6bfa6d
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
6bfa6d
6bfa6d
Summary: User space tools for 2.6 kernel auditing
6bfa6d
Name: audit
6bfa6d
Version: 2.8.5
6bfa6d
Release: 4%{?dist}
6bfa6d
License: GPLv2+
6bfa6d
Group: System Environment/Daemons
6bfa6d
URL: http://people.redhat.com/sgrubb/audit/
6bfa6d
Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
6bfa6d
# This patch switches collecting nametype for objtype because RHEL is different
6bfa6d
Patch1: audit-2.7.1-rhel7-fixup.patch
6bfa6d
# DO NOT REMOVE - backlog_wait_time is not in RHEL 7 kernel
6bfa6d
Patch2: audit-2.7.5-no-backlog-wait-time.patch
6bfa6d
Patch3: audit-2.8.6-memleak.patch
6bfa6d
Patch4: audit-3.0-avc.patch
6bfa6d
Patch5: audit-3.0-cond-restart.patch
6bfa6d
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
6bfa6d
BuildRequires: openldap-devel
6bfa6d
BuildRequires: swig
6bfa6d
BuildRequires: python-devel
6bfa6d
BuildRequires: tcp_wrappers-devel krb5-devel libcap-ng-devel
6bfa6d
BuildRequires: kernel-headers >= 2.6.29
6bfa6d
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
6bfa6d
BuildRequires: systemd-units
6bfa6d
Requires(post): systemd-units systemd-sysv chkconfig coreutils
6bfa6d
Requires(preun): systemd-units
6bfa6d
Requires(postun): systemd-units coreutils
6bfa6d
6bfa6d
%description
6bfa6d
The audit package contains the user space utilities for
6bfa6d
storing and searching the audit records generated by
6bfa6d
the audit subsystem in the Linux 2.6 and later kernels.
6bfa6d
6bfa6d
%package libs
6bfa6d
Summary: Dynamic library for libaudit
6bfa6d
License: LGPLv2+
6bfa6d
Group: Development/Libraries
6bfa6d
6bfa6d
%description libs
6bfa6d
The audit-libs package contains the dynamic libraries needed for 
6bfa6d
applications to use the audit framework.
6bfa6d
6bfa6d
%package libs-devel
6bfa6d
Summary: Header files for libaudit
6bfa6d
License: LGPLv2+
6bfa6d
Group: Development/Libraries
6bfa6d
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
6bfa6d
Requires: kernel-headers >= 2.6.29
6bfa6d
6bfa6d
%description libs-devel
6bfa6d
The audit-libs-devel package contains the header files needed for
6bfa6d
developing applications that need to use the audit framework libraries.
6bfa6d
6bfa6d
%package libs-static
6bfa6d
Summary: Static version of libaudit library
6bfa6d
License: LGPLv2+
6bfa6d
Group: Development/Libraries
6bfa6d
Requires: kernel-headers >= 2.6.29
6bfa6d
6bfa6d
%description libs-static
6bfa6d
The audit-libs-static package contains the static libraries
6bfa6d
needed for developing applications that need to use static audit
6bfa6d
framework libraries
6bfa6d
6bfa6d
%package libs-python
6bfa6d
Summary: Python bindings for libaudit
6bfa6d
License: LGPLv2+
6bfa6d
Group: Development/Libraries
6bfa6d
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
6bfa6d
6bfa6d
%description libs-python
6bfa6d
The audit-libs-python package contains the bindings so that libaudit
6bfa6d
and libauparse can be used by python.
6bfa6d
6bfa6d
%package -n audispd-plugins
6bfa6d
Summary: Plugins for the audit event dispatcher
6bfa6d
License: GPLv2+
6bfa6d
Group: System Environment/Daemons
6bfa6d
Requires: %{name} = %{version}-%{release}
6bfa6d
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
6bfa6d
Requires: openldap
6bfa6d
6bfa6d
%description -n audispd-plugins
6bfa6d
The audispd-plugins package provides plugins for the real-time
6bfa6d
interface to the audit system, audispd. These plugins can do things
6bfa6d
like relay events to remote machines.
