commit 7877dbc6baec4e3214a12ac0ae44db5491a22e9d
Author: Andy Ning <email address hidden>
Date: Fri Apr 16 10:46:13 2021 -0400
Enforce "cannot reuse the last 2 passwords" password rule
Currently the "remember" attribute in pam_pwhistory configuration
is set to "2", which enforces "cannot reuse the last 1 passwords"
in history instead of "cannot reuse the last 2 passwords" stated
in security document.
This update changed "remember" attribute to "3" so that the rule
complies with the document.
Closes-Bug: 1924772
Signed-off-by: Andy Ning <email address hidden>
Change-Id: I340152f8b8a572bc1e86f1eb4a14eb8e392f6334
commit 826a2b36b7902e2d92fdd75a165780f1a97bc2cb
Author: Don Penney <email address hidden>
Date: Thu Dec 17 13:27:31 2020 -0500
Add auto-version for remaining stx/config-files packages
Update remaining StarlingX packages with hardcoded TIS_PATCH_VER to
use PKG_GITREVCOUNT where possible, with offsets as needed to ensure
the version is incremented above the hardcoded version.
commit fb3d9b3dafb0d2a5b543a575406717ad68a457ca
Author: Carmen Rata <email address hidden>
Date: Mon Dec 14 15:41:48 2020 -0500
Fix IP Config security violations - phase 2
Updated IPv4 and IPv6 config settings in "/etc/sysctl.conf"
to resolve openscap security violations as part of phase 2
fixes.
The fixes have been validated by successful installs in
IPv4 AIO-SX and IPv6 Standard configurations.
Story: 2008037
Task: 41431
Change-Id: I9c4f01c5a5ba135c38d0e3c61618055cdfad18f9
Signed-off-by: Carmen Rata <email address hidden>
Reviewed: https:/ /review. opendev. org/c/starlingx /config- files/+ /793634 /opendev. org/starlingx/ config- files/commit/ 03c3f68b2a1477d a3dbc7d351e8bf9 e2cff2acf1
Committed: https:/
Submitter: "Zuul (22348)"
Branch: f/centos8
commit e82d1b9e70dd50f bec76db7cfc51e4 33c5b6bf9e
Author: Jim Gauld <email address hidden>
Date: Thu May 6 12:14:39 2021 -0400
Configure io-scheduler udev rules for ETCD and HW-RAID
This configures io-scheduler udev rules for etcd and hw-raid
performance.
This sets the io-scheduler to 'cfq' tuned parameters for 'controller'
nodetype with root file-system disk.
This sets io-scheduler to 'noop' for HW-RAID Dell PowerEdge R720,
this was a missing commit from pre-starlingx.
Partial-Bug: 1927515 /review. opendev. org/c/starlingx /utilities/ +/790094 d253c72e6803706 66a2aed8c8e
Depends-On: https:/
Signed-off-by: Jim Gauld <email address hidden>
Change-Id: Iaf1de8d962d1e8
commit efb718e03171580 c43702a01f7c103 e590832ab7
Author: Li Zhou <email address hidden>
Date: Tue Apr 13 04:48:46 2021 -0400
systemd: Upgrade to version 219-78.el7_9.3
Change the BuildRequires to refer to the new systemd version.
Depends-On: https:/ /review. opendev. org/c/starlingx /tools/ +/786601 e26cfb37de8889c ea006c57238
Closes-Bug: #1924691
Signed-off-by: Li Zhou <email address hidden>
Change-Id: I76169b7fd85069
commit 7877dbc6baec4e3 214a12ac0ae44db 5491a22e9d
Author: Andy Ning <email address hidden>
Date: Fri Apr 16 10:46:13 2021 -0400
Enforce "cannot reuse the last 2 passwords" password rule
Currently the "remember" attribute in pam_pwhistory configuration
is set to "2", which enforces "cannot reuse the last 1 passwords"
in history instead of "cannot reuse the last 2 passwords" stated
in security document.
This update changed "remember" attribute to "3" so that the rule
complies with the document.
Closes-Bug: 1924772 bc1e86f1eb4a14e b8e392f6334
Signed-off-by: Andy Ning <email address hidden>
Change-Id: I340152f8b8a572
commit e87383f6c328efe ab2a9407daa3307 6a85739b96
Author: Eric MacDonald <email address hidden>
Date: Tue Apr 6 08:44:26 2021 -0400
Comment out 'dateext' setting in logrotate.conf file
This update comments out the 'dateext' setting to avoid
log files being rotated with date as a default.
Test Plan:
PASS: Verify log rotation config files that don't
specifically set dateext option are rotated
by number rather than date.
PASS: Verify system install
Partial-Bug: 1918979 abedce4c4059c3a 8ec34b7d196
Signed-off-by: Eric MacDonald <email address hidden>
Change-Id: Ib68d86d1ec3f15
commit 35160afbdada2ef e0ff567dd94ca14 19903c87ad
Author: Nicolas Alvarez <email address hidden>
Date: Tue Dec 8 17:26:18 2020 -0300
Disable SNMP Host-Based from config-files repo.
Due to SNMP is going to be containerized, we disable config- files repo.
it from starlingx/
Story: 2008132 /review. opendev. org/765381
Task: 41381
Depends-On: https:/
Signed-off-by: Nicolas Alvarez <email address hidden>
Change-Id: I9da693f3389e16 acff8f87866ab29 1376bf76f6c
commit 826a2b36b7902e2 d92fdd75a165780 f1a97bc2cb
Author: Don Penney <email address hidden>
Date: Thu Dec 17 13:27:31 2020 -0500
Add auto-version for remaining stx/config-files packages
Update remaining StarlingX packages with hardcoded TIS_PATCH_VER to
use PKG_GITREVCOUNT where possible, with offsets as needed to ensure
the version is incremented above the hardcoded version.
Change-Id: I70d0ee9dcff9dc 3f6365a63d4926b c2a1b6f628b
Story: 2008455
Task: 41449
Signed-off-by: Don Penney <email address hidden>
commit fb3d9b3dafb0d2a 5b543a575406717 ad68a457ca
Author: Carmen Rata <email address hidden>
Date: Mon Dec 14 15:41:48 2020 -0500
Fix IP Config security violations - phase 2
Updated IPv4 and IPv6 config settings in "/etc/sysctl.conf"
to resolve openscap security violations as part of phase 2
fixes.
The fixes have been validated by successful installs in
IPv4 AIO-SX and IPv6 Standard configurations.
Story: 2008037
Task: 41431
Change-Id: I9c4f01c5a5ba13 5c38d0e3c616180 55cdfad18f9
Signed-off-by: Carmen Rata <email address hidden>