* audit-2.1.2 released
@ 2011-06-12 13:45 Steve Grubb
2011-06-12 14:16 ` Mr Dash Four
0 siblings, 1 reply; 3+ messages in thread
From: Steve Grubb @ 2011-06-12 13:45 UTC (permalink / raw)
To: linux-audit
Hi,
I've just released a new version of the audit daemon. It can be downloaded
from http://people.redhat.com/sgrubb/audit. It will also be in rawhide
soon. The ChangeLog is:
- In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
- In ausearch/report, add and update parsers
- In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
- In ausearch/report, parse addr field of DAEMON_ACCEPT & DAEMON_CLOSE records
- In auditd, move startup success to after events are registered
- If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
- Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
- Parse and interpret NETFILTER_PKT events correctly
- Return error if auditctl -l fails (#709345)
- In audisp-remote, replace glibc's fgets with custom implementation
The bulk of this release is fixing up the parsers for new events. This release also
updates the oom handler code for recent kernels. And reliability of logging remote
events was improved.
Please let me know if you run across any problems with this release.
-Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: audit-2.1.2 released
2011-06-12 13:45 audit-2.1.2 released Steve Grubb
@ 2011-06-12 14:16 ` Mr Dash Four
2011-06-12 16:47 ` Steve Grubb
0 siblings, 1 reply; 3+ messages in thread
From: Mr Dash Four @ 2011-06-12 14:16 UTC (permalink / raw)
To: linux-audit
> - Parse and interpret NETFILTER_PKT events correctly
>
Does that include the new "obj" field? :-X
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: audit-2.1.2 released
2011-06-12 14:16 ` Mr Dash Four
@ 2011-06-12 16:47 ` Steve Grubb
0 siblings, 0 replies; 3+ messages in thread
From: Steve Grubb @ 2011-06-12 16:47 UTC (permalink / raw)
To: linux-audit
On Sunday, June 12, 2011 10:16:45 AM Mr Dash Four wrote:
> > - Parse and interpret NETFILTER_PKT events correctly
>
> Does that include the new "obj" field? :-X
No, it does not. I don't make changes like that until a kernel is released or at least
in RC status. There will be future audit package releases where this will be picked
up.
-Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2011-06-12 16:47 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-06-12 13:45 audit-2.1.2 released Steve Grubb
2011-06-12 14:16 ` Mr Dash Four
2011-06-12 16:47 ` Steve Grubb
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox