On Fri, 2015-12-18 at 14:49 -0500, Steve Grubb wrote:
Hello,
I've just released a new version of the audit daemon. It can be downloaded
from
http://people.redhat.com/sgrubb/audit. It will also be in rawhide
soon. The ChangeLog is:
- Fix auditd disk flushing for data and sync modes
- Fix auditctl to not show options not supported on older OS
- Add audit.m4 file to aid adding support to other projects
- Fix C99 inline function build issue
- Add account lock and unlock event types
- Change logging loophole check to geteuid()
- Fix ausearch to not consider AUDIT_PROCTITLE events malformed (Burn Alting)
- Fix ausearch to parse FEATURE_CHANGE events
Please let me know if you run across any problems with this release.
Minor bug fix ... the various auparse/interpret.c:*_escape() routines
did not terminate the strings they generated.
Regards
Burn