|
|
|
|
@ -1,38 +1,34 @@
|
|
|
|
|
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
|
|
|
|
|
|
|
|
|
|
Summary: User space tools for kernel auditing
|
|
|
|
|
Name: audit
|
|
|
|
|
Version: 4.0
|
|
|
|
|
Release: 10%{?dist}
|
|
|
|
|
License: GPL-2.0-or-later AND LGPL-2.0-or-later
|
|
|
|
|
Version: 3.1.2
|
|
|
|
|
Release: 1%{?dist}
|
|
|
|
|
License: GPLv2+
|
|
|
|
|
URL: http://people.redhat.com/sgrubb/audit/
|
|
|
|
|
Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
|
|
|
|
|
Source1: https://www.gnu.org/licenses/lgpl-2.1.txt
|
|
|
|
|
Patch1: audit-4.0-attributes.patch
|
|
|
|
|
BuildRequires: make gcc
|
|
|
|
|
BuildRequires: kernel-headers >= 5.0
|
|
|
|
|
|
|
|
|
|
BuildRequires: gcc swig make
|
|
|
|
|
BuildRequires: openldap-devel
|
|
|
|
|
BuildRequires: krb5-devel libcap-ng-devel
|
|
|
|
|
BuildRequires: kernel-headers >= 2.6.29
|
|
|
|
|
BuildRequires: systemd
|
|
|
|
|
#BuildRequires: autoconf automake libtool
|
|
|
|
|
|
|
|
|
|
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: %{name}-rules%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires(post): systemd coreutils
|
|
|
|
|
Requires(preun): systemd
|
|
|
|
|
Requires(postun): systemd coreutils
|
|
|
|
|
Recommends: initscripts-service
|
|
|
|
|
|
|
|
|
|
# Placing this here under the assumption that anything using the
|
|
|
|
|
# python libraries expects the system to have an audit daemon
|
|
|
|
|
Obsoletes: python2-audit < %{version}-%{release}
|
|
|
|
|
Requires(preun): systemd initscripts
|
|
|
|
|
Requires(postun): systemd coreutils initscripts
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
The audit package contains the user space utilities for
|
|
|
|
|
storing and searching the audit records generated by
|
|
|
|
|
the audit subsystem in the Linux 2.6 and later kernels.
|
|
|
|
|
It includes example rules that you can use.
|
|
|
|
|
|
|
|
|
|
%package libs
|
|
|
|
|
Summary: Dynamic library for libaudit
|
|
|
|
|
License: LGPL-2.0-or-later
|
|
|
|
|
BuildRequires: libcap-ng-devel
|
|
|
|
|
License: LGPLv2+
|
|
|
|
|
|
|
|
|
|
%description libs
|
|
|
|
|
The audit-libs package contains the dynamic libraries needed for
|
|
|
|
|
@ -40,9 +36,9 @@ applications to use the audit framework.
|
|
|
|
|
|
|
|
|
|
%package libs-devel
|
|
|
|
|
Summary: Header files for libaudit
|
|
|
|
|
License: LGPL-2.0-or-later
|
|
|
|
|
License: LGPLv2+
|
|
|
|
|
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: kernel-headers >= 5.0
|
|
|
|
|
Requires: kernel-headers >= 2.6.29
|
|
|
|
|
|
|
|
|
|
%description libs-devel
|
|
|
|
|
The audit-libs-devel package contains the header files needed for
|
|
|
|
|
@ -50,8 +46,8 @@ developing applications that need to use the audit framework libraries.
|
|
|
|
|
|
|
|
|
|
%package -n python3-audit
|
|
|
|
|
Summary: Python3 bindings for libaudit
|
|
|
|
|
License: LGPL-2.0-or-later
|
|
|
|
|
BuildRequires: python3-devel python-unversioned-command swig
|
|
|
|
|
License: LGPLv2+
|
|
|
|
|
BuildRequires: python3-devel
|
|
|
|
|
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
|
|
Provides: audit-libs-python3 = %{version}-%{release}
|
|
|
|
|
Provides: audit-libs-python3%{?_isa} = %{version}-%{release}
|
|
|
|
|
@ -63,8 +59,7 @@ and libauparse can be used by python3.
|
|
|
|
|
|
|
|
|
|
%package -n audispd-plugins
|
|
|
|
|
Summary: Plugins for the audit event dispatcher
|
|
|
|
|
License: GPL-2.0-or-later
|
|
|
|
|
BuildRequires: krb5-devel libcap-ng-devel
|
|
|
|
|
License: GPLv2+
|
|
|
|
|
Requires: %{name}%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
@ -75,10 +70,10 @@ like relay events to remote machines.
