yast2-security-4.5.7-150500.3.3.1 < > , _T eCp9|`6qLzկ@_]# 49B 'D ZRe*bG|rpI bU2ʣH#Z@w:"d-!Oc,-
F@d Hav(6;PK~VrV0:se'3+}ERy
RM| }voysy״ﮖ&sQ:8b
Qs`*AiMd4⃦#GG2/rl8 > F T ? T d $ C | % , S 4 S S
S S S
t S S _ S ( S t @
t
K
( 8 H 9 H : " H > A B A F AW G Al S H B S I D S X DX Y D| Z D [ D \ D S ] E S ^ J ! b Np c O d O e O f O l O u O S v Q w Q S x R S y T@ z TP T` Td Tw Tx T| T T C yast2-security 4.5.7 150500.3.3.1 YaST2 - Security Configuration The YaST2 component for security settings configuration. eCh01-ch4c ;@SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ System/YaST https://github.com/yast/yast-security linux noarch # remove broken entry in /etc/login.defs, introduced during installation (bnc#807099)
if [ -f /etc/login.defs ] ; then
sed -e '/^[ \t]*LASTLOG_ENAB[ \t]*\"\"/d' -i /etc/login.defs
fi ! | U ! q I p V 7 ~ # k X ) 3 x _ P E7 ' < [ 7 - 6 6
H & u % F A큤AA큤AA큤AA큤A큤AA큤A큤A큤A큤A큤A큤AAA큤A큤A큤A큤AAAA큤A큤A큤 eCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeCeBIeCeC f7cc42a3531e622e6cfcadd5ae35ddfc4923cc9dd58d46a1a154db494abdc937 680fd8a28cc0b733b83e2df58abe528ea2c203f77d7aa0689af8a7586b23b575 cc90f61ccc61b0c485c7b3cce5ea4bf8868a78648d74749dba993d80f88f442b 83d64c53c15fdf4d639844624d2d84cf074ef8504948bff46aa316871762be18 6350fbb1400d929b78b5a82371629f0924289d024bf57cbe969fb7a4e663a852 85c377e2d394855207b3b6a584cb1cd1df486414e275cb5241fcbb6a88165276 5f6fcb8e20f9f44d09b5b9c8d9cfbeab3abdfe5e3b842a8beb0d2541a8d8cd21 8f220caaaaf2083d49ced111a4d07ee735ca026e8b0cf04c7c01ce47baf10928 d9cea6b6f33a9873717a0f671b9d91e95c255cbf95ef297f93b6578d0f6d2aa4 dd7281f17c58057fea80ee349f8891e830783abdbb32fb46b7cec775678a23b8 d5bb73896597fbd92810e1a40f022e66697ab291575d5608407c0be149d07ec9 9bd4f237b02cedc4944a867a7139d7e153b1911844035069abb85efb1cdbd9ae 0ec96d7d7cc3a9d0e1f7163b8e637e9f02f005c288551a674546e814cd9add9c 0047ce49dc9e5dfbf15a1a7d5662bd3a8ce59923a6f104022d6e17c0e544b387 874b3acdb1c58f3fcf63e96b8cce7a26e3fe319bb365689542af3e7028e75b5b 6b19fd29cbed0c4b31fcbdfba1bfc24a4277aa9538ee011a7e3c009cd6cfa093 f7bb064bb8635d4895a2d844e6350205e1b30ef0ab84664df6d90d7d019b6df7 b770185503ca11b38ad56767e2fc84f0d3d96c1f848527c3929269ac20ba0011 8f033866351e1423863ff2d7fb46f323fc1a5d86ea097db2223cfc563bee4703 5552389234c984d460ad20b7b80d341a4e750ee212533b3962d339138504e347 276749de59fccdd8cb98bcd937925f836e2b018b42d4fac8d5b9d4d086e4125d 6a4e71fd26f09a8b4f2264c0f89929c38a55ce9de6e99e3d8bd559e193347ddb f64fdc509fe69d6f9106546e0253765b869cc882d2ea6853a79454ddfd09a140 bf188c2e2e5df6f0e2e4c6b82aabe64b8cf6834e2a04afa5ab5dee76f815a30c d11b3225c026ccc5377620678113f4843bf57ed2271a3d53c2351553ed4659ab 098c12d02c79209a58fbcce21ca15c980dc2744fa52933d02c35fe8898afae0a 15d4be91022fc7b6206430d2ef4162292a13f76645118af643dab32b0149e7b7 