Download simp-4.2.- PDF - Read the Docs

SIMP Documentation, Release 0-0
• pupmod-simp-apache
– Prevent apache from restarting after downloading a CRL.
• pupmod-clamav
– Change the call to the rsyslog init script to the service command to seamlessly support both RHEL6
and RHEL7.
• pupmod-common => Deprecated - Replaced by pupmod-simplib!
• pupmod-simplib
– Updated to fix regression with CCE-4241-6. Single user mode is now properly password protected.
– Fixed the secure_mountpoints code so that it no longer incorrectly bind mounts /tmp or /var/tmp.
– We no longer supply crontab or anacrontab in global_etcd.
– Remove dynamic_swappiness cron job if a static value is set.
– Ensure that the passgen() function fails on invalid scenarios. This prevents the accidental cration of
empty passwords.
– Allow the value 2 to be used for rp_filter in simplib::sysctl.
– Added ability to return remote ip addrs.
• pupmod-dhcp
– Change the call to the rsyslog init script to the service command to seamlessly support both RHEL6
and RHEL7.
• pupmod-iptables
– Fixed a bug that would cause issues with Ruby 1.8.7.
– Fixed DNS resolution in IPv6.
– Prevent IPv6 ::1 spoofed addresses by default.
• pupmod-simp-elasticsearch
– Ensured that Elasticsearch works properly with the new version of Apache.
– Removed our default ES tuning since the default works better for LogStash.
– Ensure that Puppet manages the Elasticsearch logging file.
• pupmod-functions
– Fixed sysv.rb to explicitly require puppet/util/selinux, which caused puppet describe to have errors.
• pupmod-simp-logstash
– Fix issues with both TCPWrappers and IPTables when used with LogStash.
• pupmod-nfs
– Updated the mountd port to be 20048 by default for SELinux issues in RHEL7.
• pupmod-ntp
– Updated against NTP Security Vulnerabilities (Red Hat Article #1305723).
– Ensure that restrict entries use DDQ format.
• pupmod-openldap
3.16. Changelog
93