|
|
|
|
|
|
|
|
|
|
%package -n audispd-plugins-zos
|
|
|
|
|
Summary: z/OS plugin for the audit event dispatcher
|
|
|
|
|
License: GPL-2.0-or-later
|
|
|
|
|
BuildRequires: openldap-devel libcap-ng-devel
|
|
|
|
|
License: GPLv2+
|
|
|
|
|
Requires: %{name}%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: openldap
|
|
|
|
|
|
|
|
|
|
%description -n audispd-plugins-zos
|
|
|
|
|
The audispd-plugins-zos package provides a plugin that will forward all
|
|
|
|
|
@ -86,35 +81,24 @@ incoming audit events, as they happen, to a configured z/OS SMF (Service
|
|
|
|
|
Management Facility) database, through an IBM Tivoli Directory Server
|
|
|
|
|
(ITDS) set for Remote Audit service.
|
|
|
|
|
|
|
|
|
|
%package rules
|
|
|
|
|
Summary: audit rules and utilities
|
|
|
|
|
License: GPL-2.0-or-later
|
|
|
|
|
Recommends: %{name} = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
%description rules
|
|
|
|
|
The audit rules package contains the rules and utilities to load audit rules.
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%setup -q
|
|
|
|
|
%patch 1 -p1
|
|
|
|
|
cp %{SOURCE1} .
|
|
|
|
|
|
|
|
|
|
# Remove the ids code, its not ready
|
|
|
|
|
sed -i 's/ ids / /' audisp/plugins/Makefile.am
|
|
|
|
|
sed -i 's/ ids / /' audisp/plugins/Makefile.in
|
|
|
|
|
#autoreconf -fv --install
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
%configure --with-python=no \
|
|
|
|
|
--with-python3=yes \
|
|
|
|
|
--enable-gssapi-krb5=yes --with-arm --with-aarch64 \
|
|
|
|
|
--with-libcap-ng=yes --without-golang --enable-zos-remote \
|
|
|
|
|
--enable-systemd --enable-experimental --with-io_uring
|
|
|
|
|
--enable-systemd
|
|
|
|
|
|
|
|
|
|
make CFLAGS="%{optflags}" %{?_smp_mflags}
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/{sbin,etc/audit/plugins.d,etc/audit/rules.d}
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_mandir}/{man5,man8}
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_lib}
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_libdir}/audit
|
|
|
|
|
mkdir -p --mode=0700 $RPM_BUILD_ROOT/%{_var}/log/audit
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_var}/spool/audit
|
|
|
|
|
@ -125,71 +109,39 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libaudit.a
|
|
|
|
|
rm -f $RPM_BUILD_ROOT/%{_libdir}/libauparse.a
|
|
|
|
|
|
|
|
|
|
find $RPM_BUILD_ROOT -name '*.la' -delete
|
|
|
|
|
find $RPM_BUILD_ROOT/%{_libdir}/python%{python3_version}/site-packages -name '*.a' -delete || true
|
|
|
|
|
find $RPM_BUILD_ROOT/%{_libdir}/python?.?/site-packages -name '*.a' -delete || true
