audit 2.3.7 released

Steve Grubb sgrubb at redhat.com
Wed Jun 4 21:47:50 UTC 2014


Hello,

I've just released a new version of the audit daemon. It can be downloaded 
from http://people.redhat.com/sgrubb/audit. It will also be in rawhide  
soon. The ChangeLog is:

- Limit number of options in a rule in libaudit
- Auditctl cannot load rule with lots of syscalls (#1089713)
- In ausearch, fix checkpointing when inode is reused by new log (Burn Alting)
- Add PROCTITLE and FEATURE_CHANGE event types

Normally I'd wait a little longer to do a release but a couple things made me 
want to keep this one short. The PROCTITLE event is showing up on people's 
systems now and we need to support it. The other big change is that people 
writing rules with lots of syscalls were getting an error such that the rule 
would not load. It took two fixes to get it squared away.

Please let me know if you run across any problems with this release

Thanks,
-Steve




More information about the Linux-audit mailing list