From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 279E5C001B0 for ; Sun, 6 Aug 2023 21:52:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1691358756; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=+DWNf1IcEWYku1Yu32QWvYTOTp6gAsluoLuabYfsTA0=; b=TaqaDErJRjiCzy9fYtKGLuJ7jruvAmzb4dl1gj/llxiWS0bjnDFaDXv2c9mXYEEHobTrfk LPYxm5knD+ympGch7PimOcysA+xtPMwhUj77wB+nrzVMCxpX9WO3038J9jiV9eckF39mUU kenSwk8tRCbaoYQ1n0tG6MqTQViVbhQ= Received: from mimecast-mx02.redhat.com (66.187.233.73 [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-70-GNEgUzaeMT6AFloPUyfGkA-1; Sun, 06 Aug 2023 17:52:32 -0400 X-MC-Unique: GNEgUzaeMT6AFloPUyfGkA-1 Received: from smtp.corp.redhat.com (int-mx09.intmail.prod.int.rdu2.redhat.com [10.11.54.9]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id E01AF3801BC2; Sun, 6 Aug 2023 21:52:30 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (unknown [10.30.29.100]) by smtp.corp.redhat.com (Postfix) with ESMTP id 98557492B02; Sun, 6 Aug 2023 21:52:27 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (localhost [IPv6:::1]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id 4308B1946587; Sun, 6 Aug 2023 21:52:27 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx07.intmail.prod.int.rdu2.redhat.com [10.11.54.7]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id 93A031946586 for ; Sun, 6 Aug 2023 21:52:25 +0000 (UTC) Received: by smtp.corp.redhat.com (Postfix) id 659BA140E952; Sun, 6 Aug 2023 21:52:25 +0000 (UTC) Received: from x2.localnet (unknown [10.22.8.65]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 4A7081401C2E for ; Sun, 6 Aug 2023 21:52:25 +0000 (UTC) From: Steve Grubb To: Linux Audit Subject: audit-3.1.2 released Date: Sun, 06 Aug 2023 17:52:24 -0400 Message-ID: <5867290.DvuYhMxLoT@x2> Organization: Red Hat MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.1 on 10.11.54.7 X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: linux-audit-bounces@redhat.com Sender: "Linux-audit" X-Scanned-By: MIMEDefang 3.1 on 10.11.54.9 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit. It will also be in rawhide soon. The ChangeLog is: - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings There are various bugfixes, a refresh of the lookup tables for the 6.5 kernel, and some sprucing up of the python bindings. Speaking of which, this release removes the ability to set audit rules via the python bindings. That means no more workaround patch is needed for the swig issue. SHA256: c0b1792d1f0a88c6f1828710509cbb987059fc68712c97669ca90eae103d287d Please let me know if you run across any problems with this release. -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit