diff --git a/NEWS b/NEWS index 59789f94a455024434875632ea5f91392d6292d4..5ef87bf2ee61af94189e2570688f4fdb67f4fc11 100644 --- a/NEWS +++ b/NEWS @@ -1,7 +1,10 @@ -unreleased (??) +release/004.048 (2015-06-24) [newsyslog] Change permissions of /var/log/btmp to '600' in RHEL - systems so that sshd stops complaining (jlent) + systems so that sshd stops complaining. This is because RHEL builds + of openssh are paranoid about the frequency that passwords are + mistakenly entered as usernames. If the utmp group is compromised, + there could be enough context to get real account credentials (jlent) [dns] Make dns_cache a class-level parameter, so that it can be set in Hiera (as base::dns::dns_cache) (akkornel)