OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/audit?expand=0&rev=26

audit.changes

@@ -1,4 +1,85 @@
 -------------------------------------------------------------------
+Mon May 11 17:20:28 CEST 2009 - tonyj@suse.de
+
+- Update from 1.7.7 to 1.7.13.
+- Redhat changelog for 1.7.8 - 1.7.13 follows:
+  * Tue Apr 21 2009 Steve Grubb <sgrubb@redhat.com> 1.7.13-1
+  - Disable libev asserts unless --with-debug passed to configure
+  - Handle kernel 2.6.29's audit = 0 boot parameter better
+  - Install audit.py file in arch specific python directory (Dan Walsh)
+  - Fix problem with negative uids in audit rules on 32 bit systems
+  - When file type is unknown, output octal for mode field (Miloslav Trmač)
+  - Update tty keystroke interpretations (Miloslav Trmač)
+  
+  * Tue Feb 24 2009 Steve Grubb <sgrubb@redhat.com> 1.7.12-1
+  - Add definitions for crypto events
+  - Fix regression where msgtype couldn't be used as a range in audit rules
+  - In libaudit, extend time spent checking reply
+  - In acct events, prefer id over acct if given
+  - In aulast, try id and acct in USER_LOGIN events
+  - When in immutable mode, have auditctl tell user instead of sending rules
+  - Add option to sysconfig to disable audit system on auditd stop
+  - Add tcp_wrappers config option to auditd
+  - Aulastlog can now take input from stdin
+  - Update libaudit python bindings to throw exceptions on error
+  - Adjust formatting of TTY data in libauparse to be like ausearch/report
+  - Add more key mappings to TTY interpretations
+  - Add internal queue to audisp-remote
+  - Fix failure action code to allow executables in audisp-remote (Chu Li)
+  - Fix memory leak when NOLOG log_format option given to auditd
+  - Quieten some of the reconnect text being sent to syslog in audisp-remote
+  - Apply some libev fixups to auditd
+  - Cleanup shutdown sequence of auditd
+  - Allow auditd log rotation via SIGUSR1 when NOLOG log format option given
+  
+  * Sat Jan 10 2009 Steve Grubb <sgrubb@redhat.com> 1.7.11-1
+  - Don't error out in auditd when calling setsid
+  - Reformat a couple auditd error messages (Oden Eriksson)
+  - If log rotate fails, leave the old log writable
+  - Fixed bug in setting up auditd event loop when listening
+  - Warn if on biarch machine and auditctl rules show a syscall mismatch
+  - Audisp-remote was not parsing some config options correctly
+  - In auparse, check for single key in addition to virtual keys
+  - When auditd shuts down, send AUDIT_RMW_TYPE_ENDING messages to clients
+  - Created reconnect option to remote ending setting of audisp-remote
+  
+  * Sat Dec 13 2008 Steve Grubb <sgrubb@redhat.com> 1.7.10-1
+  - Fix ausearch and aureport to handle out of order events
+  - Add line-buffer option to ausearch & timeout pipe input (Tony Jones)
+  - Add support in ausearch/report for tty data
+  - In audisp-remote, allow the keyword "any" for local_port
+  - Tighten parsing for -m and -w options in auditctl
+  - Add session query hint for aulast proof
+  - Fix audisp-remote to tolerate krb5 config options when not supported
+  - Created new aureport option for tty keystroke report
+  - audispd should detect backup config files and not use them
+  - When checking for ack in netlink interface, retry on EAGAIN a few times
+  - In aureport, fix mods report to show acct acted upon
+  
+  * Wed Nov 05 2008 Steve Grubb <sgrubb@redhat.com> 1.7.9-1
+  - Fix uninitialized variable in aureport causing segfault
+  - Quieten down the gssapi not supported messages
+  - Fix bug interpretting i386 logs on x86_64 machines
+  - If kernel is in immutable mode, auditd should not send enable command
+  - Fix ausearch/report recent and now time keyword lookups
+  - Created aulast program
+  - prelude plugin should pull auid for login alert from 2nd uid field
+  - Add system boot, shutdown, and run level change events
+  - Add max_restarts to audispd.conf to limit times a plugin is restarted
+  - Expand session detection in ausearch
+  
+  * Wed Oct 22 2008 Steve Grubb <sgrubb@redhat.com> 1.7.8-1
+  - Interpret TTY audit data in auparse (Miloslav Trmač)
+  - Extract terminal from USER_AVC events for ausearch/report (Peng Haitao)
+  - Add USER_AVCs to aureport's avc reporting (Peng Haitao)
+  - Short circuit hostname resolution in libaudit if host is empty
+  - If log_group and user are not root, don't check dispatcher perms
+  - Fix a bug when executing "ausearch -te today PM"
+  - Add --exit search option to ausearch
+  - Fix parsing config file when kerberos is disabled
+
+-------------------------------------------------------------------
+
 Tue Apr 14 14:52:39 CEST 2009 - dmueller@suse.de
 
 - refresh patches