296b6b3b54b5ecaddd866b0d07279197a2ee38fb6c35ba6fcd953499454fcfb6 1a2f18ef006d14c50979b5d71d32daf84ca849b545c93933a39ce194393169c6 618544b8df9635a5dbb90b97b28b77955370e2d25fe8f949b6379e650afbbf1b fe362f9c846f1195247f2b7a73373fc571149e6a42aed700a0ee11ed21978136 26a51c46c59ffb3a64ec0dadc36e79cd2b790ec7b1f11bbd25ade5c229fd4c1c 21e5b2c7349baacebdd479bfa387818f667c6bd14d67d37558b560814a33fbf9 a28fbe52c627e9f74fd6ccb20aeaee606348edb4587a33f433daa6c1b47f684e a1e8e4cb8c44bbf71badd046b8f833bdba8397a3a734aebe5cd7769252b1f50b 13a1d44564ff968754976eb7e6d8f85dd23991c479308c7347ddd2f11c26cd4d 232cc7f557be56f2cb546f6c7f682228e2bbf0945b4fa0888c259b0c40c891d9 cdc2c31d0460922a0a80d9b393409c220a38b94b7c01540058e207f433926d45 c4a05d3eda96b4af6779a2deeff4eaf875591d915094fda41a7b12464af05008 94eea0741a7078605409267750975196b760c035e42ab3dc6c0027c05049d31e 497473fa0aa6802c6d6297c146f1153698888725d0437ec6e9206ddd7a41cb03 4fff705ae56c3178e5f90df20053fac546f4db91476bb23c2c69fc1bc9ef29b4 cfa62c53125e0e77aea7c0aeecdc82feb6589cc6395e1a7f3806549be0816023 51ff5607ee6673325858fb850425690887ecd5ab58bd1d7b92bdcdde37815c42 1df8a08d06e6e61fd1817b5b46d56cbe8dc85d554d2d6a34b0444a95fa72e75c 01d1f83ee1669b7f51097f960c8fffbc122d883e5b2024d9222b9e15a63faf87 497a246de2428fe0e95aaa6b26389c5d2413ca3b5b2e5d58a4e089e9683ef0ba 93145f31e4e9ca7b9f9ca36d4b667a69af06d9ec7bccdd1a51dac136545dd6d0 ee27f78de55c53e8948a1778b5d8833533435cfc7df9833b53e68ad3ba521f9c 24e728f910f42e58a5793a70a319de867af2927382af7526fc22e03c96de9a06 adc7e419d07b0f3090a5381f1b21c857b0515994eb871b1057560ad86aec0ea9 29aa39a8fa76559527d6245a470456d44a44b47ea3d479e9f5652ae372c1f9b4 4ec1b6c5c655f4e19b6a9180ea725162098aeef56e73ce29f7472e97525b669e 39330aaa398eb3012e3c47dd8bbcd41d26800f74cf7863098622ddc92cd5dde3 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 3af1c996e756caaca777371ba5a14b37c630ad3dab4ceaf95232ea7577d3ac80 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root yast2-security-4.5.7-150500.3.3.1.src.rpm application() application(YaST2/org.opensuse.yast.Security.desktop) metainfo() metainfo(org.opensuse.yast.Security.metainfo.xml) y2c_sec y2t_sec yast2-config-security yast2-security yast2-trans-security
/bin/sh augeas-lenses rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) yast2 yast2-bootloader yast2-network yast2-pam yast2-pam yast2-ruby-bindings yast2-storage-ng 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.4.47 2.14.0 4.3.1 1.0.0 4.14.3 e?ccc@cjDcb[c@bMb+9b@a@a7a@aaq@a a+@a6aMa@``~@`S@`?z@`>(`>(`<@`<@`4@`+`*b@_إ@_S__@_ _5+@_16_ @^^0^8 @^)^ []+]@]]@]]]p]^\@[@[<@[[~[z@Za@WVm@V>@VUoU@U~@UzUyx@TTq@TTLTN3kanderssen@suse.com mfilka@suse.com igonzalezsosa@suse.com shundhammer@suse.com igonzalezsosa@suse.com mvidner@suse.com dgonzalez@suse.com lslezak@suse.cz igonzalezsosa@suse.com