Skip to content

v1.0.5

Choose a tag to compare

@doccaz doccaz released this 05 Jun 13:55
00faeac

Changes in v1.0.5

Bug fixes (found during SLE 16 highstate test run)

  • sysctl values unresolved: m_sysctl now calls shell_resolve() on the extracted value, so shell variable references like $SYSCTL_SETTING_VALUE expand to their actual numeric defaults instead of being passed literally to the kernel (fixed 7 failing sysctl states)
  • chronyd_or_ntpd service not found: normalise the combined service name from the SCAP rule to chronyd, which is the actual NTP daemon on SUSE systems
  • Directories in file.managed: cron directories (/etc/cron.d, /etc/cron.daily, /etc/cron.hourly, /etc/cron.monthly, /etc/cron.weekly) now use file.directory instead of file.managed; Salt rejects file.managed when the target is a directory
  • Missing files on minimal installs: lineinfile category now emits a file.managed preamble (with makedirs: True and replace: False) for /etc/login.defs, /etc/default/useradd, and /etc/ssh/sshd_config.d/01-complianceascode-reinforce-os-defaults.conf before any file.replace states touch them
  • Optional app config files: /etc/postfix/main.cf and /etc/libuser.conf states now carry onlyif: test -f <path> so the state is skipped cleanly when the package is not installed
  • /etc/security/limits.d/ missing: limits_disable_coredumps state now includes makedirs: True
  • rpm_verify_* exits non-zero: appended 2>/dev/null || true so xargs rpm --setperms/--setugids returning non-zero does not fail the state