From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit 1.7.6 released Date: Thu, 11 Sep 2008 19:39:27 -0400 Message-ID: <200809111939.27522.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Return-path: Received: from mail.boston.redhat.com (mail.boston.redhat.com [10.16.255.12]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id m8BNdTWc016072 for ; Thu, 11 Sep 2008 19:39:29 -0400 Received: from vpn-13-74.rdu.redhat.com (vpn-13-74.rdu.redhat.com [10.11.13.74]) by mail.boston.redhat.com (8.13.1/8.13.1) with ESMTP id m8BNdSvq017067 for ; Thu, 11 Sep 2008 19:39:28 -0400 Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit List-Id: linux-audit@redhat.com Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide tomorrow. The Changelog is: - Update event record list and aureport classifications (Yu Zhiguo/Peng Haitao) - Add subject to audit daemon events (Chu Li) - Fix parsing of acct & exe fields in user records (Peng Haitao) - Make client error handling in audisp-remote robust (DJ Delorie) - Do not list syscalls for rules on the exclude filter (Yu Zhiguo) - Add tcp_wrappers support for auditd - Updated syscall tables for 2.6.27 kernel - Add heartbeat exchange to remote logging protocol (DJ Delorie) - Apply man page update (Philipp Hahn) - Audit connect/disconnect of remote clients - In ausearch, collect pid from AVC records (Peng Haitao) - Add auparse_get_field_type function to describe field's contents - Add GSS/Kerberos encryption to the remote protocol (DJ Delorie) Please let me know if you run across any problems with this release. -Steve