From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit 1.5 released Date: Fri, 2 Mar 2007 20:11:11 -0500 Message-ID: <200703022011.11206.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from vpn-248-50.boston.redhat.com (vpn-248-50.boston.redhat.com [10.13.248.50]) by mail.boston.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id l231B4e3017605 for ; Fri, 2 Mar 2007 20:11:04 -0500 Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit List-Id: linux-audit@redhat.com Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide tomorrow. The Changelog is: - NEW audit dispatcher program & plugin framework - Correct hidden variables in libauparse - Added NISPOM sample rules - Verify accessibility of files passed in auparse_init - Fix bug in parser library interpreting socketcalls - Add support for stdio FILE pointer in auparse_init - Adjust init script to allow anyone to status auditd (#230626) The main feature of this update is a new audit event dispatcher that is written in C. It should allow more plugins to be attached to it than the old one. There will be more information about writing plugins later. Please let me know if there are any problems with this release. -Steve