commit audit for openSUSE:Factory
Hello community,
here is the log from the commit of package audit for openSUSE:Factory checked in at 2013-12-05 06:48:07
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/audit (Old)
and /work/SRC/openSUSE:Factory/.audit.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "audit"
Changes:
--------
--- /work/SRC/openSUSE:Factory/audit/audit-secondary.changes 2013-10-11 11:03:23.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.audit.new/audit-secondary.changes 2013-12-05 06:48:08.000000000 +0100
@@ -1,0 +2,13 @@
+Tue Nov 26 18:28:58 UTC 2013 - tonyj@suse.com
+
+- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
+ changelog
+- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
+- Add patch 'audit-allow-manual-stop.patch' to reinstate service
+ stop/restart.
+- /etc/sysconfig/audit still existed but was no longer referenced
+ by systemd, so remove
+- Delete audit-no_plugins.patch, it was stale (no longer referenced
+ by specfiles) but had not been removed.
+
+-------------------------------------------------------------------
--- /work/SRC/openSUSE:Factory/audit/audit.changes 2013-06-29 19:36:43.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.audit.new/audit.changes 2013-12-05 06:48:08.000000000 +0100
@@ -1,0 +2,53 @@
+Tue Nov 26 18:26:57 UTC 2013 - tonyj@suse.com
+
+- Update to version 2.3.2
+
+ Changelog 2.3.2
+ - Put RefuseManualStop in the right systemd section (#969345)
+ - Add legacy restart scripts for systemd support
+ - Add more syscall argument interpretations
+ - Add 'unset' keyword for uid & gid values in auditctl
+ - In ausearch, parse obj in IPC records
+ - In ausearch, parse subj in DAEMON_ROTATE records
+ - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
+ - In auditd, restart dispatcher on SIGHUP if it had previously exited
+ - In audispd, exit when no active plugins are detected on reconfigure
+ - In audispd, clear signal mask set by libev so that SIGHUP works again
+ - In audispd, track binary plugins and restart if binary was updated
+ - In audispd, make sure we send signals to the correct process
+ - In auditd, clear signal mask when spawning any child process
+ - In audispd, make builtin plugins respond to SIGHUP
+ - In auparse, interpret mode flags of open syscall if O_CREAT is passed
+ - In audisp-remote, don't make address lookup always a permanent failure
+ - In audisp-remote, remove EOE events more efficiently
+ - In auditd, log the reason when email account is not valid
+ - In audisp-remote, change default remote_ending action to reconnect
+ - Add support for Aarch64 processors
+
+ Changelog 2.3.1
+ - Rearrange auditd setting enabled and pid to avoid a race (#910568)
+ - Interpret the ocomm field from OBJ_PID records
+ - Fix missing 'then' statement in sysvinit script
+ - Switch ausearch to use libauparse for interpretting fields
+ - In libauparse, interpret prctl arg0, sched_setscheduler arg1
+ - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
+ - In libauparse, interpret send* flags argument
+ - In libauparse, interpret level and name options for set/getsockopt
+ - In ausearch/report, don't flush events until last file (Burn Alting)
+ - Don't use systemctl to stop the audit daemon
+
+ Changelog 2.3
