Maintainer Paul Wolneykien in the sisyphus branch: Information
Maintainer name: Paul Wolneykien (manowar)
Built source packages in this branch: 94
Last changes
Apr 4, 2024, 04:51 AM
#344323 sent by Paul Wolneykien
A wrapper to run tests against ClickHouse server
April 4, 2024 Paul Wolneykien:
- Disable build test on arches where clickhouse-server is not available.
A lightweight plugin for auditd daemon to send audit data to a Clickhouse database
April 4, 2024 Paul Wolneykien:
- Disable database build test on arches where clickhouse-server is not available.
Mar 28, 2024, 07:27 PM
#343850 sent by Paul Wolneykien
Osec-based integrity checking script and settings
March 28, 2024 Paul Wolneykien:
- Use 'qm block' command in PVE triggers.
Mar 19, 2024, 02:00 PM
#343042 sent by Paul Wolneykien
IMA/EVM integrity check
March 19, 2024 Paul Wolneykien:
- Updated README.
Mar 19, 2024, 01:52 PM
#342514 sent by Paul Wolneykien
Replaced_by_ima-evm-integrity-check
Makefile-style config file editing shell library
March 18, 2024 Paul Wolneykien:
- Fixed argument checking in the functions. - Fixed the code as suggested by shellcheck.
deleted ima-integrity-check
IMA/EVM integrity check
March 19, 2024 Paul Wolneykien:
- Make integalert dependency optional. - Fixed exit when integalert is disabled.
Mar 12, 2024, 06:31 PM
#342576 sent by Paul Wolneykien
A reference implementation of the Russian GOST crypto algorithms for OpenSSL
March 12, 2024 Paul Wolneykien:
- Fix: Require OpenSSL >= 3.0.0 to build.
Mar 12, 2024, 02:12 PM
#342552 sent by Paul Wolneykien
Osec-based integrity checking script and settings
March 12, 2024 Paul Wolneykien:
- Check and lock only the nodes in /etc/pve/qemu-server. - Don't exit a trigger if some nodes failed to stop. - Be tolerant to spaces in osec report. - Install the triggers in overwrite mode. - Added lrm_status.tmp.* to exclude list. - Fixed errors in VM triggers.
Feb 21, 2024, 05:02 PM
#341175 sent by Paul Wolneykien
alterator on rails
Feb. 20, 2024 Paul Wolneykien:
- Fixed a typo in the ahttpd.acl.conf(5) manual page. - Configure ahttpd to use TLSv1.3 or higher (closes: 44991).
Feb 15, 2024, 12:26 AM
#340729 sent by Paul Wolneykien
Nagios watch daemon
Feb. 15, 2024 Paul Wolneykien:
- Fix: Added missing 'd-nagwad-nodes' host group.
Feb 14, 2024, 03:51 PM
#340689 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Feb. 14, 2024 Paul Wolneykien:
- Make integalert_vm.service and timer depend on pvedaemon.service and libvirtd.service.
Nagios watch daemon
Feb. 14, 2024 Paul Wolneykien:
- Fixed integalert.regexp: React to messages of different integalert profiles. - signal.md: Fixed reference to `icinga2-doc`.
Feb 13, 2024, 03:05 PM
#340569 sent by Paul Wolneykien
Icinga Web
Feb. 13, 2024 Paul Wolneykien:
- Make icingaweb2-php-pgsql depend on php-pgsql (thx Elena Mishina).
Feb 12, 2024, 10:27 PM
#340535 sent by Paul Wolneykien
JSON for Modern C++ (c++11) ("single header file")
Feb. 12, 2024 Paul Wolneykien:
- Saved upstream URL to the package repo.
Feb 12, 2024, 05:51 PM
#340503 sent by Paul Wolneykien
Icinga Web
Feb. 12, 2024 Paul Wolneykien:
- Fix: Require php-fileinfo (thx Elena Mishina).
Feb 12, 2024, 12:57 PM
#340464 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Feb. 12, 2024 Paul Wolneykien:
- Fix: Make sysinit.target weakly depend on integalert service by default.
Feb 8, 2024, 07:55 PM
#340116 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Feb. 8, 2024 Paul Wolneykien:
- Update: On service failure isolate 'integ-check-failed.target'.
Feb 8, 2024, 05:01 PM
#340010 sent by Paul Wolneykien
An implementation of the Double Ratchet cryptographic ratchet
JSON for Modern C++ (c++11) ("single header file")
A simple async wrapper around CURL for C++
Client API library for the Matrix protocol, built on top of Boost.Asio
Desktop client (QT) for the Matrix protocol
Feb. 7, 2024 Paul Wolneykien:
- New version 0.11.3. - Added ZSH site-functions. - Build with libre2.