6bfa6d
6bfa6d
%prep
6bfa6d
%setup -q
6bfa6d
%patch1 -p1
6bfa6d
%patch2 -p1
6bfa6d
%patch3 -p1
6bfa6d
%patch4 -p1
6bfa6d
%patch5 -p1
6bfa6d
6bfa6d
%build
6bfa6d
%configure --sbindir=/sbin --libdir=/%{_lib} --with-python=yes \
6bfa6d
	--with-libwrap --enable-gssapi-krb5=yes \
6bfa6d
	--with-libcap-ng=yes --with-arm --with-aarch64 \
6bfa6d
	--enable-zos-remote --without-golang --enable-systemd
6bfa6d
6bfa6d
make CFLAGS="%{optflags}" %{?_smp_mflags}
6bfa6d
6bfa6d
%install
6bfa6d
rm -rf $RPM_BUILD_ROOT
6bfa6d
mkdir -p $RPM_BUILD_ROOT/{sbin,etc/audispd/plugins.d,etc/audit/rules.d}
6bfa6d
mkdir -p $RPM_BUILD_ROOT/%{_mandir}/{man5,man8}
6bfa6d
mkdir -p $RPM_BUILD_ROOT/%{_lib}
6bfa6d
mkdir -p $RPM_BUILD_ROOT/%{_libdir}/audit
6bfa6d
mkdir -p --mode=0700 $RPM_BUILD_ROOT/%{_var}/log/audit
6bfa6d
mkdir -p $RPM_BUILD_ROOT/%{_var}/spool/audit
6bfa6d
make DESTDIR=$RPM_BUILD_ROOT install
6bfa6d
6bfa6d
mkdir -p $RPM_BUILD_ROOT/%{_libdir}
6bfa6d
# This winds up in the wrong place when libtool is involved
6bfa6d
mv $RPM_BUILD_ROOT/%{_lib}/libaudit.a $RPM_BUILD_ROOT%{_libdir}
6bfa6d
mv $RPM_BUILD_ROOT/%{_lib}/libauparse.a $RPM_BUILD_ROOT%{_libdir}
6bfa6d
curdir=`pwd`
6bfa6d
cd $RPM_BUILD_ROOT/%{_libdir}
6bfa6d
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libaudit.so.1.*.*\``
6bfa6d
ln -s ../../%{_lib}/$LIBNAME libaudit.so
6bfa6d
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libauparse.so.0.*.*\``
6bfa6d
ln -s ../../%{_lib}/$LIBNAME libauparse.so
6bfa6d
cd $curdir
6bfa6d
# Remove these items so they don't get picked up.
6bfa6d
rm -f $RPM_BUILD_ROOT/%{_lib}/libaudit.so
6bfa6d
rm -f $RPM_BUILD_ROOT/%{_lib}/libauparse.so
6bfa6d
6bfa6d
find $RPM_BUILD_ROOT -name '*.la' -delete
6bfa6d
find $RPM_BUILD_ROOT/%{_libdir}/python?.?/site-packages -name '*.a' -delete
6bfa6d
6bfa6d
# Move the pkgconfig file
6bfa6d
mv $RPM_BUILD_ROOT/%{_lib}/pkgconfig $RPM_BUILD_ROOT%{_libdir}
6bfa6d
6bfa6d
# On platforms with 32 & 64 bit libs, we need to coordinate the timestamp
6bfa6d
touch -r ./audit.spec $RPM_BUILD_ROOT/etc/libaudit.conf
6bfa6d
touch -r ./audit.spec $RPM_BUILD_ROOT/usr/share/man/man5/libaudit.conf.5.gz
6bfa6d
6bfa6d
%check
6bfa6d
%ifnarch aarch64 ppc %{power64} s390 s390x %{ix86}
6bfa6d
make check
6bfa6d
%endif
6bfa6d
# Get rid of make files that they don't get packaged.
6bfa6d
rm -f rules/Makefile*
6bfa6d
6bfa6d
6bfa6d
%clean
6bfa6d
rm -rf $RPM_BUILD_ROOT
6bfa6d
6bfa6d
%post libs -p /sbin/ldconfig
6bfa6d
6bfa6d
%post
6bfa6d
# Copy default rules into place on new installation
6bfa6d
files=`ls /etc/audit/rules.d/ 2>/dev/null | wc -w`
6bfa6d
if [ "$files" -eq 0 ] ; then
6bfa6d
  if [ -e /usr/share/doc/audit-%{version}/rules/10-base-config.rules ] ; then
6bfa6d
    cp /usr/share/doc/audit-%{version}/rules/10-base-config.rules /etc/audit/rules.d/audit.rules
6bfa6d
  else
6bfa6d
    touch /etc/audit/rules.d/audit.rules
6bfa6d
  fi
6bfa6d
  chmod 0600 /etc/audit/rules.d/audit.rules
6bfa6d
fi
6bfa6d
%systemd_post auditd.service
6bfa6d
6bfa6d
%preun
6bfa6d
%systemd_preun auditd.service
6bfa6d
if [ $1 -eq 0 ]; then
6bfa6d
   /sbin/service auditd stop > /dev/null 2>&1
6bfa6d
fi
6bfa6d
6bfa6d
%postun libs -p /sbin/ldconfig
6bfa6d
6bfa6d
%postun
6bfa6d
if [ $1 -ge 1 ]; then
6bfa6d
   /sbin/service auditd condrestart > /dev/null 2>&1 || :
6bfa6d
fi
6bfa6d
6bfa6d
%files libs
6bfa6d
%defattr(-,root,root,-)
6bfa6d
/%{_lib}/libaudit.so.1*
6bfa6d
/%{_lib}/libauparse.*
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/libaudit.conf
6bfa6d
%{_mandir}/man5/libaudit.conf.5.gz
6bfa6d
6bfa6d
%files libs-devel
6bfa6d
%defattr(-,root,root,-)
6bfa6d
%doc contrib/skeleton.c contrib/plugin
6bfa6d
%{_libdir}/libaudit.so
6bfa6d
%{_libdir}/libauparse.so
6bfa6d
%{_includedir}/libaudit.h
6bfa6d
%{_includedir}/auparse.h
6bfa6d
%{_includedir}/auparse-defs.h
6bfa6d
%{_datadir}/aclocal/audit.m4
6bfa6d
%{_libdir}/pkgconfig/audit.pc
6bfa6d
%{_libdir}/pkgconfig/auparse.pc
6bfa6d
%{_mandir}/man3/*
6bfa6d
6bfa6d
%files libs-static
6bfa6d
