audit-devel-3.0.6-150400.4.16.1 < > , ̉ e`_p9| ƍ9)C'p֖KQ$=Luc -8)]cE=y([
e^0*s5܍р i:a:8iX|slm3ï?l]~Uǹ̏D;zU?ݏX;~]OCda d QQ˨6Xbxߵ\Wu_լTc=g"H6qƙ'-,` -Gūّyu3_ "vv|rR[vt > > H ? 8 d " < $ : Z a a a
a a a
D a a ! a # # a %8 %| % &% ( &N 8 &X 9 & : (H F l, G l@ a H m a I oH a X o Y o \ o a ] qt a ^ z b {g c | d | e | f | l | u | a v ~0
w a x D a y z 4 C audit-devel 3.0.6 150400.4.16.1 Header files for libaudit The audit-devel package contains the header files
needed for developing applications that need to use the audit framework
libraries. e`_h01-ch4d e}SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ Development/Libraries/C and C++ https://people.redhat.com/sgrubb/audit/ linux x86_64 } z jq } Z U X o o c o : # # l v * V m } ] ] f O @ 6 > _ l D a L H ` T # g ; f s 6 - ÁAA큤 e`\e`\e`\e`\e`\e`\e`\e`\e`_aW9aW9aW9aW9e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\e`\8d1f3394bb3af7ddec6c6609dad3ea4cc34b9c6d80fe28b0fb70227fabfc64e5 1bc9690f06771a9aba83a3bb060a4e588dfc45d391e15c683bb79da0f5220b79 d76d6914febe1ebf78eaff7b9e0ac8900e2d18c38e06cb8f3bf7c00e24c62792 18b13e67f497ffd4f55ce50553e6e1cbc3d6d8264ccc0ff366c0be8f1e815d4c 8418090e418c24b324a99471ce3520d08f015eb2df5890a1e852e9c2ac068b37 d3652ccb12a040a97baa562f1675dae2986da6805d57c40cf87e720fd858bc85 389a2f8e18d410162241cb12e577aad00f4efe147d5c5b43d0d40d3f1f72a2e0 eb74a1524e6fa28a300979ec87497e89178e89e8a4cc342e5040f911d03addfd 9e11efd31abdee86fd1c254e413f307e7039e4467bc8a16aa8d97729ccf4debf afe06d4888a0b9eab89a7fd78a0d69efa3d3de2a79772e2449069d0a37b248b3 83dde71f9dab7967214b4b7cb2df546d4b57c0ff1146c6064ab7fcb870efa405 e717289eb30713966ca94c603d652606eae2a182bb6d42bbd8f45a4dad3209f3 5cec8162625a3abab6b021dac640ec3013bc729b61407065c36c6db4451406d3 e2783a9cf71e8949c8cfeba05403d91e205335ea0db3590bd8f59da4f896329e 72e5ca60d40d3e556a4f251e05baafbe2ba0e87acd6e7d9fe591abb74578bcf1 47c7549fa96364b5dea9c54c654c5ef2dd7c824351f8a51d115714fa79dbba9c 40f0010e3240bb6f8c93481239ddcfa960e3116db1caefb3bdf3392e6fcb4436 713fa13544e88279f23c4ebaa1909f4458c840c3a12fe9d50019679366576b8f d87732fa351bf172a85011a85e403edbad6ad2d6e18554fa16ce2ea6f4062fc8 120b33f5c73fe2aea34891d56d42976b1490c890d91a720263a098cd9fa005a4 4e512bff24f1fc3ce40e61fb43210a76da28ae44fcdccb8f78c7895f49b46e48 7c69499cf05e9f44d9742c3b19124053c0cd00a637532e5e2b0349b1ca27b594 ec9f324be3e53c8d179753e8cafd56c56af50887569772f6b7d94e11aa718929 cc05e2a87c7a8850e810bf9832c5fd066e31c311e66f9a2b1eaac2ec9505ca74 b839dd19cce849fd000415c73058dc68b69119734876e2fc819b7bbc746940de c6009c8a6b232a71bbbe494d99519764c7fbdbea83643eac43ffffc387307c85 308fa7089f507deabc7a0b7812fb5a79f5b62f8aff7bcd346679ab0f81e5bdbd c8a77ca1168d14dfa044975e0adc6088feaa9c5982a218252540af274f41dcff d7ebdf49caea8f39b136ad6a71523787e00bcb2279da5743e0156ce717267054 de06f75b6e2afe4dbd7c99f6412809641df6aa7fd48fe5874ccf627ce1e91840 56d9584a78ee4fa9fea39e51f113a2b0d97de96690fab65eee3f893cab2c819e 4993b043443e3ee7ec967b196460b21be12910a6bdafcc7deb926c72cf80c5c6 4a222839a97b19bbd482a42cb8986da0a1777f621df63d2a4cd4304952a6771e a5e8ccc41e6a631077e2d3b6f58b95f73f51447ef3616e3fe5d90a021a701601 