audit 1.0.7 released

Rob Myers rob.myers at gtri.gatech.edu
Thu Oct 20 14:42:34 UTC 2005


On Wed, 2005-10-19 at 16:32 -0400, Steve Grubb wrote:
> Hello,
> 
> I've just released a new version of the audit daemon. It can be downloaded 
> from http://people.redhat.com/sgrubb/audit  It will also be in rawhide 
> tomorrow. The Changelog is:
> 
> - Updated reports
> - Add new message types
> - Bug fixes
> 
> There are numerous fixups throughout the code. This release introduces a lot 
> of new user space message types for future application usage.
> 
> Please let me know if there are any problems with this release.

steve-

is the login summary support supposed to be functional yet?  i assumed
so since aureport doesn't error with "unimplemented option", but it
doesn't seem to be working for me.

i don't really like the newline that ctime adds on the event reports.
this patch seems to take care of it, but perhaps there is a better way.

--- audit-1.0.7/src/aureport-output.c.test	2005-10-19 13:26:21.000000000 -0400
+++ audit-1.0.7/src/aureport-output.c	2005-10-20 10:28:48.000000000 -0400
@@ -231,7 +231,7 @@ void print_per_event_item(llist *l)
 			break;
 		case RPT_EVENT:	// report_detail == D_DETAILED
 			//        event, type, who, date
-			printf("%u. %lu %s %s %s\n", line_item,
+			printf("%u. %lu %s %s %.24s\n", line_item,
 				l->e.serial,
 				audit_msg_type_to_name(l->head->type),
 				aulookup_uid(l->s.loginuid, name, sizeof(name)),


rob.





More information about the Linux-audit mailing list