OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/audit?expand=0&rev=17

audit.changes

@@ -1,3 +1,80 @@
+-------------------------------------------------------------------
+Wed Jun 25 01:50:54 CEST 2008 - tonyj@suse.de
+
+- Update from 1.7.2 to 1.7.4
+- Redhat changelog for 1.7.3 - 1.7.4 follows:
+  * Mon May 19 2008 Steve Grubb <sgrubb@redhat.com> 1.7.4-1
+  - Fix interpreting of keys in syscall records
+  - Interpret audit rule config change list fields
+  - Don't error on name=(null) PATH records in ausearch/report
+  - Add key report to aureport
+  - Fix --end today to be now
+  - Added python bindings for auparse_goto_record_num
+  - Update system-config-audit to 0.4.7 (Miloslav Trmac)
+  - Add support for the filetype field option in auditctl
+  - In audispd boost priority after starting children
+  
+  * Fri May 09 2008 Steve Grubb <sgrubb@redhat.com> 1.7.3-1
+  - Fix path processing in AVC records.
+  - auparse_find_field_next() wasn't resetting field ptr going to next record.
+  - auparse_find_field() wasn't checking current field before iterating
+  - cleanup some string handling in audisp-prelude plugin
+  - Update auditctl man page
+  - Fix output of keys in ausearch interpretted mode
+  - Fix ausearch/report --start now to not be reset to midnight
+  - Added auparse_goto_record_num function
+  - Prelude plugin now uses auparse_goto_record_num to avoid skipping a record
+  - audispd now has a priority boost config option
+  - Look for laddr in avcs reported via prelude
+  - Detect page 0 mmaps and alert via prelude
+
+- Update from 1.6.8 to 1.7.2
+- Complete fix for BNC# 378725
+- Redhat changelog for 1.6.9-1.7.2 follows:
+  * Wed Apr 09 2008 Steve Grubb <sgrubb@redhat.com> 1.7.2-1
+  - gen_table.c now includes IPC defines to avoid glibc-headers wild goose chase
+  - ausyscall program added for cross referencing syscall name and number info
+  - Add login session ID search capability to ausearch
+  
+  * Tue Apr 08 2008 Steve Grubb <sgrubb@redhat.com> 1.7.1-1
+  - Remove LSB headers info for init scripts
+  - Fix buffer overflow in audit_log_user_command, again (#438840)
+  - Fix memory leak in EOE code in auditd (#440075)
+  - In auditctl, don't use new operators in legacy rule format
+  - Made a couple corrections in alpha & x86_64 syscall tables (Miloslav Trmac)
+  - Add example STIG rules file
+  - Add string table lookup performance improvement patch (Miloslav Trmac)
+  - auparse_find_field_next performance improvement
+  
+  * Sun Mar 30 2008 Steve Grubb <sgrubb@redhat.com> 1.7-1
+  - Improve input error handling in audispd
+  - Improve end of event detection in auparse library
+  - Improve handling of abstract namespaces
+  - Add test mode for prelude plugin
+  - Handle user space avcs in prelude plugin
+  - Audit event serial number now recorded in idmef alert
+  - Add --just-one option to ausearch
+  - Fix watched account login detection for some failed login attempts
+  - Couple fixups in audit logging functions (Miloslav Trmac)
+  - Add support in auditctl for virtual keys
+  - Added new type for user space MAC policy load events
+  - auparse_find_field_next was not iterating correctly, fixed it
+  - Add idmef alerts for access or execution of watched file
+  - Fix buffer overflow in audit_log_user_command
+  - Add basic remote logging plugin - only sends & no flow control
+  - Update ausearch with interpret fixes from auparse
+  
+  * Sun Mar 09 2008 Steve Grubb <sgrubb@redhat.com> 1.6.9-1
+  - Apply hidden attribute cleanup patch (Miloslav Trmac)
+  - Apply auparse expression interface patch (Miloslav Trmac)
+  - Fix potential memleak in audit event dispatcher
+  - Change default audispd queue depth to 80
+  - Update system-config-audit to version 0.4.6 (Miloslav Trmac)
+  - audisp-prelude alerts now controlled by config file
+  - Updated syscall table for 2.6.25 kernel
+  - Apply patch correcting acct field being misencoded (Miloslav Trmac)
+  - Added watched account login detection for prelude plugin
+
 -------------------------------------------------------------------
 Wed Apr 23 14:17:17 CEST 2008 - tonyj@suse.de