Hello, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit. It will also be in rawhide soon. The ChangeLog is: - Fix musl C builds - Many code cleanups (Yugend) - Use atomic variables if available for signal related flags - Dont rotate audit logs when auditd is in debug mode - Fix a couple memory leaks on error paths - Correct output when displaying rules with exe/path/dir (Attila Lakatos) - Fix auparse lookup test to not use the system libaupaurse - Improve auparse metrics - Update auparse normalizer for recent syscalls - Make status report uniform This release fixes build on distributions using the musl C library. There are many fix ups from static analysis. There was a segfault when logs get rotated while in the debug mode. Since debug writes to stdout, it should not ever rotate the logs. This was found by sending it a signal. Auditctl out was fixed so it displayed rules correctly when they have exe/ path/dir. The auparse normalizer was updated for some new syscalls. And lastly, the status report was inconsistent in formatting. It sometimes omitted = which makes parsing the output a challenge. If you notice any problems with this release, please let me know. SHA256: d5d1b5d50ee4a2d0d17875bc6ae6bd6a7d5b34d9557ea847a39faec531faaa0a -Steve