[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[or-cvs] r20558: {projects} Move grsec stuff to common section. Update exitscanner memor (projects/misc-sysadmin)
Author: mikeperry
Date: 2009-09-14 05:41:56 -0400 (Mon, 14 Sep 2009)
New Revision: 20558
Modified:
projects/misc-sysadmin/00_CAPTAINS.LOG
projects/misc-sysadmin/namelist
Log:
Move grsec stuff to common section. Update exitscanner memory listing.
Modified: projects/misc-sysadmin/00_CAPTAINS.LOG
===================================================================
--- projects/misc-sysadmin/00_CAPTAINS.LOG 2009-09-14 09:33:48 UTC (rev 20557)
+++ projects/misc-sysadmin/00_CAPTAINS.LOG 2009-09-14 09:41:56 UTC (rev 20558)
@@ -14,6 +14,7 @@
- Installed EPEL repository via:
http://download.fedora.redhat.com/pub/epel/5Server/x86_64/epel-release-5-3.noarch.rpm
- Created+applied grsec-prep.sh based on selinux and grsec work
+ - Applied SELinux+GRSec kernel to all machines
SELinux:
- Enabled selinux targeted policy via /etc/sysconfig/selinux
@@ -72,29 +73,13 @@
- Made shell of both gitweb and gitperl /sbin/nologin and disabled passwords
- Enabled postfix daemon
- Fixed postfix not to try to relay off upstream ISPs internal network
- - Installed Grsec+SELinux Kernel as per above sections
- - Successfully relabeled FS for SELinux
- - Successfully installed and booted into grsec kernel
- Altered label on /srv/gitweb/repositories to be read by web interface:
/usr/sbin/semanage fcontext -a -t httpd_sys_content_t "/srv/gitweb/repositories(/.*)?"
-38.229.70.12:
- - Installed Grsec+SELinux Kernel as per above sections
- - Successfully relabeled FS for SELinux
- - Successfully installed and booted into grsec kernel
-
-38.229.70.13:
- - Installed Grsec+SELinux Kernel as per above sections
- - Successfully relabeled FS for SELinux
- - Successfully installed and booted into grsec kernel
-
38.229.70.14:
- - Installed Grsec+SELinux Kernel as per above sections
- - GRSec kernel did not come back up (vmware-tools?)
- Needs ssh rekey
- Needs auditd
38.229.70.15
- - Installed Grsec+SELinux Kernel as per above sections
- installed epkg from source (encap implementation)
- installed chpax from source
Modified: projects/misc-sysadmin/namelist
===================================================================
--- projects/misc-sysadmin/namelist 2009-09-14 09:33:48 UTC (rev 20557)
+++ projects/misc-sysadmin/namelist 2009-09-14 09:41:56 UTC (rev 20558)
@@ -7,5 +7,5 @@
torstatus - 38.229.70.11 - 512M
buildbot - 38.229.70.12 - 256M
torperf - 38.229.70.13 - 256M
-exitscanner - 38.229.70.14 -
+exitscanner - 38.229.70.14 - 1024M
bwscanner - 38.229.70.15 - 1024M