Blame SPECS/audit.spec

5c966f
%{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
5c966f
5c966f
Summary: User space tools for 2.6 kernel auditing
5c966f
Name: audit
5c966f
Version: 2.8.5
5c966f
Release: 4%{?dist}
5c966f
License: GPLv2+
5c966f
Group: System Environment/Daemons
5c966f
URL: http://people.redhat.com/sgrubb/audit/
5c966f
Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
5c966f
# This patch switches collecting nametype for objtype because RHEL is different
5c966f
Patch1: audit-2.7.1-rhel7-fixup.patch
5c966f
# DO NOT REMOVE - backlog_wait_time is not in RHEL 7 kernel
5c966f
Patch2: audit-2.7.5-no-backlog-wait-time.patch
5c966f
Patch3: audit-2.8.6-memleak.patch
5c966f
Patch4: audit-3.0-avc.patch
5c966f
Patch5: audit-3.0-cond-restart.patch
5c966f
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
5c966f
BuildRequires: openldap-devel
5c966f
BuildRequires: swig
5c966f
BuildRequires: python-devel
5c966f
BuildRequires: tcp_wrappers-devel krb5-devel libcap-ng-devel
5c966f
BuildRequires: kernel-headers >= 2.6.29
5c966f
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
5c966f
BuildRequires: systemd-units
5c966f
Requires(post): systemd-units systemd-sysv chkconfig coreutils
5c966f
Requires(preun): systemd-units
5c966f
Requires(postun): systemd-units coreutils
5c966f
5c966f
%description
5c966f
The audit package contains the user space utilities for
5c966f
storing and searching the audit records generated by
5c966f
the audit subsystem in the Linux 2.6 and later kernels.
5c966f
5c966f
%package libs
5c966f
Summary: Dynamic library for libaudit
5c966f
License: LGPLv2+
5c966f
Group: Development/Libraries
5c966f
5c966f
%description libs
5c966f
The audit-libs package contains the dynamic libraries needed for 
5c966f
applications to use the audit framework.
5c966f
5c966f
%package libs-devel
5c966f
Summary: Header files for libaudit
5c966f
License: LGPLv2+
5c966f
Group: Development/Libraries
5c966f
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
5c966f
Requires: kernel-headers >= 2.6.29
5c966f
5c966f
%description libs-devel
5c966f
The audit-libs-devel package contains the header files needed for
5c966f
developing applications that need to use the audit framework libraries.
5c966f
5c966f
%package libs-static
5c966f
Summary: Static version of libaudit library
5c966f
License: LGPLv2+
5c966f
Group: Development/Libraries
5c966f
Requires: kernel-headers >= 2.6.29
5c966f
5c966f
%description libs-static
5c966f
The audit-libs-static package contains the static libraries
5c966f
needed for developing applications that need to use static audit
5c966f
framework libraries
5c966f
5c966f
%package libs-python
5c966f
Summary: Python bindings for libaudit
5c966f
License: LGPLv2+
5c966f
Group: Development/Libraries
5c966f
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
5c966f
5c966f
%description libs-python
5c966f
The audit-libs-python package contains the bindings so that libaudit
5c966f
and libauparse can be used by python.
5c966f
5c966f
%package -n audispd-plugins
5c966f
Summary: Plugins for the audit event dispatcher
5c966f
License: GPLv2+
5c966f
Group: System Environment/Daemons
5c966f
Requires: %{name} = %{version}-%{release}
5c966f
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
5c966f
Requires: openldap
5c966f
5c966f
%description -n audispd-plugins
5c966f
The audispd-plugins package provides plugins for the real-time
5c966f
interface to the audit system, audispd. These plugins can do things
5c966f
like relay events to remote machines.
5c966f
5c966f
%prep
5c966f
%setup -q
5c966f
%patch1 -p1
5c966f
%patch2 -p1
5c966f
%patch3 -p1
5c966f
%patch4 -p1
5c966f
%patch5 -p1
5c966f
5c966f
%build
5c966f
%configure --sbindir=/sbin --libdir=/%{_lib} --with-python=yes \
5c966f
	--with-libwrap --enable-gssapi-krb5=yes \
5c966f
	--with-libcap-ng=yes --with-arm --with-aarch64 \
5c966f
	--enable-zos-remote --without-golang --enable-systemd
5c966f
5c966f
make CFLAGS="%{optflags}" %{?_smp_mflags}
5c966f
5c966f
%install
5c966f
rm -rf $RPM_BUILD_ROOT
5c966f
mkdir -p $RPM_BUILD_ROOT/{sbin,etc/audispd/plugins.d,etc/audit/rules.d}
5c966f
mkdir -p $RPM_BUILD_ROOT/%{_mandir}/{man5,man8}
5c966f
mkdir -p $RPM_BUILD_ROOT/%{_lib}
5c966f
mkdir -p $RPM_BUILD_ROOT/%{_libdir}/audit
5c966f
mkdir -p --mode=0700 $RPM_BUILD_ROOT/%{_var}/log/audit
5c966f
mkdir -p $RPM_BUILD_ROOT/%{_var}/spool/audit
5c966f
make DESTDIR=$RPM_BUILD_ROOT install
5c966f
5c966f
mkdir -p $RPM_BUILD_ROOT/%{_libdir}
5c966f
# This winds up in the wrong place when libtool is involved
5c966f
mv $RPM_BUILD_ROOT/%{_lib}/libaudit.a $RPM_BUILD_ROOT%{_libdir}
5c966f
mv $RPM_BUILD_ROOT/%{_lib}/libauparse.a $RPM_BUILD_ROOT%{_libdir}
5c966f
curdir=`pwd`
5c966f
cd $RPM_BUILD_ROOT/%{_libdir}
5c966f
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libaudit.so.1.*.*\``
5c966f
ln -s ../../%{_lib}/$LIBNAME libaudit.so
5c966f
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libauparse.so.0.*.*\``
5c966f
ln -s ../../%{_lib}/$LIBNAME libauparse.so
5c966f
cd $curdir
5c966f
# Remove these items so they don't get picked up.
5c966f
rm -f $RPM_BUILD_ROOT/%{_lib}/libaudit.so
5c966f
rm -f $RPM_BUILD_ROOT/%{_lib}/libauparse.so
5c966f
5c966f
find $RPM_BUILD_ROOT -name '*.la' -delete
5c966f
find $RPM_BUILD_ROOT/%{_libdir}/python?.?/site-packages -name '*.a' -delete
5c966f
5c966f
# Move the pkgconfig file
5c966f
mv $RPM_BUILD_ROOT/%{_lib}/pkgconfig $RPM_BUILD_ROOT%{_libdir}
5c966f
5c966f
# On platforms with 32 & 64 bit libs, we need to coordinate the timestamp
5c966f
touch -r ./audit.spec $RPM_BUILD_ROOT/etc/libaudit.conf
5c966f
touch -r ./audit.spec $RPM_BUILD_ROOT/usr/share/man/man5/libaudit.conf.5.gz
5c966f
5c966f
%check
5c966f
%ifnarch aarch64 ppc %{power64} s390 s390x %{ix86}
5c966f
make check
5c966f
%endif
5c966f
# Get rid of make files that they don't get packaged.
5c966f
rm -f rules/Makefile*
5c966f
5c966f
5c966f
%clean
5c966f
rm -rf $RPM_BUILD_ROOT
5c966f
5c966f
%post libs -p /sbin/ldconfig
5c966f
5c966f
%post
5c966f
# Copy default rules into place on new installation
5c966f
files=`ls /etc/audit/rules.d/ 2>/dev/null | wc -w`
5c966f
if [ "$files" -eq 0 ] ; then
5c966f
  if [ -e /usr/share/doc/audit-%{version}/rules/10-base-config.rules ] ; then
5c966f
    cp /usr/share/doc/audit-%{version}/rules/10-base-config.rules /etc/audit/rules.d/audit.rules
5c966f
  else
5c966f
    touch /etc/audit/rules.d/audit.rules
5c966f
  fi
5c966f
  chmod 0600 /etc/audit/rules.d/audit.rules
5c966f
fi
5c966f
%systemd_post auditd.service
5c966f
5c966f
%preun
5c966f
%systemd_preun auditd.service
5c966f
if [ $1 -eq 0 ]; then
5c966f
   /sbin/service auditd stop > /dev/null 2>&1
5c966f
fi
5c966f
5c966f
%postun libs -p /sbin/ldconfig
5c966f
5c966f
%postun
5c966f
if [ $1 -ge 1 ]; then
5c966f
   /sbin/service auditd condrestart > /dev/null 2>&1 || :
5c966f
fi
5c966f
5c966f
%files libs
5c966f
%defattr(-,root,root,-)
5c966f
/%{_lib}/libaudit.so.1*
5c966f
/%{_lib}/libauparse.*
5c966f
%config(noreplace) %attr(640,root,root) /etc/libaudit.conf
5c966f
%{_mandir}/man5/libaudit.conf.5.gz
5c966f
5c966f
%files libs-devel
5c966f
%defattr(-,root,root,-)
5c966f
%doc contrib/skeleton.c contrib/plugin
5c966f
%{_libdir}/libaudit.so
5c966f
%{_libdir}/libauparse.so
5c966f
%{_includedir}/libaudit.h
5c966f
%{_includedir}/auparse.h
5c966f
%{_includedir}/auparse-defs.h
5c966f
%{_datadir}/aclocal/audit.m4
5c966f
%{_libdir}/pkgconfig/audit.pc
5c966f
%{_libdir}/pkgconfig/auparse.pc
5c966f
%{_mandir}/man3/*
5c966f
5c966f
%files libs-static
5c966f
%defattr(-,root,root,-)
5c966f
