Typo in default pidfile in fail2ban.conf
Added support for MySQL logfiles
Added testcase for MySQL date format to testcases/datedetectortestcase.py
and example of MySQL log file.
Replace the check_fail2ban script by a new one which respects the Nagios specs (like status, output, perfdata, help...).
Also add a README which includes the content of f2ban.txt (which is now removed)
fix the script name to check_fail2ban everywhere
DOC: minor change -- refer to the fail2ban manpage
ENH: deleted trailing spaces in fail2ban- cmdline tools

Now it was already a mix, and Cyril is not working on this code any
longer so no need to maintain this convention.
TST: Add support for coveralls for python 2.6 and python 2.7
TST+BF: Fix incorrect commands for coveralls support
ENH: increase waiting to 4 sec for gamin/pyinotify

This will be the last gesture from me for the bloody tests:
https://travis-ci.org/kwirk/fail2ban/jobs/5904668
TST: coverage ignore Travis CI python virtual environments
Merge pull request #163 from kwirk/coveralls

Coveralls.io
RF+TST: bring inBanList back from private to protected and enabled its rudimentary unittests
TST+BF: Use separate coveragerc for Travis CI

Should now ignore server/filtergamin.py as gamin is not tested. Also
ignores Travis CI python virtual environments
Merge pull request #164 from kwirk/coveralls

TST+BF: Use separate coveragerc for Travis CI
TST: Add gamin support for Travis CI
change the license to GPLv2 + adapat text
FD_CLOEXEC support

 * 001-fail2ban-server-socket-close-on-exec-no-leak.diff

Add code that marks server and client sockets with FD_CLOEXEC flags.
Avoid leaking file descriptors to processes spawned when handling
fail2ban actions (ex: iptables).

Unix sockets managed by fail2ban-server don't need to be passed to any
child process. Fail2ban already uses the FD_CLOEXEC flags in the filter
code.

This patch also avoids giving iptables access to fail2ban UNIX socket in
a SELinux environment (A sane SELinux policy should trigger an audit
event because "iptables" will be given read/write access to the fail2ban
control socket).

Some random references related to this bug:
 http://sourceforge.net/tracker/?func=detail&atid=689044&aid=2086568&group_id=121032
 http://www.redhat.com/archives/fedora-selinux-list/2009-June/msg00124.html
 http://forums.fedoraforum.org/showthread.php?t=234230

 * 002-fail2ban-filters-close-on-exec-typo-fix.diff

There is a typo in the fail2ban server/filter.py source code. The
FD_CLOEXEC is correctly set but additional *random* flags are also set.
It has no side-effect as long as the fd doesn't match a valid flag :)
"fcntl.fcntl(fd, fcntl.F_SETFD, fd | fcntl.FD_CLOEXEC)" <== the 3rd
parameter should be flags, not a file descriptor.

 * 003-fail2ban-gamin-socket-close-on-exec-no-leak.diff

Add code that marks the Gamin monitor file descriptor with FD_CLOEXEC
flags. Avoid leaking file descriptors to processes spawned when handling
fail2ban actions (ex: iptables).

---

File descriptors in action process before patches:
dr-x------ 2 root root  0 .
dr-xr-xr-x 8 root root  0 ..
lr-x------ 1 root root 64 0 -> /dev/null        <== OK
l-wx------ 1 root root 64 1 -> /tmp/test.log    <== used by test action
lrwx------ 1 root root 64 2 -> /dev/null        <== OK
lrwx------ 1 root root 64 3 -> socket:[116361]  <== NOK (fail2ban.sock leak)
lr-x------ 1 root root 64 4 -> /proc/20090/fd   <== used by test action
l-wx------ 1 root root 64 5 -> /var/log/fail2ban.log <== OK
lrwx------ 1 root root 64 6 -> socket:[115608]  <== NOK (gamin sock leak)

File descriptors in action process after patches:
dr-x------ 2 root root  0 .
dr-xr-xr-x 8 root root  0 ..
lr-x------ 1 root root 64 0 -> /dev/null        <== OK
l-wx------ 1 root root 64 1 -> /tmp/test.log    <== used by test action
lrwx------ 1 root root 64 2 -> /dev/null        <== OK
lr-x------ 1 root root 64 3 -> /proc/18284/fd   <== used by test action
l-wx------ 1 root root 64 5 -> /var/log/fail2ban.log <== OK
TST: Add gamin testing for and only coveralls coverage for python2.7
Merge pull request #166 from kwirk/travis-gamin

Travis gamin support on Travis CI