Hello community, here is the log from the commit of package audit for openSUSE:Factory checked in at 2014-02-09 13:17:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/audit (Old) and /work/SRC/openSUSE:Factory/.audit.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "audit" Changes: -------- --- /work/SRC/openSUSE:Factory/audit/audit-secondary.changes 2013-12-05 06:48:08.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.audit.new/audit-secondary.changes 2014-02-09 13:17:30.000000000 +0100 @@ -1,0 +2,6 @@ +Tue Feb 4 00:06:30 UTC 2014 - [email protected] + +- Update to version 2.3.3. See audit.spec (libaudit1) for upstream + changelog + +------------------------------------------------------------------- --- /work/SRC/openSUSE:Factory/audit/audit.changes 2013-12-05 06:48:08.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.audit.new/audit.changes 2014-02-09 13:17:30.000000000 +0100 @@ -1,0 +2,16 @@ +Tue Feb 4 00:05:38 UTC 2014 - [email protected] + +- Update to version 2.3.3 + + Changelog 2.3.3 + - Documentation updates + - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes + - Update interpreting scheduler policy names + - Update automake files to automake-1.13.4 + - Remove CAP_COMPROMISE_KERNEL interpretation + - Parse name field in AVC's (#1049916) + - Add missing typedef for auparse_type_t enumeration (#1053424) + - Fix parsing encoded filenames in records + - Parse SECCOMP events + +------------------------------------------------------------------- Old: ---- audit-2.3.2.tar.gz New: ---- audit-2.3.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ audit-secondary.spec ++++++ --- /var/tmp/diff_new_pack.6ZIq1b/_old 2014-02-09 13:17:31.000000000 +0100 +++ /var/tmp/diff_new_pack.6ZIq1b/_new 2014-02-09 13:17:31.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package audit-secondary # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -30,7 +30,7 @@ Summary: Secondary packages for audit License: GPL-2.0+ Group: System/Monitoring -Version: 2.3.2 +Version: 2.3.3 Release: 0 Url: http://people.redhat.com/sgrubb/audit/ Source0: http://people.redhat.com/sgrubb/audit/%{_name}-%{version}.tar.gz ++++++ audit.spec ++++++ --- /var/tmp/diff_new_pack.6ZIq1b/_old 2014-02-09 13:17:31.000000000 +0100 +++ /var/tmp/diff_new_pack.6ZIq1b/_new 2014-02-09 13:17:31.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package audit # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,7 +20,7 @@ Summary: First part of auditing package License: GPL-2.0+ Group: System/Monitoring -Version: 2.3.2 +Version: 2.3.3 Release: 0 Url: http://people.redhat.com/sgrubb/audit/ Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz ++++++ audit-2.3.2.tar.gz -> audit-2.3.3.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/ChangeLog new/audit-2.3.3/ChangeLog --- old/audit-2.3.2/ChangeLog 2013-07-29 23:37:00.000000000 +0200 +++ new/audit-2.3.3/ChangeLog 2014-01-16 12:24:42.000000000 +0100 @@ -1,3 +1,14 @@ +2.3.3 +- Documentation updates +- Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes +- Update interpreting scheduler policy names +- Update automake files to automake-1.13.4 +- Remove CAP_COMPROMISE_KERNEL interpretation +- Parse name field in AVC's (#1049916) +- Add missing typedef for auparse_type_t enumeration (#1053424) +- Fix parsing encoded filenames in records +- Parse SECCOMP events + 2.3.2 - Put RefuseManualStop in the right systemd section (#969345) - Add legacy restart scripts for systemd support diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/TODO new/audit-2.3.3/TODO --- old/audit-2.3.2/TODO 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/TODO 2014-01-16 12:24:42.000000000 +0100 @@ -1,6 +1,6 @@ Things that need to be done: =========================== -2.3.3 +2.3.4 * Fix auvirt to report AVC's and --proof for --all-events * Add command report * Fix auparse to handle out of order messages diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/audit.spec new/audit-2.3.3/audit.spec --- old/audit-2.3.2/audit.spec 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/audit.spec 2014-01-16 12:24:42.000000000 +0100 @@ -9,7 +9,7 @@ Summary: User space tools for 2.6 kernel auditing Name: audit -Version: 2.3.2 +Version: 2.3.3 Release: 1 License: GPLv2+ Group: System Environment/Daemons @@ -274,6 +274,6 @@ %changelog -* Mon Jul 29 2013 Steve Grubb <[email protected]> 2.3.2-1 +* Thu Jan 29 2014 Steve Grubb <[email protected]> 2.3.3-1 - New upstream release diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/auparse/auparse-defs.h new/audit-2.3.3/auparse/auparse-defs.h --- old/audit-2.3.2/auparse/auparse-defs.h 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/auparse/auparse-defs.h 2014-01-16 12:24:42.000000000 +0100 @@ -72,7 +72,7 @@ /* This determines the type of field at current cursor location * ONLY APPEND - DO NOT DELETE or it will break ABI */ -enum { AUPARSE_TYPE_UNCLASSIFIED, AUPARSE_TYPE_UID, AUPARSE_TYPE_GID, +typedef enum { AUPARSE_TYPE_UNCLASSIFIED, AUPARSE_TYPE_UID, AUPARSE_TYPE_GID, AUPARSE_TYPE_SYSCALL, AUPARSE_TYPE_ARCH, AUPARSE_TYPE_EXIT, AUPARSE_TYPE_ESCAPED, AUPARSE_TYPE_PERM, AUPARSE_TYPE_MODE, AUPARSE_TYPE_SOCKADDR, AUPARSE_TYPE_FLAGS, AUPARSE_TYPE_PROMISC, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/auparse/captab.h new/audit-2.3.3/auparse/captab.h --- old/audit-2.3.2/auparse/captab.h 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/auparse/captab.h 2014-01-16 12:24:42.000000000 +0100 @@ -59,4 +59,3 @@ _S(34, "syslog" ) _S(35, "wake_alarm" ) _S(36, "block_suspend" ) -_S(37, "compromise_kernel" ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/auparse/interpret.c new/audit-2.3.3/auparse/interpret.c --- old/audit-2.3.2/auparse/interpret.c 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/auparse/interpret.c 2014-01-16 12:24:42.000000000 +0100 @@ -49,6 +49,7 @@ #include <linux/capability.h> #include <sys/personality.h> #include <sys/prctl.h> +#include <sched.h> #include "auparse-defs.h" #include "gen_tables.h" @@ -1348,9 +1349,12 @@ return out; } +#ifndef SCHED_RESET_ON_FORK +#define SCHED_RESET_ON_FORK 0x40000000 +#endif static const char *print_sched(const char *val) { - int pol; + unsigned int pol; char *out; const char *s; @@ -1362,9 +1366,15 @@ return out; } - s = sched_i2s(pol); - if (s != NULL) - return strdup(s); + s = sched_i2s(pol & 0x0F); + if (s != NULL) { + char buf[48]; + + strcpy(buf, s); + if (pol & SCHED_RESET_ON_FORK ) + strcat(buf, "|SCHED_RESET_ON_FORK"); + return strdup(buf); + } if (asprintf(&out, "unknown scheduler policy (0x%s)", val) < 0) out = NULL; return out; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/config.guess new/audit-2.3.3/config.guess --- old/audit-2.3.2/config.guess 2013-07-29 23:37:14.000000000 +0200 +++ new/audit-2.3.3/config.guess 2014-01-16 12:24:49.000000000 +0100 @@ -1,8 +1,10 @@ #! /bin/sh # Attempt to guess a canonical system name. -# Copyright 1992-2013 Free Software Foundation, Inc. +# Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, +# 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, +# 2011, 2012, 2013 Free Software Foundation, Inc. -timestamp='2013-06-10' +timestamp='2012-12-29' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by @@ -24,7 +26,7 @@ # program. This Exception is an additional permission under section 7 # of the GNU General Public