ftp.ac-grenoble.fr

home *** CD-ROM | disk | FTP | other *** search

/ ftp.ac-grenoble.fr / 2015.02.ftp.ac-grenoble.fr.tar / ftp.ac-grenoble.fr / pub / slis / updates_rsync / slis_update-3.0 < prev next >

Wrap

Text File | 2006-04-06 | 100KB | 3,355 lines

#!/bin/bash # slis_update-3.0 # Updates for SLIS 3.0 # This script is part of the SLIS Project initiated by the CARMI-Internet # (AcadΘmie de Grenoble - France 38). # Ce script fait partie du projet SLIS dΘmarrΘ par le CARMI-Internet # (AcadΘmie de Grenoble - France 38). # # SLIS : Serveur de communications Linux pour l'Internet Scolaire. # Copyright (C) 1998-2002 Bruno Bzeznik # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program (For example ./COPYING); # if not, write to the Free Software Foundation, Inc., 675 Mass Ave, # Cambridge, MA 02139, USA. # # Please send all comments and bug reports by electronic mail to: # Bruno Bzeznik <Bruno@ac-grenoble.fr> # or to <slis@ac-grenoble.fr> # # Envoyez vos suggestions et reports de bugs par e-mail α # Bruno Bzeznik <Bruno@ac-grenoble.fr> # ou α <slis@ac-grenoble.fr> # ### VARIABLES ### UPDDIR=/home/hadmin/updates LOGTAG="slis_update[$$]" grep HOSTNAME /etc/sysconfig/network > /tmp/hostname . /tmp/hostname rm -rf /tmp/hostname WEBMASTER=`ls -ld /home/httpd/html |awk '{print $3}'` . /home/hadmin/slis.conf ################## # Locking if [ -e /var/lock/slis_upd ] then logger -t "$LOGTAG" "Lock found. Update already started." exit fi touch /var/lock/slis_upd sleep 1 logger -t "$LOGTAG" "Script Version 3.0 started." ############################################################################ ### Update 3.x-01 - 01/10/2002 # Bug fix: CyberSchool was not working because of misplaced smb.conf # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-01 $ ] then mv -f /etc/samba/smb.conf /etc/samba/smb.conf.orig ln -s /etc/smb.conf /etc/samba/smb.conf /etc/rc.d/init.d/smb restart touch $UPDDIR/3.x-01 logger -t "$LOGTAG" "Update 3.x-01 Done." fi ### ############################################################################ ### Update 3.0-02 - 03/10/2002 # Bug fix: DNS configuration was incorrect (external view) # This update replaces mknamedconf and mknamedzones and then # restarts bind. # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-02 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-02.tgz . # Do the things... tar zxf upd-3.0-02.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then cp -af /var/named /var/named.upd-3.0-02 cp -f /etc/named.conf /etc/named.conf.upd-3.0-02 /usr/local/sbin/mknamedconf > /etc/named.conf /usr/local/sbin/mknamedzones /etc/rc.d/init.d/named restart sleep 3 touch $UPDDIR/3.0-02 logger -t "$LOGTAG" "Update 3.0-02 Done." else logger -t "$LOGTAG" "Update 3.0-02 FAILED." fi fi ### ############################################################################ ### Update 3.x-03 - updated 22/11/2002 - updated 20/03/2003 - updated 18/11/2003 # SECURITY # Obsoletes : 3.x-03 of 15/10/2002 # Obsoletes : 3.x-03 of 22/11/2002 # Obsoletes : 3.x-03 of 18/11/2003 ############################################################################ declare -i HOUR HOUR=`date +%k` if [ ! $ -e $UPDDIR/3.x-03 $ -a $HOUR -lt 6 ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/tar-1.13.25-4.7.1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-2.2.5-44.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-common-2.2.5-44.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/nss_ldap-189-4.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/fetchmail-5.9.0-20.i386.rpm . # Do the things... rpm -U tar-1.13.25-4.7.1.i386.rpm glibc-2.2.5-44.i386.rpm \ glibc-common-2.2.5-44.i386.rpm nss_ldap-189-4.i386.rpm RC1=$? rpm -F fetchmail-5.9.0-20.i386.rpm RC2=$? # Check and finish if [ $RC1 = 0 -a $RC2 = 0 ] then touch $UPDDIR/3.x-03 logger -t "$LOGTAG" "Update 3.x-03 Done." else logger -t "$LOGTAG" "Update 3.x-03 FAILED." fi fi ### ############################################################################ ### Update 3.x-04 - 15/10/2002 # Bug fix: squid is down often in the night, after log rotation # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-04 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-04.tgz . # Do the things... tar zxf upd-3.x-04.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-04 logger -t "$LOGTAG" "Update 3.x-04 Done." else logger -t "$LOGTAG" "Update 3.x-04 FAILED." fi fi ### ############################################################################ ### Update 2.x_3.x-01 - 21/10/2002 # Enhancement: Backup/Restore takes now ldap passwords into account # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/2.x_3.x-01 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-2.x_3.x-01.tgz . # Do the things... tar zxf upd-2.x_3.x-01.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/2.x_3.x-01 logger -t "$LOGTAG" "Update 2.x_3.x-01 Done." else logger -t "$LOGTAG" "Update 2.x_3.x-01 FAILED." fi fi ### ############################################################################ ### Update 3.x-05 - 08/11/2002 # Bug fixes / Enhancements: # - Set php max_execution_time to 10 minutes, for hadmin # - Set the ldap sizelimit to 5000 instead of 500 which is the default # - Allow .htaccess file creation into /home/httpd/html for authconfigs # - Added a rm of /var/lib/logrotate.status if empty into squid_rotate # - Fixed a little bug into administrator.php (erase of hadmin http users # that contain "admin") thanks to Rennes # - Fixed the bug for too long urls into accesslog2sql # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-05 $ ] then # Increase the php max execution time for hadmin cp -f /etc/hadmin/php.ini /etc/hadmin/php.ini.upd-3.x-05 perl -pi -e 's/max_execution_time.*=.*/max_execution_time = 600/' /etc/hadmin/php.ini # Increase the max number of results returned by ldap server if [ "`grep sizelimit /etc/openldap/slapd.conf`" = "" ] then cp -f /etc/openldap/slapd.conf /etc/openldap/slapd.conf.upd-3.x-05 perl -pi -e 's/^database/sizelimit 5000\ndatabase/' /etc/openldap/slapd.conf fi # New httpd.conf and squid_rotate cp -f /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf.upd-3.x-05 cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-05.tgz . tar zxf upd-3.x-05.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then killall -HUP httpd /etc/rc.d/init.d/ldap restart touch $UPDDIR/3.x-05 logger -t "$LOGTAG" "Update 3.x-05 Done." else logger -t "$LOGTAG" "Update 3.x-05 FAILED." fi fi ### ############################################################################ ### Update 3.x-06 - 08/11/2002 # BUG FIX: ldap crashes with large number of users (more than 1000) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-06 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openldap-2.0.25-1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openldap-servers-2.0.25-1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openldap-clients-2.0.25-1.i386.rpm . # Do the things... rpm -F openldap-2.0.25-1.i386.rpm \ openldap-servers-2.0.25-1.i386.rpm \ openldap-clients-2.0.25-1.i386.rpm RC=$? # Check and finish if [ $RC = 0 ] then /etc/rc.d/init.d/ldap restart touch $UPDDIR/3.x-06 logger -t "$LOGTAG" "Update 3.x-06 Done." else logger -t "$LOGTAG" "Update 3.x-06 FAILED." fi fi ### ############################################################################ ### Update 3.x-07 - 13/11/2002 # SECURITY: official updates from redhat # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-07 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/xinetd-2.3.9-0.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-4.1.2-7.3.6.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-imap-4.1.2-7.3.6.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-ldap-4.1.2-7.3.6.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-mysql-4.1.2-7.3.6.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-pgsql-4.1.2-7.3.6.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/krb5-libs-1.2.4-3.i386.rpm . # Do the things... rpm -F xinetd-2.3.9-0.73.i386.rpm \ php-4.1.2-7.3.6.i386.rpm \ php-imap-4.1.2-7.3.6.i386.rpm \ php-ldap-4.1.2-7.3.6.i386.rpm \ php-mysql-4.1.2-7.3.6.i386.rpm \ php-pgsql-4.1.2-7.3.6.i386.rpm \ krb5-libs-1.2.4-3.i386.rpm RC=$? # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-07 logger -t "$LOGTAG" "Update 3.x-07 Done." else logger -t "$LOGTAG" "Update 3.x-07 FAILED." fi fi ### ############################################################################ ### Update 3.x-08 - 15/11/2002 # Enhancement: new option "http reverse" (experimental for now) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-08 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-08.tgz . # Do the things... tar zxf upd-3.x-08.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then cp -f /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd_norm.conf /usr/local/sbin/init_options -u 2>/dev/null /usr/local/sbin/valid touch $UPDDIR/3.x-08 logger -t "$LOGTAG" "Update 3.x-08 Done." else logger -t "$LOGTAG" "Update 3.x-08 FAILED." fi fi ### ############################################################################ ### Update 2.x_3.x-02 - 21/11/2002 # Bug fix: (clientgw) changing a password with more than 8 chars caused an # error and the user losing the password. # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/2.x_3.x-02 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-2.x_3.x-02.tgz . # Do the things... tar zxf upd-2.x_3.x-02.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/2.x_3.x-02 logger -t "$LOGTAG" "Update 2.x_3.x-02 Done." else logger -t "$LOGTAG" "Update 2.x_3.x-02 FAILED." fi fi ### ############################################################################ ### Update 3.x-10 - 22/11/2002 # Bug fix: ftp client is missing # Enhancement: added lsof # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-10 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/ftp-0.17-13.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/lsof-4.51-2.i386.rpm . # Do the things... rpm -U ftp-0.17-13.i386.rpm lsof-4.51-2.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-10 logger -t "$LOGTAG" "Update 3.x-10 Done." else logger -t "$LOGTAG" "Update 3.x-10 FAILED." fi fi ### ############################################################################ ### Update 3.x-12 - 28/11/2002 # Enhancement: new option "transparent proxy" # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-12 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-12.tgz . # Do the things... tar zxf upd-3.x-12.