[debian-lan-devel] [SCM] Debian-LAN development and packaging branch, squeeze, updated. 0.6-29-gd7fc32b

Andreas B. Mundt andi at debian.org
Sat Oct 6 07:46:56 UTC 2012


The following commit has been merged in the squeeze branch:
commit d7fc32b94e5402e8e19472062ca02ab07abe968e
Author: Andreas B. Mundt <andi at debian.org>
Date:   Sat Oct 6 09:07:28 2012 +0200

    Unattended upgrades for SERVER_A.  No system-wide readable home dirs.
    
    Enable unattended security upgrades for the mainserver.
    Make users' home directories not readable by default.

diff --git a/fai/config/debconf/SERVER_A b/fai/config/debconf/SERVER_A
index df40a9f..8965d34 100644
--- a/fai/config/debconf/SERVER_A
+++ b/fai/config/debconf/SERVER_A
@@ -1,2 +1,6 @@
-# Network interfaces on which the DHCP server should listen:
+## Network interfaces on which the DHCP server should listen:
 isc-dhcp-server isc-dhcp-server/interfaces string eth0
+## Do you want system-wide readable home directories?
+adduser adduser/homedir-permission boolean false
+## Automatically download and install stable updates?
+unattended-upgrades unattended-upgrades/enable_auto_updates boolean true
diff --git a/fai/config/package_config/SERVER_A b/fai/config/package_config/SERVER_A
index d707f9e..cbde1fd 100644
--- a/fai/config/package_config/SERVER_A
+++ b/fai/config/package_config/SERVER_A
@@ -4,6 +4,7 @@ PACKAGES aptitude
 sudo-ldap
 screen
 etckeeper
+unattended-upgrades
 
 ## backup:
 dirvish

-- 
Debian-LAN development and packaging



More information about the debian-lan-devel mailing list