From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit 2.3.7 released Date: Wed, 04 Jun 2014 17:47:50 -0400 Message-ID: <10543128.UCbQqtWU0m@x2> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from x2.localnet (vpn-60-248.rdu2.redhat.com [10.10.60.248]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id s54LlomN031621 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 4 Jun 2014 17:47:51 -0400 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux audit List-Id: linux-audit@redhat.com Hello, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit. It will also be in rawhide soon. The ChangeLog is: - Limit number of options in a rule in libaudit - Auditctl cannot load rule with lots of syscalls (#1089713) - In ausearch, fix checkpointing when inode is reused by new log (Burn Alting) - Add PROCTITLE and FEATURE_CHANGE event types Normally I'd wait a little longer to do a release but a couple things made me want to keep this one short. The PROCTITLE event is showing up on people's systems now and we need to support it. The other big change is that people writing rules with lots of syscalls were getting an error such that the rule would not load. It took two fixes to get it squared away. Please let me know if you run across any problems with this release Thanks, -Steve