+ - The clone(2) man page is really clone(3), fix interpretation of clone syscall
+ - Add systemd support for reload (#901533)
+ - Allow -F msgtype on the user filter
+ - Add legacy support for resuming logging under systemd (#830780)
+ - Add legacy support for rotating logs under systemd (#916611)
+ - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
+ - Updated man pages
+ - Update libev to 4.15
+ - Update syscall tables for 3.9 kernel
+ - Interpret MQ_OPEN events
+ - Add augenrules support (Burn Alting)
+ - Consume less stack sending audit events
+
+-------------------------------------------------------------------
Old:
----
audit-2.2.3.tar.gz
audit-fix-implicit-defn.patch
audit-no_plugins.patch
auditd.sysconfig
New:
----
audit-2.3.2.tar.gz
audit-allow-manual-stop.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ audit-secondary.spec ++++++
--- /var/tmp/diff_new_pack.vNf069/_old 2013-12-05 06:48:09.000000000 +0100
+++ /var/tmp/diff_new_pack.vNf069/_new 2013-12-05 06:48:09.000000000 +0100
@@ -30,17 +30,15 @@
Summary: Secondary packages for audit
License: GPL-2.0+
Group: System/Monitoring
-Version: 2.2.3
+Version: 2.3.2
Release: 0
Url: http://people.redhat.com/sgrubb/audit/
Source0: http://people.redhat.com/sgrubb/audit/%{_name}-%{version}.tar.gz
-Source2: auditd.sysconfig
Patch1: audit-plugins-path.patch
Patch2: audit-no-gss.patch
Patch3: audit-no_m4_dir.patch
-Patch4: audit-fix-implicit-defn.patch
+Patch4: audit-allow-manual-stop.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
-PreReq: %insserv_prereq %fillup_prereq
BuildRequires: audit-devel = %{version}
BuildRequires: autoconf >= 2.12
BuildRequires: gcc-c++
@@ -108,19 +106,17 @@
%{__make} %{?_smp_mflags}
%install
-mkdir -p $RPM_BUILD_ROOT/{sbin,etc/{sysconfig,audispd/plugins.d,init.d}}
+mkdir -p $RPM_BUILD_ROOT/{sbin,etc/{audispd/plugins.d,init.d}}
mkdir -p $RPM_BUILD_ROOT/usr/sbin
mkdir -p $RPM_BUILD_ROOT/%{_mandir}/{man5,man8}
make DESTDIR=$RPM_BUILD_ROOT install
-mkdir -p $RPM_BUILD_ROOT/var/adm/fillup-templates
-cp %{SOURCE2} $RPM_BUILD_ROOT/var/adm/fillup-templates/sysconfig.auditd
mkdir -p $RPM_BUILD_ROOT/var/log/audit/
touch $RPM_BUILD_ROOT/var/log/audit/audit.log
mkdir -p $RPM_BUILD_ROOT/var/spool/audit/
# For ghost below, so that old location files will still be there when
# post copy runs
-touch $RPM_BUILD_ROOT/etc/{auditd.conf,audit.rules}
+touch $RPM_BUILD_ROOT/etc/{auditd.conf,audit.rules} $RPM_BUILD_ROOT/etc/audit/auditd.conf
# On platforms with 32 & 64 bit libs, we need to coordinate the timestamp
touch -r ./audit.spec $RPM_BUILD_ROOT/etc/libaudit.conf
@@ -128,6 +124,9 @@
rm -rf $RPM_BUILD_ROOT/etc/sysconfig/auditd
rm -rf $RPM_BUILD_ROOT/etc/init.d/auditd
rm -rf $RPM_BUILD_ROOT/etc/rc.d/init.d
+# delete redhat systemd legacy scripts, our systemd doesn't support the feature
+# https://lists.fedoraproject.org/pipermail/devel/2012-June/169411.html
+rm -rf $RPM_BUILD_ROOT/usr/lib/audit
# Clean up some unneeded library files
rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/_audit.a
rm -f $RPM_BUILD_ROOT/%{_libdir}/python%{py_ver}/site-packages/_audit.la
@@ -147,7 +146,7 @@
# audisp-remote shouldn't be in /sbin either, it's not 'essential'
mv $RPM_BUILD_ROOT/sbin/{audispd-zos-remote,audisp-remote} $RPM_BUILD_ROOT/usr/sbin
#USR-MERGE
-for prog in auditctl auditd ausearch autrace audispd aureport; do
