rpms/audit
7
0
Fork 0
Code Issues Pull Requests Releases Activity
297 Commits 7 Branches 32 Tags 564 KiB
bdb65709f4
Commit Graph

297 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Steve Grubb
b1c2e57a32 - New upstream release 2009-10-17 19:29:28 +00:00
Steve Grubb
05d70ed917 - New upstream release 2009-10-16 17:14:38 +00:00
Steve Grubb
028898f181 - New upstream release 2009-10-16 17:09:20 +00:00
Steve Grubb
52a4831e16 - New upstream release 2009-09-28 19:55:04 +00:00
Steve Grubb
964f2cbd9f - New upstream release 2009-08-21 14:57:14 +00:00
Steve Grubb
1c13929628 - New upstream release 2009-08-19 19:23:25 +00:00
Steve Grubb
ad21c8a37c - New upstream release 2009-08-19 19:16:54 +00:00
Steve Grubb
7b312bdccc - New upstream release 2009-08-19 19:06:41 +00:00
Steve Grubb
ff137c5b6c add temporary compat package 2009-08-19 18:51:56 +00:00
Steve Grubb
b9f018d58e - New upstream release 2009-08-18 18:13:00 +00:00
Steve Grubb
0d9d3c9ee2 fix the release numbers 2009-07-29 23:52:26 +00:00
Jesse Keating
827754ea8c - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-24 17:33:31 +00:00
Steve Grubb
e76832c90f - New upstream release 
- Fix problem with negative uids in audit rules on 32 bit systems
- Update tty keystroke interpretations (Miloslav Trmač)
 2009-04-21 19:02:44 +00:00
Steve Grubb
943e1d4bec - Drop some debug code in libev 2009-04-03 19:42:16 +00:00
Steve Grubb
cdf3b383d3 - Apply patch from dwalsh moving audit.py file to arch specific python dir 2009-03-17 18:30:16 +00:00
Steve Grubb
e29b4b64db Adjusted the patch level 2009-02-26 23:59:43 +00:00
Steve Grubb
b83df1141c Remove changelog from patch 2009-02-26 23:50:35 +00:00
Steve Grubb
6578fabf5e - Handle audit=0 boot option for 2.6.29 kernel (#487541) 2009-02-26 21:44:35 +00:00
Steve Grubb
60481bc88a - New upstream release 2009-02-24 22:04:42 +00:00
Steve Grubb
311514cc09 - New upstream release 2009-02-24 21:36:08 +00:00
Jesse Keating
58d4476524 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-24 03:11:20 +00:00
Steve Grubb
46e327bbf6 Fix syslog conf packaging 2009-01-24 15:03:04 +00:00
Steve Grubb
24bca3bf6d - Add crypto event definitions 2009-01-13 22:12:58 +00:00
Steve Grubb
506ae42a34 - Add crypto event definitions 2009-01-13 22:01:45 +00:00
Steve Grubb
730f430ddb Add crypto event definitions 2009-01-13 21:51:42 +00:00
Steve Grubb
ea367a7cf2 - New upstream release 2009-01-10 21:10:21 +00:00
Steve Grubb
c28fd1e4b9 - Fix bz 476798 - "auditd -n" does not work 2008-12-17 15:06:51 +00:00
Steve Grubb
0784c5c460 - New upstream release 2008-12-13 13:52:26 +00:00
Ignacio Vazquez-Abrams
4f9c1b187f Rebuild for Python 2.6 2008-11-29 16:36:38 +00:00
Steve Grubb
26bdc0669a - New upstream release 2008-11-05 20:54:11 +00:00
Steve Grubb
333ae898aa - Update specfile requires to include dist 2008-10-28 14:35:27 +00:00
Steve Grubb
fb25688f94 - Fix ausearch/report recent and now time keyword lookups (#468668) 2008-10-27 17:41:01 +00:00
Steve Grubb
fd868dc9dc Update requires 2008-10-25 14:25:47 +00:00
Steve Grubb
5431994a68 - If kernel is in immutable mode, auditd should not send enable command 2008-10-25 13:08:31 +00:00
Steve Grubb
