Commit Graph

  • 1257e9dd11 Accepting request 1331667 from security factory Ana Guerrero 2026-02-09 10:42:34 +00:00
  • 6bfc4ede0d Accepting request 1330800 from home:kukuk:branches:security Enzo Matsumiya 2026-02-06 13:40:55 +00:00
  • 6ea1f1b2f9 Accepting request 1329353 from security Ana Guerrero 2026-01-28 14:05:09 +00:00
  • a664ec17a1 Fix package for immutable mode (jsc#PED-14752) slfo-main Enzo Matsumiya 2026-01-26 14:50:47 -03:00
  • ed6dae93d1 Accepting request 1329283 from home:gmbr3:Active Enzo Matsumiya 2026-01-26 17:37:18 +00:00
  • 6591763b56 Accepting request 1285116 from security Ana Guerrero 2025-06-13 16:42:17 +00:00
  • 599c1112eb Accepting request 1285096 from home:wfrisch:branches:security Wolfgang Frisch 2025-06-12 11:38:16 +00:00
  • a74a4e8524 Accepting request 1207244 from security slfo-1.2 Dominique Leuenberger 2024-10-14 11:06:20 +00:00
  • f17f4b9b15 Accepting request 1207244 from security Dominique Leuenberger 2024-10-14 11:06:20 +00:00
  • 239d018a6e - Update audit.spec (bsc#1231236): * add requirement for 'awk' package * move some %post logic from audit to audit-rules Enzo Matsumiya 2024-10-11 13:04:43 +00:00
  • 815d1e775d Accepting request 1206516 from home:ematsumiya:branches:security Enzo Matsumiya 2024-10-11 13:04:43 +00:00
  • 757054e43f Accepting request 1205295 from security Ana Guerrero 2024-10-03 15:59:59 +00:00
  • c63b7ea5be Accepting request 1205295 from security Ana Guerrero 2024-10-03 15:59:59 +00:00
  • 1878dbbb84 - Readd audit-allow-manual-stop.patch (removed by mistake) - Fix plugin termination when using systemd service units (bsc#1215377) * add auditd.service-fix-plugin-termination.patch Enzo Matsumiya 2024-10-02 17:07:53 +00:00
  • 40e8c1a939 Accepting request 1205294 from home:ematsumiya:branches:security Enzo Matsumiya 2024-10-02 17:07:53 +00:00
  • 66d350687b Accepting request 1204507 from security Ana Guerrero 2024-09-30 13:34:55 +00:00
  • c9e2718f37 Accepting request 1204507 from security Ana Guerrero 2024-09-30 13:34:55 +00:00
  • 90ef868a13 - Update audit-secondary.spec: * Add "Requires: audit-rules" for audit package * Remove preun/postun handling of audit-rules.service - Update to 4.0 - Drop python2 support - Drop auvirt and autrace programs - Drop SysVinit support - Require the use of the 5.0 or later kernel headers - New README.md file - Rewrite legacy service functions in terms of systemctl - Consolidate and update end of event detection to a common function - Split off rule loading from auditd.service into audit-rules.service - Refactor libaudit.h to split out logging functions and record numbers - Speed up aureport --summary reports - Limit libaudit python bindings to logging functions - Add a metrics function for auparse - Change auditctl to use pidfd_send_signal for signaling auditd - Adjust watches to optimize syscalls hooked when watch file access - Drop nispom rules - Add intepretations for fsconfig, fsopen, fsmount, & move_mount - Many code fixups (cgzones) - Update syscall and interpretation tables to the 6.8 kernel (from v3.1.2) - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings - Update spec: * Move rules-related files into new subpackage audit-rules': * Files moved: - /sbin/auditctl, /sbin/augenrules, /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules} - manpages for auditctl, augenrules, and audit.rules - /etc/audit is now owned by audit-rules' as well * Add new file /usr/lib/systemd/system/audit-rules.service * Remove in-house create-augenrules-service.patch that generated augenrules.service systemd unit service * Remove ownership of /usr/share/audit * Create /usr/share/audit-rules directory on %install * Remove audit-userspace-517-compat.patch (fixed upstream) * Remove libev-werror.patch (fixed upstream) * Remove audit-allow-manual-stop.patch (fixed upstream) * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Remove autrace and auvirt references (upstream) * Replace README with README.md - Drop `--enable-systemd' from %configure as SysV-style scripts aren't supported in upstream since 113ae191758c ("Drop support for SysVinit") Marcus Meissner 2024-09-29 09:40:50 +00:00