%defattr(-,root,root,-)
6bfa6d
%{_libdir}/libaudit.a
6bfa6d
%{_libdir}/libauparse.a
6bfa6d
6bfa6d
%files libs-python
6bfa6d
%defattr(-,root,root,-)
6bfa6d
%attr(755,root,root) %{python_sitearch}/_audit.so
6bfa6d
%attr(755,root,root) %{python_sitearch}/auparse.so
6bfa6d
%{python_sitearch}/audit.py*
6bfa6d
6bfa6d
%files
6bfa6d
%defattr(-,root,root,-)
6bfa6d
%doc README COPYING ChangeLog rules init.d/auditd.cron
6bfa6d
%attr(644,root,root) %{_mandir}/man8/audispd.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/auditctl.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/auditd.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/aureport.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/ausearch.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/autrace.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/aulast.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/aulastlog.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/auvirt.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/augenrules.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/ausyscall.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man7/audit.rules.7.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man5/auditd.conf.5.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man5/audispd.conf.5.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man5/ausearch-expression.5.gz
6bfa6d
%attr(755,root,root) /sbin/auditctl
6bfa6d
%attr(755,root,root) /sbin/auditd
6bfa6d
%attr(755,root,root) /sbin/ausearch
6bfa6d
%attr(755,root,root) /sbin/aureport
6bfa6d
%attr(750,root,root) /sbin/autrace
6bfa6d
%attr(755,root,root) /sbin/audispd
6bfa6d
%attr(755,root,root) /sbin/augenrules
6bfa6d
%attr(755,root,root) %{_bindir}/aulast
6bfa6d
%attr(755,root,root) %{_bindir}/aulastlog
6bfa6d
%attr(755,root,root) %{_bindir}/ausyscall
6bfa6d
%attr(755,root,root) %{_bindir}/auvirt
6bfa6d
%attr(644,root,root) %{_unitdir}/auditd.service
6bfa6d
%attr(750,root,root) %dir %{_libexecdir}/initscripts/legacy-actions/auditd
6bfa6d
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/condrestart
6bfa6d
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/reload
6bfa6d
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/restart
6bfa6d
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/resume
6bfa6d
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/rotate
6bfa6d
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/state
6bfa6d
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/stop
6bfa6d
%ghost %{_localstatedir}/run/auditd.state
6bfa6d
%attr(-,root,-) %dir %{_var}/log/audit
6bfa6d
%attr(750,root,root) %dir /etc/audit
6bfa6d
%attr(750,root,root) %dir /etc/audit/rules.d
6bfa6d
%attr(750,root,root) %dir /etc/audisp
6bfa6d
%attr(750,root,root) %dir /etc/audisp/plugins.d
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audit/auditd.conf
6bfa6d
%ghost %config(noreplace) %attr(600,root,root) /etc/audit/rules.d/audit.rules
6bfa6d
%ghost %config(noreplace) %attr(640,root,root) /etc/audit/audit.rules
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audit/audit-stop.rules
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audisp/audispd.conf
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/af_unix.conf
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/syslog.conf
6bfa6d
6bfa6d
%files -n audispd-plugins
6bfa6d
%defattr(-,root,root,-)
6bfa6d
%attr(644,root,root) %{_mandir}/man8/audispd-zos-remote.8.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man5/zos-remote.conf.5.gz
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/audispd-zos-remote.conf
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audisp/zos-remote.conf
6bfa6d
%attr(750,root,root) /sbin/audispd-zos-remote
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audisp/audisp-remote.conf
6bfa6d
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/au-remote.conf
6bfa6d
%attr(750,root,root) /sbin/audisp-remote
6bfa6d
%attr(700,root,root) %dir %{_var}/spool/audit
