Changelog for
audit-libs-1.3-2.fc5.i386.rpm :
Thu Nov 30 23:00:00 2006 Steve Grubb
1.3-2
- Fix minor parsing problem and add new msg types
Tue Nov 28 23:00:00 2006 Steve Grubb 1.3-1
- ausearch & aureport implement uid/gid caching
- In ausearch & aureport, extract addr when hostname is unknown
- In ausearch & aureport, test audit log presence O_RDONLY
- New ausearch/aureport time keywords: recent, this-week, this-month, this-year
- Added --add & --delete option to aureport
- Update res parsing in config change events
- Increase the size on audit daemon buffers
- Parse avc_path records in ausearch/aureport
- ausearch has new output mode, raw, for extracting events
- ausearch/aureport can now read stdin
- Rework AVC processing in ausearch/aureport
- Added long options to ausearch and aureport
Wed Oct 25 00:00:00 2006 Steve Grubb 1.2.9-1
- In auditd if num_logs is zero, don\'t rotate on SIGUSR1 (#208834)
- Fix some defines in libaudit.h
- Some auditd config strings were not initialized in aureport (#211443)
- Updated man pages
- Add Netlabel event types to libaudit
- Update aureports to current audit event types
- Update autrace a little
- Deprecated all the old audit_rule functions from public API
- Drop auparse library for the moment
Mon Oct 2 00:00:00 2006 Steve Grubb 1.2.8-1.fc5
- Make internal auditd buffers bigger for context info
- Correct address resolving of hostname in logging functions
- Do not allow multiple msgtypes in same audit rule in auditctl (#207666)
- Only =, != operators for arch & inode fields in auditctl (#206427)
- Updated audit message type table
- Remove watches from aureport since FS_WATCH is deprecated
- Add audit_log_avc back temporarily (#208152)
Thu Sep 21 00:00:00 2006 Steve Grubb 1.2.7-4.fc5
- Fix auditd.conf by commenting out dispatcher line
Wed Sep 20 00:00:00 2006 Steve Grubb 1.2.7-3.fc5
- Fix config file location
Wed Sep 20 00:00:00 2006 Steve Grubb 1.2.7-2.fc5
- Remove the audit dispatcher since backport of setroubleshooter is not likely
Tue Sep 19 00:00:00 2006 Steve Grubb 1.2.7-1
- Update to new version that is designed for 2.6.18 kernel
Mon Mar 6 23:00:00 2006 Steve Grubb 1.1.5-1
- Changed audit_log_semanage_message to take new params
- In aureport, add class between syscall and permission in avc report
- Fix bug where fsync is called in debug mode
- Add optional support for tty in SYSCALL records for ausearch/aureport
- Reinstate legacy rule operator support
- Add man pages
- Auditd ignore most signals
Fri Feb 10 23:00:00 2006 Jesse Keating - 1.1.4-5.1
- bump again for double-long bug on ppc(64)
Fri Feb 10 23:00:00 2006 Steve Grubb 1.1.4-5
- Change audit_log_semanage_message to check strlen as well as NULL.
Thu Feb 9 23:00:00 2006 Steve Grubb 1.1.4-3
- Change audit_log_semanage_message to take new params.
Wed Feb 8 23:00:00 2006 Steve Grubb 1.1.4-1
- Fix bug in autrace where it didn\'t run on kernels without file watch support
- Add syslog message to auditd saying what program was started for dispatcher
- Remove audit_send_user from public api
- Fix bug in USER_LOGIN messages where ausearch does not translate
msg=\'uid=500: into acct name (#178102).
- Change comm with dispatcher to socketpair from pipe
- Change auditd to use custom daemonize to avoid race in init scripts
- Update error message when deleting a rule that doesn\'t exist (#176239)
- Call shutdown_dispatcher when auditd stops
- Add new logging function audit_log_semanage_message
Tue Feb 7 23:00:00 2006 Jesse Keating - 1.1.3-1.1
- rebuilt for new gcc4.1 snapshot and glibc changes
Thu Jan 5 23:00:00 2006 Steve Grubb 1.1.3-1
- Add timestamp to daemon_config messages (#174865)
- Add error checking of year for aureport & ausearch
- Treat af_unix sockets as files for searching and reporting
- Update capp & lspp rules to combine syscalls for higher performance
- Adjusted the chkconfig line for auditd to start a little earlier
- Added skeleton program to docs for people to write their own dispatcher with
- Apply patch from Ulrich Drepper that optimizes resource utilization
- Change ausearch and aureport to unlocked IO
Mon Dec 5 23:00:00 2005 Steve Grubb 1.1.2-1
- Add more message types
Wed Nov 30 23:00:00 2005 Steve Grubb 1.1.1-1
- Add support for alpha processors
- Update the audisp code
- Add locale code in ausearch and aureport
- Add new rule operator patch
- Add exclude filter patch
- Cleanup make files
- Add python bindings
Wed Nov 9 23:00:00 2005 Steve Grubb 1.1-1
- Add initial version of audisp. Just a placeholder at this point
- Remove -t from auditctl
Mon Nov 7 23:00:00 2005 Steve Grubb 1.0.12-1
- Add 2 more summary reports
- Add 2 more message types