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then /usr/local/sbin/init_options -u 2>/dev/null /usr/local/sbin/valid touch $UPDDIR/3.x-12 logger -t "$LOGTAG" "Update 3.x-12 Done." else logger -t "$LOGTAG" "Update 3.x-12 FAILED." fi fi ### ############################################################################ ### Update 3.x-13 - 06/12/2002 # Bug fixe: DHCP now works! # Enhancement: Squid: upload allowed up to 3Mb # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-13 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-13.tgz . # Do the things... tar zxf upd-3.x-13.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then /usr/local/sbin/mkfilters /usr/local/sbin/mksquidconf killall -HUP squid touch $UPDDIR/3.x-13 logger -t "$LOGTAG" "Update 3.x-13 Done." else logger -t "$LOGTAG" "Update 3.x-13 FAILED." fi fi ### ############################################################################ ### Update 3.x-14 - 06/12/2002 # Security: https://rhn.redhat.com/errata/RHSA-2002-196.html # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-14 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/xinetd-2.3.7-4.7x.i386.rpm . # Do the things... rpm -F xinetd-2.3.7-4.7x.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /etc/rc.d/init.d/xinetd stop sleep 10 /etc/rc.d/init.d/xinetd start touch $UPDDIR/3.x-14 logger -t "$LOGTAG" "Update 3.x-14 Done." else logger -t "$LOGTAG" "Update 3.x-14 FAILED." fi fi ### ############################################################################ ### Update 3.x-15 - 11/12/2002 # Bug fix: Port forwarding (VNC) was not working since 3.x-12 # SECURITY: Firewall rules where also applied on in->out forwarding # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-15 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-15.tgz . # Do the things... tar zxf upd-3.x-15.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then /usr/local/sbin/mkfilters touch $UPDDIR/3.x-15 logger -t "$LOGTAG" "Update 3.x-15 Done." else logger -t "$LOGTAG" "Update 3.x-15 FAILED." fi fi ### ############################################################################ ### Update 3.x-16 - 11/12/2002 # Security: https://rhn.redhat.com/errata/RHSA-2002-229.html # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-16 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/wget-1.8.2-4.73.i386.rpm . # Do the things... rpm -F wget-1.8.2-4.73.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-16 logger -t "$LOGTAG" "Update 3.x-16 Done." else logger -t "$LOGTAG" "Update 3.x-16 FAILED." fi fi ### ############################################################################ ### Update 3.x-17 - 17/12/2002 # Little bugfix: Debug mode was left on into mkfilters # Enhancement: You can now create a /usr/local/etc/post-mkfilters.sh script # if you want to customize some things after netfilter programming is # done by the SLIS. # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-17 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-17.tgz . # Do the things... tar zxf upd-3.x-17.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then /usr/local/sbin/mkfilters touch $UPDDIR/3.x-17 logger -t "$LOGTAG" "Update 3.x-17 Done." else logger -t "$LOGTAG" "Update 3.x-17 FAILED." fi fi ### ############################################################################ ### Update 3.x-18 - 17/12/2002 # Security: Apache update: https://rhn.redhat.com/errata/RHSA-2002-222.html # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-18 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/apache-1.3.27-2.i386.rpm . # Do the things... if [ -e /home/httpd/html/index.html ] then INDEX_EXISTS=1 else INDEX_EXISTS=0 fi rpm -F apache-1.3.27-2.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then # This is to prevent the apache test page from appearing instead of # an already index.php or index.htm present page: if [ $INDEX_EXISTS = 0 ] then mv -f /home/httpd/html/index.html /home/httpd/html/index.html.rpm 2>/dev/null fi /etc/rc.d/init.d/httpd stop > /dev/null killall httpd 2> /dev/null sleep 5 killall -9 httpd 2> /dev/null sleep 2 /etc/rc.d/init.d/httpd start > /dev/null export PHPRC="/etc/hadmin";/usr/sbin/httpd -f /etc/hadmin/conf/httpd.conf;export -n PHPRC export PHPRC=/etc/hadmin;/usr/sbin/httpd -f /etc/hadmin/clientgw/conf/httpd.conf;export -n PHPRC touch $UPDDIR/3.x-18 logger -t "$LOGTAG" "Update 3.x-18 Done." else logger -t "$LOGTAG" "Update 3.x-18 FAILED." fi fi ### ############################################################################ ### Update 3.x-19 - 15/12/2002 # MRTG # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-19 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mrtg-2.9.17-3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-19.tgz . # Do the things... rpm -U mrtg-2.9.17-3.i386.rpm RC1=$? tar xfz upd-3.x-19.tgz --exclude usr/local/ --directory / mkdir /home/hadmin/html/mrtg /usr/local/sbin/permslis # Crontab /usr/bin/crontab -l > /tmp/cron.tmp if [ "`grep -i mrtg /tmp/cron.tmp`" = "" ] then echo -e "\n # MRTG" >> /tmp/cron.tmp echo "*/5 * * * * /usr/bin/mrtg /etc/mrtg/mrtg.cfg >> /var/log/mrtg.log 2>&1" >> /tmp/cron.tmp /usr/bin/crontab /tmp/cron.tmp fi rm -f /tmp/cron.tmp # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-19 logger -t "$LOGTAG" "Update 3.x-19 Done." else logger -t "$LOGTAG" "Update 3.x-19 FAILED." fi fi ### ############################################################################ ### Update 3.x-19b - 15/12/2002 # Bug fixes for 3.x-19 # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-19b $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-19b.tgz . # Do the things... tar xfz upd-3.x-19b.tgz --directory / RC1=$? /usr/local/sbin/permslis # Crontab perl -pi -e 's,0-59/5.*root /usr/bin/mrtg.*,,' /etc/crontab # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-19b logger -t "$LOGTAG" "Update 3.x-19b Done." else logger -t "$LOGTAG" "Update 3.x-19b FAILED." fi fi ### ############################################################################ ### Update 3.x-20 - 18/12/2002 # Security: https://rhn.redhat.com/errata/RHSA-2002-293.html # Obsoletes : a part of 3.x-09 ############################################################################ if [ ! $ -e $UPDDIR/3.x-20 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/fetchmail-5.9.0-21.7.3.i386.rpm . # Do the things... rpm -F fetchmail-5.9.0-21.7.3.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-20 logger -t "$LOGTAG" "Update 3.x-20 Done." else logger -t "$LOGTAG" "Update 3.x-20 FAILED." fi fi ### ############################################################################ ### Update 3.x-21 - 19/12/2002 # Milter installation, with an interface into hadmin # Thanx to Olivier Le-Cam and Francois Hisquin (Academie de Versailles) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-21 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-21.tgz . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/db4-4.0.14-14.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sendmail-8.12.5-7.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sendmail-devel-8.12.5-7.i386.rpm . # Do the staff tar xfz upd-3.x-21.tgz --exclude usr/local/ --directory / RC1=$? # Sendmail.cf must be renamed into /etc/mail cp /etc/sendmail.cf /etc/mail/sendmail_norm.cf cp /etc/mail/sendmail_norm.cf /etc/mail/sendmail_smilter.cf # Install the RedHat 8.0 sendmail RPM with does really support the milter feature # db4 and sendmail-devel are also needed /etc/rc.d/init.d/sendmail stop rpm -i db4-4.0.14-14.i386.rpm RC2=$? rpm -F sendmail-8.12.5-7.i386.rpm \ sendmail-devel-8.12.5-7.i386.rpm RC3=$? # Check and finish if [ $RC1 = 0 -a $RC2 = 0 -a $RC3 = 0 ] then rm -f /etc/mail/sendmail.cf cp /etc/mail/sendmail_norm.cf /etc/mail/sendmail.cf # Patch the original sendmail.cf with the milter stuff /usr/bin/patch /etc/mail/sendmail_smilter.cf /tmp/sendmail_smilter.cf.patch # Configure smilter.conf according to the SLIS settings /usr/local/sbin/mksmilterconf # Check and ajust perms /usr/local/sbin/init_options -u 2> /dev/null /usr/local/sbin/permslis /usr/local/sbin/valid # Install and run smilterd ln -s -f /etc/rc.d/init.d/smilter /etc/rc.d/rc3.d/S99smilter ln -s -f /etc/mail/sendmail.cf /etc/sendmail.cf /etc/rc.d/init.d/smilter start touch $UPDDIR/3.x-21 logger -t "$LOGTAG" "Update 3.x-21 Done." else logger -t "$LOGTAG" "Update 3.x-21 FAILED." fi /etc/rc.d/init.d/sendmail start fi ### ############################################################################ ### Update 3.x-24 - 16/01/2003 # Security: https://rhn.redhat.com/errata/RHSA-2002-295.html # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-24 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/cups-libs-1.1.14-15.2.i386.rpm . # Do the things... rpm -F cups-libs-1.1.14-15.2.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-24 logger -t "$LOGTAG" "Update 3.x-24 Done." else logger -t "$LOGTAG" "Update 3.x-24 FAILED." fi fi ### ############################################################################ ### Update 3.x-25 - 17/01/2003 # Installation de SpamAssassin + Modif variable language # Thanks to "Academie de Versailles" # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-25 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-HTML-Tagset-3.03-14.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-HTML-Parser-3.26-2.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-Mail-SpamAssassin-2.43-3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/spamassassin-2.43-3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x.25.tgz . # Do the staff tar xfz upd-3.x.25.tgz --directory / RC1=$? # Install the spamassassin RPMs rpm -i perl-HTML-Tagset-3.03-14.i386.rpm \ perl-HTML-Parser-3.26-2.i386.rpm \ perl-Mail-SpamAssassin-2.43-3.i386.rpm \ spamassassin-2.43-3.i386.rpm RC2=$? # Check and ajust perms /usr/local/sbin/init_options -u 2> /dev/null /usr/local/sbin/permslis /usr/local/sbin/valid if [ $RC1 = 0 -a $RC2 = 0 ] then # Run spamassassin /etc/rc.d/init.d/spamassassin start touch $UPDDIR/3.x-25 logger -t "$LOGTAG" "Update 3.x-25 Done." else logger -t "$LOGTAG" "Update 3.x-25 FAILED." fi fi ############################################################################ ### Update 3.x-26 - 11/02/2003 # SECURITY: # https://rhn.redhat.com/errata/RHSA-2003-006.html # https://rhn.redhat.com/errata/RHSA-2002-297.html # https://rhn.redhat.com/errata/RHSA-2003-020.html # https://rhn.redhat.com/errata/RHSA-2003-040.html # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-26 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libpng-1.0.14-0.7x.4.