Re: audit 1.0.4 released
On Fri, Sep 23, 2005 at 12:36:06PM -0400, Steve Grubb wrote:
Hello,
I've just released a new version of the audit daemon. It can be downloaded
from http://people.redhat.com/sgrubb/audit It will also be in rawhide
tomorrow. The Changelog is:
- Make rate & backlog 32 bit unsigned int in auditctl
- In auditctl, if -F arch is given with -t option, don't require list
- Update auditd man page
- Add size check to audit_send
- Update message for audit_open failure when kernel doesn't support audit
This is a bug fix release. The size check added to audit_send is an extra
precaution to make sure nothing bad happens.
You forgot to mention that a user program can actually crash auditd with it.
Or was it the pam module?
We had a report from the KDE people who triggered it.
Ciao, Marcus