tiger (1:3.2.4~rc1-3.2) unstable; urgency=medium
* Non-maintainer upload.
* debian/rules: add symlink for Linux 6 (Closes: #1022940)
-- Francois Marier <francois@debian.org> Thu, 27 Oct 2022 21:35:23 -0700
tiger (1:3.2.4~rc1-3.1) unstable; urgency=medium
* Non-maintainer upload.
* Teach tiger about fuse.portal (Closes: #987512)
-- Francois Marier <francois@debian.org> Fri, 23 Sep 2022 12:03:08 -0700
tiger (1:3.2.4~rc1-3) unstable; urgency=medium
* Acknowledge NMU (Closes: #969303)
* config: Fix the logic in the use the default that was preventing
it from using the directory.
* debian/postinst: Use mktemp instead of tempfile
* man/tiger.8.in, systems/Linux/2/check, systems/Linux/2/check_bootloader:
Rename check_lilo to check_bootloader as the check not only looks
at the (deprecated) LILO bootloader but also at the Grub configuration
files (Closes: 512077)
* debian/control:
- Replace bsdmainutils dependency (it is now a transitional package) to
bsdutils (>= 3.0-0), debianutils (>= 1.8). Debianutils is added for
'which' (Closes: #964517)
- Use default-mta instead of sendmail in the Recommends: line
[lintian fix:
mail-transport-agent-dependency-does-not-specify-default-mta]
* debian/config, debian/postinst, debian/preinst: Use 'set -e' instead of
in the #! line (lintian fix: maintainer-script-without-set-e)
* debian/TODO.Debian rename to debian/TODO
[lintian fix: incorrect-packaging-filename]
* debian/watch: Use https instead of http for download.savannah.gnu.org
[lintian fix: debian-watch-uses-insecure-uri]
* debian/changelog debian/control: Remove trailing spaces at end of lines
[lintian fix: trailing-whitespace]
* debian/copyright: Move to machine readable copyright format. In the
process, do a thorough review of all scripts' headers and add the
information of the copyright owners for all scripts under scripts/,
systems/, audit/ and debian/
[lintian fix: no-dep5-copyright]
* debian/control, debian/compat: Update debelper compatibility level.
[lintian fix: package-uses-old-debhelper-compat-version]
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Tue, 22 Sep 2020 20:58:54 +0200
tiger (1:3.2.4~rc1-2.1) unstable; urgency=medium
* Non-maintainer upload.
* Add missing dependency on lsb-release (Closes: #962975).
* Use mktemp instead of tempfile (Closes: #961642).
* Teach tiger about nsfs (Closes: #968713).
-- Francois Marier <francois@debian.org> Sun, 30 Aug 2020 16:58:11 -0700
tiger (1:3.2.4~rc1-2) unstable; urgency=medium
* debian/config: Remove only files using xarg instead of -exec.
Use rmdir to remove the main directory instead of using find.
(Closes: #931581, #931926)
* debian/rules:
- Fix the code creating symlinks (Closes: #909620)
- Add symlink for 5 and default (Closes: #928641)
* config: Add the possibility of having a 'default' definition
and use that one instead of the generic one. This change and
above symlinks should avoid any errors to users upgrading
to linux-image or latest version of the kernel in the future
(Closes: #928641) (LP: #1836789)
* default/config: Fix typo in export call (Closes: #928640) (LP: #1830825)
* scripts/check_passwd: Include patch based on the one provided by Christoph
Anton Mitterer that includes the output of 'pwck -r' when the message is
reported. (Closes: #512076)
* scripts/check_group: Include the output of 'grpck -r' when the message
is reported.
* scripts/check_accounts: Do not complain about dormant accounts for
accounts that are system accounts
* debian/control: Improve the explanation of the package and reference
other software for those users that are looking for alternatives.
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Mon, 19 Aug 2019 00:12:13 +0200
tiger (1:3.2.4~rc1-1) unstable; urgency=low
* debian/postrm: Remove depth in find when purging to avoid warnings
(LP: #665453) (Closes: 944419)
* debian/source/format: Explicitly define the source format. Set as 1.0
since the package will not use quilt as Savannah upstream is directly
packaged into Debian
* debian/rules: Fix FTCBFS: Let dh_auto_configure pass --host to ./configure.
(Closes: #888041)
* util/convert2html, util/genmsgidx: make the build reproducible with patch
provided by Alexis Bienvenüe (Closes: #828226)
* Include content from GIT upstream (3.2.4rc1 release):
- systems/Linux/2/gen_mounts: Added fuse.clamfs and fuse.javafs
filesystems (LP: #1204527, #1305057)
- systems/Linux/2/check_release:
+ Update Debian version, current stable is 9.3 and list of old Debian
versions
+ Add support to check for RHEL and Ubuntu releases. Now Ubuntu is no
longer considered a Debian "unstable" version (LP: #248845)
- scripts/check_accounts: Optimise as per suggestion by Arran Schlosberg
- scripts/check_crontabs: Clean up gen_cron file content before it is used
(Closes: #839635)
- systems/Linux/2/check_lilo: Only complain if grub is world readable
when it has a password configured (LP: #248843).
Look for grub in the proper location (as used in Grub 2)
- systems/Linux/2/check_release: Update Debian version, current stable is
9.3 and list of old Debian versions. Add support to check for RHEL and
Ubuntu releases. Ubuntu is no longer considered a Debian "unstable"
version (LP: #248845)
- systems/Linux/2/deb_checkmd5sums: Optimise by avoiding checking files in
/usr/share/
- tigerrc: Set +Tiger_Check_TRUSTED to 'N' (Closes: #722629)
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Sat, 10 Feb 2018 22:57:09 +0100
tiger (1:3.2.3-15) unstable; urgency=medium
* Acknowledge previous NMU (thank you Francois Marier)
(Closes: 830714, 830716, 848621)
* debian/compat: Update to compatibility version 11
* debian/control: Update to standards version 4.1.3
- Remove debian/tiger.menu
- Add the upstream key in debian/upstream and the 'gpsigurlmangle' in
debian/watch
- Use https url in debian/control VCS-Git headers
- debian/tiger.menu: Remove as we already have a .desktop file as per
Technical CTTE decission #741573 (and fix lintian error)
- debian/rules: Add build-arch and build-indep targets (fix lintian error)
* Include content provided in GIT repository upstream including:
- script/check_accounts: Fix error when eval'ing code
- script/check_passwd: Add a check of the sudoers files using visudo
- systems/Linux/2/check: Disable deb_checkadvisories as the Debian website
content does not provide information to generate up to date listing
of advisories. This feature can be best implemented using apticron,
cron-apt or painintheapt
- systems/Linux/2/deb_checkmd5sums: Do not call prelink with -c
- systems/Linux/2/gen_mounts: Update with a large number of filesystems
currently supported in the Kernel. Additionally, to prevent false
positives, try to determine if the filesystem is within the list of
supported filesystems in the kernel by using two different mechanisms.
This should reduce the number of configuration warnings in the future
(and the need to update this script whenever a new, esoteric,
filesystem is used)
- util/genmsgidx: Do not assume the tempfile binary exists, check first.
- tigerrc, system/Linux/2/check: Make it possible to disable or enable
the Debian specific checks using the patch provided by Nicholas Bamber
(Closes: 512085)
- ./systems/Linux/2/check_listeningprocs: Handle all addresses in the
127.0.0.0/8 range as loopback addresses
- scripts/check_signatures: Fix interpretation of md5sum output which
was broken in the script
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Sun, 04 Feb 2018 20:44:04 +0100
tiger (1:3.2.3-14.3) unstable; urgency=medium
* Non-maintainer upload.
* Teach tiger about cgroup2 (Closes: #843452)
* Teach tiger about efivarfs (Closes: #848377)
-- Francois Marier <francois@debian.org> Sun, 18 Dec 2016 17:16:39 -0800
tiger (1:3.2.3-14.2) unstable; urgency=medium
* Non-maintainer upload.
* Teach tiger about fuse.lxcfs (Closes: #829643)
-- Francois Marier <francois@debian.org> Sun, 10 Jul 2016 10:21:22 -0700
tiger (1:3.2.3-14.1) unstable; urgency=medium
* Non-maintainer upload.
* Teach tiger about tracefs (Closes: #791352)
-- Francois Marier <francois@debian.org> Sat, 16 Jan 2016 20:41:02 -0800
tiger (1:3.2.3-14) unstable; urgency=low
* debian/control: Add Vcs-Browser and Vcs-Git
* Acknowledge NMU for 1:3.2.3-12.1 (Closes: #740625)
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Sat, 28 Nov 2015 12:44:53 +0100
tiger (1:3.2.3-13) unstable; urgency=high
* debian/rules: Make a symbolic link to make Tiger work with Linux kernel
versions 4 (Closes: #785589)
* util/genmsgidx: Try to make build reproducible with patch provided by
Daniel Kahn Gillmor that sets the environment variable LC_COLLATE=C when
running the ls command (Closes: #792828)
* systems/Linux/2/gen_mounts:
- Fix typo in sshfs definition (Closes: 7680867)
- Added aufs (Debian bug 781171)
- Added fuse.s3fs (Debian bug 799753)
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Sun, 22 Nov 2015 20:22:26 +0100
tiger (1:3.2.3-12.1) unstable; urgency=medium
* Non-maintainer upload.
