Commit Graph

176 Commits

Author SHA1 Message Date
Steve Grubb
d236fb124a - Check log file size on start up
- Added priority_boost config item
- Reworked arch support
- Reworked how run level is changed
- Make allowances for ECONNREFUSED
2005-04-18 20:25:36 +00:00
Steve Grubb
d1e22d79c2 - Code cleanups
- Support the arch field for auditctl
- Add version to auditctl
- Documentation updates
- Moved default location of the audit log to /var/log/audit
2005-04-01 19:10:36 +00:00
Steve Grubb
ffb4908089 Bump release number 2005-03-24 20:31:24 +00:00
Steve Grubb
5187974472 - Added patch for filesystem watch
- Added version information to audit start message
- Change netlink code to use ack in order to get error notification
2005-03-17 22:58:02 +00:00
Steve Grubb
57646a87b5 - removed the pam_loginuid library - its going to pam 2005-03-14 21:08:53 +00:00
Steve Grubb
ac64680d21 - Fixed bug setting loginuid
- Added num_logs to configure number of logs when rotating
- Added code for rotating logs
2005-03-09 23:50:13 +00:00
Steve Grubb
0ff90d0747 - Fix audit_set_pid to try to read a reply, but its non-fatal if no reply.
- Remove the read status during init
- Change to using pthreads sync mechanism for stopping system
- Worker thread should ignore all signals
- Change main loop to use select for inbound event handling
- Gave pam_loginuid a "failok" option for testing
2005-03-08 20:46:48 +00:00
Steve Grubb
21c8b70346 - Lots of code cleanups
- Added write_pid function to auditd
- Added audit_log to libaudit
- Don't check file length in foreground mode of auditd
- Added *if_enabled functions to send messages only if audit system is
    enabled
- If syscall name is unknown when printing rules, use the syscall number
- Rework the build system to produce singly threaded public libraries
- Create a multithreaded version of libaudit for the audit daemon's use
2005-03-03 22:48:44 +00:00
Steve Grubb
78412f0335 - Rename pam_audit to pam_loginuid to reflect what it does
- Fix bug in detecting space left on partition
- Fix bug in handling of suspended logging
2005-02-23 23:24:19 +00:00
David Woodhouse
668644befb Fix headers 2005-02-23 13:57:24 +00:00
Steve Grubb
19531ff754 - Another lib64 correction 2005-02-20 20:43:49 +00:00
Steve Grubb
56b158ae01 - Change pam install from /lib/security to /%{_lib}/security
- Change pam_audit to write loginuid to /proc/pid/loginuid
- Add pam_session_close handle
- Update to newest kernel headers
2005-02-20 20:33:50 +00:00
Steve Grubb
8fd9fa294a - New version
- Add R option to auditctl to allow reading rules from file.
- Do not allow task creation list to have syscall auditing
- Add D option to allow deleting all rules with 1 command
- Added pam_audit man page & sample.rules
- Mod initscript to call auditctl to load rules at start-up
- Write message to log file for daemon start up
- Write message that daemon is shutting down
- Modify auditd shutdown to wait until logger thread is finished
- Add sample rule file to docs
2005-02-11 19:22:21 +00:00
Steve Grubb
e88a3e096f Reworked auditctl and its man pages. Added admin_space_left option for last
chance before running out of disk space.
2005-01-08 23:20:29 +00:00
Steve Grubb
75f48032cc - Add disk full and low disk space detection and handling routines
- Add max log file size detection and handling routines
- Add raw log format routine
- Many code cleanups, reorgs, and bug fixing.
2005-01-05 19:13:59 +00:00
Steve Grubb
aad93127c6 Changed project over to generate .so libs and added man page for
auditd.conf
2004-12-13 19:27:06 +00:00
gafton
fb052c51f4 Moved the tar.gz files into the lookaside cache. Please refrain from
checking tar.gz files into CVS. That is what the lookaside cache is
    for.
2004-12-12 21:35:14 +00:00
Steve Grubb
01be97fdb1 Updated to new version. Now has config file and outputs a log file. 2004-12-10 22:13:10 +00:00
Steve Grubb
72b1292f70 Updated to new release. 2004-12-03 20:58:39 +00:00
Steve Grubb
c5201dccfb New version 2004-11-19 22:18:07 +00:00
Steve Grubb
bcb2c57a1d Fixed an x86_64 PIC code problem. 2004-11-15 23:39:57 +00:00
Steve Grubb
2308b460ff Corrected a build bug for IA64. 2004-11-15 23:23:40 +00:00
Steve Grubb
5a5010c7f5 New version. Reworked makefile, specs, added man pages, daemonized it. 2004-11-15 23:03:35 +00:00
Steve Grubb
654a5c922e New version of audit. Reworked makefile & spec file. 2004-11-15 22:58:29 +00:00
cvsdist
2c6ba58c1a auto-import changelog data from audit-0.5-1.src.rpm
Wed Sep 01 2004 root <root@redhat.com> -
- Initial build.
2004-09-09 03:16:50 +00:00
cvsdist
5adf4af9f5 Setup of module audit 2004-09-09 03:16:45 +00:00