%{_libdir}/libaudit.a
5c966f
%{_libdir}/libauparse.a
5c966f
5c966f
%files libs-python
5c966f
%defattr(-,root,root,-)
5c966f
%attr(755,root,root) %{python_sitearch}/_audit.so
5c966f
%attr(755,root,root) %{python_sitearch}/auparse.so
5c966f
%{python_sitearch}/audit.py*
5c966f
5c966f
%files
5c966f
%defattr(-,root,root,-)
5c966f
%doc README COPYING ChangeLog rules init.d/auditd.cron
5c966f
%attr(644,root,root) %{_mandir}/man8/audispd.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/auditctl.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/auditd.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/aureport.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/ausearch.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/autrace.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/aulast.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/aulastlog.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/auvirt.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/augenrules.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/ausyscall.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man7/audit.rules.7.gz
5c966f
%attr(644,root,root) %{_mandir}/man5/auditd.conf.5.gz
5c966f
%attr(644,root,root) %{_mandir}/man5/audispd.conf.5.gz
5c966f
%attr(644,root,root) %{_mandir}/man5/ausearch-expression.5.gz
5c966f
%attr(755,root,root) /sbin/auditctl
5c966f
%attr(755,root,root) /sbin/auditd
5c966f
%attr(755,root,root) /sbin/ausearch
5c966f
%attr(755,root,root) /sbin/aureport
5c966f
%attr(750,root,root) /sbin/autrace
5c966f
%attr(755,root,root) /sbin/audispd
5c966f
%attr(755,root,root) /sbin/augenrules
5c966f
%attr(755,root,root) %{_bindir}/aulast
5c966f
%attr(755,root,root) %{_bindir}/aulastlog
5c966f
%attr(755,root,root) %{_bindir}/ausyscall
5c966f
%attr(755,root,root) %{_bindir}/auvirt
5c966f
%attr(644,root,root) %{_unitdir}/auditd.service
5c966f
%attr(750,root,root) %dir %{_libexecdir}/initscripts/legacy-actions/auditd
5c966f
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/condrestart
5c966f
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/reload
5c966f
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/restart
5c966f
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/resume
5c966f
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/rotate
5c966f
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/state
5c966f
%attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/stop
5c966f
%ghost %{_localstatedir}/run/auditd.state
5c966f
%attr(-,root,-) %dir %{_var}/log/audit
5c966f
%attr(750,root,root) %dir /etc/audit
5c966f
%attr(750,root,root) %dir /etc/audit/rules.d
5c966f
%attr(750,root,root) %dir /etc/audisp
5c966f
%attr(750,root,root) %dir /etc/audisp/plugins.d
5c966f
%config(noreplace) %attr(640,root,root) /etc/audit/auditd.conf
5c966f
%ghost %config(noreplace) %attr(600,root,root) /etc/audit/rules.d/audit.rules
5c966f
%ghost %config(noreplace) %attr(640,root,root) /etc/audit/audit.rules
5c966f
%config(noreplace) %attr(640,root,root) /etc/audit/audit-stop.rules
5c966f
%config(noreplace) %attr(640,root,root) /etc/audisp/audispd.conf
5c966f
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/af_unix.conf
5c966f
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/syslog.conf
5c966f
5c966f
%files -n audispd-plugins
5c966f
%defattr(-,root,root,-)
5c966f
%attr(644,root,root) %{_mandir}/man8/audispd-zos-remote.8.gz
5c966f
%attr(644,root,root) %{_mandir}/man5/zos-remote.conf.5.gz
5c966f
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/audispd-zos-remote.conf
5c966f
%config(noreplace) %attr(640,root,root) /etc/audisp/zos-remote.conf
5c966f
%attr(750,root,root) /sbin/audispd-zos-remote
5c966f
%config(noreplace) %attr(640,root,root) /etc/audisp/audisp-remote.conf
5c966f
%config(noreplace) %attr(640,root,root) /etc/audisp/plugins.d/au-remote.conf
5c966f
%attr(750,root,root) /sbin/audisp-remote
5c966f
%attr(700,root,root) %dir %{_var}/spool/audit
5c966f
%attr(644,root,root) %{_mandir}/man5/audisp-remote.conf.5.gz