dgonzalez@suse.com kanderssen@suse.com kanderssen@suse.com igonzalezsosa@suse.com kanderssen@suse.com kanderssen@suse.com kanderssen@suse.com kanderssen@suse.com kanderssen@suse.com kanderssen@suse.com kanderssen@suse.com jlopez@suse.com lslezak@suse.cz dgonzalez@suse.com dgonzalez@suse.com dgonzalez@suse.com dgonzalez@suse.com dgonzalez@suse.com jreidinger@suse.com dgonzalez@suse.com dgonzalez@suse.com jreidinger@suse.com schubi@localhost schubi@intern schubi@localhost schubi@suse.de lslezak@suse.cz schubi@suse.de aschnell@suse.com jreidinger@localhost kanderssen@suse.com schubi@suse.de snwint@suse.com jreidinger@suse.com schubi@suse.de igonzalezsosa@suse.com igonzalezsosa@suse.com schubi@suse.de igonzalezsosa@suse.com schubi@suse.de schubi@suse.de schubi@suse.de hellcp@mailbox.org noahadvs@gmail.com schubi@suse.de schubi@suse.de dgonzalez@suse.com schubi@suse.de mfilka@suse.com jreidinger@suse.com knut.anderssen@suse.com knut.anderssen@suse.com ancor@suse.com ancor@suse.com ancor@suse.com ancor@suse.com ancor@suse.com ancor@suse.com ancor@suse.com jsuchome@suse.cz ancor@suse.com jreidinger@suse.com mvidner@suse.com - Do not load the security settings from the security policy until
needed (bsc#1216615).
- 4.5.7 - bsc#1208492
- do not store empty values in CFA login.defs empty value to
avoid crash when parsing according to login.defs lens
- 4.5.6 - AutoYaST: export security policy settings (related to
jsc#SLE-24764).
- Always write the ssg-apply configuration if a security policy
is enabled, even if the action is 'none' (related to
jsc#SLE-24764).
- 4.5.5 - Fixed wrong steps count causing a crash during saving (bsc#1205918)
- 4.5.4 - Add support for DISA STIG security policy validation
(jsc#SLE-24764).
- Disable the ssg-apply service if the selected SCAP action is
"do nothing" (related to jsc#SLE-24764).
- 4.5.3 - Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.2 - Do not crash when reading active LSM modules returns nil
(related to jsc#SLE-22069)
- 4.5.1 - Bump version to 4.5.0 (bsc#1198109) - Always check for the package in the underlying system when
trying to detect if running on systemd (bsc#1196963).
- 4.4.13 - Stop using 'lsm' kernel boot parameter even for the
"None" Major Linux Security Module (bsc#1194332, bsc#1196274).
- 4.4.12 - Fixed Export unit test (related to jsc#SLE-22069).
- 4.4.11 Related to jsc#SLE-22069:
- AutoYaST LSM: only allow to select the desired LSM and the
SELinux mode.
- 4.4.10 - Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.9 - Related to jsc#SLE-22069:
- Fix import of 'none' and 'apparmor' options from the profile
when declared
- 4.4.8 Related to jsc#SLE-22069:
- Autoyast LSM section: added "none" section in order to mark it
as not selectable during the installation.
