From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit 1.6.1 released Date: Sun, 2 Sep 2007 12:26:35 -0400 Message-ID: <200709021226.35259.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from vpn-14-128.rdu.redhat.com (vpn-14-128.rdu.redhat.com [10.11.14.128]) by mail.boston.redhat.com (8.13.1/8.13.1) with ESMTP id l82GRGk8026593 for ; Sun, 2 Sep 2007 12:27:16 -0400 Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit List-Id: linux-audit@redhat.com Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide soon. The Changelog is: - External plugin support in place - Updated system-config-audit with some bug fixes. (Miloslav Trmac) - Add missing newline to string output of event dispatcher. - Fix reference counting in auparse python bindings (#263961) - Moved default af_unix plugin socket to /var/run/audispd_events This release finalizes support for external audit event dispatcher plugins. I've included a sample plugin that simply writes to syslog any events it receives. At this point i think people can start writing plugins to do analysis work, protocol conversion, alerting, or remote logging. At some point, I will update the plugin sample to should how the audit parsing library could be used to watch for bad logins and syslog it. Please let me know if you run across any problems with this release. -Steve