  • eab2c91052 Accepting request 1204197 from home:ematsumiya:branches:security Marcus Meissner 2024-09-29 09:40:50 +00:00
  • 3f0a4c9486 reinstate %dir /etc/audit in the audit package Wolfgang Frisch 2024-09-17 14:40:04 +00:00
  • 8360963980 Accepting request 1201645 from home:wfrisch:branches:security Wolfgang Frisch 2024-09-17 14:40:04 +00:00
  • 42402f11b7 - Update to 4.0 * Includes fixes since v3.1.1 * Enhance support for newer (5.0+) kernels - Update spec: * Move rules-related files into new subpackage audit-rules': * Files moved: - /sbin/auditctl, /sbin/augenrules, /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules} - manpages for auditctl, augenrules, and audit.rules - /etc/audit is now owned by audit-rules' as well * Add new file /usr/lib/systemd/system/audit-rules.service * Remove in-house create-augenrules-service.patch that generated augenrules.service systemd unit service * Remove ownership of /usr/share/audit * Create /usr/share/audit-rules directory on %install * Remove audit-userspace-517-compat.patch (fixed upstream) * Remove libev-werror.patch (fixed upstream) * Remove audit-allow-manual-stop.patch (fixed upstream) * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Remove autrace and auvirt references (upstream) * Replace README with README.md - Drop `--enable-systemd' from %configure as SysV-style scripts aren't supported in upstream since 113ae191758c ("Drop support for SysVinit") - Update to 4.0 * Includes fixes since v3.1.1 * Enhance support for newer (5.0+) kernels - Update spec: * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Add new headers 'audit_logging.h' and 'audit-records.h' for audit-devel Wolfgang Frisch 2024-09-17 08:11:59 +00:00
  • b28e51b93c Accepting request 1199724 from home:ematsumiya:branches:security Wolfgang Frisch 2024-09-17 08:11:59 +00:00
  • ac660bee23 Accepting request 1195098 from security Ana Guerrero 2024-08-22 16:10:26 +00:00
  • 06998b579e Accepting request 1195098 from security Ana Guerrero 2024-08-22 16:10:26 +00:00
  • af8bee2ca9 - Remove rcaudit symlink [jsc#PED-266] Enzo Matsumiya 2024-08-21 11:34:51 +00:00
  • cea9f131e2 Accepting request 1191624 from home:kukuk:branches:security Enzo Matsumiya 2024-08-21 11:34:51 +00:00
  • e48664a6d7 Accepting request 1098554 from security Dominique Leuenberger 2023-07-16 15:28:32 +00:00
  • 035f02a760 Accepting request 1098554 from security Dominique Leuenberger 2023-07-16 15:28:32 +00:00
  • 8569642ef7 Accepting request 1097513 from home:polslinux:branches:security Enzo Matsumiya 2023-07-13 15:26:56 +00:00
  • 4d8bf5cb20 Accepting request 1097513 from home:polslinux:branches:security Enzo Matsumiya 2023-07-13 15:26:56 +00:00
  • d1358f4337 Accepting request 1096509 from home:polslinux:branches:security Wolfgang Frisch 2023-07-03 14:59:58 +00:00
  • d768f222fe Accepting request 1096509 from home:polslinux:branches:security Wolfgang Frisch 2023-07-03 14:59:58 +00:00
  • e8c281ed5c Accepting request 1084694 from home:fcrozat:branches:security Wolfgang Frisch 2023-05-10 09:07:42 +00:00
  • 07fe84947f Accepting request 1084694 from home:fcrozat:branches:security Wolfgang Frisch 2023-05-10 09:07:42 +00:00