5c966f
%attr(644,root,root) %{_mandir}/man8/audisp-remote.8.gz
5c966f
5c966f
%changelog
5c966f
* Mon May 06 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-4
5c966f
resolves: #1696709 - updating auditd is enabling disabled service 
5c966f
5c966f
* Sun May 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-3
5c966f
resolves: #1705376 - aureport aborts when using a specific input
5c966f
5c966f
* Wed Mar 27 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-2
5c966f
resolves: #1651761 - Fix memory leak reported upstream
5c966f
5c966f
* Tue Mar 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-1
5c966f
resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
5c966f
resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
5c966f
resolves: #1614833 - audispd loops reloading config 
5c966f
resolves: #1622194 - audisp-remote memory leak when using krb5 
5c966f
resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
5c966f
resolves: #1628626 - aureport -a --failed does not display user_avc events 
5c966f
resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
5c966f
resolves: #1650670 - space left in auditd.conf expressed as a percentage 
5c966f
resolves: #1663285 - ausearch device/inode missing when using a single file 
5c966f
resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described
5c966f
5c966f
* Tue Jul 17 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-4
5c966f
resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
5c966f
5c966f
* Wed Jun 27 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-3
5c966f
resolves: #1587995 - auditd sometimes in failed state after boot
5c966f
5c966f
* Tue Jun 26 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-2
5c966f
resolves: #1559032 - Fix a segfault on shutdown
5c966f
5c966f
* Wed Jun 20 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-1
5c966f
resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
5c966f
resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
5c966f
resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
5c966f
resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
5c966f
resolves: #1511606 - aureport AVC report header is incomplete
5c966f
resolves: #1504251 - make auditd dump internal state for log writing status
5c966f
5c966f
* Tue Dec 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-3
5c966f
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
5c966f
5c966f
* Mon Nov 06 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-2
5c966f
resolves: #1508965 - Need to rebuild rpm to remove static relocations
5c966f
5c966f
* Thu Oct 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-1
5c966f
resolves: #982154 - Can't find the "avc" event with the auvirt command
5c966f
resolves: #1101605 - Ipv6 seems no working
5c966f
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
5c966f
resolves: #1455598 - Default port is wrong in audisp-remote.conf
5c966f
resolves: #1476406 - Audit package rebase
5c966f
5c966f
* Mon Sep 18 2017 Steve Grubb <sgrubb@redhat.com> 2.7.8-1
5c966f
resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
5c966f
resolves: #1448526 - aureport shows the wrong auid "-1"
5c966f
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
5c966f
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field
5c966f
5c966f
* Mon Jun 12 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-3
5c966f
resolves: #1460110 - aureport does not report all anomalies
5c966f
5c966f
* Fri May 26 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-2
5c966f
resolves: #1455594 - Bad configuration keyword for audispd-remote.conf
5c966f
5c966f
* Wed Apr 19 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-1
5c966f
resolves: #1443107 - disk full action and infinite loop in audit-remote
5c966f
5c966f
* Mon Apr 10 2017 Steve Grubb <sgrubb@redhat.com> 2.7.5-1
5c966f
resolves: #1437187 - audit rpm postinstall script points to non-existing file
5c966f
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
