rpms/audit
7
0
Fork 0
Code Issues Pull Requests Releases Activity

New upstream maintenance release, 3.1.5

Browse Source 
Prevent scriplets from failing
When upgrading, restart the daemon if it's running
If uninstalling, stop the daemon
auditctl: use pidfd_send_signal for signaling auditd
Resolves: RHEL-45865
Minor doc update
Resolves: RHEL-5186
augenrules: do not exit with failure if in immutable mode
Resolves: RHEL-40110
auditd.service: Disable ProtectControlGroups
Resolves: RHEL-5197
auditctl: correct output when displaying rules with exe/path/dir
Resolves: RHEL-40243
This commit is contained in:
alakatos 2024-07-17 09:33:21 +02:00
parent 3d2d297e67
commit a4ed80addf
3 changed files with 44 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -170,3 +170,5 @@ audit-2.0.4.tar.gz
/audit-3.0.5.tar.gz
/audit-3.0.7.tar.gz
/audit-3.1.2.tar.gz
/audit-3.1.4.tar.gz
/audit-3.1.5.tar.gz

53
audit.spec
View File

@ -1,8 +1,8 @@
Summary: User space tools for kernel auditing
Name: audit
Version: 3.1.2
Release: 2%{?dist}
Version: 3.1.5
Release: 1%{?dist}
License: GPLv2+
URL: http://people.redhat.com/sgrubb/audit/
Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
@ -19,8 +19,9 @@ BuildRequires: autoconf automake libtool
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
Requires(post): systemd coreutils
Requires(preun): systemd initscripts-service
Requires(postun): systemd coreutils initscripts-service
Requires(preun): systemd
Requires(postun): systemd coreutils
Recommends: initscripts-service
# Placing this here under the assumption that anything using the
# python libraries expects the system to have an audit daemon
@ -141,6 +142,8 @@ make check
rm -f rules/Makefile*
%post
%systemd_post auditd.service
# Copy default rules into place on new installation
files=`ls /etc/audit/rules.d/ 2>/dev/null | wc -w`
if [ "$files" -eq 0 ] ; then
@ -151,16 +154,27 @@ if [ "$files" -eq 0 ] ; then
fi
chmod 0600 /etc/audit/rules.d/audit.rules
fi
%systemd_post auditd.service
%preun
if [ $1 -eq 0 ]; then
/sbin/service auditd stop > /dev/null 2>&1
# If upgrading, restart the daemon if it's running
if [ $1 -eq 2 ]; then
state=$(systemctl status auditd | awk '/Active:/ { print $2 }')
if [ $state = "active" ] ; then
auditctl --signal stop || true
systemctl start auditd
fi
# if installing, start it since preset says we should be running
elif [ $1 -eq 1 ]; then
systemctl start auditd
fi
%postun
if [ $1 -ge 1 ]; then
/sbin/service auditd condrestart > /dev/null 2>&1 || :
%preun
%systemd_preun auditd.service
# if uninstalling stop the daemon
if [ $1 -eq 0 ]; then
auditctl --signal stop || true
# also delete loaded rules if uninstalling
auditctl -D || true
fi
%files libs
@ -225,7 +239,6 @@ fi
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/rotate
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/state
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/stop
%attr(750,root,root) %{_libexecdir}/audit-functions
%ghost %{_localstatedir}/run/auditd.state
%attr(-,root,-) %dir %{_var}/log/audit
%attr(750,root,root) %dir /etc/audit
@ -262,6 +275,22 @@ fi
%attr(750,root,root) %{_sbindir}/audispd-zos-remote
%changelog
* Tue Jul 09 2024 Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
Resolves: RHEL-45865
- Minor doc update
Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
Resolves: RHEL-40243
* Wed Nov 08 2023 Sergio Correia <scorreia@redhat.com> - 3.1.2-2
- Remove %systemd_preun from %preun scriptlet, as it was causing troubles when removing audit
Related: RHEL-14896

2
sources
View File

@ -1 +1 @@
SHA512 (audit-3.1.2.tar.gz) = a97003a294ed3671df01e2952688e7d5eef59a35f6891feb53e67c4c7eab9ae8c2d18de41a5b5b20e0ad7156fac93aec05f32f6bc5eea706b42b6f27f676446a
SHA512 (audit-3.1.5.tar.gz) = 2bb6dd30108d2c4cc498011f50cbeea0112b9877a78158907cf8005b6dc253c8c2c98bfea7ed3fe6f6a5baf274cd8a9ace4108a58b0c9529b03191bd84b7e73d