f029ada25e0ade2a9ef4ed2fbc858deae41037a0a05f67915a5b1bec14af41f6 a7b8b0f9e59960c781026de9fa5cfd6757c79248c4535d33138ea11517393f12 de584cbdef16e0fb684aaf4cf704ee95a1c0e7cb603ec6f97659256efffe3f22 fd4084b4bf1f01eade755fb3352b96091255c95f847978aa27087e60d9415171 18f7e1247e4d7c1271fdc4f0c524e282df64b50f7ebeb3960da8604821bbf501 2690e320830fa279c1945564f9dd91126c378bbb8b74a5c53ccd397a9eb6f6ba 66f43f41ec3bbf19a6179067fb95acea06177e5c18aef15a056b8d6f16abbc03 fee789ff2a6a50dbd760a334bbcbc17f281fc6d9a42139d5ce17343972322331 2836fc64ba0d4b2fe4ff00d21e9669276c8753ffb16320224af513ee0a23cdcd 359ac31f15f68300c2a7aeb3bf049a35f3fb04a82db4c83afb72afcc2907fb8b eb40b09bf8db58376723290ded87415961457900312964713d6307f9e85deeaf bda79955ab847469445aeae9f3ef290016b714168484b40532f15038afc7b7da 5f17e74139fd862a0e583464b358de09b9a2fa2d90427ac991e49e557e0c6d1d 30e4c9663a3c11920346d54e99378860d89b78b9eade3f26b395c4a612fd62b8 1f1907e21c2907298320f71eb87384599d3c45151a9bb0449fb2613aee7cffd2 23cfcbb72f827d5c01a79fb35f3a557ed1bf5826447129d2614ebe10cb36a691 04229185f2e1396429e4a3580c69e04aecfe4b768c688f7fa14c7700efd24344 c7e841a1a47b5b41aeb7788cc1594c6dd19cb380ff6586058fc5c361c95bff85 0a7c9a22209ef82589e9a8db6a9963878afd07ea7aa210804e394fe87186c46c c0fe742054207d7210fbe396d381a71ce3ddfbddbe6a2f191762912fa43ac3c5 86f08f093bec1aa923e920cbb8c502a9eeb1f30c92517eb6b13c4711266eedb9 1244e245ec0d8a3e5faf9580854771ca0ead6aa1d83a17fa7b566c301889cc5b 951a1ed259e73de75a8eabe934e672c8788a9d6b2513e9e11d0a71d541171d10 2efc40bdd5d42234cbb6aa8bc6b5e6a745ef319ae3e7c19dc5e4767b329c8f15 e4b0edd7b0269ae232a9486b0121c970d2a3c89ec88709ddf406378c4fe23af3 f506c4dde17c8e17ac7f34f3373b4390f76eb6529da6aacc2555a836c39f8144 a314993b2633cca7b670895cf67de16b96fa6ea85b55c5720b8e12fd870e211b b8926bd0bc68a42b591806cc107bbb0be16f42dca2d2ec3ecd13548344cc18db cd203a84da11192569603b247b3b9ac8f2af86ca49096f87f7c5628a88eefc2b 2e65f7d83b2647b6a6366005914a3d38a9dafe6a7985f3023c4424eff22d401c b1bee875e7b762fa1557a03f12320b426ba535cb4ba51f62cb90ea4a82d1332b 251ddc2997927a52471f3c7344cd69cc30d0718705a046883ec5a449a6d1501c faaca65f956cf848b3927e54b51643c88ad9df0ea2475d3097174f3aeb046ef7 9c66d87884325b327edfc24a763383aec34179d8d99ed072e0f308128c7cc3e0 cdcf308ebeecfb14d3b40003e7f43d1076fa496166e674a67d8ca13c9df1a835 7bb8dd223a9f3624cb889c7101250cba4b49c0ae83bf54f6fc53698bfde4d29c 09565ed746220a211b7b7f66713fdbcb56b938b91d647eab911f6db66afb57a3 90b20937289206ab762e9cc883a19fccd28622d47a0eca02b273d4f495fe7b7b acb2db4cc2b17c919ec11c825a4156ac226f619f1fbf8ce1140820d4a3345116 dd5e637a8b84faf9f6c8f780c69eb653f6ba34816e2e574d2d383bb59738b50b c39cec56d1dad5578062fce2a548abc4a63e38388a539ad6b239084d154d1c1c ceb4803601e0d3174ac41515118e98b338636c70a903f841fd35c941dba0613f adeebaabd299480dae9cb018c918513005f94da01170923d000284cf86db41ee b432afe0dd68a3ba74ef86bf62bae705e4cf5292cc0f0f4e0d651de913b5feca 0cc8c5d0dfcc9f70b02dceb5f96323ba0902f477773aa395b6b897514fd1ea3a 04248417f178254b8b014a74522d844e6ad024437bf43d526e4694028a43c9cd 73570a7de238349a122fa82c7ba46bc97db1f82a1db67cfe2db2e4b26dea00e1 fa5e5ffa998ba4c83d3d1ee3ed400c33d4b8ac74fca797c43656114d4b2ba389 