5c966f
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
5c966f
resolves: #1438997 - SECCOMP records have wrong syscall
5c966f
5c966f
* Tue Mar 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.4-1
5c966f
resolves: #1367703 - auvirt wasn't supporting date keywords
5c966f
resolves: #1396792 - augenrules includes files ending in regexp "rules"
5c966f
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character
5c966f
5c966f
* Tue Feb 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.3-1
5c966f
resolves: #1381601 - audit package update
5c966f
resolves: #1382381 - typo in package description
5c966f
5c966f
* Fri Jan 20 2017 Steve Grubb <sgrubb@redhat.com> 2.6.5-4
5c966f
resolves: #1382397 - write_logs option is not correctly handled
5c966f
resolves: #1414812 - Setting log_format to NOLOG make auditd core dump
5c966f
5c966f
* Wed Aug 10 2016 Steve Grubb <sgrubb@redhat.com> 2.6.5-3
5c966f
resolves: #1296204 - Rebase audit package
5c966f
5c966f
* Wed Jan 14 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-5
5c966f
resolves: #1180675 - rules with "-F arch=ppc64le" fail to load
5c966f
5c966f
* Tue Jan 13 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-4
5c966f
- Remove golang bindings added under the following bz
5c966f
resolves: #1115196 - Add golang bindings for libaudit
5c966f
5c966f
* Wed Dec 17 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-2
5c966f
resolves: #1173160 - Audit package needs update for new VPN crypto events
5c966f
5c966f
* Tue Oct 28 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-1
5c966f
resolves: #963353 - aarch64 userspace auditing needs to be written
5c966f
resolves: #1150202 - perf trace sleep 1 does not list any syscall information
5c966f
resolves: #1142989 - Update audit package to 2.4.1
5c966f
resolves: #1155221 - adjust fstatat naming to match kernel uapi
5c966f
5c966f
* Thu Sep 18 2014 Steve Grubb <sgrubb@redhat.com> 2.4-1
5c966f
resolves: #1115196 - Add golang bindings for libaudit
5c966f
resolves: #1105150 - audispd config file parser fails on long input
5c966f
resolves: #1104973 - auparse truncating selinux context after first category
5c966f
resolves: #1088593 - auditctl man page examples use deprecated syscalls
5c966f
resolves: #1087849 - support for setting loginuid immutable
5c966f
resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
5c966f
resolves: #975796  - confusing aulast records for bad logins
5c966f
5c966f
* Tue Mar 18 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-4
5c966f
resolves: #1077249 - Audit update, various issues
5c966f
5c966f
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2.3.3-3
5c966f
- Mass rebuild 2014-01-24
5c966f
5c966f
* Mon Jan 20 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-2
5c966f
- New upstream bugfix/enhancement release
5c966f
resolves: #1053804 - ausearch issues found by ausearch-test
5c966f
resolves: #1030409 - ausearch help typo for "-x" option
5c966f
5c966f
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2.3.2-4
5c966f
- Mass rebuild 2013-12-27
5c966f
5c966f
* Thu Oct 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-3
5c966f
resolves: #828495 - semanage port should generate an audit event
5c966f
5c966f
* Thu Aug 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-2
5c966f
resolves: #991056 - ausearch ignores USER events with -ua option
5c966f
5c966f
* Mon Jul 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-1
5c966f
- New upstream bugfix/enhancement release
5c966f
resolves: #982112 Add delay between stopping and starting auditd
5c966f
5c966f
* Wed Jul 10 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-4
5c966f
resolves: #982112 Add delay between stopping and starting auditd
5c966f
5c966f
* Wed Jul 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-3
5c966f
- Remove prelude support
5c966f
5c966f
* Fri May 31 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-2
5c966f
- Fix unknown lvalue in auditd.service (#969345)
5c966f
5c966f