43fc1794e1 - Fix ausearch interpretting i386 syscalls on x86_64 machine 2008-10-24 19:29:23 +00:00
Steve Grubb
0961553dfe - Fix segfault when using file input to aureport 
- Quieten down messages about missing gssapi support
 2008-10-23 20:07:02 +00:00
Steve Grubb
c183a174e4 - Disable GSSAPI support until its reworked as plugin 
- Interpret TTY audit data in auparse (Miloslav Trmač)
- Extract terminal from USER_AVC events for ausearch/report (Peng Haitao)
- Add USER_AVCs to aureport's avc reporting (Peng Haitao)
- Short circuit hostname resolution in libaudit if host is empty
- If log_group and user are not root, don't check dispatcher perms
- Fix a bug when executing "ausearch -te today PM"
- Add --exit search option to ausearch
- Fix parsing config file when kerberos is disabled
 2008-10-22 18:21:46 +00:00
Steve Grubb
51f8f13bf9 update patch 2008-10-16 20:04:19 +00:00
Steve Grubb
0983360c7f - Remove selinux policy for zos-remote 2008-10-16 19:54:50 +00:00
Steve Grubb
0a9e32d94a Disable testing of ppc 2008-09-17 20:49:00 +00:00
Steve Grubb
fffe22aac3 - Bug fixes for GSSAPI code in remote logging (DJ Delorie) 
- Add watched syscall support to audisp-prelude
- Enable tcp_wrappers support in auditd
 2008-09-17 20:12:32 +00:00
Steve Grubb
baa6b19d1f Don't do make check just yet 2008-09-11 23:11:08 +00:00
Steve Grubb
0f4ff3fca4 - Add subject to audit daemon events (Chu Li) 
- Add tcp_wrappers support for auditd
- Updated syscall tables for 2.6.27 kernel
- Audit connect/disconnect of remote clients
- Add GSS/Kerberos encryption to the remote protocol (DJ Delorie)
 2008-09-11 22:51:16 +00:00
Steve Grubb
0e1966b810 fix zos selinux policy file 2008-08-31 16:54:48 +00:00
Steve Grubb
8955505fb2 couple spec file updates 2008-08-25 21:24:14 +00:00
Steve Grubb
dce82d1b97 - Update system-config-audit to 0.4.8 
- Whole lot of bug fixes - see ChangeLog for details
- Reimplement auditd main loop using libev
- Add TCP listener to auditd to receive remote events
- Fix scheduler problem (#457061)
 2008-08-25 20:05:09 +00:00
Steve Grubb
8b5ee23989 - Move ausearch-expression to main package (#453437) 2008-07-04 00:55:30 +00:00
Steve Grubb
a94ab1c00d - Fix interpreting of keys in syscall records 
- Don't error on name=(null) PATH records in ausearch/report
- Add key report to aureport
- Update system-config-audit to 0.4.7 (Miloslav Trmac)
- Add support for the filetype field option in auditctl new to 2.6.26
    kernels
 2008-05-19 18:02:47 +00:00
Steve Grubb
b4b03fa176 - Fix output of keys in ausearch interpretted mode 
- Fix ausearch/report --start now to not be reset to midnight
- audispd now has a priority boost config option
- Look for laddr in avcs reported via prelude
- Detect page 0 mmaps and alert via prelude
 2008-05-09 18:37:00 +00:00
Steve Grubb
f2add7b4d6 - Fix overflow in audit_log_user_command, better (#438840) 
- ausearch was not matching path in avc records
- audisp-prelude attempt to reposition index after examining each type
- correct building of mls policy
- Fix auparse iterating in auparse_find_field and next_field
- Don't alert on USER_AVC's - they are not quite right
 2008-04-18 20:18:30 +00:00