[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[or-cvs] r20558: {projects} Move grsec stuff to common section. Update exitscanner memor (projects/misc-sysadmin)



Author: mikeperry
Date: 2009-09-14 05:41:56 -0400 (Mon, 14 Sep 2009)
New Revision: 20558

Modified:
   projects/misc-sysadmin/00_CAPTAINS.LOG
   projects/misc-sysadmin/namelist
Log:

Move grsec stuff to common section. Update exitscanner memory listing.



Modified: projects/misc-sysadmin/00_CAPTAINS.LOG
===================================================================
--- projects/misc-sysadmin/00_CAPTAINS.LOG	2009-09-14 09:33:48 UTC (rev 20557)
+++ projects/misc-sysadmin/00_CAPTAINS.LOG	2009-09-14 09:41:56 UTC (rev 20558)
@@ -14,6 +14,7 @@
  - Installed EPEL repository via:
    http://download.fedora.redhat.com/pub/epel/5Server/x86_64/epel-release-5-3.noarch.rpm
  - Created+applied grsec-prep.sh based on selinux and grsec work
+ - Applied SELinux+GRSec kernel to all machines
 
 SELinux:
  - Enabled selinux targeted policy via /etc/sysconfig/selinux
@@ -72,29 +73,13 @@
  - Made shell of both gitweb and gitperl /sbin/nologin and disabled passwords
  - Enabled postfix daemon
  - Fixed postfix not to try to relay off upstream ISPs internal network
- - Installed Grsec+SELinux Kernel as per above sections
- - Successfully relabeled FS for SELinux
- - Successfully installed and booted into grsec kernel
  - Altered label on /srv/gitweb/repositories to be read by web interface:
    /usr/sbin/semanage fcontext -a -t httpd_sys_content_t "/srv/gitweb/repositories(/.*)?"
 
-38.229.70.12:
- - Installed Grsec+SELinux Kernel as per above sections
- - Successfully relabeled FS for SELinux
- - Successfully installed and booted into grsec kernel
-
-38.229.70.13:
- - Installed Grsec+SELinux Kernel as per above sections
- - Successfully relabeled FS for SELinux
- - Successfully installed and booted into grsec kernel
-
 38.229.70.14:
- - Installed Grsec+SELinux Kernel as per above sections
- - GRSec kernel did not come back up (vmware-tools?) 
  - Needs ssh rekey
  - Needs auditd
 
 38.229.70.15
- - Installed Grsec+SELinux Kernel as per above sections
  - installed epkg from source (encap implementation)
  - installed chpax from source

Modified: projects/misc-sysadmin/namelist
===================================================================
--- projects/misc-sysadmin/namelist	2009-09-14 09:33:48 UTC (rev 20557)
+++ projects/misc-sysadmin/namelist	2009-09-14 09:41:56 UTC (rev 20558)
@@ -7,5 +7,5 @@
 torstatus   - 38.229.70.11 - 512M
 buildbot    - 38.229.70.12 - 256M
 torperf     - 38.229.70.13 - 256M
-exitscanner - 38.229.70.14 - 
+exitscanner - 38.229.70.14 - 1024M
 bwscanner   - 38.229.70.15 - 1024M