e0536e25887c0a9727c199b1268559c3c6eacb2283fe93e9f12a0ef86edabef1 2a4cd04a9b5c25e5036acb1df10280f48cdfd8f620b21176e5ae3b7278d53817 ca141830f4e00c1e2806b522b1534f684bdba10b56183f4540eb11aa94bb0ff7 d300c0c95266d221c50aae276a3861e2cd2c81c04b1507acbef131b952e89fbc 9409fc2017d4c7979cd6de4620822292db9f1e542b50fa48a4efbdb92e9a8ee7 43038776664e5aa57331603c0fa785f41abcf8c60f1fda83f9048931e6ede89c bbad27efc789aff1f13134e9333a0f50633a96c0356abc36e7c9740d04676a20 c3d5327c355a9babac0466adc643d84b3a15addd1b612bd7929ebfc8d22597ec de7fbe6336fe7d2a57768f1c46ece9a82b1ab1c44daf94dabf7542f3a9eafca5 39f3aaa8f5ca1c2b8109fb8c1bf9a08a27a49117884600e3fc08106a1d651509 1f3194fb1804420d7f37677cd8672801f2891a55d8da48df4757d4ea33c401b9 libaudit.so.1.0.0 libauparse.so.0.0.0 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root audit-3.0.6-150400.4.16.1.src.rpm audit-devel audit-devel(x86-64) pkgconfig(audit) pkgconfig(auparse) @
/usr/bin/pkg-config libaudit1 libauparse0 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.6 3.0.6 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 dJbT@aaC1a`D_ǁ^^ [\|[.6@[&M@ZZz@YYu@Ym@V@VbV^@UTs ematsumiya@suse.de jengelh@inai.de gmbr3@opensuse.org ematsumiya@suse.com ematsumiya@suse.com ematsumiya@suse.com abergmann@suse.com ematsumiya@suse.com tonyj@suse.com jengelh@inai.de antoine.belvire@opensuse.org antoine.belvire@opensuse.org tonyj@suse.com tchvatal@suse.com aavindraa@gmail.com jengelh@inai.de tonyj@suse.com tchvatal@suse.com tchvatal@suse.com p.drouand@gmail.com tonyj@suse.com mq@suse.cz - Enable livepatching on main library on x86_64. - Modernize specfile constructs. - Update to version 3.0.6:
* fixes a segfault on some SELINUX_ERR records
* makes IPX packet interpretation dependent on the ipx header
file existing
* adds b32/b64 support to ausyscall
* adds support for armv8l
* fixes auditctl list of syscalls on PPC
* auditd.service now restarts auditd under some conditions - Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs - Update to version 3.0.3:
* Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
* Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
* Change auparse_feed_has_data in auparse to include incomplete events
* Auditd, stop linking against -lrt
* Add ProtectHome and RestrictRealtime to auditd.service
* In auditd, read up to 3 netlink packets in a row
* In auditd, do not validate path to plugin unless active
* In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls - Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
* add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush & reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid & success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa & rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha & IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) - Fix specfile to require libauparse0 and libaudit1 after splitting
audit-libs (bsc#1172295) - Update to version 2.8.5:
* Fix segfault on shutdown
* Fix hang on startup (#1587995)
* Add sleep to script to dump state so file is ready when needed