Feb 7, 2024, 10:49 PM
#340057 sent by Paul Wolneykien
Nagios watch daemon
Feb. 7, 2024 Paul Wolneykien:
- Updated signal.md: host template names and new packages for installation. - signal.md: Added a note about agent configuration in Icinga Director. - Fix: Automatically added 'icinga' user to the 'nagwad' group ('nagwad-icinga' now depends on 'icinga2' package). - Fix Icinga Director basket: added Icinga Agent settings.
Feb 6, 2024, 05:15 PM
#339939 sent by Paul Wolneykien
Feb 6, 2024, 04:48 PM
#339935 sent by Paul Wolneykien
Nagios watch daemon
Feb. 6, 2024 Paul Wolneykien:
- Fixed template name in signal.md. - Fixed Icinga nagwad templates: run checks with agent (on local or remote hosts).
Feb 6, 2024, 03:04 PM
#339914 sent by Paul Wolneykien
Nagios watch daemon
Feb. 6, 2024 Paul Wolneykien:
- Save copies of events to /run/nagwad/events. - New version of signal.md documentation (Russian). - Minor fix of login.sed. - Package Icinga Director basket as a doc. - Added nagwad Icinga Director basket in JSON format. - Improved description of host group "nagwad-nodes". - Improved display name: "Printing policy violation attempt". - Rename 'audit' filter (and all related files) to 'eperm'. - Remove deprecated 'osec' check. - Added "nagwad-host" host template for Icinga. - Fix: Don't copy README and signal.* manual to the `-nagios` package. - Updated README. - Monitor integrity of file access audit rules. - Fixed audit.regexp: Only SYSCALL messages. - Updated audit.regexp: Added nagwad- prefix. - Skip access errors to /proc/1/environ by default. - Added 10-audit post-process filter which skips events for particular files listed in audit-skip.d. - Allow post-filters to add text to messages. - Match each event with previously registered events and ignore duplicates. - Support event post-processing filters in /etc/nagwad/process-event.d. - Process the journal starting from the current boot. - Process the message with no leading whitespace by default. - check_nagwad: Don't print minor accidental errors.
Feb 2, 2024, 03:31 PM
#339624 sent by Paul Wolneykien
Config module for Icinga 2
Feb. 2, 2024 Paul Wolneykien:
- Removed extra file dependency on /etc/sysconfig/icinga2.
Jan 26, 2024, 02:29 PM
#339075 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Jan. 26, 2024 Paul Wolneykien:
- Cosmetic improvement in the sender script. - Fixed possible errors in the packaged default configuration files (there was a race condition).
Jan 25, 2024, 09:10 PM
#339002 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Jan. 24, 2024 Paul Wolneykien:
- Added migration %post script which makes backup copies of old integalert profiles. - Generate and package the default configuration files for the default ('main'), 'vm' and 'container' profiles. - Added 'configure' action which writes down the configuration files for the specified integalert profile. - Run 'integalert container' from integalert_vm.service.
Jan 25, 2024, 07:28 PM
#338982 sent by Paul Wolneykien
GnuPG Made Easy is a library designed to make access to GnuPG easier for applications
Jan. 25, 2024 Paul Wolneykien:
- Adapted Python packages for different versions of egg-info.
Jan 16, 2024, 01:56 PM
#338288 sent by Paul Wolneykien
Osec-based integrity checking script and settings
Dec. 26, 2023 Paul Wolneykien:
- Make *-trigger-pve package exclusive arch: x86_64 aarch64.
Jan 16, 2024, 02:33 AM
#338255 sent by Paul Wolneykien
Nagios watch daemon
Jan. 15, 2024 Paul Wolneykien:
- Reflect the event status in the name of the signal file and check signal files in order of severity. - Make the signal files accessible by the members of 'nagwad' group. - Fixed %pre: %pre service. - /usr/sbin/nagwad: Source /etc/sysconfig/nagwad. - Make check_nagwad support status lines + the default status command-line argument. - Make nagwad support sed filters. - Removed the obsolete check_osec NRPE plugin. - Update the login.regexp to also support the 'pam_faillock' module. - Update check plugins to report detailed OK and CRITICAL statuses. - Extracted nsca-shell into the separate package. - Make 'nagwad-icinga' and 'nagwad-nagstamon' depend on 'nagwad-service'. - Make 'nagwad-nagios' depend on 'nagios-nrpe'. - Fix: Make 'nagwad-service' not depend on 'osec-cronjob' and 'nagios-nrpe'. - Make nagwad.service to restart on failure. - Make nagwad.service want auditd.service. - Rename 'nagwad-templates' to 'nagwad-nagios' and move nrpe-commands configuration to that package. - Added configuration file for Icinga-2 (package nagwad-icinga). - Rename package 'nagwad-actions' to 'nagwad-nagstamon'. - Make nagwad-service conflict with obsoleted package integ <= 0.4.2-alt2. - Added configuration files for integalert.
