Fedora Core 4 Update: audit-1.0.12-2.fc4

From FedoraNEWS.ORG

---------------------------------------------------------------------

Fedora Update Notification

FEDORA-2005-1064

2005-11-09

---------------------------------------------------------------------

Product  : Fedora Core 4

Name  : audit

Version  : 1.0.12

Release  : 2.fc4

Summary  : User space tools for 2.6 kernel auditing.

Description :

The audit package contains the user space utilities for

storing and searching the audit records generate by

the audit subsystem in the Linux 2.6 kernel.

---------------------------------------------------------------------

Update Information:

This update privides a new utility for analizing audit logs,

adds email notification for some events, updates syscall

tables, and updates all documentation.

---------------------------------------------------------------------

• Tue Nov 8 2005 Steve Grubb <sgrubb@redhat.com> 1.0.12-2

- Fix sendmail error handler. Bug report from Dustin Kirkland of IBM.

• Mon Nov 7 2005 Steve Grubb <sgrubb@redhat.com> 1.0.12-1

- Add 2 more summary reports

- Add 2 more message types

• Sun Nov 6 2005 Steve Grubb <sgrubb@redhat.com> 1.0.11-1

- Fix memory leaks in aureport & ausearch

- Fix auditd reconfig to change mail accts, too

- Fix stray pointer in sorting of aureport

- Added new message type

- Add results to all DAEMON messages

• Fri Nov 4 2005 Steve Grubb <sgrubb@redhat.com> 1.0.10-1

- Add --failed/success flags to aureport to select specific events for reports

- Add --summary to get totals of reported objects

- Add ability to force log rotation by sending sigusr1 to auditd

- Add -i flag to auditctl to ignore errors when reading rules from a file

- Reformat aureports so date & time are always given

- Add cron script for log rotation to docs

• Wed Nov 2 2005 Steve Grubb <sgrubb@redhat.com> 1.0.9-1

- Updated message types that auditd recognizes

- Added a couple more message types

- Added new standard logging format function

- Update default config

- Make ausearch -m take a list of message types

• Thu Oct 27 2005 Steve Grubb <sgrubb@redhat.com> 1.0.8-1.fc4

- Update man pages

- Add email alert for admin_space_left in auditd

- Aureport cleanups

- Add anomaly & response to anomaly reports to aureport

- Summary report runs by default in aureport

- Updated syscall number tables

• Wed Oct 19 2005 Steve Grubb <sgrubb@redhat.com> 1.0.7-1.fc4

- Update reports

- Add new message types

- Bug fixes

• Mon Oct 10 2005 Steve Grubb <sgrubb@redhat.com> 1.0.6-1.fc4

- in aureport, add column labels to reports

- added watch report to aureport

- added interpreting mode to aureport

- added user space avc standard message to libaudit

- aureport & ausearch now use builtin log locations when bad config file

- add email alert to low disk space warning actions in auditd

• Tue Oct 4 2005 Steve Grubb <sgrubb@redhat.com> 1.0.5-1.fc4

- ausearch can now search on SE Linux contexts

- added aureport program to analyze logs

- aureport added report option for each log's start and end time

- increased random number selected for initial seq number in auditd

- add new user space defines to libaudit.h

- add add standard logging functions to libaudit

---------------------------------------------------------------------

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

49cdf20c37b0ca8bf381c53ea973f702 SRPMS/audit-1.0.12-2.fc4.src.rpm

b295c59aa3fb45cc4724ee156f190968 ppc/audit-1.0.12-2.fc4.ppc.rpm

21e4ef5204aa1a919f5e36c8c16860fc ppc/audit-libs-1.0.12-2.fc4.ppc.rpm

85b410a3cac163d1dbe536a6de436025 ppc/audit-libs-devel-1.0.12-2.fc4.ppc.rpm

c2c9d5cb3bcec26db90996c46364d69b ppc/debug/audit-debuginfo-1.0.12-2.fc4.ppc.rpm

70fe05ef9daeb0ad0a9d6c91e97c15c2 ppc/audit-libs-1.0.12-2.fc4.ppc64.rpm

d6b6aee816b76604662503ec7fee3cd5 x86_64/audit-1.0.12-2.fc4.x86_64.rpm

0b37462ad484e36232e24a038b441808 x86_64/audit-libs-1.0.12-2.fc4.x86_64.rpm

b8911bad825b3ca8f5dc95ce42820b98 x86_64/audit-libs-devel-1.0.12-2.fc4.x86_64.rpm

32439f92bed4083b6d14312e80583a18 x86_64/debug/audit-debuginfo-1.0.12-2.fc4.x86_64.rpm

36422e339e68aad0e615096456d27076 x86_64/audit-libs-1.0.12-2.fc4.i386.rpm

1dacde75e783b42b5b630a195e6fa857 i386/audit-1.0.12-2.fc4.i386.rpm

36422e339e68aad0e615096456d27076 i386/audit-libs-1.0.12-2.fc4.i386.rpm

c3314c48704ad0e66034226787ea542b i386/audit-libs-devel-1.0.12-2.fc4.i386.rpm

c063556982c6827f05ac8701a9ce8b32 i386/debug/audit-debuginfo-1.0.12-2.fc4.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

---------------------------------------------------------------------