audit 1.2.1 released

Michael C Thompson thompsmc at us.ibm.com
Tue Apr 18 14:06:02 UTC 2006


Steve Grubb wrote:
> Hi,
> 
> I've just released a new version of the audit daemon. It can be downloaded 
> from http://people.redhat.com/sgrubb/audit  It will also be in rawhide  
> tomorrow. The Changelog is:
> 
> - New message type for trusted apps

Can you given an example of this new message type please?

> - Add new keywords: today, yesterday, & now for ausearch and aureport
> - Make audit_log_user_avc_message really send to syslog on error
> - Updated syscall tables in auditctl
> - Deprecated the 'possible' action for syscall rules in auditctl
> - Update watch code to use file syscalls instead of 'all' in auditctl
> 
> This is mostly a bugfix release. Let me know if there are any problems with 
> it.
> 
> -Steve




More information about the Linux-audit mailing list