Jan 10, 2024, 12:06 PM
#337937 sent by Paul Wolneykien
Remove_deprecated_modules
Bleeding edge Icinga Web 2 libraries
Config module for Icinga 2
deleted icingaweb2-module-ipl
deleted icingaweb2-module-reactbundle
Jan. 10, 2024 Paul Wolneykien:
- package removed
Jan 10, 2024, 12:28 AM
#337918 sent by Paul Wolneykien
Bleeding edge Icinga Web 2 libraries
Config module for Icinga 2
Business Processes Icinga Web 2 module
ReactPHP-based 3rd party libraries
Jan. 9, 2024 Paul Wolneykien:
- Remove circular dependency on icingaweb2-module-director.
Dec 25, 2023, 04:33 PM
#337210 sent by Paul Wolneykien
Nagios watch daemon
Dec. 25, 2023 Paul Wolneykien:
- Fix: Use "usergroup-change" key in audit rules (to match the nagwad filter key).
Dec 7, 2023, 02:34 PM
#332618 sent by Paul Wolneykien
Aladdin JaCarta PKCS#11 library
Dec. 7, 2023 Paul Wolneykien:
- Added armh, i586 and mipsel arches. - Fix: update.sh: Delete old binaries before update. - Fix: Update with excess builds excluded. - Use chrpath to fix the binaries.
Nov 29, 2023, 03:02 PM
#334991 sent by Paul Wolneykien
New_version
GnuPG Made Easy is a library designed to make access to GnuPG easier for applications
Nov. 29, 2023 Paul Wolneykien:
- Refine file globs for python packages. - Workaround setuptools bug \#3143 (patch).
rebuild dnf-4.13.0-alt1
Package manager based on libdnf and libsolv. Replaces YUM.
Nov 23, 2023, 06:31 PM
#334925 sent by Paul Wolneykien
Network monitoring application
Nov. 23, 2023 Paul Wolneykien:
- Remove disabled 'selinux' subpackage from the spec. - Fix: Make -common, -doc, vim- and nano- subpackages noarch.
Icinga PHP Library for Icinga Web 2
Icinga PHP Thirdparty for Icinga Web 2
Icinga Web
Nov. 23, 2023 Paul Wolneykien:
- Rename all subpackages to icingaweb2-*.
Nov 23, 2023, 02:03 AM
#334926 sent by Paul Wolneykien
Updater of packages for distros with security and integrity
Nov. 23, 2023 Paul Wolneykien:
- Fixed "WantedBy" in updater-after.service (closes: 48553).
Nov 17, 2023, 06:04 PM
#334113 sent by Paul Wolneykien
Network monitoring application
Nov. 13, 2023 Paul Wolneykien:
- Require nagios-plugins, nagios-plugins-local and nagios-plugins-network.
Icinga PHP Library for Icinga Web 2
Icinga PHP Thirdparty for Icinga Web 2
Icinga Web
Nov. 16, 2023 Paul Wolneykien:
- Fix: Require icinga2-common (for icigna user and groups).
Nov 15, 2023, 07:06 AM
#334418 sent by Paul Wolneykien
alterator module to control ports access
Nov. 14, 2023 Paul Wolneykien:
- Fix: Apply changes without need to re-plug the device by recursively triggering USB "change" events on authorized devices. - Fix: Don't specify ID_USB_INTERFACES for devices with USB class 00 (closes: 48360).
Nov 3, 2023, 05:10 PM
#333481 sent by Paul Wolneykien
Rename_installer-settings-cert_to_installer-feature-cert
deleted installer-settings-cert
Installer settings for certified distro
Osec-based integrity checking script and settings
Installer files for the Cliff distro
Nov. 3, 2023 Paul Wolneykien:
- Require renamed installer-feature-integalert-*.
Nov 2, 2023, 11:36 PM
#333325 sent by Paul Wolneykien
Divide_settings-s_onto_two_new_packages
deleted settings-s
Installer settings for certified distro
Nov. 1, 2023 Paul Wolneykien:
- Extract integalert to separate package. Rename package to installer-settings-cert (was: settings-s).
Osec-based integrity checking script and settings
Installer files for the Cliff distro
Nov. 1, 2023 Paul Wolneykien:
- Require installer-integalert-stage2 and 3 (due to rename of these packages). - Fixed descriptions.
deleted updater
Updater of packages for distros with security and integrity
Nov. 2, 2023 Paul Wolneykien:
- Obsolete updater < 1.3-alt4.