|
|
|
|
|
|
|
|
|
|
# On platforms with 32 & 64 bit libs, we need to coordinate the timestamp
|
|
|
|
|
touch -r ./audit.spec $RPM_BUILD_ROOT/etc/libaudit.conf
|
|
|
|
|
touch -r ./audit.spec $RPM_BUILD_ROOT/usr/share/man/man5/libaudit.conf.5.gz
|
|
|
|
|
|
|
|
|
|
%check
|
|
|
|
|
#make %{?_smp_mflags} check
|
|
|
|
|
make check
|
|
|
|
|
# Get rid of make files so that they don't get packaged.
|
|
|
|
|
rm -f rules/Makefile*
|
|
|
|
|
|
|
|
|
|
%post
|
|
|
|
|
%systemd_post auditd.service
|
|
|
|
|
# Do not perform service start/restart when running during an rpm-ostree compose
|
|
|
|
|
if [ -f /run/ostree-booted ] ; then
|
|
|
|
|
exit 0
|
|
|
|
|
fi
|
|
|
|
|
# If an upgrade, restart it if it's running
|
|
|
|
|
if [ $1 -eq 2 ] ; then
|
|
|
|
|
state=$(systemctl status auditd | awk '/Active:/ { print $2 }')
|
|
|
|
|
if [ $state = "active" ] ; then
|
|
|
|
|
auditctl --signal stop || true
|
|
|
|
|
systemctl start auditd
|
|
|
|
|
fi
|
|
|
|
|
# if an install, start it since preset says we should be running
|
|
|
|
|
elif [ $1 -eq 1 ] ; then
|
|
|
|
|
systemctl start auditd
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
%post rules
|
|
|
|
|
%systemd_post audit-rules.service
|
|
|
|
|
# Copy default rules into place on new installation
|
|
|
|
|
files=`ls /etc/audit/rules.d/ 2>/dev/null | wc -w`
|
|
|
|
|
if [ "$files" -eq 0 ] ; then
|
|
|
|
|
echo "No rules detected, adding default"
|
|
|
|
|
%if 0%{?rhel}
|
|
|
|
|
if [ -e %{_datadir}/%{name}-rules/10-base-config.rules ] ; then
|
|
|
|
|
install -m 0600 -o 0 -g 0 -p %{_datadir}/%{name}-rules/10-base-config.rules /etc/audit/rules.d/audit.rules
|
|
|
|
|
%else
|
|
|
|
|
# FESCO asked for audit to be off by default. #1117953
|
|
|
|
|
if [ -e %{_datadir}/%{name}-rules/10-no-audit.rules ] ; then
|
|
|
|
|
install -m 0600 -o 0 -g 0 -p %{_datadir}/%{name}-rules/10-no-audit.rules /etc/audit/rules.d/audit.rules
|
|
|
|
|
%endif
|
|
|
|
|
if [ -e %{_datadir}/%{name}/sample-rules/10-base-config.rules ] ; then
|
|
|
|
|
cp %{_datadir}/%{name}/sample-rules/10-base-config.rules /etc/audit/rules.d/audit.rules
|
|
|
|
|
else
|
|
|
|
|
install -m 0600 -o 0 -g 0 /dev/null /etc/audit/rules.d/audit.rules
|
|
|
|
|
fi
|
|
|
|
|
# Only load the new rules if not running during an rpm-ostree compose
|
|
|
|
|
if [ ! -f /run/ostree-booted ] ; then
|
|
|
|
|
# Make the new rules active
|
|
|
|
|
augenrules --load || true
|
|
|
|
|
touch /etc/audit/rules.d/audit.rules
|
|
|
|
|
fi
|
|
|
|
|
chmod 0600 /etc/audit/rules.d/audit.rules
|
|
|
|
|
fi
|
|
|
|
|
%systemd_post auditd.service
|
|
|
|
|
|
|
|
|
|
%preun
|
|
|
|
|
%systemd_preun auditd.service
|
|
|
|
|
# If uninstalling, stop it
|
|
|
|
|
if [ $1 -eq 0 ] ; then
|
|
|
|
|
auditctl --signal stop || true
|
|
|
|
|
if [ $1 -eq 0 ]; then
|
|
|
|
|
/sbin/service auditd stop > /dev/null 2>&1
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
%preun rules
|
|
|
|
|
%systemd_preun audit-rules.service
|
|
|
|
|
# If uninstalling, delete the rules loaded in the kernel
|
|
|
|
|
if [ $1 -eq 0 ] ; then
|
|
|
|
|
auditctl -D > /dev/null 2>&1 || true
|
|
|
|
|
%postun
|
|
|
|
|
if [ $1 -ge 1 ]; then
|
|
|
|
|
/sbin/service auditd condrestart > /dev/null 2>&1 || :
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
%files libs
|
|
|
|
|
@ -205,37 +157,46 @@ fi
|
|
|
|
|
%{_libdir}/libaudit.so
|
|
|
|
|
%{_libdir}/libauparse.so
|
|
|
|
|
%{_includedir}/libaudit.h
|
|
|
|
|
%{_includedir}/audit_logging.h
|
|
|
|
|
%{_includedir}/audit-records.h
|
|
|
|
|
%{_includedir}/auparse.h
|
|
|
|
|
%{_includedir}/auparse-defs.h
|
|
|
|
|
%{_datadir}/aclocal/audit.m4
|
|
|
|
|
%{_libdir}/pkgconfig/audit.pc
|
|
|
|
|
%{_libdir}/pkgconfig/auparse.pc
|
|
|
|
|
%{_mandir}/man3/*
|
|
|
|
|
%{_mandir}/man5/ausearch-expression.5.gz
|
|
|
|
|
|
|
|
|
|
%files -n python3-audit
|
|
|
|
|
%attr(755,root,root) %{python3_sitearch}/*
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%doc README.md ChangeLog init.d/auditd.cron
