ALP-pool/audit-secondary
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sync from SUSE:ALP:Source:Standard:1.0 audit-secondary revision 03edca8316e3624a8e91b3cd01372f0e

Browse Source
This commit is contained in:
Adrian Schröter 2025-02-13 12:47:49 +01:00
parent 300968536d
commit 4b0c49fcb4
3 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
audit-secondary.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Sep 11 17:59:52 UTC 2024 - Enzo Matsumiya <ematsumiya@suse.com>
- Fix plugin termination when using systemd service units (bsc#1215377)
* add auditd.service-fix-plugin-termination.patch
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Dec 27 10:21:56 UTC 2022 - Ludwig Nussel <lnussel@suse.com> Tue Dec 27 10:21:56 UTC 2022 - Ludwig Nussel <lnussel@suse.com>

1
audit-secondary.spec
View File

@ -42,6 +42,7 @@ Patch9: fix-hardened-service.patch
Patch10: enable-stop-rules.patch Patch10: enable-stop-rules.patch
Patch11: create-augenrules-service.patch Patch11: create-augenrules-service.patch
Patch12: audit-userspace-517-compat.patch Patch12: audit-userspace-517-compat.patch
Patch13: auditd.service-fix-plugin-termination.patch
BuildRequires: audit-devel = %{version} BuildRequires: audit-devel = %{version}
BuildRequires: autoconf >= 2.12 BuildRequires: autoconf >= 2.12
BuildRequires: kernel-headers >= 2.6.30 BuildRequires: kernel-headers >= 2.6.30

14
auditd.service-fix-plugin-termination.patch Normal file
View File

@ -0,0 +1,14 @@
---
init.d/auditd.service | 1 +
1 file changed, 1 insertion(+)
--- a/init.d/auditd.service
+++ b/init.d/auditd.service
@@ -32,6 +32,7 @@ ExecStopPost=/sbin/auditctl -R /etc/audi
Restart=on-failure
# Do not restart for intentional exits. See EXIT CODES section in auditd(8).
RestartPreventExitStatus=2 4 6
+KillMode=mixed
### Security Settings ###
MemoryDenyWriteExecute=true