Only allow Administrator's group and SYSTEM user access to C:\salt. This
eliminates a race condition where a non-admin user could modify a template or
managed file before it is executed by the minion (which is running as an
elevated user), thus avoiding a potential escalation of privileges. (issue 6361)
Quieted warning about SALT_MINION_CONFIG environment variable on
minion startup and for CLI commands run via salt-call (issue 5956)
Added minion config parameter random_reauth_delay to stagger
re-auth attempts when the minion is waiting for the master to approve its
public key. This helps prevent SYN flooding in larger environments.
YUM: Allow 32-bit packages with arches other than i686 to be managed on
64-bit systems (issue 6299)
Fixed incorrect reporting in pkgrepo.managed states (issue 5517)
Fixed 32-bit binary package installs on 64-bit RHEL-based distros, and added
proper support for 32-bit packages on 64-bit Debian-based distros
(issue 6303)
Fixed issue where requisites were inadvertently being put into YUM repo files
(issue 6471)
Fixed inaccurate reporting of results in service.running states when the service fails to start
(issue 5894)
Fixed handling of custom initscripts in RHEL-based distros so that they are
immediately available, negating the need for a second state run to manage the
service that the initscript controls
Fixed inaccurate reporting when ssh_auth.present states are run with test=True, when
rsa/dss is used for the enc param instead of ssh-rsa/ssh-dss
(issue 5374)