|
|
|
|
|
%doc README ChangeLog init.d/auditd.cron
|
|
|
|
|
%{!?_licensedir:%global license %%doc}
|
|
|
|
|
%license COPYING
|
|
|
|
|
%attr(755,root,root) %{_datadir}/%{name}
|
|
|
|
|
%attr(644,root,root) %{_datadir}/%{name}/sample-rules/*
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/auditctl.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/auditd.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/aureport.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/ausearch.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/autrace.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/aulast.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/aulastlog.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/auvirt.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/augenrules.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/ausyscall.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man7/audit.rules.7.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man5/auditd.conf.5.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man5/ausearch-expression.5.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man5/auditd-plugins.5.gz
|
|
|
|
|
%attr(755,root,root) %{_sbindir}/auditctl
|
|
|
|
|
%attr(755,root,root) %{_sbindir}/auditd
|
|
|
|
|
%attr(755,root,root) %{_sbindir}/ausearch
|
|
|
|
|
%attr(755,root,root) %{_sbindir}/aureport
|
|
|
|
|
%attr(750,root,root) %{_sbindir}/autrace
|
|
|
|
|
%attr(755,root,root) %{_sbindir}/augenrules
|
|
|
|
|
%attr(755,root,root) %{_bindir}/aulast
|
|
|
|
|
%attr(755,root,root) %{_bindir}/aulastlog
|
|
|
|
|
%attr(755,root,root) %{_bindir}/ausyscall
|
|
|
|
|
%attr(755,root,root) %{_bindir}/auvirt
|
|
|
|
|
%attr(644,root,root) %{_unitdir}/auditd.service
|
|
|
|
|
%attr(750,root,root) %dir %{_libexecdir}/initscripts/legacy-actions/auditd
|
|
|
|
|
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/condrestart
|
|
|
|
|
@ -245,43 +206,31 @@ fi
|
|
|
|
|
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/rotate
|
|
|
|
|
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/state
|
|
|
|
|
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/stop
|
|
|
|
|
%attr(750,root,root) %{_libexecdir}/audit-functions
|
|
|
|
|
%ghost %{_localstatedir}/run/auditd.state
|
|
|
|
|
%attr(-,root,-) %dir %{_var}/log/audit
|
|
|
|
|
%attr(750,root,root) %dir /etc/audit/plugins.d
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/auditd.conf
|
|
|
|
|
|
|
|
|
|
%files rules
|
|
|
|
|
%attr(755,root,root) %dir %{_datadir}/%{name}-rules
|
|
|
|
|
%attr(644,root,root) %{_datadir}/%{name}-rules/*
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/auditctl.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/augenrules.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man7/audit.rules.7.gz
|
|
|
|
|
%attr(755,root,root) %{_sbindir}/auditctl
|
|
|
|
|
%attr(755,root,root) %{_sbindir}/augenrules
|
|
|
|
|
%attr(644,root,root) %{_unitdir}/audit-rules.service
|
|
|
|
|
%attr(750,root,root) %dir /etc/audit
|
|
|
|
|
%attr(750,root,root) %dir /etc/audit/rules.d
|
|
|
|
|
%ghost %config(noreplace) %attr(640,root,root) /etc/audit/rules.d/audit.rules
|
|
|
|
|
%attr(750,root,root) %dir /etc/audit/plugins.d
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/auditd.conf
|
|
|
|
|
%ghost %config(noreplace) %attr(600,root,root) /etc/audit/rules.d/audit.rules
|
|
|
|
|
%ghost %config(noreplace) %attr(640,root,root) /etc/audit/audit.rules
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/audit-stop.rules
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/plugins.d/af_unix.conf
|
|
|
|
|
|
|
|
|
|
%files -n audispd-plugins
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/audisp-remote.conf
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/plugins.d/au-remote.conf
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/plugins.d/syslog.conf
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/audisp-statsd.conf
