audit 1.1.4 released

Steve Grubb sgrubb at redhat.com
Wed Feb 8 23:18:51 UTC 2006


I've just released a new version of the audit daemon. It can be downloaded 
from http://people.redhat.com/sgrubb/audit  It will also be in rawhide  
tomorrow. The Changelog is:

- Fix bug in autrace where it didn't run on kernels without file watch support
- Add syslog message to auditd saying what program was started for dispatcher
- Remove audit_send_user from public api
- Fix bug in USER_LOGIN messages where ausearch does not translate
  msg='uid=500: into acct name (#178102).
- Change comm with dispatcher to socketpair from pipe
- Change auditd to use custom daemonize to avoid race in init scripts
- Update error message when deleting a rule that doesn't exist (#176239)
- Call shutdown_dispatcher when auditd stops
- Add new logging function audit_log_semanage_message

This release is mostly bug fixes and api cleanups.

This release also adds a patch to enable AppArmor support. To have the system 
recognize AppArmor events, you should add --with-apparmor to the ./configure 
command. It is off by default.

Please let me if there are any issues with this.

-Steve




More information about the Linux-audit mailing list