- 4.4.7 - Fix security_auto client selinux requirement (bsc#1194449)
- 4.4.6 - Do not use the 'lsm' kernel boot parameter by now as it could
need other modules to be pecified like the integrity one
(bsc#1194332).
- 4.4.5 - Related to jsc#SLE-22069:
- Autoyast LSM section: added "selectable" option to the section
- Do not propose a default LSM configuration when it is declared
as not configurable in the control file or AutoYaST
- 4.4.4 - Added back the selinux boot parameter when selinux is selected
and not disabled in order to switch on SELinux (jsc#SLE-22069)
- 4.4.3 - Add support for selecting and configuring the desired Linux
Security Module (jsc#SLE-22069)
- 4.4.2 - Add Security#SafeRead to allow detecting read errors when calling
it from perl modules (related to bsc#1177183).
- 4.4.1 - 4.4.0 (bsc#1185510) - Do not set SELinux mode when it is not configurable (bsc#1182940)
- 4.3.16 - Make SELinux not configurable when running on WSL (bsc#1182940)
- 4.3.15 - Ensure defined SELinux patterns are set (bsc#1182543).
- 4.3.14 - Do not write bootloader in insts-sys (bsc#1182894).
- 4.3.13 - Change the SELinux resolvable unique id used in auto-installation
to be consistent with the one used by normal installation
(related to jsc#SLE-17342).
- 4.3.12 - Move security_finish client to yast2-installation (bsc#1182821)
- 4.3.11 - Move SELinux .autorelabel file from / to /etc/selinux if root
filesystem will be mounted as read only (jsc#SLE-17307).
- 4.3.10 - jsc#SMO-20, jsc#SLE-17342:
- Add class for managing SELinux configuration.
- AutoYaST: add support for SELinux configuration.
- 4.3.9 - Adapted unit test to recent changes in Yast::Report (related to
bsc#1179893).
- 4.3.8 - Removed old code for sysvinit configuration (bsc#1175494).
- 4.3.7 - Removed obsolete setting DISPLAYMANAGER_SHUTDOWN from
/etc/sysconfig/displaymanager (bsc#1175495).
- 4.3.6 - Removed handling of obsolete entry SYSTOHC in /etc/sysconfig/clock
(bsc#1175496)
- 4.3.5 - AY-Import: Translate setting to
with the correct value format (bsc#1177720).
- 4.3.4 - Fixed randomly failing unit tests, do not query the installed
PAM modules in the testing system (related to bsc#1171318)
- 4.3.3 - AutoYaST: Added supplements: autoyast(security) into the spec file
in order to install this packages if the section has been defined
in the AY configuration file (bsc#1146494).
- 4.3.2 - Use pam_pwquality instead of pam_cracklib depending on
availability (bsc#1171318)
- Fix setting dictpath for pam_pwquality (bsc#1174619)
- 4.3.1 - Autoyast schema: Allow optional types for string and map objects
(bsc#1170886)
- 4.3.0 - Apply sysctl changes to the running system when the YaST sysctl
configuration file is modified (bsc#1167234)
- 4.2.12 - Using SysctlConfig class: Handle sysctl entries in different
directories (bsc#1151649).
- 4.2.11 - don't use /bin/systemctl compat symlink (bsc#1160890)
- 4.2.10 - convert old init.d to systemd (jsc#SLE-10976)
- 4.2.9 - Added to rnc file: sys_gid_max, sys_gid_min, sys_uid_max,
sys_uid_min, hibernate_system, kernel.sysrq, mandatory_services,
net.ipv4.ip_forward, net.ipv4.tcp_syncookies,
net.ipv6.conf.all.forwarding (bsc#1158301).
- 4.2.8 - bsc#1155735, bsc#1157541:
- Read /usr/etc/login.defs.
- Write login.defs configuration to /etc/login.defs.d/.