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/plugins.d/au-statsd.conf
|
|
|
|
|
%config(noreplace) %attr(640,root,root) /etc/audit/plugins.d/af_unix.conf
|
|
|
|
|
%attr(750,root,root) %{_sbindir}/audisp-remote
|
|
|
|
|
%attr(750,root,root) %{_sbindir}/audisp-syslog
|
|
|
|
|
%attr(750,root,root) %{_sbindir}/audisp-af_unix
|
|
|
|
|
%attr(750,root,root) %{_sbindir}/audisp-statsd
|
|
|
|
|
%attr(700,root,root) %dir %{_var}/spool/audit
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man5/audisp-remote.conf.5.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/audisp-remote.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/audisp-syslog.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/audisp-af_unix.8.gz
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/audisp-statsd.8.gz
|
|
|
|
|
|
|
|
|
|
%files -n audispd-plugins-zos
|
|
|
|
|
%attr(644,root,root) %{_mandir}/man8/audispd-zos-remote.8.gz
|
|
|
|
|
@ -291,241 +240,100 @@ fi
|
|
|
|
|
%attr(750,root,root) %{_sbindir}/audispd-zos-remote
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 4.0-10
|
|
|
|
|
- Bump release for October 2024 mass rebuild:
|
|
|
|
|
Resolves: RHEL-64018
|
|
|
|
|
* Sat Oct 21 2023 Sergio Correia <scorreia@redhat.com> - 3.1.2-1
|
|
|
|
|
- Rebase audit to latest upstream release
|
|
|
|
|
Resolves: RHEL-15001
|
|
|
|
|
|
|
|
|
|
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 4.0-9
|
|
|
|
|
- Bump release for June 2024 mass rebuild
|
|
|
|
|
* Thu Jun 22 2023 Radovan Sroka <rsroka@redhat.com> - 3.0.7-5
|
|
|
|
|
- Introduce new fanotify record fields
|
|
|
|
|
Resolves: rhbz#2216668
|
|
|
|
|
- invalid use of flexible array member
|
|
|
|
|
Resolves: rhbz#2116867
|
|
|
|
|
|
|
|
|
|
* Sun Feb 04 2024 Timothée Ravier <tim@siosm.fr> - 4.0-8
|
|
|
|
|
- Fix 'install' calls in post scriptlet
|
|
|
|
|
* Mon May 02 2022 Sergio Correia <scorreia@redhat.com> - 3.0.7-4
|
|
|
|
|
- Drop ProtectHome from auditd.service as it interferes with rules
|
|
|
|
|
Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories
|
|
|
|
|
|
|
|
|
|
* Thu Jan 25 2024 Steve Grubb <sgrubb@redhat.com> 4.0-7
|
|
|
|
|
- Don't do "live" operations during rpm-ostree composes
|
|
|
|
|
* Mon Mar 14 2022 Sergio Correia <scorreia@redhat.com> - 3.0.7-3
|
|
|
|
|
- Fix path normalization in auparse
|
|
|
|
|
Resolves: rhbz#2062612 - auparse missing information when used with --format-text
|
|
|
|
|
|
|
|
|
|
* Wed Jan 24 2024 Steve Grubb <sgrubb@redhat.com> 4.0-5
|
|
|
|
|
- Auditd is stopping during upgrade (bz 2259610)
|
|
|
|
|
|
|
|
|
|
* Mon Jan 22 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.0-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue Jan 16 2024 Steve Grubb <sgrubb@redhat.com> 4.0-1
|
|
|
|
|
- New upstream major release
|
|
|
|
|
|
|
|
|
|
* Sat Nov 04 2023 Steve Grubb <sgrubb@redhat.com> 3.1.2-5
|
|
|
|
|
- Bug fixes pulled from upstrean
|
|
|
|
|
|
|
|
|
|
* Wed Sep 13 2023 Dusty Mabe <dusty@dustymabe.com> 3.1.2-4
|
|
|
|
|
- Remove initscripts-service from Requires(postun)
|
|
|
|
|
|
|
|
|
|
* Fri Sep 01 2023 Steve Grubb <sgrubb@redhat.com> 3.1.2-3
|
|
|
|
|
- Change initscrips-service to a Recommends
|
|
|
|
|
|
|
|
|
|
* Sat Aug 26 2023 Steve Grubb <sgrubb@redhat.com> 3.1.2-2
|
|
|
|
|
- SPDX Migration
|
|
|
|
|
|
|
|
|
|
* Sun Aug 06 2023 Steve Grubb <sgrubb@redhat.com> 3.1.2-1
|
|
|
|
|
- New upstream release
|
|
|
|
|
|
|
|
|
|
* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.1.1-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue Jun 13 2023 Python Maint <python-maint@redhat.com> - 3.1.1-3
|
|
|
|
|
- Rebuilt for Python 3.12
|
|
|
|
|
|
|
|
|
|
* Tue May 09 2023 Davide Cavalca <dcavalca@fedoraproject.org> 3.1.1-2
|
|
|
|
|
- Install the base ruleset on RHEL
|
|
|
|
|
|
|
|
|
|
* Thu Apr 27 2023 Steve Grubb <sgrubb@redhat.com> 3.1.1-1
|
|
|
|
|
- New upstream release
|
|
|
|
|
|
|
|
|
|
* Thu Feb 09 2023 Steve Grubb <sgrubb@redhat.com> 3.1-2