* Fix typo in hugetlbfs check (closes: #740625)
-- Francois Marier <francois@debian.org> Tue, 14 Oct 2014 23:07:58 +1300
tiger (1:3.2.3-12) unstable; urgency=medium
[ Include changes done in upstream's GIT ]
* scripts/check_passwd, scripts/check_anonftp, scripts/check_network: Added
/usr/sbin/nologin to list of valid nologin shells (Closes: #734775, #717218)
(LP: #248844)
* systems/Linux/2/deb_checkmd5sums:
- Fix the location of dpkg-divert, it has moved from /usr/sbin to
/usr/bin (Closes: #732936, #735102)
- Do not use dpkg-divert if not available
* systems/Linux/2/gen_mounts
- Added pstore (Closes: 733832) (LP: #1204531)
- Fix typo: hugetlbf --> hugetlbfs (Closes: 729692)
- Add fuse.gvfs-fuse-daemon as a filesystem and consider gvfs
filesystems as non-LOCAL to be in the safe side. (LP: #1204531)
- systems/Linux/2/check_single: Do not assume existance of /etc/inittab"
[ Debian specific changes ]
* debian/control: Bump standards, no changes required
* debian/po/es.po: Fix Language in PO file
* debian/po/ja.po: Update PO debconf based on Japanese team review
(Closes: #692474)
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Thu, 23 Jan 2014 00:39:49 +0100
tiger (1:3.2.3-11) unstable; urgency=low
* debian/postinst, debian/rules: Do not use example file at
/usr/share/doc/tiger for the configuration. Copy the example file
to /usr/share/tiger and use it from there instead (Closes: #710068)
* debian/rules:
- Add the issue and issue.net example files provided into
/usr/share/doc/tiger/examples.
- Remove auto-generated config files when cleaning just in case
Makefile didn't take care of them
[ Updated with upstream content in GIT repository. The following is a list
of changes relevant to Debian as they close existing bugs. ]
* scripts/check_known: Determine properly the kernel version to decide
whether to user ifconfig (or not) (Closes: #708360, #709065, #687937)
* Make util/mkfilelst a bash script since it uses a sourced script with
arguments (Closes: #690644)
- Note: We ignore other bashims reported in the bug reported due to the
use of HOSTNAME since the Tiger configuration file ensures that the
HOSTNAME variable is properly set before using any of these scripts.
This variable is defined using the proper binary in the
system/<OPERATING_SYSTEM>/config scripts.
* systems/Linux/2/services: Update services definition to prevent false
positives report on duplicated service names (Closes: #696510)
* scripts/check_issue: Do not require there to be administrative-provided
files to compare with. If they are not found, warn instead that we have
nothing to compare with (Closes: #511970)
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Thu, 05 Sep 2013 07:11:59 +0200
tiger (1:3.2.3-10) unstable; urgency=low
* Update Debian Advisories
[ Update with content in latest GIT repository ]
* systems/Linux/2/gen_mounts:
- Added devtmpfs (Closes: 653416)
- Added sshfs and cgroup (Closes: 655276)
* tigerrc:
- Include support for sha512 password hashes (Closes: #657310)
* audit/audit_windows.bat: Update audit script
[ Patch provided by Christian Perrier ]
* Debconf translations updated:
- Dutch, thanks to Jeroen Schot. (Closes: #657283)
- Polish, thanks to Michał Kułach. (Closes: #666445)
-- Javier Fernández-Sanguino Peña <jfs@debian.org> Wed, 18 Apr 2012 19:28:18 +0200
tiger (1:3.2.3-9) unstable; urgency=low
* debian/control:
- Enhance description
- Add Recommends on integrity checking tools
[ Take fixes introduced in upstream's GIT]:
* systems/Linux/2/config: Add /run/, /run/shm and /run/lock
to the list of potentially writable filesystems as these
are commonly used as tmpfs (Closes: #633060)
* scripts/check_accounts: Sort the user files before joining them
(Closes: #624258)
* scripts/check_devices
- Extend the list of EXPECTEDDIRS to cover /dev/bsg (Closes: #616339)
- Do not test symbolic links if they point to regular files.
(Closes: #616337)
* systems/Linux/2/check_inittab: Improved the check so that it takes into
account the availability of /etc/shutdown.allow (Closes: #603199)
* systems/Linux/2/check_umask: Fix how UMASK is obtained for login.defs
(Closes: 603320)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Thu, 08 Dec 2011 01:46:05 +0100
tiger (1:3.2.3-8) unstable; urgency=high
* debian/rules: Symlink systems/Linux/3 to systems/Linux/2 to support
Linux kernel version 3 (Closes: #635450)
* config: Fix bug which prevent it from using the default configuration
file if it did not find a proper configuration
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Thu, 04 Aug 2011 23:25:20 +0200
tiger (1:3.2.3-7) unstable; urgency=low
* debian/control:
- Add Recommends to tripwire | aide
- Review package description
* Update to latest CVS:
- [multiple files] Fix spelling (Closes: #609203)
- systems/Linux/2/config: Add /dev/shm and /lib/init/rw to the writable
filesystems (common tmpfs) (Closes: #603338)
- systems/Linux/2/gen_mounts: Added xenfs as a valid filesystem
(Closes: #615052)
- Apply patch by Timo Lindfors to add support for SHA-512 passwords
(This is the default used in Debian GNU/Linux squeeze and later releases)
(Closes: #581266)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Sat, 26 Feb 2011 01:45:50 +0100
tiger (1:3.2.3-6) unstable; urgency=low
* systems/Linux/2/gen_mounts: Fix typo in brtfs (Closes: 598792)
* tigerrc: Use rsyslogd in the Tiger_Running_Procs definition as
it is the default syslog daemon since Lenny (Closes: 544957)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Mon, 11 Oct 2010 22:29:03 +0200
tiger (1:3.2.3-5) unstable; urgency=low
* system/Linux/2/gen_mounts: Added brtfs (Closes: 598792)
* Updated Danish po-debconf translation provided by Joe Dalton
(Closes: 596151)
* scripts/check_rootdir: Check for inode 2 on ext4 as well as ext2/3.
Thanks to the patch provided by Lorenzo De Liso from Ubuntu.
* debian/postrm: Clean directories correctly when purging.
Thanks to the patch provided by Lorenzo De Liso from Ubuntu.
* config: Do not complain before creating the directory if WORKDIR
does not exist but it is pointing to a temporary location. This
change was prompted by the patch provided by Lorenzo De Liso, but the
change is not exactly the same as the one implemented in Ubuntu (which is
wrong, as it will try to create the directory twice)
(Closes: #589089)
Note: The above bug is considered closed even if the patch
"Use temporary file instead of hardcoded rcfile for temporary work"
is not included as this patch is not accepted.
* Remove RCS directories from the source package.
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Wed, 06 Oct 2010 03:01:20 +0200
tiger (1:3.2.3-4) unstable; urgency=low
* Updated Debian Policy to 3.9.0.
* Pull fixes from upstream SVN:
- Fixed the bashism problem with logical expression in
/systems/HPUX/check_trusted. (Closes: #581140).
- Added support to recognize fuse.ltspfs for ltspfs file system. Thanks to
Alexandre Cavalcante Alencar. (Closes: #587507).
* Added debian/tiger.menu file.
* Added debian/tiger.desktop file.
-- Francisco Manuel Garcia Claramonte <francisco@debian.org> Thu, 14 Jul 2010 21:07:17 +0200
tiger (1:3.2.3-3) unstable; urgency=low
* Pull fixes from upstream SVN:
- Fixed the problem in scripts/check_known checking /*/lost+found/* files
with spaces or newline files in their filename, thanks to Dave Rutherford
for the patch (Closes: #532826).
- Fixed the problem with delete() function in initdefs
script, and fixed the problem with temporary file in scripts/find_files
script. Thanks to Hannes von Haugwitz for the patch (Closes: #544701).
- Added support o detect simfs as local filesystem for OpenVZ systems,
thanks to Raimund Sacherer for the patch (Closes: #571944).
- Clarify use of Tiger_Running_Procs for check_runprocs in the
documentation (Closes: 544957)
- Fix syntax error in scripts/sub/check_nousrgrp
* debian/debian.ignore: Fix unescape patterns (dots and parenthesis)
and decrease processing time by combining and grouping similar rules.
Thanks to Moritz Naumann for the patch (Closes: #550512).
* debian/changelog: wrap long lines
* Lintian fixes to make the package lintian clean
- debian/rules: Adjust executable bit to all shell files instead of just to
one selection of them.
- Add debian/tiger.lintian-overrides to setup overrides for warnings
that are not relevant for the package.
- debian/rules: Add call to dh_lintian.
* Update Debian Advisories
* Debconf translations updated:
+ Czech translation, thanks to Miroslav Kure (Closes: #569694).
+ Portuguese translation, thanks to the "Portuguese Translation Team"
(Closes: #570456).
+ Russian translation, thanks to Yuri Kozlov (Closes: #570540).
+ Brazilian Portuguese translation, thanks to Adriano Rafael Gomes
(Closes: #570601).
+ Vietnamese translation, thanks to Clytie Siddall (Closes: #572777).
* Debconf translations included:
+ Added Slovak Debconf translation, thanks to helix84 (Closes: #570289).
+ Added Italian Debconf translation, thanks to Vincenzo Campanella
(Closes: #570747).
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Mon, 05 Apr 2010 19:57:47 +0200
tiger (1:3.2.3-2) unstable; urgency=low
[ Francisco Manuel Garcia Claramonte ]
* Thanks to Stefano Zacchiroli for the NMU 1:3.2.2-11.1
and close the bug #544113.
* Updated some Debconf translations:
+ French translation, thanks to Christian Perrier (Closes: #565321).
+ Swedish translation, thanks to Martin Bagge (Closes: #565497).
+ Japanese translation, thanks to "Hideki Yamane (Debian-JP)"
(Closes: #565615).
+ German translation, thanks to Erik Schanze (Closes: #568175).