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/vim-common-6.1-18.7x.2.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/vim-minimal-6.1-18.7x.2.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/krb5-libs-1.2.4-4.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openldap-2.0.27-2.7.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openldap-clients-2.0.27-2.7.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openldap-servers-2.0.27-2.7.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openldap12-1.2.13-8.i386.rpm . # Do the things... rpm -F libpng-1.0.14-0.7x.4.i386.rpm vim-common-6.1-18.7x.2.i386.rpm \ vim-minimal-6.1-18.7x.2.i386.rpm krb5-libs-1.2.4-4.i386.rpm \ openldap-2.0.27-2.7.3.i386.rpm openldap-clients-2.0.27-2.7.3.i386.rpm \ openldap-servers-2.0.27-2.7.3.i386.rpm openldap12-1.2.13-8.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-26 logger -t "$LOGTAG" "Update 3.x-26 Done." else logger -t "$LOGTAG" "Update 3.x-26 FAILED." fi fi ### ############################################################################ ### Update 3.x-27 - 12/02/2003 # Bug fix: restore from 2.x/3.x was bugged # restore script, valid script and badlogin table are updated so that users # are not always banned when they were already existing into the system # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-27 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-27.tgz . # Do the things... tar zxf upd-3.x-27.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then . /home/hadmin/setup.data export PGPASSWORD=`grep "ADMINPASS=" /home/hadmin/html/config_pgsql.inc.php |cut -d\" -f2` export PGUSER=`grep "ADMINUSER=" /home/hadmin/html/config_pgsql.inc.php |cut -d\" -f2` PGSQL_SERVER=`grep "PGSQL_SERVER=" /home/hadmin/html/config_pgsql.inc.php |cut -d\" -f2` BASE_HADMIN=`grep "BASE_HADMIN=" /home/hadmin/html/config_pgsql.inc.php |cut -d\" -f2` SQL_QUERY="psql -h $PGSQL_SERVER $BASE_HADMIN -tqc" psql -f /tmp/badlogin.sql hadmin >/dev/null 2>&1 $SQL_QUERY "INSERT INTO badlogin (\"nom\") VALUES ('$MAINT_USER')" $SQL_QUERY "INSERT INTO badlogin (\"nom\") VALUES ('$MAINT_USER2')" touch $UPDDIR/3.x-27 logger -t "$LOGTAG" "Update 3.x-27 Done." else logger -t "$LOGTAG" "Update 3.x-27 FAILED." fi fi ### ############################################################################ ### Update 3.x-28 - 21/02/2003 # SECURITY: # https://rhn.redhat.com/errata/RHSA-2003-029.html # https://rhn.redhat.com/errata/RHSA-2003-035.html # https://rhn.redhat.com/errata/RHSA-2003-015.html # https://rhn.redhat.com/errata/RHSA-2003-057.html # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-28 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/lynx-2.8.4-18.1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/pam-0.75-46.7.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/fileutils-4.1-10.1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/shadow-utils-20000902-9.7.i386.rpm . # Do the things... rpm -F lynx-2.8.4-18.1.i386.rpm pam-0.75-46.7.3.i386.rpm \ fileutils-4.1-10.1.i386.rpm shadow-utils-20000902-9.7.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-28 logger -t "$LOGTAG" "Update 3.x-28 Done." else logger -t "$LOGTAG" "Update 3.x-28 FAILED." fi fi ### ############################################################################ ### Update 3.x-30 - 19/03/2003 # SECURITY: File, Sendmail, Openssl # Obsoletes : Updated for space optimization 2003-11-25 ############################################################################ if [ ! $ -e $UPDDIR/3.x-30 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/file-3.39-8.7x.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sendmail-8.11.6-23.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssl-0.9.6b-35.7.i386.rpm . # Do the things... rpm -F file-3.39-8.7x.i386.rpm \ sendmail-8.11.6-23.73.i386.rpm \ openssl-0.9.6b-35.7.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-30 logger -t "$LOGTAG" "Update 3.x-30 Done." else logger -t "$LOGTAG" "Update 3.x-30 FAILED." fi fi ### ############################################################################ ### Update 3.x-34 - 01/04/2003 # SECURITY: Sendmail (This is the RH 8.0 update compiled for 7.3) # Krb-libs # Obsoletes : 3.x-32 ############################################################################ if [ ! $ -e $UPDDIR/3.x-34 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sendmail-8.12.8-5.80.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/krb5-libs-1.2.4-11.i386.rpm . # Do the things... rpm -F sendmail-8.12.8-5.80.i386.rpm krb5-libs-1.2.4-11.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-34 logger -t "$LOGTAG" "Update 3.x-34 Done." else logger -t "$LOGTAG" "Update 3.x-34 FAILED." fi fi ### ############################################################################ ### Update 3.x-35 - 01/04/2003 # Bug fix: NTP now works ! # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-35 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-35.tgz . # Do the things.... tar zxf upd-3.x-35.tgz --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then /usr/local/sbin/mkntpconf /etc/rc.d/init.d/ntpd restart touch $UPDDIR/3.x-35 logger -t "$LOGTAG" "Update 3.x-35 Done." else logger -t "$LOGTAG" "Update 3.x-35 FAILED." fi fi ### ############################################################################ ### Update 3.x-37 - 02/04/2003 # Bug fix: postgresql sometimes refuses to start # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-37 $ ] then # Do the things... perl -pi -e 's,rm -f /var/run/postmaster.pid,rm -f /var/run/postmaster.pid;rm -f /var/lib/pgsql/data/postmaster.pid,' /etc/rc.d/init.d/postgresql touch $UPDDIR/3.x-37 logger -t "$LOGTAG" "Update 3.x-37 Done." fi ### ############################################################################ ### Update 3.x-38 - 03/04/2003 # Enhancements: Interface update: # - Deletion of all users is now possible in 2 clicks # - Deletion of users from the result of a search is now possible # - Groups affectations can be imported # - A new bottom frame shows the status of the SLIS # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-38 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-38.tgz . # Do the things.... tar zxf upd-3.x-38.tgz --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then mv -f /home/hadmin/html/index.html /home/hadmin/html/index.html.old touch $UPDDIR/3.x-38 logger -t "$LOGTAG" "Update 3.x-38 Done." else logger -t "$LOGTAG" "Update 3.x-38 FAILED." fi fi ### ############################################################################ ### Update 3.x-39 - 07/04/2003 # Enhancement: Add of /usr/local/sbin/init_routerconfig # This script is intended to be called as a login shell. You can create # a user for your mainteners like this, in an academy update: # useradd -c "Automatic router configuration" \ # -s /usr/local/sbin/init_routerconfig \ # -p "\$3\$amCygwuU\$sweffqsdljE99dl34" confr # usermod -G uucp,hadmin confr # This script takes values from DKS 3 which is still in devel status # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-39 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-39.tgz . # Do the things.... tar zxf upd-3.x-39.tgz --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-39 logger -t "$LOGTAG" "Update 3.x-39 Done." else logger -t "$LOGTAG" "Update 3.x-39 FAILED." fi fi ### ############################################################################ ### Update 3.x-40 - 08/04/2003 # SECURITY: Samba # Obsoletes : 3.x-11 3.x-31 ############################################################################ if [ ! $ -e $UPDDIR/3.x-40 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/samba-2.2.7-3.7.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/samba-common-2.2.7-3.7.3.i386.rpm . # Do the things... rpm -F samba-common-2.2.7-3.7.3.i386.rpm \ samba-2.2.7-3.7.3.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /etc/rc.d/init.d/smb restart touch $UPDDIR/3.x-40 logger -t "$LOGTAG" "Update 3.x-40 Done." else logger -t "$LOGTAG" "Update 3.x-40 FAILED." fi fi ### ############################################################################ ### Update 3.x-41 - 11/04/2003 # Enhancement: new advanced.php and languages files # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-41 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-41.tgz . # Do the things.... tar zxf upd-3.x-41.tgz --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-41 logger -t "$LOGTAG" "Update 3.x-41 Done." else logger -t "$LOGTAG" "Update 3.x-41 FAILED." fi fi ### ############################################################################ ### Update 3.x-42 - 14/04/2003 # Bug fixes: valid script ans lib.inc.php were not up to date because of # late publication of 3.x-25. Valid has been fixed for webmaster deletion/re- # creation bug. # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-42 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-42.tgz . # Do the things.... tar zxf upd-3.x-42.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-42 logger -t "$LOGTAG" "Update 3.x-42 Done." else logger -t "$LOGTAG" "Update 3.x-42 FAILED." fi fi ### ############################################################################ ### Update 3.x-43 - 14/04/2003 # Bug fix: Groups are no more prefixed by a s_. The new valid script # needs that to work efficiently. # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-43 $ ] then for i in `getent group |grep "^s_" |cut -f1 -d:` do /usr/local/bin/cpu groupmod -n `echo $i |sed s/^s_//` $i done /usr/local/sbin/valid touch $UPDDIR/3.x-43 logger -t "$LOGTAG" "Update 3.x-43 Done." fi ### ############################################################################ ### Update 3.x-44 - 18/04/2003 # Enhancements: Interface update. # A lot of improvements (import by browsing a file, better ergonomy, # and bug fixes) of the users interface. # Also a new connslogd script managing the Efficient 5861 adsl router. # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-44 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-44.tgz . # Do the things.... killall connslogd sleep 1 tar zxf upd-3.x-44.