2ab8f4
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
2ab8f4
2ab8f4
Summary: User space tools for 2.6 kernel auditing
2ab8f4
Name: audit
947d92
Version: 2.8.5
63f0f9
Release: 4%{?dist}
2ab8f4
License: GPLv2+
2ab8f4
Group: System Environment/Daemons
2ab8f4
URL: http://people.redhat.com/sgrubb/audit/
2ab8f4
Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
a1e6a3
# This patch switches collecting nametype for objtype because RHEL is different
a1e6a3
Patch1: audit-2.7.1-rhel7-fixup.patch
a1e6a3
# DO NOT REMOVE - backlog_wait_time is not in RHEL 7 kernel
a1e6a3
Patch2: audit-2.7.5-no-backlog-wait-time.patch
947d92
Patch3: audit-2.8.6-memleak.patch
947d92
Patch4: audit-3.0-avc.patch
947d92
Patch5: audit-3.0-cond-restart.patch
2ab8f4
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
c672a9
BuildRequires: openldap-devel
c672a9
BuildRequires: swig
c672a9
BuildRequires: python-devel
2ab8f4
BuildRequires: tcp_wrappers-devel krb5-devel libcap-ng-devel
2ab8f4
BuildRequires: kernel-headers >= 2.6.29
c672a9
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
2ab8f4
BuildRequires: systemd-units
2ab8f4
Requires(post): systemd-units systemd-sysv chkconfig coreutils
2ab8f4
Requires(preun): systemd-units
2ab8f4
Requires(postun): systemd-units coreutils
2ab8f4
2ab8f4
%description
2ab8f4
The audit package contains the user space utilities for
a1e6a3
storing and searching the audit records generated by
7bdd34
the audit subsystem in the Linux 2.6 and later kernels.
2ab8f4
2ab8f4
%package libs
2ab8f4
Summary: Dynamic library for libaudit
2ab8f4
License: LGPLv2+
2ab8f4
Group: Development/Libraries
2ab8f4
2ab8f4
%description libs
2ab8f4
The audit-libs package contains the dynamic libraries needed for 
2ab8f4
applications to use the audit framework.
2ab8f4
2ab8f4
%package libs-devel
2ab8f4
Summary: Header files for libaudit
2ab8f4
License: LGPLv2+
2ab8f4
Group: Development/Libraries
c672a9
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
2ab8f4
Requires: kernel-headers >= 2.6.29
2ab8f4
2ab8f4
%description libs-devel
2ab8f4
The audit-libs-devel package contains the header files needed for
2ab8f4
developing applications that need to use the audit framework libraries.
2ab8f4
2ab8f4
%package libs-static
2ab8f4
Summary: Static version of libaudit library
2ab8f4
License: LGPLv2+
2ab8f4
Group: Development/Libraries
2ab8f4
Requires: kernel-headers >= 2.6.29
2ab8f4
2ab8f4
%description libs-static
2ab8f4
The audit-libs-static package contains the static libraries
2ab8f4
needed for developing applications that need to use static audit
2ab8f4
framework libraries
2ab8f4
2ab8f4
%package libs-python
2ab8f4
Summary: Python bindings for libaudit
2ab8f4
License: LGPLv2+
2ab8f4
Group: Development/Libraries
c672a9
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
2ab8f4
2ab8f4
%description libs-python
2ab8f4
The audit-libs-python package contains the bindings so that libaudit
2ab8f4
and libauparse can be used by python.
2ab8f4
2ab8f4
%package -n audispd-plugins
2ab8f4
Summary: Plugins for the audit event dispatcher
2ab8f4
License: GPLv2+
2ab8f4
Group: System Environment/Daemons
2ab8f4
Requires: %{name} = %{version}-%{release}
c672a9
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
2ab8f4
Requires: openldap
2ab8f4
2ab8f4
%description -n audispd-plugins
2ab8f4
The audispd-plugins package provides plugins for the real-time
2ab8f4
interface to the audit system, audispd. These plugins can do things
7bdd34
like relay events to remote machines.