+ Russian translation, thanks to Yuri Kozlov (Closes: #537918)
* Updated to Debian policy 3.8.4
* Fixed the Bashisms problem in the files:
+ systems/default/check_ndd. Fixed just the problem with the alternative
test command. (Closes: #530205)
+ systems/HPUX/check_passwdspec. (Closes: #530204)
* Fixed the problem finding users in scripts/sub/check_suid. (Closes: #438122)
[ Javier Fernandez-Sanguino ]
* Integrate all patches included in the 3.2.2-11 package release which were
missing in 3.2.3-1 and generated regression bugs (Closes: #566893, #567857,
#529041)
-- Francisco Manuel Garcia Claramonte <francisco@debian.org> Mon, 01 Feb 2010 00:09:33 +0100
tiger (1:3.2.3-1) unstable; urgency=low
* New upstream release
* Updated to Debian Policy 3.8.3
* Updated debhelper dependency version to 7.
* Updated debhelper compatibility to 7.
* Added myself as Comaintainer,
Francisco Manuel Garcia Claramonte <francisco@debian.org>
* Removed the Diff depends (Closes: #544113, #544041).
Thanks to Santiago Vila and Karl Ferdinand Ebert for the patch.
* Changes to make the package lintian clean.
+ Updated dh_clean call to dh_prep in debian/rules.
+ Added ${misc:Depends} to Depends debian/control field of
tiger and tiger-otheros binary packages.
+ Adjusted executable permissions to some shell scripts.
* Removed unneeded commands to create symlinks in debian/rules.
* Removed the clear idx file code in util/genmsgidx to allow build the
Debian package.
* Updated template description to avoid make a question, according to Debian
Developer's Reference (6.5.4.2.1). Updated debian/po/* files.
Updated spanish translation.
* Added commands in debian/rules to remove unneeded Makefiles files in Debian
package.
-- Francisco Manuel Garcia Claramonte <francisco@debian.org> Thu, 03 Dec 2009 21:52:06 +0100
tiger (1:3.2.2-11) unstable; urgency=low
* Sort the system/Linux/2/inetd file since 'join' complains about it not
being sorted when used in check_inetd (Closes: #524783)
* Add symbolic links so users can create the issue and issue.net templates
they want to check against when running check_issue in /etc/tiger/
(Closes: #511970)
* scripts/find_files: Use patch provided by Khalid Shukri in order to
complain from danging symlinks properly so that they can be tiger.ignore'd
(Closes: 434333)
* debian/debian.ignore:
- Add an ignore message to remove the dangling symlinks that are
udev-related.
- Add an ignore message for /dev/log since world-writable permissions for
that file are standard in Debian (Closes: 417939)
* initdefs: Change error message when a file value definition is empty
* systems/Linux/2/check_umask: More extensive umask checks also covering
different analysis for each one of the available shells in order to provide
more meaningful information.
* systems/Linux/2/check_rcumask: Remove shell login umask definitions from
* the file (both bash and csh/tcsh) since these do not apply to the script
(i.e. are not init.d related) and add /etc/init.d/rc handling
(Closes: 443807)
* doc/misc.txt: Add new messages for new umask analysis covered in
check_umask
* doc/filesys.txt: Add a description of the new warning message introduced by
the above patch.
* doc/config.txt: Document that this happens also when the configuration
* system
was not able to define a valid file and set a value for the file definition.
* debian/rules: Adjust the permissions of /var/lib/tiger/work and
/var/log/tiger/ so that they are 0700. (Closes: #512078)
* debian/preinst: Adjust the permissions of /var/lib/tiger/work and
/var/log/tiger/ when upgrading so that they are set to 0700.
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Thu, 21 May 2009 00:26:23 +0200
tiger (1:3.2.2-10) unstable; urgency=low
* Fix bug in scripts/check_perms
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Thu, 07 May 2009 23:55:22 +0200
tiger (1:3.2.2-9) unstable; urgency=low
* Use --debconf-ok when calling ucf (Closes: 517798, 521620, 539188)
* Update check_release to reflect latest Debian release (Closes: 523700)
* Fix systems/Linux/2/config so that it uses /etc/apache2 in Debian if it
exists and /etc/apache otherwise. (Closes: 523699)
* Change the wording of errors in tigerexp when the variable does not have a
value (Closes: 523699)
* Throw away errors from executing 'df -t nfs' in scripts/check_network
(Closes: 511803)
* Linux/2/gen_mounts: Added davfs, fuse and ext4 (Closes: 524722, 498468, 512567)
* Update list of Debian advisories
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Sat, 25 Apr 2009 14:01:26 +0200
tiger (1:3.2.2-8) unstable; urgency=low
* Acknowledge NMU (Closes: #503282)
* Fix Makefiles so that the explanation index file is generated and
distributed properly (Closes: #507028)
* system/Linux/2/gen_mounts:
- Added ecryptfs, used by ecryptfs-utils (Closes: 506512)
- Fix bashism (Closes: #505939, #505939)
* Update Standards-Version to 3.8.0:
- Added a Homepage field in debian/control
* Use debhelper version 5
* Lintian fix:
- Comment out DH_COMPAT definition in debian/rules
- Fixed debian/watch file used by uscan by adding a version and a proper
location for upstream updates
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Thu, 27 Nov 2008 23:47:16 +0100
tiger (1:3.2.2-7.1) unstable; urgency=medium
* Non-maintainer upload.
* Patched Makefile.in to make clean and distclean targets use
doc/Makefile.in when recursing the clean target. (Closes: #503282)
-- Jonny Lamb <jonny@debian.org> Fri, 24 Oct 2008 16:14:23 +0100
tiger (1:3.2.2-7) unstable; urgency=low
* Fix bashism in check_patches script (Closes: #502672)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Sun, 19 Oct 2008 12:45:38 +0200
tiger (1:3.2.2-6) unstable; urgency=medium
* Bring changes from CVS to gen_mounts, amongst other fixes:
- Adds definitions for the following filesystems: reiser4, securityfs,
fuse.gvfs-fuse-daemon, fuseblk, fuse.truecrypt, fuse.encfs, debugfs, afs,
configfs, gfs, gfs2, inotifyfs, hugetlb, subfs, futexfs and bind.
(Closes: #498203, #483727, #469685, #490344, #490822, #451879)
(LP: #155211)
- Make it possible to define system-specific local and non-local
filesystems through the use of the Tiger_FSScan_Local and
Tiger_FSScan_NonLocal variables in tigerrc.
- Make it possible to prevent the 'unknown filesystem' warnings through
the use of a new tigerrc variable: Tiger_FSScan_WarnUnknown
* Use prelink to calculate checksums if present (Closes: #445531, #349391)
* Use /var/lib/tiger/work instead of /var/run/tiger/work to be
FHS-compliant. It also avoids spamming people using a tmpfs /var/run
with warning messages every time it creates its directory. (Closes: #486591)
* Use tempfile in the config script to create the RC file if available, the
$$ construct is used in a safe directory (WORKDIR) but this way people
doing a cursory look at the code will not report (or try to fix, as in
Ubuntu) inexistant temp race conditions.
* Add code in Makefile.in and doc/Makefile.in (new file) to make it possible
to build and remove the HTML files generated from the text files so that
we do not distributed autogenerated content.
* Also change Makefile.in to make 'all' actually be useful so that the build
targets builds binaries (binaries were being built on install instead)
* Update list of Debian advisories to current date.
* Add a ignore for Debian to prevent Tiger from complaining about fetchmail
processes.
* Add additional samples for server processes to debian/server.ignore
* Remove double linefeed in debian/changelog
* Use UCF to handle configuration file changes to prevent prompting when
upgrading to tiger versions that change the tigerrc. (Closes: #341595)
* Remove stale left file created in /usr/lib/tiger/bin if it exists on purge
* Lintian fixes:
- Remove coreutils Depends as it is an Essential package
- Remove code in postinst related to an ancient bug and associate
debconf prompts.
- Make the following scripts executable: systems/Linux/1/check,
systems/Linux/1/gendlclients, systems/Linux/1/getdisks,
systems/Linux/2/update_advisories.sh
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Tue, 09 Sep 2008 00:28:35 +0200
tiger (1:3.2.2-5) unstable; urgency=low
* Acknowledge NMU, which was not acknowledged in the previous package
version.
- Fix bashism in 'tigercron' script (Closes: #468700)
- Bump Standards-Version to 3.7.3.
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Sun, 31 Aug 2008 14:47:18 +0200
tiger (1:3.2.2-4) unstable; urgency=low
* Fix a temp race condition in the genmsgidx script if the system
has a tempfile function (Closes: 496415)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Tue, 26 Aug 2008 12:00:16 +0200
tiger (1:3.2.2-3.1) unstable; urgency=medium
* Non-maintainer upload.
* Fix bashism in 'tigercron' script (Closes: #468700)
* Bump Standards-Version to 3.7.3.