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis /usr/local/sbin/connslogd& # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-44 logger -t "$LOGTAG" "Update 3.x-44 Done." else logger -t "$LOGTAG" "Update 3.x-44 FAILED." fi fi ### ############################################################################ ### Update 3.x-46 - 17/05/2003 # SECURITY: man, mysql, tcpdump, zlib, xinetd # Obsoletes : Updated for space optimization 2003-11-25 ############################################################################ if [ ! $ -e $UPDDIR/3.x-46 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/man-1.5j-7.7x.0.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/tcpdump-3.6.3-17.7.3.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/zlib-1.1.4-8.7x.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/zlib-devel-1.1.4-8.7x.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mysql-3.23.58-1.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/xinetd-2.3.11-1.7x.i386.rpm . # Do the things... rpm -F man-1.5j-7.7x.0.i386.rpm \ tcpdump-3.6.3-17.7.3.3.i386.rpm \ zlib-1.1.4-8.7x.i386.rpm \ zlib-devel-1.1.4-8.7x.i386.rpm \ mysql-3.23.58-1.73.i386.rpm \ xinetd-2.3.11-1.7x.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /etc/rc.d/init.d/xinetd stop sleep 10 /etc/rc.d/init.d/xinetd start touch $UPDDIR/3.x-46 logger -t "$LOGTAG" "Update 3.x-46 Done." else logger -t "$LOGTAG" "Update 3.x-46 FAILED." fi fi ### ############################################################################ ### Update 3.x-47 - 23/05/2003 # - Bug fixes: # - perms on /var/spool/mail # - ping processes running indefinitely because of the interface checks # - profs and system groups where erasable # - others little bugs into the interface # - Added /usr/local/sbin/modifconf and /usr/man/man1/modifconf.1 # This script was written by Philippe Chadefaux # - Added named into the services control pannel (Thanks again to # Philippe) # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-47 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-47.tgz . # Do the things.... tar zxf upd-3.x-47.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-47 logger -t "$LOGTAG" "Update 3.x-47 Done." else logger -t "$LOGTAG" "Update 3.x-47 FAILED." fi fi ### ############################################################################ ### Update 3.x-48 - 26/05/2003 # Bug fix: smarter bas.php (some "-w 30" where still missing and added a # test on sendmail mode: if it is background, then we can do the ping test) # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-48 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-48.tgz . # Do the things.... tar zxf upd-3.x-48.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-48 logger -t "$LOGTAG" "Update 3.x-48 Done." else logger -t "$LOGTAG" "Update 3.x-48 FAILED." fi fi ### ############################################################################ ### Update 3.x-49 - 27/05/2003 # Smarter slis_update script. It tests the connection to the rsync # host before starting the updates. # Warning! This update needs TESTFILES.* to be in place, not only upd-3.x-49.tgz! # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-49 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-49.tgz . # Do the things.... tar zxf upd-3.x-49.tgz RC=$? # Check and finish if [ $RC = 0 ] then echo "mv -f /tmp/slis_update_3_1.bash /usr/local/sbin/slis_update" | at now + 10 minutes touch $UPDDIR/3.x-49 logger -t "$LOGTAG" "Update 3.x-49 Done." else logger -t "$LOGTAG" "Update 3.x-49 FAILED." fi fi ### ############################################################################ ### Update 3.x-50 - 6/06/2003 # Enhancements: Interface update. # ImplΘmentation de la gestion du DNS - Thanks to Versailles # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-50 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-50.tgz . # Do the things.... sleep 1 # test que postgresql tourne if [ "`ps ax | grep postgres`" = "" ] then logger -t "$LOGTAG" "Update 3.x-50 FAILED." else tar zxf upd-3.x-50.tgz --directory / #test de rΘussite RC=$? # Check and finish if [ $RC = 0 ] then /usr/bin/php /home/hadmin/html/dns/sql.php RC=$? # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-50 logger -t "$LOGTAG" "Update 3.x-50 Done." else logger -t "$LOGTAG" "Update 3.x-50 FAILED." fi else logger -t "$LOGTAG" "Update 3.x-50 FAILED." fi fi fi ### ############################################################################ # Update 3.x-51 - 10/06/2003 # Bug fixes in the mail filter module: # - root can post to anywhere # - a cosmetic problem in the mail filter administration interface # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-51 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-51.tgz . # Stop the smilter daemon /etc/rc.d/init.d/smilter stop # Do the things ... tar xfz upd-3.x-51.tgz --directory / RC=$? /usr/local/sbin/permslis # Start again smilterd /etc/rc.d/init.d/smilter start # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-51 logger -t "$LOGTAG" "Update 3.x-51 Done." else logger -t "$LOGTAG" "Update 3.x-51 FAILED." fi fi ### ############################################################################ ### Update 3.x-53 - 16/06/2003 # Bug fixes: # - Accentuated strings where not cleaned into aliases # - Accentuated strings are now utf8 encoded into the ldap server # - Givenname attribute now managed into ldap server # - Primary group listed into the "groups ou" branch of the ldap server # Enhancement: # - Aliases can now be listed and edited directly # # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-53 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-53.tgz . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-Unicode-String.tgz . # Do the things.... tar zxf perl-Unicode-String.tgz --directory / RC1=$? tar zxf upd-3.x-53.tgz --exclude usr/local/ --directory / RC2=$? /usr/local/sbin/permslis ##Do this if you want to update the ldap server with the new behaviors: # export PGPASSWORD=`grep POSTGRESPASS /home/hadmin/html/config_pgsql.inc.php|cut -d\" -f2` # export PGUSER=postgres # psql -tqc "update users set tovalid='t',modif='t';" hadmin # psql -tqc "update groups set tovalid='t',modif='t';" hadmin # /usr/local/sbin/valid ## "No such attribute" messages into syslog are "normal" # Check and finish if [ $RC1 = 0 -a $RC2 = 0 ] then touch $UPDDIR/3.x-53 logger -t "$LOGTAG" "Update 3.x-53 Done." else logger -t "$LOGTAG" "Update 3.x-53 FAILED." fi fi ### ############################################################################ ### Update 3.x-50b - 27/05/2003 # Bug fix for upd-3.x-50: mknamedconf could create an invalid named.conf file # causing loss of connectivity and then updates! # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-50b $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-50b.tgz . # Do the things.... tar zxf upd-3.x-50b.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then /usr/bin/php /home/hadmin/html/dns/sql.php 2>/dev/null /usr/local/sbin/mknamedconf > /etc/named.conf /etc/rc.d/init.d/named restart;sleep 1 touch $UPDDIR/3.x-50b logger -t "$LOGTAG" "Update 3.x-50b Done." else logger -t "$LOGTAG" "Update 3.x-50b FAILED." fi fi ### ############################################################################ ### Update 3.x-54 - 23/06/2003 # Bug fixes: # - Removed unusefull error messages when users removed from primary group # - Fixed special characters encoding into webmail when requesting the shared # directory # - Better compatibility with SE3 # Enhancements: # - Added an advanced function (experimental) to "synchronize with the LDAP # server" # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-54 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-54.tgz . # Do the things.... tar zxf upd-3.x-54.tgz --exclude usr/local/ --directory / RC=$? # Check and finish if [ $RC = 0 ] then cd /home/hadmin/html/clientgw/horde/turba/config patch sources.php < turba_config.patch /usr/local/sbin/permslis touch $UPDDIR/3.x-54 logger -t "$LOGTAG" "Update 3.x-54 Done." else logger -t "$LOGTAG" "Update 3.x-54 FAILED." fi fi ### ############################################################################ ### Update 3.x-55 - 07/07/2003 # Enhancements: # - New modifconf script # - Shemacheck set to off or samba-edu will not work # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-55 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-55.tgz . # Do the things.... tar zxf upd-3.x-55.tgz --exclude usr/local/ --directory / RC=$? # Check and finish if [ $RC = 0 ] then /usr/local/sbin/permslis cp -f /etc/openldap/slapd.conf /etc/openldap/slapd.conf.upd-55 SC_PRESENT=`grep "schemacheck" /etc/openldap/slapd.conf` if [ "$SC_PRESENT" != "" ] then perl -pi -e "s/schemacheck.*/schemacheck off/" /etc/openldap/slapd.conf else perl -pi -e "s/sizelimit/schemacheck off\nsizelimit/" /etc/openldap/slapd.conf fi /etc/rc.d/init.d/ldap restart touch $UPDDIR/3.x-55 logger -t "$LOGTAG" "Update 3.x-55 Done." else logger -t "$LOGTAG" "Update 3.x-55 FAILED." fi fi ### ############################################################################ ### Update 3.x-56 - 10/07/2003 # More secure monitoring script. It tests the connection to the rsync # host before starting the monitoring (like the update script) and may # check the authenticity of the downloaded monitoring script if this one is # signed. The public key of the rsync host is downloaded on the first time # and keeped forever for checking on the next times. # Warning! This update needs TESTFILES.