2ab8f4
2ab8f4
%prep
2ab8f4
%setup -q
2ab8f4
%patch1 -p1
ade036
%patch2 -p1
ade036
%patch3 -p1
c672a9
%patch4 -p1
7bdd34
%patch5 -p1
2ab8f4
2ab8f4
%build
7bdd34
%configure --sbindir=/sbin --libdir=/%{_lib} --with-python=yes \
7bdd34
	--with-libwrap --enable-gssapi-krb5=yes \
7bdd34
	--with-libcap-ng=yes --with-arm --with-aarch64 \
7bdd34
	--enable-zos-remote --without-golang --enable-systemd
2ab8f4
c672a9
make CFLAGS="%{optflags}" %{?_smp_mflags}
2ab8f4
2ab8f4
%install
2ab8f4
rm -rf $RPM_BUILD_ROOT
c672a9
mkdir -p $RPM_BUILD_ROOT/{sbin,etc/audispd/plugins.d,etc/audit/rules.d}
2ab8f4
mkdir -p $RPM_BUILD_ROOT/%{_mandir}/{man5,man8}
2ab8f4
mkdir -p $RPM_BUILD_ROOT/%{_lib}
2ab8f4
mkdir -p $RPM_BUILD_ROOT/%{_libdir}/audit
c672a9
mkdir -p --mode=0700 $RPM_BUILD_ROOT/%{_var}/log/audit
2ab8f4
mkdir -p $RPM_BUILD_ROOT/%{_var}/spool/audit
2ab8f4
make DESTDIR=$RPM_BUILD_ROOT install
2ab8f4
2ab8f4
mkdir -p $RPM_BUILD_ROOT/%{_libdir}
2ab8f4
# This winds up in the wrong place when libtool is involved
2ab8f4
mv $RPM_BUILD_ROOT/%{_lib}/libaudit.a $RPM_BUILD_ROOT%{_libdir}
2ab8f4
mv $RPM_BUILD_ROOT/%{_lib}/libauparse.a $RPM_BUILD_ROOT%{_libdir}
2ab8f4
curdir=`pwd`
2ab8f4
cd $RPM_BUILD_ROOT/%{_libdir}
2ab8f4
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libaudit.so.1.*.*\``
2ab8f4
ln -s ../../%{_lib}/$LIBNAME libaudit.so
2ab8f4
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libauparse.so.0.*.*\``
2ab8f4
ln -s ../../%{_lib}/$LIBNAME libauparse.so
2ab8f4
cd $curdir
2ab8f4
# Remove these items so they don't get picked up.
2ab8f4
rm -f $RPM_BUILD_ROOT/%{_lib}/libaudit.so
2ab8f4
rm -f $RPM_BUILD_ROOT/%{_lib}/libauparse.so
c672a9
c672a9
find $RPM_BUILD_ROOT -name '*.la' -delete
c672a9
find $RPM_BUILD_ROOT/%{_libdir}/python?.?/site-packages -name '*.a' -delete
2ab8f4
70a102
# Move the pkgconfig file
70a102
mv $RPM_BUILD_ROOT/%{_lib}/pkgconfig $RPM_BUILD_ROOT%{_libdir}
70a102
2ab8f4
# On platforms with 32 & 64 bit libs, we need to coordinate the timestamp
2ab8f4
touch -r ./audit.spec $RPM_BUILD_ROOT/etc/libaudit.conf
2ab8f4
touch -r ./audit.spec $RPM_BUILD_ROOT/usr/share/man/man5/libaudit.conf.5.gz
2ab8f4
2ab8f4
%check
c672a9
%ifnarch aarch64 ppc %{power64} s390 s390x %{ix86}
2ab8f4
make check
2ab8f4
%endif
c672a9
# Get rid of make files that they don't get packaged.
c672a9
rm -f rules/Makefile*
c672a9
2ab8f4
2ab8f4
%clean
2ab8f4
rm -rf $RPM_BUILD_ROOT
2ab8f4
2ab8f4
%post libs -p /sbin/ldconfig
2ab8f4
2ab8f4
%post
2ab8f4
# Copy default rules into place on new installation
c672a9
files=`ls /etc/audit/rules.d/ 2>/dev/null | wc -w`
c672a9
if [ "$files" -eq 0 ] ; then
a1e6a3
  if [ -e /usr/share/doc/audit-%{version}/rules/10-base-config.rules ] ; then
a1e6a3
    cp /usr/share/doc/audit-%{version}/rules/10-base-config.rules /etc/audit/rules.d/audit.rules
a1e6a3
  else
a1e6a3
    touch /etc/audit/rules.d/audit.rules
a1e6a3
  fi
a1e6a3
  chmod 0600 /etc/audit/rules.d/audit.rules
2ab8f4
fi
2ab8f4
%systemd_post auditd.service
2ab8f4
2ab8f4
%preun
2ab8f4
%systemd_preun auditd.service
947d92
if [ $1 -eq 0 ]; then
947d92
   /sbin/service auditd stop > /dev/null 2>&1
947d92
fi
2ab8f4
2ab8f4
%postun libs -p /sbin/ldconfig
2ab8f4
2ab8f4
%postun
2ab8f4
if [ $1 -ge 1 ]; then
2ab8f4
   /sbin/service auditd condrestart > /dev/null 2>&1 || :
2ab8f4
fi
2ab8f4
2ab8f4
%files libs
2ab8f4
%defattr(-,root,root,-)
70a102
/%{_lib}/libaudit.so.1*
70a102
/%{_lib}/libauparse.*
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/libaudit.conf
2ab8f4
%{_mandir}/man5/libaudit.conf.5.gz
2ab8f4
2ab8f4
%files libs-devel
2ab8f4
%defattr(-,root,root,-)
2ab8f4
%doc contrib/skeleton.c contrib/plugin
2ab8f4
%{_libdir}/libaudit.so
2ab8f4
%{_libdir}/libauparse.so
2ab8f4
%{_includedir}/libaudit.h
2ab8f4
%{_includedir}/auparse.h
2ab8f4
%{_includedir}/auparse-defs.h
c672a9
%{_datadir}/aclocal/audit.m4
70a102
%{_libdir}/pkgconfig/audit.pc
c672a9
%{_libdir}/pkgconfig/auparse.pc
2ab8f4
%{_mandir}/man3/*
2ab8f4
2ab8f4
%files libs-static
2ab8f4