  • 28591f1543 Accepting request 1073295 from home:gbelinassi Enzo Matsumiya 2023-03-20 19:59:00 +00:00
  • 6b8792da8a Accepting request 1073295 from home:gbelinassi Enzo Matsumiya 2023-03-20 19:59:00 +00:00
  • 405fcdff1b Accepting request 1066846 from home:polslinux:branches:security Wolfgang Frisch 2023-03-01 11:19:17 +00:00
  • 8a8c71483b Accepting request 1066846 from home:polslinux:branches:security Wolfgang Frisch 2023-03-01 11:19:17 +00:00
  • c2d1b94dc4 Accepting request 1066163 from security Dominique Leuenberger 2023-02-19 17:18:35 +00:00
  • c3eaa298ca Accepting request 1066163 from security Dominique Leuenberger 2023-02-19 17:18:35 +00:00
  • e33aeccfc5 clean up stale archiv and removed patches Robert Frohl 2023-02-16 11:01:07 +00:00
  • a4afbf5bdb clean up stale archiv and removed patches Robert Frohl 2023-02-16 11:01:07 +00:00
  • 70202c4f18 Accepting request 1051400 from home:lnussel:usrmerge Robert Frohl 2023-01-31 13:00:20 +00:00
  • fb44466155 Accepting request 1051400 from home:lnussel:usrmerge Robert Frohl 2023-01-31 13:00:20 +00:00
  • 7e1b0e83b8 Accepting request 1043243 from home:ematsumiya:branches:security Enzo Matsumiya 2022-12-19 19:54:31 +00:00
  • 0df0939925 Accepting request 1043243 from home:ematsumiya:branches:security Enzo Matsumiya 2022-12-19 19:54:31 +00:00
  • ce952275f8 Accepting request 969466 from security Dominique Leuenberger 2022-04-17 21:49:30 +00:00
  • 1fb95210a5 Accepting request 969466 from security Dominique Leuenberger 2022-04-17 21:49:30 +00:00
  • 4a3ef5cf8e Accepting request 969286 from home:jengelh:branches:security Marcus Meissner 2022-04-12 14:18:42 +00:00
  • 3c0d3e6ff2 Accepting request 969286 from home:jengelh:branches:security Marcus Meissner 2022-04-12 14:18:42 +00:00
  • dfdf560849 Accepting request 965461 from security Dominique Leuenberger 2022-03-31 15:18:30 +00:00
  • 865b0d3024 Accepting request 965461 from security Dominique Leuenberger 2022-03-31 15:18:30 +00:00
  • 26999f1942 Accepting request 965005 from home:coolo:branches:security Enzo Matsumiya 2022-03-28 17:51:02 +00:00
  • a6fdd7d6b2 Accepting request 965005 from home:coolo:branches:security Enzo Matsumiya 2022-03-28 17:51:02 +00:00
  • affdcc0b01 Accepting request 964942 from home:ematsumiya:branches:security Enzo Matsumiya 2022-03-25 20:12:53 +00:00
  • 66c07a80ac Accepting request 964942 from home:ematsumiya:branches:security Enzo Matsumiya 2022-03-25 20:12:53 +00:00
  • 8c6f875550 Accepting request 964336 from home:dirkmueller:Factory Enzo Matsumiya 2022-03-25 14:41:23 +00:00
  • f38ce07964 Accepting request 964336 from home:dirkmueller:Factory Enzo Matsumiya 2022-03-25 14:41:23 +00:00
  • 54f6a26404 Accepting request 934645 from security Dominique Leuenberger 2021-12-01 19:46:08 +00:00
  • ee89194e40 Accepting request 934645 from security Dominique Leuenberger 2021-12-01 19:46:08 +00:00
  • c309536630 Accepting request 934558 from home:favogt:branches:security Enzo Matsumiya 2021-11-30 01:45:17 +00:00
  • 887fc384ed Accepting request 934558 from home:favogt:branches:security Enzo Matsumiya 2021-11-30 01:45:17 +00:00
  • 6189ef2a7d Accepting request 930227 from security Dominique Leuenberger 2021-11-12 14:58:53 +00:00
  • 364cf60798 Accepting request 930227 from security Dominique Leuenberger 2021-11-12 14:58:53 +00:00
  • 4de8c602d7 Accepting request 930154 from home:gmbr3:Active Enzo Matsumiya 2021-11-08 18:23:23 +00:00
  • 37294b8eac Accepting request 930154 from home:gmbr3:Active Enzo Matsumiya 2021-11-08 18:23:23 +00:00
  • 830ee0e3c1 Accepting request 926074 from security Dominique Leuenberger 2021-10-20 18:22:44 +00:00