* to be in place, not only upd-3.x-56.tgz! # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-56 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-56.tgz . # Do the things.... tar zxf upd-3.x-56.tgz --exclude usr/local/ --directory / RC=$? # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-56 logger -t "$LOGTAG" "Update 3.x-56 Done." else logger -t "$LOGTAG" "Update 3.x-56 FAILED." fi fi ### ############################################################################ ### Update 3.x-57 - 11/07/2003 # BUG FIXES into users administration # - No more meaningless error when making a dummy group edition (with no change) # - Mailbox is now deleted when a user is deleted # - No more error about slis group when making smbadmin config # - Now that LDAP can manage logins begining with a letter and upper case # letters, we removed the tests made when creating users # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-57 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-57.tgz . # Do the things.... tar zxf upd-3.x-57.tgz --exclude usr/local/ --directory / RC=$? # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-57 logger -t "$LOGTAG" "Update 3.x-57 Done." else logger -t "$LOGTAG" "Update 3.x-57 FAILED." fi fi ### ############################################################################ ### Update 3.x-58 - 1/09/2003 # SECURITY : OpenSSH , Wu-ftpd , unzip, sendmail # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-58 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/arpwatch-2.1a11-17.7.3.2.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/cups-libs-1.1.14-15.4.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libpcap-0.6.2-17.7.3.2.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libstdc++-2.96-113.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/losetup-2.11n-12.7.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mm-1.1.3-11.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mount-2.11n-12.7.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/nscd-2.2.5-43.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-3.1p1-8.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-clients-3.1p1-8.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-server-3.1p1-8.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/unzip-5.50-31.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/wu-ftpd-2.6.2-11.73.1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/hwdata-0.14.1-1.noarch.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sendmail-8.12.8-6.73.i386.rpm . # Do the things... rpm -F arpwatch-2.1a11-17.7.3.2.i386.rpm \ cups-libs-1.1.14-15.4.i386.rpm \ libpcap-0.6.2-17.7.3.2.i386.rpm \ libstdc++-2.96-113.i386.rpm \ losetup-2.11n-12.7.3.i386.rpm \ mm-1.1.3-11.i386.rpm \ mount-2.11n-12.7.3.i386.rpm \ nscd-2.2.5-43.i386.rpm \ openssh-3.1p1-8.i386.rpm \ openssh-clients-3.1p1-8.i386.rpm \ openssh-server-3.1p1-8.i386.rpm \ unzip-5.50-31.i386.rpm \ hwdata-0.14.1-1.noarch.rpm \ wu-ftpd-2.6.2-11.73.1.i386.rpm \ sendmail-8.12.8-6.73.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /etc/rc.d/init.d/sshd restart touch $UPDDIR/3.x-58 logger -t "$LOGTAG" "Update 3.x-58 Done." else logger -t "$LOGTAG" "Update 3.x-58 FAILED." fi fi ### ############################################################################ ### Update 3.x-59 - 1/09/2003 # SECURITY : iptables # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-59 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/iptables-1.2.8-8.72.3.i386.rpm . # Do the things... rpm -F iptables-1.2.8-8.72.3.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /usr/local/sbin/masquerade touch $UPDDIR/3.x-59 logger -t "$LOGTAG" "Update 3.x-59 Done." else logger -t "$LOGTAG" "Update 3.x-59 FAILED (maybe kernel not up-to-date)." fi fi ### ############################################################################ ### Update 3.x-60 - 09/09/2003 # BUG FIXES # - Since 3.x-57, groups beginning with a letter were not well managed # - Little problem with cg_valid if nothing to-valid # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-60 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-60.tgz . # Do the things.... tar zxf upd-3.x-60.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis /usr/local/sbin/valid # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-60 logger -t "$LOGTAG" "Update 3.x-60 Done." else logger -t "$LOGTAG" "Update 3.x-60 FAILED." fi fi ### ############################################################################ ### Update 3.x-61 - 15/09/2003 # BUG FIXES/ENHANCEMENTS: # - UTF8 encoding was missing into cg_valid and in the gecos field from valid # - Spaces into logins were allowed into imports, causing big problems # - ldapadm and smbadm were deletable when deleting all users from a search # - modifconf script has now a new option: -N # - new SLIS option: GATEWAY_PING preventing from pinging the gateway if # set to 0. # SECURITY: # - Unused allow_url_fopen php option deactivated. It prevents from cross- # scripting attacks. # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-61 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-61.tgz . # Do the things.... tar zxf upd-3.x-61.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis /usr/local/sbin/init_options -u 2>/dev/null /usr/local/sbin/valid # Check and finish if [ $RC = 0 ] then echo "allow_url_fopen = Off" >> /etc/php.ini echo "allow_url_fopen = Off" >> /etc/hadmin/php.ini echo "allow_url_fopen = Off" >> /etc/hadmin/clientgw/php.ini killall -HUP httpd touch $UPDDIR/3.x-61 logger -t "$LOGTAG" "Update 3.x-61 Done." else logger -t "$LOGTAG" "Update 3.x-61 FAILED." fi fi ### ############################################################################ ### Update 3.x-62 - 11/09/2003 # Enhancements: Interface update. # ImplΘmentation de la gestion du DNS # Modifications apportΘes depuis la version 3.x-50 : # 1- Modification de la base de donnΘes : allongement des noms de zone, # d'alias et du nom des machines dΘfinies dans le DNS 0 128 CARACT7RES # 2- Petite correction sur la prise en charge du masque IP lors de la # dΘclaration ou de la modification des machines dΘfinies dans le DNS # 3- Correctif sur la modification de l'IP dans l'interface d'administration # du DNS # Obsoletes : 3.x-50 et 3.x-50b ############################################################################ if [ ! $ -e $UPDDIR/3.x-62 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-62.tgz . # Do the things.... sleep 1 # teste que postgresql tourne if [ "`ps awx | grep postgres`" = "" ] then logger -t "$LOGTAG" "Update 3.x-62 POSTGRES FAILED." else tar zxf upd-3.x-62.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis export PHPRC="/etc/hadmin" #test de rΘussite # Check and finish if [ "$RC" = "0" ] then # test de l'exΘcution ou non des scripts 50 et 50b if [ $ -e $UPDDIR/3.x-50 $ -o $ -e $UPDDIR/3.x-50b $ ] then php /home/hadmin/html/dns/drop.php RC=$? logger -t "$LOGTAG" "DROP TABLE" if [ "$RC" != "0" ] then logger -t "$LOGTAG" "Drop Table FAILED Critical." ok="non" else ok="oui" fi else ok="oui" fi if [ "$ok" = "oui" ] then php /home/hadmin/html/dns/sql.php RC=$? # Check and finish if [ "$RC" = "0" ] then touch $UPDDIR/3.x-62 logger -t "$LOGTAG" "Update 3.x-62 Done." /bin/rm -f /home/hadmin/html/dns/drop.php /bin/rm -f /home/hadmin/html/dns/sql.php else logger -t "$LOGTAG" "Update 3.x-62 FAILED No create table." fi fi else logger -t "$LOGTAG" "Update 3.x-62 FAILED Prob with archive." fi fi fi ### ############################################################################ ### Update 3.x-64 - 18/09/2003 # SECURITY: Openssh, sendmail # Obsoletes : 3.x-63 ############################################################################ if [ ! $ -e $UPDDIR/3.x-64 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-3.1p1-14.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-server-3.1p1-14.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-clients-3.1p1-14.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sendmail-8.12.8-9.73.i386.rpm . # Do the things... rpm -F openssh-3.1p1-14.i386.rpm \ openssh-server-3.1p1-14.i386.rpm \ openssh-clients-3.1p1-14.i386.rpm \ sendmail-8.12.8-9.73.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-64 logger -t "$LOGTAG" "Update 3.x-64 Done." else logger -t "$LOGTAG" "Update 3.x-64 FAILED." fi fi ### ############################################################################ ### Update 3.x-65 - 05/11/2003 # SECURITY: Apache, OpenSSL, fileutils, ucd-snmp # Obsoletes : 3.x-36 3.x-23 ############################################################################ if [ ! $ -e $UPDDIR/3.x-65 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/apache-1.3.27-3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssl-0.9.6b-35.7.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mysql-3.23.58-1.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/ucd-snmp-4.2.5-8.73.1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/ucd-snmp-utils-4.2.5-8.73.1.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/fileutils-4.1-10.4.i386.rpm . # Do the things... rpm -F apache-1.3.27-3.i386.rpm \ openssl-0.9.6b-35.7.i386.rpm \ mysql-3.23.58-1.73.i386.rpm \ ucd-snmp-4.2.5-8.73.1.i386.rpm \ ucd-snmp-utils-4.2.5-8.73.1.i386.rpm \ fileutils-4.1-10.4.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /sbin/service httpd restart touch $UPDDIR/3.x-65 logger -t "$LOGTAG" "Update 3.x-65 Done." else logger -t "$LOGTAG" "Update 3.x-65 FAILED." fi fi ### ############################################################################ # Update 3.x-66 - 10/08/2003 # Bug fixes in the mail filter module: # - root can really post to anywhere! # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-66 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-66.tgz . # Stop the smilter daemon /etc/rc.d/init.d/smilter stop # Do the things ... tar xfz upd-3.x-66.tgz --directory / RC=$? /usr/local/sbin/permslis # Start again smilterd, and restart sendmail /etc/rc.d/init.d/smilter start /etc/rc.d/init.d/sendmail restart # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-66 logger -t "$LOGTAG" "Update 3.x-66 Done." else logger -t "$LOGTAG" "Update 3.x-66 FAILED." fi fi ### ############################################################################ # Update 3.x-67 - 11/12/2003 # - Experimental replication for LDAP Server with a SE3 or a other SLIS server # - Modifconf bug fix (crontab) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-67 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.x-67.tgz . # Do the things ... tar xfz upd-3.x-67.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis /usr/local/sbin/init_options -u 2> /dev/null # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.x-67 logger -t "$LOGTAG" "Update 3.x-67 Done." else logger -t "$LOGTAG" "Update 3.x-67 FAILED." fi fi ### ############################################################################ ### Update 3.x-68 - 18/11/2003 # SECURITY: Glibc, postgres # Obsoletes : 3.x-03(updated), 3.x-09b, 3.x-22 ############################################################################ declare -i HOUR HOUR=`date +%k` # Update by night: if [ ! $ -e $UPDDIR/3.x-68 $ -a $HOUR -lt 6 ] # or whenever #if [ ! $ -e $UPDDIR/3.x-68 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/postgresql-server-7.2.4-5.