%defattr(-,root,root,-)
2ab8f4
%{_libdir}/libaudit.a
2ab8f4
%{_libdir}/libauparse.a
2ab8f4
2ab8f4
%files libs-python
2ab8f4
%defattr(-,root,root,-)
2ab8f4
%attr(755,root,root) %{python_sitearch}/_audit.so
2ab8f4
%attr(755,root,root) %{python_sitearch}/auparse.so
2ab8f4
%{python_sitearch}/audit.py*
2ab8f4
2ab8f4
%files
2ab8f4
%defattr(-,root,root,-)
c672a9
%doc README COPYING ChangeLog rules init.d/auditd.cron
2ab8f4
%attr(644,root,root) %{_mandir}/man8/audispd.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/auditctl.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/auditd.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/aureport.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/ausearch.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/autrace.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/aulast.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/aulastlog.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/auvirt.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/augenrules.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/ausyscall.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man7/audit.rules.7.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man5/auditd.conf.5.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man5/audispd.conf.5.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man5/ausearch-expression.5.gz
c672a9
%attr(755,root,root) /sbin/auditctl
c672a9
%attr(755,root,root) /sbin/auditd
2ab8f4
%attr(755,root,root) /sbin/ausearch
2ab8f4
%attr(755,root,root) /sbin/aureport
2ab8f4
%attr(750,root,root) /sbin/autrace
7bdd34
%attr(755,root,root) /sbin/audispd
7bdd34
%attr(755,root,root) /sbin/augenrules
2ab8f4
%attr(755,root,root) %{_bindir}/aulast
2ab8f4
%attr(755,root,root) %{_bindir}/aulastlog
2ab8f4
%attr(755,root,root) %{_bindir}/ausyscall
2ab8f4
%attr(755,root,root) %{_bindir}/auvirt
c672a9
%attr(644,root,root) %{_unitdir}/auditd.service
2ab8f4
%attr(750,root,root) %dir %{_libexecdir}/initscripts/legacy-actions/auditd
63f0f9
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/condrestart
63f0f9
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/reload
63f0f9
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/restart
2ab8f4
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/resume
2ab8f4
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/rotate
63f0f9
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/state
2ab8f4
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/stop
63f0f9
%ghost %{_localstatedir}/run/auditd.state
c672a9
%attr(-,root,-) %dir %{_var}/log/audit
2ab8f4
%attr(750,root,root) %dir /etc/audit
2ab8f4
%attr(750,root,root) %dir /etc/audit/rules.d
2ab8f4
%attr(750,root,root) %dir /etc/audisp
2ab8f4
%attr(750,root,root) %dir /etc/audisp/plugins.d
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audit/auditd.conf
63f0f9
%ghost %config(noreplace) %attr(600,root,root) /etc/audit/rules.d/audit.rules
c672a9
%ghost %config(noreplace) %attr(640,root,root) /etc/audit/audit.rules
c672a9
%config(noreplace) %attr(640,root,root) /etc/audit/audit-stop.rules
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audisp/audispd.conf
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/af_unix.conf
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/syslog.conf
2ab8f4
2ab8f4
%files -n audispd-plugins
2ab8f4
%defattr(-,root,root,-)
2ab8f4
%attr(644,root,root) %{_mandir}/man8/audispd-zos-remote.8.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man5/zos-remote.conf.5.gz
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/audispd-zos-remote.conf
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audisp/zos-remote.conf
2ab8f4
%attr(750,root,root) /sbin/audispd-zos-remote
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audisp/audisp-remote.conf
2ab8f4
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/au-remote.conf
2ab8f4
%attr(750,root,root) /sbin/audisp-remote
2ab8f4
%attr(700,root,root) %dir %{_var}/spool/audit
