From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: audit 1.7.13 released Date: Tue, 21 Apr 2009 16:01:58 -0400 Message-ID: <200904211601.58640.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Return-path: Received: from x2.localnet (vpn-13-185.rdu.redhat.com [10.11.13.185]) by ns3.rdu.redhat.com (8.13.8/8.13.8) with ESMTP id n3LK2hqu011651 for ; Tue, 21 Apr 2009 16:02:43 -0400 Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit List-Id: linux-audit@redhat.com Hi, I've just released a new version of the audit daemon. It can be downloade= d=20 from http://people.redhat.com/sgrubb/audit It will also be in rawhide =20 soon. The Changelog is: - Disable libev asserts unless --with-debug passed to configure - Handle kernel 2.6.29's audit =3D 0 boot parameter better - Install audit.py file in arch specific python directory (Dan Walsh) - Fix problem with negative uids in audit rules on 32 bit systems - When file type is unknown, output octal for mode field (Miloslav Trma=C4= =8D) - Update tty keystroke interpretations (Miloslav Trma=C4=8D) The first item reduces the size of the audit daemon. libev seems to be wo= rking=20 pretty good so no need to keep its debug info anymore. The second item=20 addresses a problem when the kernel is booted without the audit subsystem= =20 compiled in, but yet they try to run the audit daemon. The failure was th= at it=20 hung the initscripts since the problem was prefork. Dan Walsh also found that the python libs were landing in the wrong place= =20 after 1.7.12's fix for the newest swig. Also, 32 bit system were having=20 problems with auid=3D-1 not being the right value. And we updated some of= the=20 tty keystroke mappings to be more user friendly. Please let me know if you run across any problems with this release. -Steve