Hello,
I've just released a new version of the audit daemon. It can be downloaded
from
http://people.redhat.com/sgrubb/audit The Changelog is:
- ausearch fix bugs related to -f & -x
- Parse messages using new types
- Properly unescape filenames
- Update interface for sending userspace messages to use new types
This release takes advantage of the new audit types recently introduced. I
would recommend using this with the most recent kernel. This release also now
properly escapes filenames when doing searches for filenames or executables.
The last major piece of this update was to change the library interfaces for
sending userspace messages to allow the message type to be specified. For the
moment, this breaks passwd if you are using the "patched" version. I will get
a new version of passwd out shortly. I preserved the interface for pam & dbus
since they are already in wide distribution. I will migrate both of those
soon as well.
Let me know if there are any problems.
-Steve