2ab8f4
%attr(644,root,root) %{_mandir}/man5/audisp-remote.conf.5.gz
2ab8f4
%attr(644,root,root) %{_mandir}/man8/audisp-remote.8.gz
2ab8f4
2ab8f4
%changelog
947d92
* Mon May 06 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-4
947d92
resolves: #1696709 - updating auditd is enabling disabled service 
947d92
947d92
* Sun May 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-3
947d92
resolves: #1705376 - aureport aborts when using a specific input
947d92
947d92
* Wed Mar 27 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-2
947d92
resolves: #1651761 - Fix memory leak reported upstream
947d92
947d92
* Tue Mar 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-1
947d92
resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
947d92
resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
947d92
resolves: #1614833 - audispd loops reloading config 
947d92
resolves: #1622194 - audisp-remote memory leak when using krb5 
947d92
resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
947d92
resolves: #1628626 - aureport -a --failed does not display user_avc events 
947d92
resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
947d92
resolves: #1650670 - space left in auditd.conf expressed as a percentage 
947d92
resolves: #1663285 - ausearch device/inode missing when using a single file 
947d92
resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described
947d92
63f0f9
* Tue Jul 17 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-4
63f0f9
resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
63f0f9
63f0f9
* Wed Jun 27 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-3
63f0f9
resolves: #1587995 - auditd sometimes in failed state after boot
63f0f9
63f0f9
* Tue Jun 26 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-2
63f0f9
resolves: #1559032 - Fix a segfault on shutdown
63f0f9
63f0f9
* Wed Jun 20 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-1
63f0f9
resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
63f0f9
resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
63f0f9
resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
63f0f9
resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
63f0f9
resolves: #1511606 - aureport AVC report header is incomplete
63f0f9
resolves: #1504251 - make auditd dump internal state for log writing status
5faf2a
7bdd34
* Tue Dec 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-3
7bdd34
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
7bdd34
7bdd34
* Mon Nov 06 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-2
7bdd34
resolves: #1508965 - Need to rebuild rpm to remove static relocations
7bdd34
7bdd34
* Thu Oct 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-1
7bdd34
resolves: #982154 - Can't find the "avc" event with the auvirt command
7bdd34
resolves: #1101605 - Ipv6 seems no working
7bdd34
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
7bdd34
resolves: #1455598 - Default port is wrong in audisp-remote.conf
7bdd34
resolves: #1476406 - Audit package rebase
7bdd34
7bdd34
* Mon Sep 18 2017 Steve Grubb <sgrubb@redhat.com> 2.7.8-1
7bdd34
resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
7bdd34
resolves: #1448526 - aureport shows the wrong auid "-1"
7bdd34
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
7bdd34
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field
7bdd34
a1e6a3
* Mon Jun 12 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-3
a1e6a3
resolves: #1460110 - aureport does not report all anomalies
a1e6a3
a1e6a3
* Fri May 26 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-2
a1e6a3
resolves: #1455594 - Bad configuration keyword for audispd-remote.conf
a1e6a3
a1e6a3
* Wed Apr 19 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-1
a1e6a3
resolves: #1443107 - disk full action and infinite loop in audit-remote
a1e6a3
a1e6a3
* Mon Apr 10 2017 Steve Grubb <sgrubb@redhat.com> 2.7.5-1
a1e6a3
resolves: #1437187 - audit rpm postinstall script points to non-existing file
