rpms/audit
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Handle user space avcs in prelude plugin

Browse Source 
- Fix watched account login detection for some failed login attempts
- Couple fixups in audit logging functions (Miloslav Trmac)
- Add support in auditctl for virtual keys
- auparse_find_field_next was not iterating correctly, fixed it
- Add idmef alerts for access or execution of watched file
- Fix buffer overflow in audit_log_user_command
- Add basic remote logging plugin - only sends & no flow control
- Update ausearch with interpret fixes from auparse
This commit is contained in:
Steve Grubb 2008-03-30 19:17:17 +00:00
parent 44f663a360
commit 8efb1f0ace
3 changed files with 19 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.cvsignore
View File

@ -86,3 +86,4 @@ audit-1.6.6.tar.gz
audit-1.6.7.tar.gz audit-1.6.7.tar.gz
audit-1.6.8.tar.gz audit-1.6.8.tar.gz
audit-1.6.9.tar.gz audit-1.6.9.tar.gz
audit-1.7.tar.gz

18
audit.spec
View File

@ -6,7 +6,7 @@
Summary: User space tools for 2.6 kernel auditing Summary: User space tools for 2.6 kernel auditing
Name: audit Name: audit
Version: 1.6.9 Version: 1.7
Release: 1%{?dist} Release: 1%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Daemons Group: System Environment/Daemons
@ -293,6 +293,11 @@ fi
%attr(750,root,root) /sbin/audisp-prelude %attr(750,root,root) /sbin/audisp-prelude
%attr(644,root,root) %{_mandir}/man5/audisp-prelude.conf.5.gz %attr(644,root,root) %{_mandir}/man5/audisp-prelude.conf.5.gz
%attr(644,root,root) %{_mandir}/man8/audisp-prelude.8.gz %attr(644,root,root) %{_mandir}/man8/audisp-prelude.8.gz
%config(noreplace) %attr(640,root,root) /etc/audisp/audisp-remote.conf
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/au-remote.conf
%attr(750,root,root) /sbin/audisp-remote
%attr(644,root,root) %{_mandir}/man5/audisp-remote.conf.5.gz
%attr(644,root,root) %{_mandir}/man8/audisp-remote.8.gz
%files -n system-config-audit -f system-config-audit.lang %files -n system-config-audit -f system-config-audit.lang
%defattr(-,root,root,-) %defattr(-,root,root,-)
@ -310,6 +315,17 @@ fi
%config(noreplace) %{_sysconfdir}/security/console.apps/system-config-audit-server %config(noreplace) %{_sysconfdir}/security/console.apps/system-config-audit-server
%changelog %changelog
* Sun Mar 30 2008 Steve Grubb <sgrubb@redhat.com> 1.7-1
- Handle user space avcs in prelude plugin
- Fix watched account login detection for some failed login attempts
- Couple fixups in audit logging functions (Miloslav Trmac)
- Add support in auditctl for virtual keys
- auparse_find_field_next was not iterating correctly, fixed it
- Add idmef alerts for access or execution of watched file
- Fix buffer overflow in audit_log_user_command
- Add basic remote logging plugin - only sends & no flow control
- Update ausearch with interpret fixes from auparse
* Sun Mar 09 2008 Steve Grubb <sgrubb@redhat.com> 1.6.9-1 * Sun Mar 09 2008 Steve Grubb <sgrubb@redhat.com> 1.6.9-1
- Apply hidden attribute cleanup patch (Miloslav Trmac) - Apply hidden attribute cleanup patch (Miloslav Trmac)
- Apply auparse expression interface patch (Miloslav Trmac) - Apply auparse expression interface patch (Miloslav Trmac)

2
sources
View File

@ -1 +1 @@
7e055793c057883f39b10d8ba783de98 audit-1.6.9.tar.gz dba65ff98de50c89d3cc1e1ddc49aa1a audit-1.7.tar.gz