forked from pool/audit
Marcus Meissner
1dfe6ebd81
- Update to version 2.2.1, see audit's changes - update to 2.2.1, upstream changelog: 2.2.1 - Add more interpretations in auparse for syscall parameters - Add some interpretations to ausearch for syscall parameters - In ausearch/report and auparse, allocate extra space for node names - Update syscall tables for the 3.3.0 kernel - Update libev to 4.0.4 - Reduce the size of some applications - In auditctl, check usage against euid rather than uid 2.2 - Correct all rules for clock_settime - Fix possible segfault in auparse library - Handle malformed socket addresses better - Improve performance in audit_log_user_message() - Improve performance in writing to the log file in auditd - Syscall update for accept4 and recvmmsg - Update autrace resource usage mode syscall list - Improved sample rules for recent syscalls - Add some debug info to audisp-remote startup and shutdown - Make compiling with Python optional - In auditd, if disk_error_action is ignore, don't syslog anything - Fix some memory leaks - If audispd is stopping, don't restart children - Add support in auditctl for shell escaped filenames (Alexander) - Add search support for virt events (Marcelo Cerri) - Update interpretation tables - Sync auparse's auditd config parser with auditd's parser OBS-URL: https://build.opensuse.org/request/show/137972 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=39
16 lines
457 B
Plaintext
16 lines
457 B
Plaintext
#
|
|
## Type: string
|
|
## Default: "yes"
|
|
#
|
|
# This option is used to determine if rules & watches should be deleted on
|
|
# shutdown. This is beneficial in most cases so that a watch doesn't linger
|
|
# on a drive that is being unmounted. If set to no, it will NOT be cleaned up.
|
|
AUDITD_CLEAN_STOP="yes"
|
|
#
|
|
## Type: yesno
|
|
## Default: yes
|
|
#
|
|
# This option disables syscall auditing by default. This can also be
|
|
# accomplished by auditctl -e.
|
|
AUDITD_DISABLE_CONTEXTS="yes"
|