a1e6a3
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
a1e6a3
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
a1e6a3
resolves: #1438997 - SECCOMP records have wrong syscall
a1e6a3
a1e6a3
* Tue Mar 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.4-1
a1e6a3
resolves: #1367703 - auvirt wasn't supporting date keywords
a1e6a3
resolves: #1396792 - augenrules includes files ending in regexp "rules"
a1e6a3
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character
a1e6a3
a1e6a3
* Tue Feb 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.3-1
a1e6a3
resolves: #1381601 - audit package update
a1e6a3
resolves: #1382381 - typo in package description
a1e6a3
a1e6a3
* Fri Jan 20 2017 Steve Grubb <sgrubb@redhat.com> 2.6.5-4
a1e6a3
resolves: #1382397 - write_logs option is not correctly handled
a1e6a3
resolves: #1414812 - Setting log_format to NOLOG make auditd core dump
61865e
c672a9
* Wed Aug 10 2016 Steve Grubb <sgrubb@redhat.com> 2.6.5-3
c672a9
resolves: #1296204 - Rebase audit package
c672a9
70a102
* Wed Jan 14 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-5
70a102
resolves: #1180675 - rules with "-F arch=ppc64le" fail to load
70a102
70a102
* Tue Jan 13 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-4
70a102
- Remove golang bindings added under the following bz
70a102
resolves: #1115196 - Add golang bindings for libaudit
70a102
70a102
* Wed Dec 17 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-2
70a102
resolves: #1173160 - Audit package needs update for new VPN crypto events
70a102
70a102
* Tue Oct 28 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-1
70a102
resolves: #963353 - aarch64 userspace auditing needs to be written
70a102
resolves: #1150202 - perf trace sleep 1 does not list any syscall information
70a102
resolves: #1142989 - Update audit package to 2.4.1
70a102
resolves: #1155221 - adjust fstatat naming to match kernel uapi
70a102
70a102
* Thu Sep 18 2014 Steve Grubb <sgrubb@redhat.com> 2.4-1
70a102
resolves: #1115196 - Add golang bindings for libaudit
70a102
resolves: #1105150 - audispd config file parser fails on long input
70a102
resolves: #1104973 - auparse truncating selinux context after first category
70a102
resolves: #1088593 - auditctl man page examples use deprecated syscalls
70a102
resolves: #1087849 - support for setting loginuid immutable
70a102
resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
70a102
resolves: #975796  - confusing aulast records for bad logins
70a102
70a102
* Tue Mar 18 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-4
ade036
resolves: #1077249 - Audit update, various issues
ade036
ade036
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2.3.3-3
ade036
- Mass rebuild 2014-01-24
ade036
ade036
* Mon Jan 20 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-2
ade036
- New upstream bugfix/enhancement release
ade036
resolves: #1053804 - ausearch issues found by ausearch-test
ade036
resolves: #1030409 - ausearch help typo for "-x" option
ade036
ade036
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2.3.2-4
ade036
- Mass rebuild 2013-12-27
ade036
2ab8f4
* Thu Oct 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-3
2ab8f4
resolves: #828495 - semanage port should generate an audit event
2ab8f4
2ab8f4
* Thu Aug 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-2
2ab8f4
resolves: #991056 - ausearch ignores USER events with -ua option
2ab8f4
2ab8f4
* Mon Jul 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-1
2ab8f4
- New upstream bugfix/enhancement release
2ab8f4
resolves: #982112 Add delay between stopping and starting auditd
2ab8f4
2ab8f4
* Wed Jul 10 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-4
2ab8f4
resolves: #982112 Add delay between stopping and starting auditd
2ab8f4
2ab8f4
* Wed Jul 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-3
2ab8f4
- Remove prelude support
2ab8f4
2ab8f4
* Fri May 31 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-2