|
|
|
|
|
- New upstream feature release
|
|
|
|
|
|
|
|
|
|
* Wed Jan 18 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.9-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Dec 22 2022 Steve Grubb <sgrubb@redhat.com> 3.0.9-2
|
|
|
|
|
- BuildRequires python-setuptools
|
|
|
|
|
- SPDX Migration
|
|
|
|
|
|
|
|
|
|
* Mon Aug 29 2022 Steve Grubb <sgrubb@redhat.com> 3.0.9-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
|
|
|
|
|
* Wed Jul 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.8-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Jun 13 2022 Python Maint <python-maint@redhat.com> - 3.0.8-2
|
|
|
|
|
- Rebuilt for Python 3.11
|
|
|
|
|
|
|
|
|
|
* Tue Mar 29 2022 Steve Grubb <sgrubb@redhat.com> 3.0.8-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
|
|
|
|
|
* Thu Feb 24 2022 Steve Grubb <sgrubb@redhat.com> 3.0.7-3
|
|
|
|
|
- Undo fix to libaudit.h before installing
|
|
|
|
|
|
|
|
|
|
* Mon Feb 14 2022 Steve Grubb <sgrubb@redhat.com> 3.0.7-2
|
|
|
|
|
* Tue Feb 22 2022 Sergio Correia <scorreia@redhat.com> - 3.0.7-2
|
|
|
|
|
- Adjust sample-rules dir permissions
|
|
|
|
|
- Add support for new access/dealloc function attributes
|
|
|
|
|
- Adjust compile flags for less warnings
|
|
|
|
|
Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users
|
|
|
|
|
|
|
|
|
|
* Sun Jan 23 2022 Steve Grubb <sgrubb@redhat.com> 3.0.7-1
|
|
|
|
|
- New upstream bugfix and feature release
|
|
|
|
|
* Tue Jan 25 2022 Sergio Correia <scorreia@redhat.com> - 3.0.7-1
|
|
|
|
|
- New upstream release - 3.0.7
|
|
|
|
|
Related: rhbz#1939406
|
|
|
|
|
|
|
|
|
|
* Wed Jan 19 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.6-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
* Thu Jan 13 2022 Sergio Correia <scorreia@redhat.com> - 3.0.5-1
|
|
|
|
|
- Rebase audit package on 8.6
|
|
|
|
|
Resolves: rhbz#1939406
|
|
|
|
|
Resolves: rhbz#1906065
|
|
|
|
|
Resolves: rhbz#1921447
|
|
|
|
|
Resolves: rhbz#1927884
|
|
|
|
|
Resolves: rhbz#1921658
|
|
|
|
|
|
|
|
|
|
* Wed Jan 05 2022 Steve Grubb <sgrubb@redhat.com> 3.0.6-2
|
|
|
|
|
- Require initscripts-service instead of initscripts
|
|
|
|
|
* Wed Jan 08 2020 Steve Grubb <sgrubb@redhat.com> 3.0-0.17.20191104git1c2f876
|
|
|
|
|
resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch)
|
|
|
|
|
|
|
|
|
|
* Fri Oct 01 2021 Steve Grubb <sgrubb@redhat.com> 3.0.6-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
* Thu Nov 28 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.16.20191104git1c2f876
|
|
|
|
|
resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin
|
|
|
|
|
|
|
|
|
|
* Tue Sep 14 2021 Steve Grubb <sgrubb@redhat.com> 3.0.5-3
|
|
|
|
|
- Move BuildRequires around to what actually needs it
|
|
|
|
|
* Mon Nov 04 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.15.20191104git1c2f876
|
|
|
|
|
resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates
|
|
|
|
|
resolves: rhbz#1767054 - move audit rules to shared data directory
|
|
|
|
|
resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files
|
|
|
|
|
resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit
|
|
|
|
|
resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin
|
|
|
|
|
|
|
|
|
|
* Tue Sep 14 2021 Steve Grubb <sgrubb@redhat.com> 3.0.5-2
|
|
|
|
|
- Drop IPX interpretation support
|
|
|
|
|
* Thu Jul 25 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.13.20190607gitf58ec40
|
|
|
|
|
resolves: rhbz#1695638 - Rebase audit package to pick up latest bugfixes
|
|
|
|
|
|
|
|
|
|
* Wed Aug 11 2021 Steve Grubb <sgrubb@redhat.com> 3.0.5-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
* Sat Jul 13 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.12.20190607gitf58ec40
|
|
|
|
|
resolves: rhbz#1695638 - Rebase audit package to pick up latest bugfixes
|
|
|
|
|
|
|
|
|
|
* Sun Aug 08 2021 Steve Grubb <sgrubb@redhat.com> 3.0.4-1
|
|
|
|
|
- New upstream feature release
|
|
|
|
|
