Changelog for
audit-0.8.2-1.i386.rpm :
Sat May 21 00:00:00 2005 Steve Grubb
0.8.2-1
- Update documentation
- Handle user space audit events in more uniform way
- Update all parsers for more robustness with new kernel changes
- Create quiet mode for error messages
- Make rotated logs readonly
Wed May 18 00:00:00 2005 Steve Grubb 0.8.1-1
- Fix code to \"or\" uid & gid checks for ausearch -ua & -ga
- Change msg() to audit_msg() to avoid conflicts
- Parse socket messages for hostname in ausearch
Fri May 13 00:00:00 2005 Steve Grubb 0.8-1
- ausearch fix bugs related to -f & -x
- Parse messages using new types
- Properly unescape filenames
- Update interface for sending userspace messages to use more types
Mon May 9 00:00:00 2005 Steve Grubb 0.7.4-1
- Make sure ausearch ts & te obey DST.
- Code cleanups to make file system watches work correctly
Wed May 4 00:00:00 2005 Steve Grubb 0.7.3-1
- Add code to get watch list to auditctl
- Get -f & -hn working in ausearch
- Added search by terminal, exe, and syscall to ausearch program
- Added -w parameter to match whole word in ausearch
Thu Apr 28 00:00:00 2005 Steve Grubb 0.7.2-1
- Allow ausearch uid & gid to be non-numeric (root, wheel, etc)
- Fix problems with changing run level
- Added new code for logging shutdown reason credentials
- Update DAEMON messages to use better timestamp
Mon Apr 25 00:00:00 2005 Steve Grubb 0.7.1-1
- Make sure time calc is done using localtime
- Raise rlimits for file size & cpu usage
- Added new disk_error_action config item to auditd.conf
- Rework memory management of event buffer
- Handled all errors in event logging thread
Sun Apr 24 00:00:00 2005 Steve Grubb 0.7-1
- In auditctl -l, loop until all rules are printed
- Update autrace not to run if rules are currently loaded
- Added code to switch to single user mode when disk is full
- Added the ausearch program
Thu Apr 21 00:00:00 2005 Steve Grubb 0.6.12-1
- Fixed bug where elf type wasn\'t being set when given numerically
- Added autrace program (similar to strace)
- Fixed bug when logs = 2 and ROTATE is the action, only 1 log resulted
Tue Apr 19 00:00:00 2005 Steve Grubb 0.6.11-1
- Check log file size on start up
- Added priority_boost config item
- Reworked arch support
- Reworked how run level is changed
- Make allowances for ECONNREFUSED
Sat Apr 2 00:00:00 2005 Steve Grubb 0.6.10-1
- Code cleanups
- Support the arch field for auditctl
- Add version to auditctl
- Documentation updates
- Moved default location of the audit log to /var/log/audit
Thu Mar 17 23:00:00 2005 Steve Grubb 0.6.9-1
- Added patch for filesystem watch
- Added version information to audit start message
- Change netlink code to use ack in order to get error notification
Thu Mar 10 23:00:00 2005 Steve Grubb 0.6.8-1
- removed the pam_loginuid library - its going to pam
Wed Mar 9 23:00:00 2005 Steve Grubb 0.6.7-1
- Fixed bug setting loginuid
- Added num_logs to configure number of logs when rotating
- Added code for rotating logs
Tue Mar 8 23:00:00 2005 Steve Grubb 0.6.6-1
- Fix audit_set_pid to try to read a reply, but its non-fatal if no reply.
- Remove the read status during init
- Change to using pthreads sync mechanism for stopping system
- Worker thread should ignore all signals
- Change main loop to use select for inbound event handling
- Gave pam_loginuid a \"failok\" option for testing
Thu Mar 3 23:00:00 2005 Steve Grubb 0.6.5-1
- Lots of code cleanups
- Added write_pid function to auditd
- Added audit_log to libaudit
- Don\'t check file length in foreground mode of auditd
- Added
*if_enabled functions to send messages only if audit system is enabled
- If syscall name is unknown when printing rules, use the syscall number
- Rework the build system to produce singly threaded public libraries
- Create a multithreaded version of libaudit for the audit daemon\'s use
Wed Feb 23 23:00:00 2005 Steve Grubb 0.6.4-1
- Rename pam_audit to pam_loginuid to reflect what it does
- Fix bug in detecting space left on partition
- Fix bug in handling of suspended logging
Wed Feb 23 23:00:00 2005 David Woodhouse 0.6.3-3
- Include stdint.h in libaudit.h and require new glibc-kernheaders
Sun Feb 20 23:00:00 2005 Steve Grubb 0.6.3-2
- Another lib64 correction
Sun Feb 20 23:00:00 2005 Steve Grubb 0.6.3-1
- Change pam install from /lib/security to /lib/security
- Change pam_audit to write loginuid to /proc/pid/loginuid
- Add pam_session_close handle
- Update to newest kernel headers
Fri Feb 11 23:00:00 2005 Steve Grubb 0.6.2-1
- New version
- Add R option to auditctl to allow reading rules from file.
- Do not allow task creation list to have syscall auditing
- Add D option to allow deleting all rules with 1 command
- Added pam_audit man page & sample.rules
- Mod initscript to call auditctl to load rules at start-up
- Write message to log file for daemon start up
- Write message that daemon is shutting down
- Modify auditd shutdown to wait until logger thread is finished
- Add sample rule file to docs
Sat Jan 8 23:00:00 2005 Steve Grubb 0.6.1-1
- New version: rework auditctl and its man pages.
- Added admin_space_left config option as last chance before
running out of disk space.
Wed Jan 5 23:00:00 2005 Steve Grubb 0.6-1
- New version
- Split package up to libs, libs-devel, and audit.
Mon Dec 13 23:00:00 2004 Steve Grubb 0.5.6-1
- New version
Fri Dec 10 23:00:00 2004 Steve Grubb 0.5.5-1
- New version
Fri Dec 3 23:00:00 2004 Steve Grubb 0.5.4-1
- New version
Mon Nov 22 23:00:00 2004 Steve Grubb 0.5.3-1
- New version
Mon Nov 15 23:00:00 2004 Steve Grubb 0.5.2-1
- New version
Wed Nov 10 23:00:00 2004 Steve Grubb 0.5.1-1
- Added initscript pieces
- New version
Thu Sep 2 00:00:00 2004 Charlie Bennett (ccbAATTredhat.com) 0.5-1
- Initial build.