2ab8f4
- Fix unknown lvalue in auditd.service (#969345)
2ab8f4
2ab8f4
* Thu May 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-1
2ab8f4
- New upstream bugfix/enhancement release
2ab8f4
2ab8f4
* Fri May 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3-2
2ab8f4
- If no rules exist, copy shipped rules into place
2ab8f4
2ab8f4
* Tue Apr 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3-1
2ab8f4
- New upstream bugfix release
2ab8f4
2ab8f4
* Thu Mar 21 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-2
2ab8f4
- Fix clone syscall interpretation
2ab8f4
2ab8f4
* Tue Mar 19 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-1
2ab8f4
- New upstream bugfix release
2ab8f4
2ab8f4
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-5
2ab8f4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
2ab8f4
2ab8f4
* Wed Jan 16 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-4
2ab8f4
- Don't make auditd.service file executable (#896113)
2ab8f4
2ab8f4
* Fri Jan 11 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-3
2ab8f4
- Do not own /usr/lib64/audit
2ab8f4
2ab8f4
* Wed Dec 12 2012 Steve Grubb <sgrubb@redhat.com> 2.2.2-2
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.1-2
2ab8f4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2ab8f4
2ab8f4
* Fri Mar 23 2012 Steve Grubb <sgrubb@redhat.com> 2.2.1-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Thu Mar 1 2012 Steve Grubb <sgrubb@redhat.com> 2.2-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.3-5
2ab8f4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
2ab8f4
2ab8f4
* Thu Sep 15 2011 Adam Williamson <awilliam@redhat.com> 2.1.3-4
2ab8f4
- add in some systemd scriptlets that were missed, including one which
2ab8f4
  will cause auditd to be enabled on upgrade from pre-systemd builds
2ab8f4
2ab8f4
* Wed Sep 14 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-3
2ab8f4
- Enable by default (#737060)
2ab8f4
2ab8f4
* Tue Aug 30 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-2
2ab8f4
- Correct misplaced ifnarch (#734359)
2ab8f4
2ab8f4
* Mon Aug 15 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Tue Jul 26 2011 Jóhann B. Guðmundsson <johannbg@gmail.com> - 2.1.2-2
2ab8f4
- Introduce systemd unit file, drop SysV support
2ab8f4
2ab8f4
* Sat Jun 11 2011 Steve Grubb <sgrubb@redhat.com> 2.1.2-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Wed Apr 20 2011 Steve Grubb <sgrubb@redhat.com> 2.1.1-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Tue Mar 29 2011 Steve Grubb <sgrubb@redhat.com> 2.1-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.6-2
2ab8f4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2ab8f4
2ab8f4
* Fri Feb 04 2011 Steve Grubb <sgrubb@redhat.com> 2.0.6-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Thu Jan 20 2011 Karsten Hopp <karsten@redhat.com> 2.0.5-2
2ab8f4
- bump and rebuild as 2.0.5-1 was erroneously linked with python-2.6 on ppc
2ab8f4
2ab8f4
* Tue Nov 02 2010 Steve Grubb <sgrubb@redhat.com> 2.0.5-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Wed Jul 21 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.4-4
2ab8f4
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
2ab8f4
2ab8f4
* Tue Feb 16 2010 Adam Jackson <ajax@redhat.com> 2.0.4-3
2ab8f4
- audit-2.0.4-add-needed.patch: Fix FTBFS for --no-add-needed
2ab8f4
2ab8f4
* Fri Jan 29 2010 Steve Grubb <sgrubb@redhat.com> 2.0.4-2
2ab8f4
- Split out static libs (#556039)
2ab8f4
2ab8f4
* Tue Dec 08 2009 Steve Grubb <sgrubb@redhat.com> 2.0.4-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Sat Oct 17 2009 Steve Grubb <sgrubb@redhat.com> 2.0.3-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Fri Oct 16 2009 Steve Grubb <sgrubb@redhat.com> 2.0.2-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Mon Sep 28 2009 Steve Grubb <sgrubb@redhat.com> 2.0.1-1
2ab8f4
- New upstream release
2ab8f4
2ab8f4
* Fri Aug 21 2009 Steve Grubb <sgrubb@redhat.com> 2.0-3
2ab8f4
- New upstream release