* Mon Jun 10 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.11.20190607gitf58ec40
|
|
|
|
|
resolves: rhbz#1643567 - service auditd stop exits prematurely
|
|
|
|
|
resolves: rhbz#1693470 - libauparse memory leak
|
|
|
|
|
resolves: rhbz#1694071 - ausearch doesn't record device/inode details checkpointing a single file
|
|
|
|
|
resolves: rhbz#1695638 - Rebase audit package to pick up latest bugfixes
|
|
|
|
|
resolves: rhbz#1705894 - aureport aborts when using a specific input
|
|
|
|
|
resolves: rhbz#1706045 - RFE: Backport support for new audit record types
|
|
|
|
|
resolves: rhbz#1715852 - RFE: provide a way to filter on network address family
|
|
|
|
|
|
|
|
|
|
* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.3-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
|
* Wed Jan 09 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.10.20180831git0047a6c
|
|
|
|
|
resolves: rhbz#1655270] Message "audit: backlog limit exceeded" reported
|
|
|
|
|
- Fix annobin failure
|
|
|
|
|
|
|
|
|
|
* Wed Jul 14 2021 Steve Grubb <sgrubb@redhat.com> 3.0.3-1
|
|
|
|
|
- New upstream feature release
|
|
|
|
|
* Fri Dec 07 2018 Steve Grubb <sgrubb@redhat.com> 3.0-0.8.20180831git0047a6c
|
|
|
|
|
resolves: rhbz#1639745 - build requires go-toolset-7 which is not available
|
|
|
|
|
resolves: rhbz#1643567 - service auditd stop exits prematurely
|
|
|
|
|
resolves: rhbz#1616428 - Update git snapshot of audit package
|
|
|
|
|
- Remove static libs subpackage
|
|
|
|
|
|
|
|
|
|
* Thu Jun 24 2021 Sergio Correia <scorreia@redhat.com> - 3.0.2-2
|
|
|
|
|
- Do not use custom sbindir and libdir in configure
|
|
|
|
|
|
|
|
|
|
* Thu Jun 10 2021 Steve Grubb <sgrubb@redhat.com> 3.0.2-1
|
|
|
|
|
- New upstream feature and bugfix release
|
|
|
|
|
|
|
|
|
|
* Fri Jun 04 2021 Python Maint <python-maint@redhat.com> - 3.0.1-3
|
|
|
|
|
- Rebuilt for Python 3.10
|
|
|
|
|
|
|
|
|
|
* Thu Feb 18 2021 Steve Grubb <sgrubb@redhat.com> 3.0.1-2
|
|
|
|
|
- Add patch fixing segafult in the audisp-statsd plugin
|
|
|
|
|
|
|
|
|
|
* Fri Feb 12 2021 Steve Grubb <sgrubb@redhat.com> 3.0.1-1
|
|
|
|
|
- New upstream feature and bugfix release
|
|
|
|
|
- Enable building the audisp-statsd plugin
|
|
|
|
|
|
|
|
|
|
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 3.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Dec 16 2020 Steve Grubb <sgrubb@redhat.com> 3.0-1
|
|
|
|
|
- New upstream feature and bugfix release
|
|
|
|
|
|
|
|
|
|
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.0-0.21.20191104git1c2f876
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 3.0-0.20.20191104git1c2f876
|
|
|
|
|
- Rebuilt for Python 3.9
|
|
|
|
|
|
|
|
|
|
* Thu Mar 12 2020 Steve Grubb <sgrubb@redhat.com> 3.0-0.19.20191104git1c2f876
|
|
|
|
|
- Add Obsolete python2-audit (#1783061)
|
|
|
|
|
|
|
|
|
|
* Wed Jan 29 2020 Steve Grubb <sgrubb@redhat.com> 3.0-0.18.20191104git1c2f876
|
|
|
|
|
- Fix multiple definition of `event_node_list' (#1794446)
|
|
|
|
|
|
|
|
|
|
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.0-0.17.20191104git1c2f876
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Nov 22 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.16.20191104git1c2f876
|
|
|
|
|
- Drop python2 subpackage (#1775076)
|
|
|
|
|
|
|
|
|
|
* Mon Nov 04 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.14.20191104git1c2f876
|
|
|
|
|
- New upstream git snapshot prerelease
|
|
|
|
|
|
|
|
|
|
* Thu Oct 03 2019 Miro Hrončok <mhroncok@redhat.com> - 3.0-0.14.20190507gitf58ec40
|
|
|
|
|
- Rebuilt for Python 3.8.0rc1 (#1748018)
|
|
|
|
|
|
|
|
|
|
* Mon Aug 19 2019 Miro Hrončok <mhroncok@redhat.com> - 3.0-0.13.20190507gitf58ec40
|
|
|
|
|
- Rebuilt for Python 3.8
|
|
|
|
|
|
|
|
|
|
* Wed Jul 31 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.12.20190507gitf58ec40
|
|
|
|
|
- Fix 1734953 - audit: FTBFS in Fedora rawhide/f31
|
|
|
|
|
|
|
|
|
|
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.0-0.11.20190507gitf58ec40