License, version 3 ("GPLv3"). # -# Originally written by Per Bothner. +# Originally written by Per Bothner. # # You can get the latest version of this script from: # http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess;hb=HEAD @@ -50,7 +52,9 @@ GNU config.guess ($timestamp) Originally written by Per Bothner. -Copyright 1992-2013 Free Software Foundation, Inc. +Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, +2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, +2012, 2013 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." @@ -132,27 +136,6 @@ UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown -case "${UNAME_SYSTEM}" in -Linux|GNU|GNU/*) - # If the system lacks a compiler, then just pick glibc. - # We could probably try harder. - LIBC=gnu - - eval $set_cc_for_build - cat <<-EOF > $dummy.c - #include <features.h> - #if defined(__UCLIBC__) - LIBC=uclibc - #elif defined(__dietlibc__) - LIBC=dietlibc - #else - LIBC=gnu - #endif - EOF - eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep '^LIBC'` - ;; -esac - # Note: order is significant - the case branches are not exclusive. case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in @@ -874,21 +857,21 @@ exit ;; *:GNU:*:*) # the GNU system - echo `echo ${UNAME_MACHINE}|sed -e 's,[-/].*$,,'`-unknown-${LIBC}`echo ${UNAME_RELEASE}|sed -e 's,/.*$,,'` + echo `echo ${UNAME_MACHINE}|sed -e 's,[-/].*$,,'`-unknown-gnu`echo ${UNAME_RELEASE}|sed -e 's,/.*$,,'` exit ;; *:GNU/*:*:*) # other systems with GNU libc and userland - echo ${UNAME_MACHINE}-unknown-`echo ${UNAME_SYSTEM} | sed 's,^[^/]*/,,' | tr '[A-Z]' '[a-z]'``echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`-${LIBC} + echo ${UNAME_MACHINE}-unknown-`echo ${UNAME_SYSTEM} | sed 's,^[^/]*/,,' | tr '[A-Z]' '[a-z]'``echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`-gnu exit ;; i*86:Minix:*:*) echo ${UNAME_MACHINE}-pc-minix exit ;; aarch64:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; aarch64_be:Linux:*:*) UNAME_MACHINE=aarch64_be - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; alpha:Linux:*:*) case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' < /proc/cpuinfo` in @@ -901,54 +884,59 @@ EV68*) UNAME_MACHINE=alphaev68 ;; esac objdump --private-headers /bin/sh | grep -q ld.so.1 - if test "$?" = 0 ; then LIBC="gnulibc1" ; fi - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} - exit ;; - arc:Linux:*:* | arceb:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + if test "$?" = 0 ; then LIBC="libc1" ; else LIBC="" ; fi + echo ${UNAME_MACHINE}-unknown-linux-gnu${LIBC} exit ;; arm*:Linux:*:*) eval $set_cc_for_build if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_EABI__ then - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu else if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_PCS_VFP then - echo ${UNAME_MACHINE}-unknown-linux-${LIBC}eabi + echo ${UNAME_MACHINE}-unknown-linux-gnueabi else - echo ${UNAME_MACHINE}-unknown-linux-${LIBC}eabihf + echo ${UNAME_MACHINE}-unknown-linux-gnueabihf fi fi exit ;; avr32*:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; cris:Linux:*:*) - echo ${UNAME_MACHINE}-axis-linux-${LIBC} + echo ${UNAME_MACHINE}-axis-linux-gnu exit ;; crisv32:Linux:*:*) - echo ${UNAME_MACHINE}-axis-linux-${LIBC} + echo ${UNAME_MACHINE}-axis-linux-gnu exit ;; frv:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; hexagon:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; i*86:Linux:*:*) - echo ${UNAME_MACHINE}-pc-linux-${LIBC} + LIBC=gnu + eval $set_cc_for_build + sed 's/^ //' << EOF >$dummy.c + #ifdef __dietlibc__ + LIBC=dietlibc + #endif +EOF + eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep '^LIBC'` + echo "${UNAME_MACHINE}-pc-linux-${LIBC}" exit ;; ia64:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; m32r*:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; m68*:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; mips:Linux:*:* | mips64:Linux:*:*) eval $set_cc_for_build @@ -967,63 +955,54 @@ #endif EOF eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep '^CPU'` - test x"${CPU}" != x && { echo "${CPU}-unknown-linux-${LIBC}"; exit; } + test x"${CPU}" != x && { echo "${CPU}-unknown-linux-gnu"; exit; } ;; - or1k:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} - exit ;; or32:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; padre:Linux:*:*) - echo sparc-unknown-linux-${LIBC} + echo sparc-unknown-linux-gnu exit ;; parisc64:Linux:*:* | hppa64:Linux:*:*) - echo hppa64-unknown-linux-${LIBC} + echo hppa64-unknown-linux-gnu exit ;; parisc:Linux:*:* | hppa:Linux:*:*) # Look for CPU level case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in - PA7*) echo hppa1.1-unknown-linux-${LIBC} ;; - PA8*) echo hppa2.0-unknown-linux-${LIBC} ;; - *) echo hppa-unknown-linux-${LIBC} ;; + PA7*) echo hppa1.1-unknown-linux-gnu ;; + PA8*) echo hppa2.0-unknown-linux-gnu ;; + *) echo hppa-unknown-linux-gnu ;; esac exit ;; ppc64:Linux:*:*) - echo powerpc64-unknown-linux-${LIBC} + echo powerpc64-unknown-linux-gnu exit ;; ppc:Linux:*:*) - echo powerpc-unknown-linux-${LIBC} - exit ;; - ppc64le:Linux:*:*) - echo powerpc64le-unknown-linux-${LIBC} - exit ;; - ppcle:Linux:*:*) - echo powerpcle-unknown-linux-${LIBC} + echo powerpc-unknown-linux-gnu exit ;; s390:Linux:*:* | s390x:Linux:*:*) - echo ${UNAME_MACHINE}-ibm-linux-${LIBC} + echo ${UNAME_MACHINE}-ibm-linux exit ;; sh64*:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; sh*:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; sparc:Linux:*:* | sparc64:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; tile*:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; vax:Linux:*:*) - echo ${UNAME_MACHINE}-dec-linux-${LIBC} + echo ${UNAME_MACHINE}-dec-linux-gnu exit ;; x86_64:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; xtensa*:Linux:*:*) - echo ${UNAME_MACHINE}-unknown-linux-${LIBC} + echo ${UNAME_MACHINE}-unknown-linux-gnu exit ;; i*86:DYNIX/ptx:4*:*) # ptx 4.0 does uname -s correctly, with DYNIX/ptx in there. @@ -1256,21 +1235,19 @@ exit ;; *:Darwin:*:*) UNAME_PROCESSOR=`uname -p` || UNAME_PROCESSOR=unknown - eval $set_cc_for_build - if test "$UNAME_PROCESSOR" = unknown ; then - UNAME_PROCESSOR=powerpc - fi - if [ "$CC_FOR_BUILD" != 'no_compiler_found' ]; then - if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \ - (CCOPTS= $CC_FOR_BUILD -E - 2>/dev/null) | \ - grep IS_64BIT_ARCH >/dev/null - then - case $UNAME_PROCESSOR in - i386) UNAME_PROCESSOR=x86_64 ;; - powerpc) UNAME_PROCESSOR=powerpc64 ;; - esac - fi - fi + case $UNAME_PROCESSOR in + i386) + eval $set_cc_for_build + if [ "$CC_FOR_BUILD" != 'no_compiler_found' ]; then + if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \ + (CCOPTS= $CC_FOR_BUILD -E - 2>/dev/null) | \ + grep IS_64BIT_ARCH >/dev/null + then + UNAME_PROCESSOR="x86_64" + fi + fi ;; + unknown) UNAME_PROCESSOR=powerpc ;; + esac echo ${UNAME_PROCESSOR}-apple-darwin${UNAME_RELEASE} exit ;; *:procnto*:*:* | *:QNX:[0123456789]*:*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/config.sub new/audit-2.3.3/config.sub --- old/audit-2.3.2/config.sub 2013-07-29 23:37:14.000000000 +0200 +++ new/audit-2.3.3/config.sub 2014-01-16 12:24:49.000000000 +0100 @@ -1,8 +1,10 @@ #! /bin/sh # Configuration validation subroutine script. -# Copyright 1992-2013 Free Software