6bfa6d
%attr(644,root,root) %{_mandir}/man5/audisp-remote.conf.5.gz
6bfa6d
%attr(644,root,root) %{_mandir}/man8/audisp-remote.8.gz
6bfa6d
6bfa6d
%changelog
6bfa6d
* Mon May 06 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-4
6bfa6d
resolves: #1696709 - updating auditd is enabling disabled service 
6bfa6d
6bfa6d
* Sun May 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-3
6bfa6d
resolves: #1705376 - aureport aborts when using a specific input
6bfa6d
6bfa6d
* Wed Mar 27 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-2
6bfa6d
resolves: #1651761 - Fix memory leak reported upstream
6bfa6d
6bfa6d
* Tue Mar 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-1
6bfa6d
resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
6bfa6d
resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
6bfa6d
resolves: #1614833 - audispd loops reloading config 
6bfa6d
resolves: #1622194 - audisp-remote memory leak when using krb5 
6bfa6d
resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
6bfa6d
resolves: #1628626 - aureport -a --failed does not display user_avc events 
6bfa6d
resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
6bfa6d
resolves: #1650670 - space left in auditd.conf expressed as a percentage 
6bfa6d
resolves: #1663285 - ausearch device/inode missing when using a single file 
6bfa6d
resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described
6bfa6d
6bfa6d
* Tue Jul 17 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-4
6bfa6d
resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
6bfa6d
6bfa6d
* Wed Jun 27 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-3
6bfa6d
resolves: #1587995 - auditd sometimes in failed state after boot
6bfa6d
6bfa6d
* Tue Jun 26 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-2
6bfa6d
resolves: #1559032 - Fix a segfault on shutdown
6bfa6d
6bfa6d
* Wed Jun 20 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-1
6bfa6d
resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
6bfa6d
resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
6bfa6d
resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
6bfa6d
resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
6bfa6d
resolves: #1511606 - aureport AVC report header is incomplete
6bfa6d
resolves: #1504251 - make auditd dump internal state for log writing status
6bfa6d
6bfa6d
* Tue Dec 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-3
6bfa6d
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
6bfa6d
6bfa6d
* Mon Nov 06 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-2
6bfa6d
resolves: #1508965 - Need to rebuild rpm to remove static relocations
6bfa6d
6bfa6d
* Thu Oct 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-1
6bfa6d
resolves: #982154 - Can't find the "avc" event with the auvirt command
6bfa6d
resolves: #1101605 - Ipv6 seems no working
6bfa6d
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
6bfa6d
resolves: #1455598 - Default port is wrong in audisp-remote.conf
6bfa6d
resolves: #1476406 - Audit package rebase
6bfa6d
6bfa6d
* Mon Sep 18 2017 Steve Grubb <sgrubb@redhat.com> 2.7.8-1
6bfa6d
resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
6bfa6d
resolves: #1448526 - aureport shows the wrong auid "-1"
6bfa6d
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
6bfa6d
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field
6bfa6d
6bfa6d
* Mon Jun 12 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-3
6bfa6d
resolves: #1460110 - aureport does not report all anomalies
6bfa6d
6bfa6d
* Fri May 26 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-2
6bfa6d
resolves: #1455594 - Bad configuration keyword for audispd-remote.conf
6bfa6d
6bfa6d
* Wed Apr 19 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-1
6bfa6d
resolves: #1443107 - disk full action and infinite loop in audit-remote
6bfa6d
6bfa6d
* Mon Apr 10 2017 Steve Grubb <sgrubb@redhat.com> 2.7.5-1
6bfa6d
resolves: #1437187 - audit rpm postinstall script points to non-existing file