-- Chris Lamb <chris@chris-lamb.co.uk> Sat, 12 Apr 2008 04:35:43 +0100
tiger (1:3.2.2-3) unstable; urgency=low
* Fix encoding of changelog and copyright files (Closes: #454024)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Mon, 11 Feb 2008 22:28:40 +0100
tiger (1:3.2.2-2) unstable; urgency=low
* Remove all configuration files on purge, including tiger.default if
it exists (which is not a conffile since 1:3.2.1-36 and might be
a leftover) (Closes: #455108)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Sun, 09 Dec 2007 15:36:44 +0100
tiger (1:3.2.2-1) unstable; urgency=low
* New upstream release
* Remove debian/ dir from upstream's tarball to prevent FTBFS
(Closes: #450479)
* Fix scripts:
- scripts/check_crontabs, scripts/check_apache, scripts/check_xinetd:
Change message calls so that they can be filtered (Closes: #411534)
- scripts/check_apache: Fix the way the configuration file is handled
to obtain the IP address and port (Closes: 436904)
- systems/Linux/2/gen_cron: Handles properly the case when the special
@daily,@reboot, etc. definitions are used instead of real times. Also
fix bug deailing with variables in crontab contents (Closes: 418440)
* Add 'fuse' to the list of valid filesystems (Closes: #449439)
* Add Dependency on bsdmainutils to get the COLUMN command (Closes: 448975)
* Add Portuguese translation, thanks LuA-sa LourenA§o (Closes: 440372)
* Modify update-advisories to skip directories with 'data' in the name
* Update the advisories list
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Thu, 08 Nov 2007 02:20:09 +0100
tiger (1:3.2.1-38) unstable; urgency=low
* systems/Linux/2/gen_mounts, vmblock is now recognised as a non-local FS.
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Wed, 27 Jun 2007 00:46:54 +0200
tiger (1:3.2.1-37) unstable; urgency=low
* systems/Linux/2/check_rcumask: Fix syntax error (Closes: #430224)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Sat, 23 Jun 2007 15:52:58 +0200
tiger (1:3.2.1-36) unstable; urgency=low
* Fix the location of Tiger's default file (Closes: #426182)
* Updated the Debian advisories listing (as of today, latest DSA is 1316)
* Changed the maintainer's email address
* system/Linux/2/check_lilo: run the boot loader check if on amd64
(Closes: #412669)
* system/Linux/2/deb_checkmd5sums: Fix the script so that it understands
properly the "new" md5sum format (Closes: #412822)
* Add new suid files to the list of SUIDs at system/Linux/2/suid_list
(Closes: #417330)
* scripts/check_devices: Extend the list of EXPECTEDDIRS for Linux to cover
udev-specific dirs (Closes: #417940, #420488)
* systems/Linux/2/check_rcumask: Skip comment lines defining umask
(Closes: 418531)
* scripts/check_ftpusers: Skip this check if there is no FTP daemon
installed (Closes: #420486)
* scripts/check_printcap: Skip this test if CUPS is installed
(Closes: #420487) (LP: #248852)
* system/Linux/2/gen_mounts: Added fusectl to the local filesystems
(Closes: #409386)
* Debconf translations:
- Included Dutch translation provided by Bart Cornelis (Closes: #414768)
- Included Portuguese translation provided by LuÃsa Lourenço
(Closes: #415534)
-- Javier Fernandez-Sanguino Pen~a <jfs@debian.org> Fri, 22 Jun 2007 01:04:17 +0200
tiger (1:3.2.1-35) unstable; urgency=low
* [scripts/check_rootkit]
Send stderr output of chkrootkit to /dev/null to avoid the 'warning, got
bogus unix line' messages that netstat might output (Closes: #223847)
* Update advisories
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 30 Nov 2006 21:42:23 +0100
tiger (1:3.2.1-34) unstable; urgency=low
* Linux/2/gen_mounts - Added selinuxfs to local FS (Closes: #397832)
* scripts/check_accounts - Redirect find errors in home directories
to /dev/null, prevents root being sent errors when using NFS mounted
home directories with root_squash. Thanks to Matus Harvan for the
patch (Closes: #386163)
* Update Debian advisories lists.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 10 Nov 2006 16:01:21 +0100
tiger (1:3.2.1-33) unstable; urgency=low
* Fix typo in check_rootkit script, thanks to Michael Cihar (Closes: #385475)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 31 Aug 2006 23:04:43 +0200
tiger (1:3.2.1-32) unstable; urgency=low
* Modify config so that it will attempt to create a working directory if
it does not exist (Closes: #366919)
* [scripts/check_rootkit] Introduce Tiger_CHKROOTKIT_ARGS so that
admins can ajust the behaviour of CHKROOTKIT (defaults to '-q')
(Closes: #320341)
* Include output of chkrootkit when a file is INFECTED (Closes: #277533)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 30 Aug 2006 14:13:42 +0200
tiger (1:3.2.1-31) unstable; urgency=low
* systems/Linux/2/deb_checkmd5sums: Fix Ubuntu bug 50611 by excluding dev/
and lib/udev/devices/ from the md5sum test, thanks to Richard Laager
for the patch (Closes: #383400)
* systems/Linux/2/check_neverlogin: handle users prepended with domains
(DOMAIN\user) properly (Closes: #344890)
* Update advisories from Debian as of today.
* Simplify dependencies (just use coreutils) (Closes: #368713)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 17 Aug 2006 07:51:17 +0200
tiger (1:3.2.1-30) unstable; urgency=low
* Fix deb_nopackfiles to kip directories that are symbolic links, this
happens with /usr/X11R6/bin as the latest Xorg package versions just
symlink this to /usr/bin/ (Closes: #367931, #373790)
* Fix deprecated syntax with sort that made the cron job spout warnings.
Thanks to Cyril Chaboisseau and Adam James for providing a patch
(Closes: #369501)
* Fix check_listeningprocs to prevent it from botching when udp6 services
are up (Closes: #375165)
* Updated information of DSAs (should someday include information based
on the DTSA archive but I'd rather use OVAL...)
* Add some more TODOs
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 5 Jul 2006 02:30:25 +0200
tiger (1:3.2.1-29) unstable; urgency=low
* Fix check_accounts to properly review the contents of .forward files.
Thanks to Rainer Schopf for the fix (Closes: #329610)
* Added cifs to the non local filesystems in gen_mounts (Closes: #329813)
* Use TAIL in Linux scripts conforming to POSIX 1003.2-1992 (Closes: #339090)
* check_accounts: Add quotation marks to Tiger_Admin_Accounts to prevent
errors if empty (Closes: #342181)
* check_devices: Handle the special case of having " in filenames by
quoting the character (Closes: #355096)
* Nice Tigercron by default, users wishing to change the nice can adjust
it in /etc/default/tiger (Closes: #334186, #325257, #339655)
* Disable signature checks in the default tigerrc since those provided are
not updated, debsums is prefered in Debian (Closes: #327486)
* Update the list of advisories in debian_advisories
* Debconf translations:
- Added Vietnamese translation provided by Clytie Siddall (Closes: #322301)
- Added Swedish translation provided by Daniel Nylander (Closes: #343731)
* Use debhelper compatibility version 4 (it was about time!)
* Lintian fix: eliminate duplicate Recommends/Depends on binutils
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 20 Apr 2006 23:05:48 +0200
tiger (1:3.2.1-28) unstable; urgency=low
* Added a dependency on "| debconf-2.0" as requested by Joey Hess
* Use Debhelper compatibility version 4
* Updated to latest CVS code:
- gen_passwd_sets: Create a src file if using LDAP (Closes: #319815)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 4 Aug 2005 19:16:22 +0200
tiger (1:3.2.1-27) unstable; urgency=low
* Updated to latest CVS code, with some new fixes and patches including:
- check_accounts: Check for null $uids before using them in comparisons
(Closes: #312080)
- check_runprocs: Use comm instead of fname (Closes: #308486)
- Linux/gen_mounts: Changed extraction from mount command
so it can cope with whitespaces in mount locations, added sanity
check and fix a bug that mangled $fs (Closes: #315435)
- Makefile.in: install files needed to run tiger -G (Closes: #319468)
* German translation update of debconf templates provided by Erik Schanze
(Closes: #311857)
* Updated to latest batch of Debian advisories
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 22 Jul 2005 16:50:33 +0200
tiger (1:3.2.1-26) unstable; urgency=low
* Updated to latest CVS code, with some new fixes and patches including:
- check_listeningprocs (generic and Linux versions): Proper check for
processes in loopback (Closes: #307695)
- Linux/check_passwdspec: Better fix for pwd=! (Closes #308141)
- Linux/deb_checkmd5sums: Prevent issues with /usr/bin/[ by adjusting
GREP calls (Closes #305484)
- Linux/gen_mounts: Added auto, udev when using on /dev,
capifs and nfsd. (Closes: #305670 #307802 #307887 #308585)
Note to self: Bug mount manpages since none of these are listed
there...
