audit-2.8.5-4.el7 RPM for x86_64

From CentOS 7.9.2009 for x86_64 / Packages

The audit package contains the user space utilities for
storing and searching the audit records generated by
the audit subsystem in the Linux 2.6 and later kernels.

Provides

• audit
• audit(x86-64)
• config(audit)

Requires

• /bin/bash
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• audit-libs(x86-64) = 2.8.5-4.el7
• chkconfig
• config(audit) = 2.8.5-4.el7
• coreutils
• coreutils
• libaudit.so.1()(64bit)
• libauparse.so.0()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.15)(64bit)
• libc.so.6(GLIBC_2.16)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.7)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libc.so.6(GLIBC_2.9)(64bit)
• libcap-ng.so.0()(64bit)
• libgssapi_krb5.so.2()(64bit)
• libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)
• libkrb5.so.3()(64bit)
• libkrb5.so.3(krb5_3_MIT)(64bit)
• libm.so.6()(64bit)
• libm.so.6(GLIBC_2.2.5)(64bit)
• libnsl.so.1()(64bit)
• libpthread.so.0()(64bit)
• libpthread.so.0(GLIBC_2.2.5)(64bit)
• libpthread.so.0(GLIBC_2.3.2)(64bit)
• librt.so.1()(64bit)
• librt.so.1(GLIBC_2.2.5)(64bit)
• libwrap.so.0()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rtld(GNU_HASH)
• systemd-sysv
• systemd-units
• systemd-units
• systemd-units
• rpmlib(PayloadIsXz) <= 5.2-1

