From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit 1.6 released Date: Mon, 27 Aug 2007 16:39:13 -0400 Message-ID: <200708271639.14187.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from vpn-14-241.rdu.redhat.com (vpn-14-241.rdu.redhat.com [10.11.14.241]) by mail.boston.redhat.com (8.13.1/8.13.1) with ESMTP id l7RKdSJo022260 for ; Mon, 27 Aug 2007 16:39:29 -0400 Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit List-Id: linux-audit@redhat.com Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide soon. The Changelog is: - Adding perm field should not set syscall added flag in auditctl - Fix segfault when aureport -if option is used - Fix auditctl to better check keys on rule lines - Add support for audit by TTY and other new event types - Auditd config option for group permission of audit logs - Swig messed up a variable in ppc's libaudit python bindings causing crashes. (#251327) - New audit event dispatcher - Update syscall tables for 2.6.23 kernel This release introduces a new multi-threaded event dispatcher. Its working according to my testing, but still needs some work to fill out all the features. Right now, it only runs internal plugins. They are af_unix and syslog. -Steve