- Linux/gen_passwd: Add LDAP password support with patch provided by Micha
Kersloot (Closes: #307505)
- Documentation improvements (README.Sources and TODO)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 14 May 2005 12:52:09 +0200
tiger (1:3.2.1-25) unstable; urgency=low
* Updated to latest CVS code:
- Add afs as a non-local filesystem, and auto as a local filesystem
(Closes: #305670)
- Improve manpage wording
* Provide a default value for Tiger_Running_Procs instead of leaving
it empty
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 21 Apr 2005 20:09:45 +0200
tiger (1:3.2.1-24) unstable; urgency=medium
* Updated to CVS code:
- Fixed Linux/2/gen_mounts code which broke with the patches
implemented before the previous upload.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 18 Apr 2005 18:23:30 +0200
tiger (1:3.2.1-23) unstable; urgency=low
* Updated to CVS code, this changes:
- gen_mounts now considers valid and non-local many more filesystems
(as described in mount(5)) including devfs (Closes: #304956, #304555,
#304557)
- check_listeningprocs will now check against both fname and comm and
strips the arguments of the command (this is an improvement over the
fix done in #288086)
- check_network_config properly checks ICMP redirects and the message
generation is fixed now it also now checks for local iptables rules
(Closes: #304957)
- several typo fixes in doc/linux.txt
* Updated DSA listing
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 16 Apr 2005 22:19:50 +0200
tiger (1:3.2.1-22) unstable; urgency=low
* Added some more valid but non-local filesystems ('none', 'binfmt_misc',
'autofs') to gen_mounts (Closes: #302646)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 2 Apr 2005 13:07:07 +0200
tiger (1:3.2.1-21) unstable; urgency=low
* Added the sysfs as a valid (local, but not reviewed) filesystem
(Closes: #302612)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 2 Apr 2005 01:52:34 +0200
tiger (1:3.2.1-20) unstable; urgency=low
* Upgraded to latest CVS sources:
- Depend on binutils (Closes: #301451)
- (check_rootdir) Do not warn on the inode if the root filesystem is not
ext2|3 (Closes: #298305)
- (check_runprocs) Use comm instead of fname so that the names of the
processes are not truncated (Closes: #288086)
- (check_lilo) Only run if running on the x86 architecture (Closes: #288737)
- (check_single) Only run if running on the x86 architecture (Closes: #288737)
- (check_passwdspec) Fixed password aging check. Separate all checks
so that they prevent bugs if pwd="!" (Closes: #297889)
- (deb_checkmd5sums) Do not warn if the md5 file is not present in the
list file (Closes: #299935)
- (deb_nopackfiles) Remove uneeded {} (Closes: #297889)
- Also fixes a number of documentation typos fixed by Nicolas Francois
* Updated advisories
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 31 Mar 2005 17:14:50 +0200
tiger (1:3.2.1-19) unstable; urgency=low
* tigercron
- Fixed invalid From: header based on Robert Loomans' patch. This bug
was introduced by the previous release. (Closes: #287780)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 30 Dec 2004 09:00:19 +0100
tiger (1:3.2.1-18) unstable; urgency=low
* systems/Linux/2/check_lilo:
- Fixed grub.conf naming (Closes: #286641)
* scripts/check_passwd:
- Delete temporary passwd files only on exit (Closes: #284899)
* debian/server.ignore:
- Added a sample ignore line for users accessing a remote server
with X11Forwarding set to 'on' (Closes: #284220)
* scripts/check_passwdformat:
- Maximum user and group length set to 32 (Closes: #283446)
(probably needs to be moved to systems/Linux/2/ since it's
Debian-specific)
* tigercron, tigerrc:
- Added Tiger_Mail_FROM feature (Closes: #243517)
* Disabling signature checks since they cannot be relied on (use
Tripwire, Aide, Samhain, Integrit, bsign or any other intecrity checker
instead), moreover deb_checkmd5sums already does it for Debian...
(Closes: #274625)
* Added Czech debconf translation provided by Miroslav Kure (Closes: #287301)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 27 Dec 2004 19:18:53 +0100
tiger (1:3.2.1-17) unstable; urgency=low
* Quoted homedir uses in check_rhosts and check_netrc (Closes: #282211)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 21 Nov 2004 11:56:57 +0100
tiger (1:3.2.1-16) unstable; urgency=low
* Updated advisories
* Fixed gen_group_sets to work properly in NIS environments for Linux
and Tru64 (Closes: #281608)
* Fixed eval in check_accounts so that find is _only_ executed for users
which are not part of Tiger_Admin_Accounts, this prevents Tiger from
going and using remote filesystems (i.e. /var/autofs/ because in
Debian 'operator' has /var as his home dir). It also should speed
up this check a lot. This shows why Tiger_Admin_Accounts is a bad
idea and Tiger_Accounts_Trust should be used instead (or add a
Tiger_Accounts_Admin) (Closes: #280653, #280654)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 17 Nov 2004 15:15:21 +0100
tiger (1:3.2.1-15) unstable; urgency=low
* Lintian fixes:
- Updated Standards-Version
- Removed cvs conflict copy files
- Changelog is now UTF-8
* Use C locales to avoid scripts/check_system from breaking up (Close: #270108)
* deb_checkmd5sums's regexep now excludes usr/share/doc/ (Closes: #264111)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 13 Sep 2004 11:12:08 +0200
tiger (1:3.2.1-14) unstable; urgency=low
[ as suggested by Tilman Koschnick ]
* Allow delete() to remove files from LOGDIR so that reports generated
by tiger -e are removed proplerly (Closes: #262523)
* Symlink /usr/lib/tiger/tigexp to /sbin/tigexp so that tiger -e works
(Closes: #262518)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 1 Aug 2004 18:19:18 +0200
tiger (1:3.2.1-13) unstable; urgency=low
* Updated to CVS changes which fix a problem in the gen_passwd_sets
script which would make duplicates appear in the passwd files.
Thus generating a lot of false positives (in the check_passwd script)
Also removes some other duplicates in the check_passwdformat script
and updates the Debian advisories listing.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 27 Jun 2004 21:25:27 +0200
tiger (1:3.2.1-12) unstable; urgency=low
* Updated to latest CVS code fixing:
- [check_known] Do not call LS directly with all files but use a for loop
(Closes: #246600)
- [deb_nopackfiles] Made the dirlist variable so that directories which
do not exist are not checked for (Closes: #254574)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 27 Jun 2004 13:58:24 +0200
tiger (1:3.2.1-11) unstable; urgency=low
* Updated to latest CVS code which fixes:
- [check_accounts] Try to avoid eval problems if user/shells/directories
contain non-empty (but invalid) characters (such as space)
(Similar changes in some other scripts to avoid breakage in similar
situations)
(Closes: #246987)
- [check_passwd] Define Tiger_Passwd_Hashes if not defined
(Closes: #246885)
- [deb_checkmd5sums] Fixed patch provided by Chung-chieh Shan
(Closes: #234811)
* Remove check_finddeleted from the default configuration since it
is prone to a lot of false positives, also, it depends on LSOF
(which is only recommended). I will reenable this sometime in
the future and (maybe) provide a Debian-specific script to just
monitor for daemons that are using outdated libraries
(Closes: #249331)
* Send filesystem scans error output to /dev/null (need to fix this
in scripts/find_files by not following symbolic links that point
nowhere, this is an interim fix)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 20 May 2004 09:31:23 +0200
tiger (1:3.2.1-10) unstable; urgency=low
* Removed evals from tigerrc and make proper sourcing in
Tiger_PATH_OK_Group_Write (Closes: #236419)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 6 Mar 2004 11:00:55 +0100
tiger (1:3.2.1-9) unstable; urgency=medium
* Added Danish debconf translation (Closes: #235066)
* Fixed errors in check_finddeleted (Closes: #235951)
* Added some more common servers to the server.ignore example
* Fix error in deb_checkmd5sums with patch from Chung-chieh Shan
which avoids failure on packages whose names contain "." (Closes: #234811)
* Minor change in check_passwd to detect if no shell is defined for
a given user (as suggested by raoul bhatia)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 3 Mar 2004 13:13:05 +0100
tiger (1:3.2.1-8) unstable; urgency=low
* check_rcumask: Proper warning if no umask settings are defined
(Closes: #234661)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 25 Feb 2004 20:39:16 +0100
tiger (1:3.2.1-7) unstable; urgency=low
* Updated from CVS which includes a number of improvements including
the following (relevant to Debian bugs):
- Added more information on check_finddeleted regarding
how to use it and remove spurious errors. This script
will not give false positives any longer on some special
characterr) files like /dev/console or /dev/null and has
reduced its output to something more managable (there is
only one message per deleted file now)
(Closes: #232704,#231148, #225112)
- Fixed password definitions adding the 'g-Z' 'A-Z' and
'.' sets (Closes: #227596)
- Many scripts now controls YPCAT errors to printing errors in
hosts that are not properly configured.
(i.e. nsswitch.conf is defined to use NIS but there's no NIS
host) Errors are redirected to /dev/null when YPCAT is not
required as many systems do not include it, specially in Debian.
(Closes: #225910)
- Check_crontab will only warn if neither cron.allow
or cron.deny exist (Debian bug #226362)
* Default cronrc no longer runs check_finddeleted as often since it's
prone to false positives (even if it can be customised through the
ignore mechanism, see /usr/share/doc/tiger/examples/server.ignore)
* Added French template translation provided by Christian Perrier
(Closes: #226883, #224700)
* Fully translated the spanish template.
* Updated to include latest Debian advisories.