  • 01d9955552 Accepting request 926074 from security Dominique Leuenberger 2021-10-20 18:22:44 +00:00
  • 483b357e07 Accepting request 925413 from home:gmbr3:Active Enzo Matsumiya 2021-10-18 18:42:45 +00:00
  • 2da9e2bd1d Accepting request 925413 from home:gmbr3:Active Enzo Matsumiya 2021-10-18 18:42:45 +00:00
  • 1b5f7ae8b7 Accepting request 925195 from home:ematsumiya:branches:security Enzo Matsumiya 2021-10-13 23:13:08 +00:00
  • 962b5fba61 Accepting request 925195 from home:ematsumiya:branches:security Enzo Matsumiya 2021-10-13 23:13:08 +00:00
  • a584999d5c Accepting request 920362 from security Dominique Leuenberger 2021-10-01 20:28:52 +00:00
  • b168c63828 Accepting request 920362 from security Dominique Leuenberger 2021-10-01 20:28:52 +00:00
  • 3099f73ab7 Accepting request 920360 from home:ematsumiya:branches:security Enzo Matsumiya 2021-09-20 17:14:08 +00:00
  • 8c77b5bb78 Accepting request 920360 from home:ematsumiya:branches:security Enzo Matsumiya 2021-09-20 17:14:08 +00:00
  • 09b88829e8 Accepting request 920348 from home:ematsumiya:branches:security Enzo Matsumiya 2021-09-20 16:14:05 +00:00
  • 6c24aede4f Accepting request 920348 from home:ematsumiya:branches:security Enzo Matsumiya 2021-09-20 16:14:05 +00:00
  • aa32cfdfe2 Accepting request 912415 from security Dominique Leuenberger 2021-08-24 08:53:51 +00:00
  • 7f54e37391 Accepting request 912415 from security Dominique Leuenberger 2021-08-24 08:53:51 +00:00
  • 0e616b4165 - harden_auditd.service.patch: automatic hardening applied to systemd services Marcus Meissner 2021-08-16 13:36:30 +00:00
  • 7547d707a7 - harden_auditd.service.patch: automatic hardening applied to systemd services Marcus Meissner 2021-08-16 13:36:30 +00:00
  • 127262eccc Accepting request 911452 from home:jsegitz:branches:systemdhardening:security Marcus Meissner 2021-08-16 13:21:17 +00:00
  • 1c0e257538 Accepting request 911452 from home:jsegitz:branches:systemdhardening:security Marcus Meissner 2021-08-16 13:21:17 +00:00
  • cdf3fa9c76 Accepting request 910030 from security Dominique Leuenberger 2021-08-07 15:57:08 +00:00
  • 10e31ae82b Accepting request 910030 from security Dominique Leuenberger 2021-08-07 15:57:08 +00:00
  • d083951a31 - use https source urls Marcus Meissner 2021-08-03 15:56:57 +00:00
  • 5bf9d448e4 - use https source urls Marcus Meissner 2021-08-03 15:56:57 +00:00
  • ebf7ab7764 - use https source urls Marcus Meissner 2021-08-03 15:56:42 +00:00
  • efcd379943 - use https source urls Marcus Meissner 2021-08-03 15:56:42 +00:00
  • 97e319769c Accepting request 909447 from home:ematsumiya:branches:security Marcus Meissner 2021-08-01 14:31:28 +00:00
  • bc14e5693b Accepting request 909447 from home:ematsumiya:branches:security Marcus Meissner 2021-08-01 14:31:28 +00:00
  • 42d0a5fa7c Accepting request 900607 from security Dominique Leuenberger 2021-06-24 16:21:49 +00:00
  • 27362dad6b Accepting request 900607 from security Dominique Leuenberger 2021-06-24 16:21:49 +00:00
  • 5810f8940b Accepting request 900606 from home:ematsumiya:branches:security Enzo Matsumiya 2021-06-17 14:59:32 +00:00
  • 746e1c65c7 Accepting request 900606 from home:ematsumiya:branches:security Enzo Matsumiya 2021-06-17 14:59:32 +00:00
  • 51c3a9728b Accepting request 900442 from home:ematsumiya:branches:security Enzo Matsumiya 2021-06-16 18:07:14 +00:00
  • 6ae6e401e6 Accepting request 900442 from home:ematsumiya:branches:security Enzo Matsumiya 2021-06-16 18:07:14 +00:00
  • 827fffa884 Accepting request 900437 from home:ematsumiya:branches:security Enzo Matsumiya 2021-06-16 17:29:54 +00:00