From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit 1.7.2 released Date: Wed, 9 Apr 2008 16:31:16 -0400 Message-ID: <200804091631.16554.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Return-path: Received: from vpn-248-14.boston.redhat.com (vpn-248-14.boston.redhat.com [10.13.248.14]) by mail.boston.redhat.com (8.13.1/8.13.1) with ESMTP id m39KVMxC002701 for ; Wed, 9 Apr 2008 16:31:22 -0400 Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit List-Id: linux-audit@redhat.com Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide soon. The Changelog is: - gen_table.c now includes IPC defines to avoid kernel headers wild goose chase - ausyscall program added for cross referencing syscall name and number info - Add login session ID search capability to ausearch This release is mostly to fix a build problem on non-red Hat systems. It seems that the low level ipc.h is kept in many places. So, to avoid problems, I copy and pasted the defines we need into all the places that need it. This release also includes a new program ausyscall that can be used to cross reference syscall names and numbers. This would be important for verifying the need to have 2 rules on biarch systems. This release also adds support for searching by login session IDs on 2.6.25 and later kernels. Please let me know if you run across any problems with this release. -Steve