6bfa6d
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
6bfa6d
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
6bfa6d
resolves: #1438997 - SECCOMP records have wrong syscall
6bfa6d
6bfa6d
* Tue Mar 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.4-1
6bfa6d
resolves: #1367703 - auvirt wasn't supporting date keywords
6bfa6d
resolves: #1396792 - augenrules includes files ending in regexp "rules"
6bfa6d
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character
6bfa6d
6bfa6d
* Tue Feb 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.3-1
6bfa6d
resolves: #1381601 - audit package update
6bfa6d
resolves: #1382381 - typo in package description
6bfa6d
6bfa6d
* Fri Jan 20 2017 Steve Grubb <sgrubb@redhat.com> 2.6.5-4
6bfa6d
resolves: #1382397 - write_logs option is not correctly handled
6bfa6d
resolves: #1414812 - Setting log_format to NOLOG make auditd core dump
6bfa6d
6bfa6d
* Wed Aug 10 2016 Steve Grubb <sgrubb@redhat.com> 2.6.5-3
6bfa6d
resolves: #1296204 - Rebase audit package
6bfa6d
6bfa6d
* Wed Jan 14 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-5
6bfa6d
resolves: #1180675 - rules with "-F arch=ppc64le" fail to load
6bfa6d
6bfa6d
* Tue Jan 13 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-4
6bfa6d
- Remove golang bindings added under the following bz
6bfa6d
resolves: #1115196 - Add golang bindings for libaudit
6bfa6d
6bfa6d
* Wed Dec 17 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-2
6bfa6d
resolves: #1173160 - Audit package needs update for new VPN crypto events
6bfa6d
6bfa6d
* Tue Oct 28 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-1
6bfa6d
resolves: #963353 - aarch64 userspace auditing needs to be written
6bfa6d
resolves: #1150202 - perf trace sleep 1 does not list any syscall information
6bfa6d
resolves: #1142989 - Update audit package to 2.4.1
6bfa6d
resolves: #1155221 - adjust fstatat naming to match kernel uapi
6bfa6d
6bfa6d
* Thu Sep 18 2014 Steve Grubb <sgrubb@redhat.com> 2.4-1
6bfa6d
resolves: #1115196 - Add golang bindings for libaudit
6bfa6d
resolves: #1105150 - audispd config file parser fails on long input
6bfa6d
resolves: #1104973 - auparse truncating selinux context after first category
6bfa6d
resolves: #1088593 - auditctl man page examples use deprecated syscalls
6bfa6d
resolves: #1087849 - support for setting loginuid immutable
6bfa6d
resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
6bfa6d
resolves: #975796  - confusing aulast records for bad logins
6bfa6d
6bfa6d
* Tue Mar 18 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-4
6bfa6d
resolves: #1077249 - Audit update, various issues
6bfa6d
6bfa6d
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2.3.3-3
6bfa6d
- Mass rebuild 2014-01-24
6bfa6d
6bfa6d
* Mon Jan 20 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-2
6bfa6d
- New upstream bugfix/enhancement release
6bfa6d
resolves: #1053804 - ausearch issues found by ausearch-test
6bfa6d
resolves: #1030409 - ausearch help typo for "-x" option
6bfa6d
6bfa6d
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2.3.2-4
6bfa6d
- Mass rebuild 2013-12-27
6bfa6d
6bfa6d
* Thu Oct 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-3
6bfa6d
resolves: #828495 - semanage port should generate an audit event
6bfa6d
6bfa6d
* Thu Aug 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-2
6bfa6d
resolves: #991056 - ausearch ignores USER events with -ua option
6bfa6d
6bfa6d
* Mon Jul 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-1
6bfa6d
- New upstream bugfix/enhancement release
6bfa6d
resolves: #982112 Add delay between stopping and starting auditd
6bfa6d
6bfa6d
* Wed Jul 10 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-4
6bfa6d
resolves: #982112 Add delay between stopping and starting auditd
6bfa6d
6bfa6d
* Wed Jul 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-3
6bfa6d
- Remove prelude support
6bfa6d
6bfa6d
* Fri May 31 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-2
