audit 1.7.2 released

Steve Grubb sgrubb at redhat.com
Wed Apr 9 20:31:16 UTC 2008


Hi,

I've just released a new version of the audit daemon. It can be downloaded 
from http://people.redhat.com/sgrubb/audit  It will also be in rawhide  
soon. The Changelog is:

- gen_table.c now includes IPC defines to avoid kernel headers wild goose 
chase
- ausyscall program added for cross referencing syscall name and number info
- Add login session ID search capability to ausearch

This release is mostly to fix a build problem on non-red Hat systems. It seems 
that the low level ipc.h is kept in many places. So, to avoid problems, I 
copy and pasted the defines we need into all the places that need it.

This release also includes a new program ausyscall that can be used to cross 
reference syscall names and numbers. This would be important for verifying 
the need to have 2 rules on biarch systems.

This release also adds support for searching by login session IDs on 2.6.25 
and later kernels.

Please let me know if you run across any problems with this release.

-Steve




More information about the Linux-audit mailing list