Foundation, Inc. +# Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, +# 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, +# 2011, 2012, 2013 Free Software Foundation, Inc. -timestamp='2013-04-24' +timestamp='2012-12-29' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by @@ -68,7 +70,9 @@ version="\ GNU config.sub ($timestamp) -Copyright 1992-2013 Free Software Foundation, Inc. +Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, +2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, +2012, 2013 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." @@ -252,7 +256,7 @@ | alpha | alphaev[4-8] | alphaev56 | alphaev6[78] | alphapca5[67] \ | alpha64 | alpha64ev[4-8] | alpha64ev56 | alpha64ev6[78] | alpha64pca5[67] \ | am33_2.0 \ - | arc | arceb \ + | arc \ | arm | arm[bl]e | arme[lb] | armv[2-8] | armv[3-8][lb] | armv7[arm] \ | avr | avr32 \ | be32 | be64 \ @@ -286,17 +290,16 @@ | mipsisa64r2 | mipsisa64r2el \ | mipsisa64sb1 | mipsisa64sb1el \ | mipsisa64sr71k | mipsisa64sr71kel \ - | mipsr5900 | mipsr5900el \ | mipstx39 | mipstx39el \ | mn10200 | mn10300 \ | moxie \ | mt \ | msp430 \ | nds32 | nds32le | nds32be \ - | nios | nios2 | nios2eb | nios2el \ + | nios | nios2 \ | ns16k | ns32k \ | open8 \ - | or1k | or32 \ + | or32 \ | pdp10 | pdp11 | pj | pjl \ | powerpc | powerpc64 | powerpc64le | powerpcle \ | pyramid \ @@ -366,7 +369,7 @@ | aarch64-* | aarch64_be-* \ | alpha-* | alphaev[4-8]-* | alphaev56-* | alphaev6[78]-* \ | alpha64-* | alpha64ev[4-8]-* | alpha64ev56-* | alpha64ev6[78]-* \ - | alphapca5[67]-* | alpha64pca5[67]-* | arc-* | arceb-* \ + | alphapca5[67]-* | alpha64pca5[67]-* | arc-* \ | arm-* | armbe-* | armle-* | armeb-* | armv*-* \ | avr-* | avr32-* \ | be32-* | be64-* \ @@ -404,13 +407,12 @@ | mipsisa64r2-* | mipsisa64r2el-* \ | mipsisa64sb1-* | mipsisa64sb1el-* \ | mipsisa64sr71k-* | mipsisa64sr71kel-* \ - | mipsr5900-* | mipsr5900el-* \ | mipstx39-* | mipstx39el-* \ | mmix-* \ | mt-* \ | msp430-* \ | nds32-* | nds32le-* | nds32be-* \ - | nios-* | nios2-* | nios2eb-* | nios2el-* \ + | nios-* | nios2-* \ | none-* | np1-* | ns16k-* | ns32k-* \ | open8-* \ | orion-* \ @@ -1352,7 +1354,7 @@ -gnu* | -bsd* | -mach* | -minix* | -genix* | -ultrix* | -irix* \ | -*vms* | -sco* | -esix* | -isc* | -aix* | -cnk* | -sunos | -sunos[34]*\ | -hpux* | -unos* | -osf* | -luna* | -dgux* | -auroraux* | -solaris* \ - | -sym* | -kopensolaris* | -plan9* \ + | -sym* | -kopensolaris* \ | -amigaos* | -amigados* | -msdos* | -newsos* | -unicos* | -aof* \ | -aos* | -aros* \ | -nindy* | -vxsim* | -vxworks* | -ebmon* | -hms* | -mvs* \ @@ -1498,6 +1500,9 @@ -aros*) os=-aros ;; + -kaos*) + os=-kaos + ;; -zvmoe) os=-zvmoe ;; @@ -1589,9 +1594,6 @@ mips*-*) os=-elf ;; - or1k-*) - os=-elf - ;; or32-*) os=-coff ;; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/configure new/audit-2.3.3/configure --- old/audit-2.3.2/configure 2013-07-29 23:37:13.000000000 +0200 +++ new/audit-2.3.3/configure 2014-01-16 12:24:48.000000000 +0100 @@ -1,7 +1,7 @@ #! /bin/sh # From configure.ac Revision: 1.3 . # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for audit 2.3.2. +# Generated by GNU Autoconf 2.69 for audit 2.3.3. # # # Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc. @@ -588,8 +588,8 @@ # Identity of this package. PACKAGE_NAME='audit' PACKAGE_TARNAME='audit' -PACKAGE_VERSION='2.3.2' -PACKAGE_STRING='audit 2.3.2' +PACKAGE_VERSION='2.3.3' +PACKAGE_STRING='audit 2.3.3' PACKAGE_BUGREPORT='' PACKAGE_URL='' @@ -1359,7 +1359,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures audit 2.3.2 to adapt to many kinds of systems. +\`configure' configures audit 2.3.3 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1430,7 +1430,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of audit 2.3.2:";; + short | recursive ) echo "Configuration of audit 2.3.3:";; esac cat <<\_ACEOF @@ -1549,7 +1549,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -audit configure 2.3.2 +audit configure 2.3.3 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -2143,7 +2143,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by audit $as_me 2.3.2, which was +It was created by audit $as_me 2.3.3, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -3122,7 +3122,7 @@ # Define the identity of the package. PACKAGE='audit' - VERSION='2.3.2' + VERSION='2.3.3' cat >>confdefs.h <<_ACEOF @@ -6492,7 +6492,7 @@ rm -rf conftest* ;; -x86_64-*kfreebsd*-gnu|x86_64-*linux*|ppc*-*linux*|powerpc*-*linux*| \ +x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \ s390*-*linux*|s390*-*tpf*|sparc*-*linux*) # Find out which ABI we are using. echo 'int i;' > conftest.$ac_ext @@ -6510,7 +6510,10 @@ x86_64-*linux*) LD="${LD-ld} -m elf_i386" ;; - ppc64-*linux*|powerpc64-*linux*) + powerpcle-*linux*) + LD="${LD-ld} -m elf32lppclinux" + ;; + powerpc-*linux*) LD="${LD-ld} -m elf32ppclinux" ;; s390x-*linux*) @@ -6529,7 +6532,10 @@ x86_64-*linux*) LD="${LD-ld} -m elf_x86_64" ;; - ppc*-*linux*|powerpc*-*linux*) + powerpcle-*linux*) + LD="${LD-ld} -m elf64lppc" + ;; + powerpc-*linux*) LD="${LD-ld} -m elf64ppc" ;; s390*-*linux*|s390*-*tpf*) @@ -14667,7 +14673,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by audit $as_me 2.3.2, which was +This file was extended by audit $as_me 2.3.3, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -14733,7 +14739,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -audit config.status 2.3.2 +audit config.status 2.3.3 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/configure.ac new/audit-2.3.3/configure.ac --- old/audit-2.3.2/configure.ac 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/configure.ac 2014-01-16 12:24:42.000000000 +0100 @@ -29,7 +29,7 @@ ]) AC_REVISION($Revision: 1.3 $)dnl -AC_INIT(audit,2.3.2) +AC_INIT(audit,2.3.3) AC_PREREQ(2.12)dnl AM_CONFIG_HEADER(config.h) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/docs/auditd.8 new/audit-2.3.3/docs/auditd.8 --- old/audit-2.3.2/docs/auditd.8 2013-07-29 23:37:00.000000000 +0200 +++ new/audit-2.3.3/docs/auditd.8 2014-01-16 12:24:42.000000000 +0100 @@ -1,4 +1,4 @@ -.TH "AUDITD" "8" "Apr 2013" "Red Hat" "System Administration Utilities" +.TH "AUDITD" "8" "Sept 2013" "Red Hat" "System Administration Utilities" .SH NAME auditd \- The Linux Audit daemon .SH SYNOPSIS @@ -11,7 +11,9 @@ .B aureport utilities. Configuring the audit rules is done with the .B auditctl -utility. During startup, the rules in \fI/etc/audit/audit.rules\fP are read by \fBauditctl\fP and loaded into the kernel. The audit daemon itself has some configuration options that the admin may wish to customize. They are found in the +utility. During startup, the rules in \fI/etc/audit/audit.rules\fP are read by \fBauditctl\fP and loaded into the kernel. Alterately, there is also an +.B augenrules +program that reads rules located in \fI/etc/audit/rules.d/\fP and compiles them into an audit.rules file. The audit daemon itself has some configuration options that the admin may wish to customize. They are found in the .B auditd.conf file. .SH OPTIONS @@ -50,6 +52,9 @@ .P .B /etc/audit/audit.rules - audit rules to be loaded at startup +.P +.B /etc/audit/rules.d/ +- directory holding individual sets of rules to be compiled into one file by augenrules. .SH NOTES A boot param of audit=1 should be added to ensure that all processes that run before the audit daemon starts is marked