License

GPLv2+

Changelog

* Mon May 06 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-4
  resolves: #1696709 - updating auditd is enabling disabled service
* Sun May 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-3
  resolves: #1705376 - aureport aborts when using a specific input
* Wed Mar 27 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-2
  resolves: #1651761 - Fix memory leak reported upstream
* Tue Mar 05 2019 Steve Grubb <sgrubb@redhat.com> 2.8.5-1
  resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
  resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
  resolves: #1614833 - audispd loops reloading config 
  resolves: #1622194 - audisp-remote memory leak when using krb5 
  resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
  resolves: #1628626 - aureport -a --failed does not display user_avc events 
  resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
  resolves: #1650670 - space left in auditd.conf expressed as a percentage 
  resolves: #1663285 - ausearch device/inode missing when using a single file 
  resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described
* Tue Jul 17 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-4
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
* Wed Jun 27 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-3
  resolves: #1587995 - auditd sometimes in failed state after boot
* Tue Jun 26 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-2
  resolves: #1559032 - Fix a segfault on shutdown
* Wed Jun 20 2018 Steve Grubb <sgrubb@redhat.com> 2.8.4-1
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status
* Tue Dec 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-3
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
* Mon Nov 06 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-2
  resolves: #1508965 - Need to rebuild rpm to remove static relocations
* Thu Oct 12 2017 Steve Grubb <sgrubb@redhat.com> 2.8.1-1
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase
* Mon Sep 18 2017 Steve Grubb <sgrubb@redhat.com> 2.7.8-1
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field
* Mon Jun 12 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-3
  resolves: #1460110 - aureport does not report all anomalies
* Fri May 26 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-2
  resolves: #1455594 - Bad configuration keyword for audispd-remote.conf
* Wed Apr 19 2017 Steve Grubb <sgrubb@redhat.com> 2.7.6-1
  resolves: #1443107 - disk full action and infinite loop in audit-remote
* Mon Apr 10 2017 Steve Grubb <sgrubb@redhat.com> 2.7.5-1
  resolves: #1437187 - audit rpm postinstall script points to non-existing file
  resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
  resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
  resolves: #1438997 - SECCOMP records have wrong syscall
* Tue Mar 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.4-1
  resolves: #1367703 - auvirt wasn't supporting date keywords
  resolves: #1396792 - augenrules includes files ending in regexp "rules"
  resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character
* Tue Feb 28 2017 Steve Grubb <sgrubb@redhat.com> 2.7.3-1
  resolves: #1381601 - audit package update
  resolves: #1382381 - typo in package description
* Fri Jan 20 2017 Steve Grubb <sgrubb@redhat.com> 2.6.5-4
  resolves: #1382397 - write_logs option is not correctly handled
  resolves: #1414812 - Setting log_format to NOLOG make auditd core dump
* Wed Aug 10 2016 Steve Grubb <sgrubb@redhat.com> 2.6.5-3
  resolves: #1296204 - Rebase audit package
* Wed Jan 14 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-5
  resolves: #1180675 - rules with "-F arch=ppc64le" fail to load
* Tue Jan 13 2015 Steve Grubb <sgrubb@redhat.com> 2.4.1-4
  - Remove golang bindings added under the following bz
  resolves: #1115196 - Add golang bindings for libaudit
* Wed Dec 17 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-2
  resolves: #1173160 - Audit package needs update for new VPN crypto events
* Tue Oct 28 2014 Steve Grubb <sgrubb@redhat.com> 2.4.1-1
  resolves: #963353 - aarch64 userspace auditing needs to be written
  resolves: #1150202 - perf trace sleep 1 does not list any syscall information
  resolves: #1142989 - Update audit package to 2.4.1
  resolves: #1155221 - adjust fstatat naming to match kernel uapi
* Thu Sep 18 2014 Steve Grubb <sgrubb@redhat.com> 2.4-1
  resolves: #1115196 - Add golang bindings for libaudit
  resolves: #1105150 - audispd config file parser fails on long input
  resolves: #1104973 - auparse truncating selinux context after first category
  resolves: #1088593 - auditctl man page examples use deprecated syscalls
  resolves: #1087849 - support for setting loginuid immutable
  resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
  resolves: #975796  - confusing aulast records for bad logins
* Tue Mar 18 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-4
  resolves: #1077249 - Audit update, various issues
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2.3.3-3
  - Mass rebuild 2014-01-24
* Mon Jan 20 2014 Steve Grubb <sgrubb@redhat.com> 2.3.3-2
  - New upstream bugfix/enhancement release
  resolves: #1053804 - ausearch issues found by ausearch-test
  resolves: #1030409 - ausearch help typo for "-x" option
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2.3.2-4
  - Mass rebuild 2013-12-27
* Thu Oct 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-3
  resolves: #828495 - semanage port should generate an audit event
* Thu Aug 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-2
  resolves: #991056 - ausearch ignores USER events with -ua option
* Mon Jul 29 2013 Steve Grubb <sgrubb@redhat.com> 2.3.2-1
  - New upstream bugfix/enhancement release
  resolves: #982112 Add delay between stopping and starting auditd
* Wed Jul 10 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-4
  resolves: #982112 Add delay between stopping and starting auditd
* Wed Jul 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-3
  - Remove prelude support
* Fri May 31 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-2
  - Fix unknown lvalue in auditd.service (#969345)
* Thu May 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3.1-1
  - New upstream bugfix/enhancement release
* Fri May 03 2013 Steve Grubb <sgrubb@redhat.com> 2.3-2
  - If no rules exist, copy shipped rules into place
* Tue Apr 30 2013 Steve Grubb <sgrubb@redhat.com> 2.3-1
  - New upstream bugfix release
* Thu Mar 21 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-2
  - Fix clone syscall interpretation
* Tue Mar 19 2013 Steve Grubb <sgrubb@redhat.com> 2.2.3-1
  - New upstream bugfix release
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jan 16 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-4
  - Don't make auditd.service file executable (#896113)
* Fri Jan 11 2013 Steve Grubb <sgrubb@redhat.com> 2.2.2-3
  - Do not own /usr/lib64/audit
* Wed Dec 12 2012 Steve Grubb <sgrubb@redhat.com> 2.2.2-2
  - New upstream release
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.1-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Mar 23 2012 Steve Grubb <sgrubb@redhat.com> 2.2.1-1
  - New upstream release
* Thu Mar 01 2012 Steve Grubb <sgrubb@redhat.com> 2.2-1
  - New upstream release
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.3-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Thu Sep 15 2011 Adam Williamson <awilliam@redhat.com> 2.1.3-4
  - add in some systemd scriptlets that were missed, including one which
    will cause auditd to be enabled on upgrade from pre-systemd builds
* Wed Sep 14 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-3
  - Enable by default (#737060)
* Tue Aug 30 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-2
  - Correct misplaced ifnarch (#734359)
* Mon Aug 15 2011 Steve Grubb <sgrubb@redhat.com> 2.1.3-1
  - New upstream release
* Tue Jul 26 2011 Jóhann B. Guðmundsson <johannbg@gmail.com> - 2.1.2-2
  - Introduce systemd unit file, drop SysV support
* Sat Jun 11 2011 Steve Grubb <sgrubb@redhat.com> 2.1.2-1
  - New upstream release
* Wed Apr 20 2011 Steve Grubb <sgrubb@redhat.com> 2.1.1-1
  - New upstream release
* Tue Mar 29 2011 Steve Grubb <sgrubb@redhat.com> 2.1-1
  - New upstream release
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.6-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Fri Feb 04 2011 Steve Grubb <sgrubb@redhat.com> 2.0.6-1
  - New upstream release
* Thu Jan 20 2011 Karsten Hopp <karsten@redhat.com> 2.0.5-2
  - bump and rebuild as 2.0.5-1 was erroneously linked with python-2.6 on ppc
* Tue Nov 02 2010 Steve Grubb <sgrubb@redhat.com> 2.0.5-1
  - New upstream release
* Wed Jul 21 2010 David Malcolm <dmalcolm@redhat.com> - 2.0.4-4
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
* Tue Feb 16 2010 Adam Jackson <ajax@redhat.com> 2.0.4-3
  - audit-2.0.4-add-needed.patch: Fix FTBFS for --no-add-needed
* Fri Jan 29 2010 Steve Grubb <sgrubb@redhat.com> 2.0.4-2
  - Split out static libs (#556039)
* Tue Dec 08 2009 Steve Grubb <sgrubb@redhat.com> 2.0.4-1
  - New upstream release
* Sat Oct 17 2009 Steve Grubb <sgrubb@redhat.com> 2.0.3-1
  - New upstream release
* Fri Oct 16 2009 Steve Grubb <sgrubb@redhat.com> 2.0.2-1
  - New upstream release
* Mon Sep 28 2009 Steve Grubb <sgrubb@redhat.com> 2.0.1-1
  - New upstream release
* Fri Aug 21 2009 Steve Grubb <sgrubb@redhat.com> 2.0-3
  - New upstream release

Files

/etc/audisp
/etc/audisp/audispd.conf
/etc/audisp/plugins.d
/etc/audisp/plugins.d/af_unix.conf
/etc/audisp/plugins.d/syslog.conf
/etc/audit
/etc/audit/audit-stop.rules
/etc/audit/audit.rules
/etc/audit/auditd.conf
/etc/audit/rules.d
/etc/audit/rules.d/audit.rules
/sbin/audispd
/sbin/auditctl
/sbin/auditd
/sbin/augenrules
/sbin/aureport
/sbin/ausearch
/sbin/autrace
/usr/bin/aulast
/usr/bin/aulastlog
/usr/bin/ausyscall
/usr/bin/auvirt
/usr/lib/systemd/system/auditd.service
/usr/libexec/initscripts/legacy-actions/auditd
/usr/libexec/initscripts/legacy-actions/auditd/condrestart
/usr/libexec/initscripts/legacy-actions/auditd/reload
/usr/libexec/initscripts/legacy-actions/auditd/restart
/usr/libexec/initscripts/legacy-actions/auditd/resume
/usr/libexec/initscripts/legacy-actions/auditd/rotate
/usr/libexec/initscripts/legacy-actions/auditd/state
/usr/libexec/initscripts/legacy-actions/auditd/stop
/usr/share/doc/audit-2.8.5
/usr/share/doc/audit-2.8.5/COPYING
/usr/share/doc/audit-2.8.5/ChangeLog
/usr/share/doc/audit-2.8.5/README
/usr/share/doc/audit-2.8.5/auditd.cron
/usr/share/doc/audit-2.8.5/rules
/usr/share/doc/audit-2.8.5/rules/10-base-config.rules
/usr/share/doc/audit-2.8.5/rules/10-no-audit.rules
/usr/share/doc/audit-2.8.5/rules/11-loginuid.rules
/usr/share/doc/audit-2.8.5/rules/12-cont-fail.rules
/usr/share/doc/audit-2.8.5/rules/12-ignore-error.rules
/usr/share/doc/audit-2.8.5/rules/20-dont-audit.rules
/usr/share/doc/audit-2.8.5/rules/21-no32bit.rules
/usr/share/doc/audit-2.8.5/rules/22-ignore-chrony.rules
/usr/share/doc/audit-2.8.5/rules/23-ignore-filesystems.rules
/usr/share/doc/audit-2.8.5/rules/30-nispom.rules
/usr/share/doc/audit-2.8.5/rules/30-ospp-v42.rules
/usr/share/doc/audit-2.8.5/rules/30-pci-dss-v31.rules
/usr/share/doc/audit-2.8.5/rules/30-stig.rules
/usr/share/doc/audit-2.8.5/rules/31-privileged.rules
/usr/share/doc/audit-2.8.5/rules/32-power-abuse.rules
/usr/share/doc/audit-2.8.5/rules/40-local.rules
/usr/share/doc/audit-2.8.5/rules/41-containers.rules
/usr/share/doc/audit-2.8.5/rules/42-injection.rules
/usr/share/doc/audit-2.8.5/rules/43-module-load.rules
/usr/share/doc/audit-2.8.5/rules/70-einval.rules
/usr/share/doc/audit-2.8.5/rules/71-networking.rules
/usr/share/doc/audit-2.8.5/rules/99-finalize.rules
/usr/share/doc/audit-2.8.5/rules/README-rules
/usr/share/man/man5/audispd.conf.5.gz
/usr/share/man/man5/auditd.conf.5.gz
/usr/share/man/man5/ausearch-expression.5.gz
/usr/share/man/man7/audit.rules.7.gz
/usr/share/man/man8/audispd.8.gz
/usr/share/man/man8/auditctl.8.gz
/usr/share/man/man8/auditd.8.gz
/usr/share/man/man8/augenrules.8.gz
/usr/share/man/man8/aulast.8.gz
/usr/share/man/man8/aulastlog.8.gz
/usr/share/man/man8/aureport.8.gz
/usr/share/man/man8/ausearch.8.gz
/usr/share/man/man8/ausyscall.8.gz
/usr/share/man/man8/autrace.8.gz
/usr/share/man/man8/auvirt.8.gz
/var/log/audit
/var/run/auditd.state

Generated by rpm2html 1.8.1

Fabrice Bellet, Sun Jun 9 13:31:22 2024