* Add auparse_normalizer support for SOFTWARE_UPDATE event
* Mark netlabel events as simple events so that get processed quicker
* When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
* Add 30-ospp-v42.rules to meet new Common Criteria requirements
* Update lookup tables for the 4.18 kernel
* In aureport, fix segfault in file report
* Add auparse_normalizer support for labeled networking events
* Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
* Event aging is off by a second
* In ausearch/auparse, correct event ordering to process oldest first
* auparse_reset was not clearing everything it should
* Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
* In ausearch/report, lightly parse selinux portion of USER_AVC events
* In ausearch/report, limit record size when malformed
* In auditd, fix extract_type function for network originating events
* In auditd, calculate right size and location for network originating events
* Treat all network originating events as VER2 so dispatcher doesn't format it
* In audisp-remote do an initial connection attempt (#1625156)
* In auditd, allow expression of space left as a percentage (#1650670)
* On PPC64LE systems, only allow 64 bit rules (#1462178)
* Make some parts of auditd state report optional based on config
* Fix ausearch when checkpointing a single file (Burn Alting)
* Fix scripting in 31-privileged.rules wrt filecap (#1662516)
* In ausearch, do not checkpt if stdin is input source
* In libev, remove __cold__ attribute for functions to allow proper hardening
* Add tests to configure.ac for openldap support
* Make systemd support files use /run rather than /var/run (Christian Hesse)
* Fix minor memory leak in auditd kerberos credentials code
* Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
* In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
It should be disabled in audit (and left enabled in audit-secondary). - Make use of some %make_install. - Update to version 2.8.4:
* Generate checkpoint file even when not results are returned
(Burn Alting).
* Fix log file creation when file logging is disabled entirely
(Vlad Glagolev).
* Use SIGCONT to dump auditd internal state (rh#1504251).
* Fix parsing of virtual timestamp fields in ausearch_expression
(rh#1515903).
* Fix parsing of uid & success for ausearch.
* Hide lru symbols in auparse.
* Fix aureport summary time range reporting.
* Allow unlimited retries on startup for remote logging.
* Add queue_depth to remote logging stats and increase default
queue_depth size. - Update to version 2.8.3:
* Correct msg function name in lru debug code.
* Fix a segfault in auditd when dns resolution isn't available.
* Make a reload legacy service for auditd.
* In auparse python bindings, expose some new types that were
missing.
* In normalizer, pickup subject kind for user_login events.
* Fix interpretation of unknown ioctcmds (rh#1540507).
* Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &
RESP_ORIGIN_BLOCK_TIMED events.
* In auparse_normalize for USER_LOGIN events, map acct for
subj_kind.
* Fix logging of IPv6 addresses in DAEMON_ACCEPT events
(rh#1534748).
