audit 1.2.4 released

audit 1.2.4 released

[Steve Grubb]

Hi,

I've just released a new version of the audit daemon. It can be downloaded 
from http://people.redhat.com/sgrubb/audit  It will also be in rawhide  
tomorrow. The Changelog is:

- Add support for the new filter key
- Update syscall tables for 2.6.17
- Add audit failure query function
- Switch out gethostbyname call with getaddrinfo
- Add audit by obj capability for 2.6.18 kernel
- Ausearch & aureport now fail if no args to -te
- New auditd.conf option to choose blocking/non-blocking dispatcher 
communication
- Ausearch improved search by label

Please let me know if there are any problems with this release.

-Steve

RE: audit 1.2.4 released

[Shuva Brata Deb]

Hi,

Can any body give me a pointer on which version or update of Redhat
Enterprise Linux will see audit 1.2?

A more generic question would be: Is there any way I can find out the
packaging plan of Redhat Enterprise Linux with the upcoming versions of
audit.

RH Enterprise Linux v-4 comes with audit 1.0 and there are no downloads
for newer version from the redhat download center.

Thanks,
Shuva.//

-----Original Message-----
From: linux-audit-bounces@redhat.com
[mailto:linux-audit-bounces@redhat.com] On Behalf Of Steve Grubb
Sent: Saturday, July 01, 2006 2:09 AM
To: linux-audit@redhat.com
Subject: audit 1.2.4 released

Hi,

I've just released a new version of the audit daemon. It can be
downloaded
from http://people.redhat.com/sgrubb/audit  It will also be in rawhide 
tomorrow. The Changelog is:

- Add support for the new filter key
- Update syscall tables for 2.6.17
- Add audit failure query function
- Switch out gethostbyname call with getaddrinfo
- Add audit by obj capability for 2.6.18 kernel
- Ausearch & aureport now fail if no args to -te
- New auditd.conf option to choose blocking/non-blocking dispatcher
communication
- Ausearch improved search by label

Please let me know if there are any problems with this release.

-Steve

--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit

---------------------------------------------------------------------------------------------
This message, including any attachments, contains confidential information intended for a specific individual and purpose, and is intended for the addressee only. Any unauthorized disclosure, use, dissemination, copying, or distribution of this message or any of its attachments or the information contained in this e-mail, or the taking of any action based on it, is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail and delete this message.

Re: audit 1.2.4 released

[Steve Grubb]

On Monday 03 July 2006 00:39, Shuva Brata Deb wrote:
> Can any body give me a pointer on which version or update of Redhat
> Enterprise Linux will see audit 1.2?

RHEL5 will use the latest audit package whatever that turns out to be.

> A more generic question would be: Is there any way I can find out the
> packaging plan of Redhat Enterprise Linux with the upcoming versions of
> audit.

I have a broad feature based release schedule. Right now I'm in the 1.2 series 
which was supposed to be audit parser work, but haven't done much with that 
because of new feature work in the kernel. But that should be ending and I 
will get back to parser work. Next I will go back to working on the realtime 
event dispatcher. 

That is the immediate plans for the project. RHEL5 should have these at some 
point.

-Steve