix: Make -common, -doc, vim- and nano- subpackages noarch.
Icinga PHP Library for Icinga Web 2
Icinga PHP Thirdparty for Icinga Web 2
Icinga Web
Nov. 23, 2023 Paul Wolneykien:
- Rename all subpackages to icingaweb2-*.
Nov 23, 2023, 02:03 AM
#334926 sent by Paul Wolneykien
Updater of packages for distros with security and integrity
Nov. 23, 2023 Paul Wolneykien:
- Fixed "WantedBy" in updater-after.service (closes: 48553).
Nov 17, 2023, 06:04 PM
#334113 sent by Paul Wolneykien
Network monitoring application
Nov. 13, 2023 Paul Wolneykien:
- Require nagios-plugins, nagios-plugins-local and nagios-plugins-network.
Icinga PHP Library for Icinga Web 2
Icinga PHP Thirdparty for Icinga Web 2
Icinga Web
Nov. 16, 2023 Paul Wolneykien:
- Fix: Require icinga2-common (for icigna user and groups).
Nov 15, 2023, 07:06 AM
#334418 sent by Paul Wolneykien
alterator module to control ports access
Nov. 14, 2023 Paul Wolneykien:
- Fix: Apply changes without need to re-plug the device by recursively triggering USB "change" events on authorized devices. - Fix: Don't specify ID_USB_INTERFACES for devices with USB class 00 (closes: 48360).
Nov 3, 2023, 05:10 PM
#333481 sent by Paul Wolneykien
Rename_installer-settings-cert_to_installer-feature-cert
deleted installer-settings-cert
Installer settings for certified distro
Osec-based integrity checking script and settings
Installer files for the Cliff distro
Nov. 3, 2023 Paul Wolneykien:
- Require renamed installer-feature-integalert-*.