rpm/audit
SHA256
1
0
Fork 0
forked from pool/audit
Code Pull Requests Activity
483b357e07
audit/audit-allow-manual-stop.patch

24 lines
735 B
Diff
Raw Normal View History

Accepting request 209349 from home:jones_tony:branches:security OBS-URL: https://build.opensuse.org/request/show/209349 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=57
2013-12-03 23:28:29 +01:00
From: Tony Jones <tonyj@suse.de>
Subject: allow service stop
References: https://lists.fedoraproject.org/pipermail/devel/2012-June/169411.html
References: https://www.redhat.com/archives/linux-audit/2013-July/msg00048.html
---
legacy-actions is Fedora specific, so blocking manual stop won't work for
Accepting request 382986 from home:scarabeus_iv:branches:security - Version update to 2.5. See audit.spec (libaudit1) for upstream changelog - Cleanup with spec-cleaner - Sort out bit /sbin /usr/sbin/ installation - Install the rules as documentation - Remove needless %py_requires from python subpkgs - Version update to 2.5 release - Refresh two patches and README to contain SUSE and not SuSE * audit-allow-manual-stop.patch * audit-plugins-path.patch - Cleanup with spec-cleaner and do not use subshells but rather use -C parameter of make - Install m4 file to the devel package OBS-URL: https://build.opensuse.org/request/show/382986 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=82
2016-04-01 18:36:15 +02:00
SUSE since we lack the ability to use a custom stop/restart
Accepting request 209349 from home:jones_tony:branches:security OBS-URL: https://build.opensuse.org/request/show/209349 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=57
2013-12-03 23:28:29 +01:00
init.d/auditd.service | 1 -
1 file changed, 1 deletion(-)
--- a/init.d/auditd.service
+++ b/init.d/auditd.service
- Update to version 2.6.5: * Fix segfault on shutdown * Fix hang on startup (#1587995) * Add sleep to script to dump state so file is ready when needed * Add auparse_normalizer support for SOFTWARE_UPDATE event * Mark netlabel events as simple events so that get processed quicker * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833) * Add 30-ospp-v42.rules to meet new Common Criteria requirements * Update lookup tables for the 4.18 kernel * In aureport, fix segfault in file report * Add auparse_normalizer support for labeled networking events * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194) * Event aging is off by a second * In ausearch/auparse, correct event ordering to process oldest first * auparse_reset was not clearing everything it should * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events * In ausearch/report, lightly parse selinux portion of USER_AVC events * In ausearch/report, limit record size when malformed * In auditd, fix extract_type function for network originating events * In auditd, calculate right size and location for network originating events * Treat all network originating events as VER2 so dispatcher doesn't format it * In audisp-remote do an initial connection attempt (#1625156) * In auditd, allow expression of space left as a percentage (#1650670) * On PPC64LE systems, only allow 64 bit rules (#1462178) * Make some parts of auditd state report optional based on config * Fix ausearch when checkpointing a single file (Burn Alting) * Fix scripting in 31-privileged.rules wrt filecap (#1662516) * In ausearch, do not checkpt if stdin is input source * In libev, remove __cold__ attribute for functions to allow proper hardening * Add tests to configure.ac for openldap support OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=108
2020-01-16 21:02:22 +01:00
@@ -11,7 +11,6 @@
Accepting request 209349 from home:jones_tony:branches:security OBS-URL: https://build.opensuse.org/request/show/209349 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=57
2013-12-03 23:28:29 +01:00
Before=sysinit.target shutdown.target
- Update to version 2.6.5: * Fix segfault on shutdown * Fix hang on startup (#1587995) * Add sleep to script to dump state so file is ready when needed * Add auparse_normalizer support for SOFTWARE_UPDATE event * Mark netlabel events as simple events so that get processed quicker * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833) * Add 30-ospp-v42.rules to meet new Common Criteria requirements * Update lookup tables for the 4.18 kernel * In aureport, fix segfault in file report * Add auparse_normalizer support for labeled networking events * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194) * Event aging is off by a second * In ausearch/auparse, correct event ordering to process oldest first * auparse_reset was not clearing everything it should * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events * In ausearch/report, lightly parse selinux portion of USER_AVC events * In ausearch/report, limit record size when malformed * In auditd, fix extract_type function for network originating events * In auditd, calculate right size and location for network originating events * Treat all network originating events as VER2 so dispatcher doesn't format it * In audisp-remote do an initial connection attempt (#1625156) * In auditd, allow expression of space left as a percentage (#1650670) * On PPC64LE systems, only allow 64 bit rules (#1462178) * Make some parts of auditd state report optional based on config * Fix ausearch when checkpointing a single file (Burn Alting) * Fix scripting in 31-privileged.rules wrt filecap (#1662516) * In ausearch, do not checkpt if stdin is input source * In libev, remove __cold__ attribute for functions to allow proper hardening * Add tests to configure.ac for openldap support OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=108
2020-01-16 21:02:22 +01:00
##Before=shutdown.target
Conflicts=shutdown.target
Accepting request 209349 from home:jones_tony:branches:security OBS-URL: https://build.opensuse.org/request/show/209349 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=57
2013-12-03 23:28:29 +01:00
-RefuseManualStop=yes
Accepting request 247315 from home:jones_tony:branches:security OBS-URL: https://build.opensuse.org/request/show/247315 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=72
2014-09-03 01:07:21 +02:00
ConditionKernelCommandLine=!audit=0
Accepting request 511710 from home:jones_tony:branches:security OBS-URL: https://build.opensuse.org/request/show/511710 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=85
2017-07-20 22:07:48 +02:00
Documentation=man:auditd(8) https://github.com/linux-audit/audit-documentation
Accepting request 209349 from home:jones_tony:branches:security OBS-URL: https://build.opensuse.org/request/show/209349 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=57
2013-12-03 23:28:29 +01:00
Copy Permalink