as auditable by the kernel. Not doing that will make a few processes impossible to properly audit. @@ -62,6 +67,7 @@ .BR ausearch (8), .BR aureport (8), .BR auditctl (8), +.BR augenrules (8), .BR audit.rules (7). .SH AUTHOR diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/docs/auditd.conf.5 new/audit-2.3.3/docs/auditd.conf.5 --- old/audit-2.3.2/docs/auditd.conf.5 2013-07-29 23:37:00.000000000 +0200 +++ new/audit-2.3.3/docs/auditd.conf.5 2014-01-16 12:24:42.000000000 +0100 @@ -173,7 +173,7 @@ .I action_mail_acct as well as sending the message to syslog. .I exec -/path-to-script will execute the script. You cannot pass parameters to the script. +/path-to-script will execute the script. You cannot pass parameters to the script. The script is also responsible for telling the auditd daemon to resume logging once its completed its action. This can be done by adding service auditd resume to the script. .I Suspend will cause the audit daemon to stop writing records to the disk. The daemon will still be alive. The .I single @@ -191,7 +191,8 @@ .I Syslog means that it will issue a warning to syslog. .I exec -/path-to-script will execute the script. You cannot pass parameters to the script. +/path-to-script will execute the script. You cannot pass parameters to the script. The script is also responsible for telling the auditd daemon to resume loggin +g once its completed its action. This can be done by adding service auditd resume to the script. .I Suspend will cause the audit daemon to stop writing records to the disk. The daemon will still be alive. The .I single diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/lib/libaudit.h new/audit-2.3.3/lib/libaudit.h --- old/audit-2.3.2/lib/libaudit.h 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/lib/libaudit.h 2014-01-16 12:24:42.000000000 +0100 @@ -186,6 +186,7 @@ #define AUDIT_FS_RELABEL 2309 /* Filesystem relabeled */ #define AUDIT_USER_MAC_POLICY_LOAD 2310 /* Userspc daemon loaded policy */ #define AUDIT_ROLE_MODIFY 2311 /* Admin modified a role */ +#define AUDIT_USER_MAC_CONFIG_CHANGE 2312 /* Change made to MAC policy */ #define AUDIT_FIRST_CRYPTO_MSG 2400 #define AUDIT_CRYPTO_TEST_USER 2400 /* Crypto test results */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/lib/msg_typetab.h new/audit-2.3.3/lib/msg_typetab.h --- old/audit-2.3.2/lib/msg_typetab.h 2013-07-29 23:37:01.000000000 +0200 +++ new/audit-2.3.3/lib/msg_typetab.h 2014-01-16 12:24:42.000000000 +0100 @@ -1,5 +1,5 @@ /* msg_typetab.h -- - * Copyright 2005-07,2009-12 Red Hat Inc., Durham, North Carolina. + * Copyright 2005-07,2009-13 Red Hat Inc., Durham, North Carolina. * All Rights Reserved. * * This library is free software; you can redistribute it and/or @@ -190,6 +190,7 @@ _S(AUDIT_FS_RELABEL, "FS_RELABEL" ) _S(AUDIT_USER_MAC_POLICY_LOAD, "USER_MAC_POLICY_LOAD" ) _S(AUDIT_ROLE_MODIFY, "ROLE_MODIFY" ) +_S(AUDIT_USER_MAC_CONFIG_CHANGE, "USER_MAC_CONFIG_CHANGE" ) _S(AUDIT_CRYPTO_TEST_USER, "CRYPTO_TEST_USER" ) _S(AUDIT_CRYPTO_PARAM_CHANGE_USER, "CRYPTO_PARAM_CHANGE_USER" ) _S(AUDIT_CRYPTO_LOGIN, "CRYPTO_LOGIN" ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/m4/libtool.m4 new/audit-2.3.3/m4/libtool.m4 --- old/audit-2.3.2/m4/libtool.m4 2013-07-29 23:37:07.000000000 +0200 +++ new/audit-2.3.3/m4/libtool.m4 2014-01-16 12:24:46.000000000 +0100 @@ -1312,7 +1312,7 @@ rm -rf conftest* ;; -x86_64-*kfreebsd*-gnu|x86_64-*linux*|ppc*-*linux*|powerpc*-*linux*| \ +x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \ s390*-*linux*|s390*-*tpf*|sparc*-*linux*) # Find out which ABI we are using. echo 'int i;' > conftest.