* debian/rules now uses mandir (/usr/share/man/) in configure call.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 24 Feb 2004 21:21:19 +0100
tiger (1:3.2.1-6) unstable; urgency=low
* The cron.d taks will only run if tigercron is executable, this avoids
cron.d from running tiger if it has been removed but not purged
(thanks to Thomas Lange for noticing this mistake)
* Included patch from Nicholas François which makes Tiger not warn
on manpage files purged through localepurge (Closes: #219728)
* Added To: line in tigercron (Closes: #218363)
* Added Japanese translation contributed by Hideki Yamane (Closes: #224185)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 20 Dec 2003 13:49:38 +0100
tiger (1:3.2.1-5) unstable; urgency=low
* Updated from CVS to fix reported bugs:
* fixed typo in check_lilo (Closes: #221470)
* This update also provides a number of fixes/enhancements which
will be available in the next release:
* check_crontabs adds more information in messages
* check_inetd does not report the services as not protected if
TCP wrappers are undefined
* per interface promiscuous detection with 'ip' for more accurate
results in check_known
* check_passwd message fix
* shadow password check is no longer in check_passwdformat (move to
account checks)
* check_rootdir checks ownership
* check_services will not misreport for services not defined
* check_ssh needs to run through bash
* check_xinetd fixes syntax error
* YP -> YPCAT in all operating systems
* Proper definitions for AIX
* HPUX fixes
* Tiger now runs check_xinetd or check_inetd depending on which
configuration file is available.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 6 Dec 2003 22:10:02 +0100
tiger (1:3.2.1-4) unstable; urgency=low
* Updated from CVS sources to fix reported bugs
* Updated check_root so mesg check is not done when running
in cron (Closes: #218056, #220924)
* Updated check_lilo now locates grub file properly (Closes: #218771)
* Updated check_passwd fixes syntax error (Closes: #219086)
* deb_checkmd5sums detect local diversions and avoid problems with
duplicate conffiles (Closes: #219727, #220325)
* check_release fixed typeset bashism (Closes: #219764)
* deb_checkmd5sums now uses -F to avoid warning on /usr/bin/[
(Closes: #220946)
* config add sendmail_cf location
* Updated advisories list.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 16 Nov 2003 13:10:08 +0100
tiger (1:3.2.1-3) unstable; urgency=low
* Updated from CVS sources to latest Tiger changes including:
- Check_rootkit no longer complains if chkrootkit is not installed
(Closes: #215885)
- Fixes check_network_config return values (Closes: #215891)
- Fixes inittab's false positives (Closes: #215872)
- Fixes bashisms ini scripts (Closes: #215896)
- Fixes initdefs delete() in order for check_chkrootkit removal to work
properly (Closes: #215882)
* Debian/rules now sets SHELL=/bin/bash (Closes: #198856)
* Updated to latest advisories
* Now depends also on coreutils (X | corerutils) (Closes: #215487)
* Added device baseline to debian.ignore (Closes: #194956)
* Removed check_sendmail from check.tbl so that it does not get run by
check_system (Closes: #2158739)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 19 Oct 2003 23:56:50 +0200
tiger (1:3.2.1-2) unstable; urgency=low
* The "Happy Birthday! (to me)" Release, now uploaded to unstable.
* New upstream version, which includes is fully integrated with
TARA 3.0.3 and provides quite a number of bugfixes, checks and new
documentation.
* Changes relevant to reported Debian bugs include:
- Adds support for diversions and conffiles in deb_checkmd5sums
(Closes: #211329, #162589)
- Provides documentation for check_logfiles (Closes: #195192)
- Adds support for HP-UX in several scripts (Closes: #195200, #197220)
- Changes gen_passwd_sets under Linux to identify des or md5
(Closes: #197221)
- Removes debug messages from check_rootdir (Closes: #197219)
- Added tigercron.8 manpage (Closes: #148291)
- OS-specific scripts are run before generic ones, since the Linux
version of check_listeningprocs is different than the generic one
it will be prefered and run (Closes: #200778)
- Deb_nopackfiles no longer uses long arguments in the grep call
and has been speed-optimized (Closes: #201577)
- Deb_nopackfiles also now sends FIND errors to void since they
are not used and might confuse users who do not have X
installed (Closes: #207904)
- check_path now uses -L to follow symlinks (Closes: #161993)
- Adds new password check for empty passwords (Closes: #197228)
- Fixed typo in accounts.txt spotted by Philipp Weis (Closes: #211793)
- check_passwdformat provides an improved message and allows daemon
in uid 1 (Closes: #211328)
- also, check_passwdformat now will not warn on lenght issues for
locked users. (Closes: #211327)
* Added -XMacOSX to exclude the new OS provided upstream.
* Modified debian/rules to move the MacOSX and Tru64 directories to
tiger-otheros
* Added patch for new po-debconf format (Closes: #186800)
* (but changed it so that the 'root' user is not translatable)
* Updated to latest Debian advisories.
* Forced to start using epochs due to how I messed the experimental
packages (3.2.1rcX > 3.2.1!)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 10 Oct 2003 19:19:36 +0200
tiger (3.2.1-1) experimental; urgency=low
* New upstream version, which includes is fully integrated with
TARA 3.0.3 and provides quite a number of bugfixes, checks and new
documentation.
* Changes relevant to reported Debian bugs include:
- Adds support for diversions and conffiles in deb_checkmd5sums
(Closes: #211329, #162589)
- Provides documentation for check_logfiles (Closes: #195192)
- Adds support for HP-UX in several scripts (Closes: #195200, #197220)
- Changes gen_passwd_sets under Linux to identify des or md5
(Closes: #197221)
- Removes debug messages from check_rootdir (Closes: #197219)
- Added tigercron.8 manpage (Closes: #148291)
- OS-specific scripts are run before generic ones, since the Linux
version of check_listeningprocs is different than the generic one
it will be prefered and run (Closes: #200778)
- Deb_nopackfiles no longer uses long arguments in the grep call
and has been speed-optimized (Closes: #201577)
- Deb_nopackfiles also now sends FIND errors to void since they
are not used and might confuse users who do not have X
installed (Closes: #207904)
- check_path now uses -L to follow symlinks (Closes: #161993)
- Adds new password check for empty passwords (Closes: #197228)
* Added -XMacOSX to exclude the new OS provided upstream.
* Added patch for new po-debconf format (Closes: #186800)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 19 Sep 2003 02:33:00 +0200
tiger (3.2-4) unstable; urgency=low
* Updated to latest debian advisories
* Modified postinst so it does not break when a user enters an e-mail
address which includes a @ by using sed instead of Perl (Closes: #194955)
* Included a check to only ask the debconf tiger/mess question if
there is any cruft from previous versions.
* Fixed check_logfiles including some of the things provided by Ryan
Bradetich and some other fixes to make it output less false positives
on Debian GNU/Linux (Closes: #195199)
* Fixed regular expression in Linux's config to support some older versions
of fileutils (Closes: #197218)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 20 Jun 2003 21:16:02 +0200
tiger (3.2-3) unstable; urgency=low
* Modified util/difflogs to sort files in order to not report
spurious differentes.
* Fixed tigercron (again), since the previous fix was not done
ok.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 12 May 2003 22:52:15 +0200
tiger (3.2-2) unstable; urgency=low
* Fix tigercron which was broken upstream (when the echo
was removed). This broke the IDS functionality since
tigercron never checked for changes!
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 11 May 2003 21:26:04 +0200
tiger (3.2-1) unstable; urgency=low
* New upstream version
- False positives in services fixed (Closes: #132278)
- Check_exports produces proper output (Closes: #162453)
- Checks have been separated, now each check file prints it's
comment (Closes: #165766)
- Using the new ignore mechanism (better than the differential
mechanism) this package now provides a baseline for Debian GNU/Linux,
hopefully this will make Matt test again this package :-)
(Closes: #164308, #172375)
- The new ignore mechanism can now be used to avoid false positives,
please customize as needed and read the notes on the
check_listeningprocs script (Closes: #136991)
- Tigexp now gets modified by the Makefile (Closes: #189864)
* Fixed dh_make boilerplate
* Changed debian/rules to 'mv' the systems to tiger-otheros
* Added tiger.ignore to conffiles
* Modified Makefile so that it installs scripts with proper (fixed)
permissions
* Updated Debian advisories (with update-advisories)
* Fixed syntax error in check_issue (thanks to lintian!)
* Added logo to the docs (!)
* Fixed error in IRIX script
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 10 May 2003 00:47:51 +0200
tiger (3.2rc3-3) experimental; urgency=low
* Added -q option to be used when running tigercron
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sat, 26 Apr 2003 13:41:35 +0200
tiger (3.2rc3-2) experimental; urgency=low
* Fixed cron to tigercon in the cron.d file
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 23 Apr 2003 22:02:07 +0200
tiger (3.2rc3-1) experimental; urgency=low
* New release candidate.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 23 Apr 2003 13:30:32 +0200
tiger (3.2rc2-1) experimental; urgency=low
* Experimental version, fixes bugs but might introduce new ones.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 21 Apr 2003 17:57:40 +0200
tiger (3.2rc1-1) experimental; urgency=low
* New upstream version
- False positives in services fixed (Closes: #132278)
- Check_exports produces proper output (Closes: #162453)
- Checks have been separated, now each check file prints it's
comment (Closes: #165766)
- Using the new ignore mechanism (better than the differential
mechanism) this package now provides a baseline for Debian GNU/Linux,
hopefully this will make Matt test again this package :-)
(Closes: #164308, #172375)
- The new ignore mechanism can now be used to avoid false positives,
please customize as needed and read the notes on the
check_listeningprocs script (Closes: #136991)
- Tigexp now gets modified by the Makefile (Closes: #189864)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 16 Apr 2003 00:29:45 +0200
tiger (3.1-5) unstable; urgency=low
* Included some of the changes that will be in the next Tiger release
* Config now sets the locale to POSIX (just in case it breaks some tests)
* Check_listeningprocs now works with multiple program names (Closes: #164898)
* Recovered the fixes from 3.0-2 which has made an old bug surface
(Closes: #164307, #166176, #166744)
* Updated to latest advisories
* Removed debugging output from systems/Linux/2/check_neverlogin
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 28 Oct 2002 17:51:03 +0100
tiger (3.1-4) unstable; urgency=medium
* Fixed LOGDIR in tigercron.in which was making templates not work.
