From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit-2.0.3 released Date: Sat, 17 Oct 2009 15:36:19 -0400 Message-ID: <200910171536.19595.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: Text/Plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from x2.localnet (vpn-9-102.rdu.redhat.com [10.11.9.102]) by int-mx02.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id n9HJaG9c031999 for ; Sat, 17 Oct 2009 15:36:16 -0400 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit List-Id: linux-audit@redhat.com Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit. It will also be in rawhide soon. The ChangeLog is: - In auditd, tell libev to stop processing a connection when idle timeout - In auditd, tell libev to stop processing a connection when shutting down - Interpret CAPSET records in ausearch/auparse This release fixes a bug introduced in the 2.0.3 release. The main problem was that the idle timeout was not telling libev to stop processing the associated socket when it closed an idle connection. Subsequent reconnects would go into an error state and libev would immediately close the new connection. This update fixes that problem. This update also adds the ability to interpret the capability bit maps in CAPSET records. Please let me know if you run across any problems with this release. -Steve