$ac_ext @@ -1326,7 +1326,10 @@ x86_64-*linux*) LD="${LD-ld} -m elf_i386" ;; - ppc64-*linux*|powerpc64-*linux*) + powerpcle-*linux*) + LD="${LD-ld} -m elf32lppclinux" + ;; + powerpc-*linux*) LD="${LD-ld} -m elf32ppclinux" ;; s390x-*linux*) @@ -1345,7 +1348,10 @@ x86_64-*linux*) LD="${LD-ld} -m elf_x86_64" ;; - ppc*-*linux*|powerpc*-*linux*) + powerpcle-*linux*) + LD="${LD-ld} -m elf64lppc" + ;; + powerpc-*linux*) LD="${LD-ld} -m elf64ppc" ;; s390*-*linux*|s390*-*tpf*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/src/ausearch-options.c new/audit-2.3.3/src/ausearch-options.c --- old/audit-2.3.2/src/ausearch-options.c 2013-07-29 23:37:00.000000000 +0200 +++ new/audit-2.3.3/src/ausearch-options.c 2014-01-16 12:24:42.000000000 +0100 @@ -213,7 +213,7 @@ "\t-vm,--vm-name <guest name>\tsearch for events related to the virtual\n" "\t\t\t\t\tmachine with the name.\n" "\t-w,--word\t\t\tstring matches are whole word\n" - "\t-x,--executable <executable name> search based on excutable name\n" + "\t-x,--executable <executable name> search based on executable name\n" ); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/src/ausearch-parse.c new/audit-2.3.3/src/ausearch-parse.c --- old/audit-2.3.2/src/ausearch-parse.c 2013-07-29 23:37:00.000000000 +0200 +++ new/audit-2.3.3/src/ausearch-parse.c 2014-01-16 12:24:42.000000000 +0100 @@ -98,6 +98,7 @@ case AUDIT_PATH: ret = parse_path(n, s); break; + case AUDIT_USER: case AUDIT_FIRST_USER_MSG...AUDIT_LAST_USER_MSG: case AUDIT_FIRST_USER_MSG2...AUDIT_LAST_USER_MSG2: ret = parse_user(n, s); @@ -133,6 +134,7 @@ case AUDIT_NETFILTER_PKT: ret = parse_pkt(n, s); break; + case AUDIT_SECCOMP: case AUDIT_FIRST_KERN_ANOM_MSG...AUDIT_LAST_KERN_ANOM_MSG: ret = parse_kernel_anom(n, s); @@ -587,22 +589,28 @@ snode sn; sn.key = NULL; sn.hits = 1; - if (strcmp(path, "(null)")) { - sn.str = strdup(path); + if (strncmp(path, "(null)", 6) == 0) { + sn.str = strdup("(null)"); goto append; } if (!isxdigit(path[0])) return 4; if (path[0] == '0' && path[1] == '0') sn.str = unescape(&path[2]); // Abstract name - else + else { + term = strchr(path, ' '); + if (term == NULL) + return 5; + *term = 0; sn.str = unescape(path); + *term = ' '; + } // Attempt to rebuild path if relative if ((sn.str[0] == '.') && ((sn.str[1] == '.') || (sn.str[1] == '/')) && s->cwd) { char *tmp = malloc(PATH_MAX); if (tmp == NULL) - return 5; + return 6; snprintf(tmp, PATH_MAX, "%s/%s", s->cwd, sn.str); free(sn.str); @@ -1601,6 +1609,15 @@ if (rc) goto err; term += 7; + } else { + str = strstr(term, " name="); + if (str) { + str += 6; + rc = common_path_parser(s, str); + if (rc) + goto err; + term += 7; + } } } if (event_subject) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/audit-2.3.2/swig/audit.py new/audit-2.3.3/swig/audit.py --- old/audit-2.3.2/swig/audit.py 2013-07-29 23:37:24.000000000 +0200 +++ new/audit-2.3.3/swig/audit.py 2014-01-16 12:25:01.000000000 +0100 @@ -1,11 +1,13 @@ # This file was automatically generated by SWIG (http://www.swig.org). -# Version 2.0.10 +# Version 2.0.11 # # Do not make changes to this file unless you know what you are doing--modify # the SWIG interface file instead. + + from sys import version_info if version_info >= (2,6,0): def swig_import_helper(): @@ -564,6 +566,7 @@ AUDIT_FS_RELABEL = _audit.AUDIT_FS_RELABEL AUDIT_USER_MAC_POLICY_LOAD = _audit.AUDIT_USER_MAC_POLICY_LOAD AUDIT_ROLE_MODIFY = _audit.AUDIT_ROLE_MODIFY +AUDIT_USER_MAC_CONFIG_CHANGE = _audit.AUDIT_USER_MAC_CONFIG_CHANGE AUDIT_FIRST_CRYPTO_MSG = _audit.AUDIT_FIRST_CRYPTO_MSG AUDIT_CRYPTO_TEST_USER = _audit.AUDIT_CRYPTO_TEST_USER AUDIT_CRYPTO_PARAM_CHANGE_USER = _audit.AUDIT_CRYPTO_PARAM_CHANGE_USER -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