* Remove all the /var/log/tiger* files.. sorry for the mess :(
* Added a new configuration note in order to ask the user for the
removal of the previous files instead of removing them without asking.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 14 Oct 2002 15:30:03 +0200
tiger (3.1-3) unstable; urgency=low
* Removed DSA update in the package build (Closes: #164216)
* Updated to latest DSAs
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 11 Oct 2002 09:09:43 +0200
tiger (3.1-2) unstable; urgency=low
* Added Build-Depends on autoconf since it's the only new thing
for building that has been included upstream. (Closes: #163969)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 10 Oct 2002 12:48:25 +0200
tiger (3.1-1) unstable; urgency=low
* New upstream release which includes some fixes for Debian bugs
such as the "don't regenerate index" (Closes: #162590)
* Made debian/rules update automatically the advisories file (which
is now named debian_advisories so the previous chmod -x is not needed)
* Automatically remove CVS dirs from the package (Closes: #154343)
* Fixed bashisms in check_rcumask (Closes: #159444)
* Changed check_passwd to not send false positives in Debian, it should
be fixed, however to support PAM too (Closes: #162593)
* Updated DSAs are now available
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 25 Jul 2002 19:37:41 +0200
tiger (3.0-3) unstable; urgency=low
* Updated to latest advisories.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 7 Aug 2002 10:33:47 +0200
tiger (3.0-2) unstable; urgency=low
* Changed Linux' config file so that it sets LSGROUPS to nothing
Due to a change in fileutils-4.1.1 which changed the standard
behavior from "showing groups (but really doing nothing)" to
"not showing the owner" ! (Closes: #155588)
* Modified config to set the environment properly (this was the
first workaround I tried for the previous bug, didn't fix it but
it seems better to leave the locale's environment, just in case...)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 6 Aug 2002 17:06:01 +0200
tiger (3.0-1) unstable; urgency=low
* New upstream release (based on savannah sources)
* Fix in order for deb_checkmd5sums to work with all sources (it was
limited due to a stupid bug)
* Included latest DSA advisories
* The new package provides a *very* short diff since changes regarding
Debian are added to the upstream sources too.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 18 Jun 2002 13:28:18 +0200
tiger (2.2.4p2-5) unstable; urgency=low
* Added a GPL header to all the important scripts/files used by the
program (this means /, /scripts and /systems/{default,Linux}.
This was a requirement for adding tiger as a new project to the
savannah site.
(probably next upstream version and Debian diff file will be
reduced since I intend to make the current Debian codebase
upstream's 2.2.4p3)
* Added a new check scripts/check_runprocs (not currently configured to
run since it needs sysadmin to configure tigerrc properly to determine
which processes should be checked for)
* Added some more information to the README.Debian file and rewrote
some paragraphs.
* Written some notes on how to use Tiger as a host IDS.
* Chmod'ed many scripts in order to avoid lintian warnings.
* Changed tiger so it first reads tigerrc in the local directory
(useful for testing the package without installing or to use the tar.gz
in other environments)
* Fixed the scripts/check_anon in order to test if ftphome/etc/passwd
exists before grep'ing it.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 11 Jun 2002 23:02:12 +0200
tiger (2.2.4p2-4) unstable; urgency=low
* Incorporated TARA changes including:
- Changed acc006 from FAIL to WARN (scripts/check_accounts).
- Added -H option for HTML output.
- Fixed scripts/check_cron for problems in entries.
- Fixed scripts/check_exports to avoid false positives.
- Fixed scripts/check_path due to problems with parse_csh.
- Change scripts/check_perm to not warn when owner is bin and
changed calls of echo to message().
- Made some of the changes provided by ARC in scripts/check_inetd
(save for the SORT and JOIN changes which do not seem to work)
- Changed scripts/sub/check_devs to work with IRIX 6.5
- Changed GROUPS to GROUPSS as ARC team does since it (might)
be a readonly variable in some shells (see bash(1)). Even though
it is not used in any script.
* Created a new package to provide all the scripts for other operating
systems (Warning: you still need to compile the C programs: getpermit,
md5, realpath, snefru and testsuid in those platforms for tiger to work
fully).
* Added Tiger_Check_SYSTEM to the distributed tigerrc
* Added some Linux specific checks (gdm, xdm) in scripts/check_root
* Created (new) systems/Linux/2/check_inittab script (for ctraltdel issue
from Bastille).
* Created (new) systems/Linux/2/check_rcumask script to check umask settings
for the RC boot scripts.
* Created (new) scripts/check_ftpusers script to check for administrative
users that are allowed access in the FTP server.
* Created (new) scripts/check_tcpd script to check for changes in the
way inetd services are being protected through the use of tcp_wrappers.
This script has been written based on check_inetd.
* Modified scripts/check_sendmail to check for sendmail.cf's banner
* Note. This new scripts have not been added to the cron entry. They will
only be run when running the 'tiger' script.
* Written some README files: howto write modules (README.writemodules),.
how much time does it take for scripts to run (README.time), and
information on making signatures (README.signatures)
* Changed tigexp to work if issued -F with no second argument
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 26 May 2002 01:58:53 +0200
tiger (2.2.4p2-3) unstable; urgency=low
* Fixed typo in spanish template description.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 14 May 2002 13:49:33 +0200
tiger (2.2.4p2-2) unstable; urgency=low
* Fixed filesystem permissions (execution bit) for Linux specific
scripts
* Changed scripts/check_anon to avoid error when checking for
$ftphome/etc/passwd.
* Updated security advisories.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 10 May 2002 09:55:41 +0200
tiger (2.2.4p2-1) unstable; urgency=low
* This is the "I finally merged with Bryan Gartner's tarball" release
* Cosmetic upgrade in version number due to too many changes in the
sytem specific checks (AIX, Solaris et al.) derivated from tara sources.
(thus this release might be labeled "new upstream", avoid 2.2.4p1 since
it is used in TAMU's distribution)
* Updated to latest debian DSAs.
* Next release will have a new package to provide all the scripts for
other Operating systems so that a central Debian server can be used
with network filesystems as a single point of script distribution.
* Included tara's new check and scripts checks: devices, issue,
lilo, logfiles, network, patches, release, root, rootdir, single and
tripwire_run (this last one is deactivated in Debian since
the package, if installed, will do the checks)
* Included the following systems without changes: AIX-4, IRIX-{4,5,6},
Linux-1, Next-3, UNICOS, UNICOSMK
* Instead of cp'ing all the SunOS files I ln -s all directories that
were equal in order to reduce space in the source package (and diff)
* Included the two new utils to convert into HTML
* Changed realpath.c, snefru.c as described in CHANGES.ARSC
* Merged patches from ASCR in files: check_accounts, check_cron, check_group,
check_inetd, check_passwd, check_sendmail, systems/Linux/2/gen_mounts,
tiger.
* Updated scripts (not changed in Debian): check_path
* Fixed Linux's gen_cron to include CRONSPOOL and fixed
systems/Linux/2/config to properly configure it (was set to /usr
instead of /var) since it was not used this was not detected until now.
* Updated the tiger configuration file (tigerrc)
* Updated the manpage tiger.8
* Moved check_listening from Linux-specific to all the generic location
(since it will work in any UNIX system with NETSAT).
Changed tigerrc accordingly adding Tiger_Check_LISTENING variable
and renaming the previous variables for this check.
* De-activated RedHat's specific (and written in Perl) check_network
script. TODO: rewrite it in shell script and remove RedHat-specific
stuff.
* Moved the Linux specific checks provided by Paul Telford to
systems/Linux/2/ since they are not appropiate to other systems
(for consistency)
* Fixed check_release as provided by Paul Telford (some typos and not
correctly programmed)
* Applied some of the changes described in the Changes.ARSC. It seems these
were not included in the TARA distribution (for some reason).
REMINDER: ask for these to the ARSC team.
* Fixed check_sendmail's pattern matching (wrong reports on dates) and made
it properly Y2k.
* Fixed (again) the postinst... let's see if I get it right this time...
* Moved the FQDN check from 'tiger' to 'config' (since it is used by both
tiger and tigercron)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 30 Apr 2002 16:16:31 +0200
tiger (2.2.4-22) unstable; urgency=low
* This is the "Yes, I was on vacation fixing bugs release (I)"
* Applied patch Marcel that fixes some long-standing issues, did not change
BASEDIR to basedir since it should work that way but *did* change typo
which made diff's against previous run not to work (Closes: #139221)
* Fixed Linux/2/gen_export_sets tpo (Closes: #139667)
* Modified Linux/2/config so that findcmd() looks first for binaries generated
by Tiger, including realpath (Closes: #139669)
* Modified deb_checkmd5sum to "understand" locale.nopurge configuration.
Currently experimental, but seems to work fine. Admins that fixed this
through templates will, however, have to remake them (Closes: #123891)
* Since realpath's Linux does not work as tiger's realpath -d, removed it
from the Recommends: (use tiger's instead)
* Added -u option in gen_listeningprocs (UDP sockets are not shown if using
netstat, this was an unreported bug)
* Added warning to the tigerrc regarding user's Tiger_ListeningProc (will
not work if using NETSTAT and not LSOF)
* Added the Tiger_Check_EVERYLISTENING option which will report if a
service is listening on *all* interfaces, default is Y, if set to 'N'
only processes run by users different from Tiger_ListeningProcs will be
reported. Changed gen_listeningprocs for this to work (Closes: #138855)
* Changed the name of gen_listeningprocs to check_listeningprocs (more
proper and consistent)
* Provided some more documentation in the tiger.8 manpage detailing which
modules are available
* Check_listeningprocs has been modified to allow it to not warn on
processes when using the Tiger_Listening_ValidProc variable in
/etc/tigerrc this allows admins to remove processes which can dynamically
change TCP/IP port (Closes: #134085)
* Changed Tiger_Listening_Proc to Tiger_Listening_ValidUser (more precise).
WARNING: Postinst will not change this from the config file!
* The changes introduced in check_listeningprocs as well as the
check-against-template behavior configuration will (hopefully) reduce greatly
false positives if properly configured (Closes: #126635)
* Set Tiger_Check_CRACK to 'N' by default and removed cron job since this
feature does not work. Added 'john' Recommends: since the Debian package
does provide that feature by itself.