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/postgresql-libs-7.2.4-5.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/postgresql-7.2.4-5.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-2.2.5-44.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-common-2.2.5-44.i386.rpm . # Do the things... rpm -F postgresql-server-7.2.4-5.73.i386.rpm \ postgresql-libs-7.2.4-5.73.i386.rpm \ postgresql-7.2.4-5.73.i386.rpm \ glibc-2.2.5-44.i386.rpm \ glibc-common-2.2.5-44.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then sleep 3 perl -pi -e "s/pg_ctl -D/pg_ctl -o -i -D/" /etc/rc.d/init.d/postgresql /etc/rc.d/init.d/postgresql stop sleep 3 killall postmaster 2>/dev/null sleep 2 killall -9 postmaster 2>/dev/null sleep 2 /etc/rc.d/init.d/postgresql start touch $UPDDIR/3.x-68 logger -t "$LOGTAG" "Update 3.x-68 Done." else logger -t "$LOGTAG" "Update 3.x-68 FAILED." fi fi ### ############################################################################ # Update 3.x-69 - 2003-11-25 # Cleaning of /tmp # This cleans up the biggest files previously downloaded if the corresponding # updates are successfull. From now, we must be carefull about the space # of /tmp by removing all the files after an update successfully ended. # Otherwise, newly installed SLIS on small disks will crash. # Obsolletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-69 $ ] then cd /tmp if [ -e $UPDDIR/3.x-03 -a -e $UPDDIR/3.x-68 ] then rm -f postgresql* rm -f glibc* fi if [ -e $UPDDIR/3.x-46 -a -e $UPDDIR/3.x-65 ] then rm -f mysql* rm -f openssl* fi if [ -e $UPDDIR/3.x-18 -a -e $UPDDIR/3.x-65 ] then rm -f apache* fi if [ -e $UPDDIR/3.x-07 ] then rm -f php* fi if [ -e $UPDDIR/3.x-28 ] then rm -f lynx* fi if [ -e $UPDDIR/3.x-28 -a -e $UPDDIR/3.x-65 ] then rm -f fileutils* fi if [ -e $UPDDIR/3.x-65 ] then rm -f ucd-snmp* fi if [ -e $UPDDIR/3.x-06 -a -e $UPDDIR/3.x-26 ] then rm -f openldap* fi touch $UPDDIR/3.x-69 logger -t "$LOGTAG" "Update 3.x-69 Done." fi ### ############################################################################ ### Update 3.x-70 - 2004-03-05 # SECURITY: slocate,tcpdump # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-70 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/slocate-2.7-1.7.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/tcpdump-3.6.3-17.7.3.4.legacy.i386.rpm . # Do the things... rpm -F slocate-2.7-1.7.3.legacy.i386.rpm \ tcpdump-3.6.3-17.7.3.4.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-70 logger -t "$LOGTAG" "Update 3.x-70 Done." else logger -t "$LOGTAG" "Update 3.x-70 FAILED." fi fi ### ############################################################################ ### Update 3.x-71 - 2004-03-25 # Add of the retail tool # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.x-71 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/retail-1.0.1-1.i386.rpm . # Do the things... rpm -U retail-1.0.1-1.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.x-71 logger -t "$LOGTAG" "Update 3.x-71 Done." else logger -t "$LOGTAG" "Update 3.x-71 FAILED." fi fi ### ############################################################################ # Update 3.0-72 - 26/03/2004 # Fix of the MD5 checksum problem with monitor/slis_update script # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-72 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-72.tgz . # Do the things ... tar xfz upd-3.0-72.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.0-72 logger -t "$LOGTAG" "Update 3.0-72 Done." else logger -t "$LOGTAG" "Update 3.0-72 FAILED." fi fi ### ############################################################################ # Update 3.0-73 - 30/04/2004 # Added 1098 as a safe SSL port into squid configuration # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-73 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-73.tgz . # Do the things ... tar xfz upd-3.0-73.tgz --exclude usr/local/ --directory / RC=$? /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then # Instead of fully regenerating the squid.conf file by # a call of the new mksquidoncf script, I prefer to # carefully edit the squid.conf directly, in the case this # file has been manualy edited perl -pi -e "s/acl SSL_ports port 443 563.*/acl SSL_ports port 443 563 1098/" /etc/squid/squid.conf killall -HUP squid touch $UPDDIR/3.0-73 logger -t "$LOGTAG" "Update 3.0-73 Done." else logger -t "$LOGTAG" "Update 3.0-73 FAILED." fi fi ### ############################################################################ # Update 3.0-74 - 06/05/2004 # SECURITY: Fixes a vulnerability of the web server configuration: one could # do a privilege escalation by using SSI and a mistake in the permission of # the httpd.conf file. Thanx to Jean Diraison, from Versailles! # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-74 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-74.tgz . # Do the things ... tar xfz upd-3.0-74.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis perl -pi -e "s/AddHandler server-parsed/#AddHandler server-parsed/" /etc/httpd/conf/httpd.conf killall -HUP httpd # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.0-74 logger -t "$LOGTAG" "Update 3.0-74 Done." else logger -t "$LOGTAG" "Update 3.0-74 FAILED." fi fi ### ############################################################################ # Update 3.0-75 - 11/05/2004 # BUG FIX: 3.0-74 side effect: administrator could not change passwd anymore # SECURITY: The admin could pass arbitrary commands to root by using well # constructed urls sent to the services.php script. (Thanx to Jean Diraison) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-75 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-75.tgz . # Do the things ... tar xfz upd-3.0-75.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.0-75 logger -t "$LOGTAG" "Update 3.0-75 Done." else logger -t "$LOGTAG" "Update 3.0-75 FAILED." fi fi ### ############################################################################ ### Update 3.0-76 - 2004-05-11 # SECURITY: openssl # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-76 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssl-0.9.6b-36.7.legacy.i386.rpm . # Do the things... rpm -F openssl-0.9.6b-36.7.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.0-76 logger -t "$LOGTAG" "Update 3.0-76 Done." else logger -t "$LOGTAG" "Update 3.0-76 FAILED." fi fi ### ############################################################################ ### Update 3.0-77 - 2004-05-27 # SECURITY: libtool-lib, utempter # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-77 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libtool-libs-1.4.2-13.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/utempter-0.5.2-6.7.x.1.legacy.i386.rpm . # Do the things... rpm -F libtool-libs-1.4.2-13.legacy.i386.rpm utempter-0.5.2-6.7.x.1.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.0-77 logger -t "$LOGTAG" "Update 3.0-77 Done." else logger -t "$LOGTAG" "Update 3.0-77 FAILED." fi fi ### ############################################################################ # Update 3.0-78 - 23/06/2004 # Bug fix: precompiled adult database was not loaded by squidguard # (new mksquidguardconf script) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-78 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-78.tgz . # Do the things ... tar xfz upd-3.0-78.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis /usr/local/sbin/mksquidguardconf killall -HUP squid # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.0-78 logger -t "$LOGTAG" "Update 3.0-78 Done." else logger -t "$LOGTAG" "Update 3.0-78 FAILED." fi fi ### ############################################################################ # Update 3.0-79 - 07/09/2004 # Postgresql vacuum analyse # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-79 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-79.tgz . # Do the things ... tar xfz upd-3.0-79.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis bash /usr/local/sbin/vacuum.bash # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.0-79 logger -t "$LOGTAG" "Update 3.0-79 Done." else logger -t "$LOGTAG" "Update 3.0-79 FAILED." fi fi ### ############################################################################ ### Update 3.0-80 - 2004-10-11 # SECURITY: arpwatch php php-mysql sysklogd libpcap php-imap php-pgsql # tcpdump libxml2 php-ldap rsync # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-80 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/arpwatch-2.1a11-17.7.3.6.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libpcap-0.6.2-17.7.3.6.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libxml2-2.4.19-6.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-4.1.2-7.3.10.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-imap-4.1.2-7.3.10.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-ldap-4.1.2-7.3.10.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-mysql-4.1.2-7.3.10.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-pgsql-4.1.2-7.3.10.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/rsync-2.5.7-2.legacy.7x.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sysklogd-1.4.1-14.legacy.7x.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/tcpdump-3.6.3-17.7.3.6.legacy.i386.rpm . # Do the things... rpm -e arpwatch-2.1a4-29slisA 2>/dev/null rpm -U arpwatch-2.1a11-17.7.3.6.legacy.i386.rpm rpm -F php-4.1.2-7.3.10.legacy.i386.rpm \ php-mysql-4.1.2-7.3.10.legacy.i386.rpm sysklogd-1.4.1-14.legacy.7x.i386.rpm \ libpcap-0.6.2-17.7.3.6.legacy.i386.rpm php-imap-4.1.2-7.3.10.legacy.i386.rpm \ php-pgsql-4.1.2-7.3.10.legacy.i386.rpm tcpdump-3.6.3-17.7.3.6.legacy.i386.rpm \ libxml2-2.4.19-6.legacy.i386.rpm php-ldap-4.1.2-7.3.10.legacy.i386.rpm \ rsync-2.5.7-2.legacy.7x.i386.rpm RC2=$? # Check and finish if [ $RC2 = 0 ] then touch $UPDDIR/3.0-80 logger -t "$LOGTAG" "Update 3.0-80 Done." else logger -t "$LOGTAG" "Update 3.0-80 FAILED." fi fi ### ############################################################################ ### Update 3.0-81 - 2004-10-18 # SECURITY: apache, samba # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-81 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/apache-1.3.27-5.