rpms/audit
7
0
Fork 0
Code Issues Pull Requests Releases Activity
1deb784224
audit/.cvsignore

29 lines
531 B
Plaintext
Raw Normal View History

- New version - Add R option to auditctl to allow reading rules from file. - Do not allow task creation list to have syscall auditing - Add D option to allow deleting all rules with 1 command - Added pam_audit man page & sample.rules - Mod initscript to call auditctl to load rules at start-up - Write message to log file for daemon start up - Write message that daemon is shutting down - Modify auditd shutdown to wait until logger thread is finished - Add sample rule file to docs
2005-02-11 19:22:21 +00:00
audit-0.5.tar.gz
audit-0.6.2.tar.gz
Moved the tar.gz files into the lookaside cache. Please refrain from checking tar.gz files into CVS. That is what the lookaside cache is for.
2004-12-12 21:35:14 +00:00
audit-0.5.5.tar.gz
- Change pam install from /lib/security to /%{_lib}/security - Change pam_audit to write loginuid to /proc/pid/loginuid - Add pam_session_close handle - Update to newest kernel headers
2005-02-20 20:33:50 +00:00
audit-0.6.3.tar.gz
- Rename pam_audit to pam_loginuid to reflect what it does - Fix bug in detecting space left on partition - Fix bug in handling of suspended logging
2005-02-23 23:24:19 +00:00
audit-0.6.4.tar.gz
- Lots of code cleanups - Added write_pid function to auditd - Added audit_log to libaudit - Don't check file length in foreground mode of auditd - Added *if_enabled functions to send messages only if audit system is enabled - If syscall name is unknown when printing rules, use the syscall number - Rework the build system to produce singly threaded public libraries - Create a multithreaded version of libaudit for the audit daemon's use
2005-03-03 22:48:44 +00:00
audit-0.6.5.tar.gz
- Fix audit_set_pid to try to read a reply, but its non-fatal if no reply. - Remove the read status during init - Change to using pthreads sync mechanism for stopping system - Worker thread should ignore all signals - Change main loop to use select for inbound event handling - Gave pam_loginuid a "failok" option for testing
2005-03-08 20:46:48 +00:00
audit-0.6.6.tar.gz
- Fixed bug setting loginuid - Added num_logs to configure number of logs when rotating - Added code for rotating logs
2005-03-09 23:50:13 +00:00
audit-0.6.7.tar.gz
- removed the pam_loginuid library - its going to pam
2005-03-14 21:08:53 +00:00
audit-0.6.8.tar.gz
- Added patch for filesystem watch - Added version information to audit start message - Change netlink code to use ack in order to get error notification
2005-03-17 22:58:02 +00:00
audit-0.6.9.tar.gz
- Code cleanups - Support the arch field for auditctl - Add version to auditctl - Documentation updates - Moved default location of the audit log to /var/log/audit
2005-04-01 19:10:36 +00:00
audit-0.6.10.tar.gz
- Check log file size on start up - Added priority_boost config item - Reworked arch support - Reworked how run level is changed - Make allowances for ECONNREFUSED
2005-04-18 20:25:36 +00:00
audit-0.6.11.tar.gz
- Fixed bug where elf type wasn't being set when given numerically - Added autrace program (similar to strace) - Fixed bug when logs = 2 and ROTATE is the action, only 1 log resulted
2005-04-20 21:33:07 +00:00
audit-0.6.12.tar.gz
- In auditctl -l, loop until all rules are printed - Update autrace not to run if rules are currently loaded - Added code to switch to single user mode when disk is full - Added the ausearch program
2005-04-23 21:15:11 +00:00
audit-0.7.tar.gz
- Make sure time calc is done using localtime - Raise rlimits for file size & cpu usage - Added new disk_error_action config item to auditd.conf - Rework memory management of event buffer - Handled all errors in event logging thread
2005-04-24 21:35:29 +00:00
audit-0.7.1.tar.gz
- Allow ausearch uid & gid to be non-numeric (root, wheel, etc) - Fix problems with changing run level - Added new code for logging shutdown reason credentials - Update DAEMON messages to use better timestamp
2005-04-29 20:43:43 +00:00
audit-0.7.2.tar.gz
- Add code to get watch list to auditctl - Get -f & -hn working in ausearch - Added search by terminal, exe, and syscall to ausearch program - Added -w parameter to match whole word in ausearch
2005-05-03 16:39:50 +00:00
audit-0.7.3.tar.gz
- Make sure ausearch ts & te obey DST. - Code cleanups to make file system watches work correctly
2005-05-08 21:26:43 +00:00
audit-0.7.4.tar.gz
- Fix code to "or" uid & gid checks for ausearch -ua & -ga - Change msg() to audit_msg() to avoid conflicts - Parse socket messages for hostname in ausearch
2005-05-17 21:44:01 +00:00
audit-0.8.1.tar.gz
- Update documentation - Handle user space audit events in more uniform way - Update all parsers for more robustness with new kernel changes - Create quiet mode for error messages - Make rotated logs readonly
2005-05-20 22:25:36 +00:00
audit-0.8.2.tar.gz
New version
2005-06-02 19:43:35 +00:00
audit-0.9.2.tar.gz
new version
2005-06-09 17:32:52 +00:00
audit-0.9.3.tar.gz
- Rule and watch insert no longer automatically dumps list - auditctl rules can now use auid instead of loginuid - Add sighup support for daemon reconfiguration - Move some functions into private.h
2005-06-11 16:57:00 +00:00
audit-0.9.4.tar.gz
- interpret socketcall & ipc based on a0 in ausearch - change call sequence to make user space messages faster - update return val for auditctl
2005-06-14 20:58:59 +00:00
audit-0.9.5.tar.gz
reworked some files
2005-06-16 14:26:02 +00:00
audit-0.9.6.tar.gz
- fixed bug in send_user_message which errored on pam logins - Change nanosleeps over to select loops - Change the 'e' option to auditctl -p to 'x'
2005-06-16 21:27:57 +00:00
audit-0.9.7.tar.gz
- Added support for FS_INODE and USYS_CONFIG records - More cleanup of user space message functions
2005-06-17 22:00:10 +00:00
audit-0.9.8.tar.gz
- Fix user messages for people with older kernels
2005-06-19 19:55:50 +00:00
audit-0.9.9.tar.gz
Reference in New Issue Copy Permalink