* Added check_sendmail to SCRIPTS in the Makefile (it was not being
installed, unreported bug)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 27 Mar 2002 14:31:14 +0100
tiger (2.2.4-21) unstable; urgency=low
* Changed deb_nopackfile so it also checks the diversions file
(Closes: #129343)
* Fixed deb_md5sums to work with files with namespaces by using
quotes properly (Closes: #129339)
* Updated Debian Advisories (cvs, xsane...)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 4 Mar 2002 21:15:25 +0100
tiger (2.2.4-20) unstable; urgency=low
* Fixed check_known's grep which did not work on Solaris boxes...
* Fixed systems/SunOS/ so that it can find the CUT command too
* Changed scripts/check_known to use HEAD instead of TAIL in the
mail spool checks (Closes: #135202)
* Changed scripts/check_anon to check if the ftp user is in the
system's passwords (Closes: #135205)
* Added proper dependecies (based on systems/Linux/2/config)
(Closes: #128796)
* Added an Tiger_Output_FQDN option so that it uses hostname -f
as the system name for reports (Closes: #129526)
* Added version.h to the package in order for tiger to determine
the current Tiger version.
* Fixed debconf note (Closes: #136298)
* Added an alternative (and better) template location: /etc/tiger/templates
* Updated Debian DSA's
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 1 Mar 2002 09:50:19 +0100
tiger (2.2.4-19) unstable; urgency=medium
* Fixed gen_listeningprocs typo and added SORT to reduce output
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 9 Jan 2002 19:20:19 +0100
tiger (2.2.4-18) unstable; urgency=low
* Fixed the deb_nopackfiles so it uses -x -F and will not be confused by
strange file names (i.e. [) this also avoids filenames being interpreted
as regular expressions (Closes: #126569)
* Fixed deb_md5sums so it does not follow symlinks (sometimes they get
followed to unexistant files)
* Modified check_accounts so that it does not give warnings for accounts
of uid < 999 (system accounts in Debian GNU/Linux) by introducing a new
tigerrc variable (Tiger_Accounts_Trust)
* Added tiger-2.2.3p1-patch from TAMU
* Added some more info to the debian/copyright file
* Added the fix_tiger_GROUPS.sh script to a "contrib" area
* Added -p option to netstat and reduced output with grep -v STREAM :)
* Improved gen_listeningprocs so only uniq processes are shown listening
to the same socket, also, UDP sockets are now listed too with lsof and
netstat
* Fixed check_inetd so it does not do a 'set' when an empty line is found
* Modified difflogs intensively since it was not working properly, added
a new feature and varialbes in tigerrc so that cron jobs can be compared
against "template" (policy-compliant?) runs. This can reduce false positives
even if they cannot be reduced in a given module.
* Added configurable Tiger_Listening_Procs for gen_listeningprocs to
customize for local security policy (Closes: #126635)
* Added debconf note (borrowed from snort) to configure mails receiver
(Closes: #122256)
* Added debconf note to warn the user to adapt to security policy
* Fixed lintian errors.
* Update DSAs
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 26 Dec 2001 13:48:13 +0100
tiger (2.2.4-17) unstable; urgency=high
* Fixed typo in systems/Linux/2/gen_passwds_setgs (aggggh!! introduced
when nisplus was commented out)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 26 Dec 2001 10:18:53 +0100
tiger (2.2.4-16) unstable; urgency=medium
* Added -rf to prerm script when purging.
* Commented nisplus from the gen_passwd_sets since there is no NISCAT in
Linux
* Fixed scripts/check_known so it works properly in NIS environments.
now uses the passwd_set properly instead of passwd_source
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 21 Dec 2001 09:57:28 +0100
tiger (2.2.4-15) unstable; urgency=low
* Changed gen_passwd_sets for Linux so it now recognises NIS/NISPLUS and
does not depend on shadow passwords being installed (Closes: #113132,
#125792)
* /etc/cron.d/tiger now listed in conffiles (Closes: #124142)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 20 Dec 2001 10:33:16 +0100
tiger (2.2.4-14) unstable; urgency=high
* Updated the services file and modified the check_inetd scripts so now it
only warns if several services share port numbers (the check was
originally made to only handle one service per port) (Closes: #123730)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 13 Dec 2001 10:36:37 +0100
tiger (2.2.4-13) unstable; urgency=low
* Fixed tigercron shell problem which made it not work properly
(Closes: #123116)
* Setup tigerrrc so that Tiger_DPKG_Optimize defaults to 'Y'
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 10 Dec 2001 11:34:06 +0100
tiger (2.2.4-12) unstable; urgency=high
* Fixed cronrc so CPU consuming tasks are run once a day
(Closes: #122378)
* Fixed check_passwd so that uids and usernames are looked for correctly
(Closes: #122391)
* Updated services file (Closes: #122338)
* Fixed file control list (Closes: #122337)
* Updated Debian Security Advisories
* Provided new (untested) method to bypass DPKG in some tests through
the $Tiger_DPKG_Optimize variable in tigerrc (default N) (Closes: #122678)
* Changed deb_nopackfiles and deb_checkadvisories to work in optimize and
non-optimize method (using grep, cut, et al in the /var/lib/dpkg area)
* Fixed Debian specific scripts (==)
* Fixed Linux's gen_export_sets (nobody yelled yet, but it did not work
in the previous release)
* Fixed deb_checkadvisories so it correctly located the list of packages
(Note: takes too much time currently to finish)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 7 Dec 2001 10:12:36 +0100
tiger (2.2.4-11) unstable; urgency=medium
* Changed file_access_list for Linux so /etc/aliases can be world readable (Closes: #112159)
* Fixed getuserhome command so it does not return directories beginning
with ~. This fixes tiger from incorrectly guessing the ftp directory
(Closes: #121800, #114008)
* Fixed /var/run/utmp file permissions to follow Debian standards (Closes: #121501, #112217)
* Fixed config.tbl since Debian-specific scripts were not being run.
* Fixed gen_passwd_sets so it now understands MD5 passwds (Closes: #112170, #117342)
* Fixed disk device checks in check_perm so that it does not complain
for /dev/hd* which belong to group 'disk' (Closes: #112218)
* Changed the postrm script so all files are removed on purge (Closes: #116267)
* Changed MAILER from mail to sendmail so we can send 'Subject' and 'From'
(Closes: #120679, #121681)
* Fixed tigercron so mails get sent properly with a From line, since the
information is now sent to the mailer and not to the Tiger log no
mails should be sent out if they do not include useful information
(tiger takes care of diffing out reports) (Closes: #114334, #113588)
* Added Recommends on mail transport agent since it's used for cron reporting.
* Fixed gen_export_sets for Linux so it properly warns when using
Linux's /etc/exports
* Added a tag in tigerrc to disable reporting when nothing important
happens (Closes: #113588)
* Changed check_passwd so it now says how many times uids or usernames
appear repeated (Closes: #117117)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 2 Dec 2001 16:21:16 +0100
tiger (2.2.4-10) unstable; urgency=low
* Updated the Debian Security Advisories checked for.
* Removed non-Linux systems (Closes: #111038)
* SCRH line of findcmd is now fixed (Closes: #112216)
* Fixed services file for Linux (Closes: #115031, #114033)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 2 Dec 2001 16:21:16 +0100
tiger (2.2.4-9) unstable; urgency=low
* Added From: header to the tiger cron output
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 26 Sep 2001 01:11:06 +0200
tiger (2.2.4-8) unstable; urgency=low
* Fixed tigercron so that it includes the hostname in the mail subject (Closes: #113462)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 25 Sep 2001 15:19:30 +0200
tiger (2.2.4-7) unstable; urgency=low
* Fixed script/check_rhosts so it does not warn about comments
* Added some new issues in Debian systems which tiger does not
check properly
* Really fixed SRCH line (Closes: #112870)
* Added some more info regarding false positives in Debian in the README.Debian file
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Sun, 23 Sep 2001 00:55:42 +0200
tiger (2.2.4-6) unstable; urgency=low
* Fixed Linux/2/config not being able to find SNEFRU, by adding
/usr/lib/tiger/bin to the SRCH line (Closes: #112870)
* Fixed Linux/2/config not finding CUT since it was not exported (Closes: #112871)
* Updated data from Debian Advisories from the WML sources
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 20 Sep 2001 10:46:58 +0200
tiger (2.2.4-5) unstable; urgency=low
* Fixed debian/control file (Closes: #112532)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 17 Sep 2001 18:09:35 +0200
tiger (2.2.4-4) unstable; urgency=low
* Added subjet to tiger's cron report (Closes: #112222, #112161)
* Fixed mail check in order to compare against uid and not username
(hopefully it will work with Debian and other Unices but I'm not sure
ls -n is available there) (Closes: #112162)
* Binaries now get compiled at build time
* Removed ./c from Makefile
* Subsituted corrupted .c files on c/ (md5.c and snefru.c) (Closes: #112216)
* Modified scripts/check_know so it checks on uids and not on names (Closes: #112162)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 14 Sep 2001 20:34:30 +0200
tiger (2.2.4-3) unstable; urgency=high
* Fixed cron entry (Closes: #111795)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Mon, 10 Sep 2001 18:27:21 +0200
tiger (2.2.4-2) unstable; urgency=low
* Removed tigerrc(8) reference in manpage (Closes: #110528)
* Installed tigexp in sbin (Closes: #110535)
* Updated the services file for Linux with a new script that updates it
from the system /etc/services. Should close some of the false positives
regarding #110531
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 29 Aug 2001 16:03:29 +0200
tiger (2.2.4-1) unstable; urgency=low
* Initial Release.
* Changed GROUPS variable to GROUPC since it seems to conflict with bash
* Modified Makefile so it installs correctly
* Provided a new check for open sockets and Debian specific checks for
md5sums of installed files and package associatons of installed files.
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 23 Aug 2001 15:07:16 +0200