audit 1.0.4 released

[Marcus Meissner]

On Fri, Sep 23, 2005 at 12:36:06PM -0400, Steve Grubb wrote:
> Hello,
> 
> I've just released a new version of the audit daemon. It can be downloaded 
> from http://people.redhat.com/sgrubb/audit  It will also be in rawhide 
> tomorrow. The Changelog is:
> 
> - Make rate & backlog 32 bit unsigned int in auditctl
> - In auditctl, if -F arch is given with -t option, don't require list
> - Update auditd man page
> - Add size check to audit_send
> - Update message for audit_open failure when kernel doesn't support audit
> 
> This is a bug fix release. The size check added to audit_send is an extra 
> precaution to make sure nothing bad happens.

You forgot to mention that a user program can actually crash auditd with it.

Or was it the pam module?

We had a report from the KDE people who triggered it.

Ciao, Marcus