* Do not rotate auditd logs when num_logs < 2 (brozs). - Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES - Add patch to fix test run without python2 interpreter:
* audit-python3.patch
- Update to 2.8.2 release:
* Update tables for 4.14 kernel
* Fixup ipv6 server side binding
* AVC report from aureport was missing result column header (#1511606)
* Add SOFTWARE_UPDATE event
* In ausearch/report pickup any path and new-disk fields as a file
* Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
* In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
* Fix building on old systems without linux/fanotify.h
* Fix shell portability issues reported by shellcheck
* Auditd validate_email should not use gethostbyname - Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
* many features added to auparse_normalize
* cli option added to auditd and audispd for setting config dir
* in auditd, restore the umask after creating a log file
* option added to auditd for skipping email verification
- Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog - Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built. - Update to version 2.7.7 release
Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog - Create folder for the m4 file from previous commit to avoid install
failure - Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
* audit-allow-manual-stop.patch
* audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
- C parameter of make
- Install m4 file to the devel package - Do not depend on insserv nor fillup; the package provides
neither sysconfig nor sysvinit files - Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
(added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
No idea what earlier 'automake' build error this was trying to fix but
it broke the handling of "--without-libcap-ng". Anyways, no build error
occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
Changelog 2.4.4
- Fix linked list correctness in ausearch/report
- Add more cross compile fixups (Clayton Shotwell)
- Update auparse python bindings
- Update libev to 4.20
- Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
Changelog 2.4.3
- Add python3 support for libaudit
- Cleanup automake warnings
- Add AuParser_search_add_timestamp_item_ex to python bindings
- Add AuParser_get_type_name to python bindings
- Correct processing of obj_gid in auditctl (Aleksander Zdyb)
- Make plugin config file parsing more robust for long lines (#1235457)
- Make auditctl status print lost field as unsigned number
- Add interpretation mode for auditctl -s
- Add python3 support to auparse library
- Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
- Updates for cross compiling (Clayton Shotwell)
- Add MAC_CHECK audit event type
- Add libauparse pkgconfig file (Aleksander Zdyb)
Changelog 2.4.2
- Ausearch should parse exe field in SECCOMP events
- Improve output for short mode interpretations in auparse
- Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
- If auditctl is reading rules from a file, send messages to syslog (#1144252)
- Correct lookup of ppc64le when determining machine type
- Increase time buffer for wide character numbers in ausearch/report (#1200314)
- In aureport, add USER_TTY events to tty report
- In audispd, limit reporting of queue full messages (#1203810)
- In auditctl, don't segfault when invalid options passed (#1206516)
- In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
- In auditctl, correct lookup of aarch64 in arch field (#1186313)
- Update lookup tables for 4.1 kernel - Update to version 2.4.1
Changelog 2.4.1
- Make python3 support easier
- Add support for ppc64le (Tony Jones)
- Add some translations for a1 of ioctl system calls
- Add command & virtualization reports to aureport
- Update aureport config report for new events
- Add account modification summary report to aureport
- Add GRP_MGMT and GRP_CHAUTHTOK event types
- Correct aureport account change reports
- Add integrity event report to aureport
- Add config change summary report to aureport
- Adjust some syslogging level settings in audispd
- Improve parsing performance in everything
- When ausearch outputs a line, use the previously parsed values (Burn Alting)
- Improve searching and interpreting groups in events
- Fully interpret the proctitle field in auparse