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/samba-2.2.12-0.73.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/samba-client-2.2.12-0.73.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/samba-common-2.2.12-0.73.3.legacy.i386.rpm . # Do the things... rpm -F apache-1.3.27-5.legacy.i386.rpm \ samba-2.2.12-0.73.3.legacy.i386.rpm \ samba-client-2.2.12-0.73.3.legacy.i386.rpm \ samba-common-2.2.12-0.73.3.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /etc/rc.d/init.d/httpd stop > /dev/null killall httpd 2> /dev/null sleep 5 killall -9 httpd 2> /dev/null sleep 2 /etc/rc.d/init.d/httpd start > /dev/null export PHPRC="/etc/hadmin";/usr/sbin/httpd -f /etc/hadmin/conf/httpd.conf;export -n PHPRC export PHPRC=/etc/hadmin;/usr/sbin/httpd -f /etc/hadmin/clientgw/conf/httpd.conf;export -n PHPRC touch $UPDDIR/3.0-81 logger -t "$LOGTAG" "Update 3.0-81 Done." else logger -t "$LOGTAG" "Update 3.0-81 FAILED." fi fi ### ############################################################################ ### Update 3.0-82 - 2004-12-23 # SECURITY: apache, glibc, tripwire(optional), mod_ssl(optional) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-82 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/apache-1.3.27-6.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-2.2.5-44.legacy.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-common-2.2.5-44.legacy.3.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/nscd-2.2.5-44.legacy.3.i386.rpm . #rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mod_ssl-2.8.12-7.legacy.i386.rpm . #rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/tripwire-2.3.1-10.1.legacy.7x.i386.rpm . # Do the things... rpm -F apache-1.3.27-6.legacy.i386.rpm \ glibc-2.2.5-44.legacy.3.i386.rpm \ glibc-common-2.2.5-44.legacy.3.i386.rpm \ nscd-2.2.5-44.legacy.3.i386.rpm # mod_ssl-2.8.12-7.legacy.i386.rpm \ # tripwire-2.3.1-10.1.legacy.7x.i386.rpm \ RC1=$? # Check and finish if [ $RC1 = 0 ] then /etc/rc.d/init.d/httpd stop > /dev/null killall httpd 2> /dev/null sleep 5 killall -9 httpd 2> /dev/null sleep 2 /etc/rc.d/init.d/httpd start > /dev/null export PHPRC="/etc/hadmin";/usr/sbin/httpd -f /etc/hadmin/conf/httpd.conf;export -n PHPRC export PHPRC=/etc/hadmin;/usr/sbin/httpd -f /etc/hadmin/clientgw/conf/httpd.conf;export -n PHPRC touch $UPDDIR/3.0-82 logger -t "$LOGTAG" "Update 3.0-82 Done." else logger -t "$LOGTAG" "Update 3.0-82 FAILED." fi fi ############################################################################ # Update 3.0-83b - 18/01/2005 # Bug fix for customized url filters # Obsoletes : 3.0-83 ############################################################################ if [ ! $ -e $UPDDIR/3.0-83b $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-83b.tgz . # Do the things ... tar xfz upd-3.0-83b.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then grep -v "dummy_first_line_as_squidguard_doesntlike_empty.base" /home/hadmin/cgi-bin/base/a_urls > /home/hadmin/cgi-bin/queue/a_urls grep -v "dummy_first_line_as_squidguard_doesntlike_empty.base" /home/hadmin/cgi-bin/base/a_domains > /home/hadmin/cgi-bin/queue/a_domains cp -f /home/hadmin/cgi-bin/base/a_expressions /home/hadmin/cgi-bin/queue grep -v "dummy_first_line_as_squidguard_doesntlike_empty.base" /home/hadmin/cgi-bin/base/perso_urls > /home/hadmin/cgi-bin/queue/perso_urls grep -v "dummy_first_line_as_squidguard_doesntlike_empty.base" /home/hadmin/cgi-bin/base/perso_domains > /home/hadmin/cgi-bin/queue/perso_domains cp -f /home/hadmin/cgi-bin/base/perso_expressions /home/hadmin/cgi-bin/queue cp -f /home/hadmin/cgi-bin/base/squidguard_databases /home/hadmin/cgi-bin/queue /usr/local/sbin/process_filtrage_squidguard touch $UPDDIR/3.0-83b logger -t "$LOGTAG" "Update 3.0-83b Done." else logger -t "$LOGTAG" "Update 3.0-83b FAILED." fi fi ### ########################################################################### # Update 3.0-84 - 14/01/2005 # - Backports from SLIS 3.1: # - Installs sudo validation method # - Installs the DNS slave zone configurator into interface # - New script clean_postgresql.sh (thanks to PHiL) # - New rewriterules file for the reverse proxy # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-84 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-84.tgz . # Do the things ... tar xfz upd-3.0-84.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then # Patch the database export PGPASSWORD=`grep ADMINPASS /home/hadmin/html/config_pgsql.inc.php |cut -d\" -f2` export PGUSER=`grep ADMINUSER /home/hadmin/html/config_pgsql.inc.php |cut -d\" -f2` psql -tqc "create sequence dnsslavezone_id start 1 increment 1;" hadmin psql -tqc "create table dnsslavezone (id int DEFAULT nextval('dnsslavezone_id'::text) not null, name varchar(255) not null, master varchar(255) not null, tovalid bool);" hadmin psql -tqc "create index id_dnsslavezone_key on dnsslavezone (id);" hadmin # Creates the sudo configuration for hadmin validation chmod -R 750 /usr/share/slis/bin chown root.root /usr/share/slis/bin echo " Host_Alias LOCALHOST84 = $HOSTNAME User_Alias HADMIN84 = hadmin Cmnd_Alias SLIS_SCRIPTS = /usr/share/slis/bin/[a-z]* HADMIN84 LOCALHOST84 = NOPASSWD:SLIS_SCRIPTS " >> /etc/sudoers # Creates the empty log files for named mkdir -p /var/log/named touch /var/log/named/named.secu.log touch /var/log/named/named.req.log chown -R named /var/log/named # Remake the dns configuration /usr/local/sbin/mknamedconf > /etc/named.conf /usr/local/sbin/mknamedzones sleep 10 # End of the update touch $UPDDIR/3.0-84 logger -t "$LOGTAG" "Update 3.0-84 Done." else logger -t "$LOGTAG" "Update 3.0-84 FAILED." fi fi ### ############################################################################ # Update 3.0-84b - 28/01/2005 # A patch for upd 3.0-84 (dns/index.php was missing) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-84b $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-84b.tgz . # Do the things ... tar xfz upd-3.0-84b.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.0-84b logger -t "$LOGTAG" "Update 3.0-84b Done." else logger -t "$LOGTAG" "Update 3.0-84b FAILED." fi fi ### ############################################################################ ### Update 3.0-85 - 2005-04-13 # SECURITY: # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-85 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/cups-libs-1.1.14-15.4.4.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/cyrus-sasl-1.5.24-25.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/cyrus-sasl-md5-1.5.24-25.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/cyrus-sasl-plain-1.5.24-25.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/iptables-1.2.8-8.73.1.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libpng-1.0.15-0.7x.1.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mysql-3.23.58-1.73.5.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-4.1.2-7.3.16.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-imap-4.1.2-7.3.16.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-ldap-4.1.2-7.3.16.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-mysql-4.1.2-7.3.16.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-pgsql-4.1.2-7.3.16.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/vim-common-6.1-18.7x.2.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/vim-minimal-6.1-18.7x.2.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/zip-2.3-26.1.0.7.3.legacy.i386.rpm . # Do the things... rpm -F cups-libs-1.1.14-15.4.4.legacy.i386.rpm \ cyrus-sasl-1.5.24-25.2.legacy.i386.rpm \ cyrus-sasl-md5-1.5.24-25.2.legacy.i386.rpm \ cyrus-sasl-plain-1.5.24-25.2.legacy.i386.rpm \ libpng-1.0.15-0.7x.1.legacy.i386.rpm \ mysql-3.23.58-1.73.5.legacy.i386.rpm \ php-4.1.2-7.3.16.legacy.i386.rpm \ php-imap-4.1.2-7.3.16.legacy.i386.rpm \ php-ldap-4.1.2-7.3.16.legacy.i386.rpm \ php-mysql-4.1.2-7.3.16.legacy.i386.rpm \ php-pgsql-4.1.2-7.3.16.legacy.i386.rpm \ vim-common-6.1-18.7x.2.3.legacy.i386.rpm \ vim-minimal-6.1-18.7x.2.3.legacy.i386.rpm \ zip-2.3-26.1.0.7.3.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then /etc/rc.d/init.d/httpd stop > /dev/null killall httpd 2> /dev/null sleep 5 killall -9 httpd 2> /dev/null sleep 2 /etc/rc.d/init.d/httpd start > /dev/null export PHPRC="/etc/hadmin";/usr/sbin/httpd -f /etc/hadmin/conf/httpd.conf;export -n PHPRC export PHPRC=/etc/hadmin;/usr/sbin/httpd -f /etc/hadmin/clientgw/conf/httpd.conf;export -n PHPRC touch $UPDDIR/3.0-85 logger -t "$LOGTAG" "Update 3.0-85 Done." else logger -t "$LOGTAG" "Update 3.0-85 FAILED." fi fi ############################################################################ # Update 3.0-86 - 25/04/2005 # Security fix into LDAP configuration # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-86 $ ] then awk '{STRING=$0;if (sub(/lmPassword/,"ntPassword",STRING) && DONE !=1) {print STRING; DONE=1;}else print}' /etc/openldap/slapd.conf > /tmp/slapd.conf cp -f /etc/openldap/slapd.conf /etc/openldap/slapd.conf_3.0-86 mv -f /tmp/slapd.conf /etc/openldap/slapd.conf /sbin/service ldap restart touch $UPDDIR/3.0-86 logger -t "$LOGTAG" "Update 3.0-86 Done." fi ### ############################################################################ ### Update 3.0-87 - 2005-05-24 # SECURITY: sudo, imap # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-87 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/imap-2001a-10.1.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sudo-1.6.5p2-2.2.legacy.i386.rpm . # Do the things... rpm -F imap-2001a-10.1.legacy.i386.rpm \ sudo-1.6.5p2-2.2.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.0-87 logger -t "$LOGTAG" "Update 3.0-87 Done." else logger -t "$LOGTAG" "Update 3.0-87 FAILED." fi fi ############################################################################ ### Update 3.0-88 - 2005-08-30 # SECURITY: sudo, imap # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-88 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/apache-1.3.27-8.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/curl-7.9.5-2.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/dhcp-2.0pl5-8.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/gd-1.8.4-4.1.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/gzip-1.3.3-1.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/krb5-libs-1.2.4-16.1.