+for prog in auditctl auditd ausearch autrace audispd aureport augenrules; do
[ \! -f %{buildroot}/sbin/$prog ] || mv %{buildroot}/sbin/$prog %{buildroot}/usr/sbin/$prog
ln -s %{_prefix}/sbin/$prog %{buildroot}/sbin/$prog
done
@@ -159,15 +158,15 @@
make check
%post -n audit
-%{fillup_only -n auditd}
-# Save existing audit files if any (from old location)
+# Save existing audit files if any (from old locations)
if [ -f /etc/auditd.conf ]; then
mv /etc/audit/auditd.conf /etc/audit/auditd.conf.new
mv /etc/auditd.conf /etc/audit/auditd.conf
fi
if [ -f /etc/audit.rules ]; then
- mv /etc/audit/audit.rules /etc/audit/audit.rules.new
mv /etc/audit.rules /etc/audit/audit.rules
+elif [ ! -f /etc/audit/audit.rules ]; then
+ cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules
fi
%service_add_post auditd.service
@@ -197,20 +196,23 @@
%attr(644,root,root) %{_mandir}/man5/audispd.conf.5.gz
%attr(644,root,root) %{_mandir}/man5/ausearch-expression.5.gz
%attr(644,root,root) %{_mandir}/man8/auvirt.8.gz
-%attr(750,root,root) /sbin/auditctl
+%attr(644,root,root) %{_mandir}/man8/augenrules.8.gz
+/sbin/auditctl
%attr(750,root,root) /usr/sbin/auditctl
-%attr(750,root,root) /sbin/auditd
+/sbin/auditd
%attr(750,root,root) /usr/sbin/auditd
-%attr(755,root,root) /sbin/ausearch
+/sbin/ausearch
%attr(755,root,root) /usr/sbin/ausearch
-%attr(750,root,root) /sbin/autrace
+/sbin/autrace
%attr(750,root,root) /usr/sbin/autrace
-%attr(750,root,root) /sbin/audispd
+/sbin/audispd
+%attr(750,root,root) /usr/sbin/augenrules
+/sbin/augenrules
%attr(750,root,root) /usr/sbin/audispd
%attr(755,root,root) /usr/bin/aulast
%attr(755,root,root) /usr/bin/aulastlog
%attr(755,root,root) /usr/bin/ausyscall
-%attr(755,root,root) /sbin/aureport
+/sbin/aureport
%attr(755,root,root) /usr/sbin/aureport
%attr(755,root,root) /usr/bin/auvirt
%dir %attr(750,root,root) /etc/audit
@@ -221,9 +223,9 @@
%ghost /etc/auditd.conf
%ghost /etc/audit.rules
%config(noreplace) %attr(640,root,root) /etc/audit/auditd.conf
-%config(noreplace) %attr(640,root,root) /etc/audit/audit.rules
+%dir %attr(750,root,root) /etc/audit/rules.d
+%config %attr(640,root,root) /etc/audit/rules.d/audit.rules
%config(noreplace) %attr(640,root,root) /etc/audisp/audispd.conf
-/var/adm/fillup-templates/sysconfig.auditd
%dir %attr(700,root,root) /var/log/audit
%ghost %config(noreplace) /var/log/audit/audit.log
%dir %attr(700,root,root) /var/spool/audit
++++++ audit.spec ++++++
--- /var/tmp/diff_new_pack.vNf069/_old 2013-12-05 06:48:09.000000000 +0100
+++ /var/tmp/diff_new_pack.vNf069/_new 2013-12-05 06:48:09.000000000 +0100
@@ -20,13 +20,12 @@
Summary: First part of auditing package
License: GPL-2.0+
Group: System/Monitoring
-Version: 2.2.3
+Version: 2.3.2
Release: 0
Url: http://people.redhat.com/sgrubb/audit/
Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
-Source2: auditd.sysconfig
-Source3: baselibs.conf
-Source4: README-BEFORE-ADDING-PATCHES
+Source1: baselibs.conf
+Source2: README-BEFORE-ADDING-PATCHES
Patch1: audit-no_m4_dir.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: autoconf >= 2.12
++++++ audit-2.2.3.tar.gz -> audit-2.3.2.tar.gz ++++++
++++ 44020 lines of diff (skipped)
++++++ audit-allow-manual-stop.patch ++++++
From: Tony Jones
participants (1)
-
root@hilbert.suse.de