From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: audit 2.4.5 released Date: Fri, 18 Dec 2015 16:20:08 -0500 Message-ID: <1882622.eTClln5m29@x2> References: <1929164.Q9DeV9IFDj@x2> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Paul Moore Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Friday, December 18, 2015 04:08:07 PM Paul Moore wrote: > On Fri, Dec 18, 2015 at 2:49 PM, Steve Grubb wrote: > > Hello, > > > > I've just released a new version of the audit daemon. It can be downloaded > > from http://people.redhat.com/sgrubb/audit. It will also be in rawhide > > soon. The ChangeLog is: > > > > - Fix auditd disk flushing for data and sync modes > > - Fix auditctl to not show options not supported on older OS > > - Add audit.m4 file to aid adding support to other projects > > - Fix C99 inline function build issue > > - Add account lock and unlock event types > > - Change logging loophole check to geteuid() > > - Fix ausearch to not consider AUDIT_PROCTITLE events malformed (Burn > > Alting) - Fix ausearch to parse FEATURE_CHANGE events > > Perhaps I missed it, but when can we expect the audit-by-exec support? It will be in the 2.5 release. It should be one of the first couple of things I apply to the svn repo. I'm going to shoot for a January release of the audit package. -Steve