- 4.2.7 - Change default encryption method from DES to SHA512 (bsc#1157541,
CVE-2019-3700).
- 4.2.6 - Added extra_services to security.rnc file (bsc#1153623).
- 4.2.5 - Place sysctl settings in /etc/sysctl.d/ (jsc#SLE-9077).
- 4.2.4 - AY: Settings have not been exported. "console_shutdown" entry
has not been evaluated (bsc#1150821).
- 4.2.3 - AY: Supporting user defined permission files like
"/etc/permissions.ultra". (bsc#1147173)
- 4.2.2 - Using rb_default_ruby_abi tag in the spec file in order to
handle several ruby versions (bsc#1146403).
- 4.2.1 - Add metainfo (fate#319035)
- Revamp spec
- Replace GenericName with Comment
- 4.2.0 - Provide icon with module (boo#1109310)
- 4.1.2 - Writing security settings in first AY installation stage.
So other modules (e.g. users) can rely on these settings now.
(bnc#1112769)
- 4.1.1 - Added license file to spec. - Upate calls to YaST2 systemd classes (related to fate#319428)
- 4.1.0 - Switched license in spec file from SPDX2 to SPDX3 format. - bnc#1087957 - version bump
- 4.0.0 - mark string "Security" translatable (bnc#988764)
- 3.2.3 - Added support for multiple display managers (bnc#946889).
- Replaced testsuite tests by rspec tests.
- Removed autotools.
- Updated yast2 dependency for cfg_mail.scr
- 3.2.2 - Removed "Boot permissions - Interpretation of Ctrl + Alt + Del"
combo box "Reboot" entry for s390 architecture. (fate#319711)
- 3.2.1 - Bumped version number in order to branch the SLE version due to
different display manager behavior (bnc#946889).
- 3.2.0 - Added some entries to the list of optional services (bnc#942379)
- 3.1.11 - Settings of security levels moved to YAML files
- Redefined security levels (last part of fate#318425)
- 3.1.10 - Updated list of mandatory and optional services (part of
fate#318425)
- 3.1.9 - When checking services, systemd aliases are now taken into
account (so, for example, rsyslog is accounted as syslog). - Removed references to runlevels (obsolete). Only current systemd
target is analyzed. (fate#318425, bnc#941620)
- List of mandatory and optional services moved to a YAML file. - Fixed an error setting the shutdown behaviour of KDM (bnc#907907)
- YaST agents moved to the right location in the source tree
- 3.1.8 - fix paths for systemd target links (bnc#911523)
- 3.1.7 - Fixed the interface to show and process correctly values from
sysctl.conf.
- Source code cleanup, including some minor fixes and new tests. - remove X-KDE-Library from desktop file (bnc#899104) - Removed CWD_IN_ROOT_PATH, CWD_IN_USER_PATH also from the UI where
they showed as empty lines in the overview (FATE#100011,
boo#900829), by Antoine Belvire.
