audit 2.4.5 released

Steve Grubb sgrubb at redhat.com
Fri Dec 18 21:20:08 UTC 2015


On Friday, December 18, 2015 04:08:07 PM Paul Moore wrote:
> On Fri, Dec 18, 2015 at 2:49 PM, Steve Grubb <sgrubb at redhat.com> wrote:
> > Hello,
> > 
> > I've just released a new version of the audit daemon. It can be downloaded
> > from http://people.redhat.com/sgrubb/audit. It will also be in rawhide
> > soon. The ChangeLog is:
> > 
> > - Fix auditd disk flushing for data and sync modes
> > - Fix auditctl to not show options not supported on older OS
> > - Add audit.m4 file to aid adding support to other projects
> > - Fix C99 inline function build issue
> > - Add account lock and unlock event types
> > - Change logging loophole check to geteuid()
> > - Fix ausearch to not consider AUDIT_PROCTITLE events malformed (Burn
> > Alting) - Fix ausearch to parse FEATURE_CHANGE events
> 
> Perhaps I missed it, but when can we expect the audit-by-exec support?

It will be in the 2.5 release. It should be one of the first couple of things I 
apply to the svn repo. I'm going to shoot for a January release of the audit 
package.

-Steve




More information about the Linux-audit mailing list