Nov 2, 2023, 08:14 PM
#333424 sent by Paul Wolneykien
alterator module to control ports access
Nov. 2, 2023 Paul Wolneykien:
- Fixed USB rule editor (closes: 47454). - Fixed glob pattern used to extract class, subclass and protocol values from USB_WHITE_LIST. - Additional formal check before adding new rule.
Oct 5, 2023, 12:57 AM
#330981 sent by Paul Wolneykien
NRPE -- Nagios(R) Remote Plug-ins Execution daemon.
Oct. 5, 2023 Paul Wolneykien:
- New version 4.1.0.
Oct 4, 2023, 07:40 PM
#330962 sent by Paul Wolneykien
A reference implementation of the Russian GOST crypto algorithms for OpenSSL
Oct. 4, 2023 Paul Wolneykien:
- Remove libcrypto1.1 dependencies.
Sep 22, 2023, 03:27 AM
#330047 sent by Paul Wolneykien
A lightweight plugin for auditd daemon to send audit data to a Clickhouse database
Sept. 22, 2023 Paul Wolneykien:
- Added tests to check the fix. - Fixed various potential loss of data. - Fix: Don't panic when no data have been read (EOF). - CRITICAL FIX: Don't assume the input buffer is always full. - Fix: Always panic if no end marker (newline) found.
Sep 11, 2023, 04:16 PM
#329282 sent by Paul Wolneykien
GnuPG Made Easy is a library designed to make access to GnuPG easier for applications
Sept. 11, 2023 Paul Wolneykien:
- Fix build in source directory (patch).
Aug 30, 2023, 04:05 PM
#328293 sent by Paul Wolneykien
alterator module to control ports access
Aug. 30, 2023 Paul Wolneykien:
- Don't disable USB control to scan for connected devices if not explicitly asked by the user with the use of "Scan" button. - Change the order of rules in udev: Move rules to 99-alterator-ports-access-00-serial.rules, 99-alterator-ports-access-01-usb-auth.rules and 99-alterator-ports-access-02-usb-dev.rules files. - Add support for USB device and interfaces classes. - Fixed getting vendor and product names: quit after first match. - Don't automatically re-scan present devices if the table isn't empty. - Require /usr/share/misc/usb.ids. - Improve the rule file comments and spacing. - Remove copyright info from rule file headers. - Enable/Disable USB control by changing the udev rules. - Allow text to wrap in tables. - backend: List USB devices with class, subclass and protocol values and optionally list their interfaces. - Fix: Own alterator/ui/*. - Fixed % in changelog. - Removed local l10n files.
Aug 14, 2023, 03:42 PM
#327158 sent by Paul Wolneykien
A reference implementation of the Russian GOST crypto algorithms for OpenSSL
Aug. 14, 2023 Paul Wolneykien:
- Upstream version 3.0.2.
Jul 31, 2023, 04:49 PM
#326141 sent by Paul Wolneykien
A lightweight plugin for auditd daemon to send audit data to a Clickhouse database
July 31, 2023 Paul Wolneykien:
- Fixed search for clickhouse-cpp library and use of its headers. - Added clickhouse-audit-utils package containing the audit record export script. - Fix: Own %_datadir/%name.
Jul 19, 2023, 05:05 PM
#325172 sent by Paul Wolneykien
A library for using PKCS#11 providers
July 18, 2023 Paul Wolneykien:
- New version 1.29.0.
Jul 3, 2023, 09:26 PM
#324171 sent by Paul Wolneykien
alterator module to control ports access
July 3, 2023 Paul Wolneykien:
- Don't own /etc/udev/rules.d/ files to make sisyphus_check happy.
Jun 5, 2023, 04:12 PM
#322491 sent by Paul Wolneykien
May 24, 2023, 04:51 PM
#321766 sent by Paul Wolneykien
Replaced_by_auditd-plugin-clickhouse-lite
deleted auditd-plugin-clickhouse
May 24, 2023 Paul Wolneykien:
- package removed
May 24, 2023, 01:57 PM
#321736 sent by Paul Wolneykien
A lightweight plugin for auditd daemon to send audit data to a Clickhouse database
May 24, 2023 Paul Wolneykien:
- Check that the plugin copes normally with slow and very slow input. - Fix: Search for newline only in newly received data.
May 24, 2023, 12:37 PM
#321734 sent by Paul Wolneykien
Installer bootlader step for stage 3 (alterator-grub)
May 24, 2023 Paul Wolneykien:
- Bump the release in order to allow other versions in branches.