* Thu May 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-1
5c966f
- New upstream bugfix/enhancement release
5c966f
5c966f
* Fri May 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3-2
5c966f
- If no rules exist, copy shipped rules into place
5c966f
5c966f
* Tue Apr 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3-1
5c966f
- New upstream bugfix release
5c966f
5c966f
* Thu Mar 21 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-2
5c966f
- Fix clone syscall interpretation
5c966f
5c966f
* Tue Mar 19 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-1
5c966f
- New upstream bugfix release
5c966f
5c966f
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-5
5c966f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
5c966f
5c966f
* Wed Jan 16 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-4
5c966f
- Don't make auditd.service file executable (#896113)
5c966f
5c966f
* Fri Jan 11 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-3
5c966f
- Do not own /usr/lib64/audit
5c966f
5c966f
* Wed Dec 12 2012 Steve Grubb <sgrubb@redhat.com> 2.2.2-2
5c966f
- New upstream release
5c966f
5c966f
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.1-2
5c966f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
5c966f
5c966f
* Fri Mar 23 2012 Steve Grubb <sgrubb@redhat.com> 2.2.1-1
5c966f
- New upstream release
5c966f
5c966f
* Thu Mar 1 2012 Steve Grubb <sgrubb@redhat.com> 2.2-1
5c966f
- New upstream release
5c966f
5c966f
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.3-5
5c966f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
5c966f
5c966f
* Thu Sep 15 2011 Adam Williamson <awilliam@redhat.com> 2.1.3-4
5c966f
- add in some systemd scriptlets that were missed, including one which
5c966f
  will cause auditd to be enabled on upgrade from pre-systemd builds
5c966f
5c966f
* Wed Sep 14 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-3
5c966f
- Enable by default (#737060)
5c966f
5c966f
* Tue Aug 30 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-2
5c966f
- Correct misplaced ifnarch (#734359)
5c966f
5c966f
* Mon Aug 15 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-1
5c966f
- New upstream release
5c966f
5c966f
* Tue Jul 26 2011 Jóhann B. Guðmundsson <johannbg@gmail.com> - 2.1.2-2
5c966f
- Introduce systemd unit file, drop SysV support
5c966f
5c966f
* Sat Jun 11 2011 Steve Grubb <sgrubb@redhat.com> 2.1.2-1
5c966f
- New upstream release
5c966f
5c966f
* Wed Apr 20 2011 Steve Grubb <sgrubb@redhat.com> 2.1.1-1
5c966f
- New upstream release
5c966f
5c966f
* Tue Mar 29 2011 Steve Grubb <sgrubb@redhat.com> 2.1-1
5c966f
- New upstream release
5c966f
5c966f
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.6-2
5c966f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
5c966f
5c966f
* Fri Feb 04 2011 Steve Grubb <sgrubb@redhat.com> 2.0.6-1
5c966f
- New upstream release
5c966f
5c966f
* Thu Jan 20 2011 Karsten Hopp <karsten@redhat.com> 2.0.5-2
5c966f
- bump and rebuild as 2.0.5-1 was erroneously linked with python-2.6 on ppc
5c966f
5c966f
* Tue Nov 02 2010 Steve Grubb <sgrubb@redhat.com> 2.0.5-1
5c966f
- New upstream release
5c966f
5c966f
* Wed Jul 21 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.4-4
5c966f
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
5c966f
5c966f
* Tue Feb 16 2010 Adam Jackson <ajax@redhat.com> 2.0.4-3
5c966f
- audit-2.0.4-add-needed.patch: Fix FTBFS for --no-add-needed
5c966f
5c966f
* Fri Jan 29 2010 Steve Grubb <sgrubb@redhat.com> 2.0.4-2
5c966f
- Split out static libs (#556039)
5c966f
5c966f
* Tue Dec 08 2009 Steve Grubb <sgrubb@redhat.com> 2.0.4-1
5c966f
- New upstream release
5c966f
5c966f
* Sat Oct 17 2009 Steve Grubb <sgrubb@redhat.com> 2.0.3-1
5c966f
- New upstream release
5c966f
5c966f
* Fri Oct 16 2009 Steve Grubb <sgrubb@redhat.com> 2.0.2-1
5c966f
- New upstream release
5c966f
5c966f
* Mon Sep 28 2009 Steve Grubb <sgrubb@redhat.com> 2.0.1-1
5c966f
- New upstream release
5c966f
5c966f
* Fri Aug 21 2009 Steve Grubb <sgrubb@redhat.com> 2.0-3
5c966f
- New upstream release