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Jul 05 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.10.20190507gitf58ec40
|
|
|
|
|
- Add initscripts package to the requires (bz #1727058)
|
|
|
|
|
|
|
|
|
|
* Mon Jun 10 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.9.20190507gitf58ec40
|
|
|
|
|
- New upstream git snapshot prerelease which fixes several problems
|
|
|
|
|
- Fixed 1698130 - removing audit.rpm doesn't stop auditd
|
|
|
|
|
|
|
|
|
|
* Tue Mar 26 2019 Steve Grubb <sgrubb@redhat.com> 3.0-0.7.20190326git03e7489
|
|
|
|
|
- New upstream git snapshot prerelease which fixes a memory leak
|
|
|
|
|
|
|
|
|
|
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.0-0.6.20181218gitbdb72c0
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue Dec 18 2018 Steve Grubb <sgrubb@redhat.com> 3.0-0.5.20181218gitbdb72c0
|
|
|
|
|
- New upstream git snapshot prerelease
|
|
|
|
|
- Remove historical ldconfig scriptlet (#1644056)
|
|
|
|
|
|
|
|
|
|
* Fri Aug 31 2018 Steve Grubb <sgrubb@redhat.com> 3.0-0.4.20180831git0047a6c
|
|
|
|
|
- New upstream feature prerelease
|
|
|
|
|
* Fri Aug 31 2018 Steve Grubb <sgrubb@redhat.com> 3.0-0.5.20180831git0047a6c
|
|
|
|
|
resolves: rhbz#1616428 - Update git snapshot of audit package
|
|
|
|
|
|
|
|
|
|
* Wed Aug 08 2018 Steve Grubb <sgrubb@redhat.com> 3.0-0.2.20180808git77fbcf3
|
|
|
|
|
- New upstream feature prerelease
|
|
|
|
|
resolves: rhbz#1567357 New upstream feature prerelease
|
|
|
|
|
|
|
|
|
|
* Tue Jul 17 2018 Steve Grubb <sgrubb@redhat.com> 3.0-0.1.20180717gitacd53d1
|
|
|
|
|
- New upstream feature prerelease
|
|
|
|
|
|
|
|
|
|
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.8.4-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Jul 4 2018 Peter Robinson <pbrobinson@fedoraproject.org> 2.8.4-3
|
|
|
|
|
- Remove unused sys V initscripts legacy bits
|
|
|
|
|
|
|
|
|
|
* Mon Jul 02 2018 Miro Hrončok <mhroncok@redhat.com> - 2.8.4-2
|
|
|
|
|
- Rebuilt for Python 3.7
|
|
|
|
|
* Tue Jun 26 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-2
|
|
|
|
|
- Fix segfault on shutdown
|
|
|
|
|
|
|
|
|
|
* Tue Jun 19 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
|
|
|
|
|
* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> - 2.8.3-4
|
|
|
|
|
- Rebuilt for Python 3.7
|
|
|
|
|
|
|
|
|
|
* Tue Apr 10 2018 Pete Walter <pwalter@fedoraproject.org> - 2.8.3-3
|
|
|
|
|
- Rename Python 2 and 3 subpackages to python2-audit and python3-audit as per guidelines
|
|
|
|
|
|
|
|
|
|
* Mon Mar 26 2018 Steve Grubb <sgrubb@redhat.com> 2.8.3-2
|
|
|
|
|
- Fix Obsoletion of audit-libs-python not handled properly (#1559674)
|
|
|
|
|
|
|
|
|
|
* Sat Mar 10 2018 Steve Grubb <sgrubb@redhat.com> 2.8.3-1
|
|
|
|
|
* Wed May 30 2018 Steve Grubb <sgrubb@redhat.com> 2.8.3-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
- Remove Python2 support
|
|
|
|
|
|
|
|
|
|
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.8.2-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Feb 05 2018 Steve Grubb <sgrubb@redhat.com> 2.8.2-3
|
|
|
|
|
- Add a Provides audit-libs-python (#1537864)
|
|
|
|
|
- Remove tcp_wrappers support?
|
|
|
|
|
|
|
|
|
|
* Thu Dec 14 2017 Steve Grubb <sgrubb@redhat.com> 2.8.2-2
|
|
|
|
|
- Rename things from python to python2
|
|
|
|
|
|
|
|
|
|
* Thu Dec 14 2017 Steve Grubb <sgrubb@redhat.com> 2.8.2-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
|
|
|
|
|
* Thu Oct 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-1
|
|
|
|
|
- New upstream bugfix release
|
|
|
|
|
|
|
|
|
|
* Tue Oct 10 2017 Steve Grubb <sgrubb@redhat.com> 2.8-1
|
|
|
|
|
- New upstream feature release
|
|
|
|
|
* Fri Apr 13 2018 Tom Stellard <tstellar@redhat.com> - 2.7.8-2
|
|
|
|
|
- Use go-toolset-7 instead of golang
|
|
|
|
|
- Package now must be built with: rhpkg --release rhel-8.0-go-toolset
|
|
|
|
|
|
|
|
|
|
* Mon Sep 18 2017 Steve Grubb <sgrubb@redhat.com> 2.7.8-1
|
|
|
|
|
- New upstream bugfix release
|