- Correct libaudit and auditctl support for kernel features
- Add support for backlog_time_wait setting via auditctl
- Update syscall tables for the 3.18 kernel
- Ignore DNS failure for email validation in auditd (#1138674)
- Allow rotate as action for space_left and disk_full in auditd.conf
- Correct login summary report of aureport
- Auditctl syscalls can be comma separated list now
- Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream) h01-ch4d 1707237471
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a 3.0.6-150400.4.16.1 3.0.6-150400.4.16.1 3.0.6 3.0.6 auparse-defs.h auparse.h libaudit.h libaudit.so libauparse.so audit.pc auparse.pc audit.m4 audit-devel plugin Makefile audisp-example.c audisp-example.conf audit_add_rule_data.3.gz audit_add_watch.3.gz audit_close.3.gz audit_delete_rule_data.3.gz audit_detect_machine.3.gz audit_encode_nv_string.3.gz audit_encode_value.3.gz audit_get_reply.3.gz audit_get_session.3.gz audit_getloginuid.3.gz audit_is_enabled.3.gz audit_log_acct_message.3.gz audit_log_semanage_message.3.gz audit_log_user_avc_message.3.gz audit_log_user_comm_message.3.gz audit_log_user_command.3.gz audit_log_user_message.3.gz audit_open.3.gz audit_request_rules_list_data.3.gz audit_request_signal_info.3.gz audit_request_status.3.gz audit_set_backlog_limit.3.gz audit_set_backlog_wait_time.3.gz audit_set_enabled.3.gz audit_set_failure.3.gz audit_set_pid.3.gz audit_set_rate_limit.3.gz audit_setloginuid.3.gz audit_update_watch_perms.3.gz audit_value_needs_encoding.3.gz auparse_add_callback.3.gz auparse_destroy.3.gz auparse_feed.3.gz auparse_feed_age_events.3.gz auparse_feed_has_data.3.gz auparse_find_field.3.gz auparse_find_field_next.3.gz auparse_first_field.3.gz auparse_first_record.3.gz auparse_flush_feed.3.gz auparse_get_field_int.3.gz auparse_get_field_name.3.gz auparse_get_field_num.3.gz auparse_get_field_str.3.gz auparse_get_field_type.3.gz auparse_get_filename.3.gz auparse_get_line_number.3.gz auparse_get_milli.3.gz auparse_get_node.3.gz auparse_get_num_fields.3.gz auparse_get_num_records.3.gz auparse_get_record_num.3.gz auparse_get_record_text.3.gz auparse_get_serial.3.gz auparse_get_time.3.gz auparse_get_timestamp.3.gz auparse_get_type.3.gz auparse_get_type_name.3.gz auparse_goto_field_num.3.gz auparse_goto_record_num.3.gz auparse_init.3.gz auparse_interpret_field.3.gz auparse_new_buffer.3.gz auparse_next_event.3.gz auparse_next_field.3.gz auparse_next_record.3.gz auparse_node_compare.3.gz auparse_normalize.3.gz auparse_normalize_functions.3.gz auparse_reset.3.gz auparse_set_eoe_timeout.3.gz auparse_set_escape_mode.3.gz auparse_timestamp_compare.3.gz ausearch_add_expression.3.gz ausearch_add_interpreted_item.3.gz ausearch_add_item.3.gz ausearch_add_regex.3.gz ausearch_add_timestamp_item.3.gz ausearch_add_timestamp_item_ex.3.gz ausearch_clear.3.gz ausearch_next_event.3.gz ausearch_set_stop.3.gz get_auditfail_action.3.gz set_aumessage_mode.3.gz /usr/include/ /usr/lib64/ /usr/lib64/pkgconfig/ /usr/share/aclocal/ /usr/share/doc/packages/ /usr/share/doc/packages/audit-devel/ /usr/share/doc/packages/audit-devel/plugin/ /usr/share/man/man3/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:32494/SUSE_SLE-15-SP4_Update/5914fb326afdfa97abffe978ce69973e-audit.SUSE_SLE-15-SP4_Update drpm xz 5 x86_64-suse-linux C source, ASCII text pkgconfig file M4 macro processor script, ASCII text directory makefile script, ASCII text ASCII text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) C source, ASCII text (gzip compressed data, max compression, from Unix) P R P R #/74ڔ; utf-8 7703d70101553f057a7ac1814bc5758359e4268081fa9057fc2cb2cffd998aea ? 7zXZ
! t/9;] "k%*lZ¿
K@5Ik/ 63 a 0L(-Dw n֣.n*vkZ`P=bkjB4 v.HQ\\
s'_ېf:=n5 7˙k8S AlK^~`Z8^s'7Oq9 HRʆm*]PAgIi݉H W3{`թ]n/i@
3$m6q= s0DrP`54Q?#qT ٺ0] _Kx-g"qT A\,jZ{f98ϴ 9mCv-dY!өM8dkZ1UU;ۧh B\4vQH_;M#l9&Iyy@$
~ ~'7 *Dh?_9Ս5rGv'gcSzCZa XFwh#KD /Ur* 6U>tA:'x1O ~$ob5upSL
G(Ki##ͼ} T; NzӜU_N_kP_v
^R#kro`G~sHSZ|EKw85
|tDտjVxT)w!~0LLjbkl;R6C|'A'%ejh}KJDe u탬y-J%l/:lAy+XmHwȺoL{^ Ws+Y= 7h}Q'X[K.coC@OA/$h?]ɡE}+7`_l34GQQųpu
VɎ+U-,Y L[DU&(hFnsiK `1~9Yu$Z1vc-qEf,6c X9:Z[^Vy+
LpIyczݟ5 gEԼmF Y[w D
oR,
^DTCsre e<[vwB[~&3J 5t6r kd]
!X! HaUuGX B Νp^/BfqXL]-p"K~Blօ&E\ {I(:'Jx{B$fPL6(4p+-(MkPm,)M} 1t6GltV .ғY.Hsoh s?v@v2}'1( ~?|p~rf_a- Hx3C!G];