[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-audit
Subject:    audit 1.1.4 released
From:       Steve Grubb <sgrubb () redhat ! com>
Date:       2006-02-08 23:18:51
Message-ID: 200602081818.51559.sgrubb () redhat ! com
[Download RAW message or body]

I've just released a new version of the audit daemon. It can be downloaded 
from http://people.redhat.com/sgrubb/audit  It will also be in rawhide  
tomorrow. The Changelog is:

- Fix bug in autrace where it didn't run on kernels without file watch support
- Add syslog message to auditd saying what program was started for dispatcher
- Remove audit_send_user from public api
- Fix bug in USER_LOGIN messages where ausearch does not translate
  msg='uid=500: into acct name (#178102).
- Change comm with dispatcher to socketpair from pipe
- Change auditd to use custom daemonize to avoid race in init scripts
- Update error message when deleting a rule that doesn't exist (#176239)
- Call shutdown_dispatcher when auditd stops
- Add new logging function audit_log_semanage_message

This release is mostly bug fixes and api cleanups.

This release also adds a patch to enable AppArmor support. To have the system 
recognize AppArmor events, you should add --with-apparmor to the ./configure 
command. It is off by default.

Please let me if there are any issues with this.

-Steve

[prev in list] [next in list] [prev in thread] [next in thread]