- 3.1.5 /bin/sh y2c_sec y2t_sec yast2-config-security yast2-trans-security h01-ch4c 1698924037
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S 4.5.7-150500.3.3.1
clients security.rb security_auto.rb security_policy_proposal.rb security_summary.rb data security level1.yml level2.yml level3.yml services.yml include security complex.rb dialogs.rb helps.rb levels.rb routines.rb users.rb widgets.rb wizards.rb lib cfa selinux.rb ssg_apply.rb security ctrl_alt_del_config.rb display_manager.rb y2security autoinst lsm_config_reader.rb autoinst_profile autoinst_profile.rb security_policy_section.rb security_section.rb clients security_policy_proposal.rb lsm lsm.rb app_armor.rb base.rb config.rb none.rb selinux.rb security_policies security_policies.rb bootloader_password_rule.rb disa_stig_policy.rb encrypted_filesystems_rule.rb filesystem_size_rule.rb firewall_enabled_rule.rb manager.rb no_wireless_rule.rb policy.rb rule.rb rule_presenter.rb separate_filesystem_rule.rb separate_mount_point_rule.rb target_config.rb unknown_rule.rb modules Security.rb schema autoyast rnc security.rnc scrconf cfg_locate.scr etc_polkit-default-privs_local.scr kde4_kdmrc.scr YaST2 org.opensuse.yast.Security.desktop yast2-security README.md icons hicolor scalable apps yast-security.svg yast2-security COPYING metainfo org.opensuse.yast.Security.metainfo.xml /usr/share/YaST2/ /usr/share/YaST2/clients/ /usr/share/YaST2/data/ /usr/share/YaST2/data/security/ /usr/share/YaST2/include/ /usr/share/YaST2/include/security/ /usr/share/YaST2/lib/ /usr/share/YaST2/lib/cfa/ /usr/share/YaST2/lib/security/ /usr/share/YaST2/lib/y2security/ /usr/share/YaST2/lib/y2security/autoinst/ /usr/share/YaST2/lib/y2security/autoinst_profile/ /usr/share/YaST2/lib/y2security/clients/ /usr/share/YaST2/lib/y2security/lsm/ /usr/share/YaST2/lib/y2security/security_policies/ /usr/share/YaST2/modules/ /usr/share/YaST2/schema/ /usr/share/YaST2/schema/autoyast/ /usr/share/YaST2/schema/autoyast/rnc/ /usr/share/YaST2/scrconf/ /usr/share/applications/ /usr/share/applications/YaST2/ /usr/share/doc/packages/ /usr/share/doc/packages/yast2-security/ /usr/share/ /usr/share/icons/ /usr/share/icons/hicolor/ /usr/share/icons/hicolor/scalable/ /usr/share/icons/hicolor/scalable/apps/ /usr/share/licenses/ /usr/share/licenses/yast2-security/ /usr/share/ /usr/share/metainfo/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31376/SUSE_SLE-15-SP5_Update/d39112714591b2938ef0350164a7b737-yast2-security.SUSE_SLE-15-SP5_Update drpm xz 5 noarch-suse-linux directory Ruby script, ASCII text ASCII text ASCII text, with very long lines UTF-8 Unicode text SVG Scalable Vector Graphics image XML 1.0 document text P P P P S9 듡1A autoyast(security) utf-8 33f8a33de1ea709658aa4bbc0bc611b0057e733e0ca38f1725b5a6b68c57b2f5 ? 7zXZ
! t/] "k%\)%K ffdS!G-TiY;H@>ӖS?Zc+na$K2$m¾:d87 ?E ޯDfOt OSVD;33}x} XmK3mŵqϠmp8s:nK>l/87"ҭP:~{[RQ
. lX MҀ#Jmc<\D /E}̻S rx>J~uÝZ7'+]%{)MY\{S̥ !xvlj @ϯٍJv _9Fε ](K]#"0 )}iOâd;`j㧬
6Fֶnw-Fc.f~a
(3,[80.w SIW$
%8={!$UoO}kzvQFgfP
Q_k"ovzDmɂ/u:ߙs{44UJD;cCc
;opo`uZ8d"Nم2 AT YY{Y5ֺ VzX}g Kb ~܌)-$sHD Ȇ<:j* Ůk-O-?E:v@ طEǨMdmI v/VpZs)?D&ZskYJ 0zYUsyB 4o} Awk|6 v`qaqgDmΘp֬lsQ@p}ES|ԭpIgÒzHtb GCv_N>4D郍 Xv^s*Kys
P &4ɓE%1 ε"7@ Qܑ۩>
sE_]nZj5}^ PLjVM2[8.Wz1ZQ,I.Κp$g]"/p;a+mgF. HȽ{2Q =~r^Zz{VK} 2*Y :=л& B
Y"U`./Zd i٢زE4Y,+?@~u& b OƲKp M=¹RV%|_8> E8@$s* t^GT)kG;=Os:aN &ΑQoQ MZt+ VĿBIB - d
YZ