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/libtiff-3.5.7-2.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mysql-3.23.58-1.73.6.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mysql-server-3.23.58-1.73.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-3.1p1-14.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-clients-3.1p1-14.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-server-3.1p1-14.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssl-0.9.6b-39.7.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/pam-0.75-46.10.legacy.7x.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-4.1.2-7.3.17.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-imap-4.1.2-7.3.17.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-ldap-4.1.2-7.3.17.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-mysql-4.1.2-7.3.17.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-pgsql-4.1.2-7.3.17.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/postgresql-7.2.7-1.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/postgresql-libs-7.2.7-1.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/postgresql-server-7.2.7-1.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/telnet-0.17-20.1.legacy.i386.rpm . # Do the things... rpm -F apache-1.3.27-8.legacy.i386.rpm \ curl-7.9.5-2.2.legacy.i386.rpm \ dhcp-2.0pl5-8.2.legacy.i386.rpm \ gd-1.8.4-4.1.legacy.i386.rpm \ gzip-1.3.3-1.2.legacy.i386.rpm \ krb5-libs-1.2.4-16.1.legacy.i386.rpm \ libtiff-3.5.7-2.2.legacy.i386.rpm \ mysql-3.23.58-1.73.6.legacy.i386.rpm \ mysql-server-3.23.58-1.73.i386.rpm \ openssh-3.1p1-14.2.legacy.i386.rpm \ openssh-clients-3.1p1-14.2.legacy.i386.rpm \ openssh-server-3.1p1-14.2.legacy.i386.rpm \ openssl-0.9.6b-39.7.legacy.i386.rpm \ pam-0.75-46.10.legacy.7x.i386.rpm \ php-4.1.2-7.3.17.legacy.i386.rpm \ php-imap-4.1.2-7.3.17.legacy.i386.rpm \ php-ldap-4.1.2-7.3.17.legacy.i386.rpm \ php-mysql-4.1.2-7.3.17.legacy.i386.rpm \ php-pgsql-4.1.2-7.3.17.legacy.i386.rpm \ postgresql-7.2.7-1.2.legacy.i386.rpm \ postgresql-libs-7.2.7-1.2.legacy.i386.rpm \ postgresql-server-7.2.7-1.2.legacy.i386.rpm \ telnet-0.17-20.1.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.0-88 logger -t "$LOGTAG" "Update 3.0-88 Done." else logger -t "$LOGTAG" "Update 3.0-88 FAILED." fi fi ############################################################################ # Update 3.0-89 - 01/09/2005 # Mkfilters backport from SLIS 3.2 (Security: ssh brute-force protection) # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-89 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/upd-3.0-89.tgz . # Do the things ... tar xfz upd-3.0-89.tgz --exclude usr/local/ --directory / RC=$? bash /usr/local/sbin/permslis /usr/local/sbin/mkfilters # Check and finish if [ $RC = 0 ] then touch $UPDDIR/3.0-89 logger -t "$LOGTAG" "Update 3.0-89 Done." else logger -t "$LOGTAG" "Update 3.0-89 FAILED." fi fi ### ############################################################################ ### Update 3.0-90 - 2005-12-01 # SECURITY: cups-libs, bzip2, glibc # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-90 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/cups-libs-1.1.14-15.4.5.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/bzip2-libs-1.0.2-2.2.73.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/bzip2-1.0.2-2.2.73.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-2.2.5-44.legacy.6.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/glibc-common-2.2.5-44.legacy.6.i386.rpm . # Do the things... rpm -F cups-libs-1.1.14-15.4.5.legacy.i386.rpm \ bzip2-libs-1.0.2-2.2.73.legacy.i386.rpm \ bzip2-1.0.2-2.2.73.legacy.i386.rpm \ glibc-2.2.5-44.legacy.6.i386.rpm \ glibc-common-2.2.5-44.legacy.6.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.0-90 logger -t "$LOGTAG" "Update 3.0-90 Done." else logger -t "$LOGTAG" "Update 3.0-90 FAILED." fi fi ############################################################################ ### Update 3.0-91 - 2006-02-15 # SECURITY: Legacy updates # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-91 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/losetup-2.11n-12.7.3.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/lynx-2.8.4-18.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mount-2.11n-12.7.3.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/mysql-3.23.58-1.73.9.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssl-0.9.6b-39.10.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-5.6.1-38.0.7.3.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-CGI-2.752-38.0.7.3.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-CPAN-1.59_54-38.0.7.3.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-DB_File-1.75-38.0.7.3.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-NDBM_File-1.75-38.0.7.3.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-suidperl-5.6.1-38.0.7.3.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-4.1.2-7.3.18.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-imap-4.1.2-7.3.18.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-ldap-4.1.2-7.3.18.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-mysql-4.1.2-7.3.18.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/php-pgsql-4.1.2-7.3.18.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/util-linux-2.11n-12.7.3.2.legacy.i386.rpm . # Do the things... rpm -F --nodeps losetup-2.11n-12.7.3.2.legacy.i386.rpm \ lynx-2.8.4-18.3.legacy.i386.rpm \ mount-2.11n-12.7.3.2.legacy.i386.rpm \ mysql-3.23.58-1.73.9.legacy.i386.rpm \ openssl-0.9.6b-39.10.legacy.i386.rpm \ perl-5.6.1-38.0.7.3.3.legacy.i386.rpm \ perl-CGI-2.752-38.0.7.3.3.legacy.i386.rpm \ perl-CPAN-1.59_54-38.0.7.3.3.legacy.i386.rpm \ perl-DB_File-1.75-38.0.7.3.3.legacy.i386.rpm \ perl-NDBM_File-1.75-38.0.7.3.3.legacy.i386.rpm \ perl-suidperl-5.6.1-38.0.7.3.3.legacy.i386.rpm \ php-4.1.2-7.3.18.legacy.i386.rpm \ php-imap-4.1.2-7.3.18.legacy.i386.rpm \ php-ldap-4.1.2-7.3.18.legacy.i386.rpm \ php-mysql-4.1.2-7.3.18.legacy.i386.rpm \ php-pgsql-4.1.2-7.3.18.legacy.i386.rpm \ util-linux-2.11n-12.7.3.2.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.0-91 logger -t "$LOGTAG" "Update 3.0-91 Done." else logger -t "$LOGTAG" "Update 3.0-91 FAILED." fi fi ##### ############################################################################ ### Update 3.0-92 - 2006-04-05 # SECURITY: Fedora Legacy updates # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-92 $ ] then # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/apache-1.3.27-9.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/auth_ldap-1.6.0-4.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-3.1p1-14.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-clients-3.1p1-14.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/openssh-server-3.1p1-14.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/pcre-3.9-2.1.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/perl-DBI-1.21-1.1.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sendmail-8.12.11-4.22.10.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/squid-2.4.STABLE7-0.73.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/sudo-1.6.5p2-2.3.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/tar-1.13.25-4.7.2.legacy.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/unzip-5.50-31.1.legacy.i386.rpm . # Do the things... rpm -F apache-1.3.27-9.legacy.i386.rpm \ auth_ldap-1.6.0-4.2.legacy.i386.rpm \ openssh-3.1p1-14.3.legacy.i386.rpm \ openssh-clients-3.1p1-14.3.legacy.i386.rpm \ openssh-server-3.1p1-14.3.legacy.i386.rpm \ pcre-3.9-2.1.legacy.i386.rpm \ perl-DBI-1.21-1.1.legacy.i386.rpm \ sendmail-8.12.11-4.22.10.legacy.i386.rpm \ squid-2.4.STABLE7-0.73.3.legacy.i386.rpm \ sudo-1.6.5p2-2.3.legacy.i386.rpm \ tar-1.13.25-4.7.2.legacy.i386.rpm \ unzip-5.50-31.1.legacy.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then touch $UPDDIR/3.0-92 logger -t "$LOGTAG" "Update 3.0-92 Done." else logger -t "$LOGTAG" "Update 3.0-92 FAILED." fi fi ############################################################################ ### Update 3.x-33i - 2006-04-05 # SECURITY: kernel # Obsoletes : 3.x-33 3.x-33b 3.x-33c 3.x-33d 3.x-33e 3.x-33f 3.x-33g 3.x-33h # Fixed 2003-09-18: modutils missing when the SLIS is new ############################################################################ declare -i HOUR HOUR=`date +%k` R=$RANDOM #if [ ! $ -e $UPDDIR/3.x-33i $ -a $HOUR -lt 6 -a $R -lt 10000 ] if [ ! $ -e $UPDDIR/3.x-33i $ -a $HOUR -lt 6 ] #if [ ! $ -e $UPDDIR/3.x-33i $ ] then # Check which kernel to download if [ "`/bin/uname -v|/bin/grep SMP`" = "" ] then SMP="" else SMP="-smp" fi CPU=`uname -m` # Download the files cd /tmp rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/kernel$SMP-2.4.20-46.7.legacy.$CPU.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/modutils-2.4.18-3.7x.i386.rpm . rsync rsync://$RSYNC_HOST/$RSYNC_MODULE/quota-3.06-9.7.i386.rpm . # Do the things... rpm -F quota-3.06-9.7.i386.rpm rpm -F kernel$SMP-2.4.20-46.7.legacy.$CPU.rpm modutils-2.4.18-3.7x.i386.rpm RC1=$? # Check and finish if [ $RC1 = 0 ] then rm -f kernel*.rpm # Space optimization 2003-11-25 touch $UPDDIR/3.x-33i perl -pi -e "s/Red Hat Linux/SLIS3 (RedHat)/" /boot/grub/grub.conf logger -t "$LOGTAG" "Kernel update 3.x-33i done: rebooting now". /sbin/reboot killall slis_update killall slis_update.dev else logger -t "$LOGTAG" "Update 3.x-33i FAILED." fi fi ### ############################################################################ # Update 3.0-93 - 07/04/2005 # Fix for sendmail update that broked the sendmail.cf file # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/3.0-93 $ ] then /usr/local/sbin/mksendmailcf /etc/init.d/sendmail restart touch $UPDDIR/3.0-93 logger -t "$LOGTAG" "Update 3.0-93 Done." fi ### ############################################################################ ### NOTIFY update - 05/09/2002 # Notify installation of a new SLIS # Obsoletes : ############################################################################ if [ ! $ -e $UPDDIR/NOTIFY-3.0 $ ] then echo "$HOSTNAME installed" | mail -s "New SLIS 3.0" $SLISMASTER sleep 2 /usr/lib/sendmail -q killall crond sleep 1 crond touch $UPDDIR/NOTIFY-3.0 logger -t "$LOGTAG" "NOTIFY sent." fi ### ############################## logger -t "$LOGTAG" "Script Version 3.0 ended." /bin/rm -rf /var/lock/slis_upd