6bfa6d
- Fix unknown lvalue in auditd.service (#969345)
6bfa6d
6bfa6d
* Thu May 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-1
6bfa6d
- New upstream bugfix/enhancement release
6bfa6d
6bfa6d
* Fri May 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3-2
6bfa6d
- If no rules exist, copy shipped rules into place
6bfa6d
6bfa6d
* Tue Apr 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3-1
6bfa6d
- New upstream bugfix release
6bfa6d
6bfa6d
* Thu Mar 21 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-2
6bfa6d
- Fix clone syscall interpretation
6bfa6d
6bfa6d
* Tue Mar 19 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-1
6bfa6d
- New upstream bugfix release
6bfa6d
6bfa6d
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-5
6bfa6d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
6bfa6d
6bfa6d
* Wed Jan 16 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-4
6bfa6d
- Don't make auditd.service file executable (#896113)
6bfa6d
6bfa6d
* Fri Jan 11 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-3
6bfa6d
- Do not own /usr/lib64/audit
6bfa6d
6bfa6d
* Wed Dec 12 2012 Steve Grubb <sgrubb@redhat.com> 2.2.2-2
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.1-2
6bfa6d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
6bfa6d
6bfa6d
* Fri Mar 23 2012 Steve Grubb <sgrubb@redhat.com> 2.2.1-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Thu Mar 1 2012 Steve Grubb <sgrubb@redhat.com> 2.2-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.3-5
6bfa6d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
6bfa6d
6bfa6d
* Thu Sep 15 2011 Adam Williamson <awilliam@redhat.com> 2.1.3-4
6bfa6d
- add in some systemd scriptlets that were missed, including one which
6bfa6d
  will cause auditd to be enabled on upgrade from pre-systemd builds
6bfa6d
6bfa6d
* Wed Sep 14 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-3
6bfa6d
- Enable by default (#737060)
6bfa6d
6bfa6d
* Tue Aug 30 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-2
6bfa6d
- Correct misplaced ifnarch (#734359)
6bfa6d
6bfa6d
* Mon Aug 15 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Tue Jul 26 2011 Jóhann B. Guðmundsson <johannbg@gmail.com> - 2.1.2-2
6bfa6d
- Introduce systemd unit file, drop SysV support
6bfa6d
6bfa6d
* Sat Jun 11 2011 Steve Grubb <sgrubb@redhat.com> 2.1.2-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Wed Apr 20 2011 Steve Grubb <sgrubb@redhat.com> 2.1.1-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Tue Mar 29 2011 Steve Grubb <sgrubb@redhat.com> 2.1-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.6-2
6bfa6d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
6bfa6d
6bfa6d
* Fri Feb 04 2011 Steve Grubb <sgrubb@redhat.com> 2.0.6-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Thu Jan 20 2011 Karsten Hopp <karsten@redhat.com> 2.0.5-2
6bfa6d
- bump and rebuild as 2.0.5-1 was erroneously linked with python-2.6 on ppc
6bfa6d
6bfa6d
* Tue Nov 02 2010 Steve Grubb <sgrubb@redhat.com> 2.0.5-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Wed Jul 21 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.4-4
6bfa6d
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
6bfa6d
6bfa6d
* Tue Feb 16 2010 Adam Jackson <ajax@redhat.com> 2.0.4-3
6bfa6d
- audit-2.0.4-add-needed.patch: Fix FTBFS for --no-add-needed
6bfa6d
6bfa6d
* Fri Jan 29 2010 Steve Grubb <sgrubb@redhat.com> 2.0.4-2
6bfa6d
- Split out static libs (#556039)
6bfa6d
6bfa6d
* Tue Dec 08 2009 Steve Grubb <sgrubb@redhat.com> 2.0.4-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Sat Oct 17 2009 Steve Grubb <sgrubb@redhat.com> 2.0.3-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Fri Oct 16 2009 Steve Grubb <sgrubb@redhat.com> 2.0.2-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Mon Sep 28 2009 Steve Grubb <sgrubb@redhat.com> 2.0.1-1
6bfa6d
- New upstream release
6bfa6d
6bfa6d
* Fri Aug 21 2009 Steve